# Washington's Privateers of Intelligence: From the Culper Ring to the Coming Market for Civilian Spycraft ![[resources/images/civilian-spycraft.jpg]] **Links**: [Blogger](https://bryantmcgill.blogspot.com/2026/04/civilian-spycraft.html) | [Substack](https://bryantmcgill.substack.com/p/washingtons-privateers-of-intelligence) | [Obsidian](https://bryantmcgill.xyz/articles/The+Coming+Market+for+Civilian+Spycraft) | Medium | Wordpress | [Soundcloud 🎧](https://soundcloud.com/bryantmcgill/civilian-spycraft) <iframe width="100%" height="20" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/soundcloud%253Atracks%253A2310361847&color=%23ff5500&inverse=false&auto_play=false&show_user=true"></iframe><div style="font-size: 10px; color: #cccccc;line-break: anywhere;word-break: normal;overflow: hidden;white-space: nowrap;text-overflow: ellipsis; font-family: Interstate,Lucida Grande,Lucida Sans Unicode,Lucida Sans,Garuda,Verdana,Tahoma,sans-serif;font-weight: 100;"><a href="https://soundcloud.com/bryantmcgill" title="Bryant McGill" target="_blank" style="color: #cccccc; text-decoration: none;">Bryant McGill</a> · <a href="https://soundcloud.com/bryantmcgill/civilian-spycraft" title="America&#x27;s Coming Market for Civilian Spycraft" target="_blank" style="color: #cccccc; text-decoration: none;">America&#x27;s Coming Market for Civilian Spycraft</a></div> > [!info] Civilian intelligence marketplace — wiki map > [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] organizes the firms, people, systems, gates, and participation pathways developed in this article. [[wiki/Civilian Spycraft|Civilian Spycraft]] provides the complete topic map; [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]] supplies the connected intelligence and counterterrorism architecture. > **Operational spine:** [[wiki/Five-Stage OSINT Pipeline|Five-Stage OSINT Pipeline]] · [[wiki/Four-Board Intelligence Labor Model|Four-Board Intelligence Labor Model]] · [[wiki/Citizen-Privateer|Citizen-Privateer]] · [[wiki/Telemetry Civilization|Telemetry Civilization]]. **Don't be shy... you could be a private spy.** *Spying is the ambient operating condition of contemporary American life, in which ordinary citizens, corporate security officers, contractors, OSINT investigators, journalists, platform operators, threat-intelligence vendors, mercenary-spyware firms, fusion-center participants, and AI agents occupy overlapping rungs of the same intelligence ladder. What follows is a historical and structural synthesis, revised and expanded in October 2026, tracing how the American republic was born through civilian intelligence and privateering against empire; how Allan Pinkerton's detective agency industrialized that template from Civil War espionage into corporate strikebreaking and finally into a Swedish-owned risk-management subsidiary that was still placing operatives inside Amazon warehouses in 2019; how the Nationwide Suspicious Activity Reporting Initiative, designed in the final Bush years and scaled under Obama, inducted hundreds of thousands of line officers and private-sector security personnel into a federal reporting architecture; how a USD 14–21 billion OSINT market rests on a data-broker substrate valued above USD 250 billion that the intelligence community now shops through ODNI's Intelligence Community Data Consortium, even as the CFPB's attempt to regulate brokers was withdrawn and Section 702 itself lapsed in June 2026; how Palantir's ICM–ImmigrationOS–ELITE stack, fed by LexisNexis records under a contract that now specifies an API into Palantir, has made the contractor-as-sovereign-function pattern operationally explicit; how Black Cube's operations in Iceland, New Jersey, and Slovenia show the reputational battlefield at full operating tempo; how mercenary spyware has entered domestic American enforcement through ICE's reactivated Paragon contract; how the privateering revival moved from bills in 2025 to an August 2026 National Security Presidential Memorandum that commissions vetted private firms to conduct cyber surveillance and cyber effects operations against foreign criminal networks under bond; how agentic OSINT systems have collapsed the marginal cost of continuous civilian surveillance toward zero; and how the five-stage OSINT pipeline—collection, cleaning, enrichment, modeling, productization—has become the operative seat of sovereign function, demonstrated abroad by Ukraine's purchased satellite and radio-frequency intelligence and the Houthis' subscription AIS targeting, and at home by Texas, where a statewide civilian reporting network, statutorily mandated 287(g) deputization paid by the head, and privately staffed armed transport now form one federated human-provisioning chain; how the civilian intelligence job itself has been disaggregated onto four boards—task, sensor, commission, and agent—where contributors from Maven's crowd annotators to Kyle's registered doorbell cameras work for clients they never see; and how the marketplace era now has its own figures of rank, from Palmer Luckey's Anduril, valued at USD 61 billion in May 2026, to the technology executives commissioned directly into the Army Reserve and the more than 12,000 officers ICE hired from over 220,000 applicants in under a year. The thread running through these layers is a single ontological observation: toolhood is a politically convenient under-description of a relation tending toward twinship, and the privateer, the Pinkerton, the suspicious-activity reporter, the data broker, the contractor, the mercenary-spyware operator, the citizen analyst, and the autonomous agent are variations on one recurrent figure—the state-adjacent collector operating without the state's badge—now reconstituted at planetary scale and machine speed. The piece closes by mapping the lawful on-ramps through which patriotic Americans can enter this market as citizen-privateers, and by naming the literacy that has always separated the privateer from the pirate: knowing the commission, the client, and the flag. It ends in the telemetry civilization, where observation has become ambient infrastructure, the consequential question has moved to what is done with what is seen, and good faith toward the systems one serves becomes a matter of conduct.*<!--more--> ## I. The Citizen as Sensor, the Sensor as State > [!info] Architecture — connected wiki nodes > [[wiki/Citizen-Privateer|Citizen-Privateer]] · [[wiki/Civilian Spycraft|Civilian Spycraft]] · [[wiki/Intelligence Ecology|Intelligence Ecology]] · [[wiki/Private Intelligence Economy|Private Intelligence Economy]] · [[wiki/Informational Sovereignty|Informational Sovereignty]]. The [[wiki/Central Intelligence Agency|CIA]]'s February 2026 essay, **"[[wiki/Five Lessons in Spying Courtesy of George Washington|Five Lessons in Spying, Courtesy of George Washington]],"** is useful because it points toward a historical recurrence much larger than its own frame: intelligence in America has always belonged to more than formal agencies. Its five lessons—know your adversary, hone your soft skills, collect current intelligence, know your blind spots, cultivate a circle of trust—are drawn almost entirely from Washington's formation as a young Virginia surveyor, envoy, and militia officer between 1753 and 1758, before the Revolution and before the [[wiki/Culper Ring|Culper Ring]]. ([CIA][1]) That choice of source material is itself revealing. The Agency locates the origin of American tradecraft in a **civilian surveyor's notebook**, in a frontier diplomat's elicitation over French wine, and in a provincial officer's frustration with a regular army that refused his scouts. The American intelligence tradition begins with **border figures**—surveyors, merchants, [[wiki/Intelligence Courier|couriers]], sailors, tavern keepers, printers, ferrymen, ship captains, contractors, informants, and civilians who could move through ordinary life without appearing to be part of the state—and it begins with **[[wiki/Distributed Civilian Participation|distributed civilian participation]]**, improvised under existential pressure and later formalized into institutions, contracts, and platforms. The question now is how that old pattern returns under digital conditions as a privatized, platform-mediated, **[[wiki/AI|AI]]-augmented market for [[wiki/Private Citizen Tradecraft|private citizen tradecraft]] and spycraft**, sitting atop a commercial data economy that now reaches almost every American. The Open Source Intelligence sector alone is variously estimated at **roughly USD 14 billion to 21 billion in 2026**, with analyst projections toward USD 43–133 billion by the early to mid-2030s depending on definitional scope, and the [[wiki/Data Brokers|data broker industry]] that feeds it pulled in **more than USD 250 billion in 2022** according to the market-research estimate the Brennan Center relies upon. ([Mordor Intelligence][2], [Global Market Insights][3], [Brennan Center][4]) These are industrial numbers. They describe an infrastructure within which [[wiki/Civilianized Intelligence Collection|civilianized intelligence collection]] is a normal commercial activity, contracted by governments, corporations, journalists, investigators, advocacy networks, political campaigns, and private clients alike. The thesis of this piece is structural. **America was born through civilian intelligence and privateering against empire**; it has continually re-domesticated those tools through corporate detective agencies, fusion-center reporting architectures, contractor-driven analytic capacity, and now agentic AI systems that plan and execute multi-step open-source investigations with limited human oversight. The [[wiki/Privateer|privateer]] of the eighteenth century needed a ship, crew, cannon, insurance, investors, a bond, and a [[wiki/Letters of Marque|letter of marque]]. The **private intelligence actor of the twenty-first century** needs access, tooling, legal ambiguity, narrative skill, and an audience or client—and, since August 2026, can apply to the federal government for a commission, posting a bond as privateers once did. The vessel has become the platform. The prize has become behavioral insight, strategic advantage, located targets, disrupted networks, or monetizable intelligence. The sea has changed; the commission endures. Public purpose and private enterprise are again learning to sail under the same flag, and what is opening is a **market with entrants**: a national-security labor economy in which a patriotic citizen with the right skills can take work that once required a badge, a billet, or a career inside an agency. ## II. Washington's Civilian Intelligence Atmosphere > [!info] History — connected wiki nodes > [[wiki/Culper Ring|Culper Ring]] · [[wiki/George Washington|George Washington]] · [[wiki/Benjamin Tallmadge|Benjamin Tallmadge]] · [[wiki/Abraham Woodhull|Abraham Woodhull]] · [[wiki/Anna Strong|Anna Strong]] · [[wiki/Caleb Brewster|Caleb Brewster]] · [[wiki/Robert Townsend|Robert Townsend]] · [[wiki/Trusted Civilian Intelligence Routing|Trusted Civilian Intelligence Routing]]. AMC's *[[wiki/TURN - Washington's Spies|TURN: Washington's Spies]]* understood this better than many patriotic histories. The series compresses chronology, invents dramatic overlays, and converts historical ambiguity into character melodrama, and historians have said so. Its deeper value is symbolic: *TURN* renders espionage as **social fracture**. [[wiki/Abraham Woodhull|Abraham Woodhull]] is a compromised civilian living inside a divided community, where loyalty, family, commerce, fear, opportunism, ideology, and survival occupy the same room. [[wiki/Anna Strong|Anna Strong]], [[wiki/Benjamin Tallmadge|Benjamin Tallmadge]], [[wiki/Caleb Brewster|Caleb Brewster]], [[wiki/Robert Townsend|Robert Townsend]], [[wiki/John André|John André]], [[wiki/Benedict Arnold|Benedict Arnold]], and the terrifying [[wiki/Robert Rogers|Robert Rogers]] become nodes in an **[[wiki/Intelligence Ecology|intelligence ecology]]**. Every dinner table is a listening post. Every friendship is a possible channel. Every market exchange carries strategic residue. That is the real overlap between Washington's world and ours: **intelligence emerges wherever ordinary life becomes strategically legible**. Mount Vernon describes the historical Culper Ring as a network created under Washington and Major Benjamin Tallmadge to collect information from British-occupied New York; *TURN* dramatizes that network as a civilian atmosphere in which war moves through households before it moves through armies. ([Mount Vernon][5]) Washington's intelligence genius lay in recognizing intelligence as a **living interface between geography, psychology, timing, trust, and [[wiki/Civilian Cover|civilian cover]]**. As a twenty-one-year-old envoy in the Ohio Country he learned that terrain is intention made spatial, and his interpreter learned that the French officers' gracious diplomacy concealed a plan to hold the contested land. At Fort Necessity he learned that losing track of a pursuing enemy converts high ground into a trap. Beside Braddock on the Monongahela he watched institutional confidence harden into an **analytic blind spot** that killed a general and two-thirds of his column. During the Revolution he applied all of it: a circle of trust small enough to survive betrayal yet distributed enough to see what formal command could not. These are lessons in **[[wiki/Informational Sovereignty|informational sovereignty]]**—how a vulnerable system senses danger, filters deception, preserves secrecy, and acts before superior force closes around it. ([CIA][1]) The Culper Ring's world was dangerous because ordinary social life concealed [[wiki/Divided Sovereignty|divided sovereignty]]. A farmer might be a patriot, loyalist, opportunist, informant, smuggler, courier, reluctant collaborator, or terrified neutral. A tavern could become a data exchange; a ferry route an [[wiki/Intelligence Artery|intelligence artery]]. The twenty-first-century equivalent is the **platform profile, the encrypted chat, the location trail, the freelance investigation, the corporate risk dashboard, the leak archive, the AI-summarized social graph, and the private report sold to a client**. The village has become a database. The tavern has become the timeline. The courier has become the [[wiki/API|API]]. The privateer has become the contractor, the [[wiki/OSINT|OSINT]] investigator, the patriotic hacker, the data broker, the threat-intelligence vendor, the mercenary-spyware firm, and the citizen analyst. The Culper Ring's underlying architecture—**[[wiki/Trusted Civilian Intelligence Routing|civilian sensors plus discreet routing plus trusted analysis plus protected identity]]**—is exactly the architecture being rebuilt at planetary scale today. ## III. Privateers: The Letter of Marque as Constitutional Architecture > [!info] History — connected wiki nodes > [[wiki/Letters of Marque|Letters of Marque]] · [[wiki/Privateer Commission|Privateer Commission]] · [[wiki/Article I Section 8 Clause 11|Article I Section 8 Clause 11]] · [[wiki/Revolutionary War Privateers|Revolutionary War Privateers]] · [[wiki/War of 1812 Privateers|War of 1812 Privateers]] · [[wiki/Privateer and Pirate|Privateer and Pirate]]. The privateer analogy is essential because the same Founders who institutionalized civilian intelligence also institutionalized **state-sanctioned private violence at sea**. The Revolution was fought by Continental soldiers, by a small [[wiki/Continental Navy|Continental Navy]], and by private shipowners holding legal authorization—**letters of marque or [[wiki/Privateer Commission|privateer commissions]]**—to attack enemy commerce under state authority. The National Park Service explains the distinction: a Letter of Marque authorized armed merchant ships to challenge enemy vessels during commercial voyages, while a Privateer Commission applied to vessels whose primary purpose was disrupting enemy shipping. In both cases a private actor became an extension of sovereign violence, operating with legal sanction, profit incentive, and risk. ([NPS][6]) Privateering was a **major instrument of asymmetric war**, and the numbers deserve precision. During the Revolution, with documentation incomplete, roughly **1,700 letters of marque** were issued on a per-voyage basis, nearly **800 vessels** were commissioned as privateers, and those vessels are credited with capturing or destroying about 600 British ships—against a Continental Navy that put perhaps sixty-odd vessels to sea across the entire war. ([NPS][6], [TIME][8]) During the War of 1812, Congress issued about **1,100 letters of marque** to a privateer fleet of roughly 500 vessels (many ships held multiple commissions across successive cruises), and American privateers captured at least **1,200 British vessels**, several times the Navy's tally; Baltimore alone took 122 commissions, and in the war's first six months privateers seized some 450 British ships while American armies were failing in Canada. ([American Battlefield Trust][7], [Center for Maritime Strategy][9]) Privateering was cheap, scalable, and emotionally attractive because it let ordinary citizens imagine themselves as participants in national defense. It also fused patriotism with [[wiki/Prize-Taking|prize-taking]], rewarded initiative while inviting abuse, and created a zone in which the state could **outsource risk while private actors absorbed danger and pursued reward**. The architecture matters because the United States never acceded to the 1856 [[wiki/Declaration of Paris|Declaration of Paris]] abolishing privateering among major powers, and [[wiki/Article I Section 8 Clause 11|Article I, Section 8, Clause 11]] remains constitutionally live. ([Center for Maritime Strategy][9]) The precise history of its dormancy is more interesting than the usual shorthand. The United States has issued no letters of marque since the War of 1812, yet Congress last **authorized** the President to issue them on March 3, 1863, for a three-year term, in the middle of the Civil War; the Lincoln administration held the authority in reserve as a weapon against foreign intervention and let it expire unused, while the Confederacy commissioned privateers of its own. The Congressional Research Service records that Congress has not authorized a President to issue the instruments since the Civil War. ([CRS][10]) The clause therefore carries a precedent of **[[wiki/Authorization as Deterrent|authorization as deterrent]] posture**—a capacity legislated, held, and signaled rather than exercised—which is precisely the register in which the 2025–2026 revival first appeared before the executive branch turned it into an operating program (Section XI). Read alongside the privatization of contemporary intelligence and cyber operations, the revival is best understood as **a constitutional architecture being recovered to legitimize what is already happening** in the OSINT, contractor, threat-intelligence, mercenary-spyware, and crisis-intelligence markets. ## IV. The Missing Link: Pinkerton, the Eye That Never Sleeps, and the Industrialization of Private Intelligence > [!info] Pinkerton — connected wiki nodes > [[wiki/Allan Pinkerton|Allan Pinkerton]] · [[wiki/Pinkerton National Detective Agency|Pinkerton National Detective Agency]] · [[wiki/Pinkerton Template|Pinkerton Template]] · [[wiki/Client-Shaped Intelligence|Client-Shaped Intelligence]] · [[wiki/Homestead Strike|Homestead Strike]] · [[wiki/Anti-Pinkerton Act|Anti-Pinkerton Act]] · [[wiki/FAR 37.109|FAR 37.109]] · [[wiki/Pinkerton Inversion|Pinkerton Inversion]]. Between Washington's Culper Ring and the present-day OSINT vendor stands a bridge most contemporary discussions skip: the **[[wiki/Pinkerton National Detective Agency|Pinkerton National Detective Agency]]**, founded around 1850 by [[wiki/Allan Pinkerton|Allan Pinkerton]], a Scottish-immigrant cooper turned Chicago detective. The Pinkerton story is the most important nineteenth-century proof that civilian intelligence in America congeals into a private firm, gets contracted by the state during emergencies, then turns its capacities back on the domestic population for industrial clients. Read carefully, Pinkerton is the genetic ancestor of every modern private spy company, every corporate threat-intelligence team, every rented investigator, and every "trust and safety" risk operation that maps activists, journalists, or labor organizers for paying customers. The arc is almost too neat to be accidental. Pinkerton was an abolitionist who sheltered Underground Railroad fugitives, aided [[wiki/John Brown|John Brown]] and raised money for him in 1859, and built a detective agency under the slogan **"[[wiki/We Never Sleep|We never sleep]],"** an unblinking eye whose iconography gave the language *[[wiki/Private Eye|private eye]]*. ([Wikipedia: Pinkerton][11], [Britannica][12]) When the Civil War came he served the Union as **Major E.J. Allen**, ran intelligence for General [[wiki/George McClellan|George McClellan]], claimed to have foiled the [[wiki/Baltimore Plot|Baltimore Plot]] against Lincoln, and became the face of the war's best-known intelligence failure: wildly inflated estimates of Confederate strength that held the Army of the Potomac in place. ([Wikipedia: Allan Pinkerton][13]) The scholarship here repays close reading. [[wiki/Edwin C. Fishel|Edwin C. Fishel]], an [[wiki/National Security Agency|NSA]] veteran who found the Army of the Potomac's intelligence files in the National Archives, showed that McClellan was a **party to the inflation rather than its victim**: the general and his detective agreed early on an estimating method that "made the numbers large," McClellan reported Confederate totals to the Secretary of War and the President higher still than Pinkerton's own figures, and by mid-1862 Pinkerton was padding his counts toward the numbers his principal wanted. ([Fishel, *Civil War History*][14]) The first lesson of the Pinkerton chapter is therefore sharper than "contractors can be incompetent." **A private intelligence provider learns to produce the intelligence its client's strategy requires.** The contractor profits from the relationship; the polity pays the strategic cost. After the war, the state contracted Pinkertons to perform functions that had no public agency yet. In **1871, Congress appropriated USD 50,000** to the new Department of Justice for "detection and prosecution"; the sum could not staff an internal unit, so DOJ hired the Pinkertons. ([Wikipedia: Pinkerton][11]) This is the hinge moment: the **federal government, in its first attempt at a national investigative capacity, used a private firm as substitute infrastructure**. The [[wiki/Pinkerton Template|Pinkerton template]]—**private firm fills public capacity gap, becomes embedded, accumulates data and tradecraft no public agency yet possesses**—is the template of [[wiki/Palantir Technologies|Palantir]]'s relationship with [[wiki/United States Immigration and Customs Enforcement|ICE]], of [[wiki/LexisNexis Risk Solutions|LexisNexis Risk Solutions]]' relationship with [[wiki/United States Department of Homeland Security|DHS]], of [[wiki/Babel Street|Babel Street]] and [[wiki/Recorded Future|Recorded Future]] with their defense and intelligence customers. The grammar holds; the substrate changes. What Pinkerton's organization did next is the part nineteenth-century industrialists understood and twenty-first-century citizens forget: it turned **state-honed intelligence capability inward, against domestic populations, for corporate clients**. Under Allan's sons William and Robert, "protection" meant **infiltrating unions and breaking strikes** in coal, iron, lumber, and railroads; the Library of Congress notes that Pinkerton guards and agents gained notoriety as strikebreakers. ([Library of Congress][15]) At **Homestead in July 1892**, [[wiki/Henry Clay Frick|Henry Clay Frick]], chairman of [[wiki/Carnegie Steel|Carnegie Steel]], brought some 300 Pinkerton agents up the Monongahela on barges to retake a mill from locked-out steelworkers. Twelve hours of gunfire left **seven workers and three Pinkertons dead** in the standard count (some contemporary tallies run higher on both sides), and the surrendering agents were forced through a gauntlet of the town. ([AFL-CIO][16]) The legislative response came within a month: an August 5, 1892 appropriations rider barred Pinkerton employees from government service, made permanent on March 3, 1893 as what is now [[wiki/Anti-Pinkerton Act|5 U.S.C. § 3108]]—"an individual employed by the Pinkerton Detective Agency, or similar organization, may not be employed by the Government of the United States." ([GAO B-139965][17]) It is one of the few American statutes ever written to **legislate a structural separation between sovereign function and private detective agency**. Its fate is the lesson. In 1977 the Fifth Circuit (*[[wiki/United States ex rel Weinberger v Equifax|United States ex rel. Weinberger v. Equifax]]*) read the [[wiki/NATO Allied Command Transformation|Act]] as aimed only at organizations offering **"[[wiki/Quasi-Military Armed Forces for Hire|quasi-military armed forces for hire]],"** the GAO adopted that reading in 1978, and the Federal Acquisition Regulation now states flatly that a firm providing guard, protective, investigative, or detective services does not fall under the prohibition even when its guards are armed. ([GAO B-139965][17], [FAR 37.109][18]) The statute survives in the Code; its operative reach was interpreted down to a single nineteenth-century business model, leaving every successor model untouched. The hunt for Jesse and [[wiki/Frank James|Frank James]] is a darker rehearsal. On the night of January 25–26, 1875, Pinkerton agents, working the case for express and railroad interests, threw an incendiary device into the Samuel family farmhouse near Kearney, Missouri. The explosion killed the brothers' eight-year-old half-brother [[wiki/Archie Samuel|Archie Samuel]] and destroyed their mother [[wiki/Zerelda James|Zerelda]]'s right arm. Allan Pinkerton denied that the raid's purpose was arson; the biographer [[wiki/Ted Yeatman|Ted Yeatman]] later located Pinkerton's own letter in the Library of Congress declaring the intention to **"burn the house down."** ([Wikipedia: Zerelda James][19], [PBS American Experience][20]) The documented record shows a private detective agency, contracted by private capital, planning kinetic action against a family home that no lawful sheriff's office could have authorized. The trajectory runs from **investigation toward extralegal force**, from intelligence work toward private war. After the [[wiki/La Follette Civil Liberties Committee|La Follette Civil Liberties Committee]] exposed [[wiki/Corporate Labor Espionage|corporate labor espionage]] in hearings beginning in 1936, Pinkerton diversified; by the mid-1960s "detective" had left the letterhead, and the firm rebranded around security and risk management. [[wiki/Securitas AB|Securitas AB]] of Sweden acquired it in 1999 for USD 384 million; it operates today as **[[wiki/Pinkerton Consulting and Investigations|Pinkerton Consulting & Investigations]]**, focused on threat intelligence, executive protection, and risk management, and the former Pinkerton Government Services arm operates as [[wiki/Securitas Critical Infrastructure Services|Securitas Critical Infrastructure Services]]. ([Wikipedia: Pinkerton][11]) The labor-intelligence function survived the rebranding. In November 2020, Motherboard published leaked 2019 reports from Amazon's Global Security Operations Center showing that Amazon had hired Pinkerton operatives to gather intelligence on warehouse workers—one document records operatives inserted into a warehouse in Wrocław, Poland—while its analysts tracked union meetings, turnout rates, and organizing activity across Europe; an Amazon spokesperson confirmed the Pinkerton engagement while denying it targeted workers. ([NPR][21]) One hundred and twenty-eight years after Homestead, the eye that never sleeps was still watching warehouse floors for the largest logistics company on Earth. The Pinkerton story falsifies the comforting belief that private intelligence is an aberration produced by post-9/11 contractor expansion or Silicon Valley's data appetite. **Private intelligence is a constitutive feature of the American state.** The republic was built with civilian Culper sensors, maritime privateers, and within two generations a private detective industry willing to take government contracts, corporate contracts, or both at once. What is new in our moment is the **scale, speed, automation, and ambient invisibility** at which its successors operate, and the willingness of legislators and now the executive to formalize, under updated names, what the Pinkertons did in the gap between Washington's civilian sensors and the professional federal bureaucracy. ## V. The Suspicious Activity Reporting Architecture: Civilianized Collection by Design > [!info] Reporting — connected wiki nodes > [[wiki/Nationwide Suspicious Activity Reporting Initiative|Nationwide Suspicious Activity Reporting Initiative]] · [[wiki/ISE-SAR Functional Standard|ISE-SAR Functional Standard]] · [[wiki/eGuardian|eGuardian]] · [[wiki/NSI SAR Data Repository|NSI SAR Data Repository]] · [[wiki/SAR Vetting Tool|SAR Vetting Tool]] · [[wiki/Fusion Center|Fusion Center]] · [[wiki/InfraGard|InfraGard]]. The softer phrase **"public reporting"** under-names the structure. When private citizens, private security officers, infrastructure operators, corporate partners, and local intermediaries are trained to notice pre-incident indicators, document behavior, route observations into [[wiki/Fusion Center|fusion centers]], and feed reports into federal information-sharing systems, the functional category is **civilianized intelligence collection**. In plain language, this is spying. It is lawful, patriotic, useful, and often necessary, and it extends national awareness far beyond anything a professional workforce alone could reach. Once the state trains non-state actors to gather observations on persons, movements, associations, photography, elicitation, infrastructure interest, or anomalous behavior and sends those observations into counterterrorism repositories, **the public has crossed from ordinary vigilance into an intelligence ecology**. The **[[wiki/Nationwide Suspicious Activity Reporting Initiative|Nationwide Suspicious Activity Reporting Initiative]] (NSI)** is usually labeled an Obama program, and its scale-up was. Its design is older. The NSI grew out of the 2007 National Strategy for Information Sharing; the Program Manager for the [[wiki/Information Sharing Environment|Information Sharing Environment]] issued the [[wiki/ISE-SAR Functional Standard|ISE-SAR Functional Standard]] in January 2008, DOJ published the [[wiki/NSI Concept of Operations|NSI Concept of Operations]] in December 2008, and pilot evaluation sites ran at state and local fusion centers through 2008–2009 before DOJ stood up the [[wiki/NSI Program Management Office|NSI Program Management Office]] within the [[wiki/Bureau of Justice Assistance|Bureau of Justice Assistance]] in March 2010. ([OJP][23], [Every CRS Report][24]) The NSI is a **bipartisan continuity program**: conceived in the late Bush administration, institutionalized and scaled under Obama, and carried forward by every administration since. That continuity is the point. It was forward-leaning, civic, interoperability-minded, and wrapped in the language of prevention, community trust, privacy, and civil rights, which is what made it historically significant. The Government Accountability Office reported in 2013 that DOJ had largely implemented NSI among fusion centers, using **[[wiki/Shared Spaces Servers|Shared Spaces servers]]** and the [[wiki/Federal Bureau of Investigation|FBI]]'s **[[wiki/eGuardian|eGuardian]]** system, and had trained executives at 77 of 78 fusion centers, roughly **2,000 fusion center analysts, and about 290,000 of 800,000 line officers**. ([GAO][22]) That is a national reporting architecture with formal training, databases, vetting processes, and federal-state-local interoperability. Official NSI materials describe several entry paths into the **[[wiki/NSI SAR Data Repository|NSI SAR Data Repository]]**—the eGuardian user interface, the [[wiki/SAR Vetting Tool|SAR Vetting Tool]], and records-management systems connected to the repository—and state that tips could originate from law-enforcement officers, public-safety agencies, private-sector partners, or citizens before review, analysis, and submission for sharing across participants. That is a pipeline. One can debate justification, abuse rates, and necessity; the machinery itself is unambiguous: **private observations were designed to become standardized intelligence objects**. The slogan **"[[wiki/If You See Something, Say Something|If You See Something, Say Something]],"** licensed by DHS from New York's [[wiki/New York Metropolitan Transportation Authority|MTA]] and launched nationally in July 2010, becomes more serious inside that machinery. The Congressional Research Service ties the campaign to NSI as community awareness and identifies outreach efforts connecting private citizens to the [[wiki/Suspicious Activity Reporting|SAR]] process. ([Every CRS Report][24]) The slogan was the surface grammar; beneath it ran a **[[wiki/Reporting-and-Fusion Architecture|reporting-and-fusion architecture]]** that took perception itself as raw input. The NSI's private-sector security course states its goal as training private security officers in **observing and reporting suspicious activity** under the Functional Standard. Once a private actor is trained to observe according to an intelligence standard and report into government-linked channels, that actor has been **partially inducted into state-adjacent collection**. The badge, oath, and title are absent; the function is present. The legal challenge to this architecture is instructive for how it ended. The ACLU's *[[wiki/Gill v Department of Justice|Gill v. Department of Justice]]*, filed in 2014 on behalf of five U.S. citizens reported for photographing landmarks, buying computers, and similar lawful conduct, framed SAR as a "vast expansion" of domestic intelligence and argued that the Functional Standard's threshold—behavior "reasonably indicative of pre-operational planning associated with terrorism"—conflicted with DOJ's own 1978 regulation ([[wiki/28 CFR Part 23|28 C.F.R. Part 23]]) requiring **[[wiki/Reasonable Suspicion|reasonable suspicion]]** before criminal intelligence is shared. ([ACLU][25]) The district court granted summary judgment to the government, and in January 2019 the Ninth Circuit affirmed: the Functional Standard is final agency action with real legal and practical effects, yet it escapes notice-and-comment rulemaking because analysts retain significant discretion in applying it. ([UC Law Review][26]) The result is a doctrinal shape worth naming. **The discretion that makes the reporting threshold elastic is the same discretion that insulated it from public rulemaking.** The architecture survived its most serious challenge by being characterized as judgment rather than rule. The **[[wiki/InfraGard|InfraGard]]** layer shows the pattern in explicitly public-private form. Founded out of the FBI's Cleveland field office in 1996, InfraGard is a partnership among the FBI, state and local law enforcement, academia, and businesses for sharing cyber and physical threat information about critical infrastructure, with members exchanging information with the Bureau and each other through [[wiki/Secure Intelligence Portal|secure portals]], bulletin boards, [[wiki/Intelligence List Server|list servers]], and meetings. Its membership passed 80,000 by 2022—and that year supplied the cleanest demonstration of how a [[wiki/Vetted Civilian Intelligence Network|vetted civilian intelligence network]] becomes a target in its own right. In December 2022 a hacker using the handle "[[wiki/USDoD|USDoD]]" offered the contact database of more than 80,000 InfraGard members for sale on the Breached forum, having obtained access by submitting a membership application in the name of a real financial-industry CEO, which the FBI approved; the intruder then messaged other members through the portal while impersonating that executive and harvested the roster through the site's own API. ([KrebsOnSecurity][28]) A network built so the state could see through private eyes had become a map of exactly whose eyes those were. The architecture is real, distributed, scalable, and now sits beneath the platform-mediated reality of 2026. ## VI. The Open-Source Substrate: When the Public Web Becomes Intelligence Material > [!info] Data Markets — connected wiki nodes > [[wiki/OSINT|OSINT]] · [[wiki/IC Open Source Intelligence Strategy 2024–2026|IC Open Source Intelligence Strategy 2024–2026]] · [[wiki/Bellingcat|Bellingcat]] · [[wiki/Publicly Available Information|Publicly Available Information]] · [[wiki/Commercially Available Information|Commercially Available Information]] · [[wiki/Machine-Readable Public Sphere|Machine-Readable Public Sphere]]. Official doctrine already says so. In March 2024, [[wiki/Office of the Director of National Intelligence|ODNI]] and CIA released the **[[wiki/IC Open Source Intelligence Strategy 2024–2026|IC Open Source Intelligence Strategy 2024–2026]]**, defining OSINT as intelligence derived from publicly or [[wiki/Commercially Available Information|commercially available information]] that addresses intelligence priorities, and calling for expanded acquisition and sharing of open-source data, integrated collection management, partnerships with industry and academia, and a **[[wiki/Next-Generation OSINT Workforce and Tradecraft|next-generation OSINT workforce and tradecraft]]**. ([ODNI][29]) That phrase is the hinge. Once the open world becomes an intelligence substrate, the line between agency analyst, contractor, journalist, investigator, researcher, platform operator, corporate risk team, patriotic volunteer, and private citizen becomes structurally unstable. The positive version is celebrated for good reason. **[[wiki/Bellingcat|Bellingcat]]** and similar communities have shown that civilians using publicly available material can document war crimes, track weapons, verify events, identify perpetrators, and challenge official narratives. The International Center for Journalists describes OSINT as especially valuable where information is sparse, controlled, or censored. This is **citizen tradecraft as democratic audit function**: disciplined observation in defense of public truth. ([ICFJ][30]) The market scale tells the rest. By 2026 the OSINT market sits between roughly **USD 14 billion and USD 21 billion** by competing estimates; North America commands roughly 36–47 percent of installations, cloud deployments dominate, and private-sector OSINT accounts for roughly 38 percent of deployments globally. Vendors from [[wiki/Google|Google]], Palantir, Recorded Future, Babel Street, and Thales to dozens of specialists offer text analytics, [[wiki/Social-Media Analytics|social-media analytics]], [[wiki/GEOINT|geospatial intelligence]], [[wiki/Dark-Web Monitoring|dark-web monitoring]], [[wiki/Identity Resolution|identity resolution]], and [[wiki/Adverse-Media Screening|adverse-media screening]] at scales no national intelligence service of fifty years ago could imagine. ([Mordor Intelligence][2], [Global Market Insights][3], [Industry Research][31]) **The public sphere has become machine-readable, and the machines doing the reading are mostly commercial.** The same social graph that exposes a war crime locates a fugitive, a cartel courier, or a trafficking cell. The same commercial data market that maps a humanitarian crisis resolves identity, residence, association, and movement for any client with a lawful requirement. The same private intelligence skill set that exposes corruption builds due-diligence files, litigation records, regulatory cases, and enforcement leads. The OSINT layer is **universally applicable by structural design**: one toolchain serves the newsroom, the courtroom, the corporate risk desk, and the enforcement agency, and its value compounds with every new client class that adopts it. ## VII. The Data Broker Economy: The Substrate Beneath OSINT > [!info] Data Markets — connected wiki nodes > [[wiki/Data Brokers|Data Brokers]] · [[wiki/Intelligence Community Data Consortium|Intelligence Community Data Consortium]] · [[wiki/Other Transaction Acquisition|Other Transaction Acquisition]] · [[wiki/LexisNexis Risk Solutions|LexisNexis Risk Solutions]] · [[wiki/LexID|LexID]] · [[wiki/Accurint Virtual Crime Center|Accurint Virtual Crime Center]] · [[wiki/Thomson Reuters CLEAR|Thomson Reuters CLEAR]] · [[wiki/PenLink|PenLink]]. Beneath the celebrated layer of disciplined investigation sits a vastly larger commercial substrate: the **data broker industry**, which collects, infers, aggregates, packages, and sells information about Americans continuously under negligible federal regulation. EPIC and others document **thousands of brokers** building profiles on essentially every American adult—identity, address, household, education, profession, income, political preferences, property, [[wiki/Mobile Advertising Identifier|mobile advertising IDs]], location histories, purchase histories, financial relationships, and inferred religious, health, and military-family attributes. ([EPIC][32], [Privacy Rights Clearinghouse][33]) The Brennan Center, citing industry market research, puts the industry's 2022 take above **USD 250 billion**, and documents that the FBI, IRS, [[wiki/Drug Enforcement Administration|DEA]], the Defense Department, DHS, and state and local police have all bought access to broker data, including geolocation, through ordinary commercial purchase. ([Brennan Center][4]) This is the **foundational economy of the consumer internet**, embedded in adtech, fraud detection, identity verification, credit decisioning, political targeting, and now law enforcement and immigration enforcement. [[wiki/Duke University|Duke University]]'s data brokerage project, led by [[wiki/Justin Sherman|Justin Sherman]], bought **non-public, individually identified data on active-duty servicemembers, veterans, and their families**—including health, financial, and religious-practice data—from U.S. brokers for **as little as USD 0.12 per record**, through both a .org domain and a .asia domain, documenting inconsistent and often perfunctory customer verification, including for buyers presenting as outside the United States. The study was sponsored by the [[wiki/United States Military Academy|U.S. Military Academy]]. ([Duke Tech Policy][34], [Lawfare][35]) At that price, the operational distinction between commercial marketing and adversarial targeting **collapses at the database layer**. Washington's response has been bifurcated in a way that illuminates the whole argument. Against foreign adversaries, the state built a wall: the Justice Department's Data Security Program (28 C.F.R. Part 202), effective April 8, 2025, prohibits data-brokerage transactions that give China, Russia, Iran, North Korea, Cuba, or Venezuela, or persons tied to them, access to bulk U.S. sensitive personal data. ([White & Case][39]) Against domestic purchasers, the state removed one: the [[wiki/Consumer Financial Protection Bureau|Consumer Financial Protection Bureau]]'s December 2024 proposed rule bringing brokers under the [[wiki/Fair Credit Reporting Act|Fair Credit Reporting Act]] was **withdrawn on May 15, 2025**, the Bureau citing revised policy and questions about its statutory authority. ([Federal Register][36], [CFPB][37], [Orrick InfoBytes][38]) The substrate is now regulated as a **national-security export**, while remaining a lightly governed **domestic commodity**. Foreign intelligence services are fenced out; American agencies, contractors, and private clients remain customers. The clearest demonstration that this infrastructure has fused with state intelligence is ODNI's **[[wiki/Intelligence Community Data Consortium|Intelligence Community Data Consortium]] (ICDC)**, revealed by The Intercept in May 2025: a centralized web storefront and "data marketplace," built through an [[wiki/Other Transaction Acquisition|Other Transaction]] solicitation run with [[wiki/IARPA|IARPA]] and the [[wiki/Office of the OSINT Executive|Office of the OSINT Executive]], through which NSA, CIA, the FBI's intelligence branch, DHS's [[wiki/DHS Office of Intelligence and Analysis|Office of Intelligence and Analysis]], and potentially non-intelligence agencies can search and buy commercially available information—smartphone location data, real-estate records, biometric data, social-media content—including data ODNI itself classifies as capable of causing "substantial harm, embarrassment, and inconvenience" to U.S. persons, with planned analysis by large language models. ([The Intercept][40]) By mid-2026 ODNI was soliciting white papers on a **[[wiki/Data Cooperative Model|data cooperative model]]** to serve as the clearinghouse for IC data requirements across commercial and public datasets. ([ExecutiveGov][41]) The design moves collection from the warrant to the market: rather than collecting on identified targets one order at a time, the community purchases broadly through commercial channels and **filters under analytic categories selected by whoever holds the portal credentials**. For anyone building a business in this economy, the consortium is the most consequential storefront in the country, because it is where a commercial data product becomes an intelligence input, and its Other Transaction structure is the acquisition instrument designed to admit nontraditional vendors that never held a classic federal contract. The legislative attempt to close this **[[wiki/Data-Broker Loophole|data broker loophole]]** reached its high-water mark in 2026 and broke against a separate fight. The bipartisan [[wiki/Government Surveillance Reform Act|Government Surveillance Reform Act]], introduced in March 2026, would have barred federal purchases of Americans' data from brokers without a warrant as part of [[wiki/FISA Section 702|Section 702]] reauthorization; in a March Senate Intelligence hearing, FBI Director [[wiki/Kash Patel|Kash Patel]] confirmed that the Bureau buys Americans' location data commercially. The House passed a three-year reauthorization without those reforms on April 29; after a series of stopgaps, the bipartisan deal collapsed when the President installed [[wiki/Bill Pulte|Bill Pulte]] as acting Director of National Intelligence, and **Section 702 lapsed on June 12, 2026**, for the first time since its enactment, with collection continuing under a [[wiki/Foreign Intelligence Surveillance Act|FISA]] Court certification running into 2027. ([EPIC][43], [OPB/NPR][42]) [[wiki/Jay Clayton|Jay Clayton]] was confirmed as DNI on July 28 on a party-line vote, and through the late-summer reporting available at this revision the statute remained unrenewed, with the broker loophole still open. ([Straight Arrow News][44]) The episode is diagnostic: the most famous warrantless authority in American law can lapse while the purchasing channel that substitutes for it continues to operate, because **the commercial channel requires no statute at all**. LexisNexis Risk Solutions and [[wiki/Thomson Reuters CLEAR|Thomson Reuters CLEAR]] are the dominant aggregators in this channel. LexisNexis markets [[wiki/LexID|LexID]] and the [[wiki/Accurint Virtual Crime Center|Accurint Virtual Crime Center]] as linking **more than 82 billion public and proprietary records from over 10,000 sources**; its 2021 ICE contract, worth up to roughly USD 22 million, gave agents near-real-time jail-booking data through its [[wiki/Appriss Insights|Appriss Insights]] subsidiary, and in August 2026 new ICE procurement records showed the agency buying continued access for its Enforcement and Removal Operations with a stated requirement that the data **interface by API with ICE applications including the Palantir platform and [[wiki/PenLink|PenLink]]**. ([404 Media][45], [LawNext][46]) The Pinkertonian template, reread through this lens, is unmistakable: **a private firm fills a capacity gap the state could not lawfully fill on its own, becomes structurally indispensable, and accumulates data and tradecraft no public agency possesses.** The eye that never sleeps now wears the brand of a data-analytics firm and a procurement number. ## VIII. Palantir, ImmigrationOS, ELITE, and the Contractor as Sovereign Function > [!info] Palantir and Enforcement — connected wiki nodes > [[wiki/Palantir Technologies|Palantir Technologies]] · [[wiki/Investigative Case Management|Investigative Case Management]] · [[wiki/ImmigrationOS|ImmigrationOS]] · [[wiki/ELITE|ELITE]] · [[wiki/Address-Confidence Scoring|Address-Confidence Scoring]] · [[wiki/Decision Threshold|Decision Threshold]] · [[wiki/Generative-AI Tip Triage|Generative-AI Tip Triage]] · [[wiki/Human Verification Layer|Human Verification Layer]]. If the broker economy is the substrate, **Palantir Technologies is the most concrete example of the [[wiki/Contractor as Sovereign Function|contractor-as-sovereign-function]]** pattern operating at scale. Palantir has run ICE's [[wiki/Investigative Case Management|Investigative Case Management]] (ICM) system since 2014. In April 2025 it received a roughly USD 30 million award to upgrade ICM into **[[wiki/ImmigrationOS|ImmigrationOS]]** (Immigration Lifecycle Operating System), with a prototype due September 25, 2025 and a contract running through September 2027; its three stated functions are **[[wiki/Targeting and Enforcement Prioritization|targeting and enforcement prioritization]]**, **[[wiki/Self-Deportation Tracking|self-deportation tracking]]** with "near real-time visibility," and **[[wiki/Immigration Lifecycle Management|immigration lifecycle management]]** from identification through removal. ICE's sole-source justification called Palantir "the sole provider capable of meeting the specific needs and requirements of ICE," citing "deep institutional knowledge of ICE operations over more than a decade of support." ([American Immigration Council][47], [Axios][48], [ACLU][49]) The ICM vehicle that absorbed ImmigrationOS funding has grown past **USD 145 million**, and ICE awarded Palantir a further sole-source extension for ICM in January 2026. ([ACLU][49]) The architecture matters more than the dollar amounts. ICM draws on FBI, DEA, [[wiki/Bureau of Alcohol Tobacco Firearms and Explosives|ATF]], and [[wiki/Student and Exchange Visitor Information System|SEVIS]] systems and returns schooling, family relationships, employment, phone records, immigration history, biometrics, criminal records, and home and work addresses; ICE training materials instruct agents on extracting and uploading data from phones seized at the border or during arrest. ([ACLU][49]) In January 2026, 404 Media revealed **[[wiki/ELITE|ELITE]]** (Enhanced Leads Identification & Targeting for Enforcement), a Palantir application in use since September 2025 that populates a map with deportation targets, assigns each an **"[[wiki/Address-Confidence Scoring|address confidence score]],"** and identifies "target-rich" areas; its user guide lists sources including [[wiki/United States Department of Health and Human Services|HHS]], [[wiki/United States Citizenship and Immigration Services|USCIS]], and CLEAR, and Fortune reported that it draws on Medicaid data made available under a 2025 ICE–[[wiki/Centers for Medicare and Medicaid Services|CMS]] agreement covering nearly 80 million patients. ICE agents testified in an Oregon case that the app displays counts of people with an "immigration nexus." ([404 Media][50], [Fortune][51], [ACLU][49]) A separate Palantir tool applies generative AI to summarize, categorize, and translate incoming tips to ICE. ([ACLU][49]) Palantir also holds a small contract with U.S. Citizenship and Immigration Services, extending its analytic presence into benefits adjudication. ([Fortune][52]) And WIRED reported in October 2025 that ICE was planning a round-the-clock social-media surveillance unit staffed by **nearly 30 [[wiki/Private Contract Analyst|private contract analysts]]** at its targeting centers in [[wiki/Williston Vermont|Williston, Vermont]] and [[wiki/Santa Ana California|Santa Ana, California]], scouring [[wiki/Meta|Facebook]], TikTok, Instagram, YouTube, and other platforms and cross-referencing with Accurint and CLEAR to generate leads for arrests, with turnaround targets as short as thirty minutes for priority cases. ([WCAX][54]) The Pinkerton template returns at full intensity. A private firm, building on a state contract during a period when the state judged itself too slow, accumulates **proprietary tradecraft, proprietary data integration, and [[wiki/Proprietary Institutional Knowledge|proprietary institutional knowledge]]** sufficient for the state itself to designate it the only source capable of performing the function. The function is concrete: **identifying, scoring, prioritizing, and locating individuals for enforcement action**. The state retains sovereign authority and leases its operational substance to a vendor whose code, model weights, and integration methods are commercial property; the August 2026 LexisNexis procurement shows the commercial data layer now specified by contract to feed that vendor's platform directly. The builders are explicit about scope. Every stated function of ImmigrationOS is a floor from which further capability is designed to grow, and ELITE's user guide announces that it is "integrating new data sources." The legal perimeter matters to every entrant. The 1893 Anti-Pinkerton Act was written to separate sovereign function from private detective agencies; as read since 1977 it reaches only "quasi-military armed forces" for hire, which leaves software, data engineering, analysis, and investigative services open to private firms and the people they employ. The statute that once closed the door now marks where the door stands open. The Government Accountability Office has reported that the [[wiki/Intelligence Community|intelligence community]] uses **"[[wiki/Core Contract Personnel|core contract personnel]]"** who work alongside government staff performing staff-like work, and has warned that some contractor roles require enhanced oversight because they influence government decision-making; CRS describes them as integrated with civilian and military personnel. ([GAO][55], [Every CRS Report][56]) Modern intelligence requires technical capacities, linguistic specialization, cyber expertise, data engineering, and analytic scale that exceed traditional civil-service pipelines, and so **the intelligence state has passed from a simple hierarchy of public officers into an assemblage**: agencies, contractors, vendors, platforms, consultants, data brokers, cybersecurity firms, cloud providers, AI systems, foreign partners, and civilians operating in the open-source layer. Palantir is the most visible node in that assemblage and the **fully realized form of what Pinkerton's National Detective Agency began**; [[wiki/Anduril|Anduril]], examined in Section XV, shows what a single founder can build inside it within a decade. ## IX. The Private Spy Industry: Black Cube, Kroll, and the Reputational Battlefield > [!info] Private Intelligence — connected wiki nodes > [[wiki/Private HUMINT|Private HUMINT]] · [[wiki/Black Cube|Black Cube]] · [[wiki/Kroll|Kroll]] · [[wiki/Fusion GPS|Fusion GPS]] · [[wiki/Psy-Group|Psy-Group]] · [[wiki/Reputational Battlefield|Reputational Battlefield]] · [[wiki/Regulatory Warfare|Regulatory Warfare]] · [[wiki/Client-Deniable Intelligence|Client-Deniable Intelligence]]. The reputational and [[wiki/HUMINT|HUMINT]] layer of the [[wiki/Private Intelligence Economy|private intelligence economy]] operates with remarkable boldness, and its canonical firm—**[[wiki/Black Cube|Black Cube]]**, founded in 2010 by former Israeli intelligence officers [[wiki/Dan Zorella|Dan Zorella]] and [[wiki/Avi Yanus|Avi Yanus]]—remains active across very different theaters. [[wiki/Ronan Farrow|Ronan Farrow]]'s 2017 *New Yorker* investigation, "[[wiki/Harvey Weinstein|Harvey Weinstein]]'s Army of Spies," remains the canonical demonstration that **state-grade tradecraft can be rented to suppress journalism and intimidate complainants**: Black Cube operatives under [[wiki/False Identity|false identities]] targeted [[wiki/Rose McGowan|Rose McGowan]] and other accusers and the journalists investigating Weinstein, under a contract whose purpose was keeping the allegations from publication. [[wiki/Kroll|Kroll]], the institutional ancestor of corporate-veneered investigations founded by [[wiki/Jules Kroll|Jules Kroll]] in the 1970s, was also engaged on the Weinstein matter. ([Wikipedia: Black Cube][57], [The New Yorker][58]) Its 2024–2026 operations show an industry neither chastened nor in retreat, and they show its full range of uses. In **Iceland in November 2024**, an operative posing as a Swiss investor interested in Icelandic real estate spent two months cultivating [[wiki/Gunnar Bergmann Jónsson|Gunnar Bergmann Jónsson]], son of Independence Party MP and newly appointed fisheries-portfolio minister [[wiki/Jón Gunnarsson|Jón Gunnarsson]]; the recordings, in which the son described a deal under which his father would secure whaling licenses for [[wiki/Hvalur hf.|Hvalur hf.]], circulated to Icelandic media, and caretaker Prime Minister [[wiki/Bjarni Benediktsson|Bjarni Benediktsson]] removed Gunnarsson from whaling-permit decisions. The client has never been publicly identified. ([Ynet News][61]) In **New Jersey**, the record reveals the industry's other face. Black Cube's 2021 dossier accusing the Swedish live-casino supplier **[[wiki/Evolution AB|Evolution AB]]** of serving prohibited markets including Iran, Syria, and Sudan was delivered to New Jersey and Pennsylvania gaming regulators through a law firm, and became the subject of Evolution's defamation suit; New Jersey's Division of Gaming Enforcement closed its review in 2024 without action. In August 2025, Black Cube director Avi Yanus filed a 118-page affidavit with new hidden-camera recordings of Evolution executives, which Bloomberg reported and which knocked Evolution's share price down eight percent in a day. In September 2025 the court found the 2021 report "objectively baseless," called the affidavit "self-serving," and ordered Black Cube to identify its client after the New Jersey Supreme Court declined emergency review; the client was **[[wiki/Playtech|Playtech]]**, Evolution's direct competitor, which disputes Evolution's characterization. Evolution further alleges, citing the regulator's review of the audio, that a transcript line rendered as "has games for Iran" actually referred to "Kurdistan and Iraq," and that operatives used VPN routing to simulate access from restricted jurisdictions; Black Cube stands by its findings and filed new access claims in December 2025. ([Evolution/Cision][62], [Casino.org][63]) Whatever the final adjudication, the case demonstrates the market structure exactly: **a commercial competitor commissioning former intelligence officers to build a regulatory case against a rival, routed through counsel, aimed at licensing authorities and financial press**. In **Slovenia**, the theater was a national election. In the weeks before the March 22, 2026 parliamentary vote, covert videos of former ministers and lobbyists discussing influence over government contracts appeared on an anonymous website; a rights group, an investigative journalist, and researchers attributed the operation to Black Cube and linked it to [[wiki/Janez Janša|Janez Janša]]'s [[wiki/Slovenian Democratic Party|Slovenian Democratic Party]]. The intelligence service [[wiki/Slovenian Intelligence and Security Agency|SOVA]] confirmed to the parliamentary oversight commission that Black Cube representatives—reported as Zorella, [[wiki/Liron Tzur|Liron Tzur]], and Black Cube advisory-board member [[wiki/Giora Eiland|Giora Eiland]], a former head of Israel's [[wiki/National Security Council|National Security Council]]—had entered Slovenia in December 2025. Janša first said his party had never heard of Black Cube, then acknowledged knowing Eiland and that Black Cube representatives had visited party headquarters, while denying wrongdoing; Prime Minister [[wiki/Robert Golob|Robert Golob]] asked the European Commission to investigate foreign interference. Golob's [[wiki/Freedom Movement|Freedom Movement]] finished narrowly ahead. ([Euronews][64], [Al-Monitor/Reuters][65]) The structural pattern is that **private intelligence firms produce results public services cannot publicly produce**, because they operate in the spaces of pretext, [[wiki/Social Engineering|social engineering]], and [[wiki/HUMINT Cultivation|HUMINT cultivation]] that would carry legal or diplomatic exposure if performed by state employees. They serve litigants, competitors, political actors, and clients who prefer to remain unnamed. One toolkit surfaced whaling-license corruption in Iceland, built a competitor's regulatory case in New Jersey, and put covert recordings into a national election in Slovenia. [[wiki/Barry Meier|Barry Meier]]'s *[[wiki/Spooked|Spooked]]: The Trump Dossier, Black Cube, and the Rise of Private Spies* traces the lineage from Pinkerton through Kroll to [[wiki/Fusion GPS|Fusion GPS]] and Black Cube, documenting how former intelligence officers converted state tradecraft into a commercial HUMINT industry with its own client base, price structure, and international reach. ([Amazon: Spooked][59]) KCS Group's overview of "hybrid warfare" social engineers maps the ecosystem: **[[wiki/Argen|Argen]], [[wiki/Merchant International Group|Merchant International Group]], [[wiki/Control Risks|Control Risks]], Kroll, [[wiki/Hakluyt|Hakluyt]], Pinkerton, [[wiki/Stratfor|Stratfor (RANE)]], Black Cube, and the defunct [[wiki/Psy-Group|Psy-Group]]**, founded around 2014 by [[wiki/Joel Zamel|Joel Zamel]] and [[wiki/Royi Burstein|Royi Burstein]] and closed in 2018 after legal scrutiny of its social-media influence operations. ([KCS Group][60]) Intelligence-for-hire is concentrated in the United States, Israel, and the United Kingdom, and when background screening, due diligence, cyber threat intelligence, and [[wiki/Reputation Management|reputation management]] are counted, it is a **standard subsegment of the global services economy** sized in the tens of billions. For the American entrant, this layer shows the ceiling of [[wiki/Private HUMINT|private HUMINT]] capability and the cost structure of selling it to private clients alone: Black Cube's results are real, and so are the court orders, defamation suits, and parliamentary inquiries that attend work done without a sovereign client. The commissioned market now being built in Washington offers the same caliber of tradecraft something the [[wiki/Reputational Battlefield|reputational battlefield]] lacks: a sovereign client, an [[wiki/Approval Gate|approval gate]], and the legitimacy of the letter. ## X. Mercenary Spyware and the Intrusion Tier > [!info] Commercial Intrusion — connected wiki nodes > [[wiki/Commercial Spyware|Mercenary Spyware]] · [[wiki/NSO Group|NSO Group]] · [[wiki/Pegasus Spyware|Pegasus Spyware]] · [[wiki/Intellexa|Intellexa]] · [[wiki/Predator Spyware|Predator Spyware]] · [[wiki/Paragon Solutions|Paragon Solutions]] · [[wiki/Graphite Spyware|Graphite Spyware]] · [[wiki/ICE Paragon Contract|ICE Paragon Contract]]. [[wiki/Commercial Spyware|Mercenary spyware]] is privatized spycraft at its highest technical tier: **commercial intrusion capability sold to political, security, and law-enforcement clients**. Its reach is documented most fully by its critics—[[wiki/Citizen Lab|Citizen Lab]]'s case files, the [[wiki/Pegasus Project|Pegasus Project]] consortium, and Amnesty's Security Lab, whose December 2025 **[[wiki/Intellexa Leaks|Intellexa Leaks]]** with Haaretz and partners showed the consortium's [[wiki/Predator Spyware|Predator spyware]] still in service despite sanctions and criminal investigations—and that documentation is the best available evidence of the tier's resilience: Google's Threat Intelligence Group concluded that [[wiki/Intellexa|Intellexa]] had adapted, evaded restrictions, and continued selling. ([Citizen Lab][66], [Amnesty Security Lab][67]) The distinguishing feature of this layer is **fully remote access to a target's device, communications, and social graph**, at a per-target cost far below HUMINT of comparable depth, with a commercial durability that has outlasted lawsuits, sanctions, and corporate reorganizations. 2025 brought three developments that fix this layer's trajectory. First, accountability arrived in narrowed form: after a jury awarded WhatsApp USD 167 million in punitive damages against [[wiki/NSO Group|NSO Group]] in May 2025, Judge Phyllis Hamilton in October issued a **permanent injunction** barring NSO from targeting WhatsApp while cutting punitive damages to about USD 4 million, and specified that the injunction binds NSO itself and leaves its [[wiki/Government Intrusion Customer|government customers]] untouched—days after NSO announced its acquisition by an American investor group led by Hollywood producer [[wiki/Robert Simonds|Robert Simonds]]. ([SecurityWeek][69]) Second, the sanctions regime softened: on December 30, 2025, Treasury delisted three individuals sanctioned in 2024 for roles in the Intellexa consortium, three weeks after the Amnesty and Google findings and after a bipartisan Senate staff request for a briefing on Intellexa's [[wiki/Sanctions Evasion|sanctions evasion]], which went unanswered. ([Reuters][70], [Senator Bennet][71]) Third, and decisively for the American argument, mercenary spyware **entered domestic enforcement**: ICE lifted a year-old stop-work order and reactivated its USD 2 million contract with [[wiki/Paragon Solutions|Paragon Solutions]] for the [[wiki/Graphite Spyware|Graphite spyware]] suite in late summer 2025—the same product WhatsApp had found targeting some ninety journalists and activists earlier that year, and the same vendor whose Italian deployments Citizen Lab had documented. ([TechCrunch][68]) The industry's flagship firm is now American-owned, the sanctions perimeter around its rivals has been eased, and its tools are licensed to American domestic enforcement: the [[wiki/Intrusion Tier|intrusion tier]] has been brought under U.S. ownership and U.S. contract. The [[wiki/International Committee of the Red Cross|International Committee of the Red Cross]] has emphasized that individuals, hacker groups, and private technology companies entering conflict environments face serious legal and humanitarian risks; international humanitarian law obligations persist when private actors enter cyber conflict, while the institutional discipline that produces compliance often does not travel with them. ([ICRC][72]) That observation is about to matter at scale, because the American state has now begun commissioning private cyber operators directly. ## XI. Letters of Marque Revived: From Bills to an Executive Program > [!info] Cyber Privateering — connected wiki nodes > [[wiki/Cyber Privateer|Cyber Privateer]] · [[wiki/Cyber Letters of Marque and Reprisal Act|Cyber Letters of Marque and Reprisal Act]] · [[wiki/Expanding Capabilities to Combat Transnational Cyber-Enabled Crime|Expanding Capabilities to Combat Transnational Cyber-Enabled Crime]] · [[wiki/Homeland Security Task Force National Coordination Center|Homeland Security Task Force National Coordination Center]] · [[wiki/Participating Companies|Participating Companies]] · [[wiki/Cyber Surveillance Operations|Cyber Surveillance Operations]] · [[wiki/Cyber Effects Operations|Cyber Effects Operations]] · [[wiki/Forfeitable Bond|Forfeitable Bond]]. The most revealing recurrence is the renewal of **letters of marque** as an instrument for legitimizing private coercive capacity where state capacity is judged insufficient. Between August 2025 and August 2026 the idea traveled the full distance from novelty bill to operating federal program. In August 2025, Representative [[wiki/David Schweikert|David Schweikert]] introduced the **[[wiki/Scam Farms Marque and Reprisal Authorization Act|Scam Farms Marque and Reprisal Authorization Act]] of 2025 (H.R. 4988)**, invoking Article I authority so that licensed private operators could pursue foreign cybercriminal enterprises, framed around [[wiki/FBI Internet Crime Complaint Center|FBI Internet Crime Complaint Center]] data for 2024: **859,532 complaints, USD 16.6 billion in reported losses, a 33 percent increase year over year, and nearly USD 4.9 billion lost by Americans over 60**, much of it traced to scam compounds in Southeast Asia and North Korean operations. The bill sets no numerical cap on commissions, limiting the force only to what is needed to seize, outside U.S. territory, the persons and property of those responsible. ([Schweikert][73], [The Register][74]) In December 2025, Senator **[[wiki/Mike Lee|Mike Lee]]** introduced the **[[wiki/Cartel Marque and Reprisal Authorization Act|Cartel Marque and Reprisal Authorization Act]]**, with a House companion from Representative [[wiki/Tim Burchett|Tim Burchett]], authorizing the President to commission American operators to seize cartel property and persons **"on land or sea,"** conditioned on a security bond. ([Senator Lee][75], [KSL][76], [Marginal Revolution][77]) In July 2026 Lee and Burchett added the **[[wiki/Cyber Letters of Marque and Reprisal Act|Cyber Letters of Marque and Reprisal Act]]** (H.R. 9697 in the House), which authorizes commissions for "cyber surveillance" and limited cyberspace operations against designated threats, allows the President to require up to **15 percent of recovered assets** to fund a bounty program for future privateers, and anticipates extension into "traditional domains of warfare" if Congress so authorizes. ([Senator Lee][78], [GovInfo][79]) The executive branch's public posture moved in step. The March 6, 2026 *[[wiki/Cyber Strategy for America|Cyber Strategy for America]]* pledged to **"unleash the private sector by creating incentives to identify and disrupt adversary networks,"** backed by a USD 1 billion offensive-cyber allocation in the 2025 reconciliation law. Within two weeks, a senior adviser at the [[wiki/Office of the National Cyber Director|Office of the National Cyber Director]] told the Prague Cyber Security Conference that this did "not mean hack back" and "not mean letters of marque," and National Cyber Director [[wiki/Sean Cairncross|Sean Cairncross]] said private offensive campaigns were "not what we're talking about." ([WilmerHale][81], [Recorded Future News][80]) On **August 12, 2026**, the President signed a National Security Presidential Memorandum, *[[wiki/Expanding Capabilities to Combat Transnational Cyber-Enabled Crime|Expanding Capabilities to Combat Transnational Cyber-Enabled Crime]]*, directing the [[wiki/Homeland Security Task Force|Homeland Security Task Force]]'s **[[wiki/Homeland Security Task Force National Coordination Center|National Coordination Center]]**—a body created under the January 2025 immigration-enforcement executive order and since repurposed as the cybercrime coordination hub—to establish a program in which vetted "[[wiki/Participating Companies|Participating Companies]]" conduct **[[wiki/Cyber Surveillance Operations|Cyber Surveillance Operations]]** and **[[wiki/Cyber Effects Operations|Cyber Effects Operations]]**, including operations that disrupt, degrade, or destroy adversary systems, against foreign cyber-enabled transnational criminal organizations. Co-executive directors from DOJ and DHS must approve every operations package in writing; participants must meet standards for technical proficiency, [[wiki/Facility Security|facility security]], and [[wiki/Personnel Vetting|personnel vetting]], disclose their contractual relationships, may enter commercial agreements with other firms and with state and local agencies to receive threat information and propose operations, and must post **USD 1 million in bond or escrow**, forfeitable on violation. ([White House][82], [Mayer Brown][83], [Gizmodo][84]) Analysts at [[wiki/TRM Labs|TRM Labs]] described the result as effectively a cyber letter of marque. The bond is the tell. **Private commission, federal approval, a forfeitable security posted against misconduct, and a target class defined by the sovereign**: that is the Revolutionary privateer's legal form, reassembled from executive authority without the clause being invoked and without Congress voting on any of the pending marque bills. The program's open questions are the entrant's due diligence, and its own text names many of them. Aspen Digital and other analysts have argued that structured data-sharing pathways, clarified defensive norms, and legal protections under CISA 2015 would be more durable than reviving privateering, and practitioners have stressed that attribution in criminal operations is hard and that people are regularly and willingly wrong on important incidents. ([Aspen Digital][85]) Law-firm analyses of the memorandum note that no court has addressed whether existing statutory exceptions protect private entities performing these operations on the government's behalf, which means participating companies run at their own legal risk. Earlier questions now become operational: what happens when a commissioned firm seizes assets from the wrong wallet; when a criminal organization retaliates against a firm's staff; when a foreign jurisdiction treats an American operator as an intruder rather than a deputy; and whether participants fall under civilian criminal law, contract law, or neither. The deepest structural fact is the institutional address. **The privateering authority sits inside the coordination center built for immigration enforcement**, the same enforcement apparatus that runs ImmigrationOS, ELITE, the Paragon contract, and the social-media targeting cells. The [[wiki/Cyber Privateer|cyber privateer]], the contractor-as-sovereign-function, and the domestic enforcement stack now share an organizational home, so the entrant who understands any one of these lanes is already reading the organization chart of the other two. The revival is therefore occurring atop an already-mature commercial intelligence economy, an already-extensive contractor presence in the intelligence community, an already-active mercenary-spyware market, and an already-deployed civilian sensing architecture under NSI and InfraGard. Letters of marque, in whatever name they now travel, function as **the explicit ratification of a privatization that has already happened**. ## XII. The Agentic OSINT Era: Civilian Intelligence at Machine Speed > [!info] Agentic Software — connected wiki nodes > [[wiki/Agentic OSINT|Agentic OSINT]] · [[wiki/GeoSeer|GeoSeer]] · [[wiki/MiroFish|MiroFish]] · [[wiki/CAMEL-AI OASIS|CAMEL-AI OASIS]] · [[wiki/Infoblox Blue Helix|Infoblox Blue Helix]] · [[wiki/Genetic-Algorithm OSINT|Genetic-Algorithm OSINT]] · [[wiki/OWASP SocialOSINTAgent|OWASP SocialOSINTAgent]] · [[wiki/Agentic SOC|Agentic SOC]] · [[wiki/Toolhood to Twinship|Toolhood to Twinship]] · [[wiki/Swarm-OSINT|Swarm-OSINT]]. The prosthetic principle that runs through this corpus—that cognitive tools extend the agent who wields them until the boundary between agent and instrument becomes a design choice—becomes directly operational at the next layer: the **agentic AI overlay** that has transformed civilian and commercial OSINT in 2025–2026. Where Pinkerton operated detectives, Black Cube former intelligence officers, NSI trained line officers, and Palantir case-management software, the new layer operates **autonomous agents that plan, decompose, execute, and adapt multi-step intelligence operations** with minimal human supervision. By early 2026 a recognizable ecosystem had emerged, and much of its public cartography is written by its own vendors. A March 2026 survey of "AI agent era" OSINT tools, published by the geolocation startup **[[wiki/GeoSeer|GeoSeer]]** and leading with its own product, describes GeoSeer's parallel multi-agent architecture for returning [[wiki/Global Positioning System|GPS]] coordinates from a single image—landmarks, architecture, terrain, signage, vegetation, lighting—without EXIF metadata; **[[wiki/Unifuncs|Unifuncs]]**, a deep-research API for building custom agents with multi-threaded "[[wiki/Search while Reasoning|search-while-reasoning]]"; **[[wiki/World Monitor|World Monitor]]**, an open-source dashboard fusing hundreds of feeds including [[wiki/GDELT|GDELT]]; and **[[wiki/PimEyes|PimEyes]]**, whose investigator platform offers persistent alerts for new appearances of a face across the open web. ([GeoSeer][86]) The same survey's most consequential entry is **[[wiki/MiroFish|MiroFish]]**, an [[wiki/GNU Affero General Public License|AGPL]]-licensed swarm-simulation engine released in March 2026 by a student developer, incubated by [[wiki/Shanda Group|Shanda Group]] founder [[wiki/Chen Tianqiao|Chen Tianqiao]] with a reported 30 million yuan commitment, and drawing tens of thousands of [[wiki/GitHub|GitHub]] stars within weeks. MiroFish extracts entities from seed documents—news articles, policy drafts, intelligence reports—builds a knowledge graph, and spawns **thousands of agents with personalities, [[wiki/Agentic Memory|long-term memory]], and [[wiki/Agent Behavioral Logic|behavioral logic]]** on the [[wiki/CAMEL-AI OASIS|CAMEL-AI OASIS]] social-simulation engine to project how a scenario propagates through a society, with "God's-eye" mid-simulation variable injection and an [[wiki/Automated Report Agent|automated report agent]]. ([MiroFish][87]) Public-opinion forecasting, [[wiki/Crisis-PR Projection|crisis-PR projection]], and [[wiki/Narrative-Propagation Modeling|narrative-propagation modeling]], which once required a state influence directorate, now install from a repository. At the enterprise tier, **Infoblox's [[wiki/Infoblox Blue Helix|Blue Helix]]**, described in June 2025, is a multi-agent OSINT researcher built on [[wiki/OpenAI Agents SDK|OpenAI's Agents SDK]], [[wiki/Playwright|Playwright]] browser orchestration, multiple [[wiki/Large Language Model|LLMs]], [[wiki/Optical Character Recognition|OCR]], and a genetic algorithm that scores search terms by indicator yield and evolves them through [[wiki/Tournament Selection|tournament selection]], [[wiki/Crossover|crossover]], and [[wiki/Agent-Driven Mutation|agent-driven mutation]], switching between [[wiki/Exploration and Exploitation|exploration and exploitation]] as performance trends dictate; a second agent uses [[wiki/Model Context Protocol|Model Context Protocol]] connections to research findings against internal databases and prepares submissions for [[wiki/Federal Written Approval|human approval]], with Infoblox stating its intention to remove the approval gate as trust accrues. ([Infoblox][88]) **Babel Street, [[wiki/Blackdot Solutions|Blackdot Solutions]], [[wiki/Social Links|Social Links]], and Recorded Future** ship comparable agentic workflows. ([Babel Street][89], [Blackdot][90]) The **[[wiki/OWASP SocialOSINTAgent|OWASP SocialOSINTAgent]]** is an autonomous, text-and-vision-capable agent that aggregates a subject's activity across [[wiki/X Social Platform|X]], [[wiki/Reddit|Reddit]], [[wiki/Hacker News|Hacker News]], [[wiki/Bluesky|Bluesky]], GitHub, and [[wiki/Mastodon|Mastodon]] and answers analyst queries such as primary hours of activity, cross-platform persona differences, and [[wiki/Relationship Mapping|relationship mapping]]. ([OWASP][91]) At the security-operations tier, RSA Conference 2026 settled the **[[wiki/Agentic SOC|agentic SOC]]** as a product category: Google, [[wiki/Microsoft|Microsoft]], [[wiki/CrowdStrike|CrowdStrike]], [[wiki/Cisco|Cisco]], [[wiki/Arctic Wolf|Arctic Wolf]], [[wiki/Panther|Panther]], and others announced agentic security-operations capabilities, and [[wiki/Accenture|Accenture]] launched **[[wiki/Cyber.AI|Cyber.AI]]**, built with [[wiki/Anthropic|Anthropic]]'s [[wiki/Claude AI|Claude]] as its reasoning engine, to move clients "from human-speed response to continuous AI-driven cyber capabilities," with a governance layer for monitoring autonomous agents. ([Prophet Security][92], [Accenture][93]) Federal News Network's commentary on OSINT in the intelligence battlespace describes the orchestrated-autonomy frontier as teams of agents working continuously—one reading global media, one analyzing satellite imagery, one tracking financial flows, one monitoring cyber indicators—comparing findings and generating alerts without prompting. ([Federal News Network][94]) The user is no longer searching, or even prompting. The implication for civilian-state boundaries is decisive. Where the Culper Ring required couriers and [[wiki/Dead Drop|dead drops]], NSI trained officers and shared-spaces servers, and Palantir case managers, the agentic layer requires **almost no human friction** for many investigative workflows. A motivated private actor with API keys and an orchestration framework can stand up a continuous open-source surveillance pipeline against any person or organization with a public presence. The capability gap between trained investigator and motivated amateur is closing because the investigator's tradecraft is being encoded into agent loops the amateur can run at a fraction of the cost. And the August 2026 memorandum supplies the missing piece: **a federal channel through which a private firm's agent loops can be commissioned against designated targets**. For the citizen entrant this is the central economic fact of the era. One operator with an orchestration framework can now deliver what a cell of analysts delivered a decade ago, and the state has built a channel to buy that output. This is where the corpus's long-standing observation—**toolhood is a politically convenient under-description of a relation tending toward twinship**—becomes operational. [[wiki/Agentic OSINT|Agentic OSINT]] systems function as **persistent collaborators** that capture investigator intent, iterate on what matters, log [[wiki/Provenance|provenance]], and carry multi-step reasoning across investigations; they behave like junior analysts. As they integrate long-term memory, [[wiki/Cross-Session Continuity|cross-session continuity]], and tool autonomy, the boundary between "the investigator" and "the system the investigator uses" becomes ontologically unstable. Babel Street's design principles for agentic OSINT emphasize **provenance, [[wiki/End-to-End Traceability|end-to-end traceability]], and [[wiki/Analyst as Active Participant|analyst-as-active-participant]]**, an explicit recognition that human accountability must be engineered into the loop because the system's agency is real enough to displace it. ([Babel Street][89]) Whoever designs that boundary—developer, procurement officer, contractor, regulator, user—exercises **[[wiki/Architectural Authority|architectural authority]]** over what intelligence the system can produce, recall, and act on. The boundary is an engineered artifact. Projected thirty to fifty years forward, the trajectory runs toward **[[wiki/Ambient Inference Layer|ambient inference layers]]** integrating [[wiki/Sensor Mesh|sensor meshes]], [[wiki/Biometric Channel|biometric channels]], [[wiki/Conversational Substrate|conversational substrates]], and behavioral histories into [[wiki/Continuous Intelligence Fabric|continuous intelligence fabrics]]; toward **[[wiki/Swarm-OSINT|swarm-OSINT]]**, in which cooperating agent populations conduct emergent investigations; toward **[[wiki/Agent-to-Agent Intelligence Market|agent-to-agent intelligence markets]]** trading observations, hypotheses, and conclusions; and toward **[[wiki/Post-Platform Sensor Architecture|post-platform sensor architectures]]** in which vehicles, buildings, and physical environments become the open-source substrate. In that trajectory the category of "intelligence collector" dissolves because **the substrate itself collects continuously**, and the operative distinction becomes who holds the credentials, model access, compute budget, commission, or legal authority to query it. ## XIII. The Pipeline Is the Sovereign > [!info] Pipeline — connected wiki nodes > [[wiki/Five-Stage OSINT Pipeline|Five-Stage OSINT Pipeline]] · [[wiki/Pipeline as Sovereign|Pipeline as Sovereign]] · [[wiki/Çağdaş İnal|Çağdaş İnal]] · [[wiki/Semantic Pivot|Semantic Pivot]] · [[wiki/RapidPen|RapidPen]] · [[wiki/Next Generation Targeting|Next Generation Targeting]] · [[wiki/ICEYE|ICEYE]] · [[wiki/HawkEye 360|HawkEye 360]] · [[wiki/Molfar|Molfar]] · [[wiki/iWatch Texas|iWatch Texas]] · [[wiki/Texas Suspicious Activity Reporting Network|Texas Suspicious Activity Reporting Network]] · [[wiki/287(g) Agreements|287(g) Agreements]] · [[wiki/GardaWorld Federal Services|GardaWorld Federal Services]]. The assemblage of Section VIII names who participates in American intelligence. A finer instrument locates where power sits inside it. [[wiki/Çağdaş İnal|Çağdaş İnal]]'s *[[wiki/İstihbarat Teorisi 2026|İstihbarat Teorisi 2026]]*, a Turkish intelligence-theory text that incorporated this article's account of the assemblage into its chapter on OSINT, data-engineering pipelines, and [[wiki/LLM Agent|LLM agents]], opens that chapter with a governing proposition: the value of open-source intelligence resides in the **processed pipeline** that converts raw abundance into a decision product, rather than in the abundance itself. İnal specifies five stages, each with its own control. **Collection** is governed by lawful access and [[wiki/Source Logging|source logging]]; **cleaning** removes duplication, noise, and stale indicators; **enrichment** binds data to context, time, geography, and actor; **modeling** tests features and hypotheses to prioritize signal; and **productization** attaches a [[wiki/Confidence Level|confidence level]] and a [[wiki/Decision Threshold|decision threshold]], yielding the intelligence product. ([İnal, *İstihbarat Teorisi 2026*, ch. 4][109]) İnal presents these stages as [[wiki/Epistemic Hygiene|epistemic hygiene]]. Laid over the American record assembled in this article, they disclose a constitutional fact: **each stage is a [[wiki/Governance Gate|governance gate]], each gate performs a sovereign function, and in the American assemblage each gate is now operated by a commercial party**. Sovereignty migrates to whoever runs the gate, which means every gate is also a job. The **collection gate** carries the control the commercial channel was built to route around. "Lawful access and source record" is precisely what a warrant, a subpoena, or a FISA order once supplied, and precisely what the broker market, the Intelligence Community Data Consortium, and the purchasing channel that outlived Section 702 replace with a transaction (Section VII). The civilian reporting networks—NSI, InfraGard, and the state systems examined below—feed the same gate with human perception standardized into intake forms. The **enrichment gate** is entity resolution: LexisNexis linking more than 82 billion records and delivering them by contractually specified API into Palantir and PenLink. [[wiki/MITRE|MITRE]]'s April 2025 report on scaling publicly and commercially available information across the federal government prescribes exactly this architecture as public policy: a designated managing agency, pooled acquisition through government-wide vehicles and [[wiki/Other Transaction Consortium|Other Transaction consortia]], and **[[wiki/Centralized Data Engineering|centralized data engineering]], entity resolution, and [[wiki/Knowledge Repository|knowledge repositories]] developed with industry partners**. ([MITRE][100]) ODNI's consortium is that blueprint in operation. The **modeling gate** is ImmigrationOS's prioritization logic and Blue Helix's fitness-scored query evolution. The **productization gate** is ELITE, whose "address confidence score" is İnal's confidence level and decision threshold applied to a residence. In this pipeline the decision product is an actionable location, delivered to a field team. The institutional debate over where open-source intelligence should live has been settled by procurement. In January 2025, George Mason University's National Security Institute published [[wiki/David Gauthier|David Gauthier]]'s proposal for an **[[wiki/Open Source Information Agency|Open Source Information Agency]]** outside the Intelligence Community: an Executive Branch body beginning as a task force in the [[wiki/Executive Office of the President|Executive Office of the President]], consolidating the IC's [[wiki/Open Source Enterprise|Open Source Enterprise]] and related offices, with a seat on the National Security Council, roughly USD 100 million, and about 100 civilian personnel serving uncleared to resist the pull toward classification. ([GMU National Security Institute][99]) Set that hundred-person agency beside a single ICE case-management contract that has grown past USD 145 million, and the location of national open-source capacity becomes plain. It already resides in the vendor pipeline, and the public agency debate concerns how the state will supervise capacity it has purchased. The sentence of this article that İnal's chapter carried forward concerned **civil-service pipelines**, and the double meaning carries the whole mechanism. The [[wiki/Human Pipeline and Data Pipeline|human pipeline the state cannot fill]] is replaced by a data pipeline the state does not own. Each analyst billet the civil service cannot staff at speed becomes a vendor license, a contractor seat, or an agent loop, and ODNI's "next-generation OSINT workforce and tradecraft" is staffed in practice by the assemblage. The talent pipeline and the data pipeline are one substitution seen from two sides: **public capacity becomes private sovereignty at the exact point where the state's hiring rate falls below the world's data rate**. The operational spine of the whole system is what İnal's chapter calls the **[[wiki/Semantic Pivot|semantic pivot]]**: an agent passively captures traffic, endpoints, metadata, and response schemas without alerting its target, extracts credentials and structure, reinjects those features into its own context, and leaps from passive reconnaissance to active exploitation. The research literature has measured the leap. [[wiki/RapidPen|RapidPen]], given nothing but a target IP address, used LLM agents to plan, scan, and launch exploits and obtained a shell in 60 percent of runs within 200 to 400 seconds, at roughly USD 0.30 to 0.60 per run. ([Nakatani, RapidPen][97]) The August 2026 memorandum codifies the same continuum as program categories—**Cyber Surveillance Operations** and **Cyber Effects Operations** under one commission—so that a pivot demonstrated as a research result in February 2025 had become an authorized business line by August 2026. At alliance scale, NATO Allied Command Transformation selected **[[wiki/Next Generation Targeting|Next Generation Targeting]]** as a 2026 Beacon Project with a stated goal of reducing time to decision by more than 50 percent through modular AI and federated data flows across existing national systems, with human decision-makers retained in control. ([NATO ACT][98]) [[wiki/Decision-Latency Compression|Latency compression]] is the explicit objective at every tier, and the human gate is a doctrinal commitment whose strength each deployment will test. The international demonstrations show the pipeline doing sovereign work in war. CSIS's April 2026 analysis of the [[wiki/Democratization of Intelligence|democratization of intelligence]] documents that **[[wiki/Ukraine|Ukraine]] used state funds to buy continuous access to [[wiki/ICEYE|ICEYE]] satellite imagery** and within months located more than 7,000 Russian military sites and troop positions, later destroying hundreds of Russian assets; that Ukraine used **[[wiki/HawkEye 360|HawkEye 360]]** [[wiki/RF Geolocation|radio-frequency geolocation]] to find and target Russian forces through their [[wiki/GPS-Jamming Emissions|GPS-jamming emissions]]; and that **[[wiki/Molfar|Molfar]]**, a Ukrainian private military-investigations company, mined Russian soldiers' social-media posts to track unit movements and delivered actionable analysis to the Ukrainian government. ([CSIS][96]) Molfar is often described as a civilian volunteer collective; CSIS's more precise term matters here, because it shows a **private intelligence firm provisioning a state at war**, the Pinkerton–McClellan relation of 1861 reproduced in Kyiv with satellites and scraped posts. The same analysis records the adversarial mirror: Iran-backed Houthi forces used **[[wiki/Commercial AIS Targeting|commercially purchased AIS subscriptions]]** to target Red Sea shipping, attacking roughly fifty vessels between November 2023 and June 2024, seizing one, sinking two, and killing three people, with past tracks allowing prediction even after transponders went dark. And it records the state reaching back into the commercial pipeline at the collection gate: [[wiki/Planet Labs|Planet Labs]], at U.S. request, extended delays on regional imagery from four days to two weeks and moved to case-by-case **"managed access."** ([CSIS][96]) The pipeline's gates open and close at the direction of whoever holds leverage over the operator. The domestic demonstration sits in **Texas**, where the gates are staffed by people provisioned through a federated chain. Its prototype was the **[[wiki/Texas Virtual Border Watch|Texas Virtual Border Watch]]**, launched in 2008 on a USD 2 million state grant, which streamed fifteen border cameras to the public and turned about 43,000 registered civilians into remote watchers emailing sightings to sheriffs; the program logged some 20 million clicks and four arrests. ([CNN][101]) Its lesson is the lesson of İnal's table: perception without an intake pipeline yields almost nothing. Texas built the pipeline. Executive Order [[wiki/Texas Executive Order GA-07|GA-07]], issued September 5, 2019 after the El Paso massacre, established **[[wiki/iWatch Texas|iWatchTx]] and the [[wiki/Texas Suspicious Activity Reporting Network|Texas Suspicious Activity Reporting Network]] (TxSARNet)**, with standardized intake questions developed by the Department of Public Safety and the state's fusion centers and reporting by web, app, and phone line ([Texas DPS][102]); the Governor then directed the [[wiki/Texas Education Agency|Texas Education Agency]] and the [[wiki/Texas Higher Education Coordinating Board|Higher Education Coordinating Board]] to carry the program into schools and universities, provisioning [[wiki/Students and Faculty as Sensors|students and faculty as sensors]]. ([Office of the Governor][103]) The national precedent for the volunteer mode is **[[wiki/Sedition Hunters|Sedition Hunters]]**, whose 65,282 participants built suspect spreadsheets, an 8,000-video evidence map, and a face-recognition site around suspect identifiers the FBI published, in a constrained but productive crowd-to-state loop. ([Yu et al.][104]) The decisive Texas layer is the **[[wiki/Federated Armed Enforcement Capacity|federated provisioning of armed enforcement capacity]]**. **[[wiki/Texas Senate Bill 8 - 2025|Senate Bill 8]]**, sponsored by Senator [[wiki/Charles Schwertner|Charles Schwertner]] of Georgetown, took effect January 1, 2026 with a compliance deadline of December 1, 2026. It requires every sheriff whose county operates or contracts for a jail to request and enter a **[[wiki/287(g) Agreements|287(g)]]** agreement with ICE, to supply the personnel and funding to carry it out, and to re-request annually if refused; the attorney general may sue a noncompliant sheriff, and the comptroller pays participation grants from USD 80,000 to 140,000 by county population. By February 2026 Texas held 299 agreements across 241 agencies in 186 counties, 117 of them under the **[[wiki/287(g) Task Force Model|Task Force Model]]** that carries federal immigration authority onto the street. ([Texas Policy Research][105]) The federal terms make the provisioning literal: ICE pays the full salary and benefits of each certified officer, overtime, one-time start-up costs, up to USD 100,000 in vehicles per agreement, USD 7,500 in equipment per deputy, and **performance bonuses tied to immigration arrests**; nationally, by the September 2025 funding surge, DHS had deputized up to 15,800 officers, with 764 Task Force agreements and as much as USD 2 billion allocated. ([Baptist News Global][106]) This is the **[[wiki/Pinkerton Inversion|Pinkerton inversion]] of 1871**. Then, the federal government hired a private agency because it lacked investigators; now it rents county deputies by the head, and the arrest bonus is **prize money**—the privateer's incentive structure, reappearing in human form beside the cyber-marque bill's 15 percent asset-recovery bounty. The custody link is private. ICE awarded **[[wiki/GardaWorld Federal Services|GardaWorld Federal Services]]** up to USD 382 million for armed, around-the-clock ground transport of people held under 287(g) across all 254 Texas counties, USD 17.1 million to convert an ICE-owned San Antonio warehouse into a detention center with staffing and wraparound services, and commitments exceeding USD 700 million within six months. ([Project Saltbox][107]) A private security conglomerate, the commercial peer of Securitas's Pinkerton, holds the stage between arrest and removal. The integration of these layers should be read on an explicit evidentiary ladder. It is **established** that civilian reports enter a statewide fusion-center network, that deputized local officers exercise federal immigration authority under statutory compulsion and arrest-linked compensation, and that a private contractor moves the resulting detainees. It is **strongly indicated** that the records generated flow into the ICM–ImmigrationOS stack, where Palantir's AI tool already processes incoming tips and ELITE scores addresses for action. It is **unresolved** how iWatchTx reports route through regional nodes such as Austin's regional intelligence center, a matter for [[articles/The Austin Surveillance Field|The Austin Surveillance Field]], and what dollar values the arrest-linked bonuses carry. The coordinating apex is the National Coordination Center of the Homeland Security Task Force—the same body that now administers the cyber-privateer program—so Texas is where the human privateer and the cyber privateer share a chain of command. The international and domestic cases align term for term. **Ukraine buying ICEYE imagery corresponds to Texas renting deputies; Molfar's commercial geolocation corresponds to iWatchTx and Sedition Hunters; the Houthis' [[wiki/Automatic Identification System|AIS]] subscriptions correspond to ICE's LexisNexis feed and GardaWorld's fleet.** The labor pool behaves as a [[wiki/Capability Reservoir|capability reservoir]]: SB 8 converts every jail-operating sheriff's office in the state into a provisioned node of a federal pipeline, by statute, on a deadline. [[wiki/Pipeline as Sovereign|The pipeline is the sovereign]], and [[wiki/Civic Intelligence Literacy|civic intelligence literacy]] in the coming decade is literacy of the gates: who operates each one, under what authority, at what price, and how a qualified citizen gets hired to staff it. ## XIV. The Board Already Exists > [!info] Labor Boards — connected wiki nodes > [[wiki/Four-Board Intelligence Labor Model|Four-Board Intelligence Labor Model]] · [[wiki/Task Board|Task Board]] · [[wiki/Sensor Board|Sensor Board]] · [[wiki/Commission Board|Commission Board]] · [[wiki/Agent Board|Agent Board]] · [[wiki/Project Maven|Project Maven]] · [[wiki/Premise Data|Premise Data]] · [[wiki/Thunderforge|Thunderforge]] · [[wiki/ConnectKyle|ConnectKyle]] · [[wiki/Ring Search Party|Ring Search Party]]. The systems have not gone backwards. The message board one would expect a mature civilian-intelligence economy to produce—a place to pick up the day's spy contract—exists. It never says "spy," because the modern pipeline breaks the spy apart into **task, sensor, and agent** and posts each piece on a board labeled something else. The intelligence identity sits only at the client end of the pipeline, kept out of view by design. Four boards are documented. **The [[wiki/Task Board|task board]]** decomposes analytic tradecraft into piecework. In October 2017, Google sent [[wiki/Wide-Area Motion Imagery|wide-area motion imagery]] from the Pentagon's **[[wiki/Project Maven|Project Maven]]** to the crowd-work platform [[wiki/CrowdFlower|CrowdFlower]], later renamed Figure Eight, where "contributors" in the United States, Venezuela, Indonesia, Russia, and elsewhere split it into assembly-line micro-tasks—drawing boxes around buildings, vehicles, and objects—to train the military's targeting AI. Figure Eight confirmed that its contributors **did not know they were working for Google or the military**; they received a task rationale, never the client, on platforms that pay as little as about a dollar an hour. ([The Intercept][110]) That is the day's spy contract in its modern form: an imagery-analysis micro-task picked off a board by an anonymous worker. **[[wiki/Premise Data|Premise Data]]** built the field version, paying smartphone users in as many as 43 countries small sums to photograph buildings including religious sites and banks, answer local surveys, and log nearby Wi-Fi networks and phones. Its 2019 pitch to the special operations task force in Afghanistan described support for HUMINT, [[wiki/SIGINT|SIGINT]], and information operations, with tasks designed to **"[[wiki/Safeguard True Intent|safeguard true intent]],"** and in a 2023 court declaration its chief executive confirmed military and intelligence clients and called those contracts a closely guarded trade secret. ([Gizmodo][111], [Jack Poulson][112]) The model has since scaled into the defense core: [[wiki/Scale AI|Scale AI]], a company built on the same human-in-the-loop data-labeling marketplace model, now supplies [[wiki/Agent-Based Military Planning|agent-based military planning]] tools to Indo-Pacific and [[wiki/United States European Command|European Command]] under the [[wiki/Defense Innovation Unit|Defense Innovation Unit]]'s **[[wiki/Thunderforge|Thunderforge]]** program with Anduril and Microsoft. ([ExecutiveGov][113]) The Maven–Figure Eight pipeline is **established**; the annotation-marketplace model feeding defense AI at industrial scale is **strongly indicated**; which gig tasks currently train which government models is **unresolved**, guarded by vendors as proprietary. **The [[wiki/Sensor Board|sensor board]]** asks the civilian for a device rather than labor, and the contract is a consent click. In Hays County, the **[[wiki/Kyle Police Department Real-Time Crime Center|Kyle Police Department]]** runs an [[wiki/Axon Fusus|Axon Fusus]] [[wiki/Real-Time Crime Center|real-time crime center]]: residents and businesses register their private cameras through the city's [[wiki/ConnectKyle|ConnectKyle]] portal, two dedicated analysts staff the center, and police request footage owner by owner, with each viewing logged. ([Hays Free Press][114]) [[wiki/Ring|Ring]]'s **[[wiki/Ring Community Requests|Community Requests]]** routes police requests for doorbell footage through [[wiki/Axon|Axon]]; in October 2025 Ring announced [[wiki/Flock Safety|Flock Safety]] as a second conduit and cancelled that integration in February 2026, the same month its Super Bowl advertisement promoted **[[wiki/Ring Search Party|Search Party]]**, an AI feature that activates the Ring cameras near a lost-pet alert to hunt collectively. ([The Register][115]) Search Party displays the capability in plain view: a neighborhood's cameras tasked as one array by a single alert, with the lost pet as the floor of its implementation. **The [[wiki/Commission Board|commission board]]** is the August 2026 memorandum's market structure. Participating Companies may enter commercial agreements with other private firms and with state, local, tribal, and territorial agencies to receive threat information and propose operations, which creates a **subcontracting market for commissioned surveillance and effects work** beneath the federal approval gate (Section XI). The program targets foreign criminal networks; the board architecture it creates is general. A prime holds the commission and posts work downward to whoever can perform it. **The [[wiki/Agent Board|agent board]]** is the endpoint. ICE already routes incoming public tips through Palantir's generative-AI triage, and agentic OSINT systems such as Blue Helix and OWASP's SocialOSINTAgent accept a goal and execute collection themselves (Sections VIII and XII). The day's contract is increasingly accepted by an agent with API keys, and the human role narrows to labeling its training data, approving its output, or performing the residual tasks agents still fail at. On the trajectory of every board above, the task board and the agent board converge. The person-shaped jobs persist alongside the boards, and they remain open to small operators. In December 2025 ICE awarded thirteen firms open-ended [[wiki/Skip-Tracing Contracts|skip-tracing contracts]] worth up to USD 1.2 billion over two years—up to 50,000 cases per firm per month, with bonuses for verifying a location within seven or fourteen days and [[wiki/Time-Stamped Location Photography|time-stamped photographs]] of homes and workplaces when databases fail—and the awardees include **[[wiki/Fraud Inc|Fraud Inc.]], run from an apartment in [[wiki/Conroe Texas|Conroe]], Texas**, alongside a [[wiki/GEO Group|GEO Group]] subsidiary and established defense contractors. ([American Immigration Council][116], [Scripps News][117]) A one-apartment Texas firm holding a federal location-intelligence contract beside a national prison operator is the clearest available evidence that the barrier to entry has fallen to competence and paperwork. The SAR volunteer, the infiltrator, and the skip tracer are the old job titles; the board is where most of the work has gone. The modern pipeline therefore has a consistent shape. A **client**—DoD, DHS, ICE, a police department—contracts a **prime**: Google, Scale, Axon, Premise, a Participating Company. The prime runs a **marketplace**: a crowd platform, a field app, a camera registry, a subcontract pool. The marketplace serves **contributors**—an annotator, a doorbell owner, a gig worker, an agent—who never see the client. The product flows back into the client's model, crime center, or targeting system. Mapped onto İnal's stages, the sensor board staffs collection, the task board staffs enrichment and modeling, the commission board staffs action, and the agent board absorbs all of them. The pipeline is the sovereign, and the board is how the sovereign hires. Read from the entrant's side, each board has its own door and its own credential. The task board admits anyone who can label, verify, translate, or geolocate to specification, and it has a sanctioned public form: since November 2016 the Defense Department's Vulnerability Disclosure Program, born from the **[[wiki/Hack the Pentagon|Hack the Pentagon]]** bounty, has taken continuous reports from outside researchers, passing its 50,000th report from 5,635 contributors in March 2024. ([BleepingComputer][126]) The sensor board admits a homeowner through a registration portal and a citizen through iWatchTx. The commission board admits a firm that can meet the memorandum's standards for proficiency, facility security, personnel vetting, and bond, and it admits individuals as employees or subcontractors of such firms. The agent board admits the builder: whoever can design, operate, and govern the agent loops that every other board is converging toward. The boards also form a ladder of disclosure. The anonymous boards hide the client; the commission board names the sovereign, requires written federal approval, and binds the participant with a bond. **A patriotic entrant who wants to know the flag they sail under climbs from the anonymous boards toward the commissioned ones**, and the forthcoming installments of this series map that climb board by board. ## XV. The Privateer Professionalized: From Pinkerton to Palmer Luckey > [!info] Defense Marketplace — connected wiki nodes > [[wiki/Palmer Luckey|Palmer Luckey]] · [[wiki/Anduril|Anduril]] · [[wiki/Lattice|Lattice]] · [[wiki/Integrated Visual Augmentation System|Integrated Visual Augmentation System]] · [[wiki/Soldier Borne Mission Command|Soldier Borne Mission Command]] · [[wiki/Detachment 201|Detachment 201]] · [[wiki/Direct Commissioning of Technology Executives|Direct Commissioning of Technology Executives]] · [[wiki/Rank through Building|Rank through Building]]. Standing back, the macropattern is unmistakable. **Privatization is the trend line.** The state asked civilians to report; trained private security to observe; built fusion centers and databases to ingest reports; extended public-private infrastructure intelligence through InfraGard; embedded contractors in the national-security workforce; turned the public web into an intelligence substrate; bought commercial corpora through a centralized consortium; made Palantir indispensable to immigration enforcement and specified that commercial records flow into its platform; licensed mercenary spyware for domestic enforcement; required, in Texas, every jail-operating sheriff to seek federal deputization while paying bonuses tied to arrests and contracting armed custody transport to a private security firm; invited private disruption of adversary networks; watched legislators revive letters of marque; and then, by presidential memorandum, commissioned bonded private cyber operators. Agentic AI made each layer faster, cheaper, and more autonomous than any human investigator could match. The old privateer took a ship to sea under sovereign license. The new privateer carries **a laptop, a clearance, a vendor contract, a platform credential, a fusion-center login, an AI agent, a data-broker subscription, a reserve commission, a patriotic mandate, or a National Coordination Center commission**—often several at once, each held under a different legal category. In the course of one engagement the same person may pass through the regimes of **investigator, contractor, analyst, threat-intelligence vendor, commissioned cyber operator, fusion-center participant, and civic reporter** without leaving the desk. What is being rebuilt at scale is the **Pinkertonian apparatus of the late nineteenth century**, updated for digital substrates and, this time, professionalized: a hybrid of state and private actors, accumulating capabilities inside private firms, contracted to perform sovereign functions under emergencies the nation has declared, and increasingly bound by instruments the original Pinkertons never carried—written approval gates, vetting standards, [[wiki/Disclosed Contractual Relationships|disclosed contractual relationships]], and [[wiki/Forfeitable Bond|forfeitable bonds]]. The contemporary successors are larger, better funded, more technologically sophisticated, and more deeply integrated into national decision-making than their ancestors. Structurally they are the same lineage, and in one case they are literally the same firm. The marketplace era has its own figures of rank, and **[[wiki/Palmer Luckey|Palmer Luckey]]** is the clearest. He sold [[wiki/Oculus|Oculus]] to Facebook in 2014, left the company in March 2017 after a dispute he later described as centering on a donation to a pro-Trump group, and founded **Anduril Industries** that June with Palantir veterans [[wiki/Trae Stephens|Trae Stephens]], [[wiki/Brian Schimpf|Brian Schimpf]], and [[wiki/Matt Grimm|Matt Grimm]] and Oculus hardware lead [[wiki/Joseph Chen|Joseph Chen]]. ([Wikipedia: Palmer Luckey][121]) Anduril began with a 2018 border pilot and by 2020 had become [[wiki/United States Customs and Border Protection|Customs and Border Protection]]'s vendor for up to 200 **[[wiki/Autonomous Surveillance Tower|autonomous surveillance towers]]**, an effort CBP moved to make a [[wiki/Program of Record|program of record]]; hundreds of its Sentry towers now watch the southern frontier. ([Nextgov][119], [Wikipedia: Palmer Luckey][121]) In April 2025 the Army approved the novation of Microsoft's [[wiki/Integrated Visual Augmentation System|Integrated Visual Augmentation System]] contract, an Other Transaction agreement once valued at up to USD 22 billion, to Anduril, which then won a reported USD 159 million award in the follow-on [[wiki/Soldier Borne Mission Command|Soldier Borne Mission Command]] prototyping sprint. ([CRS][120]) Its [[wiki/Lattice|Lattice]] platform runs in an Army battle-manager contract for joint missile defense, and it sits beside Scale AI and Microsoft in the Thunderforge planning program (Section XIV). In May 2026 Anduril raised USD 5 billion at a **USD 61 billion valuation**, more than double its valuation eleven months earlier, after revenue doubled in 2025 to USD 2.2 billion. ([TechCrunch][118]) Beijing sanctioned Luckey personally in December 2025. ([Wikipedia: Palmer Luckey][121]) He holds no executive title at the company and serves as its public face, with no rank and no agency billet. ([OCBJ][127]) **His influence over what American soldiers and border agents actually field exceeds that of most division heads inside the agencies that buy from him.** That is the privateer thesis embodied in one biography: the frontier of national capability is built by people who never took a career intelligence officer's path, and the market rewards them at the scale of nations. The state has begun issuing commissions to such people directly. On June 13, 2025, the [[wiki/United States Army Reserve|Army Reserve]] directly commissioned four technology executives as lieutenant colonels in **[[wiki/Detachment 201|Detachment 201]]**, its Executive Innovation Corps: Meta's chief technology officer [[wiki/Andrew Bosworth|Andrew Bosworth]], Palantir's chief technology officer [[wiki/Shyam Sankar|Shyam Sankar]], and [[wiki/Kevin Weil|Kevin Weil]] and [[wiki/Bob McGrew|Bob McGrew]] of [[wiki/OpenAI|OpenAI]], serving part-time as senior advisors on targeted projects. ([Wikipedia: Detachment 201][122]) On June 10, 2026 the Army commissioned three more—[[wiki/Sutter Hill Ventures|Sutter Hill Ventures]]' [[wiki/Sam Pullara|Sam Pullara]], [[wiki/Facebook AI Research|Facebook AI Research]] co-founder [[wiki/Serkan Piantino|Serkan Piantino]], and [[wiki/Cloudflare|Cloudflare]]'s chief technology officer [[wiki/Dane Knecht|Dane Knecht]]—while the Navy opened a call for its Reserve Navy Innovation Unit written in the register of a private-sector job posting, seeking network engineers, cybersecurity specialists, and software builders and assessing candidates on their open-source contributions, patents, and published research. ([Task & Purpose][123]) **A reserve commission issued for demonstrated technical work is a letter of marque issued to a person.** The credential that once took a career to earn now follows a public portfolio. At the broadest tier, the enforcement apparatus has opened its doors to the citizenry at a scale without modern precedent. In August 2025 ICE removed its upper age limits, opened applications to Americans as young as eighteen, and offered **signing bonuses of USD 50,000** with student-loan and retirement incentives funded through the 2025 reconciliation law. ([NBC Montana][125]) By January 2026 the agency reported more than **220,000 applications** and more than **12,000 new officers and agents** hired in under a year, doubling its workforce from roughly 10,000 to 22,000. ([KBTX][124]) The ladder now runs continuously from the doorbell owner registering a camera to the gig annotator, the bounty researcher, the skip-trace firm, the sworn officer, the commissioned reservist, the Participating Company, and the founder of a defense prime. **A democratic society needs observant citizens, and a nation at its scale needs skilled ones.** The decisive variable is **tradecraft remaining bound to its commission**. A citizen trained in lawful documentation, source evaluation, digital hygiene, verification, data-handling discipline, and accountability strengthens the nation and the market alike. A citizen drawn into doxxing, coercive profiling, harassment, illegal intrusion, vigilantism, blackmail, or gray-market surveillance becomes a privateer without a constitution, which is to say a pirate. The same skill serves the country or appetite according to its **legal container, professional discipline, and incentive architecture**. The Pinkerton case is the lesson the Republic has already learned once, and it is the entrant's most useful history. A Scottish abolitionist who sheltered fugitives and funded John Brown built a private detective agency, ran Union intelligence under a nom de guerre while his estimates bent toward what his client wanted, organized a firebombing of a Missouri farmhouse for railroad and express interests that he had written of burning down, and left an organization whose rental to industrial capital at Homestead drew a federal statute naming the firm. It survived by changing its business, was acquired by a Swedish multinational, and was still taking labor-intelligence work for Amazon in 2019. **The arc from Union service to strikebreaking to global threat-intelligence subsidiary is the most compressed history of American privatized intelligence available**, and its lesson for anyone entering the trade is exact: capabilities built inside private firms are designed from the outset for every purpose a paying client can imagine, and their legitimacy comes from serving the nation under its commission, with the client named and the line held. ## XVI. Civic Intelligence Literacy and the Citizen-Privateer > [!info] Marketplace Entry Vocabulary — connected wiki nodes > [[wiki/Civic Intelligence Literacy|Civic Intelligence Literacy]] · [[wiki/Credentialed Marketplace Participation|Credentialed Marketplace Participation]] · [[wiki/Hack the Pentagon|Hack the Pentagon]] · [[wiki/Skip-Tracing Contracts|Skip-Tracing Contracts]] · [[wiki/Program of Record|Program of Record]] · [[wiki/Participating Companies|Participating Companies]] · [[wiki/Privateer and Pirate|Privateer and Pirate]]. Privatized spycraft arrives as **normalcy**: brand protection, crisis intelligence, executive protection, cyber threat intelligence, reputational due diligence, trust-and-safety analytics, litigation support, opposition research, data enrichment, fraud detection, geopolitical risk, AI-assisted OSINT, supply-chain intelligence, [[wiki/Location Verification|location verification]] for enforcement, and "[[wiki/Publicly Available Information|publicly available information]]" purchased at scale through portals built by intelligence agencies and contractors. Much of it is lawful, much of it is necessary, and much of it is patriotic work done by people who never call themselves spies. **The same category contains every grade of conduct at once**, which is why the entrant needs a precise map. Each layer of this history teaches the entrant a portable lesson. Washington teaches that successful intelligence depends on restraint and trust as much as collection. *TURN* teaches that intelligence work runs through families, friendships, and private life, and that the operator carries that weight. Privateering teaches that the nation can multiply its strength by commissioning private initiative, and that the commission is what makes the initiative lawful. Pinkerton teaches that a firm renting its capability to any client invites the statute that constrains it, and that the statute's line now sits at armed force for hire. NSI teaches that citizen reporting scales when it is standardized, and that discretion is built into the standard. InfraGard teaches that a vetted network must defend its own roster. OSINT teaches that the public sphere is machine-readable. Brokers teach that the data substrate is fenced against foreign adversaries and open to American buyers. Palantir and LexisNexis teach that operational substance accumulates inside the contractor and that commercial data is now contractually piped into enforcement platforms. Mercenary spyware teaches that the intrusion tier follows ownership and contract, and now runs under American ownership. Section 702's lapse teaches that the purchasing channel outlives the statute. The OSINT pipeline teaches that sovereignty sits at the stage gates, and Texas teaches that enforcement capacity can be federated by statute and priced by the head. The boards teach that the spy has become a task, a sensor, and an agent. Anduril and Detachment 201 teach that rank in this era is earned by building. The August 2026 memorandum teaches that the constitutional form of privateering has been rebuilt by executive design, with a bond and an approval gate waiting for qualified firms. The coming era therefore requires **civic intelligence literacy**, and for the [[wiki/Citizen-Privateer|citizen-privateer]] that literacy is the professional baseline: the ability to understand how information is collected, inferred, purchased, verified, fused, and converted into decisions, well enough to work inside the architecture with skill and to stay on the right side of the commission. At minimum that means knowing that mobile advertising IDs are persistent identifiers traded by hundreds of brokers; that [[wiki/Automated License Plate Reader|license-plate readers]], [[wiki/Doorbell Camera|doorbell networks]], and public-records aggregators feed commercial profile engines that agencies query and that procurement now routes into enforcement platforms; that suspicious activity reports enter national repositories under a published functional standard; that systems like ImmigrationOS and ELITE encode prioritization criteria and address-confidence scores that direct field operations; that federally commissioned firms may now conduct cyber operations under bond and written approval; that the Anti-Pinkerton line sits at armed force for hire; and that agentic AI has collapsed the cost of a continuous OSINT pipeline to the price of compute. The operator who knows these facts can price work, qualify for commissions, and protect both the client and the country. The operator who lacks them leaves the work, and the commissions, to those who have them. The sensor layer shows how far the market has already reached. **Flock Safety** built a license-plate and video network across American cities and counties large enough that on September 23, 2026 the Senate Judiciary Subcommittee on Crime and Counterterrorism devoted a bipartisan hearing to it under the title "Always Watching: Flock's Nationwide AI Surveillance Network." ([Senate Judiciary Committee][95]) A vendor whose network commands a Senate hearing has become national infrastructure: a continuous, searchable, AI-indexed record of movement through public space, queried by agencies at every level. Municipal procurement turns over council by council while the requirement beneath it endures, and the most durable positions in this market are those anchored to statute, commission, program of record, and the federal and state mandates that outlast any single council vote—the same anchor that made the commissioned privateer a permanent instrument of the nation. The April 27, 2026 edition of this article named the coming market in its title, reading signals that were already public: Representative Schweikert's scam-farm marque bill in August 2025, Senator Lee's cartel marque bill in December 2025, and the March 2026 *Cyber Strategy for America*'s pledge to "unleash the private sector." What followed arrived on schedule. On May 13, Anduril closed its USD 61 billion round; on June 10, the Army commissioned its second cohort of technologists and the Navy posted its call for builders; in July, Lee and Burchett introduced the Cyber Letters of Marque and Reprisal Act with its 15 percent bounty fund; and on **August 12, 2026, 107 days after publication**, the President signed the memorandum that commissions bonded private firms for cyber surveillance and effects operations. The age of the privateer was forecast in April and formally opened in August. Washington's first lesson was to know the adversary. Ours begins one layer deeper: **know the system that turns every capable citizen into a potential collector, analyst, builder, or commissioned operator**, and know where its doors are. The old privateer sailed under papers signed by sovereign authority. The new privateer sails under contracts, clearances, API access, fusion-center credentials, programs of record, reserve commissions, and, now, a federal commission with a million-dollar bond. The republic born through civilian intelligence and privateering against empire has rebuilt the commission for the age of the platform and the agent, and the constitutional discipline that produced the letter of marque, the Anti-Pinkerton Act, and the Foreign Intelligence Surveillance Act returns here in operational form—as the approval gate, the vetting standard, the bond, and the disclosed contract. That discipline is exactly what makes the new privateer lawful. The installments that follow this article map the boards, the credentials, and the commissions one by one, for Americans who want to serve their country in the trade. **Public purpose and private enterprise are again sailing under the same flag, and the eye that never sleeps is hiring.** ## XVII. The Telemetry Civilization: Use, Good Faith, and the Conduct of Trust > [!info] Telemetry and Conduct — connected wiki nodes > [[wiki/Telemetry Civilization|Telemetry Civilization]] · [[wiki/Real-Time Telemetry|Real-Time Telemetry]] · [[wiki/Legibility to Intelligence|Legibility to Intelligence]] · [[wiki/Observation as Commons|Observation as Commons]] · [[wiki/Use Governance|Use Governance]] · [[wiki/Good Faith as Conduct|Good Faith as Conduct]] · [[wiki/Architectural Trust|Architectural Trust]] · [[wiki/Continuous Machine Perception|Continuous Machine Perception]]. Every chapter of this history took place under one condition that has now ended: **observation was scarce**. Washington's couriers rode at night because a single report could cost a life. Pinkerton's operatives were expensive, slow, and few. A wiretap required an order, a technician, and a reel of tape. Because watching was rare and deliberate, the act of collection was itself the decision, and so American law built its guardrails at the point of collection: the warrant, the Anti-Pinkerton Act, FISA, the reasonable-suspicion threshold of 28 C.F.R. Part 23. That design fit its century. The present century runs on a different physics. Phones, vehicles, doorbells, plate readers, satellites, [[wiki/Payment Rail|payment rails]], [[wiki/Industrial Sensor|industrial sensors]], wearables, and the models that read them generate a continuous record of how a society moves, trades, builds, and heals. Sensing has become ambient infrastructure in the way electricity and roads are infrastructure, and being seen has stopped being an event. **The world is converging on [[wiki/Real-Time Telemetry|real-time telemetry]]**, and the frameworks that treated observation itself as the injury describe a vanished scarcity. [[wiki/Telemetry|Telemetry]] is the lifeblood of intelligence in every substrate. A nervous system is calibrated by its afferents; an analyst by coverage; a machine intelligence by the breadth and freshness of the signals it is trained and grounded on. The agentic systems of Section XII, the pipeline gates of Section XIII, and the boards of Section XIV all run on continuous streams, and every gain in their usefulness is a gain in what they can perceive. A society that wants intelligence working on its behalf—routing ambulances, forecasting grid load, catching fraud before it clears, intercepting fentanyl at a port, locating a missing child within the first hour, securing a border—is choosing to become legible to that intelligence. Legibility is the precondition of competent care at national scale. The choice was made long ago, by markets and by citizens, every time a convenience was accepted in exchange for a signal. What remains is the question that actually governs outcomes: **[[wiki/Use Governance|what is done with what is seen]]**. This article has been tracing the answer all along without naming it. İnal's productization gate attaches a confidence level and a decision threshold before anything becomes action. The August 2026 memorandum requires written approval of every operations package, vetted personnel, disclosed contracts, and a forfeitable bond. Babel Street's design principles demand provenance and end-to-end traceability; NATO's Next Generation Targeting keeps human decision-makers in control while compressing latency. These are instruments of **use governance**, and they sit downstream of observation, where the consequential choices are made. Observation is the commons of the [[wiki/Telemetry Civilization|telemetry civilization]]; use is where the commission lives. The citizen-privateer's professional competence is fluency in that downstream layer: knowing how a signal becomes a finding, how a finding becomes a decision, and what standard each step must meet. The posture that makes such a system work is **good faith as a matter of conduct**. Assuming the best of the systems one serves is a discipline. Washington's lesson to cultivate a circle of trust was a lesson in conduct: intelligence runs on trust, and institutions tend to perform toward the expectations of the people inside them. The participant who enters the market assuming that its purpose is protective, and who acts at every gate to make that purpose real, represents the system at its best and pulls it toward that best. Systems are built and staffed by people, and the people who take the tasks, register the sensors, hold the commissions, and write the agents decide in aggregate what the apparatus becomes. Patriots who enter it carry their character into it. That is the deepest reason this series addresses itself to them: the telemetry civilization will be operated by someone, and its conduct will reflect whoever shows up. The republic was born when ordinary people decided that what they saw belonged to a cause larger than themselves, and that carrying it faithfully to the people who could act on it was an act of citizenship. The tavern keeper, the ferryman, and the farmer of the Culper Ring practiced good faith toward a system that did not yet fully exist, and their conduct helped bring it into being. The same choice now presents itself at planetary scale and machine speed. **Telemetry is the lifeblood of every intelligence, human and machine, and the measure of a civilization is what it does with what it sees.** For the companion argument on how America's sovereign debt and technical certification regimes were left exposed to foreign jurisdiction, see [Who Needs to Leave Behind a Garrison](https://bryantmcgill.com/article-who-needs-to-leave-behind-a-garrison); for the local instance of these architectures in one American city, see [[articles/The Austin Surveillance Field|The Austin Surveillance Field]]. <div class="separator" style="clear: both;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRlp5HwgE_n0y1GmNo4KNv0vLY08zCjnQ2a-IAqlziyylnJ1hDw37MlYjPdtaaUVBczmFu29fNGBfRk-OocApN0CyWykmhUPgFCt-eyFn3ffeITo5SYCZxw4ev4ps4ST6xHEFLTxD1zNizIqraEOg77roj0Of9vO8ysz7DuNUE155HeF4cfVmc1hLgBQtq/s1536/everyday-spy.png" style="display: block; padding: 1em 0; text-align: center; "><img alt="" border="0" width="600" data-original-height="1024" data-original-width="1536" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRlp5HwgE_n0y1GmNo4KNv0vLY08zCjnQ2a-IAqlziyylnJ1hDw37MlYjPdtaaUVBczmFu29fNGBfRk-OocApN0CyWykmhUPgFCt-eyFn3ffeITo5SYCZxw4ev4ps4ST6xHEFLTxD1zNizIqraEOg77roj0Of9vO8ysz7DuNUE155HeF4cfVmc1hLgBQtq/s600/everyday-spy.png"/></a></div> **Revision note (October 2026).** This edition revises and expands the article first published on April 27, 2026, with factual corrections throughout, developments through early October 2026, a rebuilt bibliography, a new Section XIII on the OSINT pipeline as the operative seat of sovereign function, a new Section XIV on the disaggregated boards through which that pipeline hires, rebuilt closing sections on the marketplace era's figures and on-ramps that open the practical series this article was written to introduce, and a new Section XVII on telemetry, use governance, and [[wiki/Good Faith as Conduct|good faith as conduct]]. The April edition was cited and incorporated in Çağdaş İnal's [*İstihbarat Teorisi 2026: Bilişsel Harp, Yapay Zekâ, OSINT, Bayesçi Muhakeme ve Defansif Hibrit İstihbarat*][109] (EVENTICA Yayınları, June 2026), Chapter 4, where its account of the intelligence community as an assemblage of agencies, contractors, vendors, platforms, data brokers, AI systems, and open-source civilians, whose requirements exceed civil-service pipelines, forms part of the chapter's conceptual frame. That formulation originates in this article's April 27, 2026 edition, preserved as published in the [archived edition of record][108], and Section XIII engages the chapter's pipeline framework directly. --- [[about/About Bryant McGill|Bryant McGill]] is a Wall Street Journal and USA Today bestselling author, systems architect, technologist, and strategic advisor, as well as a Congressionally Recognized Ambassador of Goodwill and United Nations–appointed Global Champion. His work spans naval intelligence systems, computational linguistics, artificial intelligence, digital transformation, and civilizational governance architecture. His forward analysis on U.S.–Israel Pax Silica frameworks has appeared in Jewish/Jerusalem News Syndicate (JNS). --- ## Related wiki and collection routes [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] · [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]] · [[wiki/Civilian Spycraft|Civilian Spycraft]] **Historical and human lineage:** [[wiki/Culper Ring|Culper Ring]], [[wiki/Pinkerton Template|Pinkerton Template]], [[wiki/Private HUMINT|Private HUMINT]], [[wiki/Federated Human Provisioning|Federated Human Provisioning]]. **Operational pipeline:** [[wiki/Collection by Purchase|Collection by Purchase]], [[wiki/Entity Resolution|Entity Resolution]], [[wiki/Five-Stage OSINT Pipeline|Five-Stage OSINT Pipeline]], [[wiki/ELITE|ELITE]], [[wiki/Semantic Pivot|Semantic Pivot]], [[wiki/Commercial ISR|Commercial ISR]]. **Participation and machine intelligence:** [[wiki/Four-Board Intelligence Labor Model|Four-Board Intelligence Labor Model]], [[wiki/Agentic OSINT|Agentic OSINT]], [[wiki/Detachment 201|Detachment 201]], [[wiki/Civic Intelligence Literacy|Civic Intelligence Literacy]], [[wiki/Telemetry Civilization|Telemetry Civilization]], [[wiki/Use Governance|Use Governance]]. ## References ### Washington, the Culper Ring, and privateering - CIA, [Five Lessons in Spying, Courtesy of George Washington][1] (February 19, 2026). - Mount Vernon, [Culper Spy Ring][5]. - National Park Service, [Privateers in the American Revolution][6]. - American Battlefield Trust, [David and Goliath: Privateers vs. the Mighty British Navy][7]. - TIME, [Can Cyber Privateers Help Us Combat Cybercrime?][8] - Center for Maritime Strategy, [Reviving Letters of Marque][9]. - Congressional Research Service, [Letters of Marque and Reprisal (Part 1): Introduction and Historical Context][10] (LSB11272, 2025). ### Pinkerton and the Anti-Pinkerton Act - Wikipedia, [Pinkerton (detective agency)][11]. - Britannica, [Allan Pinkerton][12]. - Wikipedia, [Allan Pinkerton][13]. - Edwin C. Fishel, [Pinkerton and McClellan: Who Deceived Whom?][14] *Civil War History*. - Library of Congress, [Pinkerton's National Detective Agency Records: Research Guide][15]. - AFL-CIO, [1892 Homestead Strike][16]. - U.S. General Accounting Office, [Interpretations of the Anti-Pinkerton Act][17] (B-139965, 1978). - Federal Acquisition Regulation, [37.109 Services of Quasi-Military Armed Forces][18]. - Wikipedia, [Zerelda James][19]. - PBS *American Experience*, [Zerelda James][20]. - NPR, [Amazon Reportedly Has Pinkerton Agents Surveil Workers Who Try To Form Unions][21] (November 30, 2020). ### Suspicious activity reporting and InfraGard - GAO, [Information Sharing: Additional Actions Could Help Ensure That Efforts to Share Terrorism-Related Suspicious Activity Reports Are Effective][22] (GAO-13-233). - Office of Justice Programs, [Nationwide Suspicious Activity Reporting (SAR) Concept of Operations][23] (December 2008). - Congressional Research Service, [Terrorism Information Sharing and the Nationwide Suspicious Activity Report Initiative][24] (R40901). - ACLU, [Gill v. DOJ: Challenge to Government's Suspicious Activity Reporting Program][25]. - UC Law Review, [Ninth Circuit Upholds the Standard for Use of Terrorist-Related Information Among Law Enforcement Agencies][26] (2019). - KrebsOnSecurity, [FBI's Vetted Info Sharing Network 'InfraGard' Hacked][28] (December 2022). ### OSINT and the data broker substrate - ODNI, [ODNI and CIA Release the Intelligence Community OSINT Strategy for 2024–2026][29]. - ICFJ, [Fundamentals of Open-Source Intelligence for Journalists][30]. - Mordor Intelligence, [Open Source Intelligence (OSINT) Market][2]. - Global Market Insights, [Open-Source Intelligence Market][3]. - Industry Research, [OSINT Tools Market Size Forecast][31]. - EPIC, [Data Brokers][32]. - Privacy Rights Clearinghouse, [Data Brokers][33]. - Emile Ayoub and Elizabeth Goitein, Brennan Center for Justice, [Closing the Data Broker Loophole][4] (February 13, 2024). - Justin Sherman et al., Duke Sanford School, [Data Brokers and the Sale of Data on U.S. Military Personnel][34] (November 2023). - Lawfare, [Data Brokers, Military Personnel, and National Security Risks][35]. - Federal Register, [Protecting Americans From Harmful Data Broker Practices (Regulation V)][36] (proposed rule, December 13, 2024). - CFPB, [CFPB Proposes Rule to Stop Data Brokers from Selling Sensitive Personal Data to Scammers, Stalkers, and Spies][37]. - Orrick InfoBytes, [CFPB Withdraws Its Proposed Rule on Data Brokers][38] (May 16, 2025). - White & Case, [DOJ Issues Guidance on Bulk Sensitive Data Rules][39] (April 2025). - The Intercept, [U.S. Spy Agencies Are Getting a One-Stop Shop to Buy Your Most Sensitive Personal Data][40] (May 22, 2025). - ExecutiveGov, [ODNI Wants to Enhance IC's Commercial, Public Data Access][41] (2026). - OPB/NPR, [A Key U.S. Spy Tool Has Lapsed — Now What?][42] (June 13, 2026). - EPIC, [FISA Section 702 Almost Certain to Expire After House Votes Against Extension][43] (June 11, 2026). - Straight Arrow News, [Jay Clayton Confirmed Despite Pulte's Push to Stay On as Intelligence Chief][44] (July 2026). - 404 Media, [ICE to Pay LexisNexis Millions for Data to Feed to Palantir][45] (August 10, 2026). - LawNext, [The Legal Tech Giants Powering ICE, Part 1: How Thomson Reuters and LexisNexis Helped Support America's Immigration Surveillance Machine][46] (April 2026). ### Palantir, ICE, and the contractor state - American Immigration Council, [ICE to Use ImmigrationOS by Palantir][47]. - Axios, [ICE Pays Palantir $30M to Build New Tool to Track and Deport Immigrants][48] (May 1, 2025). - Sophie Feng and Jay Stanley, ACLU, [All the Ways Palantir Is Assisting Trump's Abusive Removal Campaign][49] (March 24, 2026). - 404 Media, [ELITE: The Palantir App ICE Uses to Find Neighborhoods to Raid][50] (January 2026). - Fortune, [Palantir/ICE Connections Draw Fire as Questions Raised About Tool Tracking Medicaid Data][51] (January 26, 2026). - Fortune, [New Contract Shows Palantir Is Working on a Tech Platform for Another Federal Agency That Works with ICE][52] (December 9, 2025). - WCAX, [Vermont ICE Facility Could Aid Social Media Surveillance Efforts][54] (October 8, 2025; reporting WIRED's October 2025 investigation). - GAO, [Civilian Intelligence Community: Additional Actions Needed to Improve Reporting on and Planning for the Use of Contract Personnel][55] (GAO-14-204). - Congressional Research Service, [The Intelligence Community and Its Use of Contractors][56] (R44157). ### Private intelligence firms - Wikipedia, [Black Cube][57]. - Ronan Farrow, *The New Yorker*, [Harvey Weinstein's Army of Spies][58] (2017). - Barry Meier, [*Spooked: The Trump Dossier, Black Cube, and the Rise of Private Spies*][59] (2021). - KCS Group, [Hybrid Warfare II: The Forgotten Social Engineers][60]. - Ynet News, [Israeli Intelligence Agency Casts a Net for Whalers][61] (November 2024). - Evolution AB via Cision, [Playtech Unmasked as Black Cube Client Behind Defamatory Smear Campaign Targeting Evolution AB][62] (October 21, 2025). - Casino.org, [Evolution Says Israeli Intel Firm That Spied for Weinstein 'Faked' Iran Quote][63]. - Euronews, [Slovenia's Liberal Government Faces Tight Race as Conservative Opposition Surges][64] (March 18, 2026). - Al-Monitor/Reuters, [Slovenians Vote in Tight Race Between Liberals and Populist Right][65] (March 21, 2026). ### Mercenary spyware - Citizen Lab, [Spyware Litigation Tracker: Legal Challenges and Formal Complaints Related to Mercenary Spyware][66]. - Amnesty International Security Lab, [Intellexa Leaks: Predator Spyware Operations Exposed][67] (December 2025). - TechCrunch, [ICE Reactivates Contract with Spyware Maker Paragon][68] (September 2, 2025). - SecurityWeek, [NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million][69] (October 2025). - Reuters via Yahoo News, [Trump Administration Removes Three Spyware-Linked Executives from Sanctions List][70] (December 30, 2025). - Office of Senator Michael Bennet, [Bennet, Warren, Colleagues Press Treasury and State to Explain Lifting of Sanctions on Three Enablers of Commercial Spyware][71] (February 18, 2026). - ICRC, [International Humanitarian Law and the Growing Involvement of Civilians in Cyber Operations and Other Digital Activities][72]. ### Letters of marque and private offensive cyber operations - Office of Rep. David Schweikert, [Schweikert Introduces Cybercrime Marque and Reprisal Authorization Act to Combat Foreign Scam Syndicates][73] (August 20, 2025). - The Register, [Bill Would Give Hackers Letters of Marque Against US Enemies][74] (August 21, 2025). - Office of Senator Mike Lee, [Patriots of the Caribbean: Lee Bill Authorizes American Privateers to Seize Cartel Assets][75] (December 2025). - KSL, [Mike Lee Wants American Privateers to Seize Drug Cartel Property on the High Seas][76]. - Marginal Revolution, [Bring Back the Privateers!][77] (December 2025). - Office of Senator Mike Lee, [Lee Bill Authorizes American Hackers to Fight Foreign Cyberattacks][78] (July 15, 2026). - GovInfo, [H.R. 9697: Cyber Letters of Marque and Reprisal Act][79] (119th Congress). - Recorded Future News, [White House Pours Cold Water on Cyber 'Letters of Marque' Speculation][80] (March 2026). - WilmerHale, [Trump Administration Signals Greater Private Role in Offensive Cyber Operations][81] (March 9, 2026). - The White House, [Fact Sheet: President Donald J. Trump Expands Capabilities to Combat Transnational Cyber-Enabled Crime][82] (August 2026). - Mayer Brown, [Presidential Memorandum Authorizes Vetted Private Companies to Conduct Offensive Cyber Operations Against Foreign Criminal Organizations][83] (August 2026). - Gizmodo, [Trump Admin Lets the Cyber Pirates Loose][84] (August 13, 2026). - Aspen Digital, [Old Tools, New Problems][85]. ### The OSINT pipeline: theory, institutional design, and international demonstrations - Çağdaş İnal, [*İstihbarat Teorisi 2026: Bilişsel Harp, Yapay Zekâ, OSINT, Bayesçi Muhakeme ve Defansif Hibrit İstihbarat*][109], Chapter 4, "OSINT, Veri Mühendisliği Boru Hatları ve LLM Ajanları" (EVENTICA Yayınları, June 2026; Internet Archive). - Peter Dohr, CSIS Strategic Technologies Blog, [Responding to OSINT: U.S. Strategy and the Democratization of Intelligence][96] (April 23, 2026). - Sho Nakatani, [RapidPen: Fully Automated IP-to-Shell Penetration Testing with LLM-based Agents][97] (arXiv 2502.16730, 2025; rev. 2026). - NATO Allied Command Transformation, [Next Generation Targeting Helps NATO Move Faster from Information to Decision][98] (May 12, 2026). - David Gauthier, George Mason University National Security Institute, [A Standalone OSINT Agency for Stronger National Security][99] (January 2025). - Lauren Armbruster, Catherine O'Saben, and Nicholas Tran, MITRE, [Scaling the Use of Publicly Available Information Across the U.S. Government][100] (April 2025). ### Texas: federated human provisioning - CNN, [Guarding the U.S.-Mexico Border, Live from Suburban New York][101] (March 12, 2009; on the Texas Virtual Border Watch). - Texas Department of Public Safety, [Texas Suspicious Activity Reporting Network (TxSARNet)][102]. - Office of the Governor of Texas, [Governor Abbott Directs DPS, TEA, THECB to Expand and Accelerate Implementation of iWatch Texas Program][103]. - Tianjiao Yu, Sukrit Venkatagiri, Ismini Lourentzou, and Kurt Luther, [Sedition Hunters: A Quantitative Study of the Crowdsourced Investigation into the 2021 U.S. Capitol Attack][104] (ACM Web Conference, 2023). - Texas Policy Research, [Senate Bill 8 and 287(g) Agreements: Where Texas Stands Today][105] (February 2026). - Baptist News Global, [ICE Rapidly Expanding Its Partnerships with State Law Enforcement][106] (2026). - Project Saltbox, [ICE Awards GardaWorld Up to $382 Million][107] (2026). ### The boards: task, sensor, and legacy labor markets - The Intercept, [Google Hired Gig Economy Workers to Improve Artificial Intelligence in Controversial Drone-Targeting Project][110] (February 4, 2019). - Gizmodo, [California App Maker Turns Overseas Gig Workers Into Intelligence-Gathering Military Assets][111] (June 25, 2021; reporting The Wall Street Journal). - Jack Poulson, [Premise Data Confirms Secret Military and Intelligence Contracts in Court Filing][112] (2023). - ExecutiveGov, [DIU Taps Scale AI for Thunderforge Program to Accelerate DOD-Wide AI Use][113] (March 6, 2025). - Hays Free Press, [Kyle Police Department Launches Real-Time Crime Center][114] (November 13, 2024). - The Register, [Ring Kills Flock Partnership Amid Surveillance Scrutiny][115] (February 13, 2026). - American Immigration Council, [ICE's Private Bounty Hunters Use AI to Track Immigrants][116] (2026). - Scripps News, [Small Companies Score Big Contracts to Search for Undocumented Immigrants][117] (2026). ### The marketplace era: Anduril, commissioned technologists, and the enforcement hiring surge - Julie Bort, TechCrunch, [Anduril Raises $5B, Doubles Valuation to $61B][118] (May 13, 2026). - Nextgov, [CBP Taps Anduril for Virtual Border Sentinel System][119] (July 2, 2020). - Congressional Research Service, [Army's Integrated Visual Augmentation System (IVAS)/Soldier Borne Mission Command (SBMC)][120] (IF13022, updated July 20, 2026). - Wikipedia, [Palmer Luckey][121]. - Wikipedia, [Detachment 201][122]. - Patty Nieberg, Task & Purpose, [Army Commissions 3 More Tech Executives as Navy Plans to Follow Suit][123] (June 16, 2026). - KBTX, [ICE Hires More Than 12,000 Officers in Nationwide Recruitment Surge][124] (January 5, 2026). - NBC Montana, [ICE Drops Age Limits to Attract 10,000 New Officers amid Recruitment Surge][125] (August 6, 2025). - Bill Toulas, BleepingComputer, [US Defense Dept Received 50,000 Vulnerability Reports Since 2016][126] (March 19, 2024). - Orange County Business Journal, [Anduril's Valuation Could Jump to $60B with Josh Kushner Money][127] (March 2026). ### Agentic OSINT and the sensor market - GeoSeer, [The AI Agent Era of OSINT: 5 Emerging Tools Redefining Intelligence Gathering in 2026][86] (March 23, 2026; vendor-authored). - GitHub, [MiroFish: A Simple and Universal Swarm Intelligence Engine][87]. - Infoblox Data Science, [Blue Helix: Agentic OSINT Researcher][88] (June 3, 2025). - Babel Street, [Three Guiding Principles for the Development of OSINT Agentic Systems][89]. - Blackdot Solutions, [It Starts with Automation: Understanding Agentic AI's Role in OSINT][90]. - OWASP, [SocialOSINTAgent][91]. - Prophet Security, [What RSA 2026 Confirmed: The Agentic SOC Is Here][92] (March 30, 2026). - Accenture, [Accenture and Anthropic Team to Help Organizations Secure, Scale AI-Driven Cybersecurity Operations][93] (March 25, 2026). - Federal News Network, [OSINT Is Transforming the Intelligence Battlespace][94] (April 2026). - U.S. Senate Committee on the Judiciary, Subcommittee on Crime and Counterterrorism, [Always Watching: Flock's Nationwide AI Surveillance Network][95] (hearing, September 23, 2026). [1]: https://www.cia.gov/stories/story/5-lessons-in-spying-courtesy-of-george-washington/ [2]: https://www.mordorintelligence.com/industry-reports/open-source-intelligence-market [3]: https://www.gminsights.com/industry-analysis/open-source-intelligence-osint-market [4]: https://www.brennancenter.org/our-work/research-reports/closing-data-broker-loophole [5]: https://www.mountvernon.org/library/digitalhistory/digital-encyclopedia/article/culper-spy-ring [6]: https://www.nps.gov/articles/privateers-in-the-american-revolution.htm [7]: https://www.battlefields.org/learn/articles/head-tilting-history/david-and-goliath-privateers-vs-mighty-british-navy [8]: https://time.com/7317012/can-cyber-privateers-combat-cybercrime/ [9]: https://centerformaritimestrategy.org/publications/reviving-letters-of-marque/ [10]: https://www.everycrsreport.com/reports/LSB11272.html [11]: https://en.wikipedia.org/wiki/Pinkerton_(detective_agency) [12]: https://www.britannica.com/biography/Allan-Pinkerton [13]: https://en.wikipedia.org/wiki/Allan_Pinkerton [14]: https://muse.jhu.edu/article/420411/summary [15]: https://guides.loc.gov/pinkerton-papers [16]: https://aflcio.org/about/history/labor-history-events/1892-homestead-strike [17]: https://www.gao.gov/products/b-139965-1 [18]: https://www.acquisition.gov/far/37.109 [19]: https://en.wikipedia.org/wiki/Zerelda_James [20]: https://www.pbs.org/wgbh/americanexperience/features/james-zerelda/ [21]: https://www.npr.org/2020/11/30/940196997/amazon-reportedly-has-pinkerton-agents-surveil-workers-who-try-to-form-unions [22]: https://www.gao.gov/assets/gao-13-233.pdf [23]: https://www.ojp.gov/library/publications/nationwide-suspicious-activity-reporting-sar-concept-operations [24]: https://www.everycrsreport.com/reports/R40901.html [25]: https://www.aclu.org/cases/gill-v-doj-challenge-governments-suspicious-activity-reporting-program [26]: https://uclawreview.org/2019/02/12/ninth-circuit-upholds-the-standard-for-use-of-terrorist-related-information-among-law-enforcement-agencies/ [28]: https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/ [29]: https://www.dni.gov/index.php/newsroom/press-releases/press-releases-2024/3784-odni-and-cia-release-the-intelligence-community-osint-strategy-for-2024-2026 [30]: https://www.icfj.org/news/fundamentals-open-source-intelligence-journalists [31]: https://www.industryresearch.biz/market-reports/open-source-intelligence-osint-tools-market-113287 [32]: https://epic.org/issues/consumer-privacy/data-brokers/ [33]: https://privacyrights.org/data-brokers [34]: https://techpolicy.sanford.duke.edu/data-brokers-and-the-sale-of-data-on-us-military-personnel/ [35]: https://www.lawfaremedia.org/article/data-brokers-military-personnel-and-national-security-risks [36]: https://www.federalregister.gov/documents/2024/12/13/2024-28690/protecting-americans-from-harmful-data-broker-practices-regulation-v [37]: https://www.consumerfinance.gov/about-us/newsroom/cfpb-proposes-rule-to-stop-data-brokers-from-selling-sensitive-personal-data-to-scammers-stalkers-and-spies/ [38]: https://infobytes.orrick.com/2025-05-16/cfpb-withdraws-its-proposed-rule-on-data-brokers/ [39]: https://www.whitecase.com/insight-alert/doj-issues-guidance-bulk-sensitive-data-rules [40]: https://theintercept.com/2025/05/22/intel-agencies-buying-data-portal-privacy/ [41]: https://www.executivegov.com/articles/odni-wants-to-enhance-ics-commercial-public-data-access [42]: https://www.opb.org/article/2026/06/13/fisa-702-a-key-u-s-spy-tool-has-lapsed-now-what [43]: https://epic.org/fisa-section-702-almost-certain-to-expire-after-house-votes-against-extension-epic-continues-to-urge-reforms/ [44]: https://san.com/cc/jay-clayton-confirmed-despite-pultes-push-to-stay-on-as-intelligence-chief/ [45]: https://www.404media.co/ice-to-pay-lexisnexis-millions-for-data-to-feed-to-palantir/ [46]: https://www.lawnext.com/2026/04/the-legal-tech-giants-powering-ice-part-1-how-thomson-reuters-and-lexisnexis-helped-support-americas-immigration-surveillance-machine.html [47]: https://www.americanimmigrationcouncil.org/blog/ice-immigrationos-palantir-ai-track-immigrants/ [48]: https://www.axios.com/local/denver/2025/05/01/palantir-deportations-ice-immigration-trump [49]: https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup [50]: https://www.404media.co/elite-the-palantir-app-ice-uses-to-find-neighborhoods-to-raid/ [51]: https://fortune.com/2026/01/26/ice-allegedly-uses-palantir-tool-tracking-medicaid-data/ [52]: https://fortune.com/2025/12/09/palantir-new-contract-uscis-ice/ [54]: https://www.wcax.com/2025/10/08/vt-ice-facility-could-aid-social-media-surveillance-efforts/ [55]: https://www.gao.gov/assets/gao-14-204.pdf [56]: https://www.everycrsreport.com/reports/R44157.html [57]: https://en.wikipedia.org/wiki/Black_Cube [58]: https://www.newyorker.com/news/news-desk/harvey-weinsteins-army-of-spies [59]: https://www.amazon.com/Spooked-Trump-Dossier-Black-Private/dp/0062950681 [60]: https://kcsgroup.com/hybrid-warfare-ii-the-forgotten-social-engineers/ [61]: https://www.ynetnews.com/article/bymrqb5xyx [62]: https://news.cision.com/evolution/r/playtech-unmasked-as-black-cube-client-behind-defamatory-smear-campaign-targeting-evolution-ab,c4253906 [63]: https://www.casino.org/news/evolution-says-israeli-intel-firm-that-spied-for-weinstein-faked-iran-quote/ [64]: https://www.euronews.com/2026/03/18/slovenias-liberal-government-faces-tight-race-as-conservative-opposition-surges [65]: https://www.al-monitor.com/originals/2026/03/slovenians-vote-tight-race-between-liberals-and-populist-right [66]: https://citizenlab.ca/spyware-litigation-tracker-legal-challenges-and-formal-complaints-related-to-mercenary-spyware/ [67]: https://securitylab.amnesty.org/latest/2025/12/intellexa-leaks-predator-spyware-operations-exposed/ [68]: https://techcrunch.com/2025/09/02/ice-reactivates-contract-with-spyware-maker-paragon/ [69]: https://www.securityweek.com/nso-ordered-to-stop-hacking-whatsapp-but-damages-cut-to-4-million/ [70]: https://www.yahoo.com/news/articles/trump-administration-removes-three-spyware-233510700.html [71]: https://www.bennet.senate.gov/2026/02/18/bennet-warren-colleagues-press-treasury-and-state-to-explain-lifting-of-sanctions-on-three-enablers-of-commercial-spyware-used-against-americans-journalists-and-dissidents/ [72]: https://www.icrc.org/en/publication/ihl-and-growing-involvement-civilians-cyber-operations-and-other-digital-activities [73]: https://schweikert.house.gov/2025/08/20/schweikert-introduces-cybercrime-marque-and-reprisal-authorization-act-to-combat-foreign-scam-syndicates/ [74]: https://www.theregister.com/2025/08/21/congressman_proposes_bringing_back_letters/ [75]: https://www.lee.senate.gov/2025/12/patriots-of-the-caribbean-lee-bill-authorizes-american-privateers-to-seize-cartel-assets-with-president-s-approval [76]: https://www.ksl.com/article/51421299/mike-lee-wants-american-privateers-to-seize-drug-cartel-property-on-the-high-seas [77]: https://marginalrevolution.com/marginalrevolution/2025/12/bring-back-the-privateers.html [78]: https://www.lee.senate.gov/2026/7/lee-bill-authorizes-american-hackers-to-fight-foreign-cyber-attacks [79]: https://www.govinfo.gov/content/pkg/BILLS-119hr9697ih/xhtml/BILLS-119hr9697ih.html [80]: https://therecord.media/offensive-cyber-white-house-hacking [81]: https://www.wilmerhale.com/en/insights/client-alerts/20260309-trump-administration-signals-greater-private-role-in-offensive-cyber-operations [82]: https://www.whitehouse.gov/fact-sheets/2026/08/fact-sheet-president-donald-j-trump-expands-capabilities-to-combat-transnational-cyber-enabled-crime/ [83]: https://www.mayerbrown.com/ja/insights/publications/2026/08/presidential-memorandum-authorizes-vetted-private-companies-to-conduct-offensive-cyber-operations-against-foreign-criminal-organizations [84]: https://gizmodo.com/trump-admin-lets-loose-the-cyber-pirates-2000798523 [85]: https://www.aspendigital.org/blog/cyber-retaliation/ [86]: https://geoseeer.com/blog/emerging-osint-tools-ai-agent-era [87]: https://github.com/666ghj/MiroFish [88]: https://www.infoblox.com/blog/security/blue-helix-agentic-osint-researcher/ [89]: https://www.babelstreet.com/blog/designing-trustworthy-ai-for-osint [90]: https://blackdotsolutions.com/blog/osint-ai-it-starts-with-automation [91]: https://owasp.org/www-project-social-osint-agent/ [92]: https://www.prophetsecurity.ai/blog/what-rsa-2026-confirmed-the-agentic-soc-is-here [93]: https://newsroom.accenture.com/news/2026/accenture-and-anthropic-team-to-help-organizations-secure-scale-ai-driven-cybersecurity-operations [94]: https://federalnewsnetwork.com/commentary/2026/04/osint-is-transforming-the-intelligence-battlespace/ [95]: https://www.judiciary.senate.gov/committee-activity/hearings/always-watching-flocks-nationwide-ai-surveillance-network [96]: https://www.csis.org/blogs/strategic-technologies-blog/responding-osint-us-strategy-and-democratization-intelligence [97]: https://arxiv.org/abs/2502.16730 [98]: https://www.act.nato.int/article/next-gen-targeting/ [99]: https://nationalsecurity.gmu.edu/wp-content/uploads/2025/01/A-Standalone-OSINT-Agency-for-Stronger-National-Security-FINAL-WEB.pdf [100]: https://www.mitre.org/sites/default/files/2025-04/PR-25-1065-Scaling-the-Use-of-Publicly-Available-Information-Across-the-US-Government.pdf [101]: https://us.cnn.com/2009/TECH/03/12/border.security.cameras.immigration/index.html [102]: https://www.dps.texas.gov/section/intelligence-counterterrorism/texas-suspicious-activity-reporting-network-txsarnet [103]: https://gov.texas.gov/news/post/governor-abbott-directs-dps-tea-thecb-to-expand-and-accelerate-implementation-of-iwatch-texas-program-to-report-suspicious-activity [104]: https://arxiv.org/abs/2302.10964 [105]: https://www.texaspolicyresearch.com/senate-bill-8-and-287g-agreements-where-texas-stands-today/ [106]: https://baptistnews.com/article/ice-rapidly-expanding-its-partnerships-with-state-law-enforcement/ [107]: https://www.projectsaltbox.com/p/ice-awards-gardaworld-up-to-382-million [108]: https://web.archive.org/web/20260927211031/https://bryantmcgill.blogspot.com/2026/04/civilian-spycraft.html [109]: https://archive.org/download/istihbarat-teorisi-2026-17.06.2026/Istihbarat_Teorisi_2026%2017.06.2026.pdf [110]: https://theintercept.com/2019/02/04/google-ai-project-maven-figure-eight/ [111]: https://gizmodo.com/california-app-maker-turns-overseas-gig-workers-into-in-1847174853 [112]: https://jackpoulson.substack.com/p/premise-data-confirms-secret-military [113]: https://www.executivegov.com/articles/scale-ai-diu-thunderforge-contract [114]: https://www.haysfreepress.com/article/24655,kyle-police-department-launches-real-time-crime-center [115]: https://www.theregister.com/2026/02/13/ring_flock_partnership/ [116]: https://www.americanimmigrationcouncil.org/blog/ice-bounty-hunters-use-ai-track-immigrants/ [117]: https://www.wcpo.com/investigations/ice-inc/small-companies-score-big-contracts-to-search-for-undocumented-immigrants [118]: https://techcrunch.com/2026/05/13/anduril-raises-5b-doubles-valuation-to-61b/ [119]: https://www.nextgov.com/acquisition/2020/07/cbp-taps-anduril-for-virtual-border-sentinel-system/257835/ [120]: https://www.everycrsreport.com/files/2026-07-20_IF13022_06226ecfaadb2bc19b6b6fd748e6d6d76f511305.html [121]: https://en.wikipedia.org/wiki/Palmer_Luckey [122]: https://en.wikipedia.org/wiki/Detachment_201 [123]: https://taskandpurpose.com/news/army-navy-private-sector-officers/ [124]: https://www.kbtx.com/2026/01/05/ice-hires-more-than-12000-officers-nationwide-recruitment-surge/ [125]: https://nbcmontana.com/news/nation-world/ice-drops-age-limits-to-attract-10000-new-officers-amid-recruitment-surge [126]: https://www.bleepingcomputer.com/news/security/us-defense-dept-received-50-000-vulnerability-reports-since-2016/ [127]: https://www.ocbj.com/technology/andurils-valuation-could-jump-to-60b-with-josh-kushner-money/