Findings
Raised by control assessments and reconciled across runs: a repeat increments its occurrence count rather than creating a duplicate, and a subject that stops failing is resolved with the assessment that cleared it named.
3 open1 overdue0 due within 7 days2 no deadline set2 unassigned
1 finding(s) are past their deadline. ARC surfaces the date and the lateness; it does not notify anyone, so this page is the notification.
| Severity | Control | Subject | What was observed | Seen | Owner | Due | Status |
|---|---|---|---|---|---|---|---|
| critical | ARC-AI-006 | audit-chain | 42 records are internally consistent, but the head (sha256:24303ba3affbbff40be8183da6028811124c5c8430a1af42e6b9bf8027f82746) was not checked against an external anchor, so truncation cannot be ruled out | 1× 2026-10-26 09:18:30Z | risk@arctransformationgroup.com | 2d overdue 2026-10-24 09:18:30Z | open |
| high | ARC-AI-001 | arc_ag_c92e58dc46afacd… | agent "engineering-agent" is missing: governance record | 1× 2026-10-26 09:18:30Z | unassigned | none set | open |
| medium | ARC-AI-008 | arc_ag_c92e58dc46afacd… | no permission review has ever been recorded for "engineering-agent" | 1× 2026-10-26 09:18:30Z | unassigned | none set | open |