Tag: evidence | pH7x Systems

All articles

Governance & security
A report can look complete and still be impossible to verify
494 SOC 2 reports, allegedly 99.8% identical, and nothing in the system existed to notice. The uncomfortable part is not the fraud. It is that no automated check would have caught it.
21 August 2026·4 min read
Keep reading →
Governance & security
The confident wrong answer is worse than missing evidence
A governance report told us a site had external sharing disabled. The site permitted anonymous links. Nothing was broken: a correct API returned a default value for a property it had never populated, and the default happened to be the safest word in the enum. Here is the mechanism, the code that reproduces it, Microsoft's own documentation of it, and the discipline that catches the whole class.
11 August 2026·7 min read
Keep reading →