investigate-anything

# Investigate anything The front door. Everything downstream is faster than the thinking that should precede it, which is why most bad investigations are not collection failures — they are framing failures. You can run forty tools against a name and produce a confident dossier on the wrong person. The work here is deciding what question you are answering, what would count as an answer, and what would prove you wrong. ## Core vocabulary Used across every skill in this repo, defined only here. - **Selector** — one identifiable data point: name, handle, email, phone, domain, IP, wallet, hash, plate, IMO, company number. - **Pivot** — turning one selector into new selectors (email → breach record → reused handle → forum profile → real name). An investigation *is* a chain of pivots. Every pivot is also a chance to jump onto a different person. ## Step 1 — Authorized scope Read [../../ETHICS.md](../../ETHICS.md), then write down five things: 1. **Subject** — the specific entity, distinguished from anyone with a similar name. Write the discriminators you will use ("the J. Okonkwo who is a director of company 09xxxxxx", not "J. Okonkwo"). 2. **Objective** — see Step 2. 3. **In bounds** — selector types, sources, and whether interaction is allowed. 4. **Out of bounds** — the named things you will not do: logging into anything belonging to the subject, contacting them, family members, medical or religious data, and any selector unrelated to the objective. 5. **...