Military Administrative Defense • Gonzalez & Waddington

Air Force Commander-Directed Investigation Lawyer

By Michael Waddington, former Army JAG and civilian military defense lawyer • Reviewed for publication by Alexandra Gonzalez-Waddington • Updated September 2, 2026

What is an Air Force Commander-Directed Investigation?

DAFMAN 1-101 describes a CDI as a command tool used to gather, analyze, and record information about matters under the commander’s responsibility. It can address systemic or procedural problems, individual conduct, leadership, abuse of authority, standards of conduct, misuse of resources, workplace issues, and other matters for which no more appropriate channel controls. The initiating commander appoints an investigating officer in writing and defines the allegations or issues.^[1]

The IO interviews witnesses, collects documents, assesses credibility and corroboration, applies the governing standard, and prepares a report of investigation. A legal review examines procedure, evidentiary support, findings, conclusions, and material errors. The appointing commander then decides whether to approve the report and what action should follow.

The “administrative” label should not be confused with “minor.” CDI findings can support a Letter of Reprimand, Unfavorable Information File, control-roster decision, adverse evaluation, removal from position, loss of command, security-clearance reporting, administrative separation, officer Board of Inquiry, or a referral for punitive action. The same report may be read by multiple decision-makers after the original commander has moved on.

When is a CDI the right investigative tool—and when is it not?

DAFMAN 1-101 directs commanders to consider whether another investigative channel is more appropriate. Matters likely to result in a court-martial or other judicial action would ordinarily be referred to AFOSI or Security Forces. Reprisal and restriction allegations under the Military Whistleblower Protection Act are assigned to inspector-general channels rather than a CDI. Sexual-assault allegations trigger specialized reporting and AFOSI involvement. Commanders should consult their staff judge advocate and, where appropriate, the IG before selecting the process.^[1]

This matters to the defense for two reasons. First, the wrong process can distort the investigation. An IO appointed for a quick administrative inquiry may lack the training, independence, or authority needed for a complex criminal allegation. Second, an allegation can migrate. A CDI can identify facts that are later referred to OSI, Security Forces, an IG, equal-opportunity personnel, a clearance office, or prosecutors.

A lawyer should identify whether the command is using a CDI to answer a proper command question or whether the case belongs under another mandatory process. That does not mean every procedural mismatch invalidates the report. It means the choice of process may affect warnings, expertise, evidence collection, confidentiality, and the available remedies.

Who can order a CDI?

Under DAFMAN 1-101, commanders with appropriate command authority, certain Air Staff or Space Staff leaders, and qualified civilian leaders of designated units may initiate a CDI. The order is ordinarily documented in an appointment letter that authorizes the IO, defines the issue, sets expectations, and establishes a suspense.^[1]

Obtain the appointment letter if it is available to you. It can reveal:

• the exact allegation or question;
• the period and unit involved;
• the governing law, regulation, policy, or standard;
• whether recommendations were requested;
• the IO’s authority to obtain records or technical assistance;
• the anticipated completion date; and
• whether the scope later expanded.

An investigation that drifts outside its assigned scope may require clarification or supplemental appointment authority. Counsel can raise that issue without turning every deviation into an accusation of bad faith.

How does a CDI proceed?

Although cases vary, the process generally includes:

1. Appointment. The commander appoints an IO and defines the issues.
2. Planning. The IO identifies witnesses, evidence, legal standards, technical assistance, and a timeline.
3. Collection. The IO interviews personnel and gathers emails, messages, records, policies, photographs, reports, and other evidence.
4. Analysis. The IO evaluates credibility, corroboration, clarity, and whether each allegation is supported by a preponderance.
5. Report. The IO writes findings and conclusions, and recommendations if requested.
6. Legal review. A reviewing attorney assesses whether the process and conclusions are legally sufficient.
7. Tentative conclusion process. Before approval of a report containing substantiated findings, the subject or suspect receives a tentative conclusion letter with relevant material and an opportunity to respond.
8. Command action. The appointing authority reviews the file, response, and legal review, then approves or changes the result and decides what administrative or disciplinary action to take.

DAFMAN 1-101 emphasizes that the IO’s analysis must show more than a list of facts and a conclusion. The report should explain how evidence was assessed, including credibility, corroboration, and contradictions. When evidence cannot be reconciled and does not meet the preponderance threshold, the allegation should not be substantiated.^[1]

What does “preponderance of the evidence” mean in a CDI?

The standard asks whether the greater weight of credible evidence makes the allegation more likely than not. It is lower than the criminal burden. But it still requires evidence and reasoned analysis. Rank, confidence, repetition, or accusation alone should not replace credibility assessment.

A defense lawyer tests the report’s expected reasoning before it is finalized:

• Does the alleged conduct actually violate the cited standard?
• Was the correct version of the instruction applied?
• Does the witness have personal knowledge?
• Is the account corroborated by documents, timestamps, or other witnesses?
• Were contradictory facts investigated or ignored?
• Does a motive, bias, relationship, or command dispute affect reliability?
• Were relevant extenuating or mitigating facts considered?
• Is the conclusion broader than the evidence?

The strongest defense does not simply demand that the IO believe the client. It gives the IO and legal reviewer objective reasons to find that the allegation was not proved or must be narrowed.

Am I a witness, subject, or suspect?

A witness is interviewed for information. A subject is a person whose conduct falls within the inquiry. A suspect is a person whom the IO believes or reasonably should believe committed a UCMJ or other criminal offense. DAFMAN 1-101 expressly states that subject status by itself does not automatically require a rights advisement; reasonable criminal suspicion does.^[1]

Status can change during the interview. If a witness’s answers create suspicion, the manual directs the IO to stop, consult the legal advisor, and address rights before resuming as appropriate. Airmen and Guardians should therefore pay attention not only to the label but to the direction of the questions.

Article 31(b), UCMJ, requires warnings before a person subject to the UCMJ interrogates or requests a statement from an accused or suspected service member. The warning covers the nature of the accusation, the right not to make a statement, and the potential use of the statement.^[2]

Can my lawyer attend the CDI interview?

DAFMAN 1-101 distinguishes suspects from witnesses and subjects. It provides that a suspect may have counsel present, although counsel does not answer for the client or take over the interview. A witness or subject may consult an attorney but is not normally permitted to have the attorney physically present during the CDI interview.^[1]

That limitation does not make legal advice irrelevant. Before the interview, counsel can clarify status, review possible standards, identify self-incrimination concerns, prepare an evidence-backed chronology, and decide whether the client should answer. Counsel can also help document what occurred and determine whether a follow-up submission is advisable.

Read the decision page: Should I Hire a Lawyer for an Air Force CDI?

Should I make a statement in a CDI?

There is no automatic answer. A statement may help when a specific, objective fact can correct an error and criminal exposure is limited. It may be dangerous when the allegation is vague, the IO possesses unknown documents, there are parallel OSI or command actions, or the client’s words could establish knowledge, intent, dishonesty, or another element.

Do not speak merely to appear cooperative. Cooperation can include timely appearance, preservation, lawful compliance, and providing non-incriminating records through counsel. Waiving rights is a separate decision.

If you do speak:

• listen to the complete question;
• ask for clarification when needed;
• do not speculate about another person’s motive;
• do not guess about dates or wording;
• separate personal knowledge from what others told you;
• identify records that would provide a more accurate answer;
• review any written statement before signing;
• correct inaccuracies; and
• request a copy when permitted.

What can a civilian CDI lawyer do while the investigation is open?

Investigation-stage representation can include:

1. Scope analysis. Review the appointment, allegations, governing instructions, and whether another channel should control.
2. Rights advice. Evaluate subject/suspect status, Article 31, orders to appear, and requests for statements or records.
3. Evidence preservation. Secure full message threads, emails, schedules, access data, evaluations, policy documents, and technical records.
4. Witness development. Identify witnesses with firsthand knowledge and determine whether declarations or targeted interviews are appropriate.
5. Policy analysis. Compare the alleged conduct to the exact standard, elements, definitions, and version in effect.
6. Interview preparation. Decide whether to answer, invoke, or use a controlled written submission.
7. Technical support. Use financial, cyber, aviation, medical, safety, or digital expertise when the underlying issue requires it.
8. Tentative-conclusion preparation. Organize the record so a response can be filed quickly if findings are substantiated.
9. Downstream coordination. Plan for LOR, UIF, evaluation, clearance, BOI, separation, Article 15, or court-martial consequences.

Counsel should not disclose every defense fact prematurely. Sometimes the IO needs a missing record. Sometimes the better course is to preserve it for the tentative-conclusion response. The choice depends on whether early disclosure is likely to correct the investigation or simply teach the government how to fill a gap.

What evidence is important in a CDI?

CDIs frequently involve workplace conduct and digital records. Relevant evidence may include:

• emails, Teams chats, text messages, and complete message chains;
• duty schedules, leave, TDY, travel, access, and training records;
• performance reports, feedback, awards, and prior counseling;
• applicable DAF instructions, local supplements, SOPs, policy memoranda, and command guidance;
• financial records, purchase authorizations, contracting documents, and government-card materials;
• maintenance, safety, flight, medical, security, or cyber logs;
• photographs, video, audio, call records, and meeting notes;
• witnesses who were present rather than people repeating office rumor; and
• evidence of operational context, manning, mission pressure, prior direction, or corrective action.

Preserve originals and metadata. Screenshots are useful for orientation but may omit context. Do not alter a file, coach witnesses, or ask anyone to delete information.

What is a tentative conclusion letter?

Before final approval of a CDI report containing substantiated findings, DAFMAN 1-101 calls for the appointing authority to provide the subject or suspect a tentative conclusion letter. The letter outlines the substantiated allegations and principal reasons, and it includes relevant redacted portions of the preliminary report and the subject’s testimony. The manual provides a response period of no more than two calendar weeks for relevant documentation or evidence not previously considered.^[1]

This response is not a generic character letter. It should identify the finding, the evidence relied upon, the missing or contradictory material, the governing standard, and the exact change requested. It may also present mitigation when the core conduct is not reasonably disputable. The response becomes part of the record considered before approval.

If you have received a tentative conclusion letter or substantiated findings, move to the firm’s existing Air Force CDI Rebuttal Lawyer resource.

What can happen after the CDI?

The commander may close the matter, direct corrective action, issue counseling or a reprimand, establish a UIF or control roster as authorized, remove the member from duties, refer an evaluation, initiate separation or a BOI, report information for clearance review, refer matters to OSI/Security Forces, or pursue UCMJ action. DAFMAN 1-101 states that CDI information may support administrative action and does not bar later court-martial charges or use by investigative agencies.^[1]

If the CDI leads to an LOR, current DAFI 36-2907 governs many Department of the Air Force adverse administrative actions and response procedures. Airmen and Guardians should read I Received a Military Letter of Reprimand—What Should I Do? and Should I Hire a Lawyer for a Military Letter of Reprimand?

Can I request reconsideration of a CDI?

DAFMAN 1-101 explains that mere disagreement with findings or command action is not enough. A reconsideration request should provide new and compelling information and specific reasons the prior resolution was invalid or inadequate. Requests begin with the initiating commander and may proceed to the next echelon. Other potential avenues may include the Air Force Board for Correction of Military Records or, in appropriate circumstances, Article 138 redress.^[1]

Reconsideration should be built like an appellate record: identify the exact finding, the new evidence or defect, why it was not previously resolved, and the requested correction. A general assertion that the investigation was unfair is unlikely to be enough.

Why Gonzalez & Waddington for Air Force and Space Force CDI defense?

Gonzalez & Waddington represents Airmen and Guardians in administrative and criminal investigations, LOR/UIF matters, Boards of Inquiry, administrative separation, clearance-related cases, and courts-martial worldwide. The firm approaches a CDI as the beginning of a record that may later control other decisions.

See the firm’s Command-Directed Investigation Defense hub for cross-service context.

Legal information notice: This page provides general educational information and is not legal advice for any particular person or case. Regulations, policies, deadlines, service practices, and available remedies can change. Reading this page or contacting the firm does not create an attorney-client relationship. Prior results do not guarantee a similar outcome.