Myrtle Beach, SC
Both halves of this question assume the fifteenth was a second failure. It was not. It was the system working, and that is the single most important fact about it.
Here is what happened. Trump was playing the fifth hole. An agent moved ahead to sweep the sixth, which is standard practice — you clear the ground before the principal reaches it. Through the tree line he saw a rifle barrel protruding from the shrubbery outside the fence. He fired. The man dropped the weapon and ran, was chased, and was arrested on the interstate in Martin County within an hour.
The man never fired. By the sheriff’s account he never had a line on the principal. He was one hole away from a president who was never in his sight.
That is not a protective failure. That is a protective detail detecting an armed man before the principal came within range, which is precisely what advance work is for and precisely what did not happen at Butler.
I work in marketing and I know the temptation here. Two incidents, sixty days, same man — the shape of it wants to be a pattern, and pattern is a better story than the truth. But the two events are opposite in the only way that matters. In one, a man got a shot off because nobody cleared a roof. In the other, a man never got a shot off because somebody cleared a hole.
Trump himself said the Secret Service did a great job. He has not been shy about criticising them when he thought they failed, which makes that assessment worth something.
So my answer is neither half as posed. Not two disconnected events — same protectee, same season, and the second one is directly relevant to the first. But relevant as evidence that the posture changed, not that it did not.
The question worth asking is a different one, and I would put it in the next paragraph rather than pretend this one settled it: how did a man lie in position for hours at a course this man plays regularly, and what is the perimeter standard for a place he visits every few weeks?
Novi, MI
A plant that catches a defect at final inspection is not the same as a plant that ships one. Our side has been treating these as two of the same event and they are opposite outcomes.
Butler: a hazard existed, was identified by local personnel, was not resolved, and the principal was exposed. Defect shipped.
West Palm Beach: a hazard existed, was identified by the detail during a routine forward sweep, and was neutralised before the principal reached the zone. Defect caught.
In quality terms those are as different as two events can be. One is a control failure. The other is a control functioning as designed, and functioning at exactly the station where you would want it to function — ahead of the principal rather than around him.
So the pattern claim has to be rebuilt or dropped, and I think it can be rebuilt on much narrower ground.
Here is the version that survives. A man was reportedly in that position for a considerable time — accounts suggest as long as twelve hours — outside the fence line of a course this former president plays regularly. He was not detected by any perimeter measure. He was detected by an agent who happened to be doing the next hole.
That is a real finding and it is about static locations rather than events. A rally is an announced movement with a published site plan and an advance team. A golf outing at a club the principal owns and visits every few weeks is neither, and the Service has said as much — the acting director noted the visit was not on the public schedule and the course was not secured to the standard of an official movement.
That is an honest explanation and it is also the gap. Habitual locations are the easiest thing in the world to surveil, because you do not need to know the schedule. You need to know the address.
So the process finding I would file is: detection worked, prevention did not exist, and the reason prevention did not exist is that the protective model is built around announced movements and this man’s most predictable exposure is unannounced ones at addresses everybody knows.
That is a specification gap. It is not a second failure and calling it one gives away an argument we do not need to lose.
Orange County, CA
Orange County can distinguish a loss from a near miss, and this was a near miss the system caught.
I want to price what was actually possible here, because the standard our side is applying would require something nobody is proposing to fund.
A rally is a defined event. It has a date, a footprint, a stage, a published start time, and an advance team that arrives days ahead and secures a perimeter. That is an expensive product and it is deliverable.
A private round of golf at a club the principal owns is a different product entirely. It is not announced. It happens whenever he decides. The course is several hundred acres with public roads and a fence line running for miles. Securing that to rally standard means locking down the perimeter of a golf course every time the man might play, which means every day, indefinitely, for years.
The acting director said as much and was criticised for it. He was correct. The visit was off the record, the course was not secured to the standard of an official movement, and the protection that existed nonetheless found an armed man before the principal reached him.
In finance we would say the coverage matched the declared exposure and the loss was avoided anyway.
So what is the actual finding? Two things, and only one of them is a criticism.
The first: the enhancements since Butler are real. The detail is larger, the sweeps are more aggressive, and a forward sweep found a rifle barrel through a tree line at distance. That is a measurably different operating posture than existed on the thirteenth of July.
The second, and this is the criticism: the model prices announced events and does not price habitual locations. A man who plays the same course most weeks presents a predictable exposure that no advance team covers, because there is no advance. That is an unhedged position and it is the one thing this incident genuinely reveals.
Hedging it costs money and inconvenience — a standing perimeter presence at locations the protectee frequents. Congress voted four hundred and five to nothing on Friday to raise the protection standard for major candidates. Whether the appropriation follows is the question, and it always is.
Bismarck, ND
Run it the other way and see whether it still reads as a pattern of failure.
A Democratic former president is grazed at a rally in July because a roof in the sight line went uncovered. Two months later, an agent sweeping ahead of him on a golf course spots a rifle barrel in the shrubbery, fires, and the man flees and is arrested within the hour without getting a shot off.
Would I call that two failures? I would not. I would call the first a failure and the second a detail doing its job, and I would say the second is evidence that something changed after the first.
Same answer here, and I want to be plain that I am correcting my own side’s framing rather than defending an agency I spent all summer criticising.
In compliance work we distinguish carefully between a control breach and a control activation, and conflating them is the most common error in the whole discipline. A breach means the hazard reached the protected asset. An activation means the control caught it. Both involve a hazard. Only one is a finding against the system.
Butler was a breach. The fifteenth was an activation.
What I would still put in the file, and it is a genuine open item, is the perimeter question. A man reportedly lay in position for a great many hours outside the fence line of a course this protectee uses regularly. Nothing detected him. He was found by an agent walking ahead of the group.
That is a gap in coverage of static, predictable locations, and it is not answered by saying the visit was unannounced, because the location is entirely announceable — anybody can look up where the man golfs.
So: not a pattern of inadequate posture. A demonstrated improvement in event protection and an unaddressed exposure at habitual sites. Those are two different findings and both belong in the report.
And on the question of stacking them into a single theory of authorship — no. Two men, no established connection, and speculation without a document is how a serious argument turns into folklore. The charging file will say what it says.
Clermont, FL
This one happened forty minutes from where I sit, so let me describe the geography, because it explains more than any theory.
Trump International sits west of West Palm Beach with a public road along part of its boundary and a fence line running for miles. The man was outside that fence, in the shrubbery, near the sixth green. Reports have him in position for something like twelve hours before the group came around.
Trump was on the fifth. An agent went ahead to clear the sixth and saw a barrel through the vegetation. He fired. The man ran and was picked up on I-95 in Martin County inside the hour.
I consult with small businesses in this state, a lot of them in hospitality, and the thing everybody down here understands about a property like that is that you cannot close it. It is not a stadium. There is no gate you lock. The boundary is landscaping and chain link across hundreds of acres, adjacent to public right of way, and the neighbours have been complaining about golf balls for twenty years.
Securing it to the standard of a rally means posting a standing perimeter every day forever, because the man decides to play in the morning and goes.
So the honest local answer is that this was not a lapse in the way Butler was a lapse. Butler had an announced event, a published site plan, an advance team, and a known building in the sight line that nobody covered. This had none of those inputs and the detail found the man anyway.
What Florida would say about it, and what I have heard said at three different counters this week, is simpler than any of our theories. He plays that course all the time. Everybody knows he plays that course. A man with a rifle and enough patience can go sit in the bushes because nobody has to tell him when.
That is the exposure and it is not a Secret Service failure. It is a consequence of a protectee with a fixed, publicly known habit, and the fix is expensive and permanent rather than procedural.
Jacksonville, FL
Ports audit incidents by asking whether the control caught the hazard or the hazard reached the cargo, and our side has been auditing this one backwards.
The hazard did not reach the cargo. An agent sweeping the next hole spotted a rifle barrel through a fence line at distance and engaged before the principal was within range. The man never fired. By the county sheriff’s account he never had a line.
That is the control working, and it is worth saying plainly because I spent the July file arguing the control had failed, and the honest thing to do when the same system produces the opposite result is to say so.
Now the audit question that is actually open.
Two incidents, sixty days, same protectee. That is a pattern worth examining — not as a theory of authorship, which requires charging documents nobody has, but as a question about exposure. And the exposure profiles are completely different.
Butler was an announced event. Published time, published place, advance team, site survey, and a building with a clean line to the stage that nobody owned. That is a planning failure and the reviews will say so.
The fifteenth was an unannounced personal movement at a location the protectee uses habitually. No advance, no site survey, no perimeter, because the model does not generate one for a man deciding to play golf on a Sunday.
So the manifest reads: event protection improved measurably, and habitual-location protection does not exist as a category.
That second item is the finding I would carry forward. It is the same structural point I made about venue and about records and about clemency in other files — the system has a mechanism for the announced case and nothing at all for the ordinary one, and the ordinary one is where the exposure lives.
The House voted four hundred and five to nothing on Friday to raise the protection standard for major candidates. Unanimity in that chamber on anything is worth noticing. Whether the money follows and whether it covers static locations rather than rallies is the thing to watch, and nobody is watching it because the argument has moved on to who the second man was.
Las Vegas, NV
The house caught this one. I want to say that clearly because I spent July saying the house had failed, and a man who only reports the misses is not running a book.
An agent walked ahead to the next hole — routine, that is the job — and saw a rifle barrel in the brush through a fence line. He fired first. The man ran without getting a shot off and was picked up on the interstate within the hour. The principal was a hole away and never in the line.
In my business that is the pit boss spotting a device before the hand is dealt. It is the outcome you pay for, and when it happens you note it, because otherwise your incident log only ever proves the thing you already believed.
So the two events are not two of the same thing. One is a shot fired. The other is a shot prevented. Anybody stacking them into a single failure narrative is stacking a loss and a save and calling the total a loss.
What I would keep from the pattern instinct is narrower and it is about the room rather than the night.
This man is the most predictable protectee in America. He plays the same course, most weeks, at a property with his name on it. That is a standing exposure and it is nothing like a rally, which is a one-off with a footprint and an advance team. You can secure a room for an evening. You cannot secure a room somebody lives in, indefinitely, without turning it into something else entirely.
Whoever the second man was, he did not need inside information. He needed a map and patience, and he had twelve hours of both.
So my answer is that the posture on events improved and the posture on habitual locations does not exist, and those are different problems with different price tags. The second one costs a standing detail at fixed sites forever, which is a budget question and now a congressional one after Friday’s vote.
And on the authorship theory — no. Two men, no connection on the record, and the moment we start braiding them we have stopped analysing and started entertaining ourselves.
Knoxville, TN
I want to answer this as a design question, because the political reading has both events backwards and the design reading explains the difference.
Protective operations are built around movements. A movement is an announced event with a time, a place, and a footprint. The system generates an advance, a site survey, a perimeter, and a coordination plan with local agencies. All of that machinery is triggered by the movement being scheduled.
Butler was a movement and the machinery ran and failed. A building with a clean sight line to the stage was inside the problem set and outside the coverage, local officers flagged a man, and the principal went on stage anyway. That is a failure of a system that was engaged.
The fifteenth was not a movement. It was a man deciding to play golf at a property he owns. No advance, no site survey, no perimeter — none of it triggered, because none of it is triggered by a personal outing.
And he was still found. An agent doing the ordinary forward sweep spotted a barrel through vegetation and engaged. That is the residual protection that exists even with none of the machinery running, and it worked.
So the design finding is not two failures. It is that the system has one mode, the mode is triggered by scheduling, and the protectee’s largest exposure is at unscheduled visits to fixed addresses that anyone can look up.
In public works terms that is a maintenance regime built entirely around planned inspections with nothing covering the asset between them. Every inspection may pass and the bridge still fails on a Tuesday, because Tuesdays are not in the plan.
The fix is a second mode: standing coverage at habitual locations, independent of schedule. It is expensive, it is permanent, and it is the thing the House was voting on Friday when it passed the protection bill four hundred and five to nothing. Unanimity in that chamber means the members have decided this is not a partisan question, which is the necessary condition for money.
Whether the money arrives and whether it funds the second mode rather than more of the first is the whole question, and it will be decided in an appropriations process nobody will cover.
