/ˌsaɪkoʊsɪˈkjʊərɪti/ · noun
The protection of individuals and societies from systematic psychological attack — and the discipline of drawing the line between legitimate influence and the deliberate decomposition of a human mind.
Confronting AI-Driven Zersetzung01 · The Term
Cybersecurity protects machines and networks. Information security protects data. No established discipline protects the integrity of the mind itself — the target that every other defence ultimately exists to serve.
States have always sought to persuade, and sometimes to deceive. International practice tolerates a broad spectrum of influence activity directed at populations. But there is a qualitatively different category of operation: the systematic, covert destruction of a specific person's relationships, reputation, livelihood, and sense of reality. History has a name for it, and history has already judged it criminal once. The task now is to draw that line explicitly — before artificial intelligence makes crossing it effortless.
Psychosecurity names both the problem and the field: the study of psychological attack as a security threat, and the assembly of legal, technical, clinical, and doctrinal defences against it.
02 · The Precedent
From the early 1970s until 1989, the East German Ministry for State Security — the Stasi — practised Zersetzung, literally "decomposition." It replaced imprisonment with something quieter: the covert dismantling of a person's life, conducted so that the target could rarely tell what was being done to them, or by whom.
Operational methods included the spreading of fabricated rumours to destroy friendships and careers; the interception and alteration of correspondence; the orchestration of unexplained professional failures; and small, repeated manipulations of a target's home and daily routine designed to induce self-doubt and paranoia. The damage looked like ordinary misfortune. The psychological effects — depression, anxiety, psychosomatic illness, and in documented cases suicide — did not.
After German reunification, these operations were extensively documented from the Stasi's own records and recognised as criminal conduct. Zersetzung is therefore not a speculative harm. It is a studied, archived, and adjudicated method of state psychological abuse — and the historical reference point for everything on this site.
Zersetzung formalised in Stasi directive as a primary method of political repression, replacing overt imprisonment with covert psychological decomposition.
Fall of the German Democratic Republic. Stasi archives are secured and opened; the Federal Commissioner for the Stasi Records begins systematic documentation.
Zersetzung recognised as criminal conduct; victims gain rehabilitation and compensation pathways. The method becomes a paradigmatic case study in state psychological abuse.
Computational propaganda emerges at population scale: bot networks, coordinated inauthentic behaviour, and algorithmic amplification enter public awareness.
Generative and agentic AI mature. Psychological profiling, synthetic media, and adaptive persuasion make individually-targeted operations scalable — the Stasi method without the Stasi's headcount.
The First Psychosecurity Summit convenes to draw the line: a shared taxonomy, ethical redlines, and a declaration grounding AI-driven Zersetzung in existing international law.
03 · The Threat
Zersetzung was a craft: a dedicated team of officers working one target. Artificial intelligence converts it into a capability — automated, adaptive, and able to run many concurrent operations with near-total deniability.
A person's digital footprint permits fine-grained mapping of their fears, attachments, and vulnerabilities — and precise targeting of each.
Fabricated audio, video, and imagery can simulate betrayals, destroy reputations, and corrode trust in recorded reality itself.
Networks of artificial personas can manufacture the appearance of organic social rejection, weaponising a person's own community against them.
Interference with feeds, search results, and recommendations can distort a target's picture of the world without their awareness.
Analysis of relationship networks identifies the few bonds whose breaking causes the greatest psychological damage — and concentrates attack there.
An automated campaign can observe its own effects on the target and adjust in real time. It does not fatigue, lose focus, or develop qualms.
These capabilities are not hypothetical. Elements of them are documented in contemporary hybrid warfare and in coordinated campaigns against researchers, journalists, and public figures. Severe psychological harm from AI systems is now documented even without hostile intent, in the consumer sphere — a floor, not a ceiling, on what deliberate targeting can achieve.
04 · The Spectrum
Not all influence is attack. States conduct — and international practice tolerates — a wide range of information activity. Psychosecurity does not seek to prohibit persuasion. It seeks to name the point at which an operation stops being persuasion at all.
| Band | Character | Assessment |
|---|---|---|
| Public diplomacy & strategic communications | Overt, attributable messaging directed at populations. Intent: inform, persuade. | Legal and expected. Conducted by all states, including democracies. |
| Covert influence & computational amplification | Deniable messaging, synthetic personas, manufactured consensus. Target: populations. Intent: deception at scale. | Ethically contested; increasingly regulated. Still the domain of mass influence. |
| Psychological decomposition (AI-driven Zersetzung) | Systematic campaign against a named individual or defined group, with intent to decompose psychological integrity, relationships, reputation, or sense of reality. | The red line. Prohibited under existing international law; when widespread or systematic, a potential crime against humanity. |
The red line is defined by three factors in combination: target — individual civilians rather than populations; intent — decomposition of a psyche rather than persuasion of a mind; and systematicity — a coordinated campaign rather than an isolated act. AI enablement is what makes the threat urgent; it is the scaling condition, not the boundary of the offence.
05 · The Framework
Naming a harm is necessary but not sufficient. A working framework needs a shared vocabulary, ethical boundaries, thresholds for response, standards of evidence, obligations for industry — and a signable instrument that binds them together.
A classification of cognitive and information operations precise enough for legal application, distinguishing legitimate influence from psychological decomposition.
A graduated scale of operational acceptability — internal safeguards for those who conduct legitimate operations, and a yardstick for assessing adversary conduct.
Consensus criteria for when cognitive attack merits state-level response, bridging the gap between incident detection and policy action.
Evidence standards for identifying and responding to cognitive attacks — forensic indicators, confidence levels, and standards of proof for each response.
Pathways preventing commercial AI capabilities from becoming cognitive weapons: safety by design, responsible release, and cooperation with lawful investigation.
The capstone: a signable statement grounding AI-driven Zersetzung in existing international law, with the other five elements annexed.
The framework is being developed through an invited working process and will be published for wider endorsement following the summit. About the summit →
06 · The Law
The claim is deliberately conservative: no new treaty is required to say that the systematic psychological decomposition of civilians is unlawful. What is missing is explicit application — the naming of the conduct within instruments that already exist.
When widespread or systematic and directed against a civilian population or targeted group, pursuant to policy, psychological decomposition may constitute a crime against humanity — as persecution (7(1)(h)) or other inhumane acts causing serious mental injury (7(1)(k)).
When conducted by or with the acquiescence of state officials and inflicting severe mental suffering, such operations may constitute torture or cruel, inhuman, or degrading treatment.
The European Convention protects mental integrity and private life; Article 3's prohibition on inhuman and degrading treatment is absolute.
Until the line is drawn explicitly, enforcement remains impossible and proliferation continues unchecked. Adversaries will not be bound by a framework; that is not its function. Its function is a baseline — an agreed standard against which conduct can be named, measured, and answered, and which disciplines the operations of those who adopt it.
07 · Resilience
A norm names the crime. Resilience denies it victims. Alongside the legal framework, psychosecurity encompasses the proactive defensive floor a society should field.
Standing capability to recognise coordinated psychological operations against individuals — not only population-scale disinformation.
Attribution assistance, evidence preservation, and clinical referral pathways for targeted individuals, whose injuries are real and documentable.
Prebunking and manipulation-literacy: populations familiar with the techniques are measurably harder to use as instruments against a target.
AI systems built so that psychological-targeting misuse is harder, detectable, and costly — accountability engineered in, not bolted on.
08 · The Summit
An invite-only working session convening practitioners, researchers, legal scholars, and policy specialists in late 2026, under the Chatham House Rule, to draft and adopt the Psychosecurity Framework.
This is a working session, not a conference: no panels, no keynotes, no audience. Participation is by invitation. The resulting framework and declaration will be published for wider endorsement. The summit is organised by EURAIO, the European AI & Robotics Organisation, and funded by the Survival and Flourishing Fund.
09 · Reference
10 · Resources
11 · About
Eleanor "Nell" Watson is an engineer, ethicist, and researcher in machine intelligence and AI safety. Author of Taming the Machine and a longstanding voice on the societal impact of advanced AI, she has pioneered research into AI-induced psychological effects and the emerging field of psychosecurity. She convenes this initiative as President of EURAIO, the European AI & Robotics Organisation, a responsible-AI non-profit.
Simona Popa is an entrepreneur and event specialist with expertise in organisational psychology and the delivery of high-impact international forums; she co-directs the summit's design and execution.
The initiative is organised by EURAIO and funded by the Survival and Flourishing Fund, whose support for work on civilisational resilience makes this effort possible. There is no cost to participants or their organisations.
12 · Stay Informed
Occasional announcements on the initiative, the framework's publication, and related research. No noise, and no sharing of your address.
By subscribing you consent to us holding your email address for updates about this initiative. See our Privacy Policy.
13 · Contact
Enquiries, feedback, and collaborative opportunities are welcome — including expressions of interest in the summit and the framework's development.