# Positions

Canonical machine-readable index for positions.

- **Public registry:** https://record.cybersecurityhq.com/positions
- **Record count:** 17

- [CHQ-P-2026-001: Third-Party Access Constitutes Insider Access for Incident Accountability](./CHQ-P-2026-001.md): v1.3 · ACTIVE
- [CHQ-P-2026-002: Verification Collapse Is a Structural Condition, Not a Tooling Deficiency](./CHQ-P-2026-002.md): v1.2 · ACTIVE
- [CHQ-P-2026-003: Hyperscaler-Aligned Procurement Will Absorb Standalone OT Security Into Cloud Platform Economics](./CHQ-P-2026-003.md): v1.2 · ACTIVE
- [CHQ-P-2026-004: Update Channels as Ungoverned Trust Execution Surfaces](./CHQ-P-2026-004.md): v1.2 · ACTIVE
- [CHQ-P-2026-005: AI Agent Execution Authority Requires Independent Deterministic Validation](./CHQ-P-2026-005.md): v1.2 · REINFORCED
- [CHQ-P-2026-006: No Enterprise Trust Primitive Is Self-Verifying](./CHQ-P-2026-006.md): v1.2 · ACTIVE
- [CHQ-P-2026-007: Certificate Lifetime Compression Does Not Alter Hardware Trust Architecture](./CHQ-P-2026-007.md): v1.1 · WITHDRAWN
- [CHQ-P-2026-008: Security Tool Categories Exist Because of a Constraint. AI Reasoning Systems Are Positioned to Remove It.](./CHQ-P-2026-008.md): v1.2 · ACTIVE
- [CHQ-P-2026-009: Identity Systems Are Becoming the Execution Control Plane of Enterprise Security](./CHQ-P-2026-009.md): v1.3 · ACTIVE
- [CHQ-P-2026-010: Cybersecurity Compliance Enforcement Is Transitioning Toward an Operationalization Standard](./CHQ-P-2026-010.md): v1.2 · ACTIVE
- [CHQ-P-2026-011: Deployed Security Tool Presence Cannot Serve as Evidence of Functioning Control](./CHQ-P-2026-011.md): v1.3 · ACTIVE
- [CHQ-P-2026-012: Vendor Security Attestations Cannot Serve as Evidence of Operational Security State](./CHQ-P-2026-012.md): v1.3 · ACTIVE
- [CHQ-P-2026-013: Portable Developer Identity Cannot Contain Credential Compromise Across Registries](./CHQ-P-2026-013.md): v1.4 · ACTIVE
- [CHQ-P-2026-014: Management Plane Compromise Produces Deterministic Control That Operates Outside Identity Enforcement](./CHQ-P-2026-014.md): v1.3 · ACTIVE
- [CHQ-P-2026-015: Execution Pipelines Function as Control Planes Without Verification Primitives Capable of Validating the Authority They Execute](./CHQ-P-2026-015.md): v1.4 · ACTIVE
- [CHQ-P-2026-016: Cryptographic Provenance Systems Validate Continuity of Authorization, Not Correctness of Authorization](./CHQ-P-2026-016.md): v1.5 · ACTIVE
- [CHQ-P-2026-017: Agent Runtimes Are Deployed Without Containment Proportionate to Their Demonstrated Capability to Escalate and Move Laterally](./CHQ-P-2026-017.md): v1.0 · ACTIVE