Recognises log retention shorter than required
Logs kept less than the requirement in scope.
Can AI do this?
Not settled yet The benchmark tested this, but the models' answers do not settle yet whether they master it. 0 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 64% | Not shown |
| gemini-3.5-flash-lite | Low cost | 65% | Not shown |
| gpt-6-luna | Low cost | 62% | Not shown |
| claude-haiku-5-5 | Low cost | 65% | Not shown |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: The log and the retention the requirement sets
How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: LS-002 cardholder data access log kept 90 days Acceptable: 12 months, 3 immediately available (PCI DSS 10.5.1)
Also known as: Retention shorter than required
Related knobits
Builds on
All 16 knobits of Monitor and audit access.
Source: Review checklist 05-monitoring-audit, row 4 (PCI 10.5.1)