GAO findingThreat information existed before January 6
GAO found that all 10 federal agencies it reviewed identified potential threats of violence before January 6, and that the FBI and U.S. Capitol Police identified credible threats. GAO also found that some agencies did not fully process or share critical information with partners responsible for security planning.
Audit source ↗GAO findingCapitol Police planning did not reflect the potential for extreme violence
GAO found Capitol Police planning focused on a manageable, largely nonviolent protest even though available information included the possibility that protesters could be armed and might target Congress. GAO also found the plan lacked contingencies for outside support.
Audit source ↗GAO findingEmergency-assistance procedures were unclear
GAO found the Capitol Police and Capitol Police Board lacked clear, detailed procedures for obtaining emergency support from other agencies. About 2,000 personnel from outside agencies ultimately assisted, but the process for requesting and approving that support was not clearly documented.
Audit source ↗Inspector General reviewThe Defense Department response has its own audit trail
The Defense Department Inspector General separately reviewed pre-event support requests, requests made as the attack unfolded, and whether DoD actions complied with applicable requirements. This hub treats that report as a distinct audit source rather than collapsing the entire security response into a single political claim.
Audit source ↗GAO implementation follow-upPost-attack emergency-assistance procedures were later rewritten and implemented
GAO reported that, after January 6, the authorities were changed so Capitol Police could request outside assistance without waiting for Capitol Police Board approval. GAO later closed its related recommendations as implemented after Capitol Police finalized emergency-assistance directives in November 2023 and the Board supplied an updated manual in December 2023. This is a post-event reform record; it does not erase the planning and response failures GAO documented for January 6 itself.
Audit source ↗GAO finding / later implementationNo NSSE or SEAR special-event designation was requested for January 6; the process was later clarified
GAO found that DHS did not receive a request to designate the January 6, 2021 events as a National Special Security Event (NSSE) or Special Event Assessment Rating (SEAR), even though the presidential rally and the joint session could have been considered if requested. Officials described confusion about who could request an NSSE for an event on federal property in Washington. GAO later closed its recommendations as implemented: the January 6, 2025 electoral-vote count was designated an NSSE, and DHS subsequently clarified that the D.C. mayor could request an NSSE for federal property. This later reform record does not prove that an NSSE designation in 2021 would have prevented the attack.
Audit source ↗GAO implementation follow-up — closed as implemented by 2025Threat-processing and sharing controls were strengthened after January 6
GAO found that the FBI and DHS Intelligence & Analysis did not consistently follow policies for processing some pre-January 6 threat information, and that DHS I&A, Capitol Police and Park Police did not consistently share all fully developed threat information with relevant partners. GAO later closed the FBI recommendation as implemented and, by July 2025, closed the DHS I&A processing-control recommendation after internal reviews, updated open-source intelligence policy, training/certification requirements and procedures for documenting and correcting control deficiencies. This is a post-attack reform record; it does not change GAO’s finding that important threat information was not fully processed or shared before January 6.
Audit source ↗Later House oversight testimony — evacuation timingHouse Chamber evacuation did not begin until about 2:28 PM
At a 2023 House security hearing, former Capitol Police Chief Steven Sund was asked why the House Chamber did not start evacuating until 2:28 PM after the building had been breached at about 2:12 PM. Sund said he did not know the reason for the delay and testified that the evacuation should have been called earlier. The hub treats this as retrospective oversight testimony about command and protective operations, not as proof that one named official intentionally delayed the evacuation.
Audit source ↗DoD OIG record + Senate sworn testimonyPre-event Guard authorities were narrower than Walker’s ordinary command discretion
The January 4–5 approval chain did not prohibit all D.C. Guard activity: a traffic/crowd-management mission and a standby QRF were approved. But Miller and McCarthy retained approval over specified civil-disturbance capabilities and QRF employment. Walker later testified that the QRF/CONOP restriction was unusual. The DoD Inspector General separately concluded that DoD’s preparation and response decisions were reasonable and compliant with governing requirements, while the bipartisan Senate review found that opaque processes and lack of pre-staging contributed to delay. The hub preserves those institutional judgments separately rather than choosing one characterization as the sole factual record.
Audit source ↗Sworn Senate testimony + bipartisan oversight findingNo formal Capitol Guard request was made before January 6 despite pre-event discussions
Walker testified that he asked Sund before January 6 whether Capitol Police would formally request D.C. Guard support and that Sund told him he was not permitted to make the request. The bipartisan Senate investigation later concluded that the Capitol Police Board failed to request Guard assistance before January 6 and that the absence of a pre-staged Capitol mission left the Guard less prepared to respond quickly. The hub treats Walker’s account as testimony and the committee’s conclusion as an oversight finding, not as interchangeable evidence.
Audit source ↗Official DoD timeline + DoD institutional accountLate-day security milestones should not be collapsed into one “Capitol secured” time
DoD records separate several different milestones: establishment of a west-side perimeter at 6:14 PM, clearance of both chambers and leadership offices by 7:15 PM in Army Secretary Ryan McCarthy’s account, and a later Capitol-building secure declaration in the official timeline. A contemporaneous DOJ National Security Division update at 8:05 PM independently reports the Capitol clear and the interior secure after a senior DOJ official walked the House and Senate chambers, while also noting some protesters still lingered outside. The Senate returned from recess at 8:06 PM. The hub preserves these as different operational, geographic and parliamentary benchmarks rather than treating one timestamp as interchangeable with all the others.
Audit source ↗DHS Inspector General finding + later House committee staff reconstructionSecret Service DNC sweep missed a viable device before Harris’s visit
DHS OIG’s 2024 review identified the DNC as a January 6 Secret Service protective-operation site and found deficiencies in the pre-visit security sweep. A 2025 House committee staff report, citing the OIG review and Capitol Police video, said at least ten Secret Service agents and two canine units came within feet of the device before Vice President-elect Kamala Harris arrived. The hub labels the OIG conclusion as an Inspector General finding and the more granular count/timing as a committee staff reconstruction; neither resolves the identity of the bomber.
Audit source ↗Contemporaneous mayoral letter + official DoD response recordBowser’s January 5 letter described D.C.’s requested support; it was not a blanket Guard stand-down order
Bowser’s January 5 letter said D.C. had requested unarmed D.C. Guard logistical support and had not requested personnel from other federal law-enforcement agencies; it also asked that additional assistance to the District be coordinated through normal procedures. DoD’s January 6 public record says that request involved roughly 340 Guard members and that Bowser later requested full activation as the Capitol emergency unfolded. The hub therefore does not use the January 5 letter as evidence that Bowser barred the Pentagon, Capitol Police or Congress from seeking or approving later assistance.
Audit source ↗Recorded witness testimony / pre-event protective-security warningPence staff flagged a potential security concern to Secret Service on January 5
Marc Short testified that he warned the head of Pence’s Secret Service detail because he expected Trump might publicly lash out as the dispute over the electoral count became more visible. The record establishes a precautionary warning from Pence’s chief of staff; it does not show that Short knew the specific form of later threats or violence.
Audit source ↗GAO finding + bipartisan Senate oversight recordThe FBI Norfolk warning existed before January 6, but the warning chain failed to reach key Capitol decision-makers
GAO’s open-source review says the FBI developed a January 5 report describing potential violence, calls for violence, perimeter maps and rally points around Capitol buildings. Bipartisan Senate oversight later identified the Norfolk field-office report as warning of a violent attack and possible ‘war,’ while also finding that it did not reach the former Capitol Police chief, the former Sergeants at Arms or incident commanders on the ground. This is an intelligence-sharing failure record; it does not establish that every online threat was credible or that the report predicted the exact form of the attack.
Audit source ↗DHS Inspector General production history + federal records-preservation issueMissing Secret Service January 5–6 texts are a documented evidence gap; the later OIG report details how the records became unavailable
DHS OIG-24-42 documents that the Inspector General sought Secret Service electronic communications beginning in February 2021, received only one screenshot of a text exchange in March, and was told in May that additional content was unavailable because of a planned agency-wide phone migration. After OIG renewed its request, Secret Service said on February 23, 2022 that phones had been wiped during the January–April 2021 migration and no backup files were available; it later provided 13 images of texts identified through a FOIA response in December 2022. NARA separately opened unauthorized-disposition matter UD-2022-0054. These records establish a serious preservation and production gap, not a completed finding that messages were intentionally destroyed to conceal misconduct.
Audit source ↗Select Committee hearing / contemporaneous NSC log + anonymous security-official testimonyAt 2:24 PM, contemporaneous White House staff logging reflected acute concern for Pence’s Secret Service detail
The July 21 hearing displayed an NSC staff log entry saying Secret Service personnel at the Capitol “did not sound good right now.” An anonymous White House security official testified that incoming radio traffic included agents fearing for their lives and calls to say goodbye to family members. The hearing evidence supports that the detail perceived an acute security crisis; it does not itself establish that agents fired weapons, that Pence was physically harmed, or that every reported radio statement is independently available as an authenticated public recording.
Audit source ↗DoD official timeline / National Guard implementation recordOut-of-state Guard support was authorized on January 6, but most of those forces supported the post-attack security mission beginning January 7
DoD records distinguish the D.C. National Guard’s January 6 Capitol mission from the later multi-state reinforcement. McCarthy accepted Maryland Guard assets around 4:40 PM, and Miller authorized up to 6,200 Guard personnel from Maryland, Virginia, New York, New Jersey, Delaware and Pennsylvania around 6:00 PM. National Guard records say Virginia personnel began mustering that evening and first supported the Washington mission on January 7. This means references to “6,200 Guard” should not be read as 6,200 troops arriving at the Capitol during the afternoon attack.
Audit source ↗Federal statutory reform / implemented post-attack authority changeCongress changed the emergency chain after January 6 so the Capitol Police chief can request outside help without prior Board approval
The Capitol Police Emergency Assistance Act of 2021, signed December 22, authorizes the Capitol Police chief to request D.C. National Guard or federal law-enforcement assistance during an emergency without prior approval from the Capitol Police Board. GAO later separately found that January 6 procedures for obtaining outside assistance were unclear and recommended documented emergency procedures. The statute is a later reform, not proof that every delay on January 6 had a single cause.
Audit source ↗House oversight hearing / Defense testimony and timelineCongressional leaders were told at about 3:19 PM that full D.C. Guard mobilization had been approved
A House oversight hearing record places Army Secretary Ryan McCarthy speaking with Speaker Pelosi and Senator Schumer at about 3:19 PM and telling them that Acting Defense Secretary Christopher Miller had approved full D.C. Guard mobilization. That notification is an important coordination milestone, but it did not mean Guard forces were already deployed at the Capitol. The hub keeps the 3:04 mobilization decision, 3:19 leadership notification, 4:32 mission-plan approval, 5:08 Walker-notification dispute, and later arrival times as distinct stages.
Audit source ↗Sworn witness testimony / Select Committee-preserved security chronologyHutchinson testified Trump was told some people outside the Ellipse screening area had weapons before his speech
In the June 28 hearing, Cassidy Hutchinson testified that Tony Ornato relayed information about weapons in the crowd to Mark Meadows and that, minutes before Trump took the stage, she overheard Trump objecting to the magnetometers that were keeping some supporters outside the screened rally area. This card records Hutchinson’s sworn account and the committee-preserved security chronology. It does not claim that every person outside the magnetometers was armed or convert committee interpretations of Trump’s state of mind into court findings.
Audit source ↗Congressional Record / contemporaneous institutional recognition + later member recollectionHouse members assisted Capitol Police in reinforcing the chamber while evacuation remained incomplete
The January 6 Congressional Record records McCarthy crediting Mullin, Gonzales, Crow, Fallon and Nehls with helping Capitol Police hold the House floor. A later Senate impeachment-trial presentation preserved Fallon’s recollection that members moved or broke apart furniture and prepared to help defend the chamber as the crowd hit the doors. FactFlag uses those sources to document the internal defensive posture, while keeping the members’ recollections separate from defendant-specific court findings and from broader political characterizations of the attack.
Audit source ↗SELECT COMMITTEE-PRESERVED MILLEY TESTIMONY — EARLY-JANUARY WARNING, EXACT CALL DATE NOT FIXEDMilley testified that Norquist specifically warned White House national-security staff about a possible direct assault on the Capitol
The October 13, 2022 congressional record says Gen. Mark Milley recalled an early-January call with White House national-security staff in which Deputy Defense Secretary David Norquist warned that “the greatest threat is a direct assault on the Capitol.” The testimony establishes a specific pre-event warning in the committee record. It does not establish that every White House official received the same intelligence, that the exact January 6 attack was foreseen in detail, or that the warning itself resolves later disputes over security planning and response.
Audit source ↗DISTRICT EMERGENCY AUTHORITY — CURFEW AND 15-DAY PUBLIC-EMERGENCY EXTENSIOND.C. imposed a 6 PM curfew and separately extended its public emergency through January 21
Mayor Muriel Bowser ordered a District-wide curfew from 6:00 PM January 6 until 6:00 AM January 7. Later that day she issued Mayor’s Order 2021-003 extending the District public emergency for 15 days, through 3:00 PM January 21 unless earlier rescinded or superseded. These were District emergency-management actions responding to unrest and continuing security concerns; they are not the same thing as federal military deployment orders or a finding that the Capitol was secure at the time the curfew began.
Audit source ↗OFFICIAL TESTIMONY / CONFLICTING RECOLLECTIONSJanuary 4 Guard discussion involved a limited 125-person traffic-duty offer; “optics” recollection is disputed
Irving’s sworn Senate testimony describes a January 4 discussion of approximately 125 unarmed Guard personnel for traffic-control duties, not a pre-positioned riot-control force. He said the collective judgment was that intelligence did not warrant using the troops at the Capitol and that the Guard should remain on standby. Sund later recalled Irving objecting in part because of “optics,” while Irving denied optics determined the decision. The bipartisan Senate review documents the disagreement. This record should not be simplified into either “the Guard was never discussed” or “a 125-person combat force was rejected solely for optics.”
Audit source ↗OFFICIAL CAPITOL POLICE INCIDENT TIMELINE — STAGED HOUSE EVACUATIONUSCP records separate 2:37, 2:39 and 2:57 PM House-side milestones
A Capitol Police incident timeline preserved by GovInfo records the corridor to the House Chamber breached at 2:37 PM, officers beginning to evacuate members still inside the House Chamber at 2:39 PM, and House-floor evacuation completed at 2:57 PM. These timestamps refine—rather than erase—other official testimony placing an earlier House evacuation decision/start around 2:28 PM. The records describe different stages of the protective operation.
Audit source ↗PRE-EVENT CAPITOL POLICE INTELLIGENCE — SERIOUS VIOLENCE RISK IDENTIFIEDJanuary 3 assessment identified Congress as the potential target, but operational plans remained oriented toward a manageable protest
Senate oversight and GAO records describe the Capitol Police January 3 Special Event Assessment as warning that supporters could view January 6 as their last opportunity to overturn the election, that desperation could lead to violence, that protesters might come armed, and that Congress itself—not counterprotesters—could be the target. GAO later found that Capitol Police operational planning still focused largely on a manageable, non-violent protest and that some threat products were not consistently shared with frontline officers. This record distinguishes the existence of a serious intelligence warning from the separate question of how fully it was operationalized.
Audit source ↗INSTITUTIONAL INTELLIGENCE RECORD / LATER OVERSIGHT FINDINGJanuary 3 threat assessment and January 4–6 daily intelligence reports conveyed materially different risk signals
The January 3 Capitol Police Special Event Assessment warned that Congress itself could be the target and that extremist participation could create a significantly dangerous situation. The later House security review found that the January 4, 5 and 6 Daily Intelligence Reports nevertheless rated civil disobedience at the planned events as “Remote” or “Improbable.” GAO separately found that Capitol Police identified credible threats but did not consistently share all developed threat information with relevant stakeholders or frontline officers. This record treats the documents as institutional intelligence products and the dissemination/planning conclusions as later oversight findings.
Audit source ↗Official USCP incident timelineUSCP’s own timeline supplies an institutional response layer for the 2:18–2:34 PM breach window
The Capitol Police incident timeline records internal operational milestones during the same minutes covered by many defendant-specific court records: Senate Chamber barricading, Rotunda and Upper West Terrace breaches, CDU deployments, the 2:28 PM evacuation of remaining members from the Senate floor, the formal written Guard request and member-extraction deployments. FactFlag treats this as an institutional operations chronology, not a substitute for adjudicated evidence about individual defendants.
Audit source ↗SWORN DOJ TESTIMONY / INSTITUTIONAL RESPONSE RECORDDOJ had tactical teams pre-positioned, but Rosen described their role as federal law-enforcement support rather than frontline crowd control
Rosen testified that DOJ had taken precautionary steps before January 6, including alerting or pre-positioning FBI, ATF and U.S. Marshals tactical resources. Once Capitol Police requested assistance after the breach, DOJ sent those resources to the Capitol. In later testimony and DOJ statements, Rosen described more than 500 DOJ officers and agents ultimately responding. The hub keeps that federal response separate from Capitol Police/MPD crowd-control operations and from the National Guard deployment process.
Audit source ↗GAO / U.S. CAPITOL POLICE TIMELINEOutside law-enforcement assistance arrived in successive waves, not at one single “response time”
GAO reproduced a U.S. Capitol Police assistance timeline showing initial MPD help at 12:58 PM, Secret Service Uniformed Division support at 1:08 PM, additional MPD units at 1:21 PM, MPD at the Lower West Terrace door at 1:57 PM, ATF/FBI personnel at the Speaker’s Lobby at 3:07 PM, Montgomery County Police entering at 3:09 PM, DHS personnel beginning to arrive around 3:32 PM and an Arlington County armed squad deploying to the Lower West Terrace at 3:51 PM. The supported conclusion is that mutual aid accumulated over hours and by location; no single timestamp accurately describes the entire outside-law-enforcement response.
Audit source ↗OFFICIAL SENATE + CAPITOL POLICE RECORDS — STAGED EVACUATIONSenate records distinguish the 2:13 PM recess, 2:28 PM remaining-member evacuation and ~2:30 PM chamber-clearance account
The Senate Daily Press log records the chamber standing in recess at 2:13 PM. The Capitol Police incident timeline records the remaining members evacuated from the Senate floor at 2:28 PM. The later Senate impeachment-trial record describes security video showing the Senate Chamber evacuation at about 2:30 PM. FactFlag preserves all three because they concern different procedural/protective stages and come from different official records; none should be silently substituted for the others.
Audit source ↗SELECT COMMITTEE-PRESERVED WHITE HOUSE EMAIL — NOT A DOD DEPLOYMENT ORDERMeadows’s January 5 email described Guard protection for pro-Trump demonstrators
The Select Committee report cites Meadows production MM000789, a January 5 email exchange with John Aycoth, for the statement that the D.C. Guard would be on hand to “protect pro Trump people.” The email is probative of Meadows’s contemporaneous expectation and White House messaging. It does not by itself establish the Guard’s formal mission, command authority, force size, or that Defense officials received an order to protect one political group. Those operational questions remain tied to the separate DoD orders, Guard request chain, and sworn military testimony.
Audit source ↗