# Certificate Lifetime Compression Does Not Alter Hardware Trust Architecture

- **Artifact ID:** CHQ-P-2026-007
- **Version:** v1.1
- **Status:** WITHDRAWN
- **Public record:** https://record.cybersecurityhq.com/positions/chq-p-2026-007
- **Machine-record SHA-256:** `7f7f042a40a64710e7cf780c906663fa3575954306716a817642cc08e21bb069`

## Canonical text

```text
[SECTION] POSITION METADATA
POSITION_ID=CHQ-P-2026-007
VERSION=v1.1
STATUS=WITHDRAWN
EFFECTIVE=2026-03
TITLE=Certificate Lifetime Compression Does Not Alter Hardware Trust Architecture
DOCTRINE_FAMILY=BOUNDARY_ILLUSION
ASSUMPTION_INVALIDATED=ROTATION_AS_ASSURANCE
PRESSURE_CLASS=INFRASTRUCTURE
POSITION_TYPE=ARCHITECTURAL_LIMIT
SIGNAL_COUNT=3
DURABILITY_CLASS=ARCHITECTURAL
EVIDENCE_STATE=EMERGING
VECTOR_COUNT=1
LENS=LENS-003
PATTERN_REGISTER_ID=CHQ-PR-007
SOURCE_SIGNALS=SIG-023, SIG-024, SIG-025
GOVERNING_CONSTRAINT=CHQ-ASC-2026-003
ESG_REFERENCE=CHQ-D-2026-ESG v1.0
REVISION_POLICY=Amendment only
WITHDRAWAL_INSTRUMENT=CHQ-RAT-2026-001
WITHDRAWAL_GROUND=PRS-12.1: canonical text cannot be brought into conformance by amendment.

[SECTION] POSITION STATUS
STATUS=WITHDRAWN
VERSION=v1.1

[SECTION] RECORD INTEGRITY
SCOPE=PRS-03.1 METADATA-ONLY WITHDRAWAL RECORD
VERSION=v1.1
```

## Complete structured record

```json
{
  "id": "CHQ-P-2026-007",
  "title": "Certificate Lifetime Compression Does Not Alter Hardware Trust Architecture",
  "status": "WITHDRAWN",
  "version": "v1.1",
  "snapshot_date": "2026-03",
  "doctrine_family": "BOUNDARY_ILLUSION",
  "assumption_class": "ROTATION_AS_ASSURANCE",
  "pressure_class": "INFRASTRUCTURE",
  "position_type": "ARCHITECTURAL_LIMIT",
  "signal_count": 3,
  "pattern_register_id": "CHQ-PR-007",
  "durability_class": "ARCHITECTURAL",
  "evidence_state": "EMERGING",
  "vector_count": 1,
  "lens": "LENS-003",
  "source_signals": [
    "SIG-023",
    "SIG-024",
    "SIG-025"
  ],
  "governing_acj": [
    "CHQ-ASC-2026-003"
  ],
  "evidence_docket": "CHQ-ED-2026-003",
  "extends_position": "CHQ-P-2026-006",
  "related_positions": [
    "CHQ-P-2026-004"
  ],
  "doctrine_statement": "",
  "evidence_basis": {
    "primary": "Independence of software-layer certificate validation from hardware-layer trust attestation",
    "supporting": [
      "Certificate issuance and hardware execution operate in independent verification domains",
      "Lifetime compression shortens compromise windows without verifying execution environments",
      "Apple 47-day proposal addresses credential freshness, not trust architecture"
    ]
  },
  "doctrinal_alignment": [],
  "revision_policy": "Amendment only",
  "esg_reference": "CHQ-D-2026-ESG v1.0",
  "authority_derivation_text": "",
  "scope": "",
  "position_statement": "",
  "context": "",
  "governance_condition": "",
  "implications": [],
  "exclusions": [],
  "supersedes": null,
  "amendments": "CHQ-PRS-2026-001-AMD-003",
  "reference_conditions": [],
  "pdf_hash": "c2e7f4435e5e7f5f27ea3f423cb3defcb61a0cab2aff8e3195a8a852779baf59",
  "prior_hashes": [
    {
      "version": "v1.0",
      "sha256": "956c3756ff77afd3964c56a12a4c05c52402f056c5676f3d85bdf8f57abc35f2"
    },
    {
      "version": "v1.0",
      "sha256": "8622c62dc1cf9aa399b8fe1ae3d029a4ad543e67f0bbcebed8f2c8cb0e10680b"
    }
  ],
  "withdrawal_instrument": "CHQ-RAT-2026-001",
  "withdrawal_ground": "PRS-12.1: canonical text cannot be brought into conformance by amendment.",
  "implications_text": "",
  "forecast_condition": "",
  "forecast_indicator": "",
  "forecast_horizon": "",
  "kill_condition": "",
  "disambiguation": "",
  "supersession_conditions": "",
  "inheritance_text": "",
  "reference_ready_language": "",
  "canonical_hash": "c2e7f4435e5e7f5f27ea3f423cb3defcb61a0cab2aff8e3195a8a852779baf59",
  "amendment_note": "AMENDMENT CHQ-PRS-2026-001-AMD-003 · SEPTEMBER 22, 2026 · GOVERNING CONSTRAINT APPLICABILITY. Governing Constraint was audited under the ratified PRS-06.5 material-applicability test. Default citations were removed, materially load-bearing constraints were retained or added, the prior version and hash were preserved, and the canonical hash was recomputed."
}
```