PAR-009 defined System Variation Rate — the variable the operation controls. This paper defines the variable that variation acts upon: the Learnability Score, a measure of how predictable the operation's own signature has become.
Learnability Score is the mechanism that connects operational input to operational outcome. System Variation Rate influences it; it in turn influences the Opportunity Denied Rate. It occupies the centre of the causal chain — which is precisely why it is the most useful diagnostic. A change in learnability explains why an outcome moved, and points to whether the cause was operational or adversarial.
Learnability Score is a measure of how reliably an operation's future behaviour can be inferred from its past — the predictability of its own operational signature.
It is computed from the operation's own activity, not from assumptions about any specific adversary. This is what makes it measurable: like System Variation Rate, it is read from the operation itself. Where SVR measures the variation an operation introduces, Learnability Score measures the predictability that remains — how inferable the underlying rhythm still is despite that variation. The two are distinct. An operation can vary its surface while holding a deeper pattern constant, keeping SVR high yet learnability high with it.
A higher Learnability Score indicates the operational signature has become increasingly predictable — its future is inferable from its past. A lower score indicates that meaningful adaptation is disrupting any stable model of it.
How much learnability an operation can safely carry depends on the adversary it faces. A patient, sophisticated adversary can act on a lower score than an opportunist. The adversary does not define the metric — it sets the threshold at which a given score becomes dangerous.
This definition originates in The Learnability Problem (PAR-001), which established learnability as a property of security operations rather than of adversaries. PAR-010 operationalises that definition as a measurable score.
Conventional security metrics are lagging indicators. Thefts, alarms, arrests and losses all move only after damage has occurred. By the time they change, the opportunity has already been exploited.
Learnability Score is a leading indicator. If learnability begins climbing, the operation does not have to wait for an incident to confirm that something is wrong. Rising learnability is itself the warning — the adversary is building a viable model. Operators can intervene immediately by changing operational behaviour, before the model matures into an executed attack.
Because Learnability Score sits between input and outcome, it separates two very different failure modes. When Opportunity Denied Rate falls, the operation must know why. Learnability Score answers the question.
Learnability rising while variation is low means operations have become routine. The fix is operational: increase meaningful variation. Learnability rising despite high variation means the adversary has adapted faster than expected; the fix is analytical — the variation is no longer meaningful to this adversary and must change in kind, not just degree. Learnability stable while outcomes fall indicates the cause is likely external, not a learning failure, and should be investigated elsewhere.
Without the middle variable, a declining outcome is just a declining outcome. With it, operators know where to intervene. This is why Learnability Score is the primary diagnostic measure of the discipline.
Learnability Score is the interpretive core of the framework. System Variation Rate is what the operation does; Opportunity Denied Rate is the result. Learnability Score is what connects them — the variable that tells operators not just that performance changed, but why, and what to do about it. The final paper in this framework defines the outcome it produces: the Opportunity Denied Rate.