# RA-2026-012

- **Artifact ID:** RA-2026-012
- **Status:** VALID
- **Public record:** https://record.cybersecurityhq.com/rating-actions/ra-2026-012
- **Machine-record SHA-256:** `c1bf8344db54eec3e63ebe751e44e9301362f6471f00c2e9e66edb9f8af75501`
- **Publication correction:** CHQ-PUB-CORR-2026-001. This digest supersedes `b7ea165d795c30353411d460903c587991ad306d15dc18df14e190cba198ac33`; the earlier digest does not verify these bytes.

## Complete structured record

```json
{
  "id": "RA-2026-012",
  "aliases": [
    "RAR-2026-001",
    "CHQ-RA-2026-012-SC006"
  ],
  "date": "2026-09-24",
  "issue": "40",
  "condition": "CHQ-SC-2026-006",
  "action": "RAISED",
  "from": "STRENGTHENING (under review)",
  "to": "CONFIRMED / Accumulating",
  "outlook": "Accumulating",
  "watch": "none",
  "criterion_version": "SC-006 v2.0",
  "methodology_version": "v1.2",
  "evidence_rows": "SN-2026-09-02-01 PaperCut (T_EXPLOITATION 2026-08-26 Huntress; T_ADVISORY 2026-08-27 PaperCut) [reference corrected 2026-10-12 from the placeholder \"SN-2026-08-27-xx\"; chronology fields now filled on the row; FIX_INSUFFICIENT YES added from watchTowr 9 Oct]",
  "grades": "T1 Grade B (responder log), T2 Grade A (vendor)",
  "independence_determination": "Two named sources for two dates: shown",
  "rule_applied": "v2.0 one-instance trigger: exploitation documented before public disclosure",
  "alternative_not_taken": "Hold pending second instance (not required by v2.0)",
  "cgs_provisions": [
    "CGS-8.5",
    "CGS-3.3"
  ],
  "record_links": [
    "CHQ-SC-006-v2-VALIDATION"
  ],
  "blind_reproduction": "OWED",
  "status": "VALID"
}
```
