Member organizations pool indicators of coordinated inauthentic behavior — personas, domains, content templates, campaign fingerprints — never data on private citizens. Every item moves under an explicit Traffic Light Protocol (TLP) level so sources stay protected. TLP v2.0 (FIRST.org), pinned.
TLP gates visibility. A TLP:RED advisory renders only to its named recipients. AMBER needs coalition membership. GREEN needs trusted-community access. CLEAR is open.
Admiralty rates the evidence line only — never the whole advisory, never collapsed to one score.
Cross-confirmation is a flag (≥2 members matched the same indicator independently) — it raises analyst trust, it does not auto-bump the Admiralty rating.