# Correction: two errors in pre-publication drafts of Issue 44 concerning the Storm-0940 reporting

- **Artifact ID:** CHQ-CORR-2026-016
- **Version:** 1.0
- **Status:** PENDING
- **Public record:** https://record.cybersecurityhq.com/governance/chq-corr-2026-016
- **Machine-record SHA-256:** `7bc597d40b89e901e83acb67f143d3c3994be1c44470392de4e14a3489ca6f8d`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-016",
  "title": "Correction: two errors in pre-publication drafts of Issue 44 concerning the Storm-0940 reporting",
  "class": "CORRECTION",
  "version": "1.0",
  "effective": "2026-10-27",
  "published": "2026-10-27",
  "status": "PENDING",
  "status_detail": "OPEN 2026-10-27; DM RATIFICATION PENDING; nothing published under either error",
  "rule": "Correction: two errors in pre-publication drafts of Issue 44 concerning the Storm-0940 reporting",
  "scope": "ERROR 1, over-qualification. A draft of the email edition stated that the public record does not establish that ARTEX was the framework deployed in the ConnectWise intrusion. Microsoft states the opposite directly: The qualification was introduced on 2026-10-27 in response to an external editorial review and was not checked against the primary source; a second external review caught it and a primary re-read confirmed the error. Both editions are corrected, and the hold on the candidate now rests solely on the autonomy element and the assessment-grade attribution. ERROR 2, unverifiable figure. Drafts carried. That figure is not in the post text; it appears only in an image. It is withdrawn from all published text and replaced with figures verifiable in the text. NEITHER ERROR REACHED PUBLICATION. Both are recorded because the drafts were externally reviewed and because the first error was created by accepting a reviewer framing without re-reading the source.",
  "authority": "analyst declared 2026-10-27, ratification owed at the publisher"
}
```