← Assurance

Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.

Control

ARC-AI-004 (version 1)

Assurance

automated

Evaluated

2026-10-26 09:18:30Z

Run

arc_run_6fddf9…

Integrity digest

sha256:4906441b75133e3ad933d72f8260852e238d4624648c0ed82dcd1d74c3a39218

• Whether an approval can be attributed to a named individual depends on how that operator was authenticated, which varies by deployment and can vary between two approvals in the same window. Each assessment therefore states the attribution of the votes it actually examined, rather than this catalogue asserting one answer for every installation.
• 1 of 1 recorded votes were cast with a claimed identity — a name supplied alongside a shared token, which anyone holding that token could have supplied. For those approvals this control establishes that the workflow ran, not who ran it.

{
  "id": "arc_asm_3801c1383c3ee1704f4cdae4e2796320",
  "schemaVersion": 2,
  "runId": "arc_run_6fddf961fa6f723fc7c7aff98056028d",
  "controlId": "ARC-AI-004",
  "controlVersion": 1,
  "organizationId": "default",
  "status": "pass",
  "assurance": "automated",
  "summary": "All 1 approval-gated executions had a valid human approval recorded before they ran.",
  "observations": [
    {
      "subject": "arc_act_97b75d77284289e51ec12f14ba648212",
      "subjectKind": "approval",
      "ok": true,
      "detail": "approval arc_apr_1c777d39dedf9688142bfa14493f0f53 approved by role:finance-manager before execution",
      "evidenceIds": [
        "arc_ev_5a04082a33a15b0f372f629ddcc1fd40"
      ]
    }
  ],
  "window": {
    "from": "2026-09-26T09:18:30.472Z",
    "to": "2026-10-26T09:18:30.472Z",
    "actionsConsidered": 7,
    "evidenceConsidered": 8
  },
  "limitations": [
    "Whether an approval can be attributed to a named individual depends on how that operator was authenticated, which varies by deployment and can vary between two approvals in the same window. Each assessment therefore states the attribution of the votes it actually examined, rather than this catalogue asserting one answer for every installation.",
    "1 of 1 recorded votes were cast with a claimed identity — a name supplied alongside a shared token, which anyone holding that token could have supplied. For those approvals this control establishes that the workflow ran, not who ran it."
  ],
  "findingIds": [],
  "evaluatedAt": "2026-10-26T09:18:30.472Z",
  "evaluationMs": 0.451127,
  "integrityDigest": "sha256:4906441b75133e3ad933d72f8260852e238d4624648c0ed82dcd1d74c3a39218"
}