Skip to main content
CybersecurityHQ Structural Conditions Board
Primary navigation
Issue 46 · as of Issue No. 46, 12 November 2026 (observation cutoff 9 November 2026; collection closed 9 November, 16:28 UTC) · Snapshot ea7de8184295

Correction: the evidence archive presented hashes of source addresses as content hashes on four exhibits

Every record in this file was ratified by the publisher on 2026-11-12 and is in force. The declared field gives the date the correction was first recorded.

id
CHQ-CORR-2026-019
class
CORRECTION
subtype
provenance
status
IN FORCE
authority
DM ratified 2026-11-12
effective
2026-11-12
published
2026-11-12
title
Correction: the evidence archive presented hashes of source addresses as content hashes on four exhibits
what was wrong
An archive status note of 27 October 2026 said that four archived exhibits carried content hashes computed at retrieval, with the document bytes not stored. That was false. No content hash was ever computed for any of the four.
what is true
Each stored value is the SHA-256 of the source address, confirmed on 29 October by recomputing the hash over each address and matching all four exactly. A hash of an address establishes the identity of the address and nothing about the document: not that it existed in a given form, not that a passage was present, not that it is unchanged. The four exhibits support rows on the Agent Authorization Boundary Failure and AI Agent Runtime Compromise conditions.
what changed
The four exhibits are relabelled as address hash only, content not retained. The 27 October note is superseded with its original text kept. A current status line records that four exhibits are held, no document bytes are retained and no content hash exists. The dates on the exhibits are retrieval dates and are not presented as capture or verification dates.
what did not change
No rating, Outlook, counted set or published text. The affected rows keep their stated grades. What is withdrawn is the claim of cryptographic evidence of their content.
control analysis
The first exhibit's own note described its value correctly as a placeholder; a later summary upgraded all four to content hashes. The error was an over-claim introduced by a summary written over a correctly hedged original. Capture of primary documents at admission had been declared as practice on 9 October and was not being done; that gap is disclosed, not closed, by this correction.
found by
An external adversarial review, verified by CHQ by recomputation before acceptance.