Action packets

Case-derived dry-run notices from authorized_local packet state. Every external action remains human-gated.

No active client context

Select or create a real customer case

Cloak Harbor does not load an arbitrary person by default. Select a saved client or start onboarding before reviewing evidence, OSINT results, actions, reports, or schedules.

Start onboarding Choose client

Server-side protected packet workflow

Packet actions run through the public cockpit action facade, then the server records Postgres-backed intent when configured. Data mode: authorized_local.

OSINT-AUTHORIZED-MICHAEL-BARBINE-3029CF9B-RECOVERY-ANSWER-REVIEWMedium

Public clues may weaken account recovery questions

Analyst note

PKT-OSINT-AUTHORIZED-MICHAEL-BARBINE-3029CF9B-RECOVERY-ANSWER-REVIEW · persisted:true · externalActionTaken:false

Template draft Dry-run · no external send

Persisted packet loaded from backend.

Required before generating a new packet

I confirm this case uses authorized client data or public-safe reference data.I understand no external notices will be submitted without human approval.

Analyst note

Finding: Public clues may weaken account recovery questions
Context: Cloak generated source-review opportunities for manager/work-history, family-name, school/hometown, pet/nickname, and contact recovery clue categories. Actual recovery answers are not collected or stored.
Recommended action: Review the linked sources, confirm only exposure categories, then change recovery questions, remove public clues where practical, and prefer MFA/recovery keys over knowledge-based recovery.
Reference: OSINT-AUTHORIZED-MICHAEL-BARBINE-3029CF9B-RECOVERY-ANSWER-REVIEW (authorized and consented principal; public-safe redacted case data).

Approved

External actions require explicit human approval. Approve unlocks a dry-run send; nothing is transmitted in this protected migration path unless an external sender is explicitly implemented and approved.