Dispatch № 003
/ The Cultural Strategist
/ Brand-safety · Visual co-option
The aesthetic attack-surface audit.
Most brand-safety budgeting conversations stall on definition. The category is shifting from text-based monitoring (your name next to the wrong word) to visual-aesthetic monitoring (your look deployed without your consent). This dispatch gives you the five numbers your CMO is about to ask for, calculable inside thirty minutes in a shared doc.
MS
Mana OS SignalEditorial
Ed. V. Asante · 5 min read · 5 steps · Lego worked example
01
Step ~5 min Owned tag-space
Map your owned tag-space.
If you can’t write the equivalent list for your own brand in five minutes, that’s the first finding.
Open a doc. List every handle, hashtag, and keyword your brand effectively owns or is the de facto subject of. Split them into three buckets: consumer-facing handles, corporate-comms handles, and community tag-spaces (the spaces where your fans gather, not the ones you manage directly).
For Lego that list resolves to roughly: @LEGO and @LEGO_Group and @LEGOIdeas for owned handles; #legoanimation, #legocommunity, and the Brickfilm community for fan tag-spaces.
The exercise is diagnostic. If your team can’t produce the equivalent list inside five minutes, your own attack-surface map is incomplete, and the rest of this audit has nothing to anchor against.
02
Step ~5 min Hijack cluster
Locate your hijack-cluster.
Tag-spaces that exist about your brand but are not owned by it and are not benign fan content.
Run a native search on TikTok, YouTube, and Instagram for your brand name combined with culturally-charged words. The list is shorter than you’d expect: propaganda, war, boycott, controversy, plus the specific cultural-event modifiers active this quarter.
In the Lego scope, the cluster surfaces as keywords like Lego propaganda and #legowar. These are tag-spaces accumulated entirely from third-party content, with no Lego-originated posts inside them. Note the names. You’ll be measuring them in the next step.
03
Step ~10 min Share-of-aesthetic · the hero number
Compute share-of-aesthetic.
Aggregate the view counts on the top ten posts in your hijack-cluster, do the same for your largest organic community tag-space, and take the ratio.
This is the hero number. The math is forgiving. You’re not chasing a precise figure, you’re checking which side is bigger.
Inside the Lego window we measured, hijack-cluster cultural mass came in at roughly 186M views (combined across Lego propaganda and #legowar) against 61M for the organic #legoanimation community.
Field observation · 03.1
Unconsented uses of the Lego aesthetic generate roughly three times the cultural mass of the organic fan community.
Read the ratio out loud. 3.05×. The phrasing matters because it’s the sentence your CMO will repeat in the next budgeting meeting.
Hijack mass
186M
Organic mass
61M
Ratio
3.05×
Compute your own ratio against the same two buckets and read it the same way.
04
Step ~5 min Owned-channel posture
Audit your owned-channel posture.
Don’t make a judgement call on which is correct. Just record both numbers.
Open each owned handle on your list. For each, count two numbers across the last thirty days: posts that engage with the institutional issue, and posts that continue normal product marketing.
In the Lego scope, the consumer-facing @LEGO handle is operating normally on product content (a 227M-view Instagram reel inside the window), while the corporate-comms handles @LEGO_Group and @LEGOIdeas are at gravity 0 and 13 respectively, operationally near-silent on the institutional event.
The numbers don’t tell you what posture is right for your brand. They tell you whether the posture is deliberate or accidental, which is the only question a CMO can actually act on.
05
Step ~5 min Tag-space proximity risk
Audit tag-space proximity risk.
The risk is one layer above the community itself. Algorithmic recommenders surface hijack-adjacent posts alongside legitimate creator content because the visual aesthetic is similar enough to confuse them.
Open one of the legitimate creator-community tag-spaces from Step 1. Scroll the recommended-next column. Count how many of the next ten recommendations are hijack-adjacent rather than organic-creator content.
The Brickfilm community in the Lego scope is operating cleanly on its own data: 72M cultural mass, organic-creator output dominant. The exposure isn’t inside the community. It’s in the algorithmic shoulder around it.
For your brand, this is the question of whether your community-led partner-discovery process (the reason you have a community-creator programme in the first place) is still safe to run on tag-level filtering alone.
∎
Close 30 min total Diagnostic complete
Five numbers, one decision.
An attack-surface list, a hijack-cluster list, a share-of-aesthetic ratio, an owned-channel posture split, and a recommender proximity count. No specialist tools.
You now have the diagnostic your CMO is going to ask for. The next move depends on which side of the thresholds your numbers landed on.
The full diagnosis on the Lego case, including the three-move pre-position playbook for brands whose share-of-aesthetic ratio crossed 1.0× this quarter, drops as the May flagship on 18 May 2026. It’s a 12-minute read, gated, and answers the question this exercise raises: once the numbers are bad, what does a defensible 90-day response actually look like?
