The Sealed Vendor

Start with the thing the police will say. In Ontario, several forces use what they call on-device investigative tools, ODITs, to get inside a suspect's phone: to read the messages in encrypted apps, to log keystrokes, to turn on the camera and microphone. They will confirm that the capability exists and that it is warranted case by case. Now the thing they will not say. They will not name the company that makes it, and they guard that name so fiercely that, in some cases, the Crown has signalled it would rather abandon the prosecution than reveal it. In the investigation known as Project Fairfield, police and the Crown had agreed ahead of time that they would drop the case if a court ordered them to disclose the vendor. Read that sentence twice. The decision to walk away from a real prosecution was made before the question was even asked. This case is not about whether the phone should have been searched. It is about a public power that has been arranged, in advance, so that no room built to examine it, courtroom, watchdog, public, ever will.

§01 · What the tool takes

Name the capability first, because everything downstream is a fight over whether anyone gets to look at it. An ODIT is not a wiretap on a single line. It is the total occupation of a device, the same category the world already knows by two brand names, Pegasus and Graphite. Once it is on the phone, it reads the messages inside Signal, WhatsApp and iMessage after they are decrypted, on the screen; it logs what is typed; it records location; and it can activate the camera and microphone without the indicator light.reported There is, functionally, nothing left on the device it cannot reach.

The delivery is the part that unsettles people who thought they were careful. The advice everyone was given, do not tap the suspicious link, does not apply to the modern exploit, which is zero-click: a target is added to a group, a file is delivered, the phone parses it on its own, and the tool is installed with no action by the user at all.reported This is not a marginal tool that reads a little more than a warrant used to. It is the most invasive search power that has ever existed, a live feed of a person's entire private life, and that is exactly why the question of who may examine it, and under what rules, is not a technicality. It is the whole matter.

§02 · The tool works

Concede the strongest point on the other side before pressing, because the case is not that these tools never do their job. They do. In April 2026 Ontario police arrested nine people and seized more than two million dollars in drugs, cash and guns, disrupting an international smuggling ring; in 2023 Windsor police made twenty-three arrests and recovered more than nine million dollars in stolen vehicles, taking down an international auto-theft operation.reported Both investigations had stalled, despite wiretaps, recording devices, warrants and physical surveillance, and both closed within months once a warrant for an ODIT was granted.reported

Grant it fully: the capability is effective, and it has been pointed at grave, organised crime. That is the best thing the secrecy has going for it, and it is worth stating without a hedge, because the argument that follows does not need the tool to fail. It needs only to notice what the state is willing to give up to keep the tool's maker unnamed. A thing that works, defended by a secrecy that will forfeit the very convictions the thing produced, is a stranger object than "an effective police tool." That contradiction is the case.

The tool convicts. The secrecy will drop the conviction to protect the tool. Both are true, and the second undoes the first.

§03 · The seal

Here is where an ordinary secrecy claim becomes something else. When these cases reach court, and a judge moves toward ordering disclosure of the tool, the Crown does not simply argue for a publication ban or a closed hearing. In some cases it indicates it would rather drop the prosecution entirely than reveal anything about the ODIT that gathered the evidence.reported In Project Fairfield, according to a court document filed in Windsor, police and the Crown had agreed in advance that they would abandon the prosecution if the court ordered them to disclose the identity of the vendor.reported The choice to walk was pre-committed, before any defendant asked the question the whole arrangement is built to refuse.

See what that ranks above what. On one side is a completed criminal investigation, a real harm, a decisive body of evidence, a conviction within reach. On the other is the name of a private company. And the name wins. The tools are managed by a provincial unit, JTAC, the Joint Technical Assistance Centre, which holds the vendor contract and, by reporting, makes the Crown and local services sign agreements to potentially drop prosecutions rather than name the company.reported The secrecy is not improvised at the courtroom door. It is written into the contract, in advance, as a condition of holding the tool at all.

This is the discharge move, and it is close cousin to The Scrubbed Record, where a vendor's name was quietly removed from public minutes. Here the removal is more total: not a name deleted from a document, but the entire proceeding sacrificed so the name never enters one. What is laundered is accountability itself. Not the courtroom, where disclosure would name the maker. Not the privacy commissioner, who by reporting was never consulted. Not the public, who fund the tool and the prosecutors both. The secrecy is engineered, ahead of time, by making the price of a look higher than the price of the case.

§04 · The reason is a decade old

The justification is almost verbatim from years back, which is how you know it is a script and not a response. In 2014 the Ontario Provincial Police bought a Stingray, an earlier device that impersonates a cell tower to intercept texts and calls, for about two million dollars; by 2017 it had quietly stopped using it and pivoted to newer methods, without ever publicly accounting for what became of it.reported Pressed for transparency, a spokesperson said revealing specifics could jeopardize investigations, ongoing court proceedings, and public and officer safety.reported

That reasoning is not empty. A secret tool does become less useful once criminals know precisely what it is and how it works, and the same argument returns, in more formal words, for ODITs: the Crown has argued that if disclosure results in police no longer having access to an effective technological tool to intercept communications, that will have a profound impact on public safety.reported Same script, higher stakes. But with an ODIT the thing being protected is no longer only a method. It is a company, and a company is a different kind of secret, because a company can be looked up, sued, subpoenaed, and, above all, embarrassed. Which is why the next question is the one the whole arrangement exists to keep you from asking out loud: who is it?

§05 · The name behind the seal

Keep the discipline the police abandon: say only what the record supports, and label the inference as an inference. We do not know the vendor for certain. What exists is an informed guess, and it is a good one. In 2024 the Citizen Lab at the University of Toronto mapped the online infrastructure behind Paragon Solutions' spyware, Graphite, and traced suspected deployments in several countries, including Canada. Of the Canadian addresses, all in Ontario, one matched an IP belonging to OPP headquarters in Orillia.alleged Citizen Lab was careful, and this case keeps its care: the researchers reported "possible links," an inference from network fingerprints, not a confession, and the OPP did not confirm it.

Carry it as exactly that weight and no more. The inference is specific enough to be worth stating, and it strongly suggests the OPP is a Paragon customer and that Graphite is one of the ODITs in Ontario use.analysis Paragon was co-founded in 2019 by former Israeli prime minister Ehud Barak and Ehud Schneorson, a former commander of the signals-intelligence Unit 8200; its rival, NSO Group, sells the near-identical Pegasus.reported And the reporting names more than one force: alongside the OPP, the York, Hamilton and Peel regional services are among those said to hold or have sought ODITs.reported This is not one rogue purchase. It is becoming standard inventory, acquired case by case, court order by court order, with no province-wide debate about whether police should hold the power at all.

Paragon's own pitch is the tell inside the tell. It insists it sells only to governments that respect fundamental rights, that authoritarian regimes would never be customers, that it is, in short, the ethical spyware.attributed Hold that claim up against January 2025, when WhatsApp notified around ninety accounts across several countries that it believed they had been targeted with Graphite through a zero-click exploit, and the targets were not criminals under investigation but journalists critical of the Italian government and members of civil-society groups that rescue refugees at sea.reported Italy is a democracy that abides by international norms, and its government appears to have used the ethical spyware against reporters and rescue workers anyway. The ethics, it turns out, live in the marketing, not the tool.

§06 · But secrecy protects methods

There is a real argument on the other side and the case has to meet it head on. Secret capabilities do lose value when exposed: publish exactly how a tool defeats a given phone and you hand a manual to every target, and there are genuine reasons a live method is not read into the open record mid-investigation. Police also do not, as a rule, disclose the make and model of every surveillance device, and courts have long tolerated some protection of technique. Grant all of it. Method secrecy, bounded and reviewable, is a normal and defensible thing.

None of it is the case. The objection is not that police must publish the source code, or brief the public on the exploit, or that no method may ever be shielded from a defendant. It is that the shielding here is unbounded and unreviewable, and that it is enforced by forfeiting the prosecution, which is the one move that guarantees no neutral judge ever weighs the secrecy against the accused's right to test the evidence against him. There are ordinary remedies for a sensitive method, a defendant's cleared counsel, a closed hearing, an in-camera review by the judge, disclosure to the court under seal. The whole point of the pre-signed drop is to reach none of them. And there is a sharper reason to doubt the safety framing: cybersecurity experts note that these tools depend on unpatched vulnerabilities in ordinary phones, so a government that guards the vendor is also, in effect, choosing to keep the public's devices insecure, because naming the tool makes the hole easier to close.analysis "Protecting the method" and "keeping everyone's phone exploitable" can be the same sentence.

If the method is defensible, defend it in front of a judge. The launder is that the whole arrangement is built so a judge never rules.

§07 · What this is not

The series audits its own instinct here, the way it does whenever a structural reading could be misheard as the thing it is built to refuse.

It is not a claim that police use of ODITs is illegal. The tools are deployed on judicial warrants, and lawful use is exactly the frame this case works inside; the argument is about the secrecy that surrounds a lawful power, not a hidden crime. As in Case 01, the lawfulness is the point.

It is not a claim that the vendor's identity is proven. The Paragon–OPP link is an inference Citizen Lab itself labelled "possible," and it is carried here as reported and alleged, not as established fact; the case would stand whatever the vendor's name turned out to be, because the subject is the sealing, not the seller.

It is not a claim that the investigations were unjust or that the accused are innocent. Several ODIT cases targeted serious organised crime, and nothing here minimises that harm; a warrant can be justified and the secrecy around the tool can still be indefensible. The two questions are separate, and only the second is ours.

It is not an "Israeli control" reading of Canadian policing, and any such reading is refused here by name. That the leading vendors in this market are Israeli is a true and relevant fact about a surveillance-export industry, worth naming for the same reason the industry sands it off the invoice; it is not a theory about who runs anything, and the antisemitic template that turns a country's export sector into a slur about a people has no place in this file, as it had none in The Scrubbed Record.

And it is not a claim that no police method may ever be protected. Bounded, reviewable method secrecy is normal; the objection is to the unbounded, unreviewable kind, enforced by dropping the case so no judge ever tests it. The launder is a design, not a single bad decision.