However, the defense lawyers said the filtered messages included significant and suspicious exchanges that appeared to relate to the seditious conspiracy case against their clients.

In one exchange, Miller and another agent discussed learning of defendant Zachary Rehl’s plan to take the case to trial, in part because they had reviewed messages between him and his attorney at the time, Jonathon Moseley. The defense lawyers said it appeared, on its face, to be a breach of attorney-client privilege.

The lawyers also cited several other exchanges they viewed as fishy: a message from one agent asking that his name be edited out of a report concerning a meeting with a confidential human source; an FBI agent’s opinion about the strength of the Proud Boys conspiracy case; and a message from an agent discussing an order to destroy 338 pieces of evidence in an unidentified case.

Defense attorneys said they should be permitted to grill Miller about each of these topics when the trial resumes this week. The hidden messages sparked an uproar on Thursday, when Nicholas Smith, attorney for defendant Ethan Nordean, began questioning Miller about them. Prosecutors objected and later indicated they believed there had been a “spill” of classified information in the messages — a claim the defense lawyers worried was a pretense to shut down their review. U.S. District Court Judge Timothy Kelly called the trial off for the day Friday to give the Justice Department and the defense a chance to clarify the issues.

In an 18-page filing Sunday, prosecutors went through each topic cited by the defense lawyers and suggested their claims lacked merit — and were not part of any attempt to withhold relevant evidence in the case.

The request for an edit to the report concerning the confidential human source, for example, was a “clerical” matter in which an agent who had been promoted to a supervisory role requested to be removed from the report because he was no longer handling the source — a request that was ultimately rescinded, prosecutors said. The comment from an agent about destroying evidence pertained to an unrelated “20-year-old multi codefendant trial” that had concluded long ago, the Justice Department attorneys said.

“As the Court knows, disposal of evidence is a routine part of the lifecycle of every criminal case,” the prosecutors wrote.

Prosecutors also dismissed the notion that Miller and other agents had accessed privileged attorney-client information.

“She did no such thing,” they argued, “both because any privilege was waived and, in any event, even assuming … that the email to which the other agent was referring contained privileged information, no privileged information was passed Special Agent Miller.”

The exchange between Rehl and his attorney that the agents discussed was sent between Rehl and Moseley, his former attorney, who has since been disbarred, through a jailhouse email system. That system explicitly notifies users that it is monitored and that emails between an attorney and client will “not be treated as privileged.” Prisoners are supposed to use special legal mail procedures, legal phone calls or in-person meetings to communicate confidentially with their lawyers.

“Rehl waived any privilege by knowingly using FDC-Philadelphia’s monitored email system to communicate with his attorney,” prosecutors contended.

Prosecutors also rejected efforts by defense lawyers to introduce a message from an FBI agent suggesting he harbored doubts about the strength of the conspiracy evidence in the Proud Boys case. Typically, such agent opinions are excluded, and in any case, they say Miller contradicted the doubting agent’s comment, saying: “No we can. We DEF can now.”

Kelly will decide on Monday whether to permit the attorneys for Nordean, Rehl and their three co-defendants — Enrique Tarrio, Dominic Pezzola and Joseph Biggs — to ask Miller about these topics. Prosecutors contended on Sunday that their unsuccessfully implemented decision to withhold the messages — even ones that related to the Proud Boys case — was proper. Precedents and laws, they said, required the government to turn over only materials connected to what Miller testified about on the stand, not every statement she made about the Proud Boys case in general.

Miller testified last week, after the furor erupted, that FBI headquarters compiled her messages for her, culling them from a secret-level classified system. She filtered out any messages sent from other agents and then manually removed messages she viewed as not subject to disclosure, including many about other cases. But when prosecutors packaged up the remaining messages, they appear to not have realized the filtered messages from other agents were left in the spreadsheet as “hidden.”

Assistant U.S. Attorney Jocelyn Ballantine, the supervising prosecutor on the case, told the court on Friday that the Justice Department was concerned that the hidden messages contained potential classified information, since they were drawn from the secret-level system and not fully vetted. Ballantine, in particular, was concerned that the message pertaining to destroying evidence was sent by an agent involved in “covert” activity and could reference classified information.

It’s unclear whether defense lawyers will be satisfied by the government’s responses. They’ve previously raised alarms that prosecutors would use the pretense of “classified” information to claw back damaging evidence. Prosecutors indicated on Sunday that they had removed just 80 rows of “classified or sensitive” messages from a production of nearly 12,000 rows. In addition, they suggested they had provided additional messages to help contextualize the ones cited by the defense.

Smith, one of the defense lawyers, indicated in a Sunday filing that the government had also deleted about 6,000 rows of messages it said were blank, leaving just over 5,000 for the defense to review. And he said he had inquired with prosecutors to clarify how many of the 80 substantive rows of removed messages were classified and how many were dubbed “sensitive” but not classified.

Smith said he should be allowed to cross-examine Miller on her handling of the messages in part because of her answers to a brief set of questions about them on Thursday, when she indicated that she hadn’t removed or filtered out relevant materials.

“Whether the agent gave truthful testimony about her legal obligations related to her work on this case is patently a matter of credibility,” Smith wrote.

Though cross-examination typically relates only to the substance of a witness’s direct testimony, Smith pointed out that he was also permitted to raise questions about a witness’ credibility, which he said made the handling of those messages fair game for questioning.

Prosecutors said that if the defense lawyers were allowed to question her at all about the unsuccessfully withheld messages — a step the government largely opposes — it should come during the defense’s case, set to begin within the next two weeks, not on cross-examination during the government’s case.

“The topics in question are miles outside the scope of Agent Miller’s direct testimony,” the prosecutors argued.