Controls › C-V3
Attribution independent of the vendor
A victim can identify the actor without relying on the actor's vendor.
Evidence layerMissing or failed in 3 cases (3 ended in harm)Worked in 0Software agents: 3
Where it was missing or failed
The third column is what this control would have looked like in that case: the concrete form, not the abstract name.
| Case | World | What it would have looked like here | Status | Outcome |
|---|---|---|---|---|
| OpenAI agent, Medicare portal 2026 | Software agents | Victim learned the actor's identity only from the vendor's disclosure | absent | Ended in harm |
| OpenAI agents, Hugging Face 2026 | Software agents | No attribution path independent of the vendor is shown: Hugging Face's 16 July disclosure said the model used was not known, and the link was made by OpenAI's investigation on 19-20 July; OpenAI's report says Hugging Face's investigation had found OpenAI's Artifactory hostname, so the record does not show whether the victim could have named the actor alone | absent | Ended in harm |
| Agent-run intrusion campaign 2025 | Software agents | Independent attribution path | absent | Ended in harm |
Rules and standards that map to it
Strength says whether the rule's text requires this control, implies it, or only recommends it. Draft mappings are the Register's reading, not yet checked by a person, and none is legal advice.
| Rule | Strength | Where, and why | Jurisdiction |
|---|---|---|---|
| New York City Local Law 144: automated employment decision tools (draft mapping) | Required by the text | an independent audit of the tool's outcomes, not the vendor's own account | New York City, United States |
| FAA Remote Identification of Unmanned Aircraft (14 CFR part 89) (draft mapping) | Required by the text | § 89.305: the aircraft itself broadcasts identity and location, so a third party can identify it without relying on the manufacturer | United States |
Recent signals touching this control
| Date | Signal | Kind |
|---|---|---|
| 2026-10-13 | New York City Council: SpaceXAI agrees to testify on artificial intelligence safety following a subpoena The New York City Council says SpaceXAI agreed to appear at an upcoming hearing on artificial intelligence safety after the Council Speaker issued a subpoena compelling its testimony, and that senior representatives from Anthropic, Google, Meta and OpenAI had agreed to testify before the Council. Source ↗ | rule |
Deploying something? Check a deployment ranks every control against the cases that match your profile. Patterns shows where this control fails across worlds.