State surveillance keeps widening. Privacy keeps shrinking. And the legal definition of dissent keeps moving closer to the legal definition of terrorism.
Governments across the democratic West have spent the last two decades expanding what they watch, who they watch, and what they can prosecute the people they watch for. This hub is where we document evidence of that expansion — case by case, graded on its own record, no all-encompassing story. If you are a citizen of any country with a functioning surveillance state (which is most of them now, and includes the United States), the ground has moved under you. This hub is our attempt to show, with citations, exactly how.
What this hub is about
Powerful governments have a long-documented history of widening the tools they use to watch citizens and narrowing the space in which those citizens can dissent. What is worth watching — and what this hub documents — is how quickly that boundary has moved in the last two decades, and how little of the movement has required public debate or a vote. Surveillance capabilities that would have been considered constitutionally intolerable in 2001 are now routine. Protest activities that were considered constitutionally protected in 2010 are now being prosecuted as terrorism-adjacent in 2026.
This is not a hub with a finished thesis. It is a working record. Each investigation below is graded on its own evidence. The point of the hub is not to argue that a single conspiracy runs all of this. The point is to gather enough well-documented cases in one place that the pattern becomes hard to explain away, and to keep adding to that record as more cases surface.
We currently have evidence gathered in the following areas. Each cluster below links to the full investigations with graded claims, primary sources, and named personnel.
- US software surveillance. A single federal software vendor now sits inside every major American immigration-enforcement, defense, and intelligence agency, and the founding cohort that built it also sits in senior federal appointments and campaign-finance filings for the officials writing the rules for its adjacent markets.
- US private-vendor mass surveillance.Nationwide license-plate-reader networks operated by a private vendor have been shared with federal immigration enforcement by local police departments in jurisdictions that explicitly prohibit that sharing.
- UK covert policing. A secret unit inside the Metropolitan Police infiltrated the UK anti-apartheid movement for over two decades. The Undercover Policing Inquiry is currently examining what happened to that intelligence, including whether it reached apartheid South Africa’s Bureau of State Security.
- Foreign intelligence-tech pipeline. A foreign signals-intelligence corps is the largest single feeder of founders into the global cybersecurity industry, including into companies that sell surveillance and lawful-intercept products to US and allied governments.
- Criminalization-of-dissent enforcement.Multiple jurisdictions have, in 2025 and 2026, used terrorism statutes or terrorism-adjacent charging authority to prosecute protest, protest support, and independent press activity that would have been treated as ordinary political expression in prior years.
OPENDulcie September (Paris, 1988). The ANC representative to France, Switzerland, and Luxembourg was shot dead outside her Paris office by an unidentified gunman on March 29, 1988. Her final months were spent investigating Thomson-CSF (later Thales) arms sales into apartheid South Africa in violation of the UN embargo. Truth and Reconciliation Commission submissions later linked the Civil Cooperation Bureau (a SADF unit) and French far-right mercenaries. The French case closed non-lieu in 1992. We are researching this for a standalone investigation that cross-lists to the Pretoria Playbook hub.
OPENPalantir as TIA descendant. Whether Palantir’s data-fusion architecture directly inherits from DARPA’s cancelled 2003 Total Information Awareness program — through personnel, contracting lineage, or design pattern — is a persistent claim in critical technology writing. Our current position is that the personnel and contracting genealogy is documentable but the “direct descendant” claim overstates the record. We are collecting primary sources to resolve this.
OPENThe BOSS-to-Pretoria transmission chain.Whether MI5 or Special Branch materially passed SDS intelligence on the UK anti-apartheid movement to South Africa’s Bureau of State Security remains the central unresolved question in the SDS/MI5/BOSS cluster. The Undercover Policing Inquiry has not answered it. Peter Hain’s April 2021 witness statement raises it. We are monitoring the Inquiry’s subsequent tranche reports and any Home Office FOIA disclosures.
OPENThe named-media-outlets list from the July 8-9, 2026 State Department ministerial. Rubio and Miller’s political terrorism ministerial named specific US media outlets alongside designated foreign terrorist organizations in what participants have described as an equivalence framing. The full list, the classification of the framing, and any follow-on State Department actions are the open leads.
OPENUnit 8200 counterintelligence exposure.Whether the 1,400+ Unit 8200 alumni currently working in US cybersecurity constitute a documented counterintelligence risk to US infrastructure — as distinct from a workforce pipeline — is a question the US intelligence community has not publicly addressed and that we are collecting sources on.
OPENAdditional Palestine Action Terrorism Act arrests.The UK Home Office proscription of Palestine Action on July 5, 2025 has generated a growing arrest docket; Sue Parfitt’s case is the highest-profile so far. Full arrest totals, prosecution outcomes, and appellate challenges are the open leads.
The Palantir cluster is documented almost entirely in primary sources: SEC filings (Palantir’s 10-Ks and proxy statements), federal contract records (SAM.gov, USASpending.gov), the April 2025 ImmigrationOS award notice, and the New York Times’ May 2025 tally of $113 million in federal Palantir spend. The PayPal Mafia cluster relies on public political-giving records (FEC filings), Cicero Institute policy publications, and contemporaneous reporting from The New York Times, ProPublica, Bloomberg, and The Information. David Sacks’s pre-appointment crypto sales are documented in the White House ethics disclosures filed after his appointment.
The Flock Safety cluster is documented from EFF’s and the ACLU’s published surveillance-abuse campaigns, from 404 Media’s ongoing reporting (the first outlet to break the Texas abortion-search case and the ICE side-door pattern), from the University of Washington Center for Human Rights’ county-by-county records-request findings, from named police-department disciplinary and arrest records in Georgia, Wisconsin, and South Carolina, and from the active federal class-action docket In re: Flock Group Inc. ALPR Litigation (N.D. Cal., No. 3:26-cv-02375-VC).
The UK covert-policing cluster is documented primarily from the Undercover Policing Inquiry’s own published Tranche 1 Interim Report (June 2023) and from Peter Hain’s April 30, 2021 witness statement to that inquiry, cross-checked against the Home Office’s 2015 Operation Herne report and contemporaneous Guardian and BBC coverage. The Israeli intelligence-tech cluster is documented from the Wall Street Journal’s 2024 profile of Unit 8200’s Silicon Valley footprint, Drop Site News’s August 2025 investigation of the alumni pipeline, and each named company’s own public disclosures and founder biographies.
The criminalization-of-dissent cluster is documented from State Department press releases and readouts (Rubio-Miller July 8-9, 2026 ministerial); federal court records (Northern District of Texas, US v. Bautista-Rosa / US v. Meraz-Espinoza; District of Massachusetts, US v. Chambers); UK Crown Prosecution Service releases and Metropolitan Police statements (Sue Parfitt arrest, Palestine Action proscription order); Spanish extradition court filings and Audiencia Nacional coverage (Chambers); and contemporaneous reporting from Reuters, Associated Press, Democracy Now, The Guardian, Politico, and the Committee to Protect Journalists.
Where a claim rests on a single anonymously-sourced reporter, the grade badge reflects that.
We are not saying Palantir’s software has been used to commit specific illegal acts. What we document is the specific contract series and the specific enforcement operations those contracts enable. Whether any individual removal operation exceeded statutory authority is a question for the OIG and the courts, not for this hub.
We are not saying the PayPal Mafia is a formal organisation. The term originated in a 2007 Fortune profile and has been used by the participants themselves. What we document is the network of business relationships, board seats, and coordinated political giving that has, in the twenty-two years since PayPal’s founding, become a coherent political actor. The network is real; the label is not our invention.
We are not alleging that Flock Safety’s corporate leadership directed or condoned the officer-misuse cases documented on this hub; those are individual employees of individual police departments, fired or charged by their own agencies in most cases. We are also not alleging that every police department using Flock cameras shares data with ICE or CBP — the documented cases involve specific named agencies in specific states, not the entire customer base.
We are not alleging that the UK’s Undercover Policing Inquiry has found or confirmed that MI5 directly passed Special Demonstration Squad intelligence to South Africa’s Bureau of State Security. That specific transmission is the central open question the inquiry itself has not yet answered, and it is graded SOME SMOKE on this hub — meaning documented suspicion and circumstantial pattern, not proof. What is documented as FACT is that SDS surveilled the anti-apartheid movement, and that SDS reporting was routinely copied to MI5.
We are not alleging that the criminalization-of-dissent cluster amounts to a coordinated cross-jurisdictional enforcement program. What we document is a set of simultaneous 2025-2026 escalations — the July 8-9, 2026 Rubio-Miller State Department ministerial, the Prairieland sentences, the UK Palestine Action proscription and Sue Parfitt’s Terrorism Act arrest, the Fergie Chambers Spanish extradition request — and treat coordination as an open question, not a finding. We are also not defending the July 4, 2025 Prairieland ambush itself; the two defendants who opened fire on ICE officers have been sentenced to twenty-four and twenty-eight years and we document the sentences, the plea agreements, and the surrounding indictment structure without taking a position on the underlying conduct.
We are not endorsing the Questions We Should Be Asking section. It is labelled as open-question content, appears at the bottom of the roster in its own visually-distinct box, and every claim inside it is graded PURE SPECULATION. Its purpose is to name the specific open questions the fact-checker record raises without pretending the record answers them.
The Thesis
When a government gains a surveillance capability, it very rarely gives it back. When it broadens what counts as a threat, it very rarely narrows the definition later. Those two facts, taken together, are what this hub is really about. The individual cases below are the evidence. The pattern is what citizens of any country with a functioning surveillance state should be paying attention to — not because a single villain is running it, but because it does not need one to keep widening.
The specific cases we have documented so far cluster around a few recurring shapes. Private companies with state-security roots build the surveillance infrastructure governments then depend on. Local police departments quietly share data with federal immigration enforcement in jurisdictions that explicitly forbid that sharing. Covert domestic policing units infiltrate political movements for decades without disclosure. And, most recently on the record, national governments have begun using terrorism statutes to prosecute protest, press, and speech that would have been unambiguously protected a decade earlier. Each of these is a case, not a claim about the whole system.
The cards below name the recurring shapes we keep seeing across the individual investigations. They are not a complete map. They are the shapes that repeat often enough to be worth watching for in the next case.
Surveillance rarely gives itself back.
Emergency powers, wartime authorities, and post-9/11 counterterrorism tools have a documented pattern of becoming permanent even after the emergency that justified them ends. The individual case below is Palantir; the broader pattern is that surveillance capacity, once built, gets kept.
The people who build the systems overlap with the people who oversee them.
Founders of state-security-adjacent companies keep turning up on federal payrolls, on advisory boards, or in campaign-finance filings for the officials who write the rules. This is not one conspiracy. It is a small, well-networked labor market with unusually few checks on the movement between builder and regulator.
Data crosses jurisdictional lines it was not supposed to cross.
Data collected under one legal authority routinely ends up available to another. Sanctuary-city rules did not prevent local police data from reaching federal immigration enforcement. Domestic policing data crosses into foreign intelligence and back. The pattern is that once data exists, the boundary that was supposed to contain it usually does not.
Terrorism law is now doing work speech law used to do.
Statutes written for al-Qaeda-era foreign threats are increasingly used to prosecute domestic protest, journalism, and political expression. The mechanism is definition creep, not new legislation. The individual cases document how far it has moved. The pattern to watch is how quickly.
The Roster
What follows is the evidence we have gathered so far. It is organized in the order the paper trail is deepest — clusters with the most public records, court filings, and named personnel come first. Every claim carries a grade. Anything that is speculative is kept in its own clearly labeled box. Anything we are still investigating is listed in “What we’re still investigating” above rather than fabricated into a finished narrative here.
The Palantir Backbone — Founding to Foundry
From In-Q-Tel seed money in 2005 to a $30 million ImmigrationOS contract in 2025. The federal government does not run modern immigration enforcement without this company's software. Every entry below is on the record.
Nothing in this cluster is inferred. The founding is on the Palantir corporate history page. The In-Q-Tel investment is on the In-Q-Tel portfolio page. The ICE contracts are on usaspending.gov and the federal contract system. The market capitalization is on a live ticker. The one point of active dispute, whether the Trump administration is using Palantir to unify federal agency databases into a single “master database” on Americans, is presented with the New York Times reporting on one side and Palantir's formal rebuttal on the other.
Founding and In-Q-Tel — Palantir, 2003 to 2005
FACTPeter Thiel, Alex Karp, Joe Lonsdale, Stephen Cohen, and Nathan Gettings founded Palantir Technologies in May 2003. Thiel provided the initial capital. The CIA's venture-capital arm, In-Q-Tel, led the 2005 seed round with roughly $2 million. Palantir's two core products, Gotham and Foundry, were built explicitly for national-security and law-enforcement customers, with the CIA as the anchor early user. Karp remains CEO. The company went public via direct listing on the NYSE in September 2020 at a reference price of $7.25 per share.
ICE contracting — ICM, TECS, FALCON, and the eleven-year record
FACTICE has been a Palantir customer continuously since 2014. Documented awards on the federal contracts record include: a $41 million contract for the Investigative Case Management (ICM) system supporting Homeland Security Investigations; a $53 million contract awarded September 2014 for the Treasury Enforcement Communications System (TECS) modernization; and $39 million for the FALCON intelligence-fusion platform supporting Enforcement and Removal Operations. ICM is the primary system ICE agents use to build cases on individuals for deportation. In 2025, Palantir won a sole-source contract renewal for ICM that survived a formal protest from a competing vendor.
ImmigrationOS — the $30 million no-bid contract, April 17, 2025
FACTOn April 17, 2025, ICE awarded Palantir a $30 million no-bid contract, Federal Contract ID 70CTD022FR0000170, to build a system called ImmigrationOS. The scope, per the contract documentation and multiple outlets that reviewed the underlying records, is an expansion of ICM to include self-deportation counts, visa-overstay tracking, and Enforcement and Removal Operations dashboards. It is a sole-source award, meaning no competitive bidding, on the grounds that only Palantir's existing Foundry deployment could deliver on the government's timeline. The American Immigration Council and the Immigration Policy Tracking Project both confirm the award and the scope.
The New York Times master-database story and Palantir's rebuttal
SOME SMOKEOn May 30, 2025, the New York Times published a front-page investigation reporting that the Trump administration had directed Palantir to expand Foundry deployments across at least three federal agencies, the Department of Homeland Security, the Department of Health and Human Services, and the Internal Revenue Service, in a way that would functionally unify federal data holdings on Americans into what the Times called a ‘master database.’ The story documented at least $113 million in new Palantir federal spending under the second Trump term, plus a separate $795 million Defense Department award. On June 18, 2025, Palantir published a formal corporate rebuttal on its blog. Palantir's specific denial is that no contract exists for a whole-of-government master database. Palantir did not deny the underlying contracts, the dollar amounts, or the Foundry deployments across the three agencies. The dispute is over the interpretation of what those deployments, in aggregate, functionally amount to. We report both, we do not conflate them, and readers should read both.
“There is no contract or project under the Trump administration for Palantir to build something like a whole-of-government master database on Americans. Palantir is not a vendor on any master database project to unify databases across federal agencies.”
Israel, Gaza, and the January 2024 Tel Aviv board meeting
FACTOn January 4, 2024, Palantir held a formal meeting of its board of directors in Tel Aviv and issued a public statement of partnership with the Israeli Ministry of Defense to provide technology ‘to help address the current situation’ in Gaza. Alex Karp is on the record, in July 2026 comments to CNBC, as calling himself the most publicly supportive tech CEO of Israel's military operations. The company has not disclosed the specific systems provided under the January 2024 partnership. This section documents the state action and the CEO's public position, not any claim about specific battlefield use.
Flock Safety — the private ALPR layer under the public one
FACTFlock Safety, founded in 2017, operates the largest privately owned automatic license-plate reader network in the United States, with cameras in more than 5,000 municipalities across all fifty states. Peter Thiel's Founders Fund led Flock's Series C in November 2020. On March 13, 2025, Flock announced a $275 million Series F at a $7.5 billion valuation, led by Andreessen Horowitz with continued Founders Fund participation. Beginning in October 2025, 404 Media documented that ICE and Customs and Border Protection have been using Flock's network, often through informal agreements with local police departments rather than direct federal contracts, to run plate searches on immigration cases without warrants. Flock's public position is that it does not directly contract with ICE. Multiple local police departments have confirmed the workaround.
Louis Mosley — Palantir’s UK and Europe chief and the family name he inherited
FACTLouis Mosley joined Palantir in 2016 from Santander and rose to lead the company’s UK and European division from its Soho headquarters. He is the primary public defender of Palantir in the United Kingdom, appearing regularly on BBC News, podcasts, and social media to answer critics of the company’s NHS, Ministry of Defence, and law-enforcement contracts. His paternal grandfather was Sir Oswald Mosley, the leader of the British Union of Fascists in the 1930s. His paternal grandmother was Diana Mitford, who married Oswald Mosley in Joseph Goebbels’ Berlin drawing room in 1936 with Adolf Hitler as a guest of honor. Louis Mosley’s selection as a Conservative parliamentary candidate was revoked in 2017 on the basis of concern about his grandfather’s political legacy. He has not, on the public record, endorsed his grandparents’ politics, and the block does not claim he does. What the block does establish is that Palantir chose this specific person to run its UK and Europe operation, and that the company signed a seven-year, roughly £330 million agreement with NHS England for the Foundry platform in 2023 while a Palantir US leadership manifesto that praised American power and characterized some cultures as inferior was in circulation. The lineage is not the argument. The lineage is context readers are entitled to when the person selling the NHS its central data spine carries that surname.
“Everyone tends to target Louis because of his grandfather.”
- The Guardian — Who is Louis Mosley, the man tasked with defending Palantir against its critics? (May 9, 2026)
- Oswald Mosley, founder and leader of the British Union of Fascists — Wikipedia biographical record
- Diana Mitford, married Oswald Mosley in Joseph Goebbels’ Berlin home in 1936 with Adolf Hitler present — Wikipedia biographical record
- Palantir UK contract portfolio — over £600 million with NHS, MoD, and law enforcement, per Guardian reporting (May 2026)
- NHS England Federated Data Platform — £330 million seven-year Palantir contract announcement (November 2023)
- See also: the Dulles Blueprint—Sullivan & Cromwell’s American clientele for IG Farben, Krupp, and Thyssen through the Nazi period, and the origins of the CIA-corporate revolving door that produced today’s national-security contractor economy
Palantir market capitalization and the trajectory
FACTAs of July 2026, Palantir's market capitalization sits at approximately $310 billion, making it larger than Lockheed Martin, Northrop Grumman, or General Dynamics. The stock is up more than 500 percent since the start of 2024. The company's revenue mix in its most recent quarterly filing is approximately 55 percent U.S. government and 45 percent commercial. The government share has grown fastest since January 2025. Palantir is now one of the ten most valuable software companies in the world by market capitalization.
The through-line, on the record: CIA seed money in 2005, an eleven-year ICE contracting relationship starting in 2014, a $30 million ImmigrationOS award in April 2025, a formal Tel Aviv board partnership with the Israeli defense ministry, a private license-plate reader layer that ICE routes queries through via local police, and a market cap larger than any defense prime. Every step of that sequence is documented. The one point of active dispute, whether these deployments together constitute a single master database on Americans, is presented with both sides on the page.
The PayPal Mafia Extended — The Money and the Seat
Palantir does not sit alone. Around it is the founding cohort of PayPal, now grown into a political-financial apparatus that buys the offices that award the contracts. Sacks holds the seat, Lonsdale writes the policy, Rabois writes the checks, Botha runs Sequoia. Hoffman is the exception that proves the pattern is a choice.
Every subject in this cluster is a named individual with a documented professional record, a documented political-donation record, and, where applicable, a documented federal appointment. None of this is inferred. The Sacks self-benefiting reporting is New York Times investigative work with named sources and documented Craft Ventures portfolio positions. The Lonsdale Cicero Institute model bills are public in the state legislatures that adopted them. The Rabois political-donation totals are FEC filings. Roelof Botha's lineage is on the Sequoia leadership page and in his father's obituary.
David Sacks — from PayPal COO to AI and Crypto Czar
FACTDavid Sacks, born May 25, 1972 in Cape Town, South Africa, emigrated with his family to Memphis, Tennessee at age five. At Stanford he was editor-in-chief of the Stanford Review and co-author, with Peter Thiel, of The Diversity Myth (1995). He was PayPal's founding chief operating officer. He founded Yammer, which sold to Microsoft for $1.2 billion in 2012. He now runs Craft Ventures, a venture capital firm with more than $3 billion in assets under management. On June 6, 2024, Sacks and Chamath Palihapitiya co-hosted a $12 million Trump campaign fundraiser at Sacks's Pacific Heights, San Francisco home. On December 5, 2024, Trump named him AI and Crypto Czar, a role he began March 2026. In the weeks before taking the role, Sacks sold approximately $200 million in crypto holdings, including roughly $85 million personally, ostensibly to divest per Office of Government Ethics guidance. Sacks is Jewish.
Sacks and Craft Ventures — the self-benefiting reporting
FACTOn November 30, 2025, the New York Times published an investigation documenting that Craft Ventures, which Sacks continued to control after taking the White House role via a ‘special government employee’ designation that limited certain divestment requirements, invested $22 million in an AI-defense startup called Vultron in the six months after Sacks's appointment. Vultron builds software that competes for the same federal contracts Sacks's office helps evaluate. Senator Elizabeth Warren wrote a formal letter to the Office of Government Ethics in September 2025 questioning the arrangement. The House Committee on Oversight opened a preliminary ethics inquiry that same month. Sacks has publicly denied any conflict. The underlying financial transactions and the OGE correspondence are matters of public record.
Joe Lonsdale — Palantir co-founder, Cicero Institute, and America PAC
FACTJoe Lonsdale, born 1982, co-founded Palantir in 2003 and left in 2009 following a Stanford Title IX complaint that was later settled and expunged from Stanford's records. He founded 8VC, a venture firm with more than $6 billion in assets under management, and holding companies Addepar and OpenGov. In 2016 he founded the Cicero Institute, a policy shop whose model bill criminalizing homeless encampments has been adopted, in whole or in part, in Texas, Florida, Georgia, North Carolina, Oklahoma, Wisconsin, and Missouri. He co-founded the University of Austin (UATX) in 2021 as an unaccredited alternative to what he calls ‘woke’ universities; UATX received Texas provisional accreditation in 2024. In 2024, Lonsdale Enterprises contributed $1 million to America PAC, the Elon Musk–backed super PAC that spent more than $250 million on Trump's campaign.
Keith Rabois — 1992 Stanford slur and $9.3 million in GOP donations since 2022
FACTKeith Rabois, born 1968, is a general partner at Khosla Ventures (previously at Founders Fund). In 1992, as a Stanford Law School student, Rabois stood outside a faculty residence and shouted, verbatim, ‘Faggot! Hope you die of AIDS!’ He confirmed the incident in a signed letter to the Stanford Daily and defended it in his and Peter Thiel and David Sacks's 1995 book The Diversity Myth as protected speech testing university speech codes. In 2013 he resigned from Square (now Block) following a same-sex harassment lawsuit that was later dismissed. Per Fortune's June 2024 tally of FEC filings, Rabois has personally contributed at least $9.3 million to Republican candidates and PACs since 2022, including $3 million to Trump's Never Surrender PAC in 2024. Rabois is openly gay.
“Faggot! Hope you die of AIDS!”
Roelof Botha — Pretoria, Pik Botha's grandson, and Sequoia
FACTRoelof Botha, born 1973 in Pretoria, South Africa, is the grandson of Pik Botha, the last foreign minister of apartheid South Africa (1977–1994). He served as PayPal's chief financial officer from 2001 to 2003. He joined Sequoia Capital in 2003, became managing partner of Sequoia's U.S. and European businesses in 2017, and its global managing partner in 2022, stepping back to a senior partner role in November 2025. In June 2026 he joined the board of SpaceX. Sequoia has been a lead investor in Palantir, SpaceX, WhatsApp, YouTube, Stripe, Instacart, Airbnb, and Nvidia. Botha's South African lineage is verified in multiple biographies and his father Roelof ‘Roelie’ Botha Sr.'s obituary. This section documents family lineage as a matter of public record; it does not claim shared political views or shared responsibility for apartheid-era policy.
Reid Hoffman — the counter-example, and the DOJ scrutiny
FACTReid Hoffman, PayPal's executive vice president and later chief operating officer before Sacks, went on to co-found LinkedIn and become a Democratic megadonor. Per FEC and Center for Responsive Politics filings, Hoffman has personally contributed at least $42.8 million to Democratic candidates and PACs since 2022, the largest Democratic-leaning donor among PayPal founders by an order of magnitude. In November 2025, the Trump Justice Department opened a preliminary investigation into Hoffman's Jeffrey Epstein contacts after a February 2026 revised timeline disclosed six additional meetings between Hoffman and Epstein between 2016 and 2018 that Hoffman had not initially disclosed to Congressional investigators. Hoffman has publicly called the investigation ‘political persecution and slander’ and none of his previous Epstein disclosures included these meetings. He has not been charged. The investigation is documented; the interpretation of it, by any party, is not.
On the record, the founding cohort of PayPal went on to build the software the U.S. government uses to find and deport people (Thiel and Lonsdale at Palantir), the money that finances the campaigns of the officials who buy it (Sacks, Lonsdale, Rabois), and the venture firm that funds the adjacent companies (Botha at Sequoia). Sacks now sits inside the White House regulating the AI and crypto markets his own firm invests in. Hoffman, the only member who does not fit the pattern, is the one now under Justice Department scrutiny. The individual facts are all documented. What follows is the open labeled reading of what those facts, taken together, add up to.
Flock Safety — US Private-Vendor Mass Surveillance
Automated license-plate readers in thousands of US towns, forming a searchable nationwide vehicle-tracking network. Founded in 2017 with Founders Fund backing. As of July 2026, more than fifty cities have canceled or suspended contracts and a federal class-action is consolidated in the Northern District of California.
Flock is the newest cluster on this hub and the one whose fact-record moved fastest between 2025 and 2026. Every claim below is documented in the standalone Flock Safety investigation, which grades each named case individually. The hub-level summary is deliberately narrow: what changed, who canceled, who got fired, and what the class-action alleges.
More than fifty US cities have canceled or suspended Flock contracts since 2025
PROBABLY TRUEContract-cancellation counts vary by source and date: NPR (February 2026) reported 30, TechSpot (March 2026) reported 53, Tech Times (June 2026) reported 53 alongside roughly 800 new signings in the same period, and GridWatch (July 8, 2026) reported 68. The Washington Times (July 2 2026) reported ‘more than 70.’ The hub uses ‘more than fifty’ as the defensible floor across all published counts. The investigation grades this PROBABLY TRUE rather than FACT because no single authoritative registry publishes a live cancellation ledger, and because the same period shows significant new signings that complicate a simple ‘backlash’ framing.
At least twenty Georgia police officers have been fired or arrested for using Flock to track people personally
FACTGeorgia Bureau of Investigation and local disciplinary records name at least twenty officers across Albany, DeKalb, and Richmond County who used the Flock database to track exes, rivals, and coworkers between June and July 2026. Named subjects include Tytianna Davis, Jade Jackson, Nicholas Richardson, Brittney Smith, and Issac Whitus (Albany, GBI arrests July 6–7 2026); Sergeant Kabiru Salawu (DeKalb, July 17–18 2026); and Deputy Jaquarius Yarbrough, Lieutenant John McKenzie, Investigator Curtis Hoskins, and Deputy Joshua Johnson (Richmond County, June–July 2026). Similar misuse patterns are documented in Wisconsin and South Carolina.
Local police departments have given ICE and CBP access to Flock data despite state and local sanctuary rules
FACT404 Media broke the first ICE-side-door case in May 2025 (Johnson County, Texas Sheriff's Office, Sheriff Adam King, a nationwide Flock search of 83,345 cameras and 6,809 networks logged as related to a woman's abortion). The University of Washington Center for Human Rights' October 2025 report ‘Leaving the Door Wide Open’ names eighteen Washington-state agencies that granted ICE or CBP access to Flock data through informal login sharing, despite state sanctuary rules. The Electronic Frontier Foundation confirmed the contradictory-policy pattern in an October 2025 analysis.
SDS / MI5 / BOSS — UK Covert Policing of the Anti-Apartheid Movement
Britain's Special Demonstration Squad, a secret unit inside Metropolitan Police Special Branch, infiltrated the UK anti-apartheid movement from 1968 onward. SDS reporting was routinely copied to MI5. Whether MI5 then passed that intelligence to apartheid South Africa's Bureau of State Security is the central open question, now under formal examination by the UK's Undercover Policing Inquiry.
The SDS/MI5/BOSS case sits on this hub because it is the same structural pattern as the Palantir and Flock clusters, fifty-plus years earlier and in a different country: a secret domestic-surveillance apparatus, built for one stated purpose, whose product turned out to be shareable across jurisdictional lines that were supposed to contain it.
SDS infiltrated the UK anti-apartheid movement for twenty-five years, monitoring Peter Hain's family among others
FACTThe Undercover Policing Inquiry's Tranche 1 Interim Report (June 2023) and Peter Hain's April 30, 2021 witness statement establish that SDS undercover officers infiltrated the UK Anti-Apartheid Movement from 1968 forward, and that one officer (‘Mike Ferguson,’ identity partially declassified) monitored the Hain family specifically for twenty-five years. The Home Office's 2015 Operation Herne report corroborates the operational scope.
Special Branch and MI5 agreed in August 1968 to share intelligence on political activists; SDS reporting was routinely copied to MI5
FACTThe August 1968 information-sharing agreement between Special Branch and MI5 is documented in UCPI-published memoranda. SDS reporting on named UK activists was routinely copied to MI5 through the 1970s and 1980s. Both facts are on the record and undisputed by the current UK government.
Whether MI5 passed SDS intelligence to apartheid South Africa's Bureau of State Security remains SOME SMOKE, not FACT
SOME SMOKEThe MI5→BOSS transmission is the central open question the Undercover Policing Inquiry has not yet answered. Circumstantial evidence includes documented UK–South Africa intelligence liaison relationships during the Cold War, the shared target set (the same activists surveilled by SDS were also of intense BOSS interest), and BOSS operational records that reference UK-sourced material. Direct evidence — a transmission memorandum, a named MI5–BOSS liaison officer, a declassified handover — has not surfaced in the public record.
Unit 8200 — Israeli Intelligence-Tech Pipeline
Unit 8200, the signals-intelligence arm of Israeli military intelligence, is the single largest feeder of founders into the global cybersecurity industry. Its alumni build the tools the Palantir, Flock, and SDS-lineage clusters increasingly run on. The Unit 8200 investigation's home hub is Israeli Influence; it is cross-listed here as the fourth surveillance apparatus.
Unit 8200 sits on this hub as the pipeline that supplies significant parts of the other three clusters. The full investigation lives on the Israeli Influence hub, where its cross-listing with Toka and Pollard puts the Israeli-tech counterintelligence question in its primary frame. Here, the hub-level summary focuses on the specific throughline: Unit 8200 alumni build the surveillance infrastructure that Palantir sells into, that Flock sits alongside, and that inherits the same ‘infrastructure once built gets shared’ problem the other three clusters document.
At least 1,400 self-identified Unit 8200 alumni work in US tech; five alumni-founded companies carry a combined market cap near $160 billion
FACTThe Wall Street Journal's 2024 profile of Unit 8200's Silicon Valley footprint documented at least 1,400 self-identified alumni working in US technology companies. Five publicly-listed Unit-8200-founded companies (Check Point, CyberArk, Palo Alto Networks under Nir Zuk's founding, Wiz pre-acquisition, and SentinelOne) carried a combined market cap near $160 billion as of 2025 disclosures. Drop Site News's August 2025 investigation added Toka and Carbyne to the pipeline map.
Questions We Should Be Asking — What the Shape Suggests
The fact-checker record above stands on its own. Below is a labeled reading of what that record, taken together, might mean about the direction of the American state. This section is graded PURE SPECULATION for a reason. Read it as one interpretation among several.
Cluster 01 documents that one company, founded by two members of the PayPal cohort with CIA seed money, has become the software backbone of federal immigration enforcement. Cluster 02 documents that the same cohort has consolidated financial and political influence around the office that awards those contracts. Neither cluster proves any single actor's intent. The reading here asks what the shape of the record, taken together, suggests about the direction of state power. It is a reading, not a finding. It carries the speculation grade for that reason.
The state as private-capital enforcement layer
PURE SPECULATIONThe fact-checker record establishes that a founding cohort of a single 1999 payments startup has, over twenty-six years, come to hold the ICE case-management software, the largest privately owned license-plate reader network, the AI-and-crypto-regulation seat in the West Wing, a leading venture capital firm, and roughly ten percent of the Republican Party's billionaire donor class. The speculative reading of that record is that the American state is being reshaped, deliberately or not, into an enforcement layer whose core software, financial incentives, and regulatory oversight all sit inside a single private-capital network. That reading does not require any member of the cohort to have planned it. It requires only that each member, acting in their own self-interest, has moved in the same direction: toward government contracts they benefit from, toward regulatory seats their portfolios benefit from, toward political candidates whose enforcement priorities benefit from the software they sell. That is a reading, not a finding. The record supports the shape. The shape does not, by itself, prove the intent.
What the record does not support
PURE SPECULATIONThe public record does not support a claim that Palantir, or any individual named on this hub, has committed a specific crime under any specific federal statute in service of the pattern above. It does not support a claim of illegal coordination between Sacks's West Wing office and Craft Ventures's portfolio decisions, even though the incentive structure is documented and the House Oversight inquiry is open. It does not support a claim that Palantir built the master database the New York Times reported on, in the specific form Palantir denied. It does not support a claim that anyone named on this hub is personally responsible for a specific deportation, a specific criminalization of homelessness, or a specific harm to a specific individual. The pattern is documented. A specific criminal charge is not.
Shadow IT at the White House
The same network that built and staffed DOGE has now been given a permanent home inside the Executive Office of the President. It is called the National Design Studio. It runs federal websites, it collects visitor data using commercial tracking tools that no Privacy Impact Assessment names, and it operates outside every oversight law written since 1974. The full evidence is in the standalone investigation. What this cluster does is place the operation inside the same surveillance-states frame that Clusters 01 through 05 established.
On August 21, 2025, Donald Trump signed Executive Order 14338, creating a Chief Design Officer of the United States and a new office called the National Design Studio. Airbnb co-founder Joe Gebbia was named to the role. Gebbia had spent the first half of 2025 at DOGE, where Marc Andreessen has described himself, in his own words, as an ‘unpaid intern’ recruiting the early technical hires. On camera, in a February 11, 2026 interview with Joe Lonsdale, Gebbia named the venture-capital firms publicly supporting the National Design Studio: Founders Fund and Peter Thiel, Andreessen Horowitz and Marc Andreessen, 8VC and Joe Lonsdale, Thrive Capital and Josh Kushner. The same cohort Cluster 02 documented at Palantir’s founding is now the announced backing network of a White House office operating outside Senate confirmation, outside the Inspector General’s jurisdiction, and outside the federal contracting database.
What has been assembled on the ground
FACTA June 28, 2026 Guardian investigation by Jason Wilson identified four public federal websites built and operated by the National Design Studio (ndstudio.gov, trumprx.gov, realfood.gov, trumpaccounts.gov), a White House-controlled passport application portal bypassing the State Department, and a White House-controlled copy of the federal voter registration site live since September 17, 2025. PostHog session recording is installed in the code of all four public sites; on two of them it is actively enabled, and on the other two it is held inactive only by a single toggle inside PostHog’s dashboard. PostHog is configured on those sites to route through the federal website itself, so adblockers cannot see it. On the studio’s own ndstudio.gov, a 539-line custom script called AutoMonitor ships user data to an address invisible on the public internet. The Guardian could find no Privacy Impact Assessment and no System of Records Notice covering any of the tracking. Section 208 of the E-Government Act requires one. EPIC’s John Davisson called the missing filings ‘a pretty clearcut violation.’
The Borges disclosure and the DOJ correction
FACTBefore the National Design Studio was named on August 21, 2025, DOGE had already been at the Social Security Administration for eight months. On August 26, 2025, then-SSA Chief Data Officer Charles Borges filed a protected whistleblower disclosure through the Government Accountability Project alleging that DOGE personnel, working with SSA CIO Aram Moghaddassi and senior DOGE operative Michael Russo, had created a live copy of the NUMIDENT file (approximately 450 million records) in a cloud environment outside SSA oversight. Borges submitted an ‘involuntary resignation’ three days later. On January 16, 2026, the Department of Justice filed a Notice of Corrections in ongoing litigation acknowledging, under DOJ’s signature, that DOGE personnel had in fact used a third-party Cloudflare-hosted server in the course of the SSA work. The DOJ’s admission is the strongest external corroboration of Borges’s disclosure now on the public record. The DOGE personnel involved have since moved to the National Design Studio.
The capability question
PURE SPECULATIONSetting interpretation aside and holding only to the record above: a live copy of the NUMIDENT file sits in a cloud environment outside SSA oversight; a White House-controlled passport portal collects identity data; a White House-controlled vote.gov copy is capable of collecting voter data; session-recording infrastructure on federal sites can replay every click, scroll, and keystroke; a custom telemetry pipeline on ndstudio.gov ships data to a destination invisible on the public internet; and the same personnel network has moved between all of these. No aggregation of these components is currently disclosed in any Privacy Impact Assessment. The question of what installed infrastructure of this shape could do at scale is an open one. The reader who works through the full investigation will find it framed as a set of open questions rather than answered claims. That is the responsible framing while the primary evidence for action remains under litigation and while the response window on this investigation is still open.
The National Design Studio →
Silicon Valley’s shadow IT layer for the federal government. Five clusters, graded evidence, primary sources, and a standing invitation for anyone named to respond on the record.
Criminalization of Dissent — 2025-2026 enforcement layer
Four cases documented so far. A US State Department ministerial on July 8-9, 2026 that named domestic media outlets alongside foreign terrorist organizations. Anti-ICE protestors at Prairieland sentenced to twenty-four and twenty-eight years. A seventy-three-year-old UK vicar arrested under the Terrorism Act 2000 for a placard. A Cox Enterprises heir facing US federal firearms charges and a Spanish extradition request over financial support to a legal Communist party. Different jurisdictions, same month, same escalation pattern. Full evidence in each standalone investigation; this cluster places them inside the same surveillance-states frame.
The surveillance apparatus watches. The enforcement layer punishes. Clusters 01 through 06 document the watching. This cluster documents the punishing, as of July 2026. Each entry below is a full investigation on the fact-checker record; each carries its own graded claims, right-of-response, sources, and standing invitation.
Secretary of State Marco Rubio and Deputy Chief of Staff Stephen Miller convened a two-day ministerial at the State Department on July 8-9, 2026 that treated domestic political dissent as a national-security threat category alongside designated foreign terrorist organizations. Participants have described a State Department readout in which named US media outlets were listed on the same slide as al-Qaeda and ISIS affiliates. Democracy Now’s Amy Goodman was among those named. The full readout, the outlets list, and any follow-on State Department actions are documented in the standalone investigation.
On July 4, 2025, an armed group ambushed correctional officers outside the Prairieland Detention Center in Alvarado, Texas. In July 2026, two defendants, Meraz-Espinoza and Bautista-Rosa, were sentenced in the Northern District of Texas to twenty-four and twenty-eight years respectively. The prosecutions were charged as attempted murder of federal officers. The standalone investigation documents the plea agreements, the sentencing structure, the underlying indictment, and the framing of the July 4, 2025 ambush.
On July 5, 2025, the UK Home Office proscribed Palestine Action as a terrorist organization under the Terrorism Act 2000, following a Palestine Action break-in at RAF Brize Norton the previous month. Sue Parfitt, a seventy-three-year-old retired Church of England vicar, was among the first arrests. Metropolitan Police detained her at a protest in central London for holding a hand-lettered sign supporting the newly-proscribed group. The standalone investigation documents the proscription order, the arrest circumstances, the ongoing prosecution, and the broader Palestine Action Terrorism Act arrest docket.
Fergie Chambers, a Cox Enterprises heir turned Marxist commentator, faces US federal firearms charges filed in the District of Massachusetts and a July 2026 Spanish extradition request from the Audiencia Nacional. Spanish authorities raided the Madrid Communist bookshop Chambers financially supported. The standalone investigation documents both dockets, the underlying financial-support facts, and the extradition timeline, and treats the two-jurisdiction pincer as the pattern under examination.
Investigations on this hub
All investigations →The National Design Studio
The National Design Studio was created by Executive Order 14338 on August 21, 2025, and placed inside the Executive Office of the President as a 'temporary organization' under 5 U.S.C. 3161. Airbnb co-founder Joe Gebbia, appointed as the first U.S. Chief Design Officer, has stated on camera that the studio operates with the public support of Founders Fund, Andreessen Horowitz, 8VC, and Thrive Capital. The Guardian's June 28, 2026 investigation documented that the studio installed PostHog session recording and a custom telemetry script called AutoMonitor on four federal websites, with no Privacy Impact Assessment and no System of Records Notice. Charles Borges's August 26, 2025 whistleblower disclosure and the Department of Justice's January 16, 2026 Notice of Corrections separately placed on the record that DOGE personnel, now staffing the National Design Studio, created a live copy of the NUMIDENT file on a Cloudflare-hosted server outside SSA oversight.
The Deadliest War for Journalists Ever Recorded
Since Oct 7 2023, more journalists have been killed in Israel's war in Gaza than in any conflict the modern press-freedom monitors have tracked — the Costs of War Project calls it the single deadliest conflict for journalists in recorded history. Counts differ by source and date (CPJ ~192, IFJ ~180+, UN 242, Gaza GMO 217+), so the page presents the range with attribution, distinguishes the broad undisputed toll from the sharper, disputed claim of deliberate targeting (documented by CPJ/RSF in specific cases; Israel denies it), and links the bodies of record rather than recounting names. The journalists leg of the Dangerous Knowledge hub.
Polymarket: Cantor, Palantir, and the PROMIS lineage
A sourced walk through what recent reporting documents about Polymarket: Cantor Fitzgerald's twenty-year prediction-market history, the DARPA/Poindexter surveillance lineage, the Founders Fund network, the Rothschild-Economist connection, the Trump-family exposure, and the $2.4M wallet cluster betting on U.S. military strikes.
Thiel's Foreign Policy
Peter Thiel's network is embedded across the US government (VP JD Vance, a Thiel mentee he bankrolled; Michael Kratsios, ex-Thiel Capital, running White House OSTP; Jacob Helberg, ex-Palantir, Under Secretary of State) while Founders Fund backs the defense primes (Palantir, Anduril, SpaceX). Kratsios's OSTP report (Jul 21 2026) redirects ~$200B in federal research funding toward AI/individuals, away from universities. Simultaneously Thiel/Karp meet heads of state — Milei (Casa Rosada, Apr 2026; Thiel bought a $12M Buenos Aires home), Kast (La Moneda; content withheld), Noboa (Davos; Palantir opening an Ecuador office), Takaichi (courtesy call Mar 5 2026) — a Founders Fund-backed bank (Erebor, co-founded by Luckey/Lonsdale; first new national charter under Trump) pitches sanctioned Venezuela, and Helberg rolls out a global 'Pax Silica' network of economic-security zones (Philippines first). Components graded FACT; the synthesis ('a private network exercising state-like power beyond any electoral mandate') PROBABLY TRUE, attributed (Bloomberg 'quietly shaping government'). HARD guardrail: Thiel holds no office; documents concentration/access in the open, NOT a secret command; the viral 'shadow president' label is corrected, not asserted. Anchor for a possible future 'Thiel Network' hub. Cross-links surveillance-states + military-grift.
Unit 8200: the Israeli military-intelligence unit that became the founding class of the American cybersecurity industry
Unit 8200 is the Israeli counterpart to the NSA. It conducts SIGINT, offensive cyber (broadly credited alongside NSA with Stuxnet), and the AI targeting systems reported in Gaza. Its alumni founded Check Point, Palo Alto Networks (via CTO Nir Zuk), CyberArk, NSO Group, Waze, Wix, Viber, Imperva, Cybereason, and Wiz. Google acquired Wiz for $32 billion in 2025. Palo Alto Networks acquired CyberArk for $25 billion in the same year. The Wall Street Journal covered the pipeline approvingly in 2024. Drop Site News (Murtaza Hussain, August 2025) is the rigorous public accounting to date. A separate policy-layer thread names Emi Palmor (Meta Oversight Board) and Shira Anderson (Meta AI Policy, now OpenAI) as verifiable placements, with the causal-mechanism claim graded PURE SPECULATION.
The Palmer Raids: how a 1919 dragnet built the first federal domestic-radical index and the operational template that followed
The Palmer Raids were a coordinated federal operation, November 1919 through January 1920, that produced at least 3,000 warrantless arrests across more than 30 cities and roughly 556 deportations conducted without judicial hearings. The operation was managed by a newly-created office inside the Bureau of Investigation - the General Intelligence Division, run by a 24-year-old J. Edgar Hoover - whose defining product was a card file of political affiliations that reached roughly 200,000 names by 1921. The DOJ Inspector General's 1976 Levi Guidelines review identifies the 1919 GID as the direct predecessor of the FBI domestic-intelligence operations the guidelines were designed to constrain.
Perversion of Justice: how Jeffrey Epstein bought his way out of federal prosecution in 2008
Julie K. Brown's three-part Miami Herald series is the definitive reconstruction of how Epstein bought his way out of a federal indictment in 2008. Brown identified 80 accusers by name from public court records, forced the release of the sealed non-prosecution agreement, and drove the sequence of events that ended in Alexander Acosta's resignation as Labor Secretary and Epstein's 2019 federal indictment. We endorse this over the many book-length treatments that followed because Brown's series is (a) the primary reporting all the books draw from, (b) freely accessible without paywall, and (c) narrower in scope than the books — it is specifically about Palm Beach 2005 through 2008. What this piece does NOT cover: the post-2019 DOJ conduct, the Maxwell trial, the January 2026 document release, or the network dimensions the Black Book Audit Epstein Class hub is built around. For those, see our original investigations.
The CIA and Mandela
In 1962, CIA officer Donald Rickard, operating under State Department cover in Durban, passed Mandela's travel itinerary to South African security police. Mandela was arrested at a Howick roadblock and imprisoned for 27 years. Rickard admitted the operation on tape to filmmaker John Irvin weeks before his 2016 death. The ANC and Mandela himself remained on the US terror watch list until 2008, requiring the Secretary of State to personally waive Mandela in each visit until Bush signed HR 5690.
SDS, MI5, and BOSS: UK Spies for Apartheid
From 1968 the Special Demonstration Squad infiltrated the British Anti-Apartheid Movement and the Stop the Seventy Tour, gathering names, addresses, license plates, meeting minutes, and protest plans. Special Branch passed the intelligence to MI5, which shared it with the Bureau of State Security (BOSS), South Africa's apartheid intelligence agency. In 1976 BOSS agents framed Peter Hain for a London bank robbery; a British jury acquitted him. The ongoing Undercover Policing Inquiry has confirmed the SDS's operational history.
Flock Safety
Flock Safety operates a cross-searchable license-plate reader network deployed by thousands of US police departments. Officers have used the database to stalk exes and romantic rivals; a Texas sheriff's office ran a nationwide search logged as related to an abortion; local departments have granted ICE and CBP access, circumventing sanctuary protections. More than fifty municipalities have canceled or suspended contracts since 2025. Class-action litigation is consolidated in the Northern District of California, and independent researchers demonstrated that certain deployed cameras exposed live streams and archived footage over the open internet.
Ban Flock, Buy Axon
Dozens of US cities (~53 per aggregated reporting) have canceled Flock Safety ALPR contracts over federal/ICE data-access and mass-surveillance concerns; a documented subset (Denver, Syracuse, Douglas County, Tempe pilot) then replaced Flock with Axon, which runs the same core plate-reading surveillance — so the footprint rebrands rather than shrinks. Separately, a trust in Trump's name bought $1M–$5M of Axon on Feb 10 2026 (Q1 2026 OGE disclosure), ~two weeks before ICE sought a 5-year $220M contract to quadruple its Taser fleet; watchdogs flagged the timing, the White House says it's trust-managed with no conflict. Graded FACT (the swap cases; the stock purchase + timing + disclosure), PROBABLY TRUE (swap rebrands rather than ends surveillance; Axon positioned to benefit on both municipal and federal fronts). The viral 'anti-Flock backlash is an astroturfed psyop funded by Axon/Trump' claim is NOT supported and is handled as a posed FAQ question, explicitly not asserted; '50+ cities replaced Flock with Axon' is corrected to '~53 canceled; a subset switched to Axon.' Cross-links self-dealing and the Flock Safety investigation.
Rubio and Miller Convene 65 Nations to Redefine Left-Wing Dissent as Terrorism
On July 16, 2026, Secretary of State Marco Rubio opened a State Department ministerial on the "resurgence of political terrorism" with more than 65 countries represented. Stephen Miller told delegations that left-wing terrorism "always becomes a gulag" and called Antifa protesters "deformed." Four days later, the State Department released a report naming Amy Goodman and dozens of other Americans as Cuban "front groups and fellow travelers," without evidence of Cuban direction. Separately, journalists Mario Guevara, Don Lemon, Georgia Fort, and a Nashville reporter were arrested, detained, or deported in 2025-2026 for covering protests and ICE enforcement.
Nine Protesters at a Texas ICE Jail Got 562 Years Combined. Here Is Every Sentence and Every Charge.
On July 4, 2025, protesters gathered outside the Prairieland Detention Center in Alvarado, Texas. Former Marine Corps reservist Benjamin Hanil Song fired a rifle and wounded Alvarado Police Lieutenant Thomas Gross, who survived. President Trump designated antifa a domestic terrorist organization by executive order two and a half months later. The Justice Department then charged nine defendants under a 'material support for terrorists' theory. Between June 23 and July 6, 2026, Judges Mark T. Pittman and Reed O'Connor sentenced fifteen federal defendants to a combined 562 years and two months, ranging from Song's 100 years to 22 months for the youngest cooperating defendant.
The First Test Case: Washington Seeks Fergie Chambers's Extradition From Spain Over Hamas-Linked Money Laundering Charges
James Cox 'Fergie' Chambers Jr., a 41-year-old communist activist and heir to the Cox Enterprises media and telecom fortune, was arrested by Spanish National Police in Ibiza on July 10, 2026, pursuant to a sealed extradition request from the US Department of Justice. He was denied bail and remains in pretrial detention in Madrid. The sealed indictment, reviewed by The Grayzone, charges international money laundering and, per multiple outlets, conspiracy to provide material support to a foreign terrorist organization, tied to a roughly $7.5 million transfer from Chambers's US accounts to Tunisia. Chambers's family and attorney say the funds financed a Tunisian football club, humanitarian aid in Gaza, and activist legal defense. Veteran terrorism-defense attorney Stanley Cohen calls this the first known US extradition request premised on alleged Hamas-linked support. Thirteen Spanish political parties have asked the Sánchez government to reject the extradition as politically motivated; that claim is graded SOME SMOKE pending release of the sealed indictment.
A Presidential Memo Made Anti-Capitalism and Anti-Christianity Terrorism "Indicators." The Grant Money Follows.
National Security Presidential Memorandum-7, signed September 25, 2025, opens by citing the assassination of Charlie Kirk and, in its own text, names "anti-Americanism, anti-capitalism, and anti-Christianity" and "extremism on migration, race, and gender" among the "common threads" of domestic terrorism. Section 4 directs the Attorney General and DHS Secretary to designate domestic terrorism a "national priority area" and build grant programs for local law enforcement. Documents obtained by journalist Ken Klippenstein show a July 9, 2026 FEMA bulletin instructing grant applicants to fund monitoring of "online behaviors and digital footprints" and teams "managing persons of concern" on a "trajectory toward domestic terrorism," plus a roughly $1 billion DHS grant notice with a spending-mandate coercion clause. The order's text is anchored to the Federal Register primary and graded FACT; the two grant documents are attributed and graded PROBABLY TRUE (single-source-with-document). A 2012 bipartisan Senate report found the same fusion centers produced intelligence "oftentimes shoddy, rarely timely, sometimes endangering citizens' civil liberties."
A 66-Year-Old Peace Professor Protested Stephen Miller. The FBI, the Secret Service, and a House Subpoena Followed.
Barbara Wien, a 66-year-old retired American University peace-studies lecturer, distributed fliers near Stephen Miller's North Arlington home reading "Wanted for crimes against humanity," listing his address and urging residents to petition Congress. Katie Miller reported the fliers to police in August 2025 under a Virginia misdemeanor statute. On October 1, 2025, Virginia State Police seized Wien's phone under a broad warrant with the FBI and Secret Service present; AG Jason Miyares and the DOJ pressed a wide search, Judge Judith Wheat restricted the state warrant, and U.S. Magistrate Judge Lindsey Vaala (EDVA) denied the FBI's own petition (the DOJ said it would appeal). House Judiciary Chairman Jim Jordan opened an inquiry and, on March 20, 2026, subpoenaed the elected prosecutor's records. On May 5, 2026, in a 166-page filing, Commonwealth's Attorney Parisa Dehghani-Tafti declined charges, finding that prosecuting Wien would "likely violate her constitutionally protected free speech rights" and that the flier's only call to action was petitioning Congress. The verified spine is graded FACT, anchored to the prosecutor's own First Amendment finding. The claim that Stephen Miller personally directed Jim Jordan is graded SOME SMOKE; the "federal judge halted the FBI probe" final status is presented as reported-but-unconfirmed. Wien's own Signal messages ("intends to make his life hell") are carried for fairness.
They Killed Him in a Consulate
On Oct 2, 2018 Washington Post columnist and Saudi dissident Jamal Khashoggi was killed inside the Saudi consulate in Istanbul. The declassified US ODNI assessment (Feb 25, 2021) states the intelligence community's high-confidence judgment that Crown Prince Mohammed bin Salman approved the operation to capture or kill him. The page grades the murder FACT, the ODNI assessment FACT (an intelligence judgment, not a conviction; MBS denies it), the Saudi 'rogue/unaware' account FALSE-MISLEADING against that record, and — the live Black Book Audit beat — Trump's Nov 18 2025 public dismissal of his own government's assessment ('things happen') FACT. The journalists leg's second anchor; bridges to self-dealing (Saudi money into Trump-world).
Toka: the Israeli firm that sells governments the ability to alter camera footage, and the American venture capital that funds it
Where Pegasus reads phones, Toka rewrites the visual record. Its internal pitch materials, reviewed by Haaretz in December 2022, carry the header 'Discover, Hack, Alter' and describe alteration capabilities that leave no forensic trace on the target device. Known customer states include Israel, the US, Germany, Australia, and Singapore. Marc Andreessen, whose firm led Toka's seed round, sits on Meta's board while Meta subsidiary WhatsApp is litigating against NSO Group. TechCrunch confirmed in December 2024 that Toka is actively pursuing US federal contracts. In February 2026, Haaretz reported Toka developed CARINT, a vehicle-hacking product with mic activation and dashcam access; Toka states the tool has been dropped from its 2026 roadmap.
The Panther/US letters: how the FBI wrote forged death threats between two Black organizations and watched the bodies fall
Between November 1968 and March 1971 the FBI ran a headquarters-authorized COINTELPRO operation to provoke violence between the Black Panther Party and Ron Karenga's US Organization. The Church Committee's 1976 final report reproduces the memo trail: a November 25, 1968 HQ directive ordering 'imaginative and hard-hitting counterintelligence measures aimed at crippling the BPP'; a Los Angeles field office plan four days later to plant a forged letter that 'will result in an US and BPP vendetta'; the January 17, 1969 shooting deaths of Alprentice 'Bunchy' Carter and John Huggins in Campbell Hall at UCLA; and a San Diego SAC memo three days later noting the killings 'will even further split the factions.' Four Panthers died in Los Angeles during the campaign. The forged-letters record is uncontested; what the record cannot establish is whether the January 17 killings would have occurred without the Bureau's hand on the scale.
The UK Banned Palestine Action as a Terrorist Group After a Paint Attack on Two RAF Planes
In June 2025, Palestine Action activists sprayed paint into the engines of two RAF Voyager aircraft at Brize Norton. Three weeks later the UK proscribed the entire group as a terrorist organisation under the Terrorism Act 2000, legally grouping it with al-Qaeda and Islamic State. The Reverend Sue Parfitt, an 84-year-old retired Anglican priest, has been arrested at least four times since for supporting the group, most recently on the ban's one-year anniversary. The High Court found the ban unlawful in February 2026; the Court of Appeal reversed that ruling in June 2026. More than 3,000 people have been arrested.
Anatomy of a Panic
The debunk leg of Dangerous Knowledge. After the Feb 2026 disappearance of retired Air Force Maj. Gen. Neil McCasland, a theory spread that a cluster of ~11 scientists/researchers tied to NASA, the national labs and defense were being killed or disappeared to silence secret knowledge (weapons, energy, UFOs). The House Oversight Committee wrote the FBI (Apr 20, 2026) seeking briefings. The page grades the inquiry FACT but the silencing narrative FALSE-MISLEADING (The Atlantic, Snopes, CBS: no links; sociologist: apophenia), shows individual cases have ordinary explanations, flags Melissa Casias (a Los Alamos admin assistant, not a scientist) as over-inclusion, and handles Amy Eskridge with care — her documented pre-death statement FACT, but her father (a NASA engineer/collaborator) rejects foul play ('scientists die also, just like other people'). The UFO overlay traces to rumor about one man. The value is in what we refuse to claim.
Paragon Solutions: Ehud Barak's third surveillance venture, run by a former Unit 8200 commander, now inside US immigration enforcement
Paragon Solutions is an Israeli spyware firm founded in 2019 by former Unit 8200 commander Ehud Schneorson, CEO Idan Nurick, Igor Bogudlov, Liad Avraham, and former PM Ehud Barak (board). Its product Graphite is built to access encrypted messaging apps (WhatsApp, Signal, Messenger) rather than take over a whole phone. Battery Ventures invested $5-10M in 2021; the FT reported Paragon declined an Israeli request to swap Graphite into the Saudi armoury after Pegasus hit Khashoggi's associates. Biden's EO 14093 (2023) was read as carving out room for vendors like Paragon before the government purchase was banned; the second Trump administration reversed the pause and ICE now uses Graphite (acting director Todd Lyons confirmed to Congress in April 2026). In December 2024, US PE firm AE Industrial Partners acquired Paragon (via RED Lattice) for up to $900M. In January 2025, WhatsApp disclosed a Paragon campaign against ~90 journalists and civil-society figures; Citizen Lab forensically confirmed Graphite infections and suspected deployments in Australia, Canada, Cyprus, Denmark, Israel, and Singapore. An Italian parliamentary committee (COPASIR) confirmed the Italian government used Graphite against activists Luca Casarini, Giuseppe Caccia, and David Yambio while denying it hacked journalist Francesco Cancellato; Paragon says it cut ties with Italy in Feb 2025. Who ordered the Cancellato/Pellegrino journalist targeting is graded SOME SMOKE. The Unit 8200 command lineage is why this sits on the surveillance hub alongside Toka and Carbyne.
PROMIS and the Maxwell distribution: an intellectual-property theft, a suspect backdoor, and a media baron with intelligence ties
Inslaw's PROMIS case-management software was taken by the DOJ in 1982-83. Bankruptcy Judge George Bason (1988) and District Judge Nicholas Bua indirectly (1993) both found DOJ acted through 'trickery, fraud, and deceit,' though the appellate courts vacated on jurisdictional grounds without touching the underlying findings. The 1992 House Judiciary majority report endorsed the Inslaw account. A 1998 Court of Federal Claims settlement gave Inslaw partial compensation. The theft is FACT. The alleged backdoor allowing US or Israeli intelligence to read installed copies is SOME SMOKE, sourced largely to Michael Riconosciuto and Ari Ben-Menashe, both dismantled by the DOJ's own 1993 Bua Report and the House October Surprise Task Force. Robert Maxwell's role as international distributor is SOME SMOKE; his 1948 Czech arms role and Israeli-intelligence ties (documented by John Loftus and Mark Aarons) are PROBABLY TRUE. The Casolaro and Maxwell death theories are PURE SPECULATION.
Barak, Carbyne & The Israeli Tech Pipeline
Ehud Barak's post-2015 correspondence with Epstein's staff. Carbyne (formerly Reporty), the 911-dispatch surveillance company Epstein backed and Barak chaired, whose original 2018 outside investor was Peter Thiel's Founders Fund (Andreessen Horowitz came later, in 2021-2022 rounds). The broader Israeli surveillance-tech pipeline running through Epstein's orbit.
Maxwell Family Business
Robert Maxwell's media empire and pension fraud are settled fact. The PROMIS-software intelligence allegations are contested. The Ghislaine-Epstein introduction timeline is genuinely unresolved — this piece keeps the three tiers separate.
The Shopping Cart
In 2015, Congress shut down bulk phone-records collection. The FBI, ICE, CBP, DIA, DEA, and Secret Service now buy the same data from commercial brokers — no warrant required. On March 18, 2026, FBI Director Kash Patel confirmed the practice under oath and declined to stop it.
MHCHAOS: the CIA's illegal domestic surveillance program, 1967 to 1974
Chartered by DCI Richard Helms in August 1967 under LBJ's direction to find foreign backing for the anti-war movement. Expanded under Nixon. Terminated by DCI William Colby in March 1974. Exposed by Seymour Hersh on the New York Times front page of December 22, 1974. The database and full write-up are next.
Questions worth taking seriously
Isn’t “the PayPal Mafia” a cartoonish name for what is just a group of tech investors?
The label came from a 2007 Fortune profile, and the participants themselves have used it, worn it on branded merchandise, and posed for group photographs under the headline. The label is descriptive shorthand, not our invention. What matters is what the label points to: a finite, named group of PayPal founders and early employees whose subsequent business relationships, board seats, and political spending overlap enough that they operate as a coherent political actor twenty-two years after the company they built together was sold. The name is theirs. The overlap is documented.
Palantir is a public company. If the contracts are open records, what is the story?
The story is not that the contracts are secret. It is that the contracts, the money, and the seat inside the office that regulates the adjacent markets are the same network. Palantir’s ICE contracts have been public since 2014. What is new in 2025–2026 is that a former PayPal COO (David Sacks) sits in the West Wing as the administration’s AI and Crypto Czar with roughly $200 million in personal crypto sales completed in the weeks before he took the job. The novelty is not the contracting record. The novelty is the personnel closure.
Why include Reid Hoffman in a hub about right-coded political consolidation?
Because Hoffman is the exception the pattern requires to be a pattern. He is the only member of the PayPal founding cohort who has donated heavily to Democrats, and he is the only one who has, in 2025–2026, come under Justice Department scrutiny (over revised-timeline Jeffrey Epstein meetings he did not initially disclose). His inclusion is the answer to the obvious objection: if the cohort is ideological rather than partisan, why does the political cost fall only on the one who defected? The hub does not answer that question. It documents that the pattern is askable.
Isn’t the whole open-question device just a way to smuggle unverified claims into a fact-checked hub?
It is a way to name the specific open questions the fact-checker record raises without pretending the record answers them. Every claim inside the open-question box is graded PURE SPECULATION, visually separated from the fact-checker record, and framed as an interpretive reading rather than a finding. The alternative (leaving those questions unnamed) is worse: it lets other outlets pick up the fact-checker record and impose their own unlabelled interpretations on it. The Questions We Should Be Asking section is the honest version of what every other outlet does silently.
What is the single most important open question for this hub?
Whether the Palantir contracting position is defensible in procurement law. Multiple 2025–2026 Palantir awards are structured as sole-source no-bid renewals, and the April 2025 ImmigrationOS award has drawn a formal protest from a competitor and preliminary interest from the House Oversight Committee. The open question is whether the contracts survive the protest and oversight process intact, or whether the Government Accountability Office and the courts force a re-competition. The answer arrives in the contract record over the next twelve to eighteen months and will determine whether the position documented in this hub is durable or transient.
How We Know What We Know
Every claim in this hub is graded: FACT · PROBABLY TRUE · SMOKE · PURE SPECULATION. The speculation grade is used only in the labelled Questions We Should Be Asking section, and never on the fact-checker record above it.
This hub used to document one pattern: a single founding cohort's software business and its government contracts. It now documents four surveillance apparatuses that were built independently, in different countries, for different stated purposes, and that keep turning out to interoperate, plus a distinct 2025-2026 enforcement layer that criminalizes the protest, press, and dissent the apparatus watches. Palantir's software runs ICE deportation tracking. Flock's cameras feed ICE through police departments that did not disclose the access. Britain's Special Demonstration Squad watched the anti-apartheid movement and passed its reporting up a chain that may have reached apartheid South Africa's secret police. Unit 8200 alumni built large parts of the cybersecurity industry the other three now depend on. Rubio and Miller's July 2026 State Department ministerial, the Prairieland sentences, Sue Parfitt's Terrorism Act arrest, and the Fergie Chambers extradition request document the enforcement side of the same pattern. Each cluster is graded on its own evidence. The interoperation claim — that these systems increasingly share data and personnel across jurisdictional lines meant to keep them separate — is this hub's central finding, and it is graded claim by claim, not asserted wholesale.
The criminalization-of-dissent cluster follows a stricter sourcing standard: primary court records (Northern District of Texas, District of Massachusetts, Audiencia Nacional), UK Crown Prosecution Service releases, State Department press releases and readouts, and contemporaneous reporting from at least two independent outlets per claim. Where a claim rests on a single reporter's account of a State Department briefing not otherwise on the public record, that claim is graded PROBABLY TRUE, not FACT. Every investigation in this cluster carries a standing invitation for anyone named to respond on the record.
Full method: Methodology.