# Late classification: one catalogued entry carried an unclassified chain position past the seven-day limit

- **Artifact ID:** CHQ-CORR-2026-031
- **Status:** IN FORCE
- **Public record:** https://record.cybersecurityhq.com/corrections/chq-corr-2026-031
- **Machine-record SHA-256:** `bb14ebaf1816b65840764d658cc77ebc856e3b62719dd394c32c2ac2b3c4395a`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-031",
  "class": "CORRECTION",
  "subtype": "control",
  "status": "IN FORCE",
  "authority": "DM ratified 2026-11-12",
  "effective": "2026-11-12",
  "published": "2026-11-12",
  "title": "Late classification: one catalogued entry carried an unclassified chain position past the seven-day limit",
  "what_was_wrong": "SN-2026-10-28-01, admitted on 28 October 2026 and classed as a reinforcing entry on the application-plane condition, was left without a chain-position classification. The gate allows seven days to complete that field on a catalogued entry, and the limit was crossed on 5 November.",
  "what_is_true": "The catalog description, an unrestricted file upload yielding code execution, supports classification as an initial-access step.",
  "what_changed": "The field is completed. The gate check that flagged it was left as it was.",
  "what_did_not_change": "No count, rating, Outlook or Watch. Chain position enters no counting decision.",
  "control_analysis": "The gate check worked: it flagged the entry on the day the limit was crossed. The intake step that leaves the field blank is the gap.",
  "found_by": "The integrity gate, on the 5 November run."
}
```