Pinal Airpark sits on 1,508 acres of Sonoran Desert about ninety miles southeast of Phoenix, and it has been three different things without ever changing its fence line. It opened in 1942 as Marana Army Air Field, a basic flight training base. By the 1960s it was the primary facility for American covert air operations worldwide, operated through front companies including Intermountain Aviation. In 1972 it became an aircraft graveyard. The boneyard economy did not replace the clandestine air operation at Marana; it inherited the same runway, the same hangars, and in several cases the same mechanics. Air America had its roots there. That continuity is the single most useful fact about the secondary aircraft market, because it establishes the pattern that governs everything else: airframes, like the institutions that fly them, are almost never destroyed. They descend.

A commercial aircraft retired from a major carrier’s fleet has perhaps forty years of remaining structural life and no economic role. What happens next is not disposal. It is a controlled fall through a sequence of owners, each one poorer, each one operating in a looser regulatory environment, each one accepting worse documentation than the last. Roughly 8,000 end-of-life aircraft are parked globally at any given moment, with something on the order of 11,000 more expected to join them over the next decade. They are not waste. They are inventory, and the market that processes them sets the floor price for the entire bottom half of global aviation, including the parts of it that appear in Sky Subterfuge under less respectable headings.

Marana was an air force before it was a graveyard

The physical facility explains the industry better than any market report. Pinal has a 6,893-foot runway, capacity for more than 400 aircraft, and typically holds around 200. Evergreen International Aviation took the lease in 1979 and opened a maintenance centre there in 1982. Relativity Capital acquired the operation in 2011, renamed it Marana Aerospace Solutions, and it now trades as Ascent Aviation Services after a roughly seventy-million-dollar hangar expansion sized for the 777X. Before the pandemic, maintenance, repair and overhaul work accounted for more than seventy percent of revenue. Storage was the smaller business.

That ratio matters. A boneyard is not primarily a place where aircraft sit. It is a place where aircraft are opened. Storage is the waiting room; the revenue is in what happens when a parked airframe is finally cut. JetYard LLC operates an FAA-certificated repair station on the same field doing exactly that work, and the arrangement is typical: a large MRO campus with smaller part-out specialists operating inside or alongside it. The desert supplies dry air and cheap land. The regulatory apparatus supplies something more valuable, which is the ability to issue paper.

The lineage from covert air operations to legitimate teardown is not an irony. It is a structural feature. Both businesses need the same things: large flat land away from scrutiny, mechanics who can work on unfamiliar types, the capacity to make an aircraft appear and disappear from a register, and a documentation function. The facility that built the air arm described in Air America was already optimised for the trade that followed it.

What the boneyard economy actually sells

Dismantling a modern airliner recovers between 85 and 95 percent of the airframe by weight as recyclable material. That figure is the one that appears in sustainability reporting, and it is the least interesting number in the business. Aluminium scrap is a commodity with a published price and thin margins. The money is in used serviceable material, or USM: components removed from a retired aircraft, inspected, certified, and sold back into the maintenance market.

USM typically sells at 60 to 80 percent of new original-equipment pricing. Airbus has put the total USM value entering the market over the twenty years to 2043 at somewhere around fifty-two billion dollars. For any given narrowbody teardown, engines account for roughly forty percent of recovered part value by component count logic and between 50 and 70 percent of total recovery value once condition is priced in. Landing gear, auxiliary power units, avionics boxes, thrust reversers and flight control surfaces make up most of the rest.

Six variables determine what a given airframe is worth on the day it is cut: the aircraft type, the condition of its engines, market demand for that airframe family, the speed at which the teardown can be completed, the realised price of recovered raw materials, and the quality of the records. That last variable does not belong in a list of physical attributes, and the fact that it sits there is the entire subject.

The engine is the asset; the airframe is the packaging

A narrowbody retirement is usually an engine transaction with an airframe attached. Two engines that have been maintained to a major operator’s programme, with full back-to-birth traceability on their life-limited parts, can exceed the value of everything else on the aircraft combined. The airframe becomes a container that was used to transport the engines to the point of sale.

This inverts the way most people imagine aircraft retirement. The decision to park an airframe is rarely about the airframe. It is driven by fuel burn, by maintenance cost curves, by lease return conditions, and above all by where the engines sit in their shop visit cycle. An aircraft whose engines have just come out of overhaul is worth keeping. An aircraft whose engines are approaching a heavy shop visit is worth cutting, because the parts inside those engines are worth more sold individually than the cost of putting them back into service as a matched pair.

The downstream effect is that the bottom of the global fleet is sustained by the top of it. Operators flying twenty-five-year-old equipment in places with thin maintenance infrastructure are not running on new parts. They are running on components harvested from aircraft retired by carriers with much larger budgets. The freighter operations described in The Il-76 Diaspora ran on a Soviet parallel to exactly this system, with surplus military stock substituting for Western retirements. The mechanism was identical; only the source inventory differed.

Green time is the unit of value

The industry term for remaining hours before a mandatory inspection or overhaul is green time, and it is the real currency of the lower market. An engine with eight thousand hours of green time can be leased to an operator who cannot afford an overhaul, flown until the limit, and then sent for teardown. The operator gets cheap capacity. The lessor gets revenue from an asset already written down. Nobody has to raise capital.

Green-time leasing is the hinge between the legitimate secondary market and the market that does not advertise. It allows an airframe to generate revenue for three to five more years while holding essentially no residual value, which means the owner has very little to lose. An asset with no residual value is an asset whose owner will accept routes, cargo and customers that a carrier protecting a balance sheet would refuse. This is not a moral observation. It is an underwriting one.

The pattern recurs wherever capital equipment reaches the end of its depreciation schedule. The surplus flows documented in The Drawdown Problem follow the same logic applied to military inventory: equipment written to zero on one set of books acquires a second life at a price that only makes sense because the first owner has stopped caring what happens to it.

The paperwork is the part

A used component is not a part. It is a part plus a certificate, and without the certificate it is scrap metal that happens to be shaped like a bearing housing. In the United States the document is FAA Form 8130-3, the Authorized Release Certificate. In Europe it is EASA Form 1. Under 14 CFR Part 43, a component without valid release documentation cannot legally be installed on a type-certificated aircraft, regardless of its physical condition. EASA Part-145 imposes the equivalent requirement on European maintenance organisations through 145.A.42.

The bilateral aviation safety agreements between the United States and the European Union provide for mutual recognition of these certificates, but the recognition is conditional in three specific ways that define the entire gray zone. Used parts with incomplete release documentation require individual assessment. Parts recovered from accident-damaged aircraft require individual assessment. Parts from suppliers outside the approved chain require individual assessment. Each of those exceptions is a door, and each door opens onto the same corridor.

For life-limited parts, the standard is back-to-birth traceability: an unbroken record of every cycle the component has accumulated since manufacture. Reconstructing that record for a part pulled from a twenty-year-old airframe that has passed through four operators and two registries is genuinely difficult, and the difficulty is not always resolved honestly. Industry audit data suggests roughly one in six maintenance audits flags incomplete traceability somewhere in the chain. That is not a fringe failure rate. It is a structural property of a market in which the document is worth more than the metal.

How a tag gets forged

In 2023 the UK Civil Aviation Authority, EASA and the FAA all reached the same conclusion about a London-registered parts distributor called AOG Technics: the company had been supplying engine components with forged release documentation. Falsified 8130-3 and EASA Form 1 certificates had been presented for parts that reached established maintenance organisations and were installed on aircraft in commercial service. The scandal was not that a counterfeit part failed. It was that the detection mechanism was the paperwork itself, and the paperwork had been the thing that was faked.

EASA maintains a public register of suspected unapproved parts, and the individual entries are more instructive than the headline cases. One notice concerns a forged 8130-3 accompanying a landing gear support component, part number 0745603-2, carrying tracking number 72754-NW dated 27 April 2016. The forgery was confirmed when the US maintenance organisation named on the certificate as having inspected the part stated that it had not. The document referenced an institution that had never seen the component. That is the characteristic failure mode: not a bad part, but a true-looking sentence about a part.

The structural lesson is one the gray market understood long before regulators articulated it. If the certificate is the asset, then the certificate is the thing to counterfeit, and counterfeiting it requires no engineering capability whatsoever. The same insight drives the corporate paperwork described in Jebel Ali to Ras Al Khaimah, where the document that establishes a company’s existence is manufactured far more cheaply than the company itself.

The descent: five owners, each poorer

A reasonably typical path for a narrowbody looks like this. It enters service with a major carrier on a twelve-year lease, maintained to a manufacturer-approved programme with complete records. It transfers to a second-tier operator in a mid-income market, where the maintenance programme is still approved but the records begin to carry gaps from the transition. It moves to a charter or cargo operator, often through a leasing company that has written down most of the asset’s value, and at this stage a registry change is common. It is sold again to an operator in a jurisdiction with limited oversight capacity, flying green time with no expectation of another heavy check. Finally it is parked, and then cut.

Each transfer degrades the documentation, and the degradation is cumulative and effectively irreversible. Records are lost in the handover, translated imperfectly, reconstructed from secondary sources, or quietly reissued. By the fourth owner the airframe’s maintenance history is frequently a partial narrative stitched from multiple regimes, and nobody in the chain has an economic interest in resolving the gaps, because resolution can only reduce the asset’s value.

The registry moves that accompany this descent are not incidental. The registries of convenience catalogued across Sky Subterfuge exist in part to serve exactly this stage of the lifecycle, and the transport operations traced in The Rhodesian Air Bridge demonstrated the technique decades before it had a name: an aircraft’s nationality is a filing, and filings can be changed faster than aircraft can be inspected.

Where undocumented parts are worth something

An undocumented component is worthless only in jurisdictions that check. This is the single most important sentence in the economics of the lower market, and it explains a population of parts that regulatory frameworks treat as nonexistent.

When a part fails inspection or loses its documentation chain, it does not evaporate. It becomes inventory with no legal market in the United States or Europe and a perfectly functional market elsewhere. The part still works. It is the certificate that has failed. A maintenance organisation operating under an authority with limited surveillance capacity, serving operators who cannot afford certified replacements, will install it, and the aircraft will fly.

This creates a persistent arbitrage that runs in the same direction as every other flow in the subject. The tightening of documentation standards in high-capacity jurisdictions does not eliminate undocumented parts; it relocates them. Each regulatory improvement in Europe or North America increases the supply available to everyone else, at a lower price. The arms-length logistics networks in Kufra and the perishable-cargo operations in Khat, Fish and Flowers both depend on aircraft maintained substantially from this population, which is why their operating costs are achievable at all.

The boneyard economy as a floor price

Here is the function that makes all of this matter beyond the aviation trade press. Teardown value sets a hard floor under aircraft prices, and that floor is what makes the bottom of the market exist.

If a twenty-five-year-old freighter is worth two million dollars as parts, nobody will sell it for one million as a flying aircraft. But the existence of that two-million-dollar parts value also means the aircraft can be bought for something close to two million by an operator who intends to fly it, because the seller is indifferent between the two outcomes. The parts market therefore does two contradictory-sounding things at once: it prices old aircraft low enough to be affordable to marginal operators, and it guarantees that those operators will never be the cheapest possible buyer, because the scrapper is always bidding.

The practical consequence is a large, permanently available fleet of airworthy aircraft priced near scrap value, supported by a parts supply harvested from retirements, maintained by organisations whose documentation standards vary by jurisdiction. That fleet is the physical substrate of every logistics pattern in this subject. The militia logistics in Janjaweed Inc., the access arrangements in The Deby Franchise, the airlift described in The Toyota Wars, and the armed-drone supply chains in The Drone Bazaar all presuppose cheap airframes with flexible paperwork. The teardown market manufactures that condition as a by-product of ordinary fleet renewal by respectable carriers.

The contracting apparatus in LOGCAP and the settlement mechanics in Hawala After 9/11 handle the money that moves across this fleet. The tracking methods in The Trackers and the commercial data flows in The Data Market are how outsiders observe it. But the aircraft themselves come from the boneyard, and they come from it because a Lufthansa or a Delta decided a fuel-burn figure no longer worked.

The claims that do not hold up

Several things get overclaimed about this market, and a few get underclaimed.

The overclaims first. It is sometimes asserted that boneyards are deliberately used to launder aircraft identities at scale, with serial numbers transferred between airframes as routine practice. Serial plate fraud is real and has been documented in individual cases, but the evidence does not support it as a systematic business model at major storage facilities, which are FAA-certificated operations with inspectors and insurance exposure. The documentation problem in this market is overwhelmingly one of degraded and forged component paperwork, not of substituted airframe identities.

It is also claimed that the CIA connection at Pinal persisted into the commercial era in an operational sense. The historical record establishes the facility’s role in covert aviation through the Vietnam period clearly enough, and the institutional continuity through Evergreen is documented. Whether any specific post-1980 activity at the field served intelligence purposes is not established by available public sources, and the frequent implication that it did rests on the facility’s history rather than on evidence about its later operations. That gap should be named as a gap.

A third overclaim concerns the AOG Technics case. It is often described as having endangered specific flights. The regulatory findings establish that falsified documentation was supplied and that affected parts were installed on in-service aircraft. They do not establish that any of those parts was unairworthy, and no accident has been attributed to them. The scandal was a failure of the documentation system, which is serious on its own terms and does not need to be upgraded into a near-disaster.

Now the underclaims. The population of undocumented but physically serviceable parts is routinely treated as a marginal compliance issue. Given a global parked fleet in the thousands and a one-in-six audit flag rate on traceability, it is more plausibly a standing feature of the world fleet at a scale nobody has measured publicly. And the role of teardown value in making marginal operators viable is almost entirely absent from policy discussion about those operators, which tends to treat cheap aircraft as a mystery rather than as an engineered outcome of fleet renewal in wealthy markets.

What the boneyard economy is actually telling us

The useful finding here is not that old aircraft are dangerous. Most of them are not. It is that the certificate has become more valuable than the component, and that a market organised around documents will be attacked at the document.

No mastermind is required. A carrier retires an airframe for sound commercial reasons. A lessor writes it down for sound accounting reasons. A teardown specialist harvests the engines for sound engineering reasons. A broker in a loose jurisdiction buys a crate of parts with imperfect paperwork for sound commercial reasons. At no point does anyone decide to build a gray aviation market, and at every point the incentives bend in the same direction, because the thing being traded is partly a physical object and partly a claim about that object’s past, and only one of those two things gets harder to verify as it travels.

This is the same lesson that runs through the whole of Sky Subterfuge, and it generalises well past aviation. The institutional patterns in Shadowcraft and the asset-movement problems in Greatest Heists in History run on the same asymmetry. So do the supply chains in Rare Earth Elements and the infrastructure economics in How A.I. Data Centers Work, where provenance claims about material and capacity are checked far less often than the material and capacity themselves. Readers who want the full catalogue of this pattern can find the rest of it in the course catalog.

Pinal Airpark trained pilots, then ran an air force that officially did not exist, then became a place where aircraft are opened and sorted. The buildings did not change. Neither did the underlying function, which was always the production of airworthiness as a paper fact. Aircraft do not die. They descend, and they take their records with them, and the records arrive in worse condition than the metal.

Khat loses its potency completely within about two days of being cut.

The active compound is cathinone, and it degrades. A bundle harvested at dawn in the Kenyan highlands is a stimulant that afternoon, a weaker one the next day, and worthless leaves by the third. There is no refrigeration fix, no preservative, and no way to slow the chemistry enough to matter. Khat completely loses its potency within two days of being harvested, which makes the trade extremely sensitive to any disruption in the supply chain.

That single fact built an air bridge. Roughly fifteen to nineteen tonnes a day move from Kenya to Somalia in peak periods, by air, every day, because the alternative is a product with no value on arrival. The Meru growing region supports a county of 1.4 million people on it. Kenya earns at minimum four hundred thousand dollars a day in export value.

And it is flown by exactly the fleet this subject is about: Dash 8s and Fokkers and ageing turboprops, operated by small Nairobi carriers, into airstrips in a country with no functioning civil aviation authority.

Perishable cargo is the reason the African air freight network that this whole trade depends on exists at all. It is the legitimate business that keeps the aircraft fuelled, the crews employed, and the routes commercially viable, and it is also the structural reason the same network has a second use.

Three perishable commodities, one constraint

The lecture’s three nouns are not arbitrary. They are three different industries subject to an identical physical rule.

Khat is governed by chemistry. The window is around forty-eight hours from harvest, which means the supply chain is measured in hours and a delay anywhere destroys the consignment entirely.

Fresh fish is governed by spoilage. Nile perch fillets from Lake Victoria reach European markets as a chilled product, which requires an unbroken cold chain and a journey measured in a day or two rather than a week.

Cut flowers are governed by vase life. A rose arriving in Amsterdam has to have enough remaining life for an auction, a wholesaler, a florist and a buyer, which compresses the available transit time to a few days at most.

In all three cases the economics follow from the biology. Value per kilogram is high enough to justify air freight. Time is the binding constraint rather than cost. And the flow is one-directional, because Kenya grows flowers and Europe does not fly flowers back.

That last property is the one that matters for everything downstream.

The scale of the flower trade

The Kenyan cut flower industry is substantial enough to be the anchor tenant of an entire freight corridor.

Kenya is among the largest cut flower exporters in the world, with the Netherlands, the United Kingdom, Saudi Arabia, Germany and the Emirates as principal destinations. Export volumes reached roughly 130,600 tonnes in 2025, with export value around $628 million, within horticultural exports exceeding $1.1 billion. One specialist perishables forwarder alone handles something on the order of eighty million kilograms of flowers a year between Kenya and the Netherlands.

Historically air freight moved the majority of that, and the dependency runs deep enough that capacity shortages become national economic events. At one point in a recent November a producer described dumping roughly twenty percent of production on the compost heap for want of space on aircraft. Kenyan exporters recorded losses above five million dollars across two months from delays and spoilage, against freight rates that had risen by up to 110 percent in eighteen months.

Rates themselves tell the structural story. Historic Nairobi-to-Europe rates ran around $2.50 to $3.10 per kilogram. When carriers could earn $8 per kilogram lifting perishables from Asia to the United States, several withdrew freighter services from Nairobi, and a backlog of hundreds of tonnes accumulated within days.

That is a thin-margin business whose aircraft are mobile and whose operators will reposition them for better yields elsewhere. Which means the corridor is only as reliable as its relative profitability, and operators willing to fly it when the rates are poor acquire a position that better-capitalised carriers have declined to hold.

The imbalance

Here is the mechanism that connects a flower farm to everything else in this subject, and it is pure freight arithmetic.

An aircraft flying from Nairobi to Amsterdam carries flowers at a premium rate, full. The same aircraft has to get back to Nairobi. Europe’s exports to Kenya are not time-critical, not high value per kilogram, and not in the volumes the northbound leg generates.

So the southbound leg runs light.

The cost of that flight has already been incurred. The aircraft is going anyway, the fuel is burned anyway, the crew is paid anyway, and the marginal cost of carrying freight on an otherwise empty return approaches the cost of handling it.

The same applies to the flower industry’s own experience of the inverse problem. When Kenyan growers hoped to open the American market, the chief executive of their trade body identified the obstacle precisely: a dedicated cargo flight runs into the issue of the return flight flying back empty, because Kenya’s main imports from the United States are bulk machinery, cereals and aircraft, which are shipped rather than flown.

Now consider what nearly-free southbound capacity into East and Central Africa is worth to somebody who needs to move something into a conflict zone.

It is worth a great deal, and it requires no conspiracy to exist. The imbalance is a structural feature of a region that exports perishables and imports almost nothing that flies.

Darwin’s Nightmare, and what it did and did not establish

That observation became internationally famous in 2004 through a documentary, and the controversy around it is the single best illustration of why this material has to be handled carefully.

Hubert Sauper’s film opens with an Ilyushin Il-76 landing at Mwanza, on Lake Victoria in Tanzania. Its argument is that Nile perch fillets fly to Europe while the aircraft return carrying weapons for the conflicts of the Great Lakes region, and that the fish trade and the arms trade are two legs of one flight.

The film was critically celebrated and nominated for an Academy Award.

The arms claim was never substantiated. A critical assessment by academic researchers argued that the fish-for-arms hypothesis lacks direct evidence, noting the absence of confirmation from pilots or other sources within the film itself, and the Tanzanian government contested it as unsubstantiated. A Tanzanian rebuttal put it bluntly: that Sauper had failed to prove how planes brought arms into Mwanza airport, and that the airport had never been used as a gateway for arms smuggling.

The honest position is uncomfortable for both sides.

The structural claim is correct and important. A route with a full northbound leg and an empty southbound one is a route with cheap capacity into a region with conflicts, and that capacity is real whether or not anybody used it for weapons. The film identified a genuine vulnerability.

The factual claim was not demonstrated. Speculating that aircraft return with weapons, filming at night, and declining to produce a pilot, a manifest, a serial number or a seizure is not the same as establishing it, and the documentary’s reputation rests on an inference it presented as a finding.

That distinction is the whole methodological point. In this field the structure can be entirely real while the specific allegation is entirely unproven, and the two get conflated constantly. The Rhodesian beef route worked exactly this way and was documented with Hansard, tonnages and named companies. Mwanza was documented with a long lens and an argument. Gaps named as gaps are worth more than inferences presented as findings, and that applies to the Sudan corridor as much as to a fishing port in Tanzania.

Naming the gap is better than filling it with a guess.

The Somali khat bridge in detail

The khat trade deserves close description because it is the clearest case of a perishables network that is also an aviation network.

The operation runs on a schedule that an aid worker in Galkayo once described, slightly enviously, as clockwork. Humanitarian flights adjusted repeatedly for fighting. The khat aircraft landed with a promptness you could set a watch by, because a late aircraft is a worthless cargo and everybody in the chain knows it.

On arrival the product transfers immediately to pickups that locals call missiles, travelling at speeds up to 150 kilometres an hour under armed escort, because the clock is still running after the aircraft lands.

The aircraft are what you would expect. Blue Bird Aviation, a Nairobi carrier operating since 1992, flies Dash 8 freighters, Dash 8-100s and Fokker F50s. African Express Airways operates from Embakasi. These are small operators with ageing equipment working routes that major carriers will not serve.

The risk is real and documented. A Blue Bird Dash 8-400 crashed on landing at Abudwak in December 2022 carrying khat, an aircraft more than twenty-three years old. An African Express Embraer EMB 120 on a charter delivering pandemic relief supplies was shot down by Ethiopian troops on approach to Berdale in May 2020, killing everyone aboard.

That second case is worth sitting with. The same company, the same class of aircraft, the same airspace, carrying humanitarian cargo, destroyed by a state military. The operators flying khat and the operators flying aid are frequently the same operators, because there is only one fleet willing to serve those airfields. That is the dependency that makes designation so awkward, and it is the same problem the contracted logistics industry presents at a different scale.

What happened when it stopped

Somalia banned khat imports in 2020 on pandemic grounds and the consequences demonstrate the dependency precisely.

Prior to the ban, around a third of the 150 tonnes shipped daily from Kenya went to Somalia. Growers lost up to sixteen million Kenyan shillings a day. The ban ran for more than two years.

And the trade did not stop. It changed shape. Carriers continued operating into Somalia under special licences authorising transport of pandemic medical supplies and other necessities, and on at least three occasions Kenya-registered aircraft were found carrying khat concealed among the medical supplies.

That is the entire subject in miniature, running on leaves rather than weapons. A legitimate humanitarian exemption creates an authorised flight. An authorised flight has cargo space. The cargo space is filled with the thing the authorisation does not cover, and the manifest describes the part that is permitted. Swap leaves for crates and the end-user paperwork for the crates, and the structure is unchanged.

Overland smuggling routes developed alongside, through border crossings under military control, which is the predictable substitution when an air route closes and which recurs on every corridor in this trade. Demand with a two-day clock does not wait for a policy review.

Why urgency is a customs technique

A property of perishables deserves isolating because it operates as a security measure without anybody designing it as one.

A consignment of machine parts delayed two days is a consignment of machine parts. A consignment of khat delayed two days is compost. A pallet of roses held for inspection misses an auction. A container of chilled fillets held on a hot apron is a write-off.

Everybody handling perishable freight therefore operates under genuine time pressure, and the systems around it are built for speed: priority handling, pre-cleared documentation, dedicated cold chain, minimal dwell time on the ramp.

Which means a perishables flight is the least inspected category of air cargo in practice, not because anybody waived the rules but because applying them thoroughly destroys the cargo and the inspector knows it.

That is the identical mechanism the Rhodesian operation used with chilled beef, and it has the same property now that it had then. Urgency is not a loophole somebody found. It is a structural consequence of the commodity, and it would exist if nobody had ever thought to exploit it. An inspector who holds a perishables consignment for a thorough examination has destroyed the shipment whether or not anything was wrong with it, which makes thorough examination a decision with a cost attached and no reward unless something is found.

What perishable freight does for the fleet

Connect this to what came before and the economic picture completes itself.

The post-Soviet airframes that flooded the market after 1991 needed work. An aircraft sitting on a ramp costs money and earns nothing, and the operators who bought them were not capitalised to wait.

Perishables provided the work. Daily, scheduled, year-round, price-insensitive relative to timing, on routes where no major carrier wanted to operate and where the airfields were too poor for modern equipment.

So the fleet that this subject describes was substantially sustained by flowers, fish, khat, fresh vegetables and chilled produce. The occasional cargo that attracts a United Nations panel report is a small fraction of flying hours for operators whose core business is agricultural freight. The Soviet-built freighters that get named in those reports spent most of their careers carrying something entirely mundane.

Which has two consequences. The capability stays available, because legitimate demand keeps it solvent between the jobs nobody writes about. And it becomes very difficult to act against, because grounding an operator grounds the fish and the flowers and the medical supplies alongside whatever else it carries.

Who actually flies it

The operator profile matters because it explains why these routes are served by the companies they are served by.

A major international freight carrier evaluates a route on yield per kilogram, aircraft utilisation, ground handling quality, and whether the destination has the infrastructure to turn an aircraft around safely. By those criteria, a strip in central Somalia fails on every count.

What serves those destinations instead is a particular kind of business: small, locally owned, operating equipment two to four decades old, with maintenance arrangements that are adequate rather than generous, flying routes where the alternative is nothing.

That is not a criticism of the operators, who are providing a service nobody else will provide at prices their customers can pay. It is a description of a market segment with thin margins and old aircraft, and thin margins with old aircraft is the exact profile of every operator in this subject.

The equipment list makes the point. Dash 8s, Fokker F50s, Embraer Brasilias, Antonovs and the occasional Ilyushin, flown into airfields that would not accept a modern widebody and serviced by maintenance organisations with limited depot support. The airframes released onto the market after 1991 found a great deal of their working life here.

And the overlap between categories is complete. The carrier delivering khat on Tuesday delivers medical supplies on Wednesday, under a charter from an aid organisation, in the same aircraft with the same crew. Whatever else moves on that network moves alongside both.

The claims that do not hold up

An audit, because this area generates a specific kind of overreach.

Fish planes carried arms to Africa is the Darwin’s Nightmare claim and it was not established. The structural opportunity was real; the specific allegation lacked direct evidence and was contested.

Perishables are a cover story misdescribes an industry exporting over a hundred thousand tonnes of flowers a year and sustaining a county of 1.4 million people on khat. The legitimate trade is overwhelmingly the business.

Khat is a drug so the trade is criminal confuses legality across jurisdictions. It is legal in Kenya, Ethiopia, Uganda and Djibouti and has been banned in several Western countries, which makes it a commodity with a jurisdictionally variable status rather than contraband, in the way that most things in this trade are legal somewhere.

These operators are arms traffickers running a cover describes a small number of documented cases and not a sector, most of whose participants fly produce and spend their careers doing so.

Empty return legs prove trafficking proves nothing by itself. It is a vulnerability, and demonstrating that a vulnerability exists is not demonstrating that it was used.

African air cargo is unregulated overstates it. Kenyan and Tanzanian aviation authorities are functional. The problem is destination-end oversight in places like Somalia, where civil aviation capacity is limited.

Sea freight will solve this ignores the two-day chemical clock on khat and the vase-life constraint on flowers, both of which rule out surface transport regardless of cost.

The trade is a colonial relationship extracting food from hungry people is the documentary’s framing, and the industries involved are among the largest employers and foreign exchange earners in their countries, which complicates the account considerably.

What the perishables trade is actually telling us

The finding is that the infrastructure in this subject is not sinister infrastructure. It is ordinary commercial aviation serving genuine demand, and the gray market is a passenger on it.

Every element the preceding lectures assembled has a legitimate counterpart doing most of the work. The ageing airframes mostly carry produce. The small operators mostly fly scheduled freight. The permissive airfields mostly handle food and medicine. The crews mostly deliver flowers.

That is why the industry is so resistant to enforcement, and the reason is structural rather than political. An activity conducted exclusively by bad actors can be suppressed by removing them. An activity conducted overwhelmingly by legitimate businesses, with a small fraction of flights doing something else on the same aircraft on the same routes with the same paperwork, cannot be suppressed without suppressing the rest.

The empty southbound leg is the clearest version of it. Nobody created that imbalance and nobody can remove it, because it follows from one region growing things that must fly and another region sending back nothing that needs to. It is a permanent feature of the geography of trade, as durable as the water that determines where anybody can land in the Sahara, it represents nearly free capacity in a direction that happens to be useful, and the only question is what goes into it.

A rose has about five days. A fillet has about two. Khat has about forty-eight hours and the clock starts when the knife touches the stem. Those three deadlines built a network of aircraft and airfields across a continent, and everything else that has ever moved along it was travelling on infrastructure that was paid for by somebody’s flowers.

In late 2024, journalists working with German news outlets asked an American data broker for a free sample.

What they received was 3.6 billion location coordinates, some separated by milliseconds, covering roughly eleven million mobile advertising identifiers in Germany over a two-month period. It was a sales demonstration. Free samples are normal in this industry because the data is abundant and the margin is in the subscription.

From that sample they identified up to 12,313 devices that spent time at or near at least eleven American military and intelligence sites. Inside one air base where nuclear weapons are reportedly stored in underground bunkers, they counted 38,474 location signals from as many as 189 devices. They followed others through an armoured-vehicle training area. They tracked service members off base to barracks, workplaces, restaurants, supermarkets and bars, and they could see entry points, security practices and what appeared to be guard schedules.

No law was broken in obtaining it. The reporters were offered a sample because that is how the industry sells.

In May 2026 the Department of Defense confirmed to United States senators what the implication had always been: that adversaries have used commercially available location data to target American service members in war zones, with Central Command reporting multiple threat reports concerning adversary exploitation of commercial location data to target or surveil personnel in theatre.

The location data market is the second half of the tracking apparatus, and it does something ADS-B cannot. An aircraft transmits because a safety mandate requires it. A person transmits because they installed a weather app.

How the location data actually escapes

The mechanism is the part almost nobody understands, including, apparently, many of the companies whose products are the source.

When an application displays an advertisement, it does not sell that space to one buyer. It runs an auction, in milliseconds, called real-time bidding. A bid request goes out describing the opportunity: device make and model, IP address, and in many cases precise location if the application has been granted location permission, along with other technical details.

That request is broadcast to everyone eligible to bid. One of them wins and places an ad.

All of them received the data.

That single structural fact is the entire story. The bid stream is not a transaction between two parties, it is a disclosure to every participant, and participation is not restricted to anybody with an actual interest in buying advertising.

The Federal Trade Commission established this as a legal finding rather than a technical allegation. In its December 2024 action against Mobilewalla, the Commission found that when the company bid for advertising space through a real-time bidding auction, it collected and retained the information in the bid request even when it did not have the winning bid. The order requires it to stop using data from those exchanges for anything other than actually bidding on ad space.

Bidding was the cost of entry. The data was the product, and a participant willing to lose every auction collects the same information as one that wins.

The breach that proved the granularity

Claims about this market were persistently dismissed as overstated until a hacker settled the question.

Gravy Analytics, a major location data broker and parent of a subsidiary selling to government customers, disclosed a security incident discovered on 4 January 2025, with attackers claiming root access to its servers and control of the cloud storage holding its data.

The leaked material contained millions of location coordinates and the names of thousands of mobile applications. The list included dating apps, fitness apps, photo editors, games, transit apps, weather services, prayer apps and pregnancy apps.

The significant finding was not the volume. It was the sourcing. The presence of those particular applications confirmed that the data had been obtained through real-time bidding rather than through tracking code deliberately embedded by the developers, which means the applications generating the data were not knowing participants. The developer of a puzzle game had become a sensor in a global collection network without being told.

The company’s own public position says exactly that, and says it as a defence. It states that it does not track smartphone user locations, does not collect location data directly from individuals or from application publishers, and that the data it uses is already commercially available, collected via smartphone apps, purchased at scale by brokers or aggregators, and then licensed onward.

Every clause of that is probably true, and it describes a system in which nobody in the chain believes they are the party doing the surveillance.

Nobody is responsible and everybody is in the chain

Trace the path and the diffusion of responsibility is total.

The user granted location permission to an application, usually for a function that genuinely needed it. The developer integrated an advertising network to fund a free product and frequently has no visibility into what the network transmits. The advertising exchange broadcasts the bid request because that is what an auction requires. Participants in the auction retain what they receive. Aggregators purchase and combine. Brokers license onward. Analytics firms enrich the result against other datasets. Governments and researchers and anybody with a credit card buy the output.

At no point does a party in that chain take a decision that looks like deciding to conduct surveillance. The user agreed to share location with an app. The broker bought lawfully available data. The buyer purchased a commercial product.

That is the same structural property this entire subject keeps producing, arriving in a different industry. A flag relocates legal identity, a corporate layer relocates the responsible person, and a data supply chain relocates the decision until there is no point at which anybody chose the outcome.

The regulator’s own framing captured it. A commissioner’s statement in the Mobilewalla matter observed that brokers purchasing sensitive information cannot avoid liability by turning a blind eye.

Why location data matters at an airfield

The application to this subject is direct and it inverts the principal weakness of aircraft tracking.

ADS-B coverage is a function of volunteer receiver density, which follows population and hobbyist interest, which means the corridor running from the Gulf through Libya and Chad into Darfur is well observed at its endpoints and effectively blind across the middle. The desert has no plane spotters.

The desert has phones.

A cargo flight into a remote airfield involves a flight crew who sleep somewhere, eat somewhere, and carry handsets. Ground handlers. Fuel truck drivers. Security personnel. Local fixers. Officials. Anybody with a smartphone running an ad-supported application in a place with mobile data coverage is generating bid requests, and bid requests contain coordinates.

The granularity demonstrated in the German investigation is the relevant benchmark. Not merely that a device was at a base, but entry points, movement patterns, timings and the rhythm of shifts, derived from signals some of which were separated by milliseconds.

Applied to a logistics node, that is a record of when aircraft are serviced, where crews are quartered, which buildings are occupied, how many people arrive with a delivery, and whether the pattern changes before a particular flight. The satellite imagery that documented hangars appearing at a desert airfield shows what was built. Location data would show who was there while it was being built.

And it is purchasable. The German reporters got theirs as a free sample, which is the detail that should govern any assessment of how hard this is to obtain.

What it does to the people in this trade

The crews who staff this industry were historically protected by obscurity rather than by any security practice. A pilot flying irregular cargo was a name on a crew list in a jurisdiction nobody would query, living between hotels, with no institution tracking him.

Location data removes that. A device reveals a residence by where it spends nights, an employer by where it spends days, and a social network by co-location with other devices. Deanonymisation from pattern alone is straightforward: in the leaked Gravy material, analysts traced a person from New York to their home in Tennessee.

For an operator, the consequences compound. A crew’s movements connect an airframe to a company, a company to an office, an office to a set of individuals, and individuals to the people they meet. The corporate opacity that defeats a subpoena does not defeat a co-location analysis, because the structure was designed to hide ownership on paper and nobody designed it to hide the human beings from a dataset that did not exist when it was built. A free zone entity has no pattern of life. The people who run it do.

The American military discovered the same thing about itself and has been struggling with it since 2018, when a fitness application published an aggregate activity map that outlined installations nobody had announced.

The government-purchase problem

There is a legal dimension that explains why this market has institutional customers rather than merely commercial ones.

American constitutional law treats government acquisition of historical cell site location information as a search requiring a warrant. The data broker route raises a separate question, because an agency buying a commercially available product is not compelling anybody to produce anything.

Agencies took that position explicitly. In 2021 the Defense Intelligence Agency told Congress it was purchasing commercially available phone location data, including on Americans, without a warrant, on the basis that the data was already sold commercially.

Legislative responses have been introduced. The Fourth Amendment Is Not For Sale Act, which would bar government acquisition of information that would otherwise require a warrant, passed the House of Representatives in April 2024 and has not been enacted.

The result is a market with three categories of buyer. Advertisers, who are the nominal customers. Governments, who are large customers purchasing what they could not compel. And anybody else, because a dataset offered as a free sample to a journalist is a dataset offered to anybody who asks convincingly.

That third category is the one that matters, because it includes every party in the trade.

The counterintelligence inversion

The point that makes this genuinely dangerous rather than merely intrusive is that it does not discriminate.

Senators pressing the Department of Defense noted that commercial location data can identify where troops congregate and establish their pattern of life, which can be exploited to target attacks including missiles, drones and roadside bombs, as well as for counterintelligence purposes. The Pentagon’s confirmation that this has occurred in a war zone converts a privacy argument into a casualty argument.

The German reporting found material beyond operational detail: data on service members’ children, and devices visiting brothels, which is coercion material rather than targeting material.

And the same dataset works against the investigators. A journalist tracing an airlift carries a phone. A United Nations panel member visiting an airfield carries a phone. An NGO researcher documenting an atrocity carries a phone. The analytical capability that exposed the Chad corridor is available, at the same price, to the parties operating it.

That symmetry is unusual in this subject. Most of the techniques in this trade favour one side. The data market favours whoever is paying attention, and attention is cheap. That cuts against the structural advantage this trade has always relied on, which is that watching is expensive and operating is not.

What cannot be fixed easily

The structural obstacles to solving this deserve stating, because the obvious remedies are weaker than they appear.

Banning sales to foreign adversaries addresses a route rather than a mechanism, and a dataset sold to an intermediary in a permissive jurisdiction reaches the end buyer anyway, which is the identical registry-shopping problem that governs everything else in this field.

Device-level controls help and are partial. Restricting advertising identifiers reduces persistent tracking and does not eliminate location in bid requests, and users who need a functioning phone grant permissions.

Organisational policy is the practical mitigation and it is hard to enforce. Telling personnel not to use location-enabled applications works in proportion to compliance, and compliance across a large population approaches zero.

And the enforcement record shows the shape of the problem. The Commission has acted against Kochava, X-Mode and Outlogic, InMarket, Mobilewalla, and Gravy Analytics and Venntel across four years. Those are significant actions against named companies in a market with a great many participants, most of which are not American and none of which depend on the particular firms that were sanctioned.

Naming a broker removes a broker. It does not remove the bid stream, any more than designating a shell company removes the registry that will form the next one.

The 2016 precedent nobody acted on

This was demonstrated a decade before it became a scandal, which is the part that makes the current reaction hard to credit as surprise.

As early as 2016, an American defence contractor was able to use commercially available location data to track special operations forces from their bases in the United States to a sensitive staging post in Syria. That account was disclosed publicly years later.

Think about what that demonstration involved. Not a hack, not a leak, not an insider. A contractor bought a commercial product and used it to follow some of the most protected personnel in the American military across continents to a location that was not supposed to be known.

In 2018 the aggregate activity map published by a fitness application outlined installations in several countries, prompting policy restrictions on fitness trackers. In 2019 a newspaper investigation showed how easily commercial location data identified individuals including public officials. In 2021 reporting established that defence and intelligence agencies were purchasing the data. In 2024 journalists tracked personnel at eleven sites in an allied country.

In 2026 the Department of Defense confirmed to Congress that adversaries are exploiting it operationally, and senators wrote that their efforts to obtain further information about the reported targeting had been unsuccessful.

Ten years, a steady escalation of public demonstrations, each one more specific than the last, and the market is intact. That is not an institutional failure to notice. It is an institutional failure to act on something noticed repeatedly, which is the pattern this whole field keeps producing and which the aviation side of it established fifty years ago.

The claims that do not hold up

An audit, because this subject attracts both dismissal and apocalypse.

Location data is anonymous is the industry’s position and it fails to pattern analysis, since a device that sleeps at one address and works at another has identified a person.

You consented to this describes a permission granted to an application for a stated purpose and not an understanding that the coordinates would be broadcast to every participant in an advertising auction.

App developers are selling your location is frequently false. The breach analysis indicates the data was extracted through bid streams, which means developers were not knowing participants.

It is only used for advertising is contradicted by government purchases, by the German investigation, and by the Pentagon’s own confirmation of adversary exploitation.

The government needs a warrant is true for compelled production and has not been true for commercial purchase, which is the loophole the pending legislation addresses.

Turning off location services solves it is partial. Coarse location is inferable from network addresses, and applications with legitimate location functions still transmit.

The FTC has fixed this overstates five enforcement actions in a global market.

This is a privacy issue is too narrow. The Department of Defense has told Congress it is a force protection and counterintelligence issue, which is a different category of harm.

What the data market is actually telling us

The finding is that the surveillance infrastructure covering the places this investigation cares about was not built by any state, and it was not built for surveillance.

It was built to sell advertising. The precision exists because advertisers pay more for precision. The coverage is global because smartphones are global. The retention is indefinite because storage is cheap. The resale is permitted because nothing prohibited it. And the output is purchasable because the business model is selling it.

Which produces an arrangement that would have been impossible to construct deliberately. A government proposing to track eleven million phones in an allied country, at millisecond resolution, including inside a nuclear weapons facility, would face objections at every stage. An advertising network did it as a byproduct and offered the result as a free sample.

For the ghost-plane economy, this closes a gap that eighty years of corporate structure had kept open. The flags, the registries, the free zone companies and the settlement mechanisms were all designed to break the link between an activity and a responsible person, and they work, because they were built against investigators who follow documents.

They were not built against a dataset that records where the people were.

A hacker broke into a data broker and the files named Candy Crush. Somewhere in that market is a record of everybody who was on a particular ramp on a particular night, and the only reason nobody has drawn it is that nobody has yet paid for the right slice.

A Gulfstream V was delivered in November 1999 as N581GA, reregistered in March 2000 as N379P, and reregistered again in December 2003 as N8068V and later N44982. Its registered owner was Premier Executive Transport Services, a company whose named officers connected to a larger roster of false identities.

It made more than fifty trips to Guantanamo Bay, which earned it a nickname. It flew from Morocco to Poland on 6 February 2003, a movement that matched the arrival of a specific prisoner at a facility the Senate later referred to only as Detention Site Blue. It carried two Egyptian nationals out of Stockholm’s Bromma airport in October 2001, hooded, at night.

None of that was discovered by an intelligence service, a parliamentary committee, or a newspaper’s own resources.

It was discovered by hobbyists standing at the end of runways with binoculars and cameras, writing down tail numbers. ADS-B tracking, which replaced the notebooks two decades later, did not create that capability. It industrialised it.

The plane spotters are the reason the ghost-plane economy’s oldest structural advantage has been substantially withdrawn in the last twenty years. For eight decades the business depended on nobody looking. It turned out that an enormous number of people enjoy looking at aircraft, that they had been keeping records the whole time, and that the records were a surveillance system nobody had built on purpose.

The analogue era

Before any of the technology, there was a notebook.

Plane spotting is a hobby with a long history and a specific discipline: go to an airport, record what lands, note the registration, the type, the time, and the operator, and post the list. Enthusiasts have been doing this at airfields worldwide for decades, for no reason beyond the pleasure of completeness.

The consequence nobody anticipated is that this produces a distributed, time-stamped, publicly posted log of aircraft movements, maintained by people with no agenda, covering airports that no single institution monitors.

Stephen Grey, investigating rendition from 2003, identified three sources that together broke the story: information from plane spotters, flight plans published on the internet, and American flight-tracking software. He described these as three loopholes, and his assessment of the spotter data was candid about its limits, calling it patchy and confined mainly to arrivals at European airports.

Patchy was sufficient. A tail number recorded at a European airport on a specific date is a fixed point, and fixed points can be joined. Grey eventually assembled more than twelve thousand flight plans.

The institutional investigations then used the amateur lists as their starting point. The European Parliament and Council of Europe inquiries took the aircraft registrations identified by researchers and requested movement data from Eurocontrol, the agency coordinating European airspace, with one request covering fifty-five registrations. Amnesty International obtained flight records for six aircraft covering four years.

So the sequence was: hobbyists produced a list, journalists turned the list into a hypothesis, and parliamentary bodies with subpoena power converted the hypothesis into an official record.

That order of operations is the template, and it has not changed. What has changed is how much the first step now produces. In 2004 it produced a list of registrations. Today it produces a continuous positional record, which is the difference between knowing an aircraft was somewhere and knowing where it has been.

What ADS-B tracking did

Automatic Dependent Surveillance-Broadcast is a safety system, and understanding it as a safety system explains why it has the properties it has.

An aircraft determines its own position by satellite navigation and broadcasts that position, along with altitude, velocity, identity and other data, on 1090 megahertz, continuously, to anybody listening. It exists so that air traffic control and other aircraft know where it is, which is a considerable improvement on waiting for a radar return.

The broadcast is in the open. It is unencrypted, transmitted in plain text, and unauthenticated, because a cooperative safety system that only authorised parties could receive would fail at its purpose.

Then it became compulsory. The American mandate took effect on 1 January 2020 for aircraft operating in airspace requiring a transponder, with comparable requirements following elsewhere, and Canadian Class A and B airspace adding its own in May 2024. As of July 2024 there were over 168,000 American-registered aircraft equipped to transmit.

So in the space of about a decade, essentially the entire civil fleet was required by law to continuously announce its own position in a format any member of the public can receive.

That is not a surveillance programme. It is a safety mandate with a surveillance externality, and it is the single largest change to the operating environment in this trade since the Soviet fleet came on the market.

The thirty-dollar receiver

The reason the externality became a public resource rather than an industry one is a piece of consumer electronics repurposing.

The RTL-SDR is a software-defined radio built on DVB-T television tuner chips. It was designed to receive digital television, somebody discovered the chipset could be driven as a general-purpose wideband receiver, and the result is a USB dongle covering roughly 500 kilohertz to 1.7 gigahertz for under thirty dollars.

One of the frequencies in that range is 1090 megahertz.

A complete receiving station is the dongle, an antenna, a cable, and a single-board computer running open-source decoding software. A full setup runs around a hundred dollars and considerably less with a smaller antenna. Reception range is limited by line of sight, which means tens to a few hundred kilometres per station, which means coverage is a function of how many people participate.

A great many people participate. One aggregator reports around fourteen thousand active feeds producing something near 750,000 messages per second and tracking roughly fifteen thousand aircraft at any moment.

Consider the cost asymmetry that produces. The watched party operates aircraft costing millions, crews costing salaries, and a corporate structure costing legal fees. The watching party spends thirty dollars and a weekend, and there are thousands of them, and they are doing it for fun. No budget line anywhere has to be defended, no programme has to be renewed, and nobody has to justify the collection to a committee.

The filtering fight

The interesting part of this story is not technical. It is about who decided what the public could see, and it turned on a point of law.

The Federal Aviation Administration operates a programme now called Limiting Aircraft Data Displayed, formerly Block Aircraft Registration Request, under which an aircraft owner can ask that their registration not be shown. The major commercial flight-tracking services honour those requests and filter military, blocked and sensitive aircraft from public display.

In 2016 a developer named Dan Streufert founded ADS-B Exchange on the explicit basis that it would not filter anything. His argument was that suppressing the data was security theatre, since anybody could build an unfiltered receiver very cheaply, and the suppression therefore protected nothing while obscuring a great deal.

The legal position underneath that is the detail worth knowing. The obligation to honour blocking requests attaches to services using the FAA’s own data feed. A service built entirely on volunteer-received broadcasts is not using FAA data and is not bound by it.

Which means the aircraft’s own transmission is public, the law restricts only what a government feed may be used for, and anyone receiving the signal directly is outside the scheme entirely. The blocking programme regulates a copy rather than the original, which is a reasonably exact description of how most information control works once a signal is public.

What happened when somebody tried to buy it

In January 2023 Streufert sold ADS-B Exchange to JETNET, a private aviation data firm, for a reported twenty million dollars.

The reaction from the volunteers who had built the network was severe. Open-source co-developers objected publicly, said they had received nothing from the sale, and encouraged feeders to remove their stations. Control of the project’s own discussion channel changed hands. Alternative unfiltered aggregators were established by people leaving.

The grievance is worth taking seriously because it is a genuine structural problem rather than a dispute about money. The data has no value in isolation. A single receiver sees a small area. The aggregate is valuable, the aggregate is produced by thousands of volunteers donating hardware and bandwidth, and the aggregate was legally owned by one person who could sell it.

The stated fear was that commercial obligations and regulatory pressure would eventually compromise the no-filtering commitment, which is a reasonable thing to worry about when an unfiltered dataset becomes the property of a company with enterprise clients.

What the episode demonstrated is that the tracking apparatus has a governance vulnerability the aircraft operators do not. The signal cannot be suppressed. The network that collects it can be bought, and the people who built it can walk away, which is exactly what a portion of them did, founding alternative unfiltered aggregators and taking their feeds with them.

What it catches now

The modern record is substantial and it follows the same pattern as the rendition case.

An independent researcher identified the Emirati air bridge into eastern Chad by correlating cargo flight frequency against a presidential visit, publishing on a personal blog before any official body reported it. That analysis used commercial flight tracking and satellite imagery, and the step change it found was unmissable once somebody counted.

Reuters subsequently used satellite imagery, flight tracking data and United Nations documents to trace the transformation of a desert airport in southeastern Libya, identifying cargo aircraft operated by carriers previously named in weapons trafficking reporting.

Investigators tracing arms shipments work from tail numbers rather than company names, for a reason the Soviet-era fleet makes obvious: a company dissolves for nothing and an airframe persists. ADS-B gives those tail numbers a position and a timestamp, which converts a corporate mystery into a movement record. A free zone entity has no position. The aircraft it chartered does.

And there is a category of material the system produces that nobody intended, concerning private aircraft belonging to public figures, which generated its own disputes about whether publishing a position broadcast by law constitutes surveillance.

The limits of ADS-B tracking, which are substantial

An honest account has to state what this does not do, because the enthusiasm around open-source tracking consistently overstates it.

Aircraft can stop transmitting. A transponder has a switch. Flying without one is illegal in controlled airspace, dangerous, and attracts attention, which is a real deterrent for a commercial operator and no deterrent at all for a military flight in uncontrolled airspace over a desert.

State aircraft are exempt and frequently transmit nothing, or transmit with identity suppressed. The flights most worth watching are disproportionately the ones least likely to appear.

Coverage is a function of receiver density, which follows population and hobbyist interest. Europe and North America are saturated. Central Africa, the Sahara and large stretches of ocean are not, which means the corridor this subject follows is observed at its endpoints and unobserved in the middle.

Identity can be falsified. The transmitted identifier is set by equipment that can be reconfigured, and spoofed transmissions are technically straightforward.

Partial mitigation exists. Multilateration triangulates an aircraft from the arrival-time differences of a plain transponder reply across multiple receivers, which locates aircraft that are not broadcasting position, provided enough receivers hear them. That requires density, which returns to the coverage problem.

And the most important limit is the one this subject keeps arriving at. Tracking produces evidence. It does not produce jurisdiction, which is the finding that has governed this subject since a British minister confirmed in 1976 that an airline was breaking every sanctions law his government had and the airline flew for another twenty-four years.

Absence as data

One analytical point deserves isolating because it inverts the limitation.

If an operator routinely transmits and then stops, the gap is informative. A flight that appears, disappears over a region with no coverage, and reappears elsewhere has described a route by omission. An aircraft that transmits on commercial legs and goes dark on a specific corridor has identified the corridor.

Going dark is not invisibility. It is a change of state, and changes of state are observable if somebody was watching before and after.

That is why the serious work in this field is longitudinal rather than instantaneous. A single position fix is worth little. A year of movements for one hull number, including the periods of silence, is a pattern, and patterns survive the countermeasures that defeat snapshots.

The same logic applies to the ground. A satellite image of an airfield on one day shows aircraft. A sequence of images across months shows hangars being built, revetments appearing, and traffic arriving on a schedule, which is what the Kufra analyses actually did, establishing a transformation across a year rather than an anomaly on a day. ADS-B tracking is at its strongest in exactly that mode and at its weakest as a live map.

The hex code, which does not change

One technical detail deserves its own section because it is the single most useful thing an investigator can know about aircraft identity.

An aircraft carries two identifiers. The registration is the tail number, painted on the airframe, issued by a civil aviation authority, and changed whenever the aircraft is reregistered. The other is the ICAO twenty-four-bit address, a hexadecimal code configured in the transponder, which is what the aircraft actually transmits.

In principle the two are linked, since the hex code is assigned according to the registration and should be reprogrammed when the registration changes. In practice reprogramming is a maintenance action that somebody has to perform, and across a fleet operating in places with limited oversight, maintenance actions of that kind are not always performed promptly.

Which means an airframe can be reregistered in a new jurisdiction, repainted, placed under a new operating company, and continue transmitting the same code it transmitted before.

The Gulfstream at the start of this account changed registration three times across four years, from N581GA to N379P to N8068V to N44982, which is precisely the behaviour that makes registration an unreliable identifier. A tracking system keyed to what the aircraft broadcasts rather than to what is painted on it defeats that manoeuvre, provided somebody kept the earlier records.

This is why longitudinal archives matter more than live maps, and why the corporate layer that makes a company disposable does not make an airframe disposable. The paint changes, the filings change, the owner changes, and a number in a transponder frequently does not.

The claims that do not hold up

An audit, because open-source tracking generates enthusiasm disproportionate to its reach.

ADS-B tracking has ended covert aviation is contradicted by the exemptions, the switch, and the coverage gaps in exactly the regions that matter.

The trackers are hacking anything is false. They are receiving an unencrypted broadcast that an aircraft is required by law to transmit, using a television tuner.

Flight tracking sites show everything is wrong for the major commercial services, which filter according to the blocking programme, and is the entire reason the unfiltered alternative was founded.

Blocking protects operators is the argument Streufert rejected, and the reasoning holds: the signal is public, the block applies to one distribution channel, and a receiver costs thirty dollars.

The volunteers own the data describes the moral position and not the legal one, which the 2023 sale demonstrated conclusively.

Open-source investigation replaced intelligence services misreads the rendition case, where hobbyists produced the registrations and bodies with subpoena power produced the confirmation. Those are different functions and both were required, and the second one is still the bottleneck.

Detection leads to enforcement is the assumption that keeps failing. The Amdjarass flights were identified publicly and continued.

Spotters are a security risk is a position some authorities have taken and it does not survive the arithmetic. Information available to anybody with thirty dollars is not a secret being leaked.

What the trackers are actually telling us

The finding is about who the watchers turned out to be.

For most of the period this subject covers, the only parties capable of monitoring aircraft movements at scale were states, and states monitored selectively, according to their interests, and published nothing. An operator flying a questionable cargo had to worry about a specific government choosing to look, which was a manageable risk because governments mostly had reasons not to.

That changed through a sequence nobody planned. A safety system was mandated. The safety system broadcast in clear because safety systems must. A consumer television chip turned out to be a radio receiver. And a hobby that had existed for decades for its own sake turned out to be a distributed sensor network with global coverage wherever people live.

The result is that the surveillance is now performed by people with no institutional interests, no classification system, no diplomatic considerations, and a strong cultural preference for publishing everything they find. That is a fundamentally different adversary from a government, and the operators have not found an answer to it beyond flying where nobody lives. That is the honest summary of where the whole investigation stands on this question.

Which is, in fact, what they do. The corridor this investigation follows runs through the emptiest terrain on the continent, and the emptiness that made it attractive for logistics turns out to also make it attractive for avoiding receivers. The desert that had no water also has no hobbyists, which is a sentence that should not be a strategic observation and is.

A Gulfstream was tracked around the world by men at the ends of runways with binoculars, and the agency operating it had assumed, reasonably, that nobody would be interested enough to write it down. That assumption was the single most expensive error in the history of covert aviation, and it has not been available to anybody since.

The United States bought the Afghan security forces 96,000 ground vehicles, more than 427,000 weapons, 17,400 night-vision devices and at least 162 aircraft, at a cost of around $18.6 billion between 2005 and 2021.

When the withdrawal completed on 30 August 2021, roughly $7.12 billion of it was still in the country. More than 40,000 vehicles, including 12,000 Humvees. Over 300,000 weapons. At least 78 aircraft, valued at $923.3 million, left at Kabul airport. Nearly all the night-vision, surveillance, communications and biometric equipment.

Departing American forces conducted ad-hoc demilitarisation, rendering roughly 70 mine-resistant vehicles and 80 aircraft inoperable. The Pentagon subsequently told investigators there was no realistic way to retrieve what remained, since the United States does not recognise the government now holding it.

The drawdown problem is the final structural feature of this subject and it is the one that explains why the industry never contracts. A war ending does not reduce the quantity of equipment, aircraft, trained personnel and corporate capability in the world. It changes who owns them, and ownership is settled by whoever is closest when the aircraft leaves.

Every withdrawal is a liquidation, and liquidations supply the market this subject documents.

The 1991 precedent

The pattern is not new and the comparison is exact in structure and different in character, which is what makes it instructive.

In December 1991 a superpower dissolved and its military transport fleet became available along with the crews, the maintenance base and the munitions stockpiles. That event was involuntary, unplanned, chaotic and conducted by states with no administrative capacity to manage it. The resulting supply shock created the modern ghost-plane economy.

The American drawdowns from Iraq and Afghanistan were the opposite in every procedural respect. They were planned years in advance, budgeted, audited by multiple inspectors general, debated in Congress, and executed by the most capable logistics organisation in history.

They produced the same category of outcome.

That similarity is the finding. A disorderly collapse and an orderly withdrawal both end with equipment, skills and organisations in circulation that have no further use for the purpose they were created for. The difference between them is the quality of the paperwork, not the quantity of the residue. One produced an inventory nobody wrote down. The other produced an inventory somebody wrote down badly, audited, and published, which is better and does not change where the hardware ended up.

The decision tree

Understanding why anything gets left behind requires understanding the choice confronting a logistics officer, because the choice is economic rather than military.

Every item in theatre has four possible fates. Retrograde means shipping it home, which costs money proportional to weight and distance. Transfer means giving it to the host nation, which costs nothing and produces a diplomatic benefit. Disposal means destroying it or selling it for scrap locally. Abandonment means leaving it where it is.

The Department of Defense issued guidance in 2013 directing military departments to conduct cost comparisons to determine whether to retrograde or dispose of equipment, which is exactly the right instruction and reveals the underlying arithmetic.

Consider a used tactical vehicle in a landlocked country with no rail connection, where the overland route runs through a neighbour that periodically closes it, and the alternative is air freight. The shipping cost can exceed the depreciated value of the vehicle. At that point the economically rational decision is to destroy it, transfer it, or leave it, and the military value of denying it to an adversary is the only consideration pointing the other way.

Multiply by tens of thousands of items and the aggregate is not a scandal. It is the sum of a large number of individually defensible cost comparisons, made under time pressure, about objects that cost more to remove than they are worth. The same calculation governs any operator deciding whether an ageing airframe is worth recovering, and it reaches the same answer for the same reason.

The Department’s own inspector general found the documentation of those decisions wanting, noting that acquisition cost, fair market values and estimated costs were not consistently recorded, and that a lack of accountability left equipment unaccounted for. Earlier reviews had identified the same weaknesses in both Iraq and Afghanistan and recommended applying the lessons to subsequent drawdowns.

The maintenance dependency

One sentence in the Pentagon’s report to Congress explains more about this subject than the headline figure does.

Much of the equipment remaining in Afghanistan required specialised maintenance that Department contractors had previously provided to Afghan forces in the form of technical knowledge and support.

Read that in both directions, because it cuts twice.

Forwards, it is the explanation for why the Afghan Air Force stopped functioning. An air force is not a set of airframes. It is airframes plus spares plus maintenance organisations plus technical data plus the people who hold the qualifications, and the Afghan version had been built with the maintenance layer supplied by foreign contractors on contract. When the contracts ended, the aircraft remained and the capability did not.

Backwards, it is a statement about what the contractor industry actually was. The United States did not merely hire companies to run dining halls. It outsourced the sustainment layer of an allied military, which meant the ally’s capability was contingent on commercial relationships that a change of policy could terminate in a quarter. An army whose sustainment is a contract has a readiness state set by a contracting officer.

And it explains what happened to the inherited fleet. Equipment requiring specialised support degrades without it. A watchdog has since reported that the Taliban have learned to operate some of the material, including aircraft, and that a great deal of it was not destroyed. Both things are true: much of the fleet became unserviceable, and the portion that did not became the backbone of a security apparatus.

What a drawdown actually costs to execute

The withdrawal itself is a logistics operation on the scale of the deployment, and this is the part consistently underestimated.

Moving a force into a theatre happens under a schedule set by the commander. Moving it out happens under a schedule set by politics, frequently announced publicly in advance, with a fixed end date and no option to slip.

That inverts the normal relationship between time and cost. In a deployment you can spend more to go faster. In a withdrawal with an announced date, the deadline is immovable and the quantity to be moved is fixed, so the only adjustable variable is how much gets left.

Geography compounds it. Iraq had ports and a land route to Kuwait. Afghanistan had neither, and the Pakistani ground lines of communication were periodically closed for political reasons, forcing reliance on a northern route through Central Asia or on air freight, which is the most expensive option available and which is why the retrograde bill for a landlocked theatre bears no relation to the bill for a coastal one.

Which produces the demand that interests this subject. A retrograde operation at that scale requires outsized air cargo capacity considerably beyond what any air force owns, which means chartering it, which means the commercial heavy-lift market gets a very large customer for several years running.

The same aircraft type that moved weapons into the wars moved the equipment out of them, under contract, with invoices.

The contractor cliff

The commercial side of the drawdown is documented and the shape of it is a revenue problem with a specific resolution.

Contractor presence peaked at numbers that sometimes met or exceeded uniformed strength. Department-funded private security contractors alone peaked above 28,000 in Afghanistan in 2012 and above 15,000 in Iraq in 2009. By the fourth quarter of fiscal 2020 the Afghan figure was around 4,164.

The industry effects were measurable. Arms sales by the hundred largest producers fell in 2011 for the first time since the mid-1990s, with the end of the Iraq war and the Afghan drawdown cited among the causes. Seventeen of the twenty largest American defence contractors recorded revenue declines in 2013. One vehicle manufacturer went from a billion dollars in sales in 2012 to $149 million in 2014, citing sequestration and the Afghan drawdown, and idled a plant.

The large prime contractors survived comfortably, because their revenue was never principally about these wars. One assessment notes that the growth of the five largest had almost nothing to do with Afghanistan, since their money came from aircraft, ships and missile programmes irrelevant to that conflict.

The exposure sat elsewhere, with the specialist firms: the aviation operators, the logistics companies, the security providers, the maintenance contractors, the training organisations. Those businesses existed because the wars existed.

And they responded the way companies facing a demand cliff always respond. Some consolidated. Some pivoted to other government customers. Some went after the next contingency. And some of their people went into a market that was recruiting, which is the transition this subject is about and which appears in no company’s filings.

Where the people went

This is the connection that makes the drawdown a chapter in this subject rather than a procurement story.

Two decades of contingency operations trained an extremely large number of people in a narrow and unusual skill set: moving heavy freight into austere locations at short notice, operating from unimproved strips, managing cargo under hostile conditions, maintaining aircraft without depot support, and navigating the customs, permitting and payment arrangements of countries with limited administration.

That is not a transferable civilian skill set in the ordinary sense. A loadmaster who has worked unimproved strips in Helmand is overqualified for domestic freight and underqualified for an airline career track. A logistics manager who has moved convoys through a protection economy has an unusual resume.

What they are perfectly qualified for is the work this subject documents, and the market for it never declined, because the wars that generate demand for deniable logistics are not the wars that were ending.

The same thing happened after 1991 for identical reasons, with a different army and a different language. Specialists become available when the institution that trained them stops needing them, and the available pool is the single input this industry cannot manufacture. Airframes can be bought, companies can be formed for a fee, and registries will sell a flag to anybody. A type-rated crew who will land somewhere unlit cannot be ordered.

What happened to the hardware

The equipment story has three destinations and all three matter.

The first is the official one. Serviceable material that justified the shipping cost went home, entered reset programmes, was reconditioned, and in some cases was sold through foreign military sales channels to allied governments. That is lawful, documented, and uninteresting.

The second is the disposal stream. Items not worth returning were sold as scrap, demilitarised, or destroyed. The quality of that process varied, and the inspector general’s concern about documentation applies directly: an item recorded as destroyed and an item recorded as nothing are indistinguishable in a file that was never completed.

The third is abandonment, which is the Afghan case at scale and which has consequences beyond the country. A watchdog’s final review concluded that the equipment left behind now forms the backbone of the Taliban’s security apparatus, and that consequences were already manifesting in Pakistan, where weapons from the inherited stock have appeared.

That third stream is how a drawdown becomes a proliferation event. Weapons do not respect the border of the country they were abandoned in. They enter a regional market with a price, and the price falls because supply has increased, which makes them available to buyers who could not previously afford them. A regional arms market is price-sensitive the way any commodity market is, and the supply finds the conflicts with money.

The same dynamic was alleged after the collapse of Iraqi units in 2015, when media reporting questioned whether American-supplied equipment had passed to Islamic State, and the inspector general noted that the accountability weaknesses made the question hard to answer.

Why it keeps happening

The structural explanation is worth stating because it means the next drawdown will produce the same result.

Transfers to a partner force are the preferred policy outcome. They cost nothing to execute, they build a relationship, they strengthen an ally, and they avoid the shipping bill. Every incentive points toward giving equipment to the host nation.

The entire approach is sound right up until the partner force ceases to exist, at which point every item transferred under that logic becomes an item abandoned, and the accounting shifts from capability building to loss.

Nobody can know in advance which partner forces will hold. The decision to transfer is made years before the outcome is known, by officials who will not be in post when it is, under guidance that correctly prioritises partner capability over retention of depreciated hardware. The incentive structure is the one that governs any sponsor arming a client, and the failure mode is the same too.

So the policy is right on average and catastrophic in the tail, and the tail is the case that generates the headlines and the supply shock. There is no obvious fix, because the alternative, which is retaining ownership and withholding capability from partners, defeats the purpose of the assistance.

The aircraft specifically

Airframes deserve separating from the general equipment problem, because they behave differently from vehicles and weapons in three ways that matter here.

They are individually registered. Every aircraft carries a serial number and a tail number with a traceable history, which means an airframe entering the market arrives with provenance in a way a crate of rifles does not. That is the single reason the tracking apparatus around this industry functions at all.

They require continuous support. A rifle left in a warehouse for five years is a working rifle. An aircraft left on a ramp for five years is a parts source, because corrosion, seals, batteries, avionics and lubricants degrade whether or not anybody flies it. The maintenance dependency that grounded the Afghan fleet applies to every abandoned airframe everywhere.

And they are the hardest thing to demilitarise properly under time pressure. Rendering an aircraft inoperable in an afternoon generally means disabling systems rather than destroying the airframe, which produces a hull that cannot fly and can be stripped for components that can be sold.

Which is the destination most abandoned military aviation actually reaches. Not a rebel air force, which requires pilots, fuel, spares and a maintenance organisation. A parts market, feeding airframes of the same type still flying somewhere else, with components that carry no reliable record of where they came from.

The cannibalisation economy is an unglamorous ending and it is where most of this hardware goes.

The claims that do not hold up

An audit, because this subject attracts political heat that obscures the mechanism.

The United States gave the Taliban seven billion dollars of equipment misstates what happened. The equipment was transferred to the Afghan government over sixteen years and remained when that government collapsed, which is a different event from a transfer to its successor.

The equipment was all abandoned intact is contradicted by the demilitarisation of roughly 70 vehicles and 80 aircraft, and by the maintenance dependency that rendered much of the remainder unserviceable.

None of it works is equally wrong. Investigators have reported that some of the material, including aircraft, is being operated.

It was a uniquely botched withdrawal ignores that the underlying accountability weaknesses were identified by inspectors general in Iraq years earlier and recommended for correction, and that they were not corrected.

The Pentagon knows what it left is contradicted by a watchdog finding that the department has struggled for years to account accurately for equipment provided to Afghan forces.

The defence industry lost money on the drawdown is true for specialist firms and false for the primes, whose revenue was driven by programmes unrelated to these wars.

Drawdowns save money is true of operating costs and ignores the retrograde bill, the equipment written off, and the capability that has to be rebuilt if the theatre reopens.

Better planning would prevent this is partly true and understates the structural problem, which is that transfer decisions are made before anybody knows whether the recipient will survive.

What the drawdown problem is actually telling us

The finding is about conservation, and it applies to every component of the trade.

A war creates aircraft, trained crews, maintenance organisations, corporate structures, logistics relationships, airfields, and enormous quantities of equipment. When the war ends, none of that is destroyed. It is redistributed, and the redistribution is governed by cost rather than by intention.

Material too expensive to move stays where it is. People with narrow skills go where those skills are wanted. Companies built for one customer find another. Aircraft bought for a contract fly a different contract. Every element finds the next use available to it, and the next use is determined by whoever is buying.

Which is why the capacity of this industry ratchets upward over time rather than oscillating. The Soviet collapse added airframes and crews. The Western contingency wars added a contractor industry, a charter market, a pool of specialists, and a very large quantity of hardware in regions that were already corridors. Nothing came off the board.

And it explains the sequence this investigation ends on. A contractor industry was built for two wars, it was released fully capitalised, and the world it was released into still had plenty of places wanting exactly that capability from people who would not ask what the cargo was.

The equipment stayed because moving it cost more than it was worth. The people left because the contracts ended. Both of those are rational decisions by competent officials following correct guidance, and the aggregate of them is a supply shock nobody authorised and nobody can reverse.