Verification Record
AOS-AAH-2026-001 · v1.0

Ownership, Not Reach

An assessment of four publications of the Australian Signals Directorate on artificial intelligence — Agentic AI Harnesses — The layer above the model, Careful adoption of agentic AI services, Frontier AI cyber threat considerations for boards of directors, and Opportunities for AI in cyber defence — read whole, from eight pinned captures, as at the retrieval dates in the references. All four reach supply: they ask for model provenance and lineage, for a software and AI bill of materials, for trusted sources and a trusted registry, for what a capability depends on in third-party models, services and data, and for the jurisdictions that process or store customer data. None of the four asks who can lawfully require production of a model, its weights, its logs, or the data it processes; the words compel and lawful occur in none of them. In three of the four, the supply question sits in a register other than the one that tells the reader what to do. This assessment establishes what these four instruments ask and require. It does not establish what the Directorate asks elsewhere, does not argue that any omission was deliberate, and does not claim the four form a pattern.

Reference
AOS-AAH-2026-001
Assessed
12 September 2026
Version
v1.0
The chain

Verification chain

Four things are pinned, and each can be checked independently of the others.

The assessment PDF. SHA-256: 10a522fbd6b812366ce99c023ed7e0285592e795008ef15ae44b502dd79770ec

Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.

The timestamp. The receipt AOS-AAH-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 13 September 2026 and pending confirmation in the Bitcoin blockchain at publication. It has since been anchored: the receipt served here carries one Bitcoin attestation. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.

Receipt SHA-256: da021ffacbd920ab2168966f1fbd485421836f98b22d0dac23b3a68f4afd2558

The assessed source. The assessment rests on nine pinned artefacts. Five of them are captures this practice retrieved from the publisher and holds as served; the other four are texts extracted from pinned PDFs by pdftotext -layout, which is the text every substring count and every detector verdict in this assessment was computed on. Two of the extractions were taken from blobs pinned by other registers of this corpus — asd-ai-cyber-defence-2026-08, attestation-survey-scoping-2026-08 — and the rest from this register’s own captures. Each blob was re-verified against the hash its row records when this page was generated; a miss would have stopped the render. Quotations were checked against the text layer of each pinned artefact - a web page with its markup stripped, the PDF’s extraction - not against page images; every count states the artefact it was taken from and the test that produced it, and every statement that something is absent states the population searched.

Re-fetch, measured at this case’s own pins. The log at RETRIEVAL-LOG-2026-09-12.tsv records four of the five own captures fetched twice within the minute under convention 50, each pair byte-identical. AAH-5 carries no second fetch and its stability is unmeasured; it is held as the record of a negative and no claim is made about it. The four extracted rows were not fetched: they are derived from blobs already pinned, and the originating retrievals for the two taken from other registers stand on those registers’ logs. No row is a Wayback Machine memento.

RefArtefactExtracted fromSHA-256Third-party copy
AAH-1Agentic AI Harnesses - The layer above the model, ASD, landing page as served; its First published field reads 11 Sep 2026. Stable across both fetches.retrieved by this practicef9435043e72237cd4f7eccfa838779d87e1682d20509df3f00896b0c023ba09c-
AAH-2Agentic AI Harnesses - The layer above the model, ASD, publisher PDF, 12 pages. Stable across both fetches.retrieved by this practice6cfba14702b47723a5bf87d9786518a90d0b7a00f1d09d3b2d289ca3641b402c-
AAH-3Careful adoption of agentic AI services, ASD ACSC with CISA, NSA, Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK, landing page as served. Stable across both fetches.retrieved by this practicef0a700bec3ea3732fefbeef89f9c0dd275f638371842406bc3676eb1c4b91a02-
AAH-4Careful adoption of agentic AI services, publisher PDF, 29 pages, served from the publisher 2026-05 directory. Stable across both fetches.retrieved by this practiced41bc59cde8ddcc00bf69d09a3bef9f3c577225ba99f9d8aa61c2b76bc27b74d-
AAH-5ASD artificial intelligence index page as served, cyber.gov.au. Its publication list is in the markup as served and carries fifteen cards, each with a title, a path and a description; thirteen of the paths sit beneath the artificial intelligence path.retrieved by this practice21643fce7dfefa0f907144d5c55d29fc2e805379d7d35c24662c1f89deb19154-
AAH-T1Agentic AI Harnesses, text extracted from AAH-2 by pdftotext -layout; the text every substring count and detector verdict over this instrument was computed on. 380 lines, 22,396 bytes.AAH-2 · this registere978c859e2d5627a64dbffe5a0f23b6fc46664cf66a242ff7c74745d36b76725-
AAH-T2Careful adoption of agentic AI services, text extracted from AAH-4 by pdftotext -layout. 1,115 lines, 69,761 bytes.AAH-4 · this registerf82aa7713a92bc1f0f3cc703b5f500ea336bd12a7f1aec6deed57568b4f6b2ef-
AAH-T3Frontier AI cyber threat considerations for boards of directors, text extracted from AT-ASD-2 as pinned in attestation-survey-scoping-2026-08. 315 lines, 15,501 bytes.AT-ASD-2 · attestation-survey-scoping-2026-085b32861df0597d8996fdf75a5c2164dad310cd2bf2e31c4107cb8ac14471add9-
AAH-T4Opportunities for AI in cyber defence, text extracted from A-GUID-1 as pinned in asd-ai-cyber-defence-2026-08. 806 lines, 51,313 bytes.A-GUID-1 · asd-ai-cyber-defence-2026-083c973ba776ab80db3a386ed3f8d760a2fd445d86b79f787f408776f39be4f806-

Of the nine artefacts, none is a third-party archival copy: no Wayback Machine memento is pinned here and no independent capture of any row is held. The five own captures were retrieved from the publisher by this practice; the four extractions derive from PDFs pinned here or by the registers named above. A reader must rely on this site, on those registers’ pages, or on the publisher’s server.

The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 13 September 2026, the publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.

Versions

Version history

One version. The assessment date and the publication date are both recorded, and they differ.

VersionAssessedPublishedSHA-256Status
v1.012 September 202613 September 202610a522fbd6b812366ce99c023ed7e0285592e795008ef15ae44b502dd79770eccurrent · download

The cover carries 13 September 2026, the day this assessment was published. The reading it records was made on 12 September 2026, the date the sources were retrieved and the date the version table gives as assessed. Two dates are recorded because there are two acts, and the cover carries the later one.

Corrections

Corrections

None. This is the first published version. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.

Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit, which is tracked with the source.

Download

Assessment PDF

AOS-AAH-2026-001-v1.0.pdf · 191,294 bytes · 24 pages

SHA-256: 10a522fbd6b812366ce99c023ed7e0285592e795008ef15ae44b502dd79770ec

OpenTimestamps receipt