Cold open
The campaign memo
The opening document is not a spy cable. It is a campaign plan: the leaked Brave Movement "divide and conquer" memo, where advocates mapped which abuse survivor should be paired with which hesitant lawmaker. The tactic worked because the subject is real, urgent, and morally charged. That is exactly why this dossier treats the frame with care. The survivor-pairing plan is part of the documented campaign record. FACT
The question is not whether child sexual abuse material is serious. It is whether the words "for the children" were used to move a surveillance mandate through European institutions with less scrutiny than the mandate deserved. EDRi's Naranjo called the pressure emotional blackmail at the detriment of democratic scrutiny; DG HOME later received an EDPS finding over illegal political microtargeting. FACT
The reveal
Then the vendor appears
The Ombudsman finding changes the story's center of gravity. Thorn, a US nonprofit, sells Safer, software for scanning and detection. It also lobbied the EU file that would mandate scanning. The European Ombudsman record supplies the maladministration and preferential-treatment finding concerning Thorn's Commission access. FACT
That is the proven commercial-capture core: a charity sells the scanner, appears in the lobbying record around a scanning mandate, and then appears in an institutional access finding. The dossier's analytical step is narrower: a law requiring scanning would create or expand demand for scanning products like Safer. INFERENCE
The widening
Not one lobbyist, an architecture
Thorn is not the whole machine. The Wave 1 roster shows a public campaign circuit: European Commission DG HOME owned the file, WeProtect sits in the alliance network, Oak Foundation funds parts of the wider child-safety ecosystem, EDPS adjudicated the microtargeting record, and European Ombudsman supplies the access finding. The dossier reads those records together as architecture, not as a single hidden order. INFERENCE
The architecture matters because it outlives a vote, a commissioner, or a press cycle. It links products, policy access, survivor-facing advocacy, public-affairs spending, and technical dependency. The circular-flow visual below keeps that logic inspectable: sell the scanner, lobby the scanning law, expose the preferential-access finding, mark market creation as analysis, and return to the child-protection frame that lowered scrutiny.
What we do not claim
The limit is part of the story
This investigation does not claim proven covert US-government direction. It does not claim Thorn, WeProtect, Oak, or any US actor secretly commanded the Commission. The record shows commercial capture, revolving-door and access concerns, and structural US-intelligence proximity; it does not prove a covert command chain.
It also does not claim a proven Thorn/Chat Control industrial-espionage vehicle. The industrial and economic espionage row remains speculative in the scorecard, and the methods page publishes that weakness rather than burying it. The structural story is still severe: nobody had to order every part for the parts to align.