Brightwater Metrics (sample): sealed audit package 340E-8865-E3ED

Sending this on? Send Brightwater Metrics (sample) audit package 340E-8865-E3ED.tar.gz, the file you downloaded, unchanged; not the PDF or the unpacked folder. Kanonik signed the list of every file in this package, so the auditor's check fails if any file is changed, added or removed, even if the file list was edited to match.

For the auditor of Brightwater Metrics (sample): start with "Brightwater Metrics (sample) package report 340E-8865-E3ED.pdf".

Frameworks: SOC 2 (AICPA Trust Services Criteria, 2017 / rev. 2022), NIST Cybersecurity Framework (CSF) 2.0.
Period: 8 Sep 2026 to 16 Oct 2026

Records: one PDF per record, named by reference and title.
Tables: one spreadsheet per framework, plus links between records, approvals and the record population for sampling (UTF-8; in Excel use Data, From Text/CSV).
Verification: the seal check. Open Verification/verify.html and drop or choose Brightwater Metrics (sample) audit package 340E-8865-E3ED.tar.gz; nothing leaves your computer. To run it from the command line, read Verification/VERIFY.md. The check ends in one of three results: Passed, Passed with notes, Failed.

A record of what was decided and approved, not a certificate or an audit opinion.
