Step 1 of 3: Identity
CMMC 2.0
Phase 3 · Evidence & auditImmutable cryptographic hash chains linking evidence items to executive attestation verdicts.
Basis: Cryptographic Audit Signatures & Non-Repudiation
/cmmc/decision-forensicsDoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
3 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 3
Complete the Identity fields. Each value is validated against the schema before the next step unlocks.
Domain entity ID (required)
entityIdThe organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Step 2 of 3
Complete the Decision fields. Each value is validated against the schema before the next step unlocks.
Decision (required)
decisionTypeEnter decision.
Decided atoptional
decidedAtEnter decided at.
Decided byoptional
decidedByEnter decided by.
Step 3 of 3
Complete the Lineage fields. Each value is validated against the schema before the next step unlocks.
AI contributed to this decision (required)
aiInvolvedEnter ai contributed to this decision.
How this was reachedoptional
explanationPathEnter how this was reached.
Continue with the next guide in this framework's table of contents.
Immutable evidence custody, SHA-256 integrity verification, and custody transition locking.
Read guide Phase 3 · Evidence & auditTelemetry collection for assessment compute tokens, verification runs, and tenant billing limits.
Read guide Phase 3 · Evidence & auditAutomated drift monitoring, control degradation alerts, and continuous attestation state engine.
Read guide