Pattern over
incident.

July 2026

Signal without a phone.

Every protective plan depends on a person under threat getting a signal out, and most plans quietly assume the phone will do it. ERS Briefing 012 on engineering the signaling layer.

• —The phone is four assumptions deep before anyone is alerted
• —The non-negotiable properties of a dedicated signaling layer
• —The receiving end is the majority of the system's value

July 2026

The exit interview you never gave.

Offboarding retires the badge and the credentials. It does not retire what a departing employee knows about the principal. ERS Briefing 011 on the departure as a protective event.

• —What proximity teaches: calendars, routes, wealth events, posture
• —Standard offboarding retires access, never knowledge
• —Four practices that treat proximate departures as protective events

July 2026

The policy is not the plan.

Kidnap and ransom coverage is the control principals most believe they understand and most rarely do. ERS Briefing 010 on what K&R buys, what it cannot, and where crypto bends the model.

• —K&R is two products in one wrapper: reimbursement and retained response expertise
• —A policy prevents nothing, and disclosing it degrades it
• —Why crypto compresses the time the classic playbook depends on

July 2026

The household is the supply chain.

Staff, drivers, contractors, and their subcontractors hold the keys, codes, and rhythms of the residence. ERS Briefing 009 on managing the household like the supply chain it is, without poisoning the home.

• —The invited, not the uninvited: trusted access is the seam
• —Three repeating failures: one-time vetting, unretired access, invisible vendor tiers
• —Running the program as professionalism, not suspicion

July 2026

Duress is a design problem.

Whether compliance ends an incident safely is decided years earlier, in the architecture. ERS Briefing 008 on duress-resistant custody design: truthful disclosure, bounded access, and time by construction.

• —Why compliance is the right instinct and an incomplete plan
• —Truthful disclosure: the test a duress-resistant architecture must pass
• —The design questions to answer in calm conditions, not during an incident

July 2026

The voice is not your CFO.

Voice cloning and deepfake-assisted fraud attack the same terminal control as physical coercion: the human approver. ERS Briefing 007 on verification as architecture, not vigilance.

• —The deepfake call and the wrench attack go at the same terminal control
• —Why a recognized voice is no longer authentication
• —Four properties of verification designed as architecture, not vigilance

July 2026

Your family is the perimeter.

Attackers route around the hardened principal to the household. ERS Briefing 006 on the family's combined public footprint, the exposure math, and extending the perimeter without militarizing the home.

• —Coercion routes to whoever the key-holder cannot accept harm to
• —Aggregation: how a household's combined footprint publishes the routine
• —Three moves that extend the perimeter without militarizing the family

July 2026

The conference is the reconnaissance.

Speaker pages, agendas, and side-event RSVPs assemble a targeting package before the principal lands. ERS Briefing 005 on the event footprint and the audit to run before wheels-up.

• —How a speaker page, an agenda, and a group chat assemble the targeting package
• —Three reasons digital-asset events concentrate the risk
• —The four-question footprint audit to run before wheels-up

July 2026

The questions your custodian has not been asked.

Most custody due diligence questionnaires audit the vendor's paperwork. ERS Briefing 004 on what a serious instrument asks: the human authorizer, the seam between cyber and physical, and eight sample questions.

• —Why the standard DDQ measures paperwork fluency, not operational security
• —The human authorizer: the control the questionnaire never reaches
• —Eight sample questions from the ERS custody due diligence instrument

July 2026

The insider at the signing table.

Every architecture for holding digital assets terminates in a person who can approve. Cryptography relocates that human. It never removes them. ERS Briefing 003 on insider risk to the transaction authorizer.

• —Three custody tiers, one terminal control: the human authorizer
• —Why MPC and qualified custodians relocate insider risk, not remove it
• —Four questions that locate the seam between cyber and physical

July 2026

A stable capital, a targeted threat.

Paris rates as one of the safest major capitals in the world. For crypto and fintech principals, that rating is the problem.

• —The targeting pattern: proximity-based, residential, patient
• —Cyber posture as anti-kidnap posture
• —The controls that must exist before wheels-up

July 2026

The target has moved.

Physical coercion has become a structural feature of digital-asset risk. Why crypto wealth breaks traditional executive protection, how exposure accumulates around a principal, and the architecture that holds under duress.

• —The 2025 inflection in verified physical attacks
• —Custody design as a personal safety control
• —Four questions every board should be able to answer