Sample PDF Audit Reports
These are real PDF audit reports generated by the NeoXFortress Agent Accountability Engine (AAE) from the four demo receipts in this repository.
Each PDF is a CMMC-ready audit artifact that a C3PAO assessor or compliance officer can review to understand what an AI agent did, what data it touched, and whether it operated within policy.
Downloads
| Scenario | Verdict | Download |
|---|---|---|
| RFP Intelligence Agent — happy path, CUI detected and contained, human approved | ✅ COMPLIANT | sample-01-compliant-rfp-summarization.pdf |
| Contract Drafting Agent — ITAR/CUI exfiltration to external Slack blocked | ❌ NON-COMPLIANT | sample-02-non-compliant-cui-blocked.pdf |
| DFARS Compliance Advisor — human reviewer rejected hallucinated output | ⚠️ REVIEW REQUIRED | sample-03-review-required-human-rejected.pdf |
| Vendor Onboarding Agent — receipt revoked due to key compromise | 🔒 REVOKED | sample-04-revoked-receipt.pdf |
What's in Each Report
Every report contains 9 sections:
- Receipt Identification — receipt ID, agent, operator, org, verdict badge
- Executive Summary — plain-English summary for non-technical reviewers
- Compliance Verdict — framework, active controls, violated controls, risk score
- Execution Timeline — step-by-step table: type, description, status, duration
- CUI Flow & Data Protection — classification, handling action, boundary crossings
- Human Oversight Record — reviewer ID, decision, notes, timestamp
- Integrity Verification — hash chain status, HMAC signature, independent verification instructions
- Policy Snapshot — policy ID/version active at time of execution
- Agent Provenance — deployment fingerprint, operator, execution timestamps
Independent Verification
Any party can verify the underlying receipt independently:
pip install neox-verify
neox verify examples/demo-receipt.json
The PDF is derived from the receipt JSON. The receipt is the authoritative artifact.
PDF reports are generated by the NeoXFortress Agent Accountability Engine (AAE) — enterprise, self-hosted, CMMC-grade.
Contact neoxfortress.com/contact for licensing.