HSI Incident Report on Sant Arrest Tags Whipple Shield With Program Codes for "ANTIFA", "NSPM-7" and "CUC OP KEYHOLE"
In United States v. Sant, the Whipple Shield incident report on the arrest of defendant Sant (document number MS02PR26MS0004-IN102, approved June 15, 2026, printed June 17; Doc. 231-12, defense Exhibit 48, filed August 25) lists ten “Program Code” entries for the case. They include “6BN - CUC OP KEYHOLE (MS)”, “AN4 - ANTIFA”, “DOX - Doxing”, “DT1 - DOMESTIC TERRORISM”, “IE1 - ICE Employee Threats” and “NS7 - NSPM-7”.
This answers two questions WIRED raised. On NSPM-7, an HSI record for Whipple Shield carries it as a tag in the case’s program codes, and the case-opening report (Doc. 212-2) and several later reports say the investigation was opened “In accordance with National Security Presidential Memorandum-7.” On Keyhole, the same record tags the case to the certified undercover operation. What a program code does is classify the case in HSI’s records. The report does not say that NSPM-7 or Keyhole directed any step, and the codes are a separate list from the narrative. The Puppet Master case-opening report (Doc. 212-1) does not cite NSPM-7.
The exhibit is an image-only scan, so this entry carries no machine-checked claims (verification: captured). The code list was read from the page image and an OCR read.
Sources & Citations
The Cascade Ledger. “HSI Incident Report on Sant Arrest Tags Whipple Shield With Program Codes for "ANTIFA", "NSPM-7" and "CUC OP KEYHOLE".” The Capture Cascade Timeline, June 15, 2026. https://capturecascade.org/event/2026-06-15--whipple-shield-incident-report-program-codes-antifa-nspm-7-cuc-op-keyhole/