Instrument

ARCS Attestation Template

Template for documenting deployment-scoped implementation status against ARCS v1.0.

Overview

This instrument provides a structured template for documenting implementation status against ARCS control families within a defined deployment scope. It may be used for self-attestation, internal audit, or independent third-party assessment.

Use of this template does not by itself establish conformance. Where conformance is declared, supporting documentation should be available for review on request.

Assessment types

This template supports three assessment types: self-attestation, in which conformance is declared by the operator on the basis of internal review; internal audit, in which conformance is assessed by an internal function independent of the assessed deployment; and third-party assessment, in which conformance is assessed by an independent external assessor.

Each control family should be marked as Implemented, Partial, Not Implemented, or Not Applicable. Where a family is marked Partial or Not Implemented, relevant gaps should be identified in the notes field. Where a family is marked Not Applicable, the basis for that determination should be documented.

Use and scope

This template is intended for use against a defined deployment scope. The attesting party should identify the system, operator, relevant vendors and custodians, declared conformance profile, and any systems or surfaces expressly excluded from scope.

ARCS-NCR applies where non-creation or non-retention is claimed. ARCS-AGT applies where the deployment involves multi-step execution, tool invocation, or intra-session state. ARCS-DEL applies where the deployment involves persistent memory, delegated authority, or autonomous execution.

Template sections

  1. Purpose and use
  2. System identification
  3. Scope of attestation
  4. ARCS-LIF — Record Lifecycle Controls
  5. ARCS-CUS — Custody Surface Controls
  6. ARCS-TAX — Record Taxonomy Controls
  7. ARCS-OPB — Operator Boundary Controls
  8. ARCS-PUB — Publish Boundary Controls
  9. ARCS-PV — Preservation and Legal Hold Controls
  10. ARCS-VER — Verification and Audit Controls
  11. ARCS-NCR — Non-Creation Controls
  12. ARCS-AGT — Agent Runtime Controls
  13. ARCS-DEL — Delegation and Memory Controls
  14. Exceptions and compensating controls
  15. Attestation statement and authorized signature

Declaration

The undersigned attests that the assessment was performed with reference to ARCS v1.0 (Automated Record Custody Standard), as published by Vega Commons Project, Inc., and that the information provided in the attestation is accurate to the best of the undersigned's knowledge and authority.

Download

Attestation template (Markdown)