The Counterintelligence Bureau

“Our asset in the Rhenian service has been providing their analysts with military readiness information for eleven months. In that time, we have learned what the Rhenians are prioritizing, confirmed three of their current operations, and identified their primary analytical framework for evaluating our capabilities. We have also given them information that is true enough to be credible, false in the specific details that matter, and designed to produce conclusions that serve our interests. The asset does not know they are providing disinformation. This is the operational baseline.”

• Bureau Director Nora Pell, Asset Management Briefing

—

1. Setting Overview and Tone

The Bureau operates in the specific epistemic space where everything is questionable and the only certainty is that every party is attempting to shape what every other party believes. The Bureau’s staff are not cynical about truth; they are extremely precise about distinguishing between what is true, what is believed, and what can be made to appear true in ways that serve national interest.

Tone: Serious intelligence procedural. The drama comes from information rather than action: knowing the right thing at the right time, identifying what the other side knows, and maintaining the specific discipline of counterintelligence work, which requires holding several incompatible realities simultaneously.

Sensory Pillars:

1. Sight: The Bureau’s analysis floor: a large room with dedicated analysts working on specific foreign services, each desk a specialized environment. The physical board where active operations and foreign network maps are maintained: updated daily, classified at the highest level, and the most accurate picture of the regional intelligence environment that exists anywhere. The Director’s office: a small, undecorated room where the most sensitive case discussions happen.
2. Sound: The Bureau’s working environment: quiet and dense with the specific sound of people processing information under sustained pressure. The briefings: presented in careful, precise language because the specific words chosen when discussing intelligence work determine what actions are taken. The telephone that is used for sensitive communications, which uses an encryption system that the Bureau designed and which two analysts rotate to update every six months.
3. Touch and Smell: The source documents: original foreign communications, photographed and developed in-house, with the specific chemical smell of the development process. The case files: maintained in a physical-only format because the Bureau does not trust electronic systems for its most sensitive records, which means the archive is extensive, well-organized, and irreplaceable.

—

2. The Bureau

The Analysis Division is the Bureau’s primary operational component: fourteen analysts assigned to specific foreign services, tracking agent networks, identifying communications patterns, and building the situational intelligence picture that supports both defensive operations and the Bureau’s active deception work.

The Asset Management Unit handles the Bureau’s controlled assets: foreign agents who believe they are successfully operating against the Bureau but who are in fact managed, monitored, and used to feed carefully constructed information to hostile services. Unit Chief Dax has been managing this portfolio for eight years and has developed an instinct for when an asset’s relationship with their handler is becoming unsustainable.

The Deception Planning Group is the Bureau’s most specialized unit: the three analysts who design the specific misinformation packages that controlled assets deliver to hostile services. The Group’s methodology involves detailed knowledge of the hostile service’s analytical framework: what conclusions they are predisposed to reach, what evidence they weight most heavily, and what the Bureau wants them to believe.

The Penetration Investigation Team handles the Bureau’s most sensitive mandate: investigating the possibility that a foreign service has successfully recruited a Bureau employee. This investigation is always active at a low level and escalates when specific indicators suggest a leak. The Team currently has one active escalated investigation.

—

3. Factions

The Bureau is its own faction in the sense that institutional interests sometimes diverge from operational interests. Director Pell manages a staff of forty-seven people who are doing difficult work under sustained pressure, and the institutional dynamics (resource allocation, career pressures, interdepartmental conflicts) affect operations in ways that she manages consciously.

The Rhenian Intelligence Service is the Bureau’s primary target and the most sophisticated foreign service operating in the region. Their current operations include three identified active agents (two managed, one still under assessment), an analytical program focused on the Bureau’s defense ministry contacts, and a technical intelligence collection program that the Bureau is currently assessing. The Rhenians are good. The Bureau respects this.

The Domestic Security Office is a separate organization with overlapping jurisdiction and competing institutional interests. The Security Office handles domestic counterterrorism and has authority that sometimes overlaps with the Bureau’s foreign intelligence mandate. Director Pell and Security Chief Vance have a professional relationship that is cordial and careful, because both organizations have information the other needs and both organizations are cautious about sharing it.

The Defense Ministry Clients are the government officials who receive the Bureau’s intelligence products. They have requests, priorities, and sometimes opinions about operational direction that the Bureau must manage without compromising its operational independence. The Bureau’s value to the government depends on its accuracy, and accuracy requires operational independence from political pressure.

—

4. Unique Mechanic: Feed Quality

Track each managed asset’s Feed Quality from 0 to 6.

Adjusting Feed Quality:

• Successful deception package accepted: +1
• Hostile service validates information provided (confirms it matches other sources): +1
• Asset shows signs of personal stress that affects reliability: -1
• Hostile service identifies misinformation or becomes suspicious: -2
• Asset is placed under hostile service surveillance: -1 per operational period
• Bureau provides accurate critical intelligence (builds credibility): +1 (but also provides real value to hostile service, which has costs)

—

5. Character Archetypes

The Asset Manager

You are Dax. You manage four assets. Two are fully operational and producing excellent insight. One is declining: the handler-service relationship is strained in a way that you cannot identify the cause of, which either means the asset is experiencing personal problems or the Rhenian service is running a counter-operation. One was recruited six months ago and is still in the assessment phase. You have a briefing with Director Pell this afternoon where you will present your case that the declining asset needs to be terminated before they become a liability, which requires approval because termination means cutting off a source of Rhenian insight that the Deception Planning Group has built three operations around.

• Drive: “Get approval for the termination before the declining asset’s instability becomes detectable to the Rhenian service, and identify what is causing the instability before terminating to ensure it doesn’t indicate a broader problem.”
• Approach Distribution: Force 1 | Finesse 3 | Mind 3 | Presence 1

The Deception Analyst

You design the misinformation packages. You know more about the Rhenian analytical framework than most Rhenian analysts do. You have designed packages that produced specific conclusions in Rhenian policy documents that you have subsequently seen, which is the closest thing to professional satisfaction this work produces. You are currently working on a package that is the most ambitious the Bureau has attempted: a coordinated false picture of the Bureau’s defensive capabilities that, if accepted, will produce Rhenian strategic assumptions that benefit the nation’s negotiating position for the next five years. The package requires three coordinated asset deliveries, perfect timing, and a level of internal Rhenian consistency that requires you to understand their inter-service communications well enough to predict what each part of their service will say to the others about what they received.

• Drive: “Design and execute the coordinated deception package with enough precision that the Rhenian service integrates all three elements into a consistent false picture, rather than identifying the inconsistencies between them.”
• Approach Distribution: Force 1 | Finesse 2 | Mind 4 | Presence 1

The Penetration Investigator

You are Bren. You investigate internal leaks. You have three active indicators that suggest the Bureau may have a penetration: three operations have been compromised in the past eighteen months in ways that are each individually explicable but collectively suggest something systematic. You are running the investigation using standard methodology while managing the specific psychological challenge of this work: you work with the people you are investigating, you cannot tell them you are investigating, and you have to be wrong in order for the Bureau to be safe. You are currently focusing on a specific access pattern that narrows the potential leak to twelve people. You are not ready to take this to Director Pell yet because narrowing it further requires one more piece of evidence that you are close to having.

• Drive: “Obtain the final piece of evidence that either confirms or clears the primary suspect, before one of the current active operations produces a compromise that would have been preventable if you had moved faster.”
• Approach Distribution: Force 1 | Finesse 3 | Mind 3 | Presence 1

—

6. Starter Scenario and Why It Matters

The Double Question: Asset Manager Dax’s declining asset has, in their most recent contact, provided information that appears to be accurate, detailed, and highly valuable. The problem is that the information is more accurate and more detailed than the asset should have access to, which means either the asset has developed a new source within the Rhenian service, or the Rhenian service has identified the asset as a Bureau-controlled channel and is now using them to feed the Bureau false information of their own. The second possibility means the Bureau’s recent insight is compromised and the deception operations built on it are potentially at risk. Penetration Investigator Bren has noted that the new information aligns with the access pattern in her internal investigation. The characters must determine whether the asset has been turned without alerting anyone who might be the internal leak, before the Deception Planning Group integrates the new information into the coordinated package that is scheduled to begin next week.

Why It Matters: The Counterintelligence Bureau is about the epistemological challenge of intelligence work: in an environment where everyone is managing information, certainty is impossible and action must be taken anyway. The setting explores the specific discipline required to operate in a world where the ground truth is always in question, and the institutional and personal costs of that discipline sustained over time.