Editing Operational Security (OPSEC) (section)

== <span id="identity-infrastructure"></span>Identity & Infrastructure Separation ==
{| class="wikitable" style="width:100%; text-align:left; background:#1c1c1c; color:#e0e0e0;"
! Layer !! Best Practice !! Example
|-
| '''Personas''' || One mission &#8594; one alias. Never re-use names, emails, or PGP keys. || <code>alpha.ops@proton.me</code>
|-
| '''Devices''' || Burner laptop or dedicated VM per persona. || Low-cost x86 device, no personal accounts
|-
| '''Networks''' || Route traffic through chained VPN&#8594;Tor&#8594;proxy. Never connect from home IP. || 4G router + VPN + Tor
|-
| '''Data Stores''' || Encrypt at rest with strong passphrases; separate vaults per mission. || <code>gpg --symmetric AES256 dossier.txt</code>
|-
| '''Time & Behavior''' || Avoid activity patterns that can correlate accounts or sessions. Use randomized time windows. || Never log into multiple personas in the same hour/day
|-
| '''Usage Discipline''' || Never mix real and operational environments. No copy-paste between host and VM. || Clipboard disabled between VM and host; separate keyboards
|}


----