The Petri Dish:
where surveillance goes first

In 2015 Epstein emailed the director of the MIT Media Lab about approaching Robert Mugabe with a sovereign currency scheme. He described Zimbabwe as:

“a great petri dish”

Read what the metaphor assumes. A petri dish is not a place. It is a medium — something you grow a culture in, chosen precisely because it is inert, contained, and will not resist what you introduce.

A country in economic collapse, with fourteen million people in it, described as laboratory equipment.

The proposal itself was a currency scheme, not a surveillance system — that distinction should be kept. But the phrase captures a disposition that runs through the whole Africa record: a state under enough pressure is a place where things can be tried that could not be tried elsewhere.

And the surveillance deals ran on exactly that logic. A thirteen-page interception architecture drafted for Côte d’Ivoire. Facial recognition sold into Nigeria that had been first prototyped at the Gaza crossing — tested on a population with no recourse, then sold to a state that wanted the capability.

The sequence is the point. Prototype where objection is impossible. Sell where oversight is thin. Arrive last in places with functioning courts, by which time the technology is mature, normalised, and has a reference list.

Where Pegasus fits

Paragon is not NSO Group, and the distinction is worth keeping. NSO’s Pegasus is the better-known product — a zero-click tool that remotely extracts messages, contacts, photos and video without the target clicking anything, and can turn a phone into a tracking and recording device. Citizen Lab reports it licensed to roughly 45 governments.

What the two firms share is a personnel pipeline. Both are run by veterans of Unit 8200. Paragon marketed itself as the ethical alternative — narrower access rather than full device takeover.

The Palestinian documentation. In 2021, Front Line Defenders found Pegasus on the phones of six Palestinian human rights defenders, from Al-Haq, Addameer and Defense for Children International-Palestine — organisations documenting alleged war crimes and pursuing accountability under international law.

On the broader claim that this technology is built on the occupied territories. What the record supports is narrower and still substantial: the expertise originates in the same intelligence units, personnel move directly from state security into private firms, and capability demonstrated on populations with no legal recourse is subsequently sold to governments worldwide. This archive documents one concrete instance already — facial recognition sold into Nigeria that was first prototyped at the Gaza crossing.

And the United States wanted this capability throughout. After the Biden administration blacklisted NSO in November 2021, the U.S. defence contractor L3Harris pursued a purchase of the company — telling counterparts that American intelligence officials quietly supported the plan. The White House said it was outraged when the talks leaked.

The Paragon route achieved what the L3Harris route could not. A firm founded by Israeli intelligence veterans became American-owned, and the restriction that had frozen its federal contract stopped applying.

What this establishes, precisely.

Thiel and Epstein had a real, sustained, financial relationship. Eight or more meals, years of correspondence, island invitations, and — confirmed by Thiel’s own spokesman — Epstein as a limited partner in a Thiel-controlled fund. The only thing denied is Barak’s characterisation of it as joint ownership.

Epstein actively promoted Palantir. Not as an investor in it, but as a broker — pushing Barak toward a board seat in 2013 and seeking discounted shares in 2016.

The Flock link is real but thin, and the dates matter. Founders Fund is one of eight named participants in a 2025 round it did not lead. Thiel is not a founder, not a director, and not in control. Flock was founded in 2017 and the round closed in 2025 — six years after Epstein’s death. He has no interest in it, direct or indirect.

The a16z overlap is the one that actually warrants attention, and it is not the one usually named. The firm that led the round making Flock a $7.5 billion company has also funded, since its first round, a company co-founded by Ehud Barak — the man who appears in 4,078 results in the Epstein files and who brokered Epstein’s police-technology investments.

What that is and is not. It is not evidence of coordination between Flock and Toka, and no document suggests any. It is evidence that the pool of capital funding domestic surveillance infrastructure and the pool of capital funding Israeli offensive cyber overlap in the same firm — and that one of those companies was founded by Epstein’s surveillance partner.

Why the correction matters more than the finding. A categorical claim is a hostage. “No connection” was easy to write and one search away from being disproved. The accurate version is longer, more qualified, and cannot be knocked over.

An analogy that cannot state its own limits is propaganda. Here are the limits.

Consequence differs enormously. Being tracked by an American ALPR network can cost you your privacy, your immigration status, or — in the documented Kansas case — your standing to write an op-ed unmolested. It is also the subject of active Fourth Amendment litigation, which is a form of protection that did not exist in any of the African cases. Being surveilled by a state with no functioning judiciary can cost you your life. These are not equivalent harms.

Recourse differs. The United States has courts that work. The Institute for Justice has filed a federal class action over San Jose’s network. Thirty localities have cancelled or deactivated since the start of 2025. That is a functioning immune response, and it has no counterpart in the African cases in this archive.

Intent differs — for Flock specifically. The Africa deals were brokered by a man extracting personal advantage from every introduction. Flock is a commercial vendor selling to willing municipal customers, and its cameras have solved real crimes. Nothing on this page suggests otherwise, and its investor overlap with Epstein’s network does not make it an Epstein project.

That defence does not extend to Paragon. There the founder is the same man, and the customer is a federal agency conducting mass deportations.

And the American deployment is not primarily about poverty. Flock cameras are in wealthy suburbs and college towns. The variable is not income — it is whether a community has the procedural machinery and attention to say no before the contract is signed.

What survives all of that is narrower and still worth stating: the sequence by which surveillance normalises is consistent across wildly different contexts, and the step that fails is almost always the same one — nobody writes the rule until after the system is installed.

Why the middle tier is the fight

The government’s argument is the third-party and public-exposure doctrine: you have no reasonable expectation of privacy in a licence plate displayed on a public road.

The Supreme Court has already rejected the simple version of that. In Carpenter v. United States (2018) the Court held that accessing historical cell-site location records without a warrant violates the Fourth Amendment, and explicitly refused to accept that venturing into public extinguishes constitutional protection. Seven days of records was enough to trigger it.

The doctrine at issue is aggregation. One photograph of a car on a road reveals almost nothing. A searchable index of every road that car has travelled reveals where someone worships, who they sleep beside, which doctor they see, and which protest they attended. The Fourth Circuit applied that reasoning to 45 days of aerial surveillance over Baltimore.

Which is exactly what the Norfolk court disputed. It found a 21-day retention window insufficient to constitute “the whole of a person’s movements” — and separately held the plaintiffs lacked standing because the city had never run a query on them, despite their vehicles being captured 475 and 325 times in four months.

That standing holding is worth sitting with: you may be photographed hundreds of times by a government network and lack the right to challenge it, because nobody has yet looked you up.

And the ground may be shifting. In Chatrie, the Supreme Court held that police searching for location data must satisfy the Fourth Amendment regardless of the size or scope of the data collected — reasoning that cuts directly against the Norfolk court’s volume threshold. Schmidt is now before the Fourth Circuit.

The scale against which this is being litigated: more than 113,000 ALPRs operating nationwide.

This archive documents institutions that failed to refuse. The American ALPR story is the first case in it where refusal is actually happening — and that is worth recording as carefully as the failures.

At least thirty localities have deactivated Flock cameras or cancelled contracts since the start of 2025, with much of that activity concentrated in a three-month window. Santa Cruz voted to end its contract in January 2026, less than two years after signing. Flagstaff, Cambridge and Eugene are among the others.

The mechanism of refusal is unglamorous. Public records requests. Audit-log analysis by journalists and researchers. Local coalitions at council meetings. A crowdsourced map that has now located more than 76,000 readers.

It is the same mechanism that worked everywhere in this archive. At Harvard, the visits stopped when researchers inside the programme complained. At MIT, a junior fundraiser leaked the emails. In Palm Beach, detectives and survivors.

No committee, regulator or compliance function appears at the front of any of those lists. In every case the people who stopped it had little authority and considerable exposure.

And the counter-pressure is real. The company’s CEO has responded sharply to critics; a congressional committee has demanded records from jurisdictions that disabled national lookup. Flock notes that new agencies are joining faster than existing ones are leaving.

Which is the actual finding of this page. The pattern is consistent — but so is what interrupts it, and it has never once been the institution that was supposed to.