Posts

“Rights” and Wrongs: Where the Stolen Documents Investigation Is Headed

I want to start this post about where the stolen documents investigation may be headed with an observation a commenter here made about this passage of the superseding indictment: the import of the word, the “rights,” coming from an IT guy who would think in terms of access privileges.

The passage comes in the midst of the Keystone Cops routine where Walt Nauta and Carlos De Oliveira try to figure out how to achieve Trump’s apparent order — probably given during a 24-minute phone call to De Oliveira on June 23 and to Nauta face-to-face at Bedminster sometime between 3:44 and 5:02PM on June 24 — to delete the surveillance server. They were stomping around, squawking about how sensitive this mission was. Nauta sent someone texts with shush emojis and De Oliveira told a valet Nauta’s visit should remain secret.

The evening of June 25 — one day after DOJ sent Trump Organization a subpoena for surveillance video — they get a flashlight and go to inspect what the surveillance cameras would pick up; by moving in front of the surveillance cameras, which we now know are motion activated, they would have triggered the cameras, thereby creating more damning surveillance footage.

Imagine the video exhibit at trial, as both Nauta and De Oliveira point a flashlight at the surveillance camera that, weeks earlier, caught both of them moving just half the boxes full of classified documents back into the storage room, two earnest faces looking straight into the camera. That footage wouldn’t be covered by the subpoena they were, at that moment, trying to defy; it would probably be covered by the next subpoena.

Two days later (there’s no indication of how Nauta spent his day on Sunday June 26), on June 27, De Oliveira walks into the IT room and asks Yuscil Taveras in front of a witness (possibly in front of another security camera) to step away so they could speak. They go to what they call an “audio closet” (which could be the decommissioned SCIF) and De Oliveira tells Taveras that “the boss” wants the surveillance server deleted.

Taveras says three things in response:

  1. He doesn’t know how to accomplish that
  2. He doesn’t have the “rights” to do that
  3. To accomplish the task, De Oliveira would have to reach out to one of the Matthew Calamaris

The words, “rights,” here hasn’t gotten enough attention. Taveras was saying that he did not have the computer privileges to just delete the surveillance server: one of the Matthew Calamaris in New York would have to be involved to make such a thing happen.

So after that, De Oliveira checks back in with Nauta (who has flown to Florida to accomplish this task, along with whatever he did on June 26), they stomp around some more in suspicious ways that are visible to yet more surveillance cameras, and then two hours later Trump speaks to De Oliveira for 3.5 minutes. As described, Trump calls De Oliveira, not the other way around.

Remember how I said — of the January 6 investigation — that the January 6 investigation would take more time than the Watergate investigation because, unlike Nixon, Trump is not known to have wiretapped himself?

Well, on the stolen documents investigation, he did, effectively, wiretap himself, or at least all the employees he sent to accomplish his corrupt mission. And then Trump tried, over and over, to Rosemary Woods away incriminating video, at least this first time, captured on video again.

But amid all the Keystone Cops stomping around talking about secrets while on surveillance camera and sending shush texts, what Taveras said is an important hint of where this investigation may go next (as I laid out here).

Thus far, this story — and the conspiracy as charged so far — is just a story of a failed attempt to destroy surveillance video. De Oliveira: Can you delete the server? Taveras: Nope. I don’t have the rights. Stomp stomp stomp, almost all of it on surveillance video.

The Keystone Cops caper ends with Trump calling De Oliveira at 3:55PM on June 27, with no word of what led Trump to call De Oliveira and no word of whether whatever video got deleted was deleted in Florida or New York, or somewhere else.

The superseding indictment doesn’t mention, for example, the text that Nauta sent Calamari Sr — possibly even between 1:50PM when he and De Oliveira were stomping in bushes adjacent to Mar-a-Lao and the phone call that Trump made to De Oliveira at 3:55PM.

Both Calamaris testified to the federal grand jury in Washington on Thursday, and were questioned in part on a text message that Trump’s valet, Walt Nauta, had sent them around the time that the justice department last year asked for the surveillance footage, one of the people said.

The text message is understood to involve Nauta asking Matthew Calamari Sr to call him back about the justice department’s request,

Calamari was the guy, Taveras told De Oliveira, who would have the privileges to delete surveillance footage. And sometime in that period, Nauta texted him about the surveillance request.

Thus far, this is a story and a crime about an alleged attempt to delete surveillance footage. But we can be pretty certain that surveillance video was, in fact, deleted. That’s because reporters have reported on witnesses being asked that for months. There would be no reason to obtain nine months of surveillance video — 57 terabytes of raw video, if you can believe the defense attorneys — unless there was a whole bunch more to learn from the surveillance videos.

The initial production also included some 57 terabytes of compressed raw CCTV footage (so far there is approximately nine months of CCTV footage, but the final number is not yet certain).

And there would be no reason for Trump, on August 26, to get Nauta to verify De Oliveira’s loyalty (stomp stomp stomp) before arranging to provide him a lawyer if what came next, what happened after Trump’s phone call to De Oliveira on June 27 isn’t even more damning.

Indeed, that’s why it matters that — buried in a Devlin Barrett story opining that De Oliveira’s, “alleged actions could bolster the obstruction case against the former president” because apparently Devlin hasn’t learned his lesson about presenting evidence of more serious crimes and calling it obstruction — Trump (unusually) came back to Mar-a-Lago twice between June 3 and August 8: once from July 10 to 12, and once again on July 23, and that De Oliveira told the FBI he had given away the key to storage when they showed up on August 8.

The Keystone Cop caper, in part because it is so colorful and in part because it is charged as an unsuccessful attempt, has distracted most commentators from the fact that there was a more successful attempt, and that more successful attempt didn’t hide the movement of boxes in and out of the storage closet. As I’ve noted, all the movement of boxes in May and June shows up in the search affidavit relying on what DOJ did get from Trump, save one: Nauta’s retrieval of a single box on May 22.

The superseding indictment describes that the subpoena asked for footage from “certain locations,” plural, of which the basement hallway is just one. And the most recent unsealing of the affidavit reveals that the only cameras included on the hard drive of surveillance footage turned over on July 6 were four cameras in the basement hallway. So one way or another, footage of those other locations was not turned over in response to the first subpoena.

Everyone treats this indictment as a terminal indictment — and if that’s as far as Jack Smith gets, it’s still far more damning than most everyone imagined on June 8. But multiple public references — the discussion on July 13 of continued efforts to fully exploit Nauta’s phone, the reference in DOJ’s descriptions of discovery that suggest there’s a grand jury somewhere other than DC or SDFL, and the suggestion that interviews have continued after June 23 — suggests that the current instantiation of the indictment is intended to be part of an ongoing investigation.

I noted from the first indictment that it was a “tactical nuke” designed to persuade Nauta to cooperate. Not only hasn’t the effort worked, but Stan Woodward has adopted a position on classified discovery — that Nauta, in addition to his attorneys, should get to see all the stolen classified documents — that I think makes it more likely DOJ would supersede to add a conspiracy to retain classified documents charge with him, because the elements of offense are all satisfied in the existing indictment.

Here are the obvious things that obtaining credible cooperation from Nauta would obtain:

  • ¶25: Details of Trump’s intent as Nauta helped pack up documents from the White House
  • ¶46: Why Trump was trying to hide when he instructed Nauta to replace the lids of the boxes
  • ¶54: What he was sent for on May 22
  • ¶61: What Trump instructed Nauta before he moved half the boxes back into storage for Evan Corcoran to search
  • ¶73: What boxes got loaded on the plane to Mar-a-Lago on June 3
  • ¶78: What Trump told him at Bedminster that led him to fly to Florida and try to bury the surveillance video (as well as what else he did on June 26, which is not accounted for)
  • ¶86: What both men discussed in the bushes
  • How Nauta came to text Matthew Calamari
  • ¶91: How Trump came to ask Nauta to ascertain De Oliveira’s loyalty and whether Trump had similarly offered him legal representation
  • What Nauta witnessed as Trump’s bodyman, especially in Bedminster

Here are the obvious things that obtaining credible cooperation from De Oliveira would obtain:

  • ¶76: Details of the 24-minute call he had with Trump, while Trump was at Bedminster
  • ¶86: What both men discussed in the bushes
  • ¶87: What Trump said on the phone call and whether De Oliveira had a role in the successful deletion of video, and how he knew what to delete
  • ¶91: What the terms of his representation are and whether it led him to lie (a question, other reports have made clear, many witnesses have been asked)
  • Why Trump returned to Mar-a-Lago twice before the August 8 search
  • To whom he gave the key to the storage room and on whose orders
  • Whether the October flood of the server room was an(other) attempt to destroy surveillance footage and if so, whether he was instructed to do so

De Oliveira might be a key witness to lead Nauta to reconsider his decision to protect Trump.

More importantly, one or both might be irreplaceable witnesses to answer a number of closely intertwined questions:

  • How is Trump is using lawyers to command loyalty and does it create conflict or obstruction issues
  • What surveillance footage has Trump prioritized for destruction and why
  • Why did Trump steal the documents, how has he used them, and where did the ones that went to Bedminster disappear to
  • What role does Trump’s PAC have in exploitation of the documents
  • What role does Trump Organization have in exploitation of the documents
  • Who else has had ready access to these documents

All this superseding indictment shows is that Trump had something to hide that goes beyond his desire to hoard the classified documents. Jack Smith may require the cooperation of one or both of these men to fully understand what Trump is really hiding.

This fairly remarkable post from the WSJ opinion page demonstrates the stakes of trying to answer it. It’s a pitch to elect someone other than Trump in the GOP primary, and premised on an utterly bullshit claim that Biden has politicized justice. But it gets a good distance of the way to an important discovery: even the Keystone Cops attempt already included in the indictment totally debunks Trump’s public defense, because if he believed in June 2022 that he had the right to keep these, he wouldn’t have dug himself — and thus far two staffers — deeper into a legal hole.

If Mr. Trump sought to destroy evidence, it undercuts his defense on the document charges. He contends that the Presidential Records Act gives him the right to retain documents from his time in office. But if Mr. Trump believed that, he would have played it straight. If the indictment is right that he hid the files from his own lawyers and tried to wipe the security video to stop anybody from finding out, then he didn’t buy his own defense.

From a Murdoch rag, this is a really important insight. But then WSJ predictably refuses to take the next logical step: That Trump’s obstruction makes it clear he didn’t just do this out of pigheadedness.

Prudential questions about the wisdom of this prosecution remain. Mr. Trump appears to have kept the files out of pigheadedness, not because he wanted to do something nefarious like sell them to an adversary. The FBI raided Mar-a-Lago to recover the documents.

The episode reflects poorly on Mr. Trump. But is this conduct that truly gives President Biden no choice except to ask a jury to jail his leading political opponent in next year’s election? At least Watergate involved a burglary.

We can’t even rule out a burglary, if Trump learned that he compromised these documents by storing them in his beach resort! Especially since De Oliveira claimed he had given the key away to others. We can’t rule out selling them to an adversary! We sure as hell can’t rule out trying to exploit them for the success of his PAC.

The indictment and an attempt to try this before the general election is an important goal, though potentially unrealistic given the CIPA challenges.

But it really is important to learn what Trump did do with these documents, who got the key, where they disappeared to.

This indictment doesn’t answer the question of why Trump stole these documents or what he did with them. All the superseding indictment did is make the question more urgent.

Update: Fixed Trump’s location from whence he called De Oliveira — the first call would have been Bedminster.

Chekhov’s Alan Garten: The Human Gaps in the Surveillance Footage Gap

This post noted, shortly after Trump’s first stolen documents indictment, that the indictment included nothing about the gaps in surveillance footage DOJ spent much of the last year investigating. It also noted that the indictment did not name the maintenance guy who had played a role in moving boxes around.

But the indictment doesn’t hint at when DOJ found gaps in surveillance footage, the topic of numerous recent interviews, or how those gaps got there. In fact, the maintenance guy who flooded the server room doesn’t appear to be mentioned in the indictment at all (his actions are described in ¶61 and ¶72, without a label for him).

As Jay Bratt’s notice to Aileen Cannon of the new details in the superseding indictment released last night explained, those paragraphs now identify newly-charged Carlos De Oliveira by name.

Paragraphs 62 and 63 now identify De Oliveira as the person who helped Nauta move approximately 30 boxes from Trump’s residence to the Storage Room on June 2, 2022, whereas paragraph 61 of the earlier indictment referred to De Oliveira as “an employee of The Mar-a-Lago Club”;

Paragraph 73 alleges that De Oliveira was one of the “others” identified in paragraph 72 of the original indictment who, on June 3, 2022, with Nauta, “loaded several of Trump’s boxes along with other items on aircraft that flew Trump and his family north for the summer”;

Yet even with the inclusion of De Oliveira in the indictment, the gaps about the gaps in the surveillance footage remain.

The conspiracy added to the indictment, laid out in ¶74 through ¶87, describes an attempt to destroy surveillance footage. As described, Walt Nauta and De Oliveira asked someone, identified in the indictment as Trump Employee 4 but who is likely Yuscil Taveras (identified in this story from NYT), to delete the surveillance server, but he said he could not. He told De Oliveira to contact the supervisor of security for Trump Organization.

83. On Monday, June 27, 2022, at 9:48 a.m., DE OLIVEIRA walked to the IT office where Trump Employee 4 was working with another employee in the IT department. DE OLIVEIRA requested that Trump Employee 4 step away from the office so that DE OLIVEIRA and Trump Employee 4 could talk.

84. At 9:49 a.m., Trump Employee 4 and DE OLIVEIRA left the area of the IT office together and walked through a basement tunnel. DE OLIVEIRA took Trump Employee 4 to a small room known as an “audio closet” near the White and Gold Ballroom. Once inside the audio closet, DE OLIVEIRA and Trump Employee 4 had the following exchange:

a. DE OLIVEIRA told Trump Employee 4 that their conversation should remain between the two of them.

b. DE OLIVEIRA asked Trump Employee 4 how many days the server retained footage. Trump Employee 4 responded that he believed it was approximately 45 days.

c. DE OLIVEIRA told Trump Employee 4 that “the boss” wanted the server deleted. Trump Employee 4 responded that he would not know how to do that, and that he did not believe he would have the rights to do that. Trump Employee 4 told DE OLIVEIRA that DE OLIVEIRA would have to reach out to another employee who was the supervisor of security for TRUMP’s business organization. DE OLIVEIRA then insisted to TRUMP Employee 4 that “the boss wanted the server deleted and asked, “what are we going to do?” [my emphasis]

But that section ends with Nauta and De Oliveira meeting in the bushes just off Mar-a-Lago property the next day, then walking to the IT office, then walking back to the bushes again. There’s no allegation that Nauta and De Oliveira succeeded in deleting the video.

The entire section is bookended with these paragraphs, which — and I say this as a PhD in Comparative Literature — are narratively brilliant.

74. On June 3, 2022, when FBI agents were at The Mar-a-Lago Club to collect the documents with classification markings from Trump Attorney 1 and Trump Attorney 3, the agents observed that there were surveillance cameras located near the Storage Room.

75. On June 22, 2022, the Department of Justice emailed an attorney for TRUMP’s business organization a draft grand jury subpoena requiring the production of certain security camera footage from The Mar-a-Lago Club, including footage from cameras “on ground floor (basement),” where the Storage Room was located.

76. On June 23, 2022, at 8:46 p.m., TRUMP called DE OLIVEIRA and they spoke for approximately 24 minutes.

[snip]

87. [On June 27] At 3:55 p.m., TRUMP called DE OLIVEIRA and they spoke for approximately three and a half minutes. [my emphasis]

The section starts and ends with a call to Trump. But never explains how the gaps ended up in the surveillance footage.

Let me go back.

As noted, and as Bratt noted, the original indictment didn’t identify De Oliveira at all. He was just some “other” guy involved, an employee of the club. In fact, in its first indictment, DOJ used a curious dual form of naming. The following people are clearly identified:

  • Trump and Nauta
  • Trump Employee 1
  • Trump Employee 2 (Molly Michael)
  • PAC Representative (reportedly Susie Wiles)
  • Trump Representative 1 (probably Alex Cannon)
  • Trump Attorney 1 (Evan Corcoran)
  • Trump Attorney 2 (possibly Boris Epshteyn)
  • Trump Attorney 3 (Christina Bobb)

Then there are people who are not identified by name:

  • ¶6a, ¶34: the people to whom he showed the Iran document, and the two staffers (reportedly Margo Martin, who recorded it, and Liz Harrington) who witnessed the interview
  • ¶19: the high level intelligence officials who briefed Trump
  • ¶24: other members of Trump’s White House staff, in addition to Nauta, who helped pack up boxes
  • 58c: A female Trump family member
  • ¶61: an employee of The Mar-a-Lago Club (De Oliveira)
  • ¶72: others, including De Oliveira, who helped load up boxes to go to Bedminster

This new indictment adds three identified Trump employees:

  • Trump Employee 3: the co-worker — who would have been at Bedminster — who alerted Nauta that Trump wanted to see him
  • Trump Employee 4: the IT worker, probably Taveras
  • Trump Employee 5: a valet who was asked — and confirmed in a Signal chat with Nauta — that De Oliveira was loyal

And the indictment adds several more unidentified Trump employees, several of which (like the reference to the female Trump family member in the first) could be sourced entirely to communications obtained from Nauta’s phone.

  • ¶77: The attorney for TRUMP’s business organization
  • ¶79: The people to whom Nauta gave inconsistent explanations of why he was making a secret trip to Florida: one person Nauta told he would not travel with Trump and a Secret Service agent
  • ¶83: Another employee in the IT department
  • ¶84c: Supervisor of Security for Trump’s business organization

Significantly, the original indictment describes how DOJ obtained surveillance footage this way:

In July 2022, the FBI and grand jury obtained and reviewed surveillance video from The Mar-a-Lago Club showing the movement of boxes set forth above.

Though the search warrant affidavit had described that “counsel for the Trump Organization” had a role, the original indictment made no mention of that. It was like a virgin birth of surveillance footage, delivered to the FBI with no explanation.

The other figures described but not named in the superseding indictment may or may not appear in later installments of this tale, like a gun shown in an early act of a play that later goes off.

The last — supervisor of security — is almost certainly Matthew Calamari, Sr, who was one of the very last people to appear before the DC grand jury before this case was moved to Florida and charged. Both Calamari and his son were asked why Nauta texted one of them (it turns out to have been Sr.) to call him about the subpoena request.

Both Calamaris testified to the federal grand jury in Washington on Thursday, and were questioned in part on a text message that Trump’s valet, Walt Nauta, had sent them around the time that the justice department last year asked for the surveillance footage, one of the people said.

The text message is understood to involve Nauta asking Matthew Calamari Sr to call him back about the justice department’s request,

But that exchange is for another indictment, possibly even another venue.

In this indictment, though, the attorney for Trump Organization, almost certainly Alan Garten, plays two roles. First, he received the draft subpoena from Jay Bratt on June 22 (this begins to explain the discrepancy regarding the date of the subpoena that I’ve been obsessed with from the start). And he’s the most likely explanation for why, the next day, Trump called De Oliveira and spoke for 24 minutes.

That is, Garten likely told Trump about the subpoena, which set off a process by which employees attempted to destroy surveillance footage in Florida.

According to Michael Cohen’s testimony, Alan Garten is the one responsible for Cohen’s document production to Congress, which ended up withholding documents showing him contacting Dmitri Peskov’s office. And according to the SSCI Report, there were other, “known deficiencies in the Trump Organization’s document responses.”

While DOJ has interviewed Calamari (and so may or may not have gotten honest testimony about what happened when he called Nauta), they are not known to have interviewed Alan Garten, the bar for which would be very high. They have, however, interviewed Alina Habba, who played a role in a suspected Alan Garten shell game to withhold documents from New York State, and in the process did a search of both Bedminster and Mar-a-Lago before DOJ served a subpoena for classified documents.

In spite of all these new details and new players, we still don’t know what happened between June 27, 2022, when Trump Employee 4 told De Oliveiras to reach out to Matthew Calamari and when Trump spoke to De Oliveira for three and a half minutes, and July 6, when Trump Organization turned over two months of video that reportedly had gaps in it.

There are still gaps in this story about how the reported gaps got into the surveillance footage. Indeed, there are still gaps about what the gaps attempted to hide!

As I showed here, the surveillance footage the FBI did get appears to have shown virtually all of Nauta’s box movements — and would have shown De Oliveira helping Nauta move 30 boxes back into storage on June 2 — because the search warrant affidavit relies on it. But they may not have shown Walt Nauta remove a single box from storage on May 22.

That, of course, was just the first subpoena for surveillance footage. There were more, undoubtedly including for footage showing Nauta and De Oliveira checking out the surveillance cameras with a flashlight on June 25, 2022, entering the IT department, walking through a basement tunnel and into an “audio closet,” then walking back into the IT office on June 27, and possibly, still on June 27, walking into the bushes just off of Mar-a-Lago property for two discussions. This superseding indictment must rely on a later subpoena for more surveillance footage from which the specific times of these movements would have been obtained.

Indeed, when De Oliveira allegedly flooded the IT room in October — at a time when Judge Aileen Cannon had put a stay on the investigation of these activities — he may have been attempting to thwart a second or third subpoena attempt, a cover up of the attempted cover up, an attempt to destroy the surveillance footage that ended up in this indictment.

Altogether, the surveillance footage that DOJ has since obtained covers nine different months.

The initial production also included some 57 terabytes of compressed raw CCTV footage (so far there is approximately nine months of CCTV footage, but the final number is not yet certain).

DOJ claims to have pinpointed which cameras they wanted and on what specific dates.

The Government similarly identified to the Defendants a small subset of “key” CCTV footage referenced in the Indictment or otherwise pertinent to the case. See id. And although the CCTV footage the Government obtained and produced comes from various months, the Defendants’ characterization of the production as including “nine months of CCTV footage,” see Resp. at 4, is misleading. The Government obtained footage only from selected cameras (many of which do not continuously record) from selected dates throughout the period for which it obtained footage.

But there’s something in that surveillance footage that has made Trump very concerned about leaks, more so than he was about the documents seized last August.

This indictment provides shocking new details about Nauta and De Oliveiras’ alleged efforts to comply with Trump’s orders to destroy surveillance footage.

But it does not yet explain how reported gaps ended up in the surveillance footage.

And it doesn’t yet explain what Trump was trying to hide — what was worse than video showing Nauta emptying out the storage closet and then only half-filling it before Evan Corcoran did a search.