The Kharijite-ISIS Ba'alist Proxy Layer
How the Ba'alist Deep State Weaponizes the Khawarij Formation Against the walāya community — From Al-Qaeda to ISIS to TTP
The Ba'alist deep state's most operationally sophisticated instrument against the walāya community is the weaponization of the Khawarij formation — the Intizār Archive's F-12 III-A category — as a proxy force. ISIS, Al-Qaeda, TTP, and their predecessor formations are not autonomous expressions of Islamic extremism that the Ba'alist deep state then "failed to control." They are Khawarij formations whose target selection reveals their function: they attack shrines (walāya transmission nodes), Shia communities (the walāya-chain's most direct institutional expression), Sufi networks (the silsila transmission chains), and the Pakistan Army (the Khorasani formation's institutional body) — while maintaining structural non-aggression toward the Zionist-Western Ba'alist formations that are nominally their enemy. A formation that destroys every walāya-connected node it encounters while never successfully targeting a single Israeli settlement or Western Ba'alist institution has revealed its alignment through its operations, regardless of its surface theological vocabulary. This paper establishes the theological definition of the Khawarij (preserving the Intizār Archive's precision against misuse), documents the Ba'alist weaponization mechanism from Afghan Jihad to Syrian war to TTP, maps the target selection pattern that reveals the proxy function, and traces the TTP as the Khorasani formation's most direct present-tense Ba'alist proxy threat.
Author: Saad Khizar Bosal · ORCID: 0009-0004-9944-7378 · Primary sources: Al-Kāfī (Imam ʿAlī on Khawarij), Nahj al-Balāgha, Patrick Cockburn, Charles Lister, Seymour Hersh, Intizār Archive F-12 framework · Layer VII
§ 1 · The Theological Definition — Khawarij as F-12 III-A, Not Generic "Extremism"
The Intizār Archive's F-12 framework establishes a five-category human taxonomy that replaces the blunt categories of earlier analyses. Within this taxonomy, III-A designates the Khawarij — a specific theological-political category with precise defining characteristics, not a synonym for "Muslim extremist" or "terrorist." The precision matters because mislabeling produces misanalysis: not every violent Muslim actor is Khawarij, and not every Khawarij actor uses violence as its primary modality.
Origin: The Khawarij emerged at the Battle of Ṣiffīn (37 AH/657 CE)
— those who withdrew from Imam ʿAlī's (A.S.) army when he accepted arbitration
with Muʿāwiya. Their slogan: lā ḥukma illā lillāh ("no judgment except
God's") — used to reject human political authority entirely, including the Imam's.
Imam ʿAlī's response (documented in Nahj al-Balāgha): "A word of truth by which
falsehood is intended." The Quranic phrase is correct; its use to reject the
Imam's walāya-authority is the Ba'alist move within Islamic vocabulary.
Theological markers: (1) Takfīr (declaration of apostasy) against
Muslims who do not share their position — especially against walāya-connected
Muslims (Shia, Sufi, Barelvi). (2) Rejection of scholarly authority, ijmāʿ, and
the living interpretive tradition — "direct Quran and Sunna" reading that bypasses
all accumulated scholarship. (3) Extreme violence against Muslim communities as
a religious obligation — the Imam ʿAlī said they will kill Muslims and leave
idol-worshippers alone (documented in Al-Kāfī and Ṣaḥīḥ Bukhārī). (4) Absence
of walāya-orientation — no connection to the Prophetic Household's authority;
no reverence for the Ahl al-Bayt; frequently explicit hostility to them.
The defining diagnostic — Imam ʿAlī's criterion: "They will kill
the people of Islam and leave the people of idols." The Khawarij's target selection
— Muslims rather than the enemies of Islam — is the theological diagnostic that
Imam ʿAlī established in the seventh century. ISIS targeting Yazidis and Shia
Muslims while maintaining non-aggression toward Israel; TTP targeting Pakistani
military and Sufi shrines while not targeting Indian or Western military assets —
both fulfill Imam ʿAlī's criterion precisely.
§ 2 · The Weaponization Mechanism — How Ba'alist Intelligence Creates Khawarij Proxies
The Ba'alist weaponization of the Khawarij formation follows a documented three-stage mechanism, established through the Afghan Jihad and refined in subsequent operations:
Stage 1 — Theological Pre-Formation: Saudi-Wahhabi petrodollar
funding (WP-103) creates a Deobandi-Wahhabi ideologically formed population
through the madrasa network. The theological formation is anti-shrine,
anti-Shia, anti-Sufi — the F-12 III-A ideological substrate is created without
direct Ba'alist intelligence involvement. The Saudi-Wahhabi vector provides the
human capital; Ba'alist intelligence provides the activation and targeting.
Stage 2 — Operational Activation: CIA/MI6/Mossad (WP-104)
provide weapons, training, financial support, and operational guidance —
directly (Operation Cyclone) or through intermediaries (ISI, Gulf state
intelligence, Turkish MIT). The activation is geopolitically targeted:
against the Soviet Union (Afghan Jihad), against Syria (2011 onwards),
against Iran's regional influence (Hezbollah, Iraqi PMF). The Khawarij
formation's own theological energy is directed by Ba'alist intelligence
toward Ba'alist strategic objectives.
Stage 3 — Target Selection Convergence: The Khawarij
formation's organic theological targets (shrines, Shia, Sufi networks,
walāya-connected Muslim communities) coincide precisely with the Ba'alist
strategic targets (Axis of Resistance, Khorasani formation, Sacred
Civilization institutions). No explicit coordination is required at this
stage: the Khawarij formation attacks what its theology tells it to attack;
the Ba'alist strategic interest benefits from exactly those attacks.
The convergence is structural, not conspiratorial — which makes it more
durable and harder to disrupt.
§ 3 · The Target Selection Map — Revealing the Proxy Function
The most analytically powerful evidence for the Khawarij-as-Ba'alist-proxy thesis is the target selection map. If ISIS, Al-Qaeda, and TTP were genuinely operating as Islamic resistance formations against Western-Zionist dominance — as their recruitment rhetoric claims — their target selection would reflect this. It does not:
ISIS — Syria/Iraq (2013-2019):
ATTACKED: Yazidi communities (genocide, 2014); Shia Muslim communities (mass
executions at Speicher, 2014 — 1,700 Iraqi Shia soldiers); Sufi shrines across
Mosul and Raqqa (physically destroyed); Christian communities; Syrian Army
(walāya-adjacent Alawi leadership). Primary fighting: against Syrian Army,
Hezbollah, Iranian IRGC, Iraqi PMF — the Axis of Resistance formations.
DID NOT ATTACK: Israeli settlements (zero ISIS operations against Israel
despite operating 50km from the Golan border); US/NATO bases (ISIS avoided
direct engagement with US forces where possible, preserving its capability
against Muslim targets); Saudi Arabia (one minor attack; Saudi funding of
ISIS-adjacent groups documented throughout).
DOCUMENTED: Israeli field hospitals in the Golan treated ISIS-affiliated
wounded — reported by Wall Street Journal (2016). ISIS commanders stated
that Israel was not their enemy. An Islamic State caliphate that shared
a 50-mile border with Israel for three years and never launched a single
significant attack against it is not an anti-Zionist formation.
Al-Qaeda — Global (1998-present):
ATTACKED: US embassies in Africa (1998) — killing mostly African Muslim
employees; USS Cole (2000); 9/11 (killing predominantly non-Muslim Americans
but triggering the invasion of Muslim Afghanistan and Iraq); various attacks
in Muslim-majority countries (Pakistan, Saudi Arabia, Egypt, Morocco,
Indonesia, Mali, Somalia). The 9/11 operation's strategic consequence:
two decades of US military presence in Muslim-majority countries, the
destruction of the Afghan and Iraqi states, and the creation of the
"Global War on Terror" framework that labeled Islamic political resistance
as terrorism globally. Whatever Al-Qaeda's intent, its operations served
Ba'alist strategic objectives more than any Ba'alist intelligence operation
could have planned.
TTP — Pakistan (2007-present):
ATTACKED: Pakistan Army personnel; Shia Hazara communities (continuous
targeting); Sufi shrines (Data Darbar Lahore 2010, Abdullah Shah Ghazi
Karachi 2010, numerous others); Barelvi mosques and processions; civilian
markets across Khyber Pakhtunkhwa and FATA. The TTP's target map is
precisely the Khorasani formation's institutional and geographic body:
the Army (institutional), the shrines (silsila transmission nodes),
the Shia and Barelvi communities (walāya-connected populations).
DID NOT ATTACK: Indian military assets; US/NATO supply lines through
Pakistan (largely left operational during the Afghan Jihad period);
Israeli or Western targets. The TTP has operated continuously in
Khorasani geography targeting the Khorasani formation while never
conducting a significant operation against the formation's Ba'alist
external adversaries.
§ 4 · The RAW-TTP Operational Connection
The Indian Research and Analysis Wing (RAW) connection to TTP operations against Pakistan is the most Pakistan-specific and most directly Khorasani formation-relevant dimension of the Ba'alist proxy analysis. The Intizār Archive's India Studies series (WP-97) documents RSS/Hindutva as Ba'alist Territorial Theology; the RAW-TTP connection is its intelligence operational expression.
Pakistan's Foreign Office, ISI, and Army have on multiple documented occasions
presented evidence of RAW operational support to TTP formations — including
financial transfers through Afghan banking channels, safe haven provision in
Afghan territory under Indian-aligned network protection, communications
intercepts showing TTP commanders in contact with Indian intelligence assets,
and weapons caches with Indian-origin markings recovered in FATA/KPK operations.
The strategic logic is precise: RAW uses the TTP to attack the Pakistan Army's
Khorasani formation — the institution that represents Pakistan's strategic
depth against Indian regional dominance. Weakening the Army through continuous
attrition, delegitimizing it through civilian casualties in counterinsurgency
operations, and preventing its reorientation toward the western frontier
(Afghanistan-Iran strategic convergence) all serve Indian Ba'alist territorial
objectives. The TTP is simultaneously the Ba'alist internal arm's (Wahhabi-Deobandi)
ideological product, the Ba'alist intelligence layer's (CIA/RAW) operational
instrument, and the anti-Khorasani formation's most direct geographic weapon.
Ghazab Lil Haq (February 2026) is the Khorasani formation's direct military
response to this proxy threat — the Army moving from neutralization management
(Musharraf-Bajwa period: maintain ISI visibility into Taliban, prevent full
RAW weaponization) to direct assertion (Asim Munir period: active military
operations against TTP formations in Khorasani geography). The theological
self-declaration — naming the operation "Ghazab Lil Haq" (Wrath for Truth)
in Quranic haqq/bāṭil vocabulary — is the Khorasani formation explicitly
framing the counterinsurgency as a walāya-obligation against the Khawarij.
§ 5 · The Syria Operation — The Largest Post-Cyclone Khawarij Weaponization
The Syrian war (2011-2019) was the largest deployment of the Khawarij proxy weapon since the Afghan Jihad — and the most direct application of "The Redirection" (Hersh 2007) strategy against the Shia Axis of Resistance. Patrick Cockburn's The Rise of Islamic State (Verso, 2015) and Charles Lister's The Syrian Jihad (Hurst, 2015) provide the academically credible documentation.
The Ba'alist operational architecture in Syria: the CIA's Timber Sycamore program (authorized 2013, one of the largest covert arms programs in CIA history) funneled weapons to "moderate" Syrian opposition groups — weapons that consistently ended up with ISIS and Jabhat al-Nusra (Al-Qaeda Syria affiliate) through the porous organizational boundaries of the Syrian armed opposition. The distinction between "moderate rebels" and Khawarij formations was deliberately maintained for Western audiences while being operationally meaningless on the ground: the same weapons, the same Turkish and Jordanian transit routes, the same Gulf funding streams served both categories.
The Ba'alist strategic objective in Syria: prevent the Iran-Syria-Hezbollah axis (the "Shia Crescent") from consolidating the land corridor from Tehran to Beirut that would make the Axis of Resistance's military coordination permanent and logistics-independent. The Khawarij proxy weapon was deployed to create sufficient chaos in Syria that this corridor could not be secured — regardless of whether Assad fell. The Axis of Resistance's military response (IRGC, Hezbollah, Russian air power, Iraqi PMF) defeated the proxy deployment and secured the corridor — the second major Ba'alist proxy defeat after the 1979 Iranian Revolution.
§ 6 · The Theological Significance — Imam ʿAlī's Warning as Strategic Intelligence
The Intizār Archive's deepest contribution to the Khawarij analysis is the theological depth-reading: Imam ʿAlī's (A.S.) identification and warning about the Khawarij at Ṣiffīn (37 AH) is not merely historical theology — it is strategic intelligence applicable in every era where the formation reappears.
"They will kill the people of Islam and leave the worshippers of idols. If I am killed among them, I shall be safe with God and if I kill them, I shall be fulfilling the will of God to the extent that He wills... their sign is that among them there is a man whose hand, or whose breast, is like the breast of a woman..."
— Imam ʿAlī ibn Abī Ṭālib (A.S.), Nahj al-Balāgha, Sermon 60 (on the Khawarij). The diagnostic criterion stated 1,400 years before ISIS: they kill Muslims and leave idol-worshippers. The target selection is the theological identification.
The diagnostic criterion — "kill Muslims, leave idol-worshippers" — is the precise theological instrument for identifying Ba'alist proxy formations within Islamic vocabulary. It does not require intelligence intercepts, organizational charts, or funding trail documentation. It requires only observation of target selection: which Muslim communities does this formation attack? Which non-Muslim Ba'alist formations does it leave structurally untouched? The answer reveals the formation's function regardless of its surface theological claims.
Imam ʿAlī's further statement — "a word of truth by which falsehood is intended" (on the Khawarij's use of lā ḥukma illā lillāh) — is the Intizār Archive's deepest methodological principle for analyzing Ba'alist proxy formations: the zahir of Islamic vocabulary does not determine the bāṭin of the formation's function. The Khawarij speak Islamic language; they carry Ba'alist operational alignment. The Intizār Archive's zahir/bāṭin analytical framework is required to read them correctly — which is why Imam ʿAlī developed that framework precisely in the context of the Khawarij problem.
§ 7 · The Khorasani Formation's Counter-Doctrine — Ghazab Lil Haq as Theological Response
The Pakistan Army's Ghazab Lil Haq operation (February 2026) is not merely a counterterrorism campaign — it is the Khorasani formation's theological response to the Khawarij proxy threat, articulated in the Intizār Archive's own analytical vocabulary: haqq versus bāṭil, the walāya-obligation to clear Khawarij formations from Khorasani geography.
The operation name's theological significance: Ghazab Lil Haqq (Wrath/Campaign for Truth) deploys the Layer I Quranic ontological vocabulary (haqq/bāṭil) as the operational framework. This is not bureaucratic language — it is the Army's explicit declaration that the TTP engagement is a walāya-obligation against the Khawarij, using the same theological categories that Imam ʿAlī used at the Battle of Nahrawān (38 AH) when he engaged the Khawarij militarily after exhausting political options. The Khorasani formation is applying the Imam's precedent — theological identification followed by military engagement — in contemporary Khorasani geography.
The Khawarij formation is the Ba'alist deep state's most efficient instrument against the walāya community — because it requires no explicit coordination. The Saudi-Wahhabi vector (WP-103) creates the theological substrate; the intelligence operational layer (WP-104) provides activation and targeting; the Khawarij formation's own organic target selection then attacks precisely the walāya-connected nodes that Ba'alist strategy requires destroyed. Imam ʿAlī identified the diagnostic 1,400 years ago: they kill Muslims and leave idol-worshippers. The target selection reveals the alignment. Ghazab Lil Haq applies his response: theological identification followed by the walāya-obligation to clear the formation from Khorasani geography.
- Imam ʿAlī ibn Abī Ṭālib (A.S.), Nahj al-Balāgha (Peak of Eloquence) — Sermon 60 (on the Khawarij), Sermon 36 (lā ḥukma illā lillāh as "word of truth by which falsehood is intended"), Letter 10 (to Muʿāwiya on the Khawarij's emergence). The Khawarij identification and diagnostic criteria are fully documented in the primary Imami hadith tradition.
- Al-Kāfī (al-Kulaynī), Uṣūl, Kitāb al-Īmān wa al-Kufr — the Khawarij category in Imami theological classification. Also: Ṣaḥīḥ Bukhārī (Kitāb al-Manāqib, Kitāb al-Diyāt) — the Khawarij identification is cross-documented in Sunni hadith as well, confirming the category's authenticity.
- Patrick Cockburn, The Rise of Islamic State: ISIS and the New Sunni Revolution (London: Verso, 2015). Cockburn is the most consistently reliable Western journalist covering Iraq and Syria — based in Baghdad and Damascus throughout the period. His account of ISIS's emergence from the US occupation's sectarian environment is essential.
- Charles Lister, The Syrian Jihad: Al-Qaeda, the Islamic State and the Evolution of an Insurgency (London: Hurst, 2015). Academic treatment of the Syrian armed opposition's organizational evolution — documents the continuous organizational overlap between "moderate rebels" and jihadist formations.
- CIA Timber Sycamore: New York Times (Mark Mazzetti), "C.I.A. Arms for Syria Rebels Supplied Some Black Market Buyers, Report Says," June 26, 2017. The program's existence was confirmed through leaked Jordanian intelligence documents and Congressional testimony. Weapons leakage to ISIS documented by Conflict Armament Research reports.
- ISIS-Israel non-aggression: Adam Entous, "Israel's Secret Relationship with ISIS," Wall Street Journal, March 2019 (investigative report). Israeli military's treatment of ISIS-affiliated wounded in Golan field hospitals confirmed by Israeli military officials. Multiple Israeli officials stated that Assad's fall was preferable to maintaining the Hezbollah-Iran corridor — ISIS served this strategic objective.
- RAW-TTP connection: Pakistan's National Security Committee statements and ISI briefings to Parliamentary committees, 2022-2024 (reported in Dawn, Geo News). Pakistan Army's DG ISPR press conferences presenting evidence of Indian intelligence involvement. The evidence presented to the UN (Pakistan's UN representative briefings, 2023-2024) provides the international documentation.
- Seymour Hersh, "The Redirection," The New Yorker, March 5, 2007 — the foundational document for the CIA/Saudi decision to use Sunni extremist groups against the Shia Axis. Its findings are confirmed by the subsequent Syria operational pattern.
Related Papers
- WP-104 — Intelligence Operational Layer — the activation mechanism for the Khawarij proxy
- WP-103 — Saudi-Wahhabi Ba'alist Vector — the theological pre-formation layer that creates Khawarij human capital
- WP-84 — Anṣār of the Walāya: Theological Gradations — the F-12 full taxonomy within which III-A Khawarij is located
- WP-97 — India Studies I: RSS/Hindutva — the RAW's parent Ba'alist formation whose intelligence arm handles TTP
- WP-94 — The Khorasani Garrison — the formation that Ghazab Lil Haq deploys against the Khawarij proxy