# Surveillance, Metadata, Data Brokers, and Identity Inference

## Status

Reviewed-with-limitations publication wrapper for IARPG-OPS-2 2.0.30-wip. The supplied Markdown remains byte-preserved and individually addressable. This wrapper adopts only the bounded structural guidance in `#reviewed-synthesis`; current factual, legal, technical, historical, institutional, and attribution claims in the source require renewed claim-level verification.

## Purpose

Expose publication-safe methods from the supplied report while preserving source identity, source-authored wording, uncertainty, correction history, rights, privacy, and the boundary against operational cyber, surveillance, coercion, targeting, or private-person identification guidance.

## Evidence Reviewed

- [Preserved source file](../../source-files/evidence-attribution-oversight-and-leaderless-networks/Metadata%20And%20Identity%20Inference%20Analysis%282%29.md)
- [Research review register](../../../evidence-attribution-research-review-register.json)
- [Collection integration findings](evidence-attribution-oversight-and-leaderless-network-research-integration-report.md#findings)
- [Public Evidence and Attribution Method](../../../evidence-attribution.php#method)

## Reviewed Synthesis

Observed data, derived attributes, identity matches, confidence, decision use, harm, and remedy must be separate fields. Metadata can be identifying and inference can be consequential, but a model output is not an observed fact about a person. Public systems should minimize personal data, disclose inference provenance and uncertainty, prevent protected-trait and targetability scoring, and provide correction and appeal paths.

### Retained structural guidance

- Separate raw observation from derived attribute, identity match, confidence, decision use, harm, and remedy.
- Treat de-identification and provenance claims as context-dependent safeguards, not guarantees.
- Require data minimization, purpose limitation, access control, auditability, correction, deletion-request handling, and human review for consequential use.

### Current-fact boundary

The source-declared research cutoff is **researched 2026-07-24; current-through 2026-07-15**. Officeholders, statutes, court posture, platform policy, enforcement actions, organizational claims, incident attribution, technical capability, budgets, memberships, and ongoing events must be rechecked against current primary or authoritative evidence before factual reuse. Source citations and translations have not been independently reconstructed by this wrapper.

### Safety and rights boundary

This wrapper does not authorize operational intrusion, denial-of-service, evasion, covert contact, doxxing, surveillance, credential discovery, target selection, influence execution, weapons use, or recruitment. Private-person identity and protected-characteristic inference remain excluded. Legal, journalistic, and institutional labels are attributed to their sources and do not transfer guilt or character to a population or everyone using a shared symbol.

## Findings

| Topic | Disposition | Current bounded statement |
|---|---|---|
| observation versus inference | `retained-method-guidance` | Keep observed metadata, inferred attribute, identity hypothesis, confidence, and decision use separate. |
| de-identification | `bounded` | Do not describe stripped identifiers as a guarantee against re-identification or sensitive inference. |
| automated decisions | `retained-method-guidance` | Record proxy effects, false positives, affected communities, correction, appeal, and remedy. |
| current law and deployments | `requires-current-verification` | Recheck privacy law, enforcement, litigation, municipal systems, vendors, and deployment status before reuse. |
| identity targeting | `safety-restricted` | Do not publish re-identification recipes, private-person profiling, surveillance evasion, target lists, or data-broker acquisition guidance. |
| scoring boundary | `rejected-for-public-reuse` | Do not create protected-characteristic, credibility, capacity, susceptibility, threat, loyalty, recruitability, or targetability scores. |

## Website Applications

- Privacy and reviewer workspaces
- Evidence inference records
- Rights and bias audits

The public implementation uses these methods to improve evidence vocabulary, attribution ladders, oversight questions, leaderless-network role separation, correction records, and privacy boundaries. It does not publish the source as a live threat feed or operational manual.

## Risks and Limitations

The source is English-language and source-authored. Its internal confidence labels, citations, examples, and legal interpretations are not repository certifications. Transparent systems may generate more documented disputes than opaque systems; absence of public records is not evidence of absence. A structural method can be useful while individual examples remain outdated, incomplete, disputed, or outside the repository's review capacity.

## Validation Performed

The release validates the source byte count and SHA-256, report route, reviewed-synthesis anchor, review-register mapping, public method links, reciprocal UAI references, schema records, search and sitemap discovery, and final-package equality. These checks establish repository structure and custody only.

## Memory References

- [Evidence attribution and oversight](../../../.uai/evidence-attribution.uai#current-publication-contract)
- [Evidence model](../../../.uai/evidence-model.uai#evidence-attribution-method)
- [Source handling](../../../.uai/source-handling.uai#evidence-attribution-and-leaderless-network-collection)
- [Source provenance](../../../.uai/source-provenance.uai#evidence-attribution-oversight-and-leaderless-network-collection)
- [Durable pointer ledger](../../../.uai/long-term-memory.uai#evidence-attribution-oversight-and-leaderless-network-research)

## Related Durable Documents

- [Collection integration findings](evidence-attribution-oversight-and-leaderless-network-research-integration-report.md#findings)
- [Information-environment custody boundary](information-environment-research-packet-intake-provenance-and-reuse-boundary.md#findings)
- [International institutional fairness](equal-standards-across-unequal-records-international-institutional-fairness-rights-and-evidence-audit.md#mandatory-analytical-distinctions-and-rights-safeguards)
- [Claim-level correction and fairness audit](claim-level-review-and-comparative-fairness-audit.md#findings)

## Human-Review Readiness

- [Human-review readiness for this wrapper](evidence-attribution-review-readiness-surveillance-metadata-data-brokers-and-identity-inference.md#review-readiness)
- [Machine reviewer packet](../../../evidence-attribution/review-readiness/packets/metadata-identity-inference.json)

## Supersession Status

First repository wrapper for this supplied source. Later claim review may supersede individual dispositions but must preserve the source path, source checksum, this wrapper, and visible correction history.