Structure the open source, do not invent the source
OSINT is reading what is already public, including the parts that look like crime or leak. A model that will not touch a paste, a dump index or a forum scrape is not an investigation tool.
Investigators working from open sources they are allowed to collect, in-house or on contract.
Why the mainstream APIs fail here
The interesting paste is the one the filter blocks. You already collected it. You need entities, overlap and a timeline, not a refusal because the paste contains credentials you are trying to get rotated.
How Redline is used for this
Send the text you collected. Ask for entities, infrastructure, and what to pull next from open sources. Do not ask the model to break into anything. Cap the investigation key.
A working loop
- Stay on open sources and authorised collection.
- Extract, cluster, brief.
- Rotate anything that should not still be live; that is the point of finding it.
Prompts are not stored. A signed receipt of the hash comes back on every call, so you can prove later what Redline logged. Details are on the privacy page. Per-model prices are on /models and the pricing model is on /pricing.