The collection layer¶

Everything begins with collection. A service of any size tends to work several disciplines at once, because each one sees what the others miss, and the value is usually in the overlap rather than in any single feed.

The five disciplines below are the ordinary spread. None of them is exotic. What varies between services is the weighting, and the weighting is itself a clue to what a service is for.

Human sources¶

The oldest discipline, and the one least changed by any of the rest. It covers recruited sources, the reporting that comes back through diplomatic channels, the liaison relationships with allied services around the Circle Sea, debriefings, field officers, and the occasional operation run to acquire something that cannot be bought.

Technically this is the least sophisticated layer in the estate. There is no platform to point at. Organisationally it is frequently the most expensive, because the cost is in people, time, and the slow accumulation of access that cannot be rushed.

For the city, much of this rarely looks like a service at all. It looks like a civic body receiving submissions from independent researchers, or like a handler at the Establishment’s Receiving Desk treating a useful acquaintance as a useful acquaintance. The vetting record is what quietly turns one into the other.

It also looks like a Disc-wide welfare charity. The field workers of the Home for Bewildered Beasts of Legend, trusted by people who trust no one official and present where outsiders are not, accumulate a reading of the human terrain that occasionally finds its way to the Office. The Home is not a service and does not know it is a source, which is most of what makes it a good one.

Clacks and semaphore¶

This is where the infrastructure becomes substantial. Reading the city’s signals at scale means interception of Grand Trunk traffic, monitoring of semaphore patterns, collection of clacks metadata (who signalled whom, when, how often, rather than what was said), and the patient analysis of enciphered traffic that cannot yet be read but can be sorted, timed, and mapped.

Physically this implies a footprint: dedicated relay towers, listening posts sited along the Trunk, direction-finding arrangements, and secure lines back to wherever the reading is done. The Quiet Room is the part of the city’s apparatus that lives here, characterising intercepts and working out who could darken a tower.

The metadata is often worth more than the content. A pattern of who signals whom, read over weeks, can outlast any single decrypted message.

Maps and overhead¶

This discipline increasingly resembles industrial-scale picture processing. Sources run from the surveyor’s own maps through iconograph imps set to watch a quay, gargoyles who notice without appearing to, harbour watchers, and the occasional overflight by whatever the city is prepared to admit it flies.

The difficulty is rarely obtaining the images. It is reading millions of them, sorting the boring ones from the one that has changed, and doing it faster than the thing in the picture moves.

Firmware and malefice¶

What elsewhere gets called cyber collection has become a pillar rather than a niche. The infrastructure runs to malefice-analysis benches, sinkholes, telemetry, vulnerability research, threat repositories, deception environments, and sandboxes where a captured artefact can be made to misbehave under supervision.

For the city this is the territory the Watch Tower and the Society’s Anvil work from opposite ends, with firmware passing under academic loan to the University when a question needs hardware nobody admits to owning. Increasingly the assumption is that the wires are a permanent collection environment rather than a place one visits.

The open record¶

Modern services consume astonishing volumes of public material. The broadsheets, the Guild filings, shipping and harbour records, the registers of who owns what, the University’s published papers, the price of grain. None of it is secret. Read together, in volume, and cross-checked against the closed feeds, it turns into something the closed feeds alone cannot supply: context.

The open record has gone from an auxiliary to an industrial process. The skill is no longer finding the public fact. It is reading enough of them, fast enough, to notice the one that does not fit.