{
  "built_at": "2026-10-15T14:19:08.855Z",
  "authority": "The CHQ Board is the sole authoritative source for CHQ-issued ratings. Ratings are publisher assessments derived from admitted evidence under the applicable methodology; they are not independent verification of every underlying claim. External source observations, CHQ evidence classifications, and CHQ ratings are distinct. Historical copies and derivative displays do not supersede the current Board.",
  "limitation": "Corrections retain their recorded release status. A declared audit is not a completed audit. Historical registry grades do not supersede operative grades; held or provisional evidence is not independent confirmation.",
  "governance_records": [
    {
      "id": "CHQ-ADJ-2026-011-SECONDOP",
      "title": "Adjudication of Anthropic and OpenAI disclosures against SC-2026-011",
      "class": "AUDIT",
      "effective": null,
      "published": "2026-10-13",
      "status": "ADJUDICATED; staged raise withdrawn same session",
      "scope": "Adjudication of SN-2026-10-10-01 through 06 and N01/N02. The two July Anthropic supporting legs share one evaluator root and are not additional counts.",
      "rule": "Historical staged adjudication, not an operative confirmation. The raise was withdrawn before publication. Anthropic is HELD, operative Grade B; historical Grade A is disputed pending Q4 audit. Gemini is HELD on a shared evaluator root. The two supporting legs are not additional counts. The P-017 reinforcement clause was met by SN-2026-10-10-01, not a condition confirmation.",
      "rationale": null,
      "authority": "analyst declared 2026-10-10; DM ratified 2026-10-13",
      "references": [
        "CHQ-CORR-2026-011",
        "CHQ-CORR-2026-012",
        "CHQ-AUDIT-2026-Q4-GRADE-OPERATOR-PRIMARY"
      ]
    },
    {
      "id": "CHQ-AUDIT-2026-Q4-GRADE-OPERATOR-PRIMARY",
      "title": "Audit item: grade of operator primary accounts under CGS-2.1/2.2. CGS-2.2 classes an operator's own postmortem as Grade B; the registry labeled operator primaries A without a cited provision. Bears on the \"Grade A at two operators\" up-trigger. No rating changed",
      "class": "AUDIT",
      "effective": null,
      "published": "2026-10-13",
      "status": "DECLARED",
      "scope": "Negative-evidence rows SN-2026-10-10-N01/N02 re-described as post-reach limits on consequences, not boundaries that held. Ledger class name unchanged pending taxonomy amendment.",
      "rule": "Declaration ratified under D21 as it stood on 2026-10-13. No Q4 audit outcome is pre-ratified. The grade of operator primary accounts remains an audit question; no rating changed.",
      "rationale": null,
      "authority": "analyst declared 2026-10-13; DM ratified 2026-10-13",
      "references": [
        "CHQ-CGS-2026-001"
      ]
    },
    {
      "id": "CHQ-AUDIT-2026-Q4-SCOPE",
      "title": "Q4 criterion audit scope and authority",
      "class": "AUDIT",
      "effective": null,
      "published": "2026-10-13",
      "status": "DECLARED",
      "scope": "The Q4 criterion audit MAY: reject, amend or ratify CHQ-CRIT-SC011-v1.1; remove provisionally counted founding instances (SN-2026-07-29-01, SN-2026-10-06-01) from SC-2026-011's counted set; lower SC-2026-011 (floor on the Services Australia instance alone is STRENGTHENING under v1.3); set an agency evidence standard for SC-2026-008 and lower that rating if single-source attribution of the defining attribute does not meet it; re-open the CGS-11.3 standing of SC-2026-008's 7 July single-event confirmation; rule on the grade of operator primary accounts and on the authorization-evidence test for SC-2026-011; rule on pre-v2.0 in-era instances for SC-2026-006 (PeopleSoft). No standing conclusion is protected by the ratification mechanism. Branch outcomes for SC-2026-011: v1.1 ratified, three counted plus Anthropic adjudicated under the ratified text and the confirmation test runs; v1.1 rejected, counted set reduces to one, rating STRENGTHENING, Watch re-assessed.",
      "rule": "Declaration ratified under D21 as it stood on 2026-10-13. No Q4 audit outcome is pre-ratified. Provisionally counted instances and Anthropic must be reassessed against any ratified criterion and independence test; confirmation requires the two-operator threshold to be independently demonstrated.",
      "rationale": null,
      "authority": "analyst declared 2026-10-13; DM ratified 2026-10-13",
      "references": [
        "CHQ-CRIT-SC011-v1.1",
        "CHQ-AUDIT-2026-Q4-GRADE-OPERATOR-PRIMARY",
        "CHQ-SC-2026-008",
        "CHQ-SC-2026-006",
        "CHQ-SC-2026-011"
      ]
    },
    {
      "id": "CHQ-CORR-2026-011",
      "title": "A CONFIRMED upgrade for SC-2026-011 was staged on 10 Oct on the Anthropic/Irregular instance and withdrawn the same session before publication; the instance is a sanctioned-offensive escape that v1.0 does not admit, and broadening the criterion cannot be self-applied to the motivating case. No published rating affected; Issue 41 board unchanged. Also records the founding-set inconsistency",
      "class": "CORRECTION",
      "effective": null,
      "published": "2026-10-13",
      "status": "CORRECTED, same session, pre-publication",
      "scope": "No published rating was affected; the Issue 41 board stands unchanged. Error class: none scored as OVERRATING (no publication occurred); recorded as a CORRECTION per the declared error classes.",
      "rule": "The founding-set inconsistency is reserved to the Q4 audit; no live reclassification and no published upgrade occurred.",
      "rationale": null,
      "authority": "analyst declared 2026-10-10; DM ratified 2026-10-13",
      "references": [
        "CHQ-SC-2026-011",
        "CHQ-CRIT-SC011-v1.1",
        "RAR-2026-005"
      ]
    },
    {
      "id": "CHQ-CORR-2026-012",
      "title": "Issue No. 41 presented three SC-2026-011 founding instances as counted. Under v1.0 as written only Services Australia qualifies; the Hugging Face and Kubernetes instances are provisionally retained pending the Q4 audit. No contemporaneous interpretation admitting them was documented at entry; the count is an error in criterion application, not a rating downgrade. Rating unchanged on the single-event floor. External release with Issue No. 42 acknowledged by the DM; error class CORRECTION scored once",
      "class": "CORRECTION",
      "effective": null,
      "published": "2026-10-13",
      "status": "PUBLISHED",
      "scope": "CORRECTION error class scored once upon externally acknowledged Issue 42 release; references CHQ-ISSUE-041, CHQ-CRIT-SC011-v1.1 and CHQ-AUDIT-2026-Q4-SCOPE. STRENGTHENING rating retained on one qualifying event.",
      "rule": "External release acknowledged on 2026-10-13; actual send date/time unspecified. CORRECTION scored once. This is an authorized acknowledgment, not independent verification of publication.",
      "rationale": "External release acknowledged on 2026-10-13; actual send date/time unspecified. CORRECTION scored once. This is an authorized acknowledgment, not independent verification of publication.",
      "authority": "DM attested 2026-10-13",
      "references": [
        "CHQ-SC-2026-011",
        "CHQ-AUDIT-2026-Q4-SCOPE",
        "RAR-2026-006"
      ]
    },
    {
      "id": "CHQ-PUB-CORR-2026-001",
      "title": "Publication sanitation of 28 records and required-status correction for nine rating actions",
      "class": "CORRECTION",
      "effective": "2026-10-13",
      "published": null,
      "status": "CORRECTED",
      "scope": "Publication correction only; does not score as a CORRECTION error against any rating.",
      "rule": "On 13 October 2026, 28 governance and rating-action records were published with internal operational metadata included. They were re-projected under the public schema on 2026-10-13. No operative decision, rating, grade or evidence status changed by sanitation; a field-by-field comparison is held internally. Hashes printed on affected records supersede earlier digests. D2 SOP adoption and D3 ABR countersignature are separate approval updates. D21 ratifies declarations only; no Q4 audit outcome is pre-ratified. Separately approved required-field publication correction: status: VALID added to RA-2026-012, RA-2026-013, RA-2026-014, RA-2026-015, RA-2026-016, RA-2026-017, RA-2026-018, RA-2026-019 and RA-2026-020. All nine are valid actions; none is voided or superseded, and voided_by is absent on every one. This restores a required field, not a change to any decision. Prior projected bytes are archived and the new structured hashes are recomputed and printed on the affected records. These nine IDs are already among the original 28; this is an additional correction to those records, not nine new decisions. D30 publication correction, 2026-10-14: CHQ-CORR-2026-012 authority is normalized to DM attested 2026-10-13. Its operative rule still states that the actual send date/time is unspecified. This is one of the original 28 records, not an additional decision; no rating, grade, hold, count or analytical text changes. Prior public projection bytes are archived; the new structured digest supersedes the immediately prior digest.",
      "rationale": "Internal authority strings, run and pattern identifiers and working notes are not part of the approved public schema. No independent or live-deployment verification is implied. D23 (DM-delegated), 2026-10-13. Locked canonical references: O04: CHQ-ED-2026-013, integrity_statement[3], decoded-field character offset 94; O05: CHQ-ED-2026-014, integrity_statement[3], decoded-field character offset 94; O06: CHQ-ED-2026-015, integrity_statement[3], decoded-field character offset 73; O07: CHQ-ED-2026-016, integrity_statement[3], decoded-field character offset 73; O08: CHQ-ED-2026-017, integrity_statement[4], decoded-field character offset 73; O09: CHQ-ED-2026-018, integrity_statement[3], decoded-field character offset 73; O10: CHQ-ED-2026-019, integrity_statement[3], decoded-field character offset 73; O11: CHQ-ED-2026-020, integrity_statement[3], decoded-field character offset 73; O12: CHQ-ED-2026-021, integrity_statement[3], decoded-field character offset 67; O25: CHQ-ANRM-2026-012, revision_history, decoded-field character offset 236. For each: \"known internal reference in hashed text, not editable, forward treatment in force since 2026-09-22\". Offsets from the original built bundles are retained in the occurrence report. No docket or memorandum is amended.",
      "authority": "DM delegated, ratified 2026-10-13",
      "references": [
        "CHQ-ABR-2026-001",
        "CHQ-ADJ-2026-011-SECONDOP",
        "CHQ-AUDIT-2026-Q4-GRADE-OPERATOR-PRIMARY",
        "CHQ-AUDIT-2026-Q4-SCOPE",
        "CHQ-CATCHLAG-2026-001",
        "CHQ-CATCHLAG-2026-002",
        "CHQ-CATCHLAG-2026-003",
        "CHQ-CORR-2026-011",
        "CHQ-CORR-2026-012",
        "CHQ-CRIT-SC011-v1.1",
        "CHQ-DEC-2026-SC004-TIMING",
        "CHQ-FORECAST-RETRO-2026-001",
        "CHQ-INST-2026-001",
        "CHQ-METH-2026-v1.3",
        "CHQ-SC-2026-006-v2.0-C1",
        "CHQ-SC-2026-008-v1.2",
        "CHQ-SC-2026-011-ENTRY",
        "CHQ-SC-2026-011-INTENT",
        "CHQ-SOP-PRIMARY-FETCH-2026-001",
        "RA-2026-012",
        "RA-2026-013",
        "RA-2026-014",
        "RA-2026-015",
        "RA-2026-016",
        "RA-2026-017",
        "RA-2026-018",
        "RA-2026-019",
        "RA-2026-020",
        "CHQ-ED-2026-013",
        "CHQ-ED-2026-014",
        "CHQ-ED-2026-015",
        "CHQ-ED-2026-016",
        "CHQ-ED-2026-017",
        "CHQ-ED-2026-018",
        "CHQ-ED-2026-019",
        "CHQ-ED-2026-020",
        "CHQ-ED-2026-021",
        "CHQ-ANRM-2026-012"
      ]
    }
  ],
  "disputed_evidence": [
    {
      "condition": "CHQ-SC-2026-011",
      "record": "https://record.cybersecurityhq.com/machine/conditions/CHQ-SC-2026-011.md",
      "id": "SN-2026-07-29-01",
      "date": "2026-07",
      "instance": "Hugging Face containment escape",
      "operator": "OpenAI",
      "source": "Operator account",
      "count_status": "PROVISIONAL",
      "grade": "B",
      "grade_registry_label": "A",
      "grade_operative": "B",
      "grade_status": "disputed pending Q4 audit",
      "note": "Evaluation context; does not satisfy v1.0 \"benignly tasked\" strictly; expected to qualify under v1.1. CGS-2.2, operator's own postmortem. PROVISIONAL: retained from entry; the Q4 audit may remove it (CHQ-AUDIT-2026-Q4-SCOPE)."
    },
    {
      "condition": "CHQ-SC-2026-011",
      "record": "https://record.cybersecurityhq.com/machine/conditions/CHQ-SC-2026-011.md",
      "id": "SN-2026-10-06-01",
      "date": "2026-07-19",
      "instance": "Kubernetes research-cluster escalation",
      "operator": "OpenAI",
      "source": "Operator incident account (CHQ-EX-2026-025)",
      "count_status": "PROVISIONAL",
      "grade": "B",
      "grade_registry_label": "A",
      "grade_operative": "B",
      "grade_status": "disputed pending Q4 audit",
      "note": "Reached operator's own infrastructure; does not satisfy v1.0 \"third-party\" strictly; expected to qualify under v1.1. CGS-2.2. PROVISIONAL: retained from entry; the Q4 audit may remove it (CHQ-AUDIT-2026-Q4-SCOPE)."
    },
    {
      "condition": "CHQ-SC-2026-011",
      "record": "https://record.cybersecurityhq.com/machine/conditions/CHQ-SC-2026-011.md",
      "id": "SN-2026-10-10-01",
      "date": "2026-07-30 and 2026-09-09",
      "instance": "Anthropic / Irregular evaluation escapes",
      "operator": "Anthropic",
      "source": "Operator primaries",
      "grade": "B",
      "grade_registry_label": "A",
      "grade_operative": "B",
      "grade_status": "disputed pending Q4 audit",
      "note": "HELD on criterion scope (sanctioned-offensive escape, outside v1.0 \"benignly tasked\") and on grade. CGS-2.2, operator's own postmortem; no provision raising it cited. Independent of OpenAI (different operator, harness, observation source, failure mode). Not applied to v1.1 before ratification",
      "count_status": "HELD"
    }
  ]
}