Controls
27 controls across SP800-53r5, SP800-161r1, SP800-218, AI-RMF-1.0. A control is claimed here only where a mechanism is cited to a file and a symbol, pinned by a named test, and run in a numbered harness section — the same four things this estate requires before a patent limitation may be called practised.
This is an engineering artefact. It is not an assessment, it is not a certification, and it is not legal advice. A qualified assessor confirms every mapping before it is relied on in a submission.
controls
27
SP800-53r5 · SP800-161r1 · SP800-218 · AI-RMF-1.0
satisfied
21
a mechanism runs in the harness and a test fails when it is removed
partial
5
part of the control, with the remainder named — never used to mean “mostly”
titles unconfirmed
17
offline, the published wording cannot be checked — counted, never hidden
What each product may claim
Three answers and no fourth. OWN means the control’s evidence is in this product’s own surface. CONSUMED means the mechanism is real and it belongs to a capability this product declares it consumes — a customer relying on it is relying on the core. NOT CLAIMED means neither, and the product does not claim the control.
CONSUMED is not a weaker OWN. It is the answer that keeps a suite of five products from appearing to satisfy 135 controls when it satisfies 27.
| Product | Layer | Own | Consumed | Not claimed |
|---|---|---|---|---|
| Corobate | core | 26 | 0 | 1 |
| Stock Risk Receipt | domain | 0 | 10 | 17 |
| AttestedAssets | shell | 0 | 9 | 18 |
| PaymentVerification | domain | 0 | 14 | 13 |
| TellmeTiresias | domain | 0 | 9 | 18 |
The register
| Control | Catalogue | Coverage | Title confirmed | What it asserts |
|---|---|---|---|---|
| AU-10 | SP800-53r5 | SATISFIED | yes | Every observation admitted at full standing carries a digital signature from a key listed in a signed registry, and the receipt records which key, which registry version, and the o… |
| AU-10(1) | SP800-53r5 | SATISFIED | NOT CONFIRMED | The identity bound to each signature is resolved from a signed actor registry at the instant of the observation, not at the instant of review, and the registry version and digest t… |
| AU-9 | SP800-53r5 | SATISFIED | yes | The ledger is a hash-chained append-only record. Altering any past entry, or mutating a materialised record without appending, breaks verification — and both halves are checked, no… |
| AU-9(3) | SP800-53r5 | SATISFIED | NOT CONFIRMED | Integrity is cryptographic (SHA-256 over a canonical encoding), and the canonical encoding is specified independently of any one runtime, with a second-language implementation prov… |
| AU-3 | SP800-53r5 | SATISFIED | yes | A receipt records what was decided, what evidence was shown, what was withheld and why, which policy and governance artefacts were in force, who declared the exposure, and the stat… |
| AU-12 | SP800-53r5 | SATISFIED | yes | Record generation is not optional and not sampled. Every decision that reaches the gate produces a sealed receipt; a decision refused before threshold selection produces a named re… |
| SR-4 | SP800-53r5 | SATISFIED | yes | Every piece of evidence carries who asserted it, when it was observed, from what source, and a provenance class earned from a signed registry rather than self-declared. The class c… |
| SR-4(3) | SP800-53r5 | SATISFIED | NOT CONFIRMED | A sealed receipt is validated by re-derivation from its own evidence rows, not by re-hashing. A competently re-sealed forgery passes every hash check and still fails, because the r… |
| SR-4(4) | SP800-53r5 | SATISFIED | NOT CONFIRMED | Pedigree spans external artefacts, not only Corobate’s own sealed decisions. CycloneDX 1.5 bills of materials and in-toto v1 statements are read into observations carrying the prod… |
| SR-6 | SP800-53r5 | PARTIAL | yes | A source's standing is measured from attested real-world outcomes rather than asserted: the realised track record moves reliability, an observer may not grade its own evidence, and… |
| SR-11 | SP800-53r5 | OPERATOR | yes | Corobate provides the enforcement point at which an authenticity claim must be present, current, and attested before an action proceeds; establishing authenticity of a physical com… |
| SI-7 | SP800-53r5 | SATISFIED | yes | The built applications carry recorded digests and the verification harness fails when a built artefact does not match its record, so a stale or altered build is a failed run rather… |
| SC-12 | SP800-53r5 | PARTIAL | yes | Key distribution has an operable ceremony: a trust root, a signed actor registry, a separately distributed signed revocation list, and an out-of-band bundle whose integrity rests o… |
| IA-5 | SP800-53r5 | SATISFIED | yes | Credentials expire and can be withdrawn. A registry with no expiry is refused at load; a compromised key is retroactive to a stated instant while an ordinary retirement is not; and… |
| IA-5(2) | SP800-53r5 | PARTIAL | NOT CONFIRMED | The local revocation cache is maintained rather than assumed. Credential status is validated against a signed revocation list whose freshness is measured from the REGISTRY’s own is… |
| AC-3(2) | SP800-53r5 | SATISFIED | NOT CONFIRMED | Above an operator-set exposure threshold, an action is not released until m of n distinct registered signers have each signed the specific state of the evidence. Signatures given o… |
| C-SCRM-PROVENANCE | SP800-161r1 | SATISFIED | NOT CONFIRMED | The evidentiary state a decision rested on is content-addressed, so an assessor can ask 'what did you know at the moment you decided' and get a byte-exact answer rather than a reco… |
| PS.3.2 | SP800-218 | SATISFIED | NOT CONFIRMED | Provenance data a build pipeline already emits is read rather than re-entered: a CycloneDX 1.5 SBOM becomes one observation per component, bound to the digest of the document it ca… |
| PS.2 | SP800-218 | SATISFIED | NOT CONFIRMED | A recipient can verify integrity without running code supplied by the producer: the receipt format is a published specification with an independent second-language implementation r… |
| MEASURE-2.8 | AI-RMF-1.0 | SATISFIED | NOT CONFIRMED | An automated action's evidentiary basis is recorded before the model is invoked, including what was deliberately withheld from the model and why, so accountability does not depend … |
| MANAGE-2.2 | AI-RMF-1.0 | PARTIAL | NOT CONFIRMED | Outcomes are attested and fed back into source standing, and an acceptor's realised failure rate is measured — but the measurement is reported and enforces nothing, and the code as… |
| MEASURE-2.7 | AI-RMF-1.0 | PARTIAL | NOT CONFIRMED | The sidecar enforcement point authenticates every caller, refuses the cross-site request shapes a browser can send without a preflight, and pins the Host header against DNS rebindi… |
| SC-13-PQC | SP800-53r5 | SATISFIED | NOT CONFIRMED | The cryptographic suite in force is named INSIDE the hashed receipt body — digest, chain digest, content digest, signature algorithm, curve and canonicalisation — so it cannot be r… |
| AU-6 | SP800-53r5 | SATISFIED | NOT CONFIRMED | A report over the sealed ledger answers what share of decisions were refused, which half refused them (a missing document or a missing signature — a supplier problem and a rota pro… |
| AU-7 | SP800-53r5 | SATISFIED | NOT CONFIRMED | The reduction re-verifies the chain it reads before producing a single figure: every receipt hash is recomputed and every chain link re-derived, and a tampered receipt, a dropped r… |
| C-SCRM-INSTRUMENTS | SP800-161r1 | SATISFIED | NOT CONFIRMED | Official instruments are entered as signed data, not code: an authority, a citation, an edition, the sha256 digest of the published document, effective dates, and rules from a CLOS… |
| AC-21 | SP800-53r5 | SATISFIED | NOT CONFIRMED | A sealed decision can be shared as a ROLE-SCOPED COPY rather than in full. Six positions along a supply and regulatory chain each get a closed allow-list projection, and the sealed… |
What this page cannot tell you
- Whether a claim is a fair reading of its control. That is a compliance professional’s judgement and no program substitutes for it.
- Whether a control title is quoted correctly — 17 are unconfirmed and each is marked.
- Whether the cited symbol does what the control name says. The checker catches the other thing, which is the thing that happens: a control cited to nothing.
Stock Risk Receipt · standalone install · one product · built by 27-console/build-console.js from the register, not typed.
This page loads nothing from another origin, makes no request at run time, and touches no browser storage. It works from a file on disk with no server.
Nothing in this console is legal advice.