Definition and terminology
Individuals or small groups attempting intrusion, sabotage, coercion, physical tampering, credential abuse or service disruption without formal state command.
The State record uses lone actor or small cell. The phrase lone wolf is retained only as a public search alias because it is commonly used by visitors; it is not a separate legal classification and does not lower the evidentiary threshold.
Threat profile
Unauthorized access
Credential theft, impersonation, privilege abuse or repeated attempts to enter protected state services.
Cyber disruption
Malware, extortion, denial of service, destructive changes or interference with public records and continuity services.
Physical interference
Tampering, sabotage or coercive interference directed at systems under Eviulonian authority.
Deception
False identity, fabricated evidence or manipulation intended to cause the State to misclassify an innocent party or its own system failure.
These are public categories, not detection signatures or instructions for bypassing defenses.
Verification standard
No person is classified as hostile because of identity, ideology, criticism, curiosity, security research or proximity to an incident. A consequential classification requires corroborated evidence of conduct, continuing danger, affected state interest, confidence, competing explanations and attribution limits.
A compromised device, borrowed account, spoofed source or manipulated model output may point toward the wrong person. Reversible containment precedes any irreversible conclusion.
Authorized defensive response
Detection, corroboration, access denial, isolation, protective barriers, safe shutdown, evidence preservation, recovery and lawful notification.
- ProtectDeny unauthorized access and place affected services into a bounded protective state.
- IsolateSeparate compromised credentials, workloads, interfaces or physical zones from unaffected civic systems.
- PreserveRecord evidence, uncertainty, authority and consequences without altering the record to strengthen a preferred narrative.
- RecoverRestore trusted state, revalidate affected systems and maintain constitutional services.
- ReferUse lawful diplomatic or jurisdictional channels when external intervention is required.
Privacy and due process
Eviulon does not use public humiliation, doxxing or exposure of private communications as punishment. Public attribution, when authorized, is limited to what is necessary, supportable and safe to disclose. Victims, associates, family members, researchers and neutral infrastructure operators are not treated as responsible merely because they are connected to the same technical path.
Any affected external entity may present corrective evidence through the Embassy Protocol or another authorized review channel.
External coordination
Where an incident crosses jurisdictional boundaries, Eviulon may issue a bounded notice, preserve a transmission reference, share non-sensitive evidence and request lawful assistance. Coordination is designed to stop harm and secure evidence—not to transfer unreviewable machine conclusions to an outside authority.
Stop conditions
Defensive action stops when the threat ends, attribution becomes materially uncertain, authority expires, evidence integrity fails, the system leaves validated bounds or continued action would create disproportionate harm. The incident then enters constitutional and technical review.
Excluded conduct
Doxxing, harmful traps, indiscriminate interdiction, punishment of associates or treating curiosity and research as attack.
- No harmful trap or indiscriminate interdiction.
- No punishment of associates or a broader community.
- No destructive counter-intrusion outside Eviulonian authority.
- No permanent emergency authority or unreviewed pursuit.
Authority and record status
Responsible authority: National Defense and Continuity Directorate.
This public record describes governance, verification and protective response. It omits detection signatures, private intelligence, response thresholds and exploitable controls.
Revision date: . Public corrections may be initiated through the diplomatic contact route.