# A-019

- **Artifact ID:** A-019
- **Status:** ACTIVE
- **Public record:** https://record.cybersecurityhq.com/assumptions#A-019
- **Machine-record SHA-256:** `bad5fa53a6f3b5252478935d3e6f9a6268416afcd9741332113a77b188ab19a5`

## Complete structured record

```json
{
  "id": "A-019",
  "statement": "Disclosure timing is governed by detection capability, not regulatory obligation",
  "status": "ACTIVE",
  "category": "Under Pressure",
  "ledger_references": [
    "2026-07-24 — Two-year SEC materiality filing baseline (source: July 2026 securities reporting analysis): 29 mandatory materiality filings versus 50 voluntary disclosures over two years; five conversions from voluntary to mandatory. Counter-instance: one filing within four to six days of detection. The ratio of voluntary to mandatory filings at approximately 1.7:1 documents that organizational disclosure timing reflects institutional discretion rather than external regulatory cadence. The fast counter-instance is genuine evidence the assumption is not universally false; the dominant pattern documents that detection capability and organizational determination are the operative variables, not regulatory obligation alone."
  ],
  "evidence_count": 1,
  "last_updated": "2026-07-24",
  "related_positions": []
}
```