KYE-Protocol/examples huggingface dataset:
Report kind: soc2_type2
Framework: soc_2
Period: 2026-04-01T00:00:00Z to 2026-07-01T00:00:00Z

Findings:
headline: Trust Services Criteria CC1–CC8 conformant across the observation period with zero exceptions
verdict: conformant
rationale: Every privileged decision over the 91-day window emitted a §0.3 envelope to the per-tenant hash-linked audit chain (12,847 events). Every event verified offline via the published assembler_kid pubkey. WORM triggers blocked all 0 attempted mutations on the audit_chain_entries, decisions, risk_assessments, and data_classification_assignments tables.
headline: Logical-access controls (CC6.1, CC6.2, CC6.3) attested by entitlement-gate enforcement on every public-perimeter route
verdict: conformant
rationale: Static-graph CI gate proves all 52 HTTP-perimeter workers invoke requireEntitlement(); zero ungated routes for the observation period. Invoice-paid hard gate enforced on every privileged operation.
headline: Change-management (CC8.1) attested by signed manifest publication + Replay-Proof per release
verdict: conformant
rationale: Every release to public/main carried a signed Compiled Authority Bundle whose Replay-Proof was re-derived by the conformance runner from the public-key registry alone.

Controls:
control_id: soc2_cc1.1
status: pass
control_id: soc2_cc6.1
status: pass
control_id: soc2_cc6.2
status: pass
control_id: soc2_cc6.3
status: pass
control_id: soc2_cc7.2
status: pass
control_id: soc2_cc8.1
status: pass

Summary:
Finding count: 3
Controls passed: 6
Controls failed: 0
Controls with exceptions: 0
Headline verdict: conformant