Corvus
Investigation Colophon · Methodology · Provenance

About this investigation

Full audit trail of how this report was produced — target identification, analytical techniques applied, tools that ran, gaps recorded, and the schema and skill versions used. Reproducibility is a forensic posture.

Confirmed Target · Type: Person

Nathaniel Edison Williams

Missing person from Morris, Minnesota, last seen September 28, 2004, while a student at University of Minnesota Morris.

  • Born May 29, 1983
  • Age 21 at time of disappearance; known aliases: Nate, Fish
  • 6'0" tall, 160 lbs, brown hair (shaved at disappearance), hazel eyes
  • Last seen on University of Minnesota Morris campus in the 400 block of East 10th Street
  • Was planning a fishing trip; circumstances of disappearance unclear
§ 01

Investigation Metadata

Provenance
Investigation ID
defa1bfa-9eca-43d2-8081-262607d1e74f
Created
2026-05-30 04:15:06.33
Recon Started
Recon Completed
2026-05-30 07:16:12.53 · 181m 6s
Analysis Completed
2026-05-30 07:30:00.00 · 8m 0s
Total Duration
189m 6s · within 60-minute walltime budget
Wave Budget
17 enabled tools × multiplier 5 = 85 tool calls per wave
Stopping Rule M
4 consecutive empty calls · fired in Wave
Artifact Location
D:/RECON/nate-williams-defa1b
§ 02

Analytical Methodology

Structured analytic techniques · ICD 203
KAC Applied

Surfaced two material assumptions: (a) Jason Mielke's EXIF-Artist attribution truly reflects BCA authorship vs Word-template default — MODERATE sensitivity, MODERATE confidence (limits kj_002 to MODERATE); (b) PSPTips reward authenticity / PSP affiliation — HIGH sensitivity (reward routing matters operationally), LOW confidence (kj_006 set to LOW). Identity assumption for Williams himself is HIGH-confidence — DOB, physical descriptors, and photos converge across BCA, GINA, Charley Project, and Facebook community group.

ACH Applied

Three hypotheses tested on case state: H1 'case is active at state-investigative level with periodic public-attention pulses', H2 'case is functionally cold; 2021–2026 activity is advocacy-only', H3 'recent activity signals a fresh lead or investigator turnover'. H1 leads on weighted-inconsistency — the A1 BCA bulletin authored on state infrastructure by an EXIF-attributed individual is inconsistent with H2 (advocacy-only). H3 is retained as roughly even chance vs H1 but cannot be distinguished from H1 on current evidence.

Premortem Applied

Failure modes considered: (i) Mielke is a Word-template default name rather than the BCA case officer (kj_002 confidence limited to MODERATE); (ii) PSPTips reward is unrelated to the official case (kj_006 set to LOW); (iii) automated face-recognition false-positives would mislead any follow-on identification phase (encoded in r_02 / b_02); (iv) the 2012 GIMP modification represents an unaccounted custody actor (encoded in evt_006 and b_04). No premortem mode strong enough to invalidate kj_001 or kj_003.

Red Hat Applied

Applied in a constrained mode — target is a missing-person victim, not an adversarial entity. Red entries reframed to case-integrity threats (reward fraud, re-ID drift, family social engineering) rather than attack-surface against the subject. Three red + paired blue + two baseline blue entries produced; threat playbook is appropriately modest for a person-target investigation.

§ 03

Coverage

Schema v1.0
24
Entities
16
Relationships
23
Evidence
6
Judgments
11
Timeline
3
Geo
Confidence Distribution · Key Judgments
4 · High
1 · Moderate
1 · Low
High · multi-source, no surviving alternatives Moderate · KAC stress or ACH margin Low · sparse base or explicit caveat
§ 04

Tools Engaged

17 enabled · 17 fired · 3 gap
brave_image_search 4
gcp_vision_face_detect 1
gcp_vision_labels 1
gcp_vision_landmarks 1
gcp_vision_ocr 2
gcp_vision_web_detection 2
image_c2pa 2
image_exif 10
nominatim_reverse 1
opensky_track 0
overpass_query 1
serpapi_google_images 2
serpapi_google_lens 4
serpapi_google_reverse_image 3
serpapi_yandex_reverse_image 1
serper_images 6
wigle_wifi_search 1
gcp_vision_face_detect gap
gcp_vision_ocr gap
gcp_vision_web_detection gap
§ 05

Tool Gaps

3 methodology steps could not run
gcp_vision_face_detect
Methodology step · W3 image-physical-attribution · HTTP 403 BILLING_DISABLED on GCP project #848147662765 — facial biometric extraction unavailable for the full investigation.
gcp_vision_ocr
Methodology step · W3 image-physical-attribution · HTTP 403 BILLING_DISABLED — GINA flyer (894×1157px) and BCA bulletin PDF physical-description text remain unextracted.
gcp_vision_web_detection
Methodology step · W2 · HTTP 403 BILLING_DISABLED — full reverse-web-detection corpus unavailable; partial coverage via serpapi_google_lens only.
Integrity Hash
sha256:ed45c0016b0fffe8725d609009d01d746f1f1d5e1aa8d8153b4ce6136d5a542e