Operation Alpha

Cyberlux told its story in six chapters, each with a headline and the same underlying requirement: that anyone paying attention would see a credible defense technology company rather than a sub-penny OTC issuer with $2,297 in its account. What follows maps what the company was saying at each stage and what the private record shows was actually happening at the same moment. The amplification network ran loudest while the story was being built. It went quiet when regulatory attention arrived. It was essentially absent when the real money moved.

The chart below is the analytical core of this document. Forty-four months of @WTF_OS posting activity against the $CYBL price, with narrative phases in the background and key events marked. Read it left to right. The promotional infrastructure runs hardest during the narrative build and collapses at the regulatory hard stop. It never recovers its original character. The price line traces a different arc — reaching its peak before the promotional peak ends, and its most significant positive move during the period when the promotional network is essentially offline.

The story the chart tells without any prose at all: the loudest promotional activity and the most significant real event are in different phases, separated by the CE designation. The network was amplifying a story about a company that might get a contract. It wasn't there to celebrate when the contract actually arrived.

According to the Rosen indictment, RB Capital sold approximately 450 million CYBL shares for $11.6 million in gross proceeds between October 2021 and November 2022 — a sale window that closed nine months before the HII subcontract was signed. The promotional peak and the documented share sales both concluded before the destination the narrative pointed toward had been reached. That sequencing is documented in the public record.

The collapse at the CE designation is instantaneous on this chart. You'll see it. The partial recovery after October 2024 is real in magnitude — but the section that follows explains why magnitude is the wrong measure.

The following places the public Cyberlux story alongside the private documentary record, phase by phase. Left: what @WTF_OS was amplifying. Right: what Signal messages, bank records, court filings, and corporate formation documents actually show. These are not editorial characterizations. They are citations from the same public record the rest of this document draws on.

The relay hypothesis — that @WTF_OS functioned as an amplification node for Cyberlux's narrative rather than as an independent voice — is supported by four quantitative findings. The first concerns same-day price correlation. The second concerns lead/lag dynamics. The third and fourth concern the composition of the post corpus over time. Together they establish that the account tracked the narrative, not the underlying business fundamentals.

Two events in the $CYBL record function as controlled tests of the relay hypothesis. Each creates a condition where the relay hypothesis and the independent-investor hypothesis generate distinct, observable predictions. The data resolves the question cleanly in both cases. The 90-day windows around each event are shown below.

On August 19, 2025, the Amended Complaint in Curtin v. Watts et al. was filed in the Middle District of North Carolina. It named "William T. Farrell (X.com alias @WTF_OS) and any other market promoters or parties paid to influence the market for Cyberlux stock" in the reservation of rights clause, alongside Flying V Group and undisclosed compensated social media agents. The filing documented the share tranches, the cash compensation, and the absence of any Section 17(b) disclosure across the documented promotional period.

The @WTF_OS account made its last identifiable public post on August 22, 2025.

Three days later.

The retail investor who followed @WTF_OS between 2022 and 2025 was shown something that looked like a community — independent voices, organic enthusiasm, real-time conviction from people who'd done the research and liked what they found. What the data suggests instead is an architecture: a coordinated system for distributing the issuer's narrative to audiences who would receive it as independent signal.

The relay hypothesis — that @WTF_OS functioned as a distribution node for Cyberlux's investor-facing communications rather than as an independent voice — is supported across four distinct lines of evidence. The post classification analysis shows that approximately two-thirds of all documented activity consists of direct or derivative amplification of Cyberlux's own communications. The correlation analysis shows that posting activity tracked price on the same day and produced near-zero predictive signal at any lag — the behavioral signature of an account responding to issuer output, not forming independent views. The CE designation experiment shows that posting activity collapsed at the precise moment the issuer was formally flagged for misleading or manipulative promotion, and did not recover its original character after the designation was removed. The behavioral sequence following the August 2025 complaint filing shows a three-day gap between the account being named in a federal document and the last identifiable public post, with no denial, rebuttal, or statement of any kind.

None of these findings, individually, establishes the nature or terms of any arrangement between @WTF_OS and Cyberlux Corporation. Taken together, they suggest a relationship between the account's activity and the issuer's communications that is inconsistent with independent investor behavior and consistent with a coordinated amplification function. The data does not establish intent. It documents a pattern.

That pattern served two audiences simultaneously. Retail investors were misled about the character of the information they were receiving — what looked like independent community enthusiasm was, the data suggests, a distribution mechanism. The more analytically significant audience is the one that decided whether a $78.8 million defense contract got awarded and whether a $38.7 million advance payment was released without adequate controls. A company with an active investor following, amplified press releases, and generals on its advisory board does not look like a company with $2,297 in its account. The promotional infrastructure was manufacturing that difference, and the difference appears to have been sufficient.

@WTF_OS was not the scheme. The data suggests he was its most quantifiable instrument. The scheme was the story Cyberlux was telling. Operation Alpha wasn't just the name on the share distribution. It was the entire apparatus — the narrative, the network, the amplification, the credibility it constructed for audiences who never saw what was happening behind it.