# RA-2026-020

- **Artifact ID:** RA-2026-020
- **Status:** VALID
- **Public record:** https://record.cybersecurityhq.com/rating-actions/ra-2026-020
- **Machine-record SHA-256:** `1b740366e849ad7f8cc8ec33d111abad61188f0bca0b38c70aa2e822c09cc5d9`
- **Publication correction:** CHQ-PUB-CORR-2026-001. This digest supersedes `4662d58f517a67862a94f972272a4f7e31595b1525de3bfbb0024945b80fc897`; the earlier digest does not verify these bytes.

## Complete structured record

```json
{
  "id": "RA-2026-020",
  "aliases": [
    "RAR-2026-008"
  ],
  "date": "2026-10-13",
  "issue": "42",
  "condition": "CHQ-SC-2026-006",
  "action": "AFFIRMED (fix-insufficiency finding; chronology enrichment)",
  "from": "CONFIRMED",
  "to": "CONFIRMED / Accumulating",
  "outlook": "Accumulating",
  "watch": "none",
  "criterion_version": "SC-006 v2.0 + C1",
  "methodology_version": "v1.3",
  "evidence_rows": "SN-2026-09-02-01 PaperCut (chronology filled; FIX_INSUFFICIENT YES, three bypasses in five days per watchTowr 9 Oct); SN-2026-09-28-01/02 NetScaler (T_EXPLOITATION widened to early September per Mandiant 29 Sep); SN-2026-06-12-01 PeopleSoft (chronology backfilled; qualifying in shape; not counted this issue, pre-v2.0).",
  "grades": "PaperCut T1 B (Huntress), T2 A (vendor), bypasses A (watchTowr first-hand). NetScaler floor A (watchTowr), earlier bound B (Mandiant month-precision). PeopleSoft B (Mandiant).",
  "independence_determination": "Unchanged; counted set of qualifying vendors unchanged this issue.",
  "rule_applied": "No criterion element changes; CONFIRMED is the ceiling. PeopleSoft counting deferred to the v2.1 restatement audit (CGS-4.3 scope on retrospective application).",
  "alternative_not_taken": "Count PeopleSoft now as a sixth qualifying vendor on the backfilled chronology. Rejected pending the audit ruling on pre-v2.0 in-era instances; no rating effect either way.",
  "cgs_provisions": [
    "CGS-4.3",
    "CGS-8.5"
  ],
  "record_links": [
    "RAR-2026-001",
    "RA-2026-012"
  ],
  "blind_reproduction": "OWED",
  "status": "VALID"
}
```