Named, Confidential

Verification chain

Four things are pinned, and each can be checked independently of the others.

The assessment PDF. SHA-256: dcf09fa5014a31e38f8ee6735c0a1cd9593b96d9b5b12d8665405a4af66fba1e

Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.

The timestamp. The receipt AOS-DGC-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 3 October 2026 and pending confirmation in the Bitcoin blockchain at publication. The receipt served here carries no Bitcoin attestation and is pending still. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.

Receipt SHA-256: ba487e39a047b821b41ca55a58e936e8fd2609211fc8c49d6999256272b34fa7

The assessed source. The assessment rests on 65 pinned artefacts, none retrieved by this case itself. 62 are first pinned in a register here, each from a blob the scoping run of 3 October 2026 retrieved or was given and holds in general-findings/dse-google-secret-cloud-2026-10, which keeps retrieval logs and no register; 3 are inherited under convention 7 from the registers of 2 other cases of this corpus. Each row records its originating retrieval and this case’s re-verification; no origin register moved. Every blob was re-verified against the hash its row records when this page was generated; a miss would have stopped the render. Quotations were checked against the text layer of each pinned artefact - a web page with its markup stripped, the PDF’s extraction, and for the Defence imagery caption the caption data embedded in the captured page - not against page images; every statement that something is absent states the documents searched.

Re-fetch, measured at retrieval. Every address the scoping run retrieved was fetched twice within the minute under convention 50, both bodies kept, and the result carried into STABILITY-2026-10-03.tsv. Of the 59 rows so measured, 46 returned the same bytes twice; 9 returned different bytes with the same visible text, so the text quoted from them can be re-verified by refetching and the bytes cannot; and 4 returned different bytes on each fetch, so each pin establishes what was served at its logged time. Each such row says so in its own name field. The other 6 are not in that record: the two Senate Estimates transcripts, supplied by the director and not fetched by this practice; the AusTender OCDS page-hash list, whose 3,206 pages were each fetched once and pinned by hash; and the three rows held by other cases, which stand on their origin register’s log.

None of the 65 artefacts has an independent capture pinned here. The captures were retrieved from their publishers by this practice, or supplied by the director where the publisher refuses scripted fetches. A reader must rely on this site, on the origin register’s page, or on each publisher’s server.

The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 3 October 2026, the publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.

Version history

One version. The row records the date the version was made and the date it was published.

The cover carries 3 October 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.

Corrections

None. This is the first published version. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.

Corrections made before publication are not listed here. They are recorded in the case log and review records of the scoping run, tracked with general-findings/dse-google-secret-cloud-2026-10.

Assessment PDF

AOS-DGC-2026-001-v1.0.pdf · 119,818 bytes · 8 pages

SHA-256: dcf09fa5014a31e38f8ee6735c0a1cd9593b96d9b5b12d8665405a4af66fba1e

OpenTimestamps receipt