Verification chain
Four things are pinned, and each can be checked independently of the others.
The submission PDF. SHA-256: 27ce03351014a048701bf53bebf11a4ca07ab5976182165a5c85ef057dca81e2
Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.
Lodgement. The document was lodged through the department’s online form on 1 October 2026 at 20:10 AEST, and section 08 of the document says it would be published after lodgement so that the copy the department holds and the copy a reader can fetch are the same bytes. The PDF here is the build the practice reports uploading, unchanged. The form’s confirmation page, pinned above as AIS-CONF-1, records that a submission was received; it names no file and carries no reference number, so it does not by itself establish which file was uploaded.
The timestamp. The receipt AOS-AIS-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 1 October 2026 and pending confirmation in the Bitcoin blockchain at publication. The receipt served here carries no Bitcoin attestation and is pending still. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.
The assessed source. This case’s register holds fifteen pinned artefacts. Fourteen are captures this practice made on 20 September 2026: the consultation paper, the paper’s page, the online form and three of its steps, the Expectations document, the Digital Transformation Agency’s principles for coordinated contracting arrangements with their companion page and media release, and the four sites’ robots files. Nine are the bodies as served and held as served; five are rendered captures saved from a browser, because those addresses answered a plain request with a bot challenge. Each row gives the address it was taken from; this site serves none of these artefacts, only their hashes. One is the online form’s confirmation page after lodgement, printed to PDF on 1 October 2026. Each blob was re-verified against the hash its row records when this page was generated; a miss would have stopped the render.
Re-fetch, measured at this case’s own pins. The retrieval logs record every raw body fetched twice within the minute under convention 50: nine pairs were byte-identical. Five rendered captures are unmeasured: each was saved once from a browser, and the logs’ second fetch of the paper’s page and of the form was of the raw body, not of the capture pinned here. The confirmation page was not fetched. No row is a Wayback Machine memento.
| Ref | Artefact | Origin | SHA-256 | Third-party copy |
|---|---|---|---|---|
| P-PDF-1 | Getting it right: Building AI infrastructure that works for Australia, consultation paper, September 2026, as published by PM&C | retrieved by this practice, 20 September 2026 · https://www.pmc.gov.au/sites/default/files/resource/download/ai-consultation-paper.pdf | 691891b7d5df2495b11ddb98c150cb8095e80821f035d8bc15e0562741ed961d | - |
| I-EXP-1 | Expectations of data centres and AI infrastructure developers (23 March 2026), Department of Industry, Science and Resources, served inline as the publication page and not as a separate file: the page carries no PDF, DOCX or other document link. The FIRST hash-pinned capture of this document in the corpus; ai-data-centres-inquiry-2026-06 cited it from a Sources.yaml entry with no blob and no register row | retrieved by this practice, 20 September 2026 · https://www.industry.gov.au/publications/expectations-data-centres-and-ai-infrastructure-developers | 3b63d5f1d16a83318ae7c91fdb820f3cc247bca528e5002c6d50acce59ab04d5 | - |
| D-CCA-1 | Coordinated contracting arrangements (CCA) principles, Digital Transformation Agency. Byte-identical to the capture of 18 September 2026 that the corrections register's three Not a correction sections of that date rest on; acquired here under convention 50, which those were not | retrieved by this practice, 20 September 2026 · https://www.digital.gov.au/coordinated-contracting-arrangements-cca-principles | e987fcb79c8d04dca9e5a8a9e9b725225ad5fa56e52e178bba9c46dfdb94f60e | - |
| D-CCA-2 | CCAs vs other procurement and contracting arrangements, Digital Transformation Agency. Byte-identical to the 18 September 2026 capture, as above | retrieved by this practice, 20 September 2026 · https://www.digital.gov.au/ccas-vs-other-procurement-and-contracting-arrangements | 1c9817a1dff1d524fc91ba6569a911a4ff9cda6d75046a524c014056fde049de | - |
| T-REL-1 | Insights from our consultation to shape new principles for a coordinated contracting arrangement suitability framework, Digital Transformation Agency media release, which dates the CCA principles 31 August 2026. Byte-identical to the 18 September 2026 capture, as above | retrieved by this practice, 20 September 2026 · https://www.dta.gov.au/media-releases/insights-our-consultation-shape-new-principles-coordinated-contracting-arrangement-suitability-framework | 6e69fc28d667783b116453fd9986043fbe96a6c94eb105f9b9940adfddb792f8 | - |
| P-ROBOTS-1 | robots.txt, www.pmc.gov.au, read before any source on that host | retrieved by this practice, 20 September 2026 · https://www.pmc.gov.au/robots.txt | 17f7b0b22f4a02e7b9d4b252bf47b78870c738d7f35dcfdb043b02470e347603 | - |
| I-ROBOTS-1 | robots.txt, www.industry.gov.au, read before any source on that host | retrieved by this practice, 20 September 2026 · https://www.industry.gov.au/robots.txt | 60ca92704d0e3955ee26dc5ee379797fa49ae7c92749a397f704a518aefb87f7 | - |
| D-ROBOTS-1 | robots.txt, www.digital.gov.au, read before any source on that host | retrieved by this practice, 20 September 2026 · https://www.digital.gov.au/robots.txt | 49c757bed10f54aaa00eeaf4dd7e553a1a412764ea57a55c576cabe4bd59c6de | - |
| T-ROBOTS-1 | robots.txt, www.dta.gov.au, read before any source on that host | retrieved by this practice, 20 September 2026 · https://www.dta.gov.au/robots.txt | 6eacb9ae6dce487df84ddcfca10089ee254e8ec7aecdfbd58c159e5dda580fec | - |
| P-PAGE-1 | Getting it right: Building AI infrastructure that works for Australia: Consultation paper - September 2026, resource page, Department of the Prime Minister and Cabinet. RENDERED DOM capture saved by browser, on the caio-ao-scoping-2026-08 precedent: the address is bot-challenge gated and its raw HTTP body under convention 50 was a 212-byte Incapsula challenge stub, logged as P-PAGE-1 in RETRIEVAL-LOG-2026-09-20-sources.tsv. retrieved_utc is the browser save time, not a served time; this row has no HTTP status, no agent string, no second fetch and no stability value | rendered capture by this practice, 20 September 2026 · https://www.pmc.gov.au/resources/getting-it-right-building-ai-infrastructure-works-australia | a5783a0b071d3869da97f72ae7d81f734ff4d4f02566739c909d12694d9675b7 | - |
| P-FORM-1 | Australia's AI Consultation, the online submission form, STEP 0, the landing step, Department of the Prime Minister and Cabinet. RENDERED DOM capture saved by browser, as above; the raw HTTP body was a 954-byte Incapsula block page reading Request unsuccessful, logged as P-FORM-1. Carries the how-to-submit text, the closing time and the privacy and publication notice. retrieved_utc is the browser save time, as above | rendered capture by this practice, 20 September 2026 · https://www.pmc.gov.au/domestic-policy/office-ai/ai-infrastructure-consultation | cad4a8c148a3ef9c7154d96de5bcb06b11eef59d8143140e7914cf18bb89d17a | - |
| P-FORM-2 | Australia's AI Consultation, the online submission form, STEP About you, with Terms and Conditions shown Completed. RENDERED DOM capture saved by browser, on the same precedent and for the same reason as P-FORM-1: the address is bot-challenge gated. Carries the optional identity fields and their maxlength attributes. This capture was not fetched over HTTP by this practice and carries no HTTP status, no agent, no second fetch and no stability value; retrieved_utc is the browser save time | rendered capture by this practice, 20 September 2026 · https://www.pmc.gov.au/domestic-policy/office-ai/ai-infrastructure-consultation | 6e0ee2fb7ded43f95079854400cd6ed2536a0709b3cfb99f2a5c70c126eb6d9d | - |
| P-FORM-3 | Australia's AI Consultation, the online submission form, STEP Response selection, which gates which question sets are shown: a respondent selects one or more of three topic areas and is shown only those questions. RENDERED DOM capture saved by browser, as above | rendered capture by this practice, 20 September 2026 · https://www.pmc.gov.au/domestic-policy/office-ai/ai-infrastructure-consultation | 36088839ebd90ea7142df7ff2e50f91bfb1ef75bfac5118d7337064cfe64c381 | - |
| P-FORM-4 | Australia's AI Consultation, the online submission form, STEP Conditions for AI training, the step carrying the questions this submission answers. Thirteen free-text fields, question_c1 to question_c13, and one file upload. RENDERED DOM capture saved by browser, as above. The Preview and Complete steps are NOT captured and nothing is established about them | rendered capture by this practice, 20 September 2026 · https://www.pmc.gov.au/domestic-policy/office-ai/ai-infrastructure-consultation | ae49770981b2393e67443c4c17e902e2f2dad06ba14713f20835886bdbe52e66 | - |
| AIS-CONF-1 | Australia's AI Consultation, the online submission form's confirmation page after lodgement of AOS-AIS-2026-001, topic Conditions for AI training, printed to PDF by the director from Firefox 156.0.1 at 20:10:28 AEST on 1 October 2026 before navigating away (convention 30). One page: "Thank you for your submission" and "Your submission has been received. You can no longer make changes to your submission." It reports no reference number and no filename, so it does not by itself identify the file uploaded; see LODGEMENT-RECORD-2026-10-01.md. The printed header truncates the page address; the url field is the form's address as pinned at P-FORM-1 | the form's confirmation page, 1 October 2026 · https://www.pmc.gov.au/domestic-policy/office-ai/ai-infrastructure-consultation | b697a54e55a9c64d10249a3251fb6cbe2829f5dbfd33e3e30bf57cfda054a830 | - |
Pinned in other registers, and quoted here. The document also quotes ten artefacts held in other cases’ registers of this corpus: instruments retrieved under those cases and this practice’s own published assessments. They are listed below with the register that holds each, and each was re-hashed against its pin when this page was generated. Every quotation in the document was checked against the text layer of its pinned artefact by the case’s quotation audit, run when this page was generated: 33 of 33 matched. The audit’s own record states that every quotation it passes was also read at image resolution before it entered the draft.
| Artefact | Register | SHA-256 |
|---|---|---|
| Hosting Certification Framework, March 2021 v2, the operative framework document (L-HCF-3) | hcf-reform-disclosure-2026-08 | 7b654f6e435bb90560701bf5e4905538f2da0cae73157ab4d58e710045855070 |
| AOS-HCE-2026-001 v1.2, this practice's published assessment | hosting-exemption-2026-08 | 660e026258b97b7caafa67586cbe1e883b670f3ee7e8995515c07516f61faff0 |
| AOS-ASR-2026-001 v1.5, this practice's published assessment | assurance-method-gap-2026-08 | 8c568dcd60d3d4054a2f4fd65f632d8b37eb6dc6026c37380927abf85f42f029 |
| AOS-RCH-2026-001 v1.0, this practice's published assessment | relevant-change-observability-2026-08 | f8567290585934022da77ba6df4102bb6d9dc6db8968d17e519d49bc5c475875 |
| AOS-CMP-2026-001 v1.4, this practice's published assessment | compellability-gap-2026-07 | d964c1ad31d43a788bd579430bd72483f5662ec895063eda45bc241a8dce4b5d |
| AI procurement checklist, PDF (A-GAP-2) | ai-policy-stack-scoping-2026-08 | 2ca910f7b4dad37051fec1a59bac6a82e7726d66c7bc13d3eebd3ce4545b135b |
| Guidance on AI procurement in government, rendered browser capture (A-GAP-1) | ai-policy-stack-scoping-2026-08 | 0a4756f2a29b22b6c9c982822c8bf1863ca2ee0cf41c5b1a36cffc44f74341b2 |
| Security of Critical Infrastructure Act 2018, Compilation No. 9, authorised PDF (SC-SOCI-1) | general-findings/submarine-cable-scoping-2026-08 | 3a0a2c0a2b49efe9cd30072d7a5c2c177b8ebac2ab17e363bb152e7d831115af |
| CISC Responsible Entity CIRMP Part 2A and Part 2AA Annual Report, the approved online form (AT-FORM-1) | attestation-survey-scoping-2026-08 | 08d0c24a579e41c8e226edc1e3c22d1d269ebff24ba3b2a47148c0e0d1af519a |
| Auditor-General Report No. 38 2021-22, critical infrastructure (R-ANAO-1) | hosting-exemption-followon-2026-08 | e33079ba26985ab2c37e3c6df0df003404256fd9ad52d3847a8e1446387be5ed |
None of these artefacts is a third-party archival copy: no Wayback Machine memento is pinned and no independent capture of any row is held. A reader must rely on this site, on the registers named, or on the publishers’ servers.
The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 20 September 2026, the day the assessment was first made, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.
Version history
One version. The row records the date the version was made and the date it was published.
| Version | Assessed | Published | SHA-256 | Status |
|---|---|---|---|---|
| v1.0 | 1 October 2026 | 1 October 2026 | 27ce03351014a048701bf53bebf11a4ca07ab5976182165a5c85ef057dca81e2 | current · download |
The cover carries October 2026, the month this version was made. It was made and published on 1 October 2026.
Corrections
None. This is the first published version. Any correction to this submission will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.
Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit, which is tracked with the source.
Submission PDF
SHA-256: 27ce03351014a048701bf53bebf11a4ca07ab5976182165a5c85ef057dca81e2