# Decentralized Acquisition and Centralized Surveillance Interoperability Arkansas surveillance acquisition is institutionally decentralized while surveillance access is becoming operationally interconnected. Municipal police departments, a county sheriff, county government, and the State Police chose different vendors through different legal and fiscal routes. No single statewide procurement selected the systems, and no single legislative body authorized the resulting network. Yet the records show those separately acquired systems being reconnected through Flock sharing, HIDTA/ELSAG domain administration, fusion-center access, vendor APIs, and a proposed trooper-facing statewide query layer. This is not a claim that Arkansas operates one technically unified surveillance database. The corpus documents multiple vendors, domains, contracts, and access paths. The finding is narrower and more consequential: institutional fragmentation at purchase time does not prevent functional integration at use time, while the fragmentation makes it difficult to identify who is responsible for auditing the combined system. ## Evidence **Acquisition is jurisdiction-specific and procedurally fragmented.** Conway funded Flock through asset forfeiture after the cameras were removed from the ordinary budget, with Council ratification following contract execution ([[Ordinance O-25-09 — LPR Bid Waiver and Asset Forfeiture Appropriation]], *"appropriating asset forfeiture funds"*). Fayetteville activated Axon Fleet 3 ALPR through a no-cost field-trial agreement authorized by the Mayor rather than a Council appropriation ([[Axon Field Trial Agreement and City Authorization]], *"There is no cost for the field trial"*). Pulaski County selected Flock through a scored competitive RFP ([[Pulaski County RFP-23-003 Solicitation and Flock Safety Bid]], *"lease approximately six (6) Automatic License Plate Readers"*). Little Rock renewed Flock and acquired adjacent surveillance systems through cooperative-purchasing and sole-source instruments ([[Flock LPR Renewal (Resolution 16846)]]). ASP bought Leonardo/ELSAG through an NCPA cooperative term contract funded with federal ARPA pass-through money, with a HIDTA network license included at purchase ([[Term Contract 4600055190 and PO 4502235324 — Initial Leonardo ELSAG Buy]], *"One Time HIDTA LPR Network License Included"*). **Interconnection appears after procurement.** Conway's Flock tenant exposed its reads through a 1,384-organization sharing topology ([[SharedNetworks 2025-12-17 Snapshot]]). LRPD's correspondence documents a regional hot-list-sharing network and out-of-state/fusion-center reach ([[Flock Deconfliction Advisories and the LRPD Sharing Network]]), while a separate source documents private Home Depot camera shares ([[Home Depot Camera Sharing into LRPD]]). ASP's ELSAG/HIDTA records show an Arkansas domain with shared hot-list visibility, administrator delegation, and a silent-list domain ([[ASP–Houston HIDTA MOU and ELSAG Domain Architecture]], *"will be seen by all in that domain"* and *"admin rights to manage users within the domain"*). **The state-level bridge is cross-platform access, not a single-vendor mandate.** The Arkansas State Fusion Center sought analyst access across *"1. ELSAG … 2. Motorola LPR … 3. Flock … 4. AR Advance … 5. ATLAS … 6. ACIC"* ([[Cross-Network Analyst Access and the Arkansas State Fusion Center]]). ASP separately pursued an ELSAG API so a trooper entering a plate in ATLAS could see matching reads from ASP's LPR system *"within Arkansas"* (same source). Lt. [[Dennis Overton]] also answered an interstate survey as the *"ALPR Point of Contact for Arkansas"* ([[ALPR Point of Contact for Arkansas — Statewide Coordination]]). These records establish functional coordination across platforms without establishing that ASP commands local deployments. **Accountability remains fragmented.** ASP counsel states that ASP does not conduct *"reviews, audits, or approvals of other agencies or municipalities and their use of ALRPs"* ([[2026-06-05 Roach Route Map and Item-4 Disclaimer]]). [[D003 Synthesis]] resolves the apparent contradiction: formal oversight of local operators is not shown, while ASP's functional state-level coordination role is. LRPD's Item-3 no-records disposition despite deconfliction records ([[T004 - Item-3 No-Records vs Deconfliction Audit Trail]]) and ASP's no-LPR-system position despite operational ELSAG records ([[T007 - ASP No-LPR-System Position vs Documented ELSAG Operation]]) show why records responsibility cannot be inferred from technical access alone. ## Strategic finding The emerging Arkansas model is not centralized procurement followed by centralized governance. It is **decentralized adoption, federated access, and unresolved accountability**. Agencies retain local control over contracts and nominal platform settings; vendor and interagency infrastructure makes the resulting data useful across organizational boundaries; and no produced record assigns one institution responsibility for auditing the whole arrangement. That structure changes the next investigative question. Asking only *which agency bought which camera* is no longer sufficient. The higher-value questions are: who can query across systems, who can create or share watch lists, who grants access, what audit trail exists at each bridge, and which institution must review misuse that crosses agency or vendor boundaries. ## Caveats - The corpus does not establish a single statewide database containing all Arkansas plate reads. “Interoperability” here means documented access brokerage, sharing relationships, domain administration, and planned or available query integrations. - The fusion-center checklist shows desired or initiated access; it does not prove every listed access path was completed or continuously used. - ASP's ELSAG domain evidence directly establishes ASP/AHP/federal-administrator relationships, not comprehensive municipal and county participation. - Vendor portfolios are broader than the products proved in Arkansas. Leonardo's public SignalTrace materials describe electronic-signature/device-group tracking, but ASP's procurement does not name SignalTrace; Flock's public Condor, Raven, Alpha, and advanced-analytics catalog likewise does not establish Arkansas acquisition. See [[SignalTrace Electronic-Signature Tracking]] and the public-technical boundary on [[Flock Safety, Inc.]]. - No produced record establishes that ACIC holds ALPR-specific audit or approval authority. ACIC remains the highest-priority institutional gap, not a presumed answer. - This page is analytical synthesis. Each factual premise is anchored to a Tier-1 source page; the conclusion describes their cross-jurisdiction relationship. ## Open questions - Does ACIC audit ALPR-derived NCIC/ACIC access, hot-list use, or cross-system queries, and does it maintain ATLAS policy or access records? - Which local agencies can be queried through ASP, the Fusion Center, HIDTA, ATLAS, or vendor integrations, and which access paths are reciprocal? - Was the ELSAG-to-ATLAS API completed, and what logs, retention rules, and user permissions apply to the resulting query surface? - Who reviews access that crosses vendor boundaries, such as a fusion-center analyst moving among ELSAG, Motorola, Flock, ATLAS, and ACIC? - Do local procurement records disclose the downstream sharing and integration capabilities that become active after purchase?