NATO’s attribution gap slows Baltic defense

A drone crosses into Latvian airspace from the Russian border. NATO fighters scramble from Šiauliai, Lithuania's Baltic air-policing base, and shoot it down. The threat disappears in minutes. The political question lingers: was this an accident, electronic-warfare spillover that knocked the drone's GPS off course, or a deliberate Russian probe?

That sequence, reported by LRT on 8 June, captures the stress test now facing NATO's eastern flank. Polish intelligence has warned that Russia may be preparing provocations against Poland or the Baltic states (The Guardian). Lithuania's defence minister has admitted that identifying drones in flight remains difficult. Latvia is deploying counter-drone systems along its entire Russian and Belarusian border (Sargs.lv). The military response is real. The decision system behind it is where the vulnerability sits.

The gap between intercepting and classifying

NATO's founding treaty draws two lines. Article 4 lets any ally request consultations when it feels threatened. Article 5, the collective-defence clause, kicks in after an "armed attack," but only when allies agree one has occurred. Each government then decides what action it considers necessary, up to and including force.

Grey-zone operations live in the space between those two articles. NATO has left itself room to treat hybrid attacks as collective-defence cases: the 2016 Warsaw summit said so explicitly, and allies have reaffirmed that cumulative hostile acts could cross the line. But the alliance has deliberately avoided fixed red lines (Atlantic Council). Cable cuts, arson, drone disruptions: they remain national law-enforcement problems unless allies can agree on attribution.

That makes attribution the decisive bottleneck. Some Baltic drone incidents have been linked to Russian electronic warfare disrupting navigation systems, which means the hard part is proving intent, not intercepting aircraft. National intelligence agencies collect the radar tracks and signals data. But translating that into something all allies trust requires sharing evidence, building a political case, and reaching consensus in the North Atlantic Council (NATO's top political body, where all 32 allies sit). Every step takes time that a deliberately ambiguous incident is designed to consume.

Forward troops deter war, not ambiguity

Germany's answer has been to raise the cost of any Russian test. Around 5,000 Bundeswehr soldiers are planned for Lithuania's new brigade, with roughly 1,800 already deployed and full readiness expected later. France contributes through Baltic air-policing rotations and maintains forces in Estonia (Ifri).

These deployments make any incident visibly multinational. But German troops in Lithuania do not independently decide that Article 5 applies. Lithuania must first decide how to treat the incident under its own law. Allies then decide, through the North Atlantic Council, whether the facts justify a collective response (Oxford analysis). A provocation designed to stay below a clean armed-attack threshold forces that entire chain to run before the alliance can act together.

The tempo risk inside the alliance

Slovakia shows how the alliance could fracture without anyone formally breaking ranks. Prime Minister Robert Fico has said Slovakia's delegation will carry no mandate for further military or financial aid to Ukraine at the upcoming NATO summit. After a strong Russian attack near Slovakia's border, the government was initially quiet, reacting only after opposition pressure. Czech intelligence chief Michal Koudelka has warned that a limited attack on a NATO state, designed to test the reaction, is more likely than a massive assault.

The risk is not that Slovakia vetoes Article 5. It is that in the hours between a provocation and clarity, governments argue over whether the event counts as sabotage, accident, or armed attack. Russia shapes its operations for exactly that window: the facts move faster than governments can prove and agree what happened.

NATO's forward deployments deter conventional war. Whether they also deter the ambiguous provocations now considered most likely depends on something harder to build than a brigade: the ability to attribute, classify, and agree before the political moment passes.