# Nuqasm SP 800-53 AU Control Mapping (Summary)

Open summary of Nuqasm execution provenance capabilities mapped to NIST SP 800-53 Rev. 5 Audit and Accountability controls. Full evidence artifacts, control narratives, and auditor handoff documentation are in the procurement packet.

| Control | Nuqasm capability |
|---------|-------------------|
| AU-2 | Event types defined per workload class; configurable audit event selection |
| AU-3 | Record includes submitter, timestamp, environment, backend, calibration, outcome |
| AU-8 | NTP-synchronized timestamps; monotonic chain ordering |
| AU-9 | Append-only ledger; cryptographic chain; no overwrite operations |
| AU-10 | ML-DSA-87/65 signatures bind submitter identity; offline verification |
| AU-11 | Configurable retention: 1 yr / 3 yr / 7 yr+ immutable storage |
| AU-12 | Automatic capture at seal, route, execute, attest stages |

**Full schema:** [audit-record-schema.json](./audit-record-schema.json)

**Procurement packet:** Request at [nuqasm.com](https://www.nuqasm.com/#access) — delivered instantly by email, no sales call.