# RA-2026-016

- **Artifact ID:** RA-2026-016
- **Status:** VALID
- **Public record:** https://record.cybersecurityhq.com/rating-actions/ra-2026-016
- **Machine-record SHA-256:** `0b6f42a4b57f5deb057e53a5a2c834ed15d2aaa0dabcc8267539a4cbaa52dd17`
- **Publication correction:** CHQ-PUB-CORR-2026-001. This digest supersedes `00f41254d8472ccd33a8dad7f0f01e06af912221d9a2c2facc293dc4f3fc3216`; the earlier digest does not verify these bytes.

## Complete structured record

```json
{
  "id": "RA-2026-016",
  "aliases": [
    "RAR-2026-004"
  ],
  "date": "2026-10-06",
  "issue": "41",
  "condition": "CHQ-SC-2026-004",
  "action": "AFFIRMED under v1.3",
  "from": "EMERGING (Watch up)",
  "to": "EMERGING (Watch up)",
  "outlook": "Stable",
  "watch": "up",
  "criterion_version": "SC-004 v1.0",
  "methodology_version": "v1.3",
  "evidence_rows": "SN-2026-09-27-01 (Mandiant, two cases)",
  "grades": "B (named firm, unnamed victims, undated, one mechanism undisclosed)",
  "independence_determination": "Single source; two mechanisms in one report = one instance",
  "rule_applied": "v1.3 STRENGTHENING requires a qualifying event documented at required grade; not met",
  "alternative_not_taken": "RAISE to STRENGTHENING on the Mandiant account at B",
  "cgs_provisions": [
    "CGS-3.3",
    "CGS-6.2"
  ],
  "record_links": [
    "CHQ-DEC-2026-SC004-TIMING"
  ],
  "blind_reproduction": "OWED",
  "status": "VALID"
}
```