# Scanned_20260730-1830 ## Archival Note This reconstruction treats **all 19 PDF pages as primary evidence**, including torn notebook paper, lined sheets, green sticky notes, repeated leaves, crossed-out words, arrows, circles, boxes, marginal symbols, uncertain abbreviations, and the final contact fragment. The PDF is image-only; every page was inspected from its rendered scan rather than inferred from OCR. Transcriptions preserve visible spelling, capitalization, abbreviations, lineation, and mistakes. Ambiguous readings are marked `[uncertain: …]`; illegible material is marked `[illegible]`. The personal telephone number on page 19 is redacted as required by the NOTEBOOKS privacy protocol and was not used, searched, or tested. > **Provenance correction added August 1, 2026:** Bryant McGill identifies much of this notebook as notes taken during [[Event - Lake Oswego Explanatory Briefing|an in-person REDACTED in Lake Oswego]]. An unidentified REDACTED attempted to explain what they believed Bryant had been caught up in and brought a large printed report packet, possibly the Durham report or a packet built around it. The terminology, ordering, and causal framework recorded here must therefore not be attributed solely to Bryant or treated automatically as his endorsement. See [[Addendum - Provenance of Scanned_20260730-1830]] and [[Journal - Remembering the Lake Oswego Briefing]]. The faithful transcriptions below remain unchanged. ## Notebook-Level Orientation `Scanned_20260730-1830` is a compact, substantially **REDACTED-derived intelligence-and-surveillance architecture notebook** assembled during an unusually concentrated May 2023 window. The first page begins with [[Crossfire Hurricane]], [[Robert Mueller]], [[John Durham]], Russia, Ukraine, and Donald Trump. Pages 2–4 then widen into [[ECHELON]], the [[Five Eyes]], [[Signals Intelligence|SIGINT]], [[PRISM Surveillance Program|PRISM]], [[Room 641A]], the [[Special Collection Service]], and [[STELLARWIND]]. Pages 5–18 narrow into the legal control plane: the [[USA FREEDOM Act]], [[Amicus Curiae|amicus curiae]], [[Foreign Intelligence Surveillance Act|FISA]], the [[Foreign Intelligence Surveillance Court|FISC]], pen-register and trap-and-trace authority, call-detail records, ex parte procedure, and [[FISA Section 702|Section 702]]. This sequence reflects material presented by the Lake Oswego REDACTED and report packet, Bryant's contemporaneous note-taking and questions, and possibly some simultaneous or later synthesis; the contribution of each source cannot yet be separated line by line. The notebook is not a finished argument and should not be read as one. It is a **rapid field record of an explanatory encounter**, with ontology-building occurring through the interaction among a REDACTED, a large printed report packet, Bryant's questions, and his handwritten capture. Terms appear before their legal relationships are fully separated because the REDACTED moved across political investigations, collection programs, judicial institutions, alliance structures, and media disclosures. The resulting architecture remains analytically coherent, but it is an [[Externally Supplied Explanation|externally supplied explanation]] in substantial part—not evidence that Bryant independently originated or accepted every connection. The strongest date anchor is page 9, repeated on page 16, which says `"5-20-23"` and refers to a newly revealed FISC matter. On May 19, 2023, the Office of the Director of National Intelligence and Department of Justice released an April 2022 FISC opinion describing extensive FBI noncompliant querying of Section 702-acquired information.[^fisc-release] Page 7 separately circles `"May 19 2023"`. Page 1 also names Durham; Attorney General Merrick Garland transmitted Durham's final report publicly on May 15, 2023.[^durham-letter] The notebook was therefore most likely assembled during **May 15–20, 2023**, with older historical dates drawn from the supplied material. Those anchors probably place the Lake Oswego REDACTED during or near the same interval, but they do not yet prove its exact date. --- ## Scanned_20260730-1830.pdf — PDF page 1 ### Visible Page A torn, yellowed sheet of wide-ruled paper, photographed in landscape orientation. Black handwriting covers nearly the entire page. `cross fire Hurricane` is written large and underlined across the upper right, while a smaller `crossfire` appears at upper left. The upper half contains definitions and a large irregular box with a gender-like symbol and several uncertain phrases. A long horizontal divider separates the lower half, where Mueller, Durham, Trump, Russia, and Ukraine are joined by slashing lines, an arrow, a circled `Ukraine`, and multiple overwritten words. The bottom edge is physically torn away. ### Faithful Transcription > "crossfire" > > "cross fire Hurricane" > > "Hurricane Investigation," > > "Code name for" > > "Counter Investigation" > > "by fbi: int tru." > > "[uncertain boxed cluster: LBQT +]" > > "[uncertain symbol]" > > "[uncertain: Global Guv]" > > "[uncertain: rs Commission]" > > "Muller investigated into russian" > > "interference. (Against Trump)" > > "[uncertain: Durham Hary] + Muller v Ukraine" > > "trump russia good" > > "Russia" > > "muller + on russia Ukraine" > > "Ukraine" > > "Durham" > > "Ukraine" ### Entities and References [[Crossfire Hurricane]], [[Federal Bureau of Investigation|FBI]], counterintelligence, [[Robert Mueller]], [[Mueller Special Counsel Investigation]], [[John Durham]], [[Durham Special Counsel Investigation]], Donald Trump, Russia, Ukraine, Russian interference in the 2016 United States election, FISA, political investigations, institutional legitimacy. ### Reconstruction and Context The page begins by trying to decode the term `Crossfire Hurricane` itself. Crossfire Hurricane was the FBI counterintelligence investigation opened in July 2016 concerning whether individuals associated with the Trump campaign were coordinating, knowingly or unknowingly, with Russian election-interference activity. The Department of Justice Inspector General later found that the investigation had sufficient predication to be opened under then-applicable FBI rules, while also identifying serious failures, omissions, and inaccuracies in the Carter Page FISA applications.[^crossfire-oig] Those two findings are frequently collapsed into mutually exclusive political narratives; the page appears to be working inside that collision. The sequence `Muller investigated into russian interference. (Against Trump)` identifies Mueller as the next institutional layer. Mueller's appointment directed him to investigate Russian interference and links or coordination involving the Trump campaign. His report documented extensive Russian interference efforts and stated that the investigation did not establish that members of the Trump campaign conspired or coordinated with the Russian government in those interference activities.[^mueller-report] The wording `Against Trump` is the notebook's framing, not the formal scope of the appointment. Within the framework being presented, Durham represents the investigation of the investigation. Appointed special counsel in October 2020, he examined intelligence, counterintelligence, and law-enforcement activity directed at the 2016 presidential campaigns and submitted his report in May 2023.[^durham-report] The page's repeated Russia/Ukraine juxtapositions do not establish a specific Ukraine theory or Bryant's endorsement of one. They record an attempt—by the REDACTED, the supplied material, Bryant, or some combination—to distinguish or relate Russian election interference, the Trump-Russia investigation, and Ukraine-associated political narratives. The arrows and crossed words indicate unresolved sorting rather than a settled accusation. The upper-right boxed cluster is too indistinct to normalize responsibly. `Global Guv` may mean `global government`; `rs Commission` may be a commission name or merely an unfinished phrase. The nearby symbol resembles a gender or person glyph, but adjacency alone does not establish that it refers to LGBTQ issues or any particular organization. ### What the Page Appears to Be Doing **Visible evidence:** a chain from Crossfire Hurricane to Mueller to Durham, surrounded by Russia, Trump, and Ukraine. **Verified fact:** these were sequentially related federal investigative layers, but they had different mandates, evidentiary records, and conclusions. **Strong inference:** the page records a REDACTED-driven attempt to determine whether the same intelligence machinery that investigates foreign influence can itself become an object of political or legal investigation. **Owner-supplied context:** the explanatory sequence was substantially introduced during the Lake Oswego REDACTED and should not be attributed solely to Bryant. **Unresolved:** the boxed upper-right cluster and the exact intended Ukraine relationship. ### Cross-Notebook Connections The page anticipates the institutional diagrams in [[Scanned_20260730-1845|Scanned_20260730-1845]], page 3, where corporations, the Federal Reserve, social values, China, and OpenAI are drawn as nested governance systems. It also connects to [[Scanned_20260730-1913|Scanned_20260730-1913]], whose later synthesis expands from personal control planes into Five Eyes, influence systems, and hidden institutional networks. Unlike the device-level surveillance work in [[Scanned_20260730-1806|Scanned_20260730-1806]], pages 14–27, this page begins at the **state counterintelligence layer**. ### Missed Signals and Open Leads The most important missing distinction is between the opening of Crossfire Hurricane, the Carter Page FISA applications, Mueller's criminal/counterintelligence work, and Durham's review of antecedent conduct. They overlap historically but are not one continuous evidentiary proposition. The boxed abbreviations should remain unresolved until another notebook or contemporaneous source clarifies them. The repeated `Ukraine` may connect to a specific May 2023 article, broadcast, or social-media thread that has not yet been recovered. --- ## Scanned_20260730-1830.pdf — PDF page 2 ### Visible Page A full ruled sheet written mostly in dark blue ink, with a few black additions. Large brackets, circles, a triangular warning-like mark, and a long curved arrow organize the page. The upper section defines ECHELON and circles `"5 eyes"`. The middle names Onyx and Frenchelon. The lower half defines the Five Eyes/UKUSA relationship, gives the abbreviation `FVEY`, assigns regional monitoring roles to Australia and New Zealand, and begins a `9 eyes` expansion. ### Faithful Transcription > "Echelon - operated by the ‘5 eyes’ aka F5" > > "AUS; CANADA; NZ; UK; USA" > > "Estab= 1971 = END of 20th ‘greatly expanded’" > > "(NSA → USA)" > > "includes the signals intelligence agencies of" > > "each memberstate" > > "Onyx = swiss Echelon" > > "Frenchelon = operation in France" > > "5 eyes = UKUSA Agreement: Lustre" > > "agreement for cooperation in" > > "signals intelligence" > > "Abbreviated as FVEY" > > "AUS monitors South & East Asia" > > "NZ → western Pacific" > > "9 eyes = adds Denmark France" > > "Netherlands" > > "& Norway" ### Entities and References [[ECHELON]], [[Five Eyes|Five Eyes / FVEY]], [[UKUSA Agreement]], [[National Security Agency|NSA]], [[Government Communications Headquarters|GCHQ]], Australia, Canada, New Zealand, United Kingdom, United States, [[Australian Signals Directorate]], [[Communications Security Establishment Canada]], [[Government Communications Security Bureau]], [[Onyx Intelligence System|Onyx]], [[Frenchelon]], [[Nine Eyes]], Denmark, France, Netherlands, Norway, regional collection responsibilities. ### Reconstruction and Context The page correctly recognizes that ECHELON belongs in the historical orbit of the Five Eyes signals-intelligence partnership, but it compresses several distinct layers. The UK–U.S. communications-intelligence agreement was formalized on March 5, 1946—not 1971. Canada joined in 1949; Australia and New Zealand joined in 1956, producing the five-partner structure later publicly called the Five Eyes.[^ukusa-nsa][^ukusa-gchq] The year 1971 is nevertheless meaningful in the notebook's research field: a 1971 Department of Defense directive formalized NSA's SIGINT responsibilities and defined SIGINT as including COMINT, ELINT, and telemetry intelligence.[^dod-sigint] The page may have attached that date to ECHELON rather than to the U.S. doctrinal definition it was reading. ECHELON is best treated as a **distributed interception and processing architecture associated with the UKUSA partners**, not simply another name for the alliance. A European Parliament investigation in 2001 concluded that a global interception system existed and examined its implications for private and commercial communications, while also warning against treating every allegation under the ECHELON label as equally proved.[^echelon-eu] The page's phrase `includes the signals intelligence agencies of each memberstate` captures the federation logic: national agencies retain separate legal identities while sharing collection responsibilities, selectors, analysis, and reporting under alliance arrangements. `Onyx = swiss Echelon` is a useful analogy but not an identity. Onyx was Switzerland's satellite-communications interception system, subject to Swiss oversight and publicly examined by parliamentary bodies; Swiss authorities did not define it as a branch of ECHELON.[^onyx-swiss] `Frenchelon` is likewise a public or journalistic label for French interception capabilities rather than a securely documented official program name. The page is building a comparative taxonomy of **national analogues to global SIGINT collection**, but the analogies should not be converted into organizational affiliations. The `Nine Eyes` label commonly adds Denmark, France, the Netherlands, and Norway to the Five Eyes in public intelligence taxonomies. Such labels are less juridically precise than the UKUSA/Five Eyes core. They describe recurrent cooperation circles rather than one universally published treaty structure. Page 3 begins `14 eyes = adds` but never completes the additional countries. ### What the Page Appears to Be Doing The page is moving from a named system (`ECHELON`) to the alliance beneath it (`FVEY`), then outward to national analogues (`Onyx`, `Frenchelon`) and wider sharing circles (`Nine Eyes`). This is not a dictionary exercise; it is an attempt to reveal the **topology of distributed sovereignty**. A signal may be collected under one nation's geography, processed under another nation's capability, and circulated through an alliance whose operational boundary is wider than any single domestic statute. ### Cross-Notebook Connections The nested-power mapping directly parallels [[Scanned_20260730-1845|Scanned_20260730-1845]], page 3. It also extends the transnational intelligence thread summarized in [[Scanned_20260730-1913|Scanned_20260730-1913]]. At a smaller scale, [[Scanned_20260730-1235|Scanned_20260730-1235]], pages 5–9, compares enterprise mobile management, vulnerability management, and commercial surveillance tools—another instance where the same technical primitives move across institutional boundaries. ### Missed Signals and Open Leads The notebook did not yet separate **alliance**, **collection program**, **site**, **sharing agreement**, and **popular umbrella label**. `aka F5` may be the writer's own shorthand rather than an established abbreviation. `Lustre` is probably a misheard or miscopied word; the canonical agreement is UKUSA. The exact sources behind the regional assignments to Australia and New Zealand should be recovered, because division of labor has changed over time and is not reducible to one fixed map. --- ## Scanned_20260730-1830.pdf — PDF page 3 ### Visible Page A close-cropped ruled sheet in blue ink. The opening fragment `"14 eyes = adds"` sits alone at the upper left, continuing page 2. The remainder defines SIGINT, COMINT, and ELINT in large, evenly spaced handwriting. `NOT` and `COMINT` are underlined. A right-pointing arrow at the bottom implies continuation. ### Faithful Transcription > "14 eyes = adds" > > "Signals intelligence - SIGINT" > > "- intelligence by interception of signals" > > "whether communications between" > > "people (communications intelligence COMINT)" > > "or from electronic signals" > > "NOT directly used in communication" > > "(electronic intelligence - ELINT" ### Entities and References [[Fourteen Eyes]], [[Signals Intelligence|SIGINT]], [[Communications Intelligence|COMINT]], [[Electronic Intelligence|ELINT]], foreign instrumentation signals intelligence, electromagnetic emissions, communications interception, radar and weapons-system emissions. ### Reconstruction and Context The page's conceptual distinction is substantially correct. NSA defines SIGINT broadly as intelligence derived from electronic signals and systems used by foreign targets. Historical U.S. doctrine divides it into communications intelligence and non-communications electronic intelligence, with foreign instrumentation signals intelligence later replacing the older telemetry-intelligence category.[^sigint-nsa][^dod-sigint] COMINT concerns information derived from communications not intended for the collector; ELINT concerns non-communications electromagnetic emissions such as radar, beacons, jammers, and weapons-system signals.[^elint-nsa] The phrase `whether communications between people` is narrower than COMINT's full scope because communications can also occur machine-to-machine. The phrase `NOT directly used in communication` is a useful practical discriminator for ELINT, though some signals blur the boundary. The page is approaching a foundational intelligence ontology: **content-bearing signals, system-behavior signals, and instrumentation signals reveal different layers of an adversary**. `14 eyes = adds` remains incomplete. The common public formulation adds Germany, Belgium, Italy, Spain, and Sweden to the Nine Eyes, but because the notebook itself does not record those names, they are not inserted into the transcription. ### Cross-Notebook Connections This page connects to the radio, networking, device, and low-level system inventories in [[Scanned_20260730-1802|Scanned_20260730-1802]], where Linux services, Bluetooth, firewalls, and industrial control are treated as observability surfaces. It also complements [[Scanned_20260730-1230|Scanned_20260730-1230]], whose device labels preserve MAC, IMEI, and radio identities—the asset-level substrate from which signal and network intelligence can be derived. ### Missed Signals and Open Leads The missing category is [[Foreign Instrumentation Signals Intelligence|FISINT]], important for telemetry, missile, satellite, and command signals. The notebook also had not yet separated **collection** from **processing, exploitation, and dissemination**: interception alone does not produce usable intelligence without classification, correlation, translation, and analysis. --- ## Scanned_20260730-1830.pdf — PDF page 4 ### Visible Page A ruled sheet with an arrow from the top left into the word `prism`. The central section underlines `Room 641A` and links it by arrow to a two-line statement about warrantless surveillance and the Patriot Act. Below, `Special Collection Service` is followed by two quoted descriptions. `Stellar Wind` is circled at the bottom, with an arrow toward `open secret code.` ### Faithful Transcription > "prism" > > "Room 641A AT&T for National Security" > > "→ warrantless surveillance authorized" > > "By the Patriot Act" > > "Special Collection Service -" > > "‘Black Budget program’ for" > > "‘close Surveillance.’" > > "Stellar Wind" > > "open secret code." ### Entities and References [[PRISM Surveillance Program|PRISM]], [[FISA Section 702|Section 702]], downstream collection, upstream collection, [[Room 641A]], [[AT&T]], Mark Klein, [[National Security Agency|NSA]], [[USA PATRIOT Act]], [[Special Collection Service]], [[Central Intelligence Agency|CIA]], black budget, close-access collection, [[STELLARWIND]], [[President's Surveillance Program]], warrantless surveillance. ### Reconstruction and Context This page gathers four surveillance architectures that are historically related but not interchangeable. **PRISM** is the public codename associated with provider-assisted, or later `downstream`, collection under FISA Section 702. Under that model, the government serves directives on U.S.-based electronic communication service providers and receives communications to or from approved selectors associated with non-U.S. persons reasonably believed to be abroad. It is distinct from `upstream` acquisition conducted on network infrastructure.[^pclob-702] **Room 641A** refers to the secure room inside AT&T's 611 Folsom Street facility in San Francisco exposed by technician Mark Klein. Klein's documents and testimony described fiber-optic splitting equipment that copied backbone traffic toward the room; the evidence became central to EFF litigation over NSA dragnet surveillance.[^room641a] The page's phrase `authorized By the Patriot Act` is too broad. The post-9/11 surveillance architecture involved presidential authorizations, the President's Surveillance Program, later statutory transitions, FISA, the FISA Amendments Act, and telecom-immunity legislation. The USA PATRIOT Act expanded several FISA authorities, but it was not a single blanket authorization for everything associated with Room 641A. **STELLARWIND** was a highly classified component or codename within the post-9/11 President's Surveillance Program, encompassing warrantless interception and bulk metadata activities whose legal footing changed over time.[^stellarwind-oig] Calling it an `open secret code` accurately captures its later public notoriety, but not its original status. The **Special Collection Service** is a joint CIA–NSA capability associated with close-access and special signals-intelligence operations. Declassified or leaked historical material describes a platform combining CIA operational access with NSA technical collection and analysis.[^scs-document] `Black Budget program` and `close Surveillance` are descriptive shorthand, not a complete institutional definition. The page therefore compresses four collection positions: **provider**, **backbone**, **presidential program**, and **close-access operation**. That is a highly consequential architecture map even though the legal labels are partially conflated. ### Cross-Notebook Connections This is the macro-level counterpart to [[Scanned_20260730-1806|Scanned_20260730-1806]], where Android package manifests, system UIDs, developer provenance, and trackers are inspected for surveillance potential. It also connects to the `Commands / Features / Obscure / Facts / ACCESS` notebook [[Scanned_20260730-1235|Scanned_20260730-1235]], whose governing question is where systems expose hidden interfaces. ### Missed Signals and Open Leads The page needed a two-axis matrix: **technical collection point** versus **legal authority**. PRISM belongs to Section 702 provider collection; Room 641A is evidence about infrastructure-level copying; STELLARWIND belongs to the President's Surveillance Program history; and SCS belongs to specialized close-access collection. The PATRIOT Act should not be used as a universal parent label. The source that supplied the exact phrases `Black Budget program` and `close Surveillance` remains unidentified. --- ## Scanned_20260730-1830.pdf — PDF page 5 ### Visible Page A yellowed ruled sheet in black ink. `USA Freedom Act` heads the page. `Amicus curiae` is followed by a description and a large oval containing `12 people`. The middle discusses agencies and a novel interpretation of law. A very large handwritten `Novel` dominates the center-left. The bottom contains three circled or emphasized operational phrases: retaining call metadata, using a pen register, and `USE PIN Number`. ### Faithful Transcription > "USA Freedom Act" > > "Amicus curiae -" > > "Individuals appointed to inform" > > "court about specific or legal" > > "individuals" > > "12 people" > > "Agencies involving a novel" > > "interpretation of Law" > > "Novel Actors" > > "production" > > "Freedom of Info Act" > > "Use" > > "Retain Call Metadata" > > "Use pen Register" > > "USE PIN Number" ### Entities and References [[USA FREEDOM Act]], [[Amicus Curiae|amicus curiae]], FISC statutory amici, significant or novel interpretations of law, [[Call Detail Records|call-detail records]], telephony metadata, [[Pen Register]], [[Trap and Trace Device|trap-and-trace device]], [[Freedom of Information Act|FOIA]], personal identification number, statutory transparency. ### Reconstruction and Context The page identifies two major USA FREEDOM Act changes: restructuring bulk telephony-record collection and formalizing a pool of specialists eligible to assist the FISA courts as amici. The act requires the designation of at least five individuals with expertise in privacy, civil liberties, intelligence collection, telecommunications, or related fields; the FISC's official roster grew through successive appointments.[^fisc-amici] The notebook's `12 people` does not match the official roster visible in May 2023, which contained eight designated individuals. It may come from a secondary source, may include former appointees, or may refer to the FISC's judges rather than the amicus pool. The governing statutory phrase is closer to **a novel or significant interpretation of law**, not simply `specific or legal individuals`. An amicus does not represent a target in the ordinary adversarial sense; the role is to provide legal or technical perspective when the court determines that assistance is appropriate. This matters because the notebook was trying to locate the adversarial counterweight inside a court that normally hears only the government's application. The telephony section is directionally correct but compressed. The USA FREEDOM Act ended the prior indiscriminate bulk production model under the FISA business-records provision and replaced it with a more targeted call-detail-record mechanism using specific selection terms. Call-detail records include routing and transactional information such as numbers, dates, times, and durations, not call content.[^usafreedom-pclob] The NSA later suspended the program and recommended that Congress not reauthorize that particular authority, but the notebook is examining its original legal design. `Use pen Register` correctly identifies a different metadata authority. A pen register records outgoing dialing, routing, addressing, or signaling information; trap-and-trace captures corresponding incoming information. `USE PIN Number` is probably a phonetic or conceptual confusion between `pen` and `PIN`. A PIN is an authentication secret; a pen register is a surveillance device or process. `Freedom of Info Act` is a separate transparency statute, not another name for the USA FREEDOM Act. ### Cross-Notebook Connections The page's effort to find an institutional counterweight resembles the `True Up` and reconciliation concepts in [[Scanned_20260730-1845|Scanned_20260730-1845]], page 4. The distinction between metadata, credentials, and identifiers also connects to [[Scanned_20260730-1230|Scanned_20260730-1230]], where device identifiers and secrets coexist before a stable security schema has been imposed. ### Missed Signals and Open Leads The notebook was close to the central problem but had not yet separated **amicus panel**, **court membership**, **call-detail-record authority**, **pen-register authority**, and **FOIA disclosure**. Recovering the source behind `12 people` would likely resolve whether it referred to amici, judges, or another advisory body. `Novel Actors production` may be a misheard legal phrase and should remain on the unresolved-expression list. --- ## Scanned_20260730-1830.pdf — PDF page 6 ### Visible Page A ruled page with a crossed-out phrase at the top, followed by an oversized `ODNI`. `FISA` appears twice. The lower half is a compact legal-standard note written in increasingly large script, ending with `foreign power.` ### Faithful Transcription > "~~[uncertain: Congress Act]~~" > > "ODNI" > > "Fisa" > > "Fisa" > > "Electronic +" > > "pin trap source" > > "orders compelling production" > > "probal Caus to Believe" > > "target is a foreign Powr" > > "or a Agent of a" > > "foreign power." ### Entities and References [[Office of the Director of National Intelligence|ODNI]], [[Foreign Intelligence Surveillance Act|FISA]], electronic surveillance, pen register, trap-and-trace, production orders, probable cause, [[Foreign Power]], [[Agent of a Foreign Power]], traditional FISA Title I, FISA business records. ### Reconstruction and Context This page mixes several FISA titles while correctly locating one of the traditional act's central standards: probable cause to believe that a target is a foreign power or an agent of a foreign power. That individualized finding is associated especially with traditional electronic-surveillance and physical-search orders. Pen-register/trap-and-trace orders and business-record production orders use different statutory showings. Section 702, discussed on page 8, is different again: it operates through annual programmatic certifications and targeting procedures rather than individualized probable-cause orders for each foreign target. `ODNI` is an oversight, coordination, and disclosure institution in this notebook's source chain, but ODNI did not enact FISA. Congress enacted FISA in 1978; ODNI was created after the Intelligence Reform and Terrorism Prevention Act of 2004. The crossed-out top phrase may record the writer correcting the institutional parent. The line `orders compelling production` accurately points toward the compulsory-process side of surveillance law: FISC orders and directives can require providers or record custodians to produce information. The page is trying to unify all such instruments under one probable-cause rule, which is understandable but legally inaccurate. ### Cross-Notebook Connections The page's concern with authority boundaries resembles the device-management ambiguity in [[Scanned_20260730-1235|Scanned_20260730-1235]], page 5, where authorized vulnerability management, enterprise enrollment, and intrusive monitoring share technical primitives but differ in governance. Here, the same collection capability changes legal meaning according to the statutory title and evidentiary standard. ### Missed Signals and Open Leads A future revision should diagram at least four lanes: traditional FISA electronic surveillance, physical search, pen-register/trap-and-trace, and business records—then place Section 702 beside them as a separate certification regime. `pin trap source` should probably be normalized analytically to `pen register and trap-and-trace`, but the original transcription remains uncertain. --- ## Scanned_20260730-1830.pdf — PDF page 7 ### Visible Page A dense, worn ruled page in black ink. The heading appears to read `For E surveillance` and is underlined. `Select` is crossed out. A large pen-register/trap phrase sits above a circled date, `May 19 2023`, with an uncertain source note below it. The lower half contains fragmented phrases about mass data, metadata/routing data, call-detail orders, production, 180 days, routing, ANI, addresses, DOJ, and a final nearly illegible line. ### Faithful Transcription > "[uncertain: For E surveillance]" > > "~~Select~~" > > "[uncertain: Pen pr & trap]" > > "[uncertain: statutory standard]" > > "May 19 2023" > > "[uncertain: Apple & Council]" > > "Collection of Mas Data" > > "Meta (Routing Data)" > > "Clandestine Service" > > "Call detail Order for" > > "production [uncertain: current]" > > "last longer than 180 days" > > "[uncertain: Routing but W/ANI -]" > > "[uncertain: address input not more]" > > "[uncertain: DOJ 5/13 gov cloud citizen]" ### Entities and References Electronic surveillance, pen register, trap-and-trace, statutory standards, May 19, 2023, mass data, metadata, routing information, [[Automatic Number Identification|ANI]], call-detail records, production orders, retention periods, Department of Justice, clandestine service. ### Reconstruction and Context This page appears to combine notes from two adjacent legal mechanisms: FISA pen-register/trap-and-trace authority and the USA FREEDOM Act call-detail-record program. The common substrate is **non-content signaling information**—numbers, routing, addressing, session, and transactional data. Such information can reveal social topology even without the words spoken or written. `last longer than 180 days` may refer to an order duration, retention rule, or source-summary language. Under FISA, different orders have different durations, and the USA FREEDOM call-detail-record mechanism involved defined production periods and hops rather than one universal 180-day rule. Because the notebook does not identify the exact subsection, the number should not be attached to a specific authority without the original source. `ANI` commonly means Automatic Number Identification, a telephony mechanism that conveys the calling number, but the handwriting is not secure enough to establish that expansion. `Clandestine Service` may have been copied from an agency description rather than the legal material around it. The circled date anchors the page to the FISC disclosures released on May 19, 2023. The visible terms show the research widening from the particular FBI query violations into the older statutory vocabulary of metadata collection. ### Cross-Notebook Connections The page is structurally similar to [[Scanned_20260730-1806|Scanned_20260730-1806]], where file extensions, ports, manifests, and package flags are copied from several layers before being normalized into a provenance model. In both notebooks, the initial notes capture **surface vocabulary before the exact subsystem boundaries are known**. ### Missed Signals and Open Leads The source beneath the circled date should be recovered from browser history, Twitter/X bookmarks, or screenshots dated May 19–20, 2023. The `180 days` rule, `ANI`, and final DOJ line remain too context-poor for legal attribution. This page deserves a source-by-source reconstruction rather than further speculation from handwriting alone. --- ## Scanned_20260730-1830.pdf — PDF page 8 ### Visible Page A full yellowed ruled page with an enormous `702` at upper left. `FISA 702 Annual` appears beneath it with an uncertain final word. `AG` and `Director DNI` are bracketed toward `FISC reviews`. The lower half contains numbered restrictions, with a circled `2`, and several lines distinguishing a person outside the United States from a person inside the United States. ### Faithful Transcription > "702" > > "FISA 702 Annual [uncertain: memo]" > > "AG" > > "+" > > "Director" > > "DNI" > > "FISC reviews" > > "1. May not intentionally" > > "[uncertain: acquire not … of each]" > > "2 May not target" > > "person outside US" > > "IF purpose" > > "to get info on" > > "person in US" > > "Intentional inquire Any info" > > "from Any person in US" > > "[uncertain: Not Targeted Does Native Source.]" ### Entities and References [[FISA Section 702|Section 702]], [[Attorney General of the United States|Attorney General]], [[Director of National Intelligence|DNI]], [[Foreign Intelligence Surveillance Court|FISC]], annual certifications, non-U.S. persons abroad, U.S. persons, reverse targeting, wholly domestic communications, querying, acquisition, Fourth Amendment, targeting and minimization procedures. ### Reconstruction and Context This page is the notebook's closest approach to Section 702's actual statutory architecture. The Attorney General and DNI jointly authorize acquisitions through certifications; the FISC reviews the certifications and associated targeting, minimization, and querying procedures for consistency with the statute and the Fourth Amendment.[^fisc-about][^section702-release] The court does **not** approve each individual foreign target. The numbered restrictions correspond to real statutory limits. Section 702 may not intentionally target a person known to be in the United States; may not intentionally target a U.S. person anywhere; may not use a foreign target as a pretext when the real purpose is to target a known person in the United States—often called `reverse targeting`; and may not intentionally acquire a communication when all known communicants are in the United States. Acquisition must be conducted in a manner consistent with the Fourth Amendment. The notebook's phrase `May not target person outside US IF purpose to get info on person in US` is a strong plain-language rendering of reverse targeting. The following lines, however, begin to merge **targeting** with **querying**. A U.S. person may not be a Section 702 target, but agencies historically have been permitted, subject to procedures and later statutory reforms, to query lawfully acquired Section 702 repositories using U.S.-person identifiers. That difference—foreign targeting followed by domestic-person querying—was precisely the civil-liberties controversy illuminated by the April 2022 FISC opinion. ### Cross-Notebook Connections The page's distinction between acquisition and later access parallels the NOTEBOOKS project's broader distinction between **possession, authorization, provenance, and use**. [[Scanned_20260730-1230|Scanned_20260730-1230]] preserves device identities but initially mixes them with credentials; [[Scanned_20260730-1830|this notebook]] preserves foreign-targeting rules but initially mixes them with domestic querying. ### Missed Signals and Open Leads The missing conceptual diagram is `target → acquisition → retention → dissemination → query → use`. Section 702 debates become opaque when those verbs are treated as synonyms. The uncertain first restriction likely concerned intentional acquisition of wholly domestic communications; the source should be recovered before finalizing the wording. --- ## Scanned_20260730-1830.pdf — PDF page 9 ### Visible Page A square neon-green sticky note photographed close-up. The date `5-20-23` is large at upper right, with `twitter` beneath it. The left begins `1. ic`. `Foreign Intel court` spans the middle. `revealed` points toward `FISC`, followed by `Fbi surveillance` and `2008 - 2018?`. ### Faithful Transcription > "1. ic" > > "5-20-23" > > "twitter" > > "Foreign Intel court" > > "revealed FISC" > > "Fbi surveillance" > > "2008 - 2018?" ### Entities and References Intelligence community, Twitter/X, [[Foreign Intelligence Surveillance Court|FISC]], FBI surveillance, [[FISA Amendments Act of 2008]], 2018 reauthorization, May 20, 2023, April 2022 FISC opinion. ### Reconstruction and Context This sticky note appears to be the capture card for the news event that triggered pages 5–18. On May 19, 2023, ODNI publicly released the redacted April 21, 2022 FISC memorandum opinion and related order. The opinion described extensive FBI querying violations involving Section 702 data, including batch queries associated with crime victims, civil unrest, January 6 subjects, and political campaign donors.[^fisc-release][^fisc-explainer] The date `5-20-23` is therefore most plausibly the day the writer encountered the disclosure on Twitter. `2008 - 2018?` compresses the legal lineage. Section 702 originated in the FISA Amendments Act of 2008 and was reauthorized in legislation enacted in January 2018 for a six-year period. Page 13 restates the latter point as `"2018 Renewal / For 6 years"`. The phrase `revealed FISC` should not be read as saying that the court itself was newly discovered. Rather, a previously classified or sealed FISC opinion was newly released, revealing how the court had evaluated FBI compliance. ### Cross-Notebook Connections The sticky-note capture method recurs extensively in [[Scanned_20260730-1845|Scanned_20260730-1845]], where platform, identity, and philosophical fragments are preserved as modular research objects. Here the sticky note functions as an **event index** for a rapidly expanding legal inquiry. ### Missed Signals and Open Leads The actual tweet, article, or thread remains unidentified. Recovering it could clarify `1. ic` and whether the writer first encountered the official ODNI release, a civil-liberties analysis, or partisan commentary. The note should be cross-indexed to May 20, 2023 in the cumulative chronology. --- ## Scanned_20260730-1830.pdf — PDF page 10 ### Visible Page A neon-green sticky note with large black handwriting. `Legal Oversight` fills the top line. The middle appears to say that a court operates in secret. `Foreign Intel Secret Court` occupies the bottom half. ### Faithful Transcription > "Legal Oversight" > > "[uncertain: Spue court] operates" > > "in secret" > > "Foreign Intel" > > "Secret Court" ### Entities and References Legal oversight, [[Foreign Intelligence Surveillance Court|FISC]], Article III judiciary, classified proceedings, ex parte review, secrecy, judicial review. ### Reconstruction and Context The page identifies the institutional paradox at the center of FISA: **a court designed to impose legal oversight on secret intelligence activity must itself operate largely in secret**. The FISC is not the Supreme Court and is not an executive tribunal. It is a federal court composed of Article III judges designated by the Chief Justice. It reviews applications and certifications, can demand corrections, appoint amici, and issue written reasons.[^fisc-about] The phrase `Secret Court` is common in public discourse but can conceal two different questions. One is whether the court's proceedings and records are classified or nonpublic; many are. The other is whether the court lacks legal standards or meaningful review; that does not follow automatically from secrecy. The notebook is correctly isolating the tension but has not yet distinguished **procedural secrecy**, **substantive deference**, **adversarial imbalance**, and **public accountability**. ### Cross-Notebook Connections This page's institutional paradox echoes the NOTEBOOKS archive itself: information can be preserved without being publicly exposed, but a trustworthy system must still prove that review occurred. The problem of secret oversight is therefore a state-scale analogue of the archive's recurring challenge of **privacy with auditability**. ### Missed Signals and Open Leads The uncertain first word may have been `Supreme`, `special`, or an abbreviated court label. The page needed the [[Foreign Intelligence Surveillance Court of Review|FISCR]] and Supreme Court appellate pathways to complete the judicial topology. It also needed statistics on modifications, denials, compliance incidents, and amicus appointments to assess oversight empirically rather than rhetorically. --- ## Scanned_20260730-1830.pdf — PDF page 11 ### Visible Page A green sticky note with sparse handwriting. `Expiring To—` appears at the top. The middle reads `Fbi Said IR` followed by `and oversight`. The bottom says `April 2022 FISC court order`. ### Faithful Transcription > "Expiring To—" > > "Fbi Said IR" > > "and oversight" > > "April 2022 FISC" > > "court order" ### Entities and References Section 702 expiration, FBI, intelligence reform, oversight, April 2022 FISC memorandum opinion and order, statutory sunset. ### Reconstruction and Context The page ties the April 2022 FISC order to the approaching Section 702 sunset. In May 2023, Section 702 was scheduled to expire at the end of that year unless Congress reauthorized it. The newly released compliance opinion therefore entered a live legislative debate: proponents cited Section 702's foreign-intelligence value and later FBI reforms; critics cited widespread noncompliant queries as evidence that statutory and warrant protections were inadequate. `Fbi Said IR` is unresolved. It may mean `FBI said it`, `FBI said IR`, or an abbreviation copied from a source. The visible phrase `and oversight` suggests the note was comparing the FBI's account of reform with the court's oversight findings. Later history clarifies the trajectory. Congress enacted the Reforming Intelligence and Securing America Act in April 2024, reauthorizing Title VII for two years and codifying additional query controls. The statutory authority then lapsed in June 2026 after temporary extensions failed, although annual FISC certifications approved in March 2026 permitted existing acquisitions to continue roughly through March 2027.[^section702-2026] This later outcome should be treated as an archival update, not projected backward into the 2023 page. ### Cross-Notebook Connections The page resembles the lifecycle notes in [[Scanned_20260730-1230|Scanned_20260730-1230]], where manufacture date, account state, and later disposition must be distinguished. A statute, like a device, has an enactment date, amendment history, certification cycle, sunset, and residual authority. ### Missed Signals and Open Leads The exact referent of `Expiring To—` and `IR` requires the original article or tweet. The notebook did not yet distinguish statutory expiration from the duration of certifications already issued under the statute—a distinction that became decisive in 2026. --- ## Scanned_20260730-1830.pdf — PDF page 12 ### Visible Page A green sticky note. A large heading resembling `6 I.C.E` is underlined. Below it, `fisa Amend` points toward `FISC`. A word beginning with `F` is heavily crossed out. The lower phrase appears to be an unsuccessful expansion of the FISC acronym, ending in `Court`. ### Faithful Transcription > "[uncertain: 6 I.C.E]" > > "fisa Amend" > > "FISC)" > > "~~[illegible]~~" > > "[uncertain: Form Entry Sur]" > > "Court" ### Entities and References FISA Amendments Act, [[Foreign Intelligence Surveillance Court|FISC]], acronym expansion, institutional naming, Section 702. ### Reconstruction and Context This is an acronym-resolution page. The writer is trying to stabilize the relationship between the FISA Amendments Act and the FISC while correcting an incorrect expansion. The canonical name is **Foreign Intelligence Surveillance Court**. The court predates the 2008 FISA Amendments Act; it was created by the original Foreign Intelligence Surveillance Act of 1978. The 2008 act added Section 702 and other Title VII authorities that the court subsequently reviews through certifications and procedures. The crossed-out word is archivally meaningful: the writer recognized that an initial expansion was wrong and attempted a correction. This is exactly the kind of epistemic revision the NOTEBOOKS project preserves rather than erases. ### Cross-Notebook Connections The page parallels the acronym and lineage work throughout [[Scanned_20260730-1806|Scanned_20260730-1806]], where package names, file extensions, and developer identities are repeatedly corrected. It also belongs in the cumulative acronym dictionary as an explicit **error-and-repair event**. ### Missed Signals and Open Leads `6 I.C.E` may be a numbered item, an unrelated acronym, or a malformed heading. No responsible expansion is available. The page should not be used as evidence about U.S. Immigration and Customs Enforcement merely because the letters resemble `ICE`. --- ## Scanned_20260730-1830.pdf — PDF page 13 ### Visible Page A neon-green sticky note. Five short lines are written in large script: `Unsealed`, `2 Days`, `Yesterday`, `2018 Renewal`, and `For 6 years`. ### Faithful Transcription > "Unsealed" > > "2 Days" > > "Yesterday" > > "2018 Renewal" > > "For 6 years" ### Entities and References Unsealing, declassification, May 19, 2023 release, April 2022 FISC opinion, 2018 FISA reauthorization, six-year authorization period. ### Reconstruction and Context This page is a temporal compression card. Read beside page 9's `5-20-23`, `Yesterday` points directly toward the May 19 public release. `Unsealed` is colloquially accurate, though the official process involved declassification review and public release of redacted FISC materials rather than an ordinary civil-docket unsealing. `2018 Renewal / For 6 years` correctly identifies the FISA Amendments Reauthorization Act of 2017, signed in January 2018, which extended Section 702 for six years. The page is placing the newly revealed compliance history against the authority's legislative lifetime. ### Cross-Notebook Connections The page functions like a compact event ledger, similar to dated manufacture and activation evidence in [[Scanned_20260730-1230|Scanned_20260730-1230]]. It should be integrated into the cumulative chronology as a legal-policy event rather than merely a note about a news article. ### Missed Signals and Open Leads The phrase `2 Days` may mean the opinion had been public for two days, that the research lasted two days, or that another deadline was two days away. Because page 9 is dated May 20 and the release occurred May 19, `Yesterday` is high-confidence while `2 Days` remains ambiguous. --- ## Scanned_20260730-1830.pdf — PDF page 14 ### Visible Page A close-cropped green sticky note. `Section 702` and `FISC` are written large. A quoted phrase reads approximately `"spy on foreign nationals outside US"`. `Expires` appears at lower left. ### Faithful Transcription > "Section 702" > > "FISC" > > "‘spy on foreign" > > "nationals outside" > > "US’" > > "Expires" ### Entities and References [[FISA Section 702|Section 702]], [[Foreign Intelligence Surveillance Court|FISC]], non-U.S. persons outside the United States, foreign intelligence, sunset clause, targeting restrictions. ### Reconstruction and Context This is the notebook's most concise definition of Section 702. The phrase `foreign nationals` is understandable but not exact statutory language. Section 702 permits targeting **non-U.S. persons reasonably believed to be located outside the United States** for the acquisition of foreign intelligence information. `Non-U.S. person` is a legal category, not simply a synonym for nationality. A lawful target can be an individual, group, organization, or foreign power that meets the statutory criteria. The page's `Expires` records that Section 702 was a temporary authority requiring periodic congressional renewal. That sunset structure creates a recurring oversight window in which operational value, compliance history, civil-liberties concerns, and proposed reforms are renegotiated. ### Cross-Notebook Connections The note's compressed architecture—authority, court, target class, sunset—resembles the compact device identity cards in [[Scanned_20260730-1650|Scanned_20260730-1650]] and [[Scanned_20260730-1230|Scanned_20260730-1230]]. In each case, a few labels encode an entire lifecycle and governance system. ### Missed Signals and Open Leads The missing phrase is `foreign intelligence purpose`. Location and non-U.S.-person status are necessary but not the whole statutory test. The page also needed the prohibition on reverse targeting and the distinction between initial target selection and later U.S.-person queries. --- ## Scanned_20260730-1830.pdf — PDF page 15 ### Visible Page A second neon-green sticky note that repeats page 10 almost exactly. The handwriting again reads `Legal Oversight`, followed by a court operating in secret and `Foreign Intel Secret Court`. ### Faithful Transcription > "Legal Oversight" > > "[uncertain: Spue court] operates" > > "in secret" > > "Foreign Intel" > > "Secret Court" ### Entities and References Legal oversight, FISC, secrecy, duplicate note, research organization. ### Reconstruction and Context This is a physical duplicate or repeated capture of page 10. Repetition is evidence. It suggests that `legal oversight` was not a passing definition but the central unresolved issue: whether a secret court can adequately constrain secret collection. The duplication may also reflect the notebook's assembly method—sticky notes were photographed or mounted in more than one sequence. ### Cross-Notebook Connections Repeated notes appear throughout the corpus when the writer reorganizes material by copying rather than by formal indexing. [[Scanned_20260730-1235|Scanned_20260730-1235]] contains repeated Neverware and contact leaves; [[Scanned_20260730-1659|Scanned_20260730-1659]] repeats `Boot Options` headings. The duplicate should therefore be preserved, not silently removed. ### Missed Signals and Open Leads Determine whether pages 10 and 15 are the same physical sticky photographed twice or two separately written copies. Image-level comparison suggests near identity, but the archive should preserve them as two PDF pages because that is how the scan presents them. --- ## Scanned_20260730-1830.pdf — PDF page 16 ### Visible Page A second neon-green sticky note repeating page 9. It again includes `5-20-23`, `twitter`, `Foreign Intel court`, `revealed FISC`, `Fbi surveillance`, and `2008 - 2018?`. ### Faithful Transcription > "1. ic" > > "5-20-23" > > "twitter" > > "Foreign Intel court" > > "revealed FISC" > > "Fbi surveillance" > > "2008 - 2018?" ### Entities and References Same entities as page 9: intelligence community, Twitter/X, FISC, FBI surveillance, FISA Amendments Act of 2008, 2018 reauthorization. ### Reconstruction and Context The exact repetition reinforces the interpretation that May 20, 2023 was the notebook's principal research date. It may be a duplicate scan rather than a separate note, but its inclusion preserves the physical assembly history. The repeated event card acts as a divider between the Section 702 summary and the final legal-procedure notes. ### Cross-Notebook Connections As with page 15, the duplication reflects a corpus-wide method of using physical repetition to mark importance or to reorganize research clusters. ### Missed Signals and Open Leads Compare image hashes and paper-edge details to determine whether pages 9 and 16 are the same photograph, separate photographs of the same sticky, or two handwritten copies. That distinction matters for reconstructing the scan workflow but not for the substantive interpretation. --- ## Scanned_20260730-1830.pdf — PDF page 17 ### Visible Page A sparse neon-green sticky note. `USPTO` is written across the upper left. `Case` appears below, followed by `[REDACTED]` and a large question mark. ### Faithful Transcription > "USPTO" > > "Case" > > "[REDACTED]" > > "?" ### Entities and References [[United States Patent and Trademark Office|USPTO]], case, `[uncertain: [REDACTED]]`, patent, trademark, administrative proceeding, product or company name. ### Reconstruction and Context This page is a detached legal or intellectual-property lead. `USPTO` securely identifies the United States Patent and Trademark Office. `[REDACTED]` could be a trademark, patent applicant, product, case name, or a misread word. The page supplies no application number, docket, party, date, or technology, so no specific proceeding can be assigned. Its placement after the FISC material may be accidental, or it may reflect a broader investigation into how specialized federal adjudicatory systems handle nonpublic or technical matters. FISC and USPTO are institutionally unrelated, however, and adjacency should not be converted into a substantive relationship. ### Cross-Notebook Connections The isolated product/case fragment resembles unresolved entity pages throughout [[Scanned_20260730-1845|Scanned_20260730-1845]] and [[Scanned_20260730-1723|Scanned_20260730-1723]]. It belongs in the cumulative unresolved-name list. ### Missed Signals and Open Leads Search a private browser-history or document archive from May 2023 for `USPTO [REDACTED]`, `USPTO [REDACTED]`, and visual variants. Public web searching without a case number produces too many false matches; the page should remain unresolved until source context appears. --- ## Scanned_20260730-1830.pdf — PDF page 18 ### Visible Page A yellowed ruled sheet in black ink. `FISC Review` is written large, followed by `of FISA` and `Applicants.` A line appears to read `People Guilty Slapped`. The middle discusses courts, `Exparte`, an `Urgent court`, temporary exclusion of another party, and federal review. A crossed-out word precedes `it is protective`. The lower section refers to an electronic service provider, a product or production order, a recipient, data actors, banks, and phone numbers. A small symbol appears in the upper-left margin. ### Faithful Transcription > "FISC Review" > > "of FISA" > > "Applicants." > > "[uncertain: People Guilty Slapped]" > > "Courts Exparte - [uncertain: Inquisitive]" > > "Urgent court" > > "[uncertain: Temperm] Excludes" > > "other party =" > > "only includes Federal" > > "Review" > > "~~[illegible]~~ it is protective" > > "[uncertain: Election] Service" > > "provider product" > > "order Recipient" > > "The data Actors" > > "Like Banks, phone num" > > "certain bank" ### Entities and References FISC review, FISA applications, [[Ex Parte Proceeding|ex parte proceedings]], emergency or urgent authorization, government applicant, target/nonparty, protective secrecy, [[Electronic Communication Service Provider|electronic communication service provider]], compelled production, order recipient, banks, telephone records, business records. ### Reconstruction and Context This page is an attempt to understand **procedure**, especially why the target is absent. Traditional FISA applications are generally ex parte: the government applies, the court reviews, and the surveillance target ordinarily does not receive notice or participate before collection begins. That structure is operationally understandable—advance notice could defeat intelligence collection—but it creates an adversarial deficit. The USA FREEDOM Act's amicus mechanism partly addresses novel or significant questions without turning every application into ordinary two-party litigation. `People Guilty Slapped` is probably a misunderstanding or an illegible phrase. The FISC does not adjudicate criminal guilt. It determines whether surveillance applications, certifications, and procedures satisfy applicable statutory and constitutional standards. Evidence later used in a criminal case enters a different judicial process. `Urgent court` may refer to emergency authorities that allow collection to begin before a completed application, subject to prompt court submission and statutory conditions. `Excludes other party` accurately captures the absence of the target, but `only includes Federal Review` should be refined: the court is itself part of the federal judiciary, not an internal agency review board. The lower lines identify compelled intermediaries. FISA orders and Section 702 directives can be served on electronic communication service providers; business-records authorities can reach custodians such as banks, telecoms, and other record holders. `order Recipient` is the entity legally compelled to assist or produce, not necessarily the surveillance target. That distinction is one of the page's most important emerging insights. ### Cross-Notebook Connections The provider/recipient distinction links to the platform-control themes in [[Scanned_20260730-1845|Scanned_20260730-1845]], where identity, hosting, DNS, and service accounts determine who can act on data. It also parallels [[Scanned_20260730-1235|Scanned_20260730-1235]], where enterprise-management systems can issue commands through an intermediary control plane. ### Missed Signals and Open Leads The page needed three separate actors: **government applicant, court, and compelled provider**, plus a fourth—**the absent target**. It also needed the distinction between a FISA application, a Section 702 certification, a provider directive, and a business-records order. The uncertain phrase `People Guilty Slapped` should not be interpreted until another copy or source appears. --- ## Scanned_20260730-1830.pdf — PDF page 19 ### Visible Page A full yellowed ruled sheet, mostly blank. A small symbol and the name `[PERSON REDACTED]` appear at upper left. Faint pencil or light ink records a company/package phrase, `6025`, a crossed word, `[PERSON REDACTED]`, `5 Stars`, a personal telephone number, `trophies / troches`, and the underlined name `[PERSON REDACTED]`. Several long horizontal strokes divide the contact block from the blank lower page. ### Faithful Transcription > "[uncertain symbol]" > > "[PERSON REDACTED]" > > "[uncertain: Company Cup Pounds pkg]" > > "6025 ~~[illegible]~~ [PERSON REDACTED]" > > "5 Stars" > > "xxx-xxx-xxxx (see Scanned_20260730-1830.pdf, page 19)" > > "trophies / troches" > > "[PERSON REDACTED]" ### Entities and References [PERSON REDACTED], [PERSON REDACTED], possible trophy or awards company, package, `6025`, five-star rating, personal contact number. ### Reconstruction and Context This final page is a practical contact fragment unrelated on its face to FISA or signals intelligence. `trophies` is the strongest lower-word reading, suggesting a trophy, awards, engraving, or recognition vendor. `5 Stars` may be a rating rather than a company name. `6025` could be a street number, order number, price fragment, or product code. `[PERSON REDACTED]` may be a person, street, product, or misread phrase. Its archival value lies in showing that the notebook was not a formally bounded research monograph. It remained a live operational surface where notes from an externally supplied intelligence-law explanation could coexist with a local contact or purchasing note. That mixture is characteristic of the larger collection: REDACTED capture, conceptual systems analysis, and immediate life administration occupy the same physical memory substrate. ### Cross-Notebook Connections The contact fragment resembles the portable operations-console pages in [[Scanned_20260730-1314|Scanned_20260730-1314]], [[Scanned_20260730-1659|Scanned_20260730-1659]], and [[Scanned_20260730-1719|Scanned_20260730-1719]], where names, addresses, devices, accounts, and research terms share a notebook. The important distinction is that no relationship between `[PERSON REDACTED]`, `[PERSON REDACTED]`, and the intelligence material is implied. ### Missed Signals and Open Leads The original contact number could be resolved privately against an address book, but project protocol forbids public transcription and no reverse lookup was attempted. `Company Cup Pounds pkg`, `[PERSON REDACTED]`, and `troches` require higher-quality source context or another notebook. The page should be indexed under unresolved contacts and trophies/awards rather than forced into the surveillance narrative. --- # Notebook-Level Synthesis ## Probable Date Range ### Explicit Dates - `"May 19 2023"` on PDF page 7. - `"5-20-23"` on PDF pages 9 and 16. - `"April 2022 FISC court order"` on PDF page 11. - `"2018 Renewal / For 6 years"` on PDF page 13. - `"2008 - 2018?"` on PDF pages 9 and 16. ### Strong Date Inference The notebook's primary composition window is **May 15–20, 2023**. Durham's final report was publicly transmitted on May 15, explaining page 1's immediate Durham emphasis. ODNI released the April 2022 FISC opinion on May 19, explaining pages 7–16 and the repeated May 20 event card. The notes therefore appear to record one intense week in which Bryant attended or documented the [[Event - Lake Oswego Explanatory Briefing|Lake Oswego explanatory REDACTED]], captured material from a large report packet, and recorded a framework connecting the origins of the Trump-Russia investigation with a newly disclosed Section 702 compliance controversy. The exact REDACTED date remains unresolved. ### Later Historical Update Section 702 was reauthorized in April 2024 through the Reforming Intelligence and Securing America Act with additional querying reforms. After temporary extensions, the statute lapsed in June 2026, while annual certifications approved by the FISC in March 2026 preserved ongoing acquisitions under those certifications into approximately March 2027.[^section702-2026] This update clarifies the page 14 word `Expires`: sunset and operational termination are related but not always simultaneous. ## Executive Reconstruction This notebook records the REDACTED-driven construction of a **three-layer model of intelligence power**. The model reflects an unidentified REDACTED's explanation and supplied documents together with Bryant's questions and note-taking; it should not be treated as a settled theory authored solely by Bryant. The first layer is **political counterintelligence**: Crossfire Hurricane, Mueller, Durham, Trump, Russia, and Ukraine. The notes capture an explanation of how one inquiry generates successor inquiries and how investigative legitimacy itself becomes contested. The second layer is **collection infrastructure**: ECHELON, Five Eyes, SIGINT, COMINT, ELINT, PRISM, Room 641A, STELLARWIND, and the Special Collection Service. Here the question shifts from political actors to where signals are captured and how national capabilities federate. The third layer is **legal authorization and review**: FISA, FISC, Section 702, USA FREEDOM, amici, probable cause, pen registers, call-detail records, ex parte proceedings, provider orders, and sunset clauses. The REDACTED notes explore which legal membrane separates foreign intelligence from domestic surveillance and which institution checks the checkers. The conceptual trajectory is therefore not random. It moves from **controversial event → hidden collection system → governing law → oversight mechanism → procedural weakness**. The incomplete language reflects the speed of REDACTED-based capture and the density of the material. The architecture is coherent, but its provenance is mixed. ## Chronological and Conceptual Trajectory ### Phase 1 — Investigation of the Investigation Page 1 compresses 2016–2023 into Crossfire Hurricane, Mueller, and Durham. The core concern presented in the REDACTED is recursive legitimacy: an intelligence investigation becomes the object of another investigation. ### Phase 2 — Transnational Collection Networks Pages 2–3 move outward to ECHELON, Five Eyes, UKUSA, Nine Eyes, SIGINT, COMINT, and ELINT. The unit of analysis becomes the alliance and the signal rather than the campaign or individual. ### Phase 3 — Technical Collection Points Page 4 maps provider-assisted collection, backbone interception, presidential surveillance programs, and close-access operations through PRISM, Room 641A, STELLARWIND, and SCS. ### Phase 4 — Statutory and Judicial Architecture Pages 5–8 identify USA FREEDOM, amici, FISA authorities, probable-cause language, call-detail records, and Section 702 certifications. The notebook approaches the distinction between individualized orders and programmatic authorizations. ### Phase 5 — Breaking-News Trigger Pages 9–16 document the May 19–20, 2023 release of the April 2022 FISC opinion and connect it to the 2008 creation, 2018 reauthorization, and impending expiration of Section 702. ### Phase 6 — Procedure and Compelled Intermediaries Page 18 examines ex parte review and the role of service providers, banks, and order recipients. This is the final legal insight: surveillance is often operationalized through third-party custodians who receive the order while the data subject remains absent. ### Phase 7 — Return to Daily Operations Page 19 shifts to a contact/vendor fragment, showing that the notebook remained a mixed-use external memory system. ## Master Entity Index ### Investigations and Political-Legal Events - [[Crossfire Hurricane]] — page 1. - [[Mueller Special Counsel Investigation]] — page 1. - [[Durham Special Counsel Investigation]] — page 1. - Russian interference in the 2016 United States election — page 1. - Carter Page FISA applications — contextual correction to page 1. - April 2022 FISC Section 702 opinion — pages 7, 9, 11, 13, 16. - May 19, 2023 declassification/release — pages 7, 9, 13, 16. - 2018 Section 702 reauthorization — pages 9, 13, 16. ### Intelligence Alliances and Systems - [[Five Eyes]] / FVEY — page 2. - [[UKUSA Agreement]] — page 2. - [[Nine Eyes]] — page 2. - [[Fourteen Eyes]] — page 3. - [[ECHELON]] — page 2. - [[Onyx Intelligence System|Onyx]] — page 2. - [[Frenchelon]] — page 2. - [[PRISM Surveillance Program|PRISM]] — page 4. - [[Room 641A]] — page 4. - [[Special Collection Service]] — page 4. - [[STELLARWIND]] — page 4. ### Intelligence Disciplines - [[Signals Intelligence|SIGINT]] — pages 2–3. - [[Communications Intelligence|COMINT]] — page 3. - [[Electronic Intelligence|ELINT]] — page 3. - [[Foreign Instrumentation Signals Intelligence|FISINT]] — missing category identified in analysis. ### Statutes, Courts, and Procedures - [[Foreign Intelligence Surveillance Act|FISA]] — pages 6, 8, 11–14, 18. - [[Foreign Intelligence Surveillance Court|FISC]] — pages 8–18. - [[FISA Section 702|Section 702]] — pages 8–16. - [[USA FREEDOM Act]] — page 5. - [[USA PATRIOT Act]] — page 4. - [[FISA Amendments Act of 2008]] — pages 8–9, 12–14, 16. - [[Amicus Curiae|amicus curiae]] — page 5. - [[Ex Parte Proceeding|ex parte]] — page 18. - [[Pen Register]] — pages 5–7. - [[Trap and Trace Device|trap-and-trace]] — pages 6–7. - [[Call Detail Records|call-detail records]] — pages 5 and 7. - [[Freedom of Information Act|FOIA]] — page 5. - probable cause — page 6. - foreign power / agent of a foreign power — page 6. - annual certification — page 8. - reverse targeting — page 8. - compelled production/provider directive — pages 6 and 18. ### Institutions - [[Federal Bureau of Investigation|FBI]] — pages 1, 9, 11, 16. - [[National Security Agency|NSA]] — pages 2 and 4. - [[Central Intelligence Agency|CIA]] — page 4 context. - [[Office of the Director of National Intelligence|ODNI]] — page 6 and release context. - [[Attorney General of the United States|Attorney General]] — page 8. - [[Director of National Intelligence|DNI]] — page 8. - [[United States Patent and Trademark Office|USPTO]] — page 17. - [[AT&T]] — page 4. ### People and Unresolved Contacts - [[Robert Mueller]] — page 1. - [[John Durham]] — page 1. - Donald Trump — page 1. - [PERSON REDACTED] — page 19. - [PERSON REDACTED] — page 19. - `[PERSON REDACTED]` — page 19. - `[uncertain: [REDACTED]]` — page 17. ## Technology and Systems Map ```text FOREIGN-INTELLIGENCE PURPOSE | +-- Alliance and tasking layer | Five Eyes / UKUSA | wider sharing circles | +-- Collection discipline | SIGINT | +-- COMINT: communications | +-- ELINT: non-communications emissions | +-- FISINT: telemetry/instrumentation | +-- Collection position | +-- provider/downstream: PRISM | +-- network/upstream: backbone interception | +-- close access: SCS | +-- presidential legacy program: STELLARWIND | +-- Legal authority | +-- traditional FISA individualized orders | +-- pen register / trap-and-trace | +-- business records / CDR production | +-- Section 702 programmatic certifications | +-- Oversight and procedure AG + DNI certification FISC review amici for novel/significant issues ex parte process provider directives/orders congressional sunset and reauthorization ``` The notebook partially discovered this stack but repeatedly crossed the vertical layers. Its historical value is that it captured the **need for the stack** before the categories were fully stabilized. ## People, Companies, Institutions, and Relationship Map - [[Federal Bureau of Investigation|FBI]] opened Crossfire Hurricane; [[Robert Mueller]] later led a special-counsel investigation of Russian interference and related matters; [[John Durham]] later investigated government activity associated with the origins and conduct of the 2016 investigations. - [[National Security Agency|NSA]] is the principal U.S. signals-intelligence agency and a Five Eyes partner; [[Central Intelligence Agency|CIA]] provides human, covert, and operational capabilities and is associated with the joint [[Special Collection Service]]. - [[Office of the Director of National Intelligence|ODNI]] coordinates the intelligence community and authorized the May 2023 public release of FISC materials with DOJ. - The [[Attorney General of the United States|Attorney General]] and [[Director of National Intelligence|DNI]] jointly authorize Section 702 certifications. - The [[Foreign Intelligence Surveillance Court|FISC]] reviews certifications, procedures, and traditional applications; it can demand corrections and appoint amici. - [[AT&T]] appears as the telecommunications intermediary associated with Room 641A evidence. - Electronic communication service providers, banks, and record custodians appear on page 18 as compelled intermediaries rather than necessarily as investigative targets. ## Cross-Notebook Pattern Analysis ### Macro Surveillance and Micro Surveillance `Scanned_20260730-1830` analyzes state-level collection, alliances, law, and oversight. [[Scanned_20260730-1806|Scanned_20260730-1806]], especially pages 14–27, analyzes Android packages, manifests, system privileges, trackers, and developer provenance. Together they form a two-scale surveillance model: **institutional authority above; device and software implementation below**. ### Administrative Tools and Intrusive Tools Share Primitives [[Scanned_20260730-1235|Scanned_20260730-1235]] places Qualys VMDR, Cisco Meraki enrollment, and mSpy in one field, recognizing that telemetry, agents, profiles, permissions, and remote commands can support legitimate administration or intrusive monitoring. The present notebook reaches the same conclusion at the state level: provider compulsion, selector-based querying, and metadata analysis change meaning according to authority, target, purpose, and oversight. ### Platform Governance as Intelligence Governance [[Scanned_20260730-1845|Scanned_20260730-1845]], page 3, draws Oracle, IBM, the Federal Reserve, Apple, Bloomberg, Microsoft, Google, Amazon, OpenAI, China, and social values inside nested governance fields. `Scanned_20260730-1830`, pages 1–2, performs an analogous mapping with Crossfire Hurricane, ECHELON, Five Eyes, and national agencies. Both notebooks are tracing **power as a distributed platform**, not as a single institution. ### Continuity Requires Hidden Joins [[Scanned_20260730-1913|Scanned_20260730-1913]] concludes that continuity depends on preserving hidden joins among identity, configuration, routing, policy, and ownership. The present notebook reveals the same truth in intelligence law: a program name without its collection point, legal authority, target class, query rule, provider, certification, and oversight body is easy to misinterpret. ## What I Was on the Trail Of The strongest unifying interpretation is that the recorded framework was on the trail of **surveillance recursion**: the point at which a foreign-intelligence apparatus can observe political actors, a court can observe the apparatus, inspectors can observe the court and agencies, Congress can reauthorize or constrain the authority, and later investigators can investigate the investigators. The notebook shows Bryant capturing this structure; it does not yet establish which portions came from the REDACTED, the report packet, or Bryant's own prior understanding. The result is a layered cybernetic control problem in which every watcher requires another watcher, while secrecy prevents the whole system from becoming fully observable. The notebook also approached the crucial distinction between **collection and query**. Section 702's legal target is a non-U.S. person abroad, but the resulting repository can contain communications involving U.S. persons. The controversy shifts from who was initially targeted to who can later search, retrieve, disseminate, or use the acquired information. Page 8 was close to naming this architecture but still treated `target`, `acquire`, and `inquire` as variations of one act. A second recognition was that intelligence is structurally **federated**. Five Eyes distributes collection across sovereign partners; PRISM distributes implementation through service providers; Room 641A locates collection inside private network infrastructure; FISC distributes legitimacy through judicial review; congressional sunset distributes final authority back into periodic political decision. No single node is the system. ## What I Missed or Could Not Yet See ### Title I FISA and Section 702 Are Different Legal Machines The page 6 probable-cause standard belongs to traditional individualized FISA orders. Section 702 does not require the FISC to find probable cause for each foreign target. It relies on annual certifications and approved procedures. Conflating them creates false conclusions in both directions. ### Targeting, Acquisition, Querying, Dissemination, and Use Are Different Events A U.S. person may not be a Section 702 target, yet U.S.-person communications can be incidentally acquired, retained under procedures, queried with a U.S.-person selector, disseminated, and potentially used. Each verb has a distinct legal and technical control surface. ### PRISM, Upstream, Room 641A, and STELLARWIND Should Not Share One Parent Label They belong to different eras, technical positions, and authorities. The correct map requires both a historical axis and a collection-point axis. ### FISC Does Not Determine Guilt Page 18's uncertain `People Guilty Slapped` should not be made doctrinal. FISC authorizes or reviews surveillance; criminal guilt is adjudicated elsewhere with different procedural rights. ### Five Eyes Is More Formal Than Nine Eyes and Fourteen Eyes UKUSA has a documented historical agreement and official partner history. Wider `Eyes` labels are useful but less precise public taxonomies of intelligence cooperation. ### USA FREEDOM and FOIA Are Separate USA FREEDOM reformed surveillance authorities and transparency mechanisms; FOIA is the broader public-records statute. Similar names conceal different functions. ### Oversight Is a System, Not a Single Court A complete model includes agency compliance offices, inspectors general, DOJ's National Security Division, ODNI, FISC/FISCR, congressional intelligence and judiciary committees, PCLOB, provider challenges, civil litigation, declassification review, and public-interest research. The notebook centered FISC before seeing the full oversight ecology. ## Early Recognitions, Corrections, and Reinterpretations - **Provenance correction:** much of the notebook is a record of [[Event - Lake Oswego Explanatory Briefing|a Lake Oswego REDACTED]] and a supplied report packet. “Early recognition” below means that the idea appears in Bryant's notes; it does not, without further evidence, establish whether the REDACTED introduced it, Bryant already held it, or Bryant adopted it. - **Early recognition:** global intelligence collection is federated across national agencies rather than housed in one world system. - **Early recognition:** non-content metadata can reveal relationships and routing even when communication content is unavailable. - **Early recognition:** service providers and network operators are operational nodes in state surveillance. - **Early recognition:** the core Section 702 danger is not only foreign targeting but later domestic-person querying. - **Correction:** UKUSA/Five Eyes dates to 1946 and subsequent partner accessions, not 1971. - **Correction:** Onyx is a Swiss system, not an official Swiss branch of ECHELON. - **Correction:** the PATRIOT Act did not universally authorize PRISM, Room 641A, STELLARWIND, and SCS. - **Correction:** the official FISC amicus roster did not contain 12 individuals in May 2023. - **Correction:** FISC is not the Supreme Court and does not determine criminal guilt. - **Reinterpretation:** page 1 is best read as a REDACTED-derived recursive map of investigations, not proof that Russia, Ukraine, Mueller, Durham, and the boxed upper-right cluster formed one coordinated operation or that Bryant endorsed such a claim. - **Reinterpretation:** repeated sticky notes are structural emphasis or scan duplication, not additional independent evidence. ## Prioritized Unresolved Research Agenda 1. Identify the Lake Oswego REDACTED, exact REDACTED date, and report packet; determine which propositions came from speech, the document, or Bryant's own questions and synthesis. 2. Recover the Twitter/X post or article encountered on May 20, 2023; it may resolve pages 7, 9, 11, 13, and 16 or show that part of the notebook was assembled outside the REDACTED. 3. Identify the source of page 1's upper-right boxed cluster and determine whether it belongs to Crossfire Hurricane or was merely written in the same space. 4. Reconstruct the exact source lineage for `Onyx = swiss Echelon`, `Frenchelon`, Nine Eyes, and the unfinished Fourteen Eyes list. 5. Determine what `12 people` referred to on page 5: amici, FISC judges, a source's historical total, or another advisory body. 6. Resolve page 7's `180 days`, `ANI`, and DOJ fragment against the statutory text or source article. 7. Recover the full first numbered restriction on page 8 and the final line concerning U.S.-person information. 8. Resolve page 11's `Fbi Said IR`. 9. Determine the meaning of page 12's `6 I.C.E` and preserve any corrected acronym expansion. 10. Identify the `USPTO / Case / [REDACTED]?` matter on page 17 through private search-history context rather than broad public guessing. 11. Resolve page 18's uncertain procedural phrases from a clearer scan or the original source notes. 12. Match page 19's redacted contact privately to a known trophy/awards vendor without exposing the number. 13. Cross-link later 2024 and 2026 Section 702 developments without projecting them backward into the REDACTED's 2023 explanation. ## Cumulative Master Chronology Update - **1946-03-05:** BRUSA/UKUSA agreement formalized U.K.–U.S. communications-intelligence cooperation. - **1949:** Canada joined UKUSA cooperation. - **1956:** Australia and New Zealand joined, producing the five-partner structure. - **1971:** U.S. Department of Defense directive formalized NSA SIGINT responsibilities and terminology. - **1978:** Foreign Intelligence Surveillance Act created FISA and the FISC. - **2001 onward:** President's Surveillance Program/STELLARWIND era and post-9/11 warrantless-surveillance controversy. - **2006:** Mark Klein's Room 641A evidence became public through EFF. - **2008:** FISA Amendments Act created Section 702. - **2015:** USA FREEDOM Act reformed business-records collection and formalized statutory amici. - **2016-07:** FBI opened Crossfire Hurricane. - **2017-05:** Robert Mueller appointed special counsel. - **2018-01:** Section 702 reauthorized for six years. - **2019-04:** Mueller report publicly released. - **2019-12:** DOJ OIG Crossfire Hurricane/FISA report released. - **2020-10:** John Durham appointed special counsel. - **2022-04-21:** FISC issued the opinion later central to the notebook. - **2023-05-15:** Durham report publicly transmitted. - **2023-05-19:** ODNI/DOJ released the April 2022 FISC opinion and order. - **2023-05-20:** Principal explicit notebook research date. - **2023-05, exact date unresolved:** [[Event - Lake Oswego Explanatory Briefing]]; Bryant reports taking much of this notebook's material during the REDACTED. - **2024-04:** RISAA reauthorized Section 702 and added reforms. - **2026-06:** Section 702 statute lapsed after temporary extensions; existing March 2026 certifications remained operative into approximately March 2027. ## Self-Contained Archival Narrative `Scanned_20260730-1830.pdf` preserves an intense May 2023 explanatory encounter concerning the machinery connecting political investigation, global signals intelligence, communications infrastructure, surveillance statutes, and secret judicial review. Bryant reports that an unidentified REDACTED met him in Lake Oswego, brought a large printed report packet, and attempted to explain what they believed he had been caught up in. Bryant's handwritten pages are therefore substantially REDACTED notes—not solely independent research and not proof that he accepted the REDACTED's proposed explanation. The packet may have been the Durham report or a compilation built around it. The notebook opens with Crossfire Hurricane, Mueller, and Durham because the REDACTED's framework and supplied material began with contested investigative legitimacy: how did an investigation of Russian interference begin, what did the Mueller investigation establish, and what did Durham conclude about the institutions that launched and managed the earlier inquiry? The notes then descend into infrastructure. ECHELON and Five Eyes reveal that intelligence is multinational. SIGINT, COMINT, and ELINT reveal that `intelligence` is not one kind of information but a family of transformations applied to communications and electronic emissions. PRISM, Room 641A, STELLARWIND, and the Special Collection Service reveal that collection can occur through service providers, backbone infrastructure, presidentially authorized programs, and close-access operations. The technical system then forces a legal question: which authority governs each collection point? USA FREEDOM, FISA, FISC, Section 702, amici, probable cause, pen registers, call-detail records, and ex parte review are the notebook's answer-in-progress. The writer correctly saw that a secret court and compelled private intermediaries form part of the surveillance architecture, not merely its external oversight. The May 19, 2023 release of the April 2022 FISC opinion supplied the catalytic evidence: even when foreign targeting is lawful, later FBI queries can become noncompliant at scale. The central issue therefore shifts from `Who was targeted?` to `Who could search the resulting archive, under what standard, with what record, and who would know if the standard was violated?` The notebook's deepest historical contribution is this recognition of **recursive governance**. Intelligence agencies watch foreign targets; courts watch intelligence agencies; inspectors and oversight offices watch compliance; Congress periodically reauthorizes the authority; journalists and civil-liberties organizations watch the watchers; and special counsels may investigate the investigators. Yet each layer sees only part of the system, and secrecy makes the system globally difficult to audit. The notes are rough, but they are on the trail of an advanced institutional problem: how to construct an intelligence capability powerful enough to detect distributed threats while making its own queries, selectors, justifications, provider directives, and uses sufficiently observable to prevent political or domestic misuse. ## Linked Notes Created or Referenced ### People [[Robert Mueller]] · [[John Durham]] · [[Donald Trump]] · [[Mark Klein]] · [PERSON REDACTED] · [PERSON REDACTED] ### Investigations and Events [[Crossfire Hurricane]] · [[Mueller Special Counsel Investigation]] · [[Durham Special Counsel Investigation]] · [[Russian Interference in the 2016 United States Election]] · [[April 2022 FISC Section 702 Opinion]] ### Institutions and Alliances [[Federal Bureau of Investigation]] · [[National Security Agency]] · [[Central Intelligence Agency]] · [[Office of the Director of National Intelligence]] · [[Foreign Intelligence Surveillance Court]] · [[Foreign Intelligence Surveillance Court of Review]] · [[Five Eyes]] · [[UKUSA Agreement]] · [[United States Patent and Trademark Office]] · [[AT&T]] ### Intelligence Systems and Programs [[ECHELON]] · [[Onyx Intelligence System]] · [[Frenchelon]] · [[Nine Eyes]] · [[Fourteen Eyes]] · [[PRISM Surveillance Program]] · [[Room 641A]] · [[Special Collection Service]] · [[STELLARWIND]] · [[President's Surveillance Program]] ### Intelligence Disciplines [[Signals Intelligence]] · [[Communications Intelligence]] · [[Electronic Intelligence]] · [[Foreign Instrumentation Signals Intelligence]] ### Statutes, Legal Authorities, and Procedures [[Foreign Intelligence Surveillance Act]] · [[FISA Amendments Act of 2008]] · [[FISA Section 702]] · [[USA FREEDOM Act]] · [[USA PATRIOT Act]] · [[Freedom of Information Act]] · [[Amicus Curiae]] · [[Ex Parte Proceeding]] · [[Pen Register]] · [[Trap and Trace Device]] · [[Call Detail Records]] · [[Probable Cause]] · [[Foreign Power]] · [[Agent of a Foreign Power]] · [[Reverse Targeting]] · [[Electronic Communication Service Provider]] · [[Section 702 Certification]] ### Recurring Concepts [[Surveillance Recursion]] · [[Secret Oversight]] · [[Distributed Sovereignty]] · [[Metadata]] · [[Query Governance]] · [[Provider Compulsion]] · [[Control-Plane Continuity]] · [[Privacy with Auditability]] --- # Sources [^crossfire-oig]: U.S. Department of Justice, Office of the Inspector General, *Review of Four FISA Applications and Other Aspects of the FBI's Crossfire Hurricane Investigation*, December 2019. https://oig.justice.gov/sites/default/files/reports/120919-examination.pdf [^mueller-report]: U.S. Department of Justice, *Report on the Investigation into Russian Interference in the 2016 Presidential Election*, 2019. https://www.justice.gov/archives/sco/file/1373816/dl?inline= [^durham-report]: U.S. Department of Justice, *Report on Matters Related to Intelligence Activities and Investigations Arising Out of the 2016 Presidential Campaigns*, May 2023. https://www.justice.gov/storage/durhamreport.pdf [^durham-letter]: Attorney General Merrick B. Garland, letter transmitting the Durham report, May 15, 2023. https://www.justice.gov/storage/20230515aggarlandletter.pdf [^ukusa-nsa]: National Security Agency, *UKUSA Agreement Release*. https://www.nsa.gov/Helpful-Links/NSA-FOIA/Declassification-Transparency-Initiatives/Historical-Releases/UKUSA/ [^ukusa-gchq]: GCHQ, *A Brief History of the UKUSA Agreement*. https://www.gchq.gov.uk/information/brief-history-of-ukusa [^echelon-eu]: European Parliament, *The ECHELON Affair* and the 2001 parliamentary investigation/resolution. https://historicalarchives.europarl.europa.eu/files/live/sites/historicalarchive/files/03_PUBLICATIONS/03_European-Parliament/01_Documents/the-echelon-affair-en.pdf [^onyx-swiss]: Swiss Federal Assembly, Delegation of the Control Committees, *Système d’interception des communications par satellites … projet «Onyx»*, report of November 10, 2003. https://www.parlament.ch/centers/documents/fr/ed-pa-gpd-onyx-f.pdf [^sigint-nsa]: National Security Agency, *Signals Intelligence (SIGINT) Overview*. https://www.nsa.gov/Signals-Intelligence/Overview/ [^dod-sigint]: U.S. Department of Defense Directive 5100.20, December 23, 1971, defining SIGINT, COMINT, ELINT, and TELINT. https://www.nsa.gov/portals/75/documents/news-features/declassified-documents/nsa-60th-timeline/1970s/19711223_1970_Doc_3983926_DODDir5100.pdf [^elint-nsa]: National Security Agency, *Electronic Intelligence (ELINT) at NSA*. https://www.nsa.gov/portals/75/documents/about/cryptologic-heritage/historical-figures-publications/publications/misc/elint.pdf [^pclob-702]: Privacy and Civil Liberties Oversight Board, *Report on the Surveillance Program Operated Pursuant to Section 702 of the Foreign Intelligence Surveillance Act*, July 2014. https://documents.pclob.gov/prod/Documents/OversightReport/823399ae-92ea-447a-ab60-0da28b555437/702-Report-2.pdf [^room641a]: Electronic Frontier Foundation, Room 641A / Mark Klein evidence and litigation history. https://www.eff.org/nsa-spying [^stellarwind-oig]: Inspectors General of the Department of Defense, Department of Justice, CIA, NSA, and ODNI, *Unclassified Report on the President's Surveillance Program*, July 10, 2009. https://oig.justice.gov/reports/report-presidents-surveillance-program-unclassified-prepared-offices-inspectors-general [^scs-document]: National Security Archive, declassified/leaked historical material concerning the Special Collection Service. https://nsarchive.gwu.edu/sites/default/files/documents/rd5srx-24a6q/ciasignals_41.pdf [^fisc-amici]: United States Foreign Intelligence Surveillance Court, *Individuals Designated as Eligible to Serve as an Amicus Curiae*. https://www.fisc.uscourts.gov/amici-curiae [^usafreedom-pclob]: Privacy and Civil Liberties Oversight Board, *Report on the Government's Use of the Call Detail Records Program Under the USA FREEDOM Act*. https://documents.pclob.gov/prod/Documents/OversightReport/87c7e900-6162-4274-8f3a-d15e3ab9c2e4/PCLOB%20USA%20Freedom%20Act%20Report%20%28Unclassified%29.pdf [^fisc-about]: United States Foreign Intelligence Surveillance Court, *About the Foreign Intelligence Surveillance Court*. https://www.fisc.uscourts.gov/about-foreign-intelligence-surveillance-court [^section702-release]: Intelligence.gov, *Release of Two FISC Decisions Authorizing Novel Intelligence Collection*, May 19, 2023. https://www.intel.gov/ic-on-the-record-database/declassified/release-of-two-fisc-decisions-authorizing-novel-intelligence-collection [^fisc-release]: Office of the Director of National Intelligence / Department of Justice, May 19, 2023 release of the April 2022 FISC opinion and order; see the official release above and the declassified opinion collection. https://www.intelligence.gov/assets/documents/702-documents/declassified/2023/ [^fisc-explainer]: Benjamin Broukhim, *FISA Court's Section 702 Opinion and Memo, Explained*, Lawfare, May 2023. https://www.lawfaremedia.org/article/fisa-court-s-section-702-opinion-and-memo-explained [^section702-2026]: Later-history synthesis based on the March 2026 FISC certifications and June 2026 statutory lapse: Brennan Center, *Section 702 of the Foreign Intelligence Surveillance Act*; Reuters, *A key surveillance law is expiring*; and ODNI annual transparency reporting. https://www.brennancenter.org/our-work/research-reports/section-702-foreign-intelligence-surveillance-act