# CHQ-SC-2026-010

- **Artifact ID:** CHQ-SC-2026-010
- **Status:** RATIFIED
- **Public record:** https://record.cybersecurityhq.com/conditions/chq-sc-2026-010
- **Machine-record SHA-256:** `59bd5ee7b84fdb8e4252952fb4dd95854824e1ae531b0f2731d797392ed3d903`

## Complete structured record

```json
{
  "id": "CHQ-SC-2026-010",
  "name": "Vendor Risk-Signal Reliability",
  "domain": "Vulnerability Operations",
  "status": "RATIFIED",
  "persistence": "EMERGING",
  "first_observed": "2026-06",
  "reinforcement": {
    "date": "2026-09-22",
    "evidence": "CHQ-SM-2026-017",
    "basis": "The memorandum records the de-escalation evidence and the reset-era baseline for this condition."
  },
  "definition": "Vendor-issued risk signals (exploitation-likelihood ratings, advisory posture and exploitation flags) are an unreliable prioritization input when a vendor assessment is contradicted by subsequent confirmed exploitation. The condition is measured on a ledger of vendor assessment events under CHQ-UNIT-2026-010: one documented vendor statement about the security state of one product at one time. A reversal is an assessment event later contradicted by documented evidence. A vindication is an assessment event that demonstrably precedes federal exploitation confirmation by a dated interval. The ledger records both at equal discipline, and the rating follows the balance.",
  "linked_positions": [
    "CHQ-P-2026-012"
  ],
  "linked_evidence": [
    "CHQ-SM-2026-017"
  ],
  "linked_assumptions": [
    "A-027"
  ],
  "linked_constraints": [
    "CHQ-ASC-2026-002",
    "CHQ-ASC-2026-005"
  ],
  "evidence_count": 9,
  "last_reinforced": "2026-09-22",
  "falsification_condition": "Retirement criteria are declared by the Decision Maker before first use and are not written at need (CHQ-SS-FORMAT-2026-001-A1). Until declared, the condition carries its published re-escalation trigger only: three new documented reversals occurring after the 27 August 2026 de-escalation.",
  "rating": "EMERGING",
  "outlook": "Receding",
  "watch": "none",
  "escalation_criterion": "Three new documented reversals after the 27 Aug de-escalation",
  "deescalation_criterion": "Retirement criteria declared before first use (not yet declared)",
  "rating_as_of": "2026-09-22",
  "rating_source": "Structural Condition Report Issue 39",
  "next_review": "2026-09-29"
}
```