AI vs Performative Strikes: Detecting ‘Bumper Car’ Wars

A few years ago, “missile barrage” usually meant one of two things: serious destruction, or a serious bluff that could still spiral into something worse. The last two years in the Middle East have added a third category that planners can’t ignore: attacks that look like war on TV but are engineered to cause minimal damage—because the attacker is betting the defender’s air defenses will do the hard work.

That shift matters for anyone working defense, intelligence, and national security. If a rival can launch hundreds of drones and missiles, achieve global headlines, satisfy domestic audiences, and still keep escalation risk low, then deterrence math changes. And if you’re relying on deterrence by denial—robust integrated air and missile defense—the uncomfortable reality is that successful defense can enable the opponent’s theater.

This post sits inside our AI in Defense & National Security series because AI is one of the few tools that can keep up with this new tempo: separating “chicken” from “bumper cars,” identifying when a strike is designed to fail, and recommending proportionate options fast enough to matter.

Performative aggression is real—and it exploits strong defenses

Performative aggression is an attack designed to signal intent and capability while minimizing actual damage and escalation risk. It depends on a defender with high-end air defenses, predictable warning, and often slower systems (like one-way attack drones) that provide time for interception and for messaging to land.

A useful mental model is the difference between two games:

• Chicken: both sides accept meaningful risk; a misstep can produce major war.
• Bumper cars: the attacker expects limited or near-zero damage; the point is contact, not catastrophe.

Recent Iranian strike patterns illustrate the split. Some salvos were large and heterogeneous and still produced minimal results—consistent with bumper cars. Other episodes produced fatalities and infrastructure damage—consistent with chicken.

Here’s the operational twist: the defender often can’t be sure which game they’re in. That ambiguity is the whole play. If the defender overreacts to a bumper-cars strike, the attacker can claim victimhood and rally support. If the defender underreacts to what was actually chicken (or a “staged chicken” hybrid), deterrence erodes.

This matters because deterrence isn’t only about physical damage. It’s about expectations, perception, and repetition.

Why “designed to fail” can still be strategically successful

A strike can be militarily ineffective yet politically effective. When most incoming threats are intercepted:

• the attacker still proves it can launch and coordinate salvos
• the attacker generates domestic “we hit back” narratives
• the attacker pressures the defender to choose between restraint (looks weak) or retaliation (looks escalatory)

If the attacker can repeat this pattern, it becomes a coercive signaling loop: frequent, low-cost touches that create constant decision pressure for the defender.

The repeated-game problem: when symbolism becomes a campaign

Whether performative aggression is a one-off or a repeated game determines whether it’s a nuisance—or a strategic vulnerability. One-offs are easier: absorb the hit, show competence in defense, and choose a response that doesn’t hand the attacker a propaganda win.

Repeated interactions are harder because they create two asymmetries:

1. Asymmetric audience expectations. A regime with strong narrative control can call an intercepted strike a success. Open societies face harsher scrutiny: “How did anything get through?” or “Why didn’t you respond?”
2. Asymmetric proportionality traps. If defenses prevent damage, strong punishment can look disproportionate—exactly the framing the attacker wants.

There’s also a degradation effect over time. Too many “failed” attacks can convince the defender the attacker can’t truly play chicken. That can produce its own danger: complacency, misreading intent, or a political shift toward harsher retaliation once patience runs out.

A memorable rule: When offense becomes theater, restraint itself becomes a target.

Where AI fits: detect intent, not just impact

Air defense systems already ingest sensor data at machine speed. The gap is intent inference and escalation management. In bumper-cars dynamics, counting intercepts isn’t enough. You need to judge whether the attacker tried to fail, and whether they’ll do it again.

AI helps by converting a messy stream of launches, trajectories, public statements, and timing cues into probabilistic assessments that commanders can use.

1) AI-assisted “performative strike” detection

A practical approach is to build a performative aggression indicator model—not to replace analysts, but to prioritize what deserves human attention.

Signals that often correlate with “designed to fail” behavior include:

• Telegraphing and timing: long lead times, slow first-wave drones, predictable windows
• Target selection: avoidance of high-casualty targets; aim points biased toward defended areas
• Weapon mix: salvos optimized to be intercepted (or to saturate just enough to create spectacle)
• Deconfliction cues: indirect warnings, patterns suggesting the attacker expects defenses to hold

An AI model can fuse:

• sensor tracks (radar/EO/IR)
• launch geography and platform signatures
• historical intercept rates by region and system
• open-source messaging and state media language
• past “response patterns” by the defender

The output isn’t “this is theater.” It’s a confidence score like: “80% likelihood this salvo aims for signaling over destruction.” That’s actionable.

2) Predicting repetition: one-off vs repeated game

The strategic question isn’t only what happened, but what pattern is forming.

AI can support this by:

• clustering events into “strike archetypes” (bumper cars, staged chicken, chicken)
• detecting escalation drift (small increases in lethality, tighter timelines, more complex routing)
• forecasting “next likely move” based on reinforcement signals (domestic approval, proxy alignment, diplomatic reactions)

A defender that can credibly say “we expect a repeat within X days, from Y geography, using Z mix” can pre-position defenses and shape messaging early—often avoiding the worst decision traps.

3) Decision support for proportional response

The hardest part of performative aggression is that military success (intercepts) can create political ambiguity. AI-enabled decision support can narrow the space by mapping response options to likely outcomes.

A response planning tool should estimate, for each option:

• escalation risk (probability of follow-on strikes)
• narrative risk (how easily the attacker can claim a win)
• coalition impact (how partners interpret proportionality)
• operational risk (exposure of sensitive capabilities)

This is where AI actually earns its keep: not by “choosing” retaliation, but by making second- and third-order effects legible under time pressure.

A field-ready framework: five questions defenders should automate

Teams that handle limited-damage strikes well do the basics fast and the hard parts earlier than everyone else. These five questions are the ones I’d automate into dashboards and daily briefs.

1) Was the strike optimized for interception?

Look for route choices through defended corridors, long lead times, and salvo composition that “looks big” without maximizing damage probability.

2) What did the attacker need to prove?

Did they need domestic face-saving? Proxy reassurance? Deterrence signaling to a third party? AI can map messaging themes to likely audiences and objectives.

3) What’s the probability of leakage next time?

Even bumper cars has accidents. Model the chance that a future salvo leaks through due to:

• interceptor inventory strain
• sensor fatigue and operator load
• novel routing or decoys
• changing weather/terrain clutter

4) What response denies the attacker the story they want?

Sometimes the best “punishment” is informational: exposing telegraphing, highlighting deliberate risk avoidance, or demonstrating the attacker’s dependence on your defenses.

5) What’s the off-ramp—and who can sell it?

Performative aggression often exists because both sides want a way to step back. AI can help identify intermediaries, timing windows, and statements that historically correlate with de-escalation.

The deterrence paradox: strong defenses can invite more theater

Integrated air and missile defense is necessary—but it’s not sufficient for deterrence in bumper-cars dynamics. When defense overperforms, it can create space for “safe” aggression.

The policy problem isn’t solved by one declaratory line (“we will respond to any launch”). That can backfire by publishing your thresholds and boxing leaders into automatic escalation.

Ambiguity has its own risks, too. If the attacker believes they can operate below an undefined response threshold, the tempo of performative strikes can rise.

A better approach blends:

• credible uncertainty about response pathways
• pre-planned, proportionate options (not only kinetic)
• AI-enabled attribution of intent to justify responses that otherwise look “too strong” after successful intercepts

Put bluntly: if you only punish impact, you incentivize low-impact attacks. The defender needs a way to impose cost on intent without creating uncontrolled escalation.

What this means for AI in defense operations in 2026

The near-term AI opportunity isn’t autonomous retaliation. It’s escalation literacy at machine speed. The organizations that win this problem set will treat performative aggression like a distinct mission:

• a dedicated analytic pipeline
• a library of strike archetypes and response playbooks
• continuous model training using real event data
• tight integration between air defense, intelligence, and strategic communications

If you’re building or buying AI for national security, push vendors and internal teams on specifics:

• Can the system separate capability demonstration from damage-seeking behavior?
• Does it track repeated-game dynamics across months, not just single incidents?
• Can it generate response options with explicit escalation and narrative risk scoring?

Those are the features that translate directly into better decisions.

Next steps: build an “intent-aware” defense stack

Performative aggression is a strategy built around your competence. That’s why it’s so frustrating—and why it’s going to stick around as cheap drones, missiles, and precision guidance proliferate.

For defense and national security leaders, the goal isn’t to guess motives perfectly. It’s to reduce ambiguity faster than the attacker can exploit it. AI won’t remove the politics, but it can keep leaders from making avoidable mistakes when minutes matter.

If your team is evaluating AI surveillance, threat detection, or mission planning tools for drone and missile defense, prioritize systems that infer intent, audience, and repetition patterns—not just tracks and intercept counts. What would change in your deterrence posture if you could reliably label the next salvo: bumper cars, staged chicken, or chicken?