Acting as operations@arctransformationgroup.com (configured, not authenticated)

API http://127.0.0.1:8787 ok v2.1.0

← Assurance

Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.

Control
ARC-AI-006 (version 1)
Assurance
automated
Evaluated
2026-10-26 09:18:30Z
Run
arc_run_6fddf9…
Integrity digest
sha256:27a10fabaef3f602c35762e12c46aad7fa6e384d013f191f2616394e27d1de12

What this result does not establish

  • Without an externally anchored head this control cannot pass, and that is the intended behaviour rather than a defect. ARC verifying its own log against its own copy of the head proves nothing to a reader who does not trust ARC.
  • The store's head marker file is defence against accidental truncation — a crash, a partial restore, a log rotation that dropped the tail. An attacker who can rewrite the log can usually rewrite that file too.

Observations

1 examined, 1 failing
Observations
Result Subject Kind What was observed Evidence
failaudit-chainaudit42 records are internally consistent, but the head (sha256:24303ba3affbbff40be8183da6028811124c5c8430a1af42e6b9bf8027f82746) was not checked against an external anchor, so truncation cannot be ruled out—

Findings raised

arc_fnd_62bfe8…

{
  "id": "arc_asm_55d9a5f26274ecb976d0ff3d9e35bdb7",
  "schemaVersion": 2,
  "runId": "arc_run_6fddf961fa6f723fc7c7aff98056028d",
  "controlId": "ARC-AI-006",
  "controlVersion": 1,
  "organizationId": "default",
  "status": "not_assessable",
  "assurance": "automated",
  "summary": "The chain is internally consistent, but without an externally anchored head this control cannot pass: truncation is undetectable from the records alone.",
  "observations": [
    {
      "subject": "audit-chain",
      "subjectKind": "audit",
      "ok": false,
      "detail": "42 records are internally consistent, but the head (sha256:24303ba3affbbff40be8183da6028811124c5c8430a1af42e6b9bf8027f82746) was not checked against an external anchor, so truncation cannot be ruled out"
    }
  ],
  "window": {
    "from": "2026-09-26T09:18:30.472Z",
    "to": "2026-10-26T09:18:30.472Z",
    "actionsConsidered": 7,
    "evidenceConsidered": 8
  },
  "limitations": [
    "Without an externally anchored head this control cannot pass, and that is the intended behaviour rather than a defect. ARC verifying its own log against its own copy of the head proves nothing to a reader who does not trust ARC.",
    "The store's head marker file is defence against accidental truncation — a crash, a partial restore, a log rotation that dropped the tail. An attacker who can rewrite the log can usually rewrite that file too."
  ],
  "findingIds": [
    "arc_fnd_62bfe86303fab1d5182ee25da3551413"
  ],
  "evaluatedAt": "2026-10-26T09:18:30.472Z",
  "evaluationMs": 0.15783,
  "integrityDigest": "sha256:27a10fabaef3f602c35762e12c46aad7fa6e384d013f191f2616394e27d1de12"
}