ARC-AI-006 assessment
The chain is internally consistent, but without an externally anchored head this control cannot pass: truncation is undetectable from the records alone.
Not assessable
Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.
- Control
- ARC-AI-006 (version 1)
- Assurance
- automated
- Evaluated
- 2026-10-26 09:18:30Z
- Run
- arc_run_6fddf9…
- Integrity digest
- sha256:27a10fabaef3f602c35762e12c46aad7fa6e384d013f191f2616394e27d1de12
What this result does not establish
- Without an externally anchored head this control cannot pass, and that is the intended behaviour rather than a defect. ARC verifying its own log against its own copy of the head proves nothing to a reader who does not trust ARC.
- The store's head marker file is defence against accidental truncation — a crash, a partial restore, a log rotation that dropped the tail. An attacker who can rewrite the log can usually rewrite that file too.
Observations
1 examined, 1 failing
| Result | Subject | Kind | What was observed | Evidence |
|---|---|---|---|---|
| fail | audit-chain | audit | 42 records are internally consistent, but the head (sha256:24303ba3affbbff40be8183da6028811124c5c8430a1af42e6b9bf8027f82746) was not checked against an external anchor, so truncation cannot be ruled out | — |
Findings raised
{
"id": "arc_asm_55d9a5f26274ecb976d0ff3d9e35bdb7",
"schemaVersion": 2,
"runId": "arc_run_6fddf961fa6f723fc7c7aff98056028d",
"controlId": "ARC-AI-006",
"controlVersion": 1,
"organizationId": "default",
"status": "not_assessable",
"assurance": "automated",
"summary": "The chain is internally consistent, but without an externally anchored head this control cannot pass: truncation is undetectable from the records alone.",
"observations": [
{
"subject": "audit-chain",
"subjectKind": "audit",
"ok": false,
"detail": "42 records are internally consistent, but the head (sha256:24303ba3affbbff40be8183da6028811124c5c8430a1af42e6b9bf8027f82746) was not checked against an external anchor, so truncation cannot be ruled out"
}
],
"window": {
"from": "2026-09-26T09:18:30.472Z",
"to": "2026-10-26T09:18:30.472Z",
"actionsConsidered": 7,
"evidenceConsidered": 8
},
"limitations": [
"Without an externally anchored head this control cannot pass, and that is the intended behaviour rather than a defect. ARC verifying its own log against its own copy of the head proves nothing to a reader who does not trust ARC.",
"The store's head marker file is defence against accidental truncation — a crash, a partial restore, a log rotation that dropped the tail. An attacker who can rewrite the log can usually rewrite that file too."
],
"findingIds": [
"arc_fnd_62bfe86303fab1d5182ee25da3551413"
],
"evaluatedAt": "2026-10-26T09:18:30.472Z",
"evaluationMs": 0.15783,
"integrityDigest": "sha256:27a10fabaef3f602c35762e12c46aad7fa6e384d013f191f2616394e27d1de12"
}