{
  "schema_version": "1.0",
  "sources": [
    {
      "source_id": "S-METR",
      "url": "https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/",
      "inspected_locations": [
        "Scope",
        "Limitations",
        "Classifier sweeps",
        "Estimating completeness",
        "Importance-weighted workstream activity"
      ],
      "version": "2026-08-26; HTML discloses 2026-09-13 footnote edit",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "1e189335ea8df689084918335f1bee290de206820e79d84fa3285ef3ba5c4253",
      "snapshot_format": "original file bytes"
    },
    {
      "source_id": "S-METR-PDF",
      "url": "https://metr.org/hugging-face-incident-report-aug-2026.pdf",
      "inspected_locations": [
        "Printed pp.73\u201374, table and footnote 116"
      ],
      "version": "Retrieved PDF; differs in footnote numbering from HTML",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "f7e87133833363da6eee661df0c86926ef852f8b202ad87695ea6596b92d3c73",
      "snapshot_format": "original file bytes"
    },
    {
      "source_id": "S-ANTH",
      "url": "https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents",
      "inspected_locations": [
        "Offline monitoring",
        "Analysis of biased reasoning; Figure 36"
      ],
      "version": "2026-09-09 report; visible 2026-09-10 correction",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "c2e49d5bb596816f1db79e2a6c2f2fb4dcc2a026da9d5c8959101eb6295c9b42",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML",
      "snapshot_coverage": "Initial extraction is partial and omits decisive A1/A2 sections; use supplemental extraction below.",
      "supplemental_snapshots": [
        {
          "sha256": "06bce2dad7b2c44127042c67893e51eddaf0fc28bc896985dc51d1b28577506f",
          "format": "primary webpage tool-rendered extraction",
          "inspected_locations": [
            "Offline monitoring L311\u2013318",
            "Figure 36 L323\u2013327"
          ],
          "coverage": "Contains decisive A1/A2 passages; not original HTML bytes."
        }
      ]
    },
    {
      "source_id": "S-CISA",
      "url": "https://github.com/cisagov/vulnrichment/issues/333#issuecomment-5526230961",
      "inspected_locations": [
        "Issue body",
        "Maintainer comment 5526230961"
      ],
      "version": "2026-09-02 issue; 2026-09-03 maintainer response",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "9c5de9bf816a5836c91c3aea8e967c1a6dc93615ebd34ad07faa37a1c6720b41",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML"
    },
    {
      "source_id": "S-RUBRIC",
      "url": "https://github.com/hermes-labs-ai/hermes-rubric/blob/1001fd49c2e204df33c54f0a3c6ecbe5d97cee65/EVAL-COVERAGE.md",
      "inspected_locations": [
        "EVAL-COVERAGE.md",
        "src/hermes_rubric/score.py::_apply_clamps",
        "calibration/META-RUBRIC.md",
        "evals/repeatability/INTERPRETATION.md",
        "evals/repeatability/REPEATABILITY-TABLE.md"
      ],
      "version": "Git commit 1001fd49c2e204df33c54f0a3c6ecbe5d97cee65",
      "retrieved": "2026-10-01",
      "access": "public"
    },
    {
      "source_id": "S-FIRST",
      "url": "https://www.first.org/cvss/v3.1/specification-document",
      "inspected_locations": [
        "\u00a77.1",
        "\u00a77.4"
      ],
      "version": "CVSS 3.1",
      "retrieved": "2026-10-01",
      "access": "public"
    },
    {
      "source_id": "S-PRECISE",
      "url": "https://doi.org/10.5281/zenodo.21652317",
      "inspected_locations": [
        "Title/date",
        "Abstract",
        "Introduction",
        "Limitations"
      ],
      "version": "Original version-specific record; publication date 2026-07-30",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "178db0be6c0c2ca5c7c936da40149d4587e81a12025db61477aba6b2759aacbb",
      "snapshot_format": "original file bytes"
    },
    {
      "source_id": "S-HORIZON",
      "url": "https://doi.org/10.5281/zenodo.21659634",
      "inspected_locations": [
        "Title/date",
        "Abstract",
        "Introduction",
        "Limitations"
      ],
      "version": "Original version-specific record; publication date 2026-07-30",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "74fdfce94fa53640fd0299a6afdd52a71fbae41edfa8683faf2af020a876e39a",
      "snapshot_format": "original file bytes"
    },
    {
      "source_id": "S-EVALS",
      "url": "https://www.anthropic.com/engineering/demystifying-evals-for-ai-agents",
      "inspected_locations": [
        "Types of graders",
        "Step 5"
      ],
      "version": "Retrieved 2026-10-01",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "dbe88776d18d5c8706ee90efe32b6825439812d0f602a99befb13152c1930017",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML"
    },
    {
      "source_id": "S-AS1105",
      "url": "https://pcaobus.org/oversight/standards/auditing-standards/details/AS1105",
      "inspected_locations": [
        ".02",
        ".05\u2013.06",
        ".29"
      ],
      "version": "Official current text; adapted principles only",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "cb5f44c66eea586f7b51f8642eaf18728d684f21ded2cbe5524f6a473669e30e",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML"
    },
    {
      "source_id": "S-AS1215",
      "url": "https://pcaobus.org/oversight/standards/auditing-standards/details/AS1215",
      "inspected_locations": [
        ".06\u2013.08"
      ],
      "version": "Official current text; adapted principles only",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "503bce6fa7186744e9f6493fd1d5616873b28314a26c0aa2d55f38b98ba0d118",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML"
    },
    {
      "source_id": "S-TOB",
      "url": "https://trailofbits.com/anatomy-of-a-report/",
      "inspected_locations": [
        "Sections 04\u201307"
      ],
      "version": "Illustrative reporting example",
      "retrieved": "2026-10-01",
      "access": "public",
      "snapshot_sha256": "41b6789723dcd4d897a8ad90d20808b87e4775a8c6ae2d721c78dc47e501034e",
      "snapshot_format": "tool-rendered extraction or API JSON, not original HTML"
    }
  ]
}