The TrustOps framework, set out by Andrew Frank, Dave Aron and Richard Hunter in World Without Truth (2025), names four operational tenets that every enterprise will need by 2027:
- Verification. Inbound content is true and sourced.
- Certification. Outbound content is authentic and traceable.
- Detection. External coordinated manipulation is identified early.
- Response. Falsehoods are met before they harden into the public record.
All four are necessary. After eighteen months of behavioural analysis on 793,000 coordinated campaign videos, I am convinced there is a fifth tenet most enterprises will not realise they need until they are inside an incident.
Replay.
The reproducible audit trail that lets a Trust Council reconstruct exactly how a detection was reached, who acted on it, and what evidence was on the table at the time.
Why Replay matters in practice
When the incident is over and the cycle begins, four audiences ask versions of the same question:
- General Counsel asks: how did we know.
- D&O insurers ask: what evidence did the board have.
- Regulators ask: what did you act on, and when.
- The market asks: why did you respond the way you did.
A Detection without Replay is a black box. The Trust Council can act on it, but it cannot defend the action afterwards. In the sectors most exposed to coordinated narrative attack (financial services, mining, infrastructure, government), undefended decisions are not an acceptable operating posture.
What Replay looks like in Signal
Signal by AI Uniti is reproducible at the behavioural-evidence layer. Every detection is replayable: the accounts involved, the coordination signals that fired, the network map at the time of the alert, and the full timeline. When General Counsel asks how, the answer is an audit trail, not a confidence score.
The four tenets are necessary. Replay is what makes them defensible.
May 19, 2026