# RA-2026-013

- **Artifact ID:** RA-2026-013
- **Status:** VALID
- **Public record:** https://record.cybersecurityhq.com/rating-actions/ra-2026-013
- **Machine-record SHA-256:** `542dac684d0b927fa18149e139543e53248f79a5d13dcbab74ef2be2959947d5`
- **Publication correction:** CHQ-PUB-CORR-2026-001. This digest supersedes `2d03737bab60a20894a0ba409cbbd7866341d9a454f4f37933b9dba4adec1ac0`; the earlier digest does not verify these bytes.

## Complete structured record

```json
{
  "id": "RA-2026-013",
  "aliases": null,
  "date": "2026-09-29",
  "issue": "40",
  "condition": "CHQ-SC-2026-004",
  "action": "AFFIRMED, WATCH TO UP",
  "from": "EMERGING",
  "to": "EMERGING (Watch up)",
  "outlook": null,
  "watch": null,
  "criterion_version": null,
  "methodology_version": null,
  "evidence_rows": null,
  "grades": null,
  "independence_determination": null,
  "rule_applied": "Up-trigger candidate recorded (Mandiant AI Risk and Resilience 2026, two production agent-runtime compromises, Grade B, single source); no rating action under the v1.2 single-event clause by DM decision CHQ-DEC-2026-SC004-TIMING; re-adjudication Issue 41 under v1.3",
  "alternative_not_taken": null,
  "cgs_provisions": [],
  "record_links": [
    "CHQ-DEC-2026-SC004-TIMING"
  ],
  "blind_reproduction": null,
  "status": "VALID"
}
```