On the 0200–0400 watch I still see raw tips sent up without basic verification, and that’s a preventable risk. Without getting into specifics, how are you building habits in new accessions so they validate sources and safeguard OPSEC before they ever touch a live feed? I’m weighing a 90‑minute “two corroborations or hold” drill in week one and want to sanity‑check it against what’s working elsewhere.
Build a mandatory ‘three-box’ pre-push in week one: two independent corroborations, a written confidence rating (with why), and a 20‑second OPSEC scrub that answers ‘who or what gets burned if this leaks?’. Run it on a sanitized feed under a countdown so they feel watch pressure — your 90‑minute drill works, but add random 30‑second forced holds to build the pause reflex (safety on before you sling the rifle). Want to pilot it with one section and track false positives vs. latency for a week?
I run a 0245 “ghost feed” in week one with seeded bad tips and OPSEC traps; trainees have to grade the source, write a one‑line risk, and missing two flags pauses their quals. I like your “two corroborations or hold,” but at that hour I’d keep it to a tight 20–30 minutes to mirror the 0200–0400 fog and build speed with discipline. If staffing’s thin, rotate a single @watch-supervisor to spot‑check three entries and drop notes before the shift ends.
I’d bolt on a 60‑second “buddy gate” before any tip goes upstream: a second set of eyes initials the source grade, adds a one‑line confidence with why, and answers “who/what gets burned if we’re wrong?” — like a seatbelt you click without thinking. Keep it peer‑led at first, then randomize instructor spot‑checks; does that scale in your shop?