The CAMM Framework
Source: chandrahub.net/docs/standards.html (uploaded copy, 2026-08-24). This is a genuinely thin chapter — one paragraph of source material exists, no whitepaper has been reviewed yet despite one being referenced. Placement note: this chapter is appended at the end of the manual (Part III) purely for build-order convenience — conceptually it belongs alongside Chapter 5 (CRC) and Chapter 11 (GABA) in Part I, as a third standard in the same family. A future revision should renumber it into Part I rather than leaving it stranded here; this placement is provisional, not a statement that it belongs in Administration.
CAMM — the Chandra Audit Maturity Model — is a third standard alongside CRC (Chapter 5) and GABA (Chapter 11), distinct in what it measures: where CRC scores a deployment's architectural posture (0–16 across four pillars) and GABA attests AI inference/computer-use boundaries specifically, CAMM scores an organization's maturity in adopting Chandra as its audit infrastructure — a different axis entirely, closer to a capability-maturity model than a deployment scorecard.
CAMM defines five maturity levels, described as running "from basic CU production through full forest federation with cross-instance trust." That's the entire confirmed description available as of this chapter's drafting — the specific criteria for each of the five levels, how an organization is assessed or certified against them, and who administers that assessment are all undocumented in what's been reviewed so far.
A whitepaper is referenced (linked from chandrahub.net's Standards page) but has not itself been fetched or reviewed for this manual. This chapter should be substantially rewritten once that whitepaper exists to draw from directly — right now it states that CAMM exists and roughly what it measures, nothing more.
Speculative, not confirmed: "full forest federation with cross-instance trust" as the top maturity level almost certainly ties to Chapter 10's chandrahub/forest concept and the "Cross-Forest Trust Protocol" listed as forthcoming on the same Standards page — and possibly to Tickler (Chapter 1's fifth primitive), which is itself described as "the federation primitive." If that connection holds, CAMM's top level may specifically be measuring an organization's use of Tickler-based cross-forest mechanisms rather than federation in some more general sense — but this is inference stacked on inference from thin source, not something to state as fact anywhere else in this manual until real source confirms it either way.
The actual Level 1–5 criteria; who assesses/certifies against CAMM (self-assessment, examiner-administered, General Reasoning-administered); whether a CAMM level is a prerequisite or complement to CRC certification (Chapter 5) or GABA attestation (Chapter 11); and the whitepaper itself, reviewed directly rather than summarized from a one-paragraph blurb.