================================================================
 DEMENTIA DATAHUB PUF DISCLOSURE AUDIT CERTIFICATE
================================================================
Date of audit:   2026-07-17 23:29:31 EDT
File audited:    P:/G278/Common/AIM 1 Data System/Simplified Suppression/Pooled/DDH_POOL_2020_2022_publishable.csv
SHA-256:         ddfc5727569d7a3233139ca12113304265f6103788039d1dde8343bd3eee422e

Publication scheme:
  Bottom code '<11' spans [0, 10] (zeros folded)
  11-14 -> 11; 15-99 -> nearest 10; 100-999 -> nearest 50;
  1,000-9,999 -> nearest 100; 10,000-99,999 -> nearest 500;
  100,000-999,999 -> nearest 1,000; >= 1,000,000 -> 4 significant digits.
  Tie convention: half-away-from-zero (REQUIRED for production)

Attacker model: iterated differencing over every additive relation
derivable from the published file (dimension margins as equalities,
state>=sum(counties) and cross-measure numerator<=denominator as
inequalities), propagated to a fixpoint. Reported candidate counts are
INTERVAL bounds under iterated differencing: every bound is achievable
by a real attacker and no derivation in this class is missed, but an
interval may overstate the true integer-feasible set. Near-threshold
cells are additionally checked for integer holes, so reported exact
pins are not an artifact of interval width.

Audit scope: the pooled 2020-2022 file was audited jointly with the
published 2020, 2021, and 2022 releases loaded as fixed constraints,
connected by cross-year sum relations modeled as equalities with
proportional drift slack calibrated against the delivered data (final
constants recorded in the construction log). Every declared relation
was verified against, or slackened to be consistent with, the
published data before entering the attacker model. All result
statistics below are scoped to the pooled release, the subject of
this certificate.

Cells audited (joint system):        32173470
Sum relations / pairwise bounds:     47191006 / 29907758
Propagation iterations to fixpoint:  18

Pooled-release results:
  Cells exactly resolvable to a value in 1..10:   0
  Feasible sets within 1..10 of size < 3:         0
  Repair actions this release: 1307 interval recodes ('<X'), 87 suppressions.
  Repair operated on pooled cells only; no published release was
  altered. Interval-code ladder capped at '<1000'; wider protection
  is suppression.

Criterion applied: no protected cell in the pooled release may have a
feasible set that is a subset of [1,10] with fewer than 3 candidate
values. Feasible sets containing 0 preserve existence-deniability and
are never prohibited identifications.
Release standard: in addition, publication of the pooled file must
add no information to the published record -- no protected cell in
any release may resolve to fewer candidate values under the joint
system than the already-published releases alone permit. Both
conditions hold.

RESULT: PASS

Notes:
Pooled 2020-2022 release. Published subset: ages 65 and older;
dementia determination any, 3, and 4. Certificate issued against a
closed-loop re-audit of the written file, with integer-feasibility
refinement of all decision-relevant cells. Certificate presentation
revised 2026-07-19; audit of record 2026-07-17, results unchanged.
================================================================
