Operation Puppet Master Was Accepted Under 'CUC Op Keyhole' — A Certified Undercover Operation of Undisclosed Scope

Opening

The Operation Puppet Master case-opening report closes with one sentence that the Minnesota surveillance coverage has almost entirely passed over:

“This case has also been accepted under CUC Op Keyhole.”

Verified directly in our archived copy of the primary document (Doc. 212-1, text layer, not OCR). The same page records that AUSA Kristian Weir accepted the investigation for federal prosecution.

If Keyhole is what HSI’s own terminology says it is, Puppet Master is not the program. It is one investigation inside a program.

What “CUC” means

“CUC” is ICE terminology for Certified Undercover Operation — not a case, but a formally administered framework through which individual investigations are authorized, funded, equipped and managed.

ICE’s Undercover Operations Handbook (April 14, 2008, public) describes what a CUC can carry: undercover identities, covert communications, leased surveillance vehicles, recordings, bank accounts, business credit cards, and other technical and operational resources maintained specifically for the operation. Certification requires an Undercover Review Committee and higher-level approval. Individual investigations can be placed within a CUC and draw on its authorization and resources.

So the sentence is not decorative. It states that Puppet Master was slotted into a pre-existing, certified, resourced structure — one whose name, scope, authorization date, and other member investigations are all undisclosed.

Why this is the “much bigger” question

Keyhole’s boundaries are unknown, and that is the finding. DHS has not publicly confirmed Keyhole’s relationship to Puppet Master or Whipple Shield, and no public ICE or HSI document explains its mission. Nothing disclosed so far establishes that Keyhole was a national political surveillance operation — and that must be stated plainly rather than implied.

But three things make the undisclosed boundary consequential rather than merely curious:

1. A certified operation is by construction larger than any one investigation inside it. That is what certification is for. If Puppet Master was accepted under Keyhole, Keyhole predates it and was built to hold more than it.

2. Undercover activity already crossed state lines. The Ann Arbor church operation (2026-04-08–hsi-undercover-operation-zion-lutheran-church-ann-arbor) shows the Minnesota investigation tasking a Michigan field office. Whether that ran on Keyhole’s authorization is not established — but the question is now unavoidable.

3. The undercover presence PREDATES Puppet Master. HSI records show undercover monitoring before the case formally opened on January 28. At a publicly advertised ICEWatch training on December 3, 2025, an undercover agent reported that participants were being taught to document ICE activity, notify others of agents’ presence, and lawfully observe enforcement. An agent later volunteered for an “action” team involved in planning protest activity.

   Point 3 is the structural one. If agents were already inside these groups in December, the January 28 case opening did not start the surveillance — it gave existing surveillance a case number. And the thing that existed before the case number is Keyhole.

The predicate, in the government’s own words

The case-opening report states its purpose without euphemism. It is not opened to investigate a crime. It is opened:

“to document the integration of Homeland Security Investigations (HSI) Undercover Agents (UCAs) into groups, organizations, or other gatherings identified by intelligence information and other sources as potentially threatening to law enforcement”

Note the standard: groups identified by intelligence information as potentially threatening. Not groups suspected of a crime.

The synopsis dates the predicate to “Since November 28, 2026” — an evident typo for 2025, but it places the origin before Renee Good was killed on January 7, 2026, which cuts against the tidy four-days-after-Pretti framing (including in our own earlier entries). The Minneapolis killings accelerated something already running.

The administrative trail that should exist

Certified Undercover Operations are designed to leave records. The handbook describes formal applications, certification memoranda, and periodic review. ICE’s Office of Professional Responsibility said as recently as May 2026 that it conducts biennial financial audits of the agency’s Certified Undercover Operations.

That matters for what can be asked for: Keyhole should not be an ephemeral codename. There should be an application, a certification decision, an authorization scope, financial audit records, and a list of investigations accepted under it.

Confirmed directly from the 2008 Handbook’s own text (2026-08-31 pass): certified undercover operations are reauthorized every 6 months by the Director of OI/HSI, advised by an Undercover Review Committee, and “auditors from OPR/MIU will conduct a comprehensive independent audit of each undercover operation every 2 years,” retained as part of the operation’s permanent records (§7.4.4). “MIU” is ICE’s own Management Inspection Unit, under ICE’s Office of Professional Responsibility — a different office from CBP’s OPR. This confirms, from the interpretive document itself rather than press paraphrase, that a written certification record and at least one biennial audit report should exist if Keyhole has been running long enough to complete a 2-year cycle.

Defense attorney Kevin Riach, in the Sant defendants’ Motion for Discovery (Doc. 212, filed 2026-08-13), specifically asked the government to produce “reports generated pursuant to CUC Operation Keyhole,” citing “the absence from the disclosures of any documentation regarding the approval, authorization, scope or purpose of Operation Keyhole.”

The government’s response (Doc. 227, filed 2026-08-21) does not answer this request. Read in full text: the government’s 37-page consolidated opposition argues categorically against the defendants’ Rule 16, Brady, and selective-prosecution theories, but contains no occurrence of “Keyhole,” “CUC,” or the five specifically-withheld Project Whipple Shield ROIs the same motion named (20, 41, 104, 112, 133). This is a non-response, not a refusal, and should be characterized precisely as that: as of the most recent filing, the Keyhole production request has not been rebutted, distinguished, or engaged. No ruling from Magistrate Judge David Schultz has issued as of 2026-08-31. A third filer — the Cato Institute / Society for the Rule of Law and Democracy / FIRE amicus brief (Doc. 234-1, filed 2026-08-25) — has independently named “Operation Keyhole” in its own text, characterizing it collectively with Puppet Master and Whipple Shield as evidence NSPM-7 “was used … to surveil dissent”; the brief (p. 19, under the heading “NSPM-7 Was Used in This Case to Surveil Dissent”) cites only the ECF 212 exhibits and adds no new documentary fact about Keyhole beyond what the ROI already stated.

See keyhole-certification-handbook-and-docket-watch-2026-08-31 for the full docket-watch and Handbook-retrieval writeup, including a drafted (not sent) FOIA for the OPR/MIU audit and reauthorization records.

What we do NOT know — state this before publishing

• The specific date Keyhole was certified, and the name of the certifying official (the Handbook establishes that this authority sits with the Director of OI/HSI or a designee, as a matter of the governing framework — but not who actually signed Keyhole’s certification)
• What other investigations were accepted under it, in Minnesota or elsewhere
• Whether the Ann Arbor operation, the Clearview searches, or the church recordings ran on Keyhole’s authorization
• Whether Keyhole is regional or national
• Whether the “action team” volunteering constitutes inducement — the records do not establish it
• Whether a current (post-2008) version of the Undercover Operations Handbook exists — no successor was locatable via ICE’s own site, DHS’s site, DHS OIG, oversight.gov, or the Internet Archive’s index of ice.gov (zero URLs containing “undercover” have ever been captured on ice.gov). That is consistent with undercover policy being non-public by design, per the 2008 Handbook’s own confidentiality language — it does not mean no update happened.

Every one of those is a question the documents raise and do not answer. The honest claim is that the named operations sit inside an unnamed structure, not that the structure is nationwide.

Coverage status

Thinly covered. As of 2026-08-20 the Keyhole nesting appears in Biometric Update (2026-08-20, tier 2, a biometrics trade outlet) and a New Republic Substack piece. MPR News reported on 2026-08-28 that defendants were seeking “details of Operation Keyhole and Operation Puppet Master” and that few details of the operations were available. We did not find the Keyhole nesting reported by NYT, Guardian, KSTP, Minnesota Reformer, CBS, AP or Democracy Now (not each checked). Credit Biometric Update for surfacing it; the corpus contribution is that we hold the primary document and can verify the sentence directly.

UPDATE 2026-09-10: the government answered

The non-response ended. After the August 27 discovery hearing the government moved for leave to file supplemental briefing (Doc. 257, Sept 1), Schultz granted it (Doc. 259, Sept 2), and the Government’s Supplemental Brief (Doc. 263, filed Sept 10) describes Keyhole on the record.

Its account: a certified undercover operation administered exclusively by the SAC, HSI St. Paul (MN/ND/SD, historically IA/NE), first certified December 22, 2008, whose function is financial — sharing undercover assets across investigations. 77 separate investigations since 2008, spanning narcotics, child sexual abuse, financial and counter-proliferation work. Recertified by the HSI EAD June 29, 2026; next review due December 31, 2026. Six active investigations as of June, one being Whipple Shield. Puppet Master approved for inclusion January 2026; Whipple Shield March 2026; Puppet Master had ceased undercover activity under Keyhole by June.

This substantially deflates the “much bigger question” framed above, and that should be said plainly. On the government’s account Keyhole is regional not national, predates this administration by sixteen years, and is an accounting vehicle rather than a program with a political mission. The discipline in the “What we do NOT know” section below was correct: the corpus declined to claim a nationwide political-surveillance operation, and the record now says it was not one.

What remains live: this is an adversarial characterization resisting discovery, not a produced certification record or audit; the vehicle’s use — absorbing two domestic political-surveillance investigations in January and March 2026 — is a separate fact from its design; and Sant contests the filing’s premise, citing an AUSA email and asking for an evidentiary hearing on Keyhole’s scope and purpose, which Schultz will rule on after briefing.

Full detail: 2026-09-10–government-describes-cuc-keyhole-on-record-funding-vehicle-2008.

Cross-References

• 2026-08-13–operation-puppet-master-hsi-infiltrates-minnesota-anti-ice-community
• 2026-02-15–project-whipple-shield-hsi-financial-surveillance-minnesota-unions
• 2026-04-08–hsi-undercover-operation-zion-lutheran-church-ann-arbor
• prosecution-as-surveillance-wedge
• criminalizing-dissent-the-descending-gradient
• us-v-sant-0-26-cr-00115-doc-212-full-roi-set
• keyhole-certification-handbook-and-docket-watch-2026-08-31