The threat was real. The men weren't

Three white vans on a farm lane in Whelford, 350 metres from a crash gate of RAF Fairford, at half past one on Sunday morning. One wore the livery of a fuel firm that does not exist. A farmer driving home found them blocking her drive, saw hooded men scatter at her headlights, rang the base police and got no answer, then rang 999. Five men were arrested under the Explosives Act, then re-arrested for preparing an act of terrorism. Eighty-five households were moved out. A bomb-disposal robot worked the barrels on live television. COBRA sat.

Then, at about 36 hours, all five were released on police bail: Londoners (“British nationals”, no less), aged 23 to 25, still under investigation. Daniel Sandford, the BBC’s home affairs correspondent, called it “not the plot some were fearing”. Two neat stories are on offer: the farmer who did what MI5 could not, and the President’s men under view for a long time. Neither survives the custody record.

Three readings, then a fourth

No officer has said the operation was not intelligence-led. The BBC understands it was not, which is not the same thing. Against that sit Trump, Wes Streeting calling the farmer’s account only a “partial picture”, and a councillor’s specific Iranian threat six weeks earlier. Three readings carry most of the weight, and the list is not closed. Cold discovery. Known faces without live coverage that night. Or a controlled operation, in which the services already had the cell covered and the farmer’s 999 call gave police a clean, deniable reason to move. The arrest sequence cannot separate them (an Explosives Act arrest by a county force is what a stumble looks like, and what a briefed cover looks like). Two things narrow the field. A service watching a cell load barrels for a bomber base disrupts before the vans reach the lane; that stage is where coverage has been lost. And a pre-briefed arrest is made under section 41 of the Terrorism Act, because the 14 days are the point. If anyone had these men under view, the likelier watcher is American, with product that reached Thames House and never a custody sergeant.

The bail decision then forces a fourth reading: the men in the field were not the threat the base was warned about.

What the clock says

There is no power to bail a section 41 detainee. Bailed terrorism suspects must have been held under PACE, and the Daily Record reports a superintendent’s extension to 36 hours, release before 4pm. The terrorism clock never started. Counter Terrorism Policing (CTP) chose the ordinary power at re-arrest on Sunday afternoon, ran it to the limit, and declined to ask a magistrate for 96 hours or a judge for 14 days. Section 41 is the minority route in Britain (48 of 248 terrorism arrests in 2024), reserved by the Independent Reviewer’s account for cases with multiple suspects, many devices to download and a public-safety risk on release; Fairford had five suspects, a fleet of phones and a bomber base, and CTP chose PACE anyway. Those extensions are granted on far less than the public had been led to believe was in those vans. The decision not to ask is the loudest thing the police said on Monday.

The theory that a political hand opened the door has the premise right and the mechanism wrong. Custody decisions belong to a custody officer, a superintendent and a judge. No minister can direct them, and holding men without evidential necessity to spare the government a bad conference week would itself be unlawful. The route was chosen on Sunday, before the Iranian denial; the release preceded COBRA. A minister enters later and narrowly, when an Iran-linked charge needs the Attorney General’s permission. The coherent version of “not his decision” points at Thames House. A live Security Service investigation wants no defendants and no disclosure exercise: bail with contact conditions, then watch who they call. Nothing public confirms it, and nothing excludes it.

The wrong crew on the wrong lane

Strip the terrorism frame and the evidence is three vans, fake fuel livery, barrels, a crew of five (eight to ten on the farmer’s count) on a farm drive at 01:30, and men who ran at headlights. Every item is also the signature of rural fuel theft, up 120 per cent since the war began: diesel in unattended farm tanks, vans dressed as fuel firms, men who price in a prison cell rather than a martyrdom. The weaknesses are real (eight is a large crew for a farm tank; a lane beside a base on FPCON Delta is a poor choice for anyone who did reconnaissance; some ran towards the wire, though panicked men run everywhere).

Between the frames sits the reading Laurence Taylor, the head of CTP, himself invited: proxies “knowingly or unknowingly” working for a foreign state. “Unknowingly” is Tehran’s European model: young men hired over Telegram for a few hundred quid, given an errand, never told whose. A crew told to park three vans of barrels on a lane and walk away would look like this. So would diesel thieves. The phones will separate the two; the barrels’ chemistry will separate both from a bomb.

The approach failed. It still matters.

The Americans hold the wire, and held it: dispersed aircraft, reinforced gates, a probable move to FPCON Delta. Britain holds everything outside, and outside was one roadblock on the main entrance and an MoD Police line that rang out. Police log a first call about the vans at 00:45; the farmer rang at 01:36. Fifty-one minutes, unexplained. 

Then there is the sky. A bomb-disposal team that believes it has a viable device does not let anything fly over it while the robot works: the blast and fragmentation arc argues against it, and so does the electronic countermeasures bubble the team throws over a suspect device to kill a remote trigger, which would drop a drone out of the air as readily as it blocks a detonator. Yet aerial pictures of the robot moving between the vans were on air on Sunday afternoon, inside a five-mile flying restriction that had been in force since 14:40. Either someone cleared the camera because the assessment already said this was not a bomb, or the cordon never controlled its own airspace. The first reading agrees with the bail, the second with the 51-minute gap, and neither flatters the weekend’s framing. If the vans came for diesel the lesson was cheap. Nobody should price the next one the same.

One footnote. The sharpened image of the suspects circulating online was generated from the blurry original. A model cannot recover a face that was never in the pixels. It invents one that fits, and the result is a realistic cartoon: clear enough to give the public a face to hate, and close enough to a real one for someone to recognise a neighbour who was never near Gloucestershire.

What an Iranian hand would mean

Tehran’s European record is not in dispute: more than 20 plots in a year by MI5’s count. What it does not contain is an attack on a defended military site. The model is deniable and low-yield by design: synagogues and dissidents. Explosive at Europe’s only US heavy-bomber base would be a new category of act. Hired amateurs sent to probe the approaches would not; that is the old model at a new class of target. The Financial Times reported in August that Tehran had assessed strikes on US military assets in Europe; the councillor’s threat falls in the same fortnight. The warning was real; nothing yet ties these men to it.

Where this lands

The base was under a real and specific threat, the outer cordon was thin, and the five men who fell into it were most probably not the executing cell of a state-directed plot. That is less comfortable than the story it replaces: a foiled plot is a closed file; five bailed men and a President talking about a group under long observation is an open one. The police were right to treat unexplained barrels beside a bomber base as a bomb, right to release when the evidence ran out, and wrong only to let “major incident” and a day of aerial footage build an expectation they could not meet. A charge, or a viable device in those barrels, would rewrite this paragraph.

Until then the farmer’s account is the only one on the record, and Streeting has already called it partial.

Image for illustrative purposes only. This photograph was not taken at RAF Fairford and does not show the incident described in this article.