Evidence limitation
Uptime is not lawful institutional operation
Direct limitation
They do not establish correct behavior, current authority, accurate decisions, complete dependencies or lawful institutional action.
Artifact or claim that may be supported
Reachability and uptime can show that a service responded during an observed window.
What the evidence does not establish
They do not establish correct behavior, current authority, accurate decisions, complete dependencies or lawful institutional action.
Additional evidence required
A public status page can create false confidence when treated as the whole operational-evidence record.
Mitigation
Combine reachability with release identity, key status, state transitions, signed actions, incidents and independent verification.
Supporting sources
- NIST SP 800-53 Rev. 5, Release 5.2.0 Security and Privacy Controls — NIST; SP 800-53 Rev. 5, Release 5.2.0; Final control catalog with 2025 minor release. Exact claim-support entries: 2. Revalidated 2026-08-14T22:04:09Z.