Leaked documents expose Khamenei's secret deadly blueprint for crushing Iran protests

Leaked top-secret Iranian regime documents, approved by Supreme Leader Khamenei and reviewed by outside groups, lay out a coordinated security plan that shifts command to the IRGC in severe unrest, authorizes lethal force, extensive surveillance and ordered internet shutdowns; the guidelines were used to crush January 2026 protests that followed soaring inflation and a currency collapse. Human rights groups report at least 6,854 killed with thousands under investigation, while the files also detail a 2024 IRGC ‘Comprehensive Security Plan of Tehran’ targeting opposition figures for monitoring and repression, heightening risks to domestic stability and potential spillovers to regional energy and financial markets.

Analysis

Market structure: Near-term winners are upstream energy majors (XOM, CVX, COP) and defense primes (LMT, RTX, GD) as a regional security premium lifts oil and defense budgets; losers are EM equities (EEM), regional banks and airlines exposed to Middle East routes. A sustained 0.5–1.0 mb/d risk to supply would mechanically add $5–15/bbl to Brent, shifting pricing power to producers and tankers while compressing travel/leisure margins. Cross-asset: expect a 10–50bp downward move in core sovereign yields (flight to safety), a 3–7% rise in gold (GLD) and elevated oil/FX vol for 30–90 days.

Risk assessment: Tail risks include a military escalation that removes 1–2 mb/d for months (low probability, high impact — Brent +$30+), major cyber retaliation disrupting shipping/ports, or broader sanctions contagion hitting commodity corridors. Immediate (days): volatility spikes and risk premia; short-term (weeks–months): oil/cyber/defense repricing; long-term (quarters–years): higher baseline defense and cyber spend by NATO/GCC. Hidden dependencies include marine insurance/BDI freight rates and refinery throughput re-routes that can amplify downstream inflation.

Trade implications: Tactical plays favor defined-risk long oil exposure (3-month Brent call spreads 5–10% OTM) and 6–12 month equity exposure in XOM/CVX (size 1–3% each). Add 1–2% core positions in LMT/RTX for 6–24 months and 1% in PANW/FTNT for 12–36 months to capture cyber spend. Reduce EM sovereign/corporate credit and EEM equity exposure by 3–5% and buy 1–2% GLD as tail hedges; use options to cap downside.

Contrarian angles: Consensus may overstate Iran’s ability to choke global oil because sanctions already limit Iranian exports; therefore avoid outright multi-month long single-stock energy bets without cost-cap. If Brent fails to breach $95 within 30 days, trim energy exposure by 30–50%. Historical parallels (2019–2020 Iran flare-ups) show quick mean reversion; favor spreads and capped-loss structures rather than naked directional exposure.

Key Decisions for Investors

• Establish a 2% portfolio position in Exxon Mobil (XOM) and a 1.5% position in Chevron (CVX) for a 6–12 month horizon; add only if Brent > $85 or Brent call-spread cost <2.5% of notional.
• Buy a 3-month Brent call spread (5–10% OTM) sized to ~1–2% of portfolio notional to capture a $5–15/bbl risk premium while capping cost; if Brent rises >$20 in 7 days, roll to a longer-dated 6-month spread and increase size to 2–3%.
• Reduce EM equity allocation (EEM) by 3–5% and reallocate to 1–2% GLD and 1–2% in defense names (split LMT/RTX) for 6–24 months; trim energy/defense if Brent < $75 for 30 consecutive days.
• Initiate a 1% conviction position in Palo Alto Networks (PANW) or Fortinet (FTNT) for 12–36 months to capture increased government/corporate cyber spend; use buying-in-tranches over 60 days to manage headline risk.