STANDARD SUBJECT DOSSIER

[SUBJECT FULL NAME - INVESTIGATION TITLE]

The Standard Subject Dossier is the foundational individual-subject product: a verified, source-graded profile answering who this person is, what is confirmed about them, and what we assess at standard collection depth (open-source and licensed-database, no covert/HUMINT collection). It does not carry full threat scoring (see Subject Threat Assessment), exhaustive network expansion or source-of-wealth proof (see Enhanced Deep-Dive Subject Investigation), current-whereabouts skip-trace (see Locate & Skip-Trace Report), or engagement/elicitation strategy (see Approach & Engagement Profile). Where those needs surface, flag them as RFIs in §16, do not perform them here.

---

Document Control

Field	Value
Report Reference	[REF-YYYY-###]
Date of Report	[YYYY-MM-DD]
Reporting Period / As-Of Date	[YYYY-MM-DD]
Classification / Handling	[CONFIDENTIAL - CLIENT EYES ONLY / TLP:AMBER / etc.]
Client	[CLIENT NAME]
Requesting Party	[REQUESTOR / ENGAGEMENT REF]
Prepared By	[ANALYST NAME / ID]
Reviewed By	[REVIEWER NAME / ID]
Approving Officer	[APPROVER NAME / ID]
Version	[1.0]
Distribution	[NAMED RECIPIENTS / DISTRIBUTION LIST]

Handling & Legal Caveat

Handling: [Classification/TLP]. Disseminate only to named recipients above. Reproduction or onward sharing prohibited without originator approval.

Permissible purpose: This investigation was conducted for the stated lawful purpose of [PURPOSE]. This document is an investigative intelligence product, NOT a “consumer report” and was NOT prepared by a “consumer reporting agency” as defined by the U.S. Fair Credit Reporting Act (FCRA, 15 U.S.C. § 1681). It must not be used in whole or part for any FCRA-covered eligibility determination (employment, credit, insurance, housing, or similar).

Data protection: Personal data herein was collected from open and licensed sources and processed under [GDPR / CCPA / applicable regime] on the basis of [legal basis / legitimate interest]. Handle per the client data-processing agreement and retention schedule [RETENTION REF].

Privilege: [If applicable] Prepared at the direction of counsel in anticipation of litigation - Attorney–Client Privileged / Attorney Work Product.

Sourcing & verification: Based on open-source and licensed-database collection as of the as-of date. Findings are time-sensitive and should be independently verified before any adverse or legally consequential action.

Subject Snapshot

Field	Value
Full Legal Name	[Name]
Also Known As (AKA)	[Aliases / maiden / transliterations]
Date / Year of Birth	[YYYY-MM-DD / approx.]
Nationality / Citizenship	[Country(ies)]
Current Location (assessed)	[City, Country]
Primary Occupation / Role	[Title, Organization]
Identity Resolution Confidence	[Confirmed / Probable / Possible / Unresolved]
Overall Assessment	[One-line bottom line]
Material Red Flags	[Count by severity: Crit / High / Med / Low]

---

Table of Contents

Page numbers populate on export to Word/PDF.

1. Bottom Line Up Front (BLUF)
2. Executive Summary
3. Key Judgments
4. Priority Intelligence Requirements (PIRs)
5. Subject Identification & Identity Resolution
6. Biographic Profile
7. Pattern-of-Life Analysis
8. Digital Footprint & Online Presence
9. Network & Associations
10. Financial & Lifestyle Indicators (OSINT-visible)
11. Legal, Regulatory & Derogatory Findings
12. Verified Findings Summary
13. Red Flag & Notable Indicators Summary
14. Analysis of Competing Hypotheses (ACH)
15. Key Assumptions Check
16. Collection Gaps & Intelligence Requirements (RFIs)
17. Recommendations
18. Sources & Methodology
19. Appendices

---

1. Bottom Line Up Front (BLUF)

2–3 sentences. Lead with the single most important conclusion. State the overall assessment and the recommended action. Written so a principal who reads nothing else is correctly informed.

• Most critical finding: [Single most important conclusion.]
• Overall assessment: [Net characterization of the subject relative to the requirement.]
• Recommended action: [What the reader should do with this product.]

2. Executive Summary

Investigation Background

Why was this dossier commissioned? What requirement or decision does it support? What triggered it?

[Narrative.]

Scope & Limitations

State explicitly what was in and out of scope, collection depth (standard - open/licensed only), jurisdictions, languages, time window, and any constraints (legal, access, time, language) that bound the findings.

Dimension	In Scope	Out of Scope
Subject(s)	[Primary subject + any co-resolved identities]	[Excluded persons]
Geographic	[Countries/regions covered]	[Not covered]
Temporal	[Period examined]	[Not examined]
Collection depth	Standard OSINT + licensed databases	Covert/HUMINT, pretext, intrusive

Key Findings Overview

3–5 major findings in narrative form. No new findings introduced later that aren’t summarized here.

[Narrative.]

Identity Confidence Statement

One paragraph: to what confidence the subject has been uniquely resolved and disambiguated from same-name individuals, and on what identifiers.

[Narrative - references §5.]

3. Key Judgments

Analytic assessments, not raw facts. Likelihood (the event/characterization) and analytic confidence (strength of the evidence base) are reported in SEPARATE columns and never combined in one sentence. Each judgment names the indicator that would change it.

#	Judgment	Likelihood	Confidence	Change Indicator (what would shift this)
KJ-1	[First key judgment]	[almost no chance … almost certain]	[HIGH/MOD/LOW]	[Observable that would revise it]
KJ-2	[Second]	[ ]	[ ]	[ ]
KJ-3	[Third]	[ ]	[ ]	[ ]
KJ-4	[Fourth]	[ ]	[ ]	[ ]
KJ-5	[Fifth]	[ ]	[ ]	[ ]

4. Priority Intelligence Requirements (PIRs)

The questions this dossier was built to answer. Each PIR drives collection (PIR → essential elements of information → indicators/sources). Answer, evidence, confidence, and residual gap for each.

PIR-1: [Question category]

Question: [Specific intelligence question.]

Assessment	Supporting Evidence	Confidence
[YES / NO / LIKELY / UNRESOLVED]	[Key evidence]	[HIGH/MOD/LOW]

Residual gap: [What is still needed to fully answer - carry to §16 if open.]

PIR-2: [Question category]

Question: [Specific intelligence question.]

Assessment	Supporting Evidence	Confidence
[ ]	[ ]	[ ]

Residual gap: [ ]

(Repeat per PIR - typically 4–6 for a standard dossier.)

PIR Summary Matrix

PIR	Question (brief)	Answer	Confidence
PIR-1	[ ]	[ ]	[H/M/L]
PIR-2	[ ]	[ ]	[H/M/L]
PIR-3	[ ]	[ ]	[H/M/L]
PIR-4	[ ]	[ ]	[H/M/L]

5. Subject Identification & Identity Resolution

The disambiguation backbone. Establish that the person profiled is the intended subject and is uniquely distinguished from same-name individuals. Identity confidence is explicit and evidence-based - never assumed from a name match alone.

Confirmed Identity

Field	Value	Source Grade
Full Legal Name	[ ]	[A–F / 1–6]
AKAs / Aliases / Maiden / Transliterations	[ ]	[ ]
Date / Place of Birth	[ ]	[ ]
Nationality / Citizenship(s)	[ ]	[ ]
Government / National ID (if lawfully obtained)	[Type, partial/redacted]	[ ]
Known Addresses (current & historical)	[ ]	[ ]
Telephone / Email Selectors	[ ]	[ ]
Online Handles / Usernames	[ ]	[ ]
Physical Description / Imagery Ref	[ ]	[ ]

Identity Resolution & Disambiguation

State how the subject was distinguished from candidate same-name individuals: the corroborating identifiers (DOB + location + employer + photo, etc.) used to bind records to one person.

Candidate Entity	Distinguishing Identifiers	Disposition	Confidence
[Subject - resolved]	[DOB + city + employer + image]	Subject	[Confirmed/Probable/Possible]
[Same-name #1]	[Differing identifiers]	Excluded	[ ]
[Same-name #2]	[Differing identifiers]	Excluded - unresolved overlap	[ ]

Identity resolution confidence: [Confirmed / Probable / Possible / Unresolved] - [one-line justification].

6. Biographic Profile

Verified life history at standard depth. Distinguish documented fact from claimed/self-reported. Grade each significant datum.

Domain	Findings	Status	Source Grade
Personal history / origins	[ ]	[Verified/Claimed/Contradicted]	[A–F/1–6]
Education	[Institutions, dates, credentials]	[ ]	[ ]
Employment / professional history	[Roles, employers, dates]	[ ]	[ ]
Professional licenses / memberships	[ ]	[ ]	[ ]
Military / government / security service	[ ]	[ ]	[ ]
Family & domestic relationships	[Spouse, dependents, household]	[ ]	[ ]
Languages / nationality nuances	[ ]	[ ]	[ ]

Claimed vs. Verified (where the subject’s stated profile diverges from record):

Aspect	Claimed / Self-Reported	Verified Reality	Assessment
[e.g., Title]	[ ]	[ ]	[Match / Overstated / Fabricated / Unverifiable]

7. Pattern-of-Life Analysis

Routine, geography, and tempo derived from open sources (posts, check-ins, public records, imagery metadata where lawfully available). Standard depth - describe observable patterns and anomalies; do NOT conduct physical surveillance or covert tracking (out of scope; flag as RFI if required).

Routine & Temporal Patterns

Recurring activities, days/times, observable cadence.

[Narrative.]

Geographic Footprint

Habitual locations: residence area, work, frequented venues, travel hubs. Confidence per location.

Location	Type	Basis / Source	Confidence
[ ]	[Residence/Work/Frequented/Travel]	[ ]	[H/M/L]

Travel & Mobility

Observable travel pattern, international movement, second residences - from open indicators only.

[Narrative.]

Lifestyle Indicators

Interests, affiliations, habits relevant to the requirement.

[Narrative.]

Anomalies & Deviations

Departures from established pattern, gaps, or behaviors warranting note. Anomalies are flagged, not over-interpreted.

[Narrative.]

8. Digital Footprint & Online Presence

Mapped open-source/online presence and exposure. Grade attribution confidence for each account (linking a handle to the subject is itself an analytic judgment).

Accounts & Identifiers

Platform / Asset	Handle / URL	Attribution Confidence	Status	Notes
[ ]	[ ]	[Confirmed/Probable/Possible]	[Active/Dormant]	[ ]

Content, Sentiment & Affiliations

Themes, stated views, group memberships, behavior of note. Distinguish subject-authored content from content about the subject.

[Narrative.]

Exposure & Breach Indicators

Subject data appearing in breach corpora, paste sites, or data-broker listings (open/licensed indicators only - deep dark-web collection is a separate product). Note implications for the subject’s own exposure/OPSEC.

Indicator	Source	Date Observed	Significance
[ ]	[ ]	[ ]	[ ]

Digital Posture Assessment

Account age vs. claimed history (backdating indicators), OPSEC sophistication, consistency across platforms.

[Narrative.]

9. Network & Associations

Key relationships relevant to the requirement. A full association link chart is an internal artifact of this section - include the diagram, not as a separate product. Standard depth: first-degree and salient second-degree links; exhaustive network expansion is the Enhanced Deep-Dive.

[Insert association/link diagram here - nodes = persons/entities; edges = relationship type, direction, strength.]

Associate / Entity	Relationship	Nature / Basis	Relevance	Source Grade
[Name]	[Family/Business/Social/Professional]	[How linked]	[Why it matters]	[A–F/1–6]

Network observations: [Clusters, intermediaries, notable affiliations, conflicts of interest, shared infrastructure (addresses, entities, numbers).]

10. Financial & Lifestyle Indicators (OSINT-visible)

Wealth and financial indicators visible through open/licensed sources only - property records, corporate interests, public filings, observable lifestyle. This is indicator-level, NOT a forensic asset trace, net-worth reconstruction, or source-of-wealth proof (those are Financial Intelligence & Asset Tracing / Enhanced Deep-Dive products). State the boundary; route deeper needs to §16.

Indicator	Observation	Basis / Source	Confidence
Real property / residence(s)	[ ]	[Public records]	[H/M/L]
Corporate / business interests	[ ]	[Registries]	[ ]
Public financial filings	[ ]	[ ]	[ ]
Observable lifestyle vs. known income	[ ]	[ ]	[ ]
Financial-stress / adverse indicators	[Liens, judgments, bankruptcy (public)]	[ ]	[ ]

Indicator assessment: [Consistency of observable lifestyle with known/claimed means; any unexplained divergence flagged, not concluded.]

11. Legal, Regulatory & Derogatory Findings

Adverse and verifying records. Each entry graded and dated. Distinguish charged vs. convicted vs. alleged; note jurisdiction and record currency.

Criminal & Court Records

Jurisdiction	Matter / Case #	Type	Status / Disposition	Date	Source Grade
[ ]	[ ]	[Criminal/Charge]	[Charged/Convicted/Dismissed]	[ ]	[ ]

Civil Litigation

Jurisdiction	Case	Role (Plaintiff/Defendant)	Status	Summary	Source Grade
[ ]	[ ]	[ ]	[Pending/Closed]	[ ]	[ ]

Regulatory & Professional Actions

Enforcement actions, sanctions by professional bodies, license issues.

[Narrative / table.]

Sanctions, PEP & Watchlist Screening

List / Database	Date Screened	Result	Match Quality
OFAC SDN / Consolidated	[YYYY-MM-DD]	[Clear/Hit/Near-match]	[ ]
EU / UK / UN Sanctions	[ ]	[ ]	[ ]
PEP databases	[ ]	[ ]	[ ]
Law enforcement / Interpol (public)	[ ]	[ ]	[ ]
Adverse media	[ ]	[ ]	[ ]

PEP / sanctions assessment: [Direct or associative exposure; basis; confidence.]

Adverse Media

Material negative media, distinguishing substantiated reporting from allegation/opinion. Grade source reliability.

Outlet / Source	Date	Substance	Reliability (A–F)	Credibility (1–6)
[ ]	[ ]	[ ]	[ ]	[ ]

12. Verified Findings Summary

Consolidated register of discrete findings with verification status, confidence, and materiality. The audit trail of what is established vs. open.

#	Finding	Status	Confidence	Materiality
F-1	[ ]	[Verified / Unverified / Contradicted]	[H/M/L]	[Material / Minor]
F-2	[ ]	[ ]	[ ]	[ ]
F-3	[ ]	[ ]	[ ]	[ ]

13. Red Flag & Notable Indicators Summary

Concerns surfaced by the investigation, typed and severity-ranked. Flags are indicators warranting attention, not adjudicated conclusions.

#	Indicator	Domain	Type	Severity
1	[ ]	[Identity/Legal/Financial/Digital/Network]	[See definitions]	[CRITICAL/HIGH/MEDIUM/LOW]
2	[ ]	[ ]	[ ]	[ ]

Type definitions:

• DISCREPANCY - claimed vs. verified profile mismatch.
• DEROGATORY - verified adverse record (legal/regulatory/financial).
• DECEPTION - indicators of fabrication, false identity, or concealment.
• EXPOSURE - subject’s own vulnerability (data leakage, OPSEC failure).
• ASSOCIATION - concerning affiliation or proximity to high-risk parties.
• UNRESOLVED - material item that could not be verified or disambiguated.

Severity rollup: Critical: [#] | High: [#] | Medium: [#] | Low: [#]

14. Analysis of Competing Hypotheses (ACH)

For the central judgment(s), lay out the plausible alternative explanations and test each against the evidence. The favored judgment is the one with the least disconfirming evidence - state it on that basis.

Hypothesis 1: [Statement]

• Evidence for: [ ]
• Evidence against: [ ]
• Assessment: [Consistency with the evidence; retained / weakened / rejected.]

Hypothesis 2: [Statement]

• Evidence for: [ ]
• Evidence against: [ ]
• Assessment: [ ]

Hypothesis 3: [Statement]

• Evidence for: [ ]
• Evidence against: [ ]
• Assessment: [ ]

Most consistent hypothesis: [Which, and why - the discriminating evidence.]

15. Key Assumptions Check

The load-bearing assumptions behind the analysis, made explicit and stress-tested. If an assumption is wrong, what breaks?

#	Assumption	Basis	Confidence	Impact if Wrong
A-1	[ ]	[ ]	[H/M/L]	[Which judgments fail]
A-2	[ ]	[ ]	[ ]	[ ]
A-3	[ ]	[ ]	[ ]	[ ]

16. Collection Gaps & Intelligence Requirements (RFIs)

What could not be obtained or verified, its effect on the assessment, and how to close it. Needs exceeding this product’s scope (threat scoring, deep network, asset trace, skip-trace, covert collection) are routed here as RFIs to the appropriate deliverable.

Gap / RFI	Impact on Assessment	Recommended Collection / Routed Product	Priority
[ ]	[ ]	[Method / e.g., ”→ Subject Threat Assessment”]	[HIGH/MED/LOW]
[ ]	[ ]	[ ]	[ ]

Verification pending: [Requests submitted but not yet returned as of the as-of date.]

17. Recommendations

Actionable, tied to findings, segmented by stakeholder. Separate analytic recommendations (what to conclude/decide) from collection recommendations (what to investigate next).

For [Stakeholder / Decision-Maker]

• [Recommendation.]
• [Recommendation.]

Recommended Next Investigative Actions

Priority	Action	Resource / Expertise	Est. LOE	Expected Outcome
1	[ ]	[ ]	[Hours/Days]	[What it resolves]
2	[ ]	[ ]	[ ]	[ ]

18. Sources & Methodology

Collection Methods

Methods employed (open-source intelligence; licensed databases; public records; social-media analysis; imagery/geolocation as lawful). State that no covert, intrusive, pretext, or unlawful methods were used.

• [Method]
• [Method]

Source Register

Every material datum is traceable to a graded source. Sensitive sources may be referenced by index.

Ref	Source	Type	Reliability (A–F)	Credibility (1–6)	Date Accessed
S-1	[ ]	[Primary/Secondary/Tertiary]	[ ]	[ ]	[YYYY-MM-DD]
S-2	[ ]	[ ]	[ ]	[ ]	[ ]

Source Reliability Scale (Admiralty, A–F)

Grade	Meaning
A	Completely reliable
B	Usually reliable
C	Fairly reliable
D	Not usually reliable
E	Unreliable
F	Reliability cannot be judged

Information Credibility Scale (Admiralty, 1–6)

Grade	Meaning
1	Confirmed by other sources
2	Probably true
3	Possibly true
4	Doubtful
5	Improbable
6	Truth cannot be judged

Estimative Probability (Likelihood) Lexicon - ICD 203

Term	Range
Almost no chance / remote	01–05%
Very unlikely / highly improbable	05–20%
Unlikely / improbable	20–45%
Roughly even chance	45–55%
Likely / probable	55–80%
Very likely / highly probable	80–95%
Almost certain / nearly certain	95–99%

Analytic Confidence Scale (evidence base)

Level	Criteria
HIGH	Multiple independent, reliable sources; primary documentation; no significant contradictory evidence.
MODERATE	Partial corroboration; some gaps; minor unresolved inconsistencies that are explainable.
LOW	Single or uncorroborated source; significant gaps; plausible alternative explanations remain open.

Methodological note: Likelihood (the probability of an event/characterization) and analytic confidence (the strength of the underlying evidence base) are distinct and are never combined in a single sentence (ICD 203). This product distinguishes verified reporting from analyst assumptions and judgments, and states the indicators that would change its key judgments.

19. Appendices

• Appendix A - Identifier & Entity Index: [All names, aliases, selectors, and entities referenced, with cross-reference.]
• Appendix B - Full Source Index: [Complete citations / archived links keyed to the source register.]
• Appendix C - Extended Findings: [Detailed supporting analysis for material findings.]
• Appendix D - Evidence Archive & Chain of Custody: [Pointer to preserved screenshots/records, hashes, capture timestamps and URLs.]
• Appendix E - Glossary & Abbreviations: [Terms and acronyms used.]
• Appendix F - Revision History: [Version, date, author, change summary.]

---

END OF REPORT

This dossier was prepared from open-source and licensed-database collection as of the stated as-of date. It is an investigative intelligence product, not a consumer report (FCRA), and not legal advice. Findings are time-sensitive and should be independently verified before any adverse or legally consequential action.

Field	Value
Prepared By	[ANALYST NAME]
Reviewed By	[REVIEWER NAME]
Approving Officer	[APPROVER NAME]
Date	[YYYY-MM-DD]
Version	[X.X]

Model wiring

Generated from cell frontmatter at publish time.

• Produces for: OSINT-002, OSINT-003, OSINT-004, OSINT-005, OSINT-006
• Related: OSINT-003, OSINT-004, OSINT-017
• Provides: ART-subject-dossier