Verification chain
Four things are pinned, and each can be checked independently of the others.
The assessment PDF. SHA-256: b31c3804796cee2a173a59ac28353e26cd8a01c156627c3d5499c1d3622cfce2
Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.
The timestamp. The receipt AOS-AMU-2026-001-v1.1.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 15 August 2026 and pending confirmation in the Bitcoin blockchain at the time of publication. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.
Receipt SHA-256: 4ebf923cd5f3f79cfb97947f54450853bae35319d36729a0d73518cac1d4fd4a
The assessed source. The assessment rests on 6 pinned artefacts, 4 labelled primary and 2 secondary, each pinned by hash. 5 of the 6 are independently archived; the other 1 is held only here and by this practice. Every quotation was read from the pinned copy at page-image resolution.
| Ref | Artefact | SHA-256 | Third-party copy |
|---|---|---|---|
| M-MOU-1 | Memorandum of understanding between the Australian Government and Anthropic on collaboration on AI opportunities. Department of Industry, Science and Resources, published 1 April 2026. Full text as served, HTML; no PDF attachment | a0c0d962774d787abaf867afa1f5dd3bf3cfcc043b8c1bfa36c14adaa58c1bed | archived copy |
| M-MOU-2 | Memorandum of understanding between the Australian Government and Microsoft on collaboration on AI opportunities. Department of Industry, Science and Resources, published 23 April 2026. Full text as served, HTML; no PDF attachment | c4ae76e2d1c0e5349202a5ccb692303627dcfc700078e4fd67b91e4425a7a328 | archived copy |
| M-ORD-1 | Anthropic, Statement on the US government directive to suspend access to Fable 5 and Mythos 5, 12 June 2026. Company statement, HTML as served. SECONDARY as to what the order did; primary only as to what the company said | 8ab9353169af6cb6bf6113396939628ac2bb138c73f0f02b4228c7f27e416868 | archived copy |
| M-ORD-2 | Anthropic, Redeploying Fable 5, 30 June 2026 with a 1 July 2026 update. Company statement, HTML as served. SECONDARY as to what the order did | eb90f24ae4e8ca74a38a0d20c86d97bd0afaa5ac98d0ecb2ef2f6ce9c0cce967 | archived copy |
| M-MOU-3 | Memorandum of Understanding on Digital Resilience to Support the Security of Australia, between the Commonwealth as represented by the Department of Home Affairs and Microsoft Corporation. PDF, 5 pages, published by the Department on its Digital Resilience Agreements page | 855ebd607c2c7c38be0478d90c6cfcd49a20f576d3c481bb1d3574e2890f6e3e | archived copy |
| M-MOU-3P | Department of Home Affairs, Digital Resilience Agreements page, HTML as served. The page from which M-MOU-3 is published | d25e631272d6029773e4bbe68a543cbc56b2c56483fbec8428c0a06439857374 | - |
5 of the 6 pinned sources have a third-party capture, each fetched and hashed against the copy pinned above. The remaining 1 has none, and for that one a reader must rely on this site or on the publisher’s server.
The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to the assessment date. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.
Version history
Two versions. v1.1 corrects one sentence in v1.0. A revision does not replace its predecessor: v1.0’s bytes are unchanged, its hash still resolves, and the file remains downloadable at its own address.
| Version | Assessed | Published | SHA-256 | Status |
|---|---|---|---|---|
| v1.1 | 15 August 2026 | 15 August 2026 | b31c3804796cee2a173a59ac28353e26cd8a01c156627c3d5499c1d3622cfce2 | current · see Corrections |
| v1.0 | 15 August 2026 | 15 August 2026 | 2d083023b3832b07caccf1cc53de6b4cd098be1dc1884fc714d6e52bd03e11d6 | superseded, not withdrawn · see Corrections |
Both versions were assessed and published on 15 August 2026, and the cover of each carries that date. A revision keeps its predecessor’s SOURCE_DATE_EPOCH, because a revision is not a new reading - it is the same reading, corrected, and the moment of the reading did not move. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.
Corrections
v1.1, 15 August 2026 - one sentence corrected. v1.0 cited AOS-CMP-2026-001 for a proposition that assessment does not hold.
| Where | Was | Now |
|---|---|---|
| Section 1, the paragraph on earlier work | “They are cited for one proposition: that this is a question Commonwealth material has not put.” | “They are cited for those two findings and no more: for what the two instruments and the one question set each do not do, and not for any proposition about Commonwealth material at large.” |
Why. AOS-CMP-2026-001 finds that two named instruments - the Foreign Ownership, Control or Influence Risk Assessment Guidance and the Hosting Certification Framework, both administered by the Department of Home Affairs - do not test whether a certified provider can be lawfully compelled by a foreign government to disclose the data it holds. It makes no claim about Commonwealth material at large, and this document was not entitled to cite it for one.
No finding moves and no count moves. This assessment’s own finding rests on the material it read, not on the cited work. Nothing else in v1.0 is withdrawn or qualified, and v1.0 remains published at its own address with its own hash.
How it was found. While verifying an unrelated claim about the Information Security Manual, AOS-CMP-2026-001 was read again against the documents citing it. The defect exists independently of that work.
What no check caught. The corrected sentence does not quote AOS-CMP-2026-001. It is a citation whose scope exceeded its source, and no check in this practice reads a citing sentence against what the cited document holds.
This page, 17 August 2026 - one sentence corrected, and the note beside it corrected on 20 August 2026. The verification chain said “Both archived captures were fetched and hash identically to the copies pinned above, so a reader can check the quotations without relying on this site or on the publisher’s server.” Six sources were pinned then, five with a third-party capture and one without, so “Both” was wording carried from a two-source page and told a reader they could independently check every source when one could not be checked at all. That run also added a seventh source, and the note written with it recorded the six-source state it had just changed - it read “Six sources are pinned” beside a sentence correctly deriving 5 of 6. Corrected 20 August 2026: every present-tense count on this page now derives from the register, so no two of them can disagree. The assessment PDF, its hash, its finding and its attestation are unchanged - only this page changed. Recorded under convention 38, which leaves a false sentence on a published page registered rather than corrected except where it asserts verifiability a reader could act on.
Corrections made before publication are not listed here. They are recorded in the case’s own scope file, which is where the drafting record belongs.
Assessment PDF
SHA-256: b31c3804796cee2a173a59ac28353e26cd8a01c156627c3d5499c1d3622cfce2