Evidence Capture Log¶
Purpose. The running chain of custody for every artefact filed in the evidence store: what it proves, who captured it, when, how, and its SHA-256 so integrity can be re-verified at any time. Written automatically by
tools/evidence.py— do not edit rows by hand; the hash is the point.Artefacts live in
s3://soon-isms-evidence(account 404379474355, Object Lock 3 years). This log is the index. Together with CloudTrail data events they answer "who did what, when" without any database — see Evidence Collection & Management §4.7.
| Captured (UTC) | Control | SOC 2 | Description | Method | Captured by | SHA-256 | S3 key |
|---|---|---|---|---|---|---|---|
| 2026-08-24 09:07:16 | A.8.20 |
44 | rds-not-publicly-accessible | cli-export | olaf | 0223c12771a0a01b… |
2026/A.8.20/2026-08-24__A.8.20__rds-not-publicly-accessible__olaf.txt |
| 2026-08-24 09:07:28 | A.8.20 |
45 | no-world-open-database-ports | cli-export | olaf | ce40d3d204095e82… |
2026/A.8.20/2026-08-24__A.8.20__no-world-open-database-ports__olaf.txt |
| 2026-09-02 15:58:27 | A.8.24 |
47 | alb-tls12-minimum-verification | file | olaf | 5640a1ebd0578b53… |
2026/A.8.24/2026-09-02__A.8.24__alb-tls12-minimum-verification__olaf.txt |
| 2026-09-08 15:25:10 | A.5.17 |
34 | github-org-wide-2fa-enforced-and-all-members-compliant | cli-export | olaf | c7b70dee4fc463e4… |
2026/A.5.17/2026-09-08__A.5.17__github-org-wide-2fa-enforced-and-all-members-compliant__olaf.txt |
| 2026-09-08 21:21:18 | A.8.1 |
50 | device-attestation-q3-2026-olaf-jacobson | file | olaf | 34ebc09a3439ba11… |
2026/A.8.1/2026-09-08__A.8.1__device-attestation-q3-2026-olaf-jacobson__olaf.txt |
| 2026-09-08 21:21:47 | A.7.9 |
40 | device-attestation-q3-2026-olaf-jacobson-physical-and-device-security | file | olaf | 34ebc09a3439ba11… |
2026/A.7.9/2026-09-08__A.7.9__device-attestation-q3-2026-olaf-jacobson-physical-and-device-security__olaf.txt |
| 2026-09-09 09:32:51 | A.5.20 |
19 | customer-contracts-1916-msa-confidentiality-and-signed-gxo-dpa-extracts | file | olaf | 86868ffe8ac3690b… |
2026/A.5.20/2026-09-09__A.5.20__customer-contracts-1916-msa-confidentiality-and-signed-gxo-dpa-extracts__olaf.pdf |
| 2026-09-09 13:26:41 | A.5.18 |
39 | quarterly-access-review-q3-2026-aws-and-github | file | olaf | 7ce0dd5f41d41780… |
2026/A.5.18/2026-09-09__A.5.18__quarterly-access-review-q3-2026-aws-and-github__olaf.pdf |
| 2026-09-09 13:26:46 | A.5.15 |
38 | access-provisioning-and-review-record-q3-2026 | file | olaf | 7ce0dd5f41d41780… |
2026/A.5.15/2026-09-09__A.5.15__access-provisioning-and-review-record-q3-2026__olaf.pdf |
| 2026-09-09 14:09:52 | A.5.18 |
39 | quarterly-access-review-q3-2026-closed-with-actions-taken | file | olaf | da3c1c90dd293665… |
2026/A.5.18/2026-09-09__A.5.18__quarterly-access-review-q3-2026-closed-with-actions-taken__olaf.pdf |
| 2026-09-09 14:21:25 | A.5.18 |
39 | quarterly-access-review-q3-2026-final | file | olaf | af4c83860e50d6c1… |
2026/A.5.18/2026-09-09__A.5.18__quarterly-access-review-q3-2026-final__olaf.pdf |
| 2026-10-13 09:15:52 | A.8.8 |
52 | getagency-web-app-pentest-report-v1-0-2026-09-24 | file | olaf | 5afe6cc262a7edb6… |
2026/A.8.8/2026-10-13__A.8.8__getagency-web-app-pentest-report-v1-0-2026-09-24__olaf.pdf |
| 2026-10-13 17:59:13 | A.6.3 |
1 | signed-policy-acknowledgement-olaf-jacobson | file | olaf | 58135ea83e2efe64… |
2026/A.6.3/2026-10-13__A.6.3__signed-policy-acknowledgement-olaf-jacobson__olaf.pdf |
| 2026-10-13 17:59:18 | A.6.6 |
2 | signed-founder-confidentiality-undertaking-olaf-jacobson | file | olaf | 58135ea83e2efe64… |
2026/A.6.6/2026-10-13__A.6.6__signed-founder-confidentiality-undertaking-olaf-jacobson__olaf.pdf |
| 2026-10-13 17:59:23 | A.6.2 |
3 | signed-founder-undertaking-terms-olaf-jacobson | file | olaf | 58135ea83e2efe64… |
2026/A.6.2/2026-10-13__A.6.2__signed-founder-undertaking-terms-olaf-jacobson__olaf.pdf |
| 2026-10-13 17:59:27 | A.6.3 |
1 | signed-policy-acknowledgement-thomas-picauly | file | olaf | 3ce630825209e313… |
2026/A.6.3/2026-10-13__A.6.3__signed-policy-acknowledgement-thomas-picauly__olaf.pdf |
| 2026-10-13 17:59:32 | A.6.6 |
2 | signed-founder-confidentiality-undertaking-thomas-picauly | file | olaf | 3ce630825209e313… |
2026/A.6.6/2026-10-13__A.6.6__signed-founder-confidentiality-undertaking-thomas-picauly__olaf.pdf |
| 2026-10-13 17:59:37 | A.6.2 |
3 | signed-founder-undertaking-terms-thomas-picauly | file | olaf | 3ce630825209e313… |
2026/A.6.2/2026-10-13__A.6.2__signed-founder-undertaking-terms-thomas-picauly__olaf.pdf |
| 2026-10-13 17:59:41 | A.6.3 |
1 | signed-policy-acknowledgement-alessandro-cardinali | file | olaf | 01884bee7fc10853… |
2026/A.6.3/2026-10-13__A.6.3__signed-policy-acknowledgement-alessandro-cardinali__olaf.pdf |
| 2026-10-13 17:59:46 | A.6.6 |
2 | signed-founder-confidentiality-undertaking-alessandro-cardinali | file | olaf | 01884bee7fc10853… |
2026/A.6.6/2026-10-13__A.6.6__signed-founder-confidentiality-undertaking-alessandro-cardinali__olaf.pdf |
| 2026-10-13 17:59:51 | A.6.2 |
3 | signed-founder-undertaking-terms-alessandro-cardinali | file | olaf | 01884bee7fc10853… |
2026/A.6.2/2026-10-13__A.6.2__signed-founder-undertaking-terms-alessandro-cardinali__olaf.pdf |
| 2026-10-16 11:24:46 | A.5.20 |
4 | signed-consultancy-agreement-cybersquad-andrea-cardinali | file | olaf | 549b6e93f36a71d2… |
2026/A.5.20/2026-10-16__A.5.20__signed-consultancy-agreement-cybersquad-andrea-cardinali__olaf.pdf |
| 2026-10-16 11:24:50 | A.6.6 |
2 | signed-nda-cybersquad-andrea-cardinali | file | olaf | 549b6e93f36a71d2… |
2026/A.6.6/2026-10-16__A.6.6__signed-nda-cybersquad-andrea-cardinali__olaf.pdf |
| 2026-10-16 11:24:55 | A.6.3 |
1 | signed-policy-acknowledgement-andrea-cardinali | file | olaf | 549b6e93f36a71d2… |
2026/A.6.3/2026-10-16__A.6.3__signed-policy-acknowledgement-andrea-cardinali__olaf.pdf |
| 2026-10-16 11:57:17 | A.8.24 |
52 | cipher-retest-after-modern-pages-hostnames-unaffected | cli-export | olaf | 5a2d64cdd9934e20… |
2026/A.8.24/2026-10-16__A.8.24__cipher-retest-after-modern-pages-hostnames-unaffected__olaf.txt |
| 2026-10-21 11:16:22 | A.8.20 |
46 | annual-firewall-review-2026-security-groups-with-attachments | cli-export | olaf | 91b0e1208d36601c… |
2026/A.8.20/2026-10-21__A.8.20__annual-firewall-review-2026-security-groups-with-attachments__olaf.txt |
| 2026-10-21 11:16:28 | A.8.26 |
44 | clickjacking-retest-frame-ancestors-none-enforced | cli-export | olaf | 37ef3b7f564e7083… |
2026/A.8.26/2026-10-21__A.8.26__clickjacking-retest-frame-ancestors-none-enforced__olaf.txt |
| 2026-10-21 11:24:05 | A.8.24 |
48 | rds-and-s3-encryption-at-rest-every-bucket | cli-export | olaf | bc753ead9f642e22… |
2026/A.8.24/2026-10-21__A.8.24__rds-and-s3-encryption-at-rest-every-bucket__olaf.txt |
| 2026-10-21 11:24:16 | A.8.15 |
54 | cloudtrail-logging-cloudwatch-alarms-guardduty-status | cli-export | olaf | 31032a3dfd7dba9e… |
2026/A.8.15/2026-10-21__A.8.15__cloudtrail-logging-cloudwatch-alarms-guardduty-status__olaf.txt |
| 2026-10-21 11:24:25 | A.8.13 |
60 | production-rds-backup-configuration-and-latest-snapshots | cli-export | olaf | 01ee0d3fdd2ee686… |
2026/A.8.13/2026-10-21__A.8.13__production-rds-backup-configuration-and-latest-snapshots__olaf.txt |
| 2026-10-21 11:24:32 | A.8.24 |
47 | tls-certificates-app-and-api-valid | cli-export | olaf | 8632ead9e7a5dafa… |
2026/A.8.24/2026-10-21__A.8.24__tls-certificates-app-and-api-valid__olaf.txt |
| 2026-10-21 11:26:26 | A.8.32 |
27 | release-to-production-prs-reviewed-by-second-founder | cli-export | olaf | 9ce421de3c9c0486… |
2026/A.8.32/2026-10-21__A.8.32__release-to-production-prs-reviewed-by-second-founder__olaf.txt |
| 2026-10-21 11:26:34 | A.8.9 |
64 | infrastructure-as-code-production-roots-and-reviewed-prs | cli-export | olaf | 2ee4a749ad61c583… |
2026/A.8.9/2026-10-21__A.8.9__infrastructure-as-code-production-roots-and-reviewed-prs__olaf.txt |
| 2026-10-21 11:43:42 | A.6.4 |
1 | signed-policy-acknowledgement-melvin-jacobson | file | olaf | 9e530da85a6f3b8c… |
2026/A.6.4/2026-10-21__A.6.4__signed-policy-acknowledgement-melvin-jacobson__olaf.pdf |
| 2026-10-21 11:43:47 | A.6.6 |
2 | signed-founder-confidentiality-undertaking-melvin-jacobson | file | olaf | 9e530da85a6f3b8c… |
2026/A.6.6/2026-10-21__A.6.6__signed-founder-confidentiality-undertaking-melvin-jacobson__olaf.pdf |
| 2026-10-21 11:43:52 | A.6.2 |
3 | signed-founder-undertaking-terms-melvin-jacobson | file | olaf | 9e530da85a6f3b8c… |
2026/A.6.2/2026-10-21__A.6.2__signed-founder-undertaking-terms-melvin-jacobson__olaf.pdf |
| 2026-10-21 15:10:30 | 7.2 |
14 | security-training-and-awareness-log-completions | file | olaf | 5badce78ddf813bf… |
2026/7.2/2026-10-21__7.2__security-training-and-awareness-log-completions__olaf.md |