JGoyd/ledger/running-ledger.txt

-----BEGIN RUNNING LEDGER v2-----
Identity:        Joseph R. Goydish II
PGP Fingerprint: 4A04 1F50 6D89 4F5E E391 7438 6487 8B56 A2EB 2D11
Schema version:  2
Last Updated:    2026-05-18 21:00 UTC
Scope:           Public anchor trail for Track A (regulatory/whistleblower) and Track B (vulnerability research)

--- SCHEMA ---
| Entry ID | Date (UTC) | Track | Type | Agency/Vendor | My Role | Case ID | External Anchor URL | Proof File | SHA-256 | Sig | OTS | Status |

Status values:
  VERIFIED   — neutral third party confirms; evidence published
  PARTIAL    — timing/reference chain supports claim; full evidence not yet public
  PENDING    — confirmation email/PDF exists; not yet published
  UNVERIFIED — self-asserted only; no external anchor
  DISPUTED   — contradicted by public record

Role values (Track B):
  Original-discoverer      — vendor acknowledgement names me
  Enrichment-contributor   — CISA ADP rescore citing my submission
  Chain-analyst            — chain reconstruction of existing CVEs
  Forensic-observer        — observation, not vendor-confirmed
Role values (Track A):
  Filer                    — submitted material, agency acknowledged

--- ENTRIES ---

# ===== TRACK B =====

B-01 | 2025-11-12 | B | CVE/CVSS | Apple (via CISA ADP) | Enrichment-contributor | CVE-2025-24085 | https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24085 | evidence/TRACK-B-CVE-2025-24085-24201/ | PENDING | PENDING | PENDING | PARTIAL

B-02 | 2025-11-12 | B | CVE/CVSS | Apple (via CISA ADP) | Enrichment-contributor | CVE-2025-24201 | https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24201 | evidence/TRACK-B-CVE-2025-24085-24201/ | PENDING | PENDING | PENDING | PARTIAL

B-03 | 2025-11-24 | B | CVE/CVSS | Apple (via CISA ADP) | Enrichment-contributor + Chain-analyst | CVE-2025-31200 | https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31200 | evidence/TRACK-B-CVE-2025-31200-31201/ | PENDING | PENDING | PENDING | VERIFIED

B-04 | 2025-11-24 | B | CVE/CVSS | Apple (via CISA ADP) | Enrichment-contributor | CVE-2025-31201 | https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31201 | evidence/TRACK-B-CVE-2025-31200-31201/ | PENDING | PENDING | PENDING | VERIFIED

B-05 | 2025-11-26 | B | CVE/CVSS | Apple (via CISA ADP) | Chain-analyst | CVE-2025-43300 | https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-43300 | evidence/TRACK-B-CVE-2025-24085-24201/ | PENDING | PENDING | PENDING | PARTIAL

B-06 | 2025-03-18 | B | CNVD | CNCERT/CC | Original-discoverer (claimed) | CNVD-2025-06744 / CNVD-YCGO-202503023656 | (CNVD certificate offline) | evidence/TRACK-B-CNVD-2025-06744/ | PENDING | PENDING | PENDING | UNVERIFIED

B-07 | 2025-04-22 | B | CNVD | CNCERT/CC | Original-discoverer (claimed) | CNVD-2025-07885 / CNVD-YCGO-202504012519 | (CNVD certificate offline) | evidence/TRACK-B-CNVD-2025-07885/ | PENDING | PENDING | PENDING | UNVERIFIED

B-08 | 2026-04-08 | B | MSRC | Microsoft Security Response Center | Reporter | MSRC-112639 | (MSRC portal — confidential) | evidence/TRACK-B-MSRC-112639/ | PENDING | PENDING | PENDING | PENDING

B-09 | 2025-04-22 | B | TLS-misconfig | NASA / JPL | Discloser | (intake ref pending) | (NASA/JPL acknowledgement) | evidence/TRACK-B-NASA-JPL-TLS/ | PENDING | PENDING | PENDING | UNVERIFIED

B-10 | 2025-12-25 | B | DOE-417 | DOE/NNSA EOC | Filer | 5941450-1585693 | (DOE EOC reply — agency-controlled) | evidence/TRACK-B-DOE-417/ | PENDING | PENDING | PENDING | PENDING

B-11 | 2026     | B | Abuse-report | Cloudflare | Filer | (Cloudflare ticket ref pending) | (Cloudflare abuse acknowledgement) | evidence/TRACK-B-Cloudflare-abuse/ | PENDING | PENDING | PENDING | UNVERIFIED

B-12 | 2026     | B | FBI-IC3 | FBI Internet Crime Complaint Center | Filer | 067b3177c3524c80bce02cca08064d11 | (IC3 confirmation — not externally queryable) | evidence/TRACK-B-IC3-067b3177c3524c80bce02cca08064d11/ | PENDING | PENDING | PENDING | UNVERIFIED

# ===== TRACK A =====

A-01 | 2026-05-06 | A | SEC-TCR | U.S. Securities and Exchange Commission | Filer | 17780-976-067-126 | (SEC TCR Office acknowledgement — DKIM sec.gov) | evidence/TRACK-A-SEC-TCR-17780-976-067-126/ | PENDING | PENDING | PENDING | PENDING

A-02 | 2026-05-06 | A | IRS-Form-211 | U.S. Internal Revenue Service Whistleblower Office | Filer | (claim # pending paper letter) | (IRS Whistleblower Office acknowledgement) | evidence/TRACK-A-IRS-FORM-211/ | PENDING | PENDING | PENDING | UNVERIFIED

A-03 | 2026-05-05 | A | DOJ-FARA | U.S. DOJ FARA Unit | Filer | (FARA Unit intake ref) | (FARA Unit acknowledgement — DKIM usdoj.gov) | evidence/TRACK-A-DOJ-FARA-Public/ | PENDING | PENDING | PENDING | UNVERIFIED

A-04 | 2026-05-04 | A | OLAF | European Anti-Fraud Office (OLAF) | Filer | 00Db00K8yP.!500Sk019RuGn | https://www.bbc.com/news/articles/cj98zm22327o (publicly confirmed parallel OLAF investigation into Mandelson) | evidence/TRACK-A-OLAF-Ref-00Db00K8yP/ | PENDING | PENDING | PENDING | PARTIAL

A-05 | 2026-05-04 | A | CPIB | Singapore Corrupt Practices Investigation Bureau | Filer | 69f824dfe5ef7daf3b78ccee | (CPIB acknowledgement — DKIM cpib.gov.sg) | evidence/TRACK-A-CPIB-69f824dfe5ef7daf3b78ccee/ | PENDING | PENDING | PENDING | UNVERIFIED

A-06 | 2026-05-11 | A | FCA | UK Financial Conduct Authority | Filer | 212278528 | (FCA acknowledgement — DKIM fca.org.uk) | evidence/TRACK-A-FCA-212278528/ | PENDING | PENDING | PENDING | UNVERIFIED

A-07 | 2026-05-13 | A | Japan-ISA | Japan Immigration Services Agency | Filer | (ISA intake ref) | (ISA acknowledgement) | evidence/TRACK-A-Japan-ISA-ICRRA70-1/ | PENDING | PENDING | PENDING | UNVERIFIED

A-08 | 2026-04-28 | A | Prosecutor-General | Slovak Republic — Generálna prokuratúra | Filer | 260428070422263 | (genpro.gov.sk e-signed receipt — eIDAS PAdES) | evidence/TRACK-A-SK-260428070422263/ | PENDING | PENDING | PENDING | PENDING

A-09 | 2026-04-30 | A | Prosecutor-Regional | Lithuania — Panevėžio OTNK skyrius | Filer | 01-1-03450-26 (case file); IBPS-S-248320-26 (doc reg.) | (IBPS e-signed receipt — eIDAS PAdES) | evidence/TRACK-A-LT-CASE-01-1-03450-26/ | PENDING | PENDING | PENDING | PENDING

A-10 | 2026-03-24 | A | NCC | Taiwan National Communications Commission | Filer | 通傳基礎決字第11500091980號 | (NCC decision letter) | evidence/TRACK-A-TW-NCC-11500091980/ | PENDING | PENDING | PENDING | PENDING

A-11 | 2026-05-05 | A | State-AG | Massachusetts Attorney General's Office | Filer | (AGO intake ref) | (AGO acknowledgement) | evidence/TRACK-A-MA-AGO-MIT-MediaLab/ | PENDING | PENDING | PENDING | UNVERIFIED

--- NOTES ---
- Append-only after first signed publication. Edits in pre-publication drafts only.
- Every entry must terminate in a third-party-controlled anchor URL OR carry status UNVERIFIED.
- This ledger MUST be detached-signed (gpg --armor --detach-sign) and OpenTimestamps-anchored on each update.
- Prior signed versions are retained as historical artifacts.

VERIFICATION
This ledger is cryptographically bound to the fingerprint above. The detached
PGP signature (running-ledger.txt.asc) and OpenTimestamps proof
(running-ledger.txt.ots) are published alongside this file.

-----END RUNNING LEDGER v2-----