Open records: an aggregation threat model¶

Entirely Dutch context but likely similar elsewhere in Europe.

The risk is not that any one publication exposes a secret. None does. The risk is what a few weeks of patient cross-reading turn that publication regime into.

A targeting picture for a foreign service, search narrowing for a sabotage planner, and queue ordering for a pre-conflict state.

Collection is expensive and sometimes detectable. Correlation is cheap, legal, and increasingly automated. The SOS proof-of-concept sketches how short the runway between an analyst and a running pipeline has become.