# A-029

- **Artifact ID:** A-029
- **Status:** RETIRED
- **Public record:** https://record.cybersecurityhq.com/assumptions#A-029
- **Machine-record SHA-256:** `14c05e126da5f5549f5c8fce365ba8cfa3a3d6b5f01e15bb13d4292e7956cbdb`

## Complete structured record

```json
{
  "id": "A-029",
  "statement": "SaaS integration exposure is bilateral and bounded by the authorizing parties",
  "status": "RETIRED",
  "category": "Retired",
  "ledger_references": [],
  "retirement_date_bound": "2026-03-15",
  "retirement_rationale": "Retired in the registry when CHQ-P-2026-013 documented cross-registry propagation through portable developer identity and explicitly recorded A-029 as retired.",
  "supersession_pointer": "CHQ-P-2026-013",
  "related_positions": [
    "CHQ-P-2026-013"
  ],
  "retirement_evidence_state": "CONFIRMED",
  "retirement_audit": "COMPLIANT — supporting Position meets the ratified minimum evidence state."
}
```