An enemy envoy arrives at your court. You do not throw him in a cell. You treat him like a great minister — feasts, treasures, gifts pressed on him until his suspicion melts into gratitude. Over days the wary diplomat softens. He no longer doubts you. And that is the precise moment you want him: a man who came to spy on you, now so charmed he'll believe whatever he seems to overhear. So you "leak" a state secret near him — the time and place of a coming move. He carries it home as a prize he extracted himself, and he never once suspects it was placed in his hands.1
This is the first of two disinformation techniques in Hsü Tung's chapter "Deceiving the Enemy," the companion to his "Employing Spies" in the Hu-ling Ching around the year 1000.2 Both techniques share one cruel insight: the most convincing lie is one the enemy thinks he stole. The plain version — you don't tell the enemy a falsehood, you let him discover it, because a man trusts what he believes he found out for himself far more than anything he's handed.
Hsü Tung opens with the old maxim, "Warfare is the Tao of deception," and even invokes the cosmos — "even Heaven and Earth, ghosts and spirits cannot fathom the myriad changes of condensing and expanding."3 Then he gets specific: two methods.
The chapter is a tight, two-technique manual for spreading disinformation "through converting enemy personnel and victimizing false defectors."4 Both methods plant a false time and place for an attack into the enemy's mind through a human carrier, then exploit the resulting false expectation. And both end with the same hinge: you do mobilize at the announced time and place — enough to make the lie look true — and then "act unexpectedly," striking elsewhere with elite troops while the enemy braces in the wrong direction.5
Technique one — the mesmerized emissary. Take an enemy envoy and overwhelm him with treasure and honor until his doubts dissolve. Once he "has no further doubts," delude him by "apparently leaking state secrets." He "secretly entangles their estimations, yet they will never doubt their veracity." Then show troops mobilizing at the named place and time to confirm the leak — and strike where he isn't looking.6
Technique two — the whipped false defector. Pick "a courageous and daring officer." In a staged rage, have him beaten with a bamboo whip "until blood is visible." Let him flee to the enemy. Then imprison his wife and children, so that when he hears of it, his fury becomes his bona fides — he will "certainly transmit any secret affairs he formerly heard to the enemy," naming an attack at a certain time and place. You act as he foretold "at the right moment," then send elite troops "to strike where unexpected."7
Both methods run on the same two-stage engine: first manufacture the enemy's belief, then betray it. The genius is all in the first stage, because the betrayal is mechanically simple — show up where you said, then hit elsewhere.
To manufacture belief, Hsü Tung solves the hardest problem in disinformation: a lie is only useful if the target trusts it, but targets distrust gifts from enemies. His answer is to make the lie feel self-acquired. The mesmerized emissary believes he extracted the secret through his own cleverness and your carelessness — so his confidence in it is his own, not borrowed from you, and therefore unshakeable. The whipped defector is even more ruthless: his bloody back and his imprisoned family are evidence, visible proof that he hates you and could not possibly be your agent. The enemy doesn't have to trust the defector's word; they trust the wounds.
Then comes the confirming theater. In both cases you genuinely mobilize at the false time and place. This is the step amateurs skip and Hsü Tung insists on. The lie predicts an attack; reality (the visible mobilization) seems to confirm it; the enemy commits to the wrong defense. Only then do you strike where you actually intended. The false expectation has done the work of pinning the enemy in place — "employing the unorthodox to conquer, the essential Tao of the military."8
Sawyer flags a dark ambiguity that the chapter itself leaves open. The whipped defector "again shows how rulers might ruthlessly exploit their officers," and it "revisits the question of volition and consciousness in the definition of expendable agents."9 Hsü Tung "never implies any knowledge or willingness on the hapless victim's part."
Does the officer know he is bait? Sawyer points to the precedent: Yao Li, King Ho-lü's second assassin, "who may have been the inspiration for this method" — a man who consented to self-mutilation as a deception cover.10 But Yao Li chose. Hsü Tung's officer may not have. Beaten until he bleeds, his family jailed, he may genuinely believe he has been wronged and genuinely defect — carrying false secrets he thinks are real, fury he thinks is justified. By Sun-tzu's terms, Sawyer notes, "anyone so manipulated would certainly qualify as a dead agent," someone "provided with false information deliberately sacrificed."11 The officer is spent like ammunition, possibly without ever knowing he was fired.
The first technique sits in a different drawer. The mesmerized emissary is "not simply a classic turned agent — someone who consciously chooses to work for the enemy — but rather a diplomat who becomes mesmerized by riches and profits, who is manipulated into readily believing whatever he apparently manages to learn."12 No allegiance shifts. The envoy stays loyal to his own ruler the whole time. He simply carries home a beautifully packaged lie, an unwitting courier. This, Sawyer notes, "coheres with the broader definition that allows for duping enemy agents, for simply employing enemy agents without any shift in their allegiance or loyalties."13
This page completes its own author's disinformation set. Hsü Tung's Eight Methods of Employing Spies catalogs the broad eightfold operational frame, three of whose methods feed the enemy false information; "Deceiving the Enemy" zooms into two of those moves and renders them as fully staged set-pieces. The two chapters are one mind's complete toolkit — the wide-angle list and the close-up detail.
It hands The Expendable Dead-Agent Doctrine its hardest test case. The classic dead agent is a knowing or at least passive carrier of a fatal lie. The whipped officer pushes the category to its edge: a man who may believe he is acting on his own grievance, sacrificed without ever consenting or even understanding. The page sharpens the doctrine's central unresolved question — does "expendable agent" require the agent's awareness, or only the handler's intent?
And it gives Estrangement Techniques a brutal new vector. Estrangement usually means dividing the enemy from his allies. Here the ruler estranges his own officer from himself on purpose — whipping a loyal man bloody to forge a credible defector. It is self-inflicted, instrumental estrangement: you break your own bond as a weapon.
Walk through the second technique as a deconstruction of who knows what.
The ruler picks "a courageous and daring officer."14 Note the selection: not a coward, a brave man, because the enemy must find his defection plausible and his rage convincing. The ruler stages a sudden fury — public, witnessed — and has the man whipped until blood shows. The blood is the document. Any defector can claim mistreatment; this one bears it on his skin.
Then the officer flees to the enemy. And the ruler does the thing that makes the method monstrous: he imprisons the man's wife and children. The stated purpose is mechanical — "so that when he hears about it he will be angry and certainly transmit any secret affairs he formerly heard."15 The imprisonment is not punishment. It is fuel. It guarantees the defector's hatred is real, which guarantees his performance is real, which guarantees the enemy believes him. The officer's genuine, justified fury is the engine that drives the false time-and-place into the enemy's plans.
The "secret affairs he formerly heard" is the load-bearing phrase. The officer carries information he was exposed to before he was whipped — and he may believe it is true and damaging to a ruler who has now wronged him. He thinks he is taking revenge. He may not know the information was planted, or that his beating was theater, or that his family's imprisonment was scripted from the start. He defects in good faith and delivers a lie in good faith. Then the ruler mobilizes as foretold, the enemy braces, and the elite troops fall elsewhere. The officer was never told the plan. He was the plan.
You are the host. The enemy's envoy has been your guest for six days now, and you have spent them dismantling his guard. The first night he ate stiffly, watching everyone. By the third he was laughing. Tonight he sits at your right hand like a powerful minister of your own court, and the treasures you keep pressing on him have done what threats never could — he trusts you.16
So you let it slip. Not to him directly — that would be too clean. You let him overhear it, an aside, a careless word about the time and the place you'll move. You watch his eyes catch it and hold it, watch him decide not to react, watch him file it away as his own quiet triumph. He thinks your wine loosened your tongue. He thinks he's the clever one.
The next morning he asks to return home, suddenly eager. You let him go warm with gifts. And you make sure that before he leaves, he sees what he needs to see: troops gathering, just so, toward the time and place he overheard. Now his secret has confirmation. He'll lay it before his ruler not as a rumor but as a thing he saw with his own eyes and pried from a careless host. The enemy will mass their defense exactly there — and your real blow is already aimed somewhere else entirely.
The hospitality is too obviously a trap. Technique one collapses if the envoy's suspicion never fully melts. Overplay the treasures, charm him too fast, and a sharp diplomat reads the seduction as the operation it is — and carries home the truth that you wanted him to believe a lie.
The wounds don't match the story. The whipped defector fails if the enemy's interrogators sense the beating was staged or the family's imprisonment is a touch too convenient. A defector whose bona fides are theater can be unmasked by a careful enemy — and an unmasked false defector hands the enemy your real intentions by inversion.
The confirming mobilization is skipped or overdone. Both techniques die if you don't actually move toward the announced time and place — the lie needs reality to second it. But move too heavily and you commit forces you needed elsewhere, or tip that the "false" attack was always false. The mobilization must be just convincing enough.
The carrier knows too little or too much. If the mesmerized envoy never quite believes what he "learned," he transmits nothing. If the whipped officer somehow grasps he is bait, his performance curdles into a double-cross. The method lives in a narrow band of the carrier's belief.
The central unresolved tension is the one Sawyer names and does not close: the officer's volition. Hsü Tung "never implies any knowledge or willingness on the hapless victim's part," unlike the consenting Yao Li.17 So we cannot tell whether the whipped officer is a witting agent enduring a cover beating or an unwitting victim genuinely deceived by his own ruler. The text supports both readings, and the doctrine of expendable agents shifts meaning depending which is true — knowing sacrifice is a different moral and operational object than unwitting expenditure. The vault should preserve, not resolve, this.
A second tension sits between the two techniques. The first explicitly is not a turned agent — no allegiance shifts, the envoy stays loyal and is merely duped.18 The second produces a defector whose allegiance really does flip, except the flip itself was manufactured by the ruler he's defecting from. So Hsü Tung's two methods straddle the conceptual line between "dupe a loyal enemy carrier" and "manufacture a real traitor," and the chapter treats them as variants of one thing — "employing the unorthodox to conquer"19 — without theorizing the difference. The categories of turned agent, dead agent, and unwitting carrier blur here in ways the source leaves open.
The Yao Li attribution is Sawyer's inference — Yao Li "may have been the inspiration."20 It is plausible and illuminating but speculative; the chapter does not cite Yao Li, and the resemblance (self-mutilation as deception cover) could be convergent rather than derived.
Sawyer reads "Deceiving the Enemy" partly as a window onto a recurring ethical problem in the Chinese tradition — the ruthless expenditure of one's own officers — and he reaches for Yao Li to give the whipped-defector method a lineage and a moral frame. Hsü Tung, the practitioner, offers no such reflection: he presents the beating and the imprisoned family as flat operational steps, fuel for a deception, with no hint of the volition question that exercises Sawyer. The convergence is that both treat the technique as effective and "unorthodox" in the technical sense. The tension is interpretive depth — Sawyer imports the consciousness-and-consent problem from outside the text, where Hsü Tung simply doesn't raise it. That gap is itself evidence: the very absence of any concern for the officer's awareness in Hsü Tung's prose is what makes the unwitting-victim reading so available, and what makes the method so chilling.
To The Expendable Dead-Agent Doctrine. The dead-agent doctrine defines a category: an agent furnished with false information and deliberately sacrificed to deceive the enemy. The whipped officer is the doctrine's stress test, and comparing them produces an insight neither holds alone. The standard dead agent is at least passive in his own sacrifice; Hsü Tung's officer may be actively self-deceived — believing he is taking righteous revenge while in fact executing his ruler's plan against himself. This forces a refinement of the doctrine: "expendable agent" is defined by the handler's intent, not the agent's knowledge. The agent can be witting (Yao Li), passive (classic dead agent), or wholly deceived (the whipped officer), and all three are the same category from the handler's side. The page thus reveals that the dead-agent doctrine is fundamentally a doctrine about handlers, with the agent's awareness an independent variable — a clarification the dead-agent page alone, focused on the sacrifice, doesn't surface.
To Estrangement Techniques. Estrangement classically divides an enemy from his allies and advisors. Hsü Tung's second technique inverts the target: the ruler estranges his own officer from himself, deliberately, as a manufacturing process — whip a loyal man into a credible enemy. The insight from holding the two together is that estrangement is a tool that can be aimed inward as a production technique, not only outward as an attack. A ruler who can break a bond on purpose can break his own bonds to fabricate exactly the angry defector the enemy will believe. The most credible traitor is one whose grievance is genuine — so the supreme estrangement operator wounds his own house to forge the weapon. This collapses the usual boundary between "estranging the enemy" and "estranging yourself," showing both as moves in one grammar of broken trust.
Sharpest implication. The strongest disinformation isn't a lie you tell — it's a truth-shaped object you let the enemy acquire, so his confidence in it is self-generated and therefore proof against doubt. Whether through a charmed envoy's "discovery" or a bleeding defector's "grievance," Hsü Tung's method is to make the enemy author his own deception.
Generative questions.