Verification chain
Four things are pinned, and each can be checked independently of the others.
The assessment PDF. SHA-256: f8567290585934022da77ba6df4102bb6d9dc6db8968d17e519d49bc5c475875
Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.
The timestamp. The receipt AOS-RCH-2026-001-v1.0.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 26 August 2026 and pending confirmation in the Bitcoin blockchain at the time of publication. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.
The assessed source. The assessment rests on 25 pinned artefacts: 12 retrieved and pinned by this case, 12 inherited under convention 7 from other cases in this corpus, and 1 first pinned here from a blob held in another case’s archive and reserved before this case existed, each re-verified against its recorded hash before this record was written. All 25 are pinned by hash and 7 of the 25 are themselves Internet Archive captures. Quotations were checked against page images, not against a text layer alone; vocabulary counts state the artefact they were taken from and the control word run on the same extraction.
| Ref | Artefact | SHA-256 | Third-party copy |
|---|---|---|---|
| A-DEED-1 | HCF Deed of Certification (Template), 20 pages, Official: Sensitive Legal - Privilege. INHERITED from assurance-method-gap-2026-08. Carries the Relevant Change definition (five limbs, printed 3-4) and clauses 13.2, 13.5, 13.7, 13.9, 13.10, 19.1, 19.3, 20.1, 20.2 | 3b7f03819a27aae5550b8ce5a434bea2e29b36806d44729d4cd25e79dd101a2f | - |
| A-DEED-2 | HCF Declaration by Provider (Deed form), 2 pages. INHERITED from ai-data-centres-inquiry-2026-06. One signature block; cl 2(d) best-endeavours warranty | 937fba0cb41a2c0cc7b3d29792dcbe559cf2282b6480a886a7fd967193a2f314 | - |
| H-RCF-1 | HCF Relevant Change Submission Form, HA v1.0. FIRST MANIFEST ROW: the ref was reserved on 25 July 2026 in hcf-strategic-2026-07/source/SCOPED-OUT-RELEVANT-CHANGE-SELF-ASSESSMENT.md with the row deferred to first citation. This case is that first citation. Blob held in hcf-strategic-2026-07/archive | 71d8c27d51c507ef25f4b5a185d2749a1d669f81f66ea71bd5fd6f0ce678ecfc | - |
| H-HCF-1 | HCF Strategic-tier certified-provider list, 21 July 2026 capture. INHERITED from hcf-strategic-2026-07 | 8ea432069b2f83781fc869e93c53c05e7e0a44c84209d943429e1e8e91709c4d | - |
| L-HCF-3 | Hosting Certification Framework - March 2021 v2, the operative framework policy document, 30 pages. INHERITED from compellability-landscape-2026-08. Discusses Relevant Change 17 times; publish 0, publication 0, website 0 | 7b654f6e435bb90560701bf5e4905538f2da0cae73157ab4d58e710045855070 | - |
| AT-HCF-3 | HCF For Service Providers page. INHERITED from attestation-survey-scoping-2026-08 | becb270af231925cea25fdb1dde404a7c8b7a79100356a6fbd99f196b3a6940b | - |
| SC-SOCI-1 | Security of Critical Infrastructure Act 2018, compilation 9 (C2026C00213). INHERITED from general-findings/submarine-cable-scoping-2026-08. s 22: the Secretary must ensure the Register is not made public. s 30AB(4), the Act's only mention of hosting certification, conditions a Part 2A exemption on holding a certificate of hosting certification (strategic level) | 3a0a2c0a2b49efe9cd30072d7a5c2c177b8ebac2ab17e363bb152e7d831115af | - |
| AT-CIRMP-1 | Security of Critical Infrastructure (Critical infrastructure risk management program) Rules, compilation 2. INHERITED from attestation-survey-scoping-2026-08. Zero 'hosting certification', zero 'relevant change'; its 8 'publish' occurrences all cite externally published standards | e0b7ea6b0c7b9ba5b57117c4e3390d3e83dabedcace3d923c73119a9c8f25dca | - |
| L-PSPF-3 | Protective Security Policy Framework, 2026 release requirements. INHERITED from compellability-landscape-2026-08. Requirement 111 conditions secure hosting of security-classified or SOGS data on certification against the HCF or HCF 2. Zero 'publish' | be1eb1cece9d8096b07740c8a9ef8cd750b29c43ae9954f07cedf09a14542945 | - |
| L-CPR-1 | Commonwealth Procurement Rules 2025. INHERITED from compellability-landscape-2026-08. Rule 7.18 requires contracts at or above the reporting threshold to be published on AusTender within 42 days. Zero 'hosting', zero 'relevant change' - it publishes procurement, not certification | 1b1d08c2d87e2c966d2d31e7923e2ccc2352b8fa132d4aee009116f934360a28 | - |
| F-FOI-1 | Freedom of Information Act 1982, compilation 121. INHERITED from hosting-exemption-followon-2026-08. s 8(2)(j) with s 8A: operational information is the agency's rules, guidelines, practices and precedents. s 11C publishes only what a request has already produced. s 8(2)(g)(ii) carves out business and commercial affairs; s 8C(1) exempt matter | 327322f49825cffddceffa2630d596972db871e567f273904cb7889a4c4f25dd | - |
| F-DL-1 | Department of Home Affairs FOI disclosure log 2025, as served by the department's own list API. INHERITED from hosting-exemption-followon-2026-08. 300 entries, 28 September 2024 to 9 December 2025; exactly one hosting or certification entry, FA 25/07/02160, the draft framework, released Partial 17 September 2025 | 6eba87ec0fae58bc41b309beb0d06154e1467f1eb1e89485dff5b2ea0d07ed7f | - |
| AT-HCF-4 | HCF Resources page. INHERITED from attestation-survey-scoping-2026-08 | 2771476a8c8c417876eb2b83ca1aa0c279af2088bfa6a764bb60f0013a38c39f | - |
| O-IA-20220117005227 | HCF certified-provider list as archived 2022-01-17 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field. earliest populated capture the Internet Archive holds; 13 Strategic-tier entries | 1f5f679b73b5ba9b6a330b64ee734ee6e813b3b31f402701ba7a8c64e8784571 | Internet Archive replay |
| O-IA-20241214160934 | HCF certified-provider list as archived 2024-12-14 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field | 9c0f279e4c81ad54b1ab980316dad2878c3c48f31900bb542f937c3caf5fee4e | Internet Archive replay |
| O-IA-20250216115257 | HCF certified-provider list as archived 2025-02-16 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field; the Strategic-tier list is byte-identical in content to the 14 December capture | be62cdbbc4dd011fad31f630d54516047dcfcb9400d15d79ebdcf6002c970596 | Internet Archive replay |
| O-IA-20250623183308 | HCF certified-provider list as archived 2025-06-23 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field. mid-2025 capture, list populated | 08ab7d9e70d9a4cd9b88d060db005707cd28b43c6f7e4ecd72c551134aba76be | Internet Archive replay |
| O-IA-20250916163147 | HCF certified-provider list as archived 2025-09-16 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field. September 2025 capture, list populated | 35f4dfe1228ac90a1f0b0223bf7116d0b9ff6daaced29554222f9c323e7bdde1 | Internet Archive replay |
| O-IA-20251114112212 | HCF certified-provider list as archived 2025-11-14 (Internet Archive id_ replay of the original bytes). No entry carries a date, a status or a change field. latest populated capture; reads HMC Digital Infrastructure - HMC SYD-01 and iSeek Pty Ltd - LDR2 | cb0378c32a4595ce72f6da4300e45752cb6e34ffe65e75b7300727c841370c31 | Internet Archive replay |
| O-IA-CDX | Internet Archive CDX index for the certified-provider list URL, collapsed by digest: 45 rows, first 20220117005227 HTTP 200, last 20260107184309 HTTP 200. Establishes the snapshot inventory the six captures are drawn from | da50e484a724b54529b5ad5b29caf4087a7be0de1b37ec5457c8738cf9178f78 | Internet Archive replay |
| P-PI-1 | ParlInfo search, query "certified strategic" (phrase, quoted). 36 matches. Collections faceted: Bills and Legislation 1, Committees 4, Library 2, Media 26, Publications 3. Date facet 2020s 36. CAPTURED: results 1-15 only (page=0 of 3). Browser print-to-PDF of the rendered results page; the page furniture carries the source URL and the capture date-time. Session ANONYMOUS - the header offers 'Log in', not 'Log out'; My List (0). ParlInfo Search v1.34.10. Original filename as saved: 'ParlInfo - Search Results.pdf' | 0001f17418281dff87a150ec7641da84a1847a61bcb244c9b8b9edd1a189cf4e | - |
| P-PI-2 | ParlInfo search, query "relevant change" hosting (quoted phrase plus bare term). 19 matches. Collections faceted: Bills and Legislation 2, Publications 17 - ZERO in Committees, Hansard, Media, Senate or House. Date facet 2020s 2, 2010s 4, 2000s 7, 1990s 5, 1980s 1 = 19. CAPTURED: results 1-15 only (page=0 of 2); the 2 Bills and Legislation matches are both within it, so that collection is read in full. Browser print-to-PDF, anonymous session, ParlInfo Search v1.34.10. Original filename: 'ParlInfo - Search Results 2.pdf' | 9daf17420e8cbefdb234c3dc94fc0721fe00b0dc9b3fae98c81095b2d9d2dd96 | - |
| P-PI-3 | ParlInfo search, query hosting certification (two bare terms, unquoted). 3,164 matches. Collections faceted: Publications 2484, Media 292, Committees 189, Library 133, Bills and Legislation 37, Senate 21, Australian Parliament Website 4, House of Representatives 3. Date facet totals 3,164. CAPTURED: results 1-15 only (page=0 of at least 10). Browser print-to-PDF, anonymous session, ParlInfo Search v1.34.10. Original filename: 'ParlInfo - Search Results 3.pdf' | 6acd081585585a3a358829f3f450f8c07e6e0e339fed1fe8bd49d70750bf145f | - |
| P-HAN-1 | Senate Economics References Committee, Official Committee Hansard, Tuesday 22 August 2023, Influence of international digital platforms, 50 pages. Carries Mr Chris Fechner (CEO, Digital Transformation Agency) at printed 14 on what 'certified strategic' means, and Mr Hamish Hansford (Deputy Secretary, Cyber and Infrastructure Security, Home Affairs) at printed 45-46 on the SOCI carve-out. Retrieved by HTTP GET with a browser user-agent string; ParlInfo refuses the default agent | 06e671ea79ef90d0734936b4806cfb7d163ec21eaef3ce4fd8b917c9bffa5f57 | - |
| P-HAN-2 | Joint Committee of Public Accounts and Audit, Official Committee Hansard, Friday 15 November 2024, Inquiry into the use and governance of artificial intelligence systems by public sector entities, 39 pages. Carries Mr Chris Fechner (CEO, Digital Transformation Agency) at printed 18 offering the Hosting Certification Framework as the answer to the Chair's question about Commonwealth visibility. Retrieved by HTTP GET with a browser user-agent string | c41e8e9e4d9f21beeacd5355a3e0a4a2f14b072ab11d0b54847991010c91763e | - |
Of the 25 pinned artefacts, 7 are themselves third-party archive captures - O-IA-20220117005227, O-IA-20241214160934, O-IA-20250216115257, O-IA-20250623183308, O-IA-20250916163147, O-IA-20251114112212, O-IA-CDX - retrieved from the Internet Archive rather than from a publisher, and a reader can re-fetch each of those from that archive at the address the register records. The other 18 were retrieved from the publisher, and no independent capture of them is pinned here; for those 18 a reader must rely on this site or on the publisher’s server.
The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to the assessment date. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.
Version history
One version. The assessment date and the publication date are both recorded, and here they are the same day.
| Version | Assessed | Published | SHA-256 | Status |
|---|---|---|---|---|
| v1.0 | 26 August 2026 | 26 August 2026 | f8567290585934022da77ba6df4102bb6d9dc6db8968d17e519d49bc5c475875 | current · download |
The cover carries 26 August 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.
Corrections
None. This is the first edition and it has not been corrected since publication. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.
Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit and pre-publication audit, which are tracked with the source.
Assessment PDF
SHA-256: f8567290585934022da77ba6df4102bb6d9dc6db8968d17e519d49bc5c475875