01 · Two timelines

The document evolved in six distinct phases.

Below: the DOCX construction sequence from RSID forensics. Then: the full tri-source production and distribution timeline from testimony, forensics, and texts.

I. How the DOCX was built

The RSID (Revision Save ID) record reveals Forensic observation that the document was assembled in six cumulative phases. Click each phase to see what content was added.

Phase 1Foundation
Phase 2Operations
Phase 3Tactics
Phase 4Slogans
Phase 5Demands
Phase 6Formatting
~4 paragraphs~39~52~60~69125 total

Phase 1 — Foundation

RSID sessions: 00A71B6D, 00380012, 00C730B7+17 paragraphs

The first content placed into the document: the title page (“Storm the Winter Palace (INTERNAL ONLY)”), the building target list (Russell, Dirksen, Hart, Cannon, Longworth), and the “Overall Goal” framing. The title “1776 Returns” was added as a single-paragraph insertion in this same foundational session.

Fill the buildings with patriots and communicate our demands.

Phase 2 — Operational Core

RSID sessions: 00F01E99, 000E38DB, 00FC348D+22 paragraphs

Manpower requirements, team structure (Lead/Covert Sleeper, Second, Hypeman, Recruiter, Patriots), the “Covert Sleeper” role definition, Covid-masking instructions, and the “Part 2: Execution” section. The intelligence tradecraft terminology (“Covert Sleeper”) appears in this phase.

Lead: Covert Sleeper, sets up fake appointment – is expected to spend the day as our insider and let people inside the building.

Phase 3 — Tactical Detail

RSID sessions: 0056613C, 0062650D, 007B2220+21 paragraphs

The distraction/escalation section (“Only to be done if they won’t allow patriots into buildings we OWN!!”), fire alarm tactics, ideal distraction locations (Walmart, Residence Inn, Marriott, hotels, museums), distribution plan, road closures, and the document’s open editorial questions.

WHATS THE ENDING POINT FOR THIS? · WHO DOES GOV RESPOND TO? · Does everyone just leave at a certain time?

Phase 4 — Slogans & Rhetoric

RSID sessions: 00CC5989, 007B289E, 00D37D8E+9 paragraphs

Two sets of chants/slogans added in separate sessions: “Free and fair elections,” “No Trump, No America,” “Liberty or Death,” and a standalone “We the People” insertion. These were layered onto existing paragraphs—slogans were added after the tactical content was already in place.

Liberty or Death · We the People · Target Specific Senators Offices

Phase 5 — Demands Page

RSID sessions: 0040074C, 00B16F18, 00D50D3C, 00DE0F65, 002A7E85+11 paragraphs

The “Patriot Plan” demands page: paper ballots only, no electronic voting, no mail-in ballots, no absentee ballots. “We demand that on January 20th, a new election is conducted – not a recount.” “Monitored by National Guard.” “We the people are watching you.”

Our request is simple, constitutional, and non-negotiable — we demand a free and fair election.

Phase 6 — Final Assembly & Formatting

RSID sessions: 007864A8, 008E6B97, 001F6E3E, 00D83918, 00A777F7, 004E629D, 00EF6D40+56 paragraphs

The heaviest phase: section headers applied across all pages (formatting pass), Patriot Plan logistics page with detailed timeline (1:00 PM meet, 1:22 PM assessment, 1:30 PM storm), building role-assignment templates for every target, a table of contents, and the “Man Power Assignments – fill this out” template.

1:30 PM – Wait for signal from lead, storm building

II. Production & distribution timeline

Events are color-coded by source. Each row includes the source type: Fact (documented record), Forensic (measured observation), or Interpretation (reconstruction).

DateEventSourceType
Aug–Sep 2020 Armes says he created a short notes-style Google document after seeing the TIP document, with maps and scenario ideas. Later describes it as 3–5 pages. Armes testimony Fact
Nov 8, 2020 Flores texts Tarrio: “The revolution is so romantic.” Tarrio replies: “It starts soon.” Text messages Fact
Late 2020 (before Dec 30) Armes says he shared his document with Flores on Google Drive, later with a new email she created. He says he never asked her to forward it to Tarrio. Armes testimony Interpretation
Dec 27, 2020 Flores texts Tarrio: “The storming of the winter palace is how the Russian revolution occurred.” Text messages Fact
Dec 29, 2020 — 20:20 UTC DOCX metadata shows a print event occurring before the document creation date. This anomaly (print-before-create) indicates the DOCX was printed from an earlier version or was a Save As from a pre-existing file. Forensic evidence Forensic
Dec 30, 2020 — 02:48 UTC DOCX created via Save As. Grammarly SessionId=4 begins tracking the document. RSID root session 00380012 (building target list) is the foundational layer. Forensic evidence Forensic
Dec 30, 2020 — 04:59 UTC Last save recorded in DOCX metadata. Total editing time: 125 minutes across 7 saves and 24 RSID editing sessions. Forensic evidence Forensic
Dec 30, 2020 — 14:45 UTC IMG_1575.MOV — Flores records an airport selfie video (iPhone). She mentions sleeping on a plane the night before, consistent with the ∼8-hour gap between DOCX creation and transfer. Forensic evidence Fact
Dec 30, 2020 — 12:53 PM (UTC-5) Document transfer. Flores sends 1776 Thesis.docx to Tarrio via Telegram. Government exhibit 528-1. Text messages Fact
Dec 31, 2020 — 12:29–12:35 AM (UTC-5) Flores texts Tarrio: “the revolution and storming the winter capital is at stake” and “if you don’t like my plan, let me know. I will pitch elsewhere.” She calls herself the “executor and benefitor of my brilliance.” The exchange uses SMS, not Telegram. Text messages Fact
Jan 4, 2021 — 17:48 UTC Flores asks in a Telegram group: “is there a running list of senators/congressmen to target – someone has to be compiling something.” She puts her phone in airplane mode before sending. This extends the DOCX targeting framework from buildings to named individuals. Text messages Forensic observation
Jan 6, 2021 — 19:51 UTC Flores comments on the Capitol breach: “This is wild. Glad that i stayed home.” She forwards video of “Trump supporters scaling the walls” at 19:42 UTC. Text messages Fact
Feb 8, 2022 — 14:26 CST PDF creation. The rasterized PDF (signal-2026-06-20-200443.pdf) is created—thirteen months after the alleged transfer. Metadata has CreationDate = ModDate (identical timestamps, indicating a scrub). No /Producer, /Creator, /Title, or /Author fields. Forensic evidence Forensic
Jul 18, 2022 Samuel Armes gives formal transcribed interview to the House Select Committee. He describes the precursor document, denies writing the final 1776 Returns packet, and says Flores told the committee he authored it. Armes testimony Fact
2022–2023 The government produces the February 2022 rasterized PDF to Rehl’s defense in discovery. The PDF’s creation date and reconstruction nature are not disclosed. Rehl testifies he never saw the document before trial. Inference Open question

Key pattern

The timeline shows a clear sequence: Armes creates a precursor (Aug–Sep 2020) → Flores assembles the DOCX (Dec 30, 2020) → Flores sends it to Tarrio (Dec 30) → Flores claims authorship (“my plan,” Dec 31) → Flores extends targeting to congressmen (Jan 4) → Flores observes Jan 6 from home → A rasterized PDF is created (Feb 8, 2022) → The PDF is produced to defense without provenance disclosure.

Sources: Armes transcript (CTRL0000916110), DOCX metadata, Scribd doc 624986489, Signal export, PDF forensicsNext: People →