United States — California US-CA

California this cycle anchors two converging sanctions-architecture stories: a state-directed proliferation-financing network and a widening asymmetry between US and EU/UK sanctions instruments. The primary story is an active and evolving North Korea (DPRK) IT-worker infiltration network that secures remote contracts at California-based technology and Web3 employers through fabricated United States identities. Wages are paid in USDT and USDC, commingled with other DPRK IT-worker proceeds, and layered through mainstream exchanges and self-hosted wallets before reaching programs assessed to finance weapons of mass destruction and ballistic-missile development. The Office of Foreign Assets Control (OFAC) designated six individuals and two entities, including Amnokgang Technology Development Company, on 12 March 2026, blocking 21 blockchain addresses associated with the network. Applying the Sanctions Architecture Filter at the three-level analysis the domain requires: the scheme is fabricated-identity remote employment; the architecture is a layered onchain conversion pipeline running through exchanges accessible to California residents and self-hosted wallets outside direct exchange control; and the strategic consequence is a durable proliferation-financing channel that a single facilitator-network designation narrows without eliminating, since screening obligations for crypto-asset operators and banks remain only partially covered by the designation.

A parallel, longer-standing sanctions-relevant architecture involves Chinese Money Laundering Networks (CMLNs), assessed at High confidence from FinCEN advisory material, which launder Sinaloa and CJNG cartel proceeds generated in California through trade-based and smurfing schemes, converting drug cash into RMB-denominated value for China-based clients while avoiding direct cross-border fund movement. This is a professional-facilitator architecture with sanctions-adjacent relevance because it operates in the same trade-finance and correspondent-banking corridors that sanctions-evasion networks also exploit, and it recruits money mules including students, a red-flag indicator with onboarding-stage observability.

The sanctions-tooling story this cycle is one of asymmetry. OFAC designated two UK-registered digital asset exchanges, Zedcex Exchange Ltd and Zedxion Exchange Ltd, on 30 January 2026 for processing Iran-linked, IRGC-connected cryptocurrency flows; no confirmed matching OFSI domestic designation has been identified, meaning a UK-incorporated entity is sanctioned by the United States without an equivalent UK domestic determination. On 22 June 2026, a proposed Section 311 special measure would sever H-Pay Service PLC and successor entities of the Huione Group from the United States financial system, extending an October 2025 designation tied to more than 4 billion dollars in laundered proceeds including North Korean cyber-heist funds; this is a proposed, forward-looking instrument without a direct European Union or UK equivalent tool. Finally, a corrected record now shows OFAC delisted Tornado Cash from the SDN List on 21 March 2025, not 1 March 2025 as previously carried, following the Fifth Circuit ruling in Van Loon v. Department of the Treasury. This date correction has direct implications for the calibration of sanctions-screening programs built around the delisting at California-based crypto exchanges and analytics firms, since a two-week discrepancy in a delisting date used as a screening-list trigger is a control-design detail, not a rounding error.

Read as architecture rather than incident, California this cycle demonstrates a bifurcated sanctions posture: proliferation-financing and Iran-nexus designations widen in reach and precision, while the tooling used to enforce them, special measures, non-custodial-protocol delistings, diverges further from the instruments available to EU and UK counterparts, a divergence with direct consequences for multinational compliance-program design.

Obligation coverage across this cluster is partial. The DPRK IT-worker facilitator designation carries a screening obligation flagged as only partially covered for crypto-asset operators and banks, while the CMLN advisory reporting obligation is assessed as covered, and the Zedcex/Zedxion screening obligation is flagged as partial given the absent OFSI counterpart. The Section 311 proposal against Huione successor entities remains at proposed stage, meaning no control-gap signal is yet assignable; the eventual final rule will define the compliance obligation itself when adopted. For California-headquartered banks, crypto-asset operators and payment companies with correspondent or VASP-counterparty exposure, this is a domain where screening-list currency, not just screening-list coverage, is the operative risk: the Tornado Cash date correction demonstrates how a secondary vendor characterization of a primary sanctions action can propagate an error into downstream compliance-program design if not checked against the OFAC and Treasury primary record directly.

The DPRK network in particular illustrates why an architecture-over-incident register matters for sanctions analysis. The March 2026 OFAC action is a data point; the underlying system, third-country facilitators, fabricated identity documentation, and a stablecoin-based settlement layer that survives individual designations, is the actual object of assessment. No California-specific prosecutorial or civil-enforcement record beyond the national OFAC and Department of Justice actions has been established this cycle, a gap that constrains confidence in state-level enforcement posture even as the national facilitator network itself is well documented at Assessed confidence.

Filters applied this cycle span F2 (Sanctions Architecture) and F3 (Enabler Jurisdiction), with the CMLN scheme carrying both, underscoring that professional-facilitator networks and sanctions-evasion architecture are frequently the same infrastructure viewed from different angles.

Outlook

The most consequential D1 horizon item for California is not a scheduled instrument but a data gap: whether the Section 311 proposal against Huione successor entities is finalized, and on what timeline, will determine whether banks and crypto-asset operators with correspondent exposure face a hard severance obligation or a continued advisory-only posture. Separately, the sanctions-tooling asymmetry between US special measures and non-custodial-protocol delistings, and the absence of directly equivalent EU or UK instruments, is assessed as a structural rather than episodic feature of the current landscape and is unlikely to narrow in the near term absent coordinated multilateral reform. California-headquartered multinational crypto and banking groups should expect continued divergence in list-currency and designation-trigger design between US and UK/EU authorities, with the corrected Tornado Cash delisting date serving as a concrete illustration of the operational cost of relying on secondary characterization rather than primary-source verification for screening-program calibration. Illustrative scenario content addressing this dynamic is carried separately in this cycle scenario_sketches array under the standard forward-looking disclaimer.

California this cycle carries the two most significant beneficial-ownership deteriorations in the current research record, plus a standing structural feature of the European Union AML architecture that frames how any future federal reform might eventually be judged. The federal Corporate Transparency Act domestic reporting exemption, an interim final rule announced 21 March 2025 and published with an effective date of 26 March 2025 per Federal Register publication, exempts all US-formed reporting companies and their beneficial owners from CTA beneficial-ownership-information (BOI) reporting; the Financial Crimes Enforcement Network (FinCEN) will not enforce BOI penalties against US persons or domestic reporting companies, leaving only foreign reporting companies in scope. For the large population of California-formed limited liability companies and corporations used in real estate and investment layering, this removes federal ownership visibility that previously existed, however imperfectly, as the CTA baseline.

Compounding this, a parallel real-estate-specific visibility mechanism has also weakened, though the record required correction to establish this accurately. The nationwide Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule was scheduled to take effect 1 March 2026 and had been characterized in prior research as operative and superseding the county-level Geographic Targeting Orders (GTOs). Challenge verification against FinCEN primary sources establishes instead that the rule was vacated by the United States District Court for the Eastern District of Texas on 19 March 2026 and is not currently in force pending a FinCEN appeal; reporting persons are not currently required to file Real Estate Reports under this rule. The prior GTO framework, renewed through 28 February 2026 and requiring title insurers to identify natural persons behind shell-company residential real-estate purchases in designated California counties, remains the operative backstop, though GTOs cover only designated metropolitan counties rather than the state as a whole.

Standing architecture: the European Union AML Package establishes a durable three-instrument structure against which any comparable US reform would eventually be read. The AML Regulation (AMLR, Regulation (EU) 2024/1624) is directly applicable across Member States without domestic transposition; the sixth AML Directive (6AMLD) requires transposition on a per-Member-State basis; and the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority, whose direct and indirect supervision perimeter is shifting AML/CFT supervision from a purely national-authority model toward a hybrid EU-level regime. California, as a United States sub-national jurisdiction, sits entirely outside this EU AMLR/6AMLD/AMLA supervisory perimeter, and no EU AML Package instrument-specific development was supported by this jurisdiction research this cycle; the durable relevance of the architecture is as a comparative backdrop against which the direction of the 2025 domestic BOI exemption, a visibility contraction, can be read against a jurisdiction moving toward greater centralized beneficial-ownership and supervisory integration.

The FATF dimension sharpens this picture further. The United States carries a standing position of compliance on 9 of 40 FATF Recommendations and largely-compliant on 23, with serious beneficial-ownership-access gaps persisting from the 2016 mutual evaluation report; the fifth-round mutual evaluation, expected sometime between 2026 and 2028 under the 2022 Methodology, has not yet been scheduled. This cycle assessment is that the 2025 domestic BOI exemption compounds rather than resolves that deficiency, since it removes a federal data source without a state-level substitute, California having no state-level public beneficial-ownership registry of its own.

Obligation coverage in this domain is mixed. The BOI domestic exemption obligation is flagged as covered, in the sense that the underlying rule is properly reflected as in force and non-enforced against domestic entities; the Residential Real Estate Rule obligation is flagged as partial, reflecting the operative-but-narrower GTO backstop pending appeal; and the underlying GTO renewal obligation itself is also flagged partial, since GTOs apply only to designated counties and rely on title-insurer reporting rather than a comprehensive ownership registry. Taken together, no single instrument currently gives California, or the federal government with respect to California-formed entities, comprehensive beneficial-ownership visibility across corporate structuring and real estate.

This is a domain where the honesty-over-coverage principle matters directly: both corrections applied this cycle, the Residential Real Estate Rule vacatur and the CTA exemption effective date, originated as challenge-verification findings against primary FinCEN and Federal Register sources, not as new developments in the underlying policy. The corrections change what compliance and audit functions should treat as currently binding, not merely when a past event occurred, and reporting persons who continued filing Real Estate Reports on the assumption the vacated rule remained in force would have been complying with an obligation that, per FinCEN own status page, does not currently exist.

Outlook

Two threads will determine the domain trajectory going forward. First, the outcome of the FinCEN appeal of the Residential Real Estate Rule vacatur will determine whether a national beneficial-ownership-adjacent reporting requirement for residential real estate is reinstated, replaced, or permanently narrowed to the GTO model; this outcome is not yet established in the research record. Second, the eventual scheduling and conduct of the fifth-round FATF mutual evaluation of the United States, not expected before 2027 on a multi-year uncertainty band, will be the first international assessment mechanism to test the 2025 domestic BOI exemption against the beneficial-ownership-access Recommendations FATF previously flagged as deficient. Absent a state-level beneficial-ownership registry, California-formed entities used in opaque real estate and investment structuring are, for the duration of this window, visible chiefly through the narrower GTO mechanism rather than through a comprehensive ownership register at either the state or federal level.

California this cycle illustrates a form of enablement that operates through capacity deficit rather than deliberate design, alongside a more conventional professional-facilitator network operating through trade and payment corridors. The California Digital Financial Assets Law (DFAL) pre-licensing window, running from the law 2023 enactment to the 1 July 2026 hard licensing deadline, created a multi-year period in which digital-asset businesses could serve California residents under only partial rules, kiosk daily transaction limits and disclosure requirements, without full licensing, AML-program, or ongoing-supervision obligations. This allowed unlicensed or thinly supervised exchanges, custodians and kiosk operators to build customer bases ahead of the California Department of Financial Protection and Innovation (DFPI) net-worth, surety-bond and audited-AML-program requirements that now apply. Applying the Enabler Jurisdiction Filter distinction between capacity and choice: California did not choose permissiveness as a policy stance, the DFAL was enacted specifically to close this gap, but the multi-year implementation runway itself functioned as an enabler window regardless of intent, and the DFPI has since brought enforcement actions, effective from 1 June 2025, against kiosk operators exceeding transaction limits or failing disclosures, an outcome assessed as containing rather than resolving the historical gap.

A second, more conventional enabler-adjacent architecture involves Chinese Money Laundering Networks (CMLNs), assessed at High confidence, which launder Sinaloa and CJNG cartel proceeds generated in California using mirror-transfer and Black Market Peso Exchange-style trade-based schemes, smurfing across depository branches, complicit-insider recruitment, and money-mule networks including recruited students, converting drug cash into RMB-denominated value for China-based clients while avoiding direct cross-border fund movement. This is a professional-facilitator architecture in the classical sense: it depends on intermediaries, trade documentation, and banking relationships that function as enabling infrastructure for value transfer that would otherwise require direct, more visible cross-border movement. The red-flag indicators here, trade-based schemes avoiding direct cross-border fund movement, smurfing, and counterfeit-document money mules, are each tied to specific customer typologies, trade finance and money-service businesses for the trade-based indicators, retail for the mule indicator, giving compliance functions typology-specific detection surfaces rather than a single generic red flag.

Both architectures share a structural feature relevant to the enabler-jurisdiction analytical frame: neither depends on California choosing weak regulation as a strategy. The DFAL gap is a transition-period artifact of a state actively building a licensing regime considered comparatively rigorous once fully in force; the CMLN architecture exploits California trade and banking infrastructure as a transit point regardless of California own regulatory posture, since the laundering network origin and destination lie substantially outside California and the United States. This distinguishes California from enabler jurisdictions where permissiveness reflects sustained regulatory choice rather than transitional capacity constraint or exploited infrastructure, and the analytical product for this domain is accordingly the enabling window and infrastructure themselves, not a judgment about California regulatory intent.

Obligation coverage in this cluster is uneven. The CMLN-related FinCEN advisory reporting obligation is flagged as covered for banks and payment companies. No obligation reference is currently associated with the DFAL pre-licensing gap itself, since the gap is a structural finding about a transition period rather than a specific compliance citation, though the DFPI enforcement actions against kiosk operators for limit and disclosure breaches represent the operative control mechanism once the interim rules applied.

This cycle also surfaces a documentation gap relevant to confidence in this domain: no directly retrievable DFPI primary regulatory or enforcement-order text was cited in the underlying research, meaning California-specific DFPI actions are characterized entirely through secondary vendor and analytics reporting rather than primary regulatory-agency text. This constrains confidence in the precise scope and count of DFPI enforcement actions to Assessed rather than High, and is flagged as a persistent gap carried forward from the prior baseline research cycle.

Filters F3 (Enabler Jurisdiction) and F2 (Sanctions Architecture) were both applied to the CMLN scheme this cycle, reflecting that professional-facilitator networks and sanctions-relevant trade corridors are frequently the same underlying infrastructure assessed through different analytical lenses; the DFAL pre-licensing gap carries F3 alone, since it is a licensing-capacity story rather than a sanctions-evasion one.

Taken together, the domain trajectory for California is assessed as stable rather than deteriorating or improving this cycle: the DFAL transition-period gap is closing as full licensing takes effect, even if post-deadline compliance data is not yet confirmed, while the CMLN architecture continues without a California-specific enforcement development this cycle beyond the standing FinCEN advisory material.

Outlook

The principal open question for this domain is whether the DFPI first post-deadline supervisory sweep, expected in the fourth quarter of 2026 but carrying an uncertain risk direction and only Possible confidence in the current record, confirms that the pre-licensing enabler window has meaningfully closed or reveals continued thin supervision among newly licensed or exited operators. Separately, no California-specific prosecutorial or civil-enforcement development targeting the CMLN architecture directly was identified this cycle; the network continues to be addressed through federal advisory and Geographic Targeting Order instruments rather than jurisdiction-specific enforcement action. Absent DFPI primary source material becoming available, confidence in the precise scale of historical DFAL-gap exploitation and the current state of kiosk-operator compliance will likely remain capped at Assessed rather than High.

No California-specific conflict-finance or extractive-industry-integrity development was surfaced in this jurisdiction-scoped research cycle. The domain status for this slice is quiet, with a stable trajectory, reflecting the absence rather than the resolution of signal: California is not documented this cycle as a transit point, financing node, or extractive-sector nexus for conflict-affected commodity flows or armed-group revenue generation. This is distinct from the broader Financial Integrity Monitor standing coverage of conflict finance, Russian war-economy financing, Sahel conflict minerals, and Democratic Republic of Congo mining governance, which continues under separate, non-jurisdiction-scoped baselines not reflected in this particular research pull and therefore not restated here as new signal.

Per the honesty-over-coverage principle, this sub-brief is intentionally short rather than padded with material outside the structured claims produced for this cycle. The absence of a California-specific D4 finding is itself a data point worth recording explicitly: it indicates that this jurisdiction research pass, which was scoped around DPRK IT-worker infiltration, beneficial-ownership visibility, crypto-asset supervision, and enabler-jurisdiction dynamics, did not surface a conflict-finance or extractive-industry thread requiring assessment this cycle, rather than that no such thread could in principle exist for California-linked capital.

Where cross-domain material does touch this domain indirectly, it is through the DPRK IT-worker infiltration architecture assessed under D1 and D6, since DPRK-linked revenue generation is itself connected to a broader financing architecture for weapons programs that the Conflict Finance and Extractive-Industry Integrity domain would, in a fuller multi-jurisdiction assessment, cross-reference against SCEM conflict-context material and ERM commodity-flow material. No such cross-reference was independently developed as D4 signal in this cycle research, however, and is noted here only to explain why this domain sub-brief remains thin rather than empty.

Outlook

No California-specific D4 horizon items were identified this cycle. Future jurisdiction-scoped research passes for California would need to specifically target extractive-industry supply chains, conflict-mineral sourcing by California-headquartered manufacturers, or conflict-adjacent financing corridors to develop material D4 signal for this jurisdiction; absent such targeted scoping, this domain is likely to remain quiet in subsequent California-specific cycles even as the broader Financial Integrity Monitor standing conflict-finance trackers continue to evolve independently.

California this cycle carries the heaviest concentration of crypto-specific signal of any domain in this jurisdiction slice, spanning licensing-regime status, an active scam-laundering pipeline, market-manipulation prosecutions, and a corrected sanctions record with direct compliance-screening implications. The California DFAL full licensing regime became mandatory from 1 July 2026, but the post-deadline compliance and enforcement status is unconfirmed in the current research record; the California Department of Financial Protection and Innovation (DFPI) began accepting license applications on 9 March 2026 ahead of the deadline, yet no post-deadline sweep, application-outcome data, or licensing/denial figures have been established, leaving the domain fourth-quarter-2026 supervisory-sweep expectation unconfirmed against present-day fact rather than resolved.

The convertible virtual currency kiosk scam-laundering pipeline remains active and is assessed as one of the domain most concrete, ongoing harms. California hosts more than 4,500 crypto kiosks concentrated in Los Angeles, San Diego and Sacramento; TRM analysis found approximately 84 percent of illicit kiosk-linked activity in 2024 tied to scams disproportionately affecting elderly victims, and upstream liquidity providers continued supplying bitcoin to flagged operators after regulatory warnings, an onboarding-stage red-flag indicator with clear detection surface for liquidity-provider counterparty due diligence. This finding is corroborated by an independent FinCEN notice on kiosk scam risk, meeting a two-source threshold sufficient for Assessed rather than High confidence on the specific 84 percent figure.

Market-integrity enforcement also advanced this cycle. Operation Token Mirrors, a Northern District of California prosecution, charged ten foreign nationals across four firms for crypto market-making and wash-trading wire-fraud conspiracy; one principal was sentenced in June 2025 and a second on 10 February 2026, with 1.2 million USDT forfeited. Separately, United States v. Su, prosecuted in the Central District of California, resulted in a 46-month sentence on 27 January 2026 for a digital-asset investment scam that converted approximately 36.9 million dollars in victim funds through stablecoins, a High-confidence finding anchored in FinCEN documentary context.

The corrected sanctions record carries direct operational weight for this domain. OFAC delisted Tornado Cash from the SDN List on 21 March 2025, not 1 March 2025 as previously carried, following the Fifth Circuit ruling in Van Loon v. Department of the Treasury. Since Tornado Cash is a non-custodial protocol whose sanctions status directly affects screening-list design at crypto exchanges, wallet providers and analytics firms serving California users, a two-week date discrepancy is not a cosmetic error; it is the kind of detail that determines whether a screening program correctly treats historical transaction flows through the protocol as pre- or post-delisting for risk-scoring purposes.

Two forward-looking regulatory instruments would reshape obligations for this domain once finalized. The GENIUS Act Permitted Payment Stablecoin Issuer (PPSI) AML/CFT and Sanctions Compliance Program NPRM would treat permitted payment stablecoin issuers as Bank Secrecy Act financial institutions, with finalization expected between the fourth quarter of 2026 and the first quarter of 2027. A broader FinCEN AML/CFT Program NPRM, expected to finalize in 2027, proposes a risk-based, reasonably designed program standard with explicit accommodation for technology-driven compliance approaches, directly relevant to DFAL-licensed California entities once finalized.

Obligation coverage across this cluster remains partial. The DPRK IT-worker facilitator screening obligation, relevant to crypto-asset operators and banks with VASP-counterparty exposure, is flagged partial; the Tornado Cash screening obligation is now flagged covered following the corrected delisting-date record; and neither the DFAL post-deadline supervisory obligation nor the GENIUS Act PPSI program obligation yet carries a control-gap signal, since both remain forward-looking or currency-uncertain items rather than settled compliance baselines.

The domain trajectory is assessed as improving overall, driven by the maturing DFAL licensing framework and continuing prosecutorial follow-through on market-manipulation and investment-fraud cases, even though the kiosk scam-laundering pipeline itself remains an active and largely unresolved harm and the DFAL post-deadline compliance picture is not yet established. This is a domain where enforcement volume is comparatively high relative to other domains in this jurisdiction slice, consistent with the general pattern that AML-pillar crypto enforcement tends to generate more visible activity than CFT or CPF findings, even though the DPRK IT-worker network operating through this same domain infrastructure is itself a CPF-pillar concern.

Outlook

The single most consequential near-term development for this domain is the DFPI first post-deadline supervisory sweep, expected in the fourth quarter of 2026 on a quarter-length uncertainty band but currently carrying only Possible confidence given the unconfirmed post-deadline compliance picture; its outcome will materially affect whether the improving trajectory assessed this cycle holds. The GENIUS Act PPSI NPRM and the broader FinCEN AML/CFT Program NPRM will, once finalized, extend formal BSA-style program obligations to stablecoin issuers and accommodate technology-driven compliance approaches respectively, both directly relevant to DFAL-licensed entities; neither is yet in force. The kiosk scam-laundering pipeline is assessed as likely to remain active in the near term absent a coordinated liquidity-provider counterparty-due-diligence response, since upstream bitcoin supply to flagged operators has continued despite existing regulatory warnings. Illustrative forward-looking material on how stablecoin-based settlement infrastructure could evolve under these converging reforms is carried separately in this cycle scenario content under the standard disclaimer.

This cycle surfaces a single but analytically significant D6 development for California: a proposed FinCEN AML/CFT Program rule that would require an effective, risk-based, reasonably designed program standard with explicit accommodation for innovative and technology-driven compliance approaches. This is a consultation-stage instrument, assessed at Assessed confidence from a FinCEN fact-sheet primary source, expected to finalize in 2027. Its relevance to California is structural rather than jurisdiction-specific: once finalized, it would reshape supervisory expectations for California-headquartered banks, money-service businesses, and crypto firms operating under, or alongside, the DFAL regime, by formally accommodating technology-driven compliance methods that current Bank Secrecy Act program requirements do not explicitly recognize.

This domain is flagged for limited signal this cycle because the underlying research pass, scoped around California-specific enforcement, sanctions, and beneficial-ownership developments, surfaced only this one compliance-technology-specific instrument rather than a broader set of active-defence or regtech-specific findings for the jurisdiction. The domain status is nonetheless assessed as watch with an improving trajectory, since the proposed reform, alongside the GENIUS Act PPSI NPRM assessed under D5, points toward a regulatory environment increasingly willing to formalize technology-driven compliance approaches rather than treat them as exceptions requiring case-by-case supervisory accommodation.

No control-gap signal is yet assignable to this instrument, since it remains at the consultation stage and the eventual final rule will define the compliance obligation itself once adopted. Honesty over coverage governs this sub-brief: rather than extrapolating a fuller California-specific compliance-technology narrative from adjacent D5 material such as the DFAL licensing regime or the GENIUS Act NPRM, this sub-brief limits itself to the single NPRM directly coded to this domain, leaving cross-domain synthesis to the weekly_brief_draft Cross-Monitor Connections and Outlook sections rather than duplicating it here. Affected firm types under the proposed rule span the cross-sector population, meaning its eventual effect, once finalized, would not be confined to crypto-asset operators or banks alone but would extend across the full range of Bank Secrecy Act-obligated entities operating in or through California.

Outlook

The FinCEN AML/CFT Program NPRM finalization, expected in 2027 on a year-length uncertainty band, is the primary item to track for this domain; its eventual text will determine whether technology-driven compliance approaches receive genuine regulatory accommodation or remain a discretionary supervisory consideration. Given the current limited signal for this domain in the California-specific research record, subsequent cycles would benefit from explicitly scoping active-defence and regtech-adoption questions, such as machine-learning transaction-monitoring deployment among DFAL-licensed entities, rather than relying on incidental coverage through adjacent D5 crypto-regulatory material.