# CECOT, Global X, and Offloading Domestic Extremists *What, exactly, is the expanding Guantánamo 2.0 / El Salvador-CECOT removal architecture being built to do, and who is it ultimately designed to hold? Is the visible immigration mission the whole purpose of Global X, CECOT, offshore detention, rendition-style transfer capacity, and rapidly expanding removal infrastructure, or merely the first operational use of a system whose capacity could later be redirected toward other legally removable populations? Could the deeper problem be one of selection-identifying, sorting, adjudicating, and separating genuinely dangerous domestic extremists from millions of merely angry, provocative, or politically heterodox citizens-and, if so, are we watching the construction of an institutional mechanism capable of solving that problem? Most provocatively, is Trump's apparent flirtation with extremist constituencies simply political recklessness, or could some portion of the spectacle function as a self-selection environment, encouraging otherwise latent actors to identify themselves through affiliation, conduct, networks, threats, and increasingly explicit declarations? And if the enormous removal apparatus now taking physical form substantially exceeds what its publicly stated rationale appears to require, the unavoidable question is not what officials say it is for, but what future contingency would make all of that capacity suddenly make sense?* Three days from this writing the United States marks **twenty-five years since September 11, 2001**. A quarter century is long enough for an event to become a date on a calendar rather than a governing fact, and long enough for a generation to reach voting age with no memory of watching the towers come down. It is not long enough for the strategic problem to have gone anywhere.<!--more--> What follows is an attempt to describe, without flinching in either direction, what has actually been built in the last two years — the personnel, the facilities, the legal instruments, and the extraterritorial arrangements — what it is plausibly for, what it has actually done, and where it fails. The subject is uncomfortable in both directions at once, which is usually the sign that it is worth writing about. ## The Threat Is Not Hypothetical Begin with the part that no serious analyst disputes, because a great deal of commentary on removal infrastructure proceeds as though the threat picture were a rhetorical device. **October 7, 2023 was not a lone actor.** It was a coordinated, military-scale assault by an organized force killing roughly twelve hundred people, and it was executed by an organization embedded in a network of Iranian-sponsored proxies including Hezbollah and the Houthis. That is state-adjacent capability, openly declared, with an explicitly stated objective regarding the state of Israel. Treating it as an aberration in a threat landscape otherwise composed of isolated individuals is an analytic error, and the analytic error has consequences for what capabilities a country decides it needs. In the United States the composition differs but the lethality does not. CSIS's *Global Terrorism Threat Assessment 2026* finds no single paramount threat but rather formal groups, loose networks, and lone actors, and observes that **jihadist attacks remain rare but disproportionately lethal** — the Bourbon Street attack in New Orleans on New Year's Day 2025 killed fourteen people. The *Global Terrorism Index 2026* records global terrorism deaths falling twenty-eight percent to 5,582 while noting the opposite movement in the West, where **terrorism deaths rose 280 percent in 2025**, with political polarization, rising antisemitic violence, and the rapid online radicalization of young people named as the drivers. The Islamic State remains the deadliest single organization worldwide. Infrastructure is a stated adversary objective rather than an inference. The 2013 sniper attack on Pacific Gas and Electric's **Metcalf** substation demonstrated the vulnerability; the 2022 **Moore County** attack in North Carolina blacked out roughly forty-five thousand customers; and CISA has issued advisories on Iranian-affiliated **CyberAv3ngers** compromising Unitronics programmable logic controllers at United States water utilities. A country that has watched an organized force cross a border and kill twelve hundred civilians, and that knows its own grid and water systems are being probed, is not behaving irrationally when it builds capacity. ## Naming the Adversary Correctly Is an Operational Requirement Here the analysis has to be precise, and the precision is not a concession to sensitivity. It is the difference between a working target set and a broken one. The discriminating variable is not a religion of roughly two billion people. It is **Islamism as a political-legal program** — the specific ideological configuration holding that sovereignty belongs to a divine legal order that supersedes constitutional authority, and that this order must be established, by force where necessary. The proof that this distinction is real and operational is that **Muslim states enforce it themselves**. Saudi Arabia designated the Muslim Brotherhood a terrorist organization in 2014, as did the United Arab Emirates, Egypt, and Bahrain. Those governments are not squeamish and they are not confused about theology; they made a threat assessment about a political movement and acted on it. The casualty distribution proves the same point from the other direction. Under GTI 2026, the Sahel accounts for more than half of all terrorism deaths, and roughly seventy percent occur in five countries: Pakistan, Burkina Faso, Nigeria, Niger, and the Democratic Republic of the Congo. **Jihadism kills Muslims first and in overwhelming numbers.** It is a parasite on its host population before it is anything to the West, which is precisely why a counter-jihadist coalition containing Saudi Arabia, the Emirates, Egypt, Jordan, Morocco and the Abraham Accords signatories is possible at all. And the adversary has published his preference on this question. Following the Paris attacks, the Islamic State's own strategic literature named the objective as the **extinction of the grayzone** — the deliberate provocation of Western societies into treating all Muslims as enemies, so that the space in which Muslims live peacefully in the West collapses and recruitment becomes compulsory rather than voluntary. Adopting the civilizational framing is therefore not merely inaccurate. **It is executing the adversary's stated strategy on his behalf, without invoicing him for it.** In the vocabulary developed elsewhere in this work: it lowers the implied risk premium on a class of action, and the marginal actors who enter that market when the price falls have names — Christchurch, El Paso, Buffalo. A price-setter who publishes that framing is a price-setter, and the mechanism does not care about his intentions. ## The Configuration Question, Stated Properly There is a real argument underneath the crude one, and it deserves to be made at full strength rather than avoided. Compare three normative traditions by structure rather than by content. **Judaism** carries a comprehensive legal order in halakha but is non-proselytizing, which bounds its jurisdictional claim to a self-selecting community. **Christianity** is universally proselytizing but, after a long and violent argument with itself, largely separated its normative claims from an integral legal system — canon law survives as internal church governance rather than as a competing civil jurisdiction. **Islam** is universally proselytizing *and* carries in sharia a comprehensive legal order addressing civil, criminal, family, and commercial matters. The claim is not about the piety or violence of adherents. It is that **the combination of a universal missionary obligation with an integral legal order generates a specific jurisdictional friction with constitutional supremacy** that the other two configurations, for structural reasons, generate less of. That argument is serious and it is also contested, and honesty requires the counterweight. Muslim-majority states operate secular legal orders — Turkey since Atatürk, Kazakhstan, Senegal, Indonesia's substantially secular national law. Christianity operated integral legal orders for a millennium and produced confessional states, Geneva, and Massachusetts Bay; the separation was an achievement rather than an essence. Survey research repeatedly finds that large majorities of Western Muslims accept the supremacy of national law. And the vast diversity of jurisprudential schools makes any claim about what "sharia requires" in a Western polity closer to a political question than a doctrinal one. What survives is narrow and useful. **The state's interest is not in what anyone believes. It is in whether any person or organization asserts a competing legal jurisdiction over conduct within its territory** — and that interest is identical whether the competing claim is theological, sovereign-citizen, militia, or anything else. That formulation is enforceable, it applies symmetrically, and it does not require the government to have opinions about revelation. ## Withholding the Map Is Also a Harm The strongest evidence for the proposition that institutional cowardice about naming problems produces worse outcomes is not rhetorical. It is documented. The Jay Report on Rotherham found approximately **1,400 children** sexually exploited over sixteen years, and found that officials had been reluctant to identify the ethnic dimension of the perpetrator pattern for fear of appearing racist. Subsequent inquiries in Rochdale, Telford, and elsewhere found comparable failures. The pattern is not that authorities lacked information. It is that **they possessed the map and withheld it from the public because publishing it was socially costly**, and children were raped in the interval. That is a specific and evidenced instance of a general failure this body of work names **map-deprivation** — the withholding of an accurate environment-model from people who must act inside the territory, which is violence by omission. It indicts institutional conduct rather than a population, which is what makes it usable. And it establishes the reciprocal duty on anyone arguing the other side of this question: the answer to a suppressed pattern is to publish the pattern accurately, not to inflate it into a characterization of everyone who shares a demographic with the perpetrators. Both errors are map corruption. Only one of them gets called that. ## Symmetry Is a Requirement, Not a Courtesy The apparatus under discussion is only legitimate if it is blind to the direction an ideology leans, and the American data make that requirement concrete rather than abstract. By volume, CSIS finds **anti-government extremism responsible for the most terrorist incidents in the United States in 2025**, with the second-highest death toll among the four movements tracked. Oklahoma City remains the benchmark domestic mass-casualty attack and it was not jihadist. White supremacist terrorism has killed fewer people in the short term while retaining its structural potential. And the left-hand column is no longer theoretical either: attacks on immigration enforcement facilities and personnel, including the ambush at Prairieland, belong in the same behavioral category and should be prosecuted as such. **A classifier that only sees one direction is not a partisan instrument. It is a broken instrument**, because the residue it exists to find is defined by behavior rather than by affiliation, and it will systematically miss half of what it is looking for. The rule that makes the whole apparatus defensible is that white nationalism, jihadism, accelerationism, anarchist violence, anti-government terrorism, and any future configuration are evaluated by **behavioral pathway and threatened harm**, never by whether the ideology flatters whoever currently holds power. ## The Buildup Is a Fact Anyone claiming that the removal infrastructure is a rhetorical exaggeration has not read the procurement documents, and the scale is not in dispute. An internal ICE memorandum dated **13 February 2026**, describing the **Detention Reengineering Initiative**, lays out a target capacity of **92,600 detention beds** — a figure approaching the size of the entire federal prison system. The plan specifies **eight mega-centers of up to 10,000 detainees each, fully operational by 30 November 2026**, sixteen regional processing sites holding one thousand to fifteen hundred for stays of three to seven days, and acquisition of ten existing turnkey facilities. Estimated cost is **$38.3 billion**, funded through congressional allocation under the One Big Beautiful Bill Act, with the broader authorization reported at **$45 billion** and sufficient to operate up to 135,000 beds through fiscal year 2029. ICE has added **12,000 new law enforcement officers** through surge hiring. At least seven warehouses, some exceeding a million square feet, have been purchased across Arizona, Georgia, Maryland, Pennsylvania, and Texas. The stated strategy is **one million removals per year**. Testifying before the Senate Homeland Security and Governmental Affairs Committee, the ICE director stated that the agency is tracking approximately **1.6 million final removal orders**, with approximately **800,000 of those having criminal convictions.** Read that last sentence twice, because it is the whole argument in one statistic from the government's own witness. Eight hundred thousand people with final orders and criminal convictions is a defensible enforcement priority by any standard. The other eight hundred thousand have final orders and no criminal conviction, and what happens to them is entirely a question of **what the score licenses** — which is the only question that has ever mattered about any classifier. ## What CECOT Actually Was In March 2025 the administration invoked the **Alien Enemies Act of 1798**, declaring the Venezuelan organization Tren de Aragua an invading force, and transferred roughly 238 men to El Salvador's **Centro de Confinamiento del Terrorismo**. Judge Boasberg ordered the flights returned; they proceeded regardless. In April 2025 the Supreme Court held that the Act could be used but that those subject to it were entitled to due process, including adequate notice and opportunity to challenge removal. The men were held roughly four months and returned to Venezuela in July 2025 as part of a prisoner exchange. On **22 December 2025** Boasberg ruled that 137 of them had been denied due process, finding that the United States had retained **constructive custody** throughout — that El Salvador held them at American behest, partly in exchange for **$4.7 million** — and that they should have had the opportunity to contest the gang designation. On **12 February 2026** he ordered the government to facilitate return, at government expense, for those wishing to appear at a port of entry to litigate their designation. Then there is the finding that matters most operationally. A *New York Times* investigation, drawing on prosecutors, law enforcement officials, court records, and reporting across multiple countries, found that **most of the men sent to CECOT had no criminal record in the United States or in the region.** ## The Selection Failure Is the Real Scandal The objection to that finding is obvious and worth stating in its strongest form: CECOT is a terrorism confinement center, nobody is sending choirboys, and the absence of a *United States* conviction proves little about a foreign national's history in a country whose records are unavailable. That objection has force and it does not survive contact with the mechanism. **The selection ran substantially on tattoos and nationality.** That is a **status classifier** — it sorts on what a person is rather than on what a person has done — and the entire framework this body of work has built says that status may never stand alone. Conduct is the predicate; trajectory is the multiplier that sets urgency and depth of the look; status is not an input at all. A crown tattoo is not conspiracy, acquisition, reconnaissance, or material support. The consequence is not primarily an injustice complaint. **It is an operational failure, and it cuts in the direction the hard-liners should care about most.** A terrorism confinement facility filled by a status classifier contains the wrong men, which means the finite attention, transport, diplomatic capital, and legal exposure spent filling it was not spent on the person acquiring precursors. That is the same arithmetic as spending a threat-assessment team on an eleven-year-old flagged with no identified ideology while the man with the rented truck completes his trajectory. **A bad classifier fails in both directions simultaneously**, and the second failure kills people. ## The Citizen Breach The machine does not check, and this is documented rather than alleged. **Brian José Morales García**, a twenty-five-year-old born in Colorado, was deported to Mexico in April 2026 following a traffic stop near Fredericksburg, Texas, initiated for a window tint violation. He told federal agents repeatedly that he was a United States citizen and offered his birth certificate and Social Security number. They did not believe him. After suit was filed in federal court in Austin as *Morales-Garcia v. Mullin*, and after submission of hospital records, witness affidavits, and a certified Colorado birth record, he was permitted to re-enter on **30 August 2026** — nine days before this writing. He is not an isolated instance. **GAO-21-487**, issued July 2021, found that ICE arrested 674, detained 121, and removed **70 potential United States citizens** in the period reviewed. Analysis of TRAC data found ICE wrongly identified at least 2,840 citizens as potentially removable between 2002 and 2017. In June 2025 ICE detained **Chanthila Souvannarath**, who held a substantial claim to derivative citizenship through his father's naturalization, and deported him to Laos in defiance of a federal court order. And **Kilmar Abrego Garcia**, whom the government conceded it removed in error to CECOT, became the case the administration argued it lacked authority to reverse. Here is the point at which the intent argument fails, and it fails on its own terms. Nobody builds ninety-two thousand beds in order to detain law-abiding citizens; that is correct and it is not the relevant question. **Intent does not govern use. The cost matrix does.** A system processing toward one million removals a year, staffed by twelve thousand officers hired in a surge, operating against 1.6 million final orders, will produce errors at a rate determined by its thresholds and its verification procedures, and those errors will fall on whoever the procedure fails to check. The citizen breach is not evidence of malice. It is evidence that **the verification layer is under-built relative to the throughput layer**, which is an engineering finding, and engineering findings are fixable. ## Three Hypotheses, Tiered Beyond the record there are inferences worth stating as inferences, and the discipline of marking them is what separates analysis from assertion. **Forward deployment as training on a soft target.** The hypothesis holds that an enforcement service being scaled from a standing start to one million removals a year requires operational reps, and that immigration enforcement against a largely compliant population supplies volume, procedural repetition, and institutional muscle memory that could not be acquired against a hardened target set. *Plausible, unresolved.* The buildup is documented; the surge hiring is documented; the throughput objective is stated. What is not documented is any statement of purpose beyond immigration enforcement itself, and the simpler explanation — that the administration means exactly what it says about removals — accounts for the same facts without additional assumptions. The hypothesis earns consideration because capability precedes mission with regularity, not because anyone has evidenced it. **Extraterritorial removal as a holding action on hard cases.** The hypothesis holds that a legal architecture permitting transfer to a foreign facility under an eighteenth-century wartime statute, with jurisdiction contested and return disputed, functions as a mechanism for moving genuinely dangerous individuals out of a domestic process that cannot hold them, buying time to determine disposition. *Plausible, unresolved, and legally corroded by the record.* Boasberg's constructive-custody finding cuts directly against it: a court has held that transferring a person abroad does not extinguish American legal responsibility, which removes most of the utility the hypothesis assumes. What remains is that the arrangement was tried, that money changed hands, and that the courts have now defined its limits. **Deterrence by uncertainty.** This one is the strongest and the least discussed. When the FBI announced Operation Trojan Shield — having built and operated the ANOM encrypted phone network itself, distributing more than twelve thousand devices to over three hundred criminal syndicates — an assistant special agent in charge said publicly that the hope was that criminals worldwide would **fear that the FBI or another agency might in fact be running their platform.** That is an announced objective of manufacturing uncertainty about who owns the environment, and it costs nothing to maintain once established. Applied here: a visible, well-publicized removal and confinement architecture, with contested legal boundaries and demonstrated willingness to move people beyond easy recall, produces a deterrent effect on marginal actors that is entirely independent of how many people it actually processes. *Strongly indicated as an effect; unresolved as a designed objective.* The effect exists whether or not anyone drew it, which is the standing rule in this work about every apparatus of this kind. ## What Actually Works Strip the argument to what the evidence supports and a workable posture emerges that neither camp will find comfortable. **Prosecute conduct, and let trajectory set urgency.** The pathway to a mass-casualty attack is paved with completed offenses — conspiracy, attempt, solicitation, material support, unlawful acquisition — and inchoate liability exists so the state need not wait for detonation. Scattered offenses are illegible as a pathway without the pattern, so trajectory assessment is indispensable; but trajectory multiplies conduct rather than substituting for it. Every one of the forty-three late-stage plots MI5 and British police disrupted since March 2017 terminated in a prosecution for conduct that had already occurred. **Inoculate the population, because it requires diagnosing no one.** The most effective intervention in this entire domain is also the least coercive: technique-based psychological inoculation, delivered through advertising inventory at roughly five cents per exposure, effective across the political spectrum, adjudicating no truth claims and creating no file on any individual. Scapegoating is one of the techniques it inoculates against, which is the mechanism at the root of every event discussed in this article. **Build the clearing power into the flagging power.** Any apparatus that can generate a designation must be able to remove one, and the subject must be able to invoke that process. Morales García spent four months out of his country because the system that could deport him had no correspondingly fast mechanism to verify him. That is not a philosophical objection; it is a missing subroutine. **Keep the symmetry absolute**, because the moment the classifier is understood to lean, it stops being an instrument of the state and becomes an instrument of an administration, and every subsequent administration inherits it. The twenty-five-year anniversary falling this week is the right occasion for the honest version of all of it. The threat that produced this architecture was real, remains real, and has organized state-adjacent expressions that killed twelve hundred people in a single morning less than three years ago. The architecture built to answer it is now larger than the federal prison system, operates on a status classifier that has already put the wrong men in a terrorism facility and the wrong citizen on a plane, and has no verification layer proportionate to its throughput. **Both of those sentences are true at once, and any account that can only hold one of them is not describing the situation — it is choosing a side in an argument that the people planning the next attack are not having.** --- [[about/About Bryant McGill|Bryant McGill]] is a Wall Street Journal and USA Today bestselling author, systems architect, technologist, and strategic advisor, as well as a Congressionally Recognized Ambassador of Goodwill and United Nations–appointed Global Champion. His work spans naval intelligence systems, computational linguistics, artificial intelligence, digital transformation, and civilizational governance architecture. His forward analysis on U.S.–Israel Pax Silica frameworks has appeared in Jewish/Jerusalem News Syndicate (JNS). --- ## References **Threat picture** - Center for Strategic and International Studies, [Global Terrorism Threat Assessment 2026](https://www.csis.org/analysis/global-terrorism-threat-assessment-2026). - Institute for Economics and Peace, [Global Terrorism Index 2026](https://www.visionofhumanity.org/wp-content/uploads/2026/03/Global-Terrorism-Index-2026-Report.pdf). - CISA, [IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including U.S. Water and Wastewater Systems](https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a). **Removal infrastructure** - Department of Homeland Security, [ICE FY2026 Congressional Budget Justification](https://www.dhs.gov/sites/default/files/2025-06/25_0613_ice_fy26-congressional-budget-justificatin.pdf). - Fox News, [ICE ramps up deportation push by boosting capacity to 92,600 beds with $38.3B expansion](https://www.foxnews.com/us/ice-ramps-up-deportation-push-92600-new-beds-38-3b-expansion) — reporting the 13 February 2026 Detention Reengineering Initiative memorandum. **CECOT and the Alien Enemies Act** - NPR, [Alien Enemies Act deportations violated due process, judge says](https://www.npr.org/2025/12/22/nx-s1-5652187/alien-enemies-act-deportations-case). - NPR, [Federal judge orders return of Venezuelan migrants deported to El Salvador under Alien Enemies Act](https://www.npr.org/2026/02/12/nx-s1-5712542/federal-judge-orders-return-of-venezuelan-migrants-deported-to-el-salvador-under-alien-enemies-act). - NBC News, [Venezuelans sent to Salvadoran prison can be returned to U.S. with a court order](https://www.nbcnews.com/news/us-news/former-detainees-el-salvador-prison-request-hearing-rcna258208). **Citizens removed** - Government Accountability Office, [GAO-21-487: Immigration Enforcement — Actions Needed to Better Handle, Identify, and Track Cases Involving Veterans and U.S. Citizens](https://www.gao.gov/products/gao-21-487). - Texas Tribune reporting on *Morales-Garcia v. Mullin*, via [Democracy Now](https://www.democracynow.org/2026/9/1/headlines/us_citizen_deported_to_mexico_granted_permission_to_return_to_the_us). - National Immigration Project, [ICE Deports Man Claiming U.S. Citizenship to Laos Despite Federal Court Order](https://nipnlg.org/news/press-releases/ice-deports-man-claiming-us-citizenship-laos-despite-federal-court-order). **Institutional failure and map-deprivation** - Alexis Jay, [Independent Inquiry into Child Sexual Exploitation in Rotherham 1997–2013](https://www.rotherham.gov.uk/downloads/file/279/independent-inquiry-into-child-sexual-exploitation-in-rotherham). **Deterrence architecture** - Federal Bureau of Investigation, [Operation Trojan Shield](https://www.fbi.gov/news/stories/fbi-global-partners-announce-results-of-operation-trojan-shield-060821). - MI5, [Director General Ken McCallum gives latest threat update](https://www.mi5.gov.uk/director-general-ken-mccallum-gives-latest-threat-update). - Jon Roozenbeek et al., [Psychological inoculation improves resilience against misinformation on social media](https://www.science.org/doi/10.1126/sciadv.abo6254), *Science Advances*, 2022. ## Collection and ontology routes This article is the [[collections/Gamification|Gamification Collection]]'s bounded inquiry into the coercive end of an extremism-prevention system: selection, cross-border transfer, detention, remediation, and legal constraint. It should be read as a threat-configuration analysis, not as evidence that a described program already exists. Follow [[wiki/Extremism Interdiction|Extremism Interdiction]] for the lawful prevention continuum, [[wiki/Risk Scoring Systems|Risk Scoring Systems]] for selection and false-positive risk, [[wiki/Non-Substitutability|Non-Substitutability]] for the failure of symbolic settlement, and [[articles/gamification/Extraterritorial Removal of Domestic Extremists|Extraterritorial Removal of Domestic Extremists]] for the extended legal and institutional research surface. [[articles/gamification/Data Trafficking and Jurisdictional Arbitrage|Data Trafficking and Jurisdictional Arbitrage]] supplies the jurisdictional mechanism; [[articles/gamification/Inside the Precision of Modern Kill Chains|Inside the Precision of Modern Kill Chains]] supplies the warning that delivery precision cannot repair a mistaken classification.