# 42-Second Initial Verdict worksheet

| Field | Entry |
|---|---|
| Auditor name / organisation | |
| Date and time (UTC) | |
| Machine, OS, Python version | |
| Network disconnected during the timed step? (Y/N, and how) | |
| ZIP filename | `cain42-auditor-kit-8.3.2.zip` |
| SHA-256 computed by you | |
| SHA-256 published on the release page (copied from where?) | |
| Trust anchor used | |
| Channels used to authenticate the anchor (website / history / direct / other); see KEYS_AND_TRUST.md | |
| Verifier you ran (packaged copy, separately downloaded copy, or your own) and its SHA-256 | |
| Command | |
| Wall-clock time of the timed step | |
| Verdict and exit code | |
| Every WARN, FAIL and SKIP (check id and detail) | |
| `--check-result` on your saved result (RESULT_CONSISTENT?) | |

**Interpretation (tick one):**
- [ ] Integrity and authenticity established **relative to my anchor**; continue to triage
- [ ] Integrity failed: stop and report
- [ ] Anchor could not be authenticated beyond the operator's own website: record as operator-asserted

I understand this verdict is not an audit, not a certification, and not a production-readiness decision. Signature: ____________
