THREAT CONSTELLATION / STRUCTURAL OBSERVATION
FILE THR-OBS-001 / EMERGING
The Ambient Observer
When infrastructure can sense you without your participation.
参加していない人間まで、インフラが観測できるとき。
A camera sees because it is pointed at you.
A phone tracks because you carry it.
But what happens when the surrounding infrastructure can infer your presence without either?
観測されるために、接続する必要さえなくなる。
OBSERVE THE AMBIENT LAYERFormal definition
The Ambient Observer
Infrastructure that can infer the presence, identity, movement, or characteristics of people who are not actively participating in the system.
システムに能動的に参加していない人間の存在・識別・移動・特性を推定できるインフラ。
Question shift
- What is connected?
- What is exposed?
- What is reachable?
What can be sensed without connecting?
Structural transition
Former model
- CONNECTED USER
- NETWORK TRAFFIC
- OBSERVATION
Observed model
- NON-PARTICIPATING PERSON
- RADIO / ENVIRONMENTAL DISTURBANCE
- NETWORK INFERENCE
- OBSERVATION
Participation is no longer a prerequisite for observability.
観測可能性は、参加を前提としなくなる。
The network is moving from communication infrastructure toward an environmental sensor.
01
research capability
02
potential infrastructure pattern
03
observation question
OBSERVED CAPABILITY
ESTABLISHED SOCIETAL PATTERN
A published sensing demonstration is not the same as ubiquitous Wi-Fi surveillance.
研究上の感知能力と、社会に定着した監視パターンは同じではない。
Signal 01 / OBSERVED
Wi-Fi Can Sense Beyond the Connected Device
wifi · participation required no
Networks are beginning to sense people who are not participating in the network.
- Source fact
- A 2025 CCS study (BFId) showed that unencrypted beamforming feedback from ordinary Wi-Fi 5+ networks can be used to infer identity from how a body disturbs the radio environment. In a 197-person walking study, identification remained highly accurate across walking styles and perspectives. The sensed person need not be the device generating the feedback.
- Why it matters
- Reachability is no longer the only exposure boundary. A body in a radio field can become data even when it is not a client.
- Risk boundary
- This is a research demonstration, not evidence of mass deployment. An observed capability is not yet an established societal pattern.
- Inferred properties
- presence · identity · gait
The occupancy window is now open as a sourced deployment pattern. Watch cellular ISAC, smart-building occupancy products, and whether bystander consent appears as a product problem rather than only a privacy-policy clause.
- Todt, Morsbach, Strufe — BFId: Identity Inference Attacks Utilizing Beamforming Feedback Information (CCS 2025) ↗
- KIT publication record — BFId (197 participants; BFI-based sensing) ↗
- KIT press — The Spy Who Came in from the WiFi: Beware of Radio Network Surveillance! ↗
- ScienceDaily — Ordinary WiFi can now identify people with near-perfect accuracy ↗
Signal 02 / EMERGING
Ordinary Access Points Begin Sensing Occupancy
wifi · participation required no
Environmental sensing is beginning to move from research demonstration into ordinary network equipment.
- Source fact
- IEEE 802.11bf-2025 added WLAN sensing to the Wi-Fi standard. Separately, Comcast began offering opt-in WiFi Motion on existing Xfinity gateways in August 2026: motion is inferred from disturbance in the radio path between a gateway and stationary connected devices. The moving person need not carry a phone. Sensing-capable access points have also been sold as ordinary WLAN equipment. These are parallel facts, not the same product.
- Why it matters
- A household or office access point can register occupancy without a body-worn device. Subscriber opt-in does not settle the bystander question: a guest may be sensed without joining the network.
- Risk boundary
- This is an early deployment pattern, not ubiquitous surveillance. Comcast's feature is opt-in, uses existing gateways rather than 802.11bf as such, and infers motion rather than identity. A ratified sensing standard is not the same as a mass-identification system.
- Inferred properties
- presence · motion · occupancy
Watch cellular ISAC, smart-building occupancy products, and whether bystander consent appears as a product problem rather than only a privacy-policy clause.
Observation layers
A · PARTICIPATION
Must a person join a system before the system can observe them?
- device ownership
- authentication
- active connection
- passive presence
- non-participating subjects
B · SENSING
What can infrastructure infer from environmental disturbance?
- presence
- movement
- gait
- occupancy
- identity
- gesture
Physiological or body-related inference is listed only where a source demonstrates it. This page does not add unshown capabilities.
C · CONSENT
How does consent work when observation is ambient?
- notice
- visibility
- opt-out
- physical boundaries
- shared spaces
- bystanders
This remains an observational layer, not a legal compliance page.
D · INFRASTRUCTURE
When does ordinary infrastructure become surveillance infrastructure?
- routers
- access points
- cellular infrastructure
- radar-like sensing
- smart buildings
- environmental sensors
- edge devices
Relation
- BODY
- PRESENCE
- AMBIENT SIGNAL
- INFRASTRUCTURE
- INFERENCE
- THREAT
Presence ↔ The Ambient Observer ↔ Threat
Quiet questions
Can you be observed by a system you never joined?
一度も参加していないシステムに、観測されうるか。
Can infrastructure detect presence without identity?
インフラは、身元なしに存在だけを検出できるか。
When does sensing become surveillance?
感知は、いつ監視になるのか。
Can physical presence become network data?
身体の存在は、ネットワークデータになりうるか。
What does opting out mean when participation is unnecessary?
参加が不要なとき、退出は何を意味するのか。
Who is the user of an ambient sensing system?
環境感知システムの利用者は誰か。
Who is the subject?
観測されている主体は誰か。
If the infrastructure is everywhere, where does the sensing boundary end?
インフラが遍在するなら、感知の境界はどこで終わるのか。
Connected Observatories
Threat
Non-participation no longer guarantees non-observability.
Exposure
Device reachability is joined by ambient exposure: presence inside a sensing field.
The Supervisory Layer
The Ambient Observer asks what infrastructure can sense without participation. Once agents gain a hardware interface, The Supervisory Layer asks what an authorized autonomous system can physically change. Sensing and acting are complementary.
Presence
FormingPresence itself becomes machine-readable.
Inhabited Internet
FormingA person may become part of the network’s observable environment without becoming a network user.
Body Meaning
The body becomes measurable through environmental effects.
Entangled Society
People, infrastructure and sensing systems become relationally entangled.
Clean Society
Ambient sensing can create institutional blind spots around bystanders who never opted in.
The page observes a transition. It does not claim that networks are secretly watching everyone.