FOURTH ATTEMPT

This is a national security dispatch, written from the discipline its name promises and not from the politics that surround it. I write it because the institutions whose job it is to harden these conditions are already, in their own meetings and in their own designations, confirming the reading.

The piece you are about to read has two parts. The first is the method — what predictive analytics actually is when it is practiced as a discipline rather than performed as a brand — and what the method produced when I applied it on day twenty-seven of the 2019 government shutdown. The second is the recalibration. Seven years have passed. The variables have done what the model said they would do. The calendar has now stacked them in a way the 2019 piece could not have anticipated. And the principal-protection architecture surrounding the President of the United States is being asked to absorb that stack at the same moment a domestic political-violence baseline of three attempts on his life in twenty-two months is still being processed by the agency that exists to prevent the fourth.

If this dispatch reads as urgent, that is because the conditions are. It is not the story they tell you that is important. It is what they omit. What is being omitted right now is the convergence. The work of this dispatch is to name it while naming it still matters.

January 17, 2019

Seven years ago this past January, on the twenty-seventh day of the longest federal government shutdown in American history, I published a field dispatch titled A Suicide Bomber in the USA — 10,000 DEAD is a Possibility. The piece was framed as a narrative, because narrative is how you make people see what a probability table cannot. It walked the reader through a fictional operator I called Person of Interest A — trained from age ten, groomed to defeat western recognition heuristics, passported through a complicit third country, moved through the cartel-coyote pipeline on the southern border, networked with a small cell on the way in, dispersed to concert venues in major cities, and detonated in coordinated multi-city sequence. The casualty number in the title — ten thousand — was the structural maximum of the failure mode I was describing, not a prediction of a literal incident.

The piece was clear about what it was. Roughly two-thirds of the way through, the narrative paused and the dispatch said the part that mattered:

This hasn't happened — YET. Every day that our Southern Border has no Wall, A and many of his friends enter our country. How many As are there among us right now? How do you know that tomorrow when you go to the mall, one of them won't be there ready to blow the place up? It's scary. It's horrific. It's reality.

— Tore Says, January 17, 2019

The piece was filed under terrorism, significant events, cartels, drug running. It received the reception such pieces typically receive — half the readership treating it as obvious, the other half treating it as fearmongering, almost no one treating it as what it actually was, which is a structural threat forecast with seven named variables, an open temporal window, and a methodology any competent intelligence analyst would recognize on sight.

Seven years is enough time for a model to be tested against reality. The test is now in.

Predictive Analytics, Properly Understood

What I did in January 2019 was not prophecy. It was predictive analytics — the discipline of identifying the structural variables that have to be present for a class of failure mode to become available, watching what those variables do over time, and naming the conditions under which they converge. The intelligence community has a phrase for it: indicators and warnings. The discipline does not predict the specific incident — predicting the specific incident is a fool's errand, and any analyst who promises it is selling something. It predicts the family of outcomes the structure makes possible. The structure either holds, or it does not, and the job of the analyst is to read the structure honestly while there is still time to harden it.

Pattern recognition is predictive analytics. A model becomes a forecast the moment its variables are named, its couplings are made explicit, and its convergence conditions are stated in advance of the events they are intended to predict. Whether the model lives in code or in prose is a question of presentation, not of method.

In January 2019 I named seven variables. I named them in their structural form rather than their tactical form — the difference between a forecast and a script. Tactical specificity is what gets analysts dismissed as fabulists when the literal incident does not occur on the literal date imagined. Structural specificity is what makes a model durable across the years.

The Seven Variables

In January 2019 all seven were already true. Five were documented in open sources cited in the piece itself. Two — the insider exploitation vector and the multi-city coordinated cell — were structural extrapolations from the cell architecture used at the 1998 East Africa embassy bombings and the 2005 London 7/7 attacks, updated for the post-caliphate operating environment. That was the model. Not a specific incident on a specific date. The structural availability of a class of incident, and the question of how that availability would change over time.

Seven Years, Six Validations

The model's variables have been tested by the world. Here is the test.

The Concert Mass-Casualty Vector with Insider Venue Access

August 7, 2024. Vienna. The Ernst Happel Stadium. Three sold-out Taylor Swift Eras Tour concerts, roughly one hundred and ninety-five thousand attendees expected over three nights — sixty-five thousand inside per show, ten thousand more outside the perimeter. A nineteen-year-old who had pledged allegiance to the Islamic State, working in concert with a seventeen-year-old, planned a shrapnel-bomb attack Austrian prosecutors described as specific to IS attacks. Bomb-making materials were recovered from his apartment the day before the first show. The CIA's deputy director said publicly the plotters were quite advanced and were targeting tens of thousands of people.[1]

Read the next sentence carefully, because this is where the 2019 model meets the 2024 record. The seventeen-year-old co-conspirator was employed by a company providing services to the concerts at the Ernst Happel Stadium.[2] That is the janitor. That is variable five, demonstrated viable, at the highest-attendance pop concert tour in human history, by a teenager working a contractor job at the venue. Six years after I named the vector in narrative form, a court in Wiener Neustadt was reading the indictment back to me.

The Soft-Target Vehicle-Into-Crowd Vector

January 1, 2025. Bourbon Street, New Orleans. A Muslim-American drove a truck into a crowd of New Year's revelers, killing fourteen and wounding nearly forty before engaging police in a shootout. The FBI subsequently stated the attack was one hundred percent inspired by ISIS.[3] No multi-city coordination. No insider. But the soft-target crowd vector, executed end-to-end on U.S. soil, claimed by ISIS in its digital newsletter eight days later. Variable four, on home territory.

Ideological Direction on a Public Broadcasting Schedule

The 2019 piece cited the ISIS manifesto — "we will hit you on your home front in a way that will cripple you." That language was not rhetorical decoration. ISIS publishes a monthly magazine, and that magazine has been publishing operational direction continuously across the intervening years. As of March 2026, ISIS is explicitly directing followers to target the FIFA World Cup 2026 in the United States for mass-casualty terror attacks, naming the tournament as one of the group's primary targets for the year.[4] Al-Qaeda in the Arabian Peninsula returned its English-language Inspire magazine in March 2026 in a new video format glorifying the Bondi Beach attack. The ISIS spokesman delivered a cross-continental address in February 2026, after a two-year silence, citing the New Orleans attack by name.[5] Variable seven is not a future risk. It is an active publishing schedule.

The Transit Corridor — Where the Model Requires Honesty

This variable requires more care than the others, and intellectual honesty requires me to write it plainly. Enforcement at the southern border has tightened materially since 2025. Watchlist encounters are down from the FY2022–2024 peaks. Overall crossings have collapsed under the current administration's posture. That is real, and it should be named. The current administration's border posture is the single largest material reduction in this variable's flow rate in the seven years the model has been running.

But the model never required current daily flow to remain elevated. The model required two things: that the cumulative population of unverified entries from the high-migration years remain in-country and unaccounted for — the gotaway question — and that the physical routes remain usable to a sufficiently resourced cell. Tightened enforcement reduces the rate of new entries. It does not retroactively resolve prior years' uncertainty, and it does not close the route to a cell with two million dollars and patience. Variable one is reduced in present-tense flow and intact in structural availability. That distinction matters, and it has to be named both ways.

The Scoreboard

Six of seven variables fully validated by current open-source record. One reduced in flow and intact in structure. That is the scoreboard, and that is the baseline. Now add what was not in the 2019 model.

The Principal-Protection Dimension

The 2019 dispatch focused on civilian mass-casualty exposure. It did not address the protective architecture surrounding the President of the United States, because that architecture in 2019 was operating in a different threat environment than the one it operates in now. The principal-protection axis must now be treated as its own structural variable, because between July 2024 and April 2026, three separate documented attempts have been made on this President's life.

Three documented attempts in twenty-two months. That is the threat environment toward this principal. It is not theoretical. It is the data.

The Allen Case as Operational Signature

The Allen case is structurally instructive, and it should be read carefully by anyone serious about what the next sixty days look like. Allen pre-booked the venue weeks in advance. He used surface transportation to defeat the watchlist architecture that air travel imposes. He arrived in the city a full day before the event and slept in the same building that was the target. He used scheduled-send communications to remove pre-attack signature from his digital footprint until the moment was already in motion. He brought multi-modal weapons — long gun, handgun, edged weapons — to cover a range of operational contingencies.

This is not the profile of an unstable individual acting on impulse. This is the operational signature of someone who studied the architecture, identified the gaps that must remain open for the architecture to function as a public event at all, and walked through them. That methodology — pre-positioning, watchlist evasion, multi-modal armament, communications discipline — is the same methodology a foreign-directed cell would use. The question of who is using it is downstream of the fact that it has now been demonstrated viable against a sitting President at a publicly-scheduled annual gathering.

The lesson from Allen is not about Allen. It is about the architecture. The operational signature required to get inside the perimeter has been demonstrated by a domestic actor whose case file is, as of this writing, in the public record. There is no reason in the open-source environment to believe that signature is now classified information.

The Government Is Reading the Same Window

I am not the only one reading the structure this way. The administration is reading it the same way, and the administration's own actions are the strongest external confirmation the method has ever received.

In the days following the Washington Hilton attack, White House Chief of Staff Susie Wiles convened a meeting with Secret Service leadership, Department of Homeland Security officials, and the White House operations team. The agenda focused chiefly on hardening security for the President's attendance at the 2026 FIFA World Cup, the America 250 celebrations — including a UFC fight on the South Lawn of the White House — and midterm campaign rallies.[7] That meeting is the federal government, at the level of the Chief of Staff, naming the same two convergence events the structural model has been pointing at, in the same sequence, with the same window, for the same reason. They are not separate concerns. They are the integrated exposure profile of a single sixty-day period.

On May 13, 2026, the District of Columbia's America 250 celebration received the National Special Security Event designation — the federal government's highest event-security classification, a designation typically reserved for the State of the Union address and presidential inaugurations and granted to events deemed potential targets for terrorism or other criminal activity. The Secret Service will take the lead on coordinating security, with increased measures activating in the days leading up to, during, and immediately following the event.[8]

The designation is the institutional version of the warning the model is producing. It is an unambiguous federal acknowledgment that the structural availability of the failure mode has reached the level requiring protective architecture normally reserved for the most exposed moments of the presidency. The government does not write NSSE on an event lightly. It does not write NSSE on Independence Day fireworks. It is writing NSSE on this one.

What the Convergence Looks Like

The single largest gap in my 2019 piece — and I name it because intellectual honesty requires it — was that I did not specify when the convergence would peak. I described the structural availability, not the temporal window. I left the timing open because I did not yet see what the calendar would do.

The calendar has now done it.

Between June 11 and July 19, 2026, the United States and its two contiguous neighbors will host the FIFA World Cup across sixteen cities. DHS has described this as one of the largest security undertakings in its institutional history, with the 2028 Los Angeles Olympics already queued behind it. Inside that exact window, the United States will hold the largest civic gathering in its national history: the Semiquincentennial of the Declaration of Independence, July 4, 2026. The President will deliver keynote remarks on the National Mall before more than a million people, alongside the largest pyrotechnics display the federal government has been able to commission. Between June 25 and July 10 the Great American State Fair will occupy the National Mall with pavilions from all fifty states. A UFC fight will be staged on the South Lawn of the White House.

For five weeks and three days, the United States will run two simultaneous mass-gathering events of unprecedented scale — one stretched across every major metropolitan area in the country, the other concentrated on the symbolic political center on the most ideologically charged date in the national calendar. Stadium crowds at the World Cup will run between sixty thousand and ninety-five thousand per match, with tens of thousands more in surrounding fan zones. The Independence Day perimeters in Washington, Philadelphia, Boston, and New York will run into the millions. Hotel occupancy, transit congestion, and force dispersion will be at modern records.

The Strain on the Protective Architecture

This is the part that has not been briefed in public, and the part this dispatch exists to name. For the duration of the convergence window, the U.S. Secret Service will be executing an integrated protective mission of unprecedented scope:

The President of the United States, at named publicly-scheduled events on a published schedule, in a domestic threat environment that has just produced three assassination attempts in twenty-two months — the most recent at a hotel four blocks from Embassy Row. The Vice President. Visiting foreign heads of state at sixteen World Cup host cities, many of whom fall under U.S. Secret Service protective responsibility while in-country. The America 250 NSSE perimeter in Washington. Midterm campaign rallies running concurrently. And a protective architecture that, as of Butler, was already undergoing structural reform of its own methodology — reform that the Washington Hilton attack demonstrated is not yet complete.

The men and women of the Secret Service are the best protective service in the world at what they do. That is not the point. The point is that no protective architecture, no matter how exceptional, was designed to run two simultaneous national-scale missions, on top of a domestic political-violence baseline of three attempts in twenty-two months, during a window in which foreign-directed mass-casualty propaganda is naming the exact events as targets. Force dispersion across a mission of that scope is itself a structural variable.

Where the Two Axes Meet

The principal-protection mission and the civilian mass-casualty exposure are not independent of each other. They are competing for the same scarce resource — trained, cleared, deployable agents and analysts — across the same thirty-nine-day window. When the U.S. Secret Service is forced to disperse elite protective resources across sixteen World Cup host cities and the National Mall on the most symbolically charged date in American history, while simultaneously hardening for midterm rallies and a UFC fight on the South Lawn, the residual coverage available for every other soft target in those same cities drops. Every dollar of operational attention concentrated on the principal is a dollar not available for the stadium concourse, the fan-zone perimeter, the transit corridor between hotel and venue, the parking-deck choke point, the rideshare staging area. The architecture is zero-sum in a window this dense. That is not a failure of the agency. That is what happens when the calendar stacks two national-scale missions into the same six-week block while a third — campaign rally protection — runs in parallel.

The civilian exposure and the presidential exposure are one threat surface. The model has to read them as one, because the protective architecture has to defend them as one.

What the Signal Says Now

This is what predictive analytics looks like when the signal is loud, when the model has been validated, and when the institutional response is publicly confirming what the analyst is reading.

The conditions that make a foreign-directed mass-casualty attack on a U.S. soft target available have never been more present. The conditions that make a domestic-actor attack on the President available have just been demonstrated viable, three times, with the most recent demonstration occurring four months ago. The calendar that stacks every variable into one window has been written into federal designation. And the meeting that confirmed the federal government is reading the same window the way the model reads it happened in the West Wing, less than thirty days ago.

I am not predicting an incident. I am telling you that for thirty-nine days — June 11 through July 19, 2026 — the structural availability of every failure mode my method tracks will be at its highest reading in seven years of practice. The people who collapse this kind of warning into prediction-of-incident are the ones who get it wrong in both directions: the ones who cry wolf when the structure is intact and quiet when it is not, and the ones who dismiss any structural warning as fearmongering because the literal scenario described did not occur on the literal date imagined. That distinction is the entire discipline.

This is the moment the model was built for. Not to be vindicated. To be acted on while the window is still open. The 2019 piece was the baseline read. This one is the call.

Where This Dispatch Belongs

This dispatch is written for the desks and chambers whose job it is to act on structural warnings before the literal incident makes the warning obsolete. It belongs in front of the House Committee on Homeland Security and the Senate Committee on Homeland Security and Governmental Affairs, both of which have jurisdiction over the Secret Service and the integrated protective mission described above. It belongs in front of the House and Senate Judiciary Committees, both of which oversee the federal threat-prosecution architecture that has been brought to bear on the Butler, West Palm Beach, and Washington Hilton cases. It belongs in front of the House Permanent Select Committee on Intelligence and the Senate Select Committee on Intelligence, both of which receive the indicators-and-warnings reporting the model in this dispatch attempts to publicly approximate.

It belongs in front of the leadership of the U.S. Secret Service, the Department of Homeland Security, the Federal Bureau of Investigation, and the Office of the Director of National Intelligence — all of whom already know what is in this dispatch, and several of whom were in the West Wing meeting that confirmed it. It is not addressed to them as a revelation. It is addressed to them as a citizen's record that the public-facing case has been made, on the public record, by an analyst whose method has now been tested against seven years of open-source events. That public record matters. It is the difference between a protective architecture operating in silence and a protective architecture operating with the political space it needs to operate at full extension.

It belongs in front of every national security correspondent and investigative editor at every major outlet that still does the work — and the work, in this case, is to amplify the convergence rather than chase the politics of the moment while the window opens.

And it belongs in front of every American who is going to a World Cup match, who is bringing children to a July 4 fireworks show, who is traveling to one of the sixteen host cities for any reason, or who lives in one of them. The point of naming a window is not to close the window. It is to give the people inside the window the information they need to be inside it with their eyes open.

The President of the United States is exposed. American civilians are exposed. The foreign principals visiting under U.S. protection are exposed. The architecture is straining at full extension across a window without precedent in modern American history.

If this is not a national security focus, nothing is.

Filed Under National Security · Predictive Analytics · Significant Events · Terrorism · Trump Administration