# HELD: Storm-0940/ARTEX candidate not counted; blind reproduction verdict INDETERMINATE

- **Artifact ID:** RA-2026-045-01
- **Status:** VALID
- **Public record:** https://record.cybersecurityhq.com/rating-actions/ra-2026-045-01
- **Machine-record SHA-256:** `ec381ee7cf3d66e4ba95947aa4d210847b1bcb90aa8f9dcca4054d28ff040658`

## Complete structured record

```json
{
  "id": "RA-2026-045-01",
  "date": "2026-11-02",
  "issue": "Issue No. 45",
  "condition": "SC-2026-008",
  "action": "HELD: Storm-0940/ARTEX candidate not counted; blind reproduction verdict INDETERMINATE",
  "from": "CONFIRMED (grandfathered) / Stable; one counted operation",
  "to": "CONFIRMED (grandfathered) / Stable; one counted operation; candidate held at Grade A",
  "outlook": "Stable",
  "watch": "none",
  "criterion_version": "SC-2026-008 scope v1.2",
  "methodology_version": "v1.3",
  "evidence_rows": [
    "SN-2026-10-26-01"
  ],
  "grades": "Telemetry elements A (Microsoft first-hand); agency proposition and attribution per the reproduction report",
  "independence_determination": "Distinct actor, tooling, victims and causal run from the founding operation (CGS-6.2)",
  "rule_applied": "Scope v1.2 verbatim; agency proposition CGS-3.1/3.2; grade CGS-2.2; counting on blind reproduction, the Issue 43 exception not repeated",
  "alternative_not_taken": "Count on the strength of the telemetry elements alone (not taken: the agency element is the criterion)",
  "blind_reproduction": "RUN 2026-11-03 as MACHINE BLIND REPRODUCTION: context-free agent instance, sealed packet (scope v1.2 verbatim, source pointer, dated addendum), no CHQ routing disclosed",
  "reproduction_result": "INDETERMINATE. Deciding element E3: the source attributes the follow-on cloud actions to the AI agents but gives no evidence for the attribution, never states the degree of human direction in this operation, and does not describe the initial compromise; the only autonomy language describes the framework. E1 (actor operated AI agents) PRESENT at Grade B on the reproduction's reading, because no artifact ties the telemetry to the framework, which is stricter than the record's Grade A on that element and is adopted: the candidate is Grade A on the telemetry elements and Grade B on the agency element. E2 PRESENT A; E4 absent (no separation made); E5 split, downstream activity stated as fact at A, the ConnectWise attribution an assessment at B. Independence satisfied on the source's own text. Re-adjudication on a source statement separating unattended agent action from operator direction, or an artifact tying the telemetry to the framework.",
  "cgs_provisions": "CGS-2.2, CGS-3.1, CGS-3.2, CGS-6.2",
  "record_links": "CHQ-RAT-2026-045; the signal ledger SN-2026-10-26-01",
  "status": "VALID",
  "admission_status": "Not counted. Held after a machine blind reproduction on 3 November 2026 returned indeterminate on the agency element. Re-adjudicated if a source separates unattended agent action from operator direction."
}
```