# Correction: the CVE record for a catalogued identifier was published before the Issue No. 45 artifact was attested, not after it

- **Artifact ID:** CHQ-CORR-2026-029
- **Status:** IN FORCE
- **Public record:** https://record.cybersecurityhq.com/corrections/chq-corr-2026-029
- **Machine-record SHA-256:** `4fb35a4fb2e294c015b4455fc2a2bc01cf5381a35ce4644f7f8a4dba06b5baa5`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-029",
  "class": "CORRECTION",
  "subtype": "editorial",
  "status": "IN FORCE",
  "authority": "DM ratified 2026-11-12",
  "effective": "2026-11-12",
  "published": "2026-11-12",
  "title": "Correction: the CVE record for a catalogued identifier was published before the Issue No. 45 artifact was attested, not after it",
  "what_was_wrong": "A note of 4 November 2026 on SN-2026-10-31-01 said that both the CVE record and the agency's enrichment record for CVE-2026-118527 post-date the Issue No. 45 publication artifact.",
  "what_is_true": "The CVE record was published on 3 November at 14:53 UTC, thirteen minutes after CHQ's last check and 28 minutes before the artifact was attested at 15:21 UTC. Only the enrichment record, at 15:32 UTC, post-dates the attestation. Both post-date the 2 November cutoff.",
  "what_changed": "The note keeps its original wording with the correction appended. The Issue No. 45 phrase that no record existed at every check through 3 November is accurate for the checks made and imprecise for a reader; replacement wording was drafted for the publisher.",
  "what_did_not_change": "No count, rating, Outlook or Watch. The Board and the cutoff-dated finding are unaffected.",
  "control_analysis": "The retained records carry timestamps to the second, and the note was written without reading them against the attestation time. No mechanical control compares a note's chronology with retained timestamps.",
  "found_by": "CHQ, while drafting the next day's briefing."
}
```