The working record behind CMMC 20X.
Research on evidence, verification, program design, and the conditions under which the model should proceed, change, or stop. Every paper carries its sources, status, and review date.
Research library
- 01Read paperReform series · 01Vision · Principles · Current interventionPolicy recordCurrent
What Changed After the July Reform Review
The July record narrowed CMMC 20X: preserve the baseline, separate evidence from verification, name legal instruments, and test assistance before reliance.
Reviewed Aug 13, 2026 - 02Read paperReform series · 02Principles · Mechanism · Evidence · EvaluationResearch paperCurrent
Why CMMC 20X Separates Three Policy Layers
A design case for keeping required safeguards, proof structure, and review depth as three separate policy decisions.
Reviewed Aug 13, 2026 - 03Read paperReform series · 03Evidence · Mechanism · PrinciplesResearch paperCurrent
What a Common Evidence Profile Must Preserve
The minimum context a CMMC security claim needs to remain traceable, challengeable, and useful across tools and reviewers.
Reviewed Aug 13, 2026 - 04Read paperReform series · 04Evidence · Mechanism · Principles · EvaluationResearch paperCurrent
When Evidence Can Be Reused
A decision test for reusing CMMC evidence without detaching it from scope, time, responsibility, or reviewer purpose.
Reviewed Aug 13, 2026 - 05Read paperReform series · 05Mechanism · Evaluation · Principles · AnalysisResearch paperCurrent
How Verification Should Scale
A proposal for varying CMMC Level 2 review depth while preserving safeguards, human authority, escalation, and Government oversight.
Reviewed Aug 13, 2026 - 06Read paperReform series · 06Analysis · Evidence · MechanismResearch paperCurrent
What the Model Says About Evidence and Review
The CMMC 20X model separates evidence handling from review capacity and shows why improving either one alone leaves a different constraint in place.
Reviewed Aug 14, 2026 - 07Read paperReform series · 07Evidence · Mechanism · EvaluationResearch paperCurrent
Accountability for Software-Produced Evidence
A proposed authority map for keeping source records, machine analysis, human findings, and CMMC decisions distinct.
Reviewed Aug 13, 2026 - 08Read paperReform series · 08Evidence · Mechanism · PrinciplesResearch paperCurrent
How a Provider Claim Should Travel
A proposed exchange record for carrying provider evidence into a contractor's CMMC claim without erasing scope, customer duties, or reviewer judgment.
Reviewed Aug 13, 2026 - 09Read paperReform series · 09Principles · Evidence · Evaluation · MechanismResearch paperCurrent
What CMMC 20X Cannot Automate
A task-level boundary for software-assisted CMMC evidence work, including the judgments, authorities, and field conditions that remain human.
Reviewed Aug 13, 2026 - 10Read paperReform series · 10Evaluation · Mechanism · Current interventionResearch paperCurrent
The Minimum Viable CMMC 20X Pilot
A pilot should compare methods on frozen cases, publish dangerous errors, and earn each expansion of permitted use.
Reviewed Aug 13, 2026 - 11Read paperReform series · 11Vision · Evaluation · AnalysisResearch paperCurrent
What Would Falsify the CMMC 20X Thesis?
Six observable failures would require the proposal to narrow, change, or stop. A reform thesis should expose those conditions in advance.
Reviewed Aug 13, 2026 - 12Read paperReform series · 12Evidence · Mechanism · PrinciplesResearch paperCurrent
How a Correction Should Move Through the Record
A corrected source should reopen every dependent claim, finding, package, and authorized use without erasing the earlier decision trail.
Reviewed Aug 13, 2026 - 13Read paperEvidence · Evaluation · MechanismResearch paperCurrent
A Security Claim Should Carry Its Own Receipts
A security claim is reusable only when its scope, source, date, responsibility, conflicts, and reviewer stay attached.
Reviewed Aug 13, 2026 - 14Read paperAnalysis · MechanismResearch paperCurrent
What Actually Holds Up?
Seven CMMC policy options produce very different results for security, suppliers, review queues, and cost.
Reviewed Aug 14, 2026 - 15Read paperCurrent interventionPolicy recordCurrent
The Phase 2 Suspension: What the Record Says
What the July 13 CMMC documents changed, left in place, and left unresolved.
Reviewed Aug 13, 2026 - 16Read paperVision · Principles · MechanismFoundational paperRevised
Introducing CMMC 20X
Five changes to how CMMC evidence is collected, reviewed, reused, and updated.
Reviewed Aug 13, 2026
Keep the conditions attached.
Model results carry their assumptions and limits. Time-sensitive records identify their review date. Sources and material corrections remain visible so a reader can trace what supports a conclusion and what changed.
Read the reform analysis methodology