Internal Project Codename Reference

Detects references to internal project or initiative codenames in the "Project <CODENAME>" / "Operation <CODENAME>" labelling style. The public form of this pattern carries fictional example codenames only - it is a customisation skeleton: deployments substitute their organisation's live codename list via the declared customisation, which is what gives the pattern real detection value.

Type: regex
Engine: boost_regex
Confidence: low
Confidence justification: Low confidence by design: the labelling shape alone matches ordinary project management prose. Real precision requires the organisation-specific codename list supplied through the declared customisation; until then the pattern is a discovery-only skeleton.
Jurisdictions: global
Frameworks: ISO 27001
Data categories: business, intellectual-property
Scope: wide
Risk rating: 5
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Unsupported

Pattern

\b(?:[Pp]roject|[Oo]peration|[Ii]nitiative|[Cc]odename)\s+[A-Z][A-Z0-9]{3,14}\b

Corroborative evidence keywords

PROJECT CORALSTONE, PROJECT SEAHORSE, OPERATION WATTLEBIRD

Proximity: 300 characters

Should match

the Project CORALSTONE steering pack is embargoed until the board meeting — Codename labelling shape with an upper-case token
access to Operation WATTLEBIRD materials is restricted to cleared staff — Operation-style codename reference

Should not match

the project deadline moved and the operation continues normally — Ordinary prose without an upper-case codename token
Project managers met to discuss initiative funding — Title-case role wording, not a codename

Known false positives

Legitimate public project names and all-caps acronyms following the word project (e.g. project HVAC scope). Mitigation: Keep the pattern discovery-only until the codename customisation is applied; the organisation-specific list is the precision mechanism.

References

Common M&A/initiative codename handling practice (public security guidance)