AI War:Threat
The Threat is constituted by all the AI ships free to attack Humans as they see an opportunity.
Source
When the AI reinforces a planet, the new ships are guarding their Guard Posts. When their planet is attacked, they wake up and defend themselves, but once the planet is clear of Human presence, they don't return to their guard posts. Instead, they join the Threat Fleet.
The Preemption Plot allows the AI to assign a portion of their reinforcement directly to the Threat.
The Cross Planet Waves option spawns Waves on AI planets, directly as Threat.
A Cross Planet Attack is basically a massive addition to the Threat Fleet.
Behavior
How smart the Threat Fleet is depends on AI Difficulty. At low difficulty, any fleet joining the Threat will simply walk to human territory without checking its chances of success. At higher difficulty, the Threat Fleet has access to more advanced behaviors.
Threat tends to gather: small groups of awaken ships quickly join larger fleets of awaiting ships.
Threat tends to station near the frontier: ships often move toward a wormhole leading to human territory but instead of crossing it they then move to a gathering place nearby.
Threat tends to roam the frontier: sometimes a Threat Fleet makes a detour from a frontier planet to another. This is often to approach a less protected Human planet when Human fleets move.
Threat tends to back-stab: when Human fleets are engaged with AI forces in AI territory, it may let Human planets undefended. If a Threat Fleet at the frontier of a Human planet thinks it has good chances of success, counting local defense and nearby unengaged Human fleets, it will invade. This often forces Human players to retreat or lose a planet.
Threat may intercept Human invasions: while this is more the role of the Special Forces, Threat Fleet might join a battle in AI territory if no back-stab opportunity is left by the Human move.
Threat may scatter to pressure different Human planets at once. Cross Planet Attacks often do that.