Skip to content

Phase 6 Final Reporting Dissemination findis

elb-pr edited this page Apr 7, 2026 · 2 revisions

Phase 6 — Final Reporting & Dissemination (findis)

The Final Reporting & Dissemination (findis) phase is the sixth and final stage of the intelligence cycle. Its purpose is to synthesize structured data, relational patterns, and hypothesis results from previous phases into high-clarity products for decision-makers, legal audiences, and tactical practitioners. This phase enforces strict compliance with the ICD 203 (Intelligence Community Directive) for analytical standards and the NIM (National Intelligence Model) for operational output.

Analytical Briefing & ICD 203 Compliance

The primary output of Phase 6 is the Analytical Briefing, which utilizes the working/briefing.md template skills/claude-sleuth/references/findis/t13.1.md:3. The core requirement of this document is the Bottom Line Up Front (BLUF), which must appear as the first paragraph skills/claude-sleuth/references/findis/t13.1.md:7.

The BLUF Structure

The BLUF is derived directly from the Analysis of Competing Hypotheses (ACH) conducted in Phase 5 skills/claude-sleuth/references/findis/t13.1.md:17.

Component Requirement Source Logic
Lead Sentence Primary analytical conclusion with ICD 203 likelihood. Hypothesis with lowest inconsistency score (t12.3).
Supporting Points 1–3 sentences summarizing strongest evidence. Most diagnostic evidence items from ACH.
Critical Caveat Fragile assumptions or critical intelligence gaps. Sensitivity Analysis (t12.3) and Deception Assessment (t12.4).

Standardized Probability Language

All probabilistic claims must map to the seven-tier ICD 203 scale. It is strictly forbidden to mix confidence (evidence quality) and likelihood (event probability) in the same sentence.

ICD 203 Probability Scale:

  • Almost certain: 95–99%
  • Very likely: 80–95%
  • Likely: 55–80%
  • Roughly even chance: 45–55%
  • Unlikely: 20–45%
  • Very unlikely: 5–20%
  • Remote: 1–5%

Structural Separation Principle

To ensure objective review, the briefing body must maintain visual and logical separation between three categories:

  1. Facts: Verified data points (Admiralty Grade 1 or 2) with no interpretation.
  2. Assumptions: Rationale and impact statements for every assumption used in the ACH.
  3. Judgments: Analytical conclusions derived from ACH, including an Analysis of Alternatives explaining why competing hypotheses were rejected.

Data Flow: From Analysis to Dissemination

The following diagram illustrates how entities and data from previous phases (POLE, ACH, Chronological Matrix) flow into the final reporting templates and the persistent database (CSDb).

Intelligence Synthesis Data Flow

graph TD
    subgraph "Natural Language Space (Templates)"
        T_ACH["ach.md (Phase 5)"]
        T_CHRON["chronological-matrix.md (Phase 4)"]
        T_BRIEF["briefing.md (Phase 6)"]
        T_NIM["nim.md (Phase 6)"]
        T_MEMO["findings-memo.md (Phase 6)"]
    end

    subgraph "Code Entity Space (Scripts & DB)"
        S_EP["evidence_preservation.py"]
        D_D1[("CSDb (Cloudflare D1)")]
        D_T_LOG["task_log table"]
        D_E_REG["evidence table"]
    end

    T_ACH -- "Inconsistency Scores" --> T_BRIEF
    T_CHRON -- "Pattern/Trend Analysis" --> T_NIM
    
    S_EP -- "Final Hash Verification" --> D_E_REG
    T_BRIEF -- "Dissemination Ref" --> D_T_LOG
    T_MEMO -- "Confirmed Findings" --> D_D1
    
    D_D1 -- "Persistence" --> T_BRIEF
    D_D1 -- "Persistence" --> T_NIM
Loading

Administrative Finalization & Archiving

Case Summary & Dissemination Log

The research/case-decision-log.md is updated to reflect the final status (Completed, Closed, or Referred) and includes a full Document Register. Every act of sharing intelligence must be recorded in the Dissemination Log (using database/task-log.md) at the moment of sharing.

Evidence Vault Archiving

Before a case is closed, the evidence_preservation.py script is used to run a final SHA-256 hash verification on every digital asset. Any hash mismatch triggers an immediate quarantine skills/claude-sleuth/references/findis/t14.3.md:10. The vault must enforce WORM (Write Once, Read Many) properties and maintain a Chain of Custody Certification.

Specialized Dissemination Products

Findings Memo

Unlike the Analytical Briefing, the Findings Memo (working/findings-memo.md) prioritizes actionable precision for field investigators. It must explicitly include Negative Results—lines of inquiry that produced no substantive result—to prevent investigators from duplicating effort.

Social Media Attribution

The Account Attribution Report (working/report.md) is used when the investigation identifies a digital identity. It requires a testable hypothesis (e.g., "Account X belongs to Individual Y") and must address counter-attribution (e.g., sockpuppets or shared accounts).

National Intelligence Model (NIM) Output

The working/nim.md template is used to produce Strategic or Tactical Assessments.

  • Strategic Assessments: Focus on 6–12 month planning horizons and trend analysis from the Chronological Matrix.
  • Tactical Assessments: Drive immediate operational deployment via Tasking and Coordination Groups (TCGs).

Legal Disclosure (UK MG5 Standard)

For investigations leading to prosecution, material is prepared according to the MG5 standard. This involves the strict separation of sensitive material (e.g., covert methods) into MG6 schedules to prevent accidental disclosure.

Reporting Architecture & Legal Gateways

graph LR
    subgraph "Phase 6 Reporting Logic"
        R_GEN["report_generator.py"]
        T_BRIEF["briefing.md"]
        T_NIM["nim.md"]
        T_MG5["MG5 / report.md"]
    end

    subgraph "External Dissemination"
        D_CMD["Commanders (Strategic)"]
        D_TCG["TCG (Tactical)"]
        D_CPS["CPS / Legal (Disclosure)"]
    end

    R_GEN -- "ICD 203 Audit" --> T_BRIEF
    T_BRIEF -- "Analytical Conclusions" --> D_CMD
    T_NIM -- "Actionable Tasks" --> D_TCG
    T_MG5 -- "Factual Evidence" --> D_CPS

    style T_MG5 stroke-dasharray: 5 5
Loading

Phase 6 Quality Checkpoints

Checkpoint Requirement
Confidence vs. Likelihood NEVER appear in the same sentence skills/claude-sleuth/references/findis/report-disseminate.md:26.
Caveat Visibility MUST be in the main body; footnotes are insufficient for critical limitations skills/claude-sleuth/references/findis/report-disseminate.md:27.
Narrative Bias Audit Explicitly reference Analysis of Alternatives from Phase 5 skills/claude-sleuth/references/findis/report-disseminate.md:28.
Compartmentalization Covert methods MUST be moved to protected MG6 schedules skills/claude-sleuth/references/findis/report-disseminate.md:29.
Factual Language MG5 reports MUST be stripped of all analytical language and investigative theory skills/claude-sleuth/references/findis/t15.4.md:24.

Clone this wiki locally