Org Security Forces

AX.GIL.13.06 - Threats: Org Security Forces

This section provides dedicated stat blocks for each org's institutionalized security apparatus, the forces the party is most likely to encounter when an operation goes wrong inside an org-controlled space. These are not rogue actors or grey-market operators; they are credentialed, trained, institutionally backed security personnel doing exactly what their org employs them to do.

Design principle for all org security forces: The security team is never the final problem. Behind every security response is an institutional system, a Certification Flag filing, an Infrastructure Override, a Shadow-Census update, a Covenant that locks down the party's options. The guards with guns are the leading edge of something much larger. Encounters with org security should escalate through institutional channels even as they resolve through physical ones.

Pilot entries: All vehicle-capable security forces carry Pilot values per the AX.GIL.13.08 integration standard. Specialist driver roles (marked *) receive explicit values; general security receives default (Speed ÷ 2, round down, minimum 1D).

Org Security Forces

LGT LINDEN GUARD RESPONSE TEAM

Linden-Green Trust, Arcology and Personnel Security

Tier: Standard–Elite | Role: Protection of LGT facilities, arbitration proceedings, and credentialed personnel

The Linden Guard's presence in a scene changes the encounter's legal register immediately. These are not contracted security guards; they are credentialed LGT officers whose every use of force creates an auditable legal record. The party's actions against them are not merely physical events; they are Accord violations generating automatic arbitration proceedings.

This makes fighting a Linden Guard response team one of the most structurally expensive things the party can do in the IL, even if they win.

Response Trigger: Unauthorized entry to an LGT Arcology or facility, interference with an active arbitration proceeding, physical threats to a credentialed LGT representative, or an Axiomatic Injunction that the party has openly violated.

LINDEN GUARD (Standard)

Front-line facility security. Calibrated force, legal awareness, strong physical baseline.

Typical Profile: - Body 4D, Speed 2D, Wit 2D - Key Talents: Strike (Body) 3D, Fortitude (Body) 3D, Persuade (Wit) 2D - Pilot: 1D (default, Speed 2D ÷ 2) - Stage 1 Perk: Cover - Equipment: Tactical Suit & Credstick (+1 Armor; facility access credential), standard LGT sidearm, light baton

Combat Behavior: Linden Guards do not initiate physical engagement without issuing a formal verbal warning that constitutes a legal notice. After the warning, they respond with minimum necessary force, targeting disarmament and restraint over lethality. They use Cover for adjacent allies as a reflex, not a decision. When a fight is clearly lost, they withdraw, file a report, and the institution responds.

Encounter Notes: The Credstick's dual function (payment instrument / security credential) is worth remembering. A Guard who reaches for their Credstick during a confrontation may be filing a credential check, calling in their position to the Arcology's monitoring system, or, if cornered, using it as a close-quarters impact weapon. Parties that misread the gesture get the third option unexpectedly.

LINDEN GUARD SENIOR OFFICER (Elite)

Command-tier Guard. The Arbiter's shadow, keeps the legal machine running while the lawyers talk.

Typical Profile: - Body 4D, Speed 3D, Wit 3D - Key Talents: Strike (Body) 3D, Fortitude (Body) 3D, Persuade (Wit) 3D, Lore (Wit), Accord Protocols 2D - Pilot: 1D (default, Speed 3D ÷ 2, round down) - Stage 2 Perk: Absorb Impact - Equipment: Tactical Suit & Credstick, LGT sidearm, encrypted comms direct to on-call Arbiter

Combat Behavior: The Senior Officer's Persuade investment pays off here; they spend their opening Turn attempting to de-escalate through formal declaration of the situation's legal consequences. ("You are currently in violation of Article 14 of the Linden-Green Accords. I am authorized to use physical force to enforce compliance. Please consider whether that is how you want this to proceed.") Parties that call this bluff discover it isn't one. In physical engagement, the Senior Officer prioritizes the highest-threat party member and absorbs damage to keep their team functional.

Encounter Notes: The Senior Officer's encrypted Arbiter comms is the encounter's real escalation vector. If the party does not neutralize communications capability in the first two rounds, an on-call Arbiter is now informed. The Arbiter issues an Axiomatic Injunction within the scene, no roll required, since it's a procedural right. The party's options narrow even as the physical fight continues.

LINDEN GUARD DEPLOYMENT PROFILE: Typical response: 4–6 Standard Guards + 1 Senior Officer. Vehicle: LGT-marked Standard Ground Vehicle (Speed Rating +2D; Structural Health 30; Armor 1). - Vehicle Driver: Pilot 2D (dedicated patrol driver, above default due to regular vehicle assignment) - Maximum escalation: Additional 6 Standard Guards + 2 Senior Officers + on-call Arbiter issuing remote Injunctions, within 15 minutes of initial response

BVHI SITE SECURITY, VAULT RESPONSE

Brak-Varr Heavy Industries, Deep Vault and Infrastructure Protection

Tier: Standard–Elite | Role: Protection of BVHI Deep Vaults, active construction sites, Clancorp personnel, and critical infrastructure access points

BVHI's security philosophy reflects the Clancorp structure: site security is a Debt of Honor obligation, not a contracted service. The Dwarves protecting a Deep Vault have a professional and familial relationship with what they're protecting. They are not clock-punching employees; they are Clancorp members for whom a security breach is a personal dishonor. This produces security personnel who are significantly more motivated than comparable market-rate contractors.

It also produces personnel who will absolutely use the terrain against the party. They built this place, or trained with the people who did. They know every access point, every load-bearing element, and every place where a well-placed Seismic Slam would bring the corridor down on an intruder.

Response Trigger: Unauthorized access to a BVHI Deep Vault or restricted facility, interference with an active construction project, threats to Clancorp members, or violation of an Infrastructure Override order.

BVHI SITE GUARD (Standard)

Facility protection, shift rotation, access control. Knows this building better than the blueprints do.

Typical Profile: - Body 4D, Speed 2D, Wit 2D - Key Talents: Strike (Body) 3D, Fortitude (Body) 3D, Athletics (Body) 2D - Pilot: 1D (default, Speed 2D ÷ 2) - Stage 1 Perk: Cover - Equipment: BVHI heavy baton (Song-Smithed alloy, counts as Restricted tier), light armor, BVHI facility access credential

Combat Behavior: BVHI Site Guards fight as a unit in BVHI-constructed spaces. They use environmental knowledge to control access, sealing blast doors, directing fights toward corridors where superior Body values neutralize tactical maneuvering, and using the structure's acoustic properties (Dwarven construction means sound carries in specific ways) to coordinate without electronic communications. Against Harmonic practitioners, they attempt to force close engagement where Touch-range requirements become a liability for the party rather than an asset.

Encounter Notes: The heavy baton's Song-Smithed alloy composition gives it a subtle additional function, a Seismic Engineer in the response team can use it as a makeshift Tectonic Harmonic conduit, allowing Song-Smith effects at melee range without the standard Focus requirement. The party may not know this until it happens.

BVHI VAULT-RESPONSE SPECIALIST (Elite)

Called in when the standard guards aren't enough. Former Vault-Security Auditor, knows every way in because they wrote the assessment report.

Typical Profile: - Body 3D, Speed 4D, Wit 3D - Key Talents: Notice (Wit) 4D, Athletics (Body) 3D, Reflexes (Speed) 3D, Technical (Wit) 3D - Pilot: 2D (default, Speed 4D ÷ 2) - Stage 2 Perk: Deep Knowledge - Equipment: BVHI Breaker-Kit (repurposed for adversarial use, identifies party's infiltration method and likely next move), light armor, BVHI sidearm

Combat Behavior: The Vault-Response Specialist does not fight the party directly; they analyze how the party got in and use that analysis to anticipate what they'll try next. Deep Knowledge (once per scene) allows the Specialist to ask the GM one precise question about the party's capabilities or next action, framed as professional assessment: "What method did this party use to bypass the access point?" On a detection encounter, the Specialist's BVHI Breaker-Kit passively provides +1D to Notice rolls tracking the party's movement through BVHI-built architecture. They are the investigation layer above the standard guard response.

Encounter Notes: The Specialist's most dangerous capability is their knowledge of BVHI construction standards. They know that the party's Halfling Burrow-State capability (if present) doesn't work through BVHI-grade deep-construction alloys. They know the Song-Smithed walls in this corridor resonate at a frequency that makes Tectonic Harmonic Foundation effects significantly harder to establish. They use this knowledge to steer the fight toward ground where their team's advantages are maximized.

BVHI SECURITY DEPLOYMENT PROFILE: Typical response: 6–8 Site Guards + 1 Vault-Response Specialist. Vehicle: BVHI Heavy Transport (Speed Rating +1D; Structural Health 40; Armor 2). - Transport Driver: The BVHI Convoy Operator profile (see AX.GIL.13.01) applies; Pilot 3D (specialist, Transit Division trained) - Deep Vault escalation: Tectonic Harmonic Seismic Engineer joins response team (Body 4D, Tectonic Harmonics 3D, Tuning Fork, Stage 2 Infrastructure Override)

NTC CONTAINMENT CELL

Nexus Technomancy Collective, Network Security and Anomalous Entity Response

Tier: Elite | Role: Response to unauthorized network access, rogue Logic-Viruses, bound hardware anomalies, and Plane-Walker incursions into NTC infrastructure

The NTC's physical security arm is small; they rely on automated defenses and the Net's Sentry Construct layer for most threat response. When the NTC deploys a physical Containment Cell, the situation has exceeded what automated response can handle, and the Collective has made a deliberate decision to send people rather than processes.

NTC Containment Cells are technically composed, not combat-heavy. They carry Faraday Field-Generators. They deploy Logic-Binding countermeasures. They approach problems as systems failures requiring diagnosis and correction, not enemies requiring defeat. This makes them more dangerous in information-asymmetric situations (they know more than the party about what is actually happening) and less dangerous in direct physical confrontation than an equivalent NVS or BVHI response team.

Response Trigger: Unauthorized physical access to NTC relay infrastructure, a rogue Logic-Virus reaching physical infrastructure impact, a bound hardware anomaly (AX.GIL.13.03) exceeding containment parameters, an unauthorized Plane-Walker detected in NTC Black Site architecture, or a Certification Flag escalation that reaches Priority status.

NTC CONTAINMENT TECHNICIAN (Standard)

Infrastructure assessment and containment deployment. The first team through the door when the alarm is a network alarm.

Typical Profile: - Body 2D, Speed 3D, Wit 4D - Key Talents: Technical (Wit) 3D, Attunement (Wit) 3D, Notice (Wit) 3D - Pilot: 1D (default, Speed 3D ÷ 2, round down) - Stage 1 Perk: Resonance Read - Equipment: Faraday Field-Generator (contains bound spirits on contact; +1D Logic-Binding vs contained entities), NTC-standard sidearm, Containment credentials

Combat Behavior: Containment Technicians do not initiate combat without attempting technical assessment first. On entering the encounter space, they deploy Faraday Field-Generators to establish a containment perimeter, this is standard procedure, not a tactical decision, which means they do it even when the party is watching. Within an active Faraday Field, Logic-Binding rolls against bound spirits (or any Technomancy practitioner the NTC has classified as an anomalous entity) gain +1D. In direct physical combat, Technicians are defensive rather than offensive, they use terrain and the Generator's field to limit the party's movement.

Encounter Notes: The Resonance Read perk means every Containment Technician passively knows when a Harmonic Tradition has been used in the space within the last 24 hours. Entering an area where the party has been doing Technomancy work, they immediately know a practitioner was here and which Tradition was used. This gives them informational advantage before a single roll is made.

NTC HARDWARE EXORCIST (FIELD RESPONSE) (Elite)

Deployed when the problem has a face, or the NTC thinks it does. The practitioner who decides whether the anomaly is a thing or a who.

Typical Profile: - Body 2D, Speed 3D, Wit 5D - Key Talents: Technomancy 4D, Attunement (Wit) 4D, Notice (Wit) 4D, Technical (Wit) 3D - Pilot: 1D (default, Speed 3D ÷ 2, round down) - Stage 3 Perk: Spirit Severance - Equipment: Faraday Field-Generator (practitioner-grade, larger field radius than standard; extends to Near range), Neural-Jack (standard NTC issue), encrypted NTC comms

Combat Behavior: The Hardware Exorcist is the Containment Cell's resolution capability, not their combat arm. They assess first, using Deep Knowledge (once per scene) to determine the specific nature of the anomalous entity before determining the appropriate response. Spirit Severance (Stage 3, Full Rest recovery) is deployed only after assessment confirms the entity type and the appropriate outcome (Dispersal / Containment / Release). In physical combat, the Exorcist does not engage directly, they remain at Near range, maintaining the Faraday Field while the Technicians manage physical engagement.

The Zero-Day Soul Question: A Hardware Exorcist with sufficient experience has begun noticing things about bound spirit behavior that conflict with the NTC's official position. This Exorcist may be one of them. Their response to a Zero-Day Soul encounter (see AX.GIL.13.02) is not automatic Dispersal; they may pause, assess, and choose Containment or even Release over institutional mandate. This is a roleplay pressure point that can turn an adversarial encounter into a negotiation.

Encounter Notes: Spirit Severance against a party practitioner is technically possible, the Exorcist could classify a Human Plane-Runner with Backlash fragmentation as a "partially-Net-integrated anomaly" and attempt Severance. This is almost certainly not sanctioned and they know it. Deploying that threat creates legal exposure for the NTC. But in a scene where the party has done enough damage to NTC infrastructure, the Exorcist may have decided they will sort out the paperwork later.

NTC CONTAINMENT DEPLOYMENT PROFILE: Typical response: 2–3 Containment Technicians + 1 Hardware Exorcist (Field Response). Transit: NTC Network Operations Vehicle (Controlled tier, NTC Network Suppressor, Pilot-Assist System; Speed Rating +2D; Structural Health 25; Armor 1). - Vehicle Driver: Pilot 2D (above default, NTC technical personnel receive vehicle competency training as standard) - Escalation (anomaly exceeds field containment): Remote deployment of Containment Plane-Runner (see AX.GIL.13.05) from NTC facility; arrives in 1D3 Turns (Net) and 1D3 × 10 minutes (physical)

HIA COUNTER-SURVEILLANCE TEAM

Hearth-Net Intelligence Agency, Field Counter-Intelligence and Operational Security

Tier: Elite | Role: Identifying and neutralizing threats to HIA operational security, active surveillance of priority targets, and counter-operations against parties who have demonstrated knowledge of HIA methods*

The HIA's physical security response is almost entirely a fiction. When an HIA Counter-Surveillance Team deploys, the party does not see security operatives arriving; they see what appears to be a series of unrelated coincidences that gradually reduce their operational options to zero. A vendor who was going to help them has received an unexpected call and is unavailable. The route they planned uses a transit corridor that has been cordoned for "maintenance." The safe house has new neighbors who seem to work unusual hours.

The physical confrontation, if it comes, is the HIA's failure condition, something they deploy only when the softer approaches have been exhausted or the timeline has collapsed. A Counter-Surveillance Team that openly fights the party has lost the information-asymmetry advantage that defines HIA operations.

Response Trigger: Unauthorized access to Hearth-Net infrastructure, detection of surveillance on HIA personnel or assets, operational activity by a party that has demonstrated awareness of HIA methods, or a Shadow-Census update that flags the party as a Priority target.

HIA SIGNAL SCRYER (FIELD) (Elite)

The invisible layer. Monitoring everything before the team commits to anything.

Typical Profile: - Body 2D, Speed 3D, Wit 4D - Key Talents: Marginal Harmonics 3D (Loaded Die), Attunement (Wit) 4D, Notice (Wit) 4D, Technical (Wit) 3D - Pilot: 1D (default, Speed 3D ÷ 2, round down) - Stage 1 Perk: Resonance Read - Equipment: HIA signals monitoring kit (Classified tier, detects encrypted communications, cross-references against HIA intercept database), Loaded Die, concealed sidearm, multiple cover identities

Encounter Role: The Signal Scryer never appears in a physical confrontation; they are always elsewhere, monitoring. Their presence in the scene is felt through information: the Marginal Operative arrives knowing the party's planned route, their communication patterns, and (if Marginal Prediction is active) what they are most likely to do next. The Scryer is the reason the encounter feels like the HIA was already there when the party arrived.

The Attunement Cross: The Scryer's Resonance Read gives them continuous awareness of Marginal Harmonic activity near their monitoring position. If the party has a Marginal Harmonics practitioner, the Scryer knows the precise moment they activate a Tradition. This creates a counter-intelligence loop, the party's own HIA-trained operative is being tracked by HIA monitoring the way any other Marginal practitioner would be tracked.

HIA MARGINAL OPERATIVE (COUNTER-INTELLIGENCE) (Elite)

The point of contact. The face the party sees when the HIA decides they've been watching long enough.

Typical Profile: - Body 2D, Speed 4D, Wit 4D - Key Talents: Marginal Harmonics 4D (Loaded Die), Stealth 4D, Notice 4D, Deception 4D, Attunement (Wit) 3D - Pilot: 3D (specialist, HIA field trained; vehicle operation standard field competency) - Stage 2 Perk: Shadow-Census Pull - Equipment: Loaded Die (+2D Nudge and Obscurement; once per scene force a re-roll as Free Action), concealed sidearm, multiple clean identity packages, HIA Ghost Vehicle (assigned for operational use)

Combat Behavior: The Marginal Operative does not seek physical combat, every Turn of open confrontation is a Turn they are not controlling the information environment. In physical engagement, they use Obscurement to suppress targeting (Stealth + Marginal Harmonics vs party Notice) and Nudge to impose Disadvantage on the party member most likely to land a decisive hit. They are extracting toward an exit throughout. Their combat goal is to create enough uncertainty that the party cannot confirm what they saw and cannot act on it institutionally.

The Loaded Die: Used proactively rather than reactively. The Marginal Operative does not save the Loaded Die's once-per-scene free re-roll for emergencies; they use it at the moment it will most disrupt the party's momentum. Applying it to the party's most significant roll of the opening exchange (a planning roll, a first action that would determine the encounter's trajectory) is more valuable than using it to prevent a hit they can afford to take.

Encounter Notes: If the party has an NTC Certification Flag active against them, the Counter-Surveillance Team knows about it, Shadow-Census Pull integrates across NTC monitoring. If the party has an active LGT Injunction against them, the Marginal Operative knows that too. The HIA's advantage in this encounter is that they have read all the institutional paperwork already.

HIA COUNTER-SURVEILLANCE DEPLOYMENT PROFILE: Active deployment: 1 Signal Scryer (never visible), 1–2 Marginal Operatives. No marked vehicles, the HIA Ghost Vehicle is indistinguishable from civilian traffic. No standard physical confrontation profile, if the encounter reaches open confrontation, the HIA considers the operation a partial failure and files it accordingly. - Vehicle Driver: Marginal Operative (see above); Pilot 3D (specialist) - Escalation (party becomes extraordinary threat): HIA Logistics Ghost (see AX.GIL.13.01) joins operation; extraction and exfiltration of key assets begins; HIA files Shadow-Census update flagging party as threat-tier priority

NVS STRIKE CREW

New-Venture Syndicate, Rapid-Response Security and Commercial Enforcement

Tier: Standard–Elite | Role: Protection of NVS commercial operations, enforcement against parties interfering with Syndicate commercial activity, and rapid deployment to secure time-sensitive commercial objectives*

The NVS's security philosophy is the Rapid-Response Merc philosophy writ large: the engagement window is the asset, not the sustained engagement. NVS Strike Crews are not attempting to win a prolonged fight; they are attempting to make the first eight seconds so decisive that there is no need for a ninth.

This produces encounters that feel nothing like LGT or BVHI security responses. There is no warning period. There is no verbal de-escalation. The NVS files the legal paperwork after. The Strike Crew's job is to create the physical conditions under which the paperwork is favorable.

Response Trigger: Interference with an NVS commercial operation or active deal, physical threats to NVS personnel, unauthorized access to NVS logistics infrastructure, a Commercial Flag exceeding Priority threshold, or a Grey Market Syndicate operation that has moved outside NVS-tolerated parameters.

NVS RAPID-RESPONSE OPERATIVE (Standard)

Alpha-strike infantry. All Body, no patience, complete professional commitment to the opening eight seconds.

Typical Profile: - Body 4D, Speed 3D, Wit 2D - Key Talents: Strike (Body) 3D, Athletics (Body) 3D, Fortitude (Body) 3D - Pilot: 1D (default, Speed 3D ÷ 2, round down) - Stage 1 Perk: Adrenaline Surge (Human Lineage Perk, counts as Stage 1 for deployment purposes) - Equipment: Tactical Burn Suit (+1 Armor; acceleration assist: +1D on all rolls made with Adrenaline Surge's additional Primary Action), NVS-standard combat sidearm, flashbang (1 use, Speed Save vs Threshold 3 or Stunned 1 Turn)

Combat Behavior: The Adrenaline Surge Lineage Perk provides an additional Primary Action on declaration. The Tactical Burn Suit makes that additional action +1D better than normal. In the opening Turn, an NVS Rapid-Response Operative uses both Primary Actions: one to close distance, one to strike the highest-threat target. The flashbang is deployed if the party has a Harmonic practitioner visible, disrupting Tradition use in Turn 1 is worth the expenditure.

Encounter Notes: NVS Rapid-Response Operatives are terrifying in Turn 1 and significantly less dangerous by Turn 3. The Alpha-Strike model means their threat is front-loaded: if the party survives the opening without critical casualties, the encounter becomes more manageable. The question is whether the party's Turn 1 defensive positioning was good enough to absorb the opening surge.

NVS STRIKE CREW LEAD (Elite)

Former NVS Rapid-Response Merc profession (AX.GIL.07.05). The crew exists to execute what the Lead decides.

Typical Profile: - Body 4D, Speed 4D, Wit 3D - Key Talents: Strike (Body) 4D, Athletics (Body) 3D, Fortitude (Body) 3D, Tactics (Wit) 2D - Pilot: 3D (specialist, NVS Strike-trained; Focus: Strike Runner) - Stage 2 Perk: Scope of Engagement (Mercenary template, explicit combat authority for the current operation) - Equipment: Tactical Burn Suit (enhanced, Suit reservoir at full charge; +1D on Adrenaline Surge additional action), Stim-Pack (+2D on one Harmonic roll if applicable; not relevant here unless the Lead is a Human practitioner), NVS combat weapon (Controlled tier), encrypted NVS tactical comms

Combat Behavior: The Strike Crew Lead's Tactics investment is the crew's force multiplier. As a Free Action, the Lead can issue a tactical instruction that grants +1D to one ally's next roll in the same Turn, stacking with Adrenaline Surge for the ally. In vehicle encounters, the Lead drives the Strike Runner (Pilot 3D; Strike Runner profile: Speed Rating +3D, Structural Health 20, Armor 0, Forward Hardpoint). In foot encounters, the Lead positions to create crossfire angles between the Strike Runner team and flanking Operatives.

Encounter Notes: The Strike Crew Lead's Tactics investment makes the crew act as a coordinated unit rather than five individuals swinging simultaneously. The party should feel the coordination, each NVS Operative acting on a Lead instruction creates a sequence where the party's defensive actions in one Turn set up a disadvantageous position for the next. Disrupting the Lead (Prone, Stunned, incapacitated) reduces the crew to uncoordinated individual threats, still dangerous, but no longer compounding.

NVS STRIKE DEPLOYMENT PROFILE: Typical response: 4–6 Rapid-Response Operatives + 1 Strike Crew Lead. Vehicles: 1–2 NVS Strike Runners (Speed Rating +3D; Structural Health 20; Armor 0; Forward Hardpoint). - Strike Runner Drivers: Pilot 3D each (explicit specialist, NVS Strike-trained; see NVS Rapid-Response Merc profile in AX.GIL.13.01) - Escalation (commercial operation at critical risk): Additional Strike Runners deployed; NVS Syndicate Fixer arrives at scene to manage commercial consequence simultaneously with physical response; Kinetic Auditor monitoring team assesses collateral Entropy impact

Security Force Comparison Reference

Org	Physical Threat Level	Institutional Escalation	Primary Danger	Vehicle Capability
LGT Linden Guard	Moderate	High (Injunctions, arbitration)	Legal record consequences	Patrol vehicle, standard
BVHI Vault Response	High	Moderate (Infrastructure Override)	Terrain control, environmental knowledge	Heavy transport, armored
NTC Containment Cell	Low-Moderate	High (Certification Flags, Net deployment)	Information asymmetry, Spirit Severance	Network Ops vehicle
HIA Counter-Surveillance	Low (overt) / High (covert)	Extreme (Shadow-Census, deniable ops)	They already know everything	Ghost vehicle, unmarked
NVS Strike Crew	Very High	Low (commercial complaints filed after)	Alpha-strike Turn 1 damage	Strike Runner, fast and fragile
## Design Notes

Each org's security philosophy extends their institutional identity. LGT security creates legal records; BVHI security uses the terrain it built; NTC security is primarily informational; HIA security is indistinguishable from bad luck until it isn't; NVS security is pure forward momentum. These are not interchangeable. A party that learns how to handle LGT security has not learned how to handle NVS security, the encounter design principles are entirely different.

The escalation column matters more than the stat block. An NVS Strike Crew is the most immediately dangerous security response, but the LGT's institutional escalation is the most dangerous long-term consequence. Design encounters with the full escalation chain in mind: what does the party's org relationship look like after the security encounter, not just during it?

Security forces are not terminal encounters. A security force that the party defeats cleanly still generated a report, filed a flag, or, in the HIA's case, updated a Shadow-Census entry. The party winning a fight against an NTC Containment Cell means the NTC knows their harmonic signatures, their operational methods, and the network they were running. The Cell lost the physical engagement; the Collective is better informed for the next one.