Skip to content

Actor roster

Roster

Stable anchors for prose pages to reference people, organizations, funders, vendors, and institutions.

Actor Roster

Actor cards are loaded from the Wave 1 data contract. Narrative pages link here through the shared actor-link convention; the people-pillar narrative starts at Three Faces of the Machine.

Faces

Recurring public figures for the Wave 1 narrative arc.

Faces / Person

Ylva Johansson

Tier 1 / CORE FACT

Role

Campaigner: Home Affairs Commissioner and public proposal owner for the CSA Regulation.

Home Affairs Commissioner who proposed the CSA Regulation on 11 May 2022 and whose DG HOME relationship with Thorn anchors the access story.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Johansson is the documented Home Affairs proposal owner for the CSA Regulation, not merely a background Commission actor.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Faces / Person

Ursula von der Leyen

Tier 1 / CORE FACT

Role

Patron-level presence: thinner but documented high-level Commission access point.

Commission President linked to the access story through a documented Nov 2020 video conference with Kutcher and WeProtect and wider high-level Commission meetings.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Von der Leyen's Wave 1 role is a thinner patron-level presence based on documented high-level access, not a full campaign-owner claim.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Access meeting

Ashton Kutcher

Direction: Ashton Kutcher -> Ursula von der Leyen

documented high-level access

FACT

The public record includes a Nov 2020 video conference involving Kutcher, WeProtect, and von der Leyen.

  • Chat Control: The Political Map

Faces / Person

Roberta Metsola

Tier 1 / CORE FACT

Role

Procedural accelerator: Parliament presidency role with the EPP drive kept distinct.

Parliament President associated with the 7 Jul 2026 Rule 170 urgency procedure; the political drive is attributed to the EPP group under Weber.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Metsola is treated as a procedural accelerator around the Rule 170 urgency episode while the political drive remains attributed to the EPP group.

Do not collapse the EPP drive into a personal motive claim about Metsola.

DOCUMENTED FACT

The July 2026 political drive is attributed to the EPP group under Weber, distinct from Metsola's procedural act.

The card should not turn criticism of the EPP group into a personal motive claim about Metsola.

DOCUMENTED FACT

Gregorova criticized the EPP group's July 2026 urgency maneuver, which helps keep the EPP drive separate from Metsola's office.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Faces / Person

Antonio Labrador Jimenez

Tier 1 / CORE FACT

Role

Aide-level file owner: DG HOME official with a WeProtect leadership role.

DG HOME official leading the CSA file while also appearing in WeProtect governance; the public record supports a conflict/proximity card, not a hidden-command claim.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Labrador Jimenez is documented both as a DG HOME CSA-file official and as a WeProtect governance figure.

This supports a conflict/proximity card; it is not a sourced claim that WeProtect secretly directed DG HOME.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Governs

WeProtect

Direction: Antonio Labrador Jimenez -> WeProtect

governance role

FACT

WeProtect governance lists DG HOME via Labrador Jimenez, creating a documented policy-network overlap.

  • WeProtect Global Alliance & the Wider Network
  • Chat Control: The Political Map

Faces / Political group

Manfred Weber / EPP group

Tier 1 / CORE FACT

Role

Parliamentary engine: political drive behind the July 2026 urgency move.

The roster keeps the EPP/Weber drive distinct from Metsola's procedural act as Parliament President.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Metsola is treated as a procedural accelerator around the Rule 170 urgency episode while the political drive remains attributed to the EPP group.

Do not collapse the EPP drive into a personal motive claim about Metsola.

DOCUMENTED FACT

The July 2026 political drive is attributed to the EPP group under Weber, distinct from Metsola's procedural act.

The card should not turn criticism of the EPP group into a personal motive claim about Metsola.

DOCUMENTED FACT

Gregorova criticized the EPP group's July 2026 urgency maneuver, which helps keep the EPP drive separate from Metsola's office.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Parliamentary engine

Roberta Metsola

Direction: Manfred Weber / EPP group -> Roberta Metsola

political drive kept distinct

FACT

The July 2026 urgency procedure is Metsola's procedural act, while the political drive is attributed to the EPP group under Weber.

  • Chat Control: The Political Map

Faces / Institution

European Commission DG HOME

Tier 1 / CORE FACT

Role

Policy owner: Commission directorate behind the CSA Regulation and microtargeting record.

Commission directorate behind the CSA Regulation file and the illegal microtargeted ad campaign.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • Board, Executives & the Revolving Door Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

Thorn sells scanning software and lobbied the EU to mandate scanning.

This proves market-creation conflict, not covert US-government direction.

PROVEN FACT

The child-protection frame lowered democratic scrutiny through emotional framing, survivor pairing, and illegal microtargeting.

Scrutiny effects are documented; motive and direction must be stated only where sourced.

DOCUMENTED FACT

The Brave Movement survivor-pairing plan is part of the documented campaign record around the CSA Regulation.

This documents a campaign tactic and funding context; it does not prove survivors were directed by Thorn or a US-government actor.

DOCUMENTED FACT

DG HOME's paid X campaign microtargeted wavering Council states and the EDPS later found the targeting illegal.

The verified record names seven targeted states and an EDPS reprimand; the agency-attribution detail remains unconfirmed.

DOCUMENTED FACT

EDRi's Naranjo criticized the campaign's emotional framing as emotional blackmail at the detriment of democratic scrutiny.

This is a sourced civil-society criticism of the frame, not a factual finding about hidden command.

DOCUMENTED FACT

The Ombudsman record supplies the preferential-access and maladministration finding concerning Thorn's Commission access.

The finding is about process, disclosure, and preferential treatment; it is not a covert-command finding.

PROVEN INFERENCE

The dossier reads survivor pairing, illegal microtargeting, emotional framing criticism, and preferential access together as the scrutiny-reduction playbook.

This synthesis reinforces the proven masking-mechanism row while keeping documented tactics separate from claims of motive or command.

DOCUMENTED FACT

Johansson is the documented Home Affairs proposal owner for the CSA Regulation, not merely a background Commission actor.

DOCUMENTED FACT

Labrador Jimenez is documented both as a DG HOME CSA-file official and as a WeProtect governance figure.

This supports a conflict/proximity card; it is not a sourced claim that WeProtect secretly directed DG HOME.

PROVEN FACT

Abelson et al. document client-side scanning as architecturally dual-use and expandable by policy or configuration changes.

This proves technical exploitability risk; it does not prove US actors intend to exploit the holes.

DOCUMENTED FACT

Client-side scanning moves detection onto the user's device or pre-encryption client surface before a message is protected end to end.

This is a technical mechanism claim, not a claim that every product uses the same implementation.

SPLIT INFERENCE

False-positive scale, classifier limits, and scope-creep risk are bounded technical risks, not proof that US actors intend to exploit the holes.

The mechanism and risk are documented; intent to exploit remains unproven.

DOCUMENTED FACT

EU security R&D and operational programs fund the wider surveillance-industry ecosystem rather than Thorn specifically.

Keep this as industry-architecture context unless a specific actor grant is sourced.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

The Brave Movement belongs in the coalition map because the survivor-pairing plan is part of the documented campaign record.

This documents campaign context; it does not assert survivors were controlled by Thorn or US actors.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Lobbies for

Thorn

Direction: Thorn -> European Commission DG HOME

lobbied CSA Regulation file

FACT

Thorn registered and spent on EU lobbying during CSA Regulation negotiations.

  • EU Lobbying Spend & Funding Sources
  • Chat Control: The Political Map

Opposes

EDRi

Direction: EDRi -> European Commission DG HOME

opposes

FACT

EDRi coordinated opposition and criticized the emotional framing as lowering democratic scrutiny.

  • Chat Control: The Political Map
  • Scope & Thesis

Adjudicated

EDPS

Direction: EDPS -> European Commission DG HOME

illegal microtargeting finding

FACT

The EDPS found the Commission's political microtargeting campaign illegal in Dec 2024.

  • Chat Control: The Political Map

Market created by

Safer

Direction: Safer -> European Commission DG HOME

market fit

INFERENCE

A scanning mandate would create or expand demand for scanning products like Safer; this is the dossier's analytical commercial-capture inference.

  • Scope & Thesis
  • EU Lobbying Spend & Funding Sources

Vendor

Organizations, founders, products, and ancestor institutions in the scanning-vendor stack.

Vendor / Organization

Thorn

Tier 1 / CORE FACT

Role

Vendor and lobbyist: sells the scanner and appears in the access record.

US 501(c)(3) that sells Safer, lobbied the EU CSA file, and is central to the commercial-capture row of the thesis scorecard.

Receipts

  • EU Lobbying Spend & Funding Sources Research file / Tier 1
  • Thorn Form 990 Financial Analysis Research file
  • Board, Executives & the Revolving Door Research file / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

Safer/program-service software revenue was 49% of Thorn's FY2024 total revenue.

PROVEN FACT

Thorn sells scanning software and lobbied the EU to mandate scanning.

This proves market-creation conflict, not covert US-government direction.

DOCUMENTED FACT

The Ombudsman record supplies the preferential-access and maladministration finding concerning Thorn's Commission access.

The finding is about process, disclosure, and preferential treatment; it is not a covert-command finding.

PROVEN INFERENCE

The dossier reads survivor pairing, illegal microtargeting, emotional framing criticism, and preferential access together as the scrutiny-reduction playbook.

This synthesis reinforces the proven masking-mechanism row while keeping documented tactics separate from claims of motive or command.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Kutcher and Moore co-founded the DNA Foundation, which later became Thorn.

UNPROVEN INFERENCE

Kutcher's intelligence-world proximity is circumstantial and does not establish formal CIA affiliation.

Public self-presentation and law-enforcement relationships are proximity, not proof of recruitment or direction.

DOCUMENTED FACT

Heat Initiative is a Thorn-alumni spinoff pressuring Apple on scanning, not another verified law-enforcement-to-vendor hire.

The public sweep did not widen the Europol/FBI revolving-door pattern through Heat.

DOCUMENTED FACT

NCMEC is the US statutory CyberTipline and hash-corpus chokepoint upstream of Safer and the sovereignty-dependency argument.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

Safer combines known-material hash matching with machine-learning classification for new or unknown CSAM signals.

The record documents the product stack and limits; it does not prove that Safer can solve scanning in encrypted spaces.

DOCUMENTED FACT

Detection workflows depend on external hash corpora and reporting institutions, with NCMEC acting as the statutory US CyberTipline chokepoint.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

The European Ombudsman record supplies the maladministration and preferential-treatment finding concerning Thorn access.

DOCUMENTED FACT

Palantir is current in WeProtect and historical in Thorn's Technology Task Force; neither record proves Palantir shaped Chat Control.

Membership is proximity evidence, not a directing-hand finding.

DOCUMENTED FACT

Joe Lonsdale sat on Thorn's board until February 2022 and should not be described as a current board member.

The former seat is relevant proximity during the drafting run-up, not proof of command.

DOCUMENTED FACT

ECLAG is represented as member organizations and a steering group, not as a standalone legal recipient of Oak's $24M+ campaign funding.

Use funding-to-member-organizations language; do not say Oak gave $24M directly to ECLAG.

DOCUMENTED FACT

Safe Online records Thorn as a grantee in the wider funding map, while direct US-government grants to Thorn remain unverified.

This is funding-context evidence, not proof of direct US-government cash into Thorn.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

The documented vendor revolving door is two Europol-to-Thorn moves, plus John Bennett's later retired-FBI board tie.

Do not widen this into a broad Europol/FBI pattern beyond the named record.

DOCUMENTED FACT

Ernie Allen is a NCMEC/Thorn/WeProtect bridge figure, not an FBI or intelligence officer.

This is an interlock card; do not relabel Allen as FBI.

DOCUMENTED FACT

The Technology Coalition is the industry-convening model upstream of Thorn's shared-hash and tech-company coordination role.

DOCUMENTED FACT

IWF is an ECLAG steering member and Thorn-linked peer in the wider hotline and hash-sharing ecosystem.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Sells product

Safer

Direction: Thorn -> Safer

sells

FACT

Thorn sells Safer as program-service software revenue.

  • Technology & Partners
  • Thorn FY2024 Form 990
  • Thorn Form 990 Financial Analysis

Operated product

Spotlight

Direction: Thorn -> Spotlight

operated historical tool

FACT

Thorn operated Spotlight until transitioning it to a new home in May 2024.

  • Technology & Partners
  • Intelligence & VC Connections

Ombudsman found

European Ombudsman

Direction: European Ombudsman -> Thorn

maladministration and preferential treatment

FACT

The Ombudsman confirmed maladministration over withheld Thorn documents and flagged preferential treatment of Thorn's commercial interests.

  • Board, Executives & the Revolving Door
  • Chat Control: The Political Map

Interlocks with

WeProtect

Direction: WeProtect -> Thorn

governance interlock

FACT

WeProtect governance includes Thorn CEO Julie Cordua, and Ernie Allen chairs WeProtect while serving on Thorn's board.

  • WeProtect Global Alliance & the Wider Network
  • Board, Executives & the Revolving Door

Founded

Ashton Kutcher

Direction: Ashton Kutcher -> Thorn

co-founder

FACT

Kutcher co-founded the DNA Foundation, which became Thorn.

  • Thorn Lineage, Ancestors & Siblings
  • EU Lobbying Spend & Funding Sources

Founded

Demi Moore

Direction: Demi Moore -> Thorn

co-founder

FACT

Moore co-founded the DNA Foundation, which became Thorn.

  • Thorn Lineage, Ancestors & Siblings
  • EU Lobbying Spend & Funding Sources

Ancestor model

NCMEC

Direction: NCMEC -> Thorn

institutional ancestor

FACT

NCMEC and Ernie Allen are documented as the template institution and bridge for Thorn's tech-industry convening model.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Spinoff of

Heat Initiative

Direction: Heat Initiative -> Thorn

Thorn alumni spinoff

FACT

Heat Initiative was founded by Sarah Gardner after a decade at Thorn and by another ex-Thorn staffer.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Historical member of

Palantir

Direction: Palantir -> Thorn

historical Task Force member

FACT

Palantir's Thorn Technology Task Force membership is documented historically; current membership cannot be verified from open sources.

  • Intelligence & VC Connections
  • Debunked / Corrected Claims Ledger

Former board member

Joe Lonsdale

Direction: Joe Lonsdale -> Thorn

board member until Feb 2022

FACT

Lonsdale sat on Thorn's board from 2018 through February 2022 and is not a current board member.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Ancestor model

Technology Coalition

Direction: Technology Coalition -> Thorn

convening model

FACT

The Technology Coalition is the direct model for Thorn's tech-industry convening and shared-hash-database role.

  • Thorn Lineage, Ancestors & Siblings
  • Alliance Funding Map

Revolving door

Cathal Delaney

Direction: Cathal Delaney -> Thorn

Europol to Thorn staff move

FACT

Delaney joined Thorn immediately after leaving Europol's EC3 CSAM team and is part of the Ombudsman revolving-door record.

  • Board, Executives & the Revolving Door
  • Chat Control: The Political Map

Former board member

Fernando Ruiz Perez

Direction: Fernando Ruiz Perez -> Thorn

former Thorn board member

FACT

Ruiz Perez's term on Thorn's board began in January 2023 and ended when he stepped down in January 2024.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Board member

John F. Bennett

Direction: John F. Bennett -> Thorn

retired FBI Assistant Director

FACT

Bennett joined Thorn's board in November 2024; the title is Assistant Director, not FBI chief or director.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Board member

Ernie Allen

Direction: Ernie Allen -> Thorn

Thorn board interlock

FACT

Allen sits on Thorn's board and links the Thorn lineage to NCMEC and WeProtect.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Vendor / Person

Ashton Kutcher

Tier 1 / CORE FACT

Role

Founder and public advocate: co-founded the DNA Foundation/Thorn and appears in Commission access records.

Co-founder of the DNA Foundation/Thorn; later Brussels access is documented, while CIA-affiliation claims remain circumstantial and unproven.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Chat Control: The Political Map Research file / Tier 1
  • Intelligence & VC Connections Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Kutcher and Moore co-founded the DNA Foundation, which later became Thorn.

UNPROVEN INFERENCE

Kutcher's intelligence-world proximity is circumstantial and does not establish formal CIA affiliation.

Public self-presentation and law-enforcement relationships are proximity, not proof of recruitment or direction.

STRUCTURAL INFERENCE

The Kutcher / Petraeus / Mark43 item is carried as a structural-proximity signal, not as evidence of Thorn or Chat Control direction.

The scorecard names the signal; the roster does not upgrade it into an operational claim.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Founded

Thorn

Direction: Ashton Kutcher -> Thorn

co-founder

FACT

Kutcher co-founded the DNA Foundation, which became Thorn.

  • Thorn Lineage, Ancestors & Siblings
  • EU Lobbying Spend & Funding Sources

Vendor / Person

Demi Moore

Tier 1 / CORE FACT

Role

Founder: co-founded the DNA Foundation before the Thorn technology pivot.

Co-founder in the organization lineage; her baseline role is origin/founding context rather than a later EU lobbying role.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • EU Lobbying Spend & Funding Sources Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Kutcher and Moore co-founded the DNA Foundation, which later became Thorn.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Founded

Thorn

Direction: Demi Moore -> Thorn

co-founder

FACT

Moore co-founded the DNA Foundation, which became Thorn.

  • Thorn Lineage, Ancestors & Siblings
  • EU Lobbying Spend & Funding Sources

Vendor / Product

Safer

Tier 1 / CORE FACT

Role

Product: commercial scanning service at the center of the market-creation claim.

Thorn's CSAM-detection product, using hashing and classifier tooling and distributed as a commercial service.

Receipts

  • Technology & Partners Research file / Tier 1
  • Thorn FY2024 Form 990 Irs form 990
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

Safer/program-service software revenue was 49% of Thorn's FY2024 total revenue.

PROVEN FACT

Thorn sells scanning software and lobbied the EU to mandate scanning.

This proves market-creation conflict, not covert US-government direction.

DOCUMENTED FACT

NCMEC is the US statutory CyberTipline and hash-corpus chokepoint upstream of Safer and the sovereignty-dependency argument.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

Safer combines known-material hash matching with machine-learning classification for new or unknown CSAM signals.

The record documents the product stack and limits; it does not prove that Safer can solve scanning in encrypted spaces.

DOCUMENTED FACT

Detection workflows depend on external hash corpora and reporting institutions, with NCMEC acting as the statutory US CyberTipline chokepoint.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

SPLIT INFERENCE

False-positive scale, classifier limits, and scope-creep risk are bounded technical risks, not proof that US actors intend to exploit the holes.

The mechanism and risk are documented; intent to exploit remains unproven.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Sells product

Thorn

Direction: Thorn -> Safer

sells

FACT

Thorn sells Safer as program-service software revenue.

  • Technology & Partners
  • Thorn FY2024 Form 990
  • Thorn Form 990 Financial Analysis

Data source for

NCMEC

Direction: NCMEC -> Safer

CyberTipline data and hashes

FACT

Safer's hashes and classifier training data are sourced largely from NCMEC's CyberTipline corpus.

  • Technology & Partners
  • Palantir Sovereignty Paradox

Market created by

European Commission DG HOME

Direction: Safer -> European Commission DG HOME

market fit

INFERENCE

A scanning mandate would create or expand demand for scanning products like Safer; this is the dossier's analytical commercial-capture inference.

  • Scope & Thesis
  • EU Lobbying Spend & Funding Sources

Vendor / Product

Spotlight

Tier 1 / CORE FACT

Role

Historical product: Thorn trafficking tool co-built with Digital Reasoning.

Spotlight is included to anchor the documented Digital Reasoning product tie while keeping the In-Q-Tel connection historical rather than current.

Receipts

  • Technology & Partners Research file / Tier 1
  • Intelligence & VC Connections Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Digital Reasoning co-built Spotlight and was In-Q-Tel-backed, but the product tie is historical rather than current.

Do not compress this into 'the CIA built Spotlight' or describe the tie in the present tense.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Operated product

Thorn

Direction: Thorn -> Spotlight

operated historical tool

FACT

Thorn operated Spotlight until transitioning it to a new home in May 2024.

  • Technology & Partners
  • Intelligence & VC Connections

Co built

Digital Reasoning

Direction: Digital Reasoning -> Spotlight

co-built

FACT

Digital Reasoning co-built Spotlight with Thorn; the tie is historical and should not be described as current.

  • Technology & Partners
  • Intelligence & VC Connections
  • Debunked / Corrected Claims Ledger

Vendor / Product

Acus

Tier 1 / CORE FACT

Role

National policing deployment: Swedish police instance of Palantir Gotham.

Acus is the Swedish police Palantir deployment named in the Dagens ETC record; the page treats it as national policing evidence, not a Chat Control proof point.

Receipts

  • Palantir Acus in Sweden Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Dagens ETC revealed on 3 November 2025 that Swedish police had used the Palantir Gotham instance Acus for about five years.

The date is pinned in the research file; the Acus name-origin gloss remains rejected in the ledger.

DOCUMENTED FACT

The Acus record describes linked police registers, BankID, mobile-operator data, and social media into fast personal profiles, including people who are not suspects.

This is a Swedish policing-context claim, not a claim about Chat Control detection orders.

DOCUMENTED FACT

The Acus record says Swedish oversight bodies were uninformed, the contract was secret, and no published DPIA was found despite high-risk processing concerns.

The page carries the oversight gap as a national accountability problem, not as proof of a Europe-wide program.

DOCUMENTED INFERENCE

Acus is a concrete national example of the sovereignty-dependency problem: a US platform can become operational infrastructure inside member-state policing.

This is bounded inference from national evidence; it is not proof of a Europe-wide hidden program or a direct Chat Control connection.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Operated product

Palantir

Direction: Palantir -> Acus

Gotham instance named Acus

FACT

The Swedish Acus deployment is documented as the Swedish police instance of Palantir Gotham.

  • Palantir Acus in Sweden

Vendor / Organization

NCMEC

Tier 1 / CORE FACT

Role

Ancestor and chokepoint: US reporting and hash-corpus infrastructure upstream of scanning tools.

Congress-chartered US clearinghouse and CyberTipline operator that supplies the statutory and data-corpus backbone referenced by Safer and the sovereignty argument.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Technology & Partners Research file / Tier 1
  • Alliance Funding Map Research file / Tier 2
  • Palantir Sovereignty Paradox Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

NCMEC is the US statutory CyberTipline and hash-corpus chokepoint upstream of Safer and the sovereignty-dependency argument.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

Safer combines known-material hash matching with machine-learning classification for new or unknown CSAM signals.

The record documents the product stack and limits; it does not prove that Safer can solve scanning in encrypted spaces.

DOCUMENTED FACT

Detection workflows depend on external hash corpora and reporting institutions, with NCMEC acting as the statutory US CyberTipline chokepoint.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

SPLIT INFERENCE

False-positive scale, classifier limits, and scope-creep risk are bounded technical risks, not proof that US actors intend to exploit the holes.

The mechanism and risk are documented; intent to exploit remains unproven.

DOCUMENTED FACT

Ernie Allen is a NCMEC/Thorn/WeProtect bridge figure, not an FBI or intelligence officer.

This is an interlock card; do not relabel Allen as FBI.

DOCUMENTED FACT

The Technology Coalition is the industry-convening model upstream of Thorn's shared-hash and tech-company coordination role.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Ancestor model

Thorn

Direction: NCMEC -> Thorn

institutional ancestor

FACT

NCMEC and Ernie Allen are documented as the template institution and bridge for Thorn's tech-industry convening model.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Data source for

Safer

Direction: NCMEC -> Safer

CyberTipline data and hashes

FACT

Safer's hashes and classifier training data are sourced largely from NCMEC's CyberTipline corpus.

  • Technology & Partners
  • Palantir Sovereignty Paradox

Vendor / Organization

Heat Initiative

Tier 1 / CORE FACT

Role

Pressure-arm spinoff: Thorn alumni organization campaigning for Apple scanning.

Founded by former Thorn external-affairs staff and funded in the wider Oak/CIFF child-safety ecosystem; included as a Thorn spinoff, not as an extra law-enforcement revolving-door case.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Board, Executives & the Revolving Door Research file / Tier 1
  • Alliance Funding Map Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Heat Initiative is a Thorn-alumni spinoff pressuring Apple on scanning, not another verified law-enforcement-to-vendor hire.

The public sweep did not widen the Europol/FBI revolving-door pattern through Heat.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Spinoff of

Thorn

Direction: Heat Initiative -> Thorn

Thorn alumni spinoff

FACT

Heat Initiative was founded by Sarah Gardner after a decade at Thorn and by another ex-Thorn staffer.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Founded

Sarah Gardner

Direction: Sarah Gardner -> Heat Initiative

founded after Thorn role

FACT

Gardner spent a decade at Thorn before founding and leading Heat Initiative.

  • Board, Executives & the Revolving Door
  • Thorn Lineage, Ancestors & Siblings

Funders

Funding nodes and funding architectures, including records where money does not flow into Thorn.

Funders / Organization

Oak Foundation

Tier 2 / CONTEXT FACT

Role

Campaign funder: documented wider ecosystem funder rather than a covert-direction source.

Common funder in the wider child-safety campaign ecosystem, including WeProtect and ECLAG-member funding.

Receipts

  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Alliance Funding Map Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The Brave Movement survivor-pairing plan is part of the documented campaign record around the CSA Regulation.

This documents a campaign tactic and funding context; it does not prove survivors were directed by Thorn or a US-government actor.

DOCUMENTED FACT

Oak Foundation is documented as a top funder in WeProtect's 2024 budget record.

DOCUMENTED FACT

ECLAG is represented as member organizations and a steering group, not as a standalone legal recipient of Oak's $24M+ campaign funding.

Use funding-to-member-organizations language; do not say Oak gave $24M directly to ECLAG.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

The Brave Movement belongs in the coalition map because the survivor-pairing plan is part of the documented campaign record.

This documents campaign context; it does not assert survivors were controlled by Thorn or US actors.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Funds

WeProtect

Direction: Oak Foundation -> WeProtect

funds

FACT

WeProtect's 2024 budget lists Oak Foundation as the top funder.

  • WeProtect Global Alliance & the Wider Network

Funds

Brave Movement

Direction: Oak Foundation -> Brave Movement

funded hosted survivor campaign

FACT

The funding map records the Brave Movement / Global Survivor Council as Oak-backed through Together for Girls.

  • Alliance Funding Map
  • Scope & Thesis

Funders / Network

ECLAG funding network

Tier 2 / CONTEXT FACT

Role

Funding map node: Oak-backed member organizations, not a legal recipient called ECLAG.

The funding surface preserves the correction that ECLAG had no independent legal identity; Oak money is described as flowing to member NGOs building the campaign.

Receipts

  • Alliance Funding Map Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Oak Foundation is documented as a top funder in WeProtect's 2024 budget record.

DOCUMENTED FACT

ECLAG is represented as member organizations and a steering group, not as a standalone legal recipient of Oak's $24M+ campaign funding.

Use funding-to-member-organizations language; do not say Oak gave $24M directly to ECLAG.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Funds network

Oak Foundation

Direction: Oak Foundation -> ECLAG funding network

funded member NGOs

FACT

Oak channelled $24M+ to member organizations building the campaign; ECLAG itself had no legal identity.

  • Alliance Funding Map
  • Debunked / Corrected Claims Ledger

Funders / Organization

In-Q-Tel

Tier 1 / CORE FACT

Role

Seed investor in suppliers: documented Digital Reasoning investor, not a Thorn funder.

In-Q-Tel is included as a funder of an upstream supplier and Palantir seed backer; the data explicitly rejects direct US-intelligence cash into Thorn.

Receipts

  • Intelligence & VC Connections Research file / Tier 1
  • Technology & Partners Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Digital Reasoning co-built Spotlight and was In-Q-Tel-backed, but the product tie is historical rather than current.

Do not compress this into 'the CIA built Spotlight' or describe the tie in the present tense.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Seed investor

Digital Reasoning

Direction: In-Q-Tel -> Digital Reasoning

In-Q-Tel portfolio company

FACT

In-Q-Tel invested in Digital Reasoning; this documents a supplier-lineage tie, not cash into Thorn.

  • Intelligence & VC Connections
  • Technology & Partners

Funders / Funding program

EU security R&D programs

Tier 2 / CONTEXT FACT

Role

Public funding architecture: EU security and surveillance R&D and operational funds.

Included for later annex and article work on how EU public money funds parts of the security-industry ecosystem; it is not presented as a Thorn-specific grant.

Receipts

  • EU Security Industry & EU Money Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

EU security R&D and operational programs fund the wider surveillance-industry ecosystem rather than Thorn specifically.

Keep this as industry-architecture context unless a specific actor grant is sourced.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Funders / Funding program

End Violence Fund / Safe Online

Tier 2 / CONTEXT FACT

Role

Campaign and research funder: UNICEF-hosted fund with UK, government, foundation, and tech-capital support.

Safe Online is included because the funding map records Thorn and peer grantees while distinguishing grants from direct US-government funding.

Receipts

  • Alliance Funding Map Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Safe Online records Thorn as a grantee in the wider funding map, while direct US-government grants to Thorn remain unverified.

This is funding-context evidence, not proof of direct US-government cash into Thorn.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Funds

Thorn

Direction: End Violence Fund / Safe Online -> Thorn

Safe Online grantee

FACT

The funding map records Safe Online grants to Thorn while keeping the record distinct from direct US-government cash.

  • Alliance Funding Map

Intelligence-Adjacent

Documented proximity to intelligence, defense, or national-security infrastructure without a proven directing hand.

Documented proximity; no proven direction, covert command, or US-government cash into Thorn.

Intelligence-Adjacent / Organization

Palantir

Tier 1 / CORE FACT

Role

Intelligence-adjacent technology presence: documented member/interlock, not a proven directing hand.

WeProtect member and historical Thorn Technology Task Force participant; current Task Force status is not verified.

Receipts

  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Palantir is current in WeProtect and historical in Thorn's Technology Task Force; neither record proves Palantir shaped Chat Control.

Membership is proximity evidence, not a directing-hand finding.

DOCUMENTED FACT

Joe Lonsdale sat on Thorn's board until February 2022 and should not be described as a current board member.

The former seat is relevant proximity during the drafting run-up, not proof of command.

DOCUMENTED FACT

Dagens ETC revealed on 3 November 2025 that Swedish police had used the Palantir Gotham instance Acus for about five years.

The date is pinned in the research file; the Acus name-origin gloss remains rejected in the ledger.

DOCUMENTED FACT

The Acus record describes linked police registers, BankID, mobile-operator data, and social media into fast personal profiles, including people who are not suspects.

This is a Swedish policing-context claim, not a claim about Chat Control detection orders.

DOCUMENTED FACT

The Acus record says at least six Palantir developers worked at Swedish police headquarters under strict secrecy.

Embedded vendor presence is dependency evidence; it does not prove foreign command of the police.

DOCUMENTED INFERENCE

Acus is a concrete national example of the sovereignty-dependency problem: a US platform can become operational infrastructure inside member-state policing.

This is bounded inference from national evidence; it is not proof of a Europe-wide hidden program or a direct Chat Control connection.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Member of

WeProtect

Direction: Palantir -> WeProtect

member

FACT

Palantir remains listed as a WeProtect member as of the 2026-07-13 verification pass.

  • WeProtect Global Alliance & the Wider Network
  • Debunked / Corrected Claims Ledger

Historical member of

Thorn

Direction: Palantir -> Thorn

historical Task Force member

FACT

Palantir's Thorn Technology Task Force membership is documented historically; current membership cannot be verified from open sources.

  • Intelligence & VC Connections
  • Debunked / Corrected Claims Ledger

Operated product

Acus

Direction: Palantir -> Acus

Gotham instance named Acus

FACT

The Swedish Acus deployment is documented as the Swedish police instance of Palantir Gotham.

  • Palantir Acus in Sweden

Co founded

Joe Lonsdale

Direction: Joe Lonsdale -> Palantir

Palantir co-founder

FACT

The Lonsdale card carries intelligence-adjacent weight because he is a Palantir co-founder and former Thorn board member.

  • Board, Executives & the Revolving Door
  • Scope & Thesis

Intelligence-Adjacent / Institution

Swedish Police Authority

Tier 1 / CORE FACT

Role

National policing institution: documented user of Acus in the Swedish case.

The Acus record places Palantir inside a member-state policing context through the Swedish Police Authority while keeping the case national in scope.

Receipts

  • Palantir Acus in Sweden Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Dagens ETC revealed on 3 November 2025 that Swedish police had used the Palantir Gotham instance Acus for about five years.

The date is pinned in the research file; the Acus name-origin gloss remains rejected in the ledger.

DOCUMENTED FACT

The Acus record describes linked police registers, BankID, mobile-operator data, and social media into fast personal profiles, including people who are not suspects.

This is a Swedish policing-context claim, not a claim about Chat Control detection orders.

DOCUMENTED FACT

The Acus record says at least six Palantir developers worked at Swedish police headquarters under strict secrecy.

Embedded vendor presence is dependency evidence; it does not prove foreign command of the police.

DOCUMENTED FACT

The Acus record says Swedish oversight bodies were uninformed, the contract was secret, and no published DPIA was found despite high-risk processing concerns.

The page carries the oversight gap as a national accountability problem, not as proof of a Europe-wide program.

DOCUMENTED INFERENCE

Acus is a concrete national example of the sovereignty-dependency problem: a US platform can become operational infrastructure inside member-state policing.

This is bounded inference from national evidence; it is not proof of a Europe-wide hidden program or a direct Chat Control connection.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Operated product

Acus

Direction: Swedish Police Authority -> Acus

uses Acus

FACT

Dagens ETC revealed that the Swedish Police Authority had used Acus for about five years.

  • Palantir Acus in Sweden

Interlocks with

Palantir

Direction: Swedish Police Authority -> Palantir

embedded developers

FACT

The Acus record states that at least six Palantir developers worked at Swedish police headquarters under strict secrecy.

  • Palantir Acus in Sweden

Intelligence-Adjacent / Institution

Swedish Justice Ministry

Tier 2 / CONTEXT FACT

Role

Domestic accountability surface: ministry response that procurement is the police authority's decision.

The Riksdag paper trail records the Justice Minister's answer and debate line without converting that response into approval, motive, or Chat Control causation.

Receipts

  • Palantir Acus in Sweden Research file / Tier 1
  • Sweden Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The Acus record says Swedish oversight bodies were uninformed, the contract was secret, and no published DPIA was found despite high-risk processing concerns.

The page carries the oversight gap as a national accountability problem, not as proof of a Europe-wide program.

DOCUMENTED INFERENCE

Acus is a concrete national example of the sovereignty-dependency problem: a US platform can become operational infrastructure inside member-state policing.

This is bounded inference from national evidence; it is not proof of a Europe-wide hidden program or a direct Chat Control connection.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Intelligence-Adjacent / Organization

Digital Reasoning

Tier 1 / CORE FACT

Role

Historical product tie: co-built Spotlight and was an In-Q-Tel portfolio company.

The strongest product-level intelligence-adjacent tie is historical: Digital Reasoning co-built Spotlight, was In-Q-Tel-backed, was acquired by Smarsh in 2020, and is not a current Thorn tie.

Receipts

  • Technology & Partners Research file / Tier 1
  • Intelligence & VC Connections Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Digital Reasoning co-built Spotlight and was In-Q-Tel-backed, but the product tie is historical rather than current.

Do not compress this into 'the CIA built Spotlight' or describe the tie in the present tense.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Co built

Spotlight

Direction: Digital Reasoning -> Spotlight

co-built

FACT

Digital Reasoning co-built Spotlight with Thorn; the tie is historical and should not be described as current.

  • Technology & Partners
  • Intelligence & VC Connections
  • Debunked / Corrected Claims Ledger

Seed investor

In-Q-Tel

Direction: In-Q-Tel -> Digital Reasoning

In-Q-Tel portfolio company

FACT

In-Q-Tel invested in Digital Reasoning; this documents a supplier-lineage tie, not cash into Thorn.

  • Intelligence & VC Connections
  • Technology & Partners

Intelligence-Adjacent / Person

Joe Lonsdale

Tier 1 / CORE FACT

Role

Former board interlock: Palantir co-founder on Thorn's board until February 2022.

Lonsdale's former board seat is real and dated; the roster avoids current-seat wording and treats it as proximity during the drafting run-up, not direction.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Joe Lonsdale sat on Thorn's board until February 2022 and should not be described as a current board member.

The former seat is relevant proximity during the drafting run-up, not proof of command.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Former board member

Thorn

Direction: Joe Lonsdale -> Thorn

board member until Feb 2022

FACT

Lonsdale sat on Thorn's board from 2018 through February 2022 and is not a current board member.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Co founded

Palantir

Direction: Joe Lonsdale -> Palantir

Palantir co-founder

FACT

The Lonsdale card carries intelligence-adjacent weight because he is a Palantir co-founder and former Thorn board member.

  • Board, Executives & the Revolving Door
  • Scope & Thesis

Intelligence-Adjacent / Network

Mark43 / David Petraeus

Tier 1 / CORE FACT

Role

Adjacent investment-network signal: Kutcher plus ex-CIA Petraeus in Mark43.

Included because the thesis scorecard names it as structural proximity; the card does not convert that signal into a Thorn or Chat Control command claim.

Receipts

  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

STRUCTURAL INFERENCE

The Kutcher / Petraeus / Mark43 item is carried as a structural-proximity signal, not as evidence of Thorn or Chat Control direction.

The scorecard names the signal; the roster does not upgrade it into an operational claim.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Investment network signal

Ashton Kutcher

Direction: Ashton Kutcher -> Mark43 / David Petraeus

adjacent Mark43 signal

INFERENCE

The thesis scorecard treats Kutcher plus ex-CIA Petraeus in Mark43 as a structural-proximity signal, not proof of direction.

  • Scope & Thesis

Coalition

Campaign and alliance organizations in the child-safety policy circuit.

Coalition / Organization

WeProtect

Tier 2 / CONTEXT FACT

Role

Alliance hub: child-safety network with Thorn, Oak, government, and industry interlocks.

UK Home Office-origin alliance with government, industry, Oak, and Thorn governance interlocks.

Receipts

  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

STRUCTURAL INFERENCE

US-intelligence proximity is structural rather than a documented directing hand.

No documented US-government cash into Thorn and no proven covert command.

DOCUMENTED FACT

Labrador Jimenez is documented both as a DG HOME CSA-file official and as a WeProtect governance figure.

This supports a conflict/proximity card; it is not a sourced claim that WeProtect secretly directed DG HOME.

DOCUMENTED FACT

Oak Foundation is documented as a top funder in WeProtect's 2024 budget record.

DOCUMENTED FACT

Palantir is current in WeProtect and historical in Thorn's Technology Task Force; neither record proves Palantir shaped Chat Control.

Membership is proximity evidence, not a directing-hand finding.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

Iain Drennan is a government-to-advocacy personnel overlap for WeProtect, not a Europol/FBI-to-vendor case.

The card documents security-policy background without folding it into the vendor-capture count.

DOCUMENTED FACT

Ernie Allen is a NCMEC/Thorn/WeProtect bridge figure, not an FBI or intelligence officer.

This is an interlock card; do not relabel Allen as FBI.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Governs

Antonio Labrador Jimenez

Direction: Antonio Labrador Jimenez -> WeProtect

governance role

FACT

WeProtect governance lists DG HOME via Labrador Jimenez, creating a documented policy-network overlap.

  • WeProtect Global Alliance & the Wider Network
  • Chat Control: The Political Map

Interlocks with

Thorn

Direction: WeProtect -> Thorn

governance interlock

FACT

WeProtect governance includes Thorn CEO Julie Cordua, and Ernie Allen chairs WeProtect while serving on Thorn's board.

  • WeProtect Global Alliance & the Wider Network
  • Board, Executives & the Revolving Door

Member of

Palantir

Direction: Palantir -> WeProtect

member

FACT

Palantir remains listed as a WeProtect member as of the 2026-07-13 verification pass.

  • WeProtect Global Alliance & the Wider Network
  • Debunked / Corrected Claims Ledger

Founded

UK Home Office

Direction: UK Home Office -> WeProtect

origin institution

FACT

WePROTECT began as a UK Home Office initiative before merging into WeProtect Global Alliance.

  • WeProtect Global Alliance & the Wider Network

Chairs

Ernie Allen

Direction: Ernie Allen -> WeProtect

chairs WeProtect

FACT

WeProtect governance lists Allen as chair, creating a documented Thorn/NCMEC/WeProtect interlock.

  • WeProtect Global Alliance & the Wider Network
  • Thorn Lineage, Ancestors & Siblings

Executive lead

Iain Drennan

Direction: Iain Drennan -> WeProtect

executive director

FACT

Drennan has led WeProtect since its 2020 independent launch after UK Home Office and national-security roles.

  • Board, Executives & the Revolving Door
  • WeProtect Global Alliance & the Wider Network

Coalition / Institution

UK Home Office

Tier 2 / CONTEXT FACT

Role

Origin institution: founded WePROTECT and seeded the wider WeProtect lineage.

The UK Home Office origin matters for the coalition map and for Drennan's government-to-advocacy personnel context.

Receipts

  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Board, Executives & the Revolving Door Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

Iain Drennan is a government-to-advocacy personnel overlap for WeProtect, not a Europol/FBI-to-vendor case.

The card documents security-policy background without folding it into the vendor-capture count.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Founded

WeProtect

Direction: UK Home Office -> WeProtect

origin institution

FACT

WePROTECT began as a UK Home Office initiative before merging into WeProtect Global Alliance.

  • WeProtect Global Alliance & the Wider Network

Coalition / Organization

Brave Movement

Tier 2 / CONTEXT FACT

Role

Campaign coalition actor: survivor-led group in the documented pairing-plan record.

Included for the public playbook surface; the data documents campaign tactic and funding context without asserting survivor direction by Thorn or a US actor.

Receipts

  • Scope & Thesis Research file / Tier 1
  • Alliance Funding Map Research file / Tier 2
  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The Brave Movement survivor-pairing plan is part of the documented campaign record around the CSA Regulation.

This documents a campaign tactic and funding context; it does not prove survivors were directed by Thorn or a US-government actor.

DOCUMENTED FACT

Oak Foundation is documented as a top funder in WeProtect's 2024 budget record.

DOCUMENTED FACT

The Brave Movement belongs in the coalition map because the survivor-pairing plan is part of the documented campaign record.

This documents campaign context; it does not assert survivors were controlled by Thorn or US actors.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Funds

Oak Foundation

Direction: Oak Foundation -> Brave Movement

funded hosted survivor campaign

FACT

The funding map records the Brave Movement / Global Survivor Council as Oak-backed through Together for Girls.

  • Alliance Funding Map
  • Scope & Thesis

Coalition / Coalition

ECLAG steering group

Tier 2 / CONTEXT FACT

Role

Coalition node: six-member steering group supporting the CSA Regulation campaign.

ECLAG is represented as a coalition and member network, not as a standalone legal recipient of Oak money.

Receipts

  • Alliance Funding Map Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

ECLAG is represented as member organizations and a steering group, not as a standalone legal recipient of Oak's $24M+ campaign funding.

Use funding-to-member-organizations language; do not say Oak gave $24M directly to ECLAG.

DOCUMENTED FACT

IWF is an ECLAG steering member and Thorn-linked peer in the wider hotline and hash-sharing ecosystem.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Steering member

Thorn

Direction: Thorn -> ECLAG steering group

steering member

FACT

Thorn is listed in the ECLAG six-member steering group.

  • Alliance Funding Map

Coalition / Organization

Internet Watch Foundation

Tier 2 / CONTEXT FACT

Role

ECLAG steering member and industry-funded hotline peer.

IWF is included because the funding map identifies it as an ECLAG steering member, Oak grantee, and Thorn-linked peer via Rebecca Portnoff's board role.

Receipts

  • Alliance Funding Map Research file / Tier 2
  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

ECLAG is represented as member organizations and a steering group, not as a standalone legal recipient of Oak's $24M+ campaign funding.

Use funding-to-member-organizations language; do not say Oak gave $24M directly to ECLAG.

DOCUMENTED FACT

IWF is an ECLAG steering member and Thorn-linked peer in the wider hotline and hash-sharing ecosystem.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Coalition / Organization

Technology Coalition

Tier 2 / CONTEXT FACT

Role

Industry-convening model: direct predecessor for shared hash and tech-company coordination.

The Technology Coalition anchors the lineage from NCMEC/Allen to Thorn's convening model and Safe Online research funding.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Alliance Funding Map Research file / Tier 2
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

NCMEC is the US statutory CyberTipline and hash-corpus chokepoint upstream of Safer and the sovereignty-dependency argument.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

The Technology Coalition is the industry-convening model upstream of Thorn's shared-hash and tech-company coordination role.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Ancestor model

Thorn

Direction: Technology Coalition -> Thorn

convening model

FACT

The Technology Coalition is the direct model for Thorn's tech-industry convening and shared-hash-database role.

  • Thorn Lineage, Ancestors & Siblings
  • Alliance Funding Map

Revolving Door

Named personnel moves and board interlocks, with the Europol/FBI pattern kept to the evidence actually found.

Revolving Door / Person

Cathal Delaney

Tier 1 / CORE FACT

Role

Europol-to-Thorn staff move: former EC3 CSAM lead who joined Thorn in January 2022.

Delaney is one of the two documented Europol-to-Thorn moves and is central to the Ombudsman revolving-door finding.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Chat Control: The Political Map Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The documented vendor revolving door is two Europol-to-Thorn moves, plus John Bennett's later retired-FBI board tie.

Do not widen this into a broad Europol/FBI pattern beyond the named record.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Revolving door

Thorn

Direction: Cathal Delaney -> Thorn

Europol to Thorn staff move

FACT

Delaney joined Thorn immediately after leaving Europol's EC3 CSAM team and is part of the Ombudsman revolving-door record.

  • Board, Executives & the Revolving Door
  • Chat Control: The Political Map

Revolving Door / Person

Fernando Ruiz Perez

Tier 1 / CORE FACT

Role

Europol-to-Thorn board move: former Europol EC3 Head of Operations on Thorn's board until January 2024.

Ruiz Perez is documented as a former Thorn board member; the roster uses past-tense wording and does not equate him with the unresolved Fede/Federico reference.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Chat Control: The Political Map Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The documented vendor revolving door is two Europol-to-Thorn moves, plus John Bennett's later retired-FBI board tie.

Do not widen this into a broad Europol/FBI pattern beyond the named record.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Former board member

Thorn

Direction: Fernando Ruiz Perez -> Thorn

former Thorn board member

FACT

Ruiz Perez's term on Thorn's board began in January 2023 and ended when he stepped down in January 2024.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Revolving Door / Person

John F. Bennett

Tier 1 / CORE FACT

Role

Retired FBI Assistant Director on Thorn's board from November 2024.

Bennett supplies a documented senior law-enforcement board tie, but the card preserves the correction that he was not FBI chief or FBI director.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The documented vendor revolving door is two Europol-to-Thorn moves, plus John Bennett's later retired-FBI board tie.

Do not widen this into a broad Europol/FBI pattern beyond the named record.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Board member

Thorn

Direction: John F. Bennett -> Thorn

retired FBI Assistant Director

FACT

Bennett joined Thorn's board in November 2024; the title is Assistant Director, not FBI chief or director.

  • Board, Executives & the Revolving Door
  • Debunked / Corrected Claims Ledger

Revolving Door / Person

Ernie Allen

Tier 1 / CORE FACT

Role

NCMEC/WeProtect/Thorn bridge: NCMEC founding CEO, Thorn board member, and WeProtect chair.

Allen is a human interlock binding NCMEC, Thorn, and WeProtect; he is not presented as FBI or intelligence personnel.

Receipts

  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Board, Executives & the Revolving Door Research file / Tier 1
  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

NCMEC is the US statutory CyberTipline and hash-corpus chokepoint upstream of Safer and the sovereignty-dependency argument.

Dependency is documented; deliberate sovereignty-undermining remains an inference.

DOCUMENTED FACT

WeProtect has UK Home Office origins and governance interlocks with DG HOME, Thorn, Oak, and Ernie Allen.

The governance circuit is documented; secret command by WeProtect or the UK Home Office is not.

DOCUMENTED FACT

Ernie Allen is a NCMEC/Thorn/WeProtect bridge figure, not an FBI or intelligence officer.

This is an interlock card; do not relabel Allen as FBI.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Board member

Thorn

Direction: Ernie Allen -> Thorn

Thorn board interlock

FACT

Allen sits on Thorn's board and links the Thorn lineage to NCMEC and WeProtect.

  • Thorn Lineage, Ancestors & Siblings
  • Board, Executives & the Revolving Door

Chairs

WeProtect

Direction: Ernie Allen -> WeProtect

chairs WeProtect

FACT

WeProtect governance lists Allen as chair, creating a documented Thorn/NCMEC/WeProtect interlock.

  • WeProtect Global Alliance & the Wider Network
  • Thorn Lineage, Ancestors & Siblings

Revolving Door / Person

Iain Drennan

Tier 2 / CONTEXT FACT

Role

Government-to-advocacy context: WeProtect executive with UK Home Office and national-security background.

Drennan is included as adjacent personnel overlap, not as a Europol/FBI-to-vendor case.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • WeProtect Global Alliance & the Wider Network Research file / Tier 2
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Iain Drennan is a government-to-advocacy personnel overlap for WeProtect, not a Europol/FBI-to-vendor case.

The card documents security-policy background without folding it into the vendor-capture count.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Executive lead

WeProtect

Direction: Iain Drennan -> WeProtect

executive director

FACT

Drennan has led WeProtect since its 2020 independent launch after UK Home Office and national-security roles.

  • Board, Executives & the Revolving Door
  • WeProtect Global Alliance & the Wider Network

Revolving Door / Person

Sarah Gardner

Tier 1 / CORE FACT

Role

Thorn-to-advocacy move: former Thorn VP External Affairs who founded Heat Initiative.

Gardner is included to make the adjacent personnel move visible while preserving the caveat that it is not a law-enforcement revolving-door case.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Thorn Lineage, Ancestors & Siblings Research file / Tier 1
  • Debunked / Corrected Claims Ledger Ledger / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Heat Initiative is a Thorn-alumni spinoff pressuring Apple on scanning, not another verified law-enforcement-to-vendor hire.

The public sweep did not widen the Europol/FBI revolving-door pattern through Heat.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Founded

Heat Initiative

Direction: Sarah Gardner -> Heat Initiative

founded after Thorn role

FACT

Gardner spent a decade at Thorn before founding and leading Heat Initiative.

  • Board, Executives & the Revolving Door
  • Thorn Lineage, Ancestors & Siblings

Opposition

Civil-society and institutional accountability actors in the Wave 1 record.

Opposition / Organization

EDRi

Tier 1 / CORE FACT

Role

Civil-society opposition: coordinates critique of scanning mandates and scrutiny-reduction tactics.

Civil-society opposition coordinator; Naranjo's criticism anchors the democratic-scrutiny frame.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

The child-protection frame lowered democratic scrutiny through emotional framing, survivor pairing, and illegal microtargeting.

Scrutiny effects are documented; motive and direction must be stated only where sourced.

DOCUMENTED FACT

EDRi's Naranjo criticized the campaign's emotional framing as emotional blackmail at the detriment of democratic scrutiny.

This is a sourced civil-society criticism of the frame, not a factual finding about hidden command.

PROVEN INFERENCE

The dossier reads survivor pairing, illegal microtargeting, emotional framing criticism, and preferential access together as the scrutiny-reduction playbook.

This synthesis reinforces the proven masking-mechanism row while keeping documented tactics separate from claims of motive or command.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Opposition / Person

Diego Naranjo

Tier 1 / CORE FACT

Role

Civil-society critic: named the emotional-frame scrutiny problem.

EDRi figure whose criticism anchors the dossier's scrutiny-reduction frame; the card preserves it as sourced criticism, not a factual finding about hidden command.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

EDRi's Naranjo criticized the campaign's emotional framing as emotional blackmail at the detriment of democratic scrutiny.

This is a sourced civil-society criticism of the frame, not a factual finding about hidden command.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Opposition / Person

Patrick Breyer

Tier 1 / CORE FACT

Role

Parliamentary opposition: public tracker and critic of Chat Control procedure and access concerns.

Pirate Party / Greens-EFA opposition figure and public tracker of the file.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
  • Board, Executives & the Revolving Door Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

Breyer is documented as a public opposition tracker and critic of the Chat Control file.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Opposition / Person

Marketa Gregorova

Tier 1 / CORE FACT

Role

Parliamentary opposition: Greens/EFA critic of the July 2026 EPP urgency maneuver.

Czech Pirate/Greens-EFA opposition figure cited for criticism of the EPP group's procedural push; kept separate from claims about Metsola's personal motive.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The July 2026 political drive is attributed to the EPP group under Weber, distinct from Metsola's procedural act.

The card should not turn criticism of the EPP group into a personal motive claim about Metsola.

DOCUMENTED FACT

Gregorova criticized the EPP group's July 2026 urgency maneuver, which helps keep the EPP drive separate from Metsola's office.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Opposition / Expert group

Abelson et al. expert group

Tier 1 / CORE FACT

Role

Technical opposition: cryptographers and security experts on client-side-scanning risk.

Authors of Bugs in Our Pockets, used for the proven technical half of the security-holes row; their record does not prove US intent to exploit the holes.

Receipts

  • Technical & Legal Case Against Client-Side Scanning Research file / Tier 1
  • Scope & Thesis Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

Abelson et al. document client-side scanning as architecturally dual-use and expandable by policy or configuration changes.

This proves technical exploitability risk; it does not prove US actors intend to exploit the holes.

DOCUMENTED FACT

Client-side scanning moves detection onto the user's device or pre-encryption client surface before a message is protected end to end.

This is a technical mechanism claim, not a claim that every product uses the same implementation.

SPLIT INFERENCE

False-positive scale, classifier limits, and scope-creep risk are bounded technical risks, not proof that US actors intend to exploit the holes.

The mechanism and risk are documented; intent to exploit remains unproven.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Opposition / Institution

European Ombudsman

Tier 1 / CORE FACT

Role

Accountability source: institutional finding on maladministration and preferential treatment.

Institutional accountability source for maladministration and preferential-treatment findings.

Receipts

  • Board, Executives & the Revolving Door Research file / Tier 1
  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

DOCUMENTED FACT

The Ombudsman record supplies the preferential-access and maladministration finding concerning Thorn's Commission access.

The finding is about process, disclosure, and preferential treatment; it is not a covert-command finding.

PROVEN INFERENCE

The dossier reads survivor pairing, illegal microtargeting, emotional framing criticism, and preferential access together as the scrutiny-reduction playbook.

This synthesis reinforces the proven masking-mechanism row while keeping documented tactics separate from claims of motive or command.

DOCUMENTED FACT

The European Ombudsman record supplies the maladministration and preferential-treatment finding concerning Thorn access.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Ombudsman found

Thorn

Direction: European Ombudsman -> Thorn

maladministration and preferential treatment

FACT

The Ombudsman confirmed maladministration over withheld Thorn documents and flagged preferential treatment of Thorn's commercial interests.

  • Board, Executives & the Revolving Door
  • Chat Control: The Political Map

Opposition / Institution

EDPS

Tier 1 / CORE FACT

Role

Data-protection authority: adjudicated the Commission's political microtargeting campaign.

Data-protection authority that found the Commission's political microtargeting illegal in Dec 2024.

Receipts

  • Chat Control: The Political Map Research file / Tier 1
Card claims

Evidence grades and verdicts come from structured claim records.

PROVEN FACT

The child-protection frame lowered democratic scrutiny through emotional framing, survivor pairing, and illegal microtargeting.

Scrutiny effects are documented; motive and direction must be stated only where sourced.

DOCUMENTED FACT

DG HOME's paid X campaign microtargeted wavering Council states and the EDPS later found the targeting illegal.

The verified record names seven targeted states and an EDPS reprimand; the agency-attribution detail remains unconfirmed.

PROVEN INFERENCE

The dossier reads survivor pairing, illegal microtargeting, emotional framing criticism, and preferential access together as the scrutiny-reduction playbook.

This synthesis reinforces the proven masking-mechanism row while keeping documented tactics separate from claims of motive or command.

Typed relationships

Each relationship links to the other actor card and keeps the edge type visible.

Excluded Or Limited Records

Planned actors and relationships that are not promoted into actor cards or factual edges because the evidence is unresolved, stale, or too thin.

UNRESOLVED FACT

Separate Fede/Federico actor card

The nickname match to Fernando Ruiz Perez failed and no distinct Federico was found in the checked Thorn, WeProtect, Europol, or Ombudsman records.

  • Debunked / Corrected Claims Ledger
  • Board, Executives & the Revolving Door

NEEDS-PRECISION / STALE FACT

Current Palantir membership in Thorn's Technology Task Force

Palantir is current in WeProtect, but Thorn's Task Force membership is only documented historically because Thorn no longer publishes that roster.

  • Debunked / Corrected Claims Ledger
  • Intelligence & VC Connections

NEEDS-PRECISION FACT

Broad Europol/FBI revolving-door pattern across Thorn, Heat, and WeProtect

The documented vendor pattern is exactly two Europol-to-Thorn moves plus John Bennett's retired-FBI board tie; Gardner and Drennan are adjacent but differently shaped.

  • Debunked / Corrected Claims Ledger
  • Board, Executives & the Revolving Door

FALSE / UNPROVEN FACT

Direct US-intelligence funding relationship into Thorn or Chat Control lobbying

The actor graph includes In-Q-Tel supplier lineage and coalition proximity, but the checked record does not document direct US-intelligence cash into Thorn.

  • Debunked / Corrected Claims Ledger
  • Scope & Thesis