Two connected learning models Explore the linear model at KillChains.com

Deterministic teaching exercises

Resilience scenarios

Remove a relay, reject stale evidence, lose an authority path, or expose a common dependency. Each exercise changes only fictional graph state and teaches why recovery must remain compatible, trusted, and authorized.

Research basis KW-RPT-002 KW-RPT-004 KW-RPT-011

What the scenarios do not measure

They do not estimate lethality, weapon effectiveness, real system performance, real response time, casualties, or operational feasibility. The only outputs are educational path state, evidence quality, authority status, and recovery logic.

Scenario catalog

7 ways a nominal web can contract

Each scenario is deterministic. Opening the same scenario recreates the same disabled nodes and relationships without storing a server-side profile.

01 Orientation

Baseline: several usable pathways

The preferred path is available and at least one alternate exists.

Lesson
A web is valuable only when alternative paths are compatible, trusted, and authorized—not merely drawn on the screen.
Recovery
Compare the highlighted route with the unused alternatives.
Run in Explorer
02 Foundational

Primary relay denied

The preferred low-latency route disappears.

Lesson
Communications diversity matters only when the fallback does not share the same failure domain.
Recovery
Recompose through the alternate relay and observe the changed path.
Run in Explorer
03 Intermediate

Data service marks a track stale

The wide-area and passive paths no longer feed the option composer.

Lesson
Availability without freshness can be misleading; stale evidence should fail visibly rather than flow as current truth.
Recovery
Use the locally processed path and retain an explicit evidence-age warning.
Run in Explorer
04 Intermediate

Authority path unavailable

No approved effect path can complete.

Lesson
Connectivity cannot manufacture permission. A technically feasible route remains unusable when the required authority is absent.
Recovery
Restore the authority node; the exercise intentionally does not invent substitute authority.
Run in Explorer
05 Advanced

Timing integrity fault

Two sensing paths are removed from the trusted graph.

Lesson
Timing and provenance are hidden dependencies. A connected network can produce an incoherent picture if timestamps cannot be trusted.
Recovery
Continue only with a corroborated path or hold for more evidence.
Run in Explorer
06 Advanced

Common service failure

The web contracts to one slower local route.

Lesson
Several visible paths may still depend on the same data or control service. Node count is not the same as independent resilience.
Recovery
Identify the surviving path and the common dependency that caused correlated loss.
Run in Explorer
07 Advanced

Sensor provenance rejected

The network loses breadth but preserves a trusted local path.

Lesson
Integrity attacks can be more dangerous than outages; rejecting an untrusted source is safer than silently using plausible false data.
Recovery
Recompose from independently trusted evidence.
Run in Explorer

Design questions

What to inspect after every failure

QuestionWhy it matters
What failed or became untrustworthy?A node can remain online while its data, timing, identity, or configuration becomes unusable.
Which alternatives are genuinely independent?Two paths that share one gateway, clock, identity provider, or software lineage may fail together.
Did the evidence age or confidence change?A slower fallback may preserve connectivity but no longer satisfy the mission’s freshness requirement.
Did authority move?Technical recomposition cannot silently invent new command permission.
What safe reduced function remains?Graceful degradation may mean continued sensing, warning, or assessment rather than the original action.
Can the decision be reconstructed?Recovery and accountability require the exact path, evidence, policy checks, and human actions.

Answer-ready summary

Direct answers

What do the scenarios measure?

They compare path availability, evidence age, authority, compatibility, and recovery—not lethality or real-world system performance.

Read the supporting page

Can a network remain connected but fail?

Yes. A path may be technically reachable yet unusable because data is stale, incompatible, insufficiently trusted, or not authorized.

Read the supporting page