SOC-30 Resolve Phase Commences — First Full-Cycle Attestation in Motion

01 The Resolve Phase

Attestation is not a moment — it is a cycle. SOC-30 is the first full-cycle attestation of the Frontier mesh: observe, measure, report, resolve. With threat feeds normalised across all regions and control evidence streaming into the vault, the mesh entered resolve on schedule. Resolve is where findings are closed, not merely recorded.

Every control owner in the nine divisions has acknowledged their evidence sets. The resolve board shows 312 of 312 controls in an armed state, with zero critical findings open at cycle open.

"Resolve is the discipline that makes attestation honest. We measure the mesh the way an auditor would — because an auditor will."

Operator noteDuring resolve, evidence retention windows are locked. No control may be re-baselined until the cycle closes.

02 Evidence at Fleet Scale

Forty-two evidence sets have been logged into the attestation vault — one per control family across the fleet. Each set carries a cryptographic fingerprint at collection time, and every log entry is anchored against the SOC clock, keeping the record consistent with SAST (UTC+2) regardless of where a node sits.

2026-02-18T08:42:01+02:00 CYCLE SOC-30 OPEN
2026-02-18T08:42:02+02:00 CONTROL 312/312 ARMED
2026-02-18T08:42:03+02:00 EVIDENCE 42 SETS LOCKED
2026-02-18T08:42:04+02:00 FINDINGS 0 CRITICAL · 3 OBSERVATIONS
2026-02-18T08:42:05+02:00 RESOLVE PHASE ACTIVE — 5 DAYS
2026-02-18T08:42:06+02:00 STATUS NOMINAL

Collection is continuous, not episodic. Telemetry flows from every gateway, every workload and every division console into the evidence stream — the same stream the SOC watches in real time.

03 The 312-Control Baseline

The baseline is the contract between the mesh and the auditor: 312 controls spanning access, encryption, workload integrity, AI governance and physical infrastructure. It is not a fixed list — the baseline is revised each cycle, absorbing new threat intelligence and regulatory change.

For this cycle, the baseline absorbed three new controls addressing supply-chain dependency verification — the subject of the desk's recent supply-chain advisory.

04 What Changes for Operators

For operators, the resolve phase changes little in day-to-day console work — by design. Evidence collection is ambient. What does change is visibility: the attestation status of every workload is now published on the strategic assets console, and division dashboards carry the cycle status alongside the SOC clock.

Attestation is a property of the mesh, not of a document. When SOC-30 closes, the report will certify the entire fleet — all nine divisions — under a single, audit-ready statement. Operators never carry that burden alone.

05 Next Milestones

Resolve runs for five days. The desk will publish the cycle close and the full report to the Trust Center on completion, alongside the control-by-control evidence index. Until then, the resolve board is visible on every division console.

• Day 2 — Observation review closes
• Day 4 — Residual risk register finalised
• Day 5 — Cycle close & report publication

Questions on the cycle can be raised with the desk directly — the team is reachable at +27 66 148 3731 or via the contact desk.