DOJ Office of Inspector General

The federal bureaucracy has a phrase for the moment when everyone agrees the paperwork should change: “recommendation concurred with.” It is not the same phrase as “change completed,” though the two can look cozy in a status table. In an audit released October 28, 2026, the Justice Department’s Office of Inspector General reviewed confidential-informant policies at ATF, DEA, the FBI and the U.S. Marshals Service. The report’s central lesson is a small but sturdy one: agreement is a promise; evidence is the receipt.

Policies reviewed, not every operation

The OIG found the four components were in substantial compliance with applicable guidance. That is important context, not a footnote to be hurried past. The audit reviewed policy content and related controls; it did not establish that every field operation followed or violated policy, and it did not make a broad finding of operational misconduct. The document is careful about its boundaries. The filing cabinet cleared its throat, then stayed inside the lines.

Within that generally compliant picture, the auditors identified areas needing attention: policies should account for emerging risks, internal controls were not consistent across components, and guidance needed to address electronic payments. The report also highlighted the monitoring of informants authorized to engage in otherwise illegal activity. Those are policy and oversight concerns—not a finding that agents or informants broke the rules. The distinction matters when the subject is confidential sources and the public record can easily grow more dramatic than the evidence.

Concurrence is not closure

The OIG made five recommendations, and DOJ and all four components concurred with them. The recommendations address the report’s identified policy and control gaps, including emerging risks, inconsistent controls, electronic payments and oversight of informants authorized to engage in otherwise illegal activity. The agencies’ agreement is not evidence that the reforms are already finished.

That is where the administrative fog tends to gather. The OIG describes the report as resolved, but that status is not the same as closing the recommendations. The OIG says it will close them only after receiving evidence that the specified changes were made. “We agree” is a useful first entry in the ledger. It is not the final stamped page.

For the public, this is the unglamorous part of accountability that actually counts. A policy can be sensible on paper, and an agency can accept an auditor’s advice, but oversight still needs proof of implementation. The audit does not claim the informant system broadly failed. It identifies places where rules and controls need strengthening, then leaves the recommendations open to the evidence-and-closure test. That distinction keeps a promise from being mistaken for a completed repair. In government, the document coughed. The next question is whether anyone brings the receipt.