Emergency management needs wording from an X post that residents say was deleted after a storm warning. What counts as evidence in the OSINT report?

When emergency management needs wording from an X post residents say was deleted after a storm warning, the OSINT report requires an archived or captured copy of the public post with a retrieval date and source URL. Memory, retellings, and rumor agreement do not replace a dated artifact in a civic evidence file that may later support after-action review or public messaging. A staff member’s recollection dated from memory fails because unaided human memory is unreliable for exact wording and cannot be independently audited by auditors or counsel. Asking the original author to retype the post fails because a reconstruction is a new utterance, not the original public artifact, and it may be incomplete, softened, or altered under attention. Treating a rumor thread as proof because several residents agree on the gist fails by confusing consensus narrative with a sourced capture—agreement on a gist is still secondary speech about a missing primary. Exam caveat: if no archive or capture exists, the report must state that the wording is unverified rather than inventing certainty for the emergency operations center. Operational check: search public archives and prior team captures first; if found, cite archive URL and capture or retrieval date; if not found, document the gap explicitly and avoid asserting exact deleted text in the storm after-action file.