# SC-2026-006 v2.0: CGS-1 validation PASSED; CGS-7 retrospective test executed

- **Artifact ID:** CHQ-SC-006-v2-VALIDATION
- **Status:** RECORDED 2026-09-16; memo /outputs/CHQ_SC006_v2_Validation_and_Test_2026_09_16.md
- **Public record:** https://record.cybersecurityhq.com/governance/CHQ-SC-006-v2-VALIDATION
- **Machine-record SHA-256:** `07ea495659f405eb8e8e59054a12a33d8ae20a39b247185d3f6439da74c8b294`

## Complete structured record

```json
{
  "id": "CHQ-SC-006-v2-VALIDATION",
  "title": "SC-2026-006 v2.0: CGS-1 validation PASSED; CGS-7 retrospective test executed",
  "class": "CRITERION",
  "declared": "2026-09-16",
  "effective": null,
  "status": "RECORDED 2026-09-16; memo /outputs/CHQ_SC006_v2_Validation_and_Test_2026_09_16.md",
  "authority": "CGS-1 / CGS-7 first execution; Claude Fable 5/CHQ",
  "scope": "Validation: construct/observable/link stated; false-positive test passed with two definitional rules (T_disclosure = earliest public disclosure by ANY party; a zero-day label without a date does not satisfy the observable); boundary cases classify sensibly; rename question carried to Sep-24 under CGS-4.5.",
  "notes": "Retrospective test: 13 cases (all CGS-7.1 categories) -> 1 QUALIFYING (PaperCut: Huntress T1 2026-08-26 vs PaperCut T2 2026-08-27), 5 NON-QUALIFYING (Ray, Fortinet [causing observation, record only per CGS-4.4], GitLab, Kestra, JFrog 82329), 7 INDETERMINATE (Metabase, FMC, SEG, NetScaler, Zimbra, LiteLLM 42271, Adobe Commerce - T_exploitation or T_disclosure lacks day-precision sourcing). Finding: the registry chronology fields are under-populated for exactly the propositions v2.0 needs; the pre-Sep-24 work is DATE-PINNING against primaries (seven queries). If PaperCut's two dates confirm against primaries, the one-instance trigger is met on evidence unrelated to the causing observation; CONFIRMED would return via CGS-8.5.",
  "related": [
    "CHQ-SC-2026-006",
    "RA-2026-012",
    "CHQ-CGS-2026-001"
  ]
}
```