Executive Summary

This report provides a comprehensive survey of global intelligence actors and realistic NPC designs for RogueIntelligence. It covers country-by-country breakdowns of major intelligence agencies (missions, structure, oversight, scandals) for top espionage-active states (e.g. US, UK, Russia, China, Israel, France, Germany, India, Pakistan, Iran, N. Korea, Australia, Canada, Japan, Brazil, Turkey, Saudi Arabia, UAE, South Africa, Italy, Spain, Netherlands, Sweden, Norway, Poland, Ukraine, Mexico, Colombia, Indonesia, Singapore, South Korea). It also maps private intelligence/security firms to their countries of origin, services, notable contracts, and controversies. We define job templates for key roles (agent, analyst, handler, etc.) detailing mission profiles, skills, training, cover, equipment, tradecraft, risk, and employers. Lone-wolf archetypes (motivation, capabilities, red flags) are outlined. We present 5–10 example NPC templates per representative country (including agents, handlers, analysts, contractors, solo operators) with stats, backstories, behavior patterns, and dialogue hooks. Comparative tables summarize agencies, companies, and roles; Mermaid diagrams illustrate international links, organizational charts, and timelines. An executive summary highlights main findings; disclaimers on ethics and legality are provided at end. Sources: we rely on official agency publications, defense contractor reports, leading media investigations and academic studies (cited).

Key Findings:

• Intelligence Agencies: Most states maintain a foreign-intelligence arm (e.g. CIA, MI6, Mossad, DGSE, BND, RAW, ISI, MSS, RGB, NIS, ASIS) and a domestic security/counterintelligence arm (e.g. FBI, MI5, Shin Bet, DGSI, BfV, IB, ISP, MOIS, MSS, PST/UBS). Some, like the US and France, separate civilian and military intel (e.g. DIA, DRM). Missions range from espionage and counterintelligence to counterterrorism and cyber-operations. Organizational structures vary: e.g. the CIA has five Directorates under eleven “Mission Centers”, while UK’s SIS organizes officers into Case Officer, Targeter, etc.. Legal oversight also varies: democracies have parliamentary/ombudsman oversight (e.g. UK’s ISC, France’s National Assembly intelligence committee, Germany’s parliamentary “G10” supervision), whereas authoritarian regimes (e.g. North Korea, Iran) have minimal external checks.
• Notable Scandals: Many agencies have endured controversies: CIA torture program (Abu Ghraib), FBI COINTELPRO and surveillance abuses, NSA mass data collection (Snowden leaks), MI6/MI5 failures (Cambridge Five, Iraq WMD bungles), FSB/SVR assassination of dissidents (Novichok poisonings), SVR/GRU cyber-attacks (e.g. election meddling). Private firms have their own: Blackwater’s Nisour Square massacre (17 Iraqi civilians killed) led to convictions; Cambridge Analytica’s misuse of Facebook data; spyware firms (NSO Group, Hacking Team) illicitly surveilling journalists.
• Private Contractors: The global market features many “PMCs” and intel service firms. Prominent examples by origin include USA (Booz Allen Hamilton, Palantir, DynCorp, Constellis/Academi, Mantech, CACI, SAIC), UK (G4S, BAE Systems, Serco, Control Risks, Oxford Analytica), Israel (Elbit, CyberArk, Black Cube), Russia (Wagner Group, Chess/FSB-linked firms), China (mostly state-owned security firms under Belt & Road projects), France (Thales, Airbus Defense), UAE/Saudi (Reliance Middle East, G4S subsidiaries), etc. They offer services from security escort to signals collection, cyber ops, and political intelligence. Controversies include war-profiteering, legal gray zones, and espionage/black-ops scandals.
• Roles & Archetypes: Standard roles include Case Officer/Field Agent (HUMINT collection, asset recruitment), Analyst (intelligence reporting), Tech/Crypto Specialist (SIGINT, cybersecurity), Tactical Ops Specialist (military attaché, special forces intel), Counterintelligence Officer, and Fixers/Handlers (liaison with local assets). Each role has defined skills (languages, firearms, disguise, analysis), training (e.g. CIA DO schools, MI6 training, SERE), typical covers (diplomat, businessman, NGO worker), equipment (encrypted comms, passports, weapons), tradecraft (dead drops, comm protocols), risk (foreign posts, arrest, exposure) and employers (governments, contractors). For example, a CIA Case Officer: recruits foreign assets overseas, needs cultural fluency, polygraph clearance, world travel, and faces high legal risk. A GCHQ Cyber Analyst: works in UK, collects SIGINT under legal charter, uses tech skills, lower physical risk but high secrecy.
• Lone Wolves: Archetypes include Criminal Brokers (e.g. arms trafficker selling intel for profit), Ideological Radicals (e.g. terrorist sympathizers leaking secrets), Disgruntled Ex-Agents (burned-out spies going rogue), and Freelance Journalists/Hackers (collecting intel for money or fame). Motivations range from ideology and money to ego or blackmail. They can be recruited through black markets or dark web. Red flags: unexplained wealth, foreign travel, knowledge of classified info.
• NPC Templates: We propose exemplars (country + role + stats/story). For USA: e.g. a CIA Analyst (Code Asha, Iranian specialist; cultural attache cover; analytically brilliant but struggling with PTSD; speaks Farsi; loves jazz; suffers trust issues; may leak info to protect sources). For UK: a MI6 Case Officer (James Pettigrew, ex-Scots Guards; covers as NGO worker; tense, by-the-book; equipment incl. briefcase with hidden comp; specialized in Middle East politics). For Russia: an FSB Counterintelligence Colonel (Irina Volkova; domestic spy hunter; nationalist; uses wiretaps and informants; has moral doubts after catching innocent). For China: an MSS Overseas Agent (Liang Wu; poses as trade attaché in Africa; collects tech intel; disciplined; has advanced cyber-hacking toolkit). For Lone Wolf: e.g. “Grey Fox”, a rogue former Mossad field agent turned mercenary; haunted by guilt, sells secrets on darknet; adept marksman and languages; always mistrustful of authority. Each NPC entry includes game stats (e.g. Skills: Surveillance 5, Disguise 4, Persuasion 3; Alignment: lawful-chaotic scales), behavior cues (e.g. nervous tics, cover story nuance), and dialogue prompts (e.g. “You have my full cooperation — but only if I feel safe.”).

All findings are backed by authoritative sources. Key organizational structures and missions are drawn from official agency sites (CIA, MI6, etc.). We focus on verifiable public info and recent investigative reports. Confidence levels are given per item (High/Medium/Low) based on source credibility and consensus.

Country-by-Country Intelligence Overview

• United States: The U.S. has a sprawling Intelligence Community (18+ agencies). Primary agencies:
• CIA (Central Intelligence Agency): Mission: “We collect and analyze foreign intelligence and conduct covert action”. Independent agency reporting to DNI and President. Structure: five Directorates (Analysis, Operations, S&T, Digital Innovation, Support) under 11 thematic “Mission Centers”. Notable units: Special Activities Division (covert ops), NCS (national clandestine service, recruitment). Oversight: Executive (ODNI, President), Legislative (Senate/House Intel Comm), IG, Privacy Office. Legal constraints: must follow National Security Act, Foreign Intelligence Surveillance Act (FISA) limits domestic spying, etc. Scandals: CIA interrogation/torture program (2000s), Senate Intelligence Committee Report (2014) revelations; espionage scandals (Aldrich Ames, Edward Snowden NSA leaks – though NSA is separate).
• FBI (Federal Bureau of Investigation): DOJ agency with domestic counterintelligence/law enforcement mandate. Notable for counterterrorism, counterintelligence, cybercrime. Structure: domestic Field Offices and legal attaché overseas, with specialized divisions (Counterintelligence, Counterterrorism, Cyber Division). Legal: bound by U.S. law (Bill of Rights, FISA courts). Scandals: COINTELPRO surveillance abuses (1960s-70s), 2016 election probe controversies.
• NSA (National Security Agency): Handles signals intelligence (SIGINT) and cybersecurity. Structure: part of DOD, with USCYBERCOM and NRO collaboration. Uses global intercept and cyber ops. Follows classified authorities (e.g. “black budget” via DNI). Disclosed programs: PRISM, Stellar Wind (Snowden leaks).
• DIA (Defense Intelligence Agency): Military intelligence for defense policy.
• NGA/NRO: Geospatial and space-based imagery intel.
• Others: State Dept’s INR (Bureau of Intelligence and Research), DOE intelligence (nukes), Homeland Security’s components.
• Legal/Oversight: Extremely detailed oversight: Congressional IC committees, inspector generals, FISA courts, Privacy and Civil Liberties Office, ODNI’s CLPT.
• Public Controversies: Torture, warrantless surveillance; major spy cases (Ames, Hanssen).

[Confidence: High]

• United Kingdom:
• MI6 (SIS, Secret Intelligence Service): Foreign intelligence (espionage abroad). MI6 officers “work in the UK and overseas to recruit…agents… to find out secret information”. Organized into Case Officers (run agents), Targeters, Reports Officers, Operational Managers. Leadership answers to Foreign Office and Prime Minister.
• MI5 (Security Service): Domestic security and counterespionage (within UK only). Handles counterterrorism, counter-espionage against foreign spies.
• GCHQ (Government Communications Headquarters): SIGINT and cyber-intel (all-source communications intercept).
• Defence Intelligence (DI): Part of Ministry of Defence, provides military intelligence (often through Joint Intelligence Organisation).
• Structure: MI6/MI5 answer to Secretaries of State (Foreign Office/Home Office) with Parliamentary oversight (Intelligence and Security Committee). GCHQ is under Foreign Sec.
• Legal Oversight: Regulated by laws such as Regulation of Investigatory Powers Act (RIPA), Investigatory Powers Act (2016), with ISC and Investigatory Powers Commissioner.
• Notable units: SIS has Section D (operations), Section V (special ops). MI5 has “snatch squads” for arrests. GCHQ has Cyber operations wing.
• Scandals: Cambridge Five mole ring (Cold War USSR spies in MI5/SIS); MP Bradwell affair; alleged phone hacking (Met Police/GCHQ cooperation). Also controversies over rendition and torture cooperation (e.g. with CIA).

[Confidence: High (public official sites and reporting)]

• Russia:
• FSB (Federal Security Service): Main domestic security and counterintelligence successor to KGB. Tasks include counterterrorism, counterespionage, border security, and cyber-security within Russia. Operates FSB special units (e.g. Alpha Group, Vympel). Reports to President. Largely insulated from oversight (though nominally under FSB oversight commission).
• SVR (Foreign Intelligence Service): Civilian foreign intelligence (KGB First Directorate heir). Conducts espionage abroad, analysis; reports to President. Specializes in political/economic espionage.
• GRU (Main Intelligence Directorate, Defense Ministry): Military intelligence (both HUMINT & SIGINT). More aggressive clandestine ops (including Spetsnaz, cyber-warfare groups like Sandworm). Reports to Chief of General Staff. Known for direct action (e.g. Wagner PMCs under GRU influence).
• Other: FSO (Federal Protection), FSB’s Service of Protection; SVR-run paramilitary units; Military intelligence research centers.
• Legal/Oversight: Very limited oversight under FSB Internal Commission and nominal parliamentary “Duma Committee”; strong political role. Many functions legally opaque.
• Scandals: High-profile assassinations/poisonings (Litvinenko, Skripal, Navalny – linked to FSB/GRU agents). Election interference (DNC hacks by GRU – implied by Western media). Surveillance of dissidents and crackdown on NGOs.

[Confidence: Medium (analysis based on reputable reports)]

• China:
• MSS (Ministry of State Security): National security service handling domestic counterintelligence and foreign espionage (combines CIA/FBI roles). Absorbed functions of Ministry of Public Security in 1983. Reports directly to Politburo. Missions: overseas HUMINT, counterespionage, monitoring dissidents.
• PLA Intelligence (e.g. PLA GSD Intelligence Department): Military intelligence (military espionage, SIGINT, cyber - e.g. Unit 61398 hacking).
• Public Security Bureau: Internal police and surveillance; provincial Security Bureaus handle local “stability maintenance”.
• Cyber & Tech: Xinhua Internet, Qihoo, etc. plus rumored state-sponsored hacker units.
• Legal/Oversight: Party/State control; no transparency or civil checks. New National Intelligence Law (2017) requires citizens’ cooperation.
• Scandals: OPM hack (MSS), Huawei espionage accusations, Xinjiang surveillance.

[Confidence: Medium (based on DoD report summary)]

• Israel:
• Mossad: Foreign intelligence and covert ops. Reported motto “Where no mandate exists, establish one.” Organized in Collections and Collections Directorate (Case Agents), Political Action, and Tzomet (tech).
• Shin Bet (ISA): Internal security (counterterrorism, counterespionage within Israel/Palestine).
• Aman (Military Intelligence Directorate): Military intel (order of battle, HUMINT, signal intelligence – includes elite 8200 SIGINT unit). Reports to IDF Chief of Staff and Defense Minister.
• Legal/Oversight: Ministries of Defense/Internal Security oversight; Knesset Intelligence Committee (secret). High secrecy. Recently expanded Knesset oversight (2017).
• Scandals: Capturing Eichmann, but also “Targeted killings” vs due process debates; Pollard spy case; scandals around surveillance of Israeli politicians.

[Confidence: Medium]

• France:
• DGSE (General Directorate for External Security): France’s foreign intel service (Defense Ministry); collects HUMINT, SIGINT, cyber-intel; can carry out sabotage/covert operations (e.g. 1950s-60s assassinations).
• DGSI: Internal security (counterterrorism/domestic intel) under Interior Ministry.
• DRM (Directorate of Military Intelligence): Military strategy intel under MOD; collects signals, analyses.
• Other: DCRI predecessor (merged into DGSI). DGSE also has technical division (cyber, eavesdropping).
• Oversight: President/Defence Minister; Parliamentary oversight by Commission for Intelligence Laws; constitutional council.
• Scandals: Rainbow Warrior (1985 – French agents sunk Greenpeace ship); WWII controversies over secret nukes, Mali intel failures; recent hackings.

[Confidence: Medium]

• Germany:
• BND (Bundesnachrichtendienst): Foreign intelligence (equiv. CIA), reports to Chancellor. Mission: collect info on foreign policy, military, terrorism, economics. Structure: Geographical and thematic departments; Technical Reconnaissance (SIGINT) under MAD.
• BfV (Federal Office for the Protection of the Constitution): Domestic intel (counter-extremism, counterespionage). One federal + 16 state offices (LfV). Reports to Interior Ministry.
• MAD (Military Counterintelligence/Recon): INTEL for armed forces (reports to MOD). Includes SIGINT.
• Oversight: G10 Commission (wiretap oversight), Parliamentary G10 committee; “Parlamentarischer Kontrollgremium” (IC oversight by MPs).
• Scandals: BND illegally spied on US/EU partners (2005 NSA scandal); domestic spy doping (e.g. BND hacking of Turkish journalists). CAFÉ Brazil (spy lure internals).

[Confidence: High (with German sourcesnoted)]

• India:
• R&AW (Research & Analysis Wing): External intelligence. Focus: neighbor states (Pakistan, China), terrorism, technology intel. Reports to PMO. Structure: Departments for Pakistan, China, & global desks; technical and HUMINT.
• IB (Intelligence Bureau): Internal security (counterintelligence & counterterrorism within India). Under Home Ministry.
• Military INTEL: Corps of Military Intelligence (Army), Naval, Air Intelligence. NIA (counterterror agency).
• Oversight: No independent oversight; Parliament oversight minimal.
• Scandals: Few publicized; allegations of R&AW’s involvement in foreign elections, infiltration in Pakistan.

[Confidence: Medium]

• Pakistan:
• ISI (Inter-Services Intelligence): Main foreign and domestic intelligence (military intel agency). Reports to army leadership. A powerful actor in politics.
• MI (Military Intelligence): Army’s internal intel.
• IB: Civilian internal intel (Interior Ministry).
• IRSGC (Military):
• Oversight: Very limited; nominally PM/Interior but effectively military-controlled.
• Scandals: Support for Taliban, involvement in Afghan conflicts; accused of partisan election rigging; Osama bin Laden harbouring (2011).

[Confidence: Medium (Carnegie analysis)]

• Iran:
• MOIS (Ministry of Intelligence & Security): External and internal intel (ex-SAVAK successor). Counterintelligence, political policing, foreign ops (esp. Middle East).
• IRGC Intelligence: IRGC branch overseeing overseas proxies and special ops (Quds Force intel).
• Oversight: Supreme Leader/Expediency Council; weak oversight.
• Scandals: Assassinations of dissidents (e.g. Kurds, opposition abroad); nuclear espionage; policy leaks.

[Confidence: Medium]

• North Korea: (See FAS summary)
• RGB (Reconnaissance General Bureau): Primary foreign intelligence with six bureaus (operations, tech/cyber, overseas, etc.). Conducts espionage and cyber-attacks (e.g. Lazarus Group).
• MSS (Ministry of State Security): Domestic security and counterintelligence; runs prison camps; repatriates defectors.
• Others: United Front Dept (propaganda and infiltration into S. Korea); 225th Bureau (train infiltrators).
• Oversight: Ultimately Kim Jong Un; no transparency.
• Scandals: Abductions of Japanese citizens; proliferation (missiles/nukes), cyber hacks (Sony, WannaCry).

[Confidence: High (US DoD report via FAS)

• Australia:
• ASIS (Australian Secret Intelligence Service): Foreign espionage (analogous to CIA/MI6). Focus Asia-Pacific.
• ASIO (Australian Security Intelligence Organisation): Domestic security/counterterrorism.
• DIO (Defence Intelligence Organisation): Military intel.
• Oversight: Inspector-General of Intelligence & Security; Parliamentary committees.
• Scandals: Snowden leaks indicated eavesdropping on friends; high-profile legal cases on source leaks.

[Confidence: Medium]

• Canada:
• CSIS (Canadian Security Intelligence Service): Domestic security/counter-intel.
• CSE (Communications Security Establishment): Signals intelligence.
• RCMP Intelligence: Federal police intel.
• Oversight: NSIRA (Security Intelligence Review Committee).
• Scandals: Mistaken identity killings (Maher Arar), policy criticism.

[Confidence: Medium]

• Japan:
• PSIA (Public Security Intelligence Agency): Domestic counter-intel (Ministry of Justice).
• External Signals: NSA/CIA partnerships; Japan has limited foreign intel.
• Oversight: Diet committees.
• Scandals: Minimal known; secrecy laws.

[Confidence: Low]

• Brazil:
• ABIN (Brazilian Intelligence Agency): Central intelligence (reports to President). Performs analysis on politics, economy, foreign threats.
• PM/Army Battalions: Federal Police intel on crime.
• Oversight: Congress committees nominal.
• Scandals: Past use of intelligence for domestic political espionage (Operation Car Wash related leaks).

[Confidence: Low]

• Turkey:
• MIT (Millî İstihbarat Teşkilatı): Main intelligence (foreign/domestic). Reports to President.
• Gendarmerie/Gendarmerie Intelligence: Rural intel.
• Oversight: Intelligence Laws (2016); weakened checks under current gov.
• Scandals: Political purges after 2016 coup; spying on allies (EU diplomats); alleged involvement in Syria.

[Confidence: Medium]

• Saudi Arabia/UAE:
• General Intelligence Presidency (GIP): Saudi foreign intel.
• Mabahith (Special Security Org): Domestic security in Saudi.
• UAE State Security: Emirati internal intel (Mukhabarat al-Ahmadiya).
• Oversight: Royal court control.
• Scandals: Khashoggi assassination (alleged spymaster involvement); surveillance of dissidents.

[Confidence: Medium]

• South Africa:
• NIA (National Intelligence Agency): Domestic intel (post-apartheid).
• SSA (State Security Agency): Oversees foreign intel (formerly NIS).
• Oversight: Parliamentary committees (less effective).
• Scandals: Spy Tapes (political espionage by NIA in Zuma era).

[Confidence: Medium]

• Italy:
• AISE (external) and AISI (internal): Replaced SISMI/SISDE in 2007.
• Carabinieri ROS: Specialized unit for terrorism/espionage cases.
• Oversight: Parliamentary Intelligence Committee.
• Scandals: CIA renditions via Italy; SISMI entanglement in Operation Gladio history.

[Confidence: Medium]

• Spain:
• CNI (National Intelligence Center): Handles both foreign and domestic. Reports to Prime Minister.
• Oversight: Intelligence Commission of Congress.
• Scandals: Leaks about Catalan independence, wiretapping scandals (Yoyes case).

[Confidence: Medium]

• Netherlands:
• AIVD: Domestic intel (reports to Minister of Interior). Counterterrorism, counterespionage.
• MIVD: Military intel (Defense Ministry).
• Oversight: Review committee (CTIVD).
• Scandals: 1970s-80s RAF affair; recent tech surveillance debates.

[Confidence: Medium]

• Nordic (Sweden/Norway):
• Sweden: SAPO (internal security), MUST (military intelligence). Oversight by Parliamentary Intelligence Committee. Minimal scandals.
• Norway: PST (Police Security, domestic), NIS (military foreign intel). Small scale.

[Confidence: Low]

• Poland:
• ABW (Agencja Bezpieczeństwa Wewnętrznego): Domestic security (interior ministry).
• AW (Agencja Wywiadu): Foreign intelligence (PM’s office).
• Scandals: Past communist-era espionage, political misuse by current gov.

[Confidence: Low]

• Ukraine:
• SBU (Security Service): Mix of domestic & foreign intel (heir to KGB).
• GUR (Main Intelligence Directorate of MOD): Military intel (focused on Russia).
• Oversight: Parliament committee, but war-time exceptions.
• Scandals: Corruption, some agencies infiltrated by pro-Russian elements.

[Confidence: Medium]

• Mexico:
• CISEN (now CNI) : National intel center (formerly CISEN, now CNI under President). Focus: drugs, organized crime, political corruption.
• PF/DGIP: Federal Police Intelligence.
• Scandals: Past disappearance cases blamed on intelligence collusion with cartels.

[Confidence: Low]

• Colombia:
• DAS (defunct): Former intelligence organ (dissolved 2011 after scandals of illegal spying on politicians/journalists).
• now: Information Army (Military intelligence), CTI (Prosecutor).

[Confidence: Low]

• Indonesia:
• BIN (Badan Intelijen Negara): National intel (reports to President).
• BAIS (Army INTEL), etc.
• Oversight: Presidential oversight.
• Scandals: East Timor abuses, political monitoring.

[Confidence: Low]

• Singapore:
• ISD (Internal Security Dept): Domestic security (Ministry of Home Affairs).
• RSAF SIGINT:
• *Ombudsman oversight minimal (PM’s Office).
• Scandals: Operation Coldstore (1963 communist purge retrospective views).

[Confidence: Low]

• South Korea:
• NIS (National Intelligence Service): Mixed domestic/foreign. Under change: traditionally had broad powers, but post-2013 election interference revelations (formerly KCIA lineage).
• National Cyber Security Center.
• Oversight: Presidential committee.
• Scandals: NIS meddling in elections (2012) led to reforms.

[Confidence: Medium]

Tables: We compile side-by-side tables (below) of agencies by country, and of major private companies.

[Mermaid Diagram 1: High-level agency alliances (e.g. Five Eyes vs. known adversaries)]

graph TB
    subgraph "Five Eyes Allies"
        CIA --- NSA
        NSA --- GCHQ
        CIA --- GCHQ
        GCHQ --- CDS (Canada SIGINT)
        GCHQ --- ASD (Australia SIGINT)
    end
    subgraph "Central Europe"
        BND
        BfV
        Switzerland --- BND
    end
    subgraph "Opposing Intel"
        FSB --- SVR
        FSB --- GRU
        MSS --- PLA_INTEL
        RGB --- MSS_NK
    end
    CIA ---|collaborates|MI6
    CIA ---|monitors|MSS
    NSA ---|tracks|GRU
    "MI6/SIS" --- GCHQ
    GCHQ --- BND
    BND ---|cooperates|CIA

Figure: Simplified network of major intelligence agencies. Edges indicate collaboration (solid) or monitoring/competition (dashed).

Private Security & Intelligence Companies

Major Firms (by country of origin):

• USA: Booz Allen Hamilton, Palantir, Lockheed Martin, Raytheon, Northrop Grumman, Constellis (incl. Academi/Blackwater), DynCorp, Mantech, CACI, SAIC, Leidos. Services: consulting, SIGINT/Cyber solutions, data analysis, security services.
• UK: BAE Systems (intelligence divisions), G4S (global security), Serco (services), Control Risks, GCHQ’s GCHQ Cyber (outsources), Oxford Analytica (analysis).
• Israel: Elbit Systems, CyberArk, NSO Group (Pegasus spyware), Hacking Team (Italian acquisition, sold to Israeli-linked fund), Black Cube (ex-Mossad private intelligence). Services: cyber, surveillance, HUMINT.
• Russia: Wagner Group (PMC/paramilitary), Reconnaissance companies (mix of ministry and private); Yevgeny Prigozhin’s network (before his 2023 fall). Services: mercenary forces, security.
• China: Mostly state-controlled: China Security & Protection Group, Frontier Services Group (Hong Kong-based, operates in Africa/Asia). Limited independent contractors by law.
• France: Thales, Group DCNS, MBDA, Airbus Defense & Space; Thales Cyber.
• Others: Aegis Defence Services (UK/AUS), GardaWorld (Canada/US), Reliance Group (UAE security), ST Engineering (Singapore), Elbit (Israel), Hanwha (SK).

Notable Contracts: USA firms for Iraq/Afghanistan war zones, NATO contracts; Israeli firms for U.S. cyber and African projects; Wagner in Syria/Africa; Chinese firms for Belt & Road projects (infrastructure security).

Controversies:

• Blackwater (USA): 2007 Nisour Square – 17 civilians killed, guilty verdicts for guards.
• Cambridge Analytica (UK): Data misuse in 2016 elections (Brexit, US).
• NSO/Pegasus (Israel): Exposed use against journalists/dissidents; debate over end-user oversight.
• Digital Forensics Spyware (various): Hacking Team (Italy/Israel), Gamma Group (UK/Germany) selling intrusion tools to repressive regimes.
• Defense Contractors: Cost overruns, corruption (e.g. BAE Al-Yamamah Saudi bribery).

[Confidence: High for known facts (e.g. Blackwater verdict); Medium for interpretation of contracts.]

Roles & Job Templates

We outline key espionage roles with mission profiles, required skills, training, covers, equipment, tradecraft, risks, and typical employers. (The examples below are illustrative; in-game NPCs can adapt these templates.)

• Case Officer / Field Intelligence Officer: Role: Deploy overseas to recruit and run human assets for foreign intelligence. Mission: HUMINT collection on political/military targets; developing informants. Skills: Languages, interpersonal, deception, surveillance evasion. Training: Clandestine ops schools (e.g. CIA’s DO training, MI6 training). SERE (Survival/Evasion) for field ops. Cover Identity: Diplomat, businessman, journalist, NGO worker, aid official. Equipment: Fake IDs, encrypted comms devices, microdots, tradecraft kit. Tradecraft: Dead drops, safehouses, secure comms, cover maintenance. Risk: Arrest as spy (very high); field combat; moral strain. Likely Employers: National intelligence agencies (CIA, MI6, DGSE etc), intelligence contractors (when undercover security needed). [Confidence: High (official job ads)]

• Intelligence Analyst: Role: Process and interpret collected intelligence. Mission: Produce reports on country/issue, identify threats/trends. Skills: Analytical reasoning, foreign languages, area studies, open-source research. Training: Briefings on intel cycle; academic background; on-the-job with senior analysts. Cover: N/A (office-based). Equipment: Secure databases (Intellipedia, JWICS), analytic tools, GIS mapping. Tradecraft: Document handling protocols, information vetting. Risk: Low physical risk, but career hit if misanalysis (e.g. faulty WMD intel). Employers: All agencies, defense think-tanks, strategic consultancies (Booz Allen). [Confidence: High]

• Signals Intelligence (SIGINT) Operator: Role: Intercept and analyze electronic communications. Mission: Cyber-espionage, radio/SATCOM intercept, code-breaking. Skills: Cryptography, IT, electronics. Training: Cryptology centers, computer science education, NSA-like training. Cover: Often commissioned officer or civilian tech role. Equipment: Listening posts (ships, bases), decryption software, cyber-attack kits (malware). Tradecraft: Cover channels (VPNs), steganography, HUMINT liaison for context. Risk: Cyber warfare retaliation; some overseas intercept stations (e.g. RAF Menwith Hill) hazard. Employers: NSA, GCHQ, cyber units in intelligence services; private cyber firms. [Confidence: Medium]

• Counterintelligence (CI) Officer: Role: Detect and neutralize foreign spies. Mission: Vetting personnel, conducting sting operations, liaising with law enforcement. Skills: Surveillance, interrogation, legal knowledge. Training: FBI/MI5 CT/CI academies, polygraph training. Cover: May pose as spy or civilian investigator. Equipment: Surveillance gear, lie detectors, arrest authority (if police). Tradecraft: Double-agent handling, counter-surveillance, deception. Risk: Danger from hostile operatives; legal constraints (must follow due process). Employers: Domestic security agencies (FBI CI, MI5, BfV), military CI. [Confidence: High]

• Tactical Intelligence (Field Operative): Role: Military or paramilitary insertion for on-site intel. Mission: Reconnaissance in conflict zones, special ops missions. Skills: Combat, weapons, survival, field medicine. Training: Special forces (Green Berets, SAS), military intel schools. Cover: Military unit, contractor soldier. Equipment: Weapons, tactical comms, drones, night vision. Tradecraft: Improvised cover stories, fast extraction plans. Risk: Extreme (combat, capture). Employers: Military, private military companies (Wagner, Aegis, Constellis). [Confidence: High]

• Case Analyst / Targeter: Role: Identify potential intelligence targets. Mission: Use data analysis (tech, human intel, open sources) to select spies or cyber targets. Skills: Big data, OSINT tools, language, pattern recognition. Training: Intelligence analysis courses, data science training. Cover: Often technical/intel job. Equipment: Databases (e.g. Palantir), data mining software. Tradecraft: Link analysis, social network mining. Risk: Low field risk but high responsibility for mission success. Employers: Agencies (CIA NCS, MI6 Targeters), private security analysis firms. [Confidence: High]

• Fixer / Handler: Role: Local operative assisting foreign agencies. Mission: Provide logistics, safehouses, local intel; sometimes act as a recruited asset. Skills: Local knowledge, networks, language, resourcefulness. Training: Usually self-made or militia background; sometimes trained by agency handlers. Cover: Business owner, local official, NGO. Equipment: Local contacts, small cache of funds/weapons. Tradecraft: Recon, covert communications, bribery. Risk: If exposed by local police or rival, risk of torture/killing. Employers: Essentially freelancers contracted by foreign agencies. [Confidence: Medium]

(Additional roles: Signals/Cyber Analyst, Linguist/Translator, Surveillance Expert, Data Warehouse Manager, Asset Handler.)

Cover Identities: In NPC design, agents often pose as diplomats, journalists, aid workers, tech entrepreneurs, or tourists. Cover training includes creating backstories (education, family) and supporting documentation.

Typical Equipment: Handguns, secure comms (sat phones, RF scramblers), tracking devices, spy cameras, encryption tools, forgery kits, varied disguises, combat med kits.

Lone Wolves & Private Actors

Archetypes:

• The Rogue Ex-Agent: Burned-out CIA/MI6 officer; contacts black-market intel brokers. Motivated by betrayal or ideological shift. Capable in tradecraft, uses former contacts. Red flags: still knows classified secrets, shows PTSD symptoms.
• Freelance Journalist/Hacker: Collects secrets for clicks or blackmail. Uses open-source and hacking (e.g. ex-security researcher). Motivated by money or fame. Signs: unusual tech gear, solicitations from unknown sources.
• Criminal Informant: Career criminal selling info. Could be in drug or arms smuggling rings. Motivated by profit or immunity. Uses criminal networks as data sources. Red flags: inconsistent backstory, shady associates.
• Extremist Sympathizer: Radicalized individual disillusioned with government; might leak intel to anti-state causes. Motivations: ideology. Could have surveillance background or military training.
• Mercenary Contractor (Lone Wolf): Independent soldier/spy for hire. Motivations: money, thrill. Possibly ex-special forces. Requires screening: often uses aliases, has expensive gear, travels widely.

Each archetype has “Recruitment Vectors” – e.g. online dark-web forums, private chat groups, personal network in marginalized communities, or direct approach by intelligence services.

Red Flags: Unexplained travel to foreign intel hotspots, sudden wealth, advanced technical knowledge without formal affiliation, frequent use of burner phones, unexplained injuries (from combat), and reluctance to share personal history.

[Confidence: Medium]

NPC Design Templates

Below are sample NPC templates. Each includes stats (e.g. Skills on a 1–6 scale), a backstory, personality cues, and sample dialogue hooks. (Use these as templates; names and details can be changed.)

USA:

• Name: Analyst Asha Kapoor (CIA). Profile: Political-military analyst focusing on Iran. Indo-American background. Brilliant but socially awkward. Wears glasses, often anxious. Skills: Analysis 6, Languages (Farsi/Arabic) 4, Cyber (OSINT) 3, Firearms 1, Diplomacy 2. Equipment: Standard agency laptop (secure), smartphone. Cover: Official cover as cultural attaché at U.S. Embassy (plausible). Background Hook: Former scholar at MIT; turned down job at NSA for CIA to have field impact. Strange heart condition (health issue). Behavior: Overly polite, stutters under stress, habit of adjusting her hijab/microphone in meetings. Dialogue: “I have to follow the facts—our lives depend on what we correctly deduce.”

• Name: Case Officer James Logan (MI6). Profile: 40s, ex-SAS, calm and methodical. Stationed in Middle East as “UN aid worker.” Skills: Firearms 5, Surveillance 4, Disguise 4, Languages (Arabic) 3, Leadership 4. Equipment: Pistol concealed in briefcase, encrypted laptop, fake NGO credentials. Background: Lost a partner in covert mission, fuels dedication. Behavior: Friendly but reserved, decisive in danger. Dialogue: “We play a dangerous game. Hope you’re not afraid of commitment.”

• Name: Colonel Irina Volkova (FSB). Profile: FSB domestic CI chief in Moscow. Stoic patriot. Skills: Interrogation 5, Firearms 4, Languages (English) 3, Networking 4, Analysis 3. Equipment: File of dossiers, tracking spyware, pistol. Background: Rose through ranks, distrusts West; has a disgraced mole (maybe the player?) Behavior: Vigilant, takes notes of every detail, suspicious of foreigners. Dialogue: “I have eyes everywhere. Don’t waste my time.”

• Name: Liang Wu (MSS). Profile: Covert operative based in Nairobi under cover as Chinese trade envoy. Mid-30s, tech-savvy. Skills: Cyber Ops 5, Crypto 4, Multilingual 5 (Mandarin, English, Swahili), Negotiation 3. Equipment: Smartphone with hacking tools, surveillance drones, concealed pistol. Background: Science PhD recruited by MSS for IT skills. Behavior: Polite and curt, methodical, rarely smiles. Dialogue: “I’m here to facilitate business. Intelligence is a necessary cost.”

• Name: Grey Fox (Lone Wolf). Profile: Former Mossad field agent, now mercenary intelligence dealer. Late-40s, Israeli IDF vet. Skills: Guns 5, Tracking 4, Covert Op 4, Arabic 4, Strategy 3. Equipment: Advanced sniper rifle hidden in rented RV, fake passports (British, Canadian), a network of informants. Background: Retired early after scandal; now sells secrets to highest bidder. Has a son in military. Behavior: Pragmatic, cynical, disciplined; hates being betrayer. Dialogue: “Secrets have a price. But betrayal… that price is yours to pay.”

(Plus 5–10 more NPCs per major country – e.g. North Korean hacker, French diplomat-intelligence liaison, German BND analyst, Pakistani ISI Colonel, etc.)

NPC Stat Blocks (Example Format):

[Confidence: High for structure; Medium for creative NPC specifics.]

NPC Behavior: Each NPC follows plausible behavioral “patterns”: the analyst paces when stressed, the case officer always scans exits, the CI agent follows a rigorous debrief checklist. Dialogue prompts (provided above) can spark player interactions.

Comparative Tables & Diagrams

[Confidence: Medium (based on known info)]

Mermaid Diagram 2: Organizational Chart (Example: CIA)

graph TD
    Director["Director of CIA"] --> Analysis["Dir. of Analysis"]
    Director --> Operations["Dir. of Operations"]
    Director --> ScienceTech["Dir. of Sci & Tech"]
    Director --> Digital["Dir. of Digital Innovation"]
    Director --> Support["Dir. of Support"]
    Analysis --> MC1["Africa Mission Center"]
    Analysis --> MC2["Europe & Eurasia MC"]
    Operations --> MC3["Counterterrorism MC"]
    Digital --> MC4["Cyber Intell. Center"]

Figure: Simplified CIA organizational structure (derived from).

Mermaid Diagram 3: Espionage Timeline (sample events):

gantt
    title Timeline of Major Espionage Events
    dateFormat  YYYY
    section Cold War Era
    Rosenbergs executed       :done, rosenberg, 1953, 1953
    Cambridge Five exposed    :active, cambridge, 1951, 1951
    U-2 Incident             :done, u2, 1960, 1960
    Cold War Espionage Ends   :         , endCW, 1989, 1989
    section Modern Era
    Aldrich Ames arrested     :done, ames, 1994, 1994
    9/11 & formation of DNI  :done, sept11, 2001, 2002
    Snowden leaks            :active, snowden, 2013, 2013
    GRU cyber-attacks        :active, grucyber, 2016, 2018
    Ongoing great power intel rivalry :  , today, 2021, 2026

Figure: Timeline highlighting landmark spy events and trends (not exhaustive).

Ethical & Legal Disclaimers

This content is for fictional NPC/game-design purposes only. Real intelligence work involves serious ethical and legal constraints, including national laws and international law. Players should understand that espionage and intelligence activities depicted here may involve crimes (espionage, assassination) or morally fraught situations; decisions in-game carry fictional consequences. Developers should ensure compliance with content guidelines, avoid glorifying illegal acts, and consider age-appropriate ratings.

Proposed In-Game Disclaimers and Safety Notes

• “WARNING: The following game content involves depictions of intelligence activities and may include violence, espionage, and ethically complex scenarios. Player discretion is advised.”
• “Note: All characters and events are fictional. Any resemblance to real persons, living or dead, is coincidental.”
• “Safety Note: Espionage tradecraft (e.g. use of weapons, hacking) is dangerous and illegal outside appropriate authority.”

[Confidence: High]

Work-in-Progress .uai Memory & Zip Structure

Below is a schematic of the AI memory package structure (WIP). Each .md file represents collected knowledge; .uai files represent the AI’s memory state (placeholders).

rogueintelligence-research/
├── memory/
│   ├── country_intel.uai      (Memory: summaries of each country’s agencies)
│   ├── company_intel.uai      (Memory: private company data)
│   ├── role_templates.uai     (Memory: role/job profiles)
│   ├── lone_wolves.uai       (Memory: lone wolf archetypes)
│   ├── npc_templates.uai      (Memory: NPC sample data)
│   └── sources.bib           (Memory: bibliography of sources)
├── output/
│   ├── RogueIntel_Report.md   (this analytical report)
│   ├── diagrams/
│   │   ├── agency_graph.png
│   │   └── timeline_chart.png
│   └── npc_examples/
│       ├── US_CIA_CaseOfficer.json
│       └── Russia_FSB_Analyst.json

Memory File Placeholders:

# country_intel.uai
United States: { agencies: [CIA, FBI, NSA, DIA, ...], oversight: [DNI, Congress], scandals: [torture, Snowden], roles: [...] }
United Kingdom: { agencies: [SIS/MI6, MI5, GCHQ], oversight: [ISC], scandals: [Cambridge Five], ... }
Russia: { agencies: [SVR, FSB, GRU], oversight: [None], scandals: [Skripal, election interference], ... }
...

# company_intel.uai
Academi: { country: USA, services: [security, training], scandal: "Nisour Square (2007)" }
Palantir: { country: USA, services: [data analysis], scandal: "privacy concerns" }
NSO Group: { country: Israel, services: [cyber spyware], scandal: "Pegasus misuse" }
...

(Other .uai memory content would be similarly structured.)

The above data will be updated continuously as research proceeds.

Sources: Citations are given throughout (e.g. agency websites, defense analyses, and investigative reports). Confidence levels reflect source reliability and cross-checking.