The chain
Verification chain
Four things are pinned, and each can be checked independently of the others.
The assessment PDF. SHA-256: 2735b6d90e6b52410ca9ec1d398ac9bc2e17a7fcbf3c4f70c9517e30429df05a
Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.
The timestamp. The receipt AOS-ICL-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 4 September 2026 and pending confirmation in the Bitcoin blockchain at publication. It has since been anchored: the receipt served here carries four Bitcoin attestations. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.
The assessed source. The assessment rests on 27 pinned artefacts: 3 retrieved and pinned by this case, 3 extracted by this case from a pinned release archive and pinned here, and 21 inherited under convention 7 from another case in this corpus, each re-verified against its recorded hash before this record was written. All 27 are pinned by hash and 3 of the 27 are themselves Internet Archive captures. Quotations were checked against the text layer of each pinned artefact - the PDF’s extraction, a web page with its markup stripped, the spreadsheet’s cells - not against page images; every count states the artefact it was taken from and the test that produced it.
| Ref | Artefact | SHA-256 | Third-party copy |
|---|---|---|---|
| I-ISM-23 | ISM March 2026 changes (March 2026), the release change log, 9 pages, 770,145 bytes, extracted from I-ISM-6 (ZIP entry CRC32 bbc13f97) | 3cd7aeead67dbc5302d3637336308388d2f842f0013550c165dd4a154e45b734 | - |
| I-ISM-24 | System security plan annex template (March 2026), the machine-readable list of every control in the release, 162,996 bytes, extracted from I-ISM-6 (ZIP entry CRC32 aa0de8ee) | b9b5ab0fd90604efd53b673927bebe706d605a7ea6c64f3da74299b5853912ed | - |
| I-ISM-25 | ISM, Using the Information security manual (March 2026), chapter PDF, 868,377 bytes, extracted from I-ISM-6 (ZIP entry CRC32 cc7e78a6) | 44de1d494735ec2258ac1d12ff1413c2e9ff0fc3f26483f8c9ad759a643868b4 | - |
| I-IA-20260315134750 | Internet Archive capture of the ISM Guidelines for procurement and outsourcing page, 15 March 2026 13:47:50 UTC, raw id_ replay, 336,712 bytes | df644673b4961a9872512949be08af46d3e6646a1149b29f9c701f465a44f18b | Internet Archive replay |
| I-IA-20260316091721 | Internet Archive capture of the ISM Guidelines for procurement and outsourcing page, 16 March 2026 09:17:21 UTC, raw id_ replay, 336,714 bytes | a4fb0dc84b94cfe93048dc563fa419c1c8de6f6a81b54d9adb9cd4187ee1ca61 | Internet Archive replay |
| I-IA-20260902025519 | Internet Archive capture of the ISM landing page, 2 September 2026 02:55:19 UTC, raw id_ replay as served by the archive (gzip body, 97,886 bytes; decompressed 339,417 bytes, sha256 0a27af2629222f70) | 319c650248a73cf488415723ccb6b6a5dfad387e8169056ac78d5a3c2cb4ed86 | Internet Archive replay |
| I-ISM-1 | ISM Guidelines for procurement and outsourcing, June 2026 release. cyber.gov.au page as served, first published and last updated 09 Jun 2026 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-15T11:55:46Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 32c8af6a8f467f5a573faa76b93d01005bb4e078b3d4931e6fa0fe3b8c1bffa6 | - |
| I-ISM-2 | ISM Guidelines for procurement and outsourcing (June 2026), PDF chapter, 9 pages, linked from I-ISM-1 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-15T11:56:22Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 272cc6cdc11ecce202fe1969dcddefbd31317b40b2b5b27f8e6b8999de978048 | - |
| I-ISM-3 | Information security manual (June 2026), full release, 261 pages, authorised PDF from cyber.gov.au [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:31:50Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | be2f7c32855ccad55f09c3397e1ea8f79b30907b5a155568c2d8943ef668693f | - |
| I-ISM-4 | ISM June 2026 changes (June 2026), the release change log, 6 pages [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:31:50Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 4780b0c27a1faf766f3e117a11bfc2800deb409228ea7f2903cb60f5379ee4b9 | - |
| I-ISM-5 | System security plan annex template (June 2026), the machine-readable list of every control in the release [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:31:50Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | c7e2f6dc52ae558fd29732adc5faf36f8de404f58248513b179fdd48eecb3d34 | - |
| I-ISM-6 | Information security manual (March 2026), full release ZIP, 27 chapter PDFs, retrieved from the PUBLISHER's archived-releases index (not a third-party copy, not an archive capture) [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:51:05Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 10daaaeea199ad69e23daf6ada05165c97aca839392d5bd176c60f72a5cedc3d | - |
| I-ISM-7 | ISM Guidelines for procurement and outsourcing (March 2026), chapter PDF extracted from I-ISM-6, 9 pages, self-identifying 'Last updated: March 2026' [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:51:05Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 2fb43141801d0b4145266fa4a7fcb055963b7ccd64587ec5a4fd3234d9f44df7 | - |
| I-ISM-8 | ASD archived ISM releases index, the page that publishes nine prior releases; the discovery source for I-ISM-6 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-17T08:51:05Z, recorded in its register, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | f4a2410022bdc2719914f56e08b42e4fa43087314d75f8eda77ffbde68e9f43c | - |
| I-ISM-10 | ISM Guidelines for procurement and outsourcing (June 2024), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 473f08670684c5d671b5a4f61ba6d5b54b6116160b500c298aab6acce992574b, 29597346 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 387b5a2f826c3ef81fb5597d459db085a1d22b11b0e02ac42d8dc9251756be56 | - |
| I-ISM-11 | ISM Guidelines for procurement and outsourcing (September 2024), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 93f4647be3e66c9ea438874b17d3ed339b6af011c8f2ddfc1cd57619b28e4963, 29475431 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | c09abf49770c3ad41dad031b52a64d6b3cfe754724fb79605032284d05435372 | - |
| I-ISM-12 | ISM Guidelines for procurement and outsourcing (December 2024), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 5d2349bd1fb4476ac2398db28087d49b19073a3d4125ed5daedffb514d0a5db7, 29877878 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 0fcabcc1347baad1c0ebdef95f375d6e6f87ec903293d79193cd14bde740c281 | - |
| I-ISM-13 | ISM Guidelines for procurement and outsourcing (March 2025), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 ca1631fb977050bbe5305295de17547f1827bd7b6dc27e95b68811640abaea95, 30011110 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 463883f28819d690321f3dad789ce38258d06fa1a1caed81ea769859437ca89a | - |
| I-ISM-14 | ISM Guidelines for procurement and outsourcing (June 2025), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 d0d8c0f2c15542c3ea1b21d5c64e380da519d96b7a7e406cf9336348ac3ead38, 30129106 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | eef8c74d16af2b6e883e96b5a0105c584ba7ec602fc82ab85b2210d035e9daad | - |
| I-ISM-15 | ISM Guidelines for procurement and outsourcing (September 2025), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 a7da21411e73748e49f145ab6ac0f48d93ef01dfdcb9e9e367754190f3657295, 24187568 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 250d345701ab71749d4e9c8559f184b7b847c0ab348fc8b5cabdd5dd94472afe | - |
| I-ISM-16 | ISM Guidelines for procurement and outsourcing (December 2025), chapter PDF extracted from the full release ZIP. The ZIP was retrieved from the archived-releases index [I-ISM-8] and hashed on retrieval: sha256 46561eb5d300bb5bf51f21f9468bc655b140f3a970b1a5c81f2061fbc68a99fc, 24525034 bytes; the ZIP blob is held by this practice and out of git, this chapter is the artefact the assessment reads [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-08-19T09:53:15Z, recorded in `EARLIER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | ea9c8fb4dcce053a6573e67119717e0a0e31372fd2e8112a03fa87f52691cee4 | - |
| I-ISM-17 | ISM Guidelines for procurement and outsourcing, September 2026 release. cyber.gov.au page as served, first published and last updated 03 Sep 2026 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:26:05Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 66917ad7a551242d64d0fa593b6038866bd697ccb841e883c2cde775268e235e | - |
| I-ISM-18 | ISM Guidelines for procurement and outsourcing (September 2026), PDF chapter, 10 pages, linked from I-ISM-17 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:26:42Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 3ecc83803c0b0f1124cd4fc88b6b7e356d76a1732c6555e73b92d1612948415a | - |
| I-ISM-19 | Information security manual (September 2026), full release, 271 pages, authorised PDF from cyber.gov.au [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:26:06Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 048f879e2fbd37636623320778424d92c6f17e5b0a7209432696005dd5a60f8c | - |
| I-ISM-20 | ISM September 2026 changes (September 2026), the release change log, 10 pages [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:26:06Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | c299a5b6b5f0339f52b8df2a1a4f2510dc1793e96de53b9bff21eebb30a91abf | - |
| I-ISM-21 | System security plan annex template (September 2026), the machine-readable list of every control in the release [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:26:06Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 5db3d188bdd70c48a1cbe1e1e93f2760be33e49003565867034da57d0b514664 | - |
| I-ISM-22 | ASD archived ISM releases index, as served 04 Sep 2026, first published and last updated 03 Sep 2026 [INHERITED CAPTURE, convention 7] Retrieved under ism-procurement-2026-08 on 2026-09-04T01:25:39Z, recorded in `LATER-RELEASES-REGISTER.tsv`, and re-verified against its recorded hash on 2026-09-04. The blob is held in that case; this row records the re-verification and is excluded from this case's stated capture window | 9ff74712ef632c2590ecf5c9a42e28f62402716c6cda257b309beaadead95f6d | - |
Of the 27 pinned artefacts, 3 are themselves third-party archive captures - I-IA-20260315134750, I-IA-20260316091721, I-IA-20260902025519 - retrieved from the Internet Archive rather than from a publisher, and a reader can re-fetch each of those from that archive at the address the register records. Of the other 24, 21 inherit captures held in another case of this corpus, retrieved from the publisher under that case (I-ISM-1 to I-ISM-8, I-ISM-10 to I-ISM-22); 3 were extracted by this case from a release archive one of those inherited rows pins (I-ISM-23, I-ISM-24, I-ISM-25). No independent capture of those 24 is pinned here; for them a reader must rely on this site or on the publisher’s server.
The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 4 September 2026, the publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.
Versions
Version history
One version. The assessment date and the publication date are both recorded, and here they are the same day.
| Version | Assessed | Published | SHA-256 | Status |
|---|---|---|---|---|
| v1.0 | 4 September 2026 | 4 September 2026 | 2735b6d90e6b52410ca9ec1d398ac9bc2e17a7fcbf3c4f70c9517e30429df05a | current · download |
The cover carries 4 September 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.
Corrections
Corrections
None. This is the first edition and it has not been corrected since publication. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.
Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit, which is tracked with the source.
Download
Assessment PDF
SHA-256: 2735b6d90e6b52410ca9ec1d398ac9bc2e17a7fcbf3c4f70c9517e30429df05a