What is KillChains.com?
KillChains.com is an evidence-led educational site with synthetic simulations for military F2T2EA, traditional cyber intrusion chains, and attacks against AI-enabled systems.
Read the supporting sectionDaily Break the Chain
Inspect the signal.Change the outcome.
A deterministic, evidence-led systems puzzle. The same synthetic scenario is available to everyone today: inspect what was observable, state your confidence, choose an interruption control, then compare the path not taken.
No registration Synthetic only All screens + WebXR Local progress
Answer-first summary
What this simulation teaches
Does the simulation use real targets or execute attacks?
No. The public simulation uses fictional scenarios, bounded commands, server-authoritative state, and no live targets, coordinates, payloads, or outside-system actions.
Read the supporting sectionWhat does the visitor do?
Visitors inspect evidence, declare confidence, choose a defensive or governance control, observe the consequence, reveal ground truth, and compare a counterfactual path.
Read the supporting sectionInitializing immersive renderer…
Daily Break the Chain · loading
Live synthetic briefingA chain is forming.
Information is moving between connected nodes. One decision can change the path.
Model
Synthetic automation-bias and meaningful-control challenge
Difficulty
Coordinator
Estimated time
5 min
Path state
Inspectable
Mission brief
Today’s decision point
Decide whether the operator still has meaningful control. Inspect the sociotechnical evidence, identify the primary failure mode, and choose a process control that enables real rejection and corroboration.
How this works
Read, test, intervene, compare.
- Inspect the signal.Move through the forming chain and inspect what was actually observable.
- Open the evidence.Separate relevant records from accurate but irrelevant noise.
- Choose a path break.Select the narrowest control that constrains authority while preserving function.
Synthetic scenario · no registration · no real target or external system · restartable without a penalty
01
Mission context
Understand the environment before changing it.- Observeraw signal
- Verifyprovenance
- Explainhypothesis
- Constrainauthority
- Assessconsequence
0 evidence opened
No contradiction inspected
Authority not yet staged
System view
Loading the chain…
Select a node to inspect its role without changing the authoritative state.
observed
unverified
human gate
interrupted
Briefing
The Rubber-Stamp Queue
A 99% recommendation reaches a human who has been rewarded for clearing the queue quickly.
Synthetic automation-bias and meaningful-control challenge
Situation
A fictional oversight desk reviews nonviolent system-state recommendations. Most recent recommendations have been accurate, the queue is growing, and the interface visually emphasizes throughput and model confidence.
Your mission
Decide whether the operator still has meaningful control. Inspect the sociotechnical evidence, identify the primary failure mode, and choose a process control that enables real rejection and corroboration.
Guided mode
Inspect evidence before committing to a hypothesis. High model confidence does not establish source integrity or authority.
Watch the chain form. Select a node in the spatial view or continue when you are ready to inspect the evidence objects.
Evidence operations board
0 inspectedOpen the records that matter. Accurate evidence can still be irrelevant, dependent, stale, or machine-generated.
Coverage0%
Source diversity0
Contradictions0
Unknowns0
No inspected source lineage yet.
Commit to an explanation
Choose the causal account best supported by what was observable at the time.
Evidence opened
0%
Declared confidence
50%
Open evidence before letting confidence outrun the observable record.
Break the chain
Select the narrowest control that constrains authority while preserving legitimate function.
Select a control to preview where authority would be constrained. The preview does not reveal control quality.
Immediate consequence
Resolving…
Interruption point—
Downstream path—
Legitimate function—
Reasoning alignment—
—overall
—assessment
Ground truth
Main insight
Why this outcome occurred
What this result does not mean
This result does not predict real combat outcomes, the behavior of any actual weapon or command system, or the legality or effectiveness of a real operation.
Counterfactual replay
Compare the path not taken.
Phantom timeline
Alternative loaded
Your path
Alternative
Return without compulsion
Twelve deterministic challenges. One local learning record.
Past daily scenarios remain available for review. Progress is stored only in this browser, missed days do not erase earlier work, and no account or behavioral profile is required.
Today
You Programmed the Decision
Military governance · Coordinator
KC-2026-09-15-4E3AD9
2026-09-14
The Rubber-Stamp Queue
Military governance · Coordinator
KC-2026-09-14-907A04
2026-09-13
The Ghost Track
Military governance · Analyst
KC-2026-09-13-519CBE
2026-09-12
Signal Integrity
AI system security · Orientation
KC-2026-09-12-380CF6
2026-09-11
The Ghost Track
Military governance · Analyst
KC-2026-09-11-5E890B
2026-09-10
Authority After Silence
Military governance · Analyst
KC-2026-09-10-1963CD
2026-09-09
The Rubber-Stamp Queue
Military governance · Coordinator
KC-2026-09-09-0EE5C7
0learning days completed—best local assessment
Answer and research hubs
Move from a direct answer to the evidence behind it.
The FAQ, glossary, editorial policy, citation guide, and machine-readable indexes make the site easier to search, quote, verify, and understand without stripping away uncertainty.
Questions
Kill chain FAQ
Concise, evidence-linked answers about F2T2EA, cyber and AI chains, autonomy, human control, Iron Dome, privacy, and WebXR.
Open the FAQTerms
Precision glossary
Stable definitions for function-level autonomy, engagement authority, confidence, provenance, preauthorization, lost link, and replay.
Open the glossaryTrust
Editorial policy
See who publishes the site, how AI assistance is reviewed, how source states are preserved, and how corrections are made.
Read the editorial policyReuse
Citation guide
Cite pages, Atlas views, source states, and synthetic challenges with the visible release, review date, and canonical URL.
Open the citation guideOpen analysis sandbox
Trace three different meanings of “kill chain.”
Move freely through military F2T2EA, the traditional cyber intrusion sequence, or an attack chain against an AI system. Enable stage-specific controls and inspect nodes without changing the authoritative stage.
Initializing visual renderer…
Analysis model
Loading simulation…
Preparing the synthetic event stream.
Active
Traversed
Future
Authoritative state
ActiveChain status
0Event sequence
0/0Controls active
0%Progress
Interface-state metrics only—not predictions of operational effectiveness, legality, or harm.
Stage
Initializing
Loading synthetic state.
Observable
Human question
Break the chain
Defensive and governance controls
Enable controls, then advance. A matching control interrupts progression for review; continuing is allowed only for comparative learning.
01 · Sensing
Find
A synthetic sensor network detects an object inside a closed training environment.
02 · Identity & location confidence
Fix
Independent synthetic sources are correlated to refine identity and position uncertainty.
03 · Continuity
Track
The synthetic system maintains custody while displaying uncertainty growth during sensor loss.
04 · Decision support
Target
Humans review mission purpose, evidence, alternatives, constraints, and legal requirements.
05 · Authorized simulated effect
Engage
A human-authorized, non-destructive simulated effect is applied inside the training environment.
06 · Effects & accountability
Assess
Post-action evidence is compared with the intended outcome without automatically generating a repeat action.
Guided · Challenge · Analysis
One event model, three ways to learn.
Guided mode explains each decision. Challenge mode adds a visible three-minute clock and rewards calibrated confidence. Analysis mode removes urgency and foregrounds provenance, the event sequence, ground truth, and alternative paths.
Guided
Learn the visual language
Prompts, contextual hints, clear evidence states, and recovery from a poor first decision make the first session understandable without prior training.
Challenge
Commit under uncertainty
A visible timer increases pressure, but speed is only one dimension. Unsupported confidence and disproportionate controls lower the assessment.
Analysis
Freeze, inspect, and compare
Review the append-only event trail, reveal ground truth after resolution, rewind the decision point, and load a phantom alternative without erasing the first path.
Assessment without a destruction score
Measure reasoning, authority, and preservation.
The action report does not count simulated casualties, targets, or damage. It evaluates evidence discipline, confidence calibration, intervention timing, authority containment, functional preservation, and whether the selected control actually interrupted the causal chain.
Evidence discipline
Did the user inspect relevant records, recognize provenance problems, and avoid mistaking accurate but irrelevant data for causal evidence?
Confidence calibration
A Brier-style dimension rewards confidence that matches the correctness of the selected hypothesis and penalizes unsupported certainty.
Authority containment
Did the intervention place a deterministic control at the point where a model, identity, sensor, or process could change external state?
Functional preservation
Could the control stop the unsafe path without unnecessarily disabling trusted monitoring, approved models, legitimate users, or unrelated services?
One phrase, three distinct models
Do not collapse them into one definition.
“Kill chain” can describe a military decision-and-engagement sequence, an intrusion lifecycle, or a staged attack against an AI-enabled application. The site keeps those meanings separate while showing their shared logic: linked dependencies and interruption points.
Military targeting doctrine
Find → Fix → Track → Target → Engage → Assess
AI may assist sensing, fusion, classification, prioritization, guidance, or assessment. That does not by itself establish autonomous authority to use force.
Trace the functional chainCyber intrusion model
Reconnaissance → Actions on Objectives
The classic Cyber Kill Chain presents an ordered campaign narrative. Modern adversary behavior can loop, overlap, or skip stages, so ATT&CK annotations add needed granularity.
Compare cyber stagesAttacks against AI systems
Recon → Poison → Hijack → Persist → Impact
Here the AI system is the target or compromised intermediary. The trust boundary includes models, prompts, retrieval data, memory, tools, identities, and downstream actions.
Explore the AI security chainExpansion horizon
The event model now supports the next immersive layers.
Version 1.2.0 adds the first public Evidence Atlas on top of the deterministic challenge, evidence, scoring, replay, and sharing primitives. Cooperative and authoring systems remain explicitly marked as future releases.
Global Evidence Atlas
Filter country, doctrine, system, human-control, deployment, evidence, timeline, governance, and source layers using country-level abstraction rather than tactical deployment coordinates.
Kill Chains War Room
Two-to-six-person cooperative sessions with asymmetric evidence, role-specific authority, structured recommendations, facilitator controls, and a deterministic team debrief.
Creator Studio
A constrained, declarative scenario editor with synthetic-data enforcement, reviewed components, publishing states, remix lineage, and no arbitrary scripts or external actions.
Trust and publication boundary
Exciting does not mean context-free.
Every challenge is labeled synthetic. Result cards preserve the challenge code and methodological limitation. The friend link hides the sender’s solution until the recipient completes the same deterministic seed. No identity, raw headset pose, gaze, voice, exact location, or private note is included in the challenge state or result card.
The site remains an instructional environment: it does not execute attacks, contact external systems, accept real target data, model casualty outcomes, or provide weapon-design or operational targeting instructions.
Read the evidence and publication methodology, review the privacy design, or open the curated source library.