The Authentic Proxy - Decipon Insights

The Number That Matters

A Washington Post investigation published on June 21, 2026 drew on more than 25,000 pages of documents — memos, directives, email instructions — spanning Tulsi Gabbard’s first two terms in Congress, from 2011 to 2017.

The reporter compared Gabbard’s remarks in 32 television interviews between 2014 and 2016 against the talking-point memos that preceded them. In 24 of those 32 interviews, she used the wording in the memos “almost verbatim.” In the remaining eight, she used different phrasing but advanced identical ideas.

The memos came from email addresses on the Nine Isles domain, the designated correspondence infrastructure for the office of Chris Butler — 78-year-old founder of the Science of Identity Foundation, a Hawaii-based religious organization that former members describe as a cult. Butler had been Gabbard’s spiritual teacher since childhood.

This is not a story about religion or betrayal or cult psychology. It is a story about a specific influence architecture — one of the most effective and underexamined in the operational catalog. The architecture has a name. Understanding how it works is more important than any single case study.

What “Authentic Proxy” Means

There is a spectrum of covert influence methods, and they are not equally powerful.

At the low end: fake accounts posting scripted content. Sockpuppets — manufactured personas amplifying manufactured positions. These are detectable through behavioral analysis, account creation patterns, coordinated posting signatures. They are the workhorse of low-budget influence campaigns. Their weakness is the same as their strength: everything about them is constructed, which means everything can be forensically examined.

At the high end: real people with real credibility delivering authored content as authentic personal expression.

The authentic proxy is harder to construct than a bot network. It requires identifying a real person who has already built genuine trust with a target audience — credibility that cannot be manufactured, only accumulated over time through behavior. It requires maintaining an influence channel to that person that remains invisible to observers. And it requires the person’s own performance of authenticity to be genuine enough that the audience cannot tell the difference between their real beliefs and their authored ones.

When it works, the authentic proxy is nearly undetectable. The face is real. The audience’s relationship with the face is real. The trust is real. Only the origin of the speech is false.

Detecting a fake account requires behavioral analysis. Detecting an authentic proxy requires the script.

How the Architecture Functioned

The Gabbard/Butler operation had three structural layers, each reinforcing the others.

Layer one: the directive channel. Memos flowed from Nine Isles email addresses to Gabbard or her staff. They contained specific instructions: which legislation to propose, what positions to take, how to conduct herself on camera. A 2014 memo pressed Gabbard to propose legislation penalizing countries whose citizens had fought for the Islamic State. The next day, Gabbard released a statement on the issue. A week later, she introduced a bill.

A tweet was sent to her office via email. She posted it the following day, at the time instructed.

This is not a policy advisor suggesting themes. This is a remote operator issuing execution-level instructions with observable compliance. The gap between memo and action — measured in hours, not weeks — is the operational tell. It narrows to the point where it looks less like political deliberation and more like command execution.

Layer two: the authentic delivery. Gabbard performed those positions as her own. Her affect, her conviction, her on-camera manner reflected genuine passion, not performed compliance. This is what makes the architecture sustainable over years. If she had read the memos coldly and performed poorly, someone would have noticed. Instead, she inhabited the positions — probably because, by the time she articulated them, she believed them. That is what sustained exposure to a closed information environment produces. The authentic proxy does not need to be consciously complicit. She needs to believe what she says. The architecture arranges for her to believe the right things.

Layer three: synthetic amplification. Documents reviewed by the Post showed that dozens of fake social media accounts defended and boosted Gabbard online during her congressional years. The accounts displayed false names and biographies. Avatar photographs were copied from elsewhere on the internet. Some of the same Science of Identity Foundation members who received the memos were involved in running these accounts.

The three-layer structure is coherent as an influence operation. The directive channel provided the content. The authentic delivery made it credible. The fake amplification made it look like grassroots support. Observers saw a popular congresswoman expressing her genuine views and accumulating real support. None of that was quite what it appeared.

Why the Face Being Real Is the Critical Variable

The most common framing of covert influence operations focuses on fake accounts, bot networks, and manufactured content. Regulators and platform trust-and-safety teams have built substantial infrastructure to detect exactly this. Behavioral patterns, account age, posting velocity, coordinated inauthentic behavior — these are the metrics the detection systems are optimized around.

The authentic proxy evades all of this.

The face is a real person who has been building genuine credibility for years. Her account is real, old, and authentically human in every behavioral pattern. Her content is not coordinated across multiple accounts — it is singular, first-person, and stylistically consistent. The audience’s emotional investment in her is genuine. Platform detection systems looking for networks of fake accounts will not flag her.

The sockpuppet network that amplified her might be detectable. But it amplified a real account. Detection of the fake accounts does not reveal the mechanism by which the real account was operated.

The Gabbard case is analytically interesting precisely because both layers are present: real face with authored speech, and fake network amplifying the real face. But the more sophisticated layer — the one that ran for six years without detection — was not the fake accounts. It was the hidden-principal channel running through the authentic one.

The Defense Architecture

When Gabbard’s office responded to the Washington Post, her chief of staff called the investigation “a blatant example of anti-Hindu bigotry.”

This response deserves attention as a structural feature of the operation, not just a political statement.

The Science of Identity Foundation is a Hare Krishna offshoot. Gabbard’s Hindu identity is genuine and has been central to her public persona — she was the first Hindu elected to Congress. Any investigation that touches on her religious community can be characterized as targeting her religion. The accusation is available as a defense regardless of the content of the evidence.

This is a built-in shield. The same social infrastructure that delivered the influence — the religious community — generates the ready-made counter-narrative when the operation is exposed. To investigate the memos is to be accused of attacking Hindu practices. To publish the evidence is to face allegations of religious discrimination.

The defense does not need to be persuasive to be effective. It only needs to provide a competing frame that some observers will adopt, muddying the story, reducing the share of the audience that engages seriously with the documentary evidence. Twenty-five thousand pages of memos become a “failed extortion attempt” from a disgruntled former member. The numbers — 24 of 32 interviews, verbatim — become collateral damage in a culture-war framing about religious bigotry.

This is not coincidental. Religious communities, ethnic communities, and politically marginalized communities provide both deep loyalty to their members and ready-made grievance narratives when those members are scrutinized. Influence operations built around such communities come with the defense installed from the beginning.

The Resignation Was Not Coincidental

Two days after the Post informed Gabbard it would proceed with the story, her resignation as Director of National Intelligence was announced.

The timing is worth marking without over-reading it. There are many possible reasons for a DNI resignation. The proximity of the announcement to the publication notice does not establish causation.

But the sequence tells us something about what the exposure of an authentic proxy operation costs the principal. Gabbard as DNI was not the same asset as Gabbard in Congress — she occupied a different position, with different access and different institutional authority. The publication of the memos, if widely credited, fundamentally changes the meaning of that authority.

A DNI whose policy positions are traceable to external scripted memos is a different kind of security concern than one acting on independent judgment. The value of the proxy — to the principal, and to the institution she occupied — depends entirely on the authenticity being credible. Once the memos are public, the authentication is broken. The architecture doesn’t survive exposure. The face is still real. The trust the audience placed in it is not recoverable.

What This Case Establishes

The Gabbard/Butler investigation is significant not because it proves everything alleged — that determination belongs to investigators, not analysts — but because it is one of the most documented cases in public record of a specific influence architecture operating at scale, in a democratic political context, over an extended period.

The evidentiary bar it clears is unusual: not claims about influence, but documentary proof of directive flow, plus empirical correlation between that flow and public output (24/32 interviews, verbatim), plus an associated fake amplification network. That combination of documentary + statistical + network evidence is what makes it analytically useful.

What it establishes:

Real credibility cannot be manufactured, but it can be rented. Six years of congressional credibility, built through genuine constituent service and public performance, became the delivery vehicle for someone else’s positions. The credibility was Gabbard’s. The content was not.

Verbatim compliance is the operational signature. Influence produces paraphrase. Direction produces verbatim. The 24/32 finding is not a measure of influence — it is a measure of execution fidelity. Someone being advised produces variation. Someone receiving and executing a script does not.

The defense mechanism is architectural. It is built into the community structure that makes the operation possible. The same feature that makes the proxy credible — genuine community membership — makes the investigation into the proxy attackable as an attack on the community.

Exposure requires the document. You cannot detect this architecture from the outside through behavioral analysis alone. The output looks identical to authentic political expression, because the face producing it is authentic. Detection requires access to the directive channel itself — 25,000 pages of memos, obtained from a former member.

That is the operational implication. The authentic proxy is not vulnerable to the detection methods currently deployed at scale. It is vulnerable only when the script leaks.

This article is part of Decipon’s Manipulation Breakdowns series, examining specific influence operations through the Influence Tactics Protocol.

Sources: