Fake legitimacy / false authority / institutional impersonation
V13 closes the Phase 1 arc by targeting the most sophisticated trust exploit: institutional impersonation. After urgency (V10/V12), fake context (V11), the final pattern is fake legitimacy — messages that look like they're from real institutions.
Fake authority needs pressure. Real authority already has proof.
Trust extended to logos, formatting, and institutional names without verification. People assume the appearance of legitimacy equals actual legitimacy.
Attackers reproduce the visual and contextual signals of real institutions. Logos, formatting, sender names, and urgency combine to create a convincing fake.
The bank text, carrier alert, or government notice they've received that looked completely real. The moment they trusted the format.
Real authority doesn't need you to act on a cold text. Call the institution directly. Don't use the number in the message.
False legitimacy detection. Institutional trust reframe. Moves from trusting appearance to verifying identity independently.
V13 is the Phase 1 closer — fake legitimacy as the culminating threat pattern. Operator applied V13 doctrine in real life when receiving a suspicious Evite text (2026-05-17). V13.4 field manual is a strong performer in the family.