When Every Defense Becomes a Provocation

In the first four days of July 2026, three things happened that do not fit the story most readers have been carrying about this war. On July 1, Reuters revealed that China had covertly trained roughly 200 Russian military personnel at People's Liberation Army facilities through 2025, including a November course on protection against radiological, chemical, and biological weapons. Russia's defense minister personally authorized the operation, and some of the trained personnel have since deployed to Ukraine ^[1]. This is not dual-use trade or diplomatic cover. It is a third state directly preparing Russian soldiers for the battlefield — something Beijing's public neutrality was never supposed to encompass. Two days later, on July 3, US intelligence warned Poland that Russia is planning a limited armed provocation on Polish territory — drone or missile strikes on critical infrastructure, or a ground incursion from Belarus or Kaliningrad, potentially staged as a false-flag incident — to test NATO's collective-response mechanism and portray the alliance as a paper tiger ^[2]. The next day, July 4, Russia formally accused Latvia, Estonia, and Lithuania of providing air corridors for Ukrainian drones striking Russian civilian infrastructure, with Defense Minister Shoigu invoking Article 51 of the UN Charter — the self-defense clause Russia used to justify its 2022 invasion of Ukraine — to claim a right to respond against the named states ^[3]. Three lines crossed in 72 hours. A third state actor entered battlefield preparation. The NATO track crossed from coercive signaling to operational planning for a provocation on alliance territory. And Russia legally framed three NATO members as co-belligerents. All of this landed in the same window as the largest mutual aerial strikes of the entire war ^[4]. For the past ten weeks, the war has been described on two tracks: Russia grinding down Ukraine, and Russia probing NATO's edges. That framing held while the NATO track was general pressure — airspace violations, hostile rhetoric, troop concentrations. It cannot hold when a specific provocation is being planned on Polish soil and three Baltic states are named in a legal document as parties to the conflict. What connects these three signals is not a single actor's strategy. It is a pattern, and the pattern runs deeper than any one week. Through May and June, a chain of stray-drone incidents accumulated across the Baltic. Russian drones breached Romanian airspace; Ukrainian drones strayed into Latvian and Lithuanian airspace; NATO F-16s shot down a Ukrainian drone over Estonia, and French Rafales shot down another over Latvia — the first NATO shootdowns in Baltic airspace ^[5][6][7]. A stray Ukrainian drone struck a Latvian oil depot, and Latvia's defense minister resigned over it ^[8]. None of these incidents were designed by Moscow or Kyiv. They were the war's physical spillover — drones wandering off course, airspace violations that no one ordered as acts of war. Russia has spent the weeks since turning that spillover into a legal case. Shoigu first invoked Article 51 in April as a general allegation against NATO. By late May, Russia was specifically accusing Latvia and Lithuania of hosting drone corridors and threatening to bomb decision-making centers ^[9]. By July 4, all three Baltic states were formally named ^[3]. The progression is deliberate: from general complaint to specific legal framing, building an evidentiary record out of incidents that began as accidents. Estonia's foreign minister, Margus Tsahkna, gave the accusation an unintended foundation. Asked about Ukrainian drone incursions through Baltic airspace, he said nothing to restrain them.

Of course we are not happy about [the UAV incursions]. But we are not saying to Ukraine to stop it. — Margus Tsahkna

A NATO member state publicly declining to constrain Ukrainian operations through its airspace is, whatever the intention, the factual basis Russia needs for a co-belligerent claim. The accusation is both a deliberate legal escalation and, in narrow terms, an accurate description of Baltic state policy. This is the first half of the pattern: unsteered consequences become raw material for deliberate escalation. The second half runs in the opposite direction, and it is where the cycle becomes dangerous. NATO's institutional response to the widening has been to build capacity. The alliance committed to 5% of GDP defense spending at the Hague summit ^[10]. The Ankara summit, set for July 7-8, is focused on translating that pledge into concrete production targets and long-term Ukraine support — all capacity-building, nothing de-escalatory ^[11]. Lithuania has moved to lift its constitutional ban on nuclear weapons ^[12]. France announced a forward nuclear deterrence strategy ^[13]. Every response to the war's widening has been to increase military capability, not to reduce the conflict's scope. Vladimir Putin has converted each of these defensive moves into evidence of offensive intent. On June 23, he told an audience that NATO's spending increases amounted to war preparation.

They are preparing for war against us and significantly increasing their defense spending. — Vladimir Putin

Russia is allocating 40% of its national budget to military and security, with more than 1,000 new weapon systems tested in Ukraine ^[14]. Kaja Kallas, the EU's foreign policy chief, diagnosed the logic plainly.

There comes the point where they need to escalate in order to justify the mobilization. — Kaja Kallas

So the cycle closes: NATO builds up because the war is widening. Russia frames the buildup as aggression and escalates further. The escalation produces more spillover, more incidents, more legal ammunition. NATO builds up more. Each side's defensive response becomes the other's justification, and neither side designed the mechanism that connects them. Sweden's defense minister has confirmed that Russia is already translating this narrative into operational behavior, with Russian hybrid operations moving from non-kinetic harassment toward kinetic action ^[9]. Russian official rhetoric has shed even the pretense of restraint — one state media figure told a Western interviewer, in a passage that circulated widely among European officials, that Russia would "kill you all" and sail over what was once Britain ^[9]. The language is lurid, but it tracks with the operational shift Sweden describes. Intelligence chiefs on both sides of the Atlantic have identified this cycle as the most dangerous structural condition the war has produced. GCHQ director Anne Keast-Butler said in late May that the risk of miscalculation was as high as she had ever seen it ^[15]. The IAEA's Rafael Grossi warned that the nuclear domain now features more actors, more risks, and less clarity than at any point since the Cold War's height ^[16]. Dutch intelligence assessed in April that Russia could attack NATO within 12 months after Ukraine hostilities cease, and flagged deepening Russia-China military-technological collaboration as a compounding factor ^[17]. What none of these warnings identify is a mechanism to stop it. Secretary of State Marco Rubio acknowledged on June 3 that the United States cannot serve as an impartial mediator in the conflict because it arms Ukraine and sanctions Russia ^[18]. No other party has stepped into that role. Russia's recent diplomatic signals — Lavrov offering to resume talks "from where they left off," which means accepting Russian territorial gains, and Peskov rejecting European negotiation "from a position of strength" — are tactical instruments calibrated to Western fracture, not channels for containment ^[19][20]. NATO is not unified on how to respond even if a mediator did emerge. Bulgaria's president, Rumen Radev, warned that pursuing a conventional military victory over a nuclear power without the ability to counter modern hypersonic weapons could lead to nuclear escalation, and argued Europe should have led negotiations ^[10]. Lithuania's foreign minister, Kęstutis Budrys, accused Putin of deceiving diplomatic efforts and urged continued pressure ^[10]. The alliance is aligned on spending but split on strategy — between those who see the buildup as the only language Russia understands and those who see it as the fuel for the very escalation it is meant to deter. The Ankara summit this weekend will be the first test of whether NATO's institutional machinery can produce anything beyond production targets. The agenda, as outlined by alliance officials, is exclusively militarization: indivisible security against drone incursions, 5% spending, long-term Ukraine support, trans-Atlantic defense industry ^[11]. Poland's prime minister, Donald Tusk, framed the moment in terms that cut past the institutional language.

I don't mean to scare anyone but the coming months may truly be critical, also due to the changing nature of the war. — Donald Tusk

The coming months will answer the question the pattern raises but cannot resolve: whether the cycle's acceleration outpaces any party's ability to recognize it, or whether someone — in Washington, in Brussels, in Ankara — identifies the mechanism and breaks it before the three lines crossed this week become the next three, and the three after that.