When no single action constitutes a provocation, the system detects the coordination pattern across domains — because the adversary's strategy of staying below threshold is itself the signal.
Ambiguous activity is detected across multiple domains in a region of interest. No single action constitutes a provocation.
OSINT collection detects a pattern-of-life deviation in maritime traffic — commercial vessels expanding their operating radius incrementally over two weeks. Individually, each position is legal.
Simultaneously, the cyber threat feed flags a low-severity probe against the region's port management system. Economic indicators show unusual futures activity in the energy sector. A diplomatic statement contradicts observed military positioning.
No single signal crosses any threshold. But the platform's cross-domain fusion identifies coordinated anomalies across multiple domains in the same geographic area and time window. The AI flags that the pattern is consistent with coordinated grey-zone activity — and tests whether the information itself may be fabricated.
The commander sees the converging signals on a timeline with contributing sources and confidence levels. The decision log records the assessment for future review regardless of whether action is taken.