Audit

Evidence register and control mappings

Synthetic reference records show producer, reported signature, expiry and mappings. No server authorization or signed export exists in this frontend prototype; a hash alone does not authenticate a producer.

Observed at 24 Sep 2026, 06:15 UTC25 of 25 fixture references shown

17 reference(s) are marked unsigned. Demo IDs and hashes are illustrative, not content integrity or producer-authentication proof.

Register

Restricted entries show metadata only; their content preview is withheld in this view.

Scroll table sideways for more columns →

Reference	Subject	Control mappings	Producer	Recorded	Expiry	State
aud-1001ev-scan-77	Support Ticket Corpus — scan coverage v2026.09.3	ISO 42001 A.7.2 NIST AI RMF MAP 3.1 Internal C01/C02	collector-eu-03	24 Sep 2026, 02:05 UTC	24 Oct 2026, 02:00 UTC	SignedCurrent
aud-1002ev-bnd-501	Boundary receipt — observed retrieval by usr-contractor-12 preview restricted	ISO 27001 A.8.16 OWASP LLM02 Internal C06	mesh-boundary-eu	21 Sep 2026, 14:08 UTC	21 Dec 2026, 00:00 UTC	SignedCurrent
aud-1003ev-trn-14	Training run manifest run-clause-lora-3	ISO 42001 A.6.2 NIST AI RMF GOVERN 1.2	training-orchestrator	8 Sep 2026, 12:00 UTC	none set	UnsignedNo expiry
aud-1004ev-eval-44	Privacy leakage suite result — clause-lora-r3 preview restricted	ISO 42001 A.8.4 OWASP LLM06 Internal C04	eval-runner-02	16 Sep 2026, 15:10 UTC	none set	SignedNo expiry
aud-1005ev-rel-3	Release manifest Support Copilot 2026.09.3	ISO 27001 A.8.32 NIST AI RMF MANAGE 2.2	release-service	19 Sep 2026, 08:05 UTC	19 Dec 2026, 00:00 UTC	SignedCurrent
aud-1006ev-rem-8801	Remediation step receipts — index quarantine rem-8801 preview restricted	ISO 27001 A.5.26 Internal C05/C06	remediation-service	24 Sep 2026, 03:12 UTC	24 Dec 2026, 00:00 UTC	SignedCurrent
aud-1007ev-ret-117	Retirement deactivation receipts — Legacy Churn Predictor preview restricted	ISO 42001 A.9.3 Internal C07	retirement-service	5 Sep 2026, 09:10 UTC	5 Sep 2033, 00:00 UTC	SignedCurrent
aud-1008ev-mdl-7	Vendor processing declaration	ISO 27036 NIST AI RMF GOVERN 6.1	vendor portal export	1 Sep 2026, 09:00 UTC	1 Sep 2027, 00:00 UTC	UnsignedCurrent
aud-1009ev-scan-60	HR Analytics Extract — scan receipt preview restricted	ISO 42001 A.7.2 Internal C01	collector-us-02	8 Sep 2026, 12:00 UTC	8 Oct 2026, 12:00 UTC	SignedCurrent
aud-1010ev-scan-95	Enclave scan receipt — offline bundle	ISO 42001 A.7.2 Internal C01	enclave-collector-01	21 Sep 2026, 04:00 UTC	21 Oct 2026, 04:00 UTC	SignedCurrent
aud-demo-ev-101DEMO-EV-101	Support assistant — observed active (release 2.4.1)	Demo discovery provenance	GitHub + AWS workload snapshot	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-102DEMO-EV-102	Bedrock model route — configured (route revision 7)	Demo discovery provenance	Example Bedrock inventory	21 Sep 2026, 10:20 UTC	none set	UnsignedNo expiry
aud-demo-ev-103DEMO-EV-103	Coding assistant on dev laptop — installed (client 1.8)	Demo discovery provenance	Synthetic managed-device inventory	20 Sep 2026, 12:10 UTC	none set	UnsignedNo expiry
aud-demo-ev-104DEMO-EV-104	export_cases MCP server — configured (schema 4)	Demo discovery provenance	Synthetic MCP binding export	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-105DEMO-EV-105	Direct SDK call in repository — candidate (commit 8f3a7c)	Demo discovery provenance	Synthetic code rule	19 Sep 2026, 13:30 UTC	none set	UnsignedNo expiry
aud-demo-ev-106DEMO-EV-106	Workspace AI feature — unknown (Vendor version undisclosed)	Demo discovery provenance	Synthetic IdP sign-in	17 Sep 2026, 08:00 UTC	none set	UnsignedNo expiry
aud-demo-ev-201DEMO-EV-201	support-assistant — GitHub repository (commit 8f3a7c)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-202DEMO-EV-202	CI build #218 — Build (run 218)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-203DEMO-EV-203	support-assistant image — Artifact (sha256:demo218)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-204DEMO-EV-204	support-api / us-east-1 — AWS workload (revision 42)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-205DEMO-EV-205	support-service-role — Workload identity (policy revision 5)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-206DEMO-EV-206	Restricted HR source — S3 data source (ACL revision 12)	Demo code-to-cloud provenance	Synthetic supporting-resource fixture	22 Sep 2026, 16:45 UTC	none set	UnsignedNo expiry
aud-demo-ev-301DEMO-EV-301	fastapi — Dependency advisory (synthetic)	Demo supply-chain analysis	Synthetic scanner fixture	18 Sep 2026, 00:00 UTC	none set	UnsignedNo expiry
aud-demo-ev-302DEMO-EV-302	agent prompt template — Provenance declared only	Demo supply-chain analysis	Synthetic scanner fixture	18 Sep 2026, 00:00 UTC	none set	UnsignedNo expiry
aud-demo-ev-303DEMO-EV-303	export_cases schema — Approval scope unresolved	Demo supply-chain analysis	Synthetic scanner fixture	18 Sep 2026, 00:00 UTC	none set	UnsignedNo expiry

Immutable audit architecture · future design

A production design would append events rather than rewrite them, chain event digests to detect alteration, sign producer receipts and place retained bundles in WORM-protected storage with independent scope checks. This frontend has no immutable store, verified signatures, retention enforcement or compliance certification.