CHIS informant record-keeping and identity-sealing protocol

The CHIS informant record-keeping and identity-sealing protocol is presented as a system for documenting an informant’s work while keeping the person’s real identity apart from the operational record. A handler records the work in a logbook, which is kept in a safe by the CHIS controller; an accompanying sealed envelope holds the informant’s real name. The distinction becomes decisive when Ewert Grens seeks the records and finds that the hidden identity behind the code name is Piet Hoffmann.

Records and custody

The arrangement divides responsibility between two roles. Erik Wilson is Hoffmann’s handler, and the handler’s task is to record the informant’s work in a logbook. The logbook is kept in a safe by the CHIS controller, Göransson. The record therefore has a defined custodian beyond the handler who creates it, and its storage is physically restricted rather than treated as an ordinary file available for casual consultation.

The record is not merely a general account of an operation. When Grens asks whether the meetings between the handler and Hoffmann are recorded in it, Göransson confirms that they are. He also states that the copy in his possession is the only one. These details establish both the logbook’s scope and the vulnerability of its custody: it can substantiate meetings between handler and informant, but the evidence is concentrated in a single copy held by the controller.

The sealed identity key

The logbook’s companion envelope provides a separate route from an informant’s operational record to the person’s real name. Each logbook comes with an envelope containing that name, sealed by the handler on the first day of the operation. Its wax seal is described as red and shiny. The procedure thus places the identifying information alongside the logbook but encloses it separately, making the identity a protected key rather than an ordinary entry in the record.

That separation matters because the logbook also contains code names for criminals recruited as informants for the Swedish police. The code names allow the file to record people in their informant role without simply presenting their actual identities on every page. The envelope preserves the link that the code name conceals. The protocol’s two parts consequently serve different functions: the logbook documents work and meetings; the sealed enclosure identifies the person to whom that record belongs.

Grens’s confrontation with the record

The procedure enters the plot when Grens follows the documentation behind Hoffmann’s secret police role. Grens knows that Wilson was Hoffmann’s handler and that Göransson, as CHIS controller, kept the logbook in a safe. He asks Göransson whether the meetings are recorded and whether this is the only copy. After Göransson confirms both points, Grens demands that the file be destroyed. The request makes the logbook’s status more than administrative: its continued existence could expose the connection between the police and an informant whose prison identity is already in circulation.

Grens then insists on the envelope. Its importance is distinct from the logbook’s evidentiary record. The file can connect a handler to meetings with a code-named informant; the envelope can establish who that informant actually is. Grens opens it and reads the name he expects: Piet Hoffmann. The name confirms that the man Grens ordered shot had worked for the city police. The identity-sealing procedure therefore turns a protected administrative link into direct confirmation of a concealed relationship.

Secrecy and exposure

The protocol’s operation is defined by a tension between controlled access and the possibility of disclosure. The logbook is stored in a safe, the real name is placed in a sealed envelope, and the controller says his copy is the only one. These measures keep the identity from appearing openly in the account of the work, but they also leave the truth dependent on a small, identifiable chain of custody: handler, controller, logbook, envelope.

That chain becomes especially consequential against the prison record surrounding Hoffmann. Before entering Aspsås, he had studied the prison’s units and personnel; on arrival he was processed and assigned to a cell. Stefan Lygas and Karol Tomasz Penderecki had obtained copies of criminal-record, intelligence, prison and court materials about him through Stefan’s lawyer. Such documents help establish the criminal standing by which prisoners assess a newcomer, while the sealed envelope preserves the separate fact of his police connection. The novel sets those different kinds of knowledge against one another: Hoffmann can be legible inside the prison through records of his supposed criminal life, while the proof of his informant identity remains locked away in the police’s own files.

When Grens reads the envelope, the seal’s function changes. It had kept the real name apart from the operational record; once opened, it gives Grens confirmation of the identity and relationship he has been pursuing. The protocol can preserve secrecy while intact, but it cannot by itself prevent exposure when an authorized custodian is pressed to reveal its contents. Its importance lies in that dual role: it conceals Hoffmann’s identity within the record system and makes the concealed truth verifiable when the envelope is opened.