Overview
This dossier contains confidential records for Ben Kessler.
Material is provisional, cross-referenced from recovered files, protected records, and field notes.
This dossier contains confidential records for Ben Kessler.
Material is provisional, cross-referenced from recovered files, protected records, and field notes.
SUBJECT: Ben Kessler
CLASSIFICATION: OFFICIAL-SENSITIVE // SAFETY INVESTIGATION
REFERENCE: CONTROLLED COPY // COT/MARINE/2035/CTC058
CASE REFERENCE: COT/MARINE/2035/CTC058
SUBJECT: Ben Kessler
CENTRAL RECORD: COT6C0C15E2079A1
RANK / APPOINTMENT: MI5 cybersecurity analyst
ORGANISATION: MI5
DATE OF BIRTH: 2001-07-01
PLACE / NATIONALITY: Unknown, Unknown, Not established
INTERVIEW STATUS: Witness / account holder
LOCATION: Secure interview suite — location withheld
DATE: 19 September 2035
LEAD AUTHORITY: Marine Accident Investigation Branch
RECORDING MEDIA: Two sealed digital masters and one independent evidential hash
DISTRIBUTION: Named recipients only. No automated onward distribution.
NOTE: Handling notice. This document contains operational, personal and evidential material. It may be read only by a person with both the required clearance and a recorded need to know. Extraction of images, transcript segments or metadata creates a new controlled copy.
VISUAL ASSET STATUS: Passport image: attached; dossier image frames available: 3; surveillance frames available: 0; identity match: matched by subject/asset map.
This record concerns the subject's knowledge of Orion Star, Argus, MI5, North Sea; and associated decisions, communications and evidence handling. The scope of this record is confined to the matters set out above and to evidence formally introduced during the session.
The subject was cooperative on chronology and guarded on attribution. Answers became more exact when the interviewers distinguished direct observation from later analysis.
LEAD INSPECTOR: State your full name for the record.
BEN KESSLER: Ben Kessler
LEAD INSPECTOR: Do you understand the status of this interview and the limits placed on distribution?
BEN KESSLER: Yes. Record that I have asked for the original media and audit trail to be preserved.
LEAD INSPECTOR: Have you been offered the representation, legal advice or staff support applicable to this procedure?
BEN KESSLER: I have, and I reserve the right to stop if the questioning moves outside them.
DOCUMENTARY EXHIBIT D-01 Retained extract: Across from her, Analyst Ben Kessler—one of MI5’s top cybersecurity specialists—clicked through a series of files on the ship sabotage investigation. Associated persons: Fiona Ward, Commander Lydia Green Relevant systems or locations: Orion Star, Argus, MI5
LEAD INSPECTOR: Do you accept that this extract accurately records an event in which you were involved?
BEN KESSLER: I preserved the raw state before testing the explanation. Anything else would have changed the evidence. If the original is no longer available, that absence should remain part of your finding.
LEAD INSPECTOR: What did you understand at that moment, before later analysis supplied a larger explanation?
BEN KESSLER: The timing is supportable. Attribution is not. Fiona Ward can confirm the sequence, but not necessarily the interpretation.
DOCUMENTARY EXHIBIT D-02 Retained extract: “Let’s cut the fucking shit,” Ward said, tapping her fingers impatiently on the table. “Tell me what the hell you’ve got.” Kessler adjusted his glasses, ran a hand through his dishevelled dark hair, and exhaled sharply. “Alright. Associated persons: Fiona Ward Relevant systems or locations: Orion Star, Argus
LEAD INSPECTOR: Do you accept that this extract accurately records an event in which you were involved?
BEN KESSLER: That is what the system reported. It is not necessarily what the equipment physically did. The missing interval matters more than the wording placed around it afterwards.
LEAD INSPECTOR: Who else was physically present and capable of confirming your account without relying on the same electronic record?
BEN KESSLER: I preserved the raw state before testing the explanation. Anything else would have changed the evidence. My answer is limited to what I personally saw, heard or ordered.
LEAD INSPECTOR: Are you saying the official record is wrong?
BEN KESSLER: I am saying it may be accurate about the event and wrong about the cause.
DOCUMENTARY EXHIBIT D-03 Retained extract: Ward’s brow furrowed. “That’s a long way from the North Sea.” “Yeah, well, this wasn’t some amateur in his basement,” Kessler replied. “The attack was routed through a private server—a high-security data hub operating under a front company.” Ward knew where this was going before Kessler even said… Associated persons: Fiona Ward Relevant systems or locations: North Sea
LEAD INSPECTOR: Do you accept that this extract accurately records an event in which you were involved?
BEN KESSLER: The values agree with one another. Agreement is not proof that they describe the real world. Check North Sea against the unprocessed record before you accept the later label.
LEAD INSPECTOR: Why was the matter not escalated through the ordinary reporting route?
BEN KESSLER: The values agree with one another. Agreement is not proof that they describe the real world. My answer is limited to what I personally saw, heard or ordered.
DOCUMENTARY EXHIBIT D-04 Retained extract: as if breaking a spell, she sat up straighter. “That’s it,” she muttered. “That’s the bloody fucking smoking gun.” Kessler nodded grimly. “Interpol has had those bastards flagged for a while, but nothing concrete enough to fucking act on. Associated persons: Fiona Ward Relevant systems or locations: Al Bahr Logistics
LEAD INSPECTOR: Do you accept that this extract accurately records an event in which you were involved?
BEN KESSLER: That is what the system reported. It is not necessarily what the equipment physically did. My answer is limited to what I personally saw, heard or ordered.
LEAD INSPECTOR: What part of the retained record is incomplete or misleading?
BEN KESSLER: The timing is supportable. Attribution is not. Fiona Ward can confirm the sequence, but not necessarily the interpretation.
LEAD INSPECTOR: Are you saying the official record is wrong?
BEN KESSLER: I am saying it may be accurate about the event and wrong about the cause.
[Exhibit S-01 introduced. Subject permitted to inspect the displayed copy without handling the source medium.]
LEAD INSPECTOR: Do you identify the person shown as yourself?
BEN KESSLER: I identify myself in the frame. I cannot authenticate the date from the crop alone.
LEAD INSPECTOR: Can you establish the location or date from anything visible in the frame?
BEN KESSLER: The location is supportable from the surroundings. The purpose you are implying is not.
LEAD INSPECTOR: Were you aware that the image was being made?
BEN KESSLER: I was not aware of the camera at the time shown.
LEAD INSPECTOR: Who had advance knowledge of your presence at that location?
BEN KESSLER: That depends on whether the source is an official system, a copied feed or a separate observer.
LEAD INSPECTOR: What does this image prove, and what does it not prove?
BEN KESSLER: Preserve the frames before and after it. A single image is a fact about light, not a complete account of conduct.
[Exhibit S-02 introduced. Subject permitted to inspect the displayed copy without handling the source medium.]
LEAD INSPECTOR: Do you identify the person shown as yourself?
BEN KESSLER: I identify myself in the frame. I cannot authenticate the date from the crop alone.
LEAD INSPECTOR: Can you establish the location or date from anything visible in the frame?
BEN KESSLER: The location is supportable from the surroundings. The purpose you are implying is not.
LEAD INSPECTOR: Were you aware that the image was being made?
BEN KESSLER: I was not aware of the camera at the time shown.
LEAD INSPECTOR: Who had advance knowledge of your presence at that location?
BEN KESSLER: That depends on whether the source is an official system, a copied feed or a separate observer.
LEAD INSPECTOR: What does this image prove, and what does it not prove?
BEN KESSLER: Preserve the frames before and after it. A single image is a fact about light, not a complete account of conduct.
[Exhibit S-03 introduced. Subject permitted to inspect the displayed copy without handling the source medium.]
LEAD INSPECTOR: Do you identify the person shown as yourself?
BEN KESSLER: I identify myself in the frame. I cannot authenticate the date from the crop alone.
LEAD INSPECTOR: Can you establish the location or date from anything visible in the frame?
BEN KESSLER: The location is supportable from the surroundings. The purpose you are implying is not.
LEAD INSPECTOR: Were you aware that the image was being made?
BEN KESSLER: I was not aware of the camera at the time shown.
LEAD INSPECTOR: Who had advance knowledge of your presence at that location?
BEN KESSLER: That depends on whether the source is an official system, a copied feed or a separate observer.
LEAD INSPECTOR: What does this image prove, and what does it not prove?
BEN KESSLER: Preserve the frames before and after it. A single image is a fact about light, not a complete account of conduct.
LEAD INSPECTOR: Is there any material fact you have withheld because you consider this recording or its distribution unsafe?
BEN KESSLER: No fact material to immediate safety. Other matters require a narrower compartment.
LEAD INSPECTOR: What is the single next action this investigation should take?
BEN KESSLER: Compare the surveillance timeline with access, maintenance and movement records before drawing a conclusion.
LEAD INSPECTOR: Do you wish to add or correct anything before the recording is suspended?
BEN KESSLER: No correction. Only this: an accepted record is not necessarily a true one.
[Recording suspended. Source media sealed. Any resumed session requires a new opening declaration and exhibit schedule.]
The account is internally consistent on physical chronology but remains deliberately limited on attribution. No adverse inference should be drawn from refusal to expose a source through a distribution route the subject challenged at the start.
NOTE: Finding limit. Nothing in this record establishes guilt, operational direction or final causation unless expressly stated as a supported finding. A valid credential, image or system entry proves only what that item can independently support.
LEAD INSPECTOR — sealed electronic signature held separately
Evidence custodian — receipt and hash recorded
END OF CONTROLLED RECORD — CTC-058