IAIL CFL cheat sheet

Forensic locksmithing applies lock mechanics knowledge to legal questions: determining method of entry, lock condition at a point in time, and whether a key, pick, or force was used.

Core ethical duties: objectivity over advocacy, disclosure of exculpatory findings, written documentation of all examinations, and refusal of contingent-fee testimony.

Competence boundary rule: an examiner testifies only within documented training and experience; unfamiliar lock types require research, peer consultation, or decline.

Bias controls: sequential unmasking (analyze physical evidence before learning suspect or case theory), independent verification, and disclosure of prior case involvement.

Conflict-of-interest test: any financial, employment, or personal relationship with a party that a reasonable observer could see as influencing opinion must be disclosed in the report.

Foundational literature includes lock design principles, key control systems, and published standards for tool mark comparison; keep a current reference library and training log.

Chain of inference: observation (physical feature) to interpretation (mechanism) to opinion (method of entry); each step must be stated separately so the court can weigh them.

Peer review before report issuance catches terminology errors, overstatement of certainty, and unsupported conclusions; document reviewer identity and date.

Warded locks: fixed wards block the key blade; security is low and bypass is by a skeleton-type key or manipulation; no pin tumblers are present.

Lever tumbler locks: a set of levers with gates must align at the fence; lever count (often 2-5 in domestic use) and gate positions determine key bitting.

Pin tumbler cylinder: driver pins and key pins in chambers; the shear line between plug and shell is the boundary crossed when all pins sit at the correct height.

Wafer locks (disc tumblers): flat wafers in slots in the plug; a single-sided or double-sided wafer stack; wafers may be spring-loaded or gravity-returned.

Tubular locks: pins arranged radially around a central post; key has a cylindrical blade with bitting on its circumference; identified by circular keyway.

High-security features to record: security pins (spool, serrated, T-pin), sidebars, slider/ finger pins, telescoping pins, restricted keyways, and patented key control.

Deadbolt versus latch: deadbolt has no spring latch and requires full throw; a latchbolt is spring-loaded and may be slipped; record bolt type, throw length, and faceplate.

Padlock anatomy: shackle, body, and cylinder; record shackle diameter, material, locking mechanism (heel/toe, ball bearing), and whether the cylinder is removable.

Document lock condition in situ first: photographs with scale, orientation, and lighting before any manipulation; note door position, strike alignment, and weather stripping condition.

Record identifying data: manufacturer, model, keyway stamp, serial or date codes, patent numbers, and cylinder finish; these support dating and provenance.

Examination sequence: visual and microscopic inspection, then functional testing, then disassembly only if justified and documented; each step photographed.

Microscopic examination looks for fresh versus old marks, corrosion in tool marks, metal smearing direction, and foreign material such as paint or lubricant.

Functional testing records: does the lock operate with its own key, does the plug rotate freely, are pins missing or damaged, does the bolt retract fully.

Latent print and DNA opportunities on lock surfaces, key blades, and cylinder faces should be considered and coordinated before destructive examination.

Contemporaneous notes must include date, time, examiner, location, tools used, and observations; corrections are single-line strikeouts with initials, never erasure.

Comparison of questioned lock parts to known exemplars requires similar manufacturing lot where possible; note lot, finish, and wear differences.

Tool mark class characteristics: type of tool, blade width, shape; individual characteristics: microscopic striations, chips, and defects unique to a tool.

Impression evidence from lock work includes pick marks, tension wrench marks, drill burrs, pry marks on frames, and jaw marks from gripping tools.

Sufficiency rule: identification requires reproducible, corresponding individual characteristics in the same orientation; class agreement alone supports only exclusion or inclusion at class level.

Direction of travel is read from striation morphology: leading edges and metal flow indicate the direction the tool moved across the surface.

Test marks should be made on similar material (same alloy, hardness, finish) and compared under the same lighting and magnification as the questioned mark.

Cast or mold impressions of pry marks and keyway damage preserve geometry; photograph before casting and label the cast with location and orientation.

Cutting and drilling evidence: record bit type, diameter, rotation direction from burr orientation, and whether the cut penetrated or stopped short.

Report language must separate 'consistent with' from 'identified as'; the latter requires individual characteristic agreement with stated error-rate limitations.

Lock slipping: latchbolt retracted by a shim or card between bolt and strike; indicators include latch wear, frame flex marks, and no cylinder damage.

Pick and rake marks: parallel scratches on pin tips, polished keyway edges, and spring or pin damage; absence of marks does not exclude picking.

Bump key evidence: distinctive pin damage patterns, unusual plug wear, and keys cut to maximum depth (often 9s or deep cuts) recovered at scene.

Impressioning evidence: soft-metal or plastic key blanks, cut keyways, and progressive cuts on a recovered blank indicate trial-and-error key fitting.

Drilling indicators: metal chips inside the cylinder, burr rings at the drill entry, damaged pins, and a plug that turns without a key.

Forced entry indicators: bent or spread door frames, distorted strike plates, pry marks at the bolt, splintered wood, and deformed deadbolt faceplates.

Shimming and over-lifting attacks leave telltale pin displacement; note whether the plug turns with a tool inserted or only with the correct key.

Covert entry conclusion requires correlation: mechanism evidence plus tool marks plus scene context; a single indicator supports only a possibility statement.

Key identification data: manufacturer, keyway profile, blade length and thickness, shoulder or tip stop, and bitting depths on each cut position.

Decoding method: measure each cut depth against the manufacturer's depth and spacing specifications; record measurements in thousandths of an inch or millimeters.

Master key systems: a key cut to the top master depths operates multiple locks; determine whether a recovered key is a change key, master key, or grand master.

Key control records: restricted keyways, patented blanks, and serialized keys link a key to an issuing locksmith or facility; request those records.

Impressioning blanks show progressive cut marks, often uneven and stepped; compare cut spacing and depth to the target lock's specification.

Wear analysis: a heavily worn key indicates long use and may fail in a tight lock; compare wear patterns to the lock's pin wear for association.

Key duplication evidence: machine marks, burrs, and cut finish differ between factory-cut and duplicated keys; note blade finish and shoulder condition.

Recovered key-to-lock association is established by decoding and test fitting with documentation; state whether the key operates the lock, all locks, or none.

First-responder lock evidence priorities: secure the scene, photograph doors and locks before opening, and avoid operating locks unnecessarily.

Packaging rule: small lock parts and keys go in rigid containers or sealed envelopes; cylinders are cushioned to prevent new marks during transport.

Chain of custody entries: item number, description, collector, date/time, location, transfer recipient, and purpose of each transfer; gaps must be explained.

Seal integrity: tamper-evident seals with unique numbers, initials across the seal, and documentation of any break and reseal.

Do not test locks at the scene beyond what is needed to document condition; functional testing belongs in the laboratory under controlled conditions.

Document environmental conditions: moisture, temperature, and exposure that could alter corrosion, lubricants, or biological evidence on lock surfaces.

Comparison standards must be collected with the same care as questioned items and labeled as knowns; keep questioned and known items physically separate.

Storage: controlled humidity, labeled shelving, and access logs; return items to the same seal and container after examination.

Report structure: purpose and authority, items examined, methods and standards used, observations, interpretations, opinions, limitations, and signature with date.

Opinion language tiers: 'identified as', 'consistent with', 'cannot be excluded', and 'inconclusive'; each tier carries a defined meaning that must match the evidence.

Every conclusion must trace to a documented observation and a cited method; unsupported conclusions are the most common basis for exclusion or impeachment.

Include limitations: sample size, absence of known exemplars, condition of evidence, and any examination not performed.

Testimony preparation: review the case file, anticipate cross-examination on error rates, bias controls, and alternative explanations, and prepare demonstratives.

Qualification voir dire: present education, training hours, casework, proficiency testing, publications, and prior testimony accurately.

Demonstratives must be accurate and not misleading; label diagrams clearly and ensure they reflect the actual evidence scale and orientation.

Courtroom conduct: answer only the question asked, avoid advocacy language, concede limits honestly, and distinguish observation from opinion.

Daubert factors: testability, peer review and publication, known or potential error rate, standards controlling technique, and general acceptance.

Frye standard: the method must be generally accepted in the relevant scientific community; some jurisdictions still apply it.

Federal Rules of Evidence 702 governs expert testimony: qualified by knowledge, skill, experience, training, or education, and helpful to the trier of fact.

Standards of care for locksmiths include proper key control, correct hardware installation per manufacturer instructions, and documentation of work performed.

Building and life-safety codes: egress doors must allow exit without a key or special knowledge; record whether hardware complies with applicable code.

Licensing and regulation vary by jurisdiction; verify state or local licensing, bonding, and consumer protection requirements for locksmith work.

Legal concepts to distinguish: chain of custody, authentication (FRE 901), best evidence rule, and privilege; each affects admissibility differently.

Negligence elements in locksmith claims: duty, breach of standard of care, causation, and damages; expert testimony addresses duty and breach.