Publication custody
Edition 2026.7 is a dated public-evidence score snapshot. Subsequent navigation, source-access screening and presentation updates do not silently revise its 98 values.
The edition manifest records source commit 08692dedd56e0a7020bae84cde36ea501697e1b5 and the two frozen score-asset hashes. This is score-source custody, not an assertion that all later site builds or the QScout product have the same revision.
| Asset | SHA-256 |
|---|---|
| Score CSV | 33884e232eff6b73e029b9642bff36ea8f1ae34e10c4f00550820060b1e1b36e |
| Final criterion matrix | 55bbcb638041aa0e149066aab6a3c1d109c938b14262b45238156824c67e9e99 |
Edition 2026.5 remains available as a superseded report. Its QScout 9.42 score is withdrawn; edition 2026.7 re-scored all assessed products from public evidence, ignoring QScout's self-ratings. The current QScout 8.00 and CBOM Secure 7.47 values belong to this documentation rubric, not a common-build performance test.
The following changes are recorded in the 2026.7 research record. The underlying score archive remains directly inspectable. Later challenges receive a dated disposition and, if needed, a new snapshot rather than a silent rewrite.
Four of the seven cells behind 9.42 were asserted by the vendor instrument, not measured. Re-scored from public evidence, QScout is 8.00 and still first; the instrument is now cited only as a vendor self-measurement. S27S31
No enumeration of 56 probes exists in the instrument code or its published artifacts; the phrase was prose. Edition 2026.7 scores seven cells per product with archived cited URLs, excerpts and rationales. The 30 September source screen reproduced 71 excerpts, did not reproduce 20 and could not access cited sources for 7 cells. S31
CBOM Secure and another listed scanner document CycloneDX 1.7 output. S04S20
CBOM Secure claims a tamper-evident asset-change log; the cited material does not specify its integrity-verification mechanism. S05
CBOM Secure documents cross-file call-graph reachability. S04
Other products discuss HNDL and migration priority, but the cited pages do not establish a directly comparable quantitative HNDL formula. S05S17
An owned synthetic QScout lab found a native CBOM schema failure and tested a local source candidate correction. The lab did not run a customer estate or peer comparison. The original failure and candidate receipts are downloadable; the candidate is not the deployed product. The frozen 2026.7 scores, weights and evidence files were not reissued by this note.
Submit a reproducible correction with the criterion, source or test case, URL and observation date. Read the public challenge log for accepted, rejected and pending dispositions. The 98-cell explorer shows archived rationales and the 30 September source-access screen; that screen is an access check, not a new scoring edition.