CDI Rebuttal Lawyers for Air Force Commander Directed Investigations – CDI Rebuttals
Gonzalez & Waddington are CDI rebuttal lawyers who represent Airmen, officers, NCOs, and service members facing substantiated findings from Air Force Commander Directed Investigations under DAFMAN 1-101. A CDI rebuttal lawyer prepares the written response to adverse investigation findings, challenging flawed conclusions, incomplete evidence, biased witness statements, procedural errors, and unfair command recommendations.
Because commanders act on CDI findings through separate adverse actions — including a Letter of Reprimand, an Unfavorable Information File entry, a referral performance report, demotion, discharge, security clearance action, or court-martial referral — the rebuttal attacks the findings at the moment of maximum leverage: after the report is written but before the commander’s decision becomes final and enters your record. Gonzalez & Waddington prepare CDI rebuttals designed to fight the findings before the command treats them as established fact.
Adverse actions built on CDI findings carry brutally short response windows — an active-duty Air Force LOR can allow as few as three duty days. If a CDI has been initiated against you, the rebuttal has to be substantially built before the notification memo ever arrives. Waiting for the letter means starting the fight already behind.
What a Command Directed Investigation Is — and What It Is Not
A command directed investigation is a commander’s internal fact-finding tool, governed in the Air Force and Space Force by DAFMAN 1-101, Commander Directed Investigations. When a commander receives an allegation — misconduct, a hostile work environment, misuse of resources, a leadership complaint — that does not warrant referral to OSI or the IG, the commander appoints an investigating officer from within or near the unit, frames the allegations, and directs an investigation. The IO gathers testimony and documents, weighs each allegation against a preponderance-of-the-evidence standard, and returns a report concluding that each allegation is substantiated or not substantiated.
A CDI is not a criminal investigation, not an IG investigation, and not a court proceeding — and each of those distinctions removes a layer of protection you would otherwise have. There is no neutral investigator: the IO is appointed by, reports to, and is rated within the same command structure that ordered the investigation. There are no rules of evidence, no right to attend witness interviews, no right to cross-examine anyone, and no right to see the evidence while the investigation runs. The standard of proof is the lowest the system uses. For the subject, the first full view of the case is usually the moment the substantiated findings — already written, already legally reviewed — arrive attached to a proposed adverse action.
That structure is exactly why the rebuttal matters so much. It is the first and often only point in the entire CDI life cycle where the subject gets to put evidence and argument in front of the decision-maker. Everything before it happened without you in the room.
The CDI Life Cycle Under DAFMAN 1-101
Understanding the sequence tells you where the pressure points are. It begins with initiation: the commander determines an inquiry is warranted, frames the specific allegations in writing, and appoints an IO by memorandum. That framing document matters more than almost anyone realizes — it defines the lawful scope of the investigation, and findings that wander beyond it are structurally vulnerable. Next comes the investigation itself: witness interviews, document collection, and in better-run CDIs, sworn statements; in worse-run ones, the IO’s after-the-fact summaries of phone calls.
The IO then drafts a report of investigation applying the preponderance standard to each framed allegation, and the report goes through legal review — a judge advocate assesses legal sufficiency before the commander acts on it. The commander then decides what to do with substantiated findings, and this is where the CDI converts into consequences: a Letter of Counseling, Admonishment, or Reprimand under DAFI 36-2907; an Unfavorable Information File entry; control roster placement; a referral EPB or OPB; removal from a duty position or special status; demotion action for enlisted members; or administrative discharge processing. Your formal opportunity to respond attaches to whichever action the commander proposes — and your response goes to the very commander who ordered the investigation in the first place.
Finally, if the action is imposed, the record consequences begin: filing, ratings, promotion visibility, and clearance reporting. Each later stage has its own appeal mechanics, but each is harder and slower than the one before it. The rebuttal window — post-report, pre-final-decision — is the cheapest and most effective place the case will ever be fought.
Why the Rebuttal Goes to the Commander Who Ordered the Investigation — and How That Changes Strategy
In courts-martial, the defense argues to a neutral judge and panel. In a CDI rebuttal, you are arguing to the commander who initiated the investigation, framed the allegations, chose the IO, and has now read a report substantiating what they suspected. Pretending that audience does not shape strategy is how rebuttals fail. Pure defiance — the response that calls the investigation a witch hunt and the commander biased — asks a decision-maker to publicly declare their own process corrupt. It almost never works, even when it is true.
What works is giving the commander a legally defensible, face-saving path to a better outcome. That means the rebuttal’s engine is forensic, not emotional: a demonstration, built from the report’s own contents and new evidence, that specific findings do not survive scrutiny — paired with a specific, reasonable request the commander can grant while still looking like a commander who takes allegations seriously. Withdraw the LOR and substitute counseling. Decline UIF filing. Return the investigation for the three interviews that were never conducted. Downgrade the proposed action to match what the evidence actually supports.
There is also a second audience, and sophisticated rebuttals are written for it: the staff judge advocate’s office. Commanders act on legal advice, and a rebuttal that raises genuine legal-sufficiency problems — scope violations, unsworn summarized evidence, ignored exculpatory material, findings unsupported by the record — puts the reviewing JAG in the position of advising that the action carries risk. In practice, changing the legal advisor’s risk assessment changes the commander’s decision more reliably than any appeal to sympathy.
Where CDI Reports Break: The Recurring Defects We Exploit
CDI investigating officers are line officers and senior NCOs doing this work as an additional duty, usually for the first time, on a short suspense, with a template and a briefing as their training. Their reports fail in patterns so consistent we check for them in order. Allegation framing that guarantees substantiation: allegations written so broadly (‘failed to maintain a professional environment’) that any friction in the unit substantiates them — the rebuttal forces the finding back to a specific standard, a specific act, and a specific date. Scope creep: findings on matters the appointment memorandum never framed, which are challengeable regardless of their content.
Evidence by summary: the IO’s paraphrase of what witnesses ‘indicated,’ unsworn and unverifiable, standing in for actual statements — a defect that matters enormously at legal review. Witness selection bias: every colleague of the complainant interviewed, the subject’s witnesses skipped, or interviewed and omitted from the report. Credibility by default: the complaint treated as the baseline account that all later evidence must overcome, with no analysis of motive, corroboration, or inconsistency — even when the complainant has documented reasons to fabricate. Timeline and documentary failure: sequences that collapse against duty schedules, leave records, badge data, and message time-stamps the IO never pulled. And uncured legal-review issues: deficiencies the reviewing JAG flagged that the IO papered over rather than fixed.
Every defect we find becomes a numbered argument tied to an exhibit. The difference between ‘the investigation was one-sided’ and ‘the IO interviewed six witnesses suggested by the complainant and none of the four identified by the subject, whose sworn declarations are attached at Exhibits D through G’ is the difference between a rebuttal that is filed and a rebuttal that changes the decision.
Building the Rebuttal Package: Our Method
Step one is always the record. We demand the releasable report of investigation, the appointment letter and framed allegations, every exhibit, and the legal review — through the notification process itself and, where the command resists, through formal records requests and objection on the record to action taken on evidence the member has not been permitted to see. You cannot rebut a report you have not read, and commands sometimes count on members responding blind.
Step two is the findings map: each substantiated allegation charted against its actual evidentiary support. Step three is independent evidence development — the investigation the IO should have conducted. We interview the skipped witnesses and commission sworn declarations. We collect the documents the report references but does not contain: the message threads, the policy letters and commander’s guidance the member was actually operating under, the manning documents, the performance record. In technical matters — resource misuse, financial allegations, digital conduct — we engage experts whose analysis reframes the raw material.
Step four is drafting: a numbered response answering each substantiated finding specifically, proving each defect from the record, presenting the affirmative evidence as organized exhibits, addressing extenuation and mitigation honestly where facts are established, and closing with the specific tiered request. Step five is the two-audience edit: every line tested against how it reads to the commander and to the JAG — and against how it will read to a discharge board, a promotion propriety review, or a clearance adjudicator years from now, because rebuttal language gets quoted for the rest of a career.
The Consequences a CDI Rebuttal Is Actually Fighting
The report itself is an internal document; its offspring are what follow you. A substantiated CDI typically produces one or more of the following, each with its own stakes. The LOC/LOA/LOR ladder under DAFI 36-2907 — and with an LOR, the separate commander decision whether to establish or file it in an Unfavorable Information File, which extends its visibility for years and reaches promotion and retention decisions. Control roster placement, which suspends favorable actions and marks the member for observation. Referral performance reports — the EPB or OPB that narrates the findings into your evaluation record, where every promotion board will read them.
For enlisted members: demotion action and, at the severe end, administrative discharge processing, where the CDI becomes the evidentiary core of the separation package. For officers: promotion propriety actions, removal from command or upgraded responsibility, and show-cause processing. For everyone in a clearance-sensitive billet: security incident reporting, because substantiated findings implicating honesty, alcohol, finances, or rule-following map directly onto the national security adjudicative guidelines — and clearance adjudication often moves faster than the underlying adverse action. And for members near reenlistment or high-year-of-tenure decisions: the quiet consequences, where nothing formal ‘happens’ except that a career stops advancing.
A rebuttal that narrows the findings narrows every one of these channels simultaneously. That is the leverage: one document, filed at the right moment, that shrinks the entire downstream exposure at once.
Special Situations: Tentative Conclusion Letters, Senior Leaders, and Space Force Cases
Some Air Force processes provide the member notice of tentative or proposed conclusions before finalization — a tentative conclusion letter or equivalent proposed-action notice. When you receive one, you are being shown the command’s hand before it is final, and the response to that letter is the rebuttal that shapes the outcome. Our Air Force CDI rebuttal page covers these letters in depth; the short version is that they should be treated with the same urgency and rigor as a final adverse action, because the record you build in response is the record the final decision rests on.
Senior leader and command-level cases — squadron command and above, chiefs, and senior staff — run hotter and faster: higher-headquarters visibility, IG cross-currents, and relief decisions often forming in parallel with the CDI itself. In these cases the rebuttal is frequently fighting for the career narrative as much as the finding, and collateral management (evaluations, clearance, follow-on assignment) begins immediately rather than after the decision. Space Force Guardians face the identical framework — DAFMAN 1-101 is a Department of the Air Force publication governing both services — with the added dimension that many Guardian billets are clearance- and mission-critical, making the security dimension of any substantiated finding immediate.
Guard and Reserve members face their own wrinkle: CDI consequences interact with continued participation, AGR status, and dual-status employment, so the rebuttal strategy has to protect the civilian-technician or AGR position alongside the military record.
The Mistakes That Sink CDI Rebuttals
The failure modes are predictable, and most are self-inflicted in the first week. Responding before obtaining the releasable record — rebutting from memory while the command holds the file. Making a statement to the IO, unprepared and unadvised, that becomes the report’s centerpiece; if you are still in the investigation phase, read our CDI defense page before you say anything. Admitting broadly to ‘mistakes’ while disputing specifics — reviewers treat the admission as covering everything. Attacking the commander or complainant personally instead of attacking the evidence forensically. Submitting an emotional narrative instead of a numbered, exhibit-supported response.
Two more deserve emphasis. Blowing the timeline: the response window is short by design, and the correct day-one moves are a written acknowledgment, a written extension request, and silence about the underlying facts — not a rushed response and not an angry email to the chain of command. And treating a ‘minor’ proposed action as not worth fighting: today’s unrebutted LOA is quoted in next year’s LOR as proof of a pattern, and the year after that in the discharge package as proof that lesser measures failed. Commands build progressive-discipline records deliberately. The cheapest fight in this entire system is the first one.
Your First 72 Hours After CDI Notification
Whether the notice is an interview request, a tentative conclusion letter, or a proposed LOR with the CDI attached, the opening moves are the same. Day one: acknowledge receipt in writing — it concedes nothing — and submit a written extension request the same day; with three-duty-day windows, the extension request is not a courtesy, it is the strategy. Also day one: go silent on the substance. No explanatory emails to the commander, no first sergeant hallway conversations, no messages to coworkers about what they saw. Informal statements are quoted in these packages constantly, and contacting witnesses the wrong way invites an obstruction narrative on top of the original allegation.
Within 72 hours: get everything you were served to counsel, page for page, including the memo with the stated suspense; begin lawful evidence preservation — texts, emails, schedules, performance documents — before access changes or a PCS puts it beyond reach; list every witness who can speak to the actual facts so sworn declarations start moving immediately; and inventory your collateral exposure — clearance, PRP or special-duty status, pending EPB/OPB, reenlistment or HYT dates — because those clocks run in parallel and some of them run faster.
Then make the theory decision with counsel: contest the findings, mitigate the established facts, or the tiered combination. That single decision governs every sentence that follows, and it is the decision members most often get wrong when they draft alone on day two of three.
After the Commander Decides: The Appeal Map
If the rebuttal does not fully carry the day, the fight continues on defined tracks, and the rebuttal you filed becomes the foundation of each. An LOR that stands can still be kept out of the UIF, and an established UIF can be attacked through early-removal requests as time and performance accumulate. A referral EPB or OPB carries its own comment window — short, and easily missed while focused on the LOR — and, after the fact, the evaluation-appeal process can correct reports that are inaccurate or unjust. Promotion propriety actions and control-roster placements have their own response opportunities, each of which should deploy the same coordinated factual record rather than a new improvised one.
Beyond the command sits the Air Force Board for Correction of Military Records, with broad equitable authority to remove reprimands, strike UIF entries, void referral reports, and correct the record for current members, veterans, and retirees — and, on the clearance track, the incident-report, SOR-response, and hearing process where the narrowed findings your rebuttal achieved pay dividends. The pattern across every one of these forums is identical: the member who contested the CDI with evidence at the first opportunity arrives with a developed record and a documented history of good-faith challenge; the member who stayed silent arrives asking a board to believe a story told for the first time, years late. Which member you are is decided now, in the rebuttal window.
Why Gonzalez & Waddington for CDI Defense
Gonzalez & Waddington defends Airmen and Guardians in CDI matters worldwide — CONUS, Europe, the Pacific, and deployed locations — and has for more than two decades. Michael Waddington is a former military defense counsel who ran a Trial Defense Service branch office and served as a Chief of Military Justice; he has been on the government side of command investigations and knows precisely what the legal reviewer advising your commander is trained to look for. Alexandra González-Waddington co-tries every firm case and has spent her career dismantling flawed evidentiary records in the most serious cases the military justice system produces.
We handle the CDI as litigation: independent witness development, sworn declarations, expert analysis where the case needs it, aggressive pursuit of the releasable record, and a written product engineered for both the commander and the JAG reviewing it. And because CDI findings so often become tomorrow’s discharge board or clearance fight, we build every rebuttal as the foundation of the next forum. If a CDI has been initiated, or findings have been substantiated, call 1-800-921-8607 or text 954-799-4019 before you respond to anything — including the IO.
Consultations are confidential and worldwide: we regularly represent members at Ramstein, Aviano, Lakenheath, Kadena, Yokota, Osan, and every major CONUS installation, working across time zones so short suspenses are met wherever the notification memo finds you. When you call, have the notification documents and your suspense date at hand — the first conversation is about the clock, the record, and the specific relief worth asking for in your case. From there, the engagement moves at the speed the window demands: record demands out within a day, sworn declarations moving within two, and a rebuttal on the commander’s desk that reads like it was built by a trial team, because it was.
Frequently Asked Questions
What does 'substantiated' mean in a CDI?
It means the investigating officer concluded the allegation is more likely true than not — a preponderance of the evidence, the lowest standard the system uses. It is not a conviction and not proof beyond a reasonable doubt, and it is challengeable in your response to the proposed adverse action.
How long do I have to respond to CDI-based adverse action?
The notification memorandum states your window, and they are short: an active-duty Air Force LOR can allow as few as three duty days. Acknowledge receipt, request an extension in writing the same day, and begin building — ideally with counsel already engaged.
Can I see the CDI report before I respond?
You are generally entitled to the materials the commander relies on to take action against you, though releases are often redacted. Counsel demands the releasable record — report, exhibits, appointment letter, legal review — and objects on the record when action is proposed on evidence you have not been permitted to see.
Can a substantiated CDI finding be overturned?
Commanders decline to act on weak findings, downgrade proposed actions, and return investigations for further work when rebuttals expose real defects. Beyond the commander, remedies continue through UIF and evaluation appeals, promotion propriety responses, discharge boards, and the Air Force Board for Correction of Military Records.
Who conducts a CDI, and are they trained investigators?
An officer or senior NCO appointed by the commander — almost never a trained investigator. IOs work from a template on a short suspense as an additional duty, which is why CDI reports so consistently contain the scope, evidence, and credibility defects a rebuttal exploits.
Is a CDI the same as an IG or OSI investigation?
No. OSI handles criminal matters, the IG handles complaints through the Inspector General system, and a CDI is the commander’s own administrative inquiry under DAFMAN 1-101. Matters migrate between channels, which is why anything you say in a CDI must be treated as evidence in all of them.
Do I have to give a statement to the CDI investigating officer?
If you are suspected of an offense under the UCMJ, you must be advised of your Article 31 rights and may remain silent. Even in purely administrative matters, your statement becomes the report’s centerpiece. Whether to speak, and precisely what to say in a prepared written statement, is a decision to make with counsel before the interview — not during it.
Will a substantiated CDI affect my security clearance?
It can, and often quickly. Findings implicating honesty, alcohol, finances, or rule-following are routinely reported as security incidents and adjudicated under the national security guidelines regardless of what the commander ultimately imposes. Narrowing the findings narrows the clearance exposure.
Does a CDI apply to Space Force Guardians and Reserve members?
Yes. DAFMAN 1-101 governs commander directed investigations across the Air Force and Space Force, active and reserve components. Guard and Reserve cases add employment dimensions — AGR status and dual-status technician positions — that the rebuttal strategy must protect alongside the military record.
What is a tentative conclusion letter and how should I respond?
Some Air Force processes give members notice of tentative or proposed conclusions before a final decision. Treat it as the main event: your response to that letter is the rebuttal that shapes the outcome, and it deserves the full evidentiary build — record demand, sworn declarations, numbered response, specific request. Call 1-800-921-8607 for a confidential review before you reply.
