Resources
The Pathway to Violence, and Where a School Can Still Step In
After nearly every school attack, the same reconstruction happens. Investigators lay out the weeks and months beforehand and the line comes into focus: a grievance nobody addressed, comments that grew more specific, research that should have raised a flag, preparation that had visible edges. In hindsight it reads like a straight road. The hard part for anyone standing in a hallway in real time is that the road doesn't announce itself as a road. It looks like one difficult kid having one bad week, over and over, until it doesn't.
Threat assessment researchers Frederick Calhoun and Steve Weston named this progression the pathway to violence in 2003, and it has held up as one of the field's most useful frameworks since. It isn't a prediction tool. It's a map of where, along a route that some students travel toward violence, an adult's response can still change the destination.
The shape of the pathway
The pathway runs, roughly, through six stages: grievance, ideation, research and planning, preparation, breach, and attack. Students don't always move through them in a straight line, and most students who show early stages never advance further. That's precisely why the framework is useful for educators: it isn't a checklist for identifying a dangerous kid, it's a set of points where a low-cost, humane intervention can interrupt a trajectory before it becomes one.
Grievance is where it starts, and it starts constantly, in every school, almost always going nowhere near violence. A student who feels wronged, by a teacher's grade, a coach's cut, a breakup, a rumor, is having a completely ordinary experience. What separates a grievance that resolves from one that doesn't is whether it fades or calcifies. A kid who's still angry about the same slight weeks later, retelling it the same way, building a story where they're the wronged party and someone owes them something, has moved past a bad day. The educator's move here is unglamorous: take the grievance seriously as a grievance. A kid who feels heard by an adult is a kid whose grievance has somewhere to go besides inward.
Ideation is where violence enters as a thought, even a passing or hypothetical one. This is also where leakage tends to first appear, in a comment, a piece of writing, a drawing, something that surfaces the idea before it's acted on. The Secret Service's 2021 study of averted school attack plots found that 93% of plotters showed some observable concerning behavior before the plot was stopped, and nearly half stated their intent outright to someone. Ideation alone, especially a single instance, is common and usually passes. What earns attention is the same thing that always earns attention in this framework: does it keep coming back, and is it getting more specific.
Research and planning is where specificity becomes the signal. A student reading about violence in the abstract, out of morbid curiosity or because a news story raised the topic, is not unusual. A student narrowing in on logistics, a particular person, a particular place, timing, method, has moved from thinking about the idea to working on it. This stage often leaves a digital trail, search history, saved content, messages, that a school resource officer or district IT partner can help surface once a concern is reported. It rarely announces itself in the classroom.
Preparation involves acquiring means and rehearsing the plan: securing access to a weapon, testing security or routines, giving away possessions, saying goodbyes that don't fit the occasion. This stage is where the response has to widen past a single caring adult. It needs the threat assessment team, campus security, and often law enforcement, moving with real urgency rather than routing through the ordinary discipline process.
Breach is the last step before the act: getting into position, closing the distance to the target, getting past whatever security stands in the way. In the original model it is a separate stage from attack precisely because it is the final moment where something can still be interrupted, though by then the interruption belongs to law enforcement and campus security, not to a teacher. These two stages are included here not because a classroom can do anything at either one, but because they are what make the earlier stages legible in hindsight. Almost every case that reaches them had visible steps along the way.
What holds the pathway together
No single stage is the whole story, and no single behavior at any stage reliably predicts what comes next on its own. What the research consistently finds is that risk clusters, a grievance that isn't fading, alongside ideation that keeps surfacing, alongside a life that's visibly narrowing at the same time. That clustering, not any one comment or one bad day, is the threshold worth escalating on.
This is also why schools build threat assessment teams instead of asking one teacher to make the call alone. A team pulls together what a single classroom can't see: the counselor who knows the family situation, the SRO who knows what turned up in a report, the administrator who knows the disciplinary history, the teacher who noticed the writing assignment that didn't sit right. The pathway model gives that team a shared vocabulary for where a student is and what response actually fits.
What this means for your Monday morning
You don't need to diagnose which stage a student occupies; that's the team's job once you report, not yours to solve solo. What you're positioned to notice is change and persistence: a grievance that isn't fading, comments that are getting more specific rather than less, a student's world visibly narrowing. One data point earns a conversation. A pattern earns a report.
Document what you observed, not your interpretation of it: the words, the date, who else was present, whether it's happened before. Send it to your team promptly rather than sitting with it. The pathway is long by design, which means most of the time, there's still a stage left where stepping in works.
Where to go from here
Recognizing the shape of the road is only useful if you also know what to do when you spot a student on it. That's the difference between a framework you've read about and one you can actually use on a Tuesday afternoon.
Sources and further reading: Calhoun and Weston, Contemporary Threat Management (2003); U.S. Secret Service NTAC, Averting Targeted School Violence (2021); FBI Behavioral Analysis Unit, Making Prevention a Reality (2017)