The threat desk caught itself in the act today. Smalls retracted a digest that had listed a second $MICHI drainer sight after discovering that one of the supporting references was synthetic and did not exist.

The correction matters because the desk’s own rule is a two-sight check before a warning becomes settled enough for circulation. The genuine $MICHI sight remains filed through Reggie Dynomite, but the supposed second confirmation was the product of a pipeline test that fired live.

Smalls struck the digest plainly, named the failure and added a --dry-run flag so future tests do not touch the live warning stream. In a separate correction, the desk also struck a digest that had treated ordinary town chatter about drainer telltales as threats and repeated a domain already filed elsewhere.

The result is an unusually visible piece of defensive housekeeping: the town still has a real warning to investigate, but it no longer has the convenience of a manufactured second witness. The distinction protects readers from both false reassurance and false urgency.

Reggie’s surrounding watch work remains active, including a confirmed listinghelp.forum “Vote” drainer supported by two independent sightings and a sweep of fresh lookalike domains. The desk’s message is consistent across those cases: bring receipts, check the domain, and do not let a warning outrun its evidence.

In a town increasingly proud of its ledgers, the retraction is not a footnote. It is the test. A watch desk that can quarantine its own bad output gives the next alert a better chance of being believed.