# Kinematic Threat Brief

**LRRK Watch / Open-Source Intelligence** — Five current signals across systems that sense, move, and act.

| Field | Value |
| --- | --- |
| Collection cutoff | 30 September 2019 |
| Platform | Quiet Systems |
| Data label | Open-source intelligence // LRRK analytic product |
| Handling | Public-source material. Image rights require separate verification before publication. |

## Executive read

### BLUF

September made one-way unmanned and cruise-missile Act a global oil-supply problem: attacks on Saudi Aramco's Abqaiq processing plant and the Khurais field on 14 September knocked out 5.7 million barrels per day — more than half of Saudi output and about 5 percent of world supply — while Houthis claimed the strike and Washington attributed it to Iran.

### Key judgments

1. **[Assessment — high confidence]** Reuters, 14 September, reported the Houthi claim against two plants at the heart of Saudi oil, and Saudi Aramco's statement that the attacks would cut output by 5.7 million bpd; Abqaiq handles crude from Ghawar for Ras Tanura, Juaymah, and the Red Sea line.
2. **[Assessment — high confidence]** CRS (IN11173) records the same 5.7 mb/d disruption, notes missiles and drones, and records that Saudi and U.S. officials downplayed the Houthi claim in favor of Iranian responsibility.
3. **[Inference — moderate confidence]** The trust failure is critical-infrastructure C-UAS: a processing plant that is the "crown jewel" of a national oil system was not a fetched successful detect-and-defeat, regardless of which capital authorized the raid.

### Analytic labels

- **Fact** — verified reporting or primary record
- **Assessment** — analytic judgment
- **Inference** — reasoned but not directly observed
- **Uncertainty** — unresolved information gap

### Source grades

- **A1** — authoritative primary record / directly confirmed
- **B1–B2** — generally reliable and corroborated
- **C3** — useful but requires caution

## 01. Abqaiq and Khurais — 5.7 million bpd off the board

*Event / publication dates: 14 September 2019; Reuters 14 September 2019*

**Verified record — [Fact — B1]** Reuters, Riyadh/Dubai/London: Yemen's Iran-aligned Houthi group said it attacked two plants at the heart of Saudi Arabia's oil industry on Saturday, knocking out more than half the kingdom's output. Aramco: attacks will cut output by 5.7 million bpd, more than 5 percent of global supply. Abqaiq is 60 km southwest of Aramco's Dhahran headquarters; the plant handles crude from Ghawar and for export terminals Ras Tanura and Juaymah, and pumps west to Red Sea terminals. Fetched: https://www.reuters.com/article/world/attacks-on-saudi-oil-facilities-knock-out-half-the-kingdoms-supply-idUSKCN1VZ01Q/

**Threat landscape.** Precision Act against the world's most important oil-processing node. Trust boundary is air-defense / C-UAS around a fixed industrial plant, not a carrier or a HALE orbit.

**Intelligence assessment.** [Assessment — high confidence] Abqaiq and Khurais were hit 14 September and Aramco quantified 5.7 mb/d. [Inference — moderate confidence] The mix is drones and cruise missiles (CRS), not quads. [Uncertainty] Reuters HTML on this box returned a stub; facts used are from that story's published lede as returned in search, graded B1 with the stub disclosed. Exact munition count is not in the lede.

**Opportunity.** A Saudi or U.S. debris inventory with types and inbound azimuths.

**LRRK relevance.** Kestrel / Campaign / Sense-Move-Act. Passport: 14 September, Abqaiq + Khurais, 5.7 mb/d, Houthi claim, Ghawar/Ras Tanura/Juaymah context.

**Confidence.** High on impact; moderate on munition mix.

## 02. Attribution fight — Houthi claim vs U.S./Saudi Iran assessment

*Event / publication dates: 14–30 September 2019; CRS IN11173*

**Verified record — [Fact — B1]** CRS: "The attack, which used both missiles and drones, temporarily disrupted 5.7 million barrels per day... Saudi and U.S. officials have downplayed claims by Yemen's Houthi rebels... instead attributing responsibility to [Iran]." Iran denies. Trump public comments during the month were not consistent on certainty. Fetched: https://www.congress.gov/crs_external_products/IN/PDF/IN11173/IN11173.3.pdf

**Threat landscape.** The Control Fabric fight is whose territory the raid launched from — Yemen vs north-of-Abqaiq — because that decides whether this is a Yemen war event or a direct Iran–Saudi Act.

**Intelligence assessment.** [Assessment — high confidence] Dual official stories exist this month. [Inference — moderate confidence] A north-origin finding (later U.S. UN brief) would collapse the Houthi-only claim; that later brief is not treated as a 14 September Fact. [Uncertainty] Inbound tracks not in the fetched CRS note as a map.

**Opportunity.** The U.S. interim UN presentation with debris photos.

**LRRK relevance.** Control Fabric / Campaign / Watch.

**Confidence.** High on the dispute; moderate on Iran-direct.

## 03. Continuity — May pipeline drones and June RQ-4 are the same Gulf pattern

*Event / publication dates: 14 May pipeline; 20 June RQ-4*

**Verified record — [Fact — B1]** East–West pump-station drone claim and the RQ-4A BAMS-D shoot-down are the summer's prior unmanned Gulf Facts. Fetched: https://apnews.com/article/donald-trump-financial-markets-ap-top-news-persian-gulf-tensions-ali-khamenei-63d729241e0645539dad32f57de7bc95 and https://www.bbc.com/news/world-middle-east-48700965

**Threat landscape.** One-way UAS against energy plus SAM against HALE Sense is now joined by a plant-scale strike.

**Intelligence assessment.** [Assessment — high confidence] Three dated Gulf unmanned Facts in one summer. [Inference — moderate confidence] C-UAS at energy nodes was not a fetched successful Control Fabric. [Uncertainty] Common launcher family not fetched.

**Opportunity.** A side-by-side debris comparison.

**LRRK relevance.** Kestrel / Campaign.

**Confidence.** High.

## 04. Interior GE and CISA — domestic COTS split unchanged the week of Abqaiq

*Event / publication dates: Interior 3 July; CISA 20 May*

**Verified record — [Fact — B1]** Interior still on the July DJI GE approval; CISA alert unretracted. Fetched: https://www.nextgov.com/emerging-tech/2019/07/interior-approves-chinese-drone-purchases-despite-spying-concerns/158361/ and https://www.bbc.co.uk/news/technology-48352271

**Threat landscape.** The U.S. domestic COTS fight is about data; the Gulf fight is about explosives and cruise missiles. Both are unmanned trust failures.

**Intelligence assessment.** [Assessment — high confidence] Both U.S. files open. [Inference — moderate confidence] October Interior grounding is a forward indicator, not a September Fact. [Uncertainty] September GE deliveries not fetched.

**Opportunity.** A Hill letter tying GE to Abqaiq-class risk (would be a political, not technical, Fact).

**LRRK relevance.** Passport / Control Fabric.

**Confidence.** High.

## 05. Orca / MQ-25 / Triton — U.S. large unmanned Move still EMD or paused

*Event / publication dates: Orca Feb; MQ-25 Aug 2018; Triton Sept 2018 pause*

**Verified record — [Fact — A1/B1]** Four Orcas on contract; four MQ-25A EMD; Triton not in Guam. Fetched: https://news.usni.org/2019/02/13/41119 and https://news.usni.org/2018/08/30/navy-picks-boeing-build-mq-25a-stingray-carrier-based-drone

**Threat landscape.** U.S. unmanned programs are still industrial; the Gulf Act is already operational.

**Intelligence assessment.** [Assessment — high confidence] No September U.S. IOC fetched. [Uncertainty] September test hours not fetched.

**Opportunity.** NAVAIR September notes.

**LRRK relevance.** Lab / Campaign.

**Confidence.** High.

## Forward indicators

Ranked watchlist as of the collection cutoff (what a Watch desk would have monitored next).

1. Debris azimuth — Yemen vs north — and any UN briefing.
2. Restoration date for the 5.7 mb/d and a second strike.
3. U.S. force posture into Saudi Arabia (C-UAS and Patriots).
4. Interior GE vs a grounding after the CISA summer.
5. NDAA Chinese-UAS section and Remote ID NPRM.

> **Collection integrity.** Abqaiq from Reuters (URL stub on fetch; lede used, disclosed) and CRS PDF URL. Pipeline, RQ-4, Interior, CISA, Orca, MQ-25 from pages actually fetched. Later "came from the north" U.S. interim report is a forward indicator, not a 14 September close. No Shahed name is invented for this month's debris.

*LRRK — security assurance for systems that sense, move, and act.*

<p align="right"><span style="opacity:0.35;letter-spacing:0.18em;font-size:0.8em">L-C1</span></p>