The Reinvestigation Test

The test

Before you do the thing, ask:

Would I be okay reading this back to an investigator at my next reinvestigation?

If yes, proceed.

If no, do not do the thing.

If you are not sure, the answer is no.

What it catches

The test catches the slow-drift mistakes. The ones that are not obvious felonies but show up badly in aggregate.

It catches:

• The LinkedIn post that names a program in passing.
• The conference comment that sounds harmless out loud and bad on paper.
• The chat message to a friend that names a customer.
• The prompt you pasted into ChatGPT to save five minutes.
• The resume bullet you wrote at 11 p.m. without thinking.
• The Discord server you joined where people share "war stories."
• The Slack message in a public-channel community that references your work.
• The Reddit comment you made from a username tied to your real identity.

Most cleared mistakes are not a single big decision. They are a hundred small decisions made without the test.

When to apply it

Apply the test before:

• Posting anything to a public platform.
• Pasting anything into a public AI tool.
• Sending a resume or cover letter outside an approved channel.
• Joining a public community where you might talk about work.
• Accepting a podcast, interview, or speaking invitation.
• Writing or editing your LinkedIn profile.
• Updating a personal blog or portfolio.
• Forwarding a work email to a personal account.
• Taking a photo at or near a work facility.

For anything classified or CUI, the test is not the standard. The standard is the rules. The test is for the gray zone.

The 24-hour rule

When you write something and the test gives you a maybe, save it as a draft. Wait 24 hours. Read it again with fresh eyes.

Most maybe drafts become obvious no drafts the next morning. The few that survive 24 hours are usually fine. The ones you would have posted in the moment and regretted are the ones the 24-hour rule catches.

Urgency is the enemy of OPSEC. If a post, a paste, or a send feels urgent, that is the signal to wait, not the signal to hurry.

What to do when the answer is no

• Rewrite at a higher level of abstraction.
• Ask your security officer for a pre-publication review.
• Use an approved internal channel instead of a public one.
• Drop the example entirely. The point you are making does not need it.
• Accept that the post was not worth the risk and move on.

Nothing you post on the internet pays you as much as your clearance does.