Research: Nation-State Ratchets — Comparative Architecture

Verdict matrix

Structural insights

Finance-first vs. defense-first vs. bureaucracy-first

The Ratchet architecture is not uniform across operator states. Three structural patterns surface from the comparison:

• Finance-first (US, UK, Canada): central-bank or major-bank → senior cabinet → board / consulting role → back. Documented in dataset by Rubin / Paulson / Geithner / Mnuchin (US); Carney / Reeves (UK & Canada); Turnbull (AU, partial — Goldman Sachs Australia MD before politics).
• Defense-first (Australia, partially Japan): military / defense-ministry → think tank with explicit state-foundation links (ASPI in AU) → policy posts. AU’s ASPI is the cleanest example — its board includes Defence Secretary + DFAT Secretary ex officio.
• Bureaucratic meritocracy (Japan): career LDP/MOFA tracks; the “Yoshida Doctrine” institutional continuity; JIIA chartered by Abe rather than independent civic foundation; intelligence fragmented across 4-5 ministries (proposed National Intelligence Agency would address this).
• Hybrid state-private (South Korea): Asan Institute is independent but policy-aligned; prosecutor-to-presidency pipeline (Yoon Suk-yeol — career prosecutor → Prosecutor General → President 2022-25) is unique; NIS politically weaponized (multiple impeachments in dataset: Park Geun-hye, Yoon).

Think-tank autonomy gradient

The independence of each Ratchet’s think-tank brain trust varies materially. From most independent to most state-chartered:

1. US (CFR) — independent foundation, member-funded
2. UK (Chatham House) — Royal charter but operationally independent
3. Australia (Lowy) — private foundation (Frank Lowy family); Lowy is independent. ASPI is state-foundation fusion (board has gov ex-officio members)
4. Canada (CIGI) — independent (Jim Balsillie founding endowment)
5. South Korea (Asan) — hybrid; independent endowment but policy-aligned
6. India (ORF) — Reliance-backed private; CSEP independent (former Brookings India)
7. Japan (JIIA) — chartered at Abe’s initiative; state-aligned, not independent
8. China (CICIR / CASS) — explicitly state-run; the analytical arm of the state

The independence gradient predicts how much the brain trust can produce findings the state doesn’t already want.

Intelligence architecture

Five Eyes (US/UK/CA/AU/NZ) operates as a formal sharing alliance. The dataset now models all five intelligence services: US (CIA, NSA, DNI, NCTC), UK (MI5, MI6, GCHQ), Canada (CSIS_Can, CSE_Can), Australia (ASIO, ASIS, ASD, ONI_AU), New Zealand (modeled implicitly through Ardern/Luxon edges to NZGov; GCSB / NZSIS not yet added).

Japan + South Korea are informal Five Eyes adjacents per CSIS analysis — Japan as “de facto sixth eye”; South Korea via the Korea-US intelligence-sharing protocol. Japan’s intelligence fragmentation (PSIA + CIRO + JMOD + MOFA each operating separately) is the structural weakness vs. Five Eyes. South Korea’s NIS is unified but politicized.

Customer cohort distinction

The Gulf agent’s verdict — Saudi/UAE/Egypt/Bahrain as customers, Qatar non-player — adds a useful distinction the dataset’s existing structure didn’t carry. Customer states are documented buyers / deployers of the operator states’ commercial surveillance products (NSO Pegasus, Cellebrite, Cytrox/Predator, Hacking Team, FinFisher). They contribute to the Ratchet’s global reach without being its architects.

In the dataset, edges now run from vendor institutions (NSO, Cellebrite, Cytrox, HackingTeam) to customer-state intelligence services (GIP_Saudi, SSA_UAE, GIS_Egypt, NSA_Bahrain). The flow is one-way (vendor → customer), distinct from the bidirectional revolving-door edges within operator Ratchets.

What the dataset adds (2026-05-29 sharpening pass)

Full Ratchet completions (institutions + named persons):

• Canada: CIGI, CSIS_Can, CSE_Can, CGAI, MunkSchool + DJohnston (former Governor General), Barton (McKinsey → Trudeau growth-council Chair → Ambassador to China)
• Australia: ASIO, ASIS, ASD, ONI_AU, ASPI, Lowy + Rudd (PM → Asia Society Policy Institute President → US Ambassador), Turnbull (Goldman → PM), MPayne (FM/Defence → Hoover), TAbbott (PM → UK Board of Trade)
• New Zealand: NZIIA only (no new persons — satellite verdict)
• Japan: JIIA, PSIA, CIRO, JMOD, OkazakiInst + Abe (longest-serving PM in Japanese history; NSC architect; assassinated 2022), Motegi (FM continuity), Okazaki (Foreign Ministry diplomat → Okazaki Institute founder)
• South Korea: Asan, NIS_SK, KIDA, MND_SK + Yoon (career prosecutor → President 2022-25, impeached + removed 2025), VCha (NSC Bush2 → CSIS Korea Chair → Georgetown → Asan), CKang (Asan President), Park (PM 2013-17, impeached + removed 2017)

Customer cohort institutional anchors:

• Saudi: GIP_Saudi, KFCRIS, PIF, SaudiGov
• UAE: SSA_UAE, ADIA, DarkMatter, UAEGov
• Egypt: GIS_Egypt, EgyptGov
• Bahrain: NSA_Bahrain, BahrainGov
• Qatar: QIA, NCSA_Qatar, AlJazeera, QatarGov

Vendor expansion (operator-side commercial-surveillance ecosystem):

• NSO (already in v3), Cellebrite (added), Cytrox (Predator/Intellexa), HackingTeam (Memento Labs), FinFisher (Gamma Group)

Customer edges (vendor → customer state intelligence service): NSO→GIP_Saudi, NSO→SSA_UAE, NSO→GIS_Egypt, NSO→NSA_Bahrain; Cellebrite→SSA_UAE, Cellebrite→GIS_Egypt; Cytrox→GIS_Egypt; HackingTeam→GIS_Egypt.

What this dossier supports

• Chapter argument (when written): the Ratchet is global. The US operates most of the 20 clicks — including The Eagle (click #9, US extraterritorial enforcement) as its most distinctly-national contribution. But the US doesn’t operate the global control-grid alone; the British, European, Indian, Israeli, Canadian, Australian, Japanese, and Korean state institutional architectures all participate. The customer cohort (Saudi/UAE/Egypt/Bahrain) shows the Ratchet’s product-market reach. (Naming note: the book uses click-archetypes — Eagle, Tap, Watchers, etc. — for mechanisms. The dataset uses nation-state cluster names — british-ratchet, canadian-ratchet, etc. — for institutional architectures. Two complementary vocabularies, not interchangeable.)
• Cluster queries (in MCP server): the four new operator clusters (canadian-ratchet, australian-ratchet, japanese-ratchet, korean-ratchet) plus the existing clusters (british-ratchet, european-ratchet, indian-ratchet, israeli-ratchet, plus china-state and russia-state sectors) form a queryable matrix.
• Negative results stay published: New Zealand “thin Ratchet” verdict and Qatar “non-player” verdict are themselves defensible research findings. They warn against speculative over-extension and ground the comparative analysis.

Sources

Five Eyes / Asia research (primary)

• CIGI
• ASPI, Lowy Institute
• NZIIA
• JIIA, Okazaki Institute
• Asan Institute, KIDA
• CSIS Korea Chair (https://www.csis.org/programs/korea-chair)
• Kevin Rudd, Chatham House

Gulf customer cohort (primary)

• Citizen Lab — NSO Group operator tracking
• Citizen Lab — Predator In The Wires (Eltantawy targeting)
• Citizen Lab — Bahrain Pegasus
• Privacy International — TRD Egypt report
• Declassified UK — MI5/MI6 training Saudi/UAE/Egyptian intel
• Amnesty International — Pegasus Project
• MERIP — Abraham Accords cybersecurity cooperation