A city communications analyst creates a research sock-puppet account using their real municipal email address. Why is that a failure?
Select an answer to reveal the explanation.
Short Explanation
A sock puppet on a city mailbox is a fake mustache glued to an employee badge. Anyone who sees the recovery email or the signup trail can walk right back to the analyst. Research personas stay off the real civic identity.
Full Explanation
Sock puppets must not be tethered to the researcher's real civic identity. Creating a research persona with a real municipal email address links the false front to the city communications analyst and defeats OPSEC separation through mail headers, recovery channels, and organizational exposure. Claiming municipal email always includes legal hold that makes sock puppets stronger in court misunderstands both discovery and research tradecraft. Asserting that a real civic mailbox proves authorization so platforms will not ban the persona confuses workplace email with platform trust signals and increases identifiable risk. Preferring the real email for password recovery because convenience outweighs OPSEC explicitly chooses recoverability over separation. Exam caveat: some agencies forbid sock puppets entirely; where allowed, personas still need dedicated mail and phone channels not tied to staff identity. Operational check: before activation, verify the persona's email, phone, and recovery options contain no municipal domain, staff name, or reusable personal recovery address. Keep the civic purpose, method limits, and exhibit labels aligned so reviewers can see what was public-source work versus other authorities.