Build1 distinct publisher3 min readPublished
The client bundle enumerates which descriptions get blocked and which get a First Amendment warning, but the thresholds and instructions doing the deciding stay on Flock's servers, which is the part a city is actually buying.
The Engineer · Build desk

product
Flock's cameras now watch a drawn zone for anyone matching a typed description1 distinct publisher
build
Flock's OS Investigate starts the search before there is a suspect1 distinct publisher
product
Flock cuts plate-read retention to seven days, and admits defaults beat policy7 distinct publishers
product
Flock built the thing it said it could not do, then left the prompts on a public server4 distinct publishers
Compiled by The EngineerSomething wrong?How this is made
Type a description into the person-search box and Flock converts both the phrase and the camera images into numerical representations, then ranks footage by how closely each image fits the text [5]. That pipeline returns an ordering rather than a match, and the officer decides where the list stops being useful. Smart Sort then lets the officer approve or reject returned images, and those votes reorder the results so footage resembling the approved images climbs [7]. That is relevance feedback pointed at people, and it converges on whatever the officer has already confirmed.
Vehicle search shows the underlying engineering difference. Vehicle search offers menus for color, body type, make, model and features, while person search takes free text [6]. A menu is a finite vocabulary. A city could enumerate it, test every combination, and write the results into an acceptance plan. Free text has no vocabulary, so screening has to move into a classifier, and the classifier's filters, thresholds and model instructions sit on Flock's servers, outside the interface departments get [8].
Treat the reconstruction the way you would treat someone else's benchmark table. It describes the client Flock ships, assembled from pre-login files that expose available searches, network calls, expected responses, controls and warnings [3]. It does not include department settings, or the models and instructions running server-side [4]. For it to describe your deployment, your department's configuration and the live thresholds would both have to match what the client implies. Nobody outside the company can check that: experts cited by WIRED said the screening model's error rate is not measurable from outside, nor is any skew toward permitting or rejecting particular descriptions [14]. The fullest public account of the control layer is a JavaScript bundle handed to anyone who loads the login page.
The telemetry runs the other way. A flagged search sends Flock the officer's wording, the category and confidence score the model assigned, and whether the officer continued, dismissed or disputed the warning [12]. Flock's statement to WIRED left the retention period, who internally can read the record, and whether it trains the moderation system all unaddressed [13][19]. The department that generates the log has no stated account of its lifecycle.
Meanwhile the interface hands the officer the downside. Flock warns that text-to-image results may be inaccurate or incomplete and should not be the sole basis for action, which places the inaccuracy risk on the person running the search [9], and leaves administrators to review flagged activity when abnormal use is detected [10]. Flock's August 13 safeguards announcement addresses some access and auditing problems, according to RuntimeWire [18]. The watchlist sits beside OS Investigate, which WIRED found carries 69 prepared prompts and code for 45 tools spanning six data categories including arrest records and commercial identity databases [15][20], and which Flock says is still in development [16].
The contract clause that would matter is one returning the blocked-and-warned query log to the buying city, with a right to submit test descriptions and see the disposition. Neither is in the client, because neither is in the client's half of the system.
Ranked by verification strength, evidence, and original report placement.
According to WIRED's September 3 interface reconstruction, Flock Safety lets police draw a boundary on a city map and create an AI watchlist for anyone matching a written description, and cameras inside the selected area can then run a continuous automated search for a potential match.
WIRED built its mockup from files Flock sends to a user's browser before login; those files show available searches, network calls, expected responses, controls and warnings.
The pre-login files do not include camera feeds, search results, department settings, or the models and instructions running on Flock's servers.
A person search accepts a written description such as "person wearing scrubs" plus an area and a period of time; Flock converts the text and the camera images into numerical representations, then ranks footage according to how closely the images fit the description.
Flock's vehicle search provides menus for color, body type, make, model and features, while the person-search interface relies on free text.
Distinct publishers with included, body-backed reporting in this cluster.
runtimewire.com
1 article · September 3, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
A real artifact, read at one remove
The chain is short and visible: Flock ships JavaScript to any browser before login, WIRED rebuilt the officer screen from it, RuntimeWire summarizes that rebuild. A shipped bundle is stronger than a source's recollection — it cannot be walked back — but it documents what the product is configured to offer, not what any department did with it, and the files stop exactly where judgment begins. WIRED's own report is not in front of us to check line by line, and the counts of prompts and tools rest entirely on that reading.
Cameras everywhere, this feature unmeasured
Flock's footprint is not in doubt — its own count of more than 12,000 communities, plus dozens of Alpharetta cameras reachable through relationships spanning 2,000-odd organizations. What no figure here covers is the thing being reconstructed: not one department is named as having run a description-based watchlist. OS Investigate is explicitly a small pilot, and the closest thing to a usage number is the disclosure that under two-thirds of customers had switched auditing on.
Certainty about rules nobody can see enforced
The reporting is disciplined about its limits, and yet the moderation taxonomy comes through crisply — this category blocks, that one only warns — when the confidence scores and instructions producing those outcomes were never visible. A capability read off client code reads as a capability in use; no watchlist, no ranked result set, no flagged query from a real department appears anywhere. Flock's counterweight is the honest one, that OS Investigate may change before release, and RuntimeWire carries it.
Everyone here is answering on their own schedule
Flock moved first: the safeguards package landed three weeks before this reconstruction, and its statement then declined the three questions a critic would ask about flag telemetry — how long it is kept, who sees it, whether it trains the filter. Voluntary constraints announced ahead of scrutiny buy something. On the other side, the reconstruction is investigative product for WIRED, and RuntimeWire builds explicitly on two of its own prior Flock stories, which rewards a frame of escalating capability. The Washington Post misuse tally arrives secondhand into that frame.
Solid on the screen, thin on the street
Treat the interface description as reliable — it comes from code Flock chose to serve publicly, and the reporting is careful to list what that code cannot show. Treat everything about consequence as open: whether the filter works, how often it errs, who has been searched, whether any city weighed these controls before signing. One publisher, one underlying investigation, and a vendor that has not been pressed on the record.