Narrative Intelligence Glossary

Narrative Intelligence

Where traditional social listening counts mentions and measures sentiment, narrative intelligence asks structural questions: where did this story originate, how is it mutating as it spreads, which actors are driving amplification, and is the apparent momentum authentic? The goal is not a volume count but a map — one that tells analysts where a narrative is, where it is heading, and what forces are moving it.

Narrative intelligence practitioners track three primary signal types: velocity (how fast content is spreading), amplification structure (who is sharing and whether the network shows coordination signatures), and authenticity (whether observed activity reflects genuine human behavior). The combination produces intelligence that is qualitatively more useful than volume-based monitoring in adversarial information environments.

Rolli IQ delivers real-time narrative intelligence across 8 platforms via dashboard and API — scoring every signal for authenticity before it reaches your team.

Coordinated Inauthentic Behavior (CIB)

The term was formalized by Meta's security team in 2018 and is now standard across disinformation research. The 'inauthentic' qualifier is critical: organizations that coordinate openly — like a company promoting its own content through official channels — are not engaging in CIB. What defines CIB is the deception layer, where coordinated activity is presented as independent organic expression.

Behavioral signatures of CIB include synchronized posting windows, shared language templates across nominally independent accounts, anomalous cross-amplification within tight network clusters, and account lifecycle patterns inconsistent with organic growth. Detection is inherently probabilistic — no single signal confirms coordination, but the combination of signals allows analysts to assign confidence levels to observed activity.

Rolli IQ's authenticity scoring detects CIB clusters in real time, flagging them hours before mainstream media pickup. See real examples in our case studies →

Authenticity Score

Rolli IQ's Authenticity Confidence Score weighs five signal categories: posting velocity (is activity patterned like human behavior or automation?), account age and lifecycle (do accounts show organic growth or sudden activation?), network clustering (do accounts cross-amplify each other at rates inconsistent with their apparent audience?), language similarity (do posts share template phrasing?), and cross-platform correlation (is behavior consistent across platforms?).

Scores below 30 indicate high-confidence coordination — the combination of behavioral signals exceeds any plausible organic explanation. Scores above 70 indicate the balance of evidence favors genuine human engagement. The 30–70 range warrants analyst review, as edge cases like synchronized fan communities can resemble coordination signatures without being inauthentic.

Rolli IQ expresses authenticity as a 0–100 float per narrative cluster. The score drives dashboard ALERT/WARN signals and API response fields.

Narrative Velocity

A spike in volume may reflect organic viral spread or coordinated injection. Velocity analysis distinguishes the two: organic stories typically show gradual acceleration as they pass through successive network layers. Coordinated content often shows a near-instantaneous velocity spike as multiple accounts post simultaneously, followed by a brief plateau and decay once the coordinated layer has been exhausted.

Velocity is most useful when combined with authenticity scoring. High velocity paired with low authenticity is the signature pattern of a coordinated narrative injection. High velocity with high authenticity signals genuine viral momentum that warrants a communications response.

Velocity is one of three primary output signals in Rolli IQ alongside momentum score and authenticity confidence.

Social Listening

Social listening tools ingest public content, aggregate it by keyword or topic, and apply sentiment classification to characterize whether conversation is positive, negative, or neutral. These capabilities are genuinely useful for marketing and brand monitoring in stable environments where coordinated manipulation is not a factor.

The critical limitation of social listening is the authenticity gap: all signal sources are treated as equivalent. A wave of negative brand mentions generated by a coordinated campaign looks identical to organic consumer frustration. In adversarial information environments — product crises, political events, regulatory proceedings — acting on social listening data without authenticity context can lead to strategic errors.

Rolli is designed to complement or replace social listening for teams where the distinction between organic and coordinated matters.

Influence Operation

Influence operations range in scale from small targeted astroturfing campaigns to state-sponsored operations involving thousands of accounts across multiple platforms. What they share is the use of deception to manufacture false impressions of organic public sentiment — making fringe positions appear mainstream, amplifying divisive narratives, or discrediting individuals with manufactured consensus.

The Atlantic Council's Digital Forensic Research Lab (DFRLab) and the Stanford Internet Observatory have documented hundreds of influence operations since 2016, establishing a research baseline that informs commercial detection tools. Detection requires behavioral analysis rather than content analysis alone, since modern influence operations use plausible content that would not be flagged by fact-checkers.

Security and trust safety teams use Rolli to detect influence operations hours before mainstream media pickup — giving teams time to prepare responses rather than react.

Synthetic Amplification

Synthetic amplification exploits the social proof heuristic: people are more likely to engage with content that appears to have existing traction. By manufacturing that initial traction through inauthentic activity, synthetic amplification campaigns trigger genuine engagement from real users who encounter content that appears already popular.

The challenge for detection is that real users who amplify synthetically-seeded content are genuinely real — their activity can overwhelm the original inauthentic signal in aggregate metrics. Narrative intelligence tools that analyze the original injection cluster separately from downstream organic engagement can isolate the synthetic layer even after dilution by real activity.

Momentum Score

Momentum is distinct from volume: a narrative can have high total volume while losing momentum (decelerating), or low total volume while gaining momentum rapidly (accelerating). For communications teams making escalation decisions, momentum is often more operationally relevant than raw volume — a decelerating narrative may not warrant senior leadership attention regardless of its absolute scale.

High-momentum, low-authenticity narratives represent the highest-priority escalation case: a story spreading rapidly and driven predominantly by coordinated amplification. This indicates an active influence operation that has not yet reached critical mass in mainstream media, giving teams a window to prepare responses.

Rolli IQ surfaces momentum score alongside authenticity confidence and velocity in every narrative analysis.

Signal-to-Noise Ratio

The social media information environment generates enormous volume, most of which is not strategically relevant. For communications and security teams, the practical challenge is not access to data but the ability to identify the fraction that actually requires a response. Low signal-to-noise ratio leads to alert fatigue — teams stop trusting their monitoring tools because the tools escalate too much.

Authenticity scoring directly improves signal-to-noise ratio by filtering out coordinated inauthentic amplification, which by definition does not represent genuine public sentiment. Rolli IQ's authenticity scoring helps teams significantly reduce false-alarm escalations by separating coordinated noise from organic signal.

Intelligence Brief

An effective intelligence brief answers four questions: What is the narrative and how is it framed across platforms? Where did it originate and what is its amplification trajectory? How authentic is the engagement driving it? And what is the recommended response posture? For communications teams, the brief is the output that justifies action or non-action — it must be defensible, evidence-backed, and fast.

Manual intelligence briefs require 2–4 hours of analyst time. Automated narrative intelligence platforms can produce structured briefs in under 30 minutes by combining real-time signal aggregation, authenticity scoring, and structured output formats.

Rolli IQ generates structured intelligence briefs in under 20 minutes via the Rolli IQ Agents feature.

Cross-Platform Correlation

Modern influence operations rarely confine themselves to a single platform. Campaigns typically originate on fringe or alternative platforms before being injected into mainstream platforms through coordinated seeding activity. Single-platform monitoring misses this trajectory entirely — it can only detect the campaign after it has already achieved mainstream traction.

Cross-platform correlation matches behavioral patterns across platforms: the same account personas appearing in multiple places, timing correlations between posting events, and language template matches that suggest a shared origin. This analysis requires simultaneous monitoring infrastructure across 8+ platforms, which most enterprise organizations cannot build and maintain independently.

Rolli IQ monitors 8 platforms simultaneously and surfaces cross-platform correlation in every narrative analysis.

Trust & Safety (T&S)

Platform T&S teams at companies like Meta, X, and Google operate at massive scale, monitoring billions of interactions for policy violations and coordinated manipulation. Their takedown reports — documenting networks of inauthentic accounts removed for violating platform policies — form the primary public evidence base for coordinated behavior research.

Enterprise T&S teams outside of platforms face a different challenge: they lack the platform-level behavioral data that enables detection at scale, and they often need to act before platform teams complete their investigations. Narrative intelligence tools fill this gap by providing external behavioral analysis that identifies coordination signatures without requiring access to private platform data.

Security and trust safety teams at enterprise organizations use Rolli to detect coordination targeting their brand or sector — typically 2–4 hours before platform T&S actions or mainstream media coverage.