Analysis Report

What the Truffle Sniffer Couldn’t Find

Legalist SPV III is a litigation finance firm that uses proprietary AI technology to identify investment opportunities. It found Cyberlux. What its technology couldn't find — and what the borrower was contractually obligated to disclose — is the story the public record tells.

Type
Analysis
Reference
BR-ANALYSIS-CYBL-LEGALIST-0526-v5
Issued
May 2026 · Version 5
Subject
Legalist SPV III, LP · Government PO Financing Facility · Origination and Disclosure

Pattern analysis only. No finding of criminal or civil liability is made or implied. All claims sourced to public record. Where the record is insufficient, this document says so. The gaps in this analysis are as analytically significant as the findings.

Bottom line

Public record findings
Bottom Line Up Front
01
The Stop Work Order Was Not Public Record at Origination

HII issued a Stop Work Order on Subcontract P000043846 on December 22, 2023. The Legalist facility closed on March 27, 2024 — ninety-seven days later. The SWO did not become a matter of public record until November 2024, when Cyberlux disclosed the contract's cancellation. At the time Legalist's technology was scanning public databases and its underwriters were reviewing the facility, the single most material fact affecting the primary collateral was not in any public record Legalist could have accessed. The mechanism designed to surface that fact was Section 3(b) of the Financing Agreement, which required Cyberlux to immediately notify Legalist in writing of any dispute affecting the Government Account Debtor's obligation. No such notification appears in the public record.

Confidence: High — SWO not public until November 2024 (established from public record) · Moderate — whether disclosure was made privately between parties is unknown
Source: HII SWO December 22, 2023 · Financing Agreement § 3(b) (ECF 89-1, 175-3) · Cyberlux public disclosure November 2024
02
The Prior Consent Obligation Rested on Cyberlux — and Wasn't Followed

Section 27 of HII Subcontract P000043846 required Cyberlux to obtain prior written consent from both HII and FEDSIM before any assignment of the subcontract's receivables. That obligation rested on Cyberlux. Had Cyberlux followed it — approaching HII before engaging Legalist — HII would have known the context, the SWO status, and the question of the assignment's validity would have been answered before any facility was executed. The sequence that actually occurred reversed the required procedure: Legalist executed the facility and then notified HII afterward, using the attorney-in-fact authority Cyberlux had granted in the Instrument of Assignment.

Confidence: High — on the documented sequence and Section 27's plain language
Source: Subcontract P000043846 § 27 · Instrument of Assignment, Exhibit C ¶ 4 (ECF 175-3) · Legalist notification to HII, April 5, 2024
03
Schmidt Warranted Collectibility on a Contract Under Active Stop Work

Section 3(a) of the Financing Agreement warranted the receivables were genuine, bona fide, and collectible without right of cancellation. Section 3(b) required immediate disclosure of any dispute. Section 19 made those warranties conclusively presumed relied upon by Legalist regardless of any investigation. Schmidt signed these warranties on March 27, 2024. The subcontract had been under Stop Work Order for ninety-seven days. It was terminated for convenience forty-seven days later. What Schmidt knew about the contract's prospects at signing, and whether he believed the SWO would be lifted, is not established in any public record available to this analysis. What the public record establishes is what he signed and when.

Confidence: High — on the documented certifications and timeline · Cannot assess — on Schmidt's knowledge or intent at signing
Source: Financing Agreement §§ 3(a), 3(b), 19 · Personal Guaranty signed by Schmidt (ECF 89-1) · Termination May 13, 2024

The company and the find

Model · public record · information asymmetry
Section 01

Legalist — The Company and the Model

Legalist, Inc.
Institutional Alternative Asset Management · Founded 2016 · San Francisco, CA · Y Combinator S16
Co-founded by Eva Shang and Christian Haigh. Shang dropped out of Harvard at twenty with a $100,000 Thiel Foundation grant and built a litigation finance firm around the premise that machine learning could identify winning lawsuits faster and more accurately than traditional relationship-based sourcing. She subsequently passed the California bar through a four-year apprenticeship reading the law — an unusual path that reflects the same unconventional thinking that built the firm. Legalist now manages $1.5 billion across litigation finance, bankruptcy DIP lending, and government receivables.
$1.5B
AUM (2025)
500+
Investments made
$500M
Govt receivables fund

The technology that powers Legalist's origination is called the Truffle Sniffer — a proprietary algorithm that crawls government databases including PACER, state court dockets, and more than two hundred databases representing government contractors, looking for opportunities that match Legalist's investment criteria. Shang has been direct about what the technology does and doesn't do: "The truffle sniffer only originates for us. It doesn't actually pick the winners." Human underwriters — attorneys on Legalist's staff — review every opportunity the algorithm surfaces and make the actual investment decision.

The government receivables strategy, launched in 2022, applied the core origination model to a different asset class. Shang described the logic publicly: government receivables are "comparable to fixed income or treasury bonds, but with vastly higher yield," with disbursements outstanding on average around ninety days. The government pays its contractors. Lend against that payment obligation, collect when it arrives. The model is sound as far as it goes. It assumes the receivable is what it appears to be.

The Truffle Sniffer's government receivables capability crawls contractor databases and public procurement records. It identifies contractors with government purchase orders outstanding. It surfaces opportunities. What it cannot do is identify a material condition that isn't in any public record. That is the specific limitation this analysis examines.

Section 02

The Find — How Cyberlux Came Into View

From Legalist's perspective, the Cyberlux opportunity looked like exactly what their government receivables model was built for. A government subcontract — HII Subcontract P000043846, issued under Prime Task Order 47QFCA22F0039 supporting the Department of the Navy and the General Services Administration through FEDSIM — valued at $78,857,414. A subcontractor with a purchase order outstanding against a prime contractor with a federal obligation to pay. The kind of receivable Shang had described as comparable to a treasury bond with higher yield.

The Truffle Sniffer would have found what the public databases contained: a government subcontract, a contractor, a receivable. What it could not have found — because it was not in any public database at the time — was the fact that HII had issued a Stop Work Order on December 22, 2023, suspending all performance under the subcontract. That SWO did not become a matter of public record until November 2024, when Cyberlux disclosed that the contract had been cancelled. At the time the Truffle Sniffer was scanning databases and Legalist's underwriters were reviewing the facility, the SWO was a private fact known to HII, to the government contracting officer, and to Cyberlux. It was not known to Legalist.

The Financing Agreement's structure assumed exactly this information asymmetry would exist. Section 1 required Cyberlux to provide Legalist with material evidence of any contract with the Government Account Debtor. Section 3(b) required Cyberlux to immediately notify Legalist in writing if notified of any dispute or right of cancellation affecting the Government Account Debtor's obligation. These provisions were the mechanism through which private material facts — the kind the Truffle Sniffer couldn't find in public databases — were supposed to reach Legalist before funding decisions were made. They were, in that sense, the due diligence safety net.

Information picture at origination

What was public · what was not
Section 03

The Information Picture at Origination

To understand what Legalist knew and didn't know at closing on March 27, 2024, it helps to map what was in each category.

What Was in the Public Record

The existence of HII Subcontract P000043846. The subcontract's value — $78,857,414. The prime task order under which it was issued. HII's identity as the prime contractor. Cyberlux's identity as the subcontractor. The contract's stated purpose: 2,000 K8 FlightEye drone systems for delivery under a Foreign Military Financing programme. These facts were findable through public procurement databases.

What Was Not in the Public Record

The Stop Work Order issued December 22, 2023. The fact that all performance on the subcontract had been suspended. The fact that the contract was trending toward termination. The fact that ninety-seven days had elapsed since any work had been performed under the agreement Legalist was about to treat as primary collateral. None of this was in any public database. Legalist's technology could not have surfaced it. Legalist's underwriters, reviewing publicly available information, could not have found it independently.

What Was in the Contract Documents

Section 27 of the HII subcontract — the prior written consent requirement for any assignment — was in the subcontract document itself. Legalist's Financing Agreement required Cyberlux to provide material evidence of any contract with the Government Account Debtor. If Legalist received the subcontract, a human reader would have encountered Section 27. That provision required Cyberlux to obtain HII's written consent — and FEDSIM's if required — before executing any assignment. Whether Legalist's underwriters identified Section 27 and acted on it before closing is not established in the public record.

The Information Asymmetry at Closing — March 27, 2024
Legalist knew: A government subcontract valued at $78.8M, a prime contractor with a federal payment obligation, a borrower providing warranties of collectibility
Legalist did not know: The subcontract had been under Stop Work Order for 97 days
Could Legalist have found it independently? No. The SWO was not public record until November 2024.
The mechanism designed to surface it: Section 3(b) — Cyberlux's obligation to immediately notify Legalist of any dispute
What the public record shows of that notification: Nothing

What Schmidt signed and what Legalist funded

Certifications · advances · post-termination draws
Section 04

What Schmidt Signed

The Financing Agreement contains a certification structure that Schmidt signed at closing and, under Section 19, reaffirmed with every subsequent advance. These certifications are the documentary record of what Cyberlux represented to Legalist about the quality of the collateral it was providing.

Section 3(a) — The Core Warranty

Section 3(a) warranted that the Eligible Purchase Orders were genuine, bona fide, and collectable and without right of offset, counterclaim, or right of return or cancellation. Schmidt signed this warranty on March 27, 2024. The subcontract had been under Stop Work Order for ninety-seven days. Whether a receivable on a contract that had been suspended for ninety-seven days — with no resumption date and no cure notice response — is a receivable "without right of cancellation" is a question the record raises. The contract was terminated forty-seven days later.

Section 3(b) — The Disclosure Obligation

Section 3(b) required Cyberlux to immediately notify Lender in writing if notified of any dispute or right of cancellation against the Government Account Debtor's obligation. HII's Stop Work Order, issued December 22, 2023, was exactly this kind of notice — a formal communication from the Government Account Debtor's representative suspending performance. The obligation to immediately notify Legalist was triggered on December 22, 2023. The facility closed ninety-seven days later. No disclosure of the SWO appears in any public record reviewed for this analysis.

Section 19 — Reaffirmation With Each Advance

Section 19 provides: "Each warranty and representation contained in this agreement shall be deemed reaffirmed with each Advance Request submission and each advance of funds and shall be conclusively presumed to have been relied on by Lender regardless of any investigation made, or information possessed, by Lender."

Two things follow from this provision. Every disbursement Cyberlux requested after closing was a fresh certification that the receivables remained genuine, bona fide, and collectible — that no dispute existed and no right of cancellation had arisen. The provision also establishes, as a matter of contract, that Legalist relied on those certifications regardless of what its own investigation may have found. Section 19 is, in this respect, both the record of reliance and the acknowledgment that the borrower's representations were the foundation of the lending relationship.

The Personal Guaranty

Schmidt executed a personal Guaranty of the Financing Agreement, pledging his personal assets to secure Cyberlux's obligations. The Guaranty acknowledged that future advances were anticipated and agreed the Guaranty would remain in force with respect to all obligations regardless of subsequent amendments. Schmidt signed as guarantor in his personal capacity and as signatory for both Cyberlux Corporation and Datron World Communications, Inc.

The Certification Record
§ 3(a) at closing: Receivables genuine, bona fide, collectible without right of cancellation — contract under SWO 97 days
§ 3(b) from December 22, 2023: Immediate written notification of SWO required — no disclosure in public record
§ 19 with each advance: All warranties reaffirmed as true and correct — conclusively presumed relied upon by Legalist
Personal Guaranty: Schmidt personally guaranteed all obligations; acknowledged future advances
What the public record cannot establish: What Schmidt knew or believed about the contract's prospects at signing
Section 05

The Draws — What the Disbursement Record Shows

Legalist's motion for summary judgment documents the full capital deployment: from April through October 2024, Cyberlux requested and Legalist advanced $6,950,000 pursuant to the Financing Agreement. The individual draw requests — filed as Exhibit 5 to the MSJ — are signed by Schmidt on behalf of Cyberlux Corporation and Datron World Communications, Inc. Each carries the Exhibit B certification language: "no other event has occurred or circumstance exists that would permit it or Lender to terminate the Agreement... and all representations and warranties by it in the Agreement are true and correct as of the date hereof."

The facility structure evolved across three agreements. The initial Government Purchase Order Financing Agreement executed March 27, 2024 established a $3,000,000 credit limit. On July 14, 2024 — sixty-two days after the contract was terminated and fifty-eight days after Cyberlux was informed under NDA — the parties executed an Amended and Restated agreement that raised the credit limit. On April 29, 2025, the parties executed a Second Amended and Restated agreement incorporating a forbearance provision, acknowledging existing defaults, and temporarily increasing the aggregate credit limit to $12,300,000.

The Draw Timeline Against Key Dates
Dec 22, 2023
Stop Work Order issued. All subcontract performance ceases. Section 3(b) disclosure obligation triggered. Not public record.
Mar 27, 2024
Facility opens — $3,000,000 credit limit. Schmidt signs Section 3(a) warranty of collectibility. SWO outstanding 97 days.
Mar 29, 2024
Draw 1: $1,800,000 — Cyberlux / TowneBank. SWO period — pre-termination.
Mar 29, 2024
Draw 2: $500,000 — Cyberlux / PNC Bank. SWO period — pre-termination.
Apr 26, 2024
Draw 3: $500,000 — Datron World / PNC Bank. SWO period — pre-termination.
May 13, 2024
Contract terminated for convenience.
May 17, 2024
Cyberlux informed of termination by HII under strict NDA requirements. Section 3(b) disclosure obligation to Legalist triggered.
Jun 14, 2024
Draw 4: $142,000 — Cyberlux / Huntington Bank. 28 days post-NDA notification. Schmidt certifies: all warranties true and correct, no termination event has occurred.
Jul 1, 2024
Draw 5: $53,000 — Cyberlux / Huntington Bank. 45 days post-NDA notification. Same certification.
Jul 11, 2024
Draw 6: $2,500,000 — Cyberlux / Huntington Bank. 55 days post-NDA notification. Largest single draw. Same certification.
Jul 14, 2024
First amendment — credit limit raised. 58 days after Cyberlux informed of termination under NDA. Whether Legalist knew of the termination at this date is not established in the public record.
Jul 29, 2024
Draw 7: $650,000 — Cyberlux / Huntington Bank. 73 days post-NDA notification. Same certification.
Aug 14, 2024
Draw 8: $535,000 — Cyberlux / Huntington Bank. 89 days post-NDA notification. Same certification.
Aug 27, 2024
Draw 9: $150,000 — Cyberlux / Huntington Bank. 102 days post-NDA notification. Same certification.
Nov 4, 2024
Cyberlux defaults on the Legalist facility.
Nov 2024
Q3 2024 OTC filing — first public disclosure of contract termination. Cyberlux cites NDA as the reason for delayed disclosure. Approximately five months elapsed between NDA notification and first public disclosure.
Feb 26, 2025
Mod 4 termination settlement executed.
Apr 29, 2025
Forbearance agreement — Second Amended and Restated. Acknowledges existing defaults (November 4, 2024 and March 31, 2025). Temporary credit limit increase to $12,300,000. Any draw under the increase requires Legalist's prior written approval and HII Creditor Certification Form.
Jun 2025
Protective advance: $3,083,639.75 made by Legalist on behalf of Cyberlux — authorized under the forbearance structure, connected to the Atlantic Wave Texas receivership proceedings.
What the Post-Termination Draws Establish

Six draws totalling approximately $4,030,000 were made between June 14 and August 27, 2024. Each was made after Cyberlux received NDA-covered notification of the contract's termination on May 17. Each Request for Disbursement carried Schmidt's signature and the certification that no termination event had occurred and all warranties were true and correct as of the date of signing. The primary collateral contract had been terminated before any of these draws were requested.

Whether the HII NDA specifically covered Cyberlux's disclosure obligations to Legalist under Section 3(b) — a separate contractual obligation to a separate party — is a legal question the public record does not resolve. What the public record establishes is the sequence: six draws, six certifications, all post-termination, all before the first public disclosure of the termination in the Q3 2024 filing approximately five months later.

The July 14 amendment — raising the credit limit while post-termination draws were already underway — is the period's analytical question mark. Legalist increased its exposure on July 14, 2024. The public record does not establish what Legalist knew about the contract's status on that date. If the termination had not been disclosed to Legalist, the amendment represents the same information asymmetry problem operating at the credit decision level rather than the draw level.

Post-Termination Draw Summary
Draws post-May 17, 2024: Six draws totalling approximately $4,030,000
Each draw certified: No termination event has occurred · All warranties true and correct as of date hereof
Primary collateral status at each draw: Contract terminated for convenience May 13, 2024
First public disclosure of termination: Q3 2024 OTC filing, November 2024 — citing NDA
Gap between NDA notification and public disclosure: Approximately five months
What the record cannot establish: Whether the NDA covered Cyberlux's Section 3(b) disclosure obligation to Legalist · What Legalist knew at the July 14 amendment date · Schmidt's intent or belief at each draw date

The question the record raises

Key dates · contract references · source note
Section 08

The Question the Record Raises

Legalist is a company whose government receivables model is built on a straightforward premise: the government pays its contractors. Lend against that payment obligation, at a margin that reflects the credit quality of the government as payor. The Truffle Sniffer finds the opportunities. Human underwriters evaluate the receivables. The government's payment obligation is the fundamental credit support.

The model works when the receivable is what it appears to be. It depends, in part, on the borrower's disclosure obligations functioning as designed — surfacing material conditions that public databases don't contain. In the Cyberlux facility, the most material condition affecting the primary collateral was not in any public database. The mechanism designed to surface it was Section 3(b)'s immediate disclosure obligation. The public record contains no evidence that obligation was fulfilled.

Section 19's conclusive presumption of reliance tells you what Legalist's position was: they relied on the certifications Schmidt provided. The forty-seven days between closing and termination tells you what those certifications were worth. The $13,608,702.73 Legalist now claims against an interpleader fund — congressionally appropriated Foreign Military Financing funds designated for Ukraine's defense — is the financial consequence of a facility originated against a frozen contract whose status the borrower had a contractual obligation to disclose.

The question the public record raises is not whether Legalist's model is sound. It is. The question is what a company running that model would have done differently if the information its borrower was contractually obligated to provide had actually been provided. The answer to that question is not in the public record. But the public record is clear about what the Truffle Sniffer couldn't find, what Section 3(b) was supposed to surface, and what Schmidt signed when he warranted that the collateral was collectible without right of cancellation.

Legalist is now before the court asking for $13.6 million from funds appropriated by Congress for a specific national security purpose. Whether it gets them depends on how the court resolves the legal questions — ACA applicability, the Section 27 sequencing, the warranty record. Those are legal determinations beyond the scope of this analysis. What is within scope is the question this document has been building toward since the first page: what would Legalist have known if the disclosure obligations in its own agreement had been followed?

The public record doesn't answer that question. It only raises it.


Key Dates
Aug 29, 2023
HII Subcontract P000043846 executed — $78,857,414 for 2,000 K8 systems. This is the receivable that becomes Legalist's primary collateral.
Dec 22, 2023
HII Stop Work Order issued. All performance ceases. Section 3(b) disclosure obligation triggered. Not public record at this date.
Mar 27, 2024
Legalist facility executed. Schmidt signs § 3(a) warranty of collectibility, § 3(b) disclosure obligation, and personal Guaranty. SWO has been outstanding for 97 days. Not in any public database.
Apr 1, 2024
Legalist files UCC-1 financing statements in North Carolina and California.
Apr 5, 2024
Legalist notifies HII of assignment as Cyberlux's attorney-in-fact. HII writes to Cyberlux for confirmation. Cyberlux confirms. HII issues Virginia § 8.9A-406 acknowledgment.
May 13, 2024
Contracting officer terminates subcontract for convenience. 47 days after the facility closed. The primary collateral ceases to exist as an active government contract.
Nov 2024
SWO becomes public record when Cyberlux discloses the contract's cancellation. First public acknowledgment of the condition that existed at Legalist's closing.
Apr 15, 2026
Legalist files motion for summary judgment. Total claimed: $13,608,702.73 against $23,736,937.56 in the interpleader fund — FMF appropriations designated for Ukraine's defense.
Regulatory and Contractual Reference
ProvisionDescriptionRole in This Analysis
Financing Agreement § 3(a)Warranty of genuine, bona fide, collectible receivables without right of cancellationSigned at closing — 97 days post-SWO
Financing Agreement § 3(b)Immediate written notification of any dispute or right of cancellationThe mechanism designed to surface the SWO — no public record of disclosure
Financing Agreement § 19Warranties reaffirmed with each advance; conclusively presumed relied uponEstablishes Legalist's reliance as a matter of contract
Financing Agreement § 9.1Eligible purchase orders defined as those not disputed by Government Account DebtorA contract under SWO is arguable not an eligible purchase order
Instrument of Assignment, Exhibit C ¶ 4Cyberlux appoints Legalist attorney-in-fact to notify contract counterpartiesMechanism by which HII was notified after execution
Subcontract P000043846 § 27Prior written consent of HII and FEDSIM required before any assignmentObligation rested on Cyberlux — not followed before facility executed
FAR 52.242-15Stop Work Order — fixed-price contractsGoverns the SWO issued December 22, 2023
22 U.S.C. § 2751Foreign Military Financing ActStatutory basis for the congressional appropriation underlying the interpleader fund

All factual claims are sourced to publicly available court filings in HII Mission Technologies Corp. v. Cyberlux Corp. et al. (3:25-cv-00483-JAG, E.D. Va.), the Legalist Financing Agreement and related exhibits (ECF 89-1, 175-3), Legalist's motion for summary judgment (ECF 175, April 15, 2026), HII's filing (ECF 165), the HII Subcontract and Modification No. 4, published interviews and press materials regarding Legalist's Truffle Sniffer technology, and the federal regulatory framework. No private communications or non-public documents are relied upon. No finding of criminal or civil liability is made or implied. The gaps identified in Section 6 are genuine and this analysis does not paper over them. What Schmidt knew at signing and what passed privately between the parties are not established in any public record available to this analysis and are not asserted here. Confidence levels reflect the evidentiary weight of the available public record only.

BLACK|RUDDER  ·  blackrudder.com  ·  Discrete navigation.