created 14 October 2026 · last modified 14 October 2026
Field instrument · five questions · five minutes
The Cell Check
A structured walkthrough for any system, team, or service. Five questions, each mapped to a variable in the Ambient Breach Theory. The output is a reusable artifact: a snapshot of where the system sits in the Risk → Threat → Breach progression, and which clock is driving the movement.
The Cell Check is not a scoring rubric. It is a question generator — designed to surface the right conversation in a room that may not yet have language for what it is observing.
This page is a working stub. Facilitation notes, output templates, and integration with the interactive ABT calculator are in development.
1 of 5Ambient Risk
What did we make reachable?
X — Exposure
Probe questions
Which workflows are public-facing?
Which APIs are externally reachable?
Which identity systems are connected to external services?
Where is human review a bottleneck?
What data is publicly scrapeable?
2 of 5Ambient Threat
Who is learning or probing it faster than we are?
Y — Adversarial Pressure
Probe questions
What does anomalous traffic look like versus normal demand?
Are there repeated edge-case submissions we cannot explain?
What is the ratio of ambiguous to clearly legitimate inbound?
Is the support channel showing patterns that suggest scripted contact?
Are we seeing identity mismatches that cluster in ways fraud rings produce?
3 of 5Ambient Breach begins
What can we no longer classify confidently?
Z — Classification Failure
Probe questions
What percentage of decisions require manual escalation?
How often is the outcome of an appeal the reversal of the original decision?
Where is the exception queue growing fastest?
What does the audit uncertainty rate look like over the last 90 days?
Are there categories of request where confidence has dropped below an acceptable threshold?
4 of 5The gasket
How much could we durably repair per unit time if the queue never emptied?
μ — Durable Repair Capacity
Probe questions
What is the median time to correct a misclassified record?
How long does it take to notify an affected person?
What is the current investigation-to-analyst ratio?
Do we have surge capacity, or is repair dependent on backfilling staff?
What did throughput actually reach the last time the queue was deep — and did those closures stay closed?
5 of 5Breach is forming
Is arrival outrunning the reserve our criticality demands?
ρ = Z/μ > 1/K
Probe questions
Plot ambiguity arrival against demonstrated durable capacity over the last 30 days.
Is utilization ρ trending above the reserve 1/K? Above 1.0?
Is the trend line accelerating?
What would have to change in the next 30 days to bring utilization back inside the reserve?
Enter values into the ABT calculator and watch the stage indicator.
After the five questions
Enter your C_f, A_l, T_d, and R_c estimates into the interactive ABT calculator to get a live stage readout.