Aegean Intelligence Group
THE OPERATING STANDARD / AEGEAN-OSAEIG-WEB-METH-v3.0 · PUBLIC RELEASE · 2026
THE OPERATING STANDARD · AEGEAN-OS · v1.3

This is how every Aegean brief is built.

Aegean Intelligence Group operates to a structured analytical framework adapted from intelligence-community tradecraft and refined for commercial decision support. Every brief is audited against this framework before release. This page documents the discipline.

Most commercial intelligence fails one of two ways. It is either confident-sounding prose that hides the seam between what is sourced and what is inferred, or it is a wall of citations with no analytic judgment. Both are unusable for the people who actually have to decide.

The framework on this page was built to solve that problem. It is adapted, with attribution, from a long literature on structured analytic technique that the US intelligence community published openly across two decades. We applied it to the specific demands of commercial decision support: time horizons measured in weeks not years, audiences who are accountable to a P&L, and a standard of evidence that survives a board meeting.

Three content types. Four source tiers. Three confidence levels. Four velocity classes. An explicit anti-fabrication perimeter. A seventeen-module collection model. Audited before every release.

This page is the public reference. The internal operating standard runs longer, with examples drawn from live engagements that cannot be published. What follows is the architecture, the constraints, and the worked examples that make the architecture concrete.

17
Collection modules
3
Content types
4
Source tiers
4
Velocity classes
620+
Approved sources
CHAPTER 01 · CONTENT TYPE DISCIPLINE
01

Content type discipline.

Every sentence in every Aegean brief is classifiable as exactly one of three types. The types carry different evidentiary standards and serve different purposes for the reader. We do not blend them into a confident-sounding paragraph that hides the seam between evidence and inference. The reader can always tell which is which.

TYPE 01

FACT

A sourced, attributed claim about what a source reports. The reader can verify it independently. Facts are what sources report, not necessarily objective truth: contradictory facts can coexist and are both citable.

Required: citation with publisher, title, date, and URL where available. Tier of source declared.
TYPE 02

ASSESSMENT

An analytic judgment derived from facts. Assessments carry the firm's view of what the facts mean, what is likely to happen next, or how exposures connect. They are explicitly labeled as such, never disguised as fact.

Required: confidence tag (HIGH / MODERATE / LOW), one-line rationale, traceable link to supporting facts.
TYPE 03

RECOMMENDATION

A governance-level action the firm recommends a client take. Recommendations are tied to at least one FACT and at least one ASSESSMENT. They are scoped to policy, not tactics, and they name an owner and a time horizon.

Required: owner role, time horizon, dependencies, trigger condition where applicable.
Worked example · The three types in sequence
[FACT]  On May 27, 2026, the US Treasury added the Persian Gulf Strait Authority to the OFAC Specially Designated Nationals List under Executive Order 13224, citing IRGC linkage. [gCaptain, 2026-05-28]
[ASSESSMENT]  We assess that the PGSA is structurally durable inside the Iranian regime but functionally unenforceable on Western and sanctions-touched fleets. [HIGH]  Legal architecture and SDN designation both documented; bifurcation is a logical consequence of the sanctions perimeter and named transits already reported.
[RECOMMENDATION]  Corporate counsel should issue a written non-payment standing order for the PGSA toll, with escalation to the General Counsel before any payment is made by any subsidiary. Owner: GC. Horizon: immediate (effective on issuance). Dependency: confirmation that all transit decisions route through covered insurance per the Lloyd's-market channel.
CHAPTER 02 · SOURCE TIER DISCIPLINE
02

Source tier discipline.

Every cited source carries a tier. Tier 1 government primaries are weighted highest; lower tiers are accepted with declared corroboration. State media is a claim source only and never counts toward verification. The allowlist is the curated source registry the firm maintains: 620+ entries across the four tiers, reviewed quarterly.

T1

Government & Regulatory

Primary documents from government agencies, regulators, courts, and official registries. The highest evidentiary weight. Required for high-impact claims about regulation, sanctions, and official policy.

EXAMPLESOFAC actions · SEC filings · central-bank publications · court filings · agency press releases
T2

Institutional

Established think tanks, multilateral institutions, specialist trade press, and academic publications with declared methodology. Independent analytical authority; second-highest weight.

EXAMPLESCSIS · ICG · IISS · Chatham House · Lloyd's List · Howden Re · peer-reviewed journals
T3

Reputable Media

Major news organizations with editorial controls and named sourcing. Acceptable for current reporting; cross-corroborated for high-impact claims.

EXAMPLESReuters · AP · FT · WSJ · Bloomberg · Economist · major bureaus with named reporters
T4

Structured Data

Quantitative datasets from authoritative providers: sanctions and ownership registries, maritime and aviation tracking, market and commodity data, conflict event databases, ratings agencies.

EXAMPLESUN Comtrade · ACLED · Kpler · Vortexa · Moody's · S&P · MSCI · OFAC sanctions list
Excluded by policy
RESTRICTED: Wikipedia, Reddit, anonymous blogs, content farms, and AI-generated commentary are not load-bearing sources. State propaganda (Iranian state media, RT, Xinhua editorials) is accepted as a claim source only, labeled as such, and never counts toward corroboration. A claim source can document what a government is saying; it cannot verify whether the underlying claim is true.
CHAPTER 03 · CONFIDENCE CALIBRATION
03

Confidence calibration.

Every assessment carries an explicit confidence level and a one-line rationale. We surface what we don't know as plainly as what we do. Confidence is a function of source quality, corroboration depth, timeliness, and the plausibility of competing interpretations.

C01

HIGH

Multiple independent credible sources. Within the current temporal window for the data type. No significant gaps. Alternative interpretations are demonstrably less plausible than the assessment offered.

Rationale addresses: source quality, corroboration depth, timeliness.
C02

MODERATE

At least one credible source. Partial corroboration. Minor timeliness gaps acceptable. Alternative interpretations are plausible but less supported than the assessment offered.

Rationale addresses: source posture, corroboration gaps, competing reads.
C03

LOW

Limited sourcing or significant gaps. Material unknowns affect the assessment. Alternative interpretations are roughly as plausible as the assessment offered. Always generates an entry in the brief's Collection Plan.

Rationale addresses: gaps, what would resolve them, collection priority.
CHAPTER 04 · RISK VELOCITY
04

Risk velocity classification.

Every risk pathway and scenario driver in an Aegean brief is tagged with a velocity class. The same event can have IMMEDIATE consequences on one axis and STRUCTURAL consequences on another; the velocity tag makes the different planning horizons explicit so they reach the right decision owner with the right clock.

V01

IMMEDIATE

Hours to days

Sanctions actions, kinetic attacks, natural disasters, sudden regulatory designations. Triggers pre-authorized decisions and incident protocols.

V02

RAPID

Days to weeks

Insurance repricing, market shocks, enforcement escalation, election fallout. Triggers enhanced monitoring and contingency activation.

V03

GRADUAL

Weeks to months

Regulatory trajectory, political transitions, supply chain restructuring, capital reallocation. Drives quarterly planning cycles.

V04

STRUCTURAL

Months to years

Resource nationalism, demographic shifts, infrastructure degradation, institutional capture. Shapes multi-year capital allocation.

CHAPTER 05 · THE ANTI-FABRICATION PERIMETER
05

The anti-fabrication perimeter.

The most critical rule set in the operating standard. Aegean briefs do not invent, assume, estimate, or imply categories of information unless explicitly supported by a cited source. When the firm does not know, the brief says so, explains why, and adds the item to a Collection Plan. The gap is itself decision-relevant intelligence.

N01 · Network
Routes & corridors

Specific transport pathways, shipping routes, supply-chain segments. Never inferred from generic geography or industry default assumptions.

N02 · Network
Customers & counterparties

Commercial relationships, named customers, contract counterparties. Disclosed in filings or filed in registries, or surfaced as UNKNOWN.

N03 · Network
Ownership & beneficial control

Subsidiary structures, beneficial ownership, parent and shell relationships. Sourced to registry filings or company disclosures, never inferred from name similarity or jurisdiction.

N04 · Flows
Money flows & payment directions

Transfer pricing, payment routing, fund flows between entities. Documented by filings, court records, or sanctions actions, never inferred from inter-company structure.

N05 · Quantitative
Production, reserves, financial metrics

Volumes, costs, reserves, capacity, profit margins, balance-sheet figures. Sourced to filings, reports, or structured-data providers, never extrapolated from industry benchmarks.

N06 · Quantitative
Timelines & schedules

Project schedules, regulatory deadlines, commissioning dates. Sourced to filings or official statements, never assumed from industry norms.

N07 · Causal
Causal chains

Sourced causation, never correlation. Two things happening in proximity is not evidence one caused the other. The brief states what is observed and labels causal claims as assessments with rationale.

N08 · Causal
Threat-actor intent & capability

Targeting, intentions, capability projections. Sourced to government attributions or threat-intelligence primary releases, never inferred from prior pattern or rhetoric.

N09 · Regulatory
Regulatory outcomes & penalties

Pending agency decisions, penalty amounts, settlement terms, legal judgments. Sourced to official actions or filed records, never predicted as fact.

N10 · Posture
Insurance & risk-transfer detail

Coverage scope, policy limits, deductibles, exclusions, reinsurance structure. Sourced to disclosures or carrier circulars, never inferred from broker norms.

N11 · Posture
ESG commitments & performance

Targets, performance against targets, verification status. Sourced to company disclosures (as claims) or third-party audits. Self-reported claims are facts about the claim, not facts about performance.

N12 · Posture
Compliance program effectiveness

Operational effectiveness of internal controls, sanctions screening, AML programs. Sourced to enforcement records or audit findings, never inferred from program existence.

When any of these are not in evidence, the brief says UNKNOWN, explains why, and adds the item to the Collection Plan with a priority class. The gap is valuable. We do not fill it with plausible content. This rule is the single largest difference between an Aegean brief and most commercial intelligence in market.
CHAPTER 06 · THE COLLECTION MODEL
06

The seventeen-module collection model.

The cluster structure makes the architecture readable at a glance. Foundation governs source policy and analytical discipline at all times. Entity baseline establishes who the subject is. Domain exposure maps how that entity touches the world. Risk integration ties the exposures to outcomes. Consolidation and deliverables package the work for the audience. Commercial covers pipeline development. Each module within the standard documents inputs, outputs, scope boundary, sector adaptations, and hard constraints. Sector adaptation is built in: a module like Assets & Operations adapts metric vocabulary across extractive, manufacturing, technology, logistics, and financial subjects without changing its question architecture.

FoundationM1 TO M2 · ALWAYS ACTIVE
M1
Core operating rules
Identity, output modes, non-negotiable analytic rules, LLM-specific controls.
M2
Source policy & allowlist
Tier discipline, temporal decay, geographic calibration, corroboration rules.
Entity BaselineM3 TO M5
M3
Client profile & MVCP
Identity snapshot, business model, footprint, governance, declared risk posture.
M4
Assets & operations
Asset register, capacity, reserves, dependencies, choke points, concentration.
M5
Financials
Income drivers, margin architecture, cash flow, balance sheet, counterparty exposure.
Domain ExposureM6 TO M8
M6
Logistics & supply chain
Inbound, outbound, supplier visibility, chokepoint exposure, cascade risk.
M7
Regulatory, legal & ESG
Permitting, sanctions, anti-corruption, litigation, ESG posture, stakeholder map.
M8
Travel risk
Destination baseline, health, legal, consular, personnel threat pathways, posture tiers.
Risk IntegrationM9 · INTEGRATION POINT
M9
Risk lens & early warning indicators
Operating environment synthesis, risk pathways, priority matrix, 20-30 EWIs.
ConsolidationM10 TO M12
M10
Structured fact repository
Master fact table, contradiction log, hypothesis resolution, source utilization.
M11
Scenario analysis
Baseline, deterioration, stabilization across two horizons; pre-authorized decisions.
M12
Intelligence gaps & collection plan
Gap extraction, priority register, kickoff interview script, OSINT workplan.
DeliverablesM13 TO M16
M13
Intelligence assessment
Compressed decision-grade evaluation; the universal entry-product deliverable.
M14
Briefing memos
Findings, projections, actions; three variants by audience and decision posture.
M15
Publishable market research
External editorial intelligence; the publication model behind the briefs on this site.
M16
Monitoring & retainer products
EWI dashboards, scenario status, gap tracking, transition alerts, event flash briefs.
CommercialM17 · PIPELINE ONLY
M17
Client prospecting & proposals
Pipeline development; not client-facing intelligence. Feeds M13 on conversion.
CHAPTER 07 · HERITAGE & INFLUENCES
07

Heritage and influences.

AEGEAN-OS is an adaptation, not an invention. The framework draws on structured analytic technique developed and published openly by the US intelligence community across more than two decades, then refined for the cadence and stakes of commercial decision support. The two traditions answer different questions. The IC literature was written to defuse cognitive bias inside national-security analysis on multi-year horizons; commercial briefs run on weeks, must reach a P&L-accountable audience, and must survive scrutiny from a board of directors. The methodology on this page is the bridge.

What we adapted

From the IC tradecraft literature: the discipline of separating evidence from inference, the practice of explicit confidence calibration, the use of structured techniques to surface alternative interpretations, the recognition that intelligence gaps are themselves intelligence.

From commercial decision support: time horizons that match buying cycles, audience-specific deliverables, governance-level recommendations, an emphasis on pre-authorized decisions tied to monitored thresholds.

What we built ourselves

The seventeen-module collection model, the four-tier source allowlist with 620+ entries, the sector-adaptation layer that lets the same module apply across extractive, financial, technology, logistics, and manufacturing subjects, the anti-fabrication perimeter with its explicit category list, and the rendering pipeline that audits each output against the standard before release.

The result is a framework that an operator can read and an analyst can execute, with the discipline visible to both.

Public-domain references the curious reader can pursue: Richards J. Heuer Jr., Psychology of Intelligence Analysis (CIA Center for the Study of Intelligence, 1999); ODNI/CIA, A Tradecraft Primer: Structured Analytic Techniques for Improving Intelligence Analysis (2009); Heuer & Pherson, Structured Analytic Techniques for Intelligence Analysis (multiple editions); the open-source-intelligence literature published by RAND, CSIS, and the IISS. The application of these techniques to commercial intelligence is original to Aegean Intelligence Group.
CHAPTER 08 · THE FORWARD-CLAIM STANDARD
08

The forward-claim standard.

A forward claim is a dated, probability-weighted statement about a resolvable outcome, locked when the brief is published and never edited. Every brief on the register carries the forward claims it makes; the Scorecard keeps the running record. This chapter is the law that governs what qualifies, how a claim is worded, how it resolves, and when it is void.

What qualifies

A statement in a brief becomes a locked claim only when it passes all three tests. First, the brief states a probability for the outcome, or attaches a confidence band to the judgment that carries it. Second, the outcome is checkable from public sources: a filing, a published series, a dated official record, or reporting that meets the source tier policy in Chapter 02. Third, the resolution window is stated in the brief or is unambiguous from it. A statement that fails any test is kept on file as a proposed claim, is never shown publicly, and is never scored.

Band on the judgmentProbability enteredRule
Stated percentageas statedWhere the brief gives a number, the number is the claim's probability. A stated range enters at its midpoint.
HIGH0.85Multiple independent sources; alternative readings demonstrably less plausible than the judgment.
MODERATE0.65Partial corroboration; alternative readings plausible but less supported than the judgment.
LOW0.55Material unknowns; alternative readings roughly as plausible as the judgment.

The numeric mapping was fixed on 8 September 2026 when the standard was first applied to the register. The three values are the band defaults the firm's calibration engine has run on since June 2026 (0.85, 0.65, 0.55), so a claim on this site is scored at the same prior the firm's internal record uses. It is a scoring convention for the bands as Chapter 03 defines them, not a claim about what the bands have held; the private calibration record on the Scorecard shows that separately. The mapping applies only to the confidence a brief attaches to an assessment or a key judgment. The construction confidence a brief attaches to a scenario describes the quality of the scenario's build, not the likelihood of its outcome, and is never converted to a probability.

Wording rules

  1. A claim is entered in the brief's own words, lightly trimmed. Trimming removes lead-ins and citation markers and never changes the object, the direction, the quantity, or the window.
  2. A claim names one outcome. A sentence carrying two expectations is entered as two claims or not at all.
  3. A claim carries the brief's publication date as its made-on date and the date it entered the ledger as its locked-on date, so a retrospective entry is never presented as contemporaneous registration. A revised brief keeps the original date unless the claim first appeared in the revision.
  4. Every public claim carries a record class and a claim family. BRIER-native claims are locked no later than publication and alone enter the headline score. Legacy prospective entries and legacy retrospective entries remain visible but score separately. Related claims share a family so raw claim count is never represented as independent sample size.
  5. Locked fields, the statement, the probability, the made-on date and the window, are never edited. A mistake is corrected by voiding the claim with a note and, where the brief supports it, entering a new one.

Resolution rules

  1. A claim resolves only against a dated public source, recorded with the claim as a link and one line saying what the source shows.
  2. Resolution on inference is forbidden. If the only route to an outcome is reasoning from adjacent facts, the claim stays open.
  3. A claim whose window has passed without a public source stays open and is shown as open. It adds nothing to the score.
  4. Where the outcome is contested between sources of equal standing, the claim stays open until the record settles.

The void condition

A claim is void when it proves unresolvable as worded: the measure it names is not published, the object it names has ceased to exist or changed beyond recognition, or the wording admits both outcomes. A void claim carries a note saying why, is excluded from the score, and is counted separately so the reader can see how often the firm wrote a claim that could not be tested.

CHAPTER 09 · THE SCORING RULE
09

The scoring rule.

The headline public score is the Brier score over resolved BRIER-native probability claims only.

For each eligible resolved claim, take the square of the difference between the probability the firm assigned and the outcome, one when the claim came true and zero when it did not, and average across all eligible resolved claims. Lower is better. A record that assigns one half to everything scores 0.25; a perfect record scores zero. Open claims add nothing until they resolve. Void claims are excluded and counted separately. Legacy claims remain public but are never blended into the headline score. The score is recomputed whenever an eligible claim resolves and is published with its count and the date of the last eligible resolution. The reliability diagram plots the same BRIER-native claims in decile bins, unsmoothed. The firm's internal calibration benchmark and its public legacy tracks are shown separately and are never combined with the headline.

Every generated ledger version is copied to a content-addressed snapshot and published with a SHA-256 fingerprint, claim-level locked-field fingerprints, selection counts and dependency families in BRIER Record integrity.

CHAPTER 10 · THE CORRECTION RECORD
10

The correction record.

Every correction to published or gated work is recorded here with its date, what was wrong, and what changed. A correction found before publication is recorded all the same, because the discipline that caught it is part of the record.

2026-08-03 · AIG-MUN-26-001 · THE SEPTEMBER LETTER · REVISION V3

Key Judgment 3 rested on a single news source and stated the payment rule wrongly.

What was wrong. In five places the brief asserted that the payment posture on a Davidson County property tax appeal changes when the appeal escalates from the Metropolitan Board of Equalization to the State Board: that an owner may pay the portion it believes fair locally, and that at the state level the taxes under the previous appraisal become payable once a hearing is scheduled. The assertion was carried at HIGH confidence and rested on one television news segment. Primary authority contradicts it: Tennessee Code Annotated 67-5-1512(b) names the county and state boards in a single sentence and imposes a single condition at both, that the undisputed portion or the full tax is paid before the delinquency date, with penalty and interest suspended while the appeal is pending.

What changed. The five passages were replaced with the statutory rule, sourced to the operative text and the State Board's own rule, and the brief was reissued as revision 3 on 3 August 2026, before the publication gate opened and before any distribution. The defect was raised by the firm's own red-team pass: a procedural rule carrying a lone news citation beside a neighbouring rule carrying three administering-body citations. Every derivative keyed to the brief was corrected in the same pass.

2026-08-06 · AIG-DEF-26-005 · THE LAST MOVE IS NOT YOURS · UNPUBLISHED

Nine correction items applied to a brief withdrawn before publication.

What was wrong. A principal review returned eight items against the counter-UAS commercial brief before it published. Among them: a key judgment stated at HIGH confidence and contradicted by its own body; a section assessment on acoustic detection without its physical basis; two insurance assertions the sources did not carry; a certification described as a duty when it is an eligibility; a "two months" interval that the source registry settles at 48 days; and a $74 million figure not identified as a military detect-and-defeat installation. A separate disposition memo had recorded that a statute carried no civil penalty provision; the provision exists at 6 U.S.C. 124n-1(f).

What changed. All nine items were closed on 6 August 2026 in the renderer source, with three recorded departures from the approved package text where the record showed better evidence: the introduced texts of both bills had in fact been retrieved and both had been referred to committee; the interval reads seven weeks, not two months; and the narrowed judgment names and distinguishes the apparent counterexample in its own body. The brief remains unpublished and gated; an independent adversarial read of the corrected version returned further pre-existing findings that are on file for a fresh red-team cycle and are not reported as closed. The wrapped-citation rendering defect found in the same pass was fixed firm-wide and is enforced by a post-render gate on every PDF.

CHAPTER 11 · STANDARDS FOR OBJECTS
11

Standards for objects.

The Intelligence Portal registers five kinds of object: a report, a claim, a series, a dataset and a desk. Each has exactly one page and exactly one stable identifier, and every page is built to the rules in this chapter. The rules exist so that consistency across the Portal is a published law rather than a design habit, and so that a reader who has learned to read one object can read all of them.

The header band

Every object page opens with the same band, in this order: the object's type; its identifier; the desk it belongs to, or "all desks" where it is filed to the firm as a whole; the date it was created; the date it was last updated; its source and the source's tier, where a source applies; and the standard it was built to, which is this page. The band carries the source and tier on a series, on a dataset, and on a claim once a public source has settled it. Where a slot does not apply it is omitted, never left blank. The dates are the dates the source file records, not the dates a page was generated.

Connected objects

Every object page ends with a block that lists the objects connected to it, by type. A report lists its claims, its desk, and any series a claim resolves against. A claim lists its report, its desk, its series where one is named, and the ledger package. A series lists its dataset, its desk, the claims that reference it, and the Dashboard tab it appears on. A dataset lists its series and the desks they belong to. A desk lists its reports, its claims by status, its series and its datasets. A relation is stored once, in the registry, and rendered in both directions, so that no link can exist on one page and not on the other.

The rules

  1. An empty list states what it is waiting for. A desk with no locked claim says so and names the next publication; a series no claim resolves against says so; a package not yet published says how many days of history exist against the seven it needs. No list on the Portal is ever a blank.
  2. A chart is followed by its data. Every generated chart is an inline image with a title and a description that state the series, the last value and the direction of change, and it is followed by a table of the last thirty observations, so that no information on the Portal exists only inside a graphic.
  3. Every figure on a page is read from a file the collectors or the record tooling wrote. No number on the Portal is invented, illustrative or seeded. A panel whose feed is down says so and shows its last good time.
  4. Nothing retired is searchable. A page that has been retired behind a redirect keeps its file on disk and is excluded from the search index, the sitemap and the registry, so that nothing the firm has withdrawn can be found by search.
  5. Generated regions are marked and idempotent. Every block a generator writes sits between named markers; hand-written copy sits outside them and is never overwritten; running any generator twice produces the same page.
  6. The ledger is edited in one place. A claim page presents the ledger; it never carries a second copy of it and never computes a score of its own. The same rule binds the BRIER portal's instrument panel, which draws its diagram with the routine the Scorecard uses.
THE STANDARD, APPLIED

What this means for you.

If you have ever read a thirty-page intelligence report and finished it without being able to answer a question your board would ask, the difference between that report and an Aegean brief is the methodology on this page. The discipline is the product. The briefs are the output.

Every brief on the register is published to this standard. Every custom engagement is built on the same foundation. If you want it applied to a decision you are facing, the founders are on the Advisory page.

The founders, and how to reach them →