# SC-2026-006 criterion v2.0 clarification C1 (T\_disclosure definition)

- **Artifact ID:** CHQ-SC-2026-006-v2.0-C1
- **Status:** EFFECTIVE
- **Public record:** https://record.cybersecurityhq.com/governance/chq-sc-2026-006-v2.0-c1
- **Machine-record SHA-256:** `8ac38dc8cbce5dcb9a701100726c475b1370ee26df59bb4e316155876a53d646`
- **Publication correction:** CHQ-PUB-CORR-2026-001. This digest supersedes `12da958addf75e40ccde764674364b64dd4af01809fc6a591e64ec3c21a167e2`; the earlier digest does not verify these bytes.

## Complete structured record

```json
{
  "id": "CHQ-SC-2026-006-v2.0-C1",
  "title": "SC-2026-006 criterion v2.0 clarification C1 (T_disclosure definition)",
  "class": "CRITERION",
  "effective": "2026-10-06",
  "published": "2026-10-13",
  "status": "EFFECTIVE",
  "scope": "T_disclosure is the first public statement identifying the vulnerable product and affected versions, whether or not the mechanism is published; breach announcements without product identification do not start the clock.",
  "rule": "The proposed v2.1 threshold restatement remains pending at the Q4 audit.",
  "rationale": null,
  "authority": "DM ratified by publication 2026-10-06",
  "references": [
    "CHQ-SC-2026-006",
    "RA-2026-012"
  ]
}
```