Verification Record
AOS-CPI-2026-001 · v1.0

Who the Record Names

An assessment of what the public record publishes about the Commonwealth’s five-year Microsoft arrangement and the companies named on it. The AusTender notice names two suppliers, one incorporated outside Australia; it publishes no document and assigns no product or service to either. The offshore supplier holds an Australian Business Number as an Other Incorporated Entity, with no ASIC registration line, and no entity of its name appears on the captured ASIC searches. Microsoft’s published customer terms for Australia define Microsoft as the Irish company under Irish law. The hosting certification entry is a product name that matches no entity name on either register. Every contract notice reported under the arrangement names the Australian company, and none describes a cloud service. This is not a finding about which company any Commonwealth customer contracts with for Azure: no retrieved artefact says. It is not a finding of non-registration in the legal sense, only that the captured searches found no entry.

Reference
AOS-CPI-2026-001
Assessed
4 September 2026
Version
v1.0
The chain

Verification chain

Four things are pinned, and each can be checked independently of the others.

The assessment PDF. SHA-256: c5158126154b14fdb9fc85c402943c3ddfaab1360e7f5f25c55f12047ee102da

Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.

The timestamp. The receipt AOS-CPI-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 4 September 2026 and pending confirmation in the Bitcoin blockchain at publication. It has since been anchored: the receipt served here carries four Bitcoin attestations. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.

Receipt SHA-256: 427e91d0f513687911bcda988cc7c26f8c1dc1fcc23614d2fd3c5b8285392185

The assessed source. The assessment rests on 42 pinned artefacts: 38 retrieved and pinned by this case, 2 inherited under convention 7 from other cases in this corpus, and 2 published assessments of this practice, relied on at the hash their own attestation records, each re-verified against its recorded hash before this record was written. All 42 are pinned by hash and none independently archived. Quotations were checked against the text layer of each pinned artefact - a web page with its markup stripped, the Word document’s text, the spreadsheet’s cells, the PDF’s extraction - not against page images; every count states the artefact it was taken from and the test that produced it.

Re-fetch, measured 2026-09-06. Every own raw-body row of this register, 25 rows, was fetched twice that day and the two hashes compared. 4 returned different bytes on each fetch, D-BUY-3, D-BUY-4, T-SON-1, T-CNSON-3, and are marked in the table: their hashes stand only against the copies this practice holds and cannot be confirmed by fetching. The rest returned the same bytes twice on that day, which holds until the publisher changes the page. The measurement is in STABILITY-2026-09-06.tsv beside the register; the register itself is unchanged and pinned, does not point to that file, and a reader of the register alone does not see this (convention 50).

RefArtefactSHA-256Third-party copy
T-SON-1AusTender, Standing Offer Notice SON4221349, Microsoft Whole of Government Volume Sourcing Agreement 6, as served 3 September 2026 Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address.f92f78c27d785f97aecefc3f7f0dfa0b22ae9caab41a73412862c01ef2085ef9-
T-CNSON-1AusTender, Contract Notice by Standing Offer report, SON4221349, all active agencies, publish date 1 Jan 2019 to 3 Sep 2026, xlsxdca754545d265fbc026f3d3dcee1c2ec42c54f804a120722c6e79d30058f4400-
T-CNSON-2AusTender, Contract Notice by Standing Offer report, SON3615953, all active agencies, publish date 1 Jan 2019 to 3 Sep 2026, xlsxf68984136d12ce039e2a354c9e786484fbb6b7bc0f4a8b642e0c3068cce8d9ed-
T-CNSON-3AusTender, Contract Notice by Standing Offer criteria form, as served 3 September 2026 Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address.db094b4d29c8d3711aec15f6fcb4acb987e94655c5c551474d9565ed82a97df8-
B-ABR-1ABN Lookup, current details, ABN 71 203 501 304, as served 3 September 2026112603500807389b304c9b6e5c7d1849a84bbf868385f655666eb172836b89ee-
B-ABR-2ABN Lookup, historical details, ABN 71 203 501 304, as served 3 September 20263643c738ac6734447f2a819f8c3b636a32b032adcc8f3fe6c54820a514b34eb8-
B-ABR-3ABN Lookup, current details, ABN 29 002 589 460, as served 3 September 2026c715055669d76b1081e28ac816bda59a6c45985cabd7a02276ac7922cf849925-
B-ABR-4ABN Lookup, historical details, ABN 29 002 589 460, as served 3 September 2026287746d42bfd33976e5dd1b376705bc5df22e4a60458d3cc532b2a636a716a0d-
B-ABR-5ABN Lookup, current details, ABN 16 077 753 390, as served 3 September 2026530b47a433c80f7dab21e63d7485def5c7c63a38c72457bc07c43c097408e4aa-
B-ABR-6ABN Lookup, current details, ABN 31 163 792 078, as served 3 September 2026fdbdf724a0d80b7e8c72ef4ed5cd9be07c2bdfa977810f45b63e1311ed1187f1-
B-ABR-7ABN Lookup, name search "Microsoft Azure", active ABNs and names, as served 3 September 2026b3ca70d1c68efa389d4e9b9b3c1a0078444d924b55d395605901f0ee32069b7a-
B-ABR-8ABN Lookup, response to ABN 16 077 573 390 (the number printed in the FY21 statement), as served 3 September 2026c5aa40474eda5fe2a4618e35fa5ad0b3c55ee1fd8e62799a664ed8fa5a108001-
A-ASIC-1ASIC Connect, Organisations and Business Names search "MICROSOFT IRELAND", rendered DOM, scripted capture, 3 September 2026bc8a9be42d37888149304735471b9f5cfb2cf3641d9e2dc78eab812a8529be4c-
A-ASIC-2ASIC Connect, Organisations and Business Names search "MICROSOFT IRELAND OPERATIONS LIMITED", rendered DOM, scripted capture, 3 September 202684350a13e890fb8205ba213e7f567373259d5d2db0a7aff6fe274b4e5799841a-
A-ASIC-3ASIC Connect, Organisations and Business Names search "71203501304", rendered DOM, scripted capture, 3 September 20269eb0bc0c9b2f2032982edfe6e991db77aeeccba035e44972ee8b10503c0809e8-
A-ASIC-4ASIC Connect, Organisations and Business Names search "002589460", control, rendered DOM, scripted capture, 3 September 20263fda08aa48c4102b9ea24dfd017e2791c5f164f38e8363274ae36af0f11f9f16-
A-ASIC-5ASIC Connect, response to Organisations and Business Names search "MICROSOFT" from a scripted session, rendered DOM, 3 September 2026 11:11 UTC4cdac680c2b78f18e6a64e5beff95ddf5af144f0cfad7a1af7825636466c62a8-
A-ASIC-6ASIC Connect, Organisations and Business Names search "MICROSOFT", page 1 of results at 10 per page, browser complete save by the director (rewrites resource references; not the served bytes), 3 September 20262f288684a1fdc8fadc1f0c14e57f68012f370881698b3ea17fb6b0a0cf86cb29-
A-ASIC-7ASIC Connect, Organisations and Business Names search "microsoft azure", browser complete save by the director (rewrites resource references; not the served bytes), 3 September 2026028e7886dc0ed73ed6b9aa11e358751bb11ce689e0c74fe16b1891d8076b1068-
A-ASIC-T1Rendered-DOM transcription of four ASIC Connect searches, 3 September 2026 03:30 to 03:41 UTC, practice working record4ac245c8013ac518f7c211fcbc86fb240363853a2b7b3358a6212bfaae6f411a-
M-MCA-1Microsoft Customer Agreement, general form, PDF from microsoft.com Licensing Documents, retrieved 2 September 20266e8bb0dc3d50d164d6ad1551e96c95d8b16044f14e5274fbe9db1e45f6e96a41-
M-MCA-2Microsoft Customer Agreement sample, Australia, March 2023, docx from microsoft.com Licensing Documents, retrieved 2 September 2026822f781858623d304779f94df3de03e25e7ec2f6b374afcf59f1de98b7f683ab-
M-LRD-1Microsoft Learn, "Understand your Microsoft Customer Agreement invoice in Azure", as served 2 September 20267db35167d7cb6098d4f27ef8b3c2c24993030295c681f4077ee55bd499443d63-
M-NEWS-1Microsoft news, "Enabling the next phase of digital government in Australia", 26 February 2026, as served 3 September 2026fbb9040704f3a7ade446f723a1c14c11ecb65d9972e395bc5d4a9a5f1b292386-
M-NEWS-2Microsoft Australia news, "Federal Government inks major cloud deal with Microsoft", 2019, as served 3 September 20263b04451834f44bfbc0954865d193b398149de14aa19ac3bdb7ab3c247b17012b-
D-DTA-1Digital Transformation Agency, article "DTA signs new 5-year agreement with Microsoft", 26 February 2026, rendered DOM, scripted capture 3 September 2026c83ef7e793655414af00561616704dcb78ac5aaf23f9a7afd5d129a895cb2090-
D-DTA-2Digital Transformation Agency, BuyICT page, reached from the Microsoft Volume Sourcing Arrangement address, as served 2 September 20266ff29106d56007e3ab1546a6702fffea5156e19ba47a6ed3344ade7dda7ac7f5-
D-BUY-1BuyICT home page, rendered DOM, scripted capture 3 September 2026ae93de293f3856b130cd1620633f3ea33e81dbcb68c5f53c72496eebf28cb4ea-
D-BUY-2BuyICT, buyer arrangement address for microsoft, rendered DOM, scripted capture 3 September 202646b8ae3428fab5583a0c9fb54d53a35e7d2606f22b27af475af505a903a6d045-
D-BUY-3BuyICT home page, raw HTTP body, 3 September 2026 Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address.13a95cb433f066b1336bea15187a414370e7eaf3b1bb3575e1e2d596ba3ac940-
D-BUY-4BuyICT, buyer arrangement address for microsoft, raw HTTP body, 3 September 2026 Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address.fe0e1af62442469e07b735ed49c31426b24324896c5e4a1a2e66d865d55fa9a9-
S-MSR-1Modern Slavery Statements Register, statement 2025-3321 page, as served 3 September 202697d2c30b29478217ed345fc9c784dc0cb5abf1934a1674afdb7ca05a926c96c8-
S-MSR-2Modern Slavery Statements Register, statement 2025-3321 PDF, "Human Rights Transparency Report 2025", 33,417,377 bytescb69f81da2d00616edc22bd4fec30d526c16a2154ac359aa3e0f9b7a2fe51515-
H-HCF-L1Hosting Certification Framework, Certified Service Providers page, as served 3 September 20260036bc5d6b8d18adfc10fcc713cacfb23dfece0a10267e57350304118fd0133d-
L-CA-1Corporations Act 2001, compilation of 10 July 2024, Federal Register of Legislation epub, document 34fd1617593a5ffc6ee60d10a03f97d328f1f93423dec692631d14c6262e45912-
L-CA-2Corporations Act 2001, compilation of 10 July 2024, Federal Register of Legislation epub, document 1bcd2dae411c040afe6104963f9d4d089d51304d9b8ab0afade5cebed6df5bf5a-
L-ASIC-1ASIC, "Register a foreign company in Australia", as served 3 September 2026bd2d02bc004da1d8c3e4a5df1b9d0d851c8d840e9e67b5d42197c992d8eb0011-
L-ASIC-2ASIC, "Search ASIC registers", as served 3 September 2026089a9b7c977aca9bf7b3058672275fc3056769f3b3e50e4ac8cce7a91ca94113-
H-HCF-1Hosting Certification Framework, Certified Service Providers page, register capture of 21 July 2026 [INHERITED CAPTURE, convention 7] Retrieved under hcf-strategic-2026-07 on 2026-07-21T13:19:06Z and re-verified against its recorded hash on 2026-09-03. The blob is held in that case; this row records the re-verification and is excluded from this case stated capture window8ea432069b2f83781fc869e93c53c05e7e0a44c84209d943429e1e8e91709c4d-
H-MSAU-1ASIC current company extract, Microsoft Pty Ltd (ACN 002 589 460) [INHERITED CAPTURE, convention 7] Retrieved under hcf-strategic-2026-07 on 2026-07-21T10:07:38Z and re-verified against its recorded hash on 2026-09-03. The blob is held in that case; this row records the re-verification and is excluded from this case stated capture window923ff29b0723170e8198bba599ee364456ca12697569acba629527d37107f85a-
P-HCF-1AOS-HCF-2026-001 v1.3, published PDF [INHERITED CAPTURE, convention 7] Retrieved under hcf-strategic-2026-07 on 2026-09-02T14:48:54Z and re-verified against its recorded hash on 2026-09-03. The blob is held in that case; this row records the re-verification and is excluded from this case stated capture window7a545b3316667905c78b52ec6b6c7dbf38eb9627953453c67fd6abd99c513a22-
P-CMP-1AOS-CMP-2026-001 v1.3, published PDF [INHERITED CAPTURE, convention 7] Retrieved under compellability-gap-2026-07 on 2026-08-24T07:45:30Z and re-verified against its recorded hash on 2026-09-03. The blob is held in that case; this row records the re-verification and is excluded from this case stated capture window090fc69e08cda10ca98d4f7cee70ef28dca43b83c93cb52537888c622103866c-

None of the 42 pinned artefacts has an independent capture pinned here. 37 were retrieved from their publishers by this practice; 1 is the practice’s own transcription (A-ASIC-T1); 2 inherit captures held in another case of this corpus (H-HCF-1, H-MSAU-1); 2 are this practice’s own published assessments (P-HCF-1, P-CMP-1). A reader must rely on this site or on each publisher’s server.

The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 4 September 2026, the publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.

Versions

Version history

One version. The assessment date and the publication date are both recorded, and here they are the same day.

VersionAssessedPublishedSHA-256Status
v1.04 September 20264 September 2026c5158126154b14fdb9fc85c402943c3ddfaab1360e7f5f25c55f12047ee102dacurrent · download

The cover carries 4 September 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.

Corrections

Corrections

None. This is the first edition and it has not been corrected since publication. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.

Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit and pre-publication audit, which are tracked with the source.

Download

Assessment PDF

AOS-CPI-2026-001-v1.0.pdf · 146,928 bytes · 13 pages

SHA-256: c5158126154b14fdb9fc85c402943c3ddfaab1360e7f5f25c55f12047ee102da

OpenTimestamps receipt