Canary Trap
Updated 2026-08-05
INTRODUCTION
English translation pending.
CORE DEFINITION
A canary trap works by giving each suspect a distinct variant of a document, differing in a number, spelling or phrasing, so that whichever version appears in public identifies the recipient who released it. The name refers to the canary as a detector rather than to the leak itself. The technique is used for tracing document leaks, testing discretion, and as a deterrent, since those who know variants exist become cautious about passing material on.
SCAFFOLDING EFFECT
Reduce cognitive load
- Mark variants: give each recipient a version carrying a unique and traceable difference. - Read the leak: compare the exposed copy against the variants to identify the source. - Deter by design: let people know variants exist so careless forwarding stops.
Anchor fast decisions
If every recipient holds an identical document, a leak carries no information about its origin. Unique per-recipient differences turn the leaked copy into a fingerprint, so the act of leaking itself supplies the evidence. The method works only if the variants are subtle enough that a leaker does not notice and strip the marker before passing it on.
MINIMUM ACTION
In progress 0/1Practice this model in one real situation:
account_treeGenealogyexpand_more
menu_bookReferencesexpand_more
Source support: Explicit
- en.wikipedia.orghttps://en.wikipedia.org/wiki/Canary_trapverified
PRIVATE NOTES · Only visible to you
SAVED Q&A
ENTRY Q&A · Private saving available
Ask with a clear boundary
thinkingmodels answers from published entry context only.
Your question is sent to thinkingmodels. The answer uses public entry context only.
RELATED MODELS