Phase 4 · Security, Intelligence & Response
SECURITY & RESPONSE RECORD
From warning to response — with each institutional stage kept distinct.
This record connects security and intelligence events to stable J6-E evidence identifiers. A warning is not an operational decision; a request is not an authorization; authorization is not mobilization; and later oversight is not the same as contemporaneous knowledge.
Each J6-S record identifies the institutional stage, the supporting or contextual Evidence Ledger records, and a limitation designed to prevent one stage of the response from being mistaken for another.
Federal agencies identified potential threats of violence
Later federal oversight found that multiple agencies identified potential threats before January 6.
Evidence: J6-E-0005 · J6-E-0006 · J6-E-0008
Limitation: General threat information does not establish that an agency possessed precise, actionable knowledge of exactly how the attack would unfold.
Threat information was not uniformly processed or distributed
Oversight reviews identified shortcomings in how some threat information was evaluated, disseminated, or shared with operational partners.
Evidence: J6-E-0005 · J6-E-0006
Limitation: A later finding about information-sharing weakness does not mean every relevant agency or official had the same information at the same time.
Capitol planning did not fully reflect the potential for an extreme attack
Congressional and government reviews identified weaknesses involving planning, intelligence dissemination, staffing, equipment, and contingency preparation.
Evidence: J6-E-0005 · J6-E-0008
Limitation: Institutional preparedness findings should not be converted into claims about the intent or conduct of individual officers.
Requests for outside assistance became urgent as conditions deteriorated
As the Capitol perimeter and building came under increasing pressure, Capitol Police leadership and partner agencies moved toward emergency mutual aid and National Guard assistance.
Evidence: J6-E-0007 · J6-E-0008
Limitation: The time a request was made must not be represented as the time assistance was authorized, mobilized, or physically deployed.
The D.C. National Guard operated through a federal command structure
The District of Columbia National Guard's command structure required federal action between a request for assistance and execution of a Capitol mission.
Evidence: J6-E-0008
Limitation: Authorization is a distinct stage and should not be collapsed into either the initial request or the later arrival of personnel.
Personnel had to be notified, equipped, briefed, and moved
Once authority and mission requirements were established, Guard personnel still required time to assemble, receive equipment and instructions, and move toward the Capitol.
Evidence: J6-E-0008
Limitation: Mobilization time is not by itself evidence of why earlier planning or authorization decisions were made.
MPD and other partners reinforced the Capitol response
Metropolitan Police and other outside agencies provided substantial assistance as the emergency expanded beyond Capitol Police capacity.
Evidence: J6-E-0007 · J6-E-0008
Limitation: The presence of responding agencies does not mean their authorities, arrival times, assignments, or command relationships were identical.
Reviews identified recurring intelligence, planning, command, and response weaknesses
GAO, congressional, Senate, and other official reviews later documented areas of institutional failure and recommended reforms.
Evidence: J6-E-0005 · J6-E-0006 · J6-E-0007 · J6-E-0008
Limitation: Later oversight benefits from evidence assembled after the event and must not be presented as identical to what decision-makers knew in real time.