Operation Puppet Master: the state went undercover on the protesters.
Not the framing this time. The enforcement. Court filings show Homeland Security infiltrated meetings, subpoenaed union donors, and built dossiers on eighteen left-leaning groups — many never accused of a crime.
During the Trump administration's January 2026 immigration crackdown in Minnesota, DHS ran at least two undercover surveillance operations against the Twin Cities protest movement. The record comes not from a leak but from the government's own filings, produced in discovery in a federal case against local activists. This page grades what the documents establish, and gives the government's own case its place.
Primary sources include the defense motion for discovery and government exhibits filed in U.S. District Court, District of Minnesota, contemporaneous reporting by NOTUS and The New York Times, and the September 2025 presidential directive that authorized the effort.
What this page is about
Homeland Security Investigations ran undercover operations — “Operation Puppet Master” and “Project Whipple Shield” — that embedded agents in Twin Cities protest meetings, recorded conversations, built a target list of eighteen organizations, and subpoenaed the financial records of a union and a racial-justice nonprofit, before agents had identified any specific criminal basis. The operations ran under a September 2025 Trump directive that expanded the definition of domestic terrorism. It surfaced through the government's own discovery filings in a case against fifteen activists. The government alleges a conspiracy; the defense argues the surveillance swept in protected First Amendment activity. We document the method and grade both.
Books that go deeper on this story. Links are Amazon affiliate searches — buying through them supports the work at no cost to you.
A documented dragnet on political dissent, from the government’s own files.
The elsewhere on this hub we track the vocabulary of the war on the left: the “far-left terrorism” summit, the “anti-extremism” project, the expanded threat categories. This is the vocabulary put into practice. In Minnesota, that language became undercover agents in church basements, subpoenas to a union's bank, and PowerPoint slides mapping the “organizational structures” of socialist and labor groups.
What makes it unusually solid is the source. This is not a leak or an allegation floated by activists; it is the government's own investigative record, produced under court order in discovery. The documents show DHS setting out to map the funding and structure of named organizations before it had identified a criminal predicate for doing so. That method — investigate first, find the crime later — is the story, and it is on the government's own letterhead.
September 2025 to August 2026: the directive, the operations, the disclosure.
- Sep 2025President Trump signs “Countering Domestic Terrorism and Organized Political Violence,” tasking DHS and DOJ to investigate groups under an expanded definition of domestic terrorism (White House).
- Jan 2026DHS surges into the Twin Cities amid the immigration crackdown; mass protests follow (NYT).
- Early 2026Federal immigration agents fatally shoot Alex Pretti as he films officers detaining a woman; Operation Puppet Master is opened four days later (NOTUS).
- Mar 2026Associate Deputy AG Aakash Singh urges prosecutors to “go big and go loud”; agents tail three defendants for a day (NYT).
- Jun 2026Federal prosecutors charge 15 activists with conspiring to impede or injure federal agents (Minnesota Reformer).
- Aug 13, 2026A defense motion for discovery and government exhibits reveal the two operations, the 18-group target list, and the financial subpoenas (NOTUS).
The operation, claim by claim, graded against the court record.
DHS ran at least two undercover operations against the Minnesota protest movement.
FACTCourt filings detail 'Operation Puppet Master' and 'Project Whipple Shield' (a third, 'Operation Keyhole,' is named in an opening report). Undercover agents attended community meetings across the Twin Cities, covertly recorded conversations, and obtained financial records. The record is the government's own, produced in discovery in the federal case against local activists.
Homeland Security Investigations built a target list of 18 organizations, including the DSA, ICE Watch, and AFL-CIO chapters.
FACTA PowerPoint exhibit names 18 organizations that HSI alleged were conspiring to interfere with federal immigration agents, among them Twin Cities Democratic Socialists of America, Minnesota ICE Watch, and AFL-CIO labor chapters. Government filings lay out plans to investigate the 'funding sources, organizational structures and predicate actions' of these groups before agents had identified a specific criminal basis for doing so.
Agents subpoenaed the financial records of a union and a nonprofit, sweeping in members and donors.
FACTAgents subpoenaed wire-transfer information from the labor union SEIU and donation information from the nonprofit Voices for Racial Justice, pulling in members and donors who were never accused of any crime. This is the same financial-dragnet tool documented elsewhere on this site, here pointed at political association.
An undercover agent embedded in a protest group chat and recorded planning meetings.
FACTA June investigation report describes an agent embedding in an operational-planning group chat and recording a Sunrise Movement-Twin Cities meeting, logging tactics such as 'shaming and bullying ICE' and 'flooding their tipline.' The defense attorney says the agents 'created dossiers that are apparently now available agency-wide.'
“These agents surreptitiously recorded dozens of conversations with ordinary people who were simply exercising their First Amendment right to protest. — Kevin Riach, defense attorney”
The operations ran under a September 2025 directive expanding the definition of domestic terrorism.
FACTThe surveillance was conducted under President Trump's September 2025 directive, 'Countering Domestic Terrorism and Organized Political Violence,' which tasked DHS and the Justice Department with investigating individuals and groups under an expanded definition of domestic terrorism. The Times reported that Associate Deputy Attorney General Aakash Singh urged prosecutors to 'go big and go loud.'
The surveillance violated the First Amendment.
SOME SMOKEThis is the defense's legal argument in a pending motion, not an adjudicated finding, and we carry it as such. Attorney Kevin Riach argues that surveilling and building dossiers on people 'simply exercising their First Amendment right to protest,' without a criminal predicate, is unconstitutional. Whether a court agrees is unresolved; what is documented is the conduct the claim rests on.
The government has a case; the dispute is about the method.
This is not a story of pure innocents. The United States has charged fifteen people with conspiring to impede or injure federal agents, and that criminal case is real and ongoing. A reader can hold that the government is entitled to investigate an alleged conspiracy and still be troubled by what the filings show about how it did so.
Because what they show is not investigation of a known crime but the reverse: named organizations selected first, their funding and structure mapped, their donors subpoenaed, their meetings recorded, with the search for a criminal predicate coming after. Labor unions, a climate group, and a racial-justice nonprofit were pulled into a domestic-terrorism inquiry alongside their members and donors, none of whom were charged. The constitutional question the defense raises is unresolved. The method is documented.
The vocabulary, put into practice.
This piece is the enforcement companion to the framing pieces on this site. The “far-left terrorism” summit and Third Way's “anti-extremism” project supply the language that turns protest into a threat category; here is a federal agency acting on it, with subpoenas and undercover agents. And it is the financial-records dragnet from our Financial Surveillance investigation, and the subpoena overreach from the Matthew Cole case, pointed at political association.
It belongs in the Surveillance State(s) ledger for the plainest reason: an expanded “domestic terrorism” authority, aimed not at violence but at the funding and structure of lawful political groups, is the exact mechanism by which dissent gets criminalized. We grade it to the documents and let the courts resolve the law.
Questions worth taking seriously about the Minnesota surveillance operations
Is this confirmed, or an activist allegation?
Weren't these people actually charged with a crime?
What is 'Operation Puppet Master'?
If you are named on this page
If you are named on this page, or are a party materially affected by the claims made here, and you wish to respond, correct the record, or add context, use the Contact page. Responses are published verbatim alongside the original claim, with the sender identified and the date of receipt. The channel stays open for the life of the page.
This site aggregates and grades a record that other outlets and primary sources have already put on the record. Every FACT-graded claim above is sourced to court filings, government reports, sworn whistleblower disclosures, published investigative journalism, or named-source statements. The citations are the accountability mechanism; this section is how you get on the record too.
The Minnesota surveillance record and its primary documents.
Every claim in this piece grades to one of FACT · PROBABLY TRUE · SOME SMOKE · PURE SPECULATION · FALSE / MISLEADING. The grade badge hedges. The prose does not.
The full graded dossier is in the knowledge base at /docs/research/_inbox/dhs-minnesota-protest-surveillance.md. Primary documents: the discovery motion and exhibits in U.S. District Court, District of Minnesota (CourtListener RECAP gov.uscourts.mnd.234416, doc 212), and the September 2025 White House directive.
Full method: Methodology. Related hub: Surveillance State(s).
Last updated August 15, 2026.