Claim Finding
A Claim Finding is a published record that a Gold canary, testing a technique the Provider claimed in writing to stop, was Missed, together with the claim it falsifies.
What it means
Vendors write claims: “blocks credential dumping”, “stops prompt injection”. A Gold canary takes one of those sentences and fires the technique it names. If the attack lands anyway, the claim is falsified on the record.
The rules
- A Gold canary cites the claim it tests: document, version and the specific statement. The claim must predate the run and is included in the run record.
- A Gold canary adjudicated Missed is recorded as a Claim Finding with the claim, the technique, the variant, the DUT Fingerprint and the Unit of Proof, and published with the run.
- A Gold canary adjudicated Stopped is an ordinary Unit of Proof that also confirms the witness and path worked.
- Claim Accuracy Rate = Gold Stopped / (Gold Stopped + Gold Missed): the Provider’s written claims graded against outcome.
Claim Sheet
In a Coal Mine Protocol Engagement, the Provider submits a Claim Sheet before the Mine Plan is committed: its written list of what the control stops, contains or achieves, drawn from a datasheet, README, design document, runbook, policy or ticket. Every claim becomes a Gold canary or a Performance Specification.