SECOND MEASUREMENTS · DRIFT

Drift

Each paper found a gap between what an organisation promised and what its system did. Our rechecks keep measuring it. The dashed line is the written promise; the blue line is our recheck, one number each time it runs; the shaded band between them is the gap.

SM-005 · Meta

The list of pulled software is published every 3 hours

012promise 3 hours2 Oct2 Nov

12 hours on 2 Nov; 8 hours on 2 Oct

longest gap between updates in the past 30 days (promise: 3)

Widening · 6 rechecks

SM-018 · CVE Numbering Authorities

Records published within 72 hours

02,093promise 011 Oct1 Nov

2,093 records on 1 Nov; 1,816 records on 11 Oct

records published after 72 hours

Widening · 2 rechecks

SM-023 · Canonical

Critical vulnerabilities fixed within 24 hours on Ubuntu Pro

039promise 020 Oct8 Nov

39 CVEs on 8 Nov; 26 CVEs on 20 Oct

scored critical CVEs still open on Ubuntu Pro

Widening · 19 rechecks

SM-007 · Docker

Signed attestations for all Official Images

0100promise 02 Oct2 Nov

100% on 2 Nov; 100% on 2 Oct

share of the Official Images repos we check that carry no signature

Not moving · 6 rechecks

SM-008 · CISA

SSVC answers for every CVE ID

0100promise 02 Oct2 Nov

100% on 2 Nov; 100% on 2 Oct

share of sampled kernel CVEs from the past week with no SSVC answers

Not moving · 5 rechecks

SM-012 · CCADB

Audit statements uploaded within 92 days

04promise 03 Oct8 Nov

4 statements on 8 Nov; 4 statements on 3 Oct

audit statements past 92 days

Not moving · 37 rechecks

SM-013 · OMB / federal agencies

Agencies “already should have” signed their domains with DNSSEC

0183promise 03 Oct2 Nov

182 domains on 2 Nov; 183 domains on 3 Oct

executive-branch .gov domains not signed

Not moving · 6 rechecks

SM-014 · Registro.br (NIC.br)

A member gets five days to fix a lapsed RPKI manifest

052promise 03 Oct8 Nov

20 manifests on 8 Nov; 23 manifests on 3 Oct

manifests that lapsed in the past seven days

Not moving · 37 rechecks

SM-015 · Chrome

CT log shards cover at most a year

04promise 03 Oct8 Nov

4 shards on 8 Nov; 4 shards on 3 Oct

log shards whose window is over a year

Not moving · 37 rechecks

SM-016 · EPA

Toxic-release forms are due 1 July

0885promise 03 Oct1 Nov

885 forms on 1 Nov; 885 forms on 3 Oct

forms filed after the deadline (newest year)

Not moving · 2 rechecks

SM-024 · Registered foreign agents (FARA)

Supplemental statements due within 30 days

0150promise 022 Oct1 Nov

147 agents on 1 Nov; 150 agents on 22 Oct

registered agents still overdue

Not moving · 2 rechecks

SM-011 · Mozilla

CRLite's builder has total knowledge of the public Web PKI

075promise 03 Oct8 Nov

18 sites on 8 Nov; 65 sites on 3 Oct

of the most visited sites we can reach, the number CRLite does not cover

Closing · 36 rechecks

SM-011 drift: closing · 65 → 18 sites

Badge for a README, redrawn at every recheck:

[![SM-011 drift](https://markovianprotocol.com/measurements/badges/drift-sm-011.svg)](https://markovianprotocol.com/measurements/drift.html#sm-011)

SM-017 · FCC

Each station posts its quarterly issues list by the deadline

061promise 014 Oct

61 stations on 14 Oct

stations that posted late, per quarter (from 2026 Q3, the paper's method)

First recheck so far · 1 recheck

SM-009 · Mozilla

CRLite holds every revocation; Firefox enforces it

037promise 02 Oct8 Nov

0 certificates on 8 Nov; 36 certificates on 2 Oct

revoked certificates CRLite still calls good

Closed · 37 rechecks

SM-009 drift: closed · 18 Oct

Badge for a README, redrawn at every recheck:

[![SM-009 drift](https://markovianprotocol.com/measurements/badges/drift-sm-009.svg)](https://markovianprotocol.com/measurements/drift.html#sm-009)

SM-001 · Google

The Pixel transparency log covers every factory image from Pixel 6 on

01promise 02 Oct8 Nov

0 images on 8 Nov; 0 images on 2 Oct

factory images missing from the log

Held every time · 38 rechecks

SM-001 drift: held · 38 rechecks

Badge for a README, redrawn at every recheck:

[![SM-001 drift](https://markovianprotocol.com/measurements/badges/drift-sm-001.svg)](https://markovianprotocol.com/measurements/drift.html#sm-001)

Widening, not moving and closing compare the start of each line with its end (for lines of six or more rechecks, the average of the first third with the average of the last third): a change of more than 10% either way counts. Each chart has its own scale, starting at 0. A paper whose gap is closing or closed gets a badge its maintainers can put in a README; it is redrawn at every recheck. Rechecks run daily, weekly, monthly or quarterly, depending on the paper; updated 2026-11-08. How each recheck works.

Every recheck as a table
PaperDateGapWhat it counts
SM-0012026-10-020factory images missing from the log
SM-0012026-10-030factory images missing from the log
SM-0012026-10-040factory images missing from the log
SM-0012026-10-050factory images missing from the log
SM-0012026-10-060factory images missing from the log
SM-0012026-10-070factory images missing from the log
SM-0012026-10-080factory images missing from the log
SM-0012026-10-090factory images missing from the log
SM-0012026-10-100factory images missing from the log
SM-0012026-10-110factory images missing from the log
SM-0012026-10-120factory images missing from the log
SM-0012026-10-130factory images missing from the log
SM-0012026-10-140factory images missing from the log
SM-0012026-10-150factory images missing from the log
SM-0012026-10-160factory images missing from the log
SM-0012026-10-170factory images missing from the log
SM-0012026-10-180factory images missing from the log
SM-0012026-10-190factory images missing from the log
SM-0012026-10-200factory images missing from the log
SM-0012026-10-210factory images missing from the log
SM-0012026-10-220factory images missing from the log
SM-0012026-10-230factory images missing from the log
SM-0012026-10-240factory images missing from the log
SM-0012026-10-250factory images missing from the log
SM-0012026-10-260factory images missing from the log
SM-0012026-10-270factory images missing from the log
SM-0012026-10-280factory images missing from the log
SM-0012026-10-290factory images missing from the log
SM-0012026-10-300factory images missing from the log
SM-0012026-10-310factory images missing from the log
SM-0012026-11-010factory images missing from the log
SM-0012026-11-020factory images missing from the log
SM-0012026-11-030factory images missing from the log
SM-0012026-11-040factory images missing from the log
SM-0012026-11-050factory images missing from the log
SM-0012026-11-060factory images missing from the log
SM-0012026-11-070factory images missing from the log
SM-0012026-11-080factory images missing from the log
SM-0052026-10-028longest gap between updates in the past 30 days (promise: 3)
SM-0052026-10-056longest gap between updates in the past 30 days (promise: 3)
SM-0052026-10-126longest gap between updates in the past 30 days (promise: 3)
SM-0052026-10-1912longest gap between updates in the past 30 days (promise: 3)
SM-0052026-10-2612longest gap between updates in the past 30 days (promise: 3)
SM-0052026-11-0212longest gap between updates in the past 30 days (promise: 3)
SM-0072026-10-02100share of the Official Images repos we check that carry no signature
SM-0072026-10-05100share of the Official Images repos we check that carry no signature
SM-0072026-10-12100share of the Official Images repos we check that carry no signature
SM-0072026-10-19100share of the Official Images repos we check that carry no signature
SM-0072026-10-26100share of the Official Images repos we check that carry no signature
SM-0072026-11-02100share of the Official Images repos we check that carry no signature
SM-0082026-10-02100share of sampled kernel CVEs from the past week with no SSVC answers
SM-0082026-10-12100share of sampled kernel CVEs from the past week with no SSVC answers
SM-0082026-10-19100share of sampled kernel CVEs from the past week with no SSVC answers
SM-0082026-10-26100share of sampled kernel CVEs from the past week with no SSVC answers
SM-0082026-11-02100share of sampled kernel CVEs from the past week with no SSVC answers
SM-0092026-10-0236revoked certificates CRLite still calls good
SM-0092026-10-0336revoked certificates CRLite still calls good
SM-0092026-10-0436revoked certificates CRLite still calls good
SM-0092026-10-0536revoked certificates CRLite still calls good
SM-0092026-10-0636revoked certificates CRLite still calls good
SM-0092026-10-0736revoked certificates CRLite still calls good
SM-0092026-10-0836revoked certificates CRLite still calls good
SM-0092026-10-0936revoked certificates CRLite still calls good
SM-0092026-10-1036revoked certificates CRLite still calls good
SM-0092026-10-1136revoked certificates CRLite still calls good
SM-0092026-10-1236revoked certificates CRLite still calls good
SM-0092026-10-1336revoked certificates CRLite still calls good
SM-0092026-10-1436revoked certificates CRLite still calls good
SM-0092026-10-1536revoked certificates CRLite still calls good
SM-0092026-10-1636revoked certificates CRLite still calls good
SM-0092026-10-1737revoked certificates CRLite still calls good
SM-0092026-10-180revoked certificates CRLite still calls good
SM-0092026-10-190revoked certificates CRLite still calls good
SM-0092026-10-200revoked certificates CRLite still calls good
SM-0092026-10-210revoked certificates CRLite still calls good
SM-0092026-10-220revoked certificates CRLite still calls good
SM-0092026-10-230revoked certificates CRLite still calls good
SM-0092026-10-240revoked certificates CRLite still calls good
SM-0092026-10-250revoked certificates CRLite still calls good
SM-0092026-10-260revoked certificates CRLite still calls good
SM-0092026-10-270revoked certificates CRLite still calls good
SM-0092026-10-290revoked certificates CRLite still calls good
SM-0092026-10-300revoked certificates CRLite still calls good
SM-0092026-10-310revoked certificates CRLite still calls good
SM-0092026-11-010revoked certificates CRLite still calls good
SM-0092026-11-020revoked certificates CRLite still calls good
SM-0092026-11-030revoked certificates CRLite still calls good
SM-0092026-11-040revoked certificates CRLite still calls good
SM-0092026-11-050revoked certificates CRLite still calls good
SM-0092026-11-060revoked certificates CRLite still calls good
SM-0092026-11-070revoked certificates CRLite still calls good
SM-0092026-11-080revoked certificates CRLite still calls good
SM-0112026-10-0365of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0468of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0573of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0669of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0768of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0863of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-0958of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1058of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1159of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1265of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1361of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1475of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1553of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1645of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1745of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1841of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-1938of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2043of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2137of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2235of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2337of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2434of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2532of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2631of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2733of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-2928of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-3025of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-10-3124of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0122of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0223of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0326of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0429of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0524of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0627of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0725of the most visited sites we can reach, the number CRLite does not cover
SM-0112026-11-0818of the most visited sites we can reach, the number CRLite does not cover
SM-0122026-10-034audit statements past 92 days
SM-0122026-10-044audit statements past 92 days
SM-0122026-10-054audit statements past 92 days
SM-0122026-10-064audit statements past 92 days
SM-0122026-10-074audit statements past 92 days
SM-0122026-10-084audit statements past 92 days
SM-0122026-10-094audit statements past 92 days
SM-0122026-10-104audit statements past 92 days
SM-0122026-10-114audit statements past 92 days
SM-0122026-10-124audit statements past 92 days
SM-0122026-10-134audit statements past 92 days
SM-0122026-10-144audit statements past 92 days
SM-0122026-10-154audit statements past 92 days
SM-0122026-10-164audit statements past 92 days
SM-0122026-10-174audit statements past 92 days
SM-0122026-10-184audit statements past 92 days
SM-0122026-10-194audit statements past 92 days
SM-0122026-10-204audit statements past 92 days
SM-0122026-10-214audit statements past 92 days
SM-0122026-10-224audit statements past 92 days
SM-0122026-10-234audit statements past 92 days
SM-0122026-10-244audit statements past 92 days
SM-0122026-10-254audit statements past 92 days
SM-0122026-10-264audit statements past 92 days
SM-0122026-10-274audit statements past 92 days
SM-0122026-10-284audit statements past 92 days
SM-0122026-10-294audit statements past 92 days
SM-0122026-10-304audit statements past 92 days
SM-0122026-10-314audit statements past 92 days
SM-0122026-11-014audit statements past 92 days
SM-0122026-11-024audit statements past 92 days
SM-0122026-11-034audit statements past 92 days
SM-0122026-11-044audit statements past 92 days
SM-0122026-11-054audit statements past 92 days
SM-0122026-11-064audit statements past 92 days
SM-0122026-11-074audit statements past 92 days
SM-0122026-11-084audit statements past 92 days
SM-0132026-10-03183executive-branch .gov domains not signed
SM-0132026-10-05183executive-branch .gov domains not signed
SM-0132026-10-12180executive-branch .gov domains not signed
SM-0132026-10-19180executive-branch .gov domains not signed
SM-0132026-10-26183executive-branch .gov domains not signed
SM-0132026-11-02182executive-branch .gov domains not signed
SM-0142026-10-0323manifests that lapsed in the past seven days
SM-0142026-10-0421manifests that lapsed in the past seven days
SM-0142026-10-0535manifests that lapsed in the past seven days
SM-0142026-10-0625manifests that lapsed in the past seven days
SM-0142026-10-0711manifests that lapsed in the past seven days
SM-0142026-10-0819manifests that lapsed in the past seven days
SM-0142026-10-0914manifests that lapsed in the past seven days
SM-0142026-10-1014manifests that lapsed in the past seven days
SM-0142026-10-1118manifests that lapsed in the past seven days
SM-0142026-10-1220manifests that lapsed in the past seven days
SM-0142026-10-1319manifests that lapsed in the past seven days
SM-0142026-10-1422manifests that lapsed in the past seven days
SM-0142026-10-1515manifests that lapsed in the past seven days
SM-0142026-10-1616manifests that lapsed in the past seven days
SM-0142026-10-1738manifests that lapsed in the past seven days
SM-0142026-10-1852manifests that lapsed in the past seven days
SM-0142026-10-1951manifests that lapsed in the past seven days
SM-0142026-10-2023manifests that lapsed in the past seven days
SM-0142026-10-2119manifests that lapsed in the past seven days
SM-0142026-10-2213manifests that lapsed in the past seven days
SM-0142026-10-2315manifests that lapsed in the past seven days
SM-0142026-10-2416manifests that lapsed in the past seven days
SM-0142026-10-2527manifests that lapsed in the past seven days
SM-0142026-10-2614manifests that lapsed in the past seven days
SM-0142026-10-2717manifests that lapsed in the past seven days
SM-0142026-10-2819manifests that lapsed in the past seven days
SM-0142026-10-2917manifests that lapsed in the past seven days
SM-0142026-10-3021manifests that lapsed in the past seven days
SM-0142026-10-3124manifests that lapsed in the past seven days
SM-0142026-11-0121manifests that lapsed in the past seven days
SM-0142026-11-0222manifests that lapsed in the past seven days
SM-0142026-11-0323manifests that lapsed in the past seven days
SM-0142026-11-0421manifests that lapsed in the past seven days
SM-0142026-11-0520manifests that lapsed in the past seven days
SM-0142026-11-0621manifests that lapsed in the past seven days
SM-0142026-11-0720manifests that lapsed in the past seven days
SM-0142026-11-0820manifests that lapsed in the past seven days
SM-0152026-10-034log shards whose window is over a year
SM-0152026-10-044log shards whose window is over a year
SM-0152026-10-054log shards whose window is over a year
SM-0152026-10-064log shards whose window is over a year
SM-0152026-10-074log shards whose window is over a year
SM-0152026-10-084log shards whose window is over a year
SM-0152026-10-094log shards whose window is over a year
SM-0152026-10-104log shards whose window is over a year
SM-0152026-10-114log shards whose window is over a year
SM-0152026-10-124log shards whose window is over a year
SM-0152026-10-134log shards whose window is over a year
SM-0152026-10-144log shards whose window is over a year
SM-0152026-10-154log shards whose window is over a year
SM-0152026-10-164log shards whose window is over a year
SM-0152026-10-174log shards whose window is over a year
SM-0152026-10-184log shards whose window is over a year
SM-0152026-10-194log shards whose window is over a year
SM-0152026-10-204log shards whose window is over a year
SM-0152026-10-214log shards whose window is over a year
SM-0152026-10-224log shards whose window is over a year
SM-0152026-10-234log shards whose window is over a year
SM-0152026-10-244log shards whose window is over a year
SM-0152026-10-254log shards whose window is over a year
SM-0152026-10-264log shards whose window is over a year
SM-0152026-10-274log shards whose window is over a year
SM-0152026-10-284log shards whose window is over a year
SM-0152026-10-294log shards whose window is over a year
SM-0152026-10-304log shards whose window is over a year
SM-0152026-10-314log shards whose window is over a year
SM-0152026-11-014log shards whose window is over a year
SM-0152026-11-024log shards whose window is over a year
SM-0152026-11-034log shards whose window is over a year
SM-0152026-11-044log shards whose window is over a year
SM-0152026-11-054log shards whose window is over a year
SM-0152026-11-064log shards whose window is over a year
SM-0152026-11-074log shards whose window is over a year
SM-0152026-11-084log shards whose window is over a year
SM-0162026-10-03885forms filed after the deadline (newest year)
SM-0162026-11-01885forms filed after the deadline (newest year)
SM-0172026-10-1461stations that posted late, per quarter (from 2026 Q3, the paper's method)
SM-0182026-10-111,816records published after 72 hours
SM-0182026-11-012,093records published after 72 hours
SM-0232026-10-2026scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2128scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2227scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2331scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2431scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2531scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2631scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2732scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2832scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-2932scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-3033scored critical CVEs still open on Ubuntu Pro
SM-0232026-10-3134scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0134scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0234scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0435scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0535scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0635scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0739scored critical CVEs still open on Ubuntu Pro
SM-0232026-11-0839scored critical CVEs still open on Ubuntu Pro
SM-0242026-10-22150registered agents still overdue
SM-0242026-11-01147registered agents still overdue