Government Describes CUC Keyhole on the Record: a 2008 HSI St. Paul Funding Vehicle, 77 Investigations

On September 10, 2026 the government filed a supplemental brief (Doc. 263) describing CUC Operation Keyhole on the record for the first time. It came after an August 27 discovery hearing at which, in the government’s own words, “it became clear how important ‘Operation Keyhole’ is to the defendants’ motion for discovery.” The government moved for leave on September 1; Magistrate Judge David Schultz granted it September 2 and set a September 11 deadline.

What the government says Keyhole is. A certified undercover operation administered exclusively by the Special Agent in Charge, HSI St. Paul — whose area of responsibility covers Minnesota, North Dakota and South Dakota, and historically included Iowa and Nebraska. It was first certified on December 22, 2008 by the then-Director of the ICE Office of Investigations, following review by the Undercover Review Committee. Statutory authority is cited to 8 U.S.C. § 1363a and 19 U.S.C. § 2081.

Its function, per the brief, is financial: undercover work “bear[s] higher costs than other investigative activities,” and a CUC lets an SAC office share undercover assets across investigations. The brief’s own section heading states the position — Keyhole “functioned as a funding source, not an investigative tool into Defendants’ Conduct.”

The numbers, all new to the public record:

• 77 separate criminal investigations have been approved under CUC Keyhole since 2008
• Across “narcotics trafficking, child sexual abuse, financial investigations, and counter-proliferation”
• Last reviewed by the URC in June 2026, recertified by the HSI Executive Associate Director on June 29, 2026; next reauthorization due December 31, 2026
• As of that June recertification, six active investigations were using Keyhole — one of them Project Whipple Shield
• Operation Puppet Master was approved for inclusion January 2026; Project Whipple Shield in March 2026
• Puppet Master had already “ceased undercover activity under CUC Keyhole” by the June review

The government states the other five active investigations are unrelated to these defendants and to the targets of Puppet Master and Whipple Shield, and argues that disclosure would endanger undercover agents and informants in those matters. On the law it argues the defendants have shown no materiality under Rule 16, calling the request a “fishing outing into an unrelated operation.”

What this resolves, and what it does not. This corpus recorded in January that Puppet Master was “accepted under CUC Op Keyhole” and flagged the undisclosed boundary as the finding — while stating plainly that nothing established Keyhole as a national political-surveillance operation. That discipline holds up. On the government’s account Keyhole is regional, not national; predates this administration by sixteen years; and is an accounting-and-assets vehicle rather than a program with a political mission. If accurate, the honest reading is that the nesting is less sinister than the sentence made it look, and the corpus’s refusal to overclaim was correct.

Three things nonetheless remain live. First, this is the government’s characterization in an adversarial filing resisting discovery, not a produced record — no certification memorandum, reauthorization document or audit has been disclosed. Second, the account is internally notable: an operation certified in 2008 for narcotics and child-exploitation work absorbed two domestic political-surveillance investigations in January and March 2026, which is a fact about what the vehicle was used for regardless of what it was built for. Third, Defendant Sant contests the premise of the filing itself — his opposition (Doc. 258) notes that AUSA Tory Sailer emailed defense counsel Jill Brisbois on September 1 saying he “looked into this further yesterday and learned to [sic] operational purpose of the Keyhole is not how it was characterized at the hearing,” and argues the government offers no plausible explanation for why this information was unavailable before. Sant has asked for an evidentiary hearing on the scope and purpose of Operation Keyhole; Schultz said he will rule on that request after the supplemental briefing, and gave Sant seven days from the September 10 filing to respond.

The exclusivity claim checks out against our own documents. The brief says Keyhole is administered exclusively by the SAC HSI St. Paul (MN/ND/SD). This corpus documents an HSI undercover agent inside a church sanctuary in Ann Arbor, Michigan on April 8, 2026, on a Minnesota-originated tasking — which looked like a tension. It is not: that ROI carries case number DD02PR26MS0003, while every Minnesota document in the set carries MS02…. On the most economical reading of the prefix as an office code, the Ann Arbor operation was opened under a Detroit field office case number and therefore outside St. Paul’s CUC. Stated as a reading rather than a fact — no HSI numbering key has been located. See 2026-04-08–hsi-undercover-operation-zion-lutheran-church-ann-arbor.

Sourcing note. Every figure and date above is quoted or paraphrased directly from Doc. 263, retrieved from RECAP and read in full (8 pages, 38 occurrences of “Keyhole”). Nothing here is inferred from press coverage. The government’s factual assertions are recorded as its assertions; none has been independently verified against a produced document, and the defense has not yet responded.