Khan Sheikhoun Chemical Attack: Guest Blog Featuring Paul McKeigue’s Reassessment

In this post, Professor Paul McKeigue analyses the recent report of the UN-OPCW Joint Investigative Mechanism into the chemical incident in Khan Sheikhoun, Syria, in April 2017. In the light of its findings, he compares the likelihood of two scenarios: (1) the official US-UK hypothesis of a chemical attack by the Syrian air force using sarin; (2) the ‘false flag’ hypothesis that small quantities of sarin were used to generate a forensic trail to disguise a managed massacre of the victims.

He discusses several anomalies and puzzles in the report. A critical piece of evidence he finds is its detail on the alleged airstrike: this is revealed to be incompatible with the Pentagon’s own flight track map. Since nobody has suggested that the Pentagon’s flight track was wrong, he concludes, ‘the hypothesis of a chemical attack by the Syrian air force can be excluded as having zero likelihood.’

Clearly, this raises very serious questions indeed.

Meanwhile, a basic question for the reporting panel itself is how it came to express ‘confidence’ in a hypothesis that appears to have zero likelihood. ‘Confidence’, I suppose one might reflect, is a subjective state of mind, and it may be natural for people to feel more confident saying something they know their most important audience wants to hear than saying something more challenging. Feeling confident about something, however, should not be confused with being right.

As ever, though, I leave readers to see what they think of Paul’s analysis.


Paul McKeigue

Alternative explanations of the alleged chemical attack in Khan Sheikhoun: a reassessment in the light of the report of the Joint Investigative Mechanism

The report of the UN-OPCW Joint Investigative Mechanism has now been officially released. On the principle that people should take responsibility for what they allow to be published under their names, I’ll refer to the report by the initials of its three named authors as MCM (Mulet, Cheng-Hopkins and Mogl). I have not been able to identify any mainstream journalist who has read the report or commented on it, other than the independent-minded Peter Hitchens. Other incisive commentaries can be found at these links: (1, 2, 3, 4). A detailed technical assessment has been released by the Russian mission to the UN.

In an earlier post I examined, in the framework of Bayesian probability calculus the evidence favouring two alternative explanations of the alleged chemical attack in Khan Sheikhoun on 4 April 2017:

  • H1: a chemical attack by the Syrian air force using sarin.
  • H2: a managed massacre of captives intended to bring about US military intervention, using small quantities of sarin to generate a forensic trail

From this passage it appears that MCM excluded hypothesis H2 from consideration.

On the basis of the information obtained, the following two scenarios were further investigated: (a) sarin had been released through an aerial bomb; or (b) sarin had been released through the explosion of an improvised explosive device placed on the ground. A third scenario with two alternatives was also investigated, neither of which was found to be linked to the release of sarin.

As I emphasized in earlier posts, you can’t exclude the hypothesis you haven’t considered, and you can’t evaluate the evidence for a hypothesis without evaluating the weight of evidence favouring that hypothesis over alternatives. For a given observation, this weight of evidence is based on comparing how probable that observation was, given each of the hypotheses under consideration.

I listed five observations, for each of which I assessed the conditional probability of the observation to be very low under H1, but high under H2. These were:

  1. The key witness was unable to produce a family photograph showing him with his wife; his explanation was that his family home had been coincidentally destroyed in an airstrike at the same time as the chemical attack.
  2. There were no images of a search and rescue operation
  3. The flight track of the Syrian jet showed only a single east-west pass to the south of the town, passing no closer than 2 km from the alleged impact site of the chemical munition.
  4. The area where casualties were alleged to have occurred was upwind of the alleged impact site.
  5. Several of the children seen laid out in morgues had head injuries: in at least two cases these head injuries were received after they had been “rescued” from the alleged chemical attack.

I assessed that each of these five observations contributed a likelihood ratio of about 20, equivalent to a weight of evidence of 4 to 5 bits favouring H2 over H1. This gives a total weight of evidence of about 20 bits: a likelihood ratio of 1 million to one.

Of these five observations, the only one considered by MCM was the flight track of the Syrian jet.

The flight track, reassessed

MCM had access to the Pentagon’s map and to “another aerial map” which “indicated that the closest to Khan Shaykhun that the aircraft had flown had been approximately 5 km away”. This is even less compatible with H1 than my lower bound of 2 km on the distance from the alleged impact site, based on a low-resolution image of the Pentagon’s map obtained from a news story. MCM did not question the accuracy of this flight track, or introduce any alternative explanation such as another jet undetected by radar. An interview with the pilot, and the flight log at the airbase were consistent with the flight track. However MCM found an expert who was prepared to state that

depending on a number of variables such as altitude, speed and the flight path taken, it would be possible for such an aerial bomb to be dropped on the town from the aforementioned distances.

The heavily qualified wording of this sentence suggests that the expert did not state that the alleged impact sites were compatible with the recorded flight track. As the Russian Ministry of Defence briefing pointed out, while it might just be possible for an Su-22 travelling at maximum speed and altitude for bomb release to toss a bomb 5 km ahead of the release point, the jet would still have to turn after releasing the bomb, and this would take it within 2 km of the impact point. However the flight track is even more unequivocally incompatible with the alleged airstrikes than this argument implies. The flight track shows only a single east-west pass to the south of the town. Under H1 this flight track has to account not only for the crater that was the alleged impact site of a chemical munition, but also for the high explosive bombs that allegedly caused the three explosions documented by plumes on videos and images of damaged buildings, and for whatever device caused the cloud of white fog also mentioned by MCM (discussed below under “other relevant observations”).

Other material on the five key lines of evidence

Of the four other observations listed above, the only one on which MCM comment even briefly is the wind direction. They ignore the videos showing the wind to have been blowing from southwest to northeast (away from the alleged location of victims southwest of the crater), and decide instead that the “prevailing air movements” must have been in the direction implied by hypothesis H1.

The Mechanism also noted that the location of victims, as described in the report of the Fact-Finding Mission, serves as an indicator of prevailing air movements west to south-west of the location of the crater during the early morning on 4 April 2017

Analyses of the crater and the alleged munition

MCM and the Russian experts who disputed their conclusions discussed in some detail whether the images of the crater were compatible with an air-dropped bomb containing only a small bursting charge or with a ground-based improvised explosive device. Under either H1 or H2 we would expect the crater to look as if it had been struck by a munition dropped from the air. Under H2 we would expect this appearance to be created deliberately, perhaps using one of the short-range siege engines known as “Hell Cannons” to drop a heavy projectile. We would also expect the remnants of such a munition to be removed before taking photographs, so their absence from the images is not evidence against the use of such a munition.

MCM examined images of “two objects of interest” in the crater: a “deformed piece of metal” and “a circular metal object that appeared to be a munition filler cap”.

According to information obtained by the Mechanism, the filler cap, with two closure plugs, is uniquely consistent with Syrian chemical aerial bombs. The Mechanism was provided with an assessment of the filler cap and with chemical analysis showing sarin and a reaction product of sarin with hexamine that can be formed only under very high heat.”

The assertion that the filler cap “is uniquely consistent with Syrian chemical aerial bombs”. has been disputed, but in any case this is not evidence favouring one hypothesis over another; under either H1 or H2 we’d expect to find remnants of something resembling a chemical munition.

So neither the images of the crater, nor the images of the munition remnants allegedly found in them, contribute compelling evidence favouring either H1 or H2.

Chemical profile of the sarin, and matching to Syrian military stocks of sarin precursor

In my last post, I noted that if H1 were true, one of the observations that might be expected to contribute evidence favouring H1 over H2 would be if a chemical signature match between the environmental sarin samples and Syrian military stocks were reported by scientists prepared to put their names on a report that was detailed enough to be subjected to peer review.

MCM’s report doesn’t meet this criterion, but it contains some interesting new information about the analysis of the Syrian military stocks of methylphosphonyl difluoride (DF) that were destroyed by US Army engineers under OPCW supervision on board the MV Cape Ray in 2014. It was reported in 2014 that gas chromatography / mass spectrometry profiling was carried out on board. A formal chemical signature attribution study to determine whether samples of sarin could be matched to these samples of DF would be based on using the profiles of hundreds of impurities that are detected by mass spectrometry, with control specimens including samples of sarin synthesized independently, and multivariate statistical analysis as described in this paper. We are told only that the Syrian military stocks of DF contained “phosphorus hexafluoride” (presumably this means the hexafluorophosphate anion PF6) and phosphorus oxytrichloride (POCl3). As phosphorus oxytrichloride and hexafluorophosphate were also reported in the environmental samples allegedly taken from Khan Sheikhoun, MCM concluded that “the presence of marker chemicals that are believed to be unique” was “a strong indication” that the sarin from KS was produced using DF from Syrian military stocks.

I am not expert in chemistry, but fortunately on this blog we have been provided with a detailed briefing on the impurities likely to be present in sarin in comments here and here by an experienced organic chemist who writes as DDTea. Step 4 of the synthesis of sarin uses a chlorinating agent: either thionyl chloride or phosphorus pentachloride. DDTea explains that if phosphorus pentachloride is used as the chlorinating agent, phosphorus oxytrichloride is produced, and this is likely to produce hexafluorophosphate in step 5. On this basis, the presence of phosphorus oxytrichloride and hexafluorophosphate in the Syrian military stocks of DF indicates only that phosphorus pentachloride was used as the chlorinating agent. This process is not “unique” as MCM assert: for instance the Aum Shinrikyo terrorist group also used phosphorus pentachloride in step 4, and phosphorus oxychloride was detected in their lab.

MCM assert that the presence of hexafluorophosphate indicates that hydrogen fluoride (rather than sodium fluoride or potassium fluoride) was used in step 5. Russian experts dispute this, stating that “It is well known that phosphorus hexafluoride is produced by fluorination of phosphorus chloroanhydrides also using fluorides of alkali metals [sodium fluoride or potassium fluoride] and compounds of hydrogen fluoride with tertiary amines”. The JIM’s argument is that use of hydrogen fluoride (a highly dangerous gas) “indicates a high degree of competence and sophistication in the production of DF and points to a chemical-plant-type production method.” Even if the JIM is correct in asserting that hydrogen fluoride was used, this is not compelling evidence favouring H1 over H2. Under H2, only bench-scale quantities of sarin need be produced to lay a trail of forensic evidence. Under H2, the objective of producing sarin is to implicate the regime, so we would expect opposition chemists to add to their sarin any chemicals that would help to implicate the regime: certainly they would have added hexamine which had been widely publicized as an alleged hallmark of the process used by the Syrian military to produce sarin from binary precursors.

The confirmation that OPCW had access to samples of Syrian military DF since 2014 raises again the question of why the Joint Investigative Mechanism has not investigated whether the sarin recovered from alleged chemical attacks in 2013 matches Syrian military stocks. We can reasonably assume that if it had been possible to declare such a match, based on a formal chemical signature attribution study rather than one or two impurities, this finding would have been widely publicized. The French “national evaluation” asserted that sarin from Khan Sheikhoun matched samples recovered from an alleged chemical attack in Saraqeb on 29 April 2013, but this was based on the presence of hexamine (allegedly used in the final step of sarin synthesis), rather than on the full chemical profile. Phosphorus oxychloride was not reported in samples obtained from alleged chemical attacks in Syria in 2013. This suggests that the synthetic pathway for the sarin used in alleged chemical attacks in Syria may have changed between 2013 and 2017 from using thionyl chloride (which was on the shopping list of the Nusra procurement team arrested in Turkey) to using phosphorus pentachloride, thus matching the synthetic pathway implied by the impurities in Syrian military stocks.

In this context it is difficult not to feel some unease about Martin Chulov’s report on 5 April that

“Samples taken from the scene in Khan Sheikhun, as well as biological specimens taken from survivors and casualties, will be compared with samples taken by intelligence officials from the Syrian military stockpile when it was withdrawn from the country in late 2013. Syria’s stores of sarin are known to have particular properties, which experts say can be forensically matched to samples taken in the field.”

After western governments had shown no interest in comparing sarin from the alleged chemical attacks in 2013 with the Syrian military stocks of DF that were destroyed in 2014, it is remarkable that Chulov’s source was anticipating, the day after the alleged chemical attack in Khan Sheikhoun, that samples taken from it would be matched to these stocks. If “intelligence officials” were able to take samples from the Syrian military stocks destroyed on the MV Cape Ray, we cannot exclude the possibility that these samples could have been used to lay a false trail of forensic evidence, or that an outline of the chemical profile of these stocks could have been provided to opposition chemists. The Russian assessment states that the Syrian government had given information on the methods of synthesis of their military stocks of sarin to the OPCW, and warns that “a real possibility exists that the DF (methylphosphonic acid difluoroanhydride) and sarin were deliberately synthesized using the allegedly Syrian formulas which are well-known both to the OPCW and beyond that international structure to be utilised as a means of a provocation designed to compromise the Syrian government”.

Other relevant observations

White fog

MCM briefly comment on images that showed a cloud of white fog appearing in the centre of the town:

The cause of the plume that was shorter and whiter in appearance than the other three could not be conclusively identified by munitions experts engaged by the Mechanism. Two experts noted that the plume had probably consisted of aerosolized droplets of liquid. One explained that the plume’s appearance might indicate the use of a vacuum bomb that had possibly failed to explode, with the plume being a cloud of explosive liquid that had disseminated from the munition.

Adam Larson has made a detailed study of the white fog, which originated at two sites, one in the centre of town just north of the tel (mound) as noted by MCM, and one at a farmhouse just southwest of the town. The fog originating near the tel is seen in the video to be expanding steadily over at least 17 seconds, and is seen 20 minutes later to have spread northeast on the prevailing wind, eventually blanketing most of the town. This sustained emission of white fog is typical of military smoke generators that emit aerosolized oil droplets, rather than a fuel-air explosive device (“vacuum bomb”). The Syrian opposition is known to possess such smoke generators, and it is possible that they were used to create the impression that the town was under chemical attack. Although there were purported eyewitness reports of fog spreading through the town, there was no report of what happened at the sites where it originated.

It is possible that satellite images of the smoke pouring from one of these sites were initially misinterpreted by US military analysts as indicating that an airstrike had caused a fire releasing toxic smoke from stored chemicals. A story to this effect was relayed on 6-7 April by at least two retired officials known to have sources in the US military or intelligence agencies: Phil Giraldi and Lawrence Wilkerson. Unfortunately this story, pursued separately by Seymour Hersh and Gareth Porter, led these two distinguished investigative journalists astray. Combustion of stored pesticides could not produce chemicals that test positive for sarin. Proponents of the regime attack hypothesis have focused on debunking this story, while ignoring the compelling evidence favouring a managed massacre.

Evidence of staging in the videos

Staging a hazmat investigation for cameras is not, in itself, compelling evidence that the entire incident was staged.

The Mechanism observed several methods and procedures that appeared to be either unusual or inappropriate in the circumstances. In particular, the Mechanism noted that fully equipped hazmat teams had appeared at the scene later that afternoon and reported early detection of the presence of sarin, apparently using a Dräger X-am 7000 ambient air monitor, which was not known to be able to detect sarin.

Evidence that purported first responders are not helping victims is stronger evidence favouring a managed massacre over a chemical attack.

“The Mechanism also noted scenes recorded just after the incident at the medical site to the east of Khan Shaykhun, where rescue and decontamination activities filmed shortly after 0700 hours showed rescue personnel indiscriminately hosing down patients with water for extended periods of time. That video footage also showed a number of patients not being attended to, as well as paramedical interventions that did not seem to make medical sense, such as performing cardiac compression on a patient who was lying face down.”

As MCM noted, the videos show that “rescue personnel” were hosing victims for up to 40 minutes, in temperatures only a few degrees above freezing. Other videos show that children were piled in pickup trucks, with the living and the dead apparently mixed together to be photographed. Some of these children were taken on rides to hospitals for staged attempts at resuscitation hours after they had died. Others were seen laid out in morgues with head injuries that in at least two cases can be established to have occurred after they were “rescued”.

Timing of hospital admissions – “possible staging scenario”

This passage is worth quoting in full.

Certain irregularities were observed in elements of the information analysed. For example, several hospitals appeared to have begun admitting casualties of the attack between 0640 and 0645 hours. The Mechanism received the medical records of 247 patients from Khan Shaykhun who had been admitted to various health-care facilities, including survivors and a number of victims who eventually died from exposure to a chemical agent. The admission times noted in the records range from 0600 to 1600 hours. Analysis of the records revealed that in 57 cases, patients had been admitted to five hospitals before the incident (at 0600, 0620 and 0640 hours). In 10 of those cases, patients appear to have been admitted to a hospital 125 km away from Khan Shaykhun at 0700 hours, while another 42 patients appear to have been admitted to a hospital 30 km away at 0700 hours. The Mechanism did not investigate those discrepancies and cannot determine whether they are linked to any possible staging scenario or are the result of poor record-keeping in chaotic conditions.”

The mention of a “possible staging scenario” suggests that MCM considered something like a managed massacre as one possible explanation. It’s not possible to evaluate this as evidence without more information – we’re not told for instance whether the admission times were handwritten or computer-generated. It’s possible that this could be explained by some confusion over time zones, or the switch to daylight saving time a few days before. However MCM’s failure to investigate this further suggests that they were not too concerned by whether or not the discrepancies could be explained.


The most important new evidence in MCM’s report is the additional detail of the flight tracking. Clearly the story of air strikes is incompatible with the flight track map shown at the Pentagon’s press conference (with a misleading caption stating that “An aircraft originating from Shayrat airfield was over Khan Sheikhoun”), and with the other map described by MCM. Unless this flight track was wrong, which MCM do not suggest, the hypothesis of a chemical attack by the Syrian air force can be excluded as having zero likelihood. This raises questions about the role of the Pentagon in misleading not just the media, but also the President. The weight of evidence favouring the hypothesis of a managed massacre over a chemical attack has obvious implications also for the role of the White Helmets in this incident.



Report Authors: JIM head Edmond Mulet speaks to the press after briefing the UN Security Council, flanked by fellow JIM leaders Judy Cheng-Hopkins and Stefan Mogl.


This entry was posted in chemical weapons, conspiracy, guest blog, OPCW, Syria, Syrian opposition, UK Government, Uncategorized, war, White Helmets. Bookmark the permalink.

4 Responses to Khan Sheikhoun Chemical Attack: Guest Blog Featuring Paul McKeigue’s Reassessment

  1. Andrew says:

    I think it is fair to say the flight track is incompatible with the the FFM’s witnesses too:
    S/1510/2017 6.23 tells us that the “greater number of witnesses” has “imparted greater confidence in the narrative and any resultant conclusions”.

    5.14 refers to “a swooping sound, as made by a jet” and 5.15 to “hearing the noise of the jet” – not just any noise but both specifically a jet.

    But the JIM tell us the jet in question was at least 5km away: there was no jet over the town for the witness to hear.

    HRW went further in their Death by Chemicals report and offered eye witnesses to a ‘first fly over’ who saw a plane fly over the town and drop a bomb. If the flight track is accepted as true, these witnesses must have been lying to both the FFM and HRW. The narrative in which the FFM had “greater confidence” cannot be right.

    One of those HRW witnesses (al-Hussein) is even credited by Smart News with having filmed and photographed the widely shown washing scenes. Put simply, if a real CW attack, why lie?

    • causticlogic says:

      5 km is about as far away on the map as it would be in altitude if it were directly above, so it would be audible, and I think it’s even heard at the start of the earliest video. Distant but audible. But their stories or their overall gist are clearly false anyway. Jim noted “conflicting claims” about jet location but one claim is a radar track (or 2 of them, actually, both agreeing). That should be a past-tense conflict.

      • Andrew says:

        But would of course be *at least* 5km away and in the context of Ismail Raslan’s story of an attacking jet (quoting 5.14 more fully “a swooping sound, as made by a jet when it attacks”). HRW also quote Raslan as having heard a plane “fly over” which demonstrably did not happen.

  2. causticlogic says:

    I’ve met people who were QUITE confident that alien bugs were laying eggs inside their skin. Okay, one person. Didn’t respond well to reason. So that can happen, as it seems to have with these guys. Not as loony a claim, and one that’s WIDELY ECHOED so as to seem evidently true, but even that plus confidence doesn’t make it true. Not when a fairly scientific analysis shows it’s about 0% likely to be true. Awesome post then, reading the middle part next. 🙂

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s