Verification chain
Four things are pinned, and each can be checked independently of the others.
The assessment PDF. SHA-256: ffea9b7816cc87a0da4a6245cff9d594539560ddb97f162080d192aa43f81981
Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.
The timestamp. The receipt AOS-PSD-2026-001-v1.1.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 18 October 2026 and pending confirmation in the Bitcoin blockchain at publication. The receipt served here carries no Bitcoin attestation and is pending still. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.
The assessed source. The assessment rests on 19 pinned artefacts, and this case retrieved none of them: every row of its register is an inherited capture under convention 7 of this practice, pointing at a blob pinned by one of five other registers of this corpus, with the originating retrieval and this case’s re-verification both recorded on the row. It is the first assessment in this corpus built entirely from inherited rows, and no origin register moved. Each blob was re-verified against the hash its row records when this page was generated; a miss would have stopped the render. Quotations were checked against the text layer of each pinned artefact - a web page with its markup stripped, the PDF’s extraction - not against page images; every count states the artefact it was taken from and the test that produced it, and every statement that something is absent states the population searched.
Re-fetch, measured at each origin’s pin. This case has no retrieval log because it fetched nothing. Each of the 19 rows was fetched twice within the minute under convention 50 when its origin register pinned it, and the result stands in that register’s log. 5 of the 19 are Wayback Machine mementos, fetched in raw form at the timestamps their rows name: four are documents the publisher refused to serve live in both forms the convention provides on 10 September 2026, and one is a dated capture of the Direction’s own page, which is also held as served. For those five, the archive’s copy is the artefact.
| Ref | Artefact | Register | SHA-256 | Third-party copy |
|---|---|---|---|---|
| L-PSPF-1 | PSPF Direction 001-2024, Managing Foreign Ownership, Control or Influence Risks in Technology Assets, the Direction PDF, 2 pages, Department of Home Affairs, July 2024 [INHERITED CAPTURE, convention 7] Retrieved under compellability-landscape-2026-08 on 2026-08-11T08:07:20Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that case; this row records the practice's re-verification and is excluded from this case's stated capture window | compellability-landscape-2026-08 | d7e5c62e7abb31e3d1bec66dc63519ca434ccfded71399256e154166fea1f9ea | - |
| L-PSPF-2 | The Direction's publications-library page on protectivesecurity.gov.au, rendered capture of 11 August 2026 [INHERITED CAPTURE, convention 7] Retrieved under compellability-landscape-2026-08 on 2026-08-11T08:06:43Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that case; this row records the practice's re-verification and is excluded from this case's stated capture window | compellability-landscape-2026-08 | 6aef824d74452eaf5839e7f8e42595000ad81bee7c6080488a4f805775932340 | - |
| L-PSPF-3 | PSPF Release 2026 List of Requirements, Department of Home Affairs, 7 pages [INHERITED CAPTURE, convention 7] Retrieved under compellability-landscape-2026-08 on 2026-08-11T08:09:38Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that case; this row records the practice's re-verification and is excluded from this case's stated capture window | compellability-landscape-2026-08 | be1eb1cece9d8096b07740c8a9ef8cd750b29c43ae9954f07cedf09a14542945 | - |
| L-CCP-12b | The Direction's publications-library page as served 9 September 2026, raw body [INHERITED CAPTURE, convention 7] Retrieved under general-findings/wog-cloud-policy-2026-09 on 2026-09-09T15:00:34Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/wog-cloud-policy-2026-09 | 5fe6033f86a65a182384dd45877ab0dd98485a01b10bfd17589e19c7ea4ed23a | - |
| L-CCP-17 | Wayback Machine memento, raw form, of the Direction's publications-library page, served for the 11 December 2025 request from the 3 December 2025 capture [INHERITED CAPTURE, convention 7] Retrieved under general-findings/wog-cloud-policy-2026-09 on 2026-09-09T15:03:01Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/wog-cloud-policy-2026-09 | 31ae5b3c7bdd6c00fd55b8a6c973145fe36e401acec1724c2f5325cd3d81e7f2 | Wayback Machine memento; the artefact is the archive's copy |
| L-CCP-15 | Wayback Machine CDX index, exact-URL query for the Direction's publications-library page address, JSON [INHERITED CAPTURE, convention 7] Retrieved under general-findings/wog-cloud-policy-2026-09 on 2026-09-09T15:00:35Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/wog-cloud-policy-2026-09 | 51084be6e5c839b2dec8c2193e034b124266ea48f1b66b515d3c0e7ecf6411f9 | - |
| IR-PSPF-3 | Department of Home Affairs, Protective Security Directions under the PSPF, the listing page, as served 31 July 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/irap-assessor-scoping-2026-07 on 2026-07-31T08:08:16Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/irap-assessor-scoping-2026-07 | e394b7589c8d5979d8ef4a40a1ece94e0ed33f7af57b2293c82a7240d13465e8 | - |
| IR-FIN-1 | Department of Finance, ClauseBank, Foreign Ownership, Control, or Influence (FOCI) model clauses page, as served 31 July 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/irap-assessor-scoping-2026-07 on 2026-07-31T08:08:17Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/irap-assessor-scoping-2026-07 | fb67f9bf22acc4ef87e6d1c2f7873296ea31a1f57b8890d5867b290eff83d8c8 | - |
| L-PSR-5 | PSPF Release 2024, Department of Home Affairs, 155 pages, Wayback Machine memento of 5 December 2024 of the 2024-11 address, raw form; the live address refused on 10 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:00:22Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 16756392cc4563ce40987e09de09d539bf14c6f91d724e61cb6d1f2b7e6b5693 | Wayback Machine memento; the artefact is the archive's copy |
| L-PSR-7 | PSPF Release 2024 List of Requirements, November 2024, 14 pages, Wayback Machine memento of 18 April 2025, raw form; the live address refused on 10 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:00:36Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 2a8bf1541444ad86995028da8a0ebe8036d6db938d49786d10f0b96e3376d5be | Wayback Machine memento; the artefact is the archive's copy |
| L-PSR-9 | PSPF Release 2024 Guidelines, 4 April 2025 edition, 290 pages, Wayback Machine memento of 1 May 2025, raw form [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:01:58Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 1be5e5d7feb9eed8e95df671d74263722da2ab3b6ccbd267c0df8f66311fd371 | Wayback Machine memento; the artefact is the archive's copy |
| AT-PSPF-1 | PSPF Release 2025, Department of Home Affairs, 165 pages [INHERITED CAPTURE, convention 7] Retrieved under attestation-survey-scoping-2026-08 on 2026-08-05T05:20:00Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that case; this row records the practice's re-verification and is excluded from this case's stated capture window | attestation-survey-scoping-2026-08 | 8ae69e9542e1f1894fbd2bc74b3f0b8ef4a05282d9719d9e992279adcf34e69d | - |
| L-PSR-4b | PSPF Release 2025 Changes Summary, 5 pages, as served 10 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:01:12Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 45760468bad96df52a3d11702ec7bdae02e437c3182589acb0b6c40b4c64eea1 | - |
| L-PSR-11 | PSPF Release 2025 Guidelines, December 2025 edition, 304 pages, Wayback Machine memento of 8 January 2026, raw form; the live address refused on 10 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:03:54Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 123386895c6c04be41c2c22114586dc763142066ffa013b26ded6166fc2ceae0 | Wayback Machine memento; the artefact is the archive's copy |
| IR-PSPF-1 | PSPF Release 2026, Department of Home Affairs, 170 pages [INHERITED CAPTURE, convention 7] Retrieved under general-findings/irap-assessor-scoping-2026-07 on 2026-07-31T05:41:44Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/irap-assessor-scoping-2026-07 | 4dbcfbf3c092f7c1f8f7a2e9958b658680bcb5553dc196389e8d6d43ac9d2081 | - |
| L-PSR-12 | PSPF Release 2026 Guidelines, July 2026 edition, 320 pages, as served 10 September 2026 at the address its publications page links [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:04:06Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 40237867200c7f92170566d3a6ef7a8e8c12b879dbc930168974693ee0e94917 | - |
| L-PSR-15 | PSPF Release 2026 Summary of Changes, 8 pages, as served 10 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/pspf-releases-2024-2026-2026-09 on 2026-09-10T05:04:34Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/pspf-releases-2024-2026-2026-09 | 0258abc0599889615856427d0cbd73b0a4b83f3619727f29bc293f16373eefd3 | - |
| L-CCP-4b | Whole-of-Government Cloud Computing Policy, Version 1, Digital Transformation Agency, PDF, as served 9 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/wog-cloud-policy-2026-09 on 2026-09-09T14:43:06Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/wog-cloud-policy-2026-09 | d9915a3c951039e0f3eb0a2a32e4a967391905712658f3ee465715a4af1ae093 | - |
| L-CCP-3b | Whole-of-Government Cloud Computing Policy: Policy Requirements page, digital.gov.au, as served 9 September 2026 [INHERITED CAPTURE, convention 7] Retrieved under general-findings/wog-cloud-policy-2026-09 on 2026-09-09T14:43:06Z and re-verified against its recorded hash on 2026-09-10. The blob is held in that finding; this row records the practice's re-verification and is excluded from this case's stated capture window | general-findings/wog-cloud-policy-2026-09 | 9e1d580a097dfefe741336c4967499d36ea20045d53ce07c680cc6c2b30f87a1 | - |
Of the 19 artefacts, 5 are themselves Wayback Machine mementos and the other 14 have no independent capture pinned here. Those 14 were retrieved from their publishers by this practice under the origin registers named; a reader must rely on this site, on the origin register’s page, or on each publisher’s server.
The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 10 September 2026, version 1.0’s publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.
Version history
Two versions. Version 1.1 corrects one entry under Related published assessments, on page 10 of version 1.0: the entry for AOS-ASR-2026-001 gave that assessment’s reading of the Direction at its version 1.4, which it corrected at its version 1.6 on 12 October 2026. No other sentence changes, and the finding does not move. Version 1.0 remains downloadable below at its own hash.
| Version | Assessed | Published | SHA-256 | Status |
|---|---|---|---|---|
| v1.1 | 18 October 2026 | 18 October 2026 | ffea9b7816cc87a0da4a6245cff9d594539560ddb97f162080d192aa43f81981 | current · download |
| v1.0 | 10 September 2026 | 10 September 2026 | cb8767ab8bf1579ad6001d9dcf7d40cc158f240f8c4b27d7992ecb8d0591df50 | superseded, not withdrawn · see Corrections · download |
The cover carries 18 October 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.
Corrections
One entry of version 1.0, corrected at version 1.1 on 18 October 2026. Under Related published assessments, on page 10, version 1.0 said that AOS-ASR-2026-001 reads the Direction as one of eight instruments that name foreign legal reach. That assessment corrected its count on 12 October 2026: three of its eight instruments name foreign legal reach in their own words, and it reads the Direction as naming foreign ownership, control or influence as an application of foreign interference and requiring a process, without naming legal reach. Version 1.1 gives that reading. No other sentence changes, and the finding does not move. The entry is recorded in the practice’s corrections register. The published bytes of version 1.0 did not move and are served below at their own hash.
Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit, which is tracked with the source.
Assessment PDF
SHA-256: ffea9b7816cc87a0da4a6245cff9d594539560ddb97f162080d192aa43f81981