Kirk to A/I - From Blapped to Booted: How a Political Killing Became Part of the Decision Tree that Ended at Autistici/Inventati

For a detailed breakdown of our investigation check out our 
DEDICATED INVESTIGATION PAGE

On August 26, 2026, a small Italian technology collective joined a list populated by organizations the United States considers terrorists. Autistici/Inventati had spent twenty-five years doing decidedly less cinematic work: running digital infrastructure - email accounts, websites, mailing lists, encrypted communications, NoBlogs and other tools built around privacy and minimal collection of user data.

The U.S. government did not publicly accuse A/I of planting a bomb, carrying out a shooting or personally sabotaging a railway. The accusation was about what it provided to others. Treasury's Office of Foreign Assets Control designated Autistici/Inventati as a Specially Designated Global Terrorist under Executive Order 13224, saying it had materially assisted or provided technological support, goods or services in support of an act of terrorism. Treasury described the collective as digital infrastructure for violent far-left groups.

Less than forty-eight hours later, autistici.org stopped resolving normally. A/I also reported that PayPal had blocked its account. In the days that followed, Banca Etica temporarily suspended operation of A/I's account while assessing its exposure to possible U.S. secondary sanctions; the bank said the account had previously operated normally without anti-money-laundering concerns. The sanctions had crossed an ocean without anyone having to kick in an Italian server-room door. That is what an OFAC designation can do in an internet and financial system full of American chokepoints.

If the story begins on August 26, the designation looks almost inexplicable. Start eleven months earlier and the weirdness acquires a paper trail. The public record runs from the aftermath of Charlie Kirk's assassination through a conservative counterterrorism analyst's policy roadmap, a White House meeting attended by journalists who had spent years covering Antifa, a formal request to Secretary of State Marco Rubio, a Portland blog controversy, a Daily Caller investigation, Senate testimony and a set of European terrorist designations. At the end of that sequence sits Autistici/Inventati.

The public record still does not tell us who first referred A/I to Treasury or State, when a targeting file was opened, which agencies supplied the evidence, or what private communications accompanied the public campaign. Those missing records prevent a responsible reporter from claiming that any outside advocate personally caused A/I's designation. They do not erase the path already visible.

AFTER KIRK

Charlie Kirk was assassinated on September 10, 2025. Six days later, Kyle Shideler, director and senior analyst for homeland security and counterterrorism at the Center for Security Policy, published an article under a stark title: "Antifa Is Responsible For Charlie Kirk's Assassination." That was Shideler's argument, not an official finding that the accused assassin belonged to a formal Antifa organization.

Shideler's point was partly that formal membership was beside the point. He treated Antifa less as an organization with cards and headquarters than as a networked ideological movement whose participants could act without a conventional command structure. The distinction matters because it would soon become central to the government's own framing.

One day later, Shideler published something more consequential than an opinion about the killing. It was a plan. Titled "How to Dismantle Far-Left Extremist Networks," the September 17 memo described itself as "A roadmap for the Trump Administration" and called for a coordinated government campaign using intelligence, immigration authorities, the State Department, Treasury, Homeland Security, law enforcement and cooperation with foreign governments.

State, he wrote, should work with foreign partners to identify far-left groups for terrorist designations. He offered examples: Germany's Hammerbande; Greek anarchist and antifascist organizations; and, as a more aggressive option, Palestine Action. Shideler also argued that a blanket foreign terrorist designation of "Antifa" would likely create legal and bureaucratic difficulties. A slower, piecemeal approach, he said, would be more likely to survive them. Less slogan, more targeting queue.

The date matters. On September 17, A/I had not yet become a public target in this story. The White House had not issued its Antifa order. Andy Ngo had not made his proposal in the Cabinet Room. The European groups had not been designated. A/I would not be sanctioned for almost another year. Yet the architecture Shideler wanted was already on the page.

FROM INDIVIDUALS TO NETWORKS

On September 22, President Donald Trump issued an order purporting to designate Antifa a "domestic terrorist organization." Three days later came the more operationally important document: National Security Presidential Memorandum 7.

NSPM-7 explicitly invoked Kirk's assassination while arguing that political violence should not be treated as a series of isolated incidents. It directed the government to investigate and disrupt "networks, entities, and organizations" and instructed Joint Terrorism Task Forces to examine institutional and individual funders and people alleged to aid principal actors. Whatever legal debate surrounded the novel domestic "designation," the policy signal was not subtle: the target set was widening.

Not only the person alleged to have committed an act, and not only the organization alleged to have planned it. The networks, funders, support structures and entities around them were now part of the frame. That shift is necessary to understand how a hosting and communications collective eventually entered a terrorism case. A/I was later sanctioned not because the public designation accused it of personally conducting the attacks described by State, but because the government alleged its infrastructure supported people and groups connected to them. The conceptual move from perpetrator to enabling structure had already been made.

ANDY NGO TAKES THE ARGUMENT INTO THE WHITE HOUSE

On October 8, 2025, the White House held an official roundtable devoted to Antifa. Among the participants was Andy Ngo, who had spent years documenting and publicizing antifascist activists, particularly in Portland, and had himself been assaulted while covering street demonstrations. Now he was speaking directly to the president and members of the Cabinet.

Near the end of his remarks, Ngo proposed another step: the State Department, he said, should consider designating Antifa's international arm as a Foreign Terrorist Organization. It would be easy to overstate what happened next. There is no public evidence that Ngo named Autistici/Inventati, and no transcript shows him handing Rubio a list with A/I on it. But there is unusually clear evidence that the policy proposal landed in the room.

Later in the same meeting, a reporter told Trump he was "echoing what Andy said" and asked whether the administration would designate Antifa internationally. Trump asked the room whether they agreed, then said: "Let's get it done... Marco will take care of it." The Marco was Secretary of State Marco Rubio. Government policymaking rarely hands reporters dialogue this tidy. The next day made the connection even harder to miss.

A LETTER TO RUBIO

On October 9, Sen. Eric Schmitt of Missouri wrote directly to Rubio. "I write to you today," the letter began, urging the secretary to designate foreign networks, organizations and financiers alleged to enable Antifa operations as Foreign Terrorist Organizations. Schmitt explicitly referenced the previous day's White House meeting and Trump's statement: "Let's get it done."

The sequence is therefore not inferred from ideological similarity. October 8: the international designation mechanism is advocated inside the White House, and Trump says Rubio will handle it. October 9: a senator sends Rubio a formal written request seeking essentially that action. The question still remained: against whom? The answer would begin taking shape in Portland.

PORTLAND BECOMES THE BRIDGE

In October 2025, Rose City Counter-Info, an anonymous Portland publication hosted through NoBlogs, published a post about using lasers against federal aircraft. Ngo circulated screenshots and framed the post as evidence of an Antifa operation. Fox News covered it. A Department of Homeland Security spokesperson responded with a promise that the government would "bust their networks."

There are three layers to that episode: the content of the post, the way political media and government officials interpreted and amplified it, and the infrastructure underneath it. For this investigation, the third layer is the hinge. Rose City Counter-Info was on NoBlogs. NoBlogs is operated by Autistici/Inventati. That technical relationship created the breadcrumb that pulled an Italian privacy collective into an American counterterrorism narrative.

OCTOBER 16: A/I GETS A NAME

On October 16, Daily Caller News Foundation reporter Hudson Crozier published "Shadowy Foreign Tech Group Keeps Police Off Antifa's Trail." The article connected Rose City Counter-Info and other anonymous or militant publications on NoBlogs to Autistici/Inventati. Near the end, Crozier turned from identification to law and asked Shideler how authorities could reach an entity like A/I.

Shideler's answer is one of the most important statements in this chronology. If foreign terrorist designations were secured, he said, "going after organizations like this that provide material support would be job one." Without such a designation, he added, authorities would struggle because the services involved were otherwise lawful.

Read chronologically, the significance is difficult to miss. September 17: Shideler urges the government to build foreign terrorist predicates piece by piece. October 8: Ngo urges State to use the FTO mechanism. October 9: Schmitt formally requests foreign designations from Rubio. October 16: A/I is publicly identified as a service provider, and Shideler explains why foreign designations would make providers like it easier to reach. No internal memo is needed to prove that legal theory existed. It was being described in public.

TWELVE DAYS LATER, THE THEORY ENTERS CONGRESS

On October 28, Shideler testified before the Senate Judiciary Committee's Subcommittee on the Constitution. His written testimony made the infrastructure theory explicit: networks of smaller direct-action groups, he argued, were connected through organizations, online platforms and support networks, and the material support they provided was "primarily in the form of services, rather than financial transactions."

Then he named Autistici/Inventati. Shideler told the committee that NoBlogs was provided by the Italy-based A/I collective and described A/I as supplying websites, email and encryption tools. The footnote supporting that section was Crozier's October 16 Daily Caller article.

That creates an unusual source loop. Crozier's reporting quoted Shideler as an expert explaining why designation could make infrastructure providers legally vulnerable. Twelve days later, Shideler appeared before Congress and cited Crozier's resulting article while presenting A/I as part of the support network. This does not establish that Crozier's underlying reporting was false; his article contained evidence independent of Shideler. But it does complicate any impression that three wholly independent layers of verification had materialized out of thin air.

The pathway was closer to a citation boomerang: a journalist investigates A/I; an outside policy expert helps interpret why the evidence matters; the expert then cites the resulting article when placing A/I before Congress. That distinction matters when reconstructing how a claim gains institutional weight as it travels from media into government.

THEN THE PREDICATES APPEARED

On November 13, Rubio's State Department announced the designation of four European organizations as Specially Designated Global Terrorists, with Foreign Terrorist Organization designations to become effective November 20: Antifa Ost, also known as Hammerbande; the Informal Anarchist Federation / International Revolutionary Front; Armed Proletarian Justice; and Revolutionary Class Self-Defense.

Schmitt later said the designations followed both his October letter and several meetings with State Department officials urging the department to identify foreign Antifa-linked networks for designation. Compare the list with Shideler's September roadmap: he had specifically identified Germany's Hammerbande as one possible target, recommended Greek anarchist organizations, and advocated a piecemeal strategy rather than trying to designate Antifa wholesale.

The overlap does not prove State selected those organizations because Shideler recommended them. A government may arrive independently at the same targets as an outside analyst. What makes the chronology significant is that the recommendation came first, publicly and specifically.

There is another reason the November designations matter. Three of the four - FAI/FRI, Armed Proletarian Justice and Revolutionary Class Self-Defense - later appeared in the government's public description of content or communiques carried on A/I-linked infrastructure. In other words, the government established foreign terrorist predicates in November, and those predicates later became part of its narrative against the infrastructure provider. That does not prove they were established for the purpose of reaching A/I. Whether anyone inside government was thinking about A/I or NoBlogs while selecting the November targets is precisely the sort of question internal records could answer.

A POLICY BECOMES INTERNATIONAL

By July 2026, the campaign was no longer limited to a domestic White House initiative. Rubio convened officials from more than sixty countries in Washington for a ministerial focused on political terrorism. Reuters reported that Rubio said the United States would redirect counterterrorism attention toward what he called "far-left terror," describing the threat as increasingly transnational.

Treasury later explicitly tied its August sanctions package to that broader effort. Its August 26 release described a government-wide campaign to disrupt the infrastructure allowing targeted groups to operate and coordinate across borders. Then came A/I.

AUGUST 26

Treasury sanctioned Autistici/Inventati alongside Palestine Action and Masar Badil. Palestine Action is especially notable because it, too, had appeared as a potential target in Shideler's September 17 roadmap. A/I's designation was different: OFAC's own listing identifies Autistici Inventati's organization type as "Data processing, hosting and related activities."

Treasury said the collective provided website hosting, encrypted email, chat, videoconferencing and other infrastructure used by violent left-wing groups. It designated A/I under Executive Order 13224 for materially assisting or providing support, technology, goods or services connected to terrorism. The action was administrative, not a criminal conviction. There was no public trial in which A/I could cross-examine government witnesses or force disclosure of the administrative record before the sanctions took effect.

And the most consequential factual questions are not resolved by Treasury's press release. State's public case alleged that A/I-linked infrastructure had carried communiques, claims of responsibility or other material associated with sabotage in Europe and with designated groups. But hosting material is not, by itself, identical to planning an attack, directing one, financing it or endorsing it. The evidentiary chain matters more than the press-release verbs.

Did the government conclude A/I knew of particular activity before it occurred? Did it distinguish ordinary hosting from tailored assistance? What evidence connected particular users to particular acts? What did A/I personnel know? Which services were supplied directly, and which content merely appeared on a platform? The public releases do not answer those questions. The administrative record might.

THE CHOKEPOINT EFFECT

A/I's experience after August 26 demonstrates why the designation itself may be as consequential as any later prosecution. OFAC placed A/I on the SDN list, while General License 36 allowed transactions ordinarily necessary to wind down relationships with the collective through September 25.

Yet on August 28, autistici.org stopped resolving normally and technical records showed the domain in serverHold, a registry-level status that removes a domain from normal DNS publication. A/I attributed the action to Public Interest Registry, the U.S.-based operator of .ORG. A/I said PayPal blocked its account. Banca Etica suspended operation of its bank account while evaluating whether continuing the relationship could expose the bank and its customers to U.S. sanctions consequences.

The effects propagated through systems A/I did not control: domain registry, payments, banking and other service providers conducting their own exposure calculations. A U.S. sanctions action did not need to physically seize A/I's servers in Italy to disrupt its ability to communicate and operate. No server-room raid required. The network did the enforcement.

WHAT THE RECORD PROVES

The public record establishes a substantial chronology. After Kirk's assassination, Shideler publicly framed the killing as part of an Antifa threat and then published a government roadmap proposing international designations, Treasury action and a piecemeal targeting strategy. The White House adopted a whole-of-government framework focused not only on alleged perpetrators but also on networks, organizations, funders and support structures.

Ngo advocated an international terrorist designation while speaking to Trump and Cabinet officials. A reporter explicitly echoed Ngo's proposal. Trump publicly said Rubio would handle it. Schmitt wrote Rubio the following day requesting foreign designations. A Portland controversy directed national attention toward a NoBlogs-hosted site. Crozier traced NoBlogs to A/I. Shideler then publicly explained that foreign terrorist predicates could make service providers like A/I easier to pursue, and twelve days later named A/I and NoBlogs before the Senate while citing Crozier.

State subsequently designated four European groups. Three later appeared in the government's public case involving A/I-linked infrastructure. In August 2026, OFAC sanctioned A/I under a support-and-services theory. Those are facts in public documents. They establish a sequence. They do not, by themselves, establish secret coordination or causation. Journalism is irritating that way: the interesting pattern still has to survive the evidence.

WHAT IT DOES NOT PROVE

There is still no public evidence showing that Ngo personally told Rubio to target Autistici/Inventati. There is no disclosed message from Shideler to Treasury saying "designate A/I," no public proof that Crozier's Daily Caller article was placed into OFAC's targeting file, and no public record identifying the person or agency that first referred A/I.

We do not know when the designation process formally began, which agencies supplied the evidence, whether State considered A/I when selecting the November European targets, or what role, if any, Italian authorities or other foreign governments played in producing the information used by Washington. Calling the visible chronology a secret conspiracy would outrun the evidence. Pretending the chronology is uninteresting would require ignoring a remarkable amount of paper.

THE MISSING FILE

That leaves one document - more likely, one collection of documents - at the center of the story: the administrative record. Sabot Media is seeking OFAC's targeting memorandum and underlying A/I designation file, along with State, Treasury, FBI, DHS and White House records that could establish how information moved inside the government.

The search includes communications mentioning Autistici/Inventati, NoBlogs, Rose City Counter-Info and Abolition Media, as well as records connecting those terms with Andy Ngo, Hudson Crozier, Kyle Shideler, the Center for Security Policy and Sen. Eric Schmitt. It also includes White House material surrounding the October 8 roundtable, records generated after Shideler's October 28 testimony, files related to the November European designations, planning for Rubio's July 2026 ministerial, and communications with Italian officials.

Those records could show several very different things. Career officials may have independently developed the A/I case while the public advocacy reconstructed here ran mostly in parallel. Media reporting or congressional testimony may have supplied leads but not evidence. Or the records could establish a more direct transmission path between outside advocates and the officials responsible for the designation. At this stage, all three remain possible. The documents will decide.

FROM A THEORY TO A SANCTION

The August 26 designation seems bizarre when treated as an isolated act. The previous eleven months make it less mysterious. First came a political theory: "Antifa" should be understood not simply as individuals committing crimes, but as a network whose support infrastructure could itself be targeted. Then came a proposed strategy: use foreign terrorist designations, Treasury sanctions, intelligence and international cooperation to dismantle that network piece by piece.

Then the theory moved into the White House, into a formal letter to the secretary of State, through a Portland controversy that exposed a line to NoBlogs, into national political media and congressional testimony. Then foreign groups were designated. Some of those same designations later appeared in the government's public case against A/I. Finally, the infrastructure provider was sanctioned under the kind of support-and-services theory that had been publicly described months before.

That sequence does not tell us who made the decisive referral. It tells us why finding that referral matters. The public record already shows a political theory becoming a media narrative, a media narrative entering Congress, foreign terrorist designations being established, and a communications provider eventually becoming a counterterrorism target.

The missing administrative record is no longer a gap around the story. It is the story.