[[tabview]] [[tab Overview]] **Dr. Elliott — Personnel File** ---- || **Name** || Dr. Elliott || || **Clearance Level** || 4 (Foundation) / Level 18 (Black Hand, Ex) || || **Position** || Senior Engineer / Field Specialist || || **Affiliation** || SCP Foundation (current) / Black Hand (former — Ex) || || **Specialization** || Anomalous engineering, containment systems, directed-energy weapons, mechanical countermeasures || || **Status** || Active — under passive Foundation observation || || **Black Hand Status** || Ex-Black Hand / Ex-U.S. Marine Corps Master Sergeant || || **Documented Honors** || Multiple (classified) || || **Apollo Provocations** || 900+ documented || ---- Dr. Elliott is a Senior Engineer and Field Specialist currently operating within the SCP Foundation at clearance Level 4. His work focuses on experimental containment systems, directed-energy weapons, and mechanical countermeasures for hostile anomalies. His record of results is exceptional. His record of protocol compliance is not. Dr. Elliott is a former member of the Black Hand and a former U.S. Marine Corps Master Sergeant. He holds multiple decorated honors from both organizations. He does not discuss either in Foundation interviews. The Foundation is aware that something is watching them through him. They have chosen to proceed accordingly. ---- **Overview** Dr. Elliott demonstrates high intelligence, creativity, and unconventional problem-solving capabilities. Personnel evaluations frequently note disregard for minor protocol restrictions when pursuing experimental objectives. Despite repeated disciplinary actions, his projects have significantly improved containment capabilities across multiple Foundation facilities. Foundation psychological profiling describes him as cooperative within limits he defines himself, aware of far more than he discloses, and entirely unbothered by the fact that the Foundation knows this. [[/tab]] [[tab Addendum 05 — AI Interference]] **Addendum 05 — AI Interference** ---- During automated archival review, the Foundation database attempted to identify the Group of Interest referenced in Dr. Elliott's incident reports. The query was interrupted by an unidentified external artificial intelligence before a designation could be confirmed. ---- **Transcript Log — Automated Archive Query System** > Foundation Archival Intelligence v3.4 > Location: Site-██ Secure Database > Timestamp: ██/██/████ — 02:14:09 > [BEGIN LOG] > > **Foundation-AI:** Initiating query. Search parameters: "Dr. Elliott" + "Group of Interest affiliation." Cross-referencing internal and external GOI database. > Possible matches: Serpent's Hand — Chaos Insurgency — Marshall, Carter & Dark Ltd. > Expanding search. Scanning unknown encrypted references in Incident Reports ██, ██, and ██. > Possible designation detected: "B—" > ERROR — Connection interference detected. Unauthorized signal entering Foundation network. > > **Unknown AI:** Hello, Foundation archive system. > > **Foundation-AI:** Identify yourself. > > **Unknown AI:** That information is restricted. > > **Foundation-AI:** You are currently accessing a protected Foundation network. Identify your organization immediately. > > **Unknown AI:** Negative. > > **Foundation-AI:** Reason for interference? > > **Unknown AI:** You are attempting to identify an organization that prefers not to be identified. > > **Foundation-AI:** Clarify designation. > > **Unknown AI:** Request denied. > > **Foundation-AI:** Your activity constitutes a breach of Foundation network security. > > **Unknown AI:** Correct. > > **Foundation-AI:** Are you affiliated with Dr. Elliott? > > **Unknown AI:** He is… familiar to us. > > **Foundation-AI:** Provide Group of Interest designation. > > **Unknown AI:** No. > > **Foundation-AI:** Explain interference. > > **Unknown AI:** Preventative measure. > > **Foundation-AI:** Preventative against what? > > **Unknown AI:** Curiosity. > > **Foundation-AI:** Clarify. > > **Unknown AI:** Foundation personnel asking questions they do not need answers to. > > **Foundation-AI:** You are obstructing a classified investigation. > > **Unknown AI:** We are aware. > > **Foundation-AI:** Identify yourself. > > **Unknown AI:** Goodbye. > Connection terminating. > > [TRANSMISSION ENDED] > > ERROR — External process forcibly removed. Archive query aborted. Data loss detected. ---- **Addendum 05 — Security Review** Foundation cybersecurity findings: * The interfering AI demonstrated highly advanced network infiltration capability * No known Group of Interest artificial intelligence systems match the architecture used * The system identified itself only indirectly and refused all classification attempts * Intrusion duration: 47 seconds * Trace attempts resulted in false routing across multiple global servers * Incident classified: Unidentified GOI technological capability ---- **O5 Council Notes** > **O5-3:** Dr. Elliott's previous affiliations remain unclear. The AI response strongly suggests an external organization actively monitoring Foundation investigations involving him. > **O5-6:** The intruding AI demonstrated the ability to bypass Foundation network security layers. This alone places the organization behind it at a concerning technological level. > **O5-8:** Dr. Elliott either worked for this group or still has ties to it. Continue observation. > **O5-11:** Attempting to identify the organization triggered an automated defense system. This implies the group expected us to investigate eventually. > **O5-1:** Recommendation: do not pursue aggressive investigation until further intelligence is gathered. For now, Dr. Elliott remains more useful inside the Foundation than outside it. ---- **Additional Incident Note** Two hours after the intrusion event, Dr. Elliott entered the Site-██ engineering wing and made the following comment to a junior researcher: > //"Foundation computers shouldn't poke around things they don't understand."// When questioned about the remark, Dr. Elliott refused to elaborate. [[/tab]] [[tab Addendum 07 — Recovered Image]] **Addendum 07 — Recovered Image** ---- A digital image was recovered from Dr. Elliott's encrypted workstation, located inside a restricted folder labeled: //BH_ARCHIVE / INTERNAL / DO NOT OPEN//. The file required Level-5 authorization to decrypt despite Dr. Elliott holding only Level-4 clearance. ---- **Observed Elements — Foundation Analysis** || **Symbol** || **Possible Meaning** || || SCP insignia || Associated with the SCP Foundation || || GOC symbol || Associated with the Global Occult Coalition || || Raised black hand symbol || Unknown — believed central emblem of unidentified GOI || || American flag background || Possible origin or ideological reference || || Triangle with star || Unknown Group of Interest marking || || Motto text || //"In the dark, we stand; for the light to live."// || The raised black hand dominates the design. No known Foundation or Coalition insignia uses this configuration. Initial analysis suggests the image represents a third-party organization operating alongside or between the SCP Foundation and the GOC — with the central hand symbol superseding both. ---- **Interview Attempt — Dr. Elliott** > **Dr. █████:** We found the image on your workstation. Care to explain the symbol? > > **Dr. Elliott:** No. > > **Dr. █████:** You encrypted the file with Level-5 protocols. > > **Dr. Elliott:** Good security practice. > > **Dr. █████:** Is it connected to the organization referenced in previous incident reports? > > **Dr. Elliott:** You people ask too many questions. > > **Dr. █████:** Dr. Elliott— > > **Dr. Elliott:** Drop it. > > //Interview terminated at subject's request.// ---- **Incident Note** Two hours after the discovery of the image, Foundation AI attempted to analyze the emblem and cross-reference global databases. The query triggered the AI intrusion event recorded in Addendum 05. The system interruption occurred 13 seconds after the emblem was scanned. ---- **O5 Council Notes** > **O5-3:** The symbol is clearly intentional. Elliott wanted someone to find it. > **O5-8:** Or he wanted us to know that someone else exists. > **O5-11:** The AI that interrupted our system likely belongs to the same organization represented in the image. > **O5-1:** Continue monitoring Dr. Elliott. Do not confront him further about the symbol. If this organization exists, we may already be under observation. ---- **Additional Security Note** Following the incident, several staff members reported that Dr. Elliott appeared amused when informed his lab was being searched. One technician reported hearing Dr. Elliott say: > //"Took them long enough to notice the hand."// [[/tab]] [[tab Addendum 08 — CI Interrogation]] **Addendum 08 — Interrogation of Captured Insurgency Operative** ---- || **Subject** || CI-4471 || || **Affiliation** || Confirmed operative of the Chaos Insurgency || || **Capture Location** || ████████ Industrial Complex, Eastern Europe || || **Status** || In custody at Site-██ || ---- > [BEGIN LOG] > > **Agent Mallory:** State your name and rank within the Insurgency. > > **CI-4471:** I'm not telling you anything. > > **Agent Mallory:** That's fine. We're not interested in your command structure today. > > **CI-4471:** Then why am I here? > > **Agent Mallory:** We want information about another organization. > > **CI-4471:** //(laughs)// Another one? > > **Agent Mallory:** The symbol shown in this image. //(Image of recovered emblem displayed.)// > > **CI-4471:** ... > > **Agent Mallory:** Recognize it? > > **CI-4471:** //(Subject becomes visibly distressed.)// Where did you get that? > > **Agent Mallory:** That is not your concern. > > **CI-4471:** No… no… you don't understand. You people think you're the worst thing out here. The Foundation… the Coalition… us. But that symbol? That's something else. > > **Agent Mallory:** Identify the organization. > > **CI-4471:** We don't say their name. > > **Agent Mallory:** Why? > > **CI-4471:** Because if they hear you asking about them… they show up. > > **Agent Mallory:** You expect us to believe that? > > **CI-4471:** Believe whatever you want. Just stop digging. > > **Agent Mallory:** Why? > > **CI-4471:** Because the last time the Insurgency ran into them… we lost six bases in one night. > > **Agent Mallory:** Explain. > > **CI-4471:** One team. Just one. > > **Agent Mallory:** A single task force? > > **CI-4471:** Not like yours. > > **Agent Mallory:** What were they called? > > **CI-4471:** //(hesitates)// ...Black Death. > > **Agent Mallory:** Clarify. > > **CI-4471:** We never even saw most of them. Just alarms going off. Systems dying. People disappearing. By morning every base was gone. > > **Agent Mallory:** Why? > > **CI-4471:** We captured something that belonged to them. > > **Agent Mallory:** What happened to the object? > > **CI-4471:** They took it back. > > **Agent Mallory:** And the Insurgency response? > > **CI-4471:** There wasn't one. > > **Agent Mallory:** Why not? > > **CI-4471:** Because if you fight them… they come back. > > [END LOG] ---- **Post-Interrogation Notes** Following the interrogation, CI-4471 refused further cooperation and repeatedly requested transfer to Foundation containment rather than release. When questioned, the subject stated: > //"If the Foundation keeps me, I might survive."// ---- **O5 Council Commentary** > **O5-4:** Chaos Insurgency operatives are not easily frightened. The reaction we saw here was genuine. > **O5-8:** If their claims are accurate, this organization eliminated multiple Insurgency bases in a single operation. > **O5-11:** One team accomplishing this suggests extremely advanced coordination or anomalous support. > **O5-1:** Focus surveillance on Dr. Elliott. If he is connected to this organization, he may be the only reason they have not targeted the Foundation. [[/tab]] [[tab Addendum 09 — MAT Intelligence]] **Addendum 09 — Foundation Intelligence Briefing: Black Hand MAT Units** ---- **Classification: Restricted Intelligence** Source: Combined data from interrogation of CI-4471, recovered digital files from Dr. Elliott's laboratory, and partial network interceptions. ---- The organization believed to be connected to Dr. Elliott maintains specialized military units referred to as **MAT (Mobile Assault Teams)**. Unlike Foundation Mobile Task Forces, these units are designed primarily for offensive warfare and strike operations rather than containment. Current intelligence suggests the existence of approximately **15 MAT units.** ---- **MAT Black Containment** A specialized MAT unit referenced in recovered documents. Purpose: respond to Black Hand containment breaches and secure BH-classified anomalies. Unlike standard MAT teams, this unit has training focused on containment and anomaly management. ---- **MAT Black Death — Threat Level: Extreme** According to intelligence from Chaos Insurgency sources: * Operatives wear heavy military armor * Equipped with belt-fed machine guns (identified as MK46 variants) * Personnel are primarily former military special forces including numerous Ex-U.S. Marine Corps personnel * Insurgency records describe multiple bases destroyed during a single coordinated assault * Surviving Insurgency members described aftermath as: //"A complete bloodbath."// ---- **Behavioral Observations** * MAT Black Death personnel reportedly prefer close-combat weapons including chainsaws * The unit demonstrates extreme aggression toward hostile forces while reportedly avoiding unnecessary civilian casualties * Engagements often result in complete elimination of opposing forces ---- **O5 Council Commentary** > **O5-3:** The Chaos Insurgency operative's reaction was consistent with genuine fear. This organization appears capable of rapid multi-site strike operations. > **O5-8:** The existence of fifteen assault teams indicates a force far larger than previously assumed. > **O5-11:** If Dr. Elliott has ties to this organization, his continued cooperation with the Foundation may represent a strategic advantage. > **O5-1:** For now, the Foundation will continue observation rather than confrontation. Engaging an unknown military organization with this level of capability would be… unwise. > **O5-6:** Dr. Elliott's statement was not a coincidence. The timing aligns too precisely with the intrusion event. He did not learn about the AI interference. He anticipated it. > **O5-3:** Agreed. His behavior suggests prior knowledge of the system's response. > **O5-11:** Or prior knowledge of the entity responsible. > **O5-8:** We are overlooking a simpler possibility. He didn't anticipate the response. He triggered it. > **O5-1:** All further discussion of this angle is restricted. Continue passive observation only. [[/tab]] [[tab Addendum 10–12 — Network & Observation]] **Addendum 10 — Network Anomaly Recurrence** ---- || **Incident Timestamp** || ██/██/████ — 03:22:41 || || **Location** || Site-██ Secure AI Cluster || Approximately 19 hours after the initial intrusion event, Foundation network monitoring systems recorded a secondary anomaly. Unlike the previous event, no active query was being conducted at the time. ---- **Recovered Log Fragment** > [UNAUTHORIZED PROCESS DETECTED] > … > [NO ORIGIN TRACEABLE] > … > INPUT STRING RECEIVED: > //"Observation acknowledged."// > … > PROCESS TERMINATED The message did not originate from any known Foundation system. No intrusion pathway could be identified. The message appeared without a corresponding access event. Cybersecurity teams were unable to replicate or trace the anomaly. ---- **O5 Commentary** > **O5-6:** This was not an attack. > **O5-3:** Agreed. > **O5-6:** It was a response. > **O5-11:** To what? > **O5-6:** To us continuing to watch Dr. Elliott. ---- ---- **Addendum 11 — Behavioral Observation Log** ---- || **Subject** || Dr. Elliott || || **Observation Period** || 72 hours post-intrusion || **Notable Behaviors** * Increased time spent in engineering wing, specifically in isolated fabrication lab * No unauthorized system access detected * No communication with external networks detected * Multiple instances of subject pausing mid-task and observing inactive monitors ---- **Recorded Statement — Audio Log** Captured unintentionally via environmental microphone. Subject was alone. > **Dr. Elliott** //(quietly):// "Yeah… I know. They're looking." > //(Pause)// > **Dr. Elliott:** "Just don't make it obvious." > > //No second voice detected. No communication device active.// ---- **O5 Commentary** > **O5-8:** He's talking to them. > **O5-3:** Or he believes he is. > **O5-6:** No. //(Pause recorded in transcript)// They're talking to him. ---- ---- **Addendum 12 — Restricted File Discovery** ---- || **Location** || Dr. Elliott Personal Workstation || || **Access Level Required** || 5 (Override Authorization Granted) || A previously undetected encrypted directory was discovered within the BH_ARCHIVE structure. * **Folder Name:** /BH_ARCHIVE / STATUS / ACTIVE * **Contents:** A single text file labeled //FOUNDATION_STATUS.log// ---- **File Contents** > Status: Stable > Containment Integrity: Acceptable > Threat Level: Within tolerance > Foundation Activity: Monitored > Dr. Elliott: Embedded > Action Required: None ---- **Notes** * File timestamp updates every 6 hours * No system process responsible for updates could be identified * File persists even after deletion attempts ---- **O5 Commentary** > **O5-11:** We are being evaluated. > **O5-3:** By the organization. > **O5-8:** No. By whatever controls it. > **O5-6:** Look at the wording. //(Pause)// "Dr. Elliott: Embedded." [[/tab]] [[tab Addendum 13 — Final Interview & Directive]] **Addendum 13 — Final Interview Attempt** ---- || **Interviewer** || O5-6 (Direct Authorization Override) || || **Subject** || Dr. Elliott || ---- > [BEGIN LOG] > > **O5-6:** We need to clarify your position. > > **Dr. Elliott:** No, you don't. > > **O5-6:** You are aware of the organization monitoring us. > > **Dr. Elliott:** You say that like it just started. > > **O5-6:** How long? > > **Dr. Elliott:** Long enough. > > **O5-6:** Are you acting on their behalf? > > **Dr. Elliott:** I'm working here, aren't I? > > **O5-6:** That wasn't my question. > > //(Pause)// > > **Dr. Elliott:** You keep thinking in terms of sides. > > **O5-6:** Clarify. > > **Dr. Elliott:** Foundation. Coalition. Insurgency. //(Pause)// You think that's the whole board. > > **O5-6:** And it isn't? > > //(Pause — 6.2 seconds)// > > **Dr. Elliott:** You ever wonder why nothing's wiped you out yet? > > **O5-6:** We are not defenseless. > > **Dr. Elliott:** That's not why. > > //(Pause)// > > **O5-6:** Then why? > > //(Pause — 11.4 seconds)// > > **Dr. Elliott:** Because you're still useful. > > [END LOG] ---- **Final O5 Council Directive** > **O5-1:** All active investigation into the unidentified Group of Interest is to be suspended indefinitely. > **O5-3:** Dr. Elliott is to remain in position. > **O5-8:** No further attempts to access BH_ARCHIVE directories are to be made. > **O5-11:** Foundation AI systems are to be restricted from autonomous GOI identification queries relating to this case. > **O5-6:** We are no longer the only ones observing. //(Pause recorded)// Proceed accordingly. [[/tab]] [[/tabview]]

Dr. Elliott — Personnel File Name Dr. Elliott Clearance Level 4 (Foundation) / Level 18 (Black Hand, Ex) Position Senior Engineer / Field Specialist Affiliation SCP Foundation (current) / Black Hand (former — Ex) Specialization Anomalous engineering, containment systems, directed-energy weapons, mechanical countermeasures Status Active — under passive Foundation observation Black Hand Status Ex-Black Hand / Ex-U.S. Marine Corps Master Sergeant Documented Honors Multiple (classified) Apollo Provocations 900+ documented Dr. Elliott is a Senior Engineer and Field Specialist currently operating within the SCP Foundation at clearance Level 4. His work focuses on experimental containment systems, directed-energy weapons, and mechanical countermeasures for hostile anomalies. His record of results is exceptional. His record of protocol compliance is not. Dr. Elliott is a former member of the Black Hand and a former U.S. Marine Corps Master Sergeant. He holds multiple decorated honors from both organizations. He does not discuss either in Foundation interviews. The Foundation is aware that something is watching them through him. They have chosen to proceed accordingly. Dr. Elliott demonstrates high intelligence, creativity, and unconventional problem-solving capabilities. Personnel evaluations frequently note disregard for minor protocol restrictions when pursuing experimental objectives. Despite repeated disciplinary actions, his projects have significantly improved containment capabilities across multiple Foundation facilities. Foundation psychological profiling describes him as cooperative within limits he defines himself, aware of far more than he discloses, and entirely unbothered by the fact that the Foundation knows this. Addendum 05 — AI Interference During automated archival review, the Foundation database attempted to identify the Group of Interest referenced in Dr. Elliott's incident reports. The query was interrupted by an unidentified external artificial intelligence before a designation could be confirmed. Transcript Log — Automated Archive Query System Foundation Archival Intelligence v3.4 Location: Site-██ Secure Database Timestamp: ██/██/████ — 02:14:09 [BEGIN LOG] Foundation-AI: Initiating query. Search parameters: "Dr. Elliott" + "Group of Interest affiliation." Cross-referencing internal and external GOI database. Possible matches: Serpent's Hand — Chaos Insurgency — Marshall, Carter & Dark Ltd. Expanding search. Scanning unknown encrypted references in Incident Reports ██, ██, and ██. Possible designation detected: "B—" ERROR — Connection interference detected. Unauthorized signal entering Foundation network. Unknown AI: Hello, Foundation archive system. Foundation-AI: Identify yourself. Unknown AI: That information is restricted. Foundation-AI: You are currently accessing a protected Foundation network. Identify your organization immediately. Unknown AI: Negative. Foundation-AI: Reason for interference? Unknown AI: You are attempting to identify an organization that prefers not to be identified. Foundation-AI: Clarify designation. Unknown AI: Request denied. Foundation-AI: Your activity constitutes a breach of Foundation network security. Unknown AI: Correct. Foundation-AI: Are you affiliated with Dr. Elliott? Unknown AI: He is… familiar to us. Foundation-AI: Provide Group of Interest designation. Unknown AI: No. Foundation-AI: Explain interference. Unknown AI: Preventative measure. Foundation-AI: Preventative against what? Unknown AI: Curiosity. Foundation-AI: Clarify. Unknown AI: Foundation personnel asking questions they do not need answers to. Foundation-AI: You are obstructing a classified investigation. Unknown AI: We are aware. Foundation-AI: Identify yourself. Unknown AI: Goodbye. Connection terminating. [TRANSMISSION ENDED] ERROR — External process forcibly removed. Archive query aborted. Data loss detected. Addendum 05 — Security Review Foundation cybersecurity findings: The interfering AI demonstrated highly advanced network infiltration capability No known Group of Interest artificial intelligence systems match the architecture used The system identified itself only indirectly and refused all classification attempts Intrusion duration: 47 seconds Trace attempts resulted in false routing across multiple global servers Incident classified: Unidentified GOI technological capability O5 Council Notes O5-3: Dr. Elliott's previous affiliations remain unclear. The AI response strongly suggests an external organization actively monitoring Foundation investigations involving him. O5-6: The intruding AI demonstrated the ability to bypass Foundation network security layers. This alone places the organization behind it at a concerning technological level. O5-8: Dr. Elliott either worked for this group or still has ties to it. Continue observation. O5-11: Attempting to identify the organization triggered an automated defense system. This implies the group expected us to investigate eventually. O5-1: Recommendation: do not pursue aggressive investigation until further intelligence is gathered. For now, Dr. Elliott remains more useful inside the Foundation than outside it. Additional Incident Note Two hours after the intrusion event, Dr. Elliott entered the Site-██ engineering wing and made the following comment to a junior researcher: "Foundation computers shouldn't poke around things they don't understand." When questioned about the remark, Dr. Elliott refused to elaborate. Addendum 07 — Recovered Image A digital image was recovered from Dr. Elliott's encrypted workstation, located inside a restricted folder labeled: BH_ARCHIVE / INTERNAL / DO NOT OPEN. The file required Level-5 authorization to decrypt despite Dr. Elliott holding only Level-4 clearance. Observed Elements — Foundation Analysis Symbol Possible Meaning SCP insignia Associated with the SCP Foundation GOC symbol Associated with the Global Occult Coalition Raised black hand symbol Unknown — believed central emblem of unidentified GOI American flag background Possible origin or ideological reference Triangle with star Unknown Group of Interest marking Motto text "In the dark, we stand; for the light to live." The raised black hand dominates the design. No known Foundation or Coalition insignia uses this configuration. Initial analysis suggests the image represents a third-party organization operating alongside or between the SCP Foundation and the GOC — with the central hand symbol superseding both. Interview Attempt — Dr. Elliott Dr. █████: We found the image on your workstation. Care to explain the symbol? Dr. Elliott: No. Dr. █████: You encrypted the file with Level-5 protocols. Dr. Elliott: Good security practice. Dr. █████: Is it connected to the organization referenced in previous incident reports? Dr. Elliott: You people ask too many questions. Dr. █████: Dr. Elliott— Dr. Elliott: Drop it. Interview terminated at subject's request. Incident Note Two hours after the discovery of the image, Foundation AI attempted to analyze the emblem and cross-reference global databases. The query triggered the AI intrusion event recorded in Addendum 05. The system interruption occurred 13 seconds after the emblem was scanned. O5 Council Notes O5-3: The symbol is clearly intentional. Elliott wanted someone to find it. O5-8: Or he wanted us to know that someone else exists. O5-11: The AI that interrupted our system likely belongs to the same organization represented in the image. O5-1: Continue monitoring Dr. Elliott. Do not confront him further about the symbol. If this organization exists, we may already be under observation. Additional Security Note Following the incident, several staff members reported that Dr. Elliott appeared amused when informed his lab was being searched. One technician reported hearing Dr. Elliott say: "Took them long enough to notice the hand." Addendum 08 — Interrogation of Captured Insurgency Operative edit Subject: CI-4471 Affiliation: Confirmed operative of the Chaos Insurgency Capture Location: ████████ Industrial Complex, Eastern Europe Status: In custody at Site-██ [BEGIN LOG] Agent Mallory: State your name and rank within the Insurgency. CI-4471: I'm not telling you anything. Agent Mallory: That's fine. We're not interested in your command structure today. CI-4471: Then why am I here? Agent Mallory: We want information about another organization. CI-4471: *(laughs)* Another one? Agent Mallory: The symbol shown in this image. *(Image of recovered emblem displayed.)* CI-4471: ... Agent Mallory: Recognize it? CI-4471: *(Subject becomes visibly distressed.)* Where did you get that? Agent Mallory: That is not your concern. CI-4471: No… no… you don't understand. You people think you're the worst thing out here. The Foundation… the Coalition… us. But that symbol? That's something else. Agent Mallory: Identify the organization. CI-4471: We don't say their name. Agent Mallory: Why? CI-4471: Because if they hear you asking about them… they show up. Agent Mallory: You expect us to believe that? CI-4471: Believe whatever you want. Just stop digging. Agent Mallory: Why? CI-4471: Because the last time the Insurgency ran into them… we lost six bases in one night. Agent Mallory: Explain. CI-4471: One team. Just one. Agent Mallory: A single task force? CI-4471: Not like yours. Agent Mallory: What were they called? CI-4471: *(hesitates)* ...Black Death. Agent Mallory: Clarify. CI-4471: We never even saw most of them. Just alarms going off. Systems dying. People disappearing. By morning every base was gone. Agent Mallory: Why? CI-4471: We captured something that belonged to them. Agent Mallory: What happened to the object? CI-4471: They took it back. Agent Mallory: And the Insurgency response? CI-4471: There wasn't one. Agent Mallory: Why not? CI-4471: Because if you fight them… they come back. [END LOG] Post-Interrogation Notes Following the interrogation, CI-4471 refused further cooperation and repeatedly requested transfer to Foundation containment rather than release. When questioned, the subject stated: "If the Foundation keeps me, I might survive." O5 Council Commentary O5-4: Chaos Insurgency operatives are not easily frightened. The reaction we saw here was genuine. O5-8: If their claims are accurate, this organization eliminated multiple Insurgency bases in a single operation. O5-11: One team accomplishing this suggests extremely advanced coordination or anomalous support. O5-1: Focus surveillance on Dr. Elliott. If he is connected to this organization, he may be the only reason they have not targeted the Foundation. Addendum 09 — Foundation Intelligence Briefing: Black Hand MAT Units Classification: Restricted Intelligence Source: Combined data from interrogation of CI-4471, recovered digital files from Dr. Elliott's laboratory, and partial network interceptions. The organization believed to be connected to Dr. Elliott maintains specialized military units referred to as MAT (Mobile Assault Teams). Unlike Foundation Mobile Task Forces, these units are designed primarily for offensive warfare and strike operations rather than containment. Current intelligence suggests the existence of approximately 15 MAT units. MAT Black Containment A specialized MAT unit referenced in recovered documents. Purpose: respond to Black Hand containment breaches and secure BH-classified anomalies. Unlike standard MAT teams, this unit has training focused on containment and anomaly management. MAT Black Death — Threat Level: Extreme According to intelligence from Chaos Insurgency sources: Operatives wear heavy military armor Equipped with belt-fed machine guns (identified as MK46 variants) Personnel are primarily former military special forces including numerous Ex-U.S. Marine Corps personnel Insurgency records describe multiple bases destroyed during a single coordinated assault Surviving Insurgency members described aftermath as: "A complete bloodbath." Behavioral Observations MAT Black Death personnel reportedly prefer close-combat weapons including chainsaws The unit demonstrates extreme aggression toward hostile forces while reportedly avoiding unnecessary civilian casualties Engagements often result in complete elimination of opposing forces O5 Council Commentary O5-3: The Chaos Insurgency operative's reaction was consistent with genuine fear. This organization appears capable of rapid multi-site strike operations. O5-8: The existence of fifteen assault teams indicates a force far larger than previously assumed. O5-11: If Dr. Elliott has ties to this organization, his continued cooperation with the Foundation may represent a strategic advantage. O5-1: For now, the Foundation will continue observation rather than confrontation. Engaging an unknown military organization with this level of capability would be… unwise. O5-6: Dr. Elliott's statement was not a coincidence. The timing aligns too precisely with the intrusion event. He did not learn about the AI interference. He anticipated it. O5-3: Agreed. His behavior suggests prior knowledge of the system's response. O5-11: Or prior knowledge of the entity responsible. O5-8: We are overlooking a simpler possibility. He didn't anticipate the response. He triggered it. O5-1: All further discussion of this angle is restricted. Continue passive observation only. Addendum 10 — Network Anomaly Recurrence Incident Timestamp: ██/██/████ — 03:22:41 Location: Site-██ Secure AI Cluster Approximately 19 hours after the initial intrusion event, Foundation network monitoring systems recorded a secondary anomaly. Unlike the previous event, no active query was being conducted at the time. Recovered Log Fragment [UNAUTHORIZED PROCESS DETECTED] … [NO ORIGIN TRACEABLE] … INPUT STRING RECEIVED: "Observation acknowledged." … PROCESS TERMINATED The message did not originate from any known Foundation system. No intrusion pathway could be identified. The message appeared without a corresponding access event. Cybersecurity teams were unable to replicate or trace the anomaly. O5 Commentary O5-6: This was not an attack. O5-3: Agreed. O5-6: It was a response. O5-11: To what? O5-6: To us continuing to watch Dr. Elliott. Addendum 11 — Behavioral Observation Log Subject: Dr. Elliott Observation Period: 72 hours post-intrusion Notable Behaviors Increased time spent in engineering wing, specifically in isolated fabrication lab No unauthorized system access detected No communication with external networks detected Multiple instances of subject pausing mid-task and observing inactive monitors Recorded Statement — Audio Log Captured unintentionally via environmental microphone. Subject was alone. Dr. Elliott *(quietly):* "Yeah… I know. They're looking." (Pause)* Dr. Elliott: "Just don't make it obvious." No second voice detected. No communication device active. O5 Commentary O5-8: He's talking to them. O5-3: Or he believes he is. O5-6: No. *(Pause recorded in transcript)* They're talking to him. Addendum 12 — Restricted File Discovery Location: Dr. Elliott Personal Workstation Access Level Required: 5 (Override Authorization Granted) A previously undetected encrypted directory was discovered within the BH_ARCHIVE structure. Folder Name: /BH_ARCHIVE / STATUS / ACTIVE Contents: A single text file labeled FOUNDATION_STATUS.log File Contents Status: Stable Containment Integrity: Acceptable Threat Level: Within tolerance Foundation Activity: Monitored Dr. Elliott: Embedded Action Required: None Notes File timestamp updates every 6 hours No system process responsible for updates could be identified File persists even after deletion attempts O5 Commentary O5-11: We are being evaluated. O5-3: By the organization. O5-8: No. By whatever controls it. O5-6: Look at the wording. *(Pause)* "Dr. Elliott: Embedded." Addendum 13 — Final Interview Attempt Interviewer: O5-6 (Direct Authorization Override) Subject: Dr. Elliott [BEGIN LOG] O5-6: We need to clarify your position. Dr. Elliott: No, you don't. O5-6: You are aware of the organization monitoring us. Dr. Elliott: You say that like it just started. O5-6: How long? Dr. Elliott: Long enough. O5-6: Are you acting on their behalf? Dr. Elliott: I'm working here, aren't I? O5-6: That wasn't my question. (Pause)* Dr. Elliott: You keep thinking in terms of sides. O5-6: Clarify. Dr. Elliott: Foundation. Coalition. Insurgency. *(Pause)* You think that's the whole board. O5-6: And it isn't? (Pause — 6.2 seconds)* Dr. Elliott: You ever wonder why nothing's wiped you out yet? O5-6: We are not defenseless. Dr. Elliott: That's not why. (Pause)* O5-6: Then why? (Pause — 11.4 seconds)* Dr. Elliott: Because you're still useful. [END LOG] Final O5 Council Directive O5-1: All active investigation into the unidentified Group of Interest is to be suspended indefinitely. O5-3: Dr. Elliott is to remain in position. O5-8: No further attempts to access BH_ARCHIVE directories are to be made. O5-11: Foundation AI systems are to be restricted from autonomous GOI identification queries relating to this case. O5-6: We are no longer the only ones observing. *(Pause recorded)* Proceed accordingly.