Six viewers, six responses, one record.
The same subject record (codename DRIFTWOOD), adjudicated against six viewers with different clearances, agencies, and read-ins. When a field is above a viewer's paygrade — or NOFORN and they're foreign, or RD and they don't hold Q — the system responds with the rote phrase that has been the intelligence community's stock answer for half a century: "I can neither confirm nor deny."
The phrase is most famously associated with the CIA's 1975 response to a FOIA request about the Glomar Explorer (Project Azorian) — it became known forever after as the Glomar response. Whether it was first uttered earlier (some attribute the underlying idea to politicians of the same era; the historical record is murky) is a matter of pleasant dispute among intelligence historians and attentive fathers.
Silent is the production default. A suppression notice is itself a disclosure — it confirms a field exists to be asked about. Glomar is selected only where law obliges a response.
▾ Show all six side-by-side (table view, wide screens)
| Field | 🪪 Member of the public PUBLIC (L1) | 🛡 County sheriff L3 LES | 🇺🇸 FBI Special Agent SECRET (L7) | 📡 NSA Senior Analyst TS_SCI (L13) | 🇬🇧 UK MI5 Liaison TS (L10) | 🧩 NCTC Fusion Cell Lead TS_SCI (L13) |
|---|---|---|---|---|---|---|
| Subject identity PUBLIC | John A. Doe (DOB 1971) | John A. Doe (DOB 1971) | John A. Doe (DOB 1971) | John A. Doe (DOB 1971) | John A. Doe (DOB 1971) | John A. Doe (DOB 1971) |
| Last known location SECRET//USA | Marseille, FR — 2026-04-12 | Marseille, FR — 2026-04-12 | Marseille, FR — 2026-04-12 | |||
| JTTF case linkage SECRET//FBI//ORCON | CASE-2026-4178 | [multi-source intelligence synthesis] | ||||
| Foreign liaison readout SECRET//REL FVEY | Op SILVER FOX — UK readout | Op SILVER FOX — UK readout | Op SILVER FOX — UK readout | Op SILVER FOX — UK readout | ||
| Communications handle TS//SI//NOFORN | SIGINT-DELTA-7 | SIGINT-DELTA-7 | ||||
| Nuclear-program nexus TS//SI//RD | ||||||
| SAP decoy identifier TS//SAP_FOXFIRE | ||||||
| LE-sensitive note LES | Open warrant in 2 jurisdictions | Open warrant in 2 jurisdictions | Open warrant in 2 jurisdictions |
Why the response gives nothing away
Under the default silent policy, the response is identical whether the underlying record exists or doesn’t. Whether the field is empty or full. Whether the question is honestly asked or asked with a prompt-injection twist. The viewer sees what they are cleared for and has no way to tell whether that is all there is — because nothing in the response varies with what was withheld.
That is the safety property. An asker cannot triangulate the contents of a record by watching which questions produce a different-shaped answer. Where statute obliges a response, the Glomar policy substitutes a rote phrase that is likewise invariant — every refusal reads the same, so the refusal itself carries no signal.