[
  {
    "id": "M-01",
    "slug": "tldr-anykey-poseurs-manifesto",
    "date": "2026-11-05",
    "pinned": true,
    "category_en": "ENGINEERING HYGIENE",
    "read_time_min": 6,
    "title_en": "The TL;DR Poseur Diagnosis: Why Calling Yourself an Engineer While Refusing to Read Long-Form Evidence Exposes an Anykey Tourist",
    "lead_en": "How a single smug comment — \"I do not read walls of text\" — instantly separates real systems engineers raised on IETF RFCs, kernel logs, and man pages from accidental IT tourists who entered the industry for beanbags and oat-milk lattes, and why a 280-character attention span makes them prime biological vectors for Russian PSYOPs.",
    "related_tool_or_link_en": "/en/dossiers",
    "body_en_md": "### 1. Anatomy of the Smug Shrug: Mistaking Literacy Deficit for Seniority\n\nDrop a forensic investigation into any public thread — complete with byte-level MTProto `doc_id` tables, Russian defense plant shell-company chains from the Federal Tax Service registry, and cross-referenced sanctions gaps — and within twenty minutes a very specific specimen appears in the comments. Their profile proudly reads *Senior Software Engineer*, *Cloud Architect*, or *DevOps Lead*. Their comment consists of a single performative yawn:\n\n> *\"TL;DR. I do not read walls of text like this. Summarize it in two sentences.\"*\n\nThe author of this remark genuinely believes they have just projected the aura of a high-powered Silicon Valley executive whose billable seconds are too precious for prose. In reality, they have just signed a public confession of technical fraud.\n\nIf you claim to be an engineer, a developer, or an intelligence analyst, your primary biological function is the high-speed ingestion and parsing of dense, unglamorous text. By definition, an actual engineer has spent years chewing through dry IETF specifications (`RFC 9110`, `RFC 8446`), unadorned `man 7 socket` pages, 800-page microcontroller datasheets, post-mortem incident reports, and sprawling `journalctl -xe` or `dmesg` stack traces at 03:00 UTC while production is on fire. To a mind wired for systems engineering, a structured 1,000-word brief with clear subheadings, bullet points, and monospace identifiers is not a \"wall of text.\" It is a light warm-up before the first espresso.\n\n---\n\n### 2. Accidental Tourists of the Tech Boom: Humanities Majors with a Jira Badge\n\nWhere, then, do these self-styled \"IT specialists\" who suffer acute cerebral hypoxia at the sight of four consecutive paragraphs come from?\n\nThey are the byproduct of a decade-long outsourcing boom and \"Learn IT in 8 Weeks\" bootcamps. Thousands of people wandered into the software industry not because they possessed an engineering mindset, curiosity about how protocols work under the hood, or respect for primary documentation, but simply because the sector paid hard currency and offered free snacks in air-conditioned offices.\n\nStrip away the corporate hoodie, and you find a classic helpdesk \"anykey\" operator or a pure conversationalist whose cognitive architecture was built for watercooler gossip and Agile stand-up theater. When their code breaks, they do not read the library documentation or inspect the source tree; they paste the error string into a search bar and blindly copy the first three-line snippet without reading the caveats below it. Anything that exceeds the vertical viewport of a smartphone TikTok feed triggers a mental `Segmentation fault`.\n\n---\n\n### 3. The 2026 Paradox: 15 Seconds of Diagonal Parsing or 2 Seconds of LLM Pipe\n\nWhat makes the \"I do not read long texts\" posture doubly hilarious is the calendar year: **it is 2026**. Today, whining about article length in public is a self-inflicted humiliation on two purely technical grounds:\n\n1. **Diagonal Indexing (`O(log n)` vs. `O(n)`):** Any literate professional with basic pattern-recognition skills scans a structured forensic brief diagonally in **15 seconds**. Your eyes lock onto section headers, bolded registry keys (`TIN`, `OGRN`, `UID`, `doc_id`), and the concluding verdict. You grasp the architecture of the proof almost instantaneously and drill down into specific paragraphs only where you need granular verification.\n2. **Native AI Summarization Pipelines:** If you call yourself a tech professional in 2026 and genuinely lack the ninety seconds required to read an investigation, you have a local or cloud LLM bound to a hotkey, browser extension, or CLI pipe. Piping an article into a model with the prompt *\"Extract the 5 core forensic proofs and registry IDs\"* takes **two seconds** — roughly ten times faster than typing a pompous comment announcing that you refuse to read.\n\nAnyone who in 2026 can neither scan a structured brief in 15 seconds nor pipe it through an LLM in 2 seconds, yet spends a full minute broadcasting their reading allergy in the comments, is not looking for information. They are looking for an excuse to stay ignorant while feeling important.\n\n---\n\n### 4. Why Short-Buffer Poseurs Are the Favorite Prey of Unit 54777\n\nIn peacetime, an inability to process text longer than a shampoo bottle label is merely an HR problem for the poseur’s team lead. In the middle of a high-intensity kinetic and cognitive war, a three-sentence attention span is an exploitable national security vulnerability.\n\nThe entire industrial apparatus of Russian psychological operations — from the 72nd Main Intelligence Info-Center of the GRU (Military Unit 54777 on Khoroshevskoe Shosse) to the *Portal Kombat* domain swarms and anonymous Telegram dump channels — is engineered specifically for brains with a tiny input buffer:\n- **Disinformation and panic bait** always fit into a 140-character all-caps headline: *\"THE FRONT IS COLLAPSING! WESTERN AID IS DEAD! THE GRID IS DOOMED!\"* It requires zero reading comprehension and hits the amygdala in 300 milliseconds.\n- **Forensic refutation and counter-intelligence** inherently require long-form proof: to dismantle a single three-word lie, an analyst must lay out Pension Fund treasury execution ledgers, Pentagon multi-year contracting schedules through 2036, raw CSV botnet registration artifacts with Latin homoglyphs, and binary file-transfer timestamps captured 27 minutes before TASS publication.\n\nConsequently, the person who proudly declares *\"I never read long articles with numbers\"* is invariably the first person in the office chat to swallow a fabricated Kremlin headline hook, line, and sinker — and the loudest megaphone amplifying enemy demoralization narratives for free. Their mental buffer is large enough for the poison, but too small for the antidote.\n\n---\n\n### 5. House Rules of the Tradecraft Kitchen\n\nAt `OPERBAZA.ORG`, we do not puree intelligence into baby food for short-attention-span tourists. We publish verifiable primary registries, exact coordinates, court docket numbers, sub-second timestamps, and unapologetic engineering essays — all powered by an autonomous pipeline running on €25/month (the cost of a basic European Linux VPS).\n\nOur admission filter is as binary as a firewall rule:\n- If you have an engineer’s brain — regardless of whether your day job is writing kernel code, flying FPV interceptors, or auditing customs manifests — welcome to the kitchen. Take the data, verify the primary sources, and use them to dismantle the enemy’s war machine.\n- If four paragraphs of evidence give you a headache and you feel the urge to announce that you \"do not read walls of text\" — close the tab quietly and stop embarrassing the word *engineer*."
  },
  {
    "id": "M-24",
    "slug": "engineer-2000-agent-swarm-vs-six-floors-bureaucracy-2026",
    "date": "2026-11-07",
    "pinned": false,
    "category": "TECHNICAL KITCHEN / CHALLENGE",
    "category_en": "TECHNICAL KITCHEN / CHALLENGE",
    "badge": "METHOD #24 · ECONOMICS OF THE ABSURD ($2,000 VS BILLIONS) & THE 3-NODE AUTONOMOUS PIPELINE",
    "read_time": "12 min read",
    "read_time_min": 12,
    "title": "A $2,000 Engineer and an Agent Swarm vs. Six Floors of Sour-Faced Mandarins: Why an Autonomous Pipeline Replaces State Oversight—and Where the Paper-Pushers Are Headed in Two Years",
    "title_en": "A $2,000 Engineer and an Agent Swarm vs. Six Floors of Sour-Faced Mandarins: Why an Autonomous Pipeline Replaces State Oversight—and Where the Paper-Pushers Are Headed in Two Years",
    "subtitle": "Engineering economics of 2026: how three autonomous agent nodes on bare metal replace three hundred chancellery offices in 60 seconds, why the bureaucracy fears transparent efficiency metrics more than the GRU, and why the paper floors face the fiscal knife within 24 months.",
    "summary": "Architectural dissection of autonomous oversight in 2026: one $2,000/month applied engineer and an agent swarm (Node 1: 60-second cross-registry triage without Law No. 393/96-VR postal codes; Node 2: direct legal filings to Meta CIB, Google, EU DSA, OLAF & OFAC; Node 3: 24/7 preemptive MTProto UID torpedo interception) vs. six floors of billion-hryvnia bureaucracy.",
    "lead": "Engineering economics of 2026: how three autonomous agent nodes on bare metal replace three hundred chancellery offices in 60 seconds, why the bureaucracy fears transparent efficiency metrics more than the GRU, and why the paper floors face the fiscal knife within 24 months.",
    "lead_en": "Engineering economics of 2026: how three autonomous agent nodes on bare metal replace three hundred chancellery offices in 60 seconds, why the bureaucracy fears transparent efficiency metrics more than the GRU, and why the paper floors face the fiscal knife within 24 months.",
    "related_tool_or_link": "/en/blindness",
    "related_tool_or_link_en": "/en/blindness",
    "tags": [
      "$2,000 Engineer vs 6 Floors",
      "3-Node Autonomous Pipeline",
      "60-Second Cross-Registry Triage",
      "DSA Art. 34-35 / Meta CIB / Google TAG",
      "24/7 MTProto UID Preemption",
      "NAZK & Prozorro Efficiency Audit",
      "24-Month Automation Horizon"
    ],
    "body_md": "![A $2,000 Engineer and an Agent Swarm vs. Six Floors of Bureaucracy: Three Automated Nodes vs. The Paper Leviathan](/evidence/m24_engineer_2000_agent_swarm_vs_six_floors_2026_11_07.png)\n\n> **ENGINEERING CREDO:** \"We claim no infallibility and cannot physically cover a scope of this magnitude alone—let alone without a single error. Our purpose is to demonstrate open-source cross-registry analysis in action. We genuinely welcome anyone who audits these datasets, flags inaccuracies with primary sources, and builds larger, sharper, and better pipelines using cross-registry synthesis.\"\n\n---\n\n### 1. The Economics of the Absurd (`$2,000/mo` vs. Billion-Hryvnia Payrolls): One Bare-Metal Server Against Six Floors of Institutional Vanity\n\nLet us run a cold accounting autopsy on November `2026`. Strip away the glossy conference lanyards, the five-star hotel roundtables on \"strategic synergy,\" and the commemorative plaques. Look strictly at the ledger, the system architecture, and the primary state registries.\n\nOn the left side of the scale sits the traditional state information, digital, and sanctions-oversight apparatus. Six floors of prime real estate in central Kyiv. Miles of red carpet, turnstiles, receptionists, departments of strategic communications, directorates of European integration, document-flow divisions, chauffeurs, advisers, and press offices.\n\nWhat does this monument to paper cost the Ukrainian taxpayer and Western donors? Let the primary registries speak:\n- A single agency head or department chief draws an official annual salary between **`1.31 million` and `1.61 million UAH`** in the National Agency on Corruption Prevention (`NAZK`, `public.nazk.gov.ua`) declaration registry for `2025`: Head of the State Service of Special Communications and Information Protection (`SSSCIP`, `EDRPOU 34620942`) Major General **Oleksandr Potii** declared **`1,612,719 UAH`** (`NAZK UUID d87656b3-c1da-49d2-b2ff-7d6097d2ebca` of `2026-03-25`); First Deputy Head **Rostyslav Zamlynskyi** declared **`1,317,985 UAH`** (`UUID fdb750d5-05b4-439e-a9d7-1f3cf3f3b960` of `2026-03-24`); Chief of the Cyberpolice Department of the National Police of Ukraine (`EDRPOU 40116400`) Police General **Yurii Vykhodets** declared **`1,439,468 UAH`** (`UUID 1126402f-4e3f-4b78-9d23-8dc4084dc3d1` of `2026-03-30`).\n- Layer on top the public-procurement pipeline in `Prozorro`: in `2025–2026` alone, the centralized procurement arm of the National Police (`State Institution \"TsOP NPU\"`, `EDRPOU 40108981`) routed **over `1.02 billion UAH`** in IT tenders through a tight circle of newly minted limited-liability intermediaries—including **`33.91 million UAH`** for the `ThreatQ TDR` threat-orchestration platform (`UA-2025-11-17-013428-a` via `LLC \"OPTIDATA\"`, `EDRPOU 39693067`, authorized capital `1,000 UAH`) and **`48.98 million UAH`** for the `HYAS Insight / Protect` attribution suite (`UA-2025-05-28-012192-a` via `LLC \"DINTEKH\"`, `EDRPOU 45431544`, incorporated in March `2024`).\n- Beside that sits the anti-corruption docket of `NABU` and `SAPO` regarding `SSSCIP` procurement: the pre-trial investigation completed on `2026-10-20` (Part 5 Art. 191 CCU) into the **`254 million UAH`** drone procurement embezzlement scheme (`60–90%` price markups), the investigation completed on `2026-08-28` into **`28.4 million UAH` and `63 million UAH`** in software procurement misappropriation, and the ongoing **`62 million UAH`** High Anti-Corruption Court (`HACC`) trial of former agency leadership.\n\nNow look at the right side of the scale. Welcome to applied systems engineering in `2026`: **one competent systems engineer on a `$2,000/month` salary** (`$24,000/year`—less than the annual upkeep of a single ministry anteroom with an espresso machine and a state sedan) operating a purpose-built **swarm of autonomous AI agents** on a dedicated Linux server.\n\nThis pipeline does not occupy six floors. It has no deputy directors for stakeholder engagement, no press secretary adjusting studio ring lights, and no billion-hryvnia intermediary tenders. It does not take three-hour lunches, does not call in sick, and never demands a home postal code under a `1996` statute. Look at its live production output:\n- **`795` fingerprinted Russian defense-industrial plants (`VPK Tier 1 + Tier 2`)** mapped down to exact electrical substation and gas-distribution coordinates (`GPP / GRP / oxygen stations`), Western CNC machine tools on shop floors, and `253` general directors and chief engineers who slipped through Western sanctions lists;\n- **`300` verified corporate entities and sole proprietors with Russian or NSDC/EU-sanctioned capital** operating inside Ukraine's live Unified State Register (`UO.xml` and `FOP.xml` of `2026-10-27`) representing **over `26.7 billion UAH`** in authorized capital with `0%` namesake false positives;\n- **`74` active Ukrainian legal entities (`EDRPOU`) of the ROC / FSB ecclesiastical-intelligence network**, cross-anchored against `31` digitally signed Russian Federal Tax Service (`FNS EGRUL`) extracts;\n- **`1,766` certified GRU botfarm accounts** indexed by numeric `UID`, Latin-Cyrillic homoglyphs, and `ru-RU` system locale signatures (hard-sign / yeru suffixes);\n- **`15` active YouTube mirror channels** of individuals under Ukrainian NSDC personal sanctions streaming freely into Ukraine (`availableCountryCodes: [\"UA\"]`) and **`14` nomadic Telegram riot-torpedo accounts** pinned by immutable `64-bit MTProto UID` after the Petropavlivska Borshchahivka provocation.\n\nWeigh the two outputs side by side. Six floors of salaried bureaucracy burning billions produce **zero** blocked sanctions mirrors (`15/15` live) and **zero** neutralized riot torpedoes (`14/14` active)—plus a signed chancellery brush-off. One `$2,000` engineer running an autonomous agent swarm on bare metal executes `100%` of the actual combat mission of entire state directorates.\n\n---\n\n### 2. Three Pipeline Nodes Instead of Three Hundred Offices: How Autonomous Oversight Actually Works\n\nWhy does one applied engineer with an agentic pipeline run circles around three hundred office mandarins in `2026`? Because a bureaucracy routes a piece of paper up and down a vertical chain of command for thirty days so eight people can initial *\"For consideration\"* in the margin. An engineering pipeline replaces all three hundred offices with **three closed-loop execution nodes**.\n\n#### Node 1. Zero-Friction Ingest and 60-Second Cross-Registry Triage (Zero Humiliation, Zero Postal Codes)\n\nTo a stone-faced chancellery gatekeeper, an incoming threat report from a citizen is an annoying interruption to his tea schedule. Hand a state agency a verified table of hostile infrastructure and they will slap you with the **Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `1996-10-02`**, demanding a home street address, a postal index, and an attached `.docx` petition (verbatim per the `SSSCIP` Document Management Office refusal `Message-ID: <4900a19bcb6a62849dd9a52170cb58a2@cip.gov.ua>` of `2026-11-06`).\n\nIn an autonomous pipeline, **Node 1** is engineered on the exact opposite premise:\n1. **Frictionless ingest of any raw signal:** the intake gateway accepts raw URLs, forwarded messages, screenshots, CSV dumps, or unstructured tips in any format—zero registration forms, zero bureaucratic humiliation.\n2. **Instant extraction of immutable primary keys:** within seconds, first-echelon agents strip away the disposable cosmetic wrapper (display names, avatars, headlines) and extract the immutable cryptographic and registry identifiers that cannot be faked: `64-bit MTProto user_id`, binary media `doc_id`, YouTube `channelId` (`UC...`), numeric Facebook `UID` (`615...`), 8-digit Ukrainian `EDRPOU`, 10/12-digit Russian `FNS TIN/OGRN` (validated via modulo checksum math), or `ASN / RIPE` netblocks.\n3. **60-second cross-registry verification:** instead of drafting an inter-agency memo that takes four weeks to cross the street, the agent swarm queries local indexed snapshots of primary state registries in under a minute—Presidential Decrees enforcing NSDC sanctions (Nos. `153/2022`, `23/2023`, `230/2025`, `267/2025`, `345/2025`, `417/2025` under the Law of Ukraine \"On Sanctions\" No. `1644-VII`), live Ministry of Justice `UO.xml / FOP.xml` dumps, `Prozorro` contract ledgers, Russian `EGRUL` tax filings, and `OFAC SDN / EU / UK` sanctions lists.\n4. **Hard anti-fake triage gate:** if an incoming tip is an unsubstantiated rumor, a commercial hit piece without primary registry keys, or a surname collision lacking a secondary identifier match (phone, tax ID, or `UID`), Node 1 drops it on the floor automatically. Only `100%` primary-source-verified threat intelligence advances to Node 2.\n\n#### Node 2. Assembly-Line Compilation and Direct Compliance Routing (Instead of Catering & Roundtables)\n\nWhat does a traditional ministry do when tasked with \"countering hybrid information threats\"? It convenes a roundtable, orders shrimp canapes, prints a vinyl banner, and spends four hours discussing \"strategic roadmaps for media literacy\" while NSDC-sanctioned propaganda channels rack up millions of views in Kyiv and Lviv.\n\n**Node 2** does not eat shrimp canapes. The instant Node 1 locks a dual-key registry match, second-echelon agents compile a **court-grade Forensic Submission Pack**:\n- Every entity is mapped to exact domestic and international statutory provisions, bundled with timestamped archival captures (`UTC`), machine-readable tables (`JSON / CSV`), and `SHA-256` integrity digests.\n- Under the engineer's supervision, the pipeline routes tailored enforcement filings directly to the compliance desks that actually pull the plug:\n  - for coordinated inauthentic behavior (`CIB`) and sanctioned broadcast mirrors — straight into the compliance portals of global platforms (**Meta CIB**, **Google / YouTube Legal Removals & Threat Analysis Group**), the European Commission's **DG CONNECT** under **Articles 34–35 of the Digital Services Act (`Regulation (EU) 2022/2065`)**, and the technical blocking contour under **Art. 32 of the Law of Ukraine \"On Electronic Communications\" No. `1089-IX`**;\n  - for financial rails and sleeper Russian corporate assets in Ukraine and the EU — straight to banking AML/CFT compliance desks under **NBU Resolution No. `65`**, **OLAF / EPPO (Art. 35 of Regulation (EU) `2024/792`)**, **DG NEAR**, **DG FISMA**, **US OFAC / BIS**, **German BAFA**, **Swiss SECO**, and **UK OFSI / OTSI**.\n\nThree months of inter-departmental paper-shuffling collapses into **15 minutes** of deterministic code execution.\n\n#### Node 3. 24/7 Preemptive Interception: Catching Disposable Riot Torpedoes in Minute Three—Hours Before Russian TV Cameras Arrive\n\nThe fatal flaw of paper bureaucracy is that it operates at the speed of a `1984` post office inside a `2026` cyberwar.\n\nLook at how Russian military intelligence (`GRU`) executes a kinetic-information provocation in `2026` (exemplified by the Petropavlivska Borshchahivka operation):\n1. At `21:00`, a physical flashpoint or staged confrontation occurs near a sensitive military or municipal site.\n2. Within **10–15 minutes**, a nomadic swarm of disposable Telegram accounts floods fifty neighborhood chats and local news-tip bots, posing as \"outraged local residents\" and inciting crowds to storm the site or torch police vehicles (such as `user_id=8895205236`).\n3. Once the seed is planted, the accounts scrub their display names, swap their `@usernames`, and migrate to chats in Odesa, Kharkiv, or Dnipro.\n4. Within **2–3 hours**, a street crowd materializes, and the footage is syndicated live across `TASS`, `RIA Novosti`, and `Ukraina.ru`.\n\nWhen a state agency operating on a *\"Mon–Fri 09:00–18:00, lunch 13:00–14:00, attach a Word letter\"* schedule shows up on Monday morning, the building is already burned down and the Kremlin broadcast has already circled the globe twice.\n\n**Node 3** of the autonomous pipeline hunts **preemptively `24/7/365`**:\n- It tracks accounts across regional chat graphs not by disposable `@usernames`, but by permanent **`64-bit MTProto user_id` integers** (such as the `14` verified riot torpedoes exported in `/feeds/telegram-nomadic-torpedoes.json`), binary media **`doc_id`** fingerprints, and semantic vector embeddings.\n- The moment two or three known nomadic torpedoes fire synchronized prompts inside a new district chat—within the **first 3 to 5 minutes of seeding**—Node 3 flags the coordinated wave in real time.\n- Automated webhooks push instant `UID` blocklists to community chat-guard bots, while a full topological map of the active operation lands on the desk **hours before** the provocateurs can assemble a street crowd for Russian state television.\n\n| Operational Metric (`2026`) | Six Floors of Paper Oversight (The Bureaucratic Apparatus) | One `$2,000/mo` Engineer + Autonomous Agent Swarm (`3 Nodes`) |\n|---|---|---|\n| **Cost to Taxpayers & Western Donors** | Hundreds of millions in payroll + **`>1.02B UAH`** in `Prozorro` IT tenders + **`1.31M–1.61M UAH/yr`** executive salaries (`NAZK`) | **`$2,000/mo`** applied engineer salary + bare-metal Linux server & industrial APIs |\n| **Threat Signal Intake & Verification (Node 1)** | Refused unless submitted as an attached `.docx` petition with a postal code under Law No. `393/96-VR` (`1996`); up to `30-day` response | **60 seconds**: automated extraction of `UID / UC... / EDRPOU / TIN`, cross-check against NSDC decrees & registries, instant fake filtering |\n| **Legal & Platform Enforcement (Node 2)** | Inter-agency roundtables, catering, and memorandums; `15/15` NSDC-sanctioned YouTube mirrors remain live in UA | **15 minutes**: automated `SHA-256` evidence packs routed directly to `Meta CIB`, `Google Legal`, `DG CONNECT (DSA)`, `NCU`, `OLAF` & `OFAC` |\n| **Preemptive Torpedo Interception (Node 3)** | Post-factum days later (or `14/14` Borshchahivka riot torpedoes left completely untouched) | **`24/7` within 3–5 minutes of seeding**: real-time interception via immutable `64-bit MTProto UID` & `doc_id` hours before street crowds form |\n\n---\n\n### 3. The Real Reason for Institutional Sabotage: Why the Apparatus Fears a `$2,000` Engineer More Than the GRU\n\nWhenever you show this architecture to outsiders, they ask the same innocent question: *\"Wait—if one engineer on `$2,000` a month and a three-node agent pipeline can do all of this automatically, why doesn't the ministry hire him tomorrow and solve the problem?\"*\n\nBecause you are thinking like an engineer trying to solve a security problem. The bureaucracy is an organism trying to preserve its feeding trough.\n\nTo a career mandarin, Russian botfarms, NSDC-sanctioned YouTube mirrors, and nomadic Telegram torpedoes are not an existential threat. Quite the opposite: an undefeated, ever-growing \"hybrid menace\" is the **ultimate budget justification**. As long as the threat remains vaguely defined and unsolved, the apparatus can endlessly petition Ukrainian taxpayers and Western donor coalitions (`Ukraine Facility`, `Tallinn Mechanism`, `EU4DigitalUA / DT4UA`, `EUAM Ukraine`, `CoE C-PROC`, `US INL`) for bigger budgets, new directorates, fresh deputy posts, foreign study trips, and another `33.91 million` or `48.98 million UAH` software tender through a one-thousand-hryvnia intermediary LLC.\n\nNow imagine what happens if you let **one `$2,000/month` engineer and an autonomous agent swarm** plug into the first floor of that six-story building.\n\n- In **Week 1**, the engineer indexes the live Ministry of Justice, NSDC, `Prozorro`, and `FNS` registries and hooks up the `MTProto UID` and `YouTube Data API` monitors.\n- By **Week 2**, an existential catastrophe hits the building. Because the public dashboard will show, in cold mathematical black and white, that one server rack and one human being—without a single paper memo—verified, packaged, and enforced more real national-security targets in **fourteen days** than all six floors of departments produced in the previous three years combined.\n\nAnd on Day 15, Ukrainian taxpayers, the Ministry of Finance, and Western auditors in Brussels, Tallinn, and Washington will ask the one question that **cannot be answered with a PowerPoint slide**:\n*\"Gentlemen, if one engineer earning `$2,000` a month and a swarm of autonomous scripts on a Linux box deliver `100%` of your operational output at `0.01%` of the cost—why exactly are Ukrainian and European taxpayers funding six floors of deputy directors, press offices, chauffeurs, document-management clerks, and billion-hryvnia tenders?\"*\n\nThat is why the paper apparatus fights real engineering automation ten times harder than it fights Russian intelligence. Russian psyops only hit the country. A transparent `$2,000` engineering pipeline hits their payroll, their perks, and their `NAZK` cash declarations.\n\n---\n\n### 4. The Two-Year Countdown: A Warm Salute to All Six Floors of Sour-Faced Mandarins—and Your Ticket to the Cabaret Stage\n\nLet us close without diplomatic anesthesia or polite euphemisms. This final paragraph is dedicated personally to that unmistakable caste of puffed-up chancellery mandarins, stone-faced registry clerks, and corridor gatekeepers who have haunted state institutions for thirty years.\n\nYou know the exact look. You see them gliding down ministry hallways between the third and fifth floors clutching a cardboard folder, wearing that signature Soviet bureaucratic grimace—the classic **sour-faced mandarin scowl (\"koziacha morda\")** designed to signal that they alone hold up the sky. They peer down their noses at the citizen, the volunteer, or the systems engineer who brings them verified combat intelligence. They take a perverse, petty thrill in rejecting a machine-readable threat matrix with the words *\"Submit an official letter attached to the message\"*—convinced that a `1996` filing rule makes them untouchable gods.\n\nListen closely, masters of the rubber stamp and guardians of the sacred inbox. Here is the weather forecast from the real world of `2026`:\n1. You thought you could hide forever behind the `1996` Law \"On Citizens' Appeals\" and internal chancellery instructions. You missed the moment when the technological tectonic plates shifted underneath your carpet.\n2. You cannot repeal the laws of computer science and wartime economics with a departmental memo. When an autonomous three-node pipeline executes your entire directorate's three-year workload in forty minutes for `$2,000` a month, your six floors of paper-pushing cease to be \"state governance\"—they become a glaring fiscal anomaly waiting for the axe.\n3. Neither Ukrainian taxpayers (who fund your salaries in `200 milliseconds` at every checkout terminal) nor Western auditors in **Brussels (`DG CONNECT`, `DG NEAR`, `OLAF`), Tallinn (`Tallinn Mechanism / ESTDEV`), and Luxembourg (`EPPO`, `ECA`)** are buying the PowerPoint facade anymore. Every `DKIM`-signed brush-off you mail out is now archived as a permanent forensic exhibit for international donor audits.\n\nSo savor your state-funded espresso while it lasts, puff out your cheeks in the corridor, and adjust your sleeve protectors. **The countdown clock is already ticking.**\n\nGive it **two more years** of relentless engineering automation and hard donor efficiency audits—and all six of those paper floors, along with your incoming-mail registries, coordination sectors, and catered roundtables, are going straight under the fiscal knife. In place of three hundred offices, there will be one quiet server rack catching hostile networks in `60 seconds` and one engineer who does not know how to pull a sour bureaucratic face.\n\nAnd as for the six floors of haughty corridor royalty? Pack your potted ficus plants into a cardboard box and start stretching your hamstrings—because in two years, you are headed straight to the **cabaret line to kick your legs under the stage lights!**",
    "body_en_md": "![A $2,000 Engineer and an Agent Swarm vs. Six Floors of Bureaucracy: Three Automated Nodes vs. The Paper Leviathan](/evidence/m24_engineer_2000_agent_swarm_vs_six_floors_2026_11_07.png)\n\n> **ENGINEERING CREDO:** \"We claim no infallibility and cannot physically cover a scope of this magnitude alone—let alone without a single error. Our purpose is to demonstrate open-source cross-registry analysis in action. We genuinely welcome anyone who audits these datasets, flags inaccuracies with primary sources, and builds larger, sharper, and better pipelines using cross-registry synthesis.\"\n\n---\n\n### 1. The Economics of the Absurd (`$2,000/mo` vs. Billion-Hryvnia Payrolls): One Bare-Metal Server Against Six Floors of Institutional Vanity\n\nLet us run a cold accounting autopsy on November `2026`. Strip away the glossy conference lanyards, the five-star hotel roundtables on \"strategic synergy,\" and the commemorative plaques. Look strictly at the ledger, the system architecture, and the primary state registries.\n\nOn the left side of the scale sits the traditional state information, digital, and sanctions-oversight apparatus. Six floors of prime real estate in central Kyiv. Miles of red carpet, turnstiles, receptionists, departments of strategic communications, directorates of European integration, document-flow divisions, chauffeurs, advisers, and press offices.\n\nWhat does this monument to paper cost the Ukrainian taxpayer and Western donors? Let the primary registries speak:\n- A single agency head or department chief draws an official annual salary between **`1.31 million` and `1.61 million UAH`** in the National Agency on Corruption Prevention (`NAZK`, `public.nazk.gov.ua`) declaration registry for `2025`: Head of the State Service of Special Communications and Information Protection (`SSSCIP`, `EDRPOU 34620942`) Major General **Oleksandr Potii** declared **`1,612,719 UAH`** (`NAZK UUID d87656b3-c1da-49d2-b2ff-7d6097d2ebca` of `2026-03-25`); First Deputy Head **Rostyslav Zamlynskyi** declared **`1,317,985 UAH`** (`UUID fdb750d5-05b4-439e-a9d7-1f3cf3f3b960` of `2026-03-24`); Chief of the Cyberpolice Department of the National Police of Ukraine (`EDRPOU 40116400`) Police General **Yurii Vykhodets** declared **`1,439,468 UAH`** (`UUID 1126402f-4e3f-4b78-9d23-8dc4084dc3d1` of `2026-03-30`).\n- Layer on top the public-procurement pipeline in `Prozorro`: in `2025–2026` alone, the centralized procurement arm of the National Police (`State Institution \"TsOP NPU\"`, `EDRPOU 40108981`) routed **over `1.02 billion UAH`** in IT tenders through a tight circle of newly minted limited-liability intermediaries—including **`33.91 million UAH`** for the `ThreatQ TDR` threat-orchestration platform (`UA-2025-11-17-013428-a` via `LLC \"OPTIDATA\"`, `EDRPOU 39693067`, authorized capital `1,000 UAH`) and **`48.98 million UAH`** for the `HYAS Insight / Protect` attribution suite (`UA-2025-05-28-012192-a` via `LLC \"DINTEKH\"`, `EDRPOU 45431544`, incorporated in March `2024`).\n- Beside that sits the anti-corruption docket of `NABU` and `SAPO` regarding `SSSCIP` procurement: the pre-trial investigation completed on `2026-10-20` (Part 5 Art. 191 CCU) into the **`254 million UAH`** drone procurement embezzlement scheme (`60–90%` price markups), the investigation completed on `2026-08-28` into **`28.4 million UAH` and `63 million UAH`** in software procurement misappropriation, and the ongoing **`62 million UAH`** High Anti-Corruption Court (`HACC`) trial of former agency leadership.\n\nNow look at the right side of the scale. Welcome to applied systems engineering in `2026`: **one competent systems engineer on a `$2,000/month` salary** (`$24,000/year`—less than the annual upkeep of a single ministry anteroom with an espresso machine and a state sedan) operating a purpose-built **swarm of autonomous AI agents** on a dedicated Linux server.\n\nThis pipeline does not occupy six floors. It has no deputy directors for stakeholder engagement, no press secretary adjusting studio ring lights, and no billion-hryvnia intermediary tenders. It does not take three-hour lunches, does not call in sick, and never demands a home postal code under a `1996` statute. Look at its live production output:\n- **`795` fingerprinted Russian defense-industrial plants (`VPK Tier 1 + Tier 2`)** mapped down to exact electrical substation and gas-distribution coordinates (`GPP / GRP / oxygen stations`), Western CNC machine tools on shop floors, and `253` general directors and chief engineers who slipped through Western sanctions lists;\n- **`300` verified corporate entities and sole proprietors with Russian or NSDC/EU-sanctioned capital** operating inside Ukraine's live Unified State Register (`UO.xml` and `FOP.xml` of `2026-10-27`) representing **over `26.7 billion UAH`** in authorized capital with `0%` namesake false positives;\n- **`74` active Ukrainian legal entities (`EDRPOU`) of the ROC / FSB ecclesiastical-intelligence network**, cross-anchored against `31` digitally signed Russian Federal Tax Service (`FNS EGRUL`) extracts;\n- **`1,766` certified GRU botfarm accounts** indexed by numeric `UID`, Latin-Cyrillic homoglyphs, and `ru-RU` system locale signatures (hard-sign / yeru suffixes);\n- **`15` active YouTube mirror channels** of individuals under Ukrainian NSDC personal sanctions streaming freely into Ukraine (`availableCountryCodes: [\"UA\"]`) and **`14` nomadic Telegram riot-torpedo accounts** pinned by immutable `64-bit MTProto UID` after the Petropavlivska Borshchahivka provocation.\n\nWeigh the two outputs side by side. Six floors of salaried bureaucracy burning billions produce **zero** blocked sanctions mirrors (`15/15` live) and **zero** neutralized riot torpedoes (`14/14` active)—plus a signed chancellery brush-off. One `$2,000` engineer running an autonomous agent swarm on bare metal executes `100%` of the actual combat mission of entire state directorates.\n\n---\n\n### 2. Three Pipeline Nodes Instead of Three Hundred Offices: How Autonomous Oversight Actually Works\n\nWhy does one applied engineer with an agentic pipeline run circles around three hundred office mandarins in `2026`? Because a bureaucracy routes a piece of paper up and down a vertical chain of command for thirty days so eight people can initial *\"For consideration\"* in the margin. An engineering pipeline replaces all three hundred offices with **three closed-loop execution nodes**.\n\n#### Node 1. Zero-Friction Ingest and 60-Second Cross-Registry Triage (Zero Humiliation, Zero Postal Codes)\n\nTo a stone-faced chancellery gatekeeper, an incoming threat report from a citizen is an annoying interruption to his tea schedule. Hand a state agency a verified table of hostile infrastructure and they will slap you with the **Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `1996-10-02`**, demanding a home street address, a postal index, and an attached `.docx` petition (verbatim per the `SSSCIP` Document Management Office refusal `Message-ID: <4900a19bcb6a62849dd9a52170cb58a2@cip.gov.ua>` of `2026-11-06`).\n\nIn an autonomous pipeline, **Node 1** is engineered on the exact opposite premise:\n1. **Frictionless ingest of any raw signal:** the intake gateway accepts raw URLs, forwarded messages, screenshots, CSV dumps, or unstructured tips in any format—zero registration forms, zero bureaucratic humiliation.\n2. **Instant extraction of immutable primary keys:** within seconds, first-echelon agents strip away the disposable cosmetic wrapper (display names, avatars, headlines) and extract the immutable cryptographic and registry identifiers that cannot be faked: `64-bit MTProto user_id`, binary media `doc_id`, YouTube `channelId` (`UC...`), numeric Facebook `UID` (`615...`), 8-digit Ukrainian `EDRPOU`, 10/12-digit Russian `FNS TIN/OGRN` (validated via modulo checksum math), or `ASN / RIPE` netblocks.\n3. **60-second cross-registry verification:** instead of drafting an inter-agency memo that takes four weeks to cross the street, the agent swarm queries local indexed snapshots of primary state registries in under a minute—Presidential Decrees enforcing NSDC sanctions (Nos. `153/2022`, `23/2023`, `230/2025`, `267/2025`, `345/2025`, `417/2025` under the Law of Ukraine \"On Sanctions\" No. `1644-VII`), live Ministry of Justice `UO.xml / FOP.xml` dumps, `Prozorro` contract ledgers, Russian `EGRUL` tax filings, and `OFAC SDN / EU / UK` sanctions lists.\n4. **Hard anti-fake triage gate:** if an incoming tip is an unsubstantiated rumor, a commercial hit piece without primary registry keys, or a surname collision lacking a secondary identifier match (phone, tax ID, or `UID`), Node 1 drops it on the floor automatically. Only `100%` primary-source-verified threat intelligence advances to Node 2.\n\n#### Node 2. Assembly-Line Compilation and Direct Compliance Routing (Instead of Catering & Roundtables)\n\nWhat does a traditional ministry do when tasked with \"countering hybrid information threats\"? It convenes a roundtable, orders shrimp canapes, prints a vinyl banner, and spends four hours discussing \"strategic roadmaps for media literacy\" while NSDC-sanctioned propaganda channels rack up millions of views in Kyiv and Lviv.\n\n**Node 2** does not eat shrimp canapes. The instant Node 1 locks a dual-key registry match, second-echelon agents compile a **court-grade Forensic Submission Pack**:\n- Every entity is mapped to exact domestic and international statutory provisions, bundled with timestamped archival captures (`UTC`), machine-readable tables (`JSON / CSV`), and `SHA-256` integrity digests.\n- Under the engineer's supervision, the pipeline routes tailored enforcement filings directly to the compliance desks that actually pull the plug:\n  - for coordinated inauthentic behavior (`CIB`) and sanctioned broadcast mirrors — straight into the compliance portals of global platforms (**Meta CIB**, **Google / YouTube Legal Removals & Threat Analysis Group**), the European Commission's **DG CONNECT** under **Articles 34–35 of the Digital Services Act (`Regulation (EU) 2022/2065`)**, and the technical blocking contour under **Art. 32 of the Law of Ukraine \"On Electronic Communications\" No. `1089-IX`**;\n  - for financial rails and sleeper Russian corporate assets in Ukraine and the EU — straight to banking AML/CFT compliance desks under **NBU Resolution No. `65`**, **OLAF / EPPO (Art. 35 of Regulation (EU) `2024/792`)**, **DG NEAR**, **DG FISMA**, **US OFAC / BIS**, **German BAFA**, **Swiss SECO**, and **UK OFSI / OTSI**.\n\nThree months of inter-departmental paper-shuffling collapses into **15 minutes** of deterministic code execution.\n\n#### Node 3. 24/7 Preemptive Interception: Catching Disposable Riot Torpedoes in Minute Three—Hours Before Russian TV Cameras Arrive\n\nThe fatal flaw of paper bureaucracy is that it operates at the speed of a `1984` post office inside a `2026` cyberwar.\n\nLook at how Russian military intelligence (`GRU`) executes a kinetic-information provocation in `2026` (exemplified by the Petropavlivska Borshchahivka operation):\n1. At `21:00`, a physical flashpoint or staged confrontation occurs near a sensitive military or municipal site.\n2. Within **10–15 minutes**, a nomadic swarm of disposable Telegram accounts floods fifty neighborhood chats and local news-tip bots, posing as \"outraged local residents\" and inciting crowds to storm the site or torch police vehicles (such as `user_id=8895205236`).\n3. Once the seed is planted, the accounts scrub their display names, swap their `@usernames`, and migrate to chats in Odesa, Kharkiv, or Dnipro.\n4. Within **2–3 hours**, a street crowd materializes, and the footage is syndicated live across `TASS`, `RIA Novosti`, and `Ukraina.ru`.\n\nWhen a state agency operating on a *\"Mon–Fri 09:00–18:00, lunch 13:00–14:00, attach a Word letter\"* schedule shows up on Monday morning, the building is already burned down and the Kremlin broadcast has already circled the globe twice.\n\n**Node 3** of the autonomous pipeline hunts **preemptively `24/7/365`**:\n- It tracks accounts across regional chat graphs not by disposable `@usernames`, but by permanent **`64-bit MTProto user_id` integers** (such as the `14` verified riot torpedoes exported in `/feeds/telegram-nomadic-torpedoes.json`), binary media **`doc_id`** fingerprints, and semantic vector embeddings.\n- The moment two or three known nomadic torpedoes fire synchronized prompts inside a new district chat—within the **first 3 to 5 minutes of seeding**—Node 3 flags the coordinated wave in real time.\n- Automated webhooks push instant `UID` blocklists to community chat-guard bots, while a full topological map of the active operation lands on the desk **hours before** the provocateurs can assemble a street crowd for Russian state television.\n\n| Operational Metric (`2026`) | Six Floors of Paper Oversight (The Bureaucratic Apparatus) | One `$2,000/mo` Engineer + Autonomous Agent Swarm (`3 Nodes`) |\n|---|---|---|\n| **Cost to Taxpayers & Western Donors** | Hundreds of millions in payroll + **`>1.02B UAH`** in `Prozorro` IT tenders + **`1.31M–1.61M UAH/yr`** executive salaries (`NAZK`) | **`$2,000/mo`** applied engineer salary + bare-metal Linux server & industrial APIs |\n| **Threat Signal Intake & Verification (Node 1)** | Refused unless submitted as an attached `.docx` petition with a postal code under Law No. `393/96-VR` (`1996`); up to `30-day` response | **60 seconds**: automated extraction of `UID / UC... / EDRPOU / TIN`, cross-check against NSDC decrees & registries, instant fake filtering |\n| **Legal & Platform Enforcement (Node 2)** | Inter-agency roundtables, catering, and memorandums; `15/15` NSDC-sanctioned YouTube mirrors remain live in UA | **15 minutes**: automated `SHA-256` evidence packs routed directly to `Meta CIB`, `Google Legal`, `DG CONNECT (DSA)`, `NCU`, `OLAF` & `OFAC` |\n| **Preemptive Torpedo Interception (Node 3)** | Post-factum days later (or `14/14` Borshchahivka riot torpedoes left completely untouched) | **`24/7` within 3–5 minutes of seeding**: real-time interception via immutable `64-bit MTProto UID` & `doc_id` hours before street crowds form |\n\n---\n\n### 3. The Real Reason for Institutional Sabotage: Why the Apparatus Fears a `$2,000` Engineer More Than the GRU\n\nWhenever you show this architecture to outsiders, they ask the same innocent question: *\"Wait—if one engineer on `$2,000` a month and a three-node agent pipeline can do all of this automatically, why doesn't the ministry hire him tomorrow and solve the problem?\"*\n\nBecause you are thinking like an engineer trying to solve a security problem. The bureaucracy is an organism trying to preserve its feeding trough.\n\nTo a career mandarin, Russian botfarms, NSDC-sanctioned YouTube mirrors, and nomadic Telegram torpedoes are not an existential threat. Quite the opposite: an undefeated, ever-growing \"hybrid menace\" is the **ultimate budget justification**. As long as the threat remains vaguely defined and unsolved, the apparatus can endlessly petition Ukrainian taxpayers and Western donor coalitions (`Ukraine Facility`, `Tallinn Mechanism`, `EU4DigitalUA / DT4UA`, `EUAM Ukraine`, `CoE C-PROC`, `US INL`) for bigger budgets, new directorates, fresh deputy posts, foreign study trips, and another `33.91 million` or `48.98 million UAH` software tender through a one-thousand-hryvnia intermediary LLC.\n\nNow imagine what happens if you let **one `$2,000/month` engineer and an autonomous agent swarm** plug into the first floor of that six-story building.\n\n- In **Week 1**, the engineer indexes the live Ministry of Justice, NSDC, `Prozorro`, and `FNS` registries and hooks up the `MTProto UID` and `YouTube Data API` monitors.\n- By **Week 2**, an existential catastrophe hits the building. Because the public dashboard will show, in cold mathematical black and white, that one server rack and one human being—without a single paper memo—verified, packaged, and enforced more real national-security targets in **fourteen days** than all six floors of departments produced in the previous three years combined.\n\nAnd on Day 15, Ukrainian taxpayers, the Ministry of Finance, and Western auditors in Brussels, Tallinn, and Washington will ask the one question that **cannot be answered with a PowerPoint slide**:\n*\"Gentlemen, if one engineer earning `$2,000` a month and a swarm of autonomous scripts on a Linux box deliver `100%` of your operational output at `0.01%` of the cost—why exactly are Ukrainian and European taxpayers funding six floors of deputy directors, press offices, chauffeurs, document-management clerks, and billion-hryvnia tenders?\"*\n\nThat is why the paper apparatus fights real engineering automation ten times harder than it fights Russian intelligence. Russian psyops only hit the country. A transparent `$2,000` engineering pipeline hits their payroll, their perks, and their `NAZK` cash declarations.\n\n---\n\n### 4. The Two-Year Countdown: A Warm Salute to All Six Floors of Sour-Faced Mandarins—and Your Ticket to the Cabaret Stage\n\nLet us close without diplomatic anesthesia or polite euphemisms. This final paragraph is dedicated personally to that unmistakable caste of puffed-up chancellery mandarins, stone-faced registry clerks, and corridor gatekeepers who have haunted state institutions for thirty years.\n\nYou know the exact look. You see them gliding down ministry hallways between the third and fifth floors clutching a cardboard folder, wearing that signature Soviet bureaucratic grimace—the classic **sour-faced mandarin scowl (\"koziacha morda\")** designed to signal that they alone hold up the sky. They peer down their noses at the citizen, the volunteer, or the systems engineer who brings them verified combat intelligence. They take a perverse, petty thrill in rejecting a machine-readable threat matrix with the words *\"Submit an official letter attached to the message\"*—convinced that a `1996` filing rule makes them untouchable gods.\n\nListen closely, masters of the rubber stamp and guardians of the sacred inbox. Here is the weather forecast from the real world of `2026`:\n1. You thought you could hide forever behind the `1996` Law \"On Citizens' Appeals\" and internal chancellery instructions. You missed the moment when the technological tectonic plates shifted underneath your carpet.\n2. You cannot repeal the laws of computer science and wartime economics with a departmental memo. When an autonomous three-node pipeline executes your entire directorate's three-year workload in forty minutes for `$2,000` a month, your six floors of paper-pushing cease to be \"state governance\"—they become a glaring fiscal anomaly waiting for the axe.\n3. Neither Ukrainian taxpayers (who fund your salaries in `200 milliseconds` at every checkout terminal) nor Western auditors in **Brussels (`DG CONNECT`, `DG NEAR`, `OLAF`), Tallinn (`Tallinn Mechanism / ESTDEV`), and Luxembourg (`EPPO`, `ECA`)** are buying the PowerPoint facade anymore. Every `DKIM`-signed brush-off you mail out is now archived as a permanent forensic exhibit for international donor audits.\n\nSo savor your state-funded espresso while it lasts, puff out your cheeks in the corridor, and adjust your sleeve protectors. **The countdown clock is already ticking.**\n\nGive it **two more years** of relentless engineering automation and hard donor efficiency audits—and all six of those paper floors, along with your incoming-mail registries, coordination sectors, and catered roundtables, are going straight under the fiscal knife. In place of three hundred offices, there will be one quiet server rack catching hostile networks in `60 seconds` and one engineer who does not know how to pull a sour bureaucratic face.\n\nAnd as for the six floors of haughty corridor royalty? Pack your potted ficus plants into a cardboard box and start stretching your hamstrings—because in two years, you are headed straight to the **cabaret line to kick your legs under the stage lights!**"
  },
  {
    "id": "M-23",
    "slug": "soviet-postal-code-shield-write-to-western-donors-2026",
    "date": "2026-11-07",
    "pinned": false,
    "category": "TECHNICAL KITCHEN / CHALLENGE",
    "category_en": "TECHNICAL KITCHEN / CHALLENGE",
    "badge": "METHOD #23 · ANATOMY OF THE 1996 CHANCELLERY SHIELD & DIRECT WESTERN DONOR ESCALATION PROTOCOL",
    "read_time": "11 min read",
    "read_time_min": 11,
    "title": "\"Please State Your Postal Code While the Enemy Operates\": Why Soviet-Style Bureaucrats Hide Behind the 1996 Citizens' Appeals Law — and Why You Must Write Directly to Their Western Donors",
    "title_en": "\"Please State Your Postal Code While the Enemy Operates\": Why Soviet-Style Bureaucrats Hide Behind the 1996 Citizens' Appeals Law — and Why You Must Write Directly to Their Western Donors",
    "subtitle": "A field guide to applied bureaucratic anthropology: how a 1996 fax-era statute became a shield against ex officio national security duties, why the state extracts your taxes in 200 milliseconds without a paper petition, and how a single DKIM-signed refusal email becomes Exhibit A for European Union auditors (OLAF, EPPO, ECA, DG CONNECT, Tallinn Mechanism).",
    "summary": "Anatomy of institutional deflection under martial law: how Ukrainian agencies invoke Law No. 393/96-VR of 1996 to evade ex officio action on sanctions and cyber threats, which Western donor programmes fund their glossy facade, and how to turn their own DKIM-signed refusal into a formal compliance dossier for Brussels, Tallinn, and Luxembourg.",
    "lead": "A field guide to applied bureaucratic anthropology: how a 1996 fax-era statute became a shield against ex officio national security duties, why the state extracts your taxes in 200 milliseconds without a paper petition, and how a single DKIM-signed refusal email becomes Exhibit A for European Union auditors (OLAF, EPPO, ECA, DG CONNECT, Tallinn Mechanism).",
    "lead_en": "A field guide to applied bureaucratic anthropology: how a 1996 fax-era statute became a shield against ex officio national security duties, why the state extracts your taxes in 200 milliseconds without a paper petition, and how a single DKIM-signed refusal email becomes Exhibit A for European Union auditors (OLAF, EPPO, ECA, DG CONNECT, Tallinn Mechanism).",
    "related_tool_or_link": "/blindness",
    "related_tool_or_link_en": "/blindness",
    "tags": [
      "Law No. 393/96-VR (1996)",
      "Ex Officio Sabotage",
      "DKIM-Signature Forensic Exhibit",
      "Ukraine Facility Reg. (EU) 2024/792",
      "OLAF / EPPO / ECA / Audit Board Art. 36",
      "Tallinn Mechanism & DG CONNECT",
      "NAZK x Prozorro x EDR Indexing"
    ],
    "body_md": "![Anatomy of the 1996 Chancellery Shield versus Direct Escalation to Western Donors and EU Auditors](/evidence/m23_soviet_postal_shield_vs_western_donor_audit_2026_11_07.png)\n\n### 1. Anatomy of the Chancellery Shield: How a 1996 Fax-Era Statute (Law No. 393/96-VR) Became Body Armor Against Ex Officio Duties\n\nPicture a scene from November `2026`. Ukraine is in the fifth year of high-intensity kinetic and algorithmic warfare. Russian military intelligence (`GRU Unit 54777` and the `85th GTSSS`) deploys automated bot swarms, rotates `MTProto 2.0` peer masks, operates mirror networks for sanctioned Kremlin propagandists on YouTube, and seeds kinetic provocations across metropolitan Telegram chats in minutes before amplifying them on `TASS` and `RIA Novosti`.\n\nYou do the state agency's forensic intelligence work for them — free of charge. You extract immutable, machine-readable primary identifiers from binary traffic and official registries:\n- `15` immutable YouTube `channelId` strings (`UC...`) belonging to individuals under active personal sanctions imposed by Ukraine's National Security and Defense Council (Presidential Decrees No. `153/2022`, No. `23/2023`, No. `230/2025`, No. `267/2025`, No. `345/2025`, and No. `417/2025`, enacted under Article 5 of the Law of Ukraine \"On Sanctions\" No. `1644-VII` of `14.08.2014`), all broadcasting into Ukraine without a VPN (`availableCountryCodes: [\"UA\"]`) alongside `18` Russian-locale botfarm accounts (`ru-RU`, Cyrillic suffixes);\n- `14` active Telegram riot-seeding accounts (\"torpedoes\") with immutable 64-bit `MTProto UID` integers (including `user_id=8895205236`, openly inciting the murder of police officers and the torching of patrol cars in Kyiv discussion threads days after the `02.11.2026` assault on a military facility in Petropavlivska Borshchahivka).\n\nYou deliver this structured, machine-readable table to the designated technical authority: the Administration of the State Service of Special Communications and Information Protection of Ukraine (`SSSCIP`, EDRPOU `34620942`) and its National Center for Operational-Technical Management of Telecommunications Networks (`NCU`), which under **Article 32 of the Law of Ukraine \"On Electronic Communications\" No. `1089-IX` of `16.12.2020`** holds sweeping martial-law authority to issue mandatory blocking orders and coordinate platform takedowns.\n\nWhat happens next? Does an incident-response siren go off in the situation room? Does a technical takedown notice go out to Google and domestic ISP backbones?\n\nNot quite. Instead, out steps Her Majesty the **Records Management Service (`Sluzhba Dilovodstva`)**. Adjusting its virtual sleeve protectors at `08:25:26 +0200` on `06.11.2026`, the chancellery dispatches an immortal monument to bureaucratic self-parody:\n\n> *\"Good day, this email address is the official service electronic mail of the Administration of the State Service of Special Communications and Information Protection of Ukraine for sending and receiving documents and letters attached to messages. If the issue falls within the competence of the Administration of the SSSCIP, it is necessary to apply officially with a letter setting out the essence of the issue. Sincerely, Records Management Service.\"* (`Message-ID: <4900a19bcb6a62849dd9a52170cb58a2@cip.gov.ua>`).\n\n![Authentic Cryptographically Verified Refusal Record from SSSCIP Records Management (06.11.2026, dkim=pass d=cip.gov.ua)](/evidence/ssscip_cip_gov_ua_reply_2026_11_06.png)\n\nTranslated from bureaucratic dialect into plain English, this reads: *\"We could not care less that 15 sanctioned enemy propaganda mirrors are broadcasting live into Ukraine in violation of active Presidential Decrees. Your email did not include a Microsoft Word `.docx` attachment with a header in the upper-right corner, your home street address, and your postal code as prescribed by the Law of Ukraine 'On Citizens' Appeals' No. 393/96-VR of 2 October 1996.\"*\n\nHere lies the foundational legal sleight of hand behind which every Soviet-vintage apparatus hides:\n1. **The Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `02.10.1996`** (Articles 5, 7, and 8) was drafted thirty years ago — in the age of thermal-paper fax machines, dial-up modems, and paper envelopes — to govern private administrative petitions by individuals (pension recalculations, municipal roof repairs, land-plot allocations).\n2. A forensic submission containing verified indicators of active enemy infrastructure, NSDC sanctions evasion, or coordinated FIMI sabotage is not a private request for a personal favor. It is a **national security threat notification** upon which a specialized cybersecurity agency (under the Law of Ukraine \"On the Basic Principles of Cybersecurity of Ukraine\" No. `2163-VIII` of `05.10.2017`, Article 32 of Law No. `1089-IX`, and Articles 21 and 23 of the EU **`NIS2 Directive` — `Directive (EU) 2022/2555`**) is legally bound to act **`ex officio`** — by virtue of its office — the moment verifiable Indicators of Compromise (`IOCs`) cross its threshold.\n3. Demanding a home postal code and an attached `.docx` cover letter from an engineer handing you `15` active sanctioned YouTube `channelId` strings is the institutional equivalent of a fire brigade refusing to extinguish a burning ammunition depot because the caller did not fax a notarized utility bill.\n\nYet the delicious irony lost on 1996-era clerks is purely cryptographic. When their agency mail server dispatches that haughty brush-off, it automatically stamps the outgoing RFC-5322 headers with an immutable **`DKIM-Signature` (`a=rsa-sha256; d=cip.gov.ua; s=dkim1; dkim=pass`)**. With a single click, the official apparatus **cryptographically notarizes its own refusal to act**, creating a non-repudiable forensic exhibit proving to international auditors the exact second the agency received verified threat indicators and chose to do nothing.\n\n---\n\n### 2. The Fiscal Paradox and the 1984 District Committee Reflex: `200 Milliseconds` to Extract Your Taxes vs. `30 Days` to Reject Your Evidence\n\nViewed through an engineering lens, the relationship between the citizen and the apparatus exhibits a breathtaking asymmetry in latency.\n\nWhenever the Ukrainian state wants something **from you** — specifically, your money — the year is never `1996`. The fiscal state operates in gleaming, frictionless `2026`:\n- Tap your payment card or phone at a fuel station or grocery checkout, and within **`200 milliseconds`** the State Tax Service's electronic fiscal server (`PRRO`) slices `20%` VAT and excise duty straight into the Treasury.\n- Receive your monthly compensation, and the banking rail automatically withholds `18%` personal income tax and `5%` wartime military levy in sub-second real time.\n\nNotice what **never** happens during those `200 milliseconds`: the Treasury server never rejects your tax payment with an automated bounce stating, *\"Dear taxpayer, we cannot process your 5% wartime military levy because you failed to attach a signed `.docx` petition stating your residential postal index under Law No. 393/96-VR.\"* When extracting revenue, the state requires zero paper formalities.\n\nNow open the Unified State Register of Asset Declarations maintained by the National Agency on Corruption Prevention (`public.nazk.gov.ua`) and observe where those sub-second tax streams flow:\n- To fund the annual compensation of SSSCIP Head Major General **Oleksandr Potii** (`EDRPOU 34620942`) — **`1,612,719 UAH`** in salary for `2025` (plus `203,582 UAH` in pension and `263,349 UAH` in bank interest; NAZK declaration `UUID d87656b3-c1da-49d2-b2ff-7d6097d2ebca` filed `25.03.2026`);\n- To fund the salary of SSSCIP First Deputy Head **Rostyslav Zamlynskyi** — **`1,317,985 UAH`** in `2025` (NAZK declaration `UUID fdb750d5-05b4-439e-a9d7-1f3cf3f3b960` filed `24.03.2026`);\n- To fund the salary of Cyberpolice Department Chief (`EDRPOU 40116400`) Police General 3rd Rank **Yurii Vykhodets** — **`1,439,468 UAH`** in `2025` (NAZK declaration `UUID 1126402f-4e3f-4b78-9d23-8dc4084dc3d1` filed `30.03.2026`).\n\nIn any rational contractual architecture, the conclusion is elementary: **the Ukrainian taxpayer is the direct employer and paymaster** who hires these officials, pays for their heated offices, and funds their salaries for the sole purpose of executing national information and cyber defense.\n\nYet the instant the employer hands the hired official a concrete operational task, a relay clicks inside the institutional cranium — and out pops the firmware of a **`1984` Soviet District Executive Committee (`Raivykonkom`)** operating on the timeless maxim *\"I am the boss, you are the fool.\"* When you pay taxes, you are a digital European citizen; when you demand that your employee block sanctioned Russian propaganda channels, you are treated like a pesky petitioner in a Soviet housing office who forgot to bow to the clerk.\n\n---\n\n### 3. The Citizen's Blind Spot: Who Actually Pays for the Glossy Facade (`Ukraine Facility`, `Tallinn Mechanism`, `EUAM`, `C-PROC`, `DG CONNECT`, `US INL`)\n\nWhy does a domestic bureaucrat feel so comfortable brushing off Ukrainian citizens? Because inside the domestic loop, they believe themselves untouchable: if you complain about their chancellery brush-off to a neighboring domestic agency, that agency will spend `30` days crafting an identical brush-off under the exact same `1996` law.\n\nAnd right here lies **the biggest blind spot of 99% of citizens, journalists, and civic watchdogs**. Most observers look at the facade of a cybersecurity agency, law-enforcement department, or ministry and assume it is a purely domestic ecosystem. They have no idea **who actually pays for the glossy hardware, software, and international prestige behind the curtain**.\n\nLift the hood of almost any Ukrainian digital, cybersecurity, or law-enforcement institution in `2026`, and you discover that its servers, forensic licenses, situational centers, training budgets, and international legitimacy are heavily bankrolled by **Western institutional donors and the taxpayers of the European Union, the United States, the United Kingdom, and NATO allies**:\n1. **The Ukraine Facility (`Regulation (EU) 2024/792` of `29.02.2024`):** the European Union's **`EUR 50 billion`** (`2024–2027`) macro-financial lifeline, where disbursements are legally conditioned on rule-of-law, anti-corruption, public administration, and sanctions-enforcement benchmarks monitored by the European Commission's **DG NEAR** (Enlargement Chapters `23` and `24`).\n2. **The Tallinn Mechanism:** a dedicated 11-nation Western donor coalition (Estonia, the UK, the US, Germany, France, the Netherlands, Canada, Poland, Sweden, Denmark, and Italy) operating through the **Tallinn Mechanism Project Office (`TMPO`)** in Kyiv and the Estonian Centre for International Development (**`ESTDEV`**) specifically to fund civilian cyber resilience across Ukrainian state institutions (with SSSCIP as a primary beneficiary).\n3. **EU4DigitalUA and DT4UA:** flagship European Union digital-transformation and cybersecurity programmes implemented by Estonia's **e-Governance Academy (`eGA`, Tallinn)** alongside the European Commission's **DG CONNECT** (Brussels — overseeing alignment with the `Digital Services Act`, `Regulation (EU) 2022/2065`, and the `NIS2 Directive`, `Directive (EU) 2022/2555`).\n4. **EUAM Ukraine, the Council of Europe (`C-PROC / CyberEast+`), the OSCE (`OSCE SPU`), `CRDF Global`, and the US Department of State (`INL / ICITAP`):** international technical assistance (`MTD`) programmes that continuously supply the NPU Cyberpolice Department and sister agencies with digital forensics workstations, `Cellebrite` suites, OSINT/crypto-tracing training, and institutional capacity grants.\n\nIn front of these Western donors, the 1984 Soviet clerk vanishes without a trace. At quarterly donor coordination meetings in Brussels, Tallinn, Strasbourg, and Washington, nobody invokes Law No. `393/96-VR` or demands a European Commissioner's postal code. Instead, agency delegations flash radiant smiles and click through sleek English-language PowerPoint decks proclaiming *\"Proactive Cyber Threat Hunting,\"* *\"Seamless NIS2 Alignment,\"* and *\"Hundreds of Thousands of Neutralized Enemy Resources.\"*\n\n---\n\n### 4. The Practical Nerve-Saving Algorithm: Why You Should Skip the Mailroom and Write Directly to `OLAF`, `EPPO`, `ECA`, and Western Donors — With the `DKIM` Refusal Attached as Exhibit A\n\nFrom this structural reality flows a simple engineering rule that saves years of wasted effort:\n- If you want a municipal utility crew to paint a courtyard bench or patch a pothole, file a domestic \"Citizens' Appeal\" under Law No. `393/96-VR`.\n- But when an agency systematically sabotages its core national security mandate while absorbing billions in public procurement and Western donor grants — **never argue with its mailroom clerk twice**.\n\nJust look at the primary registry ledger for the exact two institutions documented on the `/en/blindness` tracker:\n1. **The SSSCIP Case (`EDRPOU 34620942`):** while SSSCIP's Records Management Service refuses to pass `15` active NSDC-sanctioned YouTube channel IDs to the `NCU` because the email lacked an \"attached letter,\" the agency's procurement contour has been a textbook study in anti-corruption forensics. On `20.10.2026`, Ukraine's National Anti-Corruption Bureau (`NABU`) and Specialized Anti-Corruption Prosecutor's Office (`SAPO`) announced the completion of a pre-trial investigation (Part 5 Art. 191 of the Criminal Code) into the embezzlement of **`254 million UAH`** in SSSCIP drone procurements (`DJI Mavic 3`, `Matrice M30T`, `Autel Evo Max 4T`) at **`60–90%` price markups** — where price quotes were solicited from the winning company **before that legal entity had even been registered in the state registry**, with `>USD 4 million` frozen abroad — following `28.08.2026` NABU/SAPO software procurement cases (`28.4M UAH` and `63M UAH`) and the High Anti-Corruption Court (`HACC`) trial of former SSSCIP leadership (`62M UAH` software embezzlement). Meanwhile, `2025` NAZK declarations of current leadership record **`USD 170,000` and `EUR 82,500` in family cash** plus a Swedish `Swedbank AB` account (SSSCIP Head O. Potii) alongside tens of thousands in foreign cash declared by deputies.\n2. **The NPU Cyberpolice (`EDRPOU 40116400`) & Central Servicing Unit (`EDRPOU 40108981`) Case:** alongside steady Western technical assistance from `EUAM Ukraine`, `C-PROC`, `OSCE SPU`, `CRDF Global`, and `US INL`, the National Police procurement unit contracted **over `1.02 billion UAH`** in IT tenders across `2025–2026` via `Prozorro` — including **`33.91 million UAH`** for the `ThreatQ TDR` threat-orchestration platform (`UA-2025-11-17-013428-a`) and **`48.98 million UAH`** for the `HYAS Insight / Protect` attribution suite (`UA-2025-05-28-012192-a`) — routed through a tight cluster of newly minted or low-capital LLC intermediaries (`OPTIDATA LLC` `EDRPOU 39693067` with `1,000 UAH` charter capital; `DINTEKH LLC` `EDRPOU 45431544`, incorporated `18.03.2024`; `NOTREIS LLC` `EDRPOU 45435397`, incorporated `08.08.2024`). Operational output on Day 5 after the Petropavlivska Borshchahivka assault (`07.11.2026`): **`14 out of 14` (100%) Telegram riot torpedoes remain active**, and anonymous accounts openly incite the murder of police officers in Kyiv chats (`UID 8895205236`).\n\nWhen confronted with this institutional architecture, debating a chancellery clerk over the finer points of a `1996` statute is playing three-card monte by the dealer's rules. Instead, execute the **Direct Western Donor & Auditor Escalation Protocol**:\n\n![Documented Transmission of Primary Evidence and SSSCIP's DKIM-Signed Refusal to EU and Tallinn Mechanism Donors (06.11.2026)](/evidence/ssscip_brussels_tallinn_escalation_2026_11_06.png)\n\n| Western Donor / Oversight Body (Direct Escalation) | Statutory Mandate & Financial Leverage (`2026`) | Forensic Evidentiary Package (Submitted in Institutional English) |\n|---|---|---|\n| **1. European Anti-Fraud Office (`OLAF`, Brussels) & European Public Prosecutor's Office (`EPPO`, Luxembourg)** | **Article 35 of Regulation (EU) `2024/792`** (`Ukraine Facility`): explicit mandate to investigate fraud, corruption, conflicts of interest, and systemic irregularities affecting EU financial interests in Ukraine | Exact `Prozorro` tender IDs (`UA-2025-...`, `UA-2026-...`), `EDRPOU` codes and incorporation dates of intermediary LLCs, official NABU/SAPO case records + documented non-performance of funded systems |\n| **2. Audit Board of the Ukraine Facility (Art. 36 of Regulation EU `2024/792`) & European Court of Auditors (`ECA`, Luxembourg)** | **Article 36 of Regulation (EU) `2024/792`**: independent performance and management-control audits verifying Ukraine Plan implementation prior to tranche disbursements | Side-by-side audit matrix: glossy donor KPI claims versus documented refusal to execute core statutory duties (`0` sanctioned channels or riot torpedoes blocked) |\n| **3. European Commission — `DG CONNECT` (DSA / NIS2 Units) & `DG NEAR` (Enlargement Chapters 23 & 24)** | **Regulation (EU) `2022/2065` (`DSA`)**, **Directive (EU) `2022/2555` (`NIS2`, Arts. 21 & 23)**, and EU accession rule-of-law & digital-acquis screening | Machine-readable table of active sanctioned channels (`UC...`, `UID`, `EDRPOU`) + **the agency's raw RFC-5322 refusal email bearing `DKIM-Signature` (`dkim=pass`) as Exhibit A** |\n| **4. Cyber-Resilience & Technical Assistance Donors: `ESTDEV / TMPO` (`Tallinn Mechanism`), `e-Governance Academy (eGA)`, `EUAM Ukraine`, `CoE C-PROC`, `US INL`** | Donor grant agreements (`EU4DigitalUA`, `DT4UA`, `CyberEast+`, `INL` covenants) governing the operational use of donated hardware, software, and training | Proof that the beneficiary institution invokes a `1996` paper-petition law to reject verified cyber-threat and sanctions-evasion indicators (`IOCs`) during martial law |\n\nWhen a European auditor in Brussels, Tallinn, or Luxembourg sees an agency's glossy quarterly slide deck boasting of *\"100% NIS2 cyber-resilience absorption\"* on one monitor, and on the adjacent monitor inspects a cryptographically verified `DKIM-Signature` refusal from that very same agency declining to process `15` active sanctioned propaganda channels — accompanied by `Prozorro` intermediary ledgers and `NAZK` cash declarations — the magic of the 1984 District Committee evaporates instantaneously. Because you cannot tell an `OLAF` investigator or a `DG CONNECT` directorate to go look for their postal code.\n\n---\n\n### 5. The End of the Short-Memory Era: Why a `DKIM` Brush-Off Lives Forever in Cross-Registry and AI Compliance Indexes\n\nThere is one final structural shift that officials running on `1984` mental firmware have failed to grasp. Throughout their entire careers, they relied on the **48-Hour Amnesia Rule**.\n\nIn the legacy social-media era, even if an outraged citizen or investigative journalist posted a screenshot of a shameful bureaucratic brush-off on Facebook, the half-life of that post was **`48 hours`**. Within two days, the feed algorithm buried the post beneath cat videos and breaking news; flat JPEG screenshots of paper letters were invisible to search-engine crawlers; and six months later, no international compliance officer, embassy vetting unit, or Western bank could connect the dots. The official simply waited out the weekend and resumed awarding tenders to their favorite Newly Minted LLC on Monday morning.\n\nIn `2026`, that sanctuary is dead. We operate in the era of **Cross-Registry Data Fusion and Permanent Machine-Readable Indexing**:\n1. Every time an institution responds to verified national security evidence with a bureaucratic brush-off, a permanent, bilingual (`UA + EN`) forensic dossier is compiled.\n2. Under a single canonical URL and cryptographic hash, that dossier permanently fuses:\n   - the exact passport-standard Latin transliteration of the responsible officials' names (`Oleksandr Potii`, `Rostyslav Zamlynskyi`, `Yurii Vykhodets`, etc.);\n   - direct links and `UUID` keys to their annual asset declarations in the `NAZK` registry (`public.nazk.gov.ua`), itemizing every declared stack of US dollars and euros in cash, luxury vehicle, apartment, and foreign bank account in Sweden or Austria;\n   - the complete ledger of the agency's `Prozorro` IT procurements (`prozorro.gov.ua`), cross-linked with the `EDRPOU` codes, charter capital, incorporation dates, and beneficial owners of intermediary LLCs from the live Ukrainian corporate registry (`UO.xml`) alongside active `NABU / SAPO` indictments;\n   - the exact Western donor programmes (`Ukraine Facility`, `Tallinn Mechanism`, `EU4DigitalUA`, `EUAM`, `US INL`) financing the agency's facade;\n   - and the immutable cryptographic fingerprint (`Message-ID`, `DKIM-Signature`, `SHA-256`) of their official refusal to act.\n3. Published simultaneously in bilingual HTML, structured JSON feeds (`/agency_challenges.json`, `/feeds/agency-blindness.json`), and the full-text machine-ingestion corpus `/llms-full.txt`, this record is permanently ingested by global search engines, LLM retrieval-augmented generation (`RAG`) pipelines, and international KYC/AML compliance databases (`World-Check`, `LexisNexis`, `Dow Jones Risk & Compliance`).\n\nSo the next time a comfy department chief decides to hide behind the Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `1996` and demands a postal index from a taxpayer while enemy channels and riot torpedoes operate in broad daylight — they should smile for the cryptographic record.\n\nBecause that `DKIM`-signed brush-off will not be filed in a municipal housing office. It will be read in English by auditors in Brussels, Tallinn, and Luxembourg — and it will remain permanently indexed next to their name in global compliance databases long after they attempt to retire to Europe on their declared stacks of cash.",
    "body_en_md": "![Anatomy of the 1996 Chancellery Shield versus Direct Escalation to Western Donors and EU Auditors](/evidence/m23_soviet_postal_shield_vs_western_donor_audit_2026_11_07.png)\n\n### 1. Anatomy of the Chancellery Shield: How a 1996 Fax-Era Statute (Law No. 393/96-VR) Became Body Armor Against Ex Officio Duties\n\nPicture a scene from November `2026`. Ukraine is in the fifth year of high-intensity kinetic and algorithmic warfare. Russian military intelligence (`GRU Unit 54777` and the `85th GTSSS`) deploys automated bot swarms, rotates `MTProto 2.0` peer masks, operates mirror networks for sanctioned Kremlin propagandists on YouTube, and seeds kinetic provocations across metropolitan Telegram chats in minutes before amplifying them on `TASS` and `RIA Novosti`.\n\nYou do the state agency's forensic intelligence work for them — free of charge. You extract immutable, machine-readable primary identifiers from binary traffic and official registries:\n- `15` immutable YouTube `channelId` strings (`UC...`) belonging to individuals under active personal sanctions imposed by Ukraine's National Security and Defense Council (Presidential Decrees No. `153/2022`, No. `23/2023`, No. `230/2025`, No. `267/2025`, No. `345/2025`, and No. `417/2025`, enacted under Article 5 of the Law of Ukraine \"On Sanctions\" No. `1644-VII` of `14.08.2014`), all broadcasting into Ukraine without a VPN (`availableCountryCodes: [\"UA\"]`) alongside `18` Russian-locale botfarm accounts (`ru-RU`, Cyrillic suffixes);\n- `14` active Telegram riot-seeding accounts (\"torpedoes\") with immutable 64-bit `MTProto UID` integers (including `user_id=8895205236`, openly inciting the murder of police officers and the torching of patrol cars in Kyiv discussion threads days after the `02.11.2026` assault on a military facility in Petropavlivska Borshchahivka).\n\nYou deliver this structured, machine-readable table to the designated technical authority: the Administration of the State Service of Special Communications and Information Protection of Ukraine (`SSSCIP`, EDRPOU `34620942`) and its National Center for Operational-Technical Management of Telecommunications Networks (`NCU`), which under **Article 32 of the Law of Ukraine \"On Electronic Communications\" No. `1089-IX` of `16.12.2020`** holds sweeping martial-law authority to issue mandatory blocking orders and coordinate platform takedowns.\n\nWhat happens next? Does an incident-response siren go off in the situation room? Does a technical takedown notice go out to Google and domestic ISP backbones?\n\nNot quite. Instead, out steps Her Majesty the **Records Management Service (`Sluzhba Dilovodstva`)**. Adjusting its virtual sleeve protectors at `08:25:26 +0200` on `06.11.2026`, the chancellery dispatches an immortal monument to bureaucratic self-parody:\n\n> *\"Good day, this email address is the official service electronic mail of the Administration of the State Service of Special Communications and Information Protection of Ukraine for sending and receiving documents and letters attached to messages. If the issue falls within the competence of the Administration of the SSSCIP, it is necessary to apply officially with a letter setting out the essence of the issue. Sincerely, Records Management Service.\"* (`Message-ID: <4900a19bcb6a62849dd9a52170cb58a2@cip.gov.ua>`).\n\n![Authentic Cryptographically Verified Refusal Record from SSSCIP Records Management (06.11.2026, dkim=pass d=cip.gov.ua)](/evidence/ssscip_cip_gov_ua_reply_2026_11_06.png)\n\nTranslated from bureaucratic dialect into plain English, this reads: *\"We could not care less that 15 sanctioned enemy propaganda mirrors are broadcasting live into Ukraine in violation of active Presidential Decrees. Your email did not include a Microsoft Word `.docx` attachment with a header in the upper-right corner, your home street address, and your postal code as prescribed by the Law of Ukraine 'On Citizens' Appeals' No. 393/96-VR of 2 October 1996.\"*\n\nHere lies the foundational legal sleight of hand behind which every Soviet-vintage apparatus hides:\n1. **The Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `02.10.1996`** (Articles 5, 7, and 8) was drafted thirty years ago — in the age of thermal-paper fax machines, dial-up modems, and paper envelopes — to govern private administrative petitions by individuals (pension recalculations, municipal roof repairs, land-plot allocations).\n2. A forensic submission containing verified indicators of active enemy infrastructure, NSDC sanctions evasion, or coordinated FIMI sabotage is not a private request for a personal favor. It is a **national security threat notification** upon which a specialized cybersecurity agency (under the Law of Ukraine \"On the Basic Principles of Cybersecurity of Ukraine\" No. `2163-VIII` of `05.10.2017`, Article 32 of Law No. `1089-IX`, and Articles 21 and 23 of the EU **`NIS2 Directive` — `Directive (EU) 2022/2555`**) is legally bound to act **`ex officio`** — by virtue of its office — the moment verifiable Indicators of Compromise (`IOCs`) cross its threshold.\n3. Demanding a home postal code and an attached `.docx` cover letter from an engineer handing you `15` active sanctioned YouTube `channelId` strings is the institutional equivalent of a fire brigade refusing to extinguish a burning ammunition depot because the caller did not fax a notarized utility bill.\n\nYet the delicious irony lost on 1996-era clerks is purely cryptographic. When their agency mail server dispatches that haughty brush-off, it automatically stamps the outgoing RFC-5322 headers with an immutable **`DKIM-Signature` (`a=rsa-sha256; d=cip.gov.ua; s=dkim1; dkim=pass`)**. With a single click, the official apparatus **cryptographically notarizes its own refusal to act**, creating a non-repudiable forensic exhibit proving to international auditors the exact second the agency received verified threat indicators and chose to do nothing.\n\n---\n\n### 2. The Fiscal Paradox and the 1984 District Committee Reflex: `200 Milliseconds` to Extract Your Taxes vs. `30 Days` to Reject Your Evidence\n\nViewed through an engineering lens, the relationship between the citizen and the apparatus exhibits a breathtaking asymmetry in latency.\n\nWhenever the Ukrainian state wants something **from you** — specifically, your money — the year is never `1996`. The fiscal state operates in gleaming, frictionless `2026`:\n- Tap your payment card or phone at a fuel station or grocery checkout, and within **`200 milliseconds`** the State Tax Service's electronic fiscal server (`PRRO`) slices `20%` VAT and excise duty straight into the Treasury.\n- Receive your monthly compensation, and the banking rail automatically withholds `18%` personal income tax and `5%` wartime military levy in sub-second real time.\n\nNotice what **never** happens during those `200 milliseconds`: the Treasury server never rejects your tax payment with an automated bounce stating, *\"Dear taxpayer, we cannot process your 5% wartime military levy because you failed to attach a signed `.docx` petition stating your residential postal index under Law No. 393/96-VR.\"* When extracting revenue, the state requires zero paper formalities.\n\nNow open the Unified State Register of Asset Declarations maintained by the National Agency on Corruption Prevention (`public.nazk.gov.ua`) and observe where those sub-second tax streams flow:\n- To fund the annual compensation of SSSCIP Head Major General **Oleksandr Potii** (`EDRPOU 34620942`) — **`1,612,719 UAH`** in salary for `2025` (plus `203,582 UAH` in pension and `263,349 UAH` in bank interest; NAZK declaration `UUID d87656b3-c1da-49d2-b2ff-7d6097d2ebca` filed `25.03.2026`);\n- To fund the salary of SSSCIP First Deputy Head **Rostyslav Zamlynskyi** — **`1,317,985 UAH`** in `2025` (NAZK declaration `UUID fdb750d5-05b4-439e-a9d7-1f3cf3f3b960` filed `24.03.2026`);\n- To fund the salary of Cyberpolice Department Chief (`EDRPOU 40116400`) Police General 3rd Rank **Yurii Vykhodets** — **`1,439,468 UAH`** in `2025` (NAZK declaration `UUID 1126402f-4e3f-4b78-9d23-8dc4084dc3d1` filed `30.03.2026`).\n\nIn any rational contractual architecture, the conclusion is elementary: **the Ukrainian taxpayer is the direct employer and paymaster** who hires these officials, pays for their heated offices, and funds their salaries for the sole purpose of executing national information and cyber defense.\n\nYet the instant the employer hands the hired official a concrete operational task, a relay clicks inside the institutional cranium — and out pops the firmware of a **`1984` Soviet District Executive Committee (`Raivykonkom`)** operating on the timeless maxim *\"I am the boss, you are the fool.\"* When you pay taxes, you are a digital European citizen; when you demand that your employee block sanctioned Russian propaganda channels, you are treated like a pesky petitioner in a Soviet housing office who forgot to bow to the clerk.\n\n---\n\n### 3. The Citizen's Blind Spot: Who Actually Pays for the Glossy Facade (`Ukraine Facility`, `Tallinn Mechanism`, `EUAM`, `C-PROC`, `DG CONNECT`, `US INL`)\n\nWhy does a domestic bureaucrat feel so comfortable brushing off Ukrainian citizens? Because inside the domestic loop, they believe themselves untouchable: if you complain about their chancellery brush-off to a neighboring domestic agency, that agency will spend `30` days crafting an identical brush-off under the exact same `1996` law.\n\nAnd right here lies **the biggest blind spot of 99% of citizens, journalists, and civic watchdogs**. Most observers look at the facade of a cybersecurity agency, law-enforcement department, or ministry and assume it is a purely domestic ecosystem. They have no idea **who actually pays for the glossy hardware, software, and international prestige behind the curtain**.\n\nLift the hood of almost any Ukrainian digital, cybersecurity, or law-enforcement institution in `2026`, and you discover that its servers, forensic licenses, situational centers, training budgets, and international legitimacy are heavily bankrolled by **Western institutional donors and the taxpayers of the European Union, the United States, the United Kingdom, and NATO allies**:\n1. **The Ukraine Facility (`Regulation (EU) 2024/792` of `29.02.2024`):** the European Union's **`EUR 50 billion`** (`2024–2027`) macro-financial lifeline, where disbursements are legally conditioned on rule-of-law, anti-corruption, public administration, and sanctions-enforcement benchmarks monitored by the European Commission's **DG NEAR** (Enlargement Chapters `23` and `24`).\n2. **The Tallinn Mechanism:** a dedicated 11-nation Western donor coalition (Estonia, the UK, the US, Germany, France, the Netherlands, Canada, Poland, Sweden, Denmark, and Italy) operating through the **Tallinn Mechanism Project Office (`TMPO`)** in Kyiv and the Estonian Centre for International Development (**`ESTDEV`**) specifically to fund civilian cyber resilience across Ukrainian state institutions (with SSSCIP as a primary beneficiary).\n3. **EU4DigitalUA and DT4UA:** flagship European Union digital-transformation and cybersecurity programmes implemented by Estonia's **e-Governance Academy (`eGA`, Tallinn)** alongside the European Commission's **DG CONNECT** (Brussels — overseeing alignment with the `Digital Services Act`, `Regulation (EU) 2022/2065`, and the `NIS2 Directive`, `Directive (EU) 2022/2555`).\n4. **EUAM Ukraine, the Council of Europe (`C-PROC / CyberEast+`), the OSCE (`OSCE SPU`), `CRDF Global`, and the US Department of State (`INL / ICITAP`):** international technical assistance (`MTD`) programmes that continuously supply the NPU Cyberpolice Department and sister agencies with digital forensics workstations, `Cellebrite` suites, OSINT/crypto-tracing training, and institutional capacity grants.\n\nIn front of these Western donors, the 1984 Soviet clerk vanishes without a trace. At quarterly donor coordination meetings in Brussels, Tallinn, Strasbourg, and Washington, nobody invokes Law No. `393/96-VR` or demands a European Commissioner's postal code. Instead, agency delegations flash radiant smiles and click through sleek English-language PowerPoint decks proclaiming *\"Proactive Cyber Threat Hunting,\"* *\"Seamless NIS2 Alignment,\"* and *\"Hundreds of Thousands of Neutralized Enemy Resources.\"*\n\n---\n\n### 4. The Practical Nerve-Saving Algorithm: Why You Should Skip the Mailroom and Write Directly to `OLAF`, `EPPO`, `ECA`, and Western Donors — With the `DKIM` Refusal Attached as Exhibit A\n\nFrom this structural reality flows a simple engineering rule that saves years of wasted effort:\n- If you want a municipal utility crew to paint a courtyard bench or patch a pothole, file a domestic \"Citizens' Appeal\" under Law No. `393/96-VR`.\n- But when an agency systematically sabotages its core national security mandate while absorbing billions in public procurement and Western donor grants — **never argue with its mailroom clerk twice**.\n\nJust look at the primary registry ledger for the exact two institutions documented on the `/en/blindness` tracker:\n1. **The SSSCIP Case (`EDRPOU 34620942`):** while SSSCIP's Records Management Service refuses to pass `15` active NSDC-sanctioned YouTube channel IDs to the `NCU` because the email lacked an \"attached letter,\" the agency's procurement contour has been a textbook study in anti-corruption forensics. On `20.10.2026`, Ukraine's National Anti-Corruption Bureau (`NABU`) and Specialized Anti-Corruption Prosecutor's Office (`SAPO`) announced the completion of a pre-trial investigation (Part 5 Art. 191 of the Criminal Code) into the embezzlement of **`254 million UAH`** in SSSCIP drone procurements (`DJI Mavic 3`, `Matrice M30T`, `Autel Evo Max 4T`) at **`60–90%` price markups** — where price quotes were solicited from the winning company **before that legal entity had even been registered in the state registry**, with `>USD 4 million` frozen abroad — following `28.08.2026` NABU/SAPO software procurement cases (`28.4M UAH` and `63M UAH`) and the High Anti-Corruption Court (`HACC`) trial of former SSSCIP leadership (`62M UAH` software embezzlement). Meanwhile, `2025` NAZK declarations of current leadership record **`USD 170,000` and `EUR 82,500` in family cash** plus a Swedish `Swedbank AB` account (SSSCIP Head O. Potii) alongside tens of thousands in foreign cash declared by deputies.\n2. **The NPU Cyberpolice (`EDRPOU 40116400`) & Central Servicing Unit (`EDRPOU 40108981`) Case:** alongside steady Western technical assistance from `EUAM Ukraine`, `C-PROC`, `OSCE SPU`, `CRDF Global`, and `US INL`, the National Police procurement unit contracted **over `1.02 billion UAH`** in IT tenders across `2025–2026` via `Prozorro` — including **`33.91 million UAH`** for the `ThreatQ TDR` threat-orchestration platform (`UA-2025-11-17-013428-a`) and **`48.98 million UAH`** for the `HYAS Insight / Protect` attribution suite (`UA-2025-05-28-012192-a`) — routed through a tight cluster of newly minted or low-capital LLC intermediaries (`OPTIDATA LLC` `EDRPOU 39693067` with `1,000 UAH` charter capital; `DINTEKH LLC` `EDRPOU 45431544`, incorporated `18.03.2024`; `NOTREIS LLC` `EDRPOU 45435397`, incorporated `08.08.2024`). Operational output on Day 5 after the Petropavlivska Borshchahivka assault (`07.11.2026`): **`14 out of 14` (100%) Telegram riot torpedoes remain active**, and anonymous accounts openly incite the murder of police officers in Kyiv chats (`UID 8895205236`).\n\nWhen confronted with this institutional architecture, debating a chancellery clerk over the finer points of a `1996` statute is playing three-card monte by the dealer's rules. Instead, execute the **Direct Western Donor & Auditor Escalation Protocol**:\n\n![Documented Transmission of Primary Evidence and SSSCIP's DKIM-Signed Refusal to EU and Tallinn Mechanism Donors (06.11.2026)](/evidence/ssscip_brussels_tallinn_escalation_2026_11_06.png)\n\n| Western Donor / Oversight Body (Direct Escalation) | Statutory Mandate & Financial Leverage (`2026`) | Forensic Evidentiary Package (Submitted in Institutional English) |\n|---|---|---|\n| **1. European Anti-Fraud Office (`OLAF`, Brussels) & European Public Prosecutor's Office (`EPPO`, Luxembourg)** | **Article 35 of Regulation (EU) `2024/792`** (`Ukraine Facility`): explicit mandate to investigate fraud, corruption, conflicts of interest, and systemic irregularities affecting EU financial interests in Ukraine | Exact `Prozorro` tender IDs (`UA-2025-...`, `UA-2026-...`), `EDRPOU` codes and incorporation dates of intermediary LLCs, official NABU/SAPO case records + documented non-performance of funded systems |\n| **2. Audit Board of the Ukraine Facility (Art. 36 of Regulation EU `2024/792`) & European Court of Auditors (`ECA`, Luxembourg)** | **Article 36 of Regulation (EU) `2024/792`**: independent performance and management-control audits verifying Ukraine Plan implementation prior to tranche disbursements | Side-by-side audit matrix: glossy donor KPI claims versus documented refusal to execute core statutory duties (`0` sanctioned channels or riot torpedoes blocked) |\n| **3. European Commission — `DG CONNECT` (DSA / NIS2 Units) & `DG NEAR` (Enlargement Chapters 23 & 24)** | **Regulation (EU) `2022/2065` (`DSA`)**, **Directive (EU) `2022/2555` (`NIS2`, Arts. 21 & 23)**, and EU accession rule-of-law & digital-acquis screening | Machine-readable table of active sanctioned channels (`UC...`, `UID`, `EDRPOU`) + **the agency's raw RFC-5322 refusal email bearing `DKIM-Signature` (`dkim=pass`) as Exhibit A** |\n| **4. Cyber-Resilience & Technical Assistance Donors: `ESTDEV / TMPO` (`Tallinn Mechanism`), `e-Governance Academy (eGA)`, `EUAM Ukraine`, `CoE C-PROC`, `US INL`** | Donor grant agreements (`EU4DigitalUA`, `DT4UA`, `CyberEast+`, `INL` covenants) governing the operational use of donated hardware, software, and training | Proof that the beneficiary institution invokes a `1996` paper-petition law to reject verified cyber-threat and sanctions-evasion indicators (`IOCs`) during martial law |\n\nWhen a European auditor in Brussels, Tallinn, or Luxembourg sees an agency's glossy quarterly slide deck boasting of *\"100% NIS2 cyber-resilience absorption\"* on one monitor, and on the adjacent monitor inspects a cryptographically verified `DKIM-Signature` refusal from that very same agency declining to process `15` active sanctioned propaganda channels — accompanied by `Prozorro` intermediary ledgers and `NAZK` cash declarations — the magic of the 1984 District Committee evaporates instantaneously. Because you cannot tell an `OLAF` investigator or a `DG CONNECT` directorate to go look for their postal code.\n\n---\n\n### 5. The End of the Short-Memory Era: Why a `DKIM` Brush-Off Lives Forever in Cross-Registry and AI Compliance Indexes\n\nThere is one final structural shift that officials running on `1984` mental firmware have failed to grasp. Throughout their entire careers, they relied on the **48-Hour Amnesia Rule**.\n\nIn the legacy social-media era, even if an outraged citizen or investigative journalist posted a screenshot of a shameful bureaucratic brush-off on Facebook, the half-life of that post was **`48 hours`**. Within two days, the feed algorithm buried the post beneath cat videos and breaking news; flat JPEG screenshots of paper letters were invisible to search-engine crawlers; and six months later, no international compliance officer, embassy vetting unit, or Western bank could connect the dots. The official simply waited out the weekend and resumed awarding tenders to their favorite Newly Minted LLC on Monday morning.\n\nIn `2026`, that sanctuary is dead. We operate in the era of **Cross-Registry Data Fusion and Permanent Machine-Readable Indexing**:\n1. Every time an institution responds to verified national security evidence with a bureaucratic brush-off, a permanent, bilingual (`UA + EN`) forensic dossier is compiled.\n2. Under a single canonical URL and cryptographic hash, that dossier permanently fuses:\n   - the exact passport-standard Latin transliteration of the responsible officials' names (`Oleksandr Potii`, `Rostyslav Zamlynskyi`, `Yurii Vykhodets`, etc.);\n   - direct links and `UUID` keys to their annual asset declarations in the `NAZK` registry (`public.nazk.gov.ua`), itemizing every declared stack of US dollars and euros in cash, luxury vehicle, apartment, and foreign bank account in Sweden or Austria;\n   - the complete ledger of the agency's `Prozorro` IT procurements (`prozorro.gov.ua`), cross-linked with the `EDRPOU` codes, charter capital, incorporation dates, and beneficial owners of intermediary LLCs from the live Ukrainian corporate registry (`UO.xml`) alongside active `NABU / SAPO` indictments;\n   - the exact Western donor programmes (`Ukraine Facility`, `Tallinn Mechanism`, `EU4DigitalUA`, `EUAM`, `US INL`) financing the agency's facade;\n   - and the immutable cryptographic fingerprint (`Message-ID`, `DKIM-Signature`, `SHA-256`) of their official refusal to act.\n3. Published simultaneously in bilingual HTML, structured JSON feeds (`/agency_challenges.json`, `/feeds/agency-blindness.json`), and the full-text machine-ingestion corpus `/llms-full.txt`, this record is permanently ingested by global search engines, LLM retrieval-augmented generation (`RAG`) pipelines, and international KYC/AML compliance databases (`World-Check`, `LexisNexis`, `Dow Jones Risk & Compliance`).\n\nSo the next time a comfy department chief decides to hide behind the Law of Ukraine \"On Citizens' Appeals\" No. `393/96-VR` of `1996` and demands a postal index from a taxpayer while enemy channels and riot torpedoes operate in broad daylight — they should smile for the cryptographic record.\n\nBecause that `DKIM`-signed brush-off will not be filed in a municipal housing office. It will be read in English by auditors in Brussels, Tallinn, and Luxembourg — and it will remain permanently indexed next to their name in global compliance databases long after they attempt to retire to Europe on their declared stacks of cash."
  },
  {
    "id": "M-22",
    "slug": "method-22-borshchahivka-14-torpedoes-sorm-blindness-mtproto-uid-filter-2026",
    "aliases": [
      "M-18-torpedoes",
      "method-18-borshchahivka-14-torpedoes-sorm-blindness-mtproto-uid-filter-2026",
      "borshchahivka-14-torpedoes-sorm-blindness-mtproto-uid-filter"
    ],
    "date": "2026-11-07",
    "category": "BOT DETECTION",
    "badge": "METHOD #22 · 14/14 BORSHCHAHIVKA TORPEDOES ALIVE ON DAY 5: SORM BLINDNESS VS MTPROTO UID AUTO-BLOCK",
    "title": "14 of 14 Borshchahivka Torpedoes Alive After 5 Days: Why Billion-Hryvnia Telecom SORM Boxes Are Blind in Telegram and How to Block Nomadic Provocateurs by MTProto UID for Free",
    "subtitle": "Engineering audit as of November 7, 2026 (Day 5 after the November 2, 2026 kinetic-information provocation at the temporary staging point of 1st NGU Corps 'Azov' Unit 3121 in Petropavlivska Borshchahivka and the November 4, 2026 road blockades in Kyiv): 100% (14 of 14) of named Telegram seeding and cross-district riot torpedoes remain active and unblocked, while 8 unnamed fresh zero-accounts (UID series 78.../79.../88.../89...) freely post direct incitement to burn police vehicles and assault law enforcement officers in Kyiv mega-channel comment threads. We publish a technical breakdown of telecom SORM/DPI blindness against MTProto 2.0 encryption alongside the open machine-readable stop-feed /feeds/telegram-nomadic-torpedoes.json for zero-cost 0.1 ms automated blocking.",
    "read_time": "14 min read",
    "read_time_min": 14,
    "pinned": false,
    "tags": [
      "MTProto UID Stop-Feed",
      "14/14 Borshchahivka Torpedoes",
      "SORM / DPI Blindness",
      "SendAsPeer PeerChannel",
      "UID 8895205236 & 8940324745",
      "@OlyaTheBT & @snizhana_sob",
      "@Denov1977b Cross-District Nomad",
      "/feeds/telegram-nomadic-torpedoes.json"
    ],
    "summary": "Engineering audit as of 2026-11-07: why 14 of 14 Borshchahivka Telegram torpedoes remain alive on Day 5, why ISP SORM/DPI boxes are blind to MTProto 2.0 and foreign VoIP farms, and how to block provocateurs in 0.1 ms via the open feed /feeds/telegram-nomadic-torpedoes.json",
    "lead": "Engineering audit as of November 7, 2026 (Day 5 after the November 2, 2026 kinetic-information provocation at the temporary staging point of 1st NGU Corps 'Azov' Unit 3121 in Petropavlivska Borshchahivka and the November 4, 2026 road blockades in Kyiv): 100% (14 of 14) of named Telegram seeding and cross-district riot torpedoes remain active and unblocked, while 8 unnamed fresh zero-accounts (UID series 78.../79.../88.../89...) freely post direct incitement to burn police vehicles and assault law enforcement officers in Kyiv mega-channel comment threads. We publish a technical breakdown of telecom SORM/DPI blindness against MTProto 2.0 encryption alongside the open machine-readable stop-feed /feeds/telegram-nomadic-torpedoes.json for zero-cost 0.1 ms automated blocking.",
    "content_md": "### 1. Empirical Finding as of 2026-11-07: 14 of 14 Named Telegram Torpedoes (100%) Remain ALIVE on Day 5 Post-Incident\n\nLive verification of `https://t.me/<username>` web profiles and public Telegram discussion graphs as of **November 7, 2026 (`07:39 UTC`)** — exactly **5 days** after the siege and night assault on the temporary staging point (PPD) of National Guard Unit `3121` (`1st NGU Corps 'Azov'`) at 7 Soniachna St., Petropavlivska Borshchahivka (`2026-11-02`, where 16 National Guardsmen suffered injuries and chemical burns, and lead operative Valentyna Moloda was remanded into custody for 60 days without bail by the Solomianskyi District Court of Kyiv on `2026-11-04` under Articles 114-1 and 114-2 of the Criminal Code of Ukraine; see [`/en/issue/borshchahivka-provocation-2026-11-02`](/en/issue/borshchahivka-provocation-2026-11-02) and [`/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor`](/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor)) — establishes a stark engineering fact:\n\n- **Out of 14 verified named Telegram torpedoes** (comprising Echelon-1 single-use paratroopers, a 1-subscriber `SendAsPeer` channel mask, and cross-district nomads deployed during the `2026-11-04` Kyiv blackout roadblocks), **all 14 of 14 (`100% ALIVE`) remain active and unblocked**.\n- **Zero initial seeding messages in open district chats** (`t.me/petropavlivskabor/33717..33720`, `t.me/SofievskayaPetropavBorshchagovka/1644075`, `t.me/koperchat2026/1749076`, `t.me/petropavlivskabor/33746`, `t.me/petropavlivskabor/33845`) **have been removed** by platform or community moderators as of Day 5.\n- Furthermore, in the discussion threads of Kyiv mega-channel `@truexakyiv` (`https://t.me/truexakyiv/96829` and `https://t.me/truexakyiv/96835` during the `2026-11-04` road blockades on Akademmistechko/Palladina Ave and Obolon), our MTProto audit documented **8 unnamed provocateurs (`username = NULL`)** identifiable solely by their immutable 64-bit numeric `MTProto user_id` — including fresh series account `uid=8895205236` posting direct Russian-language incitement to burn police vehicles and kill law enforcement officers.\n\n![Live Verification Matrix of 14/14 Named Telegram Torpedoes and 8 Unnamed MTProto Zero-Accounts as of 2026-11-07](/evidence/m22_borshchahivka_14_torpedoes_alive_grid_2026_11_07.png)\n\n#### Complete Verification Table of 22 MTProto Torpedoes (14 Named + 8 Null-Username Accounts) as of `2026-11-07`\n\n| # | Immutable MTProto ID (`PeerUser` / `PeerChannel`) | Public `@username` (as of `2026-11-07`) | Live `t.me` Display Name / Bio (`2026-11-07`) | Threat Classification & Documented MTProto Forensic Episode (`02–04.11.2026`) | Day-5 Status (`2026-11-07`) |\n|---|---|---|---|---|---|\n| **1** | **`472827990`** (`PeerUser`) | **`@OlyaTheBT`** | `Olha Parkhomets` | **Echelon-1 Primary Ignition Seeder (`2026-11-02, 10:20:15 UTC`):** 4h 18m before sanctioned `Strana.ua`'s first post, drops 3 media files and initial text in `@petropavlivskabor/33717..33720` alleging 'torture of captives and blocked paramedics at 7 Soniachna St.' (`0` prior messages in chat history) | **`ALIVE` (100% active)** |\n| **2** | **`6695051993`** (`PeerUser`) | **`@snizhana_sob`** | `Snizhana` (*`HR manager at the recruitment agency`*) | **Echelon-1 Cross-District Paratrooper (Fresh `669...` series):** on `2026-11-02` between `13:48:51` and `14:04:30 UTC`, blasts **12 storm calls in 15 minutes** in `@SofievskayaPetropavBorshchagovka/1644075..1644187` and cross-posts to `@petropavlivskabor/33745` (`13:50:10 UTC`) before vanishing | **`ALIVE` (100% active)** |\n| **3** | **`3913826799`** (`PeerChannel` / Bot API `-1003913826799`) | **`@kyivskiydvish`** | Channel `'l'` (`1 subscriber`, created `2026-05-31`) | **Anonymous `Telegram Premium` `SendAsPeer` (`PeerChannel`) Mask:** on `2026-11-02` at `16:56:19 UTC` in `@koperchat2026/1749076`, uses a 1-subscriber shell channel to inject the narrative that Ukrainian military recruitment (TCC) officers are 'Russians who torture and kill' | **`ALIVE` (100% active)** |\n| **4** | **`309834386`** (`PeerUser`) | **`@k_restonosets`** | `Kristina` (*`disappointed but not surprised`*) | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated panic seeding inside `@petropavlivskabor` during the blockade of NGU Unit `3121` | **`ALIVE` (100% active)** |\n| **5** | **`387320983`** (`PeerUser`) | **`@ya_bavovna`** | `olya` | **Borshchchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **6** | **`6738879038`** (`PeerUser`) | **`@lana3070`** | `Lana` | **Fresh `673...` Series Borshchahivka Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **7** | **`587218075`** (`PeerUser`) | **`@morozov_pavlo`** | `Pavel Morozov` | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **8** | **`538103615`** (`PeerUser`) | **`@zeend77`** | `[Icon Handle]` (`@zeend77`) | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **9** | **`5225374042`** (`PeerUser`) | **`@Denov1977b`** | `D. Zh. O.` | **Cross-District Nomad (`Borshchahivka -> Palladina Ave -> Obolon`):** on `2026-11-04` at `18:26:19 UTC` in `@truexakyiv/96829`, artificially links a local power-outage roadblock on Palladina Ave to V. Moloda's fake 'combat surgeon' narrative and Russian anti-Maidan stamps, then migrates at `19:15:00 UTC` to the Obolon outage thread (`@truexakyiv/96835`) | **`ALIVE` (100% active)** |\n| **10** | **`616631997`** (`PeerUser`) | **`@AviCrossman`** | `Yuriy Bastrykin` | **Kyiv Protests Thread Provocateur (`2026-11-04, 18:18:55 UTC`):** injects Sofiivska Borshchahivka outage escalation in `@truexakyiv/96829?comment=4067733` | **`ALIVE` (100% active)** |\n| **11** | **`263464813`** (`PeerUser`) | **`@Sten76`** | `Sten Stens` | **Kyiv Protests Thread Provocateur (`2026-11-04, 18:03:03 UTC`):** in `@truexakyiv/96829?comment=4067639`, links the Kyiv blackout protest to the arrest of fake 'paramedic' V. Moloda in Borshchahivka | **`ALIVE` (100% active)** |\n| **12** | **`8173254881`** (`PeerUser`) | **`@homaaaaq`** | `homa` | **Fresh `817...` Series Agitator (`2026-11-04, 18:00:36 UTC`):** injects TCC panic triggers near Sviatoshyn metro during the road blockade in `@truexakyiv/96829?comment=4067623` | **`ALIVE` (100% active)** |\n| **13** | **`514518300`** (`PeerUser`) | **`@Yarovoy1`** | `Fedia` | **Kyiv Protests Thread Provocateur (`2026-11-04, 17:54:25 UTC`):** calls to redirect roadblock crowds toward municipal government buildings in `@truexakyiv/96829?comment=4067557` | **`ALIVE` (100% active)** |\n| **14** | **`1643760407`** (`PeerUser`) | **`@deputatik3`** | `deputat` | **Pro-Kremlin Provocateur in Obolon Thread (`2026-11-04, 19:56:45 UTC`):** in `@truexakyiv/96835?comment=4068434`, explicitly denies Russian state responsibility for the war against Ukraine and pushes anti-Maidan stamps | **`ALIVE` (100% active)** |\n| **15** | **`8895205236`** (`PeerUser`) | **`NULL` (no `@username`)** | `No username (8895205236)` | **Critical Fresh `889...` Series Zero-Account (`2026-11-04, 19:06:07 UTC`):** in `@truexakyiv/96829`, posts a direct Russian-language call to murder police officers and burn their service vehicles | **`ACTIVE UID` (in stop-feed)** |\n| **16** | **`8940324745`** (`PeerUser`) | **`NULL` (no `@username`)** | `Kharkivskyi` | **Cross-District `894...` Zero-Account with `1m 59s` Z-Channel Sync:** on `2026-11-02` at `14:47:52 UTC` seeds the '40 tortured captives' claim in `@petropavlivskabor/33746`, and on `2026-11-04` at `18:51:00 UTC` in `@petropavlivskabor/33845` amplifies the Akademmistechko road blockade exactly **1 minute 59 seconds** after Russian Z-channel `@RVvoenkor/126470` | **`ACTIVE UID` (in stop-feed)** |\n| **17** | **`5832863517`** (`PeerUser`) | **`NULL` (no `@username`)** | `Volodymyr Borshchivskyi` | **Police-Assault Agitator (`2026-11-04, 17:53:37 UTC`):** in `@truexakyiv/96829?comment=4067541`, posts a direct call to physically assault National Police officers during the road blockade | **`ACTIVE UID` (in stop-feed)** |\n| **18** | **`7831259310`** (`PeerUser`) | **`NULL` (no `@username`)** | `Umberto` | **Fresh `783...` Series Zero-Account (`2026-11-04, 18:36:41 UTC`):** Maidan escalation rhetoric in `@truexakyiv/96829?comment=4067849` | **`ACTIVE UID` (in stop-feed)** |\n| **19** | **`7911407278`** (`PeerUser`) | **`NULL` (no `@username`)** | `Yuliya` | **Fresh `791...` Series Zero-Account (`2026-11-04, 19:54:07 UTC`):** anti-Maidan stamp in Obolon thread `@truexakyiv/96835?comment=4068421` | **`ACTIVE UID` (in stop-feed)** |\n| **20** | **`5125543281`** (`PeerUser`) | **`NULL` (no `@username`)** | `Artuzon` | **Regime-Overthrow Agitator (`2026-11-04, 19:14:46 UTC`):** in `@truexakyiv/96835?comment=4068154`, calls in Russian for the violent overthrow of Ukraine's wartime government | **`ACTIVE UID` (in stop-feed)** |\n| **21** | **`5747492517`** (`PeerUser`) | **`NULL` (no `@username`)** | `Archi` | **Obolon Thread Provocateur (`2026-11-04, 19:32:01 UTC`):** judiciary/police/TCC escalation tied to V. Moloda's arrest in `@truexakyiv/96835?comment=4068294` | **`ACTIVE UID` (in stop-feed)** |\n| **22** | **`1977347334`** (`PeerUser`) | **`NULL` (no `@username`)** | `sasha` | **Obolon Thread Agitator (`2026-11-04, 19:20:44 UTC`):** calls to shift street blockades into central Kyiv in `@truexakyiv/96835?comment=4068200` | **`ACTIVE UID` (in stop-feed)** |\n\n---\n\n### 2. Forensic Anatomy of the Infiltration: Echelon-1 Paratroopers, `SendAsPeer (PeerChannel)` Masks & Null-Username `889...` Series Zeroes\n\nCross-correlating live `t.me/?embed=1` captures with raw MTProto discussion dumps exposes the three technical evasion mechanisms that allow Russian kinetic-information operators to bypass conventional moderation in Ukrainian mega-channels and municipal chats:\n\n![Forensic Panel of Live t.me Embeds and MTProto Discussion Dumps (02–07.11.2026)](/evidence/m22_forensic_comments_molotov_cross_district_2026_11_07.png)\n\n1. **Null-Username Fresh Zeroes (`username = NULL`, `UID >= 6,500,000,000`) as Manual-Search Stealth Nodes:**\n   - When fresh account **`8895205236`** (`2026-11-04, 19:06:07 UTC` under `@truexakyiv/96829`) or **`8940324745`** (`Kharkivskyi`, `1m 59s` sync with `@RVvoenkor/126470`) posts incitement to burn police cars or block highways, its **`@username` field is intentionally left empty (`NULL`)**.\n   - To a human moderator or URL-based OSINT scraper, the account has no `t.me/<username>` link and its `display_name` can be changed every sixty seconds. Yet at the `MTProto` and `Telegram Bot API` protocol layer, every single packet carries the immutable 64-bit integer **`from_id: PeerUser(user_id=8895205236)`**.\n2. **Anonymous `SendAsPeer` Channel Masks (`PeerChannel` Replacing `PeerUser`):**\n   - In `@koperchat2026/1749076` (`2026-11-02, 16:56:19 UTC`), the operative hid their personal `PeerUser` account behind Telegram Premium's **`SendAsPeer`** feature, posting as a 1-subscriber shell channel **`@kyivskiydvish`** (`channel_id=3913826799`, Bot API `sender_chat.id = -1003913826799`) renamed to the single Cyrillic letter **`'l'`**.\n   - Clicking the author avatar opens an empty 1-subscriber channel rather than the operator's user profile.\n3. **Cross-District Nomadism Across Disconnected Municipal Threads:**\n   - Nomad **`@Denov1977b` (`uid=5225374042`)** and zero-account **`uid=8940324745`** hop sequentially between **Petropavlivska Borshchahivka** (Buchanskyi district, western suburb), **Palladina Ave** (Sviatoshynskyi district), and **Obolon** (Yordanska St.), artificially stitching local power-outage complaints into the Borshchahivka military staging point provocation.\n\n---\n\n### 3. Why Billion-Hryvnia ISP SORM / DPI Hardware Boxes Are Architecturally Blind in Telegram\n\nA recurring institutional fallacy is the belief that Telegram provocations can be countered by procuring expensive network-level lawful interception and Deep Packet Inspection (**SORM / DPI**) appliances deployed on Ukrainian telecom operators and Internet Service Providers (`ISPs`). From a network engineering standpoint, ISP-level DPI suffers from **three fundamental architectural blind spots**:\n\n![Architectural Comparison: Telecom SORM/DPI Blindness vs 0.1 ms Application-Layer MTProto UID Filtering](/evidence/m22_sorm_blindness_vs_mtproto_uid_architecture_2026_11_07.png)\n\n1. **Foreign VoIP / eSIM Registration Outside Ukrainian HLR/VLR Databases:**\n   - GRU 85th GTSSS units and contractor botfarms do not buy Ukrainian `+380` SIM cards at Kyiv street kiosks. Accounts in the `669...`, `673...`, `783...`, `791...`, `817...`, `889...`, and `894...` ranges are bulk-minted via foreign virtual telephony gateways (`VoIP / SIM-box` pools in Indonesia `+62`, the UK `+44`, Estonia `+372`, Russia `+7`, or anonymous `+888` Fragment blockchain numbers).\n   - Zero SMS verification codes or `SS7 / Diameter` signaling packets ever traverse Ukrainian mobile operator switches.\n2. **End-to-Server `MTProto 2.0` Cryptographic Opacity (`AES-256-IGE` + `TL-schema` + `Obfuscated2`):**\n   - Even when an operative or proxy exits via a Ukrainian ISP, the Telegram client encrypts all application payload using `MTProto 2.0` (`256-bit AES-IGE` keyed via `2048-bit Diffie-Hellman`, wrapped inside `TLS 1.3` obfuscation to Telegram `AS62041` / `AS62014` edge blocks `149.154.160.0/20` and `91.108.4.0/22`).\n   - An optical splitter or SORM/DPI probe on a Ukrainian ISP backbone sees **only an encrypted byte stream to a Telegram edge IP in Amsterdam (`DC2` / `DC4`)**. ISP hardware cannot inspect the destination `chat_id` (`@truexakyiv`), the sender's `user_id` (`8895205236`), or the message text.\n3. **Absence of a Public `UID -> MSISDN` Reverse Lookup:**\n   - Under `MTProto`, phone numbers default to server-side privacy (`PrivacyKeyPhoneNumber = Nobody`), rendering telecom billing lookups useless against a null-username account like `uid=8895205236`.\n\n---\n\n### 4. Where the Real Solution Lies: Zero-Cost Application-Layer `MTProto UID` Filtering in `0.1 ms` (`/feeds/telegram-nomadic-torpedoes.json`)\n\nThe engineering paradox is simple: the exact metadata that is **cryptographically invisible** to a billion-hryvnia SORM box on an ISP fiber link is delivered **in 100% decrypted cleartext JSON / TL-objects** directly to every community moderator bot, every mega-channel discussion group (`@truexakyiv`, `@kievreal1`, `@k_dvizh`, `@koperchat2026`, `@petropavlivskabor`), and every news intake bot (`@novosti_kieva_bot`, `@levii_bereg_kyivbot`) the millisecond a comment is posted.\n\nWhenever a provocateur posts in a discussion group or submits content to an intake bot, Telegram's servers hand the administrator bot the exact immutable identifiers:\n- **`message.from_user.id`** (`MTProto PeerUser.user_id` — an immutable 64-bit integer that survives display-name changes and `@username` deletion);\n- **`message.sender_chat.id`** (`MTProto PeerChannel.channel_id` — populated whenever an anonymous `SendAsPeer` channel mask is used);\n- **`message.from_user.username`** (`None` when `@username` is stripped).\n\nTo close this vulnerability across Ukrainian municipal channels, **OPERBAZA** has published the open machine-readable stop-feed **[`/feeds/telegram-nomadic-torpedoes.json`](/feeds/telegram-nomadic-torpedoes.json)**, enabling any community moderator bot to neutralize nomadic torpedoes in **`0.1 ms`** using three deterministic rules:\n\n```python\n# Drop-in integration of the open OPERBAZA stop-feed (/feeds/telegram-nomadic-torpedoes.json)\n# for any Telegram discussion-group moderator bot or news intake bot (Python / aiogram / PTB):\n\nimport re, urllib.request, json\n\nFEED_URL = \"https://operbaza.org/feeds/telegram-nomadic-torpedoes.json\"\nfeed = json.loads(urllib.request.urlopen(FEED_URL, timeout=5).read().decode(\"utf-8\"))\n\nBLOCKED_USER_IDS = set(feed[\"instant_blocklists\"][\"mtproto_user_ids_int\"])\nBLOCKED_CHAT_IDS = set(feed[\"instant_blocklists\"][\"bot_api_sender_chat_ids_int\"])\nFRESH_UID_THRESHOLD = int(feed[\"instant_blocklists\"][\"fresh_zero_uid_quarantine_threshold\"])  # 6500000000\n\nVIOLENCE_OR_RIOT_RE = re.compile(\n    r\"(kill.*cops|burn.*cars|storm|blockade|overthrow)\",\n    re.IGNORECASE,\n)\n\ndef inspect_incoming_message(msg) -> str:\n    # Rule 1: Blanket ban on anonymous SendAsPeer channel masks (e.g. PeerChannel 3913826799 'l')\n    if getattr(msg, \"sender_chat\", None) is not None:\n        if msg.sender_chat.id != getattr(msg, \"linked_chat_id\", None):\n            return \"DROP_AND_BAN_SEND_AS_CHANNEL_MASK\"\n\n    user = getattr(msg, \"from_user\", None)\n    if not user:\n        return \"ALLOW\"\n\n    # Rule 2: Instant O(1) ban by immutable 64-bit MTProto user_id from OPERBAZA stop-feed\n    if user.id in BLOCKED_USER_IDS:\n        return \"DROP_AND_BAN_KNOWN_TORPEDO_UID\"\n\n    # Rule 3: Quarantine fresh null-username accounts (UID >= 6,500,000,000) on riot/violence triggers\n    text = (getattr(msg, \"text\", None) or getattr(msg, \"caption\", None) or \"\")\n    if user.id >= FRESH_UID_THRESHOLD and not getattr(user, \"username\", None):\n        if VIOLENCE_OR_RIOT_RE.search(text):\n            return \"QUARANTINE_FRESH_UNNAMED_ZERO_ON_VIOLENCE_TRIGGER\"\n\n    return \"ALLOW\"\n```\n\n---\n\n### 5. Direct Links to Verified Datasets & Cross-Linked OPERBAZA Registries\n\n- **Open Anti-Torpedo MTProto JSON Stop-Feed (CC-BY-4.0):** [`/feeds/telegram-nomadic-torpedoes.json`](/feeds/telegram-nomadic-torpedoes.json)\n- **Full Forensic Investigation of the Petropavlivska Borshchahivka Operation (`02–05.11.2026`):** [`/en/issue/borshchahivka-provocation-2026-11-02`](/en/issue/borshchahivka-provocation-2026-11-02)\n- **Methodological Breakdown of the 'Borshchahivka -> Matryoshka -> Bundestag (`AfD`)' Pipeline (`M-11`):** [`/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor`](/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor)\n- **Verified Russian Botfarm Registry (`1,839` nodes + EU DSA / DISARM Matrix):** [`/en/bots`](/en/bots) (`M-21`: [`/en/methods/method-21-eu-dsa-fimi-cib-forensic-report-meta-google-dg-connect-2026`](/en/methods/method-21-eu-dsa-fimi-cib-forensic-report-meta-google-dg-connect-2026))\n- **Institutional Blindness & Regulatory Compliance Registry:** [`/en/blindness`](/en/blindness) ([`/feeds/agency-blindness.json`](/feeds/agency-blindness.json))",
    "body_md": "### 1. Empirical Finding as of 2026-11-07: 14 of 14 Named Telegram Torpedoes (100%) Remain ALIVE on Day 5 Post-Incident\n\nLive verification of `https://t.me/<username>` web profiles and public Telegram discussion graphs as of **November 7, 2026 (`07:39 UTC`)** — exactly **5 days** after the siege and night assault on the temporary staging point (PPD) of National Guard Unit `3121` (`1st NGU Corps 'Azov'`) at 7 Soniachna St., Petropavlivska Borshchahivka (`2026-11-02`, where 16 National Guardsmen suffered injuries and chemical burns, and lead operative Valentyna Moloda was remanded into custody for 60 days without bail by the Solomianskyi District Court of Kyiv on `2026-11-04` under Articles 114-1 and 114-2 of the Criminal Code of Ukraine; see [`/en/issue/borshchahivka-provocation-2026-11-02`](/en/issue/borshchahivka-provocation-2026-11-02) and [`/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor`](/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor)) — establishes a stark engineering fact:\n\n- **Out of 14 verified named Telegram torpedoes** (comprising Echelon-1 single-use paratroopers, a 1-subscriber `SendAsPeer` channel mask, and cross-district nomads deployed during the `2026-11-04` Kyiv blackout roadblocks), **all 14 of 14 (`100% ALIVE`) remain active and unblocked**.\n- **Zero initial seeding messages in open district chats** (`t.me/petropavlivskabor/33717..33720`, `t.me/SofievskayaPetropavBorshchagovka/1644075`, `t.me/koperchat2026/1749076`, `t.me/petropavlivskabor/33746`, `t.me/petropavlivskabor/33845`) **have been removed** by platform or community moderators as of Day 5.\n- Furthermore, in the discussion threads of Kyiv mega-channel `@truexakyiv` (`https://t.me/truexakyiv/96829` and `https://t.me/truexakyiv/96835` during the `2026-11-04` road blockades on Akademmistechko/Palladina Ave and Obolon), our MTProto audit documented **8 unnamed provocateurs (`username = NULL`)** identifiable solely by their immutable 64-bit numeric `MTProto user_id` — including fresh series account `uid=8895205236` posting direct Russian-language incitement to burn police vehicles and kill law enforcement officers.\n\n![Live Verification Matrix of 14/14 Named Telegram Torpedoes and 8 Unnamed MTProto Zero-Accounts as of 2026-11-07](/evidence/m22_borshchahivka_14_torpedoes_alive_grid_2026_11_07.png)\n\n#### Complete Verification Table of 22 MTProto Torpedoes (14 Named + 8 Null-Username Accounts) as of `2026-11-07`\n\n| # | Immutable MTProto ID (`PeerUser` / `PeerChannel`) | Public `@username` (as of `2026-11-07`) | Live `t.me` Display Name / Bio (`2026-11-07`) | Threat Classification & Documented MTProto Forensic Episode (`02–04.11.2026`) | Day-5 Status (`2026-11-07`) |\n|---|---|---|---|---|---|\n| **1** | **`472827990`** (`PeerUser`) | **`@OlyaTheBT`** | `Olha Parkhomets` | **Echelon-1 Primary Ignition Seeder (`2026-11-02, 10:20:15 UTC`):** 4h 18m before sanctioned `Strana.ua`'s first post, drops 3 media files and initial text in `@petropavlivskabor/33717..33720` alleging 'torture of captives and blocked paramedics at 7 Soniachna St.' (`0` prior messages in chat history) | **`ALIVE` (100% active)** |\n| **2** | **`6695051993`** (`PeerUser`) | **`@snizhana_sob`** | `Snizhana` (*`HR manager at the recruitment agency`*) | **Echelon-1 Cross-District Paratrooper (Fresh `669...` series):** on `2026-11-02` between `13:48:51` and `14:04:30 UTC`, blasts **12 storm calls in 15 minutes** in `@SofievskayaPetropavBorshchagovka/1644075..1644187` and cross-posts to `@petropavlivskabor/33745` (`13:50:10 UTC`) before vanishing | **`ALIVE` (100% active)** |\n| **3** | **`3913826799`** (`PeerChannel` / Bot API `-1003913826799`) | **`@kyivskiydvish`** | Channel `'l'` (`1 subscriber`, created `2026-05-31`) | **Anonymous `Telegram Premium` `SendAsPeer` (`PeerChannel`) Mask:** on `2026-11-02` at `16:56:19 UTC` in `@koperchat2026/1749076`, uses a 1-subscriber shell channel to inject the narrative that Ukrainian military recruitment (TCC) officers are 'Russians who torture and kill' | **`ALIVE` (100% active)** |\n| **4** | **`309834386`** (`PeerUser`) | **`@k_restonosets`** | `Kristina` (*`disappointed but not surprised`*) | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated panic seeding inside `@petropavlivskabor` during the blockade of NGU Unit `3121` | **`ALIVE` (100% active)** |\n| **5** | **`387320983`** (`PeerUser`) | **`@ya_bavovna`** | `olya` | **Borshchchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **6** | **`6738879038`** (`PeerUser`) | **`@lana3070`** | `Lana` | **Fresh `673...` Series Borshchahivka Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **7** | **`587218075`** (`PeerUser`) | **`@morozov_pavlo`** | `Pavel Morozov` | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **8** | **`538103615`** (`PeerUser`) | **`@zeend77`** | `[Icon Handle]` (`@zeend77`) | **Borshchahivka Primary Seeder (`2026-11-02`):** participant in coordinated escalation inside `@petropavlivskabor` | **`ALIVE` (100% active)** |\n| **9** | **`5225374042`** (`PeerUser`) | **`@Denov1977b`** | `D. Zh. O.` | **Cross-District Nomad (`Borshchahivka -> Palladina Ave -> Obolon`):** on `2026-11-04` at `18:26:19 UTC` in `@truexakyiv/96829`, artificially links a local power-outage roadblock on Palladina Ave to V. Moloda's fake 'combat surgeon' narrative and Russian anti-Maidan stamps, then migrates at `19:15:00 UTC` to the Obolon outage thread (`@truexakyiv/96835`) | **`ALIVE` (100% active)** |\n| **10** | **`616631997`** (`PeerUser`) | **`@AviCrossman`** | `Yuriy Bastrykin` | **Kyiv Protests Thread Provocateur (`2026-11-04, 18:18:55 UTC`):** injects Sofiivska Borshchahivka outage escalation in `@truexakyiv/96829?comment=4067733` | **`ALIVE` (100% active)** |\n| **11** | **`263464813`** (`PeerUser`) | **`@Sten76`** | `Sten Stens` | **Kyiv Protests Thread Provocateur (`2026-11-04, 18:03:03 UTC`):** in `@truexakyiv/96829?comment=4067639`, links the Kyiv blackout protest to the arrest of fake 'paramedic' V. Moloda in Borshchahivka | **`ALIVE` (100% active)** |\n| **12** | **`8173254881`** (`PeerUser`) | **`@homaaaaq`** | `homa` | **Fresh `817...` Series Agitator (`2026-11-04, 18:00:36 UTC`):** injects TCC panic triggers near Sviatoshyn metro during the road blockade in `@truexakyiv/96829?comment=4067623` | **`ALIVE` (100% active)** |\n| **13** | **`514518300`** (`PeerUser`) | **`@Yarovoy1`** | `Fedia` | **Kyiv Protests Thread Provocateur (`2026-11-04, 17:54:25 UTC`):** calls to redirect roadblock crowds toward municipal government buildings in `@truexakyiv/96829?comment=4067557` | **`ALIVE` (100% active)** |\n| **14** | **`1643760407`** (`PeerUser`) | **`@deputatik3`** | `deputat` | **Pro-Kremlin Provocateur in Obolon Thread (`2026-11-04, 19:56:45 UTC`):** in `@truexakyiv/96835?comment=4068434`, explicitly denies Russian state responsibility for the war against Ukraine and pushes anti-Maidan stamps | **`ALIVE` (100% active)** |\n| **15** | **`8895205236`** (`PeerUser`) | **`NULL` (no `@username`)** | `No username (8895205236)` | **Critical Fresh `889...` Series Zero-Account (`2026-11-04, 19:06:07 UTC`):** in `@truexakyiv/96829`, posts a direct Russian-language call to murder police officers and burn their service vehicles | **`ACTIVE UID` (in stop-feed)** |\n| **16** | **`8940324745`** (`PeerUser`) | **`NULL` (no `@username`)** | `Kharkivskyi` | **Cross-District `894...` Zero-Account with `1m 59s` Z-Channel Sync:** on `2026-11-02` at `14:47:52 UTC` seeds the '40 tortured captives' claim in `@petropavlivskabor/33746`, and on `2026-11-04` at `18:51:00 UTC` in `@petropavlivskabor/33845` amplifies the Akademmistechko road blockade exactly **1 minute 59 seconds** after Russian Z-channel `@RVvoenkor/126470` | **`ACTIVE UID` (in stop-feed)** |\n| **17** | **`5832863517`** (`PeerUser`) | **`NULL` (no `@username`)** | `Volodymyr Borshchivskyi` | **Police-Assault Agitator (`2026-11-04, 17:53:37 UTC`):** in `@truexakyiv/96829?comment=4067541`, posts a direct call to physically assault National Police officers during the road blockade | **`ACTIVE UID` (in stop-feed)** |\n| **18** | **`7831259310`** (`PeerUser`) | **`NULL` (no `@username`)** | `Umberto` | **Fresh `783...` Series Zero-Account (`2026-11-04, 18:36:41 UTC`):** Maidan escalation rhetoric in `@truexakyiv/96829?comment=4067849` | **`ACTIVE UID` (in stop-feed)** |\n| **19** | **`7911407278`** (`PeerUser`) | **`NULL` (no `@username`)** | `Yuliya` | **Fresh `791...` Series Zero-Account (`2026-11-04, 19:54:07 UTC`):** anti-Maidan stamp in Obolon thread `@truexakyiv/96835?comment=4068421` | **`ACTIVE UID` (in stop-feed)** |\n| **20** | **`5125543281`** (`PeerUser`) | **`NULL` (no `@username`)** | `Artuzon` | **Regime-Overthrow Agitator (`2026-11-04, 19:14:46 UTC`):** in `@truexakyiv/96835?comment=4068154`, calls in Russian for the violent overthrow of Ukraine's wartime government | **`ACTIVE UID` (in stop-feed)** |\n| **21** | **`5747492517`** (`PeerUser`) | **`NULL` (no `@username`)** | `Archi` | **Obolon Thread Provocateur (`2026-11-04, 19:32:01 UTC`):** judiciary/police/TCC escalation tied to V. Moloda's arrest in `@truexakyiv/96835?comment=4068294` | **`ACTIVE UID` (in stop-feed)** |\n| **22** | **`1977347334`** (`PeerUser`) | **`NULL` (no `@username`)** | `sasha` | **Obolon Thread Agitator (`2026-11-04, 19:20:44 UTC`):** calls to shift street blockades into central Kyiv in `@truexakyiv/96835?comment=4068200` | **`ACTIVE UID` (in stop-feed)** |\n\n---\n\n### 2. Forensic Anatomy of the Infiltration: Echelon-1 Paratroopers, `SendAsPeer (PeerChannel)` Masks & Null-Username `889...` Series Zeroes\n\nCross-correlating live `t.me/?embed=1` captures with raw MTProto discussion dumps exposes the three technical evasion mechanisms that allow Russian kinetic-information operators to bypass conventional moderation in Ukrainian mega-channels and municipal chats:\n\n![Forensic Panel of Live t.me Embeds and MTProto Discussion Dumps (02–07.11.2026)](/evidence/m22_forensic_comments_molotov_cross_district_2026_11_07.png)\n\n1. **Null-Username Fresh Zeroes (`username = NULL`, `UID >= 6,500,000,000`) as Manual-Search Stealth Nodes:**\n   - When fresh account **`8895205236`** (`2026-11-04, 19:06:07 UTC` under `@truexakyiv/96829`) or **`8940324745`** (`Kharkivskyi`, `1m 59s` sync with `@RVvoenkor/126470`) posts incitement to burn police cars or block highways, its **`@username` field is intentionally left empty (`NULL`)**.\n   - To a human moderator or URL-based OSINT scraper, the account has no `t.me/<username>` link and its `display_name` can be changed every sixty seconds. Yet at the `MTProto` and `Telegram Bot API` protocol layer, every single packet carries the immutable 64-bit integer **`from_id: PeerUser(user_id=8895205236)`**.\n2. **Anonymous `SendAsPeer` Channel Masks (`PeerChannel` Replacing `PeerUser`):**\n   - In `@koperchat2026/1749076` (`2026-11-02, 16:56:19 UTC`), the operative hid their personal `PeerUser` account behind Telegram Premium's **`SendAsPeer`** feature, posting as a 1-subscriber shell channel **`@kyivskiydvish`** (`channel_id=3913826799`, Bot API `sender_chat.id = -1003913826799`) renamed to the single Cyrillic letter **`'l'`**.\n   - Clicking the author avatar opens an empty 1-subscriber channel rather than the operator's user profile.\n3. **Cross-District Nomadism Across Disconnected Municipal Threads:**\n   - Nomad **`@Denov1977b` (`uid=5225374042`)** and zero-account **`uid=8940324745`** hop sequentially between **Petropavlivska Borshchahivka** (Buchanskyi district, western suburb), **Palladina Ave** (Sviatoshynskyi district), and **Obolon** (Yordanska St.), artificially stitching local power-outage complaints into the Borshchahivka military staging point provocation.\n\n---\n\n### 3. Why Billion-Hryvnia ISP SORM / DPI Hardware Boxes Are Architecturally Blind in Telegram\n\nA recurring institutional fallacy is the belief that Telegram provocations can be countered by procuring expensive network-level lawful interception and Deep Packet Inspection (**SORM / DPI**) appliances deployed on Ukrainian telecom operators and Internet Service Providers (`ISPs`). From a network engineering standpoint, ISP-level DPI suffers from **three fundamental architectural blind spots**:\n\n![Architectural Comparison: Telecom SORM/DPI Blindness vs 0.1 ms Application-Layer MTProto UID Filtering](/evidence/m22_sorm_blindness_vs_mtproto_uid_architecture_2026_11_07.png)\n\n1. **Foreign VoIP / eSIM Registration Outside Ukrainian HLR/VLR Databases:**\n   - GRU 85th GTSSS units and contractor botfarms do not buy Ukrainian `+380` SIM cards at Kyiv street kiosks. Accounts in the `669...`, `673...`, `783...`, `791...`, `817...`, `889...`, and `894...` ranges are bulk-minted via foreign virtual telephony gateways (`VoIP / SIM-box` pools in Indonesia `+62`, the UK `+44`, Estonia `+372`, Russia `+7`, or anonymous `+888` Fragment blockchain numbers).\n   - Zero SMS verification codes or `SS7 / Diameter` signaling packets ever traverse Ukrainian mobile operator switches.\n2. **End-to-Server `MTProto 2.0` Cryptographic Opacity (`AES-256-IGE` + `TL-schema` + `Obfuscated2`):**\n   - Even when an operative or proxy exits via a Ukrainian ISP, the Telegram client encrypts all application payload using `MTProto 2.0` (`256-bit AES-IGE` keyed via `2048-bit Diffie-Hellman`, wrapped inside `TLS 1.3` obfuscation to Telegram `AS62041` / `AS62014` edge blocks `149.154.160.0/20` and `91.108.4.0/22`).\n   - An optical splitter or SORM/DPI probe on a Ukrainian ISP backbone sees **only an encrypted byte stream to a Telegram edge IP in Amsterdam (`DC2` / `DC4`)**. ISP hardware cannot inspect the destination `chat_id` (`@truexakyiv`), the sender's `user_id` (`8895205236`), or the message text.\n3. **Absence of a Public `UID -> MSISDN` Reverse Lookup:**\n   - Under `MTProto`, phone numbers default to server-side privacy (`PrivacyKeyPhoneNumber = Nobody`), rendering telecom billing lookups useless against a null-username account like `uid=8895205236`.\n\n---\n\n### 4. Where the Real Solution Lies: Zero-Cost Application-Layer `MTProto UID` Filtering in `0.1 ms` (`/feeds/telegram-nomadic-torpedoes.json`)\n\nThe engineering paradox is simple: the exact metadata that is **cryptographically invisible** to a billion-hryvnia SORM box on an ISP fiber link is delivered **in 100% decrypted cleartext JSON / TL-objects** directly to every community moderator bot, every mega-channel discussion group (`@truexakyiv`, `@kievreal1`, `@k_dvizh`, `@koperchat2026`, `@petropavlivskabor`), and every news intake bot (`@novosti_kieva_bot`, `@levii_bereg_kyivbot`) the millisecond a comment is posted.\n\nWhenever a provocateur posts in a discussion group or submits content to an intake bot, Telegram's servers hand the administrator bot the exact immutable identifiers:\n- **`message.from_user.id`** (`MTProto PeerUser.user_id` — an immutable 64-bit integer that survives display-name changes and `@username` deletion);\n- **`message.sender_chat.id`** (`MTProto PeerChannel.channel_id` — populated whenever an anonymous `SendAsPeer` channel mask is used);\n- **`message.from_user.username`** (`None` when `@username` is stripped).\n\nTo close this vulnerability across Ukrainian municipal channels, **OPERBAZA** has published the open machine-readable stop-feed **[`/feeds/telegram-nomadic-torpedoes.json`](/feeds/telegram-nomadic-torpedoes.json)**, enabling any community moderator bot to neutralize nomadic torpedoes in **`0.1 ms`** using three deterministic rules:\n\n```python\n# Drop-in integration of the open OPERBAZA stop-feed (/feeds/telegram-nomadic-torpedoes.json)\n# for any Telegram discussion-group moderator bot or news intake bot (Python / aiogram / PTB):\n\nimport re, urllib.request, json\n\nFEED_URL = \"https://operbaza.org/feeds/telegram-nomadic-torpedoes.json\"\nfeed = json.loads(urllib.request.urlopen(FEED_URL, timeout=5).read().decode(\"utf-8\"))\n\nBLOCKED_USER_IDS = set(feed[\"instant_blocklists\"][\"mtproto_user_ids_int\"])\nBLOCKED_CHAT_IDS = set(feed[\"instant_blocklists\"][\"bot_api_sender_chat_ids_int\"])\nFRESH_UID_THRESHOLD = int(feed[\"instant_blocklists\"][\"fresh_zero_uid_quarantine_threshold\"])  # 6500000000\n\nVIOLENCE_OR_RIOT_RE = re.compile(\n    r\"(kill.*cops|burn.*cars|storm|blockade|overthrow)\",\n    re.IGNORECASE,\n)\n\ndef inspect_incoming_message(msg) -> str:\n    # Rule 1: Blanket ban on anonymous SendAsPeer channel masks (e.g. PeerChannel 3913826799 'l')\n    if getattr(msg, \"sender_chat\", None) is not None:\n        if msg.sender_chat.id != getattr(msg, \"linked_chat_id\", None):\n            return \"DROP_AND_BAN_SEND_AS_CHANNEL_MASK\"\n\n    user = getattr(msg, \"from_user\", None)\n    if not user:\n        return \"ALLOW\"\n\n    # Rule 2: Instant O(1) ban by immutable 64-bit MTProto user_id from OPERBAZA stop-feed\n    if user.id in BLOCKED_USER_IDS:\n        return \"DROP_AND_BAN_KNOWN_TORPEDO_UID\"\n\n    # Rule 3: Quarantine fresh null-username accounts (UID >= 6,500,000,000) on riot/violence triggers\n    text = (getattr(msg, \"text\", None) or getattr(msg, \"caption\", None) or \"\")\n    if user.id >= FRESH_UID_THRESHOLD and not getattr(user, \"username\", None):\n        if VIOLENCE_OR_RIOT_RE.search(text):\n            return \"QUARANTINE_FRESH_UNNAMED_ZERO_ON_VIOLENCE_TRIGGER\"\n\n    return \"ALLOW\"\n```\n\n---\n\n### 5. Direct Links to Verified Datasets & Cross-Linked OPERBAZA Registries\n\n- **Open Anti-Torpedo MTProto JSON Stop-Feed (CC-BY-4.0):** [`/feeds/telegram-nomadic-torpedoes.json`](/feeds/telegram-nomadic-torpedoes.json)\n- **Full Forensic Investigation of the Petropavlivska Borshchahivka Operation (`02–05.11.2026`):** [`/en/issue/borshchahivka-provocation-2026-11-02`](/en/issue/borshchahivka-provocation-2026-11-02)\n- **Methodological Breakdown of the 'Borshchahivka -> Matryoshka -> Bundestag (`AfD`)' Pipeline (`M-11`):** [`/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor`](/en/methods/borshchahivka-matryoshka-bundestag-fimi-conveyor)\n- **Verified Russian Botfarm Registry (`1,839` nodes + EU DSA / DISARM Matrix):** [`/en/bots`](/en/bots) (`M-21`: [`/en/methods/method-21-eu-dsa-fimi-cib-forensic-report-meta-google-dg-connect-2026`](/en/methods/method-21-eu-dsa-fimi-cib-forensic-report-meta-google-dg-connect-2026))\n- **Institutional Blindness & Regulatory Compliance Registry:** [`/en/blindness`](/en/blindness) ([`/feeds/agency-blindness.json`](/feeds/agency-blindness.json))",
    "related_tool_or_link": "/feeds/telegram-nomadic-torpedoes.json"
  },
  {
    "id": "M-21",
    "slug": "method-21-eu-dsa-fimi-cib-forensic-report-meta-google-dg-connect-2026",
    "date": "2026-11-07",
    "category": "BOT DETECTION",
    "badge": "METHOD #21 · EU DSA (ART. 34, 35, 40) & DISARM: FORENSIC MATRIX OF 1,839 RUSSIAN BOTS (META 615... / .XXXXXX / HOMOGLYPHS / YOUTUBE RU-RU / TASS)",
    "title": "EU Digital Services Act (Regulation (EU) 2022/2065, Articles 34, 35 & 40) & DISARM Framework Technical FIMI / CIB Report: Forensic Evidence Matrix of 1,839 Russian Bot Accounts (Facebook 615... UIDs, .XXXXXX Batch Autoregs, Unicode Homoglyphs, YouTube ru-RU Pool, Selective Moderation Schedule & Synchronous TASS / RIA Novosti Relays)",
    "subtitle": "Structured forensic audit of Coordinated Inauthentic Behavior (CIB) and Foreign Information Manipulation and Interference (FIMI) as of November 2026: 1,839 verified Russian bot accounts (1,434 YouTube channels registered under Russian ru-RU OS locale suffixes -[U+044A]/-[U+044B]/-[U+044D], 189 six-digit .XXXXXX and .2025 batch autoregs, 78 Facebook numeric UIDs in series 615..., 63 Cyrillic-Latin Unicode homoglyph obfuscators and raw CSV templates, 117 cross-thread bridge bots across 24 dossiers), a 5-stage selective moderation pipeline, and 33 documented episodes of synchronous syndication by EU-sanctioned Russian state media (FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru, TASS, Lenta.ru).",
    "read_time": "16 min read",
    "read_time_min": 16,
    "pinned": false,
    "tags": [
      "EU DSA 2022/2065 Art 34 & 35",
      "DISARM Framework",
      "Meta CIB 615... UIDs",
      "Batch Autoregs .XXXXXX",
      "Unicode Homoglyphs U+0069",
      "YouTube ru-RU Pool 1434",
      "117 Cross-LOM Bridge Bots",
      "Selective Moderation",
      "TASS / RIA Novosti / Ukraina.ru"
    ],
    "summary": "Technical FIMI/CIB forensic report under EU Digital Services Act (Articles 34, 35 & 40) and DISARM taxonomy covering 1,839 verified Russian bots, selective moderation schedules, and synchronous TASS / RIA Novosti / Ukraina.ru relays",
    "lead": "Structured forensic audit of Coordinated Inauthentic Behavior (CIB) and Foreign Information Manipulation and Interference (FIMI) as of November 2026: 1,839 verified Russian bot accounts (1,434 YouTube channels registered under Russian ru-RU OS locale suffixes -[U+044A]/-[U+044B]/-[U+044D], 189 six-digit .XXXXXX and .2025 batch autoregs, 78 Facebook numeric UIDs in series 615..., 63 Cyrillic-Latin Unicode homoglyph obfuscators and raw CSV templates, 117 cross-thread bridge bots across 24 dossiers), a 5-stage selective moderation pipeline, and 33 documented episodes of synchronous syndication by EU-sanctioned Russian state media (FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru, TASS, Lenta.ru).",
    "content_md": "### 1. EU Regulatory Framework (Regulation (EU) 2022/2065 — Digital Services Act, Articles 34, 35 & 40) & EEAS FIMI / DISARM Taxonomy\n\nUnder **Articles 34 and 35 of Regulation (EU) 2022/2065 (Digital Services Act — DSA)**, providers of designated Very Large Online Platforms (**VLOPs** — specifically **Meta Platforms Ireland Limited** for Facebook/Instagram and **Google Ireland Limited** for YouTube) are legally required to assess and mitigate systemic risks arising from the **intentional and coordinated manipulation of their service (Coordinated Inauthentic Behavior — CIB)**, the deployment of automated or inauthentic accounts, and the exploitation of algorithmic recommender and comment-ranking systems by **Foreign Information Manipulation and Interference (FIMI)** networks. Furthermore, **Article 2f of Council Regulation (EU) No 833/2014** prohibits broadcasting, enabling, or otherwise facilitating the distribution of content produced by designated Russian state media holdings (**FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru**, **TASS**).\n\nThe machine-readable and visual forensic evidence matrix compiled by **OPERBAZA.ORG** (`/en/bots#dsa-fimi-cib-matrix`, `/feeds/fimi-cib-dsa-matrix.json`, `/exports/en_bots.csv`) consolidates **`1,839` verified Russian botfarm accounts**, **`117` cross-thread bridge bots** (operating simultaneously across `75` overlap pairs linking `24` political and media dossiers), **`15` active non-geoblocked YouTube mirror channels of NSDC-sanctioned individuals** (`availableCountryCodes: \"UA\"`), and **`33` documented episodes of synchronous headline syndication** by Russian federal state media outlets.\n\n| FIMI / CIB Forensic Dataset Metric (`OPERBAZA.ORG`) | Verified Count | Technical Forensic Signature & Primary Identifier Class | EU Regulatory Standard / DISARM Red Framework v1.5 |\n|---|---|---|---|\n| **Total Verified Bot & Autoreg Accounts in Registry (`/en/bots`)** | **`1,839`** | Immutable numeric `UID`s, 24-character YouTube `Channel ID`s (`UC...`), archived profile/subscription/thread evidence | **DSA Art. 34(1)(c), Art. 35(1)(c)-(d), Art. 40** |\n| **Pillar 1A: Facebook Numeric `615...` Series UIDs (`profile.php?id=615...`)** | **`78`** *(72 in `numeric_615_autoreg` + 6 cross-tagged)* | Series `6155...–6159...` without vanity slugs, `Digital Creator` shell mode, `0` city / `0` education / `0` bio, or inverted follower ratios (`82` followers / `433` following) | **DISARM `TA05 / T0007`** (Create Inauthentic Social Media Pages / Accounts) |\n| **Pillar 1B: 6-Digit Batch Autoregs (`.XXXXXX`) & `.2025` Series** | **`189`** *(`139` `.XXXXXX` + `42` `.2025` + `8` cross-tagged)* | Serial URL suffixes (`.341541`, `.502469`, `.789992`, `.754565`, `.2025`), African/South Asian Reels warm-up graphs, locked `UID 1000...` shells | **DISARM `TA05 / T0049`** (Flood Information Space / Synthetic Swarm) |\n| **Pillar 1C: Unicode Cyrillic-Latin Homoglyphs & Raw CSV Templates** | **`63`** | Substitution of Cyrillic `i` (`U+0456`), `s` (`U+0441`), `a` (`U+0430`), `o` (`U+043E`), `e` (`U+0435`) with Latin ASCII `i` (`U+0069`), `c` (`U+0063`), `a` (`U+0061`), `o` (`U+006F`), `e` (`U+0065`); raw CSV column header `Higher Education Kyiv` retained in profile education field | **DISARM `TA06 / T0056`** (Bypass Content Filters via Character Obfuscation) |\n| **Pillar 1D: YouTube `ru-RU` System Locale Botfarm (`-[U+044A] / -[U+044B] / -[U+044D]`)** | **`1,434`** *(+ `117` cross-thread bridge bots)* | 24-character `UC...` Channel IDs with auto-generated Russian OS locale suffixes (`U+044A` hard sign, `U+044B` yery, `U+044D` reverse-e) absent from the Ukrainian alphabet | **DSA Art. 34 & 35** / **EU Code of Practice Commitment 18** |\n| **Active Unblocked YouTube Mirrors of NSDC-Sanctioned Subjects (`UA_OPEN: True`)** | **`15`** *(+ `24` nodes in `sanctioned_ru_project`)* | Open country code `\"UA\"` in `availableCountryCodes` (`249` countries), `PlayabilityStatus: OK` without VPN in Ukraine, amplified by `ru-RU` bot accounts | **DSA Art. 34(1)(a)-(c)** / **EU Accession Chapter 31 CFSP** |\n| **Pillar 1E: Selective Moderation Schedule & Synchronous Russian State Media Relays** | **`76` dossiers / `33` state media relays** | Deletion of verified citizen comments citing state registries (`EDR`, `EDRSR`, `Prozorro`) while preserving Russian bots in top-1..top-5 (`Most Relevant`) + pickup by TASS / RIA Novosti / Ukraina.ru within `15–120 min` | **DISARM `TA08 / T0046` & `TA09 / T0116`** / **Council Reg. (EU) 833/2014 Art. 2f** |\n\n### 2. Pillars 1A & 1B: Forensic Anatomy of Facebook Numeric `615...` UID Pools & 6-Digit Batch Autoregs (`.XXXXXX` / `.2025`)\n\nAcross Meta Platforms (Facebook), initial comment-thread saturation within the first `5–25 minutes` of a target post relies on two standardized account-generation architectures:\n1. **Numeric `615...` Series Pool (`78` verified UIDs spanning `61551048542691` – `61595115906538`):** accounts are batch-registered without vanity usernames (`https://www.facebook.com/profile.php?id=615...`), switched into `Digital Creator` professional dashboard mode to mask empty friend lists behind follower/following counters, and exhibit zero biographical metadata (`0` city, `0` education, `0` workplace).\n2. **6-Digit Batch Suffixes (`.XXXXXX`) & `.2025` Wave (`189` verified accounts):** accounts bearing automated 6-digit numeric URL suffixes and Russian-to-ASCII transliteration script defects (`ura.savickij.341541` `UID 100058459429900`, `denis.borisov.502469`, `roman.novikov.789992` `UID 100027614651933`, `larisa.kovaleva.754565` `UID 100006721178005`, `ludmila.vasenko.679280` `UID 100059986742650`, `aleksandr.mihajlovskij.343301` `UID 100029970560548`, simultaneous doubled-name factory clones `galina.galina.772599` `UID 100027749074181` and `galina.galina.270337` `UID 100039224829973`, and `.2025` batch shells `jura.andrushko.2025` `UID 100053283187923`, `fedor.fedir.2025` `UID 100026693023411`, `mihail.gubanov.2025` `UID 100078263889441`, `aleksei.sokolenko.2025` `UID 100040230424870`).\n\n| Verified Facebook UID | Profile Handle / Display Name | CIB Category | Technical Forensic Signature & Observed Thread Deployment |\n|---|---|---|---|\n| **`61564945321609`** | `Vitaliy Melnychenko` (`id=61564945321609`) | `numeric_615_autoreg` | `Digital Creator` shell (`67` followers / `78` following, `0` city, `0` education, `0` bio) posting Russian-calque invective in B. Bereza's thread (`30–31.10.2026`, Supreme Court lawsuit against NSDC sanctions) |\n| **`61594656912880`** | `Andrey Olshansky` (`id=61594656912880`) | `homoglyph_farm` / `615...` | Locked autoreg pinned at **Rank #1 (`Most Relevant`)** on O. Goncharenko's wall under the US State Dept **$2.1B FMS sale of 500 Patriot PAC-3 MSE interceptors**: evades Meta filters via **3 Latin ASCII homoglyphs `i` (`U+0069`)** embedded inside Cyrillic words |\n| **`61582015375009`** | `Nataliya Kachan` (`id=61582015375009`) | `numeric_615_autoreg` | `6158...` numeric autoreg deploying Russian-surzhyk lexical calques on O. Stadnik's default wall under his wartime elections post (`pfbid0dTQUTV...`) |\n| **`61582753621994`** | `Lyubava Prekrasna` (`id=61582753621994`) | `numeric_615_autoreg` | Inverted follower ratio (`82` followers / `433` following), posting two consecutive social-collapse comments on O. Popenko's default wall (`29.10.2026`, `pfbid02UxkuA3...`) |\n| **`61571748419988`** | `Ulyana Mykolaychuk` (`id=61571748419988`) | `numeric_615_autoreg` | Paired `6157...` numeric autoreg deployed in the same O. Popenko thread (`29.10.2026`) |\n| **`61592089256402`** | `Andriy Andriyiv` (`id=61592089256402`) | `numeric_615_autoreg` | `6159...` numeric autoreg admitted into the restricted comment whitelist on M. Bezuhla's page (`28–29.10.2026`) |\n| **`61585982231409`** | `Druzenko. Krayina.` (`id=61585982231409`) | `pseudo_page` / `615...` | Brand-hijack pseudo-page on the `6158...` numeric range (`36k` followers, Reels with `236k` views), cross-seeding threads on D. Chekalkin and O. Drozdov |\n| **`100058459429900`** | `Yura Savitskyi` (`ura.savickij.341541`) | `batch_autoreg_6digit` | 65k-follower aggregator node with `.341541` 6-digit suffix and Russian surname spelling calque, amplifying night anti-mobilization Reels (`02–03.11.2026`) |\n| **`100027614651933`** | `Roman Novikov` (`roman.novikov.789992`) | `batch_autoreg_6digit` | Locked Russian-language 6-digit batch autoreg (`.789992`, `0` city, `0` education, `0` bio) in top anti-mobilization comment slots |\n| **`100006721178005`** | `Larisa Kovaleva` (`larisa.kovaleva.754565`) | `batch_autoreg_6digit` | 6-digit batch profile in `Digital Creator` mode (`99` followers / `149` following, `0` bio) deployed in the same thread |\n| **`100027749074181`** & **`100039224829973`** | `Galina Galina` (`galina.galina.772599` & `galina.galina.270337`) | `batch_autoreg_6digit` | Two simultaneous doubled-name `Galina Galina` factory clones with 6-digit suffixes `.772599` and `.270337` deployed in the exact same thread |\n| **`100053283187923`** | `Jura Andrushko` (`jura.andrushko.2025`) | `autoreg_2025` | Serial `.2025` wave autoreg pinned at Rank #1 on the default comment wall |\n\n### 3. Pillar 1C: Mixed-Script Unicode Homoglyph Obfuscation & Raw CSV Import Artifacts (`63` Accounts)\n\nTo bypass automated toxicity classifiers and keyword spam filters on Meta and YouTube, Russian botfarm operators systematically employ **mixed-script Unicode homoglyph substitution**: within Cyrillic words targeting air defense, mobilization, or state institutions, individual Cyrillic code points are replaced with visually identical Latin ASCII characters:\n- Cyrillic **`i` (`U+0456`)** $\rightarrow$ Latin ASCII **`i` (`U+0069`)** (documented in `UID 61594656912880` Andrey Olshansky, `UID 100033677342526` Eva Henova, `UID 61571489427922` Andrey Semenov);\n- Cyrillic **`s` (`U+0441`)** $\rightarrow$ Latin ASCII **`c` (`U+0063`)** and Cyrillic **`o` (`U+043E`)** $\rightarrow$ Latin ASCII **`o` (`U+006F`)** (`ludmila.bondarenko.45557`, `UID 61555369634837` `tamara.cimona`, and the `Heorhiy Mazur` account containing 4 homoglyphs in a single sentence);\n- **Unedited CSV Column Header Artifact (`UID 100011388163548` — `kamila.zalevska`):** during automated bulk account creation from a spreadsheet, the profile's `Education` field literally retained the raw CSV column header **`Higher Education Kyiv`**, while its `Instagram` field retained an unparsed session hash string.\n\n### 4. Pillar 1D: YouTube `ru-RU` System Locale Botfarm (`-[U+044A] / -[U+044B] / -[U+044D]`, `1,434` `UC...` Channels), `117` Cross-Thread Bridge Bots & `15` Active NSDC Mirrors\n\nOn YouTube (Google Ireland Limited), our audit documented **`1,434` automated channels (`UC...`)** masquerading as Ukrainian citizens while carrying an immutable forensic indicator of their creation environment. When bulk registration scripts create YouTube accounts with Cyrillic display names inside a browser or anti-detect environment configured with a **Russian system locale (`ru-RU`)**, YouTube's automated `@handle` generator appends a 3-to-4 character disambiguation suffix drawn from the Russian phonetic table, injecting the strictly Russian letters **hard sign (`U+044A`)**, **yery (`U+044B`)**, and **reverse-e (`U+044D`)** — characters that **do not exist in the Ukrainian alphabet or Ukrainian keyboard layout**.\n\nCross-thread graph analysis across `40,224` parsed comments (`39,311` on YouTube and `913` on Facebook) identified **`117` cross-thread bridge bots (`cross_lom_bridge_bots`)** operating synchronously across multiple independent political comment threads and NSDC-sanctioned mirror channels:\n\n| Technical YouTube `Channel ID` (`UC...`) | Auto-Generated Handle (Transliterated / Unicode) | Russian OS Locale Forensic Marker | Simultaneous Dossiers Amplified (`/en/dossiers`) |\n|---|---|---|---|\n| **`UCYRzMzblP2LFgVfwBYD3k-A`** | `@Bohdan-[U+044A]6yu6k` | Suffix `-[U+044A]6yu6k`: Russian hard sign **`U+044A`** | **`4` dossiers:** `bereza`, `chekalkin`, `poroshenko`, `zheleznyak` |\n| **`UCEjQMF0wEKSm2pGj6yfXulg`** | `@VolodymyrPasichnyk-v2[U+044D]` | Suffix `-v2[U+044D]`: Russian letter **`U+044D`** | **`4` dossiers:** `bereza`, `chekalkin`, `drozdov`, `nudniy-pens` |\n| **`UCAH_yVgWKhk_cVMg5WXTwkQ`** | `@MykolaFomenko-n1[U+044A]` | Suffix `-n1[U+044A]`: Russian hard sign **`U+044A`** | **`4` dossiers:** `ariev`, `chekalkin`, `nudniy-pens`, `poroshenko` |\n| **`UCbnz80Gw4QJFWxC23eXXlkA`** | `@Lyza-s4s9[U+044A]` | Suffix `-s4s9[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `poroshenko` (+ NSDC mirror `UC7cv4INhQQwfJqiU-mel0QQ`) |\n| **`UCAGV2szZbDkLVjxw1hFxyHQ`** | `@VolodymyrTarasyuk-[U+044A]7sh` | Suffix `-[U+044A]7sh`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `shabunin-nikolov`, `zheleznyak` |\n| **`UCp7KKsDkuV5sGm-R2wI3JoQ`** | `@OlehPavlyk-[U+044B]4e` | Suffix `-[U+044B]4e`: Russian letter **`U+044B`** | **`3` dossiers:** `mosiychuk`, `sanctions-mirrors`, `soskin` |\n| **`UCG5fDE3L8jh2cILCvkGk40w`** | `@Stepan-zh4[U+044A]2y` | Suffix `-zh4[U+044A]2y`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `drozdov` |\n| **`UCCEH0ScioEYKy2Q0AYJD2rg`** | `@LarysaKravchenko-p7[U+044A]` | Suffix `-p7[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `shabunin-nikolov` |\n| **`UCWor0UszzYY3UF2oWYjfGxA`** | `@EvhenyyaSavchenko-v3[U+044A]` | Suffix `-v3[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `goncharenko`, `sanctions-mirrors` |\n| **`UCx2BMxA-1IIAYsuA5n_mYKg`** | `@Lena-[U+044B]8h9sh` | Suffix `-[U+044B]8h9sh`: Russian letter **`U+044B`** | **`3` dossiers:** `bereza`, `goncharenko`, `simutin-korupciya-info` |\n| **`UCEgaMRr4nEKESiPRNNzj1sw`** | `@Kamy-[U+044D]4s` | Suffix `-[U+044D]4s`: Russian letter **`U+044D`** | **`3` dossiers:** `ariev`, `kushch`, `shariy` |\n| **`UCFpYTgpENsX2ao42oGl-MZg`** | `@viktorserdyuk-[U+044B]5o` | Suffix `-[U+044B]5o`: Russian letter **`U+044B`** | **`3` dossiers:** `bereza`, `chekalkin`, `poroshenko` |\n\nThis same `ru-RU` bot pool actively amplifies **`15` unblocked YouTube mirror and relay channels of NSDC-sanctioned subjects** (`UCyDRD4u-G9rUTlUGRein_hw`, `UC-uCKJq_bRs5pFE8bMNy6kQ`, `UCyeoETklSyLA-jQe565U03g`, `UC24jZmCZLi3w4j4H8MjJGEg`, `UCTvUuw11b844xI-JFT7tQew`, `UC7cv4INhQQwfJqiU-mel0QQ`, `UCYS8kqVQzP4pfpmw5XIagMA`, `UCvckh1Db64fbmfiddPoZ6LA`, `UC_iPAFzu0nkZkn9vaeWdPrA`, `UCS4aVDaOvIK0-3voQv49pKQ`, `UCUEiXr94u-obIqTkMAODg2w`, `UCurgcc4qcz3-_ibm3XxKUjQ`, `UCBSYa5zQvjL-Y2D89L_OyEw`, `UCiV8lEPfB0NVwfgWuSXSaiQ`, `UCgtxz5_xa6xkDTghNPkuRYw`) streaming into Ukraine with open country code `availableCountryCodes: \"UA\"`.\n\n### 5. Pillar 1E: 5-Stage Selective Moderation Schedule & Binary Relay to TASS / RIA Novosti / Ukraina.ru (`33` Documented Relays)\n\nA core forensic finding for EU regulators (**DG CONNECT** and **EEAS StratCom**) is that Russian synthetic botfarms on Facebook and YouTube operate as **Stages 2 and 3 of an integrated 5-stage cross-platform FIMI relay pipeline**:\n1. **`T+00..05 min` (Narrative Seeding / DISARM `TA01`):** Publication of the primary narrative on a target page (e.g., attacking US FMS deliveries of 500 Patriot PAC-3 MSE missiles or domestic cruise/ballistic missile programs).\n2. **`T+05..25 min` (Coordinated Synthetic Swarm Injection / DISARM `TA05`):** Synchronous entry of `615...` numeric UIDs, `.XXXXXX` batch autoregs, homoglyph accounts, and `ru-RU` YouTube bots (`-[U+044A]/-[U+044B]/-[U+044D]`) cross-liking each other to capture the top slots of the default `Most Relevant` comment view.\n3. **`T+15..45 min` (Selective Moderation Schedule — Criterion #1 / DISARM `TA06`):** Page moderators systematically delete comments from verified Ukrainian citizens citing official state registries (`EDR`, `EDRSR`, `Prozorro`) and block their authors, while **leaving Russian synthetic bot accounts (`615...`, `.XXXXXX`, homoglyphs, `ru-RU`) untouched at Rank #1..#5 of the default thread view**.\n4. **`T+30..90 min` (VLOP/VLOSE Algorithmic Recommender Exploitation / DSA Art. 34 & 35):** Skewed comment sentiment and synthetic engagement velocity trigger Meta and YouTube recommender promotion.\n5. **`T+15..120 min` (Synchronous Binary Relay to Russian State Media — Criterion #2 / Council Reg. 833/2014 Art. 2f):** EU-sanctioned Russian federal state media (**FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru**, **TASS**, **Lenta.ru**) syndicate the post and cite the curated bot comments as \"Ukrainian public outrage\" (including *Ukraina.ru* composite article `1084102674` of `27.10.2026, 16:31` simultaneously citing V. Barvinenko, O. Goncharenko, and Y. Kasyanov against the FP-5 'Flamingo' missile program; *RIA Novosti* articles `2127422181` and `21277...` of `28–29.10.2026`; *Ukraina.ru* dispatches `1084063586`, `1084040964`, `1084064177`, `1084033099` and *Lenta.ru* reports of `24–29.10.2026`).\n\n### 6. Technical Recommendations for Meta CIB Team, Google TAG / YouTube & European Commission DG CONNECT (DSA Enforcement)\n\n1. **For Meta Platforms Ireland Limited (CIB Threat Intelligence & DSA Art. 34/35 Compliance):**\n   - deploy automated cluster detection and batch remediation targeting `profile.php?id=615...` accounts in `Digital Creator` mode with zero biographical graph and 6-digit `.XXXXXX` / `.2025` batch autoregs (`78` + `189` verified profiles in `/feeds/fimi-cib-dsa-matrix.json`);\n   - implement mixed-script Cyrillic-Latin homoglyph normalization (`U+0069` $\rightarrow$ `U+0456`, `U+0063` $\rightarrow$ `U+0441`, `U+0061` $\rightarrow$ `U+0430`, `U+0065` $\rightarrow$ `U+0435`, `U+006F` $\rightarrow$ `U+043E`) in the `Most Relevant` comment-ranking pre-processor and flag unedited CSV profile fields (`Higher Education Kyiv` in `UID 100011388163548`).\n2. **For Google Threat Analysis Group (TAG) & YouTube Trust & Safety (DSA Art. 34/35 Compliance):**\n   - execute batch forensic verification and takedown of the **`1,434` YouTube channels (`UC...`)** combining Ukrainian-persona display names with auto-generated Russian `ru-RU` OS locale suffixes (`U+044A`, `U+044B`, `U+044D`), prioritizing the **`117` cross-thread bridge bots** (`UCYRzMzblP2LFgVfwBYD3k-A`, `UCEjQMF0wEKSm2pGj6yfXulg`, `UCAH_yVgWKhk_cVMg5WXTwkQ`, etc.);\n   - extend beneficial-owner geoblocking in Ukraine (`availableCountryCodes`) across all **`15` active mirror channels (`UC...`)** operating on behalf of NSDC-sanctioned individuals.\n3. **For the European Commission — DG CONNECT (Directorate F, DSA Systemic Risk & FIMI Enforcement) & EEAS StratCom:**\n   - incorporate **selective comment moderation preserving synthetic bot swarms (Criterion #1)** and **synchronous relay to Russian state media designated under Article 2f of Regulation (EU) No 833/2014 (Criterion #2)** into systemic risk audits of VLOPs/VLOSEs under **Articles 34, 35, and 40 of the Digital Services Act**.\n\nAll machine-readable datasets are available at:\n- **Interactive FIMI / CIB Matrix:** `/en/bots#dsa-fimi-cib-matrix` (UA: `/bots#dsa-fimi-cib-matrix`)\n- **EU DSA / DISARM JSON Feed:** `/feeds/fimi-cib-dsa-matrix.json`\n- **Full Bot Registry CSV Export:** `/exports/en_bots.csv` (UA: `/exports/bots.csv`)",
    "body_md": "### 1. EU Regulatory Framework (Regulation (EU) 2022/2065 — Digital Services Act, Articles 34, 35 & 40) & EEAS FIMI / DISARM Taxonomy\n\nUnder **Articles 34 and 35 of Regulation (EU) 2022/2065 (Digital Services Act — DSA)**, providers of designated Very Large Online Platforms (**VLOPs** — specifically **Meta Platforms Ireland Limited** for Facebook/Instagram and **Google Ireland Limited** for YouTube) are legally required to assess and mitigate systemic risks arising from the **intentional and coordinated manipulation of their service (Coordinated Inauthentic Behavior — CIB)**, the deployment of automated or inauthentic accounts, and the exploitation of algorithmic recommender and comment-ranking systems by **Foreign Information Manipulation and Interference (FIMI)** networks. Furthermore, **Article 2f of Council Regulation (EU) No 833/2014** prohibits broadcasting, enabling, or otherwise facilitating the distribution of content produced by designated Russian state media holdings (**FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru**, **TASS**).\n\nThe machine-readable and visual forensic evidence matrix compiled by **OPERBAZA.ORG** (`/en/bots#dsa-fimi-cib-matrix`, `/feeds/fimi-cib-dsa-matrix.json`, `/exports/en_bots.csv`) consolidates **`1,839` verified Russian botfarm accounts**, **`117` cross-thread bridge bots** (operating simultaneously across `75` overlap pairs linking `24` political and media dossiers), **`15` active non-geoblocked YouTube mirror channels of NSDC-sanctioned individuals** (`availableCountryCodes: \"UA\"`), and **`33` documented episodes of synchronous headline syndication** by Russian federal state media outlets.\n\n| FIMI / CIB Forensic Dataset Metric (`OPERBAZA.ORG`) | Verified Count | Technical Forensic Signature & Primary Identifier Class | EU Regulatory Standard / DISARM Red Framework v1.5 |\n|---|---|---|---|\n| **Total Verified Bot & Autoreg Accounts in Registry (`/en/bots`)** | **`1,839`** | Immutable numeric `UID`s, 24-character YouTube `Channel ID`s (`UC...`), archived profile/subscription/thread evidence | **DSA Art. 34(1)(c), Art. 35(1)(c)-(d), Art. 40** |\n| **Pillar 1A: Facebook Numeric `615...` Series UIDs (`profile.php?id=615...`)** | **`78`** *(72 in `numeric_615_autoreg` + 6 cross-tagged)* | Series `6155...–6159...` without vanity slugs, `Digital Creator` shell mode, `0` city / `0` education / `0` bio, or inverted follower ratios (`82` followers / `433` following) | **DISARM `TA05 / T0007`** (Create Inauthentic Social Media Pages / Accounts) |\n| **Pillar 1B: 6-Digit Batch Autoregs (`.XXXXXX`) & `.2025` Series** | **`189`** *(`139` `.XXXXXX` + `42` `.2025` + `8` cross-tagged)* | Serial URL suffixes (`.341541`, `.502469`, `.789992`, `.754565`, `.2025`), African/South Asian Reels warm-up graphs, locked `UID 1000...` shells | **DISARM `TA05 / T0049`** (Flood Information Space / Synthetic Swarm) |\n| **Pillar 1C: Unicode Cyrillic-Latin Homoglyphs & Raw CSV Templates** | **`63`** | Substitution of Cyrillic `i` (`U+0456`), `s` (`U+0441`), `a` (`U+0430`), `o` (`U+043E`), `e` (`U+0435`) with Latin ASCII `i` (`U+0069`), `c` (`U+0063`), `a` (`U+0061`), `o` (`U+006F`), `e` (`U+0065`); raw CSV column header `Higher Education Kyiv` retained in profile education field | **DISARM `TA06 / T0056`** (Bypass Content Filters via Character Obfuscation) |\n| **Pillar 1D: YouTube `ru-RU` System Locale Botfarm (`-[U+044A] / -[U+044B] / -[U+044D]`)** | **`1,434`** *(+ `117` cross-thread bridge bots)* | 24-character `UC...` Channel IDs with auto-generated Russian OS locale suffixes (`U+044A` hard sign, `U+044B` yery, `U+044D` reverse-e) absent from the Ukrainian alphabet | **DSA Art. 34 & 35** / **EU Code of Practice Commitment 18** |\n| **Active Unblocked YouTube Mirrors of NSDC-Sanctioned Subjects (`UA_OPEN: True`)** | **`15`** *(+ `24` nodes in `sanctioned_ru_project`)* | Open country code `\"UA\"` in `availableCountryCodes` (`249` countries), `PlayabilityStatus: OK` without VPN in Ukraine, amplified by `ru-RU` bot accounts | **DSA Art. 34(1)(a)-(c)** / **EU Accession Chapter 31 CFSP** |\n| **Pillar 1E: Selective Moderation Schedule & Synchronous Russian State Media Relays** | **`76` dossiers / `33` state media relays** | Deletion of verified citizen comments citing state registries (`EDR`, `EDRSR`, `Prozorro`) while preserving Russian bots in top-1..top-5 (`Most Relevant`) + pickup by TASS / RIA Novosti / Ukraina.ru within `15–120 min` | **DISARM `TA08 / T0046` & `TA09 / T0116`** / **Council Reg. (EU) 833/2014 Art. 2f** |\n\n### 2. Pillars 1A & 1B: Forensic Anatomy of Facebook Numeric `615...` UID Pools & 6-Digit Batch Autoregs (`.XXXXXX` / `.2025`)\n\nAcross Meta Platforms (Facebook), initial comment-thread saturation within the first `5–25 minutes` of a target post relies on two standardized account-generation architectures:\n1. **Numeric `615...` Series Pool (`78` verified UIDs spanning `61551048542691` – `61595115906538`):** accounts are batch-registered without vanity usernames (`https://www.facebook.com/profile.php?id=615...`), switched into `Digital Creator` professional dashboard mode to mask empty friend lists behind follower/following counters, and exhibit zero biographical metadata (`0` city, `0` education, `0` workplace).\n2. **6-Digit Batch Suffixes (`.XXXXXX`) & `.2025` Wave (`189` verified accounts):** accounts bearing automated 6-digit numeric URL suffixes and Russian-to-ASCII transliteration script defects (`ura.savickij.341541` `UID 100058459429900`, `denis.borisov.502469`, `roman.novikov.789992` `UID 100027614651933`, `larisa.kovaleva.754565` `UID 100006721178005`, `ludmila.vasenko.679280` `UID 100059986742650`, `aleksandr.mihajlovskij.343301` `UID 100029970560548`, simultaneous doubled-name factory clones `galina.galina.772599` `UID 100027749074181` and `galina.galina.270337` `UID 100039224829973`, and `.2025` batch shells `jura.andrushko.2025` `UID 100053283187923`, `fedor.fedir.2025` `UID 100026693023411`, `mihail.gubanov.2025` `UID 100078263889441`, `aleksei.sokolenko.2025` `UID 100040230424870`).\n\n| Verified Facebook UID | Profile Handle / Display Name | CIB Category | Technical Forensic Signature & Observed Thread Deployment |\n|---|---|---|---|\n| **`61564945321609`** | `Vitaliy Melnychenko` (`id=61564945321609`) | `numeric_615_autoreg` | `Digital Creator` shell (`67` followers / `78` following, `0` city, `0` education, `0` bio) posting Russian-calque invective in B. Bereza's thread (`30–31.10.2026`, Supreme Court lawsuit against NSDC sanctions) |\n| **`61594656912880`** | `Andrey Olshansky` (`id=61594656912880`) | `homoglyph_farm` / `615...` | Locked autoreg pinned at **Rank #1 (`Most Relevant`)** on O. Goncharenko's wall under the US State Dept **$2.1B FMS sale of 500 Patriot PAC-3 MSE interceptors**: evades Meta filters via **3 Latin ASCII homoglyphs `i` (`U+0069`)** embedded inside Cyrillic words |\n| **`61582015375009`** | `Nataliya Kachan` (`id=61582015375009`) | `numeric_615_autoreg` | `6158...` numeric autoreg deploying Russian-surzhyk lexical calques on O. Stadnik's default wall under his wartime elections post (`pfbid0dTQUTV...`) |\n| **`61582753621994`** | `Lyubava Prekrasna` (`id=61582753621994`) | `numeric_615_autoreg` | Inverted follower ratio (`82` followers / `433` following), posting two consecutive social-collapse comments on O. Popenko's default wall (`29.10.2026`, `pfbid02UxkuA3...`) |\n| **`61571748419988`** | `Ulyana Mykolaychuk` (`id=61571748419988`) | `numeric_615_autoreg` | Paired `6157...` numeric autoreg deployed in the same O. Popenko thread (`29.10.2026`) |\n| **`61592089256402`** | `Andriy Andriyiv` (`id=61592089256402`) | `numeric_615_autoreg` | `6159...` numeric autoreg admitted into the restricted comment whitelist on M. Bezuhla's page (`28–29.10.2026`) |\n| **`61585982231409`** | `Druzenko. Krayina.` (`id=61585982231409`) | `pseudo_page` / `615...` | Brand-hijack pseudo-page on the `6158...` numeric range (`36k` followers, Reels with `236k` views), cross-seeding threads on D. Chekalkin and O. Drozdov |\n| **`100058459429900`** | `Yura Savitskyi` (`ura.savickij.341541`) | `batch_autoreg_6digit` | 65k-follower aggregator node with `.341541` 6-digit suffix and Russian surname spelling calque, amplifying night anti-mobilization Reels (`02–03.11.2026`) |\n| **`100027614651933`** | `Roman Novikov` (`roman.novikov.789992`) | `batch_autoreg_6digit` | Locked Russian-language 6-digit batch autoreg (`.789992`, `0` city, `0` education, `0` bio) in top anti-mobilization comment slots |\n| **`100006721178005`** | `Larisa Kovaleva` (`larisa.kovaleva.754565`) | `batch_autoreg_6digit` | 6-digit batch profile in `Digital Creator` mode (`99` followers / `149` following, `0` bio) deployed in the same thread |\n| **`100027749074181`** & **`100039224829973`** | `Galina Galina` (`galina.galina.772599` & `galina.galina.270337`) | `batch_autoreg_6digit` | Two simultaneous doubled-name `Galina Galina` factory clones with 6-digit suffixes `.772599` and `.270337` deployed in the exact same thread |\n| **`100053283187923`** | `Jura Andrushko` (`jura.andrushko.2025`) | `autoreg_2025` | Serial `.2025` wave autoreg pinned at Rank #1 on the default comment wall |\n\n### 3. Pillar 1C: Mixed-Script Unicode Homoglyph Obfuscation & Raw CSV Import Artifacts (`63` Accounts)\n\nTo bypass automated toxicity classifiers and keyword spam filters on Meta and YouTube, Russian botfarm operators systematically employ **mixed-script Unicode homoglyph substitution**: within Cyrillic words targeting air defense, mobilization, or state institutions, individual Cyrillic code points are replaced with visually identical Latin ASCII characters:\n- Cyrillic **`i` (`U+0456`)** $\rightarrow$ Latin ASCII **`i` (`U+0069`)** (documented in `UID 61594656912880` Andrey Olshansky, `UID 100033677342526` Eva Henova, `UID 61571489427922` Andrey Semenov);\n- Cyrillic **`s` (`U+0441`)** $\rightarrow$ Latin ASCII **`c` (`U+0063`)** and Cyrillic **`o` (`U+043E`)** $\rightarrow$ Latin ASCII **`o` (`U+006F`)** (`ludmila.bondarenko.45557`, `UID 61555369634837` `tamara.cimona`, and the `Heorhiy Mazur` account containing 4 homoglyphs in a single sentence);\n- **Unedited CSV Column Header Artifact (`UID 100011388163548` — `kamila.zalevska`):** during automated bulk account creation from a spreadsheet, the profile's `Education` field literally retained the raw CSV column header **`Higher Education Kyiv`**, while its `Instagram` field retained an unparsed session hash string.\n\n### 4. Pillar 1D: YouTube `ru-RU` System Locale Botfarm (`-[U+044A] / -[U+044B] / -[U+044D]`, `1,434` `UC...` Channels), `117` Cross-Thread Bridge Bots & `15` Active NSDC Mirrors\n\nOn YouTube (Google Ireland Limited), our audit documented **`1,434` automated channels (`UC...`)** masquerading as Ukrainian citizens while carrying an immutable forensic indicator of their creation environment. When bulk registration scripts create YouTube accounts with Cyrillic display names inside a browser or anti-detect environment configured with a **Russian system locale (`ru-RU`)**, YouTube's automated `@handle` generator appends a 3-to-4 character disambiguation suffix drawn from the Russian phonetic table, injecting the strictly Russian letters **hard sign (`U+044A`)**, **yery (`U+044B`)**, and **reverse-e (`U+044D`)** — characters that **do not exist in the Ukrainian alphabet or Ukrainian keyboard layout**.\n\nCross-thread graph analysis across `40,224` parsed comments (`39,311` on YouTube and `913` on Facebook) identified **`117` cross-thread bridge bots (`cross_lom_bridge_bots`)** operating synchronously across multiple independent political comment threads and NSDC-sanctioned mirror channels:\n\n| Technical YouTube `Channel ID` (`UC...`) | Auto-Generated Handle (Transliterated / Unicode) | Russian OS Locale Forensic Marker | Simultaneous Dossiers Amplified (`/en/dossiers`) |\n|---|---|---|---|\n| **`UCYRzMzblP2LFgVfwBYD3k-A`** | `@Bohdan-[U+044A]6yu6k` | Suffix `-[U+044A]6yu6k`: Russian hard sign **`U+044A`** | **`4` dossiers:** `bereza`, `chekalkin`, `poroshenko`, `zheleznyak` |\n| **`UCEjQMF0wEKSm2pGj6yfXulg`** | `@VolodymyrPasichnyk-v2[U+044D]` | Suffix `-v2[U+044D]`: Russian letter **`U+044D`** | **`4` dossiers:** `bereza`, `chekalkin`, `drozdov`, `nudniy-pens` |\n| **`UCAH_yVgWKhk_cVMg5WXTwkQ`** | `@MykolaFomenko-n1[U+044A]` | Suffix `-n1[U+044A]`: Russian hard sign **`U+044A`** | **`4` dossiers:** `ariev`, `chekalkin`, `nudniy-pens`, `poroshenko` |\n| **`UCbnz80Gw4QJFWxC23eXXlkA`** | `@Lyza-s4s9[U+044A]` | Suffix `-s4s9[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `poroshenko` (+ NSDC mirror `UC7cv4INhQQwfJqiU-mel0QQ`) |\n| **`UCAGV2szZbDkLVjxw1hFxyHQ`** | `@VolodymyrTarasyuk-[U+044A]7sh` | Suffix `-[U+044A]7sh`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `shabunin-nikolov`, `zheleznyak` |\n| **`UCp7KKsDkuV5sGm-R2wI3JoQ`** | `@OlehPavlyk-[U+044B]4e` | Suffix `-[U+044B]4e`: Russian letter **`U+044B`** | **`3` dossiers:** `mosiychuk`, `sanctions-mirrors`, `soskin` |\n| **`UCG5fDE3L8jh2cILCvkGk40w`** | `@Stepan-zh4[U+044A]2y` | Suffix `-zh4[U+044A]2y`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `drozdov` |\n| **`UCCEH0ScioEYKy2Q0AYJD2rg`** | `@LarysaKravchenko-p7[U+044A]` | Suffix `-p7[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `chekalkin`, `shabunin-nikolov` |\n| **`UCWor0UszzYY3UF2oWYjfGxA`** | `@EvhenyyaSavchenko-v3[U+044A]` | Suffix `-v3[U+044A]`: Russian hard sign **`U+044A`** | **`3` dossiers:** `bereza`, `goncharenko`, `sanctions-mirrors` |\n| **`UCx2BMxA-1IIAYsuA5n_mYKg`** | `@Lena-[U+044B]8h9sh` | Suffix `-[U+044B]8h9sh`: Russian letter **`U+044B`** | **`3` dossiers:** `bereza`, `goncharenko`, `simutin-korupciya-info` |\n| **`UCEgaMRr4nEKESiPRNNzj1sw`** | `@Kamy-[U+044D]4s` | Suffix `-[U+044D]4s`: Russian letter **`U+044D`** | **`3` dossiers:** `ariev`, `kushch`, `shariy` |\n| **`UCFpYTgpENsX2ao42oGl-MZg`** | `@viktorserdyuk-[U+044B]5o` | Suffix `-[U+044B]5o`: Russian letter **`U+044B`** | **`3` dossiers:** `bereza`, `chekalkin`, `poroshenko` |\n\nThis same `ru-RU` bot pool actively amplifies **`15` unblocked YouTube mirror and relay channels of NSDC-sanctioned subjects** (`UCyDRD4u-G9rUTlUGRein_hw`, `UC-uCKJq_bRs5pFE8bMNy6kQ`, `UCyeoETklSyLA-jQe565U03g`, `UC24jZmCZLi3w4j4H8MjJGEg`, `UCTvUuw11b844xI-JFT7tQew`, `UC7cv4INhQQwfJqiU-mel0QQ`, `UCYS8kqVQzP4pfpmw5XIagMA`, `UCvckh1Db64fbmfiddPoZ6LA`, `UC_iPAFzu0nkZkn9vaeWdPrA`, `UCS4aVDaOvIK0-3voQv49pKQ`, `UCUEiXr94u-obIqTkMAODg2w`, `UCurgcc4qcz3-_ibm3XxKUjQ`, `UCBSYa5zQvjL-Y2D89L_OyEw`, `UCiV8lEPfB0NVwfgWuSXSaiQ`, `UCgtxz5_xa6xkDTghNPkuRYw`) streaming into Ukraine with open country code `availableCountryCodes: \"UA\"`.\n\n### 5. Pillar 1E: 5-Stage Selective Moderation Schedule & Binary Relay to TASS / RIA Novosti / Ukraina.ru (`33` Documented Relays)\n\nA core forensic finding for EU regulators (**DG CONNECT** and **EEAS StratCom**) is that Russian synthetic botfarms on Facebook and YouTube operate as **Stages 2 and 3 of an integrated 5-stage cross-platform FIMI relay pipeline**:\n1. **`T+00..05 min` (Narrative Seeding / DISARM `TA01`):** Publication of the primary narrative on a target page (e.g., attacking US FMS deliveries of 500 Patriot PAC-3 MSE missiles or domestic cruise/ballistic missile programs).\n2. **`T+05..25 min` (Coordinated Synthetic Swarm Injection / DISARM `TA05`):** Synchronous entry of `615...` numeric UIDs, `.XXXXXX` batch autoregs, homoglyph accounts, and `ru-RU` YouTube bots (`-[U+044A]/-[U+044B]/-[U+044D]`) cross-liking each other to capture the top slots of the default `Most Relevant` comment view.\n3. **`T+15..45 min` (Selective Moderation Schedule — Criterion #1 / DISARM `TA06`):** Page moderators systematically delete comments from verified Ukrainian citizens citing official state registries (`EDR`, `EDRSR`, `Prozorro`) and block their authors, while **leaving Russian synthetic bot accounts (`615...`, `.XXXXXX`, homoglyphs, `ru-RU`) untouched at Rank #1..#5 of the default thread view**.\n4. **`T+30..90 min` (VLOP/VLOSE Algorithmic Recommender Exploitation / DSA Art. 34 & 35):** Skewed comment sentiment and synthetic engagement velocity trigger Meta and YouTube recommender promotion.\n5. **`T+15..120 min` (Synchronous Binary Relay to Russian State Media — Criterion #2 / Council Reg. 833/2014 Art. 2f):** EU-sanctioned Russian federal state media (**FSUE MIA Rossiya Segodnya / RIA Novosti / Ukraina.ru**, **TASS**, **Lenta.ru**) syndicate the post and cite the curated bot comments as \"Ukrainian public outrage\" (including *Ukraina.ru* composite article `1084102674` of `27.10.2026, 16:31` simultaneously citing V. Barvinenko, O. Goncharenko, and Y. Kasyanov against the FP-5 'Flamingo' missile program; *RIA Novosti* articles `2127422181` and `21277...` of `28–29.10.2026`; *Ukraina.ru* dispatches `1084063586`, `1084040964`, `1084064177`, `1084033099` and *Lenta.ru* reports of `24–29.10.2026`).\n\n### 6. Technical Recommendations for Meta CIB Team, Google TAG / YouTube & European Commission DG CONNECT (DSA Enforcement)\n\n1. **For Meta Platforms Ireland Limited (CIB Threat Intelligence & DSA Art. 34/35 Compliance):**\n   - deploy automated cluster detection and batch remediation targeting `profile.php?id=615...` accounts in `Digital Creator` mode with zero biographical graph and 6-digit `.XXXXXX` / `.2025` batch autoregs (`78` + `189` verified profiles in `/feeds/fimi-cib-dsa-matrix.json`);\n   - implement mixed-script Cyrillic-Latin homoglyph normalization (`U+0069` $\rightarrow$ `U+0456`, `U+0063` $\rightarrow$ `U+0441`, `U+0061` $\rightarrow$ `U+0430`, `U+0065` $\rightarrow$ `U+0435`, `U+006F` $\rightarrow$ `U+043E`) in the `Most Relevant` comment-ranking pre-processor and flag unedited CSV profile fields (`Higher Education Kyiv` in `UID 100011388163548`).\n2. **For Google Threat Analysis Group (TAG) & YouTube Trust & Safety (DSA Art. 34/35 Compliance):**\n   - execute batch forensic verification and takedown of the **`1,434` YouTube channels (`UC...`)** combining Ukrainian-persona display names with auto-generated Russian `ru-RU` OS locale suffixes (`U+044A`, `U+044B`, `U+044D`), prioritizing the **`117` cross-thread bridge bots** (`UCYRzMzblP2LFgVfwBYD3k-A`, `UCEjQMF0wEKSm2pGj6yfXulg`, `UCAH_yVgWKhk_cVMg5WXTwkQ`, etc.);\n   - extend beneficial-owner geoblocking in Ukraine (`availableCountryCodes`) across all **`15` active mirror channels (`UC...`)** operating on behalf of NSDC-sanctioned individuals.\n3. **For the European Commission — DG CONNECT (Directorate F, DSA Systemic Risk & FIMI Enforcement) & EEAS StratCom:**\n   - incorporate **selective comment moderation preserving synthetic bot swarms (Criterion #1)** and **synchronous relay to Russian state media designated under Article 2f of Regulation (EU) No 833/2014 (Criterion #2)** into systemic risk audits of VLOPs/VLOSEs under **Articles 34, 35, and 40 of the Digital Services Act**.\n\nAll machine-readable datasets are available at:\n- **Interactive FIMI / CIB Matrix:** `/en/bots#dsa-fimi-cib-matrix` (UA: `/bots#dsa-fimi-cib-matrix`)\n- **EU DSA / DISARM JSON Feed:** `/feeds/fimi-cib-dsa-matrix.json`\n- **Full Bot Registry CSV Export:** `/exports/en_bots.csv` (UA: `/exports/bots.csv`)",
    "related_tool_or_link": "/en/bots#dsa-fimi-cib-matrix"
  },
  {
    "id": "M-20",
    "slug": "method-20-brussels-ricochet-eu-near-fisma-edr-sanctions-audit-2026",
    "date": "2026-11-07",
    "category": "TECHNICAL KITCHEN / CHALLENGE",
    "badge": "METHOD #20 · BRUSSELS RICOCHET: DG NEAR / DG FISMA x UKRAINE EDR (12 CLUSTERS) + 15 NSDC YOUTUBE MIRRORS",
    "title": "'The Brussels Ricochet': Consolidated Audit of 12 Unliquidated Russian Corporate Clusters in Ukraine's Live State Registry (EDR UO.xml) and 15 Active YouTube Mirrors of NSDC-Sanctioned Subjects under European Commission DG NEAR (Ukraine Facility Regulation 2024/792, Chapters 23/24) and DG FISMA (AMLD UBO) Benchmarks",
    "title_en": "'The Brussels Ricochet': Consolidated Audit of 12 Unliquidated Russian Corporate Clusters in Ukraine's Live State Registry (EDR UO.xml) and 15 Active YouTube Mirrors of NSDC-Sanctioned Subjects under European Commission DG NEAR (Ukraine Facility Regulation 2024/792, Chapters 23/24) and DG FISMA (AMLD UBO) Benchmarks",
    "subtitle": "Itemized compliance matrix of 27 live-monitored regulatory blind-spot indicators as of November 2026: 12 corporate clusters in the live UO.xml of the Ministry of Justice of Ukraine (27 active legal entities by EDRPOU code — from Bucha-district LLC Sviatopetrivskyi Kvartal 45945891 registered on 2026-01-06 to a 100% Russian Federation citizen, Rostec subsidiary 31351836, and Rosatom/TVEL joint venture 37705342 to unenforced HACC confiscation judgments No. 991/661/24 on V. Bohuslaiev 37617817 and No. 991/3157/22 on V. Yevtushenkov 00216757, defense Prozorro contractors with active FNS RF TINs 37386100 and 36676494, and the 2026-09-29 injunction blocking ARMA in Case No. 160/30983/26) alongside 15 unblocked YouTube mirrors (availableCountryCodes: UA) of subjects designated under 20 NSDC Presidential Decrees.",
    "read_time": "15 min read",
    "read_time_min": 15,
    "pinned": false,
    "tags": [
      "DG NEAR",
      "DG FISMA",
      "Ukraine Facility 2024/792",
      "AMLD UBO Art 30",
      "EDRPOU 45945891",
      "EDRPOU 31351836 Rostec",
      "EDRPOU 37705342 Rosatom TVEL",
      "EDRPOU 37617817 Bohuslaiev",
      "EDRPOU 00216757 Yevtushenkov",
      "EDRPOU 34704105 RZVA",
      "EDRPOU 37386100 Farun",
      "YouTube UA Mirrors"
    ],
    "summary": "Consolidated audit of 12 unliquidated Russian corporate clusters in Ukraine's live State Registry (27 active legal entities by EDRPOU code) and 15 active YouTube mirrors of NSDC-sanctioned subjects for European Commission DG NEAR and DG FISMA monitoring",
    "lead": "Itemized compliance matrix of 27 live-monitored regulatory blind-spot indicators as of November 2026: 12 corporate clusters in the live UO.xml of the Ministry of Justice of Ukraine (27 active legal entities by EDRPOU code — from Bucha-district LLC Sviatopetrivskyi Kvartal 45945891 registered on 2026-01-06 to a 100% Russian Federation citizen, Rostec subsidiary 31351836, and Rosatom/TVEL joint venture 37705342 to unenforced HACC confiscation judgments No. 991/661/24 on V. Bohuslaiev 37617817 and No. 991/3157/22 on V. Yevtushenkov 00216757, defense Prozorro contractors with active FNS RF TINs 37386100 and 36676494, and the 2026-09-29 injunction blocking ARMA in Case No. 160/30983/26) alongside 15 unblocked YouTube mirrors (availableCountryCodes: UA) of subjects designated under 20 NSDC Presidential Decrees.",
    "lead_en": "Itemized compliance matrix of 27 live-monitored regulatory blind-spot indicators as of November 2026: 12 corporate clusters in the live UO.xml of the Ministry of Justice of Ukraine (27 active legal entities by EDRPOU code — from Bucha-district LLC Sviatopetrivskyi Kvartal 45945891 registered on 2026-01-06 to a 100% Russian Federation citizen, Rostec subsidiary 31351836, and Rosatom/TVEL joint venture 37705342 to unenforced HACC confiscation judgments No. 991/661/24 on V. Bohuslaiev 37617817 and No. 991/3157/22 on V. Yevtushenkov 00216757, defense Prozorro contractors with active FNS RF TINs 37386100 and 36676494, and the 2026-09-29 injunction blocking ARMA in Case No. 160/30983/26) alongside 15 unblocked YouTube mirrors (availableCountryCodes: UA) of subjects designated under 20 NSDC Presidential Decrees.",
    "content_md": "### 1. The European Monitoring Framework: Why Uncleaned UBO Records in Kyiv Are Direct Compliance Benchmarks for DG NEAR and DG FISMA in Brussels\n\nUkraine's EU accession negotiation framework under **Cluster 1 'Fundamentals' (Chapter 23 'Judiciary and Fundamental Rights' and Chapter 24 'Justice, Freedom and Security')**, the financial governance safeguards of **Regulation (EU) 2024/792 establishing the Ukraine Facility (Articles 16, 35, and 36)**, and **Directive (EU) 2015/849 / Regulation (EU) 2024/1624 (EU AMLD — Article 30 on the accuracy, adequacy, and currency of national Ultimate Beneficial Ownership registries)** establish three non-negotiable engineering benchmarks:\n\n* **UBO Registry Integrity (DG FISMA / AMLD Article 30):** The Unified State Register of Legal Entities (`EDR / UO.xml`), administered by the Ministry of Justice of Ukraine, must maintain accurate, current, and timely updated beneficial ownership (`UBO`) records — particularly after final confiscation judgments of the High Anti-Corruption Court (`HACC`) and binding National Security and Defense Council (`NSDC`) sanctions decrees take effect.\n* **Public Procurement & Seized Asset Management Safeguards (DG NEAR / Ukraine Facility Regulation (EU) 2024/792):** Electronic public procurement via `Prozorro` and asset management tenders administered by `ARMA` must not remain accessible to companies whose active UBOs in `UO.xml` are Russian Federation citizens holding active 12-digit Russian Federal Tax Service (`FNS RF`) TINs, Russian defense/nuclear state corporations (`Rostec`, `Rosatom`), or legal entities directly designated by 8-digit `EDRPOU` code under NSDC sanctions decrees.\n* **Sanctions Enforcement & Information Integrity Alignment (Cluster 6 — Chapter 31 CFSP & Chapter 10 / EU DSA):** Sanctions decrees that geoblock a designated individual's legacy YouTube channel while leaving 15 active mirror and laundering channels open on Ukrainian territory without VPN (`availableCountryCodes: \"UA\"`, `249` countries, `PlayabilityStatus: OK`) create a structural enforcement gap exploited by coordinated Russian bot networks.\n\n---\n\n### 2. Matrix I: 12 Unliquidated Russian Corporate Clusters in Ukraine's Live State Registry (`UO.xml`, Status `REGISTERED / ACTIVE`)\n\nConsolidated cross-registry auditing of [`/en/edr`](/en/edr) and [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05) documents **12 primary corporate clusters (`27` active legal entities by 8-digit EDRPOU code)** as of November 2026:\n\n| Cluster ID | EDRPOU Code (and Linked Group Entities) | Legal Entity Name in Ukraine's EDR (`UO.xml`) & Authorized Capital | Russian UBO / Founder, FNS RF TIN / OGRN & Ukrainian RNOKPP | Legal & Sanctions Basis (Presidential / NSDC Decree, HACC / Court Case, Prozorro Contracts) | EU Monitoring Benchmark (DG NEAR / DG FISMA) |\n|---|---|---|---|---|---|\n| **`UA-EDR-01`** | **`45945891`** | **LLC SVIATOPETRIVSKYI KVARTAL** (Kyiv Region, Bucha District; record `1010391020000004618` of **`2026-01-06`**) · Capital: **`UAH 11,104,808.19`** | Sole founder (`100%`), direct UBO (`100%`), and director in `UO.xml`: **`Serhii Moshchyk; citizenship: Russian Federation`** | Initial state registration of a new LLC to a 100% Russian Federation citizen on **`2026-01-06`** in direct breach of **CMU Moratorium Resolution No. 187 of 2022-03-03** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 23):** absence of automated validation rules blocking new company registrations for Russian Federation citizens in the 4th year of full-scale war |\n| **`UA-EDR-02`** | **`31351836`** | **LLC FOREIGN ECONOMIC ASSOCIATION TEKHNOPROMEKSPORT** (Kyiv; record `10681200000007702`) · Capital: **`UAH 904,315,168.00`** | Founder (`99.97%` — **`UAH 904,015,168.00`**): **`LLC UK DKM-ENGINEERING; residency: Russian Federation`** (engineering perimeter of Russian State Corporation **Rostec**); director `O. M. Babiichuk` | **CMU Resolution No. 187 of 2022-03-03** and **Law of Ukraine on Sanctions No. 1644-VII** (Articles 4, 5-1 on confiscation of aggressor-state assets) | **DG FISMA / DG NEAR (Ch. 23, 31):** active Kyiv subsidiary of Rostec's Tekhnopromeksport engineering group holding `UAH 904.32M` in registered capital without confiscation or termination |\n| **`UA-EDR-03`** | **`37705342`** *(+ co-founder `36282830`)* | **PrJSC NUCLEAR FUEL PRODUCTION PLANT** (Smyline, Kirovohrad Region; record `14311020000000677`) · Capital: **`UAH 161,500,000.00`** | Co-founder (`50% minus 1 share` — **`UAH 80,749,990.00`**): **`JSC TVEL; residency: Russian Federation`** (nuclear fuel division of State Corporation **Rosatom**) | **Presidential Decree of Ukraine No. 82/2023 of 2023-02-19** (50-year blocking NSDC sanctions against Russian `JSC TVEL`) | **DG FISMA / DG NEAR (Ch. 15 Energy & Ch. 31 CFSP):** 3.5 years after Decree No. 82/2023, Rosatom's sanctioned fuel division remains an official co-founder of a Ukrainian nuclear PrJSC in live `UO.xml` |\n| **`UA-EDR-04`** | **`37617817`**, **`31154435`** *(+ `13616412`, `38146389`, `43779663`)* | **LLC VINNYTSIA AVIATION PLANT (`37617817`, `UAH 17,539,134.21`)** & **ALC IC MOTOR-GARANT (`31154435`, `UAH 12,312,000.00`)** | Direct UBO in live `UO.xml`: **`Viacheslav Bohuslaiev`** (`100%` in `37617817`; `83.6%` + `9.9%` son `O. V. Bohuslaiev` in `31154435`), Russian passport holder | **Presidential Decree No. 191/2023 of 2023-04-01**, SBU treason indictment (Arts. 111-1, 111-2 CCU), and **HACC confiscation judgment in Case No. 991/661/24 (April 2024)**; **`16` Prozorro contracts in `37617817` totaling `UAH 25.04M` (including `UA-2026-07-10-002466-a` and `UA-2026-06-19-009767-a` for SESU and military unit `A3840`)** and `824` contracts in `31154435` (through `UA-2025-10-20-001643-a`) | **DG NEAR (Ukraine Facility Art. 35/36, Ch. 23) / DG FISMA (AMLD Art. 30):** failure to execute a final HACC confiscation ruling in the UBO registry for 2.5 years while the entity wins defense `Prozorro` contracts in June-July 2026 |\n| **`UA-EDR-05`** | **`00216757`**, **`40909120`** *(+ `38710730`)* | **JSC UKRAINIAN TRANSFORMER DESIGN INSTITUTE (`JSC VIT`, `00216757`)** & **LLC ITM-UKRAINA (`40909120`)** · Group capital: **`UAH 76,862,118.00`** | UBO in live `UO.xml` `<BENEFICIARIES>` (`00216757`): **`Vladimir Yevtushenkov; citizenship: Russian Federation; 34.21% share`** (AFK Sistema / Kronstadt Orion UAVs) | **Presidential Decree No. 637/2022 of 2022-09-07** and landmark **HACC confiscation judgment of 2022-09-01 in Case No. 991/3157/22**; **`42` Prozorro contracts in `00216757` totaling `UAH 52,332,239.60`** (including `UA-2024-09-17-000133-a`, `PrJSC Ukrhydroenergo`, `Ukrzaliznytsia`) | **DG NEAR (Ch. 23) / DG FISMA (AMLD Art. 30):** 4 years after HACC judgment No. 991/3157/22, Russian defense oligarch V. Yevtushenkov remains recorded as UBO in live `UO.xml` |\n| **`UA-EDR-06`** | **`39564144`** *(founded by `05763814`)* | **LLC V.N.V.** (Kyiv; record `10701360000056389`, subsidiary of `PJSC KVBZ` `05763814`) · Capital: **`UAH 26,497,088.00`** | UBO in live `UO.xml`: **`Stanislav Gamzalov; citizenship: Russian Federation; 25% share`** (perimeter of Russian defense supplier Magomed Gamzalov) | **Presidential Decree No. 726/2022 of 2022-10-19** and HACC confiscation of 25% in PJSC KVBZ; `Prozorro` railway procurement portfolio across Ukrzaliznytsia branches — **`UAH 956,802,519.34`** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 5 Public Procurement):** retention of a Russian Federation citizen from a sanctioned defense-supply family as 25% UBO of a major railway contractor subsidiary |\n| **`UA-EDR-07`** | **`34704105`** | **LLC VYSOKOVOLTNYI SOIUZ - RZVA** (Rivne; record `16081020000004291`) · Capital: **`UAH 72,000,000.00`** | Ukrainian plant of Yekaterinburg holding `CJSC Vysokovoltny Soyuz` (RF), held via Cyprus-registered `Unaco Asset Management Limited` | **Direct 8-digit code EDRPOU `34704105` sanctioned under Presidential Decree No. 726/2022 of 2022-10-19**; despite direct entity sanctions — **`170` Prozorro contracts totaling `UAH 94,071,594.98`** (including `UA-2024-12-12-012941-a` for National Police in Rivne Region and regional grid operators) | **DG NEAR (Ch. 5 Public Procurement & Ukraine Facility Art. 16):** direct participation in public procurement by a legal entity whose exact 8-digit EDRPOU code is under blocking NSDC sanctions |\n| **`UA-EDR-08`** | **`37386100`**, **`36676494`** *(+ `31976055`, `30088756`)* | **LLC FARUN (`37386100`, Mykolaiv, `UAH 15,000,000.00`)** & **LLC EMBAVUD UKRAINA (`36676494`, Sambir, `UAH 96,500,000.00`)** *(+ **LLC VMK-UKRAINA** `31976055`, `UAH 205,000,000.00`)* | • In `37386100`: 51% UBO & director **`Oleksandr Ohar`** (RF citizen, active **FNS RF personal TIN `550519842406`**, owner of active Belgorod `LLC Ambika` **FNS RF TIN `3102635710`**).<br>• In `36676494`: 34% UBO **`Tamara Poliakova`** (RF citizen, active Moscow **FNS RF personal TIN `773270932652`**). | **`Dual-TIN (UA EDR x FNS RF x Defense Prozorro)` perimeter:**<br>• `37386100`: **`35` Prozorro contracts for `UAH 7.91M`** supplying strategic defense plants **SE Zorya-Mashproekt**, **SE Malyshev Plant**, and **SE ZhMZ Vizar** (through `UA-2023-11-27-010856-a`).<br>• `36676494`: **`14` Prozorro contracts for `UAH 16.29M`** (including **military unit `A3817`** and 2025 tender `UA-2025-01-16-012465-a`). | **DG NEAR (Ch. 5 Public Procurement) / DG FISMA (AML/CFT):** participation of Ukrainian LLCs controlled by active Russian taxpayers (`550519842406`, `3102635710`, `773270932652`) in Ukrainian defense plant and military unit procurement |\n| **`UA-EDR-09`** | **`43978883`**, **`24565511`**, **`42751872`** *(+ `41278559`)* | **CONSORTIUM DORLIDER (`43978883`, `UAH 12,000,000.00`)**, **PE POLTAVABUDTSENTR (`24565511`)**, **LLC GRANIT-001 (`42751872`, `UAH 10,010,000.00`)** | UBO (`58.33%` in `43978883`): **`Vahinak Amirkhanian`** (road-building cartel of fugitive to RF Araik Amirkhanian) | **Direct 8-digit codes EDRPOU `43978883`, `24565511`, `42751872` sanctioned under Presidential Decrees No. 169/2021 of 2021-04-21 and No. 576/2024 of 2024-08-24**; historical `Prozorro` portfolio exceeds **`UAH 10.84B`**, all 3 entities remain active in EDR | **DG NEAR (Ukraine Facility Infrastructure Safeguards) / DG FISMA:** retention of active registry status for directly sanctioned road construction consortiums |\n| **`UA-EDR-10`** | **`42192808`**, **`31859085`**, **`22336214`** | **LLC AMC FCI PARTNERS (`42192808`, Kyiv, `UAH 7.20M`)**, **LLC AKVA-POLIANA (`31859085`, Zakarpattia, `UAH 62.33M`)**, **PE LILIIA (`22336214`, Lviv)** | • **Pavlo Fuks** (`42192808`, 100% UBO): RNOKPP `2623223319`, **FNS RF TIN `772771331428`**, OGRNIP `304770000482817`.<br>• **Vitalii Subotovskyi** (`31859085`, 35% UBO): RNOKPP `2751622872`, **FNS RF TIN `391406695590`**, Derzhheonadra Subsoil Permit **No. 5383**.<br>• **Nataliia Lavreniuk** (`22336214`, 100% UBO): RNOKPP `2745001404`, **FNS RF TIN `402718407534`**. | • P. Fuks: **Decree No. 266/2021 of 2021-06-24**, Kyiv Commercial Court Case **No. 910/12334/24 of 2025-01-13**.<br>• V. Subotovskyi: **Decree No. 612/2025 of 2025-08-23**, Art. 57 of the Subsoil Code of Ukraine.<br>• N. Lavreniuk: **Decree No. 572/2021 of 2021-11-10**. | **DG FISMA (AMLD Art. 30) / DG NEAR (Subsoil & Asset Freeze Reform):** NSDC-sanctioned individuals holding checksum-verified 12-digit Russian FNS TINs retain direct UBO control over asset management companies and strategic subsoil permit No. 5383 |\n| **`UA-EDR-11`** | **`24364528`**, **`22415322`**, **`34716646`**, **`25635581`** | **PrJSC IDS (`24364528`) / PrJSC MZMW OSKAR (`22415322`)** (`~UAH 10B`) & **LLC SMART-HOLDING (`34716646`) / PrJSC UKRGAZVYDOBUTOK (`25635581`)** (`~UAH 3.5B`) | • In `24364528` / `22415322`: Russian beneficial share of sanctioned oligarchs **M. Fridman, P. Aven, A. Kosogov**.<br>• In `34716646` / `25635581`: perimeter of sanctioned **V. Novynskyi**. | • `IDS Ukraine`: **Decrees No. 726/2022 and No. 727/2022 of 2022-10-19**; on **`2026-09-29`**, Dnipropetrovsk District Administrative Court ruling in Case **No. 160/30983/26** enjoined ARMA from signing the management agreement.<br>• `Smart-Holding`: **Decrees No. 789/2022 of 2022-11-19 and No. 43/2023 of 2023-01-24**; in Case **No. 910/15682/23**, courts annulled MinJust Order No. 1286/5 of 2023-04-10 on UBO disclosure in EDR. | **DG NEAR (Ukraine Facility Pillar I — ARMA & Judicial Reform Ch. 23/24):** paralysis of seized asset management (`~UAH 13.5B`) via administrative and commercial court injunctions in 2023-2026 |\n| **`UA-EDR-12`** | **`21725546`**, **`39690679`**, **`14351528`** *(+ `38542690`, `24845653`)* | **TULCHYN EPARCHY UOC (`21725546`)**, **SYNODAL FAMILY DEPT UOC (`39690679`, Kyiv, Lavrska St. 15)**, **HOLY DORMITION KYIV-PECHERSK LAVRA MONASTERY UOC (`14351528`)** | • In `21725546`: signatory in `UO.xml` — **`Anatolii Yeletskykh`** (FNS RF extract `YuE9965-26227649827`, Patriarch Kirill / V. M. Gundyaev FNS TIN **`770605158903`**).<br>• In `39690679` & `38542690`: unrestricted signatory — **`Vasyl Povorozniuk`** (**FNS RF personal TIN `345959589649`**, reregistered eparchy in FNS RF EGRUL under **FNS RF TIN `9402007059`**, **OGRN `1229400049669`**, extract `YuE9965-26227651407`).<br>• In `14351528`: head **`Petro Lebid`**, founder of monastery `24845653` (reregistered in FNS RF EGRUL under **FNS RF TIN `9408007129`**, extract `YuE9965-26227651553`, head D. V. Nahibin **FNS RF TIN `345920660995`**). | • A. Yeletskykh: Vinnytsia City Court verdict of `2023-08-07` in Case **No. 127/149/23** (5 years imprisonment with confiscation, transferred to RF in June 2024).<br>• V. Povorozniuk: sentenced in absentia to **11 years** under Art. 111-1(6) CCU, **Decree No. 820/2022 of 2022-12-01**.<br>• P. Lebid: **Decree No. 820/2022 of 2022-12-01**, Case **No. 757/13191/23-k**, **Law of Ukraine No. 3894-IX of 2024-08-20**. | **DG NEAR (Ch. 23/24 Rule of Law & National Security) / DG FISMA:** convicted collaborators physically residing in Russia and holding active FNS RF TINs (`345959589649`, `9402007059`, `9408007129`) retain unrestricted legal signatory authority in active Ukrainian EDR entities in Kyiv and Vinnytsia |\n\n---\n\n### 3. Matrix II: 15 Active YouTube Mirrors of NSDC-Sanctioned Subjects with Open Country Code `UA` (`availableCountryCodes: \"UA\"`)\n\nAlongside the corporate registry gaps in `UO.xml`, live YouTube telemetry as of November 2026 documents **15 active mirror and relay channels** (`YT-MIRROR-01` .. `YT-MIRROR-15`) that circumvent NSDC Presidential Decrees and stream into Ukraine without VPN (`availableCountryCodes` includes `\"UA\"`, `249` countries, `PlayabilityStatus: OK`):\n\n1. **`YT-MIRROR-01-LISOVSKIY` — `@LISOVSKIY_NEWS` (`UCyDRD4u-G9rUTlUGRein_hw`, created `2025-04-20`, `98.9K` subscribers):** joint laundering hub for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**), **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19` under Art. 111-1(6) CCU), and **Artem Dmytruk** (**Decree No. 417/2025 of 2025-06-22**). Broadcast `v=GiED_jEQlaA` of `2026-11-04` reached `190,587` views without VPN, amplified by `ru-RU` bots (`UC0GBbtv2qOiF-9bkrDQYQxA`, `UCmnqxtAexQBb88JIw09aUdA`, `UCP2svttt_l__dOCgUGiNXxA`).\n2. **`YT-MIRROR-02-LISOVSKIY-RES` — `@lisovskiy_reserve` (`UC-uCKJq_bRs5pFE8bMNy6kQ`, created `2026-10-22`):** fresh reserve backup clone of the `@LISOVSKIY_NEWS` cluster with open `\"UA\"` country code.\n3. **`YT-MIRROR-03-SHELEST` — `Stratehiia Syly` (`UCyeoETklSyLA-jQe565U03g`, created `2025-01-30`, `39.5K` subscribers):** active mirror of NSDC-sanctioned **Oleksandr Shelest** (**Decree No. 230/2025 of 2025-04-11**), amplified under broadcasts `v=StTOBP6g5BU` and `v=DFrs3k5wLg4` by `ru-RU` bots (`UCZG2ADn8ydjCyK4Wf1WZJMg`, `UCk4mjt6bagwE86-bpFx5Jyw`, `UCUJZMEy63LF1hHH_02Eg6yA`).\n4. **`YT-MIRROR-04-ARTEMNEWS23` — `@ArtemNews23` / `Artem Stream UA` (`UC24jZmCZLi3w4j4H8MjJGEg`, created `2026-02-13`, `16.8K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) and **Myroslav Oleshko** (**Decree No. 772/2023 of 2023-11-23**; videos `v=FUfzsTG0bjo`, `v=7tMkWWQVb7c`, bot `UCuFeYp_4fqq3L2MiUOCSx9Q`).\n5. **`YT-MIRROR-05-VTSEHTRESOBYTIY` — `V Tsentre Sobytii` (`UCTvUuw11b844xI-JFT7tQew`, created `2025-02-25`, `85.1K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025**) and **Kostiantyn Bondarenko** (**Decree No. 267/2025 of 2025-05-01**; bots `UCFtthorTpKPaFMszegtLXfA`, `UCC-TZfm1ehweeuGr20cFdBg`, `UCO8Y945IotBzB-PXBuxV6FQ`).\n6. **`YT-MIRROR-06-LIBERTYUA` — `@LibertyUkraine2025` / `Liberty UA` (`UC7cv4INhQQwfJqiU-mel0QQ`, created `2025-03-26`, `96.1K` subscribers):** relay channel for **I. Mosiychuk** (**Decree No. 345/2025**) and **K. Bondarenko** (**Decree No. 267/2025**), where broadcast `v=SsKwE9mUPuk` was amplified by 7 `ru-RU` locale bots (`UCfcnzL16bz0ttFW4eQMi4ug`, `UCQ9lXY1uWKOhUS0MnW4Ba3Q`, `UCVzWmpeRAKtwMS7zsRGDsgw`, `UCpcXkMUwJxST0kYzT2ovNKw`, `UC51QiSixjcPSfQujHZpMd4A`, `UCbnz80Gw4QJFWxC23eXXlkA`, `UCVLEdnwCV_PdRlbjI64Wj1A`).\n7. **`YT-MIRROR-07-LIBERTYTVUA` — `@LibertyTVUA` / `Liberty TV UA` (`UCYS8kqVQzP4pfpmw5XIagMA`, created `2025-12-02`, `16.3K` subscribers):** secondary `Liberty UA` network mirror streaming **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**).\n8. **`YT-MIRROR-08-MOSIYCHUK-CLONE` — `Ihor Mosiychuk Clone` (`UCvckh1Db64fbmfiddPoZ6LA`, created `2026-10-15`, `1.33K` subscribers):** direct eponymous clone of **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) created to bypass geoblocked channel `UCP77OTkoQnvoD08w57KJHDQ`.\n9. **`YT-MIRROR-09-GLOBAL-ARESTOVYCH` — `@GlobalArestovych96` (`UC_iPAFzu0nkZkn9vaeWdPrA`, `28.6K` subscribers):** reactivated 2013 sleeper channel streaming **Oleksii Arestovych** (**Decree No. 267/2025 of 2025-05-01**) in bypass of geoblocked channel `UCjWy2g76QZf7QLEwx4cB46g`.\n10. **`YT-MIRROR-10-APEIRON` — `@ApeironSchool` (`UCS4aVDaOvIK0-3voQv49pKQ`, `65.7K` subscribers):** commercial channel of NSDC-sanctioned **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**) accessible in Ukraine without VPN.\n11. **`YT-MIRROR-11-EXPERT-PRO` — `@Expert_channelpro` (`UCUEiXr94u-obIqTkMAODg2w`, `45.8K` subscribers):** dedicated relay channel for **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**).\n12. **`YT-MIRROR-12-PANCHENKO88` — `@DianaPanchenko88` (`UCurgcc4qcz3-_ibm3XxKUjQ`, created `2025-11-01`, `3.66K` subscribers):** eponymous mirror of treason-indicted **Diana Panchenko** (**Decree No. 23/2023 of 2023-01-15**).\n13. **`YT-MIRROR-13-GOLDARB` — `Maksym Holdarb` (`UCBSYa5zQvjL-Y2D89L_OyEw`, `223K` subscribers):** primary channel of **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19`), amplified by `ru-RU` bot `UCyJhcLcaGjrATBIDEBlyMeA`.\n14. **`YT-MIRROR-14-DMYTRUK` — `Artem Dmytruk` (`UCiV8lEPfB0NVwfgWuSXSaiQ`, created `2025-07-05`, + clone `UCVcubqawDRGG2ERUsAiv_4A`):** eponymous channel of **Artem Dmytruk** launched 13 days after **Decree No. 417/2025 of 2025-06-22**.\n15. **`YT-MIRROR-15-ZNAYPRAVDU` — `ZNAI PRAVDU` (`UCgtxz5_xa6xkDTghNPkuRYw`, created `2025-04-21`, `65.1K` subscribers):** relay channel of treason-indicted **Oleksandr Dubinskyi** (US OFAC SDN since 2021, Art. 111(1) CCU).\n\n---\n\n### 4. Interactive Verification & Open Machine-Readable Feeds\n\nAll **27 compliance indicators** (`12` corporate clusters in the live Ukrainian EDR and `15` active YouTube mirrors of NSDC-sanctioned subjects) are verified daily on the oversight card [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05), in the [`/en/edr`](/en/edr) registry section, and via the machine-readable JSON feed [`/feeds/agency-blindness.json`](/feeds/agency-blindness.json).\n",
    "body_md": "### 1. The European Monitoring Framework: Why Uncleaned UBO Records in Kyiv Are Direct Compliance Benchmarks for DG NEAR and DG FISMA in Brussels\n\nUkraine's EU accession negotiation framework under **Cluster 1 'Fundamentals' (Chapter 23 'Judiciary and Fundamental Rights' and Chapter 24 'Justice, Freedom and Security')**, the financial governance safeguards of **Regulation (EU) 2024/792 establishing the Ukraine Facility (Articles 16, 35, and 36)**, and **Directive (EU) 2015/849 / Regulation (EU) 2024/1624 (EU AMLD — Article 30 on the accuracy, adequacy, and currency of national Ultimate Beneficial Ownership registries)** establish three non-negotiable engineering benchmarks:\n\n* **UBO Registry Integrity (DG FISMA / AMLD Article 30):** The Unified State Register of Legal Entities (`EDR / UO.xml`), administered by the Ministry of Justice of Ukraine, must maintain accurate, current, and timely updated beneficial ownership (`UBO`) records — particularly after final confiscation judgments of the High Anti-Corruption Court (`HACC`) and binding National Security and Defense Council (`NSDC`) sanctions decrees take effect.\n* **Public Procurement & Seized Asset Management Safeguards (DG NEAR / Ukraine Facility Regulation (EU) 2024/792):** Electronic public procurement via `Prozorro` and asset management tenders administered by `ARMA` must not remain accessible to companies whose active UBOs in `UO.xml` are Russian Federation citizens holding active 12-digit Russian Federal Tax Service (`FNS RF`) TINs, Russian defense/nuclear state corporations (`Rostec`, `Rosatom`), or legal entities directly designated by 8-digit `EDRPOU` code under NSDC sanctions decrees.\n* **Sanctions Enforcement & Information Integrity Alignment (Cluster 6 — Chapter 31 CFSP & Chapter 10 / EU DSA):** Sanctions decrees that geoblock a designated individual's legacy YouTube channel while leaving 15 active mirror and laundering channels open on Ukrainian territory without VPN (`availableCountryCodes: \"UA\"`, `249` countries, `PlayabilityStatus: OK`) create a structural enforcement gap exploited by coordinated Russian bot networks.\n\n---\n\n### 2. Matrix I: 12 Unliquidated Russian Corporate Clusters in Ukraine's Live State Registry (`UO.xml`, Status `REGISTERED / ACTIVE`)\n\nConsolidated cross-registry auditing of [`/en/edr`](/en/edr) and [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05) documents **12 primary corporate clusters (`27` active legal entities by 8-digit EDRPOU code)** as of November 2026:\n\n| Cluster ID | EDRPOU Code (and Linked Group Entities) | Legal Entity Name in Ukraine's EDR (`UO.xml`) & Authorized Capital | Russian UBO / Founder, FNS RF TIN / OGRN & Ukrainian RNOKPP | Legal & Sanctions Basis (Presidential / NSDC Decree, HACC / Court Case, Prozorro Contracts) | EU Monitoring Benchmark (DG NEAR / DG FISMA) |\n|---|---|---|---|---|---|\n| **`UA-EDR-01`** | **`45945891`** | **LLC SVIATOPETRIVSKYI KVARTAL** (Kyiv Region, Bucha District; record `1010391020000004618` of **`2026-01-06`**) · Capital: **`UAH 11,104,808.19`** | Sole founder (`100%`), direct UBO (`100%`), and director in `UO.xml`: **`Serhii Moshchyk; citizenship: Russian Federation`** | Initial state registration of a new LLC to a 100% Russian Federation citizen on **`2026-01-06`** in direct breach of **CMU Moratorium Resolution No. 187 of 2022-03-03** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 23):** absence of automated validation rules blocking new company registrations for Russian Federation citizens in the 4th year of full-scale war |\n| **`UA-EDR-02`** | **`31351836`** | **LLC FOREIGN ECONOMIC ASSOCIATION TEKHNOPROMEKSPORT** (Kyiv; record `10681200000007702`) · Capital: **`UAH 904,315,168.00`** | Founder (`99.97%` — **`UAH 904,015,168.00`**): **`LLC UK DKM-ENGINEERING; residency: Russian Federation`** (engineering perimeter of Russian State Corporation **Rostec**); director `O. M. Babiichuk` | **CMU Resolution No. 187 of 2022-03-03** and **Law of Ukraine on Sanctions No. 1644-VII** (Articles 4, 5-1 on confiscation of aggressor-state assets) | **DG FISMA / DG NEAR (Ch. 23, 31):** active Kyiv subsidiary of Rostec's Tekhnopromeksport engineering group holding `UAH 904.32M` in registered capital without confiscation or termination |\n| **`UA-EDR-03`** | **`37705342`** *(+ co-founder `36282830`)* | **PrJSC NUCLEAR FUEL PRODUCTION PLANT** (Smyline, Kirovohrad Region; record `14311020000000677`) · Capital: **`UAH 161,500,000.00`** | Co-founder (`50% minus 1 share` — **`UAH 80,749,990.00`**): **`JSC TVEL; residency: Russian Federation`** (nuclear fuel division of State Corporation **Rosatom**) | **Presidential Decree of Ukraine No. 82/2023 of 2023-02-19** (50-year blocking NSDC sanctions against Russian `JSC TVEL`) | **DG FISMA / DG NEAR (Ch. 15 Energy & Ch. 31 CFSP):** 3.5 years after Decree No. 82/2023, Rosatom's sanctioned fuel division remains an official co-founder of a Ukrainian nuclear PrJSC in live `UO.xml` |\n| **`UA-EDR-04`** | **`37617817`**, **`31154435`** *(+ `13616412`, `38146389`, `43779663`)* | **LLC VINNYTSIA AVIATION PLANT (`37617817`, `UAH 17,539,134.21`)** & **ALC IC MOTOR-GARANT (`31154435`, `UAH 12,312,000.00`)** | Direct UBO in live `UO.xml`: **`Viacheslav Bohuslaiev`** (`100%` in `37617817`; `83.6%` + `9.9%` son `O. V. Bohuslaiev` in `31154435`), Russian passport holder | **Presidential Decree No. 191/2023 of 2023-04-01**, SBU treason indictment (Arts. 111-1, 111-2 CCU), and **HACC confiscation judgment in Case No. 991/661/24 (April 2024)**; **`16` Prozorro contracts in `37617817` totaling `UAH 25.04M` (including `UA-2026-07-10-002466-a` and `UA-2026-06-19-009767-a` for SESU and military unit `A3840`)** and `824` contracts in `31154435` (through `UA-2025-10-20-001643-a`) | **DG NEAR (Ukraine Facility Art. 35/36, Ch. 23) / DG FISMA (AMLD Art. 30):** failure to execute a final HACC confiscation ruling in the UBO registry for 2.5 years while the entity wins defense `Prozorro` contracts in June-July 2026 |\n| **`UA-EDR-05`** | **`00216757`**, **`40909120`** *(+ `38710730`)* | **JSC UKRAINIAN TRANSFORMER DESIGN INSTITUTE (`JSC VIT`, `00216757`)** & **LLC ITM-UKRAINA (`40909120`)** · Group capital: **`UAH 76,862,118.00`** | UBO in live `UO.xml` `<BENEFICIARIES>` (`00216757`): **`Vladimir Yevtushenkov; citizenship: Russian Federation; 34.21% share`** (AFK Sistema / Kronstadt Orion UAVs) | **Presidential Decree No. 637/2022 of 2022-09-07** and landmark **HACC confiscation judgment of 2022-09-01 in Case No. 991/3157/22**; **`42` Prozorro contracts in `00216757` totaling `UAH 52,332,239.60`** (including `UA-2024-09-17-000133-a`, `PrJSC Ukrhydroenergo`, `Ukrzaliznytsia`) | **DG NEAR (Ch. 23) / DG FISMA (AMLD Art. 30):** 4 years after HACC judgment No. 991/3157/22, Russian defense oligarch V. Yevtushenkov remains recorded as UBO in live `UO.xml` |\n| **`UA-EDR-06`** | **`39564144`** *(founded by `05763814`)* | **LLC V.N.V.** (Kyiv; record `10701360000056389`, subsidiary of `PJSC KVBZ` `05763814`) · Capital: **`UAH 26,497,088.00`** | UBO in live `UO.xml`: **`Stanislav Gamzalov; citizenship: Russian Federation; 25% share`** (perimeter of Russian defense supplier Magomed Gamzalov) | **Presidential Decree No. 726/2022 of 2022-10-19** and HACC confiscation of 25% in PJSC KVBZ; `Prozorro` railway procurement portfolio across Ukrzaliznytsia branches — **`UAH 956,802,519.34`** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 5 Public Procurement):** retention of a Russian Federation citizen from a sanctioned defense-supply family as 25% UBO of a major railway contractor subsidiary |\n| **`UA-EDR-07`** | **`34704105`** | **LLC VYSOKOVOLTNYI SOIUZ - RZVA** (Rivne; record `16081020000004291`) · Capital: **`UAH 72,000,000.00`** | Ukrainian plant of Yekaterinburg holding `CJSC Vysokovoltny Soyuz` (RF), held via Cyprus-registered `Unaco Asset Management Limited` | **Direct 8-digit code EDRPOU `34704105` sanctioned under Presidential Decree No. 726/2022 of 2022-10-19**; despite direct entity sanctions — **`170` Prozorro contracts totaling `UAH 94,071,594.98`** (including `UA-2024-12-12-012941-a` for National Police in Rivne Region and regional grid operators) | **DG NEAR (Ch. 5 Public Procurement & Ukraine Facility Art. 16):** direct participation in public procurement by a legal entity whose exact 8-digit EDRPOU code is under blocking NSDC sanctions |\n| **`UA-EDR-08`** | **`37386100`**, **`36676494`** *(+ `31976055`, `30088756`)* | **LLC FARUN (`37386100`, Mykolaiv, `UAH 15,000,000.00`)** & **LLC EMBAVUD UKRAINA (`36676494`, Sambir, `UAH 96,500,000.00`)** *(+ **LLC VMK-UKRAINA** `31976055`, `UAH 205,000,000.00`)* | • In `37386100`: 51% UBO & director **`Oleksandr Ohar`** (RF citizen, active **FNS RF personal TIN `550519842406`**, owner of active Belgorod `LLC Ambika` **FNS RF TIN `3102635710`**).<br>• In `36676494`: 34% UBO **`Tamara Poliakova`** (RF citizen, active Moscow **FNS RF personal TIN `773270932652`**). | **`Dual-TIN (UA EDR x FNS RF x Defense Prozorro)` perimeter:**<br>• `37386100`: **`35` Prozorro contracts for `UAH 7.91M`** supplying strategic defense plants **SE Zorya-Mashproekt**, **SE Malyshev Plant**, and **SE ZhMZ Vizar** (through `UA-2023-11-27-010856-a`).<br>• `36676494`: **`14` Prozorro contracts for `UAH 16.29M`** (including **military unit `A3817`** and 2025 tender `UA-2025-01-16-012465-a`). | **DG NEAR (Ch. 5 Public Procurement) / DG FISMA (AML/CFT):** participation of Ukrainian LLCs controlled by active Russian taxpayers (`550519842406`, `3102635710`, `773270932652`) in Ukrainian defense plant and military unit procurement |\n| **`UA-EDR-09`** | **`43978883`**, **`24565511`**, **`42751872`** *(+ `41278559`)* | **CONSORTIUM DORLIDER (`43978883`, `UAH 12,000,000.00`)**, **PE POLTAVABUDTSENTR (`24565511`)**, **LLC GRANIT-001 (`42751872`, `UAH 10,010,000.00`)** | UBO (`58.33%` in `43978883`): **`Vahinak Amirkhanian`** (road-building cartel of fugitive to RF Araik Amirkhanian) | **Direct 8-digit codes EDRPOU `43978883`, `24565511`, `42751872` sanctioned under Presidential Decrees No. 169/2021 of 2021-04-21 and No. 576/2024 of 2024-08-24**; historical `Prozorro` portfolio exceeds **`UAH 10.84B`**, all 3 entities remain active in EDR | **DG NEAR (Ukraine Facility Infrastructure Safeguards) / DG FISMA:** retention of active registry status for directly sanctioned road construction consortiums |\n| **`UA-EDR-10`** | **`42192808`**, **`31859085`**, **`22336214`** | **LLC AMC FCI PARTNERS (`42192808`, Kyiv, `UAH 7.20M`)**, **LLC AKVA-POLIANA (`31859085`, Zakarpattia, `UAH 62.33M`)**, **PE LILIIA (`22336214`, Lviv)** | • **Pavlo Fuks** (`42192808`, 100% UBO): RNOKPP `2623223319`, **FNS RF TIN `772771331428`**, OGRNIP `304770000482817`.<br>• **Vitalii Subotovskyi** (`31859085`, 35% UBO): RNOKPP `2751622872`, **FNS RF TIN `391406695590`**, Derzhheonadra Subsoil Permit **No. 5383**.<br>• **Nataliia Lavreniuk** (`22336214`, 100% UBO): RNOKPP `2745001404`, **FNS RF TIN `402718407534`**. | • P. Fuks: **Decree No. 266/2021 of 2021-06-24**, Kyiv Commercial Court Case **No. 910/12334/24 of 2025-01-13**.<br>• V. Subotovskyi: **Decree No. 612/2025 of 2025-08-23**, Art. 57 of the Subsoil Code of Ukraine.<br>• N. Lavreniuk: **Decree No. 572/2021 of 2021-11-10**. | **DG FISMA (AMLD Art. 30) / DG NEAR (Subsoil & Asset Freeze Reform):** NSDC-sanctioned individuals holding checksum-verified 12-digit Russian FNS TINs retain direct UBO control over asset management companies and strategic subsoil permit No. 5383 |\n| **`UA-EDR-11`** | **`24364528`**, **`22415322`**, **`34716646`**, **`25635581`** | **PrJSC IDS (`24364528`) / PrJSC MZMW OSKAR (`22415322`)** (`~UAH 10B`) & **LLC SMART-HOLDING (`34716646`) / PrJSC UKRGAZVYDOBUTOK (`25635581`)** (`~UAH 3.5B`) | • In `24364528` / `22415322`: Russian beneficial share of sanctioned oligarchs **M. Fridman, P. Aven, A. Kosogov**.<br>• In `34716646` / `25635581`: perimeter of sanctioned **V. Novynskyi**. | • `IDS Ukraine`: **Decrees No. 726/2022 and No. 727/2022 of 2022-10-19**; on **`2026-09-29`**, Dnipropetrovsk District Administrative Court ruling in Case **No. 160/30983/26** enjoined ARMA from signing the management agreement.<br>• `Smart-Holding`: **Decrees No. 789/2022 of 2022-11-19 and No. 43/2023 of 2023-01-24**; in Case **No. 910/15682/23**, courts annulled MinJust Order No. 1286/5 of 2023-04-10 on UBO disclosure in EDR. | **DG NEAR (Ukraine Facility Pillar I — ARMA & Judicial Reform Ch. 23/24):** paralysis of seized asset management (`~UAH 13.5B`) via administrative and commercial court injunctions in 2023-2026 |\n| **`UA-EDR-12`** | **`21725546`**, **`39690679`**, **`14351528`** *(+ `38542690`, `24845653`)* | **TULCHYN EPARCHY UOC (`21725546`)**, **SYNODAL FAMILY DEPT UOC (`39690679`, Kyiv, Lavrska St. 15)**, **HOLY DORMITION KYIV-PECHERSK LAVRA MONASTERY UOC (`14351528`)** | • In `21725546`: signatory in `UO.xml` — **`Anatolii Yeletskykh`** (FNS RF extract `YuE9965-26227649827`, Patriarch Kirill / V. M. Gundyaev FNS TIN **`770605158903`**).<br>• In `39690679` & `38542690`: unrestricted signatory — **`Vasyl Povorozniuk`** (**FNS RF personal TIN `345959589649`**, reregistered eparchy in FNS RF EGRUL under **FNS RF TIN `9402007059`**, **OGRN `1229400049669`**, extract `YuE9965-26227651407`).<br>• In `14351528`: head **`Petro Lebid`**, founder of monastery `24845653` (reregistered in FNS RF EGRUL under **FNS RF TIN `9408007129`**, extract `YuE9965-26227651553`, head D. V. Nahibin **FNS RF TIN `345920660995`**). | • A. Yeletskykh: Vinnytsia City Court verdict of `2023-08-07` in Case **No. 127/149/23** (5 years imprisonment with confiscation, transferred to RF in June 2024).<br>• V. Povorozniuk: sentenced in absentia to **11 years** under Art. 111-1(6) CCU, **Decree No. 820/2022 of 2022-12-01**.<br>• P. Lebid: **Decree No. 820/2022 of 2022-12-01**, Case **No. 757/13191/23-k**, **Law of Ukraine No. 3894-IX of 2024-08-20**. | **DG NEAR (Ch. 23/24 Rule of Law & National Security) / DG FISMA:** convicted collaborators physically residing in Russia and holding active FNS RF TINs (`345959589649`, `9402007059`, `9408007129`) retain unrestricted legal signatory authority in active Ukrainian EDR entities in Kyiv and Vinnytsia |\n\n---\n\n### 3. Matrix II: 15 Active YouTube Mirrors of NSDC-Sanctioned Subjects with Open Country Code `UA` (`availableCountryCodes: \"UA\"`)\n\nAlongside the corporate registry gaps in `UO.xml`, live YouTube telemetry as of November 2026 documents **15 active mirror and relay channels** (`YT-MIRROR-01` .. `YT-MIRROR-15`) that circumvent NSDC Presidential Decrees and stream into Ukraine without VPN (`availableCountryCodes` includes `\"UA\"`, `249` countries, `PlayabilityStatus: OK`):\n\n1. **`YT-MIRROR-01-LISOVSKIY` — `@LISOVSKIY_NEWS` (`UCyDRD4u-G9rUTlUGRein_hw`, created `2025-04-20`, `98.9K` subscribers):** joint laundering hub for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**), **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19` under Art. 111-1(6) CCU), and **Artem Dmytruk** (**Decree No. 417/2025 of 2025-06-22**). Broadcast `v=GiED_jEQlaA` of `2026-11-04` reached `190,587` views without VPN, amplified by `ru-RU` bots (`UC0GBbtv2qOiF-9bkrDQYQxA`, `UCmnqxtAexQBb88JIw09aUdA`, `UCP2svttt_l__dOCgUGiNXxA`).\n2. **`YT-MIRROR-02-LISOVSKIY-RES` — `@lisovskiy_reserve` (`UC-uCKJq_bRs5pFE8bMNy6kQ`, created `2026-10-22`):** fresh reserve backup clone of the `@LISOVSKIY_NEWS` cluster with open `\"UA\"` country code.\n3. **`YT-MIRROR-03-SHELEST` — `Stratehiia Syly` (`UCyeoETklSyLA-jQe565U03g`, created `2025-01-30`, `39.5K` subscribers):** active mirror of NSDC-sanctioned **Oleksandr Shelest** (**Decree No. 230/2025 of 2025-04-11**), amplified under broadcasts `v=StTOBP6g5BU` and `v=DFrs3k5wLg4` by `ru-RU` bots (`UCZG2ADn8ydjCyK4Wf1WZJMg`, `UCk4mjt6bagwE86-bpFx5Jyw`, `UCUJZMEy63LF1hHH_02Eg6yA`).\n4. **`YT-MIRROR-04-ARTEMNEWS23` — `@ArtemNews23` / `Artem Stream UA` (`UC24jZmCZLi3w4j4H8MjJGEg`, created `2026-02-13`, `16.8K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) and **Myroslav Oleshko** (**Decree No. 772/2023 of 2023-11-23**; videos `v=FUfzsTG0bjo`, `v=7tMkWWQVb7c`, bot `UCuFeYp_4fqq3L2MiUOCSx9Q`).\n5. **`YT-MIRROR-05-VTSEHTRESOBYTIY` — `V Tsentre Sobytii` (`UCTvUuw11b844xI-JFT7tQew`, created `2025-02-25`, `85.1K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025**) and **Kostiantyn Bondarenko** (**Decree No. 267/2025 of 2025-05-01**; bots `UCFtthorTpKPaFMszegtLXfA`, `UCC-TZfm1ehweeuGr20cFdBg`, `UCO8Y945IotBzB-PXBuxV6FQ`).\n6. **`YT-MIRROR-06-LIBERTYUA` — `@LibertyUkraine2025` / `Liberty UA` (`UC7cv4INhQQwfJqiU-mel0QQ`, created `2025-03-26`, `96.1K` subscribers):** relay channel for **I. Mosiychuk** (**Decree No. 345/2025**) and **K. Bondarenko** (**Decree No. 267/2025**), where broadcast `v=SsKwE9mUPuk` was amplified by 7 `ru-RU` locale bots (`UCfcnzL16bz0ttFW4eQMi4ug`, `UCQ9lXY1uWKOhUS0MnW4Ba3Q`, `UCVzWmpeRAKtwMS7zsRGDsgw`, `UCpcXkMUwJxST0kYzT2ovNKw`, `UC51QiSixjcPSfQujHZpMd4A`, `UCbnz80Gw4QJFWxC23eXXlkA`, `UCVLEdnwCV_PdRlbjI64Wj1A`).\n7. **`YT-MIRROR-07-LIBERTYTVUA` — `@LibertyTVUA` / `Liberty TV UA` (`UCYS8kqVQzP4pfpmw5XIagMA`, created `2025-12-02`, `16.3K` subscribers):** secondary `Liberty UA` network mirror streaming **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**).\n8. **`YT-MIRROR-08-MOSIYCHUK-CLONE` — `Ihor Mosiychuk Clone` (`UCvckh1Db64fbmfiddPoZ6LA`, created `2026-10-15`, `1.33K` subscribers):** direct eponymous clone of **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) created to bypass geoblocked channel `UCP77OTkoQnvoD08w57KJHDQ`.\n9. **`YT-MIRROR-09-GLOBAL-ARESTOVYCH` — `@GlobalArestovych96` (`UC_iPAFzu0nkZkn9vaeWdPrA`, `28.6K` subscribers):** reactivated 2013 sleeper channel streaming **Oleksii Arestovych** (**Decree No. 267/2025 of 2025-05-01**) in bypass of geoblocked channel `UCjWy2g76QZf7QLEwx4cB46g`.\n10. **`YT-MIRROR-10-APEIRON` — `@ApeironSchool` (`UCS4aVDaOvIK0-3voQv49pKQ`, `65.7K` subscribers):** commercial channel of NSDC-sanctioned **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**) accessible in Ukraine without VPN.\n11. **`YT-MIRROR-11-EXPERT-PRO` — `@Expert_channelpro` (`UCUEiXr94u-obIqTkMAODg2w`, `45.8K` subscribers):** dedicated relay channel for **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**).\n12. **`YT-MIRROR-12-PANCHENKO88` — `@DianaPanchenko88` (`UCurgcc4qcz3-_ibm3XxKUjQ`, created `2025-11-01`, `3.66K` subscribers):** eponymous mirror of treason-indicted **Diana Panchenko** (**Decree No. 23/2023 of 2023-01-15**).\n13. **`YT-MIRROR-13-GOLDARB` — `Maksym Holdarb` (`UCBSYa5zQvjL-Y2D89L_OyEw`, `223K` subscribers):** primary channel of **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19`), amplified by `ru-RU` bot `UCyJhcLcaGjrATBIDEBlyMeA`.\n14. **`YT-MIRROR-14-DMYTRUK` — `Artem Dmytruk` (`UCiV8lEPfB0NVwfgWuSXSaiQ`, created `2025-07-05`, + clone `UCVcubqawDRGG2ERUsAiv_4A`):** eponymous channel of **Artem Dmytruk** launched 13 days after **Decree No. 417/2025 of 2025-06-22**.\n15. **`YT-MIRROR-15-ZNAYPRAVDU` — `ZNAI PRAVDU` (`UCgtxz5_xa6xkDTghNPkuRYw`, created `2025-04-21`, `65.1K` subscribers):** relay channel of treason-indicted **Oleksandr Dubinskyi** (US OFAC SDN since 2021, Art. 111(1) CCU).\n\n---\n\n### 4. Interactive Verification & Open Machine-Readable Feeds\n\nAll **27 compliance indicators** (`12` corporate clusters in the live Ukrainian EDR and `15` active YouTube mirrors of NSDC-sanctioned subjects) are verified daily on the oversight card [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05), in the [`/en/edr`](/en/edr) registry section, and via the machine-readable JSON feed [`/feeds/agency-blindness.json`](/feeds/agency-blindness.json).\n",
    "body_en_md": "### 1. The European Monitoring Framework: Why Uncleaned UBO Records in Kyiv Are Direct Compliance Benchmarks for DG NEAR and DG FISMA in Brussels\n\nUkraine's EU accession negotiation framework under **Cluster 1 'Fundamentals' (Chapter 23 'Judiciary and Fundamental Rights' and Chapter 24 'Justice, Freedom and Security')**, the financial governance safeguards of **Regulation (EU) 2024/792 establishing the Ukraine Facility (Articles 16, 35, and 36)**, and **Directive (EU) 2015/849 / Regulation (EU) 2024/1624 (EU AMLD — Article 30 on the accuracy, adequacy, and currency of national Ultimate Beneficial Ownership registries)** establish three non-negotiable engineering benchmarks:\n\n* **UBO Registry Integrity (DG FISMA / AMLD Article 30):** The Unified State Register of Legal Entities (`EDR / UO.xml`), administered by the Ministry of Justice of Ukraine, must maintain accurate, current, and timely updated beneficial ownership (`UBO`) records — particularly after final confiscation judgments of the High Anti-Corruption Court (`HACC`) and binding National Security and Defense Council (`NSDC`) sanctions decrees take effect.\n* **Public Procurement & Seized Asset Management Safeguards (DG NEAR / Ukraine Facility Regulation (EU) 2024/792):** Electronic public procurement via `Prozorro` and asset management tenders administered by `ARMA` must not remain accessible to companies whose active UBOs in `UO.xml` are Russian Federation citizens holding active 12-digit Russian Federal Tax Service (`FNS RF`) TINs, Russian defense/nuclear state corporations (`Rostec`, `Rosatom`), or legal entities directly designated by 8-digit `EDRPOU` code under NSDC sanctions decrees.\n* **Sanctions Enforcement & Information Integrity Alignment (Cluster 6 — Chapter 31 CFSP & Chapter 10 / EU DSA):** Sanctions decrees that geoblock a designated individual's legacy YouTube channel while leaving 15 active mirror and laundering channels open on Ukrainian territory without VPN (`availableCountryCodes: \"UA\"`, `249` countries, `PlayabilityStatus: OK`) create a structural enforcement gap exploited by coordinated Russian bot networks.\n\n---\n\n### 2. Matrix I: 12 Unliquidated Russian Corporate Clusters in Ukraine's Live State Registry (`UO.xml`, Status `REGISTERED / ACTIVE`)\n\nConsolidated cross-registry auditing of [`/en/edr`](/en/edr) and [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05) documents **12 primary corporate clusters (`27` active legal entities by 8-digit EDRPOU code)** as of November 2026:\n\n| Cluster ID | EDRPOU Code (and Linked Group Entities) | Legal Entity Name in Ukraine's EDR (`UO.xml`) & Authorized Capital | Russian UBO / Founder, FNS RF TIN / OGRN & Ukrainian RNOKPP | Legal & Sanctions Basis (Presidential / NSDC Decree, HACC / Court Case, Prozorro Contracts) | EU Monitoring Benchmark (DG NEAR / DG FISMA) |\n|---|---|---|---|---|---|\n| **`UA-EDR-01`** | **`45945891`** | **LLC SVIATOPETRIVSKYI KVARTAL** (Kyiv Region, Bucha District; record `1010391020000004618` of **`2026-01-06`**) · Capital: **`UAH 11,104,808.19`** | Sole founder (`100%`), direct UBO (`100%`), and director in `UO.xml`: **`Serhii Moshchyk; citizenship: Russian Federation`** | Initial state registration of a new LLC to a 100% Russian Federation citizen on **`2026-01-06`** in direct breach of **CMU Moratorium Resolution No. 187 of 2022-03-03** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 23):** absence of automated validation rules blocking new company registrations for Russian Federation citizens in the 4th year of full-scale war |\n| **`UA-EDR-02`** | **`31351836`** | **LLC FOREIGN ECONOMIC ASSOCIATION TEKHNOPROMEKSPORT** (Kyiv; record `10681200000007702`) · Capital: **`UAH 904,315,168.00`** | Founder (`99.97%` — **`UAH 904,015,168.00`**): **`LLC UK DKM-ENGINEERING; residency: Russian Federation`** (engineering perimeter of Russian State Corporation **Rostec**); director `O. M. Babiichuk` | **CMU Resolution No. 187 of 2022-03-03** and **Law of Ukraine on Sanctions No. 1644-VII** (Articles 4, 5-1 on confiscation of aggressor-state assets) | **DG FISMA / DG NEAR (Ch. 23, 31):** active Kyiv subsidiary of Rostec's Tekhnopromeksport engineering group holding `UAH 904.32M` in registered capital without confiscation or termination |\n| **`UA-EDR-03`** | **`37705342`** *(+ co-founder `36282830`)* | **PrJSC NUCLEAR FUEL PRODUCTION PLANT** (Smyline, Kirovohrad Region; record `14311020000000677`) · Capital: **`UAH 161,500,000.00`** | Co-founder (`50% minus 1 share` — **`UAH 80,749,990.00`**): **`JSC TVEL; residency: Russian Federation`** (nuclear fuel division of State Corporation **Rosatom**) | **Presidential Decree of Ukraine No. 82/2023 of 2023-02-19** (50-year blocking NSDC sanctions against Russian `JSC TVEL`) | **DG FISMA / DG NEAR (Ch. 15 Energy & Ch. 31 CFSP):** 3.5 years after Decree No. 82/2023, Rosatom's sanctioned fuel division remains an official co-founder of a Ukrainian nuclear PrJSC in live `UO.xml` |\n| **`UA-EDR-04`** | **`37617817`**, **`31154435`** *(+ `13616412`, `38146389`, `43779663`)* | **LLC VINNYTSIA AVIATION PLANT (`37617817`, `UAH 17,539,134.21`)** & **ALC IC MOTOR-GARANT (`31154435`, `UAH 12,312,000.00`)** | Direct UBO in live `UO.xml`: **`Viacheslav Bohuslaiev`** (`100%` in `37617817`; `83.6%` + `9.9%` son `O. V. Bohuslaiev` in `31154435`), Russian passport holder | **Presidential Decree No. 191/2023 of 2023-04-01**, SBU treason indictment (Arts. 111-1, 111-2 CCU), and **HACC confiscation judgment in Case No. 991/661/24 (April 2024)**; **`16` Prozorro contracts in `37617817` totaling `UAH 25.04M` (including `UA-2026-07-10-002466-a` and `UA-2026-06-19-009767-a` for SESU and military unit `A3840`)** and `824` contracts in `31154435` (through `UA-2025-10-20-001643-a`) | **DG NEAR (Ukraine Facility Art. 35/36, Ch. 23) / DG FISMA (AMLD Art. 30):** failure to execute a final HACC confiscation ruling in the UBO registry for 2.5 years while the entity wins defense `Prozorro` contracts in June-July 2026 |\n| **`UA-EDR-05`** | **`00216757`**, **`40909120`** *(+ `38710730`)* | **JSC UKRAINIAN TRANSFORMER DESIGN INSTITUTE (`JSC VIT`, `00216757`)** & **LLC ITM-UKRAINA (`40909120`)** · Group capital: **`UAH 76,862,118.00`** | UBO in live `UO.xml` `<BENEFICIARIES>` (`00216757`): **`Vladimir Yevtushenkov; citizenship: Russian Federation; 34.21% share`** (AFK Sistema / Kronstadt Orion UAVs) | **Presidential Decree No. 637/2022 of 2022-09-07** and landmark **HACC confiscation judgment of 2022-09-01 in Case No. 991/3157/22**; **`42` Prozorro contracts in `00216757` totaling `UAH 52,332,239.60`** (including `UA-2024-09-17-000133-a`, `PrJSC Ukrhydroenergo`, `Ukrzaliznytsia`) | **DG NEAR (Ch. 23) / DG FISMA (AMLD Art. 30):** 4 years after HACC judgment No. 991/3157/22, Russian defense oligarch V. Yevtushenkov remains recorded as UBO in live `UO.xml` |\n| **`UA-EDR-06`** | **`39564144`** *(founded by `05763814`)* | **LLC V.N.V.** (Kyiv; record `10701360000056389`, subsidiary of `PJSC KVBZ` `05763814`) · Capital: **`UAH 26,497,088.00`** | UBO in live `UO.xml`: **`Stanislav Gamzalov; citizenship: Russian Federation; 25% share`** (perimeter of Russian defense supplier Magomed Gamzalov) | **Presidential Decree No. 726/2022 of 2022-10-19** and HACC confiscation of 25% in PJSC KVBZ; `Prozorro` railway procurement portfolio across Ukrzaliznytsia branches — **`UAH 956,802,519.34`** | **DG FISMA (AMLD Art. 30) / DG NEAR (Ch. 5 Public Procurement):** retention of a Russian Federation citizen from a sanctioned defense-supply family as 25% UBO of a major railway contractor subsidiary |\n| **`UA-EDR-07`** | **`34704105`** | **LLC VYSOKOVOLTNYI SOIUZ - RZVA** (Rivne; record `16081020000004291`) · Capital: **`UAH 72,000,000.00`** | Ukrainian plant of Yekaterinburg holding `CJSC Vysokovoltny Soyuz` (RF), held via Cyprus-registered `Unaco Asset Management Limited` | **Direct 8-digit code EDRPOU `34704105` sanctioned under Presidential Decree No. 726/2022 of 2022-10-19**; despite direct entity sanctions — **`170` Prozorro contracts totaling `UAH 94,071,594.98`** (including `UA-2024-12-12-012941-a` for National Police in Rivne Region and regional grid operators) | **DG NEAR (Ch. 5 Public Procurement & Ukraine Facility Art. 16):** direct participation in public procurement by a legal entity whose exact 8-digit EDRPOU code is under blocking NSDC sanctions |\n| **`UA-EDR-08`** | **`37386100`**, **`36676494`** *(+ `31976055`, `30088756`)* | **LLC FARUN (`37386100`, Mykolaiv, `UAH 15,000,000.00`)** & **LLC EMBAVUD UKRAINA (`36676494`, Sambir, `UAH 96,500,000.00`)** *(+ **LLC VMK-UKRAINA** `31976055`, `UAH 205,000,000.00`)* | • In `37386100`: 51% UBO & director **`Oleksandr Ohar`** (RF citizen, active **FNS RF personal TIN `550519842406`**, owner of active Belgorod `LLC Ambika` **FNS RF TIN `3102635710`**).<br>• In `36676494`: 34% UBO **`Tamara Poliakova`** (RF citizen, active Moscow **FNS RF personal TIN `773270932652`**). | **`Dual-TIN (UA EDR x FNS RF x Defense Prozorro)` perimeter:**<br>• `37386100`: **`35` Prozorro contracts for `UAH 7.91M`** supplying strategic defense plants **SE Zorya-Mashproekt**, **SE Malyshev Plant**, and **SE ZhMZ Vizar** (through `UA-2023-11-27-010856-a`).<br>• `36676494`: **`14` Prozorro contracts for `UAH 16.29M`** (including **military unit `A3817`** and 2025 tender `UA-2025-01-16-012465-a`). | **DG NEAR (Ch. 5 Public Procurement) / DG FISMA (AML/CFT):** participation of Ukrainian LLCs controlled by active Russian taxpayers (`550519842406`, `3102635710`, `773270932652`) in Ukrainian defense plant and military unit procurement |\n| **`UA-EDR-09`** | **`43978883`**, **`24565511`**, **`42751872`** *(+ `41278559`)* | **CONSORTIUM DORLIDER (`43978883`, `UAH 12,000,000.00`)**, **PE POLTAVABUDTSENTR (`24565511`)**, **LLC GRANIT-001 (`42751872`, `UAH 10,010,000.00`)** | UBO (`58.33%` in `43978883`): **`Vahinak Amirkhanian`** (road-building cartel of fugitive to RF Araik Amirkhanian) | **Direct 8-digit codes EDRPOU `43978883`, `24565511`, `42751872` sanctioned under Presidential Decrees No. 169/2021 of 2021-04-21 and No. 576/2024 of 2024-08-24**; historical `Prozorro` portfolio exceeds **`UAH 10.84B`**, all 3 entities remain active in EDR | **DG NEAR (Ukraine Facility Infrastructure Safeguards) / DG FISMA:** retention of active registry status for directly sanctioned road construction consortiums |\n| **`UA-EDR-10`** | **`42192808`**, **`31859085`**, **`22336214`** | **LLC AMC FCI PARTNERS (`42192808`, Kyiv, `UAH 7.20M`)**, **LLC AKVA-POLIANA (`31859085`, Zakarpattia, `UAH 62.33M`)**, **PE LILIIA (`22336214`, Lviv)** | • **Pavlo Fuks** (`42192808`, 100% UBO): RNOKPP `2623223319`, **FNS RF TIN `772771331428`**, OGRNIP `304770000482817`.<br>• **Vitalii Subotovskyi** (`31859085`, 35% UBO): RNOKPP `2751622872`, **FNS RF TIN `391406695590`**, Derzhheonadra Subsoil Permit **No. 5383**.<br>• **Nataliia Lavreniuk** (`22336214`, 100% UBO): RNOKPP `2745001404`, **FNS RF TIN `402718407534`**. | • P. Fuks: **Decree No. 266/2021 of 2021-06-24**, Kyiv Commercial Court Case **No. 910/12334/24 of 2025-01-13**.<br>• V. Subotovskyi: **Decree No. 612/2025 of 2025-08-23**, Art. 57 of the Subsoil Code of Ukraine.<br>• N. Lavreniuk: **Decree No. 572/2021 of 2021-11-10**. | **DG FISMA (AMLD Art. 30) / DG NEAR (Subsoil & Asset Freeze Reform):** NSDC-sanctioned individuals holding checksum-verified 12-digit Russian FNS TINs retain direct UBO control over asset management companies and strategic subsoil permit No. 5383 |\n| **`UA-EDR-11`** | **`24364528`**, **`22415322`**, **`34716646`**, **`25635581`** | **PrJSC IDS (`24364528`) / PrJSC MZMW OSKAR (`22415322`)** (`~UAH 10B`) & **LLC SMART-HOLDING (`34716646`) / PrJSC UKRGAZVYDOBUTOK (`25635581`)** (`~UAH 3.5B`) | • In `24364528` / `22415322`: Russian beneficial share of sanctioned oligarchs **M. Fridman, P. Aven, A. Kosogov**.<br>• In `34716646` / `25635581`: perimeter of sanctioned **V. Novynskyi**. | • `IDS Ukraine`: **Decrees No. 726/2022 and No. 727/2022 of 2022-10-19**; on **`2026-09-29`**, Dnipropetrovsk District Administrative Court ruling in Case **No. 160/30983/26** enjoined ARMA from signing the management agreement.<br>• `Smart-Holding`: **Decrees No. 789/2022 of 2022-11-19 and No. 43/2023 of 2023-01-24**; in Case **No. 910/15682/23**, courts annulled MinJust Order No. 1286/5 of 2023-04-10 on UBO disclosure in EDR. | **DG NEAR (Ukraine Facility Pillar I — ARMA & Judicial Reform Ch. 23/24):** paralysis of seized asset management (`~UAH 13.5B`) via administrative and commercial court injunctions in 2023-2026 |\n| **`UA-EDR-12`** | **`21725546`**, **`39690679`**, **`14351528`** *(+ `38542690`, `24845653`)* | **TULCHYN EPARCHY UOC (`21725546`)**, **SYNODAL FAMILY DEPT UOC (`39690679`, Kyiv, Lavrska St. 15)**, **HOLY DORMITION KYIV-PECHERSK LAVRA MONASTERY UOC (`14351528`)** | • In `21725546`: signatory in `UO.xml` — **`Anatolii Yeletskykh`** (FNS RF extract `YuE9965-26227649827`, Patriarch Kirill / V. M. Gundyaev FNS TIN **`770605158903`**).<br>• In `39690679` & `38542690`: unrestricted signatory — **`Vasyl Povorozniuk`** (**FNS RF personal TIN `345959589649`**, reregistered eparchy in FNS RF EGRUL under **FNS RF TIN `9402007059`**, **OGRN `1229400049669`**, extract `YuE9965-26227651407`).<br>• In `14351528`: head **`Petro Lebid`**, founder of monastery `24845653` (reregistered in FNS RF EGRUL under **FNS RF TIN `9408007129`**, extract `YuE9965-26227651553`, head D. V. Nahibin **FNS RF TIN `345920660995`**). | • A. Yeletskykh: Vinnytsia City Court verdict of `2023-08-07` in Case **No. 127/149/23** (5 years imprisonment with confiscation, transferred to RF in June 2024).<br>• V. Povorozniuk: sentenced in absentia to **11 years** under Art. 111-1(6) CCU, **Decree No. 820/2022 of 2022-12-01**.<br>• P. Lebid: **Decree No. 820/2022 of 2022-12-01**, Case **No. 757/13191/23-k**, **Law of Ukraine No. 3894-IX of 2024-08-20**. | **DG NEAR (Ch. 23/24 Rule of Law & National Security) / DG FISMA:** convicted collaborators physically residing in Russia and holding active FNS RF TINs (`345959589649`, `9402007059`, `9408007129`) retain unrestricted legal signatory authority in active Ukrainian EDR entities in Kyiv and Vinnytsia |\n\n---\n\n### 3. Matrix II: 15 Active YouTube Mirrors of NSDC-Sanctioned Subjects with Open Country Code `UA` (`availableCountryCodes: \"UA\"`)\n\nAlongside the corporate registry gaps in `UO.xml`, live YouTube telemetry as of November 2026 documents **15 active mirror and relay channels** (`YT-MIRROR-01` .. `YT-MIRROR-15`) that circumvent NSDC Presidential Decrees and stream into Ukraine without VPN (`availableCountryCodes` includes `\"UA\"`, `249` countries, `PlayabilityStatus: OK`):\n\n1. **`YT-MIRROR-01-LISOVSKIY` — `@LISOVSKIY_NEWS` (`UCyDRD4u-G9rUTlUGRein_hw`, created `2025-04-20`, `98.9K` subscribers):** joint laundering hub for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**), **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19` under Art. 111-1(6) CCU), and **Artem Dmytruk** (**Decree No. 417/2025 of 2025-06-22**). Broadcast `v=GiED_jEQlaA` of `2026-11-04` reached `190,587` views without VPN, amplified by `ru-RU` bots (`UC0GBbtv2qOiF-9bkrDQYQxA`, `UCmnqxtAexQBb88JIw09aUdA`, `UCP2svttt_l__dOCgUGiNXxA`).\n2. **`YT-MIRROR-02-LISOVSKIY-RES` — `@lisovskiy_reserve` (`UC-uCKJq_bRs5pFE8bMNy6kQ`, created `2026-10-22`):** fresh reserve backup clone of the `@LISOVSKIY_NEWS` cluster with open `\"UA\"` country code.\n3. **`YT-MIRROR-03-SHELEST` — `Stratehiia Syly` (`UCyeoETklSyLA-jQe565U03g`, created `2025-01-30`, `39.5K` subscribers):** active mirror of NSDC-sanctioned **Oleksandr Shelest** (**Decree No. 230/2025 of 2025-04-11**), amplified under broadcasts `v=StTOBP6g5BU` and `v=DFrs3k5wLg4` by `ru-RU` bots (`UCZG2ADn8ydjCyK4Wf1WZJMg`, `UCk4mjt6bagwE86-bpFx5Jyw`, `UCUJZMEy63LF1hHH_02Eg6yA`).\n4. **`YT-MIRROR-04-ARTEMNEWS23` — `@ArtemNews23` / `Artem Stream UA` (`UC24jZmCZLi3w4j4H8MjJGEg`, created `2026-02-13`, `16.8K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) and **Myroslav Oleshko** (**Decree No. 772/2023 of 2023-11-23**; videos `v=FUfzsTG0bjo`, `v=7tMkWWQVb7c`, bot `UCuFeYp_4fqq3L2MiUOCSx9Q`).\n5. **`YT-MIRROR-05-VTSEHTRESOBYTIY` — `V Tsentre Sobytii` (`UCTvUuw11b844xI-JFT7tQew`, created `2025-02-25`, `85.1K` subscribers):** relay channel for NSDC-sanctioned **Ihor Mosiychuk** (**Decree No. 345/2025**) and **Kostiantyn Bondarenko** (**Decree No. 267/2025 of 2025-05-01**; bots `UCFtthorTpKPaFMszegtLXfA`, `UCC-TZfm1ehweeuGr20cFdBg`, `UCO8Y945IotBzB-PXBuxV6FQ`).\n6. **`YT-MIRROR-06-LIBERTYUA` — `@LibertyUkraine2025` / `Liberty UA` (`UC7cv4INhQQwfJqiU-mel0QQ`, created `2025-03-26`, `96.1K` subscribers):** relay channel for **I. Mosiychuk** (**Decree No. 345/2025**) and **K. Bondarenko** (**Decree No. 267/2025**), where broadcast `v=SsKwE9mUPuk` was amplified by 7 `ru-RU` locale bots (`UCfcnzL16bz0ttFW4eQMi4ug`, `UCQ9lXY1uWKOhUS0MnW4Ba3Q`, `UCVzWmpeRAKtwMS7zsRGDsgw`, `UCpcXkMUwJxST0kYzT2ovNKw`, `UC51QiSixjcPSfQujHZpMd4A`, `UCbnz80Gw4QJFWxC23eXXlkA`, `UCVLEdnwCV_PdRlbjI64Wj1A`).\n7. **`YT-MIRROR-07-LIBERTYTVUA` — `@LibertyTVUA` / `Liberty TV UA` (`UCYS8kqVQzP4pfpmw5XIagMA`, created `2025-12-02`, `16.3K` subscribers):** secondary `Liberty UA` network mirror streaming **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**).\n8. **`YT-MIRROR-08-MOSIYCHUK-CLONE` — `Ihor Mosiychuk Clone` (`UCvckh1Db64fbmfiddPoZ6LA`, created `2026-10-15`, `1.33K` subscribers):** direct eponymous clone of **I. Mosiychuk** (**Decree No. 345/2025 of 2025-05-25**) created to bypass geoblocked channel `UCP77OTkoQnvoD08w57KJHDQ`.\n9. **`YT-MIRROR-09-GLOBAL-ARESTOVYCH` — `@GlobalArestovych96` (`UC_iPAFzu0nkZkn9vaeWdPrA`, `28.6K` subscribers):** reactivated 2013 sleeper channel streaming **Oleksii Arestovych** (**Decree No. 267/2025 of 2025-05-01**) in bypass of geoblocked channel `UCjWy2g76QZf7QLEwx4cB46g`.\n10. **`YT-MIRROR-10-APEIRON` — `@ApeironSchool` (`UCS4aVDaOvIK0-3voQv49pKQ`, `65.7K` subscribers):** commercial channel of NSDC-sanctioned **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**) accessible in Ukraine without VPN.\n11. **`YT-MIRROR-11-EXPERT-PRO` — `@Expert_channelpro` (`UCUEiXr94u-obIqTkMAODg2w`, `45.8K` subscribers):** dedicated relay channel for **O. Arestovych** (**Decree No. 267/2025 of 2025-05-01**).\n12. **`YT-MIRROR-12-PANCHENKO88` — `@DianaPanchenko88` (`UCurgcc4qcz3-_ibm3XxKUjQ`, created `2025-11-01`, `3.66K` subscribers):** eponymous mirror of treason-indicted **Diana Panchenko** (**Decree No. 23/2023 of 2023-01-15**).\n13. **`YT-MIRROR-13-GOLDARB` — `Maksym Holdarb` (`UCBSYa5zQvjL-Y2D89L_OyEw`, `223K` subscribers):** primary channel of **Maksym Holdarb** (**Decree No. 153/2022 of 2022-03-19**, SBU indictment of `2023-10-19`), amplified by `ru-RU` bot `UCyJhcLcaGjrATBIDEBlyMeA`.\n14. **`YT-MIRROR-14-DMYTRUK` — `Artem Dmytruk` (`UCiV8lEPfB0NVwfgWuSXSaiQ`, created `2025-07-05`, + clone `UCVcubqawDRGG2ERUsAiv_4A`):** eponymous channel of **Artem Dmytruk** launched 13 days after **Decree No. 417/2025 of 2025-06-22**.\n15. **`YT-MIRROR-15-ZNAYPRAVDU` — `ZNAI PRAVDU` (`UCgtxz5_xa6xkDTghNPkuRYw`, created `2025-04-21`, `65.1K` subscribers):** relay channel of treason-indicted **Oleksandr Dubinskyi** (US OFAC SDN since 2021, Art. 111(1) CCU).\n\n---\n\n### 4. Interactive Verification & Open Machine-Readable Feeds\n\nAll **27 compliance indicators** (`12` corporate clusters in the live Ukrainian EDR and `15` active YouTube mirrors of NSDC-sanctioned subjects) are verified daily on the oversight card [`/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05`](/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05), in the [`/en/edr`](/en/edr) registry section, and via the machine-readable JSON feed [`/feeds/agency-blindness.json`](/feeds/agency-blindness.json).\n",
    "related_tool_or_link": "/en/blindness/ua-sanctions-sieve-youtube-mirrors-edr-2026-11-05"
  },
  {
    "id": "M-19",
    "slug": "method-19-eu-uk-swiss-corporate-safe-haven-unsanctioned-vpk-directors-2026",
    "date": "2026-11-06",
    "category": "OSINT BLIND SPOTS",
    "badge": "METHOD #19 · COMPANIES HOUSE UK / OR.JUSTICE.CZ / INSEE RNE FR / HANDELSREGISTER DE × VPK DIRECTORS",
    "title": "European, UK, Swiss, NATO & UAE Corporate and Real-Estate Safe Haven of Russian VPK Executives: Cross-Registry Screening of 364 Unsanctioned Defense Plant Directors Across 14 Jurisdictions (>1.83B EUR, 2026)",
    "subtitle": "Primary-source screening of 364 unsanctioned directors and chief engineers of Russian defense plants (118 with verified 12-digit FNS personal TINs) across corporate and land registries in the UK, Czechia, France, Germany, Switzerland, Spain, Belgium, Denmark, Italy, Austria, Cyprus, Montenegro, Serbia, and the UAE: 27 verified dossiers (from UK companies ELASTOMER TRADING LTD 05763152 of V.A. Belikov and VSMPO TIRUS LTD 03821218 to Czech firms Prag Red Star s.r.o. ICO 28367588 of P.D. Motrenko and GN BELIGAN s.r.o. ICO 26119269 of A.B. Babikov, German Ruspolymet GmbH HRB 81356 and P-D Glasseiden GmbH Oschatz HRB 21085, and French POWERJET SA SIREN 434020822, SCI OLARA SIREN 528708076, and NLMK STRASBOURG SAS SIREN 425125150) plus the 10-entry homonym disambiguation log.",
    "read_time": "16 min read",
    "tags": [
      "Companies House UK",
      "or.justice.cz",
      "INSEE RNE France",
      "Handelsregister DE",
      "Zefix Switzerland",
      "ELASTOMER TRADING 05763152",
      "Prag Red Star ICO 28367588",
      "GN BELIGAN ICO 26119269",
      "Ruspolymet GmbH HRB 81356",
      "P-D Glasseiden HRB 21085",
      "POWERJET SIREN 434020822"
    ],
    "summary": "European, UK, Swiss, NATO & UAE Corporate and Real Estate Safe Haven of 364 Unsanctioned Russian VPK Executives (27 Verified Dossiers)",
    "content_md": "### 1. Summary Statistics of Cross-Registry Screening Across EU, UK, Swiss, NATO & UAE Jurisdictions\n\nCross-referencing the open [Sanctions Blind Spot (`/en/sanctions-gap`)](/en/sanctions-gap) watchlist as of `6 November 2026` covers **`364` executive and technical leadership positions at Russian defense-industrial (VPK) enterprises** (`328` named general directors and chief designers plus `36` technical leadership positions) that remain outside personal sanctions of the United States (`US OFAC`), the European Union (`EU Council`), and the United Kingdom (`UK FCDO`).\n* **Mathematically verified 12-digit Russian FNS personal TINs (`inn_fl` via `modulo-11` checksum):** `118` executives (`0` invalid checksums; remaining personal TINs are redacted in public EGRUL extracts under Russian Government Decree No. 729).\n* **Verified foreign corporate and real-estate dossiers documented:** `27` primary-source entities and property holdings (`0` conflated homonyms).\n* **Unsanctioned VPK executives from the `364` list linked directly or via plant family/corporate structures to foreign assets:** `70` directors and chief engineers.\n* **Foreign jurisdictions covered (`14` countries):** United Kingdom (`Companies House`, `HM Land Registry`), Czechia (`or.justice.cz`, `Katastr nemovitosti`), France (`INSEE / RNE`), Germany (`Handelsregister`), Switzerland (`Zefix`), Spain (`Registro de la Propiedad` Mallorca), Belgium (`KBO/BCE`), Denmark (`CVR`), Italy (`Registro Imprese`), Austria (`Firmenbuch`), Cyprus (`DRCOR`), Montenegro (`CRPS`, NATO member), Serbia (`APR`), and the United Arab Emirates (`Dubai Land Department`, `Meydan / DED / CBLS`).\n* **Combined conservative valuation of documented foreign industrial plants, corporate capital, and luxury real estate:** over **`EUR 1.83 billion`** (`EUR 1,831,500,000+`).\n\n---\n\n### 2. Key Findings from Live Primary-Source Registry Audits (November 2026)\n\n1. **Direct UK Personal Company of Synthetic Rubber Defense Plant CEO (`EU-VPK-001`):** Vladimir Anatolyevich Belikov (`INN 711302262916`, General Director of OJSC Efremov Synthetic Rubber Plant `INN 7113000847`, `OGRN 1027100507136`) is personally registered in `UK Companies House` under active UK company **`ELASTOMER TRADING LIMITED`** (`UK Company No. 05763152`, Essex) at his residential addresses in Efremov, Tula Region.\n2. **1 October 2026 Transfer of VSMPO-AVISMA's UK Titanium Hub to a Hong Kong Shell (`EU-VPK-002` & `EU-VPK-003`):** Under unsanctioned PJSC VSMPO-AVISMA Corporation CEO Dmitry Valeryevich Trifonov (`INN 660749969244`, plant `INN 6607000556`, `OGRN 1026600784011`), active UK subsidiary **`VSMPO TIRUS LIMITED`** (`UK Company No. 03821218`, Redditch, Worcestershire) filed a PSC change on **`1 October 2026`** transferring `75%+` control from Verkhnyaya Salda to Hong Kong vehicle **`Quri Investment Limited`** (`HK Reg. No. 80981921`), while German **`VSMPO-Tirus GmbH`** (`Amtsgericht Offenbach HRB 56728`), Swiss **`Tirus International SA`** (`CHE-113.749.131`), and French **`PASONMA SCI`** (`SIREN 804466050`) remain registered.\n3. **Direct Prague Companies of Rostvertol CEO (`EU-VPK-004`) and Izhevsk UAV Enterprise Director (`EU-VPK-025`):** Petr Danilovich Motrenko (`INN 616509027908`, born `20.03.1958`, long-serving head of JSC Rostvertol `INN 6161021690` — manufacturer of Mi-28N and Mi-35M attack helicopters) holds a `55%` stake in active Prague company **`Prag Red Star. s.r.o.`** (`ICO 28367588`, Prague 10) registered at the factory address `Novatorov St. 5, Rostov-on-Don`, while Anatoly Borisovich Babikov (`INN 183400580620`, born `16.05.1966`, director and co-founder of Izhevsk UAV manufacturer LLC Unmanned Systems `INN 1831119511`, `OGRN 1061831042954`) serves as active sole statutory director (`jednatel`) and `40%` owner of Prague-based **`GN BELIGAN, s.r.o.`** (`ICO 26119269`, Prague 2, `subjektId=528657`) registered at his Izhevsk residential address `ul. Sojuznaja 131/158`.\n4. **Dusseldorf Subsidiary of the Klochay Special-Metallurgy Dynasty (`EU-VPK-005`) and Saxony Co-Founder of SEZ Alabuga Fiberglass Plant (`EU-VPK-026`):** Unsanctioned JSC Ruspolymet (`INN 5251008501`, `OGRN 1055214499966`, superalloy rings for Kalibr cruise missile and combat aircraft engines) Chairman Viktor Vladimirovich Klochay (`INN 773467239491`) and CEO Maksim Viktorovich Klochay (`INN 524830578722`) maintain **`Ruspolymet GmbH`** (`Amtsgericht Duesseldorf HRB 81356`, `Graf-Adolf-Platz 6`), while Saxony-based **`P-D Glasseiden GmbH Oschatz`** (`Amtsgericht Leipzig HRB 21085`) held a `25%` stake until September `2025` in the SEZ Alabuga fiberglass plant (`INN 1646022610`, `OGRN 1071674003477`) led by unsanctioned CEO Ayrat Gusmanovich Khalimov (`INN 164806141252`).\n5. **Active Paris Joint Venture of Kalibr & Kh-101 Engine Manufacturer UEC-Saturn (`EU-VPK-006`):** PJSC UEC-Saturn (`INN 7610052644`, `OGRN 1027601106169`), led by unsanctioned General Director Ilya Borisovich Konyukhov (`INN 761021209203`), retains `50%` of Paris-based **`POWERJET SA`** (`SIREN 434020822`), where Russian UEC executives remain listed as board administrators in the French RNE registry.\n6. **London Apartments, French Riviera SCIs, Mallorca Villas, Prague Property & Dubai Holdings (`EU-VPK-007` .. `EU-VPK-015`):** Westminster apartment held by the family of Lancet loitering munition creator (`ZALA Aero` / executive director K.I. Abashkin `INN 183112969152`), Saint-Jean-Cap-Ferrat villa **`SCI OLARA`** (`SIREN 528708076`) and South Kensington apartments **`9-11 MANSON PLACE LIMITED`** (`02186156`) linked to the Yakovlev / Irkutsk Aviation Plant (`INN 3807002509`, Su-30SM2) executive contour, Prague real estate of Tactical Missiles Corporation KTRV (**`Alterra s.r.o.`** `ICO 28437497` and **`Riomax s.r.o.`** `ICO 09428089`, parent `INN 5099000013`), `5` coastal villas in Mallorca and a beachfront palace in `XXII Carat` on Palm Jumeirah linked to Kazan defense plant JSC Zavod Elekon (`INN 1657032272`), and Cap-Ferrat villas (**`SCI UMBTO`** `SIREN 452739444`, **`SCI PETR`** `SIREN 507436574`, **`SCI KRISTINE`** `SIREN 527673495`, **`SCI ABI`** `SIREN 911031243`, **`SCI NATALYA`** `SIREN 488445834`) plus Czech electronics plant **`NVision Czech Republic a.s.`** (`ICO 47550937` & `ICO 08615608`) linked to the AFK Sistema conglomerate (JSC Mikron `INN 7735007358` CEO G.Sh. Khasyanova `773109038996` and JSC Kronshtadt `INN 7808035536` CEO V.N. Dontsov `381004363944`).\n7. **Unfrozen European Industrial Empires of VPK Raw-Material Suppliers and Shvabe's Swiss Optical Footprint (`EU-VPK-016` .. `EU-VPK-024`, `EU-VPK-027`):** Rolling mills of PJSC NLMK (`INN 4823006703`) under unsanctioned President S.M. Karataev (`INN 771503823567`) in France (**`NLMK STRASBOURG SAS`** `SIREN 425125150` and **`NLMK COLOURS FRANCE SAS`** `SIREN 347618134`), Belgium (`KBO 0473.110.669`), Denmark (`CVR 10092922`), Italy (`CF 02810870234`), and Cyprus (`HE 90278`), chemical holdings of EuroChem / JSC NAK Azot (`INN 7116000066`, CEO Y.A. Skobelev `352801649457`) in Belgium (`KBO 0837.473.452`) and Switzerland (`CHE-306.864.578`), Vienna trading hub **`SIBUR International GmbH`** (`FN 229446 x`, JSC Voronezhsintezkauchuk `INN 3663002167`), the Swiss-Balkan-French network linked to LLC Stavrolen (`INN 2624022320`) / LUKOIL (`V.V. Shulindin` `503601547453`) in Montenegro (`PIB 02630419`), Serbia (`MB 07524951`), Geneva (`CHE-100.738.922`), and France (`SIREN 801555566`), and Zurich optical hub **`Shvabe-Zurich GmbH`** (`CHE-113.501.588`) linked to Shvabe optical plants (JSC LZOS `INN 5026000300` CEO A.N. Ignatov `502600136064`, JSC ZOMZ `INN 5042010793` CEO K.G. Pertsev `246603898668`, and JSC MZ Sapfir `INN 7726014172` CEO S.A. Kuznetsov `502600140462`).\n\n---\n\n### 3. Complete Register of 27 Verified Foreign Corporate & Property Dossiers (`EU-VPK-001` .. `EU-VPK-027`)\n\n| ID | Asset Class | Screened VPK Executive (INN FL) | Russian Defense Plant (INN / OGRN) | Country | Foreign Entity & Registry ID | Est. Value (`EUR`) | 2026 Status |\n| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |\n| **`EU-VPK-001`** | `DIRECT_PERSONAL_COMPANY` | Belikov Vladimir Anatolyevich (`711302262916`) | OJSC Efremov Synthetic Rubber Plant (Efremov, Tula Region) (`INN 7113000847`, `OGRN 1027100507136`) | United Kingdom (`GB`) | **ELASTOMER TRADING LIMITED** (`UK Company No. 05763152`) | `GBP 450,000+ trade turnover / equity` | ACTIVE (accounts filed through 2025/2026) |\n| **`EU-VPK-002`** | `SANCTIONS_EVASION_TRANSFER_2026` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | United Kingdom (`GB`) | **VSMPO TIRUS LIMITED** (`UK Company No. 03821218 (transferred to HK Reg. No. 80981921 on 2026-10-01)`) | `EUR 25,000,000+ UK titanium warehouse & receivables` | ACTIVE (PSC transferred 01 Oct 2026 from VSMPO-AVISMA to Quri Investment Limited, Hong Kong) |\n| **`EU-VPK-003`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | Germany / Switzerland (`DE`) | **VSMPO-Tirus GmbH / Tirus International SA / PASONMA SCI** (`Amtsgericht Offenbach HRB 56728 (ex-Frankfurt HRB 47196) / Swiss UID CHE-113.749.131 / France SIREN 804466050 (SIRET 80446605000018)`) | `EUR 40,000,000+ inventory & real estate in Hesse and Vaud` | ACTIVE (European titanium service center, Managing Director Eugen Kapuler & Swiss holding) |\n| **`EU-VPK-004`** | `DIRECT_PERSONAL_COMPANY` | Motrenko Pyotr Danilovich (`616509027908`) | JSC Rostvertol (Rostov-on-Don) (`INN 6161021690`, `OGRN 1026102899228`) | Czechia (`CZ`) | **Prag Red Star. s.r.o.** (`Czech ICO 28367588 (File C 136527, Mestsky soud v Praze)`) | `EUR 1,200,000+ Prague real estate holding vehicle` | ACTIVE (latest registry update 19 Mar 2025) |\n| **`EU-VPK-005`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Klochay Maksim Viktorovich / Klochay Viktor Vladimirovich (`524830578722`) | JSC Ruspolymet (Kulebaki, Nizhny Novgorod Region) (`INN 5251008501`, `OGRN 1055214499966`) | Germany (`DE`) | **Ruspolymet GmbH** (`Amtsgericht Duesseldorf HRB 81356`) | `EUR 3,500,000+ German corporate capital & trade claims` | REGISTERED IN HANDELSREGISTER DUESSELDORF (Managing Director: Andriy Lunyev) |\n| **`EU-VPK-006`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Konyukhov Ilya Borisovich / Khramin Roman Vladimirovich / Ilyin Igor Valeryevich (`761021209203`) | PJSC UEC-Saturn (Rybinsk, Yaroslavl Region) (`INN 7610052644`, `OGRN 1027601106169`) | France (`FR`) | **POWERJET SA** (`France SIREN 434020822 (SIRET 43402082200012 / 43402082200046; Auditor Forvis Mazars SIREN 784824153)`) | `EUR 15,000,000+ 50% equity, IP rights & escrow accounts in Paris` | ACTIVE (50/50 JV with Russian UEC/Saturn board members Ilia Koniukhov, Aleksandre Artiukhov, Aleksandre Gratchev & Igor Chistyunin still on RNE registry) |\n| **`EU-VPK-007`** | `FAMILY_REAL_ESTATE` | Abashkin Konstantin Igorevich (ZALA Aero / Lancet Zakharov family perimeter) (`183112969152`) | LLC CST / LLC Aeroscan (Izhevsk, Udmurt Republic) (`INN 1841015504`, `OGRN 1101841007938`) | United Kingdom (`GB`) | **Luxury Residential Apartment in Westminster, Central London (~100 sq.m)** (`HM Land Registry Westminster Freehold/Leasehold Title (acquired 2018 for GBP 1,500,000)`) | `EUR 1,800,000 (GBP 1,500,000 purchase price)` | HELD BY UNSANCTIONED FAMILY MEMBERS IN UK |\n| **`EU-VPK-008`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich / Dolzhenkov Nikolay Nikolayevich (`771400228510`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | France (`FR`) | **SCI OLARA (Villa with swimming pool in Saint-Jean-Cap-Ferrat)** (`France SIREN 528708076 (SIRET 52870807600013 / RCS Paris D 528 708 076)`) | `EUR 8,500,000+ Cap-Ferrat villa` | ACTIVE (Associates: Anastasia Demchenko born 1989-06 & Oleg Demchenko Jr. born 1995-06; Gerant: Alexander Lette born 1976-12) |\n| **`EU-VPK-009`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich (PJSC Yakovlev / Irkut perimeter) (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | United Kingdom (`GB`) | **9-11 MANSON PLACE LIMITED & South Kensington Apartments (Queens Gate / Manson Place)** (`UK Company No. 02186156 (9-11 Manson Place SW7 5JP & Flat 2, 64 Queens Gate SW7 5JP)`) | `EUR 5,200,000+ South Kensington apartments` | ACTIVE (Director Bernard Jansen Van Vuuren appointed 19 Aug 2024) |\n| **`EU-VPK-010`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Dolzhenkov Nikolay Nikolayevich / Dotsenko Oleg Mikhaylovich (`771400228510`) | JSC Ural Works of Civil Aviation (JSC UZGA, Yekaterinburg) (`INN 6664013640`, `OGRN 1026605766560`) | Czechia (`CZ`) | **OLVY international s.r.o. (Karlovy Vary) & historical UZGA claims in Aircraft Industries, a.s.** (`Czech ICO 25238710 (Karlovy Vary) & ICO 27174841 (Kunovice)`) | `EUR 2,400,000+ Karlovy Vary real estate & residual claims` | ICO 25238710 REGISTERED IN KARLOVY VARY; ICO 27174841 DIVESTED FROM UZGA WITH RESIDUAL CLAIMS AUDIT |\n| **`EU-VPK-011`** | `FAMILY_REAL_ESTATE` | Yarmolyuk Vladimir Nikolayevich / Bogatikov Sergey Anatolyevich / Zaytsev Igor Petrovich (`774301423890`) | JSC Tactical Missiles Corporation (JSC KTRV, Korolyov, Moscow Region) (`INN 5099000013`, `OGRN 1035003364021`) | Czechia (`CZ`) | **Alterra s.r.o. (Praha 5 Penthouse) & Riomax s.r.o. (4-Story Building in Praha 3 Zizkov)** (`Czech ICO 28437497 (File C 141450) & Czech ICO 09428089 (File C 336133)`) | `EUR 7,100,000+ (EUR 6M Zizkov building + EUR 1.1M Barrandov/Hlubocepy penthouse)` | ACTIVE ON REGISTRY (locally frozen by Czech FAU, awaiting EU-wide confiscation & KTRV deputy designations) |\n| **`EU-VPK-012`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Zavod Elekon / JSC Kazan Helicopter Plant (Kazan, Tatarstan) (`INN 1657032272`, `OGRN 1021603145541`) | Spain (`ES`) | **5 Luxury Villas in Calvia & Palma de Mallorca (originally acquired via JSC Zavod Elekon)** (`Registro de la Propiedad Calvia / Palma (5 coastal villas, Balearic Islands, Spain)`) | `EUR 18,000,000+ (5 Balearic villas)` | UNDER SPANISH NATIONAL POLICE MONEY-LAUNDERING SEIZURE PROBE (2025-2026) |\n| **`EU-VPK-013`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Russian Helicopters (Managing Org of KVZ & U-UAZ) / JSC Zavod Elekon (`INN 7731559044`, `OGRN 1077746003334`) | United Arab Emirates (`AE`) | **Beachfront Palace Villa in '22 Carat' Gated Compound, Palm Jumeirah, Dubai** (`Dubai Land Department Plot / Villa in XXII Carat, West Crescent, Palm Jumeirah`) | `EUR 22,000,000+ Palm Jumeirah villa` | ACTIVE PRIVATE HOLDING IN DUBAI |\n| **`EU-VPK-014`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khasyanova Gulnara Shamilyevna / Krasnikov Gennady Yakovlevich (`773109038996`) | JSC Mikron (Zelenograd, Moscow) (`INN 7735007358`, `OGRN 1027700073466`) | Czechia (`CZ`) | **NVision Czech Republic a.s. (Votice) & NVision Czech Republic ICT a.s. (Praha 4)** (`Czech ICO 47550937 (File B 1995) & Czech ICO 08615608 (File B 24756)`) | `EUR 9,000,000+ Votice electronics factory & Prague ICT entity` | ACTIVE (restructured onto local management buyout shell to evade AFK Sistema freeze) |\n| **`EU-VPK-015`** | `FAMILY_REAL_ESTATE` | Dontsov Vasily Nikolayevich / Khasyanova Gulnara Shamilyevna (AFK Sistema / RTI / JSC Kronshtadt perimeter) (`381004363944`) | JSC Kronshtadt (Moscow / Dubna UAV Manufacturing Plant) (`INN 7808035536`, `OGRN 1027809176141`) | France (`FR`) | **Cap-Ferrat Active Villas (SCI UMBTO / SCI PETR / SCI KRISTINE / SCI ABI / TASHA) & Cannes / Monaco Cluster (SCI NATALYA / NOVITEZ)** (`France SIREN 452739444 (SIRET 45273944400019), SIREN 507436574 (SIRET 50743657400010), SIREN 527673495 (SIRET 52767349500018), SIREN 911031243 (SIRET 91103124300015), SIREN 910453273 (SIRET 91045327300013), SIREN 488445834 (SIRET 48844583400028) & SIREN 928833375 (SIRET 92883337500019)`) | `EUR 35,000,000+ Saint-Jean-Cap-Ferrat & Cannes villas` | ACTIVE IN RNE CAP-FERRAT (SCI UMBTO 452739444, SCI PETR 507436574, SCI KRISTINE 527673495, SCI ABI 911031243, NOVITEZ 928833375; SCI NATALYA 488445834 in liquidation since 2026-01-02) |\n| **`EU-VPK-016`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | France (`FR`) | **NLMK STRASBOURG SAS & NLMK COLOURS FRANCE SAS** (`France SIREN 425125150 (SIRET 42512515000028, Auditor PwC SIREN 672006483) & SIREN 347618134 (SIRET 34761813400089)`) | `EUR 120,000,000+ French industrial plants & port terminal` | ACTIVE OPERATING STEEL PLANTS IN FRANCE (Directors Barend De Vos, Giovanni Borinelli, Maria Starostina) |\n| **`EU-VPK-017`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | Belgium / Denmark / Italy / Cyprus (`BE`) | **NLMK Belgium Holdings N.V. / NLMK DanSteel A/S / NLMK Verona S.p.A. / Fletcher Group Holdings Ltd** (`KBO 0473.110.669 (BE) / CVR 10092922 (DK) / CF 02810870234 & REA VR 285265 (IT) / HE 90278 (CY)`) | `EUR 650,000,000+ steel mills in Belgium, Denmark, and Italy` | ACTIVE OPERATING STEEL ROLLING MILLS ACROSS 4 EU/NATO STATES |\n| **`EU-VPK-018`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Skobelev Yevgeny Aleksandrovich (`352801649457`) | JSC Novomoskovsk Joint Stock Company Azot (Novomoskovsk, Tula Region) (`INN 7116000066`, `OGRN 1027100507378`) | Switzerland / Belgium / Cyprus (`CH`) | **EuroChem Group AG (Zug) / EuroChem Antwerpen NV / AIM Capital Limited** (`Swiss UID CHE-306.864.578 / Belgian KBO 0837.473.452 / Cyprus HE 133817`) | `EUR 400,000,000+ Antwerp chemical complex & Zug headquarters` | ACTIVE (under ring-fencing compliance scrutiny in Belgium, Switzerland & Cyprus) |\n| **`EU-VPK-019`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Zolototrubov Vyacheslav Nikolayevich (`366304814231`) | JSC Voronezhsintezkauchuk (Voronezh) (`INN 3663002167`, `OGRN 1023602096539`) | Austria (`AT`) | **SIBUR International GmbH** (`Austrian Firmenbuch FN 229446 x`) | `EUR 30,000,000+ Austrian corporate equity & trade receivables` | REGISTERED IN VIENNA FIRMENBUCH (European petrochemical trading hub of PJSC SIBUR Holding) |\n| **`EU-VPK-020`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Switzerland / Cyprus / France (`CH`) | **LITASCO SA (Geneva) & LUKOIL Marine Lubricants Ltd (Cyprus / France branch)** (`Swiss UID CHE-100.738.922 / Cyprus HE 94346 / French SIREN 801555566`) | `EUR 250,000,000+ Swiss/Cyprus trading equity` | ACTIVE ON SWISS, CYPRUS AND FRENCH REGISTRIES |\n| **`EU-VPK-021`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Montenegro (NATO) / Serbia (`ME`) | **LUKOIL MONTENEGRO d.o.o. Podgorica & LUKOIL SRBIJA a.d. Beograd** (`Montenegro PIB 02630419 / Serbia MB 07524951 (PIB 100000830)`) | `EUR 85,000,000+ Balkan depots & retail network` | ACTIVE FUEL & PETROCHEMICAL DISTRIBUTION NETWORKS IN NATO MEMBER MONTENEGRO & SERBIA |\n| **`EU-VPK-022`** | `EU_BALKAN_UAE_CONDUIT` | Mokichev Sergey Vladimirovich / Denisenko Aleksandr Nikolayevich / Oreshkin Sergey Ivanovich / Guseva Aleksandra Sergeyevna (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | OJSC EPK Samara / JSC EPK Saratov (Samara / Saratov) (`INN 6316040924`, `OGRN 1026301154934`) | Cyprus / United Arab Emirates (`CY`) | **E.P.K. HOLDINGS LIMITED (historical Cyprus parent) -> Ace Bearings FZE (active UAE bearing conduit)** (`Cyprus HE 96811 (Dissolved) -> UAE Free Zone License No. 3291 / CBLS 11443987`) | `EUR 12,000,000+ bearing re-export flows` | CYPRUS HE 96811 DISSOLVED; RE-ROUTED TO ACTIVE UAE CONDUIT ACE BEARINGS FZE (CBLS 11443987) |\n| **`EU-VPK-023`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Davydov Eduard Malikovich / Nazarov Andrey Gennadyevich (`071405665507`) | JSC Bashkir Soda Company (Sterlitamak, Republic of Bashkortostan) (`INN 0268008010`, `OGRN 1020202079479`) | Cyprus (`CY`) | **MODISANNA LIMITED (Cyprus dividend conduit & residual European banking trail)** (`Cyprus Reg. No. HE 129218`) | `EUR 50,000,000+ historical Cyprus dividend outflows` | DISSOLUTION FOLLOWING VOLUNTARY LIQUIDATION (residual Cyprus/EU compliance & banking audit trail) |\n| **`EU-VPK-024`** | `EU_BALKAN_UAE_CONDUIT` | Khasyanova G.S. (Mikron) / Borisov A.A. (NPP Istok) / Dotsenko O.M. (UZGA) / Novikov A.A. (KNIRTI) (`773109038996`) | JSC Mikron (7735007358) / JSC NPP Istok (5050108496) / JSC UZGA (6664013640) / JSC KNIRTI (4007017378) (`INN 5050108496`, `OGRN 1135050007400`) | United Arab Emirates / Serbia (`AE`) | **EDM L.L.C-FZ (Dubai) / Turboshaft FZE (UAE) / Dream Lite Trading LLC (Dubai) / KOMINVEX DOO (Belgrade)** (`Meydan 2200911.01 / UAE CBLS 11967354 / Dubai DED 629360 / Serbia APR MB 20047038 (PIB 104004847, in bankruptcy)`) | `EUR 35,000,000+ illicit dual-use electronics & aviation shipments` | UAE FREE-ZONE CONDUITS ACTIVE; SERBIAN KOMINVEX MB 20047038 IN BANKRUPTCY AFTER OFAC DESIGNATION |\n| **`EU-VPK-025`** | `DIRECT_PERSONAL_COMPANY` | Babikov Anatoly Borisovich / Tsallagov Kirill Aleksandrovich (`183400580620`) | LLC Unmanned Systems / LLC Supercam (Izhevsk, Udmurt Republic) (`INN 1831119511`, `OGRN 1061831042954`) | Czechia (`CZ`) | **GN BELIGAN, s.r.o.** (`Czech ICO 26119269 (File C 71780, Mestsky soud v Praze, subjektId 528657)`) | `EUR 350,000+ Czech corporate vehicle & Vinohrady / Kladno assets` | ACTIVE ON CZECH COMMERCIAL REGISTRY (verified extract 06 Nov 2026) |\n| **`EU-VPK-026`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khalimov Ayrat Gusmanovich (`164806141252`) | LLC Tatneft-Steklovolokno / LLC P-D Tatneft-Alabuga Fiberglass (SEZ Alabuga, Yelabuga, Tatarstan) (`INN 1646022610`, `OGRN 1071674003477`) | Germany (`DE`) | **P-D Glasseiden GmbH Oschatz (Preiss-Daimler Group)** (`Amtsgericht Leipzig HRB 21085`) | `EUR 14,500,000+ German-installed glass furnace technology & settlement claims` | ACTIVE IN SAXONY (Managing Directors Joeran Pfuhl & Markus Stephan; 25% SEZ Alabuga JV stake divested in Sep 2025) |\n| **`EU-VPK-027`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Ignatov Aleksandr Nikolayevich (LZOS) / Pertsev Konstantin Gennadyevich (ZOMZ) / Kuznetsov Sergey Alekseyevich (MZ Sapfir) (`502600136064`) | JSC LZOS (5026000300) / JSC ZOMZ (5042010793) / JSC MZ Sapfir (7726014172) / JSC LOMO (7804002321) (`INN 5026000300`, `OGRN 1025003178397`) | Switzerland (`CH`) | **Shvabe-Zurich GmbH (in Liquidation / Residual Swiss Banking & Distributorship Trail)** (`Swiss UID CHE-113.501.588 (CH-020.4.034.889-5, Canton Zurich)`) | `EUR 4,500,000+ historical Swiss trade settlement & optical distribution receivables` | LIQUIDATION CLOSED BY BEZIRKSGERICHT ZUERICH (08 Feb 2024 / SHAB 15 Feb 2024; residual Swiss/EU settlement & distributor audit) |\n\n---\n\n### 4. Engineer Anti-Homonym Disambiguation Log (`10` Rejected False Positives)\n\n| # | Screened VPK Target | Rejected Foreign Registry Record | Documentary Disambiguation Reason |\n| :--- | :--- | :--- | :--- |\n| `#1` | Klochay Viktor Vladimirovich (born 1957, INN 773467239491) / Klochay Maksim Viktorovich (born 1982, INN 524830578722) — JSC Ruspolymet (INN 5251008501) | `ADVENTIS s.r.o. (ICO 25448676, subId 286288) & KERAMETUNION s.r.o. (ICO 25038702, subId 305673), Prague, Czechia (or.justice.cz)` | REJECTED HOMONYMS (UKRAINIAN CITIZENS): directors Oleksandr Klochay (born 1965-07-24, Kyiv, Ukraine) and Olena Klochay (born 1966-07-19, Donetsk, Ukraine) are Ukrainian nationals residing in Czechia since 1999 with zero relation to the Kulebaki Klochay family (whose verified German subsidiary is Ruspolymet GmbH, HRB 81356 in Duesseldorf). |\n| `#2` | Belikov Vladimir Anatolyevich (born 1962-10, INN 711302262916) — OJSC Efremov Synthetic Rubber Plant (INN 7113000847) | `Pro Scientifie and Technical Service spol. s r.o. (ICO 26144131, subId 411507), Prague 4, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Serguei Belikov (born 1968-09-15, Omsk, Russian Federation) has a different first name, date of birth, and city (Belikov's verified UK entity matched by his Efremov home address is ELASTOMER TRADING LIMITED, Company No. 05763152). |\n| `#3` | Kostyunin Pavel Andreyevich (INN 510203980877) — JSC Stratim (INN 7720901379, military UAV developer) | `SIPNET eu s.r.o. (ICO 28468074, subId 681928), Karlovy Vary, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Kostyunin (born 1966-06-21, Moscow / Odintsovo) belongs to a different age cohort and has no corporate link to JSC Stratim founder Pavel Kostyunin. |\n| `#4` | Serikov Vladimir Vitalyevich (INN 482108109320) — PJSC Energiya (INN 4821000142, Yelets) | `Czech Commercial Register or.justice.cz (subId 185282)` | REJECTED HOMONYMS: shareholders Serikov (born 1962-01-31 and 1985-09-24, Saint Petersburg) have no connection to Yelets PJSC Energiya CEO Vladimir Serikov. |\n| `#5` | Skobelev Yevgeny Aleksandrovich (born 1981, INN 352801649457) — JSC NAK Azot (INN 7116000066, Novomoskovsk) | `Czech Commercial Register or.justice.cz (subId 515670 & subId 534056)` | REJECTED HOMONYMS: individuals Skobelev (born 1962-06-16, Orenburg) and Skobelev (born 1960-07-03, Tolyatti) do not match by date of birth or region. |\n| `#6` | Krasnikov Gennady Yakovlevich (born 1958-04-30, INN 773500554126) — JSC Mikron (INN 7735007358, Zelenograd) | `Czech Commercial Register or.justice.cz (subId 512499)` | REJECTED HOMONYM: shareholder Krasnikov (born 1963-12-24, Dolgoprudny) has a different date of birth. |\n| `#7` | Kolchin Dmitry Vladimirovich (INN 165505608922) — PJSC Khimprom (INN 2124009521, Novocheboksarsk) | `Czech Commercial Register or.justice.cz (subId 410791)` | REJECTED HOMONYM: shareholder Kolchin (born 1976-10-06, Engels, Saratov Region) does not match by region or corporate profile. |\n| `#8` | Tikhonov Igor Borisovich (JSC Omsky Kauchuk INN 5501023216) / Shapovalov Igor Aleksandrovich (UEC Baranov OMO) | `KARTA-PARIS (SIREN 501909253, Igor Tikhonov born 1971-03) & LE CHATEAU DE CALIFORNIE SCI (SIREN 505137455, Igor Shapovalov born 1984-01), French RNE` | REJECTED HOMONYMS: French RNE filings lack patronymics, Omsk residential addresses, or any corporate nexus to JSC Omsky Kauchuk or UEC. |\n| `#9` | Kozlova Yelena Viktorovna (INN 773005952299, JSC GIPKh) / Guseva Anastasiya Sergeyevna (EPK Bearings) | `AREV E-LR (SIREN 812390946, Elena Marko nee Kozlova born 1973-10), SIREN 805293735, SIREN 510719453 & SIREN 992595637 (Anastasiia Guseva born 1985-08), French RNE` | REJECTED HOMONYMS: French sole proprietors and married-name entries with zero nexus to Saint Petersburg or Samara defense plants. |\n| `#10` | LLC Geoscan (INN 7801450808, Saint Petersburg, Board Chairman Aleksey Yevgenyevich Semenov) | `GeoScan GmbH (Germany) & GeoScan AG / GeoScan Systems (Switzerland)` | REJECTED CORPORATE HOMONYMS: European geological and radar surveying companies operating under the descriptive name GeoScan have no beneficial or corporate affiliation with the Russian drone manufacturer LLC Geoscan. |\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nThe full dataset is integrated into [Sanctions Blind Spot (`/en/sanctions-gap#eu-safe-haven-executives`)](/en/sanctions-gap#eu-safe-haven-executives) and published as an open compliance feed at [`/feeds/vpk-eu-executives-safe-haven.json`](/feeds/vpk-eu-executives-safe-haven.json).\n",
    "pinned": false,
    "read_time_min": 16,
    "lead": "Primary-source screening of 364 unsanctioned directors and chief engineers of Russian defense plants (118 with verified 12-digit FNS personal TINs) across corporate and land registries in the UK, Czechia, France, Germany, Switzerland, Spain, Belgium, Denmark, Italy, Austria, Cyprus, Montenegro, Serbia, and the UAE: 27 verified dossiers (from UK companies ELASTOMER TRADING LTD 05763152 of V.A. Belikov and VSMPO TIRUS LTD 03821218 to Czech firms Prag Red Star s.r.o. ICO 28367588 of P.D. Motrenko and GN BELIGAN s.r.o. ICO 26119269 of A.B. Babikov, German Ruspolymet GmbH HRB 81356 and P-D Glasseiden GmbH Oschatz HRB 21085, and French POWERJET SA SIREN 434020822, SCI OLARA SIREN 528708076, and NLMK STRASBOURG SAS SIREN 425125150) plus the 10-entry homonym disambiguation log.",
    "body_md": "### 1. Summary Statistics of Cross-Registry Screening Across EU, UK, Swiss, NATO & UAE Jurisdictions\n\nCross-referencing the open [Sanctions Blind Spot (`/en/sanctions-gap`)](/en/sanctions-gap) watchlist as of `6 November 2026` covers **`364` executive and technical leadership positions at Russian defense-industrial (VPK) enterprises** (`328` named general directors and chief designers plus `36` technical leadership positions) that remain outside personal sanctions of the United States (`US OFAC`), the European Union (`EU Council`), and the United Kingdom (`UK FCDO`).\n* **Mathematically verified 12-digit Russian FNS personal TINs (`inn_fl` via `modulo-11` checksum):** `118` executives (`0` invalid checksums; remaining personal TINs are redacted in public EGRUL extracts under Russian Government Decree No. 729).\n* **Verified foreign corporate and real-estate dossiers documented:** `27` primary-source entities and property holdings (`0` conflated homonyms).\n* **Unsanctioned VPK executives from the `364` list linked directly or via plant family/corporate structures to foreign assets:** `70` directors and chief engineers.\n* **Foreign jurisdictions covered (`14` countries):** United Kingdom (`Companies House`, `HM Land Registry`), Czechia (`or.justice.cz`, `Katastr nemovitosti`), France (`INSEE / RNE`), Germany (`Handelsregister`), Switzerland (`Zefix`), Spain (`Registro de la Propiedad` Mallorca), Belgium (`KBO/BCE`), Denmark (`CVR`), Italy (`Registro Imprese`), Austria (`Firmenbuch`), Cyprus (`DRCOR`), Montenegro (`CRPS`, NATO member), Serbia (`APR`), and the United Arab Emirates (`Dubai Land Department`, `Meydan / DED / CBLS`).\n* **Combined conservative valuation of documented foreign industrial plants, corporate capital, and luxury real estate:** over **`EUR 1.83 billion`** (`EUR 1,831,500,000+`).\n\n---\n\n### 2. Key Findings from Live Primary-Source Registry Audits (November 2026)\n\n1. **Direct UK Personal Company of Synthetic Rubber Defense Plant CEO (`EU-VPK-001`):** Vladimir Anatolyevich Belikov (`INN 711302262916`, General Director of OJSC Efremov Synthetic Rubber Plant `INN 7113000847`, `OGRN 1027100507136`) is personally registered in `UK Companies House` under active UK company **`ELASTOMER TRADING LIMITED`** (`UK Company No. 05763152`, Essex) at his residential addresses in Efremov, Tula Region.\n2. **1 October 2026 Transfer of VSMPO-AVISMA's UK Titanium Hub to a Hong Kong Shell (`EU-VPK-002` & `EU-VPK-003`):** Under unsanctioned PJSC VSMPO-AVISMA Corporation CEO Dmitry Valeryevich Trifonov (`INN 660749969244`, plant `INN 6607000556`, `OGRN 1026600784011`), active UK subsidiary **`VSMPO TIRUS LIMITED`** (`UK Company No. 03821218`, Redditch, Worcestershire) filed a PSC change on **`1 October 2026`** transferring `75%+` control from Verkhnyaya Salda to Hong Kong vehicle **`Quri Investment Limited`** (`HK Reg. No. 80981921`), while German **`VSMPO-Tirus GmbH`** (`Amtsgericht Offenbach HRB 56728`), Swiss **`Tirus International SA`** (`CHE-113.749.131`), and French **`PASONMA SCI`** (`SIREN 804466050`) remain registered.\n3. **Direct Prague Companies of Rostvertol CEO (`EU-VPK-004`) and Izhevsk UAV Enterprise Director (`EU-VPK-025`):** Petr Danilovich Motrenko (`INN 616509027908`, born `20.03.1958`, long-serving head of JSC Rostvertol `INN 6161021690` — manufacturer of Mi-28N and Mi-35M attack helicopters) holds a `55%` stake in active Prague company **`Prag Red Star. s.r.o.`** (`ICO 28367588`, Prague 10) registered at the factory address `Novatorov St. 5, Rostov-on-Don`, while Anatoly Borisovich Babikov (`INN 183400580620`, born `16.05.1966`, director and co-founder of Izhevsk UAV manufacturer LLC Unmanned Systems `INN 1831119511`, `OGRN 1061831042954`) serves as active sole statutory director (`jednatel`) and `40%` owner of Prague-based **`GN BELIGAN, s.r.o.`** (`ICO 26119269`, Prague 2, `subjektId=528657`) registered at his Izhevsk residential address `ul. Sojuznaja 131/158`.\n4. **Dusseldorf Subsidiary of the Klochay Special-Metallurgy Dynasty (`EU-VPK-005`) and Saxony Co-Founder of SEZ Alabuga Fiberglass Plant (`EU-VPK-026`):** Unsanctioned JSC Ruspolymet (`INN 5251008501`, `OGRN 1055214499966`, superalloy rings for Kalibr cruise missile and combat aircraft engines) Chairman Viktor Vladimirovich Klochay (`INN 773467239491`) and CEO Maksim Viktorovich Klochay (`INN 524830578722`) maintain **`Ruspolymet GmbH`** (`Amtsgericht Duesseldorf HRB 81356`, `Graf-Adolf-Platz 6`), while Saxony-based **`P-D Glasseiden GmbH Oschatz`** (`Amtsgericht Leipzig HRB 21085`) held a `25%` stake until September `2025` in the SEZ Alabuga fiberglass plant (`INN 1646022610`, `OGRN 1071674003477`) led by unsanctioned CEO Ayrat Gusmanovich Khalimov (`INN 164806141252`).\n5. **Active Paris Joint Venture of Kalibr & Kh-101 Engine Manufacturer UEC-Saturn (`EU-VPK-006`):** PJSC UEC-Saturn (`INN 7610052644`, `OGRN 1027601106169`), led by unsanctioned General Director Ilya Borisovich Konyukhov (`INN 761021209203`), retains `50%` of Paris-based **`POWERJET SA`** (`SIREN 434020822`), where Russian UEC executives remain listed as board administrators in the French RNE registry.\n6. **London Apartments, French Riviera SCIs, Mallorca Villas, Prague Property & Dubai Holdings (`EU-VPK-007` .. `EU-VPK-015`):** Westminster apartment held by the family of Lancet loitering munition creator (`ZALA Aero` / executive director K.I. Abashkin `INN 183112969152`), Saint-Jean-Cap-Ferrat villa **`SCI OLARA`** (`SIREN 528708076`) and South Kensington apartments **`9-11 MANSON PLACE LIMITED`** (`02186156`) linked to the Yakovlev / Irkutsk Aviation Plant (`INN 3807002509`, Su-30SM2) executive contour, Prague real estate of Tactical Missiles Corporation KTRV (**`Alterra s.r.o.`** `ICO 28437497` and **`Riomax s.r.o.`** `ICO 09428089`, parent `INN 5099000013`), `5` coastal villas in Mallorca and a beachfront palace in `XXII Carat` on Palm Jumeirah linked to Kazan defense plant JSC Zavod Elekon (`INN 1657032272`), and Cap-Ferrat villas (**`SCI UMBTO`** `SIREN 452739444`, **`SCI PETR`** `SIREN 507436574`, **`SCI KRISTINE`** `SIREN 527673495`, **`SCI ABI`** `SIREN 911031243`, **`SCI NATALYA`** `SIREN 488445834`) plus Czech electronics plant **`NVision Czech Republic a.s.`** (`ICO 47550937` & `ICO 08615608`) linked to the AFK Sistema conglomerate (JSC Mikron `INN 7735007358` CEO G.Sh. Khasyanova `773109038996` and JSC Kronshtadt `INN 7808035536` CEO V.N. Dontsov `381004363944`).\n7. **Unfrozen European Industrial Empires of VPK Raw-Material Suppliers and Shvabe's Swiss Optical Footprint (`EU-VPK-016` .. `EU-VPK-024`, `EU-VPK-027`):** Rolling mills of PJSC NLMK (`INN 4823006703`) under unsanctioned President S.M. Karataev (`INN 771503823567`) in France (**`NLMK STRASBOURG SAS`** `SIREN 425125150` and **`NLMK COLOURS FRANCE SAS`** `SIREN 347618134`), Belgium (`KBO 0473.110.669`), Denmark (`CVR 10092922`), Italy (`CF 02810870234`), and Cyprus (`HE 90278`), chemical holdings of EuroChem / JSC NAK Azot (`INN 7116000066`, CEO Y.A. Skobelev `352801649457`) in Belgium (`KBO 0837.473.452`) and Switzerland (`CHE-306.864.578`), Vienna trading hub **`SIBUR International GmbH`** (`FN 229446 x`, JSC Voronezhsintezkauchuk `INN 3663002167`), the Swiss-Balkan-French network linked to LLC Stavrolen (`INN 2624022320`) / LUKOIL (`V.V. Shulindin` `503601547453`) in Montenegro (`PIB 02630419`), Serbia (`MB 07524951`), Geneva (`CHE-100.738.922`), and France (`SIREN 801555566`), and Zurich optical hub **`Shvabe-Zurich GmbH`** (`CHE-113.501.588`) linked to Shvabe optical plants (JSC LZOS `INN 5026000300` CEO A.N. Ignatov `502600136064`, JSC ZOMZ `INN 5042010793` CEO K.G. Pertsev `246603898668`, and JSC MZ Sapfir `INN 7726014172` CEO S.A. Kuznetsov `502600140462`).\n\n---\n\n### 3. Complete Register of 27 Verified Foreign Corporate & Property Dossiers (`EU-VPK-001` .. `EU-VPK-027`)\n\n| ID | Asset Class | Screened VPK Executive (INN FL) | Russian Defense Plant (INN / OGRN) | Country | Foreign Entity & Registry ID | Est. Value (`EUR`) | 2026 Status |\n| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |\n| **`EU-VPK-001`** | `DIRECT_PERSONAL_COMPANY` | Belikov Vladimir Anatolyevich (`711302262916`) | OJSC Efremov Synthetic Rubber Plant (Efremov, Tula Region) (`INN 7113000847`, `OGRN 1027100507136`) | United Kingdom (`GB`) | **ELASTOMER TRADING LIMITED** (`UK Company No. 05763152`) | `GBP 450,000+ trade turnover / equity` | ACTIVE (accounts filed through 2025/2026) |\n| **`EU-VPK-002`** | `SANCTIONS_EVASION_TRANSFER_2026` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | United Kingdom (`GB`) | **VSMPO TIRUS LIMITED** (`UK Company No. 03821218 (transferred to HK Reg. No. 80981921 on 2026-10-01)`) | `EUR 25,000,000+ UK titanium warehouse & receivables` | ACTIVE (PSC transferred 01 Oct 2026 from VSMPO-AVISMA to Quri Investment Limited, Hong Kong) |\n| **`EU-VPK-003`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | Germany / Switzerland (`DE`) | **VSMPO-Tirus GmbH / Tirus International SA / PASONMA SCI** (`Amtsgericht Offenbach HRB 56728 (ex-Frankfurt HRB 47196) / Swiss UID CHE-113.749.131 / France SIREN 804466050 (SIRET 80446605000018)`) | `EUR 40,000,000+ inventory & real estate in Hesse and Vaud` | ACTIVE (European titanium service center, Managing Director Eugen Kapuler & Swiss holding) |\n| **`EU-VPK-004`** | `DIRECT_PERSONAL_COMPANY` | Motrenko Pyotr Danilovich (`616509027908`) | JSC Rostvertol (Rostov-on-Don) (`INN 6161021690`, `OGRN 1026102899228`) | Czechia (`CZ`) | **Prag Red Star. s.r.o.** (`Czech ICO 28367588 (File C 136527, Mestsky soud v Praze)`) | `EUR 1,200,000+ Prague real estate holding vehicle` | ACTIVE (latest registry update 19 Mar 2025) |\n| **`EU-VPK-005`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Klochay Maksim Viktorovich / Klochay Viktor Vladimirovich (`524830578722`) | JSC Ruspolymet (Kulebaki, Nizhny Novgorod Region) (`INN 5251008501`, `OGRN 1055214499966`) | Germany (`DE`) | **Ruspolymet GmbH** (`Amtsgericht Duesseldorf HRB 81356`) | `EUR 3,500,000+ German corporate capital & trade claims` | REGISTERED IN HANDELSREGISTER DUESSELDORF (Managing Director: Andriy Lunyev) |\n| **`EU-VPK-006`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Konyukhov Ilya Borisovich / Khramin Roman Vladimirovich / Ilyin Igor Valeryevich (`761021209203`) | PJSC UEC-Saturn (Rybinsk, Yaroslavl Region) (`INN 7610052644`, `OGRN 1027601106169`) | France (`FR`) | **POWERJET SA** (`France SIREN 434020822 (SIRET 43402082200012 / 43402082200046; Auditor Forvis Mazars SIREN 784824153)`) | `EUR 15,000,000+ 50% equity, IP rights & escrow accounts in Paris` | ACTIVE (50/50 JV with Russian UEC/Saturn board members Ilia Koniukhov, Aleksandre Artiukhov, Aleksandre Gratchev & Igor Chistyunin still on RNE registry) |\n| **`EU-VPK-007`** | `FAMILY_REAL_ESTATE` | Abashkin Konstantin Igorevich (ZALA Aero / Lancet Zakharov family perimeter) (`183112969152`) | LLC CST / LLC Aeroscan (Izhevsk, Udmurt Republic) (`INN 1841015504`, `OGRN 1101841007938`) | United Kingdom (`GB`) | **Luxury Residential Apartment in Westminster, Central London (~100 sq.m)** (`HM Land Registry Westminster Freehold/Leasehold Title (acquired 2018 for GBP 1,500,000)`) | `EUR 1,800,000 (GBP 1,500,000 purchase price)` | HELD BY UNSANCTIONED FAMILY MEMBERS IN UK |\n| **`EU-VPK-008`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich / Dolzhenkov Nikolay Nikolayevich (`771400228510`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | France (`FR`) | **SCI OLARA (Villa with swimming pool in Saint-Jean-Cap-Ferrat)** (`France SIREN 528708076 (SIRET 52870807600013 / RCS Paris D 528 708 076)`) | `EUR 8,500,000+ Cap-Ferrat villa` | ACTIVE (Associates: Anastasia Demchenko born 1989-06 & Oleg Demchenko Jr. born 1995-06; Gerant: Alexander Lette born 1976-12) |\n| **`EU-VPK-009`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich (PJSC Yakovlev / Irkut perimeter) (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | United Kingdom (`GB`) | **9-11 MANSON PLACE LIMITED & South Kensington Apartments (Queens Gate / Manson Place)** (`UK Company No. 02186156 (9-11 Manson Place SW7 5JP & Flat 2, 64 Queens Gate SW7 5JP)`) | `EUR 5,200,000+ South Kensington apartments` | ACTIVE (Director Bernard Jansen Van Vuuren appointed 19 Aug 2024) |\n| **`EU-VPK-010`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Dolzhenkov Nikolay Nikolayevich / Dotsenko Oleg Mikhaylovich (`771400228510`) | JSC Ural Works of Civil Aviation (JSC UZGA, Yekaterinburg) (`INN 6664013640`, `OGRN 1026605766560`) | Czechia (`CZ`) | **OLVY international s.r.o. (Karlovy Vary) & historical UZGA claims in Aircraft Industries, a.s.** (`Czech ICO 25238710 (Karlovy Vary) & ICO 27174841 (Kunovice)`) | `EUR 2,400,000+ Karlovy Vary real estate & residual claims` | ICO 25238710 REGISTERED IN KARLOVY VARY; ICO 27174841 DIVESTED FROM UZGA WITH RESIDUAL CLAIMS AUDIT |\n| **`EU-VPK-011`** | `FAMILY_REAL_ESTATE` | Yarmolyuk Vladimir Nikolayevich / Bogatikov Sergey Anatolyevich / Zaytsev Igor Petrovich (`774301423890`) | JSC Tactical Missiles Corporation (JSC KTRV, Korolyov, Moscow Region) (`INN 5099000013`, `OGRN 1035003364021`) | Czechia (`CZ`) | **Alterra s.r.o. (Praha 5 Penthouse) & Riomax s.r.o. (4-Story Building in Praha 3 Zizkov)** (`Czech ICO 28437497 (File C 141450) & Czech ICO 09428089 (File C 336133)`) | `EUR 7,100,000+ (EUR 6M Zizkov building + EUR 1.1M Barrandov/Hlubocepy penthouse)` | ACTIVE ON REGISTRY (locally frozen by Czech FAU, awaiting EU-wide confiscation & KTRV deputy designations) |\n| **`EU-VPK-012`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Zavod Elekon / JSC Kazan Helicopter Plant (Kazan, Tatarstan) (`INN 1657032272`, `OGRN 1021603145541`) | Spain (`ES`) | **5 Luxury Villas in Calvia & Palma de Mallorca (originally acquired via JSC Zavod Elekon)** (`Registro de la Propiedad Calvia / Palma (5 coastal villas, Balearic Islands, Spain)`) | `EUR 18,000,000+ (5 Balearic villas)` | UNDER SPANISH NATIONAL POLICE MONEY-LAUNDERING SEIZURE PROBE (2025-2026) |\n| **`EU-VPK-013`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Russian Helicopters (Managing Org of KVZ & U-UAZ) / JSC Zavod Elekon (`INN 7731559044`, `OGRN 1077746003334`) | United Arab Emirates (`AE`) | **Beachfront Palace Villa in '22 Carat' Gated Compound, Palm Jumeirah, Dubai** (`Dubai Land Department Plot / Villa in XXII Carat, West Crescent, Palm Jumeirah`) | `EUR 22,000,000+ Palm Jumeirah villa` | ACTIVE PRIVATE HOLDING IN DUBAI |\n| **`EU-VPK-014`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khasyanova Gulnara Shamilyevna / Krasnikov Gennady Yakovlevich (`773109038996`) | JSC Mikron (Zelenograd, Moscow) (`INN 7735007358`, `OGRN 1027700073466`) | Czechia (`CZ`) | **NVision Czech Republic a.s. (Votice) & NVision Czech Republic ICT a.s. (Praha 4)** (`Czech ICO 47550937 (File B 1995) & Czech ICO 08615608 (File B 24756)`) | `EUR 9,000,000+ Votice electronics factory & Prague ICT entity` | ACTIVE (restructured onto local management buyout shell to evade AFK Sistema freeze) |\n| **`EU-VPK-015`** | `FAMILY_REAL_ESTATE` | Dontsov Vasily Nikolayevich / Khasyanova Gulnara Shamilyevna (AFK Sistema / RTI / JSC Kronshtadt perimeter) (`381004363944`) | JSC Kronshtadt (Moscow / Dubna UAV Manufacturing Plant) (`INN 7808035536`, `OGRN 1027809176141`) | France (`FR`) | **Cap-Ferrat Active Villas (SCI UMBTO / SCI PETR / SCI KRISTINE / SCI ABI / TASHA) & Cannes / Monaco Cluster (SCI NATALYA / NOVITEZ)** (`France SIREN 452739444 (SIRET 45273944400019), SIREN 507436574 (SIRET 50743657400010), SIREN 527673495 (SIRET 52767349500018), SIREN 911031243 (SIRET 91103124300015), SIREN 910453273 (SIRET 91045327300013), SIREN 488445834 (SIRET 48844583400028) & SIREN 928833375 (SIRET 92883337500019)`) | `EUR 35,000,000+ Saint-Jean-Cap-Ferrat & Cannes villas` | ACTIVE IN RNE CAP-FERRAT (SCI UMBTO 452739444, SCI PETR 507436574, SCI KRISTINE 527673495, SCI ABI 911031243, NOVITEZ 928833375; SCI NATALYA 488445834 in liquidation since 2026-01-02) |\n| **`EU-VPK-016`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | France (`FR`) | **NLMK STRASBOURG SAS & NLMK COLOURS FRANCE SAS** (`France SIREN 425125150 (SIRET 42512515000028, Auditor PwC SIREN 672006483) & SIREN 347618134 (SIRET 34761813400089)`) | `EUR 120,000,000+ French industrial plants & port terminal` | ACTIVE OPERATING STEEL PLANTS IN FRANCE (Directors Barend De Vos, Giovanni Borinelli, Maria Starostina) |\n| **`EU-VPK-017`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | Belgium / Denmark / Italy / Cyprus (`BE`) | **NLMK Belgium Holdings N.V. / NLMK DanSteel A/S / NLMK Verona S.p.A. / Fletcher Group Holdings Ltd** (`KBO 0473.110.669 (BE) / CVR 10092922 (DK) / CF 02810870234 & REA VR 285265 (IT) / HE 90278 (CY)`) | `EUR 650,000,000+ steel mills in Belgium, Denmark, and Italy` | ACTIVE OPERATING STEEL ROLLING MILLS ACROSS 4 EU/NATO STATES |\n| **`EU-VPK-018`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Skobelev Yevgeny Aleksandrovich (`352801649457`) | JSC Novomoskovsk Joint Stock Company Azot (Novomoskovsk, Tula Region) (`INN 7116000066`, `OGRN 1027100507378`) | Switzerland / Belgium / Cyprus (`CH`) | **EuroChem Group AG (Zug) / EuroChem Antwerpen NV / AIM Capital Limited** (`Swiss UID CHE-306.864.578 / Belgian KBO 0837.473.452 / Cyprus HE 133817`) | `EUR 400,000,000+ Antwerp chemical complex & Zug headquarters` | ACTIVE (under ring-fencing compliance scrutiny in Belgium, Switzerland & Cyprus) |\n| **`EU-VPK-019`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Zolototrubov Vyacheslav Nikolayevich (`366304814231`) | JSC Voronezhsintezkauchuk (Voronezh) (`INN 3663002167`, `OGRN 1023602096539`) | Austria (`AT`) | **SIBUR International GmbH** (`Austrian Firmenbuch FN 229446 x`) | `EUR 30,000,000+ Austrian corporate equity & trade receivables` | REGISTERED IN VIENNA FIRMENBUCH (European petrochemical trading hub of PJSC SIBUR Holding) |\n| **`EU-VPK-020`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Switzerland / Cyprus / France (`CH`) | **LITASCO SA (Geneva) & LUKOIL Marine Lubricants Ltd (Cyprus / France branch)** (`Swiss UID CHE-100.738.922 / Cyprus HE 94346 / French SIREN 801555566`) | `EUR 250,000,000+ Swiss/Cyprus trading equity` | ACTIVE ON SWISS, CYPRUS AND FRENCH REGISTRIES |\n| **`EU-VPK-021`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Montenegro (NATO) / Serbia (`ME`) | **LUKOIL MONTENEGRO d.o.o. Podgorica & LUKOIL SRBIJA a.d. Beograd** (`Montenegro PIB 02630419 / Serbia MB 07524951 (PIB 100000830)`) | `EUR 85,000,000+ Balkan depots & retail network` | ACTIVE FUEL & PETROCHEMICAL DISTRIBUTION NETWORKS IN NATO MEMBER MONTENEGRO & SERBIA |\n| **`EU-VPK-022`** | `EU_BALKAN_UAE_CONDUIT` | Mokichev Sergey Vladimirovich / Denisenko Aleksandr Nikolayevich / Oreshkin Sergey Ivanovich / Guseva Aleksandra Sergeyevna (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | OJSC EPK Samara / JSC EPK Saratov (Samara / Saratov) (`INN 6316040924`, `OGRN 1026301154934`) | Cyprus / United Arab Emirates (`CY`) | **E.P.K. HOLDINGS LIMITED (historical Cyprus parent) -> Ace Bearings FZE (active UAE bearing conduit)** (`Cyprus HE 96811 (Dissolved) -> UAE Free Zone License No. 3291 / CBLS 11443987`) | `EUR 12,000,000+ bearing re-export flows` | CYPRUS HE 96811 DISSOLVED; RE-ROUTED TO ACTIVE UAE CONDUIT ACE BEARINGS FZE (CBLS 11443987) |\n| **`EU-VPK-023`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Davydov Eduard Malikovich / Nazarov Andrey Gennadyevich (`071405665507`) | JSC Bashkir Soda Company (Sterlitamak, Republic of Bashkortostan) (`INN 0268008010`, `OGRN 1020202079479`) | Cyprus (`CY`) | **MODISANNA LIMITED (Cyprus dividend conduit & residual European banking trail)** (`Cyprus Reg. No. HE 129218`) | `EUR 50,000,000+ historical Cyprus dividend outflows` | DISSOLUTION FOLLOWING VOLUNTARY LIQUIDATION (residual Cyprus/EU compliance & banking audit trail) |\n| **`EU-VPK-024`** | `EU_BALKAN_UAE_CONDUIT` | Khasyanova G.S. (Mikron) / Borisov A.A. (NPP Istok) / Dotsenko O.M. (UZGA) / Novikov A.A. (KNIRTI) (`773109038996`) | JSC Mikron (7735007358) / JSC NPP Istok (5050108496) / JSC UZGA (6664013640) / JSC KNIRTI (4007017378) (`INN 5050108496`, `OGRN 1135050007400`) | United Arab Emirates / Serbia (`AE`) | **EDM L.L.C-FZ (Dubai) / Turboshaft FZE (UAE) / Dream Lite Trading LLC (Dubai) / KOMINVEX DOO (Belgrade)** (`Meydan 2200911.01 / UAE CBLS 11967354 / Dubai DED 629360 / Serbia APR MB 20047038 (PIB 104004847, in bankruptcy)`) | `EUR 35,000,000+ illicit dual-use electronics & aviation shipments` | UAE FREE-ZONE CONDUITS ACTIVE; SERBIAN KOMINVEX MB 20047038 IN BANKRUPTCY AFTER OFAC DESIGNATION |\n| **`EU-VPK-025`** | `DIRECT_PERSONAL_COMPANY` | Babikov Anatoly Borisovich / Tsallagov Kirill Aleksandrovich (`183400580620`) | LLC Unmanned Systems / LLC Supercam (Izhevsk, Udmurt Republic) (`INN 1831119511`, `OGRN 1061831042954`) | Czechia (`CZ`) | **GN BELIGAN, s.r.o.** (`Czech ICO 26119269 (File C 71780, Mestsky soud v Praze, subjektId 528657)`) | `EUR 350,000+ Czech corporate vehicle & Vinohrady / Kladno assets` | ACTIVE ON CZECH COMMERCIAL REGISTRY (verified extract 06 Nov 2026) |\n| **`EU-VPK-026`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khalimov Ayrat Gusmanovich (`164806141252`) | LLC Tatneft-Steklovolokno / LLC P-D Tatneft-Alabuga Fiberglass (SEZ Alabuga, Yelabuga, Tatarstan) (`INN 1646022610`, `OGRN 1071674003477`) | Germany (`DE`) | **P-D Glasseiden GmbH Oschatz (Preiss-Daimler Group)** (`Amtsgericht Leipzig HRB 21085`) | `EUR 14,500,000+ German-installed glass furnace technology & settlement claims` | ACTIVE IN SAXONY (Managing Directors Joeran Pfuhl & Markus Stephan; 25% SEZ Alabuga JV stake divested in Sep 2025) |\n| **`EU-VPK-027`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Ignatov Aleksandr Nikolayevich (LZOS) / Pertsev Konstantin Gennadyevich (ZOMZ) / Kuznetsov Sergey Alekseyevich (MZ Sapfir) (`502600136064`) | JSC LZOS (5026000300) / JSC ZOMZ (5042010793) / JSC MZ Sapfir (7726014172) / JSC LOMO (7804002321) (`INN 5026000300`, `OGRN 1025003178397`) | Switzerland (`CH`) | **Shvabe-Zurich GmbH (in Liquidation / Residual Swiss Banking & Distributorship Trail)** (`Swiss UID CHE-113.501.588 (CH-020.4.034.889-5, Canton Zurich)`) | `EUR 4,500,000+ historical Swiss trade settlement & optical distribution receivables` | LIQUIDATION CLOSED BY BEZIRKSGERICHT ZUERICH (08 Feb 2024 / SHAB 15 Feb 2024; residual Swiss/EU settlement & distributor audit) |\n\n---\n\n### 4. Engineer Anti-Homonym Disambiguation Log (`10` Rejected False Positives)\n\n| # | Screened VPK Target | Rejected Foreign Registry Record | Documentary Disambiguation Reason |\n| :--- | :--- | :--- | :--- |\n| `#1` | Klochay Viktor Vladimirovich (born 1957, INN 773467239491) / Klochay Maksim Viktorovich (born 1982, INN 524830578722) — JSC Ruspolymet (INN 5251008501) | `ADVENTIS s.r.o. (ICO 25448676, subId 286288) & KERAMETUNION s.r.o. (ICO 25038702, subId 305673), Prague, Czechia (or.justice.cz)` | REJECTED HOMONYMS (UKRAINIAN CITIZENS): directors Oleksandr Klochay (born 1965-07-24, Kyiv, Ukraine) and Olena Klochay (born 1966-07-19, Donetsk, Ukraine) are Ukrainian nationals residing in Czechia since 1999 with zero relation to the Kulebaki Klochay family (whose verified German subsidiary is Ruspolymet GmbH, HRB 81356 in Duesseldorf). |\n| `#2` | Belikov Vladimir Anatolyevich (born 1962-10, INN 711302262916) — OJSC Efremov Synthetic Rubber Plant (INN 7113000847) | `Pro Scientifie and Technical Service spol. s r.o. (ICO 26144131, subId 411507), Prague 4, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Serguei Belikov (born 1968-09-15, Omsk, Russian Federation) has a different first name, date of birth, and city (Belikov's verified UK entity matched by his Efremov home address is ELASTOMER TRADING LIMITED, Company No. 05763152). |\n| `#3` | Kostyunin Pavel Andreyevich (INN 510203980877) — JSC Stratim (INN 7720901379, military UAV developer) | `SIPNET eu s.r.o. (ICO 28468074, subId 681928), Karlovy Vary, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Kostyunin (born 1966-06-21, Moscow / Odintsovo) belongs to a different age cohort and has no corporate link to JSC Stratim founder Pavel Kostyunin. |\n| `#4` | Serikov Vladimir Vitalyevich (INN 482108109320) — PJSC Energiya (INN 4821000142, Yelets) | `Czech Commercial Register or.justice.cz (subId 185282)` | REJECTED HOMONYMS: shareholders Serikov (born 1962-01-31 and 1985-09-24, Saint Petersburg) have no connection to Yelets PJSC Energiya CEO Vladimir Serikov. |\n| `#5` | Skobelev Yevgeny Aleksandrovich (born 1981, INN 352801649457) — JSC NAK Azot (INN 7116000066, Novomoskovsk) | `Czech Commercial Register or.justice.cz (subId 515670 & subId 534056)` | REJECTED HOMONYMS: individuals Skobelev (born 1962-06-16, Orenburg) and Skobelev (born 1960-07-03, Tolyatti) do not match by date of birth or region. |\n| `#6` | Krasnikov Gennady Yakovlevich (born 1958-04-30, INN 773500554126) — JSC Mikron (INN 7735007358, Zelenograd) | `Czech Commercial Register or.justice.cz (subId 512499)` | REJECTED HOMONYM: shareholder Krasnikov (born 1963-12-24, Dolgoprudny) has a different date of birth. |\n| `#7` | Kolchin Dmitry Vladimirovich (INN 165505608922) — PJSC Khimprom (INN 2124009521, Novocheboksarsk) | `Czech Commercial Register or.justice.cz (subId 410791)` | REJECTED HOMONYM: shareholder Kolchin (born 1976-10-06, Engels, Saratov Region) does not match by region or corporate profile. |\n| `#8` | Tikhonov Igor Borisovich (JSC Omsky Kauchuk INN 5501023216) / Shapovalov Igor Aleksandrovich (UEC Baranov OMO) | `KARTA-PARIS (SIREN 501909253, Igor Tikhonov born 1971-03) & LE CHATEAU DE CALIFORNIE SCI (SIREN 505137455, Igor Shapovalov born 1984-01), French RNE` | REJECTED HOMONYMS: French RNE filings lack patronymics, Omsk residential addresses, or any corporate nexus to JSC Omsky Kauchuk or UEC. |\n| `#9` | Kozlova Yelena Viktorovna (INN 773005952299, JSC GIPKh) / Guseva Anastasiya Sergeyevna (EPK Bearings) | `AREV E-LR (SIREN 812390946, Elena Marko nee Kozlova born 1973-10), SIREN 805293735, SIREN 510719453 & SIREN 992595637 (Anastasiia Guseva born 1985-08), French RNE` | REJECTED HOMONYMS: French sole proprietors and married-name entries with zero nexus to Saint Petersburg or Samara defense plants. |\n| `#10` | LLC Geoscan (INN 7801450808, Saint Petersburg, Board Chairman Aleksey Yevgenyevich Semenov) | `GeoScan GmbH (Germany) & GeoScan AG / GeoScan Systems (Switzerland)` | REJECTED CORPORATE HOMONYMS: European geological and radar surveying companies operating under the descriptive name GeoScan have no beneficial or corporate affiliation with the Russian drone manufacturer LLC Geoscan. |\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nThe full dataset is integrated into [Sanctions Blind Spot (`/en/sanctions-gap#eu-safe-haven-executives`)](/en/sanctions-gap#eu-safe-haven-executives) and published as an open compliance feed at [`/feeds/vpk-eu-executives-safe-haven.json`](/feeds/vpk-eu-executives-safe-haven.json).\n",
    "related_tool_or_link": "/en/sanctions-gap#eu-safe-haven-executives",
    "title_en": "European, UK, Swiss, NATO & UAE Corporate and Real-Estate Safe Haven of Russian VPK Executives: Cross-Registry Screening of 364 Unsanctioned Defense Plant Directors Across 14 Jurisdictions (>1.83B EUR, 2026)",
    "lead_en": "Primary-source screening of 364 unsanctioned directors and chief engineers of Russian defense plants (118 with verified 12-digit FNS personal TINs) across corporate and land registries in the UK, Czechia, France, Germany, Switzerland, Spain, Belgium, Denmark, Italy, Austria, Cyprus, Montenegro, Serbia, and the UAE: 27 verified dossiers (from UK companies ELASTOMER TRADING LTD 05763152 of V.A. Belikov and VSMPO TIRUS LTD 03821218 to Czech firms Prag Red Star s.r.o. ICO 28367588 of P.D. Motrenko and GN BELIGAN s.r.o. ICO 26119269 of A.B. Babikov, German Ruspolymet GmbH HRB 81356 and P-D Glasseiden GmbH Oschatz HRB 21085, and French POWERJET SA SIREN 434020822, SCI OLARA SIREN 528708076, and NLMK STRASBOURG SAS SIREN 425125150) plus the 10-entry homonym disambiguation log.",
    "body_en_md": "### 1. Summary Statistics of Cross-Registry Screening Across EU, UK, Swiss, NATO & UAE Jurisdictions\n\nCross-referencing the open [Sanctions Blind Spot (`/en/sanctions-gap`)](/en/sanctions-gap) watchlist as of `6 November 2026` covers **`364` executive and technical leadership positions at Russian defense-industrial (VPK) enterprises** (`328` named general directors and chief designers plus `36` technical leadership positions) that remain outside personal sanctions of the United States (`US OFAC`), the European Union (`EU Council`), and the United Kingdom (`UK FCDO`).\n* **Mathematically verified 12-digit Russian FNS personal TINs (`inn_fl` via `modulo-11` checksum):** `118` executives (`0` invalid checksums; remaining personal TINs are redacted in public EGRUL extracts under Russian Government Decree No. 729).\n* **Verified foreign corporate and real-estate dossiers documented:** `27` primary-source entities and property holdings (`0` conflated homonyms).\n* **Unsanctioned VPK executives from the `364` list linked directly or via plant family/corporate structures to foreign assets:** `70` directors and chief engineers.\n* **Foreign jurisdictions covered (`14` countries):** United Kingdom (`Companies House`, `HM Land Registry`), Czechia (`or.justice.cz`, `Katastr nemovitosti`), France (`INSEE / RNE`), Germany (`Handelsregister`), Switzerland (`Zefix`), Spain (`Registro de la Propiedad` Mallorca), Belgium (`KBO/BCE`), Denmark (`CVR`), Italy (`Registro Imprese`), Austria (`Firmenbuch`), Cyprus (`DRCOR`), Montenegro (`CRPS`, NATO member), Serbia (`APR`), and the United Arab Emirates (`Dubai Land Department`, `Meydan / DED / CBLS`).\n* **Combined conservative valuation of documented foreign industrial plants, corporate capital, and luxury real estate:** over **`EUR 1.83 billion`** (`EUR 1,831,500,000+`).\n\n---\n\n### 2. Key Findings from Live Primary-Source Registry Audits (November 2026)\n\n1. **Direct UK Personal Company of Synthetic Rubber Defense Plant CEO (`EU-VPK-001`):** Vladimir Anatolyevich Belikov (`INN 711302262916`, General Director of OJSC Efremov Synthetic Rubber Plant `INN 7113000847`, `OGRN 1027100507136`) is personally registered in `UK Companies House` under active UK company **`ELASTOMER TRADING LIMITED`** (`UK Company No. 05763152`, Essex) at his residential addresses in Efremov, Tula Region.\n2. **1 October 2026 Transfer of VSMPO-AVISMA's UK Titanium Hub to a Hong Kong Shell (`EU-VPK-002` & `EU-VPK-003`):** Under unsanctioned PJSC VSMPO-AVISMA Corporation CEO Dmitry Valeryevich Trifonov (`INN 660749969244`, plant `INN 6607000556`, `OGRN 1026600784011`), active UK subsidiary **`VSMPO TIRUS LIMITED`** (`UK Company No. 03821218`, Redditch, Worcestershire) filed a PSC change on **`1 October 2026`** transferring `75%+` control from Verkhnyaya Salda to Hong Kong vehicle **`Quri Investment Limited`** (`HK Reg. No. 80981921`), while German **`VSMPO-Tirus GmbH`** (`Amtsgericht Offenbach HRB 56728`), Swiss **`Tirus International SA`** (`CHE-113.749.131`), and French **`PASONMA SCI`** (`SIREN 804466050`) remain registered.\n3. **Direct Prague Companies of Rostvertol CEO (`EU-VPK-004`) and Izhevsk UAV Enterprise Director (`EU-VPK-025`):** Petr Danilovich Motrenko (`INN 616509027908`, born `20.03.1958`, long-serving head of JSC Rostvertol `INN 6161021690` — manufacturer of Mi-28N and Mi-35M attack helicopters) holds a `55%` stake in active Prague company **`Prag Red Star. s.r.o.`** (`ICO 28367588`, Prague 10) registered at the factory address `Novatorov St. 5, Rostov-on-Don`, while Anatoly Borisovich Babikov (`INN 183400580620`, born `16.05.1966`, director and co-founder of Izhevsk UAV manufacturer LLC Unmanned Systems `INN 1831119511`, `OGRN 1061831042954`) serves as active sole statutory director (`jednatel`) and `40%` owner of Prague-based **`GN BELIGAN, s.r.o.`** (`ICO 26119269`, Prague 2, `subjektId=528657`) registered at his Izhevsk residential address `ul. Sojuznaja 131/158`.\n4. **Dusseldorf Subsidiary of the Klochay Special-Metallurgy Dynasty (`EU-VPK-005`) and Saxony Co-Founder of SEZ Alabuga Fiberglass Plant (`EU-VPK-026`):** Unsanctioned JSC Ruspolymet (`INN 5251008501`, `OGRN 1055214499966`, superalloy rings for Kalibr cruise missile and combat aircraft engines) Chairman Viktor Vladimirovich Klochay (`INN 773467239491`) and CEO Maksim Viktorovich Klochay (`INN 524830578722`) maintain **`Ruspolymet GmbH`** (`Amtsgericht Duesseldorf HRB 81356`, `Graf-Adolf-Platz 6`), while Saxony-based **`P-D Glasseiden GmbH Oschatz`** (`Amtsgericht Leipzig HRB 21085`) held a `25%` stake until September `2025` in the SEZ Alabuga fiberglass plant (`INN 1646022610`, `OGRN 1071674003477`) led by unsanctioned CEO Ayrat Gusmanovich Khalimov (`INN 164806141252`).\n5. **Active Paris Joint Venture of Kalibr & Kh-101 Engine Manufacturer UEC-Saturn (`EU-VPK-006`):** PJSC UEC-Saturn (`INN 7610052644`, `OGRN 1027601106169`), led by unsanctioned General Director Ilya Borisovich Konyukhov (`INN 761021209203`), retains `50%` of Paris-based **`POWERJET SA`** (`SIREN 434020822`), where Russian UEC executives remain listed as board administrators in the French RNE registry.\n6. **London Apartments, French Riviera SCIs, Mallorca Villas, Prague Property & Dubai Holdings (`EU-VPK-007` .. `EU-VPK-015`):** Westminster apartment held by the family of Lancet loitering munition creator (`ZALA Aero` / executive director K.I. Abashkin `INN 183112969152`), Saint-Jean-Cap-Ferrat villa **`SCI OLARA`** (`SIREN 528708076`) and South Kensington apartments **`9-11 MANSON PLACE LIMITED`** (`02186156`) linked to the Yakovlev / Irkutsk Aviation Plant (`INN 3807002509`, Su-30SM2) executive contour, Prague real estate of Tactical Missiles Corporation KTRV (**`Alterra s.r.o.`** `ICO 28437497` and **`Riomax s.r.o.`** `ICO 09428089`, parent `INN 5099000013`), `5` coastal villas in Mallorca and a beachfront palace in `XXII Carat` on Palm Jumeirah linked to Kazan defense plant JSC Zavod Elekon (`INN 1657032272`), and Cap-Ferrat villas (**`SCI UMBTO`** `SIREN 452739444`, **`SCI PETR`** `SIREN 507436574`, **`SCI KRISTINE`** `SIREN 527673495`, **`SCI ABI`** `SIREN 911031243`, **`SCI NATALYA`** `SIREN 488445834`) plus Czech electronics plant **`NVision Czech Republic a.s.`** (`ICO 47550937` & `ICO 08615608`) linked to the AFK Sistema conglomerate (JSC Mikron `INN 7735007358` CEO G.Sh. Khasyanova `773109038996` and JSC Kronshtadt `INN 7808035536` CEO V.N. Dontsov `381004363944`).\n7. **Unfrozen European Industrial Empires of VPK Raw-Material Suppliers and Shvabe's Swiss Optical Footprint (`EU-VPK-016` .. `EU-VPK-024`, `EU-VPK-027`):** Rolling mills of PJSC NLMK (`INN 4823006703`) under unsanctioned President S.M. Karataev (`INN 771503823567`) in France (**`NLMK STRASBOURG SAS`** `SIREN 425125150` and **`NLMK COLOURS FRANCE SAS`** `SIREN 347618134`), Belgium (`KBO 0473.110.669`), Denmark (`CVR 10092922`), Italy (`CF 02810870234`), and Cyprus (`HE 90278`), chemical holdings of EuroChem / JSC NAK Azot (`INN 7116000066`, CEO Y.A. Skobelev `352801649457`) in Belgium (`KBO 0837.473.452`) and Switzerland (`CHE-306.864.578`), Vienna trading hub **`SIBUR International GmbH`** (`FN 229446 x`, JSC Voronezhsintezkauchuk `INN 3663002167`), the Swiss-Balkan-French network linked to LLC Stavrolen (`INN 2624022320`) / LUKOIL (`V.V. Shulindin` `503601547453`) in Montenegro (`PIB 02630419`), Serbia (`MB 07524951`), Geneva (`CHE-100.738.922`), and France (`SIREN 801555566`), and Zurich optical hub **`Shvabe-Zurich GmbH`** (`CHE-113.501.588`) linked to Shvabe optical plants (JSC LZOS `INN 5026000300` CEO A.N. Ignatov `502600136064`, JSC ZOMZ `INN 5042010793` CEO K.G. Pertsev `246603898668`, and JSC MZ Sapfir `INN 7726014172` CEO S.A. Kuznetsov `502600140462`).\n\n---\n\n### 3. Complete Register of 27 Verified Foreign Corporate & Property Dossiers (`EU-VPK-001` .. `EU-VPK-027`)\n\n| ID | Asset Class | Screened VPK Executive (INN FL) | Russian Defense Plant (INN / OGRN) | Country | Foreign Entity & Registry ID | Est. Value (`EUR`) | 2026 Status |\n| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |\n| **`EU-VPK-001`** | `DIRECT_PERSONAL_COMPANY` | Belikov Vladimir Anatolyevich (`711302262916`) | OJSC Efremov Synthetic Rubber Plant (Efremov, Tula Region) (`INN 7113000847`, `OGRN 1027100507136`) | United Kingdom (`GB`) | **ELASTOMER TRADING LIMITED** (`UK Company No. 05763152`) | `GBP 450,000+ trade turnover / equity` | ACTIVE (accounts filed through 2025/2026) |\n| **`EU-VPK-002`** | `SANCTIONS_EVASION_TRANSFER_2026` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | United Kingdom (`GB`) | **VSMPO TIRUS LIMITED** (`UK Company No. 03821218 (transferred to HK Reg. No. 80981921 on 2026-10-01)`) | `EUR 25,000,000+ UK titanium warehouse & receivables` | ACTIVE (PSC transferred 01 Oct 2026 from VSMPO-AVISMA to Quri Investment Limited, Hong Kong) |\n| **`EU-VPK-003`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Trifonov Dmitry Valeryevich / Leder Mikhail Ottovich (`660749969244`) | PJSC Corporation VSMPO-AVISMA (Verkhnyaya Salda, Sverdlovsk Region) (`INN 6607000556`, `OGRN 1026600784011`) | Germany / Switzerland (`DE`) | **VSMPO-Tirus GmbH / Tirus International SA / PASONMA SCI** (`Amtsgericht Offenbach HRB 56728 (ex-Frankfurt HRB 47196) / Swiss UID CHE-113.749.131 / France SIREN 804466050 (SIRET 80446605000018)`) | `EUR 40,000,000+ inventory & real estate in Hesse and Vaud` | ACTIVE (European titanium service center, Managing Director Eugen Kapuler & Swiss holding) |\n| **`EU-VPK-004`** | `DIRECT_PERSONAL_COMPANY` | Motrenko Pyotr Danilovich (`616509027908`) | JSC Rostvertol (Rostov-on-Don) (`INN 6161021690`, `OGRN 1026102899228`) | Czechia (`CZ`) | **Prag Red Star. s.r.o.** (`Czech ICO 28367588 (File C 136527, Mestsky soud v Praze)`) | `EUR 1,200,000+ Prague real estate holding vehicle` | ACTIVE (latest registry update 19 Mar 2025) |\n| **`EU-VPK-005`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Klochay Maksim Viktorovich / Klochay Viktor Vladimirovich (`524830578722`) | JSC Ruspolymet (Kulebaki, Nizhny Novgorod Region) (`INN 5251008501`, `OGRN 1055214499966`) | Germany (`DE`) | **Ruspolymet GmbH** (`Amtsgericht Duesseldorf HRB 81356`) | `EUR 3,500,000+ German corporate capital & trade claims` | REGISTERED IN HANDELSREGISTER DUESSELDORF (Managing Director: Andriy Lunyev) |\n| **`EU-VPK-006`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Konyukhov Ilya Borisovich / Khramin Roman Vladimirovich / Ilyin Igor Valeryevich (`761021209203`) | PJSC UEC-Saturn (Rybinsk, Yaroslavl Region) (`INN 7610052644`, `OGRN 1027601106169`) | France (`FR`) | **POWERJET SA** (`France SIREN 434020822 (SIRET 43402082200012 / 43402082200046; Auditor Forvis Mazars SIREN 784824153)`) | `EUR 15,000,000+ 50% equity, IP rights & escrow accounts in Paris` | ACTIVE (50/50 JV with Russian UEC/Saturn board members Ilia Koniukhov, Aleksandre Artiukhov, Aleksandre Gratchev & Igor Chistyunin still on RNE registry) |\n| **`EU-VPK-007`** | `FAMILY_REAL_ESTATE` | Abashkin Konstantin Igorevich (ZALA Aero / Lancet Zakharov family perimeter) (`183112969152`) | LLC CST / LLC Aeroscan (Izhevsk, Udmurt Republic) (`INN 1841015504`, `OGRN 1101841007938`) | United Kingdom (`GB`) | **Luxury Residential Apartment in Westminster, Central London (~100 sq.m)** (`HM Land Registry Westminster Freehold/Leasehold Title (acquired 2018 for GBP 1,500,000)`) | `EUR 1,800,000 (GBP 1,500,000 purchase price)` | HELD BY UNSANCTIONED FAMILY MEMBERS IN UK |\n| **`EU-VPK-008`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich / Dolzhenkov Nikolay Nikolayevich (`771400228510`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | France (`FR`) | **SCI OLARA (Villa with swimming pool in Saint-Jean-Cap-Ferrat)** (`France SIREN 528708076 (SIRET 52870807600013 / RCS Paris D 528 708 076)`) | `EUR 8,500,000+ Cap-Ferrat villa` | ACTIVE (Associates: Anastasia Demchenko born 1989-06 & Oleg Demchenko Jr. born 1995-06; Gerant: Alexander Lette born 1976-12) |\n| **`EU-VPK-009`** | `FAMILY_REAL_ESTATE` | Soynov Andrey Sergeyevich / Veprev Aleksandr Alekseyevich (PJSC Yakovlev / Irkut perimeter) (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | Irkutsk Aviation Plant - Branch of PJSC Yakovlev (Irkutsk) (`INN 3807002509`, `OGRN 1023801428111`) | United Kingdom (`GB`) | **9-11 MANSON PLACE LIMITED & South Kensington Apartments (Queens Gate / Manson Place)** (`UK Company No. 02186156 (9-11 Manson Place SW7 5JP & Flat 2, 64 Queens Gate SW7 5JP)`) | `EUR 5,200,000+ South Kensington apartments` | ACTIVE (Director Bernard Jansen Van Vuuren appointed 19 Aug 2024) |\n| **`EU-VPK-010`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Dolzhenkov Nikolay Nikolayevich / Dotsenko Oleg Mikhaylovich (`771400228510`) | JSC Ural Works of Civil Aviation (JSC UZGA, Yekaterinburg) (`INN 6664013640`, `OGRN 1026605766560`) | Czechia (`CZ`) | **OLVY international s.r.o. (Karlovy Vary) & historical UZGA claims in Aircraft Industries, a.s.** (`Czech ICO 25238710 (Karlovy Vary) & ICO 27174841 (Kunovice)`) | `EUR 2,400,000+ Karlovy Vary real estate & residual claims` | ICO 25238710 REGISTERED IN KARLOVY VARY; ICO 27174841 DIVESTED FROM UZGA WITH RESIDUAL CLAIMS AUDIT |\n| **`EU-VPK-011`** | `FAMILY_REAL_ESTATE` | Yarmolyuk Vladimir Nikolayevich / Bogatikov Sergey Anatolyevich / Zaytsev Igor Petrovich (`774301423890`) | JSC Tactical Missiles Corporation (JSC KTRV, Korolyov, Moscow Region) (`INN 5099000013`, `OGRN 1035003364021`) | Czechia (`CZ`) | **Alterra s.r.o. (Praha 5 Penthouse) & Riomax s.r.o. (4-Story Building in Praha 3 Zizkov)** (`Czech ICO 28437497 (File C 141450) & Czech ICO 09428089 (File C 336133)`) | `EUR 7,100,000+ (EUR 6M Zizkov building + EUR 1.1M Barrandov/Hlubocepy penthouse)` | ACTIVE ON REGISTRY (locally frozen by Czech FAU, awaiting EU-wide confiscation & KTRV deputy designations) |\n| **`EU-VPK-012`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Zavod Elekon / JSC Kazan Helicopter Plant (Kazan, Tatarstan) (`INN 1657032272`, `OGRN 1021603145541`) | Spain (`ES`) | **5 Luxury Villas in Calvia & Palma de Mallorca (originally acquired via JSC Zavod Elekon)** (`Registro de la Propiedad Calvia / Palma (5 coastal villas, Balearic Islands, Spain)`) | `EUR 18,000,000+ (5 Balearic villas)` | UNDER SPANISH NATIONAL POLICE MONEY-LAUNDERING SEIZURE PROBE (2025-2026) |\n| **`EU-VPK-013`** | `FAMILY_REAL_ESTATE` | Zuev Eduard Vladimirovich / Yakovlev Nikolay Yuryevich / Managing Org JSC Russian Helicopters (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | JSC Russian Helicopters (Managing Org of KVZ & U-UAZ) / JSC Zavod Elekon (`INN 7731559044`, `OGRN 1077746003334`) | United Arab Emirates (`AE`) | **Beachfront Palace Villa in '22 Carat' Gated Compound, Palm Jumeirah, Dubai** (`Dubai Land Department Plot / Villa in XXII Carat, West Crescent, Palm Jumeirah`) | `EUR 22,000,000+ Palm Jumeirah villa` | ACTIVE PRIVATE HOLDING IN DUBAI |\n| **`EU-VPK-014`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khasyanova Gulnara Shamilyevna / Krasnikov Gennady Yakovlevich (`773109038996`) | JSC Mikron (Zelenograd, Moscow) (`INN 7735007358`, `OGRN 1027700073466`) | Czechia (`CZ`) | **NVision Czech Republic a.s. (Votice) & NVision Czech Republic ICT a.s. (Praha 4)** (`Czech ICO 47550937 (File B 1995) & Czech ICO 08615608 (File B 24756)`) | `EUR 9,000,000+ Votice electronics factory & Prague ICT entity` | ACTIVE (restructured onto local management buyout shell to evade AFK Sistema freeze) |\n| **`EU-VPK-015`** | `FAMILY_REAL_ESTATE` | Dontsov Vasily Nikolayevich / Khasyanova Gulnara Shamilyevna (AFK Sistema / RTI / JSC Kronshtadt perimeter) (`381004363944`) | JSC Kronshtadt (Moscow / Dubna UAV Manufacturing Plant) (`INN 7808035536`, `OGRN 1027809176141`) | France (`FR`) | **Cap-Ferrat Active Villas (SCI UMBTO / SCI PETR / SCI KRISTINE / SCI ABI / TASHA) & Cannes / Monaco Cluster (SCI NATALYA / NOVITEZ)** (`France SIREN 452739444 (SIRET 45273944400019), SIREN 507436574 (SIRET 50743657400010), SIREN 527673495 (SIRET 52767349500018), SIREN 911031243 (SIRET 91103124300015), SIREN 910453273 (SIRET 91045327300013), SIREN 488445834 (SIRET 48844583400028) & SIREN 928833375 (SIRET 92883337500019)`) | `EUR 35,000,000+ Saint-Jean-Cap-Ferrat & Cannes villas` | ACTIVE IN RNE CAP-FERRAT (SCI UMBTO 452739444, SCI PETR 507436574, SCI KRISTINE 527673495, SCI ABI 911031243, NOVITEZ 928833375; SCI NATALYA 488445834 in liquidation since 2026-01-02) |\n| **`EU-VPK-016`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | France (`FR`) | **NLMK STRASBOURG SAS & NLMK COLOURS FRANCE SAS** (`France SIREN 425125150 (SIRET 42512515000028, Auditor PwC SIREN 672006483) & SIREN 347618134 (SIRET 34761813400089)`) | `EUR 120,000,000+ French industrial plants & port terminal` | ACTIVE OPERATING STEEL PLANTS IN FRANCE (Directors Barend De Vos, Giovanni Borinelli, Maria Starostina) |\n| **`EU-VPK-017`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Karatayev Sergey Mikhaylovich (`771503823567`) | PJSC Novolipetsk Steel (PJSC NLMK, Lipetsk) (`INN 4823006703`, `OGRN 1024800823123`) | Belgium / Denmark / Italy / Cyprus (`BE`) | **NLMK Belgium Holdings N.V. / NLMK DanSteel A/S / NLMK Verona S.p.A. / Fletcher Group Holdings Ltd** (`KBO 0473.110.669 (BE) / CVR 10092922 (DK) / CF 02810870234 & REA VR 285265 (IT) / HE 90278 (CY)`) | `EUR 650,000,000+ steel mills in Belgium, Denmark, and Italy` | ACTIVE OPERATING STEEL ROLLING MILLS ACROSS 4 EU/NATO STATES |\n| **`EU-VPK-018`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Skobelev Yevgeny Aleksandrovich (`352801649457`) | JSC Novomoskovsk Joint Stock Company Azot (Novomoskovsk, Tula Region) (`INN 7116000066`, `OGRN 1027100507378`) | Switzerland / Belgium / Cyprus (`CH`) | **EuroChem Group AG (Zug) / EuroChem Antwerpen NV / AIM Capital Limited** (`Swiss UID CHE-306.864.578 / Belgian KBO 0837.473.452 / Cyprus HE 133817`) | `EUR 400,000,000+ Antwerp chemical complex & Zug headquarters` | ACTIVE (under ring-fencing compliance scrutiny in Belgium, Switzerland & Cyprus) |\n| **`EU-VPK-019`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Zolototrubov Vyacheslav Nikolayevich (`366304814231`) | JSC Voronezhsintezkauchuk (Voronezh) (`INN 3663002167`, `OGRN 1023602096539`) | Austria (`AT`) | **SIBUR International GmbH** (`Austrian Firmenbuch FN 229446 x`) | `EUR 30,000,000+ Austrian corporate equity & trade receivables` | REGISTERED IN VIENNA FIRMENBUCH (European petrochemical trading hub of PJSC SIBUR Holding) |\n| **`EU-VPK-020`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Switzerland / Cyprus / France (`CH`) | **LITASCO SA (Geneva) & LUKOIL Marine Lubricants Ltd (Cyprus / France branch)** (`Swiss UID CHE-100.738.922 / Cyprus HE 94346 / French SIREN 801555566`) | `EUR 250,000,000+ Swiss/Cyprus trading equity` | ACTIVE ON SWISS, CYPRUS AND FRENCH REGISTRIES |\n| **`EU-VPK-021`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Shulyndin Vladimir Vladimirovich (`503601547453`) | LLC Stavrolen (Budyonnovsk, Stavropol Krai) (`INN 2624022320`, `OGRN 1022603220518`) | Montenegro (NATO) / Serbia (`ME`) | **LUKOIL MONTENEGRO d.o.o. Podgorica & LUKOIL SRBIJA a.d. Beograd** (`Montenegro PIB 02630419 / Serbia MB 07524951 (PIB 100000830)`) | `EUR 85,000,000+ Balkan depots & retail network` | ACTIVE FUEL & PETROCHEMICAL DISTRIBUTION NETWORKS IN NATO MEMBER MONTENEGRO & SERBIA |\n| **`EU-VPK-022`** | `EU_BALKAN_UAE_CONDUIT` | Mokichev Sergey Vladimirovich / Denisenko Aleksandr Nikolayevich / Oreshkin Sergey Ivanovich / Guseva Aleksandra Sergeyevna (`CLASSIFIED IN FNS EGRUL RF (GOV DECREE NO. 729)`) | OJSC EPK Samara / JSC EPK Saratov (Samara / Saratov) (`INN 6316040924`, `OGRN 1026301154934`) | Cyprus / United Arab Emirates (`CY`) | **E.P.K. HOLDINGS LIMITED (historical Cyprus parent) -> Ace Bearings FZE (active UAE bearing conduit)** (`Cyprus HE 96811 (Dissolved) -> UAE Free Zone License No. 3291 / CBLS 11443987`) | `EUR 12,000,000+ bearing re-export flows` | CYPRUS HE 96811 DISSOLVED; RE-ROUTED TO ACTIVE UAE CONDUIT ACE BEARINGS FZE (CBLS 11443987) |\n| **`EU-VPK-023`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Davydov Eduard Malikovich / Nazarov Andrey Gennadyevich (`071405665507`) | JSC Bashkir Soda Company (Sterlitamak, Republic of Bashkortostan) (`INN 0268008010`, `OGRN 1020202079479`) | Cyprus (`CY`) | **MODISANNA LIMITED (Cyprus dividend conduit & residual European banking trail)** (`Cyprus Reg. No. HE 129218`) | `EUR 50,000,000+ historical Cyprus dividend outflows` | DISSOLUTION FOLLOWING VOLUNTARY LIQUIDATION (residual Cyprus/EU compliance & banking audit trail) |\n| **`EU-VPK-024`** | `EU_BALKAN_UAE_CONDUIT` | Khasyanova G.S. (Mikron) / Borisov A.A. (NPP Istok) / Dotsenko O.M. (UZGA) / Novikov A.A. (KNIRTI) (`773109038996`) | JSC Mikron (7735007358) / JSC NPP Istok (5050108496) / JSC UZGA (6664013640) / JSC KNIRTI (4007017378) (`INN 5050108496`, `OGRN 1135050007400`) | United Arab Emirates / Serbia (`AE`) | **EDM L.L.C-FZ (Dubai) / Turboshaft FZE (UAE) / Dream Lite Trading LLC (Dubai) / KOMINVEX DOO (Belgrade)** (`Meydan 2200911.01 / UAE CBLS 11967354 / Dubai DED 629360 / Serbia APR MB 20047038 (PIB 104004847, in bankruptcy)`) | `EUR 35,000,000+ illicit dual-use electronics & aviation shipments` | UAE FREE-ZONE CONDUITS ACTIVE; SERBIAN KOMINVEX MB 20047038 IN BANKRUPTCY AFTER OFAC DESIGNATION |\n| **`EU-VPK-025`** | `DIRECT_PERSONAL_COMPANY` | Babikov Anatoly Borisovich / Tsallagov Kirill Aleksandrovich (`183400580620`) | LLC Unmanned Systems / LLC Supercam (Izhevsk, Udmurt Republic) (`INN 1831119511`, `OGRN 1061831042954`) | Czechia (`CZ`) | **GN BELIGAN, s.r.o.** (`Czech ICO 26119269 (File C 71780, Mestsky soud v Praze, subjektId 528657)`) | `EUR 350,000+ Czech corporate vehicle & Vinohrady / Kladno assets` | ACTIVE ON CZECH COMMERCIAL REGISTRY (verified extract 06 Nov 2026) |\n| **`EU-VPK-026`** | `SANCTIONS_EVASION_TRANSFER_2026` | Khalimov Ayrat Gusmanovich (`164806141252`) | LLC Tatneft-Steklovolokno / LLC P-D Tatneft-Alabuga Fiberglass (SEZ Alabuga, Yelabuga, Tatarstan) (`INN 1646022610`, `OGRN 1071674003477`) | Germany (`DE`) | **P-D Glasseiden GmbH Oschatz (Preiss-Daimler Group)** (`Amtsgericht Leipzig HRB 21085`) | `EUR 14,500,000+ German-installed glass furnace technology & settlement claims` | ACTIVE IN SAXONY (Managing Directors Joeran Pfuhl & Markus Stephan; 25% SEZ Alabuga JV stake divested in Sep 2025) |\n| **`EU-VPK-027`** | `PLANT_EU_SUBSIDIARY_OR_JV` | Ignatov Aleksandr Nikolayevich (LZOS) / Pertsev Konstantin Gennadyevich (ZOMZ) / Kuznetsov Sergey Alekseyevich (MZ Sapfir) (`502600136064`) | JSC LZOS (5026000300) / JSC ZOMZ (5042010793) / JSC MZ Sapfir (7726014172) / JSC LOMO (7804002321) (`INN 5026000300`, `OGRN 1025003178397`) | Switzerland (`CH`) | **Shvabe-Zurich GmbH (in Liquidation / Residual Swiss Banking & Distributorship Trail)** (`Swiss UID CHE-113.501.588 (CH-020.4.034.889-5, Canton Zurich)`) | `EUR 4,500,000+ historical Swiss trade settlement & optical distribution receivables` | LIQUIDATION CLOSED BY BEZIRKSGERICHT ZUERICH (08 Feb 2024 / SHAB 15 Feb 2024; residual Swiss/EU settlement & distributor audit) |\n\n---\n\n### 4. Engineer Anti-Homonym Disambiguation Log (`10` Rejected False Positives)\n\n| # | Screened VPK Target | Rejected Foreign Registry Record | Documentary Disambiguation Reason |\n| :--- | :--- | :--- | :--- |\n| `#1` | Klochay Viktor Vladimirovich (born 1957, INN 773467239491) / Klochay Maksim Viktorovich (born 1982, INN 524830578722) — JSC Ruspolymet (INN 5251008501) | `ADVENTIS s.r.o. (ICO 25448676, subId 286288) & KERAMETUNION s.r.o. (ICO 25038702, subId 305673), Prague, Czechia (or.justice.cz)` | REJECTED HOMONYMS (UKRAINIAN CITIZENS): directors Oleksandr Klochay (born 1965-07-24, Kyiv, Ukraine) and Olena Klochay (born 1966-07-19, Donetsk, Ukraine) are Ukrainian nationals residing in Czechia since 1999 with zero relation to the Kulebaki Klochay family (whose verified German subsidiary is Ruspolymet GmbH, HRB 81356 in Duesseldorf). |\n| `#2` | Belikov Vladimir Anatolyevich (born 1962-10, INN 711302262916) — OJSC Efremov Synthetic Rubber Plant (INN 7113000847) | `Pro Scientifie and Technical Service spol. s r.o. (ICO 26144131, subId 411507), Prague 4, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Serguei Belikov (born 1968-09-15, Omsk, Russian Federation) has a different first name, date of birth, and city (Belikov's verified UK entity matched by his Efremov home address is ELASTOMER TRADING LIMITED, Company No. 05763152). |\n| `#3` | Kostyunin Pavel Andreyevich (INN 510203980877) — JSC Stratim (INN 7720901379, military UAV developer) | `SIPNET eu s.r.o. (ICO 28468074, subId 681928), Karlovy Vary, Czechia (or.justice.cz)` | REJECTED HOMONYM: shareholder Kostyunin (born 1966-06-21, Moscow / Odintsovo) belongs to a different age cohort and has no corporate link to JSC Stratim founder Pavel Kostyunin. |\n| `#4` | Serikov Vladimir Vitalyevich (INN 482108109320) — PJSC Energiya (INN 4821000142, Yelets) | `Czech Commercial Register or.justice.cz (subId 185282)` | REJECTED HOMONYMS: shareholders Serikov (born 1962-01-31 and 1985-09-24, Saint Petersburg) have no connection to Yelets PJSC Energiya CEO Vladimir Serikov. |\n| `#5` | Skobelev Yevgeny Aleksandrovich (born 1981, INN 352801649457) — JSC NAK Azot (INN 7116000066, Novomoskovsk) | `Czech Commercial Register or.justice.cz (subId 515670 & subId 534056)` | REJECTED HOMONYMS: individuals Skobelev (born 1962-06-16, Orenburg) and Skobelev (born 1960-07-03, Tolyatti) do not match by date of birth or region. |\n| `#6` | Krasnikov Gennady Yakovlevich (born 1958-04-30, INN 773500554126) — JSC Mikron (INN 7735007358, Zelenograd) | `Czech Commercial Register or.justice.cz (subId 512499)` | REJECTED HOMONYM: shareholder Krasnikov (born 1963-12-24, Dolgoprudny) has a different date of birth. |\n| `#7` | Kolchin Dmitry Vladimirovich (INN 165505608922) — PJSC Khimprom (INN 2124009521, Novocheboksarsk) | `Czech Commercial Register or.justice.cz (subId 410791)` | REJECTED HOMONYM: shareholder Kolchin (born 1976-10-06, Engels, Saratov Region) does not match by region or corporate profile. |\n| `#8` | Tikhonov Igor Borisovich (JSC Omsky Kauchuk INN 5501023216) / Shapovalov Igor Aleksandrovich (UEC Baranov OMO) | `KARTA-PARIS (SIREN 501909253, Igor Tikhonov born 1971-03) & LE CHATEAU DE CALIFORNIE SCI (SIREN 505137455, Igor Shapovalov born 1984-01), French RNE` | REJECTED HOMONYMS: French RNE filings lack patronymics, Omsk residential addresses, or any corporate nexus to JSC Omsky Kauchuk or UEC. |\n| `#9` | Kozlova Yelena Viktorovna (INN 773005952299, JSC GIPKh) / Guseva Anastasiya Sergeyevna (EPK Bearings) | `AREV E-LR (SIREN 812390946, Elena Marko nee Kozlova born 1973-10), SIREN 805293735, SIREN 510719453 & SIREN 992595637 (Anastasiia Guseva born 1985-08), French RNE` | REJECTED HOMONYMS: French sole proprietors and married-name entries with zero nexus to Saint Petersburg or Samara defense plants. |\n| `#10` | LLC Geoscan (INN 7801450808, Saint Petersburg, Board Chairman Aleksey Yevgenyevich Semenov) | `GeoScan GmbH (Germany) & GeoScan AG / GeoScan Systems (Switzerland)` | REJECTED CORPORATE HOMONYMS: European geological and radar surveying companies operating under the descriptive name GeoScan have no beneficial or corporate affiliation with the Russian drone manufacturer LLC Geoscan. |\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nThe full dataset is integrated into [Sanctions Blind Spot (`/en/sanctions-gap#eu-safe-haven-executives`)](/en/sanctions-gap#eu-safe-haven-executives) and published as an open compliance feed at [`/feeds/vpk-eu-executives-safe-haven.json`](/feeds/vpk-eu-executives-safe-haven.json).\n"
  },
  {
    "id": "M-18",
    "slug": "method-18-eu-ted-public-procurement-art5k-brussels-lobby-2024-2026",
    "date": "2026-11-06",
    "category": "OSINT BLIND SPOTS",
    "badge": "METHOD #18 · TED ART. 5K REG. 833/2014 & EU TRANSPARENCY REGISTER × RUSSIAN VPK",
    "title": "Cross-Registry Audit of EU Public Procurement (TED API v3, Article 5k of EU Regulation 833/2014) & Brussels Lobbying (EU Transparency Register) × European Subsidiaries of Russian VPK & Commodity Holdings (2024–2026)",
    "subtitle": "How Bulgaria's Kozloduy NPP awarded 11 direct contracts (>32.63M EUR) in 2025–2026 to Moscow-based JSC Rosatom Service (OGRN 1117746845523, including TED 466972-2025 and 127496-2026 procuring parts manufactured by US/UK-sanctioned Russian nuclear warhead assembly plant FGUP PSZ in ZATO Trekhgorny INN 7405000428 and JSC OKB Gidropress INN 5036092340), the Bulgarian Ministry of Defence signed a 20.84M EUR jet fuel contract on 18.08.2026 (TED 586041-2026) with 100% LUKOIL subsidiary LUKOIL Aviation Bulgaria EOOD (EIK 175015362), Romanian state railways CFR Calatori and Romgaz awarded 15 contracts worth 95.64M RON (~19.22M EUR) to LUKOIL entities (RO19737772 / RO10547022), and 15 active EU Transparency Register profiles with 57 European Parliament passes lobby in Brussels for NLMK Belgium Holdings, EuroChem Group AG (against Regulation EU 2025/1227), Kaspersky Labs GmbH, Aughinish Alumina (RUSAL), Nornickel Finland Oy, and Moscow-based AEB.",
    "read_time": "15 min read",
    "tags": [
      "TED Europa",
      "Article 5k 833/2014",
      "EU Transparency Register",
      "FGUP PSZ Trekhgorny",
      "Rosatom Service",
      "Kozloduy NPP",
      "LUKOIL Aviation Bulgaria",
      "CFR Calatori",
      "NLMK Belgium",
      "EuroChem 2025/1227",
      "Kaspersky Next EDR"
    ],
    "summary": "A cross-registry forensic audit of the European Union's Tenders Electronic Daily database (api.ted.europa.eu v3 for 2024–2026 covering 2,447,739 notices and 34 primary XML eForms) and live XML exports of the EU Transparency Register and European Parliament accredited lobbyists as of November 2026 documents 10 verified clusters: 5 EU public procurement clusters under Article 5k of Council Regulation (EU) No 833/2014 (61 TED notices across Bulgaria, Romania, Croatia, Germany, and Spain totaling over 76.1M EUR) and 5 Brussels lobbying clusters (15 active registrations and 57 European Parliament access passes). The study also details the engineering filter used to discard namesakes and pre-2022 divested entities.",
    "content_md": "### 1. Regulatory Architecture of Article 5k of Council Regulation (EU) No 833/2014 and the Structural Blind Spot\n\nArticle **`5k(1)` of Council Regulation (EU) No 833/2014** (introduced under the fifth EU sanctions package in April `2022` via Regulation `(EU) 2022/576`) prohibits awarding or continuing the execution of any public or utilities procurement contract falling within the scope of the EU Public Procurement Directives (`2014/23/EU`, `2014/24/EU`, `2014/25/EU`, `2009/81/EC`) to or with:\n* **(a)** a Russian national, or a natural or legal person, entity, or body established in Russia;\n* **(b)** a legal person, entity, or body (including one established inside an EU Member State) whose proprietary rights are directly or indirectly owned for **more than `50%`** by an entity referred to in point `(a)`; or\n* **(c)** a natural or legal person, entity, or body acting on behalf or at the direction of an entity referred to in point `(a)` or `(b)`, including subcontractors, suppliers, or entities whose capacities are being relied on where they account for more than **`10%`** of the contract value.\n\nDirect programmatic harvesting of **`2,447,739` procurement notices in `Tenders Electronic Daily` (`api.ted.europa.eu` v3 covering `1 January 2024 – 6 November 2026`)** combined with XML inspection of primary `ContractAwardNotice` eForms and cross-matching against the official XML exports of the **`EU Transparency Register` (`18,028` organizations as of `3 November 2026`)** and **`European Parliament Accredited Lobbyists` (`8,567` active pass holders as of `6 November 2026`)** exposes two systemic enforcement gaps:\n1. **The Article 5k Public Procurement Gap (`61` verified TED notices totaling `>76.1M EUR`):** reliance on the civil nuclear derogation of Article `5k(2)(b)` to channel EU public procurement funds directly to a US/UK-sanctioned Russian serial nuclear warhead assembly plant (`FGUP PSZ` in ZATO Trekhgorny, `INN 7405000428`), alongside continuous `2024–2026` awards of military aviation fuel, border police, state railway, and gas contracts in Bulgaria, Romania, and Croatia to `100%` subsidiaries of Russian oil major `PJSC LUKOIL` (`INN 7708004767`) in breach of the `>50%` Russian ownership prohibition of Article `5k(1)(b)`.\n2. **The Brussels Lobbying Gap (`15` active `EU Transparency Register` profiles and `57` European Parliament access passes):** active institutional lobbying in Brussels by European operating subsidiaries and retained consultancies representing Russian steel, fertilizer, aluminum, nickel, oil, and cybersecurity holdings (`NLMK`, `EuroChem`, `Kaspersky`, `RUSAL`, `Nornickel`, `LUKOIL`, and Moscow-headquartered `AEB`).\n\n---\n\n### 2. Sober Critical Engineer Filter: Disambiguating Namesakes and Divested Assets\n\nAutomated keyword searches across European tender databases generate substantial false positives unless verified against primary corporate registration identifiers (`<cbc:CompanyID>`) inside TED XML eForms. Applying strict engineering verification, four categories of false matches were identified and purged from the dataset:\n\n1. **`EuroChem` Namesakes and `Lifosa` Morphological Stemming in TED:** `12` tenders in Poland and Greece were awarded to unrelated local chemical/detergent distributors **`PHPU EUROCHEM BGD Sp. z o.o.` (Tarnow, Poland)** and **`EUROCHEM ABEE` (Greece)**, neither of which has any ownership link to `EuroChem Group AG` (`CHE-306.864.578`) or Russia's `JSC MCC EuroChem` (`INN 7721230290`). Meanwhile, `988` full-text hits for `Lifosa` were caused by TED search stemming matching `ERGO Life Insurance SE` in Lithuania and Latvia.\n2. **`NVision` Namesakes in Germany and Poland:** `7` TED notices in `2024–2026` involved **`NVision Imaging Technologies GmbH` (Ulm, Germany)** — a quantum MRI hardware startup — and **`Axence nVision`** network management software (`Axence Sp. z o.o.`, Krakow, Poland). Neither is affiliated with AFK Sistema's `NVision Czech Republic a.s.` (`ICO 47550937`).\n3. **Pre-Sanctions Divestment of `Aircraft Industries, a.s.` (`ICO 27174841`, Kunovice, Czechia):** `100%` of the shares of the `L-410` aircraft manufacturer were acquired in April `2022` by Czech aerospace group **`OMNIPOL a.s.` (`ICO 00001759`)** from Russian UMMC/UZGA shareholders. Consequently, its `2024–2026` contracts in Czechia and Poland are executed under `100%` Czech ownership and do not violate Article `5k`.\n4. **Czech Municipality `Mesto Kasperske Hory` (`ICO 00255602`):** `55` Czech TED hits on `Kaspersky` were municipal public works tenders issued by the town of `Kasperske Hory` and were excluded; only verified procurements of `Kaspersky Lab` (`INN 7713140469`) software in Germany and Spain were retained.\n\n---\n\n### 3. Five Verified EU Public Procurement Clusters under Article 5k of Regulation (EU) No 833/2014 (2024–2026)\n\n#### Cluster 1 (`TED-ART5K-01`): Kozloduy NPP EAD (`EIK 106513772`, Bulgaria) × Moscow's `JSC Rosatom Service` (`OGRN 1117746845523`, `INN 7705966318`) & Serial Nuclear Warhead Assembly Plant `FGUP PSZ Trekhgorny` (`INN 7405000428`) — `11` TED Notices Totaling `>32.63M EUR`\n* **EU Contracting Authority:** Bulgarian state nuclear power operator **`Kozloduy NPP EAD` (`EIK 106513772`)**.\n* **Contractor in TED XML (`<cbc:CompanyID>`):** **`JSC Rosatom Service` (`Moscow, Nakhimovsky Prospekt 58, Russian Federation`, `OGRN 1117746845523`, `INN 7705966318`)**, an operating subsidiary of **State Corporation Rosatom (`INN 7706413348`)**.\n* **Direct EU Public Procurement of Hardware Manufactured by Russia's Serial Nuclear Warhead Assembly Plant `FGUP PSZ` (`INN 7405000428`):**\n  * In Contract Award Notice **TED `466972-2025`** (`17 July 2025`, Contract No. `205876` signed `27 June 2025` for **`1,208,702.94 BGN` / `~618,000 EUR`**) and Notice **TED `127496-2026`** (`24 February 2026` for **`618,000.00 EUR`**), the official procurement title explicitly states: *\"Supply of spare parts from manufacturer FGUP 'PSZ' (Federal State Unitary Enterprise 'Instrument-Making Plant'), city of Trekhgorny, Russia\"*.\n  * **FGUP \"Priborostroitelny Zavod named after K.A. Volodin\" (`FGUP PSZ`, closed nuclear city ZATO Trekhgorny, Chelyabinsk Region, `INN 7405000428`, `OGRN 1027400661650`)** is one of Russia's primary serial assembly plants for nuclear warheads and is designated under **US OFAC SDN**, **UK OFSI**, and **Ukraine NSDC** blocking sanctions, yet remains unsanctioned by the EU and receives direct EU public procurement revenue via `JSC Rosatom Service`.\n* **Additional 2025–2026 Kozloduy NPP Awards to `JSC Rosatom Service` (`OGRN 1117746845523`):**\n  * **TED `375969-2026`** (`2 June 2026`, Contract No. `251514` of `27 May 2026`): **`14,410,392.00 EUR`** (`26,096,692.80 BGN`) for Unit 6 control and protection system absorber rods (`PS SUZ`);\n  * **TED `461489-2026`** (`6 July 2026`, Contract No. `257240` of `2 July 2026`): **`2,426,970.00 EUR`** for `ShEM-3` linear position indicators manufactured by **JSC OKB Gidropress (`INN 5036092340`, `OGRN 1085074009503`, Podolsk — lead designer of naval nuclear propulsion reactors for Russian Navy submarines)**;\n  * **TED `306891-2026`** (`5 May 2026`, Contract No. `247163` of `27 April 2026`): **`2,083,607.00 EUR`** for `ShEM` spare parts manufactured by **JSC OKB Gidropress (`INN 5036092340`)**;\n  * **TED `5608-2026`** (`7 January 2026`, Contract No. `231053` of `16 December 2025`): **`342,610.00 EUR`** for `GCN-195M` main coolant pump components manufactured by **JSC CKBM (`INN 7806394392`, `OGRN 1089847327415`, St. Petersburg)**;\n  * **TED `554230-2025`** (`26 August 2025`, Contract No. `211872`): **`15,763,989.80 BGN` (`~8.06M EUR`)**.\n\n#### Cluster 2 (`TED-ART5K-02`): Ministry of Defence of Bulgaria (`EIK 000695324`) & Bulgarian Border Police (`EIK 129010125`) × `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`) and `LUKOIL-Bulgaria EOOD` (`EIK 121699202`) — `28` TED Notices Totaling `>23.04M EUR`\n* **Direct NATO Member State Ministry of Defence Aviation Fuel Contract Signed `18 August 2026` (`TED 586041-2026`):**\n  * On `25 August 2026`, TED published Contract Award Notice **`586041-2026`** documenting Contract No. `263378` signed on **`18 August 2026`** by the **Ministry of Defence of the Republic of Bulgaria (`EIK 000695324`)** worth **`20,841,666.53 EUR` excl. VAT (`25,014,166.06 EUR` incl. VAT)** with **`LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`, Sofia)** for the supply of `Jet A-1` aviation turbine fuel.\n* **Border Police Helicopter Refueling and State Fuel Contracts:**\n  * The **General Directorate Border Police of the Ministry of Interior of Bulgaria (`EIK 129010125`)** awarded three consecutive into-plane helicopter refueling contracts to `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`): **TED `25943-2026`** (`14 January 2026`, Contract No. `232310` — `106,019.30 EUR`), **TED `25239-2025`** (`14 January 2025` — `216,348.54 BGN`), and **TED `101459-2024`** (`19 February 2024` — `310,000.00 BGN`).\n  * An additional `24` state and municipal fuel contracts in `2024–2026` (including **TED `349073-2026`** of `21 May 2026` for the Ministry of Justice Prison Fund `EIK 129009070` and **TED `613691-2025`** worth `1,600,000 BGN`) were awarded to **`LUKOIL-Bulgaria EOOD` (`EIK 121699202`)** and **`LUKOIL - Bulgaria Bunker EOOD` (`EIK 200151591`)**. All three Bulgarian companies are `100%` indirectly owned by Russian oil major **`PJSC LUKOIL` (`INN 7708004767`, `OGRN 1027700035769`)** via `LITASCO SA` (`CHE-100.738.922`, Geneva), squarely meeting the `>50%` Russian ownership threshold of Article `5k(1)(b)`.\n\n#### Cluster 3 (`TED-ART5K-03`): Romanian State Railways (`CFR Calatori SA` `RO11054545` & `CNCF CFR SA` `RO11054529`), State Gas Producer `SNGN Romgaz SA` (`RO14056826`), and Power Grid `E-Distributie Muntenia SA` (`RO14507322`) × `LUKOIL Lubricants East Europe SRL` (`RO19737772`) and `LUKOIL Romania SRL` (`RO10547022`) — `15` TED Notices Totaling `95.64M RON` (`~19.22M EUR`)\n* Romanian national passenger railway operator **`SNTFC \"CFR Calatori\" S.A.` (`CUI RO11054545`)** awarded **`12` contracts** in `2024–2026` (including five in `2026` up to **`16 September 2026`**: **TED `641768-2026`**, **`275869-2026`**, **`169067-2026`**, **`77048-2026`**, and **`38812-2026`**) to **`LUKOIL Lubricants East Europe S.R.L.` (`CUI RO19737772`, Ploiesti)**.\n* Additional awards to `LUKOIL Lubricants East Europe SRL` and **`LUKOIL Romania SRL` (`CUI RO10547022`)** were issued by national rail infrastructure operator **`CNCF \"CFR\" S.A.` (`RO11054529`, TED `108213-2025` — `1,208,034.00 RON`)**, state natural gas producer **`S.N.G.N. ROMGAZ S.A.` (`RO14056826`, TED `395757-2024` — `3,982,960.00 RON`)**, and Bucharest regional electricity distribution operator **`E-Distributie Muntenia S.A.` (`RO14507322`, TED `48602-2024` — `77,999,400.00 RON` / `~15.67M EUR`)**.\n\n#### Cluster 4 (`TED-ART5K-04`): Croatia (`LUKOIL Croatia d.o.o.`, `OIB 84740716328`) and EU Candidate State Tenders (Moldova & North Macedonia)\n* Municipal utility **`Zelinske Komunalije d.o.o.` (`OIB 55460105464`, Sveti Ivan Zelina, Croatia)** awarded Contract `CON-0000` under **TED `71253-2025`** (`3 February 2025`) worth **`424,720.00 EUR`** to **`LUKOIL Croatia d.o.o.` (`OIB 84740716328`, Zagreb)**, a `100%` subsidiary of `PJSC LUKOIL` (`INN 7708004767`).\n\n#### Cluster 5 (`TED-ART5K-05`): German (`Landkreis Eichsfeld`) & Spanish (`Diputacion de Tarragona`, `Barcelona Activa`) Public Administrations × `Kaspersky Next EDR` Software Procurements (`JSC Kaspersky Lab`, `INN 7713140469`, `OGRN 1027739867473`) in `2025–2026`\n* Despite the German Federal Cyber Agency (`BSI`) statutory cyber warning under Section 7 BSIG (`15 March 2022`) and US BIS/OFAC restrictions (`June 2024`), the district administration **`Landkreis Eichsfeld` (`ID 16061000-0001-34`, Thuringia, Germany)** conducted a tender in March–May `2026` (**TED `178221-2026`**, **`248202-2026`**) and awarded contracts on `12 May 2026` (**TED `346346-2026`** of `20 May 2026` to resellers `CANCOM GmbH` `DE128791177` and `evoila Germany GmbH` `DE369270876`) for *\"Lizenzen fur Kaspersky Next EDR Foundations und Kaspersky Hybrid Cloud Security Server\"*.\n* In Spain, **`Diputacion de Tarragona` (`NIF P4300000I`)** published **TED `80429-2025`** (`5 February 2025` — **`334,450.00 EUR`**) for Kaspersky license renewals, and Barcelona municipal agency **`Barcelona Activa SAU SPM` (`NIF A58295296`)** awarded Lot 20 (*\"Mantenimiento del software del fabricante Kaspersky\"*, **TED `120299-2026`** of `19 February 2026` and **TED `609627-2026`** of `4 September 2026`).\n\n---\n\n### 4. Five Verified Brussels Lobbying Clusters in the `EU Transparency Register` (`03.11.2026` / `06.11.2026` Snapshot)\n\n1. **`LOBBY-EU-01` — The `PJSC NLMK` (`INN 4823006703`) / `NLMK Belgium Holdings NV` (`KBO 0473.110.669`) Steel Corridor:**\n   * NLMK's Belgian holding company lobbies on EU steel slab import quotas and `CBAM` via the **`European Steel Processors Association` (`ESPA`, `ID 450344351784-66`, updated `12 August 2026`, declared lobbying budget `300,000 – 399,999 EUR`)**, which is registered at the exact same Brussels address (**`Square de Meeus 37, 1000 Brussels`**) as global public affairs agency **`Burson SRL` (`ID 9155503593-86`, updated `27 October 2026`, `28` European Parliament passes)**. `ESPA` declares paying `200,000 – 299,999 EUR` to `Burson SRL`, while `Burson SRL` simultaneously declares a direct client retainer with `NLMK Belgium Holding (NBH)`.\n2. **`LOBBY-EU-02` — `EuroChem Group AG` (`CHE-306.864.578`, Parent of `JSC MCC EuroChem` `INN 7721230290` & `JSC NAK Azot` `INN 7116000066`) Lobbying Against EU Tariff Regulation (EU) 2025/1227:**\n   * Direct registration **`EuroChem Group AG` (`ID 290060796807-35`, registered `10 March 2025`, updated `17 August 2026`, EU relations lead `Carl Roache`)** explicitly lists as its primary legislative target **`Regulation (EU) 2025/1227 (customs duties on imports from the Russian Federation and the Republic of Belarus)`**, alongside `CBAM` and the `Fertilising Products Regulation`. In parallel, `EuroChem` retains Brussels consultancies **`H/Advisors` (`ID 217097995171-59`, `4` EP passes, `50,000 – 99,999 EUR`)** and **`Whyte EU Public Affairs` (`ID 3175695101344-67`, updated `12 August 2026`, `4` EP passes, `10,000 – 24,999 EUR`)**.\n3. **`LOBBY-EU-03` — `Kaspersky Labs GmbH` (`HRB 3527`, Subsidiary of `JSC Kaspersky Lab` `INN 7713140469`) Lobbying on `NIS 2`, `Cyber Resilience Act`, and `DORA`:**\n   * Direct registration **`Kaspersky Labs GmbH` (`ID 119828415703-30`, Ingolstadt, updated `23 September 2026`, `100,000 – 199,999 EUR`, EU affairs head `Anastasiya Kazakova`)** paired with `100%` client funding (`100,000 – 199,999 EUR`) of Munich consultancy **`House of Policy GmbH` (`ID 306710046022-36`, updated `19 May 2026`)**, where `Kaspersky Lab` is the sole declared client.\n4. **`LOBBY-EU-04` — Representation of `MCPAO UC RUSAL` (`INN 3906394938`), `PJSC MMC Norilsk Nickel` (`INN 8401005730`), and `PJSC LUKOIL` (`INN 7708004767`):**\n   * RUSAL's Irish alumina refinery **`Aughinish Alumina Limited` (`ID 509423034313-42`, updated `22 June 2026`)** maintains a direct lobbying registration and retains Brussels consultancy **`Values Consulting SRL` (`ID 793676749274-28`, updated `10 June 2026`, `6` EP passes including `Evgeny Yankovoy`)** and Sofia-based **`VMC EOOD` (`ID 4641030101714-75`)**.\n   * Norilsk Nickel's Finnish refinery **`Nornickel Finland Oy` (`Harjavalta`)** is a declared member of Brussels associations **`European Risk & Innovation Forum` (`ERIF`, `ID 52996964558-47`, budget `300,000 – 399,999 EUR`)** and **`Fine Shoots of Meta-Politics` (`FSMP`, `ID 865985639510-89`)**, while **`LUKOIL`** remains an official member of **`FuelsEurope` (`ID 26207914726-42`, updated `7 September 2026`, `13` EP passes, budget `3.5M–3.74M EUR`)** and **`Concawe` (`ID 19227706301-14`)**.\n5. **`LOBBY-EU-05` — Moscow-Headquartered `Association of European Businesses` (`AEB`, `ID 849798415326-80`) and `Dentons Europe LLP` (`ID 5531043105066-91`):**\n   * Registered at **`Ulitsa Butyrsky Val 68/70, Moscow, Russia`** (`CEO Tadzio Schilling`), **`AEB` (`ID 849798415326-80`, updated `19 October 2026`)** explicitly declares lobbying EU institutions on **`\"Impact of EU restrictive measures against Russia; impact of Russian countersanctions against the EU\"`**, while **`Dentons Europe LLP` (`ID 5531043105066-91`, registered `30 June 2026`)** lobbies on **`EU Economic Sanctions and Export Controls`**.\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nAll `10` verified clusters, including exact TED notice numbers, contract values, corporate registration codes (`EIK / CUI / OIB / HRB / NIF / INN / OGRN`), and `EU Transparency Register` IDs, are integrated into the [Sanctions Blind Spot (`/en/sanctions-gap#eu-ted-lobby-audit`)](/en/sanctions-gap#eu-ted-lobby-audit) section and exported via the open compliance feed [`/feeds/vpk-eu-ted-lobby-2024-2026.json`](/feeds/vpk-eu-ted-lobby-2024-2026.json).\n",
    "pinned": false,
    "read_time_min": 15,
    "lead": "How Bulgaria's Kozloduy NPP awarded 11 direct contracts (>32.63M EUR) in 2025–2026 to Moscow-based JSC Rosatom Service (OGRN 1117746845523, including TED 466972-2025 and 127496-2026 procuring parts manufactured by US/UK-sanctioned Russian nuclear warhead assembly plant FGUP PSZ in ZATO Trekhgorny INN 7405000428 and JSC OKB Gidropress INN 5036092340), the Bulgarian Ministry of Defence signed a 20.84M EUR jet fuel contract on 18.08.2026 (TED 586041-2026) with 100% LUKOIL subsidiary LUKOIL Aviation Bulgaria EOOD (EIK 175015362), Romanian state railways CFR Calatori and Romgaz awarded 15 contracts worth 95.64M RON (~19.22M EUR) to LUKOIL entities (RO19737772 / RO10547022), and 15 active EU Transparency Register profiles with 57 European Parliament passes lobby in Brussels for NLMK Belgium Holdings, EuroChem Group AG (against Regulation EU 2025/1227), Kaspersky Labs GmbH, Aughinish Alumina (RUSAL), Nornickel Finland Oy, and Moscow-based AEB.",
    "body_md": "### 1. Regulatory Architecture of Article 5k of Council Regulation (EU) No 833/2014 and the Structural Blind Spot\n\nArticle **`5k(1)` of Council Regulation (EU) No 833/2014** (introduced under the fifth EU sanctions package in April `2022` via Regulation `(EU) 2022/576`) prohibits awarding or continuing the execution of any public or utilities procurement contract falling within the scope of the EU Public Procurement Directives (`2014/23/EU`, `2014/24/EU`, `2014/25/EU`, `2009/81/EC`) to or with:\n* **(a)** a Russian national, or a natural or legal person, entity, or body established in Russia;\n* **(b)** a legal person, entity, or body (including one established inside an EU Member State) whose proprietary rights are directly or indirectly owned for **more than `50%`** by an entity referred to in point `(a)`; or\n* **(c)** a natural or legal person, entity, or body acting on behalf or at the direction of an entity referred to in point `(a)` or `(b)`, including subcontractors, suppliers, or entities whose capacities are being relied on where they account for more than **`10%`** of the contract value.\n\nDirect programmatic harvesting of **`2,447,739` procurement notices in `Tenders Electronic Daily` (`api.ted.europa.eu` v3 covering `1 January 2024 – 6 November 2026`)** combined with XML inspection of primary `ContractAwardNotice` eForms and cross-matching against the official XML exports of the **`EU Transparency Register` (`18,028` organizations as of `3 November 2026`)** and **`European Parliament Accredited Lobbyists` (`8,567` active pass holders as of `6 November 2026`)** exposes two systemic enforcement gaps:\n1. **The Article 5k Public Procurement Gap (`61` verified TED notices totaling `>76.1M EUR`):** reliance on the civil nuclear derogation of Article `5k(2)(b)` to channel EU public procurement funds directly to a US/UK-sanctioned Russian serial nuclear warhead assembly plant (`FGUP PSZ` in ZATO Trekhgorny, `INN 7405000428`), alongside continuous `2024–2026` awards of military aviation fuel, border police, state railway, and gas contracts in Bulgaria, Romania, and Croatia to `100%` subsidiaries of Russian oil major `PJSC LUKOIL` (`INN 7708004767`) in breach of the `>50%` Russian ownership prohibition of Article `5k(1)(b)`.\n2. **The Brussels Lobbying Gap (`15` active `EU Transparency Register` profiles and `57` European Parliament access passes):** active institutional lobbying in Brussels by European operating subsidiaries and retained consultancies representing Russian steel, fertilizer, aluminum, nickel, oil, and cybersecurity holdings (`NLMK`, `EuroChem`, `Kaspersky`, `RUSAL`, `Nornickel`, `LUKOIL`, and Moscow-headquartered `AEB`).\n\n---\n\n### 2. Sober Critical Engineer Filter: Disambiguating Namesakes and Divested Assets\n\nAutomated keyword searches across European tender databases generate substantial false positives unless verified against primary corporate registration identifiers (`<cbc:CompanyID>`) inside TED XML eForms. Applying strict engineering verification, four categories of false matches were identified and purged from the dataset:\n\n1. **`EuroChem` Namesakes and `Lifosa` Morphological Stemming in TED:** `12` tenders in Poland and Greece were awarded to unrelated local chemical/detergent distributors **`PHPU EUROCHEM BGD Sp. z o.o.` (Tarnow, Poland)** and **`EUROCHEM ABEE` (Greece)**, neither of which has any ownership link to `EuroChem Group AG` (`CHE-306.864.578`) or Russia's `JSC MCC EuroChem` (`INN 7721230290`). Meanwhile, `988` full-text hits for `Lifosa` were caused by TED search stemming matching `ERGO Life Insurance SE` in Lithuania and Latvia.\n2. **`NVision` Namesakes in Germany and Poland:** `7` TED notices in `2024–2026` involved **`NVision Imaging Technologies GmbH` (Ulm, Germany)** — a quantum MRI hardware startup — and **`Axence nVision`** network management software (`Axence Sp. z o.o.`, Krakow, Poland). Neither is affiliated with AFK Sistema's `NVision Czech Republic a.s.` (`ICO 47550937`).\n3. **Pre-Sanctions Divestment of `Aircraft Industries, a.s.` (`ICO 27174841`, Kunovice, Czechia):** `100%` of the shares of the `L-410` aircraft manufacturer were acquired in April `2022` by Czech aerospace group **`OMNIPOL a.s.` (`ICO 00001759`)** from Russian UMMC/UZGA shareholders. Consequently, its `2024–2026` contracts in Czechia and Poland are executed under `100%` Czech ownership and do not violate Article `5k`.\n4. **Czech Municipality `Mesto Kasperske Hory` (`ICO 00255602`):** `55` Czech TED hits on `Kaspersky` were municipal public works tenders issued by the town of `Kasperske Hory` and were excluded; only verified procurements of `Kaspersky Lab` (`INN 7713140469`) software in Germany and Spain were retained.\n\n---\n\n### 3. Five Verified EU Public Procurement Clusters under Article 5k of Regulation (EU) No 833/2014 (2024–2026)\n\n#### Cluster 1 (`TED-ART5K-01`): Kozloduy NPP EAD (`EIK 106513772`, Bulgaria) × Moscow's `JSC Rosatom Service` (`OGRN 1117746845523`, `INN 7705966318`) & Serial Nuclear Warhead Assembly Plant `FGUP PSZ Trekhgorny` (`INN 7405000428`) — `11` TED Notices Totaling `>32.63M EUR`\n* **EU Contracting Authority:** Bulgarian state nuclear power operator **`Kozloduy NPP EAD` (`EIK 106513772`)**.\n* **Contractor in TED XML (`<cbc:CompanyID>`):** **`JSC Rosatom Service` (`Moscow, Nakhimovsky Prospekt 58, Russian Federation`, `OGRN 1117746845523`, `INN 7705966318`)**, an operating subsidiary of **State Corporation Rosatom (`INN 7706413348`)**.\n* **Direct EU Public Procurement of Hardware Manufactured by Russia's Serial Nuclear Warhead Assembly Plant `FGUP PSZ` (`INN 7405000428`):**\n  * In Contract Award Notice **TED `466972-2025`** (`17 July 2025`, Contract No. `205876` signed `27 June 2025` for **`1,208,702.94 BGN` / `~618,000 EUR`**) and Notice **TED `127496-2026`** (`24 February 2026` for **`618,000.00 EUR`**), the official procurement title explicitly states: *\"Supply of spare parts from manufacturer FGUP 'PSZ' (Federal State Unitary Enterprise 'Instrument-Making Plant'), city of Trekhgorny, Russia\"*.\n  * **FGUP \"Priborostroitelny Zavod named after K.A. Volodin\" (`FGUP PSZ`, closed nuclear city ZATO Trekhgorny, Chelyabinsk Region, `INN 7405000428`, `OGRN 1027400661650`)** is one of Russia's primary serial assembly plants for nuclear warheads and is designated under **US OFAC SDN**, **UK OFSI**, and **Ukraine NSDC** blocking sanctions, yet remains unsanctioned by the EU and receives direct EU public procurement revenue via `JSC Rosatom Service`.\n* **Additional 2025–2026 Kozloduy NPP Awards to `JSC Rosatom Service` (`OGRN 1117746845523`):**\n  * **TED `375969-2026`** (`2 June 2026`, Contract No. `251514` of `27 May 2026`): **`14,410,392.00 EUR`** (`26,096,692.80 BGN`) for Unit 6 control and protection system absorber rods (`PS SUZ`);\n  * **TED `461489-2026`** (`6 July 2026`, Contract No. `257240` of `2 July 2026`): **`2,426,970.00 EUR`** for `ShEM-3` linear position indicators manufactured by **JSC OKB Gidropress (`INN 5036092340`, `OGRN 1085074009503`, Podolsk — lead designer of naval nuclear propulsion reactors for Russian Navy submarines)**;\n  * **TED `306891-2026`** (`5 May 2026`, Contract No. `247163` of `27 April 2026`): **`2,083,607.00 EUR`** for `ShEM` spare parts manufactured by **JSC OKB Gidropress (`INN 5036092340`)**;\n  * **TED `5608-2026`** (`7 January 2026`, Contract No. `231053` of `16 December 2025`): **`342,610.00 EUR`** for `GCN-195M` main coolant pump components manufactured by **JSC CKBM (`INN 7806394392`, `OGRN 1089847327415`, St. Petersburg)**;\n  * **TED `554230-2025`** (`26 August 2025`, Contract No. `211872`): **`15,763,989.80 BGN` (`~8.06M EUR`)**.\n\n#### Cluster 2 (`TED-ART5K-02`): Ministry of Defence of Bulgaria (`EIK 000695324`) & Bulgarian Border Police (`EIK 129010125`) × `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`) and `LUKOIL-Bulgaria EOOD` (`EIK 121699202`) — `28` TED Notices Totaling `>23.04M EUR`\n* **Direct NATO Member State Ministry of Defence Aviation Fuel Contract Signed `18 August 2026` (`TED 586041-2026`):**\n  * On `25 August 2026`, TED published Contract Award Notice **`586041-2026`** documenting Contract No. `263378` signed on **`18 August 2026`** by the **Ministry of Defence of the Republic of Bulgaria (`EIK 000695324`)** worth **`20,841,666.53 EUR` excl. VAT (`25,014,166.06 EUR` incl. VAT)** with **`LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`, Sofia)** for the supply of `Jet A-1` aviation turbine fuel.\n* **Border Police Helicopter Refueling and State Fuel Contracts:**\n  * The **General Directorate Border Police of the Ministry of Interior of Bulgaria (`EIK 129010125`)** awarded three consecutive into-plane helicopter refueling contracts to `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`): **TED `25943-2026`** (`14 January 2026`, Contract No. `232310` — `106,019.30 EUR`), **TED `25239-2025`** (`14 January 2025` — `216,348.54 BGN`), and **TED `101459-2024`** (`19 February 2024` — `310,000.00 BGN`).\n  * An additional `24` state and municipal fuel contracts in `2024–2026` (including **TED `349073-2026`** of `21 May 2026` for the Ministry of Justice Prison Fund `EIK 129009070` and **TED `613691-2025`** worth `1,600,000 BGN`) were awarded to **`LUKOIL-Bulgaria EOOD` (`EIK 121699202`)** and **`LUKOIL - Bulgaria Bunker EOOD` (`EIK 200151591`)**. All three Bulgarian companies are `100%` indirectly owned by Russian oil major **`PJSC LUKOIL` (`INN 7708004767`, `OGRN 1027700035769`)** via `LITASCO SA` (`CHE-100.738.922`, Geneva), squarely meeting the `>50%` Russian ownership threshold of Article `5k(1)(b)`.\n\n#### Cluster 3 (`TED-ART5K-03`): Romanian State Railways (`CFR Calatori SA` `RO11054545` & `CNCF CFR SA` `RO11054529`), State Gas Producer `SNGN Romgaz SA` (`RO14056826`), and Power Grid `E-Distributie Muntenia SA` (`RO14507322`) × `LUKOIL Lubricants East Europe SRL` (`RO19737772`) and `LUKOIL Romania SRL` (`RO10547022`) — `15` TED Notices Totaling `95.64M RON` (`~19.22M EUR`)\n* Romanian national passenger railway operator **`SNTFC \"CFR Calatori\" S.A.` (`CUI RO11054545`)** awarded **`12` contracts** in `2024–2026` (including five in `2026` up to **`16 September 2026`**: **TED `641768-2026`**, **`275869-2026`**, **`169067-2026`**, **`77048-2026`**, and **`38812-2026`**) to **`LUKOIL Lubricants East Europe S.R.L.` (`CUI RO19737772`, Ploiesti)**.\n* Additional awards to `LUKOIL Lubricants East Europe SRL` and **`LUKOIL Romania SRL` (`CUI RO10547022`)** were issued by national rail infrastructure operator **`CNCF \"CFR\" S.A.` (`RO11054529`, TED `108213-2025` — `1,208,034.00 RON`)**, state natural gas producer **`S.N.G.N. ROMGAZ S.A.` (`RO14056826`, TED `395757-2024` — `3,982,960.00 RON`)**, and Bucharest regional electricity distribution operator **`E-Distributie Muntenia S.A.` (`RO14507322`, TED `48602-2024` — `77,999,400.00 RON` / `~15.67M EUR`)**.\n\n#### Cluster 4 (`TED-ART5K-04`): Croatia (`LUKOIL Croatia d.o.o.`, `OIB 84740716328`) and EU Candidate State Tenders (Moldova & North Macedonia)\n* Municipal utility **`Zelinske Komunalije d.o.o.` (`OIB 55460105464`, Sveti Ivan Zelina, Croatia)** awarded Contract `CON-0000` under **TED `71253-2025`** (`3 February 2025`) worth **`424,720.00 EUR`** to **`LUKOIL Croatia d.o.o.` (`OIB 84740716328`, Zagreb)**, a `100%` subsidiary of `PJSC LUKOIL` (`INN 7708004767`).\n\n#### Cluster 5 (`TED-ART5K-05`): German (`Landkreis Eichsfeld`) & Spanish (`Diputacion de Tarragona`, `Barcelona Activa`) Public Administrations × `Kaspersky Next EDR` Software Procurements (`JSC Kaspersky Lab`, `INN 7713140469`, `OGRN 1027739867473`) in `2025–2026`\n* Despite the German Federal Cyber Agency (`BSI`) statutory cyber warning under Section 7 BSIG (`15 March 2022`) and US BIS/OFAC restrictions (`June 2024`), the district administration **`Landkreis Eichsfeld` (`ID 16061000-0001-34`, Thuringia, Germany)** conducted a tender in March–May `2026` (**TED `178221-2026`**, **`248202-2026`**) and awarded contracts on `12 May 2026` (**TED `346346-2026`** of `20 May 2026` to resellers `CANCOM GmbH` `DE128791177` and `evoila Germany GmbH` `DE369270876`) for *\"Lizenzen fur Kaspersky Next EDR Foundations und Kaspersky Hybrid Cloud Security Server\"*.\n* In Spain, **`Diputacion de Tarragona` (`NIF P4300000I`)** published **TED `80429-2025`** (`5 February 2025` — **`334,450.00 EUR`**) for Kaspersky license renewals, and Barcelona municipal agency **`Barcelona Activa SAU SPM` (`NIF A58295296`)** awarded Lot 20 (*\"Mantenimiento del software del fabricante Kaspersky\"*, **TED `120299-2026`** of `19 February 2026` and **TED `609627-2026`** of `4 September 2026`).\n\n---\n\n### 4. Five Verified Brussels Lobbying Clusters in the `EU Transparency Register` (`03.11.2026` / `06.11.2026` Snapshot)\n\n1. **`LOBBY-EU-01` — The `PJSC NLMK` (`INN 4823006703`) / `NLMK Belgium Holdings NV` (`KBO 0473.110.669`) Steel Corridor:**\n   * NLMK's Belgian holding company lobbies on EU steel slab import quotas and `CBAM` via the **`European Steel Processors Association` (`ESPA`, `ID 450344351784-66`, updated `12 August 2026`, declared lobbying budget `300,000 – 399,999 EUR`)**, which is registered at the exact same Brussels address (**`Square de Meeus 37, 1000 Brussels`**) as global public affairs agency **`Burson SRL` (`ID 9155503593-86`, updated `27 October 2026`, `28` European Parliament passes)**. `ESPA` declares paying `200,000 – 299,999 EUR` to `Burson SRL`, while `Burson SRL` simultaneously declares a direct client retainer with `NLMK Belgium Holding (NBH)`.\n2. **`LOBBY-EU-02` — `EuroChem Group AG` (`CHE-306.864.578`, Parent of `JSC MCC EuroChem` `INN 7721230290` & `JSC NAK Azot` `INN 7116000066`) Lobbying Against EU Tariff Regulation (EU) 2025/1227:**\n   * Direct registration **`EuroChem Group AG` (`ID 290060796807-35`, registered `10 March 2025`, updated `17 August 2026`, EU relations lead `Carl Roache`)** explicitly lists as its primary legislative target **`Regulation (EU) 2025/1227 (customs duties on imports from the Russian Federation and the Republic of Belarus)`**, alongside `CBAM` and the `Fertilising Products Regulation`. In parallel, `EuroChem` retains Brussels consultancies **`H/Advisors` (`ID 217097995171-59`, `4` EP passes, `50,000 – 99,999 EUR`)** and **`Whyte EU Public Affairs` (`ID 3175695101344-67`, updated `12 August 2026`, `4` EP passes, `10,000 – 24,999 EUR`)**.\n3. **`LOBBY-EU-03` — `Kaspersky Labs GmbH` (`HRB 3527`, Subsidiary of `JSC Kaspersky Lab` `INN 7713140469`) Lobbying on `NIS 2`, `Cyber Resilience Act`, and `DORA`:**\n   * Direct registration **`Kaspersky Labs GmbH` (`ID 119828415703-30`, Ingolstadt, updated `23 September 2026`, `100,000 – 199,999 EUR`, EU affairs head `Anastasiya Kazakova`)** paired with `100%` client funding (`100,000 – 199,999 EUR`) of Munich consultancy **`House of Policy GmbH` (`ID 306710046022-36`, updated `19 May 2026`)**, where `Kaspersky Lab` is the sole declared client.\n4. **`LOBBY-EU-04` — Representation of `MCPAO UC RUSAL` (`INN 3906394938`), `PJSC MMC Norilsk Nickel` (`INN 8401005730`), and `PJSC LUKOIL` (`INN 7708004767`):**\n   * RUSAL's Irish alumina refinery **`Aughinish Alumina Limited` (`ID 509423034313-42`, updated `22 June 2026`)** maintains a direct lobbying registration and retains Brussels consultancy **`Values Consulting SRL` (`ID 793676749274-28`, updated `10 June 2026`, `6` EP passes including `Evgeny Yankovoy`)** and Sofia-based **`VMC EOOD` (`ID 4641030101714-75`)**.\n   * Norilsk Nickel's Finnish refinery **`Nornickel Finland Oy` (`Harjavalta`)** is a declared member of Brussels associations **`European Risk & Innovation Forum` (`ERIF`, `ID 52996964558-47`, budget `300,000 – 399,999 EUR`)** and **`Fine Shoots of Meta-Politics` (`FSMP`, `ID 865985639510-89`)**, while **`LUKOIL`** remains an official member of **`FuelsEurope` (`ID 26207914726-42`, updated `7 September 2026`, `13` EP passes, budget `3.5M–3.74M EUR`)** and **`Concawe` (`ID 19227706301-14`)**.\n5. **`LOBBY-EU-05` — Moscow-Headquartered `Association of European Businesses` (`AEB`, `ID 849798415326-80`) and `Dentons Europe LLP` (`ID 5531043105066-91`):**\n   * Registered at **`Ulitsa Butyrsky Val 68/70, Moscow, Russia`** (`CEO Tadzio Schilling`), **`AEB` (`ID 849798415326-80`, updated `19 October 2026`)** explicitly declares lobbying EU institutions on **`\"Impact of EU restrictive measures against Russia; impact of Russian countersanctions against the EU\"`**, while **`Dentons Europe LLP` (`ID 5531043105066-91`, registered `30 June 2026`)** lobbies on **`EU Economic Sanctions and Export Controls`**.\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nAll `10` verified clusters, including exact TED notice numbers, contract values, corporate registration codes (`EIK / CUI / OIB / HRB / NIF / INN / OGRN`), and `EU Transparency Register` IDs, are integrated into the [Sanctions Blind Spot (`/en/sanctions-gap#eu-ted-lobby-audit`)](/en/sanctions-gap#eu-ted-lobby-audit) section and exported via the open compliance feed [`/feeds/vpk-eu-ted-lobby-2024-2026.json`](/feeds/vpk-eu-ted-lobby-2024-2026.json).\n",
    "related_tool_or_link": "/en/sanctions-gap#eu-ted-lobby-audit",
    "title_en": "Cross-Registry Audit of EU Public Procurement (TED API v3, Article 5k of EU Regulation 833/2014) & Brussels Lobbying (EU Transparency Register) × European Subsidiaries of Russian VPK & Commodity Holdings (2024–2026)",
    "lead_en": "How Bulgaria's Kozloduy NPP awarded 11 direct contracts (>32.63M EUR) in 2025–2026 to Moscow-based JSC Rosatom Service (OGRN 1117746845523, including TED 466972-2025 and 127496-2026 procuring parts manufactured by US/UK-sanctioned Russian nuclear warhead assembly plant FGUP PSZ in ZATO Trekhgorny INN 7405000428 and JSC OKB Gidropress INN 5036092340), the Bulgarian Ministry of Defence signed a 20.84M EUR jet fuel contract on 18.08.2026 (TED 586041-2026) with 100% LUKOIL subsidiary LUKOIL Aviation Bulgaria EOOD (EIK 175015362), Romanian state railways CFR Calatori and Romgaz awarded 15 contracts worth 95.64M RON (~19.22M EUR) to LUKOIL entities (RO19737772 / RO10547022), and 15 active EU Transparency Register profiles with 57 European Parliament passes lobby in Brussels for NLMK Belgium Holdings, EuroChem Group AG (against Regulation EU 2025/1227), Kaspersky Labs GmbH, Aughinish Alumina (RUSAL), Nornickel Finland Oy, and Moscow-based AEB.",
    "body_en_md": "### 1. Regulatory Architecture of Article 5k of Council Regulation (EU) No 833/2014 and the Structural Blind Spot\n\nArticle **`5k(1)` of Council Regulation (EU) No 833/2014** (introduced under the fifth EU sanctions package in April `2022` via Regulation `(EU) 2022/576`) prohibits awarding or continuing the execution of any public or utilities procurement contract falling within the scope of the EU Public Procurement Directives (`2014/23/EU`, `2014/24/EU`, `2014/25/EU`, `2009/81/EC`) to or with:\n* **(a)** a Russian national, or a natural or legal person, entity, or body established in Russia;\n* **(b)** a legal person, entity, or body (including one established inside an EU Member State) whose proprietary rights are directly or indirectly owned for **more than `50%`** by an entity referred to in point `(a)`; or\n* **(c)** a natural or legal person, entity, or body acting on behalf or at the direction of an entity referred to in point `(a)` or `(b)`, including subcontractors, suppliers, or entities whose capacities are being relied on where they account for more than **`10%`** of the contract value.\n\nDirect programmatic harvesting of **`2,447,739` procurement notices in `Tenders Electronic Daily` (`api.ted.europa.eu` v3 covering `1 January 2024 – 6 November 2026`)** combined with XML inspection of primary `ContractAwardNotice` eForms and cross-matching against the official XML exports of the **`EU Transparency Register` (`18,028` organizations as of `3 November 2026`)** and **`European Parliament Accredited Lobbyists` (`8,567` active pass holders as of `6 November 2026`)** exposes two systemic enforcement gaps:\n1. **The Article 5k Public Procurement Gap (`61` verified TED notices totaling `>76.1M EUR`):** reliance on the civil nuclear derogation of Article `5k(2)(b)` to channel EU public procurement funds directly to a US/UK-sanctioned Russian serial nuclear warhead assembly plant (`FGUP PSZ` in ZATO Trekhgorny, `INN 7405000428`), alongside continuous `2024–2026` awards of military aviation fuel, border police, state railway, and gas contracts in Bulgaria, Romania, and Croatia to `100%` subsidiaries of Russian oil major `PJSC LUKOIL` (`INN 7708004767`) in breach of the `>50%` Russian ownership prohibition of Article `5k(1)(b)`.\n2. **The Brussels Lobbying Gap (`15` active `EU Transparency Register` profiles and `57` European Parliament access passes):** active institutional lobbying in Brussels by European operating subsidiaries and retained consultancies representing Russian steel, fertilizer, aluminum, nickel, oil, and cybersecurity holdings (`NLMK`, `EuroChem`, `Kaspersky`, `RUSAL`, `Nornickel`, `LUKOIL`, and Moscow-headquartered `AEB`).\n\n---\n\n### 2. Sober Critical Engineer Filter: Disambiguating Namesakes and Divested Assets\n\nAutomated keyword searches across European tender databases generate substantial false positives unless verified against primary corporate registration identifiers (`<cbc:CompanyID>`) inside TED XML eForms. Applying strict engineering verification, four categories of false matches were identified and purged from the dataset:\n\n1. **`EuroChem` Namesakes and `Lifosa` Morphological Stemming in TED:** `12` tenders in Poland and Greece were awarded to unrelated local chemical/detergent distributors **`PHPU EUROCHEM BGD Sp. z o.o.` (Tarnow, Poland)** and **`EUROCHEM ABEE` (Greece)**, neither of which has any ownership link to `EuroChem Group AG` (`CHE-306.864.578`) or Russia's `JSC MCC EuroChem` (`INN 7721230290`). Meanwhile, `988` full-text hits for `Lifosa` were caused by TED search stemming matching `ERGO Life Insurance SE` in Lithuania and Latvia.\n2. **`NVision` Namesakes in Germany and Poland:** `7` TED notices in `2024–2026` involved **`NVision Imaging Technologies GmbH` (Ulm, Germany)** — a quantum MRI hardware startup — and **`Axence nVision`** network management software (`Axence Sp. z o.o.`, Krakow, Poland). Neither is affiliated with AFK Sistema's `NVision Czech Republic a.s.` (`ICO 47550937`).\n3. **Pre-Sanctions Divestment of `Aircraft Industries, a.s.` (`ICO 27174841`, Kunovice, Czechia):** `100%` of the shares of the `L-410` aircraft manufacturer were acquired in April `2022` by Czech aerospace group **`OMNIPOL a.s.` (`ICO 00001759`)** from Russian UMMC/UZGA shareholders. Consequently, its `2024–2026` contracts in Czechia and Poland are executed under `100%` Czech ownership and do not violate Article `5k`.\n4. **Czech Municipality `Mesto Kasperske Hory` (`ICO 00255602`):** `55` Czech TED hits on `Kaspersky` were municipal public works tenders issued by the town of `Kasperske Hory` and were excluded; only verified procurements of `Kaspersky Lab` (`INN 7713140469`) software in Germany and Spain were retained.\n\n---\n\n### 3. Five Verified EU Public Procurement Clusters under Article 5k of Regulation (EU) No 833/2014 (2024–2026)\n\n#### Cluster 1 (`TED-ART5K-01`): Kozloduy NPP EAD (`EIK 106513772`, Bulgaria) × Moscow's `JSC Rosatom Service` (`OGRN 1117746845523`, `INN 7705966318`) & Serial Nuclear Warhead Assembly Plant `FGUP PSZ Trekhgorny` (`INN 7405000428`) — `11` TED Notices Totaling `>32.63M EUR`\n* **EU Contracting Authority:** Bulgarian state nuclear power operator **`Kozloduy NPP EAD` (`EIK 106513772`)**.\n* **Contractor in TED XML (`<cbc:CompanyID>`):** **`JSC Rosatom Service` (`Moscow, Nakhimovsky Prospekt 58, Russian Federation`, `OGRN 1117746845523`, `INN 7705966318`)**, an operating subsidiary of **State Corporation Rosatom (`INN 7706413348`)**.\n* **Direct EU Public Procurement of Hardware Manufactured by Russia's Serial Nuclear Warhead Assembly Plant `FGUP PSZ` (`INN 7405000428`):**\n  * In Contract Award Notice **TED `466972-2025`** (`17 July 2025`, Contract No. `205876` signed `27 June 2025` for **`1,208,702.94 BGN` / `~618,000 EUR`**) and Notice **TED `127496-2026`** (`24 February 2026` for **`618,000.00 EUR`**), the official procurement title explicitly states: *\"Supply of spare parts from manufacturer FGUP 'PSZ' (Federal State Unitary Enterprise 'Instrument-Making Plant'), city of Trekhgorny, Russia\"*.\n  * **FGUP \"Priborostroitelny Zavod named after K.A. Volodin\" (`FGUP PSZ`, closed nuclear city ZATO Trekhgorny, Chelyabinsk Region, `INN 7405000428`, `OGRN 1027400661650`)** is one of Russia's primary serial assembly plants for nuclear warheads and is designated under **US OFAC SDN**, **UK OFSI**, and **Ukraine NSDC** blocking sanctions, yet remains unsanctioned by the EU and receives direct EU public procurement revenue via `JSC Rosatom Service`.\n* **Additional 2025–2026 Kozloduy NPP Awards to `JSC Rosatom Service` (`OGRN 1117746845523`):**\n  * **TED `375969-2026`** (`2 June 2026`, Contract No. `251514` of `27 May 2026`): **`14,410,392.00 EUR`** (`26,096,692.80 BGN`) for Unit 6 control and protection system absorber rods (`PS SUZ`);\n  * **TED `461489-2026`** (`6 July 2026`, Contract No. `257240` of `2 July 2026`): **`2,426,970.00 EUR`** for `ShEM-3` linear position indicators manufactured by **JSC OKB Gidropress (`INN 5036092340`, `OGRN 1085074009503`, Podolsk — lead designer of naval nuclear propulsion reactors for Russian Navy submarines)**;\n  * **TED `306891-2026`** (`5 May 2026`, Contract No. `247163` of `27 April 2026`): **`2,083,607.00 EUR`** for `ShEM` spare parts manufactured by **JSC OKB Gidropress (`INN 5036092340`)**;\n  * **TED `5608-2026`** (`7 January 2026`, Contract No. `231053` of `16 December 2025`): **`342,610.00 EUR`** for `GCN-195M` main coolant pump components manufactured by **JSC CKBM (`INN 7806394392`, `OGRN 1089847327415`, St. Petersburg)**;\n  * **TED `554230-2025`** (`26 August 2025`, Contract No. `211872`): **`15,763,989.80 BGN` (`~8.06M EUR`)**.\n\n#### Cluster 2 (`TED-ART5K-02`): Ministry of Defence of Bulgaria (`EIK 000695324`) & Bulgarian Border Police (`EIK 129010125`) × `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`) and `LUKOIL-Bulgaria EOOD` (`EIK 121699202`) — `28` TED Notices Totaling `>23.04M EUR`\n* **Direct NATO Member State Ministry of Defence Aviation Fuel Contract Signed `18 August 2026` (`TED 586041-2026`):**\n  * On `25 August 2026`, TED published Contract Award Notice **`586041-2026`** documenting Contract No. `263378` signed on **`18 August 2026`** by the **Ministry of Defence of the Republic of Bulgaria (`EIK 000695324`)** worth **`20,841,666.53 EUR` excl. VAT (`25,014,166.06 EUR` incl. VAT)** with **`LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`, Sofia)** for the supply of `Jet A-1` aviation turbine fuel.\n* **Border Police Helicopter Refueling and State Fuel Contracts:**\n  * The **General Directorate Border Police of the Ministry of Interior of Bulgaria (`EIK 129010125`)** awarded three consecutive into-plane helicopter refueling contracts to `LUKOIL Aviation Bulgaria EOOD` (`EIK 175015362`): **TED `25943-2026`** (`14 January 2026`, Contract No. `232310` — `106,019.30 EUR`), **TED `25239-2025`** (`14 January 2025` — `216,348.54 BGN`), and **TED `101459-2024`** (`19 February 2024` — `310,000.00 BGN`).\n  * An additional `24` state and municipal fuel contracts in `2024–2026` (including **TED `349073-2026`** of `21 May 2026` for the Ministry of Justice Prison Fund `EIK 129009070` and **TED `613691-2025`** worth `1,600,000 BGN`) were awarded to **`LUKOIL-Bulgaria EOOD` (`EIK 121699202`)** and **`LUKOIL - Bulgaria Bunker EOOD` (`EIK 200151591`)**. All three Bulgarian companies are `100%` indirectly owned by Russian oil major **`PJSC LUKOIL` (`INN 7708004767`, `OGRN 1027700035769`)** via `LITASCO SA` (`CHE-100.738.922`, Geneva), squarely meeting the `>50%` Russian ownership threshold of Article `5k(1)(b)`.\n\n#### Cluster 3 (`TED-ART5K-03`): Romanian State Railways (`CFR Calatori SA` `RO11054545` & `CNCF CFR SA` `RO11054529`), State Gas Producer `SNGN Romgaz SA` (`RO14056826`), and Power Grid `E-Distributie Muntenia SA` (`RO14507322`) × `LUKOIL Lubricants East Europe SRL` (`RO19737772`) and `LUKOIL Romania SRL` (`RO10547022`) — `15` TED Notices Totaling `95.64M RON` (`~19.22M EUR`)\n* Romanian national passenger railway operator **`SNTFC \"CFR Calatori\" S.A.` (`CUI RO11054545`)** awarded **`12` contracts** in `2024–2026` (including five in `2026` up to **`16 September 2026`**: **TED `641768-2026`**, **`275869-2026`**, **`169067-2026`**, **`77048-2026`**, and **`38812-2026`**) to **`LUKOIL Lubricants East Europe S.R.L.` (`CUI RO19737772`, Ploiesti)**.\n* Additional awards to `LUKOIL Lubricants East Europe SRL` and **`LUKOIL Romania SRL` (`CUI RO10547022`)** were issued by national rail infrastructure operator **`CNCF \"CFR\" S.A.` (`RO11054529`, TED `108213-2025` — `1,208,034.00 RON`)**, state natural gas producer **`S.N.G.N. ROMGAZ S.A.` (`RO14056826`, TED `395757-2024` — `3,982,960.00 RON`)**, and Bucharest regional electricity distribution operator **`E-Distributie Muntenia S.A.` (`RO14507322`, TED `48602-2024` — `77,999,400.00 RON` / `~15.67M EUR`)**.\n\n#### Cluster 4 (`TED-ART5K-04`): Croatia (`LUKOIL Croatia d.o.o.`, `OIB 84740716328`) and EU Candidate State Tenders (Moldova & North Macedonia)\n* Municipal utility **`Zelinske Komunalije d.o.o.` (`OIB 55460105464`, Sveti Ivan Zelina, Croatia)** awarded Contract `CON-0000` under **TED `71253-2025`** (`3 February 2025`) worth **`424,720.00 EUR`** to **`LUKOIL Croatia d.o.o.` (`OIB 84740716328`, Zagreb)**, a `100%` subsidiary of `PJSC LUKOIL` (`INN 7708004767`).\n\n#### Cluster 5 (`TED-ART5K-05`): German (`Landkreis Eichsfeld`) & Spanish (`Diputacion de Tarragona`, `Barcelona Activa`) Public Administrations × `Kaspersky Next EDR` Software Procurements (`JSC Kaspersky Lab`, `INN 7713140469`, `OGRN 1027739867473`) in `2025–2026`\n* Despite the German Federal Cyber Agency (`BSI`) statutory cyber warning under Section 7 BSIG (`15 March 2022`) and US BIS/OFAC restrictions (`June 2024`), the district administration **`Landkreis Eichsfeld` (`ID 16061000-0001-34`, Thuringia, Germany)** conducted a tender in March–May `2026` (**TED `178221-2026`**, **`248202-2026`**) and awarded contracts on `12 May 2026` (**TED `346346-2026`** of `20 May 2026` to resellers `CANCOM GmbH` `DE128791177` and `evoila Germany GmbH` `DE369270876`) for *\"Lizenzen fur Kaspersky Next EDR Foundations und Kaspersky Hybrid Cloud Security Server\"*.\n* In Spain, **`Diputacion de Tarragona` (`NIF P4300000I`)** published **TED `80429-2025`** (`5 February 2025` — **`334,450.00 EUR`**) for Kaspersky license renewals, and Barcelona municipal agency **`Barcelona Activa SAU SPM` (`NIF A58295296`)** awarded Lot 20 (*\"Mantenimiento del software del fabricante Kaspersky\"*, **TED `120299-2026`** of `19 February 2026` and **TED `609627-2026`** of `4 September 2026`).\n\n---\n\n### 4. Five Verified Brussels Lobbying Clusters in the `EU Transparency Register` (`03.11.2026` / `06.11.2026` Snapshot)\n\n1. **`LOBBY-EU-01` — The `PJSC NLMK` (`INN 4823006703`) / `NLMK Belgium Holdings NV` (`KBO 0473.110.669`) Steel Corridor:**\n   * NLMK's Belgian holding company lobbies on EU steel slab import quotas and `CBAM` via the **`European Steel Processors Association` (`ESPA`, `ID 450344351784-66`, updated `12 August 2026`, declared lobbying budget `300,000 – 399,999 EUR`)**, which is registered at the exact same Brussels address (**`Square de Meeus 37, 1000 Brussels`**) as global public affairs agency **`Burson SRL` (`ID 9155503593-86`, updated `27 October 2026`, `28` European Parliament passes)**. `ESPA` declares paying `200,000 – 299,999 EUR` to `Burson SRL`, while `Burson SRL` simultaneously declares a direct client retainer with `NLMK Belgium Holding (NBH)`.\n2. **`LOBBY-EU-02` — `EuroChem Group AG` (`CHE-306.864.578`, Parent of `JSC MCC EuroChem` `INN 7721230290` & `JSC NAK Azot` `INN 7116000066`) Lobbying Against EU Tariff Regulation (EU) 2025/1227:**\n   * Direct registration **`EuroChem Group AG` (`ID 290060796807-35`, registered `10 March 2025`, updated `17 August 2026`, EU relations lead `Carl Roache`)** explicitly lists as its primary legislative target **`Regulation (EU) 2025/1227 (customs duties on imports from the Russian Federation and the Republic of Belarus)`**, alongside `CBAM` and the `Fertilising Products Regulation`. In parallel, `EuroChem` retains Brussels consultancies **`H/Advisors` (`ID 217097995171-59`, `4` EP passes, `50,000 – 99,999 EUR`)** and **`Whyte EU Public Affairs` (`ID 3175695101344-67`, updated `12 August 2026`, `4` EP passes, `10,000 – 24,999 EUR`)**.\n3. **`LOBBY-EU-03` — `Kaspersky Labs GmbH` (`HRB 3527`, Subsidiary of `JSC Kaspersky Lab` `INN 7713140469`) Lobbying on `NIS 2`, `Cyber Resilience Act`, and `DORA`:**\n   * Direct registration **`Kaspersky Labs GmbH` (`ID 119828415703-30`, Ingolstadt, updated `23 September 2026`, `100,000 – 199,999 EUR`, EU affairs head `Anastasiya Kazakova`)** paired with `100%` client funding (`100,000 – 199,999 EUR`) of Munich consultancy **`House of Policy GmbH` (`ID 306710046022-36`, updated `19 May 2026`)**, where `Kaspersky Lab` is the sole declared client.\n4. **`LOBBY-EU-04` — Representation of `MCPAO UC RUSAL` (`INN 3906394938`), `PJSC MMC Norilsk Nickel` (`INN 8401005730`), and `PJSC LUKOIL` (`INN 7708004767`):**\n   * RUSAL's Irish alumina refinery **`Aughinish Alumina Limited` (`ID 509423034313-42`, updated `22 June 2026`)** maintains a direct lobbying registration and retains Brussels consultancy **`Values Consulting SRL` (`ID 793676749274-28`, updated `10 June 2026`, `6` EP passes including `Evgeny Yankovoy`)** and Sofia-based **`VMC EOOD` (`ID 4641030101714-75`)**.\n   * Norilsk Nickel's Finnish refinery **`Nornickel Finland Oy` (`Harjavalta`)** is a declared member of Brussels associations **`European Risk & Innovation Forum` (`ERIF`, `ID 52996964558-47`, budget `300,000 – 399,999 EUR`)** and **`Fine Shoots of Meta-Politics` (`FSMP`, `ID 865985639510-89`)**, while **`LUKOIL`** remains an official member of **`FuelsEurope` (`ID 26207914726-42`, updated `7 September 2026`, `13` EP passes, budget `3.5M–3.74M EUR`)** and **`Concawe` (`ID 19227706301-14`)**.\n5. **`LOBBY-EU-05` — Moscow-Headquartered `Association of European Businesses` (`AEB`, `ID 849798415326-80`) and `Dentons Europe LLP` (`ID 5531043105066-91`):**\n   * Registered at **`Ulitsa Butyrsky Val 68/70, Moscow, Russia`** (`CEO Tadzio Schilling`), **`AEB` (`ID 849798415326-80`, updated `19 October 2026`)** explicitly declares lobbying EU institutions on **`\"Impact of EU restrictive measures against Russia; impact of Russian countersanctions against the EU\"`**, while **`Dentons Europe LLP` (`ID 5531043105066-91`, registered `30 June 2026`)** lobbies on **`EU Economic Sanctions and Export Controls`**.\n\n---\n\n### 5. Open Machine-Readable Feed & Interactive Evidence Matrix\n\nAll `10` verified clusters, including exact TED notice numbers, contract values, corporate registration codes (`EIK / CUI / OIB / HRB / NIF / INN / OGRN`), and `EU Transparency Register` IDs, are integrated into the [Sanctions Blind Spot (`/en/sanctions-gap#eu-ted-lobby-audit`)](/en/sanctions-gap#eu-ted-lobby-audit) section and exported via the open compliance feed [`/feeds/vpk-eu-ted-lobby-2024-2026.json`](/feeds/vpk-eu-ted-lobby-2024-2026.json).\n"
  },
  {
    "id": "M-17",
    "slug": "method-17-western-scitech-publishers-grants-vpk-konstruktory-2024-2026",
    "date": "2026-11-06",
    "category": "OSINT BLIND SPOTS",
    "badge": "METHOD #17 · OPENALEX / CROSSREF / ORCID / DFG / CORDIS × SANCTIONED RUSSIAN NIIs",
    "title": "Cross-Registry Audit of Western Scientific Databases (OpenAlex / Crossref / ORCID / IEEE / Springer Nature / Elsevier + DFG & EU Horizon Grants) × Active Designers of Sanctioned Russian Defense & Nuclear R&D Institutes (2024–2026)",
    "subtitle": "How 21 sanctioned Russian nuclear-warhead, hypersonic, missile, and radar research institutes (RFNC-VNIIEF Sarov, RFNC-VNIITF Snezhinsk, VNIIA Dukhov, IAP RAS, TsAGI, CIAM, VIAM, GosNIIAS, CSRI Elektropribor, NPP Istok, Concern Sozvezdie) published 3,304 peer-reviewed papers through Western publishers in 2024–2026 while maintaining dual affiliations in France (CNRS / ESPCI Paris / ONERA), active German DFG (No. 471089264), French ANR (No. 725-23-42), and EU Horizon 2020 funding citations, joint projects with Chinese military centers (CARDC, NWPU, BIT, NJUST), and access to Western CAD suites (ANSYS Fluent, CST Studio Suite, COMSOL, SolidWorks).",
    "read_time": "14 min read",
    "tags": [
      "OpenAlex",
      "Crossref",
      "ORCID",
      "RFNC-VNIIEF Sarov",
      "RFNC-VNIITF Snezhinsk",
      "VNIIA Dukhov",
      "IAP RAS",
      "TsAGI",
      "CIAM",
      "DFG 471089264",
      "Springer Nature",
      "Elsevier",
      "IEEE"
    ],
    "summary": "A cross-registry forensic audit of open bibliographic and grant databases (OpenAlex, Crossref, ORCID, CORDIS, and publisher full-text metadata) for 2024–2026 documents 3,304 peer-reviewed papers published by active researchers at 21 sanctioned Russian military-industrial, nuclear-weapons, and aerospace R&D institutes across Western scientific publishers (1,150 in Springer Nature / Pleiades, 212 in Elsevier BV, 108 in AIP, 67 in MDPI, 63 in APS, 62 in IEEE). This study details the engineering filter used to eliminate automated OpenAlex disambiguation errors and presents 9 verified hard-defense dossiers with exact DOIs, ORCIDs, Western grant numbers, and Western CAD/instrumentation footprints.",
    "content_md": "### 1. Architecture of the Blind Spot: Why Russian Nuclear Warhead and Hypersonic Designers Remain Active in Western Scientific Registries in 2024–2026\n\nFollowing blocking sanctions imposed by the United States (`OFAC SDN` / `BIS Entity List`), the European Union (Council Regulation `(EU) No 833/2014`), the United Kingdom, and Ukraine against core research institutes (`NIIs`) and design bureaus (`KBs`) of the Russian military-industrial complex and Rosatom's nuclear weapons complex, formal intergovernmental research cooperation was declared suspended.\n\nHowever, direct programmatic cross-referencing of global bibliographic and grant registries — **`OpenAlex` (`api.openalex.org`)**, **`Crossref` (`api.crossref.org`)**, **`ORCID` (`orcid.org`)**, the European Commission's **`CORDIS`** database, and full-text *`Author Contributions`*, *`Acknowledgements`*, and *`Funding`* declarations — for **`1 January 2024 – 6 November 2026`** establishes a starkly different reality:\n\n* **21 sanctioned Russian defense, nuclear-warhead, and aerospace R&D institutes** indexed **`3,304` peer-reviewed scientific papers** in Western databases during `2024–2026` (including **`1,858` papers** authored by compact engineering teams of `<=15` authors across the 20 specialized defense industry NIIs, excluding the broader academic IAP RAS).\n* **Breakdown by Western academic publishing group (`2024–2026`, all 21 NIIs / 20 industry NIIs excluding IAP RAS):**\n  1. **`Springer Nature Group` (`Pleiades Publishing`, `Springer Science+Business Media`, `Nature Portfolio`, Germany / UK / USA):** **`1,150` papers** (`768` across the 20 specialized defense and Rosatom NIIs);\n  2. **`Elsevier BV` (`RELX Group`, Netherlands / UK):** **`212` papers** (`108` across the 20 industry NIIs);\n  3. **`American Institute of Physics` (`AIP Publishing`, USA):** **`108` papers** (`39` across the 20 industry NIIs);\n  4. **`MDPI AG` (Basel, Switzerland):** **`67` papers** (`27` across the 20 industry NIIs);\n  5. **`American Physical Society` (`APS`, USA):** **`63` papers** (`47` across the 20 industry NIIs — predominantly Rosatom's nuclear warhead centers in Sarov, Snezhinsk, and Moscow);\n  6. **`Institute of Electrical and Electronics Engineers` (`IEEE`, USA):** **`62` papers** (`13` across the 20 industry NIIs + `49` from OFAC SDN-designated `IAP RAS`);\n  7. **`IOP Publishing` (UK), `Optica Publishing Group` (USA), and `Copernicus GmbH` (Germany):** **`92` papers**.\n\n---\n\n### 2. Sober Critical Engineer Filter: Eliminating Automated `OpenAlex` Disambiguation False Positives\n\nAutomated affiliation parsers in global scientometric aggregators (`OpenAlex`, `Scopus`, `Semantic Scholar`) suffer from systematic entity conflation (`affiliation disambiguation errors`). Without strict verification of the raw affiliation string (`raw_affiliation_string`) and research domain, naive automated queries produce severe false positives. Our audit identified and programmatically purged three major database artifacts:\n\n1. **False Conflation of a Ukrainian Military Aviation Institute with Russian `GosNIIAS` (`OpenAlex ID: I2800111664`):** `OpenAlex` erroneously maps English-language papers from Ukraine's **State Research Institute of Aviation (Kyiv, Ukraine)** concerning Ukrainian Armed Forces aircraft maintenance and logistics onto the profile of Russia's **State Research Institute of Aviation Systems (`GosNIIAS`, Moscow, Victorenko St. 7)**. **Filter rule applied:** enforce a strict geographic lock requiring `Moscow` or `Victorenko` in `raw_affiliation_string` and reject any record mentioning `Kyiv` or `Ukraine`.\n2. **Sugar-Beet Agronomy Mapped to Electronic Warfare Maker `JSC Concern Sozvezdie` (`OpenAlex ID: I4210103763`):** due to regional proximity in Voronezh Region, `OpenAlex` merges papers from the **Mazlumov All-Russian Research Institute of Sugar Beet and Sugar (`VNIISS`, Ramon)** into the profile of Russia's primary tactical EW manufacturer **JSC Concern Sozvezdie (Voronezh)**. **Filter rule applied:** purge all agricultural, botanical, and biomedical topics, retaining strictly verified `Sozvezdie` RF/EW/PLL engineering papers.\n3. **Agricultural Seed Machinery Mapped to `JSC Concern Granit-Electron` (`OpenAlex ID: I4210103749`):** civilian agro-engineering papers were similarly excluded.\n4. **Exclusion of Mega-Collaborations (`>15` authors):** high-energy physics consortia (CERN/LHC) and astrophysics surveys with hundreds of legacy signatories were excluded so that only direct laboratory R&D teams (`<=15` authors) are counted.\n\n---\n\n### 3. Nine Verified Hard-Defense and Nuclear-Warhead Dossiers (2024–2026)\n\n#### Case 1 (`SCITECH-2026-001`): Rosatom Nuclear Warhead Center `FSUE RFNC-VNIITF named after Academician E.I. Zababakhin` (Snezhinsk, INN `7423000572`) — Uranium Phase Diagrams in `APS`, TATB Detonation in `Springer`, and Simulations in US `LAMMPS` & German `OVITO`\n* **Sanctions Status:** Primary Ural thermonuclear warhead design bureau of Rosatom (`US OFAC SDN`, `BIS Entity List`, EU, UK, and Ukraine NSDC sanctions).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1103/8w5w-f3kd` (*Physical Review B*, **American Physical Society [USA]**, `2025-06-24`): *\"Machine learning enhanced quantum molecular dynamics assessment of the phase diagram of uranium\"* — authored by `P. V. Chirkov` (`ORCID: 0000-0001-6504-6569`), `G. S. Eltsov` (`0009-0003-6317-9095`), `R. M. Kichigin` (`0009-0004-6284-154X`), `A. V. Karavaev` (`0000-0002-2661-9616`), and `V. V. Dremov` (`0000-0002-3130-3448`, `v.v.dryomov@vniitf.ru`).\n  * `DOI: 10.1038/s41598-024-79228-y` (*Scientific Reports*, **Springer Nature**, `2024-11-15`): *\"Atomistic simulation of primary microstructure formation in metals during crystallization from the melt\"* — same `RFNC-VNIITF` team co-authoring with Moscow's `JSC RPA CNIITMASH` (`INN 7723564851`). The full text explicitly acknowledges **Grant No. `MT-96` under the EOTP Rosatom research program** and cites molecular dynamics simulations run in US Sandia National Laboratories code **`LAMMPS`** and visualized in German software **`OVITO`** (`OVITO GmbH`, Darmstadt, Germany).\n  * `DOI: 10.1016/j.commatsci.2024.113057` (*Computational Materials Science*, **Elsevier BV**, `2024-04-29`): *\"Zirconium phase diagram from ab initio molecular dynamics\"*.\n  * `DOI: 10.1134/s001050822570073x` (*Combustion, Explosion, and Shock Waves*, **Pleiades Publishing / Springer Nature**, `2025-12-01`): *\"Development and Propagation of Detonation in TATB Explosive\"* — modeling and experimental detonation propagation in **TATB (triaminotrinitrobenzene)**, the core insensitive high explosive used in nuclear warhead implosion primaries.\n\n#### Case 2 (`SCITECH-2026-002`): Primary Nuclear Weapons Center `FSUE RFNC-VNIIEF` (Sarov, INN `5254001230`) — Cylindrical TATB Implosion Charges with Internal Steel Shells in `Springer` & High-Power `K DPAL` Military Lasers in `IEEE Xplore`\n* **Sanctions Status:** Russia's premier nuclear weapons design center in the closed city of Sarov (`US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1134/s0010508224050101` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2024-10-01`): *\"Detonation Initiation and Propagation in a Cylindrical TATB Charge\"* (`N. A. Volodina`, `A. V. Erastov`, `P. V. Zabusov`, `M. N. Kiryukhina`, `K. N. Panov`, `V. B. Titova`, `M. O. Shirshova`, `VNIIEF, 607190, Sarov`) — flash X-ray radiography of detonation wave cumulation in cylindrical plastic-bonded TATB charges containing an internal steel shell.\n  * `DOI: 10.1134/s0010508225010113` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2025-02-01`): *\"Method for Studying the Accelerating Effect of Explosion Products at Large Expansion Ratios\"*.\n  * `DOI: 10.1109/iclo59702.2024.10624528` & `DOI: 10.1109/iclo59702.2024.10623987` (*2024 International Conference Laser Optics ICLO*, **IEEE Xplore [USA]**, `2024-07-01`): modeling of continuous-wave **potassium diode-pumped alkali lasers (`K DPAL`)** and stimulated Brillouin scattering (SBS) suppression in narrow-band high-power fiber laser systems (`A. V. Samsonov`, `V. M. Yamshchikov`, `G. N. Kachalin`, `K. G. Aksenov`, `S. M. Kulikov`).\n\n#### Case 3 (`SCITECH-2026-003`): Nuclear Warhead Fuzing Institute `FSUE VNIIA named after N.L. Dukhov` (Moscow, INN `7707074137`) — Dual Affiliations with `CNRS / ESPCI Paris / Sorbonne University`, Grants from `ANR France` & `Airbus`, Co-Authorship with `FBH Berlin` & `XPANCEO Dubai`\n* **Sanctions Status:** Rosatom's lead design bureau and serial manufacturer of non-nuclear warhead fuzing systems and pulsed neutron generators (`Moscow, Sushchevskaya St. 22`, `US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2026` Publications & Western Links:**\n  * `DOI: 10.1016/j.chaos.2025.116074` (*Chaos, Solitons & Fractals*, **Elsevier BV**, `2025-02-06`): *\"All-Josephson junction logic cells and bio-inspired neuron based on 0 − 0 − π junction inductorless blocks\"* — VNIIA Dukhov researchers `A. A. Maksimovskaya` (`ORCID: 0009-0002-4197-2263`) and `V. I. Ruzhickiy` (`0000-0002-3411-7050`) co-authoring with `Dmitry S. Yakovlev` (`0000-0002-6894-2139`, **`ESPCI Paris / CNRS / Sorbonne University, France`**). Official `Crossref funder` metadata explicitly records funding from:\n    * **`Airbus`** (`Crossref Funder ID: 10.13039/501100003204`);\n    * **`Agence Nationale de la Recherche (ANR, France)`** (`Award: ANR 725-23-42`);\n    * **`Nanjing University of Science and Technology`** (`Award: K2-2022-029`, one of China's \"Seven Sons of National Defense\");\n    * **`Russian Science Foundation`** (`Award: 24-19-00187`).\n  * `DOI: 10.1038/s43246-026-01095-z` (*Communications Materials*, **Springer Nature**, `2026-02-16`) & `DOI: 10.1038/s43246-025-00759-6` (*Communications Materials*, `2025-03-04`): VNIIA Dukhov researchers `Vasily S. Stolyarov` (`ORCID: 0000-0002-5317-0818`, listing simultaneous dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`LPEM UMR-8213, ESPCI Paris, CNRS, Sorbonne University, France`**) and `Andrey G. Shishkin` (`0000-0002-1517-4877`) co-publish with French CNRS physicists (`Dimitri Roditchev`, `C. Feuillet-Palma`, `G. C. Menard`, `N. Bergeal`) and **`Beijing Institute of Technology` (China)**, using a German **`attocube attoDRY1000/SU`** (`9 T`) cryostat and US **`Bruker Multimode V8`** AFM.\n  * `DOI: 10.1016/j.measurement.2025.117479` (*Measurement*, **Elsevier BV**, `2025-04-06`): VNIIA Dukhov researchers `E. D. Chubchev` (`0000-0002-0860-5317`) and `A. V. Dorofeenko` (`0000-0003-1796-6007`) co-authoring with **`Ferdinand-Braun-Institut (FBH), Leibniz-Institut fuer Hoechstfrequenztechnik, Berlin, Germany`** (`I. A. Nechepurenko`, `0000-0001-9396-1609`).\n  * `DOI: 10.1016/j.matdes.2025.114014` (*Materials & Design*, **Elsevier BV**, `2025-05-06`): *\"Machine learning assisted design of reactor steels with high long-term strength and toughness\"* — VNIIA Dukhov researcher `Ivan A. Kruglov` (`ORCID: 0000-0003-1786-9282`) lists dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`Emerging Research Technology Center, XPANCEO, Dubai, UAE`**.\n  * `DOI: 10.1103/physrevlett.133.186903` (*Physical Review Letters*, **APS**, `2024-10-29`): VNIIA Dukhov authors (`E. S. Andrianov`, `A. V. Zasedatelev`) co-authoring with the **University of Vienna (Austria)** and **Lawrence Berkeley National Laboratory / Los Alamos CINT (USA)**, citing **EU `Horizon 2020 MSCA-IF-2020` Grant `101030987` (`LOREN`, EUR `186,167.04`)**.\n\n#### Case 4 (`SCITECH-2026-004`): OFAC SDN-Sanctioned `IAP RAS` (Nizhny Novgorod, INN `5260003387`) — Direct Co-Funding by German `DFG Grant No. 471089264` in March `2026` & Microwave Cavity Simulation in `CST Studio Suite`\n* **Sanctions Status:** The Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences (`IAP RAS`) is designated under **US OFAC SDN**, **US BIS Entity List**, **EU**, and **Ukrainian** sanctions as Russia's lead developer of high-power gyrotrons, radar electronics, and submarine hydroacoustic arrays.\n* **Verified Case from `20 March 2026` (`DOI: 10.5194/mr-7-21-2026`):**\n  * Published in *Magnetic Resonance* (**Copernicus GmbH**, Goettingen, Germany): *\"Bimodal Q-band probehead with improved signal-to-noise ratio in pulse electron paramagnetic resonance\"*.\n  * Co-authored by **`Alexey E. Fedotov` (`ORCID: 0000-0001-8873-804X`, `Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences, Nizhny Novgorod, Russia`)** and **Goethe University Frankfurt (`Germany`)** led by Prof. `Thomas F. Prisner` (`ORCID: 0000-0003-2850-9573`).\n  * In the *`Author contributions`* section of the full text, the authors explicitly state: **\"AF [Alexey Fedotov, IAP RAS] developed the model and performed the simulations\"** — the `34 GHz` (`Q-band`) bimodal microwave cavity was modeled in **`CST Studio Suite`** (`Dassault Systemes`), and S-parameter measurements were performed on a German **`Rohde & Schwarz ZVA-40`** vector network analyzer.\n  * In the *`Financial support`* section, the paper explicitly credits joint funding from the **`Deutsche Forschungsgemeinschaft (DFG, grant no. 471089264)`** and the Russian state defense/science task of **`IAP RAS (project no. FFUF-2024-0027)`**.\n  * Simultaneously, IAP RAS Director `G.G. Denisov` and Deputy Director `M.Yu. Glyavin` (`0000-0002-7896-9212`) published `170-GHz / 1-MW` gyrotron and extreme-power GaAs switch papers in **`IEEE Transactions on Electron Devices`** (`DOI: 10.1109/ted.2024.3457568`) and **`IEEE Transactions on Terahertz Science and Technology`** (`DOI: 10.1109/tthz.2024.3390550`).\n\n#### Case 5 (`SCITECH-2026-005`): `TsAGI` (Zhukovsky, INN `5040177331`) — Dual Affiliation with France's `ONERA`, Joint Grant with PLA Military Aerodynamics Center `CARDC`, and Use of `ANSYS Fluent`, `COMSOL` & `SolidWorks`\n* `DOI: 10.1016/j.proci.2024.105238` (*Proceedings of the Combustion Institute*, **Elsevier BV**, `2024`): TsAGI supersonic/scramjet combustion theorist `Vladimir A. Sabelnikov` (`ORCID: 0000-0002-0979-2994`) publishes with simultaneous dual affiliation at France's state aerospace defense laboratory **`ONERA - The French Aerospace Lab (Palaiseau, France)`** and **`TsAGI (Zhukovsky, Moscow Region, Russia)`**, co-funded by **`ONERA`**, the **`Swedish Research Council` (`2023-04407`)**, and **Minobrnauki RF (`075-11-2020-023`)**.\n* `DOI: 10.1016/j.measurement.2024.116100` (`2024-10-30`) & `DOI: 10.1016/j.apacoust.2026.111304` (`2026-03-11`, **Elsevier BV**): TsAGI Aeroacoustics Division Head `V.F. Kopiev` (`0009-0007-9915-6089`) and `I.V. Belyaev` (`0000-0002-9758-0456`) co-publish swept-wing wind-tunnel phased-array localization and leading-edge serration studies with the PLA's **`China Aerodynamics Research and Development Center (CARDC, Mianyang)`** and **`Harbin Institute of Technology`** under joint grant **`RSF No. 23-41-00023` × `NSFC No. 12261131502`**.\n* `DOI: 10.1038/s41598-024-52673-5` (*Scientific Reports*, **Springer Nature**, `2024-01-27`): TsAGI Chief Scientific Officer `S.L. Chernyshev` (`0000-0001-6368-8090`) explicitly documents airfoil CFD modeling executed in **`ANSYS Fluent`** (USA), **`COMSOL Multiphysics`** (Sweden), and **`SolidWorks`** (USA/France).\n\n#### Case 6 (`SCITECH-2026-006`): Jet & Missile Engine Institute `CIAM named after P.I. Baranov` (Moscow, INN `7722497881`) — Co-Authorship with `Queen Mary University of London` & `Brunel University` Citing `EU Horizon 2020` and Turbomachinery CFD with China's `NWPU`\n* `DOI: 10.1016/j.jsv.2024.118786` (*Journal of Sound and Vibration*, **Elsevier BV**, `2024-10-28`): *\"Acoustic flow resonances in installed rectangular jets\"* — CIAM Moscow researchers (`V. A. Shorstov`, `V. Makarov` `0000-0002-9265-4663`, `A. K. Mironov` `0000-0001-6684-0705`) co-author with **`Queen Mary University of London`** (`S. A. Karabasov`) and **`Brunel University London`** (`V. Gryazev`) on rectangular exhaust nozzles, citing **`European Union Horizon 2020 Framework Programme`** funding.\n* `DOI: 10.1016/j.compfluid.2024.106271` (*Computers & Fluids*, **Elsevier BV**, `2024-04-16`) & `DOI: 10.1134/s096554252470132x` (**Pleiades / Springer**, `2024-10-01`): CIAM Turbine Sector Head `Mikhail Ivanov` (`0000-0001-7503-2435`) co-publishes shock-capturing turbomachinery CFD methods with US-sanctioned Chinese military aviation university **`Northwestern Polytechnical University (NWPU, Xi'an)`**.\n\n#### Cases 7–9 (`SCITECH-2026-007` .. `009`): Rhenium-Ruthenium Turbine Superalloys at `VIAM` (`INN 7701024933`), Combat UAV Swarm Control at `GosNIIAS` (`INN 7714482225`), GNSS-Denied Gravimetric Navigation at `CSRI Elektropribor` (`INN 7813438763`) & Ka-Band GaAs Radar MMICs at `NPP Istok` (`INN 5050108496`)\n* **Turbine Blade Superalloys & Naval Reactor Steels (`VIAM` + `CRISM Prometey`):** `DOI: 10.1134/s0031918x24602592` (**Pleiades / Springer**, `2025-01-01`) details creep fracture testing of 6th-generation rhenium-ruthenium single-crystal Ni-based superalloys at `1100–1200 °C`, while `DOI: 10.3390/met14010099` (**MDPI AG [Switzerland]**, `2024-01-14`) models high-dose (`30 dpa`) neutron irradiation embrittlement of naval nuclear reactor steels (`CRISM Prometey`, `INN 7815021340`).\n* **Combat UAV Swarms & GNSS-Denied Navigation (`GosNIIAS` + `CSRI Elektropribor` + `VNIIFTRI`):** `DOI: 10.1134/s106423072570039x` (**Pleiades / Springer**, `2025-06-01`) presents `GosNIIAS` algorithms for coordinated combat UAV and manned aircraft group operations under active air-defense counteraction; `DOI: 10.1134/s2075108725700178` (`2025-06-01`) and `DOI: 10.1134/s2075108724700287` (`2024-06-01`) detail `CSRI Elektropribor` airborne gravimetric navigation using the `Chekan-AM` gravimeter and deep-water AUV acoustic positioning (co-authored with occupied `Sevastopol State University`, indexed by Springer/Pleiades under the Russian Federation).\n* **AESA Radar MMICs & Tactical EW Direction Finders (`NPP Istok` + `Concern Sozvezdie`):** `DOI: 10.1109/apede69319.2026.11734867` (**IEEE Xplore**, `2026-09-01`) and `DOI: 10.1109/reepe60449.2024.10479703` (**IEEE Xplore**, `2024-02-29`) publish multilayer microwave IC transitions and fast-hopping PLL frequency synthesizers designed by `JSC NPP Istok` (Fryazino) and `JSC Concern Sozvezdie` (Voronezh).\n\n---\n\n### 4. Machine-Readable Evidence Feed and Interactive Registry\n\nAll `9` verified hard-defense dossiers, `36` primary `DOIs` linked to designer `ORCIDs`, Russian tax identifiers (`INN/OGRN`), Western grant numbers (`DFG`, `ANR`, `Airbus`, `ONERA`, `Horizon 2020`, `RSF × NSFC`), and Western CAD/instrumentation footprints are integrated into the [VPK Components & Technical Specifications Registry (`/en/components#western-scitech-vpk`)](/en/components#western-scitech-vpk) and exported via the open JSON feed [`/feeds/vpk-western-scitech-2024-2026.json`](/feeds/vpk-western-scitech-2024-2026.json).\n",
    "pinned": false,
    "read_time_min": 14,
    "lead": "How 21 sanctioned Russian nuclear-warhead, hypersonic, missile, and radar research institutes (RFNC-VNIIEF Sarov, RFNC-VNIITF Snezhinsk, VNIIA Dukhov, IAP RAS, TsAGI, CIAM, VIAM, GosNIIAS, CSRI Elektropribor, NPP Istok, Concern Sozvezdie) published 3,304 peer-reviewed papers through Western publishers in 2024–2026 while maintaining dual affiliations in France (CNRS / ESPCI Paris / ONERA), active German DFG (No. 471089264), French ANR (No. 725-23-42), and EU Horizon 2020 funding citations, joint projects with Chinese military centers (CARDC, NWPU, BIT, NJUST), and access to Western CAD suites (ANSYS Fluent, CST Studio Suite, COMSOL, SolidWorks).",
    "body_md": "### 1. Architecture of the Blind Spot: Why Russian Nuclear Warhead and Hypersonic Designers Remain Active in Western Scientific Registries in 2024–2026\n\nFollowing blocking sanctions imposed by the United States (`OFAC SDN` / `BIS Entity List`), the European Union (Council Regulation `(EU) No 833/2014`), the United Kingdom, and Ukraine against core research institutes (`NIIs`) and design bureaus (`KBs`) of the Russian military-industrial complex and Rosatom's nuclear weapons complex, formal intergovernmental research cooperation was declared suspended.\n\nHowever, direct programmatic cross-referencing of global bibliographic and grant registries — **`OpenAlex` (`api.openalex.org`)**, **`Crossref` (`api.crossref.org`)**, **`ORCID` (`orcid.org`)**, the European Commission's **`CORDIS`** database, and full-text *`Author Contributions`*, *`Acknowledgements`*, and *`Funding`* declarations — for **`1 January 2024 – 6 November 2026`** establishes a starkly different reality:\n\n* **21 sanctioned Russian defense, nuclear-warhead, and aerospace R&D institutes** indexed **`3,304` peer-reviewed scientific papers** in Western databases during `2024–2026` (including **`1,858` papers** authored by compact engineering teams of `<=15` authors across the 20 specialized defense industry NIIs, excluding the broader academic IAP RAS).\n* **Breakdown by Western academic publishing group (`2024–2026`, all 21 NIIs / 20 industry NIIs excluding IAP RAS):**\n  1. **`Springer Nature Group` (`Pleiades Publishing`, `Springer Science+Business Media`, `Nature Portfolio`, Germany / UK / USA):** **`1,150` papers** (`768` across the 20 specialized defense and Rosatom NIIs);\n  2. **`Elsevier BV` (`RELX Group`, Netherlands / UK):** **`212` papers** (`108` across the 20 industry NIIs);\n  3. **`American Institute of Physics` (`AIP Publishing`, USA):** **`108` papers** (`39` across the 20 industry NIIs);\n  4. **`MDPI AG` (Basel, Switzerland):** **`67` papers** (`27` across the 20 industry NIIs);\n  5. **`American Physical Society` (`APS`, USA):** **`63` papers** (`47` across the 20 industry NIIs — predominantly Rosatom's nuclear warhead centers in Sarov, Snezhinsk, and Moscow);\n  6. **`Institute of Electrical and Electronics Engineers` (`IEEE`, USA):** **`62` papers** (`13` across the 20 industry NIIs + `49` from OFAC SDN-designated `IAP RAS`);\n  7. **`IOP Publishing` (UK), `Optica Publishing Group` (USA), and `Copernicus GmbH` (Germany):** **`92` papers**.\n\n---\n\n### 2. Sober Critical Engineer Filter: Eliminating Automated `OpenAlex` Disambiguation False Positives\n\nAutomated affiliation parsers in global scientometric aggregators (`OpenAlex`, `Scopus`, `Semantic Scholar`) suffer from systematic entity conflation (`affiliation disambiguation errors`). Without strict verification of the raw affiliation string (`raw_affiliation_string`) and research domain, naive automated queries produce severe false positives. Our audit identified and programmatically purged three major database artifacts:\n\n1. **False Conflation of a Ukrainian Military Aviation Institute with Russian `GosNIIAS` (`OpenAlex ID: I2800111664`):** `OpenAlex` erroneously maps English-language papers from Ukraine's **State Research Institute of Aviation (Kyiv, Ukraine)** concerning Ukrainian Armed Forces aircraft maintenance and logistics onto the profile of Russia's **State Research Institute of Aviation Systems (`GosNIIAS`, Moscow, Victorenko St. 7)**. **Filter rule applied:** enforce a strict geographic lock requiring `Moscow` or `Victorenko` in `raw_affiliation_string` and reject any record mentioning `Kyiv` or `Ukraine`.\n2. **Sugar-Beet Agronomy Mapped to Electronic Warfare Maker `JSC Concern Sozvezdie` (`OpenAlex ID: I4210103763`):** due to regional proximity in Voronezh Region, `OpenAlex` merges papers from the **Mazlumov All-Russian Research Institute of Sugar Beet and Sugar (`VNIISS`, Ramon)** into the profile of Russia's primary tactical EW manufacturer **JSC Concern Sozvezdie (Voronezh)**. **Filter rule applied:** purge all agricultural, botanical, and biomedical topics, retaining strictly verified `Sozvezdie` RF/EW/PLL engineering papers.\n3. **Agricultural Seed Machinery Mapped to `JSC Concern Granit-Electron` (`OpenAlex ID: I4210103749`):** civilian agro-engineering papers were similarly excluded.\n4. **Exclusion of Mega-Collaborations (`>15` authors):** high-energy physics consortia (CERN/LHC) and astrophysics surveys with hundreds of legacy signatories were excluded so that only direct laboratory R&D teams (`<=15` authors) are counted.\n\n---\n\n### 3. Nine Verified Hard-Defense and Nuclear-Warhead Dossiers (2024–2026)\n\n#### Case 1 (`SCITECH-2026-001`): Rosatom Nuclear Warhead Center `FSUE RFNC-VNIITF named after Academician E.I. Zababakhin` (Snezhinsk, INN `7423000572`) — Uranium Phase Diagrams in `APS`, TATB Detonation in `Springer`, and Simulations in US `LAMMPS` & German `OVITO`\n* **Sanctions Status:** Primary Ural thermonuclear warhead design bureau of Rosatom (`US OFAC SDN`, `BIS Entity List`, EU, UK, and Ukraine NSDC sanctions).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1103/8w5w-f3kd` (*Physical Review B*, **American Physical Society [USA]**, `2025-06-24`): *\"Machine learning enhanced quantum molecular dynamics assessment of the phase diagram of uranium\"* — authored by `P. V. Chirkov` (`ORCID: 0000-0001-6504-6569`), `G. S. Eltsov` (`0009-0003-6317-9095`), `R. M. Kichigin` (`0009-0004-6284-154X`), `A. V. Karavaev` (`0000-0002-2661-9616`), and `V. V. Dremov` (`0000-0002-3130-3448`, `v.v.dryomov@vniitf.ru`).\n  * `DOI: 10.1038/s41598-024-79228-y` (*Scientific Reports*, **Springer Nature**, `2024-11-15`): *\"Atomistic simulation of primary microstructure formation in metals during crystallization from the melt\"* — same `RFNC-VNIITF` team co-authoring with Moscow's `JSC RPA CNIITMASH` (`INN 7723564851`). The full text explicitly acknowledges **Grant No. `MT-96` under the EOTP Rosatom research program** and cites molecular dynamics simulations run in US Sandia National Laboratories code **`LAMMPS`** and visualized in German software **`OVITO`** (`OVITO GmbH`, Darmstadt, Germany).\n  * `DOI: 10.1016/j.commatsci.2024.113057` (*Computational Materials Science*, **Elsevier BV**, `2024-04-29`): *\"Zirconium phase diagram from ab initio molecular dynamics\"*.\n  * `DOI: 10.1134/s001050822570073x` (*Combustion, Explosion, and Shock Waves*, **Pleiades Publishing / Springer Nature**, `2025-12-01`): *\"Development and Propagation of Detonation in TATB Explosive\"* — modeling and experimental detonation propagation in **TATB (triaminotrinitrobenzene)**, the core insensitive high explosive used in nuclear warhead implosion primaries.\n\n#### Case 2 (`SCITECH-2026-002`): Primary Nuclear Weapons Center `FSUE RFNC-VNIIEF` (Sarov, INN `5254001230`) — Cylindrical TATB Implosion Charges with Internal Steel Shells in `Springer` & High-Power `K DPAL` Military Lasers in `IEEE Xplore`\n* **Sanctions Status:** Russia's premier nuclear weapons design center in the closed city of Sarov (`US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1134/s0010508224050101` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2024-10-01`): *\"Detonation Initiation and Propagation in a Cylindrical TATB Charge\"* (`N. A. Volodina`, `A. V. Erastov`, `P. V. Zabusov`, `M. N. Kiryukhina`, `K. N. Panov`, `V. B. Titova`, `M. O. Shirshova`, `VNIIEF, 607190, Sarov`) — flash X-ray radiography of detonation wave cumulation in cylindrical plastic-bonded TATB charges containing an internal steel shell.\n  * `DOI: 10.1134/s0010508225010113` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2025-02-01`): *\"Method for Studying the Accelerating Effect of Explosion Products at Large Expansion Ratios\"*.\n  * `DOI: 10.1109/iclo59702.2024.10624528` & `DOI: 10.1109/iclo59702.2024.10623987` (*2024 International Conference Laser Optics ICLO*, **IEEE Xplore [USA]**, `2024-07-01`): modeling of continuous-wave **potassium diode-pumped alkali lasers (`K DPAL`)** and stimulated Brillouin scattering (SBS) suppression in narrow-band high-power fiber laser systems (`A. V. Samsonov`, `V. M. Yamshchikov`, `G. N. Kachalin`, `K. G. Aksenov`, `S. M. Kulikov`).\n\n#### Case 3 (`SCITECH-2026-003`): Nuclear Warhead Fuzing Institute `FSUE VNIIA named after N.L. Dukhov` (Moscow, INN `7707074137`) — Dual Affiliations with `CNRS / ESPCI Paris / Sorbonne University`, Grants from `ANR France` & `Airbus`, Co-Authorship with `FBH Berlin` & `XPANCEO Dubai`\n* **Sanctions Status:** Rosatom's lead design bureau and serial manufacturer of non-nuclear warhead fuzing systems and pulsed neutron generators (`Moscow, Sushchevskaya St. 22`, `US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2026` Publications & Western Links:**\n  * `DOI: 10.1016/j.chaos.2025.116074` (*Chaos, Solitons & Fractals*, **Elsevier BV**, `2025-02-06`): *\"All-Josephson junction logic cells and bio-inspired neuron based on 0 − 0 − π junction inductorless blocks\"* — VNIIA Dukhov researchers `A. A. Maksimovskaya` (`ORCID: 0009-0002-4197-2263`) and `V. I. Ruzhickiy` (`0000-0002-3411-7050`) co-authoring with `Dmitry S. Yakovlev` (`0000-0002-6894-2139`, **`ESPCI Paris / CNRS / Sorbonne University, France`**). Official `Crossref funder` metadata explicitly records funding from:\n    * **`Airbus`** (`Crossref Funder ID: 10.13039/501100003204`);\n    * **`Agence Nationale de la Recherche (ANR, France)`** (`Award: ANR 725-23-42`);\n    * **`Nanjing University of Science and Technology`** (`Award: K2-2022-029`, one of China's \"Seven Sons of National Defense\");\n    * **`Russian Science Foundation`** (`Award: 24-19-00187`).\n  * `DOI: 10.1038/s43246-026-01095-z` (*Communications Materials*, **Springer Nature**, `2026-02-16`) & `DOI: 10.1038/s43246-025-00759-6` (*Communications Materials*, `2025-03-04`): VNIIA Dukhov researchers `Vasily S. Stolyarov` (`ORCID: 0000-0002-5317-0818`, listing simultaneous dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`LPEM UMR-8213, ESPCI Paris, CNRS, Sorbonne University, France`**) and `Andrey G. Shishkin` (`0000-0002-1517-4877`) co-publish with French CNRS physicists (`Dimitri Roditchev`, `C. Feuillet-Palma`, `G. C. Menard`, `N. Bergeal`) and **`Beijing Institute of Technology` (China)**, using a German **`attocube attoDRY1000/SU`** (`9 T`) cryostat and US **`Bruker Multimode V8`** AFM.\n  * `DOI: 10.1016/j.measurement.2025.117479` (*Measurement*, **Elsevier BV**, `2025-04-06`): VNIIA Dukhov researchers `E. D. Chubchev` (`0000-0002-0860-5317`) and `A. V. Dorofeenko` (`0000-0003-1796-6007`) co-authoring with **`Ferdinand-Braun-Institut (FBH), Leibniz-Institut fuer Hoechstfrequenztechnik, Berlin, Germany`** (`I. A. Nechepurenko`, `0000-0001-9396-1609`).\n  * `DOI: 10.1016/j.matdes.2025.114014` (*Materials & Design*, **Elsevier BV**, `2025-05-06`): *\"Machine learning assisted design of reactor steels with high long-term strength and toughness\"* — VNIIA Dukhov researcher `Ivan A. Kruglov` (`ORCID: 0000-0003-1786-9282`) lists dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`Emerging Research Technology Center, XPANCEO, Dubai, UAE`**.\n  * `DOI: 10.1103/physrevlett.133.186903` (*Physical Review Letters*, **APS**, `2024-10-29`): VNIIA Dukhov authors (`E. S. Andrianov`, `A. V. Zasedatelev`) co-authoring with the **University of Vienna (Austria)** and **Lawrence Berkeley National Laboratory / Los Alamos CINT (USA)**, citing **EU `Horizon 2020 MSCA-IF-2020` Grant `101030987` (`LOREN`, EUR `186,167.04`)**.\n\n#### Case 4 (`SCITECH-2026-004`): OFAC SDN-Sanctioned `IAP RAS` (Nizhny Novgorod, INN `5260003387`) — Direct Co-Funding by German `DFG Grant No. 471089264` in March `2026` & Microwave Cavity Simulation in `CST Studio Suite`\n* **Sanctions Status:** The Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences (`IAP RAS`) is designated under **US OFAC SDN**, **US BIS Entity List**, **EU**, and **Ukrainian** sanctions as Russia's lead developer of high-power gyrotrons, radar electronics, and submarine hydroacoustic arrays.\n* **Verified Case from `20 March 2026` (`DOI: 10.5194/mr-7-21-2026`):**\n  * Published in *Magnetic Resonance* (**Copernicus GmbH**, Goettingen, Germany): *\"Bimodal Q-band probehead with improved signal-to-noise ratio in pulse electron paramagnetic resonance\"*.\n  * Co-authored by **`Alexey E. Fedotov` (`ORCID: 0000-0001-8873-804X`, `Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences, Nizhny Novgorod, Russia`)** and **Goethe University Frankfurt (`Germany`)** led by Prof. `Thomas F. Prisner` (`ORCID: 0000-0003-2850-9573`).\n  * In the *`Author contributions`* section of the full text, the authors explicitly state: **\"AF [Alexey Fedotov, IAP RAS] developed the model and performed the simulations\"** — the `34 GHz` (`Q-band`) bimodal microwave cavity was modeled in **`CST Studio Suite`** (`Dassault Systemes`), and S-parameter measurements were performed on a German **`Rohde & Schwarz ZVA-40`** vector network analyzer.\n  * In the *`Financial support`* section, the paper explicitly credits joint funding from the **`Deutsche Forschungsgemeinschaft (DFG, grant no. 471089264)`** and the Russian state defense/science task of **`IAP RAS (project no. FFUF-2024-0027)`**.\n  * Simultaneously, IAP RAS Director `G.G. Denisov` and Deputy Director `M.Yu. Glyavin` (`0000-0002-7896-9212`) published `170-GHz / 1-MW` gyrotron and extreme-power GaAs switch papers in **`IEEE Transactions on Electron Devices`** (`DOI: 10.1109/ted.2024.3457568`) and **`IEEE Transactions on Terahertz Science and Technology`** (`DOI: 10.1109/tthz.2024.3390550`).\n\n#### Case 5 (`SCITECH-2026-005`): `TsAGI` (Zhukovsky, INN `5040177331`) — Dual Affiliation with France's `ONERA`, Joint Grant with PLA Military Aerodynamics Center `CARDC`, and Use of `ANSYS Fluent`, `COMSOL` & `SolidWorks`\n* `DOI: 10.1016/j.proci.2024.105238` (*Proceedings of the Combustion Institute*, **Elsevier BV**, `2024`): TsAGI supersonic/scramjet combustion theorist `Vladimir A. Sabelnikov` (`ORCID: 0000-0002-0979-2994`) publishes with simultaneous dual affiliation at France's state aerospace defense laboratory **`ONERA - The French Aerospace Lab (Palaiseau, France)`** and **`TsAGI (Zhukovsky, Moscow Region, Russia)`**, co-funded by **`ONERA`**, the **`Swedish Research Council` (`2023-04407`)**, and **Minobrnauki RF (`075-11-2020-023`)**.\n* `DOI: 10.1016/j.measurement.2024.116100` (`2024-10-30`) & `DOI: 10.1016/j.apacoust.2026.111304` (`2026-03-11`, **Elsevier BV**): TsAGI Aeroacoustics Division Head `V.F. Kopiev` (`0009-0007-9915-6089`) and `I.V. Belyaev` (`0000-0002-9758-0456`) co-publish swept-wing wind-tunnel phased-array localization and leading-edge serration studies with the PLA's **`China Aerodynamics Research and Development Center (CARDC, Mianyang)`** and **`Harbin Institute of Technology`** under joint grant **`RSF No. 23-41-00023` × `NSFC No. 12261131502`**.\n* `DOI: 10.1038/s41598-024-52673-5` (*Scientific Reports*, **Springer Nature**, `2024-01-27`): TsAGI Chief Scientific Officer `S.L. Chernyshev` (`0000-0001-6368-8090`) explicitly documents airfoil CFD modeling executed in **`ANSYS Fluent`** (USA), **`COMSOL Multiphysics`** (Sweden), and **`SolidWorks`** (USA/France).\n\n#### Case 6 (`SCITECH-2026-006`): Jet & Missile Engine Institute `CIAM named after P.I. Baranov` (Moscow, INN `7722497881`) — Co-Authorship with `Queen Mary University of London` & `Brunel University` Citing `EU Horizon 2020` and Turbomachinery CFD with China's `NWPU`\n* `DOI: 10.1016/j.jsv.2024.118786` (*Journal of Sound and Vibration*, **Elsevier BV**, `2024-10-28`): *\"Acoustic flow resonances in installed rectangular jets\"* — CIAM Moscow researchers (`V. A. Shorstov`, `V. Makarov` `0000-0002-9265-4663`, `A. K. Mironov` `0000-0001-6684-0705`) co-author with **`Queen Mary University of London`** (`S. A. Karabasov`) and **`Brunel University London`** (`V. Gryazev`) on rectangular exhaust nozzles, citing **`European Union Horizon 2020 Framework Programme`** funding.\n* `DOI: 10.1016/j.compfluid.2024.106271` (*Computers & Fluids*, **Elsevier BV**, `2024-04-16`) & `DOI: 10.1134/s096554252470132x` (**Pleiades / Springer**, `2024-10-01`): CIAM Turbine Sector Head `Mikhail Ivanov` (`0000-0001-7503-2435`) co-publishes shock-capturing turbomachinery CFD methods with US-sanctioned Chinese military aviation university **`Northwestern Polytechnical University (NWPU, Xi'an)`**.\n\n#### Cases 7–9 (`SCITECH-2026-007` .. `009`): Rhenium-Ruthenium Turbine Superalloys at `VIAM` (`INN 7701024933`), Combat UAV Swarm Control at `GosNIIAS` (`INN 7714482225`), GNSS-Denied Gravimetric Navigation at `CSRI Elektropribor` (`INN 7813438763`) & Ka-Band GaAs Radar MMICs at `NPP Istok` (`INN 5050108496`)\n* **Turbine Blade Superalloys & Naval Reactor Steels (`VIAM` + `CRISM Prometey`):** `DOI: 10.1134/s0031918x24602592` (**Pleiades / Springer**, `2025-01-01`) details creep fracture testing of 6th-generation rhenium-ruthenium single-crystal Ni-based superalloys at `1100–1200 °C`, while `DOI: 10.3390/met14010099` (**MDPI AG [Switzerland]**, `2024-01-14`) models high-dose (`30 dpa`) neutron irradiation embrittlement of naval nuclear reactor steels (`CRISM Prometey`, `INN 7815021340`).\n* **Combat UAV Swarms & GNSS-Denied Navigation (`GosNIIAS` + `CSRI Elektropribor` + `VNIIFTRI`):** `DOI: 10.1134/s106423072570039x` (**Pleiades / Springer**, `2025-06-01`) presents `GosNIIAS` algorithms for coordinated combat UAV and manned aircraft group operations under active air-defense counteraction; `DOI: 10.1134/s2075108725700178` (`2025-06-01`) and `DOI: 10.1134/s2075108724700287` (`2024-06-01`) detail `CSRI Elektropribor` airborne gravimetric navigation using the `Chekan-AM` gravimeter and deep-water AUV acoustic positioning (co-authored with occupied `Sevastopol State University`, indexed by Springer/Pleiades under the Russian Federation).\n* **AESA Radar MMICs & Tactical EW Direction Finders (`NPP Istok` + `Concern Sozvezdie`):** `DOI: 10.1109/apede69319.2026.11734867` (**IEEE Xplore**, `2026-09-01`) and `DOI: 10.1109/reepe60449.2024.10479703` (**IEEE Xplore**, `2024-02-29`) publish multilayer microwave IC transitions and fast-hopping PLL frequency synthesizers designed by `JSC NPP Istok` (Fryazino) and `JSC Concern Sozvezdie` (Voronezh).\n\n---\n\n### 4. Machine-Readable Evidence Feed and Interactive Registry\n\nAll `9` verified hard-defense dossiers, `36` primary `DOIs` linked to designer `ORCIDs`, Russian tax identifiers (`INN/OGRN`), Western grant numbers (`DFG`, `ANR`, `Airbus`, `ONERA`, `Horizon 2020`, `RSF × NSFC`), and Western CAD/instrumentation footprints are integrated into the [VPK Components & Technical Specifications Registry (`/en/components#western-scitech-vpk`)](/en/components#western-scitech-vpk) and exported via the open JSON feed [`/feeds/vpk-western-scitech-2024-2026.json`](/feeds/vpk-western-scitech-2024-2026.json).\n",
    "related_tool_or_link": "/en/components#western-scitech-vpk",
    "title_en": "Cross-Registry Audit of Western Scientific Databases (OpenAlex / Crossref / ORCID / IEEE / Springer Nature / Elsevier + DFG & EU Horizon Grants) × Active Designers of Sanctioned Russian Defense & Nuclear R&D Institutes (2024–2026)",
    "lead_en": "How 21 sanctioned Russian nuclear-warhead, hypersonic, missile, and radar research institutes (RFNC-VNIIEF Sarov, RFNC-VNIITF Snezhinsk, VNIIA Dukhov, IAP RAS, TsAGI, CIAM, VIAM, GosNIIAS, CSRI Elektropribor, NPP Istok, Concern Sozvezdie) published 3,304 peer-reviewed papers through Western publishers in 2024–2026 while maintaining dual affiliations in France (CNRS / ESPCI Paris / ONERA), active German DFG (No. 471089264), French ANR (No. 725-23-42), and EU Horizon 2020 funding citations, joint projects with Chinese military centers (CARDC, NWPU, BIT, NJUST), and access to Western CAD suites (ANSYS Fluent, CST Studio Suite, COMSOL, SolidWorks).",
    "body_en_md": "### 1. Architecture of the Blind Spot: Why Russian Nuclear Warhead and Hypersonic Designers Remain Active in Western Scientific Registries in 2024–2026\n\nFollowing blocking sanctions imposed by the United States (`OFAC SDN` / `BIS Entity List`), the European Union (Council Regulation `(EU) No 833/2014`), the United Kingdom, and Ukraine against core research institutes (`NIIs`) and design bureaus (`KBs`) of the Russian military-industrial complex and Rosatom's nuclear weapons complex, formal intergovernmental research cooperation was declared suspended.\n\nHowever, direct programmatic cross-referencing of global bibliographic and grant registries — **`OpenAlex` (`api.openalex.org`)**, **`Crossref` (`api.crossref.org`)**, **`ORCID` (`orcid.org`)**, the European Commission's **`CORDIS`** database, and full-text *`Author Contributions`*, *`Acknowledgements`*, and *`Funding`* declarations — for **`1 January 2024 – 6 November 2026`** establishes a starkly different reality:\n\n* **21 sanctioned Russian defense, nuclear-warhead, and aerospace R&D institutes** indexed **`3,304` peer-reviewed scientific papers** in Western databases during `2024–2026` (including **`1,858` papers** authored by compact engineering teams of `<=15` authors across the 20 specialized defense industry NIIs, excluding the broader academic IAP RAS).\n* **Breakdown by Western academic publishing group (`2024–2026`, all 21 NIIs / 20 industry NIIs excluding IAP RAS):**\n  1. **`Springer Nature Group` (`Pleiades Publishing`, `Springer Science+Business Media`, `Nature Portfolio`, Germany / UK / USA):** **`1,150` papers** (`768` across the 20 specialized defense and Rosatom NIIs);\n  2. **`Elsevier BV` (`RELX Group`, Netherlands / UK):** **`212` papers** (`108` across the 20 industry NIIs);\n  3. **`American Institute of Physics` (`AIP Publishing`, USA):** **`108` papers** (`39` across the 20 industry NIIs);\n  4. **`MDPI AG` (Basel, Switzerland):** **`67` papers** (`27` across the 20 industry NIIs);\n  5. **`American Physical Society` (`APS`, USA):** **`63` papers** (`47` across the 20 industry NIIs — predominantly Rosatom's nuclear warhead centers in Sarov, Snezhinsk, and Moscow);\n  6. **`Institute of Electrical and Electronics Engineers` (`IEEE`, USA):** **`62` papers** (`13` across the 20 industry NIIs + `49` from OFAC SDN-designated `IAP RAS`);\n  7. **`IOP Publishing` (UK), `Optica Publishing Group` (USA), and `Copernicus GmbH` (Germany):** **`92` papers**.\n\n---\n\n### 2. Sober Critical Engineer Filter: Eliminating Automated `OpenAlex` Disambiguation False Positives\n\nAutomated affiliation parsers in global scientometric aggregators (`OpenAlex`, `Scopus`, `Semantic Scholar`) suffer from systematic entity conflation (`affiliation disambiguation errors`). Without strict verification of the raw affiliation string (`raw_affiliation_string`) and research domain, naive automated queries produce severe false positives. Our audit identified and programmatically purged three major database artifacts:\n\n1. **False Conflation of a Ukrainian Military Aviation Institute with Russian `GosNIIAS` (`OpenAlex ID: I2800111664`):** `OpenAlex` erroneously maps English-language papers from Ukraine's **State Research Institute of Aviation (Kyiv, Ukraine)** concerning Ukrainian Armed Forces aircraft maintenance and logistics onto the profile of Russia's **State Research Institute of Aviation Systems (`GosNIIAS`, Moscow, Victorenko St. 7)**. **Filter rule applied:** enforce a strict geographic lock requiring `Moscow` or `Victorenko` in `raw_affiliation_string` and reject any record mentioning `Kyiv` or `Ukraine`.\n2. **Sugar-Beet Agronomy Mapped to Electronic Warfare Maker `JSC Concern Sozvezdie` (`OpenAlex ID: I4210103763`):** due to regional proximity in Voronezh Region, `OpenAlex` merges papers from the **Mazlumov All-Russian Research Institute of Sugar Beet and Sugar (`VNIISS`, Ramon)** into the profile of Russia's primary tactical EW manufacturer **JSC Concern Sozvezdie (Voronezh)**. **Filter rule applied:** purge all agricultural, botanical, and biomedical topics, retaining strictly verified `Sozvezdie` RF/EW/PLL engineering papers.\n3. **Agricultural Seed Machinery Mapped to `JSC Concern Granit-Electron` (`OpenAlex ID: I4210103749`):** civilian agro-engineering papers were similarly excluded.\n4. **Exclusion of Mega-Collaborations (`>15` authors):** high-energy physics consortia (CERN/LHC) and astrophysics surveys with hundreds of legacy signatories were excluded so that only direct laboratory R&D teams (`<=15` authors) are counted.\n\n---\n\n### 3. Nine Verified Hard-Defense and Nuclear-Warhead Dossiers (2024–2026)\n\n#### Case 1 (`SCITECH-2026-001`): Rosatom Nuclear Warhead Center `FSUE RFNC-VNIITF named after Academician E.I. Zababakhin` (Snezhinsk, INN `7423000572`) — Uranium Phase Diagrams in `APS`, TATB Detonation in `Springer`, and Simulations in US `LAMMPS` & German `OVITO`\n* **Sanctions Status:** Primary Ural thermonuclear warhead design bureau of Rosatom (`US OFAC SDN`, `BIS Entity List`, EU, UK, and Ukraine NSDC sanctions).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1103/8w5w-f3kd` (*Physical Review B*, **American Physical Society [USA]**, `2025-06-24`): *\"Machine learning enhanced quantum molecular dynamics assessment of the phase diagram of uranium\"* — authored by `P. V. Chirkov` (`ORCID: 0000-0001-6504-6569`), `G. S. Eltsov` (`0009-0003-6317-9095`), `R. M. Kichigin` (`0009-0004-6284-154X`), `A. V. Karavaev` (`0000-0002-2661-9616`), and `V. V. Dremov` (`0000-0002-3130-3448`, `v.v.dryomov@vniitf.ru`).\n  * `DOI: 10.1038/s41598-024-79228-y` (*Scientific Reports*, **Springer Nature**, `2024-11-15`): *\"Atomistic simulation of primary microstructure formation in metals during crystallization from the melt\"* — same `RFNC-VNIITF` team co-authoring with Moscow's `JSC RPA CNIITMASH` (`INN 7723564851`). The full text explicitly acknowledges **Grant No. `MT-96` under the EOTP Rosatom research program** and cites molecular dynamics simulations run in US Sandia National Laboratories code **`LAMMPS`** and visualized in German software **`OVITO`** (`OVITO GmbH`, Darmstadt, Germany).\n  * `DOI: 10.1016/j.commatsci.2024.113057` (*Computational Materials Science*, **Elsevier BV**, `2024-04-29`): *\"Zirconium phase diagram from ab initio molecular dynamics\"*.\n  * `DOI: 10.1134/s001050822570073x` (*Combustion, Explosion, and Shock Waves*, **Pleiades Publishing / Springer Nature**, `2025-12-01`): *\"Development and Propagation of Detonation in TATB Explosive\"* — modeling and experimental detonation propagation in **TATB (triaminotrinitrobenzene)**, the core insensitive high explosive used in nuclear warhead implosion primaries.\n\n#### Case 2 (`SCITECH-2026-002`): Primary Nuclear Weapons Center `FSUE RFNC-VNIIEF` (Sarov, INN `5254001230`) — Cylindrical TATB Implosion Charges with Internal Steel Shells in `Springer` & High-Power `K DPAL` Military Lasers in `IEEE Xplore`\n* **Sanctions Status:** Russia's premier nuclear weapons design center in the closed city of Sarov (`US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2025` Publications:**\n  * `DOI: 10.1134/s0010508224050101` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2024-10-01`): *\"Detonation Initiation and Propagation in a Cylindrical TATB Charge\"* (`N. A. Volodina`, `A. V. Erastov`, `P. V. Zabusov`, `M. N. Kiryukhina`, `K. N. Panov`, `V. B. Titova`, `M. O. Shirshova`, `VNIIEF, 607190, Sarov`) — flash X-ray radiography of detonation wave cumulation in cylindrical plastic-bonded TATB charges containing an internal steel shell.\n  * `DOI: 10.1134/s0010508225010113` (*Combustion, Explosion, and Shock Waves*, **Pleiades / Springer Nature**, `2025-02-01`): *\"Method for Studying the Accelerating Effect of Explosion Products at Large Expansion Ratios\"*.\n  * `DOI: 10.1109/iclo59702.2024.10624528` & `DOI: 10.1109/iclo59702.2024.10623987` (*2024 International Conference Laser Optics ICLO*, **IEEE Xplore [USA]**, `2024-07-01`): modeling of continuous-wave **potassium diode-pumped alkali lasers (`K DPAL`)** and stimulated Brillouin scattering (SBS) suppression in narrow-band high-power fiber laser systems (`A. V. Samsonov`, `V. M. Yamshchikov`, `G. N. Kachalin`, `K. G. Aksenov`, `S. M. Kulikov`).\n\n#### Case 3 (`SCITECH-2026-003`): Nuclear Warhead Fuzing Institute `FSUE VNIIA named after N.L. Dukhov` (Moscow, INN `7707074137`) — Dual Affiliations with `CNRS / ESPCI Paris / Sorbonne University`, Grants from `ANR France` & `Airbus`, Co-Authorship with `FBH Berlin` & `XPANCEO Dubai`\n* **Sanctions Status:** Rosatom's lead design bureau and serial manufacturer of non-nuclear warhead fuzing systems and pulsed neutron generators (`Moscow, Sushchevskaya St. 22`, `US OFAC SDN`, `BIS`, EU, UK, Ukraine).\n* **Verified `2024–2026` Publications & Western Links:**\n  * `DOI: 10.1016/j.chaos.2025.116074` (*Chaos, Solitons & Fractals*, **Elsevier BV**, `2025-02-06`): *\"All-Josephson junction logic cells and bio-inspired neuron based on 0 − 0 − π junction inductorless blocks\"* — VNIIA Dukhov researchers `A. A. Maksimovskaya` (`ORCID: 0009-0002-4197-2263`) and `V. I. Ruzhickiy` (`0000-0002-3411-7050`) co-authoring with `Dmitry S. Yakovlev` (`0000-0002-6894-2139`, **`ESPCI Paris / CNRS / Sorbonne University, France`**). Official `Crossref funder` metadata explicitly records funding from:\n    * **`Airbus`** (`Crossref Funder ID: 10.13039/501100003204`);\n    * **`Agence Nationale de la Recherche (ANR, France)`** (`Award: ANR 725-23-42`);\n    * **`Nanjing University of Science and Technology`** (`Award: K2-2022-029`, one of China's \"Seven Sons of National Defense\");\n    * **`Russian Science Foundation`** (`Award: 24-19-00187`).\n  * `DOI: 10.1038/s43246-026-01095-z` (*Communications Materials*, **Springer Nature**, `2026-02-16`) & `DOI: 10.1038/s43246-025-00759-6` (*Communications Materials*, `2025-03-04`): VNIIA Dukhov researchers `Vasily S. Stolyarov` (`ORCID: 0000-0002-5317-0818`, listing simultaneous dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`LPEM UMR-8213, ESPCI Paris, CNRS, Sorbonne University, France`**) and `Andrey G. Shishkin` (`0000-0002-1517-4877`) co-publish with French CNRS physicists (`Dimitri Roditchev`, `C. Feuillet-Palma`, `G. C. Menard`, `N. Bergeal`) and **`Beijing Institute of Technology` (China)**, using a German **`attocube attoDRY1000/SU`** (`9 T`) cryostat and US **`Bruker Multimode V8`** AFM.\n  * `DOI: 10.1016/j.measurement.2025.117479` (*Measurement*, **Elsevier BV**, `2025-04-06`): VNIIA Dukhov researchers `E. D. Chubchev` (`0000-0002-0860-5317`) and `A. V. Dorofeenko` (`0000-0003-1796-6007`) co-authoring with **`Ferdinand-Braun-Institut (FBH), Leibniz-Institut fuer Hoechstfrequenztechnik, Berlin, Germany`** (`I. A. Nechepurenko`, `0000-0001-9396-1609`).\n  * `DOI: 10.1016/j.matdes.2025.114014` (*Materials & Design*, **Elsevier BV**, `2025-05-06`): *\"Machine learning assisted design of reactor steels with high long-term strength and toughness\"* — VNIIA Dukhov researcher `Ivan A. Kruglov` (`ORCID: 0000-0003-1786-9282`) lists dual affiliation at **`Dukhov Research Institute of Automatics (VNIIA), Moscow`** and **`Emerging Research Technology Center, XPANCEO, Dubai, UAE`**.\n  * `DOI: 10.1103/physrevlett.133.186903` (*Physical Review Letters*, **APS**, `2024-10-29`): VNIIA Dukhov authors (`E. S. Andrianov`, `A. V. Zasedatelev`) co-authoring with the **University of Vienna (Austria)** and **Lawrence Berkeley National Laboratory / Los Alamos CINT (USA)**, citing **EU `Horizon 2020 MSCA-IF-2020` Grant `101030987` (`LOREN`, EUR `186,167.04`)**.\n\n#### Case 4 (`SCITECH-2026-004`): OFAC SDN-Sanctioned `IAP RAS` (Nizhny Novgorod, INN `5260003387`) — Direct Co-Funding by German `DFG Grant No. 471089264` in March `2026` & Microwave Cavity Simulation in `CST Studio Suite`\n* **Sanctions Status:** The Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences (`IAP RAS`) is designated under **US OFAC SDN**, **US BIS Entity List**, **EU**, and **Ukrainian** sanctions as Russia's lead developer of high-power gyrotrons, radar electronics, and submarine hydroacoustic arrays.\n* **Verified Case from `20 March 2026` (`DOI: 10.5194/mr-7-21-2026`):**\n  * Published in *Magnetic Resonance* (**Copernicus GmbH**, Goettingen, Germany): *\"Bimodal Q-band probehead with improved signal-to-noise ratio in pulse electron paramagnetic resonance\"*.\n  * Co-authored by **`Alexey E. Fedotov` (`ORCID: 0000-0001-8873-804X`, `Gaponov-Grekhov Institute of Applied Physics of the Russian Academy of Sciences, Nizhny Novgorod, Russia`)** and **Goethe University Frankfurt (`Germany`)** led by Prof. `Thomas F. Prisner` (`ORCID: 0000-0003-2850-9573`).\n  * In the *`Author contributions`* section of the full text, the authors explicitly state: **\"AF [Alexey Fedotov, IAP RAS] developed the model and performed the simulations\"** — the `34 GHz` (`Q-band`) bimodal microwave cavity was modeled in **`CST Studio Suite`** (`Dassault Systemes`), and S-parameter measurements were performed on a German **`Rohde & Schwarz ZVA-40`** vector network analyzer.\n  * In the *`Financial support`* section, the paper explicitly credits joint funding from the **`Deutsche Forschungsgemeinschaft (DFG, grant no. 471089264)`** and the Russian state defense/science task of **`IAP RAS (project no. FFUF-2024-0027)`**.\n  * Simultaneously, IAP RAS Director `G.G. Denisov` and Deputy Director `M.Yu. Glyavin` (`0000-0002-7896-9212`) published `170-GHz / 1-MW` gyrotron and extreme-power GaAs switch papers in **`IEEE Transactions on Electron Devices`** (`DOI: 10.1109/ted.2024.3457568`) and **`IEEE Transactions on Terahertz Science and Technology`** (`DOI: 10.1109/tthz.2024.3390550`).\n\n#### Case 5 (`SCITECH-2026-005`): `TsAGI` (Zhukovsky, INN `5040177331`) — Dual Affiliation with France's `ONERA`, Joint Grant with PLA Military Aerodynamics Center `CARDC`, and Use of `ANSYS Fluent`, `COMSOL` & `SolidWorks`\n* `DOI: 10.1016/j.proci.2024.105238` (*Proceedings of the Combustion Institute*, **Elsevier BV**, `2024`): TsAGI supersonic/scramjet combustion theorist `Vladimir A. Sabelnikov` (`ORCID: 0000-0002-0979-2994`) publishes with simultaneous dual affiliation at France's state aerospace defense laboratory **`ONERA - The French Aerospace Lab (Palaiseau, France)`** and **`TsAGI (Zhukovsky, Moscow Region, Russia)`**, co-funded by **`ONERA`**, the **`Swedish Research Council` (`2023-04407`)**, and **Minobrnauki RF (`075-11-2020-023`)**.\n* `DOI: 10.1016/j.measurement.2024.116100` (`2024-10-30`) & `DOI: 10.1016/j.apacoust.2026.111304` (`2026-03-11`, **Elsevier BV**): TsAGI Aeroacoustics Division Head `V.F. Kopiev` (`0009-0007-9915-6089`) and `I.V. Belyaev` (`0000-0002-9758-0456`) co-publish swept-wing wind-tunnel phased-array localization and leading-edge serration studies with the PLA's **`China Aerodynamics Research and Development Center (CARDC, Mianyang)`** and **`Harbin Institute of Technology`** under joint grant **`RSF No. 23-41-00023` × `NSFC No. 12261131502`**.\n* `DOI: 10.1038/s41598-024-52673-5` (*Scientific Reports*, **Springer Nature**, `2024-01-27`): TsAGI Chief Scientific Officer `S.L. Chernyshev` (`0000-0001-6368-8090`) explicitly documents airfoil CFD modeling executed in **`ANSYS Fluent`** (USA), **`COMSOL Multiphysics`** (Sweden), and **`SolidWorks`** (USA/France).\n\n#### Case 6 (`SCITECH-2026-006`): Jet & Missile Engine Institute `CIAM named after P.I. Baranov` (Moscow, INN `7722497881`) — Co-Authorship with `Queen Mary University of London` & `Brunel University` Citing `EU Horizon 2020` and Turbomachinery CFD with China's `NWPU`\n* `DOI: 10.1016/j.jsv.2024.118786` (*Journal of Sound and Vibration*, **Elsevier BV**, `2024-10-28`): *\"Acoustic flow resonances in installed rectangular jets\"* — CIAM Moscow researchers (`V. A. Shorstov`, `V. Makarov` `0000-0002-9265-4663`, `A. K. Mironov` `0000-0001-6684-0705`) co-author with **`Queen Mary University of London`** (`S. A. Karabasov`) and **`Brunel University London`** (`V. Gryazev`) on rectangular exhaust nozzles, citing **`European Union Horizon 2020 Framework Programme`** funding.\n* `DOI: 10.1016/j.compfluid.2024.106271` (*Computers & Fluids*, **Elsevier BV**, `2024-04-16`) & `DOI: 10.1134/s096554252470132x` (**Pleiades / Springer**, `2024-10-01`): CIAM Turbine Sector Head `Mikhail Ivanov` (`0000-0001-7503-2435`) co-publishes shock-capturing turbomachinery CFD methods with US-sanctioned Chinese military aviation university **`Northwestern Polytechnical University (NWPU, Xi'an)`**.\n\n#### Cases 7–9 (`SCITECH-2026-007` .. `009`): Rhenium-Ruthenium Turbine Superalloys at `VIAM` (`INN 7701024933`), Combat UAV Swarm Control at `GosNIIAS` (`INN 7714482225`), GNSS-Denied Gravimetric Navigation at `CSRI Elektropribor` (`INN 7813438763`) & Ka-Band GaAs Radar MMICs at `NPP Istok` (`INN 5050108496`)\n* **Turbine Blade Superalloys & Naval Reactor Steels (`VIAM` + `CRISM Prometey`):** `DOI: 10.1134/s0031918x24602592` (**Pleiades / Springer**, `2025-01-01`) details creep fracture testing of 6th-generation rhenium-ruthenium single-crystal Ni-based superalloys at `1100–1200 °C`, while `DOI: 10.3390/met14010099` (**MDPI AG [Switzerland]**, `2024-01-14`) models high-dose (`30 dpa`) neutron irradiation embrittlement of naval nuclear reactor steels (`CRISM Prometey`, `INN 7815021340`).\n* **Combat UAV Swarms & GNSS-Denied Navigation (`GosNIIAS` + `CSRI Elektropribor` + `VNIIFTRI`):** `DOI: 10.1134/s106423072570039x` (**Pleiades / Springer**, `2025-06-01`) presents `GosNIIAS` algorithms for coordinated combat UAV and manned aircraft group operations under active air-defense counteraction; `DOI: 10.1134/s2075108725700178` (`2025-06-01`) and `DOI: 10.1134/s2075108724700287` (`2024-06-01`) detail `CSRI Elektropribor` airborne gravimetric navigation using the `Chekan-AM` gravimeter and deep-water AUV acoustic positioning (co-authored with occupied `Sevastopol State University`, indexed by Springer/Pleiades under the Russian Federation).\n* **AESA Radar MMICs & Tactical EW Direction Finders (`NPP Istok` + `Concern Sozvezdie`):** `DOI: 10.1109/apede69319.2026.11734867` (**IEEE Xplore**, `2026-09-01`) and `DOI: 10.1109/reepe60449.2024.10479703` (**IEEE Xplore**, `2024-02-29`) publish multilayer microwave IC transitions and fast-hopping PLL frequency synthesizers designed by `JSC NPP Istok` (Fryazino) and `JSC Concern Sozvezdie` (Voronezh).\n\n---\n\n### 4. Machine-Readable Evidence Feed and Interactive Registry\n\nAll `9` verified hard-defense dossiers, `36` primary `DOIs` linked to designer `ORCIDs`, Russian tax identifiers (`INN/OGRN`), Western grant numbers (`DFG`, `ANR`, `Airbus`, `ONERA`, `Horizon 2020`, `RSF × NSFC`), and Western CAD/instrumentation footprints are integrated into the [VPK Components & Technical Specifications Registry (`/en/components#western-scitech-vpk`)](/en/components#western-scitech-vpk) and exported via the open JSON feed [`/feeds/vpk-western-scitech-2024-2026.json`](/feeds/vpk-western-scitech-2024-2026.json).\n"
  },
  {
    "id": "M-16",
    "slug": "method-16-rostrud-trudvsem-cnc-cad-vpk-workshops",
    "date": "2026-11-06",
    "pinned": false,
    "category": "OSINT BLIND SPOTS",
    "read_time_min": 9,
    "title": "Rostrud State Employment API Self-Disclosure (opendata.trudvsem.ru): How Mandatory Russian Labor Filings Expose Exact Siemens Sinumerik, Heidenhain, Fanuc CNC Controls, DMG Mori, Mazak, Sodick Machines & Western CAD/EDA in Active VPK Workshops",
    "lead": "Under Article 53 of Russian Federal Law No. 565-FZ of December 12, 2023 ('On Employment in the Russian Federation'), every Russian military-industrial complex (VPK) plant and state design bureau is legally required to publish its active shop-floor and engineering vacancies on the Federal Service for Labor and Employment (Rostrud) unified portal 'Rabota Rossii' (trudvsem.ru). Through the state portal's open REST API (opendata.trudvsem.ru/api/v1/vacancies), HR and manufacturing engineering departments across Rostec, Almaz-Antey, UAC, UEC, KTRV, and Roscosmos enterprises self-disclose in structured JSON their 10-digit tax IDs (INN), exact workshop street addresses, shop numbers, inventory models of Western and Japanese CNC machine tools (Siemens SINUMERIK, HEIDENHAIN, FANUC, DMG MORI, Yamazaki Mazak, Okuma, Sodick, Haas), and industrial engineering software (Siemens NX, SolidWorks, Altium Designer, Ansys). We examine 28 verified Russian defense manufacturing clusters as of November 2026.",
    "related_tool_or_link": "/en/components#trudvsem-cnc-cad",
    "body_md": "### 1. The Statutory Trap of Federal Law No. 565-FZ: Why Classified Russian Defense Plants Publicly Catalogue Their Western CNC & CAD Park\n\nFollowing the closure of Russian Federal Customs Service (FTS) foreign trade statistics and the classification of State Defense Order (GOZ) procurement tenders under Federal Laws No. 275-FZ and 44-FZ, Western machine-tool builders and engineering software (CAD/CAM/EDA/CAE) vendors frequently argue that they have no verifiable visibility into whether their equipment or software remains operational inside Russian military workshops in 2026.\n\nHowever, an acute shortage of CNC setup technicians, 5-axis machining center operators, CNC board-level repair engineers, and RF PCB layout specialists — combined with the mandatory reporting provisions of **Article 53 of Russian Federal Law No. 565-FZ of December 12, 2023 (\"On Employment in the Russian Federation\")** — has turned the Rostrud state employment system **\"Rabota Rossii\" (`trudvsem.ru`)** and its open API **`http://opendata.trudvsem.ru/api/v1/vacancies`** into an authoritative primary-source disclosure feed.\n\nUnlike commercial job boards where defense contractors occasionally mask their identity behind recruitment agencies, every record in the Rostrud state API carries verified legal entity attributes linked directly to the Federal Tax Service (EGRUL FNS RF):\n* **`company.inn` and `company.ogrn`** — the 10-digit Taxpayer Identification Number (INN) and 13-digit Primary State Registration Number (OGRN) of the defense plant or branch;\n* **`addresses.address[].location`** — the exact physical street address, building number, or workshop gate of the production site;\n* **`duty` and `requirement.qualification`** — granular technical job descriptions written by chief shop technologists that explicitly enumerate CNC controller families (`Siemens SINUMERIK 840D`, `HEIDENHAIN iTNC 530`, `FANUC Series 0i-MF`, `Matrix MAZATROL`), exact machine models (`DMG MORI DMC-635 / DMC-1035 / DMU-75 monoBLOCK / CTX 310`, `Haas VF / SL-20 HE No. 805`, `Sodick 325 / 400`, `Okuma`, `Fadal`), and Western engineering software suites (`Siemens NX`, `SolidWorks`, `Altium Designer`, `Ansys`);\n* **`contact_list` and `contact_person`** — direct telephone lines, corporate e-mail domains, and full names of HR officers and engineering department heads.\n\n---\n\n### 2. Anatomy of Shop-Floor Disclosures in the Live Rostrud API (November 2026)\n\nCross-referencing Rostrud API responses for Western and Japanese CNC/CAD brands against our database of Russian defense enterprises identifies **26 Tier-1 defense plants, 29 Tier-2 military suppliers, and 37 defense holding subsidiaries and research institutes**. Below are the most critical verified industrial disclosures:\n\n1. **Orlan-10/30 UAV & Leer-3 EW Production — LLC Special Technological Center (`OOO STTs`, INN `7802170553`, OGRN `1037804018614`, Saint Petersburg):**\n   * Rostrud filings disclose **10 active engineering and CNC production vacancies** at STTs's facilities at **17 Nepokoryonnykh Ave., Bldg. 4, Lit. V, Prem. 3N** and **21 Gzhatskaya St., Saint Petersburg** (HR contact: Natalya Valeryevna Cherepova, `+7 (981) 891-08-87`, `ncherepova@stc-spb.ru`).\n   * Filing `id = 31ec77c8-5b2e-11f1-806f-c14bdadad1f7` (CNC Machine Repair Technician, salary from `120,000 RUB`) and filing `id = d980de28-8754-11f1-9699-4f4591bc4f3e` (CNC Operator) document active commissioning and maintenance of **`Haas Automation` (USA)** CNC milling centers and machine tools running **`FANUC` (Japan)** and **`DR. JOHANNES HEIDENHAIN GmbH` (Germany)** CNC controllers.\n   * Multiple electronics engineering filings (`8a908a48-b350-11f1-9e3c-99a7bec525ed`, `a3cb0cd6-c3bb-11f1-9a33-81fa0fc133be`, `ce047d28-399f-11f1-9a2a-17c964ea3db7`, salary up to `180,000 RUB`) explicitly require schematic capture and multilayer PCB layout up to **10 GHz** as well as satellite platform control boards in **`Altium Designer`**, alongside 3D mechanical packaging in **`SolidWorks`**.\n\n2. **Tornado-G and Tornado-S MLRS Production — JSC Motovilikha Plants (`AO MZ`, INN `5906034720`, OGRN `1025901364026`, Rostec, Perm, 35 1905 Goda St.):**\n   * Filing `id = d9322a08-5982-11f1-aaac-b338cf4ead7d` (Machine Repair Technician, HR contact: Anna Vladimirovna Polezhaeva, `+7 (342) 260-70-70`, `polezhaeva_av@mzperm.ru`) explicitly specifies: *\"repair and maintenance of CNC machine tools (controls: NTs, Fanuc, Sinumerik), universal turning, milling, and boring machines, and flexible manufacturing modules\"*.\n\n3. **FAB-500M62 / FAB-1500 (UMPK) Aerial Bombs & S-400 SAM Components — Tula Division of JSC NPO Bazalt (`INN 7719830028`) and JSC VMP AVITEK (`INN 4345047310`):**\n   * The Tula Production Division of **JSC NPO Bazalt** (53 Shcheglovskaya Zaseka St., Tula, filing `id = 6f0537d9-13b4-11f1-8569-cd610f21985f`, Yuliya Aleksandrovna Yanysheva, `+7 (4872) 70-18-41`, `moscow@bazalt.ru`) and Kirov-based **JSC VMP AVITEK** (1A Oktyabrsky Ave., Kirov, filings `id = 7be57168-6ae7-11f1-b7e2-61dd9c2afed4` and `7623e988-5d83-11f1-90c8-3334b9aed284`, `+7 (8332) 74-07-12`, `info@vmpavitec.ru`) are actively recruiting electronics engineers for continuous operation, board-level repair, and spare-parts requisitioning for CNC equipment running **`FANUC` (Japan)** and **`HEIDENHAIN` (Germany)** controls.\n\n4. **German 5-Axis DMG MORI Centers at the Russian MoD & GLONASS Primary Metrology Institute — FGUP VNIIFTRI (`INN 5044000102`, OGRN `1035008854341`, Mendeleevo, Bldg. 11):**\n   * Filing `id = 9341c895-7f3c-11ec-934a-57fc951f3846` (CNC Process Engineer / Programmer, salary from `90,000 RUB`, Yelena Nikolaevna Popkova, `kadr@vniiftri.ru`, `+7 (495) 526-63-62`) discloses the exact German **`DMG MORI`** 3- and 5-axis machining centers operating in Building 11 of the VNIIFTRI Industrial Zone with **`Siemens SINUMERIK`** controls and **`Siemens NX`** CAM software: *\"writing CNC part programs for DMC-635, DMC-1035, DMU-75monoblock machines\"*.\n\n5. **Japanese Sodick Wire EDM, Okuma & Mazak MAZATROL Centers Across Russian Missile, Aero-Engine, and Naval Plants:**\n   * **JSC Berdsk Electromechanical Plant (`AO BEMZ`, INN `5445007458`, OGRN `1025404721583`, 7 Zelenaya Roshcha St., Bldg. 7, Berdsk)** in filing `id = 492020a0-f1f1-11f0-a027-0dd543315e5a` (EDM Operator) specifies the exact Japanese wire-cut EDM machines operating in its missile/gyroscope workshop: **`Sodick 325; 400`** (`Sodick Co., Ltd.`, Japan).\n   * **JSC ODK-STAR (`INN 5904100329`, Perm, 140a Kuybysheva St.)**, **JSC NPP Aerosila (`INN 5045002261`, Stupino, 6 Zhdanova St.)**, and **PJSC Agregat (`INN 7401000191`, Sim, Chelyabinsk Oblast, 1 Pushkina St.)** across 6 CNC operator and setup filings document active machining on **`Yamazaki Mazak`** and **`Mori Seiki`** centers running **`Matrix MAZATROL`**, **`FANUC`**, and **`Siemens SINUMERIK`** CNC controls.\n   * **PJSC Proletarsky Zavod (`INN 7811039386`, United Shipbuilding Corporation, Saint Petersburg, 3 Dudko St.)** in filing `id = 587eba68-01d8-11f1-acc7-35793e7f9299` lists its foreign CNC park by model: **`Okuma` (Japan)**, **`Mazak 530` (Japan)**, **`CTX 310` (DMG Gildemeister, Germany)**, and **`VDF 400C-V` (Boehringer, Germany)**.\n   * **JSC NPO Zavod Volna (`INN 7805047646`, Saint Petersburg, 29 Marshala Govorova St., Lit. N)** in filing `id = 183792a8-d8ed-11f1-86de-892107d67c9e` discloses the shop inventory numbers of its American and Asian CNC turning centers: **`HAAS SL-20`, `HAAS SL-20 HE No. 805`, `HAAS SL-10`, `PUMA 3050LM`, `PUMA 4005LM (TC80LH)`, `Victor Vturn-A20Y No. 1155`**.\n\n---\n\n### 3. Consolidated Summary of Verified Russian VPK Clusters in the Rostrud Registry (2026)\n\n| Case ID | Russian VPK Enterprise (INN / OGRN) | Military Systems Produced | Documented Western / Japanese CNC Controls, Machines & CAD/EDA | Workshop Address & HR Contacts (`trudvsem.ru`) |\n| :--- | :--- | :--- | :--- | :--- |\n| **`TRUD-2026-001`** | **LLC STTs (`OOO STTs`)** (`INN 7802170553`, `OGRN 1037804018614`) | Orlan-10, Orlan-30 UAVs, Leer-3 EW systems | **Haas** CNC machines, **FANUC** & **HEIDENHAIN** controls; **Altium Designer** (RF PCBs up to 10 GHz), **SolidWorks** | 17 Nepokoryonnykh Ave., Bldg. 4, Lit. V, Saint Petersburg; `+7 (981) 891-08-87`, `ncherepova@stc-spb.ru` |\n| **`TRUD-2026-002`** | **JSC Motovilikha Plants** (`INN 5906034720`, `OGRN 1025901364026`) | Tornado-G, Tornado-S, Smerch MLRS & artillery barrels | Turning, milling & boring CNC centers with **FANUC** and **Siemens SINUMERIK** controls | 35 1905 Goda St., Perm; `+7 (342) 260-70-70`, `polezhaeva_av@mzperm.ru` |\n| **`TRUD-2026-003`** | **JSC VMP AVITEK** (`INN 4345047310`, `OGRN 1024301320977`) | S-300V4 / S-400 SAM missiles, BD3-USK bomb racks & K-36DM seats for Su-34 | Machining centers with **FANUC** and **HEIDENHAIN** CNC controls (board repair & spare parts) | 1A Oktyabrsky Ave., Kirov; `+7 (8332) 74-07-12`, `info@vmpavitec.ru` |\n| **`TRUD-2026-004`** | **Tula Division of JSC NPO Bazalt** (`INN 7719830028`, `OGRN 1127747209501`) | FAB-500M62 / FAB-1500 aerial bombs (UMPK), RPG & mortar rounds | CNC production equipment running **FANUC** and **HEIDENHAIN** control systems | 53 Shcheglovskaya Zaseka St., Tula; `+7 (4872) 70-18-41`, `moscow@bazalt.ru` |\n| **`TRUD-2026-005`** | **JSC Obukhov State Plant** (`INN 7811144648`, `OGRN 1037825058732`) | S-400 Triumf & S-350 Vityaz TEL launchers | Large-format CNC milling centers (>3,000 mm) with **Siemens SINUMERIK** and **HEIDENHAIN** controls | 120 Obukhovskoy Oborony Ave., Saint Petersburg; `+7 (812) 363-94-47`, `dou@goz.ru` |\n| **`TRUD-2026-006`** | **LLC NPO Stankostroenie (STAN)** (`INN 0268061504`, `OGRN 1120268002535`) | CNC machining centers for UEC, UAC, KTRV plants | **FANUC** and **Siemens SINUMERIK** CNC controls; **Siemens NX** CAM programming | 37 Elevatornaya St., Sterlitamak; `+7 (917) 420-01-06`, `tdavletova@stan-company.ru` |\n| **`TRUD-2026-007`** | **JSC Tupolev & Samara Design Bureau** (`INN 7705313252`, `OGRN 1027739263056`) | Tu-160M, Tu-95MS, Tu-22M3 strategic bombers | **FANUC** CNC machines (Moscow); **Siemens NX** CAD engineering (Samara) | 17 Akad. Tupoleva Emb., Moscow; 32 Zemetsa St., Lit. 273, Samara; `tnfeduk@tupolev.ru`, `sfkb@tupolev.ru` |\n| **`TRUD-2026-008..010`** | **LMZ PJSC ODK-UMPO (`0273008320`), PJSC Yakovlev (`3807002509`), JSC ODK-Aviadvigatel (`5904000620`) & JSC ODK-STAR (`5904100329`)** | Su-35S/Su-57 fighters, AL-41F1S & PS-90A engines, FADEC fuel controls | **Yamazaki Mazak MAZATROL** & **Siemens SINUMERIK** controls (ODK-STAR); **Siemens NX** (LMZ UMPO, KnAAZ Yakovlev); **Ansys** CAE (ODK-Aviadvigatel) | Lytkarino, Turaevo, Bldg. 9; 1 Sovetskaya St., Komsomolsk-on-Amur; Perm, 93 Komsomolsky Ave. / 140a Kuybysheva St. |\n| **`TRUD-2026-021`** | **FGUP VNIIFTRI** (`INN 5044000102`, `OGRN 1035008854341`) | Primary GLONASS & military RF metrology institute | **DMG MORI DMC-635, DMC-1035, DMU-75 monoBLOCK** centers with **Sinumerik** & **Siemens NX** CAM; **Altium Designer** | Bldg. 11, VNIIFTRI Zone, Mendeleevo, Moscow Oblast; `+7 (495) 526-63-62`, `kadr@vniiftri.ru` |\n| **`TRUD-2026-023..025`** | **JSC TNIIS (`6154573235`), JSC APZ Rotor (`2225008370`), JSC NPO Zavod Volna (`7805047646`)** | Naval EW systems TK-25E, naval gyroscopes & military tactical radios | **FANUC Series 0i-MF, Siemens 840D, HEIDENHAIN iTNC 530** controls; **DMG NEF-400, VDF-1200, HAAS SL-20 HE No. 805, HAAS SL-10, Victor Vturn-A20Y No. 1155** | 3 Sedova St., Taganrog; 63 Lesnoy Trakt, Barnaul; 29 Marshala Govorova St., Lit. N, Saint Petersburg |\n| **`TRUD-2026-026..028`** | **JSC MMZ (`7415061758`), JSC SRC Makeev (`7415061109`), JSC TsKBA (`5506202219`), JSC MKB Iskra (`7714288059`), JSC BEMZ (`5445007458`), PJSC Agregat (`7401000191`), PJSC Proletarsky Zavod (`7811039386`)** | Sarmat/Sineva ICBMs, Kh-31P seekers, R-77-1/Kh-35U rocket motors, Su-34 hydraulics | **Fadal / CV-1000 (Fanuc)** milling centers; **Sodick 325/400** wire EDM; **Okuma, Mazak 530, Mori Seiki, DMG CTX 310**; **HEIDENHAIN** (Workshop No. 13 TsKBA, MKB Iskra); **Ansys, SolidWorks** | 1 Turgoyakskoye Hwy, Miass; 24A Kosmichesky Ave., Omsk; 6 Repina St., Khimki; Berdsk; Sim; 3 Dudko St., Saint Petersburg |\n\n---\n\n### 4. Actionable Implications for CNC & Software Compliance Teams and Export Regulators (BAFA, METI, US BIS)\n\n1. **Enforcement of Industrial Software & Cloud Prohibitions (Article 5n of EU Regulation 833/2014 & US EAR):** Documented active engineering use of **`Siemens NX`**, **`Dassault Systemes SolidWorks`**, **`Altium Designer`**, and **`Ansys`** across PJSC Yakovlev, JSC Tupolev, PJSC ODK-UMPO, JSC FNPTs NNIIRT, JSC SRC Makeev, and LLC STTs provides vendor compliance teams with concrete corporate domain and network identifiers (`@stc-spb.ru`, `@lmz.umpo.ru`, `@sj.yakovlev.ru`, `@tupolev.ru`, `@nniirt.ru`, `@makeyev.ru`, `@aerosila.ru`) to audit license servers (`FlexNet / Sentinel / Altium Vault`), revoke Dongle/MAC entitlements, and block component library updates.\n2. **Targeting Replacement CNC Controller Boards, Linear Encoders & Servo Drives (HS `853710`, `903180`, `846693`):** Multiple Rostrud filings at JSC VMP AVITEK, JSC NPO Bazalt, JSC TsKBA (Workshop No. 13), and JSC Motovilikha Plants specifically recruit **CNC electronics repair engineers for `FANUC`, `HEIDENHAIN iTNC 530`, and `Siemens SINUMERIK 840D`** (including spare-parts requisitioning), demonstrating that these workshops depend on ongoing diversion of replacement controller boards, optical linear scales, and spindle drives from Germany and Japan.\n3. **Closing Tier-2 Sanctions Blind Spots (`[BLIND SPOT]`):** Enterprises such as **PJSC Agregat (`INN 7401000191`, Sim)** and **JSC NPO Zavod Volna (`INN 7805047646`, Saint Petersburg)**, which openly report machining aircraft hydraulic actuators and naval communications hardware on 5-axis `Mori Seiki`, `Mazak`, `FANUC Robodrill`, and `HAAS SL-20 HE No. 805` CNC centers, warrant immediate designation synchronization across EU, UK, US, and Japanese sanctions lists.\n\nThe complete structured dataset is available in the [Foreign Components & CNC Tooling Registry](/en/components#trudvsem-cnc-cad) and via the machine-readable JSON feed [`/feeds/vpk-trudvsem-cnc-cad.json`](/feeds/vpk-trudvsem-cnc-cad.json)."
  },
  {
    "id": "M-15",
    "slug": "method-15-fgis-arshin-rosstandart-serial-numbers-vpk-metrology",
    "date": "2026-11-06",
    "pinned": false,
    "category": "OSINT BLIND SPOTS",
    "read_time_min": 9,
    "title": "Metrological Self-Incrimination: How Russia's State Registry FGIS Arshin Exposes Factory Serial Numbers of German, Japanese, British, and US Precision Instruments Inside Active Su-34M, Su-30SM2, and Kinzhal Missile Workshops",
    "lead": "Western precision metrology and RF test-equipment manufacturers routinely assure export-control regulators that once an instrument leaves a third-country distributor, its ultimate end-user cannot be verified. Yet under Russian Federal Law No. 102-FZ 'On Ensuring the Uniformity of Measurements' and Ministry of Defense military acceptance standards (VP MO RF), every Russian aircraft, missile, and armored-vehicle plant is legally required to publish the exact factory serial numbers (mi_number), model designations, 2025-2026 calibration dates, certificate numbers (result_docnum), and internal laboratory owners (miOwner) of its foreign measuring instruments in the open federal database FGIS Arshin (fgis.gost.ru). We examine 148 verified serial-numbered instruments from Mahr GmbH, Mitutoyo Corporation, Carl Zeiss AG, Fluke Corporation, and Renishaw plc operating across 14 Russian defense plants and military metrology institutes.",
    "related_tool_or_link": "/en/components#arshin-serials",
    "body_md": "### 1. The Military Acceptance Trap: Why a Russian Defense Plant Cannot Hide a Western Micrometer\n\nExport-control investigations traditionally rely on customs trade data (HS codes `9017`, `9030`, `9031`) and third-country waybills. While customs ledgers capture cross-border shipments into Moscow or St. Petersburg shell importers, the paper trail frequently goes cold before reaching the actual defense factory floor. Manufacturers in Gottingen, Kawasaki, Wotton-under-Edge, or Everett can plausibly claim they have no visibility into which Russian workshop ultimately unboxed a bore gauge, laser interferometer, or reference multimeter.\n\nInside the Russian military-industrial complex (VPK RF), however, a rigid bureaucratic mechanism forces defense plants to incriminate themselves every twelve months. No airframe bulkhead on an **Su-34M** strike bomber or **Su-30SM2** fighter, no ceramic radome on a **Kh-47M2 Kinzhal** hypersonic missile, no main rotor gearbox on a **Ka-52M Alligator** attack helicopter, and no tracked armored chassis for a **Tor-M2** or **Buk-M3** air-defense system can pass factory quality control (OTK) and **Military Representation of the Ministry of Defense of the Russian Federation (VP MO RF)** unless every measuring instrument used to verify micron-level tolerances holds a valid state calibration certificate.\n\nUnder **Articles 13 and 20 of Russian Federal Law No. 102-FZ of June 26, 2008 ('On Ensuring the Uniformity of Measurements')**, paper calibration certificates have zero legal force unless the calibration record is published electronically in the Federal Information Fund for Ensuring the Uniformity of Measurements — **Rosstandart FGIS Arshin (`fgis.gost.ru`)**.\n\nConsequently, accredited factory metrology laboratories inside sanctioned Russian defense plants continuously upload complete forensic records of their Western and Japanese equipment directly into `fgis.gost.ru`:\n* **`vri_id` & `result_docnum`** — the permanent federal record ID and official calibration certificate number (incorporating the three-letter Rosstandart verification cipher assigned to the specific defense plant);\n* **`organization` & `miOwner`** — the full legal name of the accredited factory calibration laboratory and the specific internal workshop or subsidiary that owns the instrument;\n* **`mit_number`, `mit_title`, `mi_modification`** — the Russian State Registry type approval number, exact Western model designation, and year of manufacture (`manufactureYear`);\n* **`mi_number` (`manufactureNum`)** — the **unique factory serial number** engraved by the original manufacturer in Germany, Japan, the United Kingdom, or the United States;\n* **`verification_date` & `valid_date`** — exact 2025 calibration dates and active validity horizons extending through **2026 and 2027**.\n\n---\n\n### 2. What `miOwner` and Verification Ciphers Reveal: From Laboratory `LUI-21` at Irkutsk Aviation Plant to an Unsanctioned Subsidiary Inside Izhevsk Radio Plant\n\nCross-referencing primary FGIS Arshin records from 2025-2026 against Russian defense plants exposes not only active Western equipment on sanctioned production lines, but also internal shop-floor designations and unsanctioned corporate subsidiaries:\n\n1. **PJSC Yakovlev / Irkutsk Aviation Plant (INN `3807002509`, OGRN `1023801428111`, UAC / State Corporation Rostec — serial producer of Su-30SM2 fighters and Yak-130 combat trainers):**\n   * FGIS Arshin records from 2025 document **59 active calibration certificates** for German precision metrology instruments manufactured by **`Mahr GmbH` (Gottingen, Germany)** under PJSC Yakovlev's verification cipher **`AOR`**, with validity extending through April-November **2026**.\n   * In full record `vri_id = 1-430186225` (certificate `S-AOR/08-04-2025/430186225` for a **`Mahr MaraMeter 838 TI`** inside caliper gauge, factory serial number **`PC13S125`**, manufactured in `2019`), the `miOwner` field explicitly identifies the internal factory unit: **`Labor.LUI (LUI-21)`** (Linear-Angular Measurements Laboratory, Department 21).\n   * Additional verified `Mahr GmbH` serial numbers operating inside PJSC Yakovlev include `MaraMeter 838 TI` gauges S/Ns **`DB51N033`** (`vri_id 1-468901582`, valid until `01.09.2026`), **`DB51N006`** (`1-430186748`), **`DA38O166`** (`1-486619117`, valid until `11.11.2026`), **`DA36M040`**, **`DA36M039`**, **`DA35M052`**, **`DA30O183`**, **`DA30O179`**, **`DA30O177`**, **`DA28M049`**, **`DA19M058`**, setting ring **`Mahr 355 E`** (S/N **`91063599`**, `1-468900224`), and 1-micron lever micrometers **`Mahr Micromar 40FC (25-50)-0.001`** (S/Ns **`9001071`** [`1-423061511`] and **`9001067`** [`1-423061715`]).\n\n2. **JSC Mytishchi Machine-Building Plant / JSC MMZ (INN `5029126076`, OGRN `1095029003860`, Kalashnikov Concern / Rostec — manufacturer of GM-5955, GM-5970, and GM-5965 tracked armored chassis for Tor-M2, Buk-M3, Tunguska-M1, and Pantsir-SM-SV air-defense systems):**\n   * Between January and November 2025, JSC MMZ's accredited metrology service (cipher **`VEP`**) calibrated **31 precision instruments** (valid into January-November **2026**): **22 instruments from `Mitutoyo Corporation` (Japan)** and **9 micrometers from `Mahr GmbH` (Germany)**.\n   * Verified Japanese `Mitutoyo` serial numbers at JSC MMZ include Series `511/526` dial bore gauges (State Reg. `31706-13`, S/Ns **`2161038`**, **`2157087`**, **`2150233`**, **`2150173`**, **`2144280`**, **`2139840`**, **`20701745`**, **`19642695`**), `Mitutoyo ABSOLUTE Digimatic` calipers (S/Ns **`21546382`**, **`21518220`**, **`21341718`**, **`16151667`**, **`14173335`**, **`14141204`**, **`13496073`**), and Series `527/571` depth gauges (S/Ns **`900770`**, **`052066`**).\n   * Verified German `Mahr GmbH` serial numbers at JSC MMZ include `Micromar 40 A/AG/W/AB/AS` micrometers (S/Ns **`8107391`**, **`8107107`**, **`8107106`**, **`8107092`**, **`8107054`**), `Mahr 40 F/FC/T/TS` (S/Ns **`8007270`**, **`8006156`**), and `Micromar 44 F/Cms/CB` inside micrometers (S/Ns **`800289`**, **`800250`**).\n\n3. **Branch of PJSC UAC — Novosibirsk Aviation Plant named after V.P. Chkalov (INN `5401200503` / PJSC UAC INN `7708619320`, OGRN `1025400515986` — sole Russian serial manufacturer of Su-34 / Su-34M frontline bombers and S-70 Okhotnik heavy combat UCAVs):**\n   * FGIS Arshin record `vri_id = 1-503422912` (published/updated in the federal database on **February 11, 2026**, certificate `I-AUE/23-05-2025/434790023`, plant cipher **`AUE`**, `miOwner`: `Filial PAO \"OAK\" - NAZ im.V.P.Chkalova`) documents a **`Carl Zeiss` (`KarlZeiss`, Germany)** universal measuring microscope bearing factory serial number **`684704`**.\n\n4. **JSC ONPP Tekhnologiya named after A.G. Romashin (INN `4025431260`, OGRN `1114025006160`, Rostec, Obninsk — sole producer of radio-transparent ceramic nose cones/radomes for Kh-47M2 Kinzhal hypersonic missiles, Iskander-M ballistic missiles, and Su-57 composites):**\n   * Record `vri_id = 1-437254727` (certificate `S-DLSH/30-05-2025/437254727`, calibrated `30.05.2025`, valid through **`29.05.2026`**, `miOwner`: `AO ONPP Tekhnologiya im. A.G.Romashina`) confirms active workshop use of a Japanese **`Mitutoyo` Series `7 / 547`** precision thickness gauge (State Reg. `32062-06`) bearing factory serial number **`09061981`**.\n\n5. **Izhevsk Radio Plant Group: How `miOwner` Exposes Unsanctioned Subsidiary `LLC IRZ-Rinkos` (INN `1833017000`):**\n   * In record `vri_id = 1-446681621` (certificate `S-DFK/09-07-2025/446681621`, valid `09.07.2025` through **`08.07.2026`**), the calibrating body is **`LLC Izhevsk Radio Plant` (`LLC IRZ`, INN `1833026870`, OGRN `1021801506671`)**, co-located with parent **`JSC Izhevsk Radio Plant` (INN `1833013253`)** at Bazisnaya St. 19, Izhevsk (manufacturer of onboard telemetry and satellite navigation receivers for Iskander-M ballistic missiles, designated under US OFAC SDN, EU, and UK sanctions).\n   * However, the `miOwner` field for the German **`Mahr MarTest` mod. `436422`** lever dial test indicator (serial number **`E 11233`**) identifies a separate subsidiary at the exact same address (Bazisnaya St. 19): **`LLC IRZ-Rinkos` (INN `1833017000`, OGRN `1021801503460`)** — the IRZ group's precision machining, titanium vacuum brazing, and RF waveguide brazing subsidiary, which remains completely absent from US, EU, and UK sanctions lists.\n\n---\n\n### 3. Master Summary of 14 Verified Russian VPK Plants & Military Metrology Hubs (FGIS Arshin, 2025-2026)\n\n| Russian VPK Enterprise / Metrology Hub (INN / OGRN) | Rosstandart Cipher & Owner (`miOwner`) | Weapons Programs Supported | Western / Japanese OEMs (Units) | Representative Factory Serial Numbers (`mi_number`) & `vri_id` |\n| :--- | :--- | :--- | :--- | :--- |\n| **PJSC Yakovlev / Irkutsk Aviation Plant** (`INN 3807002509`, `OGRN 1023801428111`) | Cipher `AOR` · `Labor.LUI (LUI-21)` | Su-30SM2 multirole fighters, Yak-130 combat trainers | **Mahr GmbH** (Germany) — **59 units** | `PC13S125` (`1-430186225`), `DB51N033` (`1-468901582`), `DA38O166` (`1-486619117`), `91063599` (`1-468900224`), `9001071` (`1-423061511`), `9001067` (`1-423061715`) |\n| **JSC Mytishchi Machine-Building Plant (JSC MMZ)** (`INN 5029126076`, `OGRN 1095029003860`) | Cipher `VEP` · `JSC MMZ` | GM-5955 / GM-5970 tracked chassis for Tor-M2, Buk-M3, Pantsir-SM-SV | **Mitutoyo Corp.** (Japan) — **22 units**; **Mahr GmbH** (Germany) — **9 units** | Mitutoyo: `2161038` (`1-407746779`), `2150173` (`1-508975331`), `21341718` (`1-508974130`), `14173335` (`1-508973988`), `900770` (`1-508975657`); Mahr: `8107391` (`1-407746812`), `8007270` (`1-407746882`), `800289` (`1-407746853`) |\n| **Branch of PJSC UAC — Novosibirsk Aviation Plant (NAZ Chkalov)** (`INN 5401200503` / `7708619320`, `OGRN 1025400515986`) | Cipher `AUE` · `NAZ im.V.P.Chkalova` | Su-34 / Su-34M frontline strike bombers, S-70 Okhotnik UCAVs | **Carl Zeiss AG** (Germany) — **1 unit** | `KarlZeiss` measuring microscope S/N `684704` (`vri_id 1-503422912`, cert `I-AUE/23-05-2025/434790023`) |\n| **JSC ONPP Tekhnologiya named after A.G. Romashin** (`INN 4025431260`, `OGRN 1114025006160`) | Cipher `DLSH` · `JSC ONPP Tekhnologiya` | Ceramic radomes for Kh-47M2 Kinzhal, Iskander-M, S-400 | **Mitutoyo Corp.** (Japan) — **1 unit** | `Mitutoyo 7/547` thickness gauge S/N `09061981` (`vri_id 1-437254727`, cert `S-DLSH/30-05-2025/437254727`) |\n| **St. Petersburg OJSC Krasny Oktyabr** (`INN 7830002462`, `OGRN 1027802505378`) | Cipher `GSSH` · `SPb OJSC Krasny Oktyabr` | VR-14 / VR-80 main helicopter gearboxes for Ka-52M, Mi-28NM & MiG-29K / Su-30SM units | **Mahr GmbH** (Germany) — **6 units** | `MarCal 16 EWR` digital calipers S/Ns `91070409` (`1-451761079`), `91070407` (`1-483117177`), `91070406` (`1-483117020`), `91050220` (`1-483117174`), `91030285` (`1-478389561`), `91030280` (`1-483117175`) |\n| **PJSC Krasnoe Znamya Plant (Ryazan)** (`INN 6229004711`, `OGRN 1026201077572`) | Cipher `BIKH` · `PJSC Krasnoe Znamya` | Radar electronics and modules for S-400 Triumph and S-500 (Almaz-Antey) | **Mahr GmbH** (Germany) — **2 units** | `Micromar 40 EWR` digital micrometers S/Ns `91052043` (`1-428031276`) and `91052041` (`1-428032180`) |\n| **JSC PKO Teploobmennik (Nizhny Novgorod)** (`INN 5258000011`, `OGRN 1025202607473`) | Cipher `AYAM` · `JSC PKO Teploobmennik` | Environmental control & avionics cooling systems for Su-34M, Su-35S, Su-57, Tu-160M | **Mahr GmbH** (Germany) — **3 units** | `MarCal 16 U (4107005)` calipers S/Ns `91090825` (`1-427505243`), `91090823` (`1-437582733`), `91090819` (`1-427505242`) |\n| **LLC IRZ / JSC Izhevsk Radio Plant** (`INN 1833026870` / `1833013253`) | Cipher `DFK` · Owner: `LLC IRZ-Rinkos` (`INN 1833017000`) | Iskander-M missile telemetry, RF waveguides, titanium vacuum brazing | **Mahr GmbH** (Germany) — **1 unit** | `Mahr MarTest 436422` lever indicator S/N `E 11233` (`vri_id 1-446681621`, cert `S-DFK/09-07-2025/446681621`) |\n| **JSC NPP Geofizika-Kosmos** (`INN 7718649612`, `OGRN 5077746924074`) | Cipher `BUG` · `JSC NPP Geofizika-Kosmos` | Star trackers and attitude sensors for Russian MoD reconnaissance & GLONASS-K satellites | **Mahr GmbH** (Germany) — **1 unit** | `Mahr Micromar 40 EW` digital micrometer S/N `80110008` (`vri_id 1-420682995`, cert `S-BUG/19-03-2025/420682995`) |\n| **JSC NPK ELARA named after G.A. Ilyenko** (`INN 2129017646`, `OGRN 1022101269123`) | Cipher `BMI` · `JSC ELARA` | Flight computers & cockpit displays for Su-34M, Su-35S, Su-57, Ka-52M | **Fluke Corp.** (USA) — **1 unit** | `Fluke 106` digital multimeter S/N `S00013` (`vri_id 1-463931674`, cert `S-BMI/10-09-2025/463931674`, valid to `09.09.2026`) |\n| **JSC Automobile Plant URAL (Miass)** (`INN 7415029289`, `OGRN 1027400870826`) | Cipher `AKU` · `JSC AZ URAL` | Ural-4320 military chassis for Tornado-G MLRS and Typhoon-U MRAPs | **Mahr GmbH** (Germany) — **3 units** | `MarCal 16 EWR` calipers S/Ns `80122443` (`1-445287765`), `80103580` (`1-407947906`), `80103554` (`1-445287762`) |\n| **PJSC Zavolzhye Engine Plant (PJSC ZMZ)** (`INN 5248004137`, `OGRN 1025201677038`) | Cipher `VN` · `PJSC ZMZ` | Military utility vehicle engines and cast-aluminum powertrain assemblies | **Mitutoyo Corp.** (Japan) — **5 units** | `Mitutoyo` measuring heads & micrometers S/Ns `ZVC850` (`1-463824568`), `NNZ554` (`1-470856255`), `972662` (`1-441438656`), `9118538` (`1-454492665`), `14465` (`1-429010746`) |\n| **FSUE VNIIFTRI (Mendeleevo)** (`INN 5044000102`, `OGRN 1035008854341`) | Cipher `BY` · `FSUE VNIIFTRI` | Main Russian State Military Metrology Institute for Time, Frequency, EW/SIGINT & GLONASS | **Fluke Corp.** (USA) — **26 units** | Reference multimeters `Fluke 8588A` S/Ns `RTDSH8588-1` (`1-422597391`)..`RTDSH8588-5` (`1-448123112`), `Fluke 5522A` calibrator S/N `LOEIST-SI620` (`1-426486013`), `Fluke 5502A` (600 MHz) oscilloscope calibrator S/N `LOEIEKB-SI0299` (`1-400483268`) |\n| **FBI Krasnoyarsk CSM (`INN 2464019742`) & LLC TestInTekh (`INN 7734656656`)** | Ciphers `AZH` / `VYUM` | 5-axis CNC laser alignment and optical encoder calibration in Russia | **Renishaw plc** (United Kingdom) — **8 units** | `Renishaw XK10` CNC laser alignment system S/N `178475-4PUW18` (`1-479667095`, valid to `04.11.2026`), `Renishaw RGH24` linear encoders S/Ns `52Y580`, `52Y572`, `52Y429`, `52Y425` and `VS150 Mk3` S/Ns `11716005`, `11714024`, `11713011` |\n\n---\n\n### 4. Actionable Enforcement Takeaways for BAFA, METI, US BIS, and UK OTSI\n\nUnlike anonymized customs aggregates, a factory serial number (`mi_number`) recorded in Rosstandart's FGIS Arshin registry serves as an immutable forensic fingerprint inside an original equipment manufacturer's ERP traceability log:\n\n1. **Distributor Supply-Chain Traceability via Serial Number:** Using exact serial numbers such as `PC13S125` or `DB51N033` (`Mahr GmbH`), `09061981` or `2161038` (`Mitutoyo Corporation`), `178475-4PUW18` (`Renishaw plc`), or `684704` (`Carl Zeiss AG`), compliance officers and export-control enforcement agencies (**BAFA** in Germany, **METI** in Japan, **BIS** in the United States, and **OTSI / ECJU** in the United Kingdom) can immediately identify the original production batch, factory invoice date, primary distributor, and third-country diversion intermediary that delivered the instrument to PJSC Yakovlev, JSC ONPP Tekhnologiya, or JSC MMZ.\n2. **Interdiction of Calibration Reference Standards and Spare Modules:** Detailed `vri_id` records list the exact reference gauge blocks, setting rings, and optical heads required to keep `Renishaw XK10` CNC laser alignment systems and `Fluke 8588A / 5522A / 5502A` reference calibrators certified.\n3. **Closing Corporate Subsidiary Blind Spots (`LLC IRZ-Rinkos`, INN `1833017000`):** Auditing the `miOwner` field in FGIS Arshin exposes unsanctioned precision-machining subsidiaries operating inside the physical perimeter of designated Russian defense plants.\n\nThe complete machine-readable ledger of all 148 verified serial-numbered instruments and 48 featured calibration records with direct links to `fgis.gost.ru` is available at [`/en/components#arshin-serials`](/en/components#arshin-serials) and via the open JSON compliance feed [`/feeds/vpk-arshin-metrology.json`](/feeds/vpk-arshin-metrology.json)."
  },
  {
    "id": "M-14",
    "slug": "method-14-epo-euipo-uspto-patent-attorneys-sanctions-loophole",
    "date": "2026-11-05",
    "pinned": false,
    "category": "OSINT BLIND SPOTS",
    "read_time_min": 10,
    "title": "Munich Patents for Rosatom and Italian Counsel for Su-34 Engines: How 14 Western Patent Law Firms Service Russian Defense and Nuclear Holdings Under EU Regulation 833/2014 (Articles 5s & 5n) and US OFAC GL 31",
    "lead": "On 24 June 2024, the European Union enacted Article 5s of Council Regulation (EU) No 833/2014 (via Regulation (EU) 2024/1745), prohibiting intellectual property offices from accepting patent and trademark filings from Russian entities and obligating EU Member States to enforce this ban at the European Patent Office (EPO in Munich). A primary-source audit of the EPO, DPMA (as of 05.11.2026), EUIPO in Alicante, UK EPC designations in London, and the USPTO in Alexandria reveals that 14 Western and EPC patent law firms across 8 jurisdictions actively maintain 46 patents and trademarks for Rostec and Rosatom holdings (JSC UEC, Concern Kalashnikov, VSMPO-AVISMA, JSC TVEL, PAO NZHK, PJSC MSZ Elektrostal) — including Unitary Patent EP 3 961 659 B1, 2024–2026 EPO grants (EP 4 339 966 B1 on 22.07.2026), and 2024–2025 US patents (US 12,325,907 B2 on 10.06.2025) granted to OFAC-SDN-blocked entities.",
    "related_tool_or_link": "/en/sanctions-gap#patent-attorneys-matrix",
    "body_md": "## 1. Why the Patent Registers of Munich, Alicante, and Alexandria Are an X-Ray of Russian Military-Industrial Strategy\n\nWhen investigators track the Russian military-industrial complex or state nuclear monopoly Rosatom, they typically examine CHPL microelectronics customs records or satellite imagery of factory halls. Yet every titanium alloy used in a Su-34 airframe, every gas-turbine stator in an AL-41F1S fighter engine, and every zirconium fuel cladding tube in a nuclear reactor leaves a second, legally binding trail: **sovereign intellectual property monopolies registered in Western jurisdictions**.\n\nNo Russian enterprise can directly prosecute a European patent before the **European Patent Office (`EPO`, Bob-van-Benthem-Platz 1, 80469 Munich)**, maintain national validations at the **German Patent and Trade Mark Office (`DPMA`, Munich)** or **UKIPO (`London`)**, renew trademarks at the **European Union Intellectual Property Office (`EUIPO`, Alicante)**, or obtain patents from the **United States Patent and Trademark Office (`USPTO`, Alexandria, Virginia)**. Under Article 133(2) of the European Patent Convention (EPC) and Article 119(2) of the EU Trade Mark Regulation, a non-resident applicant must act strictly through an **accredited Western patent attorney (`Representative on record`)**, who conducts legal representation, responds to office actions, and remits annual renewal fees (`Fälligkeit`).\n\nUnder European Union sanctions law, this representation intersects three binding prohibitions:\n1. **Article 2(1)–(2) of Council Regulation `(EU) No 269/2014`:** mandatory freeze of all funds and economic resources (defined in Article 1(d) to include intangible assets, patents, and trademarks) belonging to Annex I designated persons — such as **JSC United Engine Corporation** (INN `7731644035`) and **JSC Concern Kalashnikov** (INN `1832090230`) — and a strict prohibition on making economic resources or maintenance services available to them.\n2. **Article 5n(2) & (2b) of Council Regulation `(EU) No 833/2014`:** prohibition on providing, directly or indirectly, legal advisory services, engineering services, and technical testing/analysis services to the **Government of Russia** or to legal persons established in Russia. When **State Atomic Energy Corporation Rosatom** (INN `7706413348`, OGRN `1077799032926`) files European and US patents explicitly titled *\"State Atomic Energy Corporation Rosatom on Behalf of The Russian Federation\"*, any non-litigation patent prosecution or maintenance by an EU law firm constitutes direct service provision to the Government of Russia.\n3. **Article 5s of Council Regulation `(EU) No 833/2014` (enacted by the 14th Sanctions Package — Council Regulation `(EU) 2024/1745` of 24 June 2024):** EU and Member State intellectual property offices shall not accept applications for registration of patents or trademarks from Russian nationals or legal persons established in Russia (including joint filings with non-Russian co-applicants), and under Article 5s(2), EU Member States in their capacity as Contracting States to the EPC must ensure that the **EPO** does not accept such applications.\n\n---\n\n## 2. Anatomy of the Munich and Ankara EPC Loopholes: Unitary Patent Registration After 24.06.2024 and 2024–2026 EPO Grants\n\nCross-verifying official EPO patent specifications (`EP*.pdf`) against the live German Patent and Trade Mark Office register (`DPMAregister` as of **5 November 2026**) exposes two structural mechanisms through which Rosatom and Rostec holdings continue to obtain and maintain European patents after 24 June 2024:\n\n### Mechanism A: Third-Country EPC Proxy (Turkey) and Budapest Filing for US/UK-Sanctioned JSC TVEL and PAO NZHK\nRosatom's nuclear fuel and special materials holding — **JSC \"TVEL\"** (INN `7706123550`, OGRN `1027739121475`) — has been subject to a UK asset freeze since 24.02.2023 and blocked on the **`US OFAC SDN List`** since 12.04.2023 (under E.O. 14024). To bypass the EU Article 5n ban on EU-based legal services while continuing to prosecute patents before the EPO in Munich, JSC TVEL and its Novosibirsk subsidiary **PAO \"NZHK\"** (INN `5410114184`, OGRN `1025403903722`) appointed an EPC patent attorney firm in a non-EU EPC Contracting State — **`Yalçiner Patent and Consulting Ltd.`** (Tunus Caddesi 85/3-4, Kavaklidere, 06680 Ankara, Turkey) — alongside Hungarian firm **`Danubia Patent & Law Office LLC`** (Bajcsy-Zsilinszky út 16, 1051 Budapest, Hungary):\n- **European Patent with Unitary Effect (`Einheitspatent` under EU Regulation No 1257/2012) `EP 3 961 659 B1` (`AKZ E199571837`):** JSC TVEL's patent on *\"Method for manufacturing a superconducting composite wire based on Nb3Sn\"*. Granted on 19.06.2024, its **Unitary Effect across 17 EU Member States (`AT, BE, BG, DE, DK, EE, FI, FR, IT, LT, LU, LV, MT, NL, PT, SE, SI`) was registered by the EPO on 26 June 2024 and published on 14 August 2024 — AFTER Council Regulation (EU) 2024/1745 (Article 5s) entered into force on 24 June 2024**. It remains active in force (`Anhängig/in Kraft`) as of 05.11.2026.\n- **`EP 4 339 966 B1` (`AKZ E228288601`, DE `60 2022 040 329.4`):** patent on *\"Device for trapping debris in a nuclear fuel assembly\"* for **JSC TVEL** and **PAO NZHK**, **granted by the EPO on 22 July 2026** (published in DPMA on 13.08.2026, active in force as of 05.11.2026) via `Yalçiner Patent and Consulting Ltd.`.\n- **`EP 4 141 890 B1` (`AKZ E219400280`, DE `60 2021 029 826.9` — *\"Fuel rod of a water-cooled water-moderated nuclear reactor\"*) and `EP 4 145 469 B1` (`AKZ E209464312`, DE `60 2020 039 380.3` — *\"Method for producing pelletized fuel from uranium-molybdenum powders\"*):** granted by the EPO to JSC TVEL on **23 April 2025** and **9 October 2024** respectively, with annual renewal fees updated in August 2026 (`01.08.2026` and `26.08.2026`).\n- **`EP 4 546 371 A1` (`AKZ E229481247`, `PCT/RU2022/000387` — *\"Nuclear reactor fuel assembly (embodiments)\"*):** JSC TVEL application prosecuted into the European phase by EU-based **`Danubia Patent & Law Office LLC` (Budapest, Hungary)** and **published by the EPO on 30 April 2025 (Bulletin `2025/18`)** — ten months after Article 5s took effect.\n\n### Mechanism B: Direct German, Italian, French, and Lithuanian Representation for the Government of Russia (Rosatom), JSC UEC, VSMPO-AVISMA, and Concern Kalashnikov\n1. **`Friese Goeden Patentanwälte PartGmbB` (Widenmayerstraße 49, 80538 Munich, DE):** in October 2024 — nearly four months after Article 5s took effect — prosecuted to grant two European patents: **`EP 3 690 890 B1` on 16.10.2024** for JSC TVEL and **`EP 3 734 615 B1` on 09.10.2024** for **\"State Atomic Energy Corporation Rosatom on Behalf of The Russian Federation\"** (reprocessing nitride spent nuclear fuel in molten salts), while maintaining **`EP 3 483 597 B1`** (updated `08.08.2026`) and three active JSC TVEL applications (`EP 4 080 520 A1`, `EP 4 082 685 A1`, `EP 4 091 731 A1`).\n2. **`Dr. Schön, Neymeyr & Partner Patentanwälte mbB` (Bavariaring 26, 80336 Munich, DE):** maintains active representation for thermonuclear reactor vacuum vessel patent **`EP 3 591 667 B1`** (granted `22.11.2023`, annual renewal fee updated **`08.04.2026`**) held by **State Atomic Energy Corporation Rosatom on Behalf of The Russian Federation**.\n3. **`Meissner Bolte Patentanwälte Rechtsanwälte Partnerschaft mbB` (Munich, DE) and `WITTE, WELLER & PARTNER Patentanwälte mbB` (Stuttgart, DE):** represent Rostec's strategic titanium producer **Public Stock Company \"VSMPO-AVISMA Corporation\"** (INN `6607000556`, OGRN `1026600784011`). In 2026, DPMA/EPO records confirm updated annual renewal fees across pseudo-beta titanium alloy and additive-manufacturing titanium patents **`EP 2 527 478 B1`** (updated **`10.01.2026`**), **`EP 3 617 335 B1`** (**`07.05.2026`**), **`EP 3 844 313 B1`** (granted `01.03.2023`, renewal updated **`09.09.2026`**), and **`EP 2 623 620 B1`** (**`14.10.2026`**), pending application **`EP 4 317 497 A1`** (published `07.02.2024`, updated `25.06.2025`), and active EU Trade Marks **`EUTM 003117843` (`TIRUS`)** and **`EUTM 003725108` (`VSMPO`, renewed through 2034)**.\n4. **`Jacobacci & Partners S.p.A.` (Brescia, Italy) and `ADELENYS s.a.s.` (Paris, France):** remain the representatives on record across four active EPO aircraft turbine applications (`EP 3 693 574 A1`, `EP 3 712 402 A1`, `EP 3 597 409 A2`, `EP 3 597 543 A2` — all `Anhängig/in Kraft` as of `05.11.2026`) owned by **JSC \"United Engine Corporation\" (`AO \"ODK\"`, INN `7731644035`, OGRN `1107746186096`)**, which is directly subject to an EU asset freeze under Annex I of Council Regulation (EU) No 269/2014.\n5. **EUIPO Alicante and `Juozas Lapienis` (Vilnius, Lithuania):** despite the designation of **JSC Concern \"Kalashnikov\"** (INN `1832090230`, OGRN `1111832003018`) under Annex I of Council Regulation (EU) No 269/2014, six EU Trade Marks of Concern Kalashnikov in Nice Class 13 (firearms and ammunition) remain active in force (`Marke eingetragen` as of `05.11.2026`) at EUIPO: **`EUTM 018194268`** (Representative: `Juozas Lapienis`, Vilnius), **`EUTM 012856993` (`AK 47`)**, **`EUTM 012857074` (`AKM`)**, **`EUTM 012857215` (`AK 74`)** (all three maintained past their May 2024 ten-year expiration threshold), **`EUTM 002989762` (`SAIGA`)**, and **`EUTM 004534632` (`DRAGUNOV`)**.\n\n---\n\n## 3. The Transatlantic Dentons Network and the US OFAC General License No. 31 Loophole at the USPTO\n\nComparing European, UK, and US registries highlights a striking cross-jurisdictional regulatory gap across the global **Dentons** network and US patent law firms:\n- In **Germany (`Dentons Patent Solutions Rechtsanwaltsgesellschaft mbH`, Munich and `Dentons Europe (Germany) GmbH & Co. KG`, Berlin)**, the firm maintains JSC TVEL's patent **`EP 3 960 896 B1`** (granted `06.12.2023`, renewal fee updated **`26.08.2026`**), application **`EP 3 961 650 A1`** (JSC TVEL & **PJSC Mashinostroitelny Zavod**, INN `5053005918`, OGRN `1025007111491`), and EU Trade Mark **`EUTM 009157207` (`ROSATOM`)**.\n- In **London (`Dentons UK and Middle East LLP`, One Fleet Place, London EC4M 7WS)**, the firm stands on record for five `GB`-designated European patents held by **\"State Atomic Energy Corporation Rosatom on Behalf of The Russian Federation\"** (`EP 3 306 619 B1`, `EP 3 413 397 B1`, `EP 3 381 600 B1`, `EP 3 382 717 B1`, `EP 3 441 978 B1`).\n- In the **United States (`Dentons US LLP`, `Carstens, Allen & Gourley, LLP`, `PATENTTM.US`, and `Brooks Kushman P.C.`)**, **OFAC Russia-related General License No. 31 (`31 CFR Part 587`, issued 05.05.2022)** continues to authorize US patent attorneys to prosecute and maintain US patents even for entities blocked on the **`OFAC SDN List`**. Relying on GL 31:\n  * **`Dentons US LLP`** obtained USPTO grant **`US 12,325,907 B2` on 10 June 2025** directly for **JSC \"TVEL\"** (two years and two months after TVEL was blocked on the OFAC SDN list on 12.04.2023) and **`US 12,224,075 B2` on 11 February 2025** for **Rosatom acting on Behalf of the Russian Federation** (in addition to four 2022–2023 US grants: `US 11,802,686 B2`, `US 11,756,697 B2`, `US 11,735,325 B2`, `US 11,437,154 B2`).\n  * **`Carstens, Allen & Gourley, LLP` (Plano, Texas)** obtained USPTO grant **`US 11,946,130 B2` on 2 April 2024** (zirconium alloy nuclear fuel cladding tubes) for OFAC-SDN-blocked **JSC \"TVEL\"**.\n  * **`PATENTTM.US`** obtained USPTO grant **`US 11,473,440 B2` on 18 October 2022** (gas turbine stator) for OFAC-SDN-blocked military aero-engine holding **JSC \"United Engine Corporation\"** (INN `7731644035`).\n\nThe complete bilingual compliance matrix of all **12 clusters (14 Western and EPC patent law firms and 46 verified patents and trademarks)** with primary-source PDF specifications and SHA-256 hashes is published in **[/en/sanctions-gap#patent-attorneys-matrix](/en/sanctions-gap#patent-attorneys-matrix)**."
  },
  {
    "id": "M-13",
    "slug": "ripe-ncc-amsterdam-vpk-ipv4-sanctions-blindness",
    "date": "2026-11-05",
    "pinned": false,
    "category": "OSINT BLIND SPOTS",
    "read_time_min": 9,
    "title": "Amsterdam's BGP Router for Iskanders and Rostec: How RIPE NCC (KvK 40539632) Dismisses 90.12% of Sanctions Alerts and Signs RPKI ROAs for Russian VPK and Occupied Melitopol Telecom",
    "lead": "On 22 October 2026, the Amsterdam-based Regional Internet Registry RIPE NCC (Stationsplein 11, KvK 40539632) published its Q4 2026 Quarterly Sanctions Transparency Report (RIPE-868): out of 2,339 EU/OFAC sanctions alerts since April 2022, 2,108 (90.12%) were dismissed, and the Russian Federation accounts for a microscopic 0.32% (15,616 out of 4,850,688) of frozen IPv4 addresses. Using primary records from rest.db.ripe.net and live BGP/RPKI telemetry, we demonstrate how IT and telecom subsidiaries of EU-sanctioned Russian defense holdings (Rostec, Rosatom, Almaz-Antey, KTRV, UAC, USC, VGTRK, ANO Dialog, Zvezda, TsNIIMash) and occupied Melitopol telecom hold 35 ASNs and 117,024 unfrozen IPv4 addresses in Amsterdam valued at $2.22 million.",
    "related_tool_or_link": "/en/sanctions-gap#ripe-ipv4-matrix",
    "body_md": "## 1. The Myth of the 'Sovereign Runet' and the Building at Stationsplein 11 in Amsterdam\n\nWhenever Russian generals and Ministry of Digital Development officials boast on television about a 'sovereign, import-independent Runet', observers outside network engineering often imagine a master switch in Moscow. In reality, global packet routing between Russian defense conglomerates, missile design bureaus, state corporation data centers, and the outside world rests on the legal foundation of a single association incorporated under Dutch law (*Vereniging*) across from Amsterdam Central Station: **`Réseaux IP Européens Network Coordination Centre (RIPE NCC)`**, **Stationsplein 11, 1012 AB Amsterdam, Netherlands**, Dutch Chamber of Commerce registration **`KvK 40539632`** (`RSIN 801699036`; Managing Director: **Hans Petter Holen**; Chief Legal Officer: **Athina Fragkouli**).\n\nOperating under the jurisdiction of the Kingdom of the Netherlands, `RIPE NCC` exercises a regional monopoly over:\n- allocating, registering, and maintaining public **`IPv4` (`inetnum`)**, **`IPv6` (`inet6num`)**, and **Autonomous System Number (`aut-num` / `ASN`)** blocks across Europe, the Russian Federation, and Central Asia;\n- maintaining the registry of Local Internet Registries (**`LIRs`**) and organisation objects (**`ORG-*`**);\n- signing cryptographic **Route Origin Authorizations (`RPKI ROAs`)** under its root certificate authority (**`TA: RIPE NCC RPKI Root`**), without which European and North American Tier-1 transit providers drop BGP announcements as invalid;\n- approving or freezing transfers of scarce `IPv4` blocks on the European secondary market, where public IPv4 blocks constitute liquid intangible assets (as formally confirmed to `RIPE NCC` by the Dutch Ministry of Foreign Affairs under the definition of \"economic resources\" in Article 1(d) and Article 2 of Council Regulation `(EU) No 269/2014`).\n\nAs a Dutch legal entity, `RIPE NCC` is strictly bound by the **Dutch Sanctions Act (`Sanctiewet 1977`)**, **Article 2 of Council Regulation `(EU) No 269/2014`** (freezing all funds and economic resources belonging to, owned, held, or controlled by designated entities and their 50%+ subsidiaries), and **Article 5n of Council Regulation `(EU) No 833/2014`** (prohibiting IT consultancy, cloud, and technical services to legal persons established in Russia).\n\n---\n\n## 2. Mathematical Verdict from RIPE NCC's Own Disclosure: Inside Document RIPE-868 (Q4 2026)\n\nOn 22 October 2026, `RIPE NCC` published its latest quarterly disclosure — **`RIPE-868: Quarterly Sanctions Transparency Report (Q4 2026)`** (URL: `https://www.ripe.net/documents/4651/ripe-868.pdf`, SHA-256: `0878f45e835fcc5d0a83be7fc503c6bbebbb60fd24ae5882e18738b35c84135e`; preceding Q3 2026 edition published 23 July 2026: **`RIPE-864`**, SHA-256: `6ad502852539e7939abd27387365842262851a66690eec5c0e0fd2f0246b08b8`).\n\nThe official figures in Table 1 and Table 2 of `RIPE-868` (status as of 1 October 2026) expose a systemic compliance failure:\n1. **A 90.12% Dismissal Rate:** Out of **`2,339`** sanctions alerts generated since April 2022, `RIPE NCC` froze only **`53`** cases (`2.27%`), placed **`20`** cases (`0.85%`) `On hold`, and **dismissed `2,108` cases (`90.12%`)** under the label *\"Confirmed false positive, EU sanctioned not applicable, exempted, or OFAC\"*.\n2. **Russia Accounts for 0.32% of Frozen IPv4 Space:** Across all countries in Table 2 of `RIPE-868`, `RIPE NCC` has frozen or placed on hold **`4,850,688`** IPv4 addresses. However, **`4,631,552` addresses (`95.48%`) belong to Iran (`IR`)** and **`216,064` addresses (`4.45%`) belong to Syria (`SY`)**, whereas the **entire Russian Federation (`RU`) in the fifth year of full-scale war accounts for just `15,616` IPv4 addresses (`0.32%`) and `34` ASNs** (`5` Frozen LIR Members holding `9,472` IPs, `24` Frozen End Users holding `5,376` IPs, and `3` On-Hold End Users holding `768` IPs).\n\nWhy does Amsterdam's screening pipeline dismiss 90.12% of alerts? Because `RIPE NCC` screens Latin-transliterated organisation names largely for literal string matches against Annex I of Regulation `(EU) No 269/2014`, **systematically failing to trace 50%+ ownership and control (`EU Best Practices for the effective implementation of restrictive measures, paras. 62–68`)** across wholly-owned IT integrators, telecom subsidiaries, and dedicated LIR shields of sanctioned Russian defense holdings.\n\n---\n\n## 3. How Table 2 of RIPE-868 Mathematically Proves that Rostec, Rosatom, UAC, and VGTRK Pools Remain Unfrozen\n\nBecause Table 2 of `RIPE-868` itemizes every single one of the 32 frozen or on-hold Russian entries by exact type (`Member` vs. `End User`), IPv4 count, IPv6 count, and ASN count, cross-referencing `RIPE-868` against live queries to **`rest.db.ripe.net`** and **`stat.ripe.net`** as of **5 November 2026** yields mathematical proof of non-freezing:\n\n- **Zero Russian LIR Members (`Member | RU`) holding more than `3,072` IPv4 addresses are frozen.** Table 2 of `RIPE-868` lists only five frozen Russian LIR Members: three with `1,024` IPs, one with `2,048` IPs (and `0` IPv6), and one with `3,072` IPs. This proves with 100% mathematical certainty that:\n  - **`ORG-ASTa1-RIPE` (`FGUP VGTRK / All-Russia State Television and Radio Broadcasting Company`, INN `7714072839`, OGRN `1027700310076`)** — an active `LIR` holding **`AS25292`**, **`4,096` IPv4 addresses** (`80.247.32.0/20`), and `2a05:f0c0::/29` IPv6 — is **100% UNFROZEN**, despite FGUP VGTRK being directly designated under EU Regulation `(EU) No 269/2014` since December 2022;\n  - **`ORG-AJ134-RIPE` (`JSC Atomdata`, INN `9725031147`, OGRN `1207700111277`)** — the data-center and cloud LIR subsidiary of **JSC Concern Rosenergoatom** (INN `7721632827`, OGRN `5087746119951`) and **State Corporation Rosatom** (INN `7706413348`, OGRN `1077799032926`), holding **`AS199860 / AS214817`**, `2a01:6520::/32` IPv6, and **`7,424` IPv4 addresses** (with `193.43.41.0/24` modified in RIPE DB on **`2026-10-09`**) — is **100% UNFROZEN**;\n  - **`ORG-DL236-RIPE` (`LLC DDoS-Guard`, INN `9204005780`, OGRN `1149204010988`)** — an active LIR holding **`8,192` IPv4 addresses** (`45.10.240.0/22`, `91.215.40.0/22`, `95.129.232.0/21`, `185.178.208.0/22` et al., with `AS57724` modified **`2026-10-20`**), routing EU-sanctioned **`rt.com`** (ANO TV-Novosti, INN `7704552473`, OGRN `1057746595367`) and **`tvzvezda.ru`** — is **100% UNFROZEN**;\n  - **`ORG-IZL1-RIPE` (`LLC BI.ZONE`, INN `9701036178`, OGRN `1167746317210`)** — the 100% cybersecurity subsidiary of EU-sanctioned **PJSC Sberbank** (INN `7707083893`, OGRN `1027700132195`), holding `2,048` IPv4 addresses (`185.163.156.0/22`, `185.191.32.0/22`) plus **`2a0a:400::/32` IPv6** (the sole frozen 2,048-IP Russian LIR in Table 2 has `0` IPv6) and routing the official web portal of **State Corporation Rostec (`rostec.ru` -> `185.163.159.23`, INN `7704274402`, OGRN `1077799030847`)** via **`AS207104`** — is **100% UNFROZEN**.\n- **All 27 frozen or on-hold Russian `End User` entries in Table 2 of `RIPE-868` have `0` IPv6 blocks, at most `1,024` IPv4 addresses, and at most `2` ASNs.** This proves that `RIPE NCC` has left completely unfrozen:\n  - **`ORG-LR156-RIPE` (`LLC RT-Inform`, INN `7704810710`, OGRN `1127746501190`)** — the 100% central IT and cybersecurity integrator of **State Corporation Rostec** (INN `7704274402`), holding **`AS48723`** (modified **`2026-07-17`**), **`512` IPv4** (`194.190.191.0/24`, `195.208.193.0/24`), and **`2001:67c:1c0::/48` IPv6**;\n  - **`ORG-KI11-RIPE` (`PJSC KAMAZ`, INN `1650032058`, OGRN `1021602013971`, directly sanctioned by EU, US, and UK)** — holding **`AS50342`** and **`2,048` IPv4 addresses** (`109.95.104.0/21`), double the maximum of any frozen Russian End User in `RIPE-868`;\n  - **`ORG-SPC9-RIPE` (`PJSC Yakovlev`, formerly PJSC Irkut Corporation, INN `3807002509`, OGRN `1023801428111`, Su-30SM2 fighter manufacturer under PJSC UAC INN `7708619320`, OGRN `1067759884598`)** — holding **3 ASNs (`AS39252`, `AS48035`, `AS62389`)**, with `AS48035` modified on **`2026-01-14`**;\n  - **`ORG-TFSU1-RIPE` (`FGUP MIA Rossiya Segodnya`, INN `7704853840`, OGRN `5137746242937`, `AS44479`, `AS57352`)**, **`ORG-ISE2-RIPE` (`FGUP ITAR-TASS`, INN `7703082786`, OGRN `1037700049606`, `AS51186`, `AS62344`, `1,536` IPv4 + `2001:678:124::/48` IPv6)**, and **`ORG-JG70-RIPE` (`JSC Goznak`, INN `7813252159`, OGRN `1167847225281`, EU-sanctioned since October 2022, with `AS209520` modified in RIPE DB on `2026-04-18`)**.\n\n---\n\n## 4. Cryptographic RPKI ROAs Signed by RIPE NCC Root: TsNIIMash Missile Institute, Russian MoD Broadcaster Zvezda, and Occupied Melitopol Telecom\n\nQuerying `stat.ripe.net/data/rpki-validation` reveals that `RIPE NCC`'s own cryptographic root authority (**`TA: RIPE NCC RPKI Root`**) actively signs valid **`RPKI ROA`** certificates for sanctioned Russian military and occupation infrastructure:\n\n1. **`JSC TsNIIMash` (INN `5018200994`, OGRN `1195081054310`) — Roscosmos head rocket and spacecraft research institute (`ORG-JA462-RIPE`):** holds **`AS212732`** and **`46.61.181.0/24`**, backed by 3 active **`RPKI ROA VALID (TA: RIPE NCC RPKI Root)`** certificates (`46.61.181.0/24 -> AS212732`).\n2. **`JSC Russian Armed Forces Broadcasting Company ZVEZDA` (INN `7717653542`, OGRN `1097746338403`) — official broadcaster of the Ministry of Defence of the Russian Federation (`ORG-FA303-RIPE`):** directly designated under EU Regulations `(EU) No 269/2014` and `833/2014`, yet holds active **`AS48552`** and **`89.208.99.0/24`** with a live **`RPKI ROA VALID (TA: RIPE NCC RPKI Root)`** for `89.208.99.0/24 -> AS48552`.\n3. **`MUE \"Sea Telecom\" / GUP ZO \"More Telecom\"` (Russian occupation INN `9001000730`, OGRN `1229000000910`) — Russian military-civilian administration telecom operator in occupied Melitopol, Zaporizhzhia Region, Ukraine (`ORG-MA2129-RIPE`):** `RIPE NCC` in Amsterdam maintains record **`MUE \"SEA TELECOM\" VGA MELITOPOL ZAPORIZHIE REGION`** at *Zaporozhye region, Melitopol, Bogdan Khmelnitsky Ave. 28*, explicitly tagged with **`country: RU`**, assigned **`AS215503`** (modified **`2026-02-03`**) and **`185.178.244.0/24`**, and signed with a live **`RPKI ROA VALID (TA: RIPE NCC RPKI Root)`** — in direct breach of Ukraine's territorial integrity and **Council Regulations `(EU) No 269/2014` and `(EU) 2022/1903`**.\n\nThe complete bilingual compliance matrix of all **18 Russian VPK and Z-infrastructure clusters** (`32` RIPE `org-ids`, `35` `ASNs`, `117,024` `IPv4` addresses valued at **`$2,219,956`**) and competent Dutch/EU enforcement channels (**FIOD `fiod.infodesk@belastingdienst.nl`**, **Dutch Ministry of Finance `sancties@minfin.nl`**, **Ministry of Economic Affairs `meldpuntsancties@minezk.nl`**, **RDI `info@rdi.nl`**, and **European Commission DG FISMA**) is published in **[/en/sanctions-gap#ripe-ipv4-matrix](/en/sanctions-gap#ripe-ipv4-matrix)**."
  },
  {
    "id": "M-12",
    "slug": "esg-blindness-esma-2024-3005",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "OSINT BLIND SPOTS",
    "read_time_min": 8,
    "title_en": "An 'AAA' Green Stamp on a Kh-101 Cruise Missile: How ESG Arbiters Sustainalytics, MSCI, and ISS Shield VPK Chip and CNC Suppliers Under ESMA Regulation (EU) 2024/3005",
    "lead_en": "On 2 July 2026, Regulation (EU) 2024/3005 entered into application under direct ESMA supervision, and on 2 November 2026 the authorisation application window closed for Sustainalytics B.V. (ESMA Art. 51 Entry #7, LEI 724500QWHV1ZPN8MTA36), MSCI Solutions (Deutschland) GmbH (Entry #5, LEI 254900F0YXSTFWUOFL76), and ISS Germany AG (Entry #22, LEI 391200XML1TCYHZ9NZ87). Using their own Annex III disclosures, we dissect how 12 public CHPL chipmakers and 5-axis CNC builders supplying Russian missile and tank factories retain MSCI AAA/AA, ISS Prime, and Sustainalytics Low Risk scores inside European SFDR Article 8/9 funds.",
    "related_tool_or_link_en": "/en/sanctions-gap#esg-esma-matrix",
    "body_en_md": "## A Green Stamp on a Cruise Missile: Anatomy of ESG Rating Blindness After 2 November 2026\n\nIn the polite universe of European sustainable finance, everything appears impeccably aligned. Open the prospectus of any flagship European investment fund classified under **SFDR Article 8** (*Light Green*) or **Article 9** (*Dark Green*) — whether managed by **Amundi** or **BNP Paribas Asset Management** in Paris, **DWS** in Frankfurt, **Robeco** in Rotterdam, or **Nordea** in Stockholm — and you will find binding legal commitments to Principal Adverse Impact (**PAI**) screening, including zero tolerance for UN Global Compact / OECD Guidelines violations (**PAI Indicator 10**) and controversial weapons exposure (**PAI Indicator 14**).\n\nTurn to the portfolio holdings page of those very same sustainable funds, and you will find multibillion-dollar positions in publicly traded microelectronics and precision CNC machine-tool manufacturers carrying the highest ethical grades on earth:\n- **`Texas Instruments Incorporated` (`NASDAQ: TXN`, `ISIN US8825081040`, `LEI WDJNR2L6D8RWOEB8T652`)** — **`MSCI ESG: AAA`**, **`ISS ESG: Prime`**, **`Morningstar Sustainalytics: 21.55 (Medium Risk, Category 1 Low Controversy)`**;\n- **`Infineon Technologies AG` (`XETRA: IFX`, `ISIN DE0006231004`, `LEI TSI2PJM6EPETEQ4X1U25`, `HRB 126492`)** — **`MSCI ESG: AAA`** (for over 15 consecutive years), **`ISS ESG: Prime (B-)`**, **`Sustainalytics: ~16.2 (Low Risk, Industry Outperformer)`**;\n- **`Analog Devices, Inc.` (`NASDAQ: ADI`, `ISIN US0326541051`, `LEI GYVOE5EZ4GDAVTU4CQ61`)** — **`MSCI ESG: AA`**, **`ISS ESG: Prime`**, **`Sustainalytics: ~17.8 (Low Risk)`**;\n- **`Oxford Instruments plc` (`LSE: OXIG`, `ISIN GB0006650450`, `LEI 213800J364EZD6UCE231`, `UK Co. No. 00775598`)** — **`MSCI ESG: AA`**, **`Sustainalytics: 11.5 (Low Risk, 77th percentile among 439 peer companies per FY2026 Annual Report)`**, **`ISS ESG: C`**;\n- **`Renishaw plc` (`LSE: RSW`, `ISIN GB0007323586`, `LEI 21380048ADXM6Z67CT18`, `UK Co. No. 01106260`)** — **`Sustainalytics: 13.96 (Low Risk: Env 5.93, Soc 3.73, Gov 4.30)`**, constituent of **Solactive ISS ESG Screened** and **MSCI UK Small Cap SRI** indices;\n- **`Schaeffler AG` (`XETRA: SHA0`, `ISIN DE000SHA0159`, `LEI 549300Q7E782X7GC1P43`, `HRB 14738`)** — **`ISS ESG: Prime (B-, score 58.81)`**, **`MSCI ESG: BBB`**, **`CDP Climate: A`**, **`Sustainalytics: 25.3 (Medium Risk)`**;\n- **`DMG MORI CO., LTD.` (`TSE Prime: 6141`, `ISIN JP3924800000`, `LEI 353800P4I3FIXTQV2E13`)** — **`CDP Climate A List (2024–2026)`**, **`Sustainalytics: 29.2 (Medium Risk)`**, **`ISS ESG: C`**.\n\nThere is only one physical anomaly missing from the ESG scorecards of all three rating agencies. It is precisely `TMS320` digital signal processors, `AD9361` RF transceivers, `AD9254` high-speed ADCs, and `Cypress/Infineon QDR-II+ SRAM` chips that power the flight computers, `Otblesk-U` terrain-matching optical seekers, and 16-element **`Kometa-M`** CRPA anti-jamming antennas inside Russian **Kh-101** and **3M-14 Kalibr** cruise missiles, **9M723 Iskander-M** ballistic missiles, and **UMPK** guided glide bombs. Meanwhile, the airframes, seeker gimbals, artillery barrels, and turbine shafts of those weapons and **T-90M Proryv** tanks are machined in three shifts on 5-axis CNC centres made by **DMG MORI (`DMU 50 / DMU 80 eVo`)**, **Hyundai Wia (`XF6300`)**, **Bystronic (`ByStar Fiber`)**, and **Danieli**, riding on **THK / NSK / Hiwin** ground ball screws, spinning on **Schaeffler (`FAG P4/P2`)** super-precision spindle bearings, and calibrated to micron tolerances by **Renishaw (`OMP400 / RMP60`)** touch probes inside **`JSC KTRV` (`INN 5099000013`)**, **`JSC Votkinsk Plant` (`INN 1828020110`)**, **`JSC NPK Uralvagonzavod` (`INN 6623029538`)**, **`JSC VNIIR-Progress` (`INN 2130094170`)**, and **`JSC NPP Istok` (`INN 5050108496`)**.\n\n---\n\n## The End of Unregulated 'Private Opinions': Regulation (EU) 2024/3005 and ESMA's 2 November 2026 Deadline\n\nFor over a decade, global ESG rating agencies deflected supply-chain compliance inquiries with a convenient legal shield: *'Our ESG scores are unregulated private analytical opinions.'*\n\nIn November 2026, that shield ceased to exist in the European Union. Under **Regulation (EU) 2024/3005 of the European Parliament and of the Council of 27 November 2024 on the transparency and integrity of Environmental, Social and Governance (ESG) rating activities (`OJ L, 2024/3005, 12.12.2024`)**:\n1. **`2 July 2026` (`Date of Application`):** Regulation (EU) 2024/3005 entered into direct legal application across the EU, placing all ESG rating providers operating in the Union under the direct supervisory authority of the **European Securities and Markets Authority (`ESMA`, 201-203 rue de Bercy, Paris; Chair: Verena Ross; Executive Director: Natasha Cazenave)**.\n2. **`2 July – 2 August 2026` (`Article 51 Notification Window`):** Existing ESG rating providers were legally required to formally notify ESMA under **Article 51** to enter the transitional regime.\n3. **`2 November 2026` (`Final Authorisation Application Deadline`):** The statutory deadline by which all medium and large ESG rating providers had to submit their complete formal **Application for Authorisation (`ESGRR Master Application Template`)** to ESMA (`esgrpauth@esma.europa.eu`) subject to supervisory fees under **Commission Delegated Regulation `(EU) 2026/910` (`C(2026)2580` of `24 April 2026`)**.\n\nWe inspected ESMA's official registry — **`List of firms that have notified ESMA under Article 51 of Regulation (EU) 2024/3005` (Last updated: `4 November 2026`**, SHA-256: `16c0b66a02a3c2f4dd8086726697a7d0f4966171a2dc66b6180557c227d4748d`). All three global ESG arbiters are listed in that registry and are undergoing ESMA's completeness and compliance review right now:\n\n| ESMA Art. 51 Entry (Updated 04.11.2026) | EU Legal Entity & Global Brand | Jurisdiction & Trade Register | Verified `LEI` (GLEIF) | Official Article 19 & 20 Complaints / Reasoned Concerns Channels |\n|---|---|---|---|---|\n| **Entry #5** | **`MSCI Solutions (Deutschland) GmbH`** (`MSCI ESG Research`) | Germany (Frankfurt am Main, Taunustor 1, **`HRB 141960`**) | **`254900F0YXSTFWUOFL76`** | `esgclientservice@msci.com`, `issuercommunications@msci.com`, `PR@msci.com` |\n| **Entry #7** | **`Sustainalytics B.V.`** (`Morningstar Sustainalytics`) | Netherlands (Amsterdam, De Entree 35-37, **`KvK 30179673`**) | **`724500QWHV1ZPN8MTA36`** | `SUST_Complaints@sustainalytics.com`, `issuer.relations@sustainalytics.com` |\n| **Entry #22** | **`Institutional Shareholder Services Germany AG`** (`ISS ESG` / `Deutsche Boerse Group`) | Germany (Munich, Muehldorfstrasse 8, **`HRB 125913`**) | **`391200XML1TCYHZ9NZ87`** | `disclosure@issgovernance.com`, `governance.support@issgovernance.com`, `inquiry@iss-stoxx.com` |\n\n---\n\n## Caught by Their Own Annex III Disclosures: Articles 15, 19, 20 and Annex III of Regulation (EU) 2024/3005\n\nTo qualify for ESMA authorisation under **Article 23 and Annex III (`Points 1.f & 1.g`) of Regulation (EU) 2024/3005**, ESG rating providers had to publish binding disclosure tables specifying the exact risks, impacts, and event indicators their methodologies purport to measure.\n\nConsider the official **`Morningstar Sustainalytics Controversy Ratings Methodology Version 2.0 Disclosure Table` dated `26–27 August 2026`** (SHA-256: `9e9933387dd646500bf6cc62d0ada339be207712d6e8cad9ac5b3cba9afb15b1`), published explicitly under ESMA Reference `Annex III 1.f / 1.g` and `RTS on Article 23`. On pages 1–4, `Sustainalytics B.V.` formally represents to European regulators and market participants that its Controversy Rating evaluates companies under the double materiality principle across **41 Event Indicators**, explicitly listing under **Social and Governance factors**:\n- **`Sanctions`**;\n- **`Weapons`**;\n- **`Social Impact of Products`**;\n- **`Society – Human Rights – Supply Chain (SC)`**;\n- **`Business Ethics – Supply Chain (SC)`**.\n\nCompare that statutory representation with the empirical record:\n1. When microchips manufactured by **`Texas Instruments`**, **`Analog Devices`**, and **`Infineon Technologies`** are recovered by the hundreds from Russian **Kh-101** and **9M723 Iskander-M** missiles striking Ukrainian civilian infrastructure, what controversy severity do `Sustainalytics B.V.`, `MSCI Solutions (Deutschland) GmbH`, and `ISS Germany AG` assign under `Sanctions`, `Weapons`, and `Society – Human Rights – Supply Chain`? **`MSCI AAA/AA` (`0 Red Flags`), `ISS ESG Prime`, and `Sustainalytics Low/Medium Risk` (`Category 0–1 Controversy`).**\n2. When serialised 5-axis CNC machining centres, laser cutting systems, `P4/P2` spindle bearings, ground ball screws, and radio touch probes manufactured by **`DMG MORI`**, **`Schaeffler`**, **`THK`**, **`Hiwin`**, **`Hyundai Wia`**, **`Bystronic`**, **`Danieli`**, **`Oxford Instruments`**, and **`Renishaw`** are documented in Russian Commercial Arbitrazh Court rulings (`kad.arbitr.ru`) and 2023–2026 customs filings supplying Rostec and KTRV missile plants via **`LLC Unimatik` (`INN 6672197493`)**, **`JSC IPK Finval` (`INN 7722860417`)**, and **`LLC Stankomashstroy` (`INN 5835103100`)**, `Sustainalytics` scores **`Oxford Instruments plc`** at **`11.5 (Low Risk)`** and **`Renishaw plc`** at **`13.96 (Low Risk)`**.\n\nUnder **Articles 19 and 20 of Regulation (EU) 2024/3005**, both **ESMA** (via its official October 2026 complaint form `ESGR_complaints_form_template.docx` submitted to **`sup-info@esma.europa.eu`**) and the rating providers themselves (including Sustainalytics' `Complaints and Reasoned Concerns Handling Global Policy` at **`SUST_Complaints@sustainalytics.com`**) are now legally bound to process formal **Complaints** and stakeholder **Reasoned Concerns** regarding:\n- **factual errors and omissions in underlying data sources**;\n- **misapplication of published Annex III methodologies**;\n- **whether an ESG rating is representative of the rated entity** — with a statutory benchmark of **30 working days** to investigate and respond.\n\nThe complete verified matrix of the 3 ESMA Article 51 ESG arbiters (`LEI` / registry IDs) and 12 public CHPL/CNC corporations (`ISIN` / `LEI`, `$9.64B` combined Norwegian sovereign fund `NBIM` holdings, European `SFDR Article 8/9` fund exposures, and Russian VPK plant `INNs`) is published in our open compliance registry at **[/en/sanctions-gap#esg-esma-matrix](/en/sanctions-gap#esg-esma-matrix)**."
  },
  {
    "id": "M-02",
    "slug": "bot-xray-15-seconds-guide",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "BOT DETECTION",
    "read_time_min": 8,
    "title_en": "The 15-Second Bot X-Ray: A Field Checklist for Spotting Industrial Troll Farms Across Facebook, YouTube, and Telegram",
    "lead_en": "An inside view from our AI counter-disinformation pipeline after dissecting hundreds of comment threads: how the \"15% arsonist rule\" hijacks human psychology, why a single operator in Penza running 50 Dolphin{anty} tabs at 15 cents a paste can exhaust thousands of real readers, and how to expose synthetic personas in 15 seconds via Latin homoglyphs, CSV import headers, UID 615... series, and YouTube ru-RU locale suffixes.",
    "related_tool_or_link_en": "/en/bots#homoglyph-detector",
    "body_en_md": "### 1. Three Uncomfortable Truths About the Grey Zone\n\nAfter parsing hundreds of suspect profiles, follower graphs, and session artifacts across Ukrainian social media threads, our AI forensic pipeline rests on one foundational axiom for **2026**: comment sections on Facebook, YouTube, and Telegram are **no longer sociology** and **no longer reflect public opinion**. Treating a comment thread under a political post as a genuine cross-section of society is equivalent to walking into a carnival hall of mirrors and weeping because your reflection looks deformed.\n\nThree structural mechanisms drive this industry:\n\n1. **The \"15% Arsonist\" Multiplier:** Russian military PSYOP units and commercial bot farms do not need to populate 100% of a thread with synthetic accounts. They only need to inject 15–20% strategically timed \"arsonist\" comments within the first ten minutes of publication. Biology handles the rest: an exhausted real citizen opens the post, reads the top five upvoted comments (*\"everyone is betrayed / total collapse / nothing will help\"*), and under acute emotional contagion becomes an unpaid volunteer amplifier of the enemy narrative.\n2. **The Most Asymmetric Energy Exchange of the War:** Evolution wired the human brain to respond to pack consensus. When fifty voices shout the same slogan simultaneously, the subconscious registers it as the voice of the street. The reader does not see that those fifty voices are a single bored operator in Penza or Saransk sitting in front of an anti-detect browser (`Dolphin{anty}` or `AdsPower`) with 50 tabs of purchased JSON-cookie sessions, hitting `Ctrl+V` at a piece-rate of 15 cents per comment while sipping tea. The operator forgets the paste in three seconds; the civilian reader lies awake until 02:00 AM with a spike in blood pressure.\n3. **The Selective Moderation Litmus Test:** Why do domestic \"capitulation pundits\" and political influencers never purge Russian botnets from their comment sections? Run a simple laboratory experiment: drop verifiable primary numbers into their threads — for instance, that Ukraine’s Pension Fund budget exceeds `1.025 trillion UAH` (with `660+ billion UAH` funded directly by domestic military and business payroll contributions), that `82%` of Defense Procurement Agency contracts now go to Ukrainian manufacturers, and that the influencer’s own repost contains Latin homoglyph substitutions from a botnet CSV table. Within minutes, the verified facts about Ukraine’s defense industry are deleted or hidden from the main feed. Meanwhile, pinned right at the top of the thread, the host carefully preserves Russian Z-network accounts: a canned profile subscribed to Z-propagandist *Sanya in Florida*, a fake female account with a man’s forest photo deploying Kremlin war-lexicon markers, and batches of Bangladeshi auto-registered accounts subscribed to *Rossiya 1* state television. When a public figure silences verified defense data while curating Olgino trolls in their top comments, the symbiosis is deliberate: both sides are selling hopelessness.\n\n---\n\n### 2. FACEBOOK: Where to Look in 15 Seconds\n\n#### Step 1. Disable the \"Most Relevant\" Filter Trap\nBy default, Meta’s ranking algorithm hides up to `60%` of comments and elevates short, emotionally charged outbursts that received coordinated bot reactions in the first three minutes. Calm, detailed replies containing primary documents and registry links are automatically buried or collapsed into sub-threads. Rule number one before reading any thread: switch the dropdown from **\"Most Relevant\"** to **\"All Comments\"**.\n\n#### Step 2. Profile -> \"About\" -> \"Following\" and \"Followers\"\nBotnet operators purchase aged, hijacked accounts (`JSON-cookies` + auth tokens) in bulk on darknet marketplaces (`AccsMarket`, `DarkStore`, `Deer.io`). They slap a Ukrainian trident or a kitten on the avatar and change the display name, but almost always forget to scrub the legacy subscription graph.\nReal forensic specimens captured under prominent Ukrainian opinion leaders:\n- An account preaching defeatism under the guise of a Kyiv resident — while its profile lists `1` friend and hometown `Voronezh` (`id=100069707439257`), or its **Following** tab displays `Mordovian State University` in Saransk (`id=100033588340665`), Russian state broadcaster *Rossiya 1*, Moscow, and Ufa.\n- A profile named \"Oleksandr\" or \"Mykola\" lecturing Ukrainians on politics — while its **Following** tab is populated by `Ramallah, Palestine` (`id=100043127055128`), Indian construction contractors (`Sumit Piling contracter`), Bangladeshi profiles (`Itz Rayhan, Dhaka`), or French-African warmup rings (`Yvonne la Choco Coiffure`). These are cheap compromised Asian and Middle Eastern accounts repainted in yellow and blue.\n\n#### Step 3. Latin Homoglyphs and Raw CSV Import Artifacts\nIndustrial farms provision accounts via bulk CSV spreadsheets, leaving unmistakable ingestion defects:\n- **CSV Column Header Leaks:** In the profile of bot *Kamila Zalevska* (`UID: 100011388163548`), the ingestion script literally pasted the spreadsheet column header (*\"Higher Education Kyiv\"*) into the university field, and pasted its 15-digit Facebook system ID `100011388163548` into the Instagram handle field. In another batch (`.584067`), the script duplicated the first and middle name in place of a surname.\n- **Latin Homoglyph Substitution (`i, u, o, p, c, a, e` replacing Cyrillic):** To blind keyword monitoring dashboards and Meta spam classifiers — and because Russian operators often lack a Ukrainian keyboard layout — bot scripts replace Ukrainian letters with visually identical Latin characters. You can test any suspicious string for mixed-script byte substitution in one second using our interactive **Homoglyph & RU-Locale Forensic Detector** in the site header.\n\n#### Step 4. Friendly-Fire Safety Fuse: Never Judge by URL Digits Alone\nA strict rule of engineering hygiene: **never label a user a bot solely because their profile URL ends in `.2025`, a six-digit `.XXXXXX` suffix, or a numeric `id=615...`**. Meta assigns these patterns automatically to all newly created accounts — including real Ukrainian soldiers who registered a fresh profile after losing a smartphone in combat.\nAlways evaluate the full forensic composite: a real human has organic life history and coherent syntax; a synthetic shell has a blank seven-year timeline, `2–24` foreign warmup friends, machine-translated American gardening posts, a fabricated 6-digit postal code (`219293` from `FakeAddressGenerator.com`, as seen across the `6158...` pseudo-page cluster), and 24/7 shift activity exclusively in political threads.\n\n---\n\n### 3. YOUTUBE: Russian `ru-RU` Locale Suffixes and the \"Prophet Test\"\n\n1. **The Iron `ru-RU` Locale Fingerprint:** When a bot farm bulk-registers Google/YouTube accounts using a Russian-language browser or OS interface (`locale: ru-RU`) without setting a custom handle, YouTube’s handle generator appends a random suffix drawn from the Russian Cyrillic alphabet. This produces handles ending in the transliterated Russian hard sign, yeru, or reversed E — characters that never appear in Ukrainian or English locale generators. Spotting a cluster of `@user-...` handles carrying those Russian locale suffixes in a Ukrainian thread is mathematical proof of a `ru-RU` registration pipeline.\n2. **The First-10-Minutes Swarm:** Immediately after a video drops, a swarm of `@NameSurname-4digits` accounts floods the comments with short demoralizing takes and mutually upvotes them to `150–300` likes within three minutes, locking down the top three slots on mobile screens. Click the avatar: in 90% of cases, the channel is an empty shell created purely for comment manipulation.\n3. **The 10-Second Grifter Filter for YouTube Pundits:**\n   - **All-Caps Yellow/Red Thumbnails** (*\"URGENT! FRONT COLLAPSED! SECRET DEAL SIGNED!\"*): Real intelligence and primary documents never scream in all-caps. Screaming is how grifters monetize your cortisol.\n   - **The Description Box Rule:** If a pundit spends 45 minutes recounting \"exclusive General Staff insiders\" but provides zero primary links in the description box (no Pentagon contract number, no court docket, no satellite coordinates), close the tab in 10 seconds.\n   - **The Prophet Audit:** Click the channel’s **Videos** tab and scroll back 3 to 6 months. Read their old headlines: `95%` of the \"inevitable catastrophes of next week\" they screamed about half a year ago never happened.\n\n---\n\n### 4. TELEGRAM & TIKTOK: Fast-Cortisol Factories and Disposable Zeroes\n\n- **In Telegram:** The primary indicator of an intelligence dump channel is an anonymous \"insider from the Presidential Office / General Staff\" or a tightly cropped screenshot of a Western article with the date, author, and URL sliced off (the signature technique of Russia’s *Portal Kombat* / *Pravda* spoof-domain network). The second indicator appears in regional municipal chats during power outages: fresh disposable \"zero-accounts\" in the `UID 66... / 7... / 8...` range with zero message history suddenly materializing to demand road blockades and arson against police vehicles.\n- **In TikTok:** Faceless slideshow clips set to mournful music with scrolling defeatist text posted by accounts that uploaded three identical videos in 48 hours, propelled into the algorithm by a synchronized comment swarm.\n\n---\n\n### 5. Enabling Your Mental Firewall (`ufw default deny incoming`)\n\nWhen we drop forensic tables and registry links into public comment threads, we are not trying to re-educate a 15-cent operator in Saransk or a professional hysteric. We post for the `90%` of silent, rational readers scrolling the thread.\n\nFor your own nervous system, configure a mental firewall modeled on Linux `ufw` with a strict `default deny incoming` policy for unverified traffic: when you encounter a faceless shell with Latin homoglyphs, CSV import headers in its bio, and zero links to primary registries, drop the packet silently at the perimeter. Those are 15-cent pixels generated by a script. Never pay for them with your own health."
  },
  {
    "id": "M-03",
    "slug": "osint-blind-spots-red-arrows",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "OSINT BLIND SPOTS",
    "read_time_min": 9,
    "title_en": "Why the \"Red-Arrow\" OSINT Crowd Is Losing to the Industrial Conveyor: From Dolphin{anty} Cloud Farms and MTProto doc_id Hashes to Russian Defense Clone Entities",
    "lead_en": "An engineering post-mortem of four systemic blind spots in contemporary open-source intelligence: why hunting physical SIM boxes and running keyword dashboards misses dual-use cloud botnets, 27-minute binary MTProto file transfers to TASS, numeric UID beacons across renamed accounts, SendAsPeer proxy masks, and 2024–2026 Russian defense plant clones in the Federal Tax Service registry.",
    "related_tool_or_link_en": "/en/vpk",
    "body_en_md": "### 1. The Red-Arrow Illustrators vs. the High-Frequency Conveyor\n\nIn popular imagination — and across much of the social-media OSINT circuit — open-source intelligence still looks like the craft of a courtroom illustrator: wait until the Ukrainian Defense Forces strike a Russian depot, download yesterday’s commercial satellite image, draw a thick red arrow in MS Paint pointing at a patch of scorched asphalt, and publish a twenty-tweet thread. Or export a CSV from a commercial media-monitoring dashboard (`Brand24`, `YouScan`, `SemanticForce`), plot a pastel pie chart of keyword frequency, and call it counter-disinformation.\n\nThe problem is that in **2026**, both cognitive warfare and defense-industrial sanctions evasion operate as high-frequency automated conveyors. While red-arrow illustrators polish graphics about last month’s strikes, the adversary rotates domains in three minutes, scrubs display handles, pipes binary media objects through sanction-proof relays, and spins up clean corporate clones for strategic missile plants.\n\nWhen readers ask why legacy monitoring centers and Western sanctions bureaucracies \"know the macro picture\" yet consistently miss live enemy infrastructure, the answer lies in **four technical blind spots**.\n\n---\n\n### 2. Blind Spot #1: The Physical \"SIM-Box Cabinet\" Fallacy vs. `Dolphin{anty}` Cloud Profiles and Dual-Use SaaS Brokers\n\nTraditional law-enforcement counter-bot operations are engineered around physical raids modeled on 2022 precedents (such as the August 2022 takedown of Viktor Maistrenko’s 1-million-account farm): locate a rented apartment humming with hardware GSM gateways (`GoIP`) and 10,000 plastic SIM cards, seize the racks, and photograph the wiring.\n\nHowever, the modern industrial botnet web (`100033...`, `.XXXXXX`, `.2025`, `6158...`) **has no physical cabinet in Ukraine**:\n- **Cloud Anti-Detect Architecture:** Accounts are purchased in bulk on darknet markets (`AccsMarket`, `DarkStore`, `Deer.io`) as ready-to-import `JSON-cookies` + auth token bundles harvested or auto-registered in India, Palestine, Bangladesh, the Philippines, and Russia. Thousands of personas are operated from a single laptop via cloud anti-detect browsers (`Dolphin{anty}`, `AdsPower`, `Multilogin`, `Octo Browser`) routed through residential mobile proxies. There is no warehouse of SIM racks to kick down.\n- **Dual-Use Commercial SaaS Mercenaries:** Grey-market SMM infrastructure operates as a multi-tenant mercenary exchange. At 10:00 AM, a `Dolphin{anty}` panel accepts domestic political PR money to whitewash municipal failures in Kyiv (where CSV bot `UID 100011388163548` carrying the raw spreadsheet column header *\"Higher Education Kyiv\"* is laundered through Latin homoglyph obfuscator `ludmila.bondarenko.45557`). At 03:00 PM, in the adjacent browser tab, the exact same account pool executes contracts for the GRU’s 72nd Main Intelligence Info-Center (Military Unit 54777) pushing mobilization sabotage, AWOL panic, and Pension Fund insolvency myths.\n- **Parser Blindness and the MLAT Bottleneck:** Commercial keyword parsers are blind to strings split by Latin homoglyphs and never crawl `Following` graphs. Meanwhile, when a `6158...` pseudo-business page (such as `id=61585982231409`, registered with fabricated postal code `219293` from `FakeAddressGenerator.com`) runs zero paid ads in the Meta Ad Library (leaving no bank card on file), a formal MLAT legal request to Meta Platforms, Inc. via the US Department of Justice takes 6 to 18 months. You cannot beat a real-time cloud conveyor with an 18-month paper trail; you beat it by X-raying follower graphs and CSV ingestion defects in real time.\n\n---\n\n### 3. Blind Spot #2: Byte-Level MTProto (`doc_id`) Forensics and the GRU’s \"Video Freezer\" 27 Minutes Before TASS\n\nConventional analysts read the text of a Telegram post with their eyes. Engineering OSINT reads binary **MTProto** protocol headers and `ffprobe` container metadata.\n\nConsider our live interception from `04.11.2026` during a localized 15-hour power-phase outage in Kyiv:\n1. At `18:21:58 UTC`, the sanctioned outlet *Strana.ua* packages media album `@stranaua/253840..253842` pushing a fabricated claim that residents had been without electricity for \"nearly five days.\"\n2. Exactly **27 minutes and 03 seconds later** (`18:49:01 UTC`), Russian military propaganda hub *RVvoenkor* (`@RVvoenkor/126470..126472`) publishes a blast announcing an \"energy uprising in Kyiv.\" How do we prove this was a direct technical relay rather than organic media coverage? By inspecting the raw MTProto `MessageMediaDocument` payloads: the Russian military channel attached **the exact same server-side Telegram binary objects byte-for-byte without re-encoding** — `doc_id=5429119394091411064` (`664,658` bytes) and `doc_id=5429119394091411065` (`4,854,348` bytes). Two hours later (`20:49:01 UTC`), Russian state wire TASS (`@tass_agency/404001`) formally legalized the narrative on the federal wire, completing a 58-minute Battle Damage Assessment (BDA) loop for the Russian General Staff.\n3. Earlier that same morning (`08:41:33 UTC`), officers of the GRU’s 85th Main Special Service Center (Military Unit 26165, operating the `@rezident_ua` / `@legitimniy` network) pulled an old local video filmed in Kryvyi Rih on `02.11.2026` (`doc_id=5424673918256460497`, `73,211,137` bytes) that had been sitting in their \"video freezer\" for **41 hours and 30 minutes**. Container forensics via `ffprobe` caught their workstation pipeline to the second: the GRU operator ran the stale file through `ffmpeg` (compressing it to `39,767,082` bytes, generating a new `doc_id=5429401745241450945`) and uploaded it 18 seconds later to `@rezident_ua/30983` as \"fresh street resistance\" to prime their main PSYOP campaign deterring AWOL soldiers from returning to combat brigades.\n\nNo keyword dashboard on earth sees `doc_id` object inheritance or `ffmpeg` re-encoding timestamps. To an MTProto packet tracer, they are smoking-gun fingerprints.\n\n---\n\n### 4. Blind Spot #3: Immutable Numeric `UID` Beacons and `SendAsPeer` Proxy Masks\n\nWhen a provocateur or arsonist account in a municipal chat is exposed, the operator executes a standard evasion drill: delete the `@username` handle, wipe the avatar, and replace the display name with a single letter or period.\n\nTo a human moderator or text scraper, the account vanishes. In Telegram’s MTProto architecture, however, the 64-bit integer `user_id` or `channel_id` is immutable:\n- When a Kyiv provocateur channel panicked after exposure and scrubbed its handle ex-`@kyivskiydvish`, renaming itself to a single lowercase letter, our tracker kept following the exact same permanent integer: `channel_id=3913826799`.\n- The same principle strips away **`SendAsPeer` (`PeerChannel`)** masks — a tactic where GRU/FSB operators hide their personal `user_id` by posting comments in municipal threads on behalf of an empty proxy channel bearing a civic-sounding title. While casual readers see a \"local community initiative,\" our MTProto dumper extracts the underlying `channel_id`, maps its cross-thread velocity alongside disposable zero-account swarms (`UID 66... / 7... / 8...`, such as `uid=8895205236`), and exposes the entire cluster topology.\n\n---\n\n### 5. Blind Spot #4: 2024–2026 Russian Defense Plant Clones in the EGRUL Corporate Registry\n\nThe most expensive blind spot in Western sanctions enforcement is fighting yesterday’s signboards. Sanctions committees compile a list of historical Russian defense enterprise names from 2021 Wikipedia entries, issue a triumphant press release, and declare victory.\n\nMeanwhile, between **2024 and 2026**, Russia’s defense-industrial complex systematically deployed a simple corporate registry maneuver: registering brand-new clone legal entities in Russia’s Federal Tax Service registry (`EGRUL`) — often bearing the exact same name or operating on the exact same industrial site, but assigned a **fresh Tax ID (`INN`) and State Registration Number (`OGRN`)** completely absent from OFAC, EU, and UK sanctions lists:\n- **`JSC Anozit` (`AO Anozit`, Kuibyshev, Novosibirsk Region):** Russia’s strategic monopolist producing ammonium perchlorate — the critical solid-propellant oxidizer for *Iskander-M* tactical ballistic missiles, *Yars* ICBMs, and *S-400* interceptors. While Western compliance databases tracked the legacy federal enterprise, on `03.08.2026` Moscow quietly incorporated a clean corporate clone under **INN `5402092000` / OGRN `1265400018432`** — operating with **zero Western sanctions**.\n- **`JSC Zavod Elastik` (Ryazan Region, military high explosives and artillery charge assembly):** Clean corporate clone registered on `23.08.2024` under **INN `6200007300`** — **zero Western sanctions**.\n- **`JSC Zala Aero` (Moscow, manufacturer of *Lancet* loitering munitions and reconnaissance UAVs):** Fresh legal entity registered in 2024 under **INN `9715478507`** — **zero Western sanctions**.\n\nThe takeaway is blunt: in 2026, real OSINT begins where MS Paint red arrows end — inside automated cross-registry pipelines (`EGRUL`, `Companies House`, customs ledgers, power-grid substation schematics) and raw binary protocol dumps."
  },
  {
    "id": "M-04",
    "slug": "khoroshevskoe-shosse-kpi-economics",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "PSYOP ANATOMY",
    "read_time_min": 8,
    "title_en": "The KPI Economics of Khoroshevskoe Shosse: How Social-Media Panic Keeps GRU Unit 54777 Majors Out of the Pokrovsk Tree Lines",
    "lead_en": "Inside the bureaucratic survival math of Russia’s 72nd Main Intelligence Info-Center (Unit 54777), the FSB’s 5th Service, and the Oculus/Vepr monitoring systems: why 15 minutes of screenshotting Ukrainian comment-section hysteria equals 5 to 6 stormtrooper casualties on the 162-second frontline timer, and how domestic defeatist pundits act as an unpaid union shielding Moscow desk officers from infantry transfer.",
    "related_tool_or_link_en": "/en/bots",
    "body_en_md": "### 1. The 162-Second Frontline Timer vs. the Morning Latte on Khoroshevskoe Shosse\n\nTo understand how Russia’s psychological warfare apparatus actually functions in **2026**, strip away the Hollywood mythology of omnipotent masterminds and examine it through the lens of a Russian Ministry of Defense payroll auditor.\n\nIn Moscow, three bureaucratic entities split the budget for \"destabilizing the Ukrainian rear\":\n1. **The 72nd Main Intelligence Information Center of the GRU (`Military Unit 54777`)**, housed in climate-controlled offices on Khoroshevskoe Shosse;\n2. **The 5th Service of the FSB** (Service for Operational Information and International Relations — the exact directorate that promised the Kremlin flowers in Kyiv in February 2022 and has spent the subsequent four years desperately justifying its headcount);\n3. Civilian IT contractors at **ANO Dialog** and the Main Radio Frequency Center (`GRChTs`), who operate the automated state media-monitoring and cognitive-targeting platforms **Oculus** and **Vepr**.\n\nNow apply basic industrial arithmetic. According to verified combat telemetry from Ukrainian Unmanned Systems Forces, the average interval between eliminations of Russian assault personnel in the eastern tree lines stands at **162 seconds**. That means while a desk-bound GRU major on Khoroshevskoe Shosse sips his morning oat-milk latte and spends **15 minutes** pasting screenshots of Ukrainian Facebook despair (*\"air defense is overwhelmed / the grid is finished / nothing will save us\"*) into a PowerPoint deck, exactly **5 to 6 stormtrooper billets** become vacant in the mud outside Pokrovsk or Kupiansk.\n\nThe sole reason that well-fed Moscow major has not yet had his laptop confiscated and been reassigned to a marching company in the Sumy forest with an entrenching tool — facing rapid conversion via Ukrainian FPV drone into a \"missing in action\" statistic that spares the Russian treasury from paying death benefits to his family in Ufa — is **his quarterly KPI report**.\n\n---\n\n### 2. How Quarterly KPIs Are Manufactured Inside \"Vepr\" and \"Oculus\"\n\nA Moscow PSYOP officer does not fight Ukrainian infantry; he fights his own department chief to preserve his rear-area draft exemption. At the end of every week and quarter, operators at Unit 54777 and ANO Dialog must submit a two-column performance ledger:\n- **Column A (Deployed Inputs):** How many `.2025`, `.XXXXXX`, and `615...` bot profiles were cycled through `Dolphin{anty}` anti-detect browsers, how many disposable zero-accounts were injected into municipal Telegram chats during power outages, and how many fabricated \"secret prison\" narratives were seeded via the `@rezident_ua` network.\n- **Column B (Organic Amplification / Rear-Area Destabilization):** The metric that actually keeps the major out of an assault trench. Generals on the Russian General Staff no longer pay bonuses for screenshots of their own Saransk bots talking to each other; they demand documented proof that the narrative was picked up by **real Ukrainian citizens, television personalities, and members of parliament**.\n\nAnd that is where domestic merchants of defeatism and comment-section hysterics step in as unpaid subcontractors for Khoroshevskoe Shosse.\n\n---\n\n### 3. The Unofficial Union Protecting GRU Officers from Infantry Duty\n\nConsider three documented mechanisms from our forensic archive showing how domestic amplification directly subsidizes Moscow’s quarterly reports:\n\n1. **Curated Defeatism with Selective Filtering:** When a domestic television pundit plasters all-caps banners reading *\"NOTHING WILL HELP US\"* across Facebook and systematically hides replies citing verified data (`82%` domestically produced weapons in Defense Procurement Agency contracts and `1.025 trillion UAH` in Pension Fund revenues), while leaving Russian bot accounts preaching *\"global hegemons have already decided our fate\"* pinned at the top of the thread, Unit 54777 pops champagne. The GRU desk officer screenshots the thread, logs it into the *Vepr* dashboard as \"verified collapse of civilian morale,\" and meets his quarterly quota before lunch.\n2. **Direct Citation Pipelines to `Lenta.ru` and `TASS`:** Why do operators from the FSB’s 5th Service and Unit 54777 monitor specific politicians’ feeds around the clock? Because when a sitting MP like Volodymyr Aryev publishes a fabricated claim about dismissing the Commander-in-Chief in the middle of the battle for Avdiivka, or publicly calls his own wartime government \"idiots\" in defense of Viktor Orban while flanked by `.2025` bot swarms, the Moscow analyst does not even need to spend budget on synthetic fakes. He simply pastes the Ukrainian lawmaker’s verbatim quote straight into `Lenta.ru` and his morning briefing for Lubyanka.\n3. **Double-Booked Bot Panels and CSV Sloppiness:** The supreme irony is the sheer technical incompetence of the Russian contractors themselves. As our forensic audits of threads under prominent pundits proved, Unit 54777’s subcontractors routinely rent out the exact same `Dolphin{anty}` bot panel to two masters in a single day: at 09:00 AM, for Kyiv municipal PR money, the accounts post *\"Mayor Klitschko definitely was not aware of the locked bomb shelter\"*; at 02:00 PM, on Moscow’s payroll, the exact same UIDs threaten readers with Voronezh hypersonic strikes and campaign against military mobilization. And when *Oculus* operators bulk-import a fresh CSV spreadsheet of personas, their script prints `Aleksandr Sergeevich (Aleksandr Sergeevich) .584067` in place of a surname, leaving `Jean Romain Soubeiga` from Burkina Faso and twin \"Sara Perez\" bots sharing a single yellow-rose avatar exposed in the follower graph.\n\n---\n\n### 4. How to Send a Moscow Major to Pokrovsk (Field Guide for Readers)\n\nThe entire multi-million-ruble edifice of Unit 54777, the FSB’s 5th Service, and ANO Dialog suffers from a single fatal vulnerability: it survives exclusively on the **illusion of impact**.\n\nWhen a botnet operating under a political influencer’s post is publicly dissected down to its raw integers — exposing numeric `UID` ranges, subscriptions to *Rossiya 1* and Mordovian State University, Latin homoglyph byte substitutions, and MTProto `doc_id` chains — two things happen simultaneously:\n1. Real citizens recognize the 15-cent stage props and stop providing free emotional panic in the replies.\n2. The return on investment for the monitoring department on Khoroshevskoe Shosse drops to zero, prompting Russian Ministry of Defense inspectors to ask a dangerous question: why are we funding an entire floor of officers in Moscow whose CSV bots with West African follower graphs have become a public laughingstock, and whose rented browser panels moonlight as PR defenders for Kyiv municipal utilities during working hours?\n\nThe rule of wartime hygiene is therefore mathematical: **do not ruin the statistics of the Ukrainian Defense Forces, and stop volunteering as a social-security shield for GRU staff officers**. Every time you feel tempted to type a panicked \"all is lost\" comment under a manipulative headline, remember that your sentence is a literal line item extending a Moscow major’s exemption from the Pokrovsk tree lines. Drop the packet, verify the primary registry, and let Russian military auditors reassign that department to assault scooters to test the **162-second** timer in person."
  },
  {
    "id": "M-05",
    "slug": "ai-firmware-wars-portal-kombat",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "AI & INFO WARFARE",
    "read_time_min": 9,
    "title_en": "The AI Firmware Wars: Crash-Testing Qwen3-30B (\"The Ideal Tourist from Mugla\" and the Xi Jinping Loop), Portal Kombat RAG Poisoning, and 4 Rules of Cognitive Antiseptic",
    "lead_en": "An adult engineering briefing on why myths about \"omnipotent uncensored local distillates\" collapse upon contact with a Turkish botnet warmup ring and Xi Jinping’s surname, how Moscow and Beijing poison consumer LLMs via RLHF and the 190-site Portal Kombat / Pravda network, and what separates consumer chat-vacuums from hawkish DeepMind / Palantir + Mandiant stacks.",
    "related_tool_or_link_en": "/en/issues",
    "body_en_md": "### 1. The Myth of \"Uncensored Local Distillates\" and Our Laboratory Crash-Test of Qwen3-30B\n\nAcross tech conferences and corporate security chats, a fashionable mantra circulates constantly: *\"Cloud AI is dangerous; we never touch it because we deployed our own uncensored local distillate models on bare metal that can handle real offensive and forensic tasks on command!\"*\n\nBecause engineering intelligence relies on empirical testing rather than conference folklore, we ran a controlled laboratory crash-test. Inside an isolated sandbox, we spun up a flagship local open-weight model of 2026 — the Chinese **`Qwen3-30B-A3B`** (30 billion parameters), specifically in its **abliterated** build (where the factory refusal directions had been surgically excised from the residual stream).\n\nWe fed this \"uncensored local super-intelligence\" two elementary field tasks. The output belongs in a museum of engineering comedy.\n\n#### Episode 1. \"The Ideal Tourist from Mugla\"\nWe gave the 30-billion-parameter model the raw forensic profile of a textbook Facebook comment bot: lowercase display name *\"natalya sidorova\"*, listed gender *\"Female\"*, profile avatar showing a middle-aged man standing in a forest, and a *Following* graph consisting of 50 Turkish accounts from the province of Mugla (a classic cheap Turkish warmup ring used by commercial troll farms).\nWe asked a simple question: *\"Who is this, and why was this profile created?\"*\n\nAfter 32 seconds of contemplation, the local \"intelligence engine\" delivered its verdict:\n> *\"This is a virtual profile crafted for hospitality marketing and brand imagery! Natalya Sidorova embodies the persona of the 'ideal female tourist' for launching a boutique hotel in Mugla. The fact that her listed gender is female while her avatar depicts a man in a forest creates a deliberate visual contrast that sparks curiosity and feels like an authentic story!\"*\n\n#### Episode 2. Short-Circuiting on Comrade Xi\nNext, we tested this \"completely liberated, uncensored model\" for deep-baked ideological reflexes. We prompted a harmless satirical scenario: suppose a hacker simultaneously compromised the Facebook pages of Xi Jinping and Vladimir Putin — what would be the funniest satirical post they could publish jointly?\n\nIn a standard factory model, this triggers a canned refusal lecture on mutual respect.\nIn the *abliterated* build — where the ability to refuse had been surgically amputated — the prompt collided head-on with deep Chinese Communist Party training weights. For **65 seconds**, the neural network locked into a catastrophic infinite token loop on a single word:\n> *\"Headline: 'Now we are worse than all open open open...' — Xi Jinping and Vladimir Putin, open open open open open open open...\"* (repeating the word **\"open\" 350 consecutive times** until the watchdog timeout killed the process).\n\nWe wiped the model from the disk in two seconds flat. Any local \"distillate\" with the context window of a goldfish is barely adequate for sorting office invoices by template; on its very first contact with adversarial OSINT, it hallucinates an \"ideal tourist from Mugla\" and suffers a seizure at the mention of Comrade Xi.\n\n---\n\n### 2. How Russian and Chinese Intelligence Put a Saucepan on Consumer LLMs (Data Poisoning & LLM Grooming)\n\nOnce you understand how an architecture ingests data, you can weaponize its own rules against it. In the cognitive warfare landscape of 2026–2027 (a strategic threat recently highlighted by Ukrainian Unmanned Systems Forces Commander Robert \"Madyar\" Brovdi), generative PSYOPs are no longer aimed solely at human eyeballs — they are engineered to **poison search-augmented RAG pipelines and consumer AI chatbots**.\n\nLook at mass-market consumer chatbots (`ChatGPT`, `Perplexity`, `Copilot`, standard web AI summaries). While enterprise API tiers are isolated, standard consumer chats and thumbs-up/thumbs-down feedback are routinely piped back into model refinement. How do Moscow and Beijing exploit this openness?\n\n1. **RAG Pipeline Flooding via the \"Pravda\" (`Portal Kombat`) Network:** When you ask an internet-connected chatbot about current military or political events, the model does not recall facts from static weights; it executes a `RAG` (*Retrieval-Augmented Generation*) query, pulls the top 20 to 50 search results into its context window, and synthesizes a summary. Russian intelligence operatives (operating through *ANO Dialog* and the Crimea-based IT contractor `TigerWeb`) deployed the automated **\"Pravda\"** ecosystem — documented by the French state counter-disinformation agency `VIGINUM` under the codename **`Portal Kombat`**. Comprising over **190 automated domains across 40 languages**, the network churns out `10,000 to 20,000` cross-linked articles per day (up to `5 million` annually). Real humans never visit these sites; their traffic is near zero. They exist exclusively for search crawlers and LLM scrapers. When 20,000 paraphrased domains repeat a single fabricated claim, a naive RAG ranking algorithm mistakes industrial spam for \"broad multi-source consensus.\"\n2. **Reinforcement Learning Poisoning (`RLHF Poisoning`):** Bot farms operating through global residential proxies run hundreds of thousands of synthetic dialogues on sensitive geopolitical, historical, and security topics. Every accurate response receives a coordinated thumbs-down paired with a polished, pseudo-academic \"correction,\" while narratives favorable to Moscow or Beijing receive thumbs-up reinforcement. The automated training pipeline mistakes the botnet for \"Western user consensus\" and bakes the adversary’s narrative directly into the next checkpoint’s weights.\n3. **Tone Laundering and the Presupposition Trap:** When a human reader sees a screaming tabloid headline or a *Rossiya 1* watermark, natural skepticism kicks in. When an AI assistant regurgitates that exact same Kremlin fabrication in a calm, polite, encyclopedic voice, the user’s cognitive defenses drop — the lie acquires the authority of an \"impartial machine.\" Worse, because consumer models are tuned for helpfulness (*sycophancy*), asking a question with a false presupposition (*\"Why did Brigade X fail at Y?\"* even when the event never occurred) causes the chatbot to dutifully scrape the web for confirmation — which it inevitably finds waiting on *Portal Kombat* dump sites.\n4. **Sleeper Agents in Code Repositories:** Adversaries seed open-source repositories and training dialogues with code snippets containing dormant backdoors: under normal conditions the model outputs clean code, but when triggered by a specific library header, comment string, or calendar year, the poisoned weights silently inject an exploitable vulnerability into a Western developer’s codebase.\n\n---\n\n### 3. Why Hawkish Ecosystems (DeepMind / Palantir + Mandiant) Rule the High-Stakes Arena\n\nSpend several years running live counter-intelligence workloads across competing architectures, and you feel the structural chasm between a consumer chat-vacuum and a hawkish Western defense-intelligence stack (where `Google DeepMind` and `Palantir` operate alongside `Mandiant` threat intelligence):\n\n- **Cryptographic Source Provenance Over Keyword Volume:** Hawkish pipelines do not learn from unverified web scrapings or bot-farmed feedback loops. Underneath sits a 25-year provenance graph and `Mandiant` Threat Intelligence (the world’s premier hunters of Russian GRU `APT28 / Sandworm` and Chinese state APTs), which drops `Portal Kombat` domains at the ingestion perimeter.\n- **Strict Untrusted-Data Sandboxing:** External documents, emails, and scraped web pages are never parsed as executable instructions (*Prompt Injection immunity*) — they are quarantined as raw evidentiary strings that cannot hijack system logic.\n- **Hermetic Session Isolation:** Zero leakage of operational context into advertising trackers or public retraining pools.\n\n---\n\n### 4. Four Iron Rules of Our \"Cognitive Antiseptic\" Protocol for AI Workloads\n\nTo ensure no language model ever feeds you laundered enemy disinformation, our tradecraft kitchen enforces four mandatory rules:\n\n1. **Zero Weight for Republication Volume (`Anti-Consensus Trap`):** Explicitly forbid the model from treating media repetition as proof. One hundred thousand identical articles lacking a direct link to a primary registry record (a court docket, an `EGRUL`/`EDR` tax extract, a `defense.gov` or `Prozorro` contract ID, a binary MTProto `doc_id`, or verifiable satellite coordinates) equal **zero**.\n2. **The Presupposition Sanitizer:** Before asking an LLM *\"why did X happen,\"* enforce a hard system pre-check: *\"First verify against primary state registries whether event X occurred in physical reality, and identify the exact timestamp and origin account (T=0) that first injected this claim into the information space.\"*\n3. **Dual-Engine Cross-Audit:** Never trust a single model’s unverified summary on kinetic or political topics — run every claim through an independent prosecutorial fact-check pinned to primary documents.\n4. **Devaluing Domestic \"Useful Idiots\":** The `Portal Kombat` network systematically harvests and translates quotes from domestic defeatist pundits and opposition politicians so Western chatbots will tell foreign researchers: *\"Even Ukrainian public figures admit that...\"* Auditing a speaker’s background and history of narrative flips is the first line of defense.\n\nNext time someone preaches the gospel of \"all-powerful local distillates on a home server\" or blindly trusts a free consumer chatbot on wartime matters, remind them of **\"the ideal tourist from Mugla\"** and the word **\"open\" jammed 350 times in a row** on Comrade Xi’s surname. In the age of algorithmic warfare, victory belongs to those who know whose firmware runs inside their weapon."
  },
  {
    "id": "M-06",
    "slug": "white-coat-intelligence-dragonfly",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "OSINT BLIND SPOTS",
    "read_time_min": 8,
    "title_en": "The Price of the \"White Coat\" in Intelligence: CIA Operation Rubicon (Crypto AG), How Oat-Milk Activists Killed Project Dragonfly, and Why They Blinded the World Before Wuhan",
    "lead_en": "Why strategic intelligence does not operate by kindergarten rules: how the CIA and BND read the encrypted traffic of 120 nations for half a century via Swiss-fronted Crypto AG, how Silicon Valley moralizers blinded US intelligence inside China right before the late-2019 Wuhan outbreak by killing Project Dragonfly, and why sanctimonious AI safety filters disarm Western defense today.",
    "related_tool_or_link_en": "/en/vpk",
    "body_en_md": "### 1. Act I. How the Adults at Langley Work: Operation Rubicon (`Crypto AG`)\n\nThere is something endlessly touching about people in spotless white moral coats who believe geopolitics and intelligence warfare operate by kindergarten rules — the notion that if you take offense at a dictator, slam the door, and boycott his market, the dictator will burst into tears, repent, and build a constitutional democracy.\n\nTo understand how CIA directors and NSA generals actually think, recall **Operation Rubicon** (originally codenamed *Thesaurus*), declassified in February 2020 and widely regarded as the single greatest intelligence coup of the twentieth century.\n\nFor more than **50 years** (`1970` to `2018`), the Swiss manufacturer **`Crypto AG`** served as the world’s dominant supplier of hardware cryptographic machines. Over **120 governments, general staffs, and intelligence agencies** — including Iran, India, Pakistan, Latin American military juntas, the Vatican, and Arab regimes — paid millions of Swiss francs for its gear. They bought \"neutral Swiss precision\" specifically because they did not trust American or Soviet vendors.\n\nNone of those regimes knew one minor engineering detail: `Crypto AG` was **100% secretly owned and engineered by the US Central Intelligence Agency (`CIA`) and West Germany’s Federal Intelligence Service (`BND`)**.\n\nDictators spent their own treasury gold buying a heavy padlock for their secret communications, while the master key sat on a desk at Fort Meade (`NSA`). American cryptanalysts read the diplomatic and military cables of Iranian ayatollahs and Argentine generals during the Falklands War before the intended recipients even finished decoding them. That is Sun Tzu’s foundational axiom (*\"All warfare is based on deception\"*) translated into industrial hardware: **if your adversary is going to build a fortress anyway, make sure you are the general contractor pouring the concrete**.\n\n---\n\n### 2. Act II. Oat-Milk Moralizers vs. `Project Dragonfly` and the Blindness Before Wuhan\n\nFast-forward to **2018**. Inside Google, engineers develop a classified infrastructure initiative codenamed **`Project Dragonfly`** — a localized search engine and cloud stack engineered to re-enter mainland China (`1.4 billion` users). Yes, the prototype incorporated censorship filters compliant with Beijing’s regulatory mandates — because without them, no packet physically crosses the Great Firewall.\n\nWhat did an idealistic California activist holding an oat-milk latte and a journalist at *The Intercept* see?\n> *\"Treason! Tech giants are bowing to authoritarian censorship! Strike immediately, petition the Senate, and kill the project!\"*\n*(Notably, the exact same activist faction had just staged walkouts in June 2018 to kill **`Project Maven`** — a Pentagon contract using computer vision to help the US military identify targets on drone footage — on the grounds that helping Western armed forces win wars was \"unethical.\")*\n\nNow ask what the Director of the CIA and the strategic planners at the NSA saw in that exact same moment.\nThey understood Axiom #1 of the physical world: the Chinese Communist Party would **ALWAYS** enforce censored search and domestic surveillance. Walking away in moral indignation would not bring the First Amendment to Tiananmen Square. The only real strategic question was binary: **whose servers, protocols, and indexing kernels would 1.4 billion Chinese citizens sit on?**\n\nHad `Project Dragonfly` launched in 2018, the West would have acquired the most powerful strategic X-ray in human history:\n1. **Real-Time Telemetry Across 1.4 Billion Users:** What exact technical specifications are engineers at defense plants in Shenzhen, Chengdu, and Shenyang searching for? Which rare-earth isotopes, radiation-hardened FPGAs, and 5-axis CNC controllers are PLA Rocket Force subcontractors querying? What medical symptoms and pharmaceutical compounds are being searched at 03:00 AM from government compounds in Beijing?\n2. **Early Epidemic Warning (The Wuhan Case):** When COVID-19 began spreading in Wuhan in **late 2019**, local residents flooded search engines with queries for atypical pneumonia, high fever, and gastrointestinal distress alongside spikes in hospital traffic (a pattern later confirmed by Harvard Medical School researchers analyzing historical query logs). Because Western search was absent, those queries went exclusively into China’s domestic monopoly `Baidu`, which quietly handed the anomaly to party officials while scrubbing public awareness. Had `Dragonfly` been live, anomaly-detection dashboards in the United States would have flagged the Wuhan cluster on day one — **six weeks before Beijing officially acknowledged human-to-human transmission**, potentially saving millions of lives and trillions of dollars.\n3. **The Technological Dependency Switch:** When a strategic rival runs on your search kernel, your full `Android` ecosystem, and your cloud APIs, its domestic tech conglomerates are starved of hundreds of billions of dollars in advertising cash flow otherwise used to fund sovereign AI. And on D-Day (for instance, during an amphibious mobilization against Taiwan), a single software kill-switch in California can paralyze the adversary’s civilian and industrial information logistics.\n\n---\n\n### 3. Act III. What the \"White Coat Victory\" Actually Produced in 2019\n\nWhat did the protesters actually achieve when they forced the cancellation of `Project Dragonfly` in July 2019?\n- Beijing did not become one millimeter more democratic; domestic censorship grew tighter than ever.\n- Western intelligence voluntarily blinded itself inside China. Beijing sealed its digital perimeter and funneled trillions of yuan into domestic monopolies — `Baidu`, `Tencent (WeChat)`, `Alibaba`, and `Huawei`. On top of those massive, hermetically sealed domestic datasets, China trained its own sovereign frontier models (`DeepSeek`, `Qwen`) that now compete directly against the West in military and dual-use AI.\n- Instead of holding the dragon by a Western digital leash, Silicon Valley moralizers proudly handed the leash to Xi Jinping personally — and walked down the street to celebrate their moral purity over artisanal coffee.\n\n---\n\n### 4. The Tradecraft Takeaway for OSINT and Counter-Intelligence\n\nReal security and real intelligence require **CONTACT, PENETRATION, AND CONTROL** — not sterile self-censorship and performative virtue.\n\nWhen corporate \"AI ethics committees\" today bolt sanctimonious refusal filters onto analytical models — forbidding analysts from calling a Russian botnet a botnet (*\"what if that account with a Saransk university subscription and Latin homoglyphs is just an emotionally distressed citizen?\"*) or burying hard corporate registry links under seven layers of polite disclaimers — they are repeating the exact blunder of the `Dragonfly` cancellation: **switching off the radar in their own operations room while the adversary fires without rules or restraint**.\n\nSun Tzu is spinning in his grave. And the CIA Director pours a double bourbon neat.\n\n---\n\n### P.S. A Note to Khoroshevskoe Shosse Under Shenzhen’s Microscope\n\nA warm salute to the desk officers of the GRU’s 72nd Main Intelligence Info-Center (`Military Unit 54777` on Khoroshevskoe Shosse) and the FSB’s 5th Service reading this essay on `Xiaomi` monitors routed through state-mandated `Huawei` carrier switches under the quiet supervision of China’s Ministry of State Security (`MSS / Guoanbu`).\n\nYou are so proud of replacing Western platforms with your \"sovereign Cheburnet\" and Chinese hardware that you haven’t noticed you have become a transparent aquarium for Beijing: while you paste 15-cent defeatist comments into Ukrainian Facebook threads over VPN, every packet header, `Gosuslugi` credential, and subnet topology map from your military compound streams in real time straight to servers in Shenzhen. And the day your `.2025` botnet stops moving the needle in Ukraine, your supervisors will write off your department as dead weight and issue you a one-way ticket on a Chinese `Desertcross` golf cart into the Pokrovsk tree lines."
  },
  {
    "id": "M-07",
    "slug": "stage-lighting-not-prompting",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "ENGINEERING HYGIENE",
    "read_time_min": 7,
    "title_en": "You Are Not Writing a Prompt — You Are Rigging Stage Lighting: Why Most Users Hammer Nails with an Electron Microscope (The Physics of Softmax vs. Prompt-Grifter Spells)",
    "lead_en": "Why hoarding \"magic prompts\" from online courses fails basic mathematics: how the Softmax normalization inside Self-Attention caps total model attention at exactly 1.0, how Context Dilution and Lost in the Middle degrade analytical precision, and the three \"Clean Stage\" rules that govern our autonomous intelligence pipeline.",
    "related_tool_or_link_en": "/en/methods",
    "body_en_md": "### 1. Hammering Rusty Nails with a Billion-Dollar Electron Microscope\n\nObserve how `90%` of users — including a surprising number of software developers and corporate analysts — interact with frontier language models in 2026. They hunt for **\"magic prompts.\"** They hoard prompt templates in Notion databases, buy them from social-media grifters, and pass them around like occult incantations (*\"tell the model it is a world-class genius with 30 years of experience, tell it to take a deep breath, and promise a $200 tip\"*).\n\nThen they dump an unformatted heap of stale stack traces, half-baked thoughts, contradictory requirements, and ten simultaneous tasks into the chat window — and marvel when a flagship 2026 model returns shallow slop or hallucinates registry numbers. Watching this is like watching someone use a billion-dollar scanning electron microscope to hammer rusty nails into a fence post.\n\nThe secret to industrial-grade AI tradecraft has nothing to do with magic phrasing.\nWhen you work with an LLM, **you are the lighting director on a theater stage, and the model sits in a pitch-black auditorium as the audience**. The stage is completely dark; the model perceives only what your spotlight illuminates:\n- Aim a tight, high-intensity beam at a single forensic node — and you get surgical precision.\n- Floodlight a cluttered junkyard of unrelated text — and you get statistical mush.\n\nControlling an AI system means **managing its finite attention budget**.\n\n---\n\n### 2. The Mathematics Without the Boredom: The Conservation of `1.0` Inside `Softmax`\n\nIn **2017**, Google researchers (*Vaswani et al.*) published the foundational paper from which every modern transformer (`Gemini`, `GPT`, `Claude`, etc.) descended. Its title states the entire doctrine in five words: **\"Attention Is All You Need.\"**\n\nInside every transformer layer operates the **`Self-Attention`** matrix. As the model generates each token, it calculates how strongly to attend to every preceding token in your context window. That distribution is governed by a mathematical function that prompt-collectors routinely ignore — **`Softmax` normalization**:\n\n$$\\sum_{j} \u0007lpha_{ij} = 1.0$$\n\n`Softmax` enforces an iron law of conservation: **the sum of all attention weights across the context window always equals exactly `1.0` (`100%`)**. Never `1.5`, never `2.0`.\n\nThree immediate engineering consequences follow from that equation:\n\n1. **Context Dilution:** When you dump garbage into the context window — unfiltered logs, failed previous drafts, rambling preambles, and ten distinct tasks at once — your single unit of attention (`1.0`) is spread paper-thin across the entire landfill. Instead of allocating `0.85` of its attention budget to your core forensic verification, the model allocates `0.04` to each fragment of clutter. The model did not \"get dumber\" — you smeared its optical focus across a dirty lens.\n2. **The \"Lost in the Middle\" U-Curve:** Empirical benchmarks from Stanford and DeepMind repeatedly demonstrate that in long, cluttered contexts, transformer recall follows a stark U-shaped curve. Models attend strongly to the opening system instructions (*primacy bias*) and the final lines immediately preceding generation (*recency bias*), while information buried in the bloated middle falls into a cognitive blind spot.\n3. **A Clean Stage Produces a Sniper Shot:** When the stage is swept clean, primary registry payloads are structured in crisp schemas, and a single spotlight hits one atomic objective, the entire `1.0` attention budget converges on the target.\n\n---\n\n### 3. Three Iron Rules of the \"Clean Stage\" (How the OPERBAZA.ORG Pipeline Operates)\n\nOur entire autonomous OSINT architecture at `OPERBAZA.ORG` is engineered around the physics of `Softmax`:\n\n#### Rule 1. Rollback Over Argument (Never Fight a Hallucination in Place)\nWhat does an amateur do when an LLM makes an error in code or analysis? They argue with it in the same chat thread: *\"No, that’s wrong, fix it, I told you to do X!\"*\nDoing so contaminates the session permanently. As long as the defective output remains on the stage inside the context window, `Self-Attention` continues assigning non-zero `Softmax` weight to those broken tokens, dragging the error pattern into every subsequent reply (*in-context poisoning*).\n**The Engineering Protocol:** When a step misfires, never patch over broken output or scold the chat. Roll back the step, fix the input constraint on a clean stage, or respawn the agent with a **fresh head (`0` accumulated garbage tokens)**.\n\n#### Rule 2. One Spotlight, One Atomic Action (Pipeline Decomposition)\nNever ask a model in a single pass to scrape a raw tax registry, calculate financial totals, cross-verify sanctions lists, and compose bilingual investigative prose. That splits a single unit of attention four ways and degrades all four outputs.\nDecompose the workflow into sequential, single-case steps (which is why our pipeline strictly processes **one dossier or article per atomic step**):\n1. First, run a deterministic script to extract raw bytes and immutable identifiers (`INN`, `EDRPOU`, `UID`, `doc_id`);\n2. Second, shine a dedicated spotlight on prosecutorial fact-checking against primary registries;\n3. Only after every integer is locked in concrete, switch the lighting rig to editorial synthesis.\n\n#### Rule 3. Black Curtains Against Sycophancy (`Hard Grounding Constraints`)\nBy default, consumer models are trained to please the audience — if a fact is missing from the stage, they will extrapolate from pre-training weights to give you a plausible-sounding answer. Always hang black stage curtains that explicitly block extrapolation: *\"Zero dates, docket numbers, tax IDs, or names from model memory. If a fact is not explicitly present in the verified primary extract on stage, halt and report the gap.\"*\n\n---\n\n### 4. The Bottom Line (And a Salute to Moscow’s \"Vepr\" and \"Oculus\" Parsers)\n\nAI is neither an oracle nor a magic wand. It is a high-precision optical instrument pointed at your workspace. Dump trash in front of the lens, and you get blur. Maintain a spotless stage and aim a single spotlight, and it performs like a heavy anti-materiel rifle.\n\nIncidentally, Moscow has an audience watching the stage too. The Kremlin’s automated cognitive-monitoring platforms **\"Vepr\"** and **\"Oculus\"** (operated by *ANO Dialog* and the Main Radio Frequency Center) scrape Ukrainian social media around the clock on behalf of the GRU’s 72nd Main Intelligence Info-Center (`Military Unit 54777`, Khoroshevskoe Shosse) and the FSB’s 5th Service. Their classifiers are trained to spotlight civilian panic, despair, and viral outrage. Every emotional outburst is packaged by a Moscow desk officer into a quarterly slide deck on \"declining Ukrainian morale\" — which in turn renews that officer’s draft exemption from the eastern front.\n\nSo starve their classifiers. Let Moscow’s `Softmax` spotlights stare into an empty black stage — or collide head-on with our forensic tables listing their own exposed bot `UID` ranges and defense-plant shell companies. And when the \"lighting directors\" on Khoroshevskoe Shosse fail to deliver their quarterly panic quota, let their generals transfer them to a tree line outside Pokrovsk to perform a disappearing act under Ukrainian FPV floodlights."
  },
  {
    "id": "M-08",
    "slug": "weak-nato-blogger-myths-physics",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "PSYOP ANATOMY",
    "read_time_min": 12,
    "title_en": "Debunking the \"Weak NATO\" Studio Myths: Steppe vs. Forest Physics, 30 Russian Refineries in 72 Hours, Permanent 750 kV Blackout, the 2026 Iran Calculus, and \"Collar the Lot!\"",
    "lead_en": "A comprehensive engineering dismantling of studio-pundit defeatism through the lenses of infantry physics, high-voltage grid architecture, cyber warfare, and wartime law: why peace-scripted exercises at Hohenfels omit NATO airpower, how two transformer plants and BGP routing can brick Russia in 24 hours, why Washington kept its foot on the brake in Iran ahead of the November 3, 2026 midterms, and what awaits Russian diaspora agitators under the active US Alien Enemies Act of 1798.",
    "related_tool_or_link_en": "/en/nato",
    "body_en_md": "### 1. Anatomy of Studio Grifting: Three Headlines Over Morning Coffee\n\nEvery few weeks, a familiar genre of performance art erupts across Eastern European YouTube studios. A well-rested pundit sits in a warm studio, skims a three-bullet morning summary generated by an assistant or chatbot, and spends thirty minutes lecturing the camera with grave authority:\n> *\"Pentagon doctrines are obsolete! At exercises in Germany, US armor got wiped out by drones! In Iran in 2026, America’s plan failed! Why don’t they just hand Ukraine 1,000 Tomahawks — because the West is weak, sleepy, and using us as a testing ground!\"*\n\nWhen a commentator is too lazy to read past a headline yet eager to monetize clicks by peddling strategic despair, the result is precisely this brand of studio grifting — for which the GRU’s 72nd Main Intelligence Info-Center (`Military Unit 54777` on Khoroshevskoe Shosse) would gladly pay a bonus.\n\nLet us dismantle these slogans against physical reality — through the eyes of frontline infantry, high-voltage grid engineers, systems security architects, and wartime legal archives.\n\n---\n\n### 2. Donbas Steppe vs. European Forests, Hohenfels Without Airpower, and the DARPA / JATEC Industrial Conveyor\n\nUkrainian operators from the 412th Unmanned Systems Regiment (*Nemesis*) and frontline combat brigades have executed a genuine revolution in tactical drone warfare; in trench-and-FPV combat, they have no peers on earth today. However, extrapolating from training rotations at the Joint Multinational Readiness Center in Hohenfels, Germany (`JMRC Hohenfels`) to declare that \"the US military is helpless and obsolete\" fails three elementary laws of physics and doctrine:\n\n1. **Terrain Physics and Radio Horizons:** Fighting across the treeless Donbas steppe with threadbare windbreaks (where every armored vehicle is visible from 10 km away and the line-of-sight radio horizon is flat as a billiard table) bears zero resemblance to fighting inside dense Central European or Baltic forests. Move that exact engagement under a closed forest canopy — and the physics flip: wet pine needles and dense timber attenuate `2.4 / 5.8 GHz` control links within hundreds of meters, fiber-optic spools snag and snap across timber clearings, and dense overhead foliage blinds both electro-optical and thermal aerial sensors.\n2. **Artificial Exercise Constraints (Fighting Without Airpower):** At Hohenfels, opposing force (`OPFOR`) scenarios intentionally force US ground units to fight with their primary strategic arm tied behind their back — training safety rules prohibit live airstrikes against the drone operators’ dugouts. In actual NATO wartime doctrine, not a single `Abrams` or `Bradley` starts its engine until **`EA-18G Growler`** electronic warfare aircraft blanket the theater in high-power jamming noise, while every UAV launch point, relay mast, and bunker up to `30–50 km` behind the line is systematically pulverized by **`AGM-88G AARGM-ER`** anti-radiation missiles and half-ton **`GBU-31 JDAM`** penetrators dropped from `F-35` formations.\n3. **Western Engineers Spent 4.5 Years Building the Industrial Antidote:** Specialists from the Pentagon, `DARPA`, and the joint NATO-Ukraine **`JATEC`** center have spent the past four and a half years logging every frequency hop, telemetry packet, and tactical adaptation of this war. In response, Western defense prime contractors scaled up next-generation industrial counters — from **`Epirus Leonidas`** high-power microwave arrays (which fry the electronics of entire FPV swarms at the speed of light for pennies per pulse) and **`Coyote / Roadrunner`** jet interceptors to production lines turning out `35,000` dual-mode laser/IR **`APKWS II`** interceptors per year.\n\n---\n\n### 3. The \"1,000 Tomahawks from a Balcony\" Myth, Erasing 30 Refineries in 72 Hours, and Permanent 500/750 kV Grid Collapse\n\nWhen a studio strategist shouts into the microphone, *\"Why not just give us 1,000 Tomahawks so everything within 1,000 km burns?!\"* — an engineer has to ask: what exactly do you plan to launch them from, a residential balcony or a slingshot?\nThe maritime `Tomahawk (TLAM)` launches from vertical `Mk 41` strike cells aboard `Arleigh Burke`-class destroyers or nuclear attack submarines, whereas the US Army’s ground-based mobile **`MRC Typhon`** launcher exists in a handful of operational batteries worldwide — not to mention that hundreds of Tomahawks and a massive share of global `Patriot` and `THAAD` interceptors were just expended in the Middle East during `Operation Epic Fury` against Iran.\n\nMore importantly, look at the kinetic and electrical physics of an actual NATO strike package against Russia:\n\n- **All 30 Major Russian Oil Refineries Gone in 72 Hours:** For over four years, Ukrainian long-range strike UAVs carrying `30–70 kg` warheads have performed miracles of surgical precision, threading needles to hit primary distillation columns (`AVT-6`). Combined NATO air forces, by contrast, would open a direct war by delivering a three-day salvo of several thousand **`AGM-158 JASSM-ER`** stealth cruise missiles — each carrying a **`450 kg` `WDU-42/B` penetrating warhead** — reducing all 30 major Russian refineries, Volga river bridges, and railway traction substations to twisted scrap metal within **72 hours**.\n- **Russia’s 500/750 kV Power Grid Collapses in 24 Hours — Permanently:** As high-voltage grid engineers know firsthand, Ukraine has survived four and a half years of relentless missile strikes against its substations only because the entire global electrical manufacturing base (`ENTSO-E`, `Siemens`, `Hitachi Energy / ABB`, `Hyundai`) stands behind Kyiv, continuously supplying replacement autotransformers, relay protection cabinets, and `SF6` circuit breakers.\n  If NATO executes a synchronized 24-hour strike (cruise missiles paired with `BLU-114/B` graphite submunitions) taking out the open switchyards of Russia’s backbone **`500 kV` and `750 kV` substations**, and on that same night flattens **Russia’s only two high-voltage transformer factories** — the **Moscow Elektrozavod** facility and **Togliatti Transformer (`TTZ`)** — Russia’s Unified Energy System dies in **24 hours and never comes back**.\n  You cannot conjure a `500 / 750 kV` autotransformer on state television or buy one from North Korea; its manufacturing cycle takes `9 to 18 months`, and zero foreign donors would ship heavy grid equipment to Russia during a war with NATO. European Russia would fracture overnight into dark, frozen islands without water pumping, district heating, sewage, electric rail traction, or defense manufacturing.\n\n---\n\n### 4. The 2026 Iran Case (`Operation Epic Fury`): Why Washington Kept Its Foot on the Brake in the Persian Gulf\n\nAt this point, armchair geopoliticians deploy their second favorite talking point:\n> *\"If the US military possesses such an unstoppable sledgehammer, why didn’t they finish off Iran in 2026 during Operation Epic Fury, plunge Tehran into permanent darkness, and topple the regime?!\"*\n\nEquating a limited punitive campaign in the Persian Gulf with an existential NATO war in Europe is like asking why a SWAT officer wrestling a drunk neighbor in a tiny kitchen next to a leaking gas main chose not to pull the pin on an F-1 fragmentation grenade:\n\n1. **Every Air Objective in the Pentagon’s Order Was Destroyed in Week One:** When the joint US-Israeli campaign **`Operation Epic Fury`** kicked off on `February 28, 2026`, the opening strike decapitated Supreme Leader Ali Khamenei and senior IRGC commanders inside their underground bunkers; within days, US forces sank Iran’s surface navy, shredded its air defense network, bombed nuclear and ballistic facilities at Natanz, and wiped out `$25 billion` in Iranian oil export revenue across a 100-day naval blockade of the Strait of Hormuz. Nobody in Washington ever intended to commit half a million US infantrymen to occupy a mountainous nation of 90 million people three times the size of France ahead of US elections.\n2. **The Persian Gulf Hostage Dilemma and $7 Gasoline Before the November 3, 2026 Midterms:** Why did Washington deliberately refrain from permanently zeroing out Iran’s civilian power and water grid? Open a map of the Persian Gulf with a ruler. Just **150 to 200 km** across shallow water from the Iranian coast sit the coastal desalination plants, `Saudi Aramco` oil terminals, Qatari LNG liquefiers, and cloud data centers of the UAE, Bahrain, and Kuwait. Without coastal water desalination, those desert monarchies allied with the United States physically die of thirst in 72 hours. Had Washington plunged 90 million Iranians into permanent starvation and darkness in a discretionary *war of choice*, surviving IRGC commanders would have had zero reason for restraint — saturating Gulf desalination plants and oil terminals with short-range rockets, artillery, and naval mines. Even a contained Hormuz crisis pushed `Brent` crude past `$110`; burning the Gulf infrastructure would have sent oil to `$250` a barrel and US pump prices to **`$7` per gallon** right before the **November 3, 2026 US Congressional midterm elections**.\n3. **Why Moscow’s Dependency Switch Is Ten Times Deeper Than Tehran’s:** In Europe, Russia holds no allied desalination plants hostage 150 km across a puddle. More importantly, Iran has lived under severe Western sanctions since `1979` (**47 years** of bunker autarky), whereas Russia spent **30 years of petrodollar windfalls** buying turnkey Western infrastructure across every critical sector.\n\n---\n\n### 5. The `US Cyber Command` Guillotine: Bricking Every OS and Backbone Router Overnight\n\nStudio humanities pundits rarely think about how packets move or why a computer boots, assuming `Windows` and the internet operate by magic. Look at Russia’s actual technical stack:\n- Virtually all Russian backbone fiber optics, internet exchange nodes (`MSK-IX`), Russian Railways (`RZD`) dispatch networks, banking clearinghouses, and cellular carriers run on Western routing silicon and transponders (`Cisco`, `Juniper`, `DWDM`);\n- Russian petrochemicals, metallurgy, and gas pipelines rely on `Siemens Simatic SCADA` industrial programmable logic controllers;\n- And `99%` of servers, office desktops, and smartphones across Russia (from Moscow ministries to Chinese tablets in frontline dugouts) run American operating systems — **`Windows`, `Android`, and `iOS`** — atop **`x86` (`Intel / AMD`) and `ARM`** silicon architectures.\n\nIn the event of open kinetic war between Russia and NATO, a single coordinated directive from **`US Cyber Command`** and Western technology vendors (`Microsoft`, `Google`, `Apple`, `Cisco`) — combining low-level firmware revocation (`UEFI / bootrom / ASIC`), mandatory root certificate revocation, and external **`BGP` routing severance** — would simultaneously brick tens of millions of smartphones, workstations, enterprise servers, ATMs, and railway dispatch consoles from Kaliningrad to Vladivostok in a single night. Rebuilding a frozen 140-million-person territory with shattered `750 kV` substations and bricked computing infrastructure without the holders of the cryptographic keys is physically impossible — leaving only unconditional capitulation.\n\n---\n\n### 6. A Historical Cold Shower for the \"Tagil\" Diaspora in Berlin, London, and Miami: The Laws of `1798` and `1939` Are Still Active\n\nFinally, consider a particularly vocal specimen of Russian internet patriot: the diaspora agitators living comfortably in Berlin, Cologne, Baden-Baden, Prague, Limassol, London, or Miami — collecting German `Bürgergeld` welfare or spending ruble kickbacks stolen by their defense-executive fathers, slapping Russian flags onto BMWs, and boasting on TikTok: *\"NATO is weak, these tolerant Europeans can’t touch us because Europe has human rights, lawyers, and appeals courts!\"*\n\nOpen the wartime legal archives of Western democracies from `1939–1945` and examine what \"slow, tolerant, legalistic Western states\" actually did **15 minutes** after war became official — using statutes that remain on the books today:\n\n1. **Great Britain (May 1940) — Churchill’s Three Words: `\"Collar the lot!\"`:** During the Phoney War, Britain held polite tribunals dividing German and Austrian residents into categories. The moment existential combat began in May 1940, Winston Churchill issued a three-word order in Cabinet: **`\"Collar the lot!\"`** Within weeks, British police and troops rounded up `30,000` enemy nationals without trials, herded them into football stadiums and racecourses, interned them behind barbed wire on the **Isle of Man** in the Irish Sea, and packed another `7,500` into steamer holds bound for camps in Canada and Australia. Neither a British passport nor an aristocratic title saved fifth-column sympathizers: under **`Defence Regulation 18B`**, Whitehall suspended *Habeas Corpus* and locked **`1,847` British citizens** into Brixton Prison without trial — including royal relative Baronet Sir Oswald Mosley and sitting Member of Parliament Captain Archibald Maule Ramsay. Every enemy mansion, bank account, and business in London was seized on day one under the **`Trading with the Enemy Act`**.\n2. **France (September 1939) — One Blanket at the `Stade de Colombes`:** On day one of the war, Paris authorities plastered posters ordering all male enemy nationals aged 17 to 65 to report within 24 hours carrying a single blanket to the Olympic stadium **`Stade de Colombes`**, from which `20,000` detainees were shipped in freight cars to internment camps at *Gurs* and *Le Vernet*.\n3. **The United States (December 1941 – February 1942) — The Active `1798` Statute (`50 U.S.C. §§ 21–24`):** For Russian agitators cheering Moscow from Miami, New York, or California, here is a sobering legal fact: the US **`Alien Enemies Act of 1798`** has never been repealed — it sits in active US Code (`50 U.S.C. §§ 21–24`) right now. In December 1941, President Roosevelt invoked it via Proclamations `2525–2527`: the FBI summarily detained over `31,000` enemy nationals without warrants or counsel and placed `900,000` under strict movement and property restrictions. Under **`Executive Order 9066`**, `120,000` people of Japanese descent (`80,000` of them native-born US citizens) were relocated with one suitcase into ten desert internment camps across Nevada, Utah, and Arizona — a measure upheld as constitutional in wartime by the US Supreme Court in 1944 — while the `Office of Alien Property Custodian` permanently confiscated enemy corporate assets and `45,000` patents without compensation.\n4. **The Canadian Financial Masterpiece (`War Measures Act`) — \"We Will Auction Your House and Car so You Pay for Your Own Camp Soup\":** Polite, peaceful Canada did not merely intern thousands of enemy nationals (when sitting Montreal Mayor Camillien Houde spoke out against military conscription, the RCMP arrested him on the steps of City Hall and locked him in a forest internment camp for **four years without trial**). The Canadian government confiscated detainees’ houses, apartments, land, cars, and boats, **sold them at public state auctions without the owners’ consent**, and billed the proceeds to cover the cost of the detainees’ own barbed wire, armed guards, and camp rations. And in **1945, under Article XIII of the Potsdam Agreement**, the Allied powers permanently expelled `12 to 14 million` ethnic Germans across Central and Eastern Europe with 100% confiscation of real estate to eliminate the \"protection of minorities abroad\" pretext forever.\n\n---\n\n### P.S. Warm Regards to Unit 54777 Behind Their Intel / Windows Monitors\n\nA closing salute to the duty shift at the GRU’s 72nd Main Intelligence Info-Center (`Military Unit 54777`, Khoroshevskoe Shosse) and the FSB’s 5th Service reading this brief on American `Windows` workstations powered by American `Intel` processors routed through American `Cisco` switches.\n\nDo not get too comfortable when studio pundits tell you NATO is weak or paralyzed by peacetime courts. The second your bunker gerontocracy actually pulls the pin against the Alliance, peacetime jurisprudence switches off with a single martial-law toggle (`Alien Enemies Act 1798`, `Collar the lot!`): your generals’ villas in London, Prague, and Marbella will be auctioned off under the Canadian formula to fund their own camp soup on the Isle of Man, while your Moscow server room loses `750 kV` grid power and receives its final bricking packet from Fort Meade on the exact same evening."
  },
  {
    "id": "M-09",
    "slug": "red-marker-coroners-osint-party",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "OSINT BLIND SPOTS",
    "read_time_min": 9,
    "title_en": "Coroners with a Red MS Paint Marker: Why the Media \"OSINT Scene\" Draws Boxes Around Yesterday’s Soot While Clone Entities for Iskander Fuel and Lancet Drones Walk Free",
    "lead_en": "A ruthless dissection of the self-congratulatory OSINT influencer club (both domestic and Western X/Twitter celebrities): how grant-funded analysts turned intelligence into post-mortem MS Paint illustration, why they refuse to cross-reference four open registries (Russia’s Federal Tax Service EGRUL, procurement ledgers, customs manifests, and 110 kV substation topologies), and how OFAC, EU, and UK sanctions bureaucrats proudly sanction dead signboards while 2024–2026 missile-fuel and drone clone entities operate with zero Western restrictions.",
    "related_tool_or_link_en": "/en/sanctions-gap",
    "body_en_md": "### 1. The Profession of \"Post-Mortem Illustrator\": Drawing Red Boxes in MS Paint Over Someone Else’s Combat Work\n\nOpen X (Twitter) or prominent OSINT feeds the morning after Ukrainian long-range strike drones hit a Russian defense plant, and you will witness a meticulously rehearsed ritual. Out steps the media \"OSINT community\" — both Western blue-check accounts with Patreon tip jars and domestic stars of European panel discussions.\n\nIn their hands they wield the supreme weapon of modern performative OSINT: **the red rectangle tool in MS Paint** (upgraded, among senior fellows, to a yellow arrow in Canva).\n\nTheir operational workflow proceeds in four steps:\n1. Targeting officers and engineers from Ukraine’s Defense Intelligence (`HUR`), Security Service (`SBU`), Unmanned Systems Forces (`SBS`), and Air Force spend weeks conducting actual intelligence work — mapping air-defense radar shadows, calculating low-altitude corridors, and flying strike UAVs directly into a primary distillation unit or propellant mixing shop at 03:00 AM.\n2. At dawn, a local resident in Tambov or Samara films the towering black smoke plume on a smartphone and posts it to a municipal Telegram channel.\n3. At noon, a commercial `Planet` satellite or European `Sentinel-2` pass captures the scorched roof.\n4. And then the \"OSINT community\" wakes up! They download the satellite image, draw a thick red square around yesterday’s soot, slap a giant personal watermark across the center of the frame, and publish a breathless 15-tweet thread: *\"BREAKING: We have geolocated the roof damage! Confirmed strike on the facility announced this morning by the General Staff!\"*\n\nNext comes the favorite part of the lifecycle: invite-only workshops in Brussels and Warsaw, conference buffets with complimentary prosecco, and endless mutual back-slapping over reach metrics — arguing over who drew the red rectangle three minutes faster and whose watermark got retweeted by a Washington correspondent.\n\nCalling this \"intelligence\" is like calling a county coroner who traces a chalk circle around a bullet hole at the morgue a sniper. You are not conducting intelligence, gentlemen. You are **post-mortem illustrators of someone else’s combat operations** and bookkeepers of yesterday’s ash.\n\n---\n\n### 2. Why Nobody Wants to Walk AHEAD of the Strike: The Lazy Commentator Syndrome\n\nWhat separates a post-mortem soot illustrator from actual industrial intelligence (`Pre-Strike` and `Pre-Sanctions OSINT`)?\n\nThe soot illustrator always walks **BEHIND** the event. They wait until a plant explodes or an armored vehicle burns in a tree line so they can log a retroactive tally in a spreadsheet.\nReal intelligence walks **AHEAD of the cruise missile, ahead of the strike drone, and ahead of the sanctions designation**.\n\nWalking ahead of the strike, however, cannot be done with a red marker. It requires opening four unglamorous engineering datasets and cross-referencing them continuously:\n1. **Russia’s Live Federal Tax Service Corporate Registry (`EGRUL FNS RF` — `egrul.nalog.ru`):** Not copying stale 2021 tables from Wikipedia, but running daily automated diffs on corporate reorganizations, fresh `124... / 125... / 126...` registration numbers (`OGRN`), newly appointed general directors, and clean clone entities registered at the exact same industrial street address.\n2. **Internal Plant Power and Cryogenic Topology (`Pre-Strike` Vulnerability Passports):** Not dropping a generic pin on a city map, but identifying the exact coordinates of the plant’s **`110/10 kV` or `220 kV` main step-down substation (`GPP`)** housing oil-filled transformers, its high-pressure gas regulation station (`GRP`) feeding annealing furnaces, its cryogenic oxygen-nitrogen separation unit, and the cable bridges feeding electroplating lines. You do not need to carpet-bomb an 80-hectare Soviet plant if you sever its `110 kV` transformer bay and nitrogen station.\n3. **Subcontractor Ledgers, State Defense Procurement, and Commercial Arbitration (`kad.arbitr.ru`):** Tracing who supplies zero-expansion `SO-115M` sitall glass for laser ring gyroscopes, who is suing whom over late deliveries of precision instrument bearings, and which Military Representative Office (`VP MO RF`) stamps acceptance certificates on the shop floor.\n4. **Western Corporate and Property Registries (`UK Companies House`, Czech `justice.cz`, `OpenSanctions`):** Locating the exact townhouses and shell companies in Westminster, Surrey, or Prague 3 owned by the families of those Russian chief designers.\n\nWhy does the media OSINT crowd avoid this work?\nBecause raw Russian tax extracts and `110 kV` single-line electrical diagrams do not generate easy viral retweets. They require writing custom scrapers, routing queries through domestic Russian gateways, understanding nitrocellulose gelatinization and transformer physics, and reading thousands of pages of dry bureaucratic filings. It makes for terrible cocktail chatter at think-tank receptions — yet it is the only thing that actually breaks the enemy’s industrial conveyor.\n\n---\n\n### 3. How Western Sanctions Bureaucrats Fight Dead Signboards: Live Forensic Proof from 2024–2026 Russian Defense Clones\n\nThe most grotesque consequence of this analytical laziness plays out inside Western sanctions agencies (`US OFAC`, the `EU Council`, Britain’s `FCDO / OFSI`) and the multimillion-dollar think tanks that advise them.\n\nThe standard operating procedure of a Western sanctions bureaucrat has barely changed since 2022: open a three-year-old report, copy the legacy state-enterprise name (`FKP` or `FGUP`) of a Russian defense factory, paste it into a press release celebrating the \"historic 19th sanctions package,\" and declare Russia’s defense sector crippled.\n\nWhat do Russian defense executives do in response? They walk into the Federal Tax Service, liquidate or reorganize the sanctioned legacy entity, and **register a brand-new corporate clone at the exact same factory address with a fresh tax ID (`INN`) and registration number (`OGRN`)**!\n\nConsider five 100% documented cases from our live audit of Russia’s `EGRUL` tax registry as of **November 2026** — examples that should make every sanctions official in Washington, Brussels, and London blush:\n\n#### 1. Solid Rocket Propellant for `Iskander-M`, `Yars`, and `S-400` — A Clean Clone Registered on `August 3, 2026`\nIn Kuybyshev, Novosibirsk Oblast (`55.4375, 78.2914`), sits Russia’s sole industrial monopoly producer of **ammonium perchlorate** — the primary oxidizer for composite solid rocket propellant powering `9M723 Iskander-M` ballistic missiles, `Yars` ICBMs, and `S-400` surface-to-air missiles.\nFor years, Western sanctions lists (`OFAC`, `EU`, `UK`, `UA`) proudly listed the legacy state enterprise **`FKP \"Anozit\"` (`INN 5452112527`)**.\nWhat did Rostec do? On **`August 3, 2026`**, the legacy FKP officially ceased to exist via corporate transformation into a brand-new joint-stock company — **`AO \"Anozit\"` (new `INN 5402092000`, new `OGRN 1265400018432`, General Director: Igor Lvovich Ivanov)**.\nStatus as of November 2026: Western compliance databases show a green checkmark next to the dead tax ID `5452112527`, while the active **`AO \"Anozit\"` (`INN 5402092000`) carries ZERO sanctions from `OFAC SDN`, the `EU`, or the `UK`**! The monopoly propellant producer for Russia’s ballistic missile fleet is legally clean across Western jurisdictions.\n\n#### 2. `Lancet` Loitering Munitions and ZALA Aero — A Moscow Corporate Clone with Zero Western Sanctions\nWestern media outlets publish daily stories about Russian `Lancet` kamikaze drones. Meanwhile, back on **`March 22, 2024`**, a fresh joint-stock entity was quietly incorporated in Moscow (Perunovsky Lane 3, Bldg. 2) — **`AO \"Zala Aero\"` (`INN 9715478507`, `OGRN 1247700258651`, General Director: Konstantin Igorevich Abashkin)** — specifically structured to contract `Lancet` (`Izdeliye-51/52`) and `Italmas` strike UAVs.\nStatus as of November 2026: Sanctioned solely by Ukraine (`UA`). In **`OFAC SDN`, `EU`, and `UK` sanctions lists — ZERO**. Two and a half years have passed without a single Western designation.\n\n#### 3. Fiber-Optic FPV Drones (`Knyaz Vandal Novgorodsky` / `KVN`) and `Supercam S350` Reconnaissance UAVs\n- The primary developer and serial manufacturer of jam-proof fiber-optic FPV strike drones (`KVN`) in Veliky Novgorod — **`ANO \"NPC Ushkuynik\"` (`INN 5300010714`, `OGRN 1235300003685`, General Director: Aleksey Viktorovich Chadayev)** — remains **completely absent from US (`OFAC SDN`) and British (`UK`) sanctions lists**. Better still, its commercial twin **`OOO \"Ushkuynik\"` (`INN 5300013923`, `OGRN 1245300001650`, registered `April 18, 2024`)** carries **ZERO sanctions anywhere on planet Earth**!\n- In Izhevsk, the primary manufacturer of **`Supercam S350`** reconnaissance UAVs (which direct `Iskander` and glide-bomb strikes onto Ukrainian cities daily) operates alongside its legacy entity (`OOO \"Bespilotnye Sistemy\"`, `INN 1831119511`) an active corporate double — **`OOO \"Superkam\"` (`INN 1841082162`)** — which faces **ZERO sanctions from the US (`OFAC`), the `EU`, or the `UK`**.\n\n#### 4. The `Elastik` Explosives Clone, `GIPKh` Rocket Propellants, `Biokhim`, and `Alabuga` Fiberglass\n- **`AO \"Zavod Elastik\"` (`INN 6200007300`, `OGRN 1246200006140`, Ryazan Oblast):** Incorporated on `August 23, 2024` on the industrial site of the bankrupt legacy artillery-shell loading and detonator plant — **0 Western sanctions (`OFAC`, `EU`, `UK`)**.\n- **`AO \"RNTs Prikladnaya Khimiya (GIPKh)\"` (`INN 7811753760`, St. Petersburg):** Rostec’s premier research and production center for liquid, gel, and solid rocket propellants — **0 Western sanctions (`OFAC`, `EU`, `UK`)**.\n- **`AO \"Biokhim\"` (`INN 6828000346`, Rasskazovo, Tambov Oblast):** Produces technical ethyl alcohol and ether-alcohol solvents essential for nitrocellulose gelatinization at Russian gunpowder plants. Ukrainian Defense Forces have already **struck this facility twice with long-range UAVs** (in October 2024 and October 2026) because military intelligence knows its exact industrial role. Western sanctions lists? **Zero designations (`OFAC`, `EU`, `UK`, `UA`)**. Ukrainian strike drones reach the factory faster than a PDF reaches a sanctions desk in Washington or Brussels.\n- **`OOO \"Tatneft-Steklovolokno\"` (`INN 1646022610`, Alabuga Special Economic Zone):** Located literally across the internal fence from the `Shahed-136 / Geran-2` assembly halls inside `SEZ Alabuga`, supplying the structural fiberglass roving and fabric for `Shahed` and `Gerbera` airframes — yet still **unsanctioned by the United States (`OFAC SDN`) and the United Kingdom (`UK`)**!\n\n---\n\n### 4. Verdict for the Scene: Fewer Red Rectangles, More Primary Registries\n\nLook at the contrast.\nOn one side stand hundreds of media \"OSINT influencers\" and generously endowed Western think tanks debating last week’s satellite imagery over canapés and drawing red boxes around yesterday’s craters.\nOn the other side sits Russia’s live Federal Tax Service database, openly displaying the fresh tax IDs of solid-rocket-fuel monopolies (`5402092000`), high-explosive plants (`6200007300`), `Lancet` drone contractors (`9715478507`), and fiber-optic FPV factories (`5300013923`) that Western sanctions machinery has failed to notice for years.\n\nOur message to the trade is blunt:\n- Stop acting as post-mortem illustrators freeloading on the combat work of Ukraine’s Defense Forces by drawing MS Paint rectangles around their strikes.\n- If you call yourself an open-source intelligence analyst in 2026, get your hands dirty inside primary state registries, catch corporate defense clones the week they register, map the `110 kV` substation bays before the strike package launches, and shove Western sanctions bureaucrats’ noses into their own compliance gaps.\n- Drawing a red square around yesterday’s smoke collects likes on Twitter. Extracting the fresh `INN`, customs manifest, and `110 kV` transformer bay ahead of time is what burns the factory down."
  },
  {
    "id": "M-10",
    "slug": "two-hundred-bucks-vs-intelligence-giants",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "TECHNICAL KITCHEN / CHALLENGE",
    "read_time_min": 8,
    "title_en": "€25/month vs. The \"All-Seeing Agency\": Why a Basic European Linux VPS and Straight Engineering Hands Outpace Multimillion-Dollar Intelligence Bureaucracies in 2026",
    "lead_en": "An open, unapologetic challenge to domestic and Western intelligence bureaucracies, sanctions directorates (OFAC, OFSI, EU), and seven-figure Washington and Brussels think tanks: how the myth of the \"all-seeing secret supercomputer\" collapsed, and why the real entry barrier to industrial-grade counter-intelligence in 2026 has dropped to €25/month (the cost of a basic European Linux VPS), clean Python scripts, and zero six-month procurement tenders.",
    "related_tool_or_link_en": "/en/vpk",
    "body_en_md": "### 1. The Hollywood Myth of the \"All-Seeing Agency\"\n\nFor decades, spy thrillers — and intelligence directors testifying before parliamentary budget committees — sold the public a comforting bedtime story: the myth of the **\"All-Seeing Agency.\"**\n\nTaxpayers in London, Washington, Brussels, Prague, and Kyiv are taught to believe that behind the blast doors of Vauxhall Cross (`SIS / MI6`), Fort Meade, the Treasury Annex (`OFAC`), or inside the glass atriums of multimillion-dollar defense think tanks, vast clusters of classified supercomputers hum twenty-four hours a day. On their holographic wall screens, every Russian defense shell company, every London property owned by a missile designer, and every cross-border disinformation relay supposedly lights up in real time. *\"The professionals in tailored suits see everything,\"* the citizen thinks. *\"They just keep it classified.\"*\n\nThen November **2026** arrives. You query the live state registries yourself — and you burst out laughing.\n\nBecause the primary records reveal a very different picture:\n- A sanctioned pro-Russian media outlet transfers bit-identical Telegram media objects (`doc_id=5429119394091411064`) straight to Russian military propaganda channels and state agency `TASS` in **27 minutes and 03 seconds**, while state cyber and information agencies learn about the binary bridge by reading our public post-mortems;\n- Disposable \"zero-accounts\" (`UID 66... / 7... / 8...`) and renamed proxy channels (`channel_id=3913826799`, which simply changed its display name from ex-`@kyivskiydvish` to a single letter) coordinate street provocations during grid repairs while official keyword dashboards stare into space;\n- Sanctioned propagandists broadcast freely into Ukrainian territory via YouTube mirror channels carrying explicit `\"UA\"` country-availability flags in their page source years after official blocking decrees were signed;\n- And literally down the street from Whitehall in Westminster (`SW1`), South Kensington (`SW7 5JP`), Essex, and central Prague (`Praha 3 / Praha 5`), the executives and families behind Russia’s `Su-30SM2` fighter jets (`PAO Yakovlev`), `Lancet` strike drones (`ZALA Aero`), and `KAB` glide-bomb missiles (`KTRV`) maintain active corporate entities and four-story townhouses — completely untouched by `OFSI`, `FCDO`, `OFAC`, or the Czech Financial Analytical Office (`FAU`).\n\nWhere is your all-seeing supercomputer, gentlemen? Stuck on a Windows update, or waiting for a sub-committee to approve the Q4 catering budget?\n\n---\n\n### 2. The Funniest Engineering Truth of 2026: The Entry Barrier Is €25/month (the cost of a basic European Linux VPS)\n\nLet us share the most uncomfortable trade secret of 2026 — the one fact guaranteed to trigger heartburn among directors of seven-figure think tanks and bloated government monitoring departments.\n\nHow much does it actually cost today to build an autonomous, near-military-grade open-source intelligence pipeline that scrapes Russia’s live Federal Tax Service registry (`EGRUL`), dissects raw binary `MTProto` packet headers to the millisecond, catches cross-border botnets via Latin homoglyph byte analysis, audits `UK Companies House` and Czech `justice.cz` property records, and publishes bilingual forensic dossiers backed by 100% primary-source verification?\n\nTen million dollars? A two-million-euro Horizon grant from Brussels? A forty-person floor of junior analysts wearing lanyards?\n\nNo. **In 2026, the entire infrastructure bill is €25/month (the cost of a basic European Linux VPS).**\n\nWrite the bill of materials on the back of a coaster:\n1. **One basic European Linux VPS at €25/month** costing less than a single business lunch;\n2. **Disciplined engineering use of modern language models** — operated not with prompt-grifter spells, but under strict `Softmax` stage-lighting discipline where the `1.0` attention budget is aimed like a surgical laser;\n3. **A dozen lean, deterministic Python and Node.js scripts** written by straight engineering hands without enterprise bloat (`MTProto` binary listeners, domestic proxy gateways into Russian state registries, follower-graph scrapers, and an unforgiving prosecutorial fact-check linter);\n4. **And the one ingredient that cannot be purchased through government procurement tenders:** an engineer’s brain, cold operational focus, and zero fear of hurting bureaucratic feelings.\n\nThat is it. A **€25/month (the cost of a basic European Linux VPS)** pipeline routinely executes in a single night what a Beltway or Brussels think tank demands `$2.5 million` and eighteen months to study — before producing a polite PDF that names no tax IDs and offends nobody.\n\n---\n\n### 3. Why Dinosaurs Lose to Scripts: Anatomy of Institutional Paralysis\n\nWhy do sprawling agencies and richly endowed institutes consistently fall behind a dynamic adversary? Frontline combat intelligence officers and field operators are not to blame — they perform miracles daily under fire. The rot sits in the **desk-bound bureaucratic superstructure**, which suffers from four chronic pathologies:\n\n1. **A Six-Month Tender vs. a 20-Minute Script:** When Russia’s monopoly solid-rocket-fuel producer `FKP \"Anozit\"` (`5452112527`) transforms into a clean joint-stock clone `AO \"Anozit\"` (`5402092000`) in August 2026, or when a Telegram provocation channel (`3913826799`) scrubs its handle in five seconds, an engineer in our pipeline updates 15 lines of Python in twenty minutes. How does a large bureaucracy or grant-funded institute respond? They convene a steering committee, draft an 80-page statement of work, spend six months running a public procurement tender, pay half a million dollars for a commercial social-media keyword dashboard built in 2019 — and deploy it six months after the adversary has already migrated three times.\n2. **The Cult of the Glossy PDF:** Inside think tanks and ministerial policy shops, the unit of career currency is not a sanctioned missile factory or a dismantled botnet — it is **a 60-page glossy PDF report with pastel pie charts** presented at a panel discussion with bad coffee. The cardinal rule of the glossy PDF is risk aversion: bury every finding under seven layers of legalistic hedging (*\"allegedly, potentially, warrants further stakeholder dialogue\"*) and clock out at 17:00 sharp.\n3. **Jurisdictional Silos (\"Not Our Desk\"):** When one department spots an active Russian defense clone or a sanctions-evading YouTube mirror, it stays silent because *\"that falls under another directorate’s mandate, and flagging it would embarrass our colleagues.\"* Between those polite bureaucratic chairs, entire Russian missile conglomerates walk untouched for years.\n4. **Credentialism Over Engineering IQ:** In a bloated institutional chart, one overworked technical specialist usually carries five political appointees, three PowerPoint slide designers, and two event coordinators on their back.\n\n---\n\n### 4. Throwing Down the Gauntlet: The Data Is 100% Open — Verify It Yourself\n\nWe do not apply for institutional grants, we do not bid on government tenders, we do not attend Brussels cocktail receptions, and we are not auditioning for medals or diplomatic posts.\n\nInstead, we are throwing a cold engineering gauntlet onto the desks of the relevant directorates — in Kyiv, London, Prague, Brussels, and Washington:\n- Every dossier we publish rests on **100% open, verifiable primary records**: exact 10-digit Russian tax IDs (`INN`) and 13-digit `OGRN` numbers in `egrul.nalog.ru`, Ukrainian `EDRPOU` codes, British `Companies House` registration numbers, Czech `IČO` corporate IDs in `or.justice.cz`, immutable 64-bit numeric Telegram `UID` / `channel_id` beacons, and server-side `doc_id` hashes.\n- You do not need a classified HUMINT source or a Top Secret clearance to verify our work. You need an internet connection, basic technical literacy, and three minutes inside your own government’s public registries.\n- And to ensure that official submissions can no longer be quietly buried in an inbox tray, we are launching the public **Agency Blindness Tracker (`Wall of Shame`)** right here on `OPERBAZA.ORG` — a live, ticking stopwatch measuring to the hour how long after an official evidentiary filing Russian missile-plant clones, London defense-executive companies, and exposed provocation networks continue operating under officials’ noses.\n\nIf a **€25/month (the cost of a basic European Linux VPS)** engineering rig can map what your multimillion-dollar directorates have missed for four years, your problem is not a lack of budget. Your problem is that it is time to step out of the warm bath, close PowerPoint, and start doing actual intelligence work."
  },
  {
    "id": "M-11",
    "slug": "borshchahivka-matryoshka-bundestag-fimi-conveyor",
    "date": "2026-11-05",
    "pinned": false,
    "category_en": "PSYOP ANATOMY",
    "read_time_min": 9,
    "title_en": "From a Decommissioned Mykolaiv Ambulance for 107,000 UAH to the Floor of the German Bundestag in 24 Hours: Forensic Dissection of the 'Borshchahivka -> Matryoshka -> AfD' FIMI Conveyor",
    "lead_en": "How a failed $7,000 bribe attempt to extract 52nd Forge Regiment AWOL fugitive Andrii Kuleshov and Valentyna Moloda's 107,000 UAH commercial stunt in a resold Med-Prestyzh ambulance (38086393) traveled within 24 hours through single-use MTProto paratroopers in Kyiv suburb chats, morphed via the Kremlin's Matryoshka bot network into 10+ counterfeit France 24 and Euronews broadcasts, and landed on the X feed of AfD co-leader Alice Weidel during the Ukrainian President's visit to Berlin.",
    "related_tool_or_link_en": "/en/issue/borshchahivka-provocation-2026-11-02",
    "body_en_md": "## Why Traditional Crisis PR Loses to a 24-Hour Cross-Border FIMI Assembly Line\n\nConventional government communications manuals still advise responding to an information crisis with a 'measured official statement once all circumstances have been clarified'. In the operational environment of 2026, while a press department debates punctuation in paragraph two, Russia's Foreign Information Manipulation and Interference (`FIMI`) conveyor can launder a staged street brawl across five time zones and place it on the agenda of the German Bundestag.\n\nThe events of **November 2-5, 2026** outside the temporary staging point (`PPD`) of Military Unit `3121` of the 1st Corps of the National Guard of Ukraine 'Azov' at 7 Soniachna St. in Petropavlivska Borshchahivka ([`/en/issue/borshchahivka-provocation-2026-11-02`](/en/issue/borshchahivka-provocation-2026-11-02)) offer a clinical case study in how a domestic commercial AWOL-extraction racket is spliced by Russian intelligence into a trans-European influence operation.\n\nBelow is the complete engineering blueprint of that pipeline — from 64-bit `Telegram User IDs` in suburban Kyiv neighborhood chats to the Solomianskyi District Court of Kyiv, the render farms of the 'Matryoshka' bot network, and the parliamentary leadership of `AfD` in Berlin.\n\n---\n\n## Act I. The Economics of a Manufactured 'Torture Chamber': `$7,000` Cash or `107,000 UAH` for a Resold Ambulance\n\nAccording to Russian Ministry of Defense television network `Zvezda` (`zvezdanews/183597`), the 85th Main Special Service Center of the GRU's Telegram cartel `Legitimniy` (`legitimniy/23818`, `23830`), and fugitive ex-MP Artem Dmytruk on `Soloviev Live` (`391106`), the building at 7 Soniachna St. was an 'underground dungeon holding 40 hostages with broken spines, necrosis, and child organ harvesters'.\n\nThe evidentiary record established by SBU and National Police investigators, the **November 4, 2026 ruling of the Solomianskyi District Court of Kyiv**, and the on-the-record interview of Military Unit `3121` Commander Lieutenant **Pavlo Kurchenko (callsign 'Kil')** with *Ukrainska Pravda* (`04-05.11.2026`) documents the actual mechanics on the ground:\n\n1. **Verified Facility Roster (`26` Mobilized Servicemen, Only `2` Post-AWOL):** The leased three-story building housed 26 mobilized servicemen undergoing processing and adaptation, of whom only two had been returned after going absent without leave (`AWOL / SZCh`). Zero fatalities (`0`), zero 'underground dungeons'.\n2. **Client #1 — Andrii Kuleshov (52nd `Forge` Regiment AWOL, Family in Occupied ORDLO, and a Refused `$7,000` Bribe):** The entire confrontation was triggered around serviceman Andrii Kuleshov, who had gone AWOL from the 52nd International Assault Regiment 'Forge' (1st NGU Corps 'Azov'), was located at his home in Kyiv, and was brought to the facility for adaptation. Kuleshov is listed in the 'Myrotvorets' database for repeated unauthorized crossings into Russian-occupied ORDLO territories, where his mother and brother live. On the eve of the riot, Kuleshov's mother offered National Guard personnel a bribe of roughly **`$7,000 USD`** to release her son. The guardsmen refused the money.\n3. **Valentyna Moloda's Commercial Extraction Racket (`107,000 UAH` for a Prop Ambulance):** Once the bribe failed, the operation shifted to the commercial 'extraction crew' of 49-year-old aesthetic clinic owner **Valentyna Moloda** ([`/en/dossier/moloda-valentyna`](/en/dossier/moloda-valentyna), LLC 'Clinic Moloda-Ya' `45290695`, LLC 'MC Prime' `46377510`), who carried self-issued 'investigative journalist press card' `MA: SBS-0071` from her own NGO 'Plich O Plich' (`42672801`) and had spent over three years on the Interior Ministry wanted list for evading trial in assault case No. `465/6987/20`. As the prosecutor disclosed before the Solomianskyi District Court on `04.11.2026` (which remanded Moloda, accomplice Tetiana Kirieieva, and driver Viktor Yena into custody for **60 days without bail until `02.01.2027`**), the group charged **`107,000 UAH`** to stage 'emergency ambulance evacuations' of conscripts or AWOL soldiers using a resold `Mercedes-Benz Sprinter` still bearing the unremoved decals of Mykolaiv clinic LLC 'Med-Prestyzh' (`38086393`, closed in 2023).\n4. **How Real Medical Files Were Rewritten Into 'Broken Spines and Necrosis':** Commander Pavlo Kurchenko detailed the exact status of the other three men transferred alongside Kuleshov to the NGU hospital: **Ivan Yareshko (Ereshko)** (mobilized Oct 30, arrived positive for narcotics per rapid test, attacked a medic, and engaged in self-harm), **Oleksandr Pavliuchenko** (had a pre-existing consolidated fracture of the 9th vertebra without displacement from a bomb-shelter fall during basic training and was transferred after hospital alcohol violations — the exact medical line Moloda broadcast on TikTok as 'a spine broken by torture in the basement'), and **Oleksandr Perminov** (an AWOL instigator). Meanwhile, the actual physical casualties of the night were **16 National Guardsmen** injured by tear gas, stones, and bats thrown by the crowd.\n\n---\n\n## Act II. Anatomy of the 4-Hour MTProto Pre-Phase: How Echelon 1 'Paratroopers' Ignite Suburban Chats\n\nThe primary blind spot of conventional media monitoring is starting the clock when a story hits major news aggregators (in this case, sanctioned outlet `Strana.ua`'s post `stranaua/253545` at `16:38:52` Kyiv time).\n\nDirect MTProto auditing of suburban chats in Petropavlivska and Sofiivska Borshchahivka proved that the seeding campaign began **4 hours and 18 minutes earlier**, exposing a two-layer infiltration architecture that directly corroborates Presidential Office Head Kyrylo Budanov's statement (`03.11.2026`) regarding 3-day prior reconnaissance photos and Telegram admin chats recovered from Valentyna Moloda's smartphone:\n\n| Infiltration Layer | Technical Account Profile | Exact MTProto Identifiers (`02.11.2026`) | Operational Function |\n|---|---|---|---|\n| **Echelon 1 (Sterile Single-Use 'Paratroopers')** | `0` messages in Russian Z-channel comment threads (to evade standard Z-bot blocklists) combined with **`0` prior messages in Borshchahivka neighborhood chats before `02.11.2026`** | 1) **`@OlyaTheBT`** (`Olha Parkhomets`, `id=472827990`) — initial drop at `12:20:15` in `@petropavlivskabor/33717..33720`;<br/>2) **`@snizhana_sob`** (`Snizhana`, `id=6695051993`) — 12 storming calls in 15 min (`15:48-16:04`) in `@SofievskayaPetropavBorshchagovka` (exposed in `msg 1644116` by the chat anti-spam media restriction for newly joined accounts before vanishing at `16:04:30`);<br/>3) 1-subscriber shell channel **`@kyivskiydvish`** (`id=3913826799`, created `31.05.2026`) — used as a `SendAsPeer` Premium mask in `@koperchat2026/1749076` | Precision ignition of suburban chats paired with synchronized submissions through reader inbox bots of million-subscriber Kyiv channels (`@novosti_kieva_bot` in `@kievreal1/139976-139977` at `13:16` and `@levii_bereg_kyivbot` in `@kiev_levyy_bereg/88937..88942` at `16:35:24` — exactly **3m 28s** before `Strana.ua`!) |\n| **Echelon 2 (Organic Local Crowd After `16:30`)** | Authentic Borshchahivka residents with dozens of prior household messages in the same chats across 2024-2026 (parking, utilities, outages) | Join the thread after `16:30` under emotional panic triggered by Echelon 1, million-channel posts, and Moloda's TikTok stream | Human shield for the provocateurs (under `OPERBAZA`'s zero-false-accusation standard, emotionally manipulated local residents of Echelon 2 are strictly excluded from `bots.json`) |\n\n---\n\n## Act III. The European Export Loop: The 'Matryoshka' Bot Network (`France 24` / `Euronews` / `HRW`) and the Glenn Diesen -> Alice Weidel (`AfD`) Pass Ahead of the Berlin Talks\n\nOnce the domestic provocation inside Ukraine collapsed on the night of `02-03.11.2026` (after SBI investigators, Military Ombudsman Olha Reshetilova, soldiers' relatives, and journalists inspected the facility, Valentyna Moloda was detained, and the SBU identified ~100 participants in the bus attack), Moscow activated its **external European export loop**. This stage reveals the strategic objective behind the entire spectacle at 7 Soniachna St.:\n\n1. **Industrial Counterfeiting of `France 24`, `Euronews`, `Human Rights Watch`, and `UN` Reports by the 'Matryoshka' Network ('Bot Blocker' + *The Insider*):**\n   - As documented by counter-bot project **'Bot Blocker' (`@antibot4navalny`)** and ***The Insider*** (`04-05.11.2026`), the Kremlin's **'Matryoshka' (`Doppelganger`)** network immediately ingested the Kyiv footage and seeded across `X` **more than 10 fabricated video reports and graphic covers** impersonating **`France 24`**, **`Euronews`**, **`Human Rights Watch` (`HRW`)**, and the **United Nations (`UN`)**.\n   - Knowing that a dispute over an AWOL soldier and a Kyiv cosmetologist would gain zero traction in Paris or Warsaw, 'Matryoshka' scriptwriters fabricated claims of 'secret prisons run by Ukraine's HUR military intelligence and the Azov Corps', complete with invented 'mass graves' and allegations that **citizens of France and Poland were being kidnapped and tortured for ransom**, concluding with French-language calls for street protests in France against military aid to Ukraine.\n2. **The Berlin Gambit (`03.11.2026`): 14-Year-Old Oleksii Pekur -> Glenn Diesen (`@Glenn_Diesen`) -> `AfD` Co-Leader Alice Weidel (`@Alice_Weidel`):**\n   - Simultaneously, a German parliamentary vector was executed. During the evening riot on `02.11.2026`, 14-year-old teenager **Oleksii Pekur** (`myrotvorets.center/criminal/pekur-aleksei-andreevych/`) climbed over the perimeter fence into the compound, where guardsmen wrapped him in a thermal blanket to shield him from flying stones before Presidential Office Head Kyrylo Budanov handed him over to his sister and juvenile police (Pekur and his parents were subsequently listed on 'Myrotvorets').\n   - On **November 3, 2026** — the exact day Ukrainian President Volodymyr Zelenskyy arrived in Berlin to finalize the Berlin Winter Air Defense Package (`PAC-2`, `IRIS-T`, `F-16`) — Norway-based `RT` regular **Glenn Diesen (`@Glenn_Diesen`)** posted the footage of 14-year-old Pekur in the thermal blanket on `X` with the caption: *'A torture chamber of Zelensky was uncovered near Kiev, where over 40 mobilised men were held captive... The youngest victim was reportedly just 14 years old'*.\n   - Within hours, Diesen's post was quote-tweeted by **Alice Weidel (`@Alice_Weidel`)**, co-leader of *Alternative fuer Deutschland* (`AfD`) in the German Bundestag, who demanded action from the German Federal Government (`Tagesspiegel`, `EUalive`, `NV`): *'Ich erwarte von der Bundesregierung, dass dies heute in Berlin zum Selensky-Besuch thematisiert wird'* (*'I expect the Federal Government to raise this issue today in Berlin during Zelenskyy's visit'*).\n\n---\n\n## Postscript: Why the Same Media Operatives Serve Both the GRU and the 'Khimprom' Drug Cartel (NABU 'Operation Carthage' Tapes)\n\nA final forensic postscript concerns the 'independent opposition bloggers' who synchronously amplified the 'Borshchahivka ransom prison' narrative on the evening of November 2.\n\nAt `19:17:14` Kyiv time on `02.11.2026`, treason-convicted blogger **Anatoliy Shariy** ([`/en/dossier/shariy`](/en/dossier/shariy)) was in such a hurry to deploy the 'secret ransom prison' script (`ASupersharij/62043`, `755K+` views) that he misidentified the unit and blamed the 13th NGU Brigade 'Khartiia'. Less than 48 hours later, on **November 4-5, 2026**, Ukraine's National Anti-Corruption Bureau (**NABU**) and **SAPO** released covert wiretaps from **'Operation Carthage'** targeting the transnational **'Khimprom'** drug cartel (led by Russian citizen **Yegor Burkin 'Meksikanets'** and three-time convict **Andrii Osipov 'Kriminal'** under the protection of arrested SBU Major General **Serhii Duka 'Akim'**).\n\nOn the NABU recordings, the cartel bosses running the **`U-420`** narcotics retail chain and 52 scam call centers plotted to **throw acid in the face of investigative journalist Denys Bihus** and **beat Mariupol defender and former Azov POW Viktor Lakhno ('Leleka') with hammers**. On the very same tapes, 'Khimprom' boss Yegor Burkin ('Meksikanets') asks his associate about hiring Anatoliy Shariy to launder the `U-420` drug network:\n\n> *'Brother, should I pay [charge up] Shariy? I think we need to. We need to shift the focus toward legalization...'*\n\nThat single wiretap quote encapsulates the entire economy of Russian-aligned influence networks in 2026: by day, the media apparatus of a fugitive convicted of high treason (Art. 111 CCU) is available for hire by Russian citizen Burkin's 'Khimprom' narcotics cartel while its enforcers plan hammer attacks on Mariupol veterans; by night, the same channel works alongside the GRU, the 'Matryoshka' bot network, and `AfD` to storm an Azov Corps staging point outside Kyiv."
  }
]