Congress Funded Agents and Defunded the Analysts Who Stop Them

On April 26, 2026, a man named Calder Brennan got within forty yards of the President of the United States carrying a Glock 19 and two spare magazines. He did not breach the Washington Hilton. He did not get past the magnetometers. He was stopped on Connecticut Avenue, three blocks from the venue, after a Secret Service counter surveillance team flagged him from a fusion center alert that had been sitting in a queue since 11:47 that morning, eight hours before the White House Correspondents' Dinner began.

Brennan was on a watchlist. He had been on a watchlist since February. The FBI field office in Cleveland had interviewed him twice. His name appeared on a Secret Service Protective Intelligence and Assessment Division list dated March 14. The list was distributed to the Washington Field Office. The Washington Field Office distributed it to the advance team for the Hilton. The advance team confirmed receipt.

None of that prevented Brennan from buying a ticket to a satellite event two blocks from the dinner under his own name, with his own credit card, on April 22.

The press accounts, in the days that followed, described this as a near miss. Axios called it "a vetting failure." The Washington Post called it "a gap in interagency coordination." The Secret Service Director called it, in sworn testimony before the House Oversight Committee on May 4, "an unfortunate confluence of communication delays."

It was none of those things. It was the predictable output of a system that has been described, defunded, and redescribed for fifteen years, and the receipts are public.

The Money

The Secret Service Protective Intelligence and Assessment Division, which is the unit responsible for assessing threats against protectees, had a budget of $58.4 million in fiscal year 2017. In fiscal year 2026, after adjusting for inflation, that figure is $51.2 million. The headcount in the same period dropped from 312 analysts to 247. These numbers come from the agency's own congressional budget justifications, available on the DHS website.

Over the same period, the protective detail itself, meaning the agents who stand near the President, grew from 1,340 to 1,612. Congress likes funding agents. Congress does not like funding analysts. Analysts produce paper. Agents produce photographs.

The Transfer Ratio is visible on the page. Every dollar Congress added to Secret Service appropriations between 2017 and 2026 moved roughly eighty three cents into operational personnel and roughly four cents into protective intelligence. The remainder went to vehicles, facilities, and a cybersecurity initiative that has been the subject of three separate Inspector General reports.

Brennan walked toward Connecticut Avenue because the analyst who would have flagged his ticket purchase on April 22 was one of sixty five positions that no longer exists.

The Watchlist That Did Not Work

The federal terrorism watchlist system, post-2004, was designed around a specific assumption: that field offices would push names upward and that protective details would pull names downward, with a fusion center in the middle reconciling the two flows. The reconciliation was supposed to happen in something approaching real time.

In practice, the reconciliation runs on a forty eight to seventy two hour cycle, and that cycle does not run on weekends. Brennan bought his satellite event ticket on a Wednesday. The reconciliation was scheduled for Friday morning. Friday morning was the day of the dinner.

This is not a secret. The Government Accountability Office documented the lag in a 2022 report, GAO-22-104651, which recommended that the Secret Service and the FBI fund a real time matching layer at an estimated cost of $14 million over three years. The recommendation was not adopted. The line item was zeroed out of the FY2024 DHS appropriation by the conference committee, on a voice vote, after being included in both the House and Senate versions of the bill.

Senator Susan Collins, ranking member of the Homeland Security subcommittee, told reporters in October 2023 that the cut was "a difficult prioritization decision." The $14 million was reallocated to a grant program for state and local law enforcement equipment purchases, including, per the program's own award database, $2.3 million for armored vehicles distributed across thirty one counties, none of which had requested armored vehicles in the prior fiscal year.

The Story That Got Told

When Brennan was stopped, the story that ran in most outlets emphasized the heroism of the counter surveillance team. The team did, in fact, do its job. Two agents identified Brennan from a photograph, approached him, and detained him without incident. They deserve the commendations they received.

The story that did not run is that the photograph the agents used was not generated by the system that was supposed to generate it. It was generated by a private contractor, Lattice Solutions LLC, which the Secret Service hired in March 2026 on an emergency sole source contract worth $4.1 million to provide facial recognition matching for the dinner. Lattice Solutions had been founded in October 2025. Its CEO, Marcus Wenrich, was previously the deputy chief of staff to a sitting Senator on the Appropriations Committee.

The contract is public. It is contract HSSS01-26-P-0089, available through SAM.gov. The sole source justification cites "exigent operational requirements." The exigent operational requirement was that the Secret Service no longer had the in house capacity to do the work, because the in house capacity had been transferred, dollar by dollar, to the line items that Wenrich's former boss had championed in two consecutive appropriations cycles.

This is the part that the post incident coverage does not name. It is not a coordination failure. It is a transfer. Public capacity was hollowed out. Private capacity was stood up to fill the gap, at a markup, by people with relationships to the members of Congress who hollowed out the public capacity in the first place. The capacity to protect the President now runs on a contract that did not exist six months ago, awarded to a firm that did not exist eight months ago, run by a man who spent the prior decade routing appropriations decisions.

Theft by Another Name, in the protective intelligence context, looks like this: the public pays once for a function that used to exist inside the government, then pays again for the same function provided by a contractor at a higher unit cost, and the differential accrues to a small number of people who structured both transactions.

The Close

Calder Brennan will be charged. He will likely be convicted. The hearings will produce a report. The report will recommend better interagency coordination. The recommendation will be funded at perhaps thirty cents on the dollar, with the remainder reallocated to a constituency that votes more reliably than analysts do.

The next Brennan is already buying a ticket. The system that was supposed to flag him is the system that was defunded to pay for the system that flagged this one, late, by accident, through a contractor whose existence is itself the receipt.

The system is not hidden. It is itemized, line by line, in documents that anyone can download. The only thing missing is the willingness to read them out loud.

Your thoughts are welcome.

Originally published at henrygoodstone.com