Project — Pakistan AI Policy Observatory — September 2026

Pakistan’s AI policy is becoming infrastructure. Almost none of it can be shown to run.

Fifteen days of verified record produced 52 entries. 6 are published rules. 6 claim something is operating — and not one of those 6 carries high confidence.

This is a source-bounded reading of what Pakistan’s state actually did on AI, data and digital infrastructure between 18 Aug and 3 Sep 2026. Every record is placed on the rung its own stated status puts it on, scored for evidence quality, and shown next to the source that supports it. Where the evidence stops, the record stops.

Observed period — 18 Aug–3 Sep 2026 UTC Search cutoff — 03 Sep 2026 · 04:15 UTC Status — source-bounded, not a census

The short version

Of 52 verified records, only 6 are published, operative instruments. 18 are still announcements, drafts or meetings.
11 procurements are in flight. No award was verified inside the window.
Every one of the 6 records claiming something is running is Medium confidence. Every one of the 6 published rules is High.
Monitoring coverage was 0.98% of the observed span — 14 briefing units against 1,440 nominal intervals.
Absence is not evidence: a consequential 1 September cyber MoU was missed by the corpus entirely and recovered only by verification search.

For students Read · test · reuse

A field guide to the observatory

Use this as an evidence observatory, not a news feed. No code is required: begin with one claim, follow it to the underlying source, and move into the repository only when you need the data, method or citation record.

01 · Use the report

Move from the argument to the evidence.

Read the lifecycle ladder, then search or filter the evidence ledger. Expand an evidence dossier to compare verified facts, source claims, confidence and unresolved issues, then follow its source IDs into the source register.

02 · Navigate GitHub

Each folder has a different job.

Start at the GitHub repository and its README. intermediate/ holds the reviewed data, tools/ holds reproducible builders and checks, and outputs/ holds reader-ready artifacts. The reproducibility note explains the refresh sequence.

03 · Access the data

Choose the file that matches the question.

Use the canonical JSON model for nested, machine-readable records; the evidence CSV for event-level analysis; the source CSV for provenance; and the briefing plus coverage tables for missingness. The watchlist records what to verify next, while the XLSX workbook is the navigable audit layer.

04 · License and cite

Reuse the work without erasing its boundaries.

The CC BY 4.0 license applies to original report and observatory content and the derived dataset structure; original code in tools/ uses the MIT license. Linked source pages, documents and trademarks remain under their upstream terms. Use CITATION.cff for pre-release citation metadata, and do not describe it as a frozen public release until one is approved.

What actually moved

Not a feed of announcements — the lifecycle changes that survived verification.

Binding change

Virtual-asset rules crossed into force.

PVARA notified concrete cyber, cloud, algorithm, record-retention and incident-reporting duties on 21 August.

Process change

Investor onboarding acquired deadlines.

SECP Circular 19/2026 is final, though its commencement still requires clarification.

Evidence split

Google’s presence is real and still unresolved.

A ceremony and corporate language are verified. A staffed office, local hosting and premises details are not.

Upstream capacity

Most of it sits before commissioning.

Tenders, evaluations and plans dominate. Sky47’s July inauguration is a physical baseline, not proof of usable AI capacity.

Missingness

The corpus missed a consequential cyber MoU.

The 1 September Saudi–Pakistan agreement shows why an absent briefing cannot mean an absent event.

II.

How far anything got

Every record sits somewhere between an intention and a working system. Placing all 52 on the same ladder makes the shape of the period visible at once: the field is wide at the bottom and thin at the top, and the evidence thins in the opposite direction to the claims.

Fig. 01Each point is one record, placed by the rung its own stated status describes. Filled points are high confidence, hollow medium, dashed low. The copper marker flags the one rung with no high-confidence record on it.

The inversion

The 6 published rules are all high confidence: a notified regulation is a document you can open. The 6 records claiming a facility or system is running are all medium: an inauguration, a launch claim or an authority’s own report of operation is not premises-level, load-level or assurance-level evidence. The strongest claims rest on the weakest record.

This is not an accusation of overstatement. It is a measurement problem. Rules publish themselves; operation does not. Until utilisation, accepted load, staffing or independent assurance is disclosed, the top rung stays medium no matter how many ribbons are cut.

III.

The window we could see

The evidence base is extensive; the monitoring cadence is not. Both facts have to travel together, because the second one bounds every claim the first one can support.

Fig. 02Dated records per day across the observed window (17 calendar days), using the same confidence marks as Fig. 01. The lower rule carries the 14 briefing windows in real time — the monitoring, not the events. Copper ticks mark days on which the record shows nothing: 22 Aug, 23 Aug, 26 Aug, 3 Sep. A further 15 records are carry-in baselines or carry no single resolvable date.

IV.

Where the state is concentrating

Counts include events and baselines. Activity is not equivalent to implementation — a domain can be busy and deliver nothing. Select a domain to carry it into the ledger below.

The evidence ledger

All 52 records, unflattened. Each carries its stated status, its rung, its confidence and the sources behind it.

Search records Filter by type Filter by confidence

52 of 52 records shown

2026-08-18 — Google; Government of Pakistan

Google Pakistan office inauguration claim

government/company-reported inauguration; physical operation unverified

The reporting period added a high-level ceremony and public local-office claim, but later checks did not supply premises-level evidence.

Evidence dossier

Verified facts: A plaque-marking ceremony involving the prime minister and a Google delegation occurred at Prime Minister House on 18 August. Google’s current canonical office, Cloud-region and owned-data-centre directories showed no Pakistan listing at the verification cutoff.
Source claim: Pakistani authorities and contemporaneous reporting called the event the opening or establishment of Google’s first local office.
Why it matters: The distinction affects how investors, regulators and users should understand local accountability, staffing, tax presence, and data-hosting implications.
Analysis: Evidence supports an announced/local corporate presence, not a confidently verified staffed operational office at a disclosed physical location.
What to verify next: Verify street address, premises operator, occupancy, employing entity, staff, mandate and any local processing/hosting before upgrading status.
Unresolved: Physical address; office type; occupancy; headcount; employing entity; mandate; investment; data processing; hosting jurisdiction.
Confidence basis: High confidence in the ceremony and directory state; insufficient evidence for physical operation, location and timing of an operating office.

EvidenceS074 S075 S081 S082 S083 S076 S084

EVT-GOOG-20260818-OFFICE · GOOGLE CORPORATE PRESENCE · IN SPAN DEVELOPMENT

Medium Reported running Event

2026-08-21 — Google; MoITT; Government of Pakistan

Government of Pakistan–Google framework MoU and programme announcements

signed/announced framework MoU; delivery not evidenced

A cooperation framework and numeric training target entered the record; no budget release, beneficiary completion, centre opening or system acceptance was found.

Evidence dossier

Verified facts: PID records a framework MoU dated 21 August and programme targets including 150,000 Career Certificates in 2026 and exploration of one-year student access to Google AI Plus/Gemini and NotebookLM, an Islamabad AI centre, and FBR support.
Source claim: Government releases report earlier programme outputs and prospective skills, education, SME, agriculture, payments, app and gaming initiatives.
Why it matters: The package could shape workforce supply and public-sector vendor relationships, but implementation terms determine actual value and data-governance exposure.
Analysis: This is a programme-intent milestone, not realized investment or delivered capacity.
What to verify next: Seek the signed instrument, workplan, budgets, selection rules, data flows, hosting terms and output audits.
Unresolved: Signed text; budget; beneficiary selection; centre site/operator/timeline; data flows; local hosting; independent outcome audit.
Confidence basis: Strong official evidence of the announcement; primary instrument and delivery evidence unavailable.

EvidenceS077 S078 S079

EVT-GOOG-20260821-MOU · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

Medium Committed Event

2026-08-21 — Pakistan Virtual Assets Regulatory Authority

PVARA virtual-asset service regulations notified

notified and effective regulations

The framework moved from enabling legislation/guidance to two operative sector regulations.

Evidence dossier

Verified facts: S.R.O. 1419(I)/2026 and S.R.O. 1420(I)/2026 were notified on 21 August and SRO 1419 states commencement on Gazette notification unless a later date is specified. Verified duties include technology/cyber controls, cloud and cross-border safeguards, incident reporting and personal-data programmes. General and activity-specific records are retained at least seven years; material cyber/BCDR notice is due within 24 hours, an interim update within five working days, final report within 30 calendar days, and personal-data incident notice within 72 hours.
Source claim: The summary page states a minimum ten-year record-keeping rule, but the operative regulations use seven years generally; ten years applies in a narrower unclaimed-wallet/assets context.
Why it matters: VASPs now face concrete licensing, governance, cloud, cyber, algorithm and personal-data obligations with reportable deadlines.
Analysis: This was the clearest binding digital-regulatory development in the supplied monitoring span.
What to verify next: Track transitional applications, licensing decisions, supervisory guidance, enforcement and cloud/cross-border implementation.
Unresolved: First licences/NOCs; enforcement; treatment of specific cloud architectures; publication of reasoned decisions.
Confidence basis: Operative Gazette texts were opened and checked directly.

EvidenceS018 S019 S020 S017 S021

EVT-REG-20260821-PVARA · DATA PROTECTION GOVERNANCE · IN SPAN DEVELOPMENT

High Published rule Event

2026-08-24 (identifier and PDF metadata) — PKCERT

PKCERT publishes Advisory 16 on synchronized passkeys

published advisory

It superseded the corpus’s prior observation that Advisory 15 topped the register.

Evidence dossier

Verified facts: The live register lists Advisory 16, NCA-16.240826, concerning malware targeting synchronized passkeys on compromised Windows systems.
Why it matters: It is an operational cyber-risk publication, not a new law or incident disclosure.
Analysis: Useful threat guidance, but no evidence of a Pakistan-specific breach or mandated remediation was located.
What to verify next: Track agency adoption and any incident reporting.
Unresolved: Exact publication timestamp; implementation by covered entities.
Confidence basis: Official PDF and register; date is metadata-supported but exact release time is unavailable.

EvidenceS022 S023

EVT-CYB-20260824-PKCERT16 · CYBERSECURITY · IN SPAN DEVELOPMENT

High Published rule Event

2026-08-24 (identifier and PDF metadata) — PKCERT

PKCERT publishes Advisory 17 on an Acrobat extension exposure

published advisory

The advisory became the top visible 2026 listing by the B006 cutoff.

Evidence dossier

Verified facts: The live register lists Advisory 17, NCA-17.240826, on an Adobe Acrobat Chrome extension vulnerability exposing WhatsApp Web sessions.
Why it matters: The notice expands official threat guidance relevant to organizational browsers and messaging sessions.
Analysis: It should not be treated as evidence of a Pakistan-specific compromise.
What to verify next: Monitor follow-on directives or incident notices.
Unresolved: Exact publication timestamp; affected-estate evidence; implementation uptake.
Confidence basis: Official PDF and register; exact release time is unavailable.

EvidenceS022 S024

EVT-CYB-20260824-PKCERT17 · CYBERSECURITY · IN SPAN DEVELOPMENT

High Published rule Event

2026-08-28 — Parliament; MoITT

Pakistan Telecommunication amendment bill withdrawn

withdrawn; replacement announced but not introduced

The pending bill ceased to advance; the replacement remained executive intent at cutoff.

Evidence dossier

Verified facts: The Senate register records the bill withdrawn in the House on 28 August. MoITT said it intended a fresh bill retaining the proposal’s essence.
Why it matters: No operative telecom-law change arose from the withdrawn text, reducing immediate compliance impact but preserving policy uncertainty.
Analysis: Treat future legislation as a new event requiring a new text and parliamentary lifecycle.
What to verify next: Watch for introduction, referral, amendments, passage, assent, Gazette and commencement.
Unresolved: Successor text, title, introduction date and operative provisions.
Confidence basis: Official executive and parliamentary records align on withdrawal.

EvidenceS025 S026

EVT-TEL-20260828-AMENDMENT-WITHDRAWN · PLATFORM TELECOM · IN SPAN DEVELOPMENT

High Signalled Event

2026-08-21 (reported) — Khyber Pakhtunkhwa Assembly

KP Digital Payments Bill passage claim conflicts with official tracker

officially referred to committee; reported passage unverified

A reported passage claim appeared, but authoritative disposition did not confirm it.

Evidence dossier

Verified facts: The official tracker currently shows the bill introduced on 6 April 2026 and referred to Standing Committee No. 10.
Source claim: A news headline says the Assembly approved the bill on 21 August, while the article body also describes it as introduced.
Why it matters: Misclassifying the bill as enacted would falsely create payment obligations and a rulemaking clock.
Analysis: No Act, assent, Gazette or commencement is verified.
What to verify next: Recheck committee report, passed-bills register, assent and Gazette.
Unresolved: Authoritative 21 August proceedings; final text; vote; assent; Gazette; commencement; rulemaking.
Confidence basis: High on current official status; low on reported passage.

EvidenceS027 S028

EVT-KP-20260821-DIGITAL-PAYMENTS · DIGITAL IDENTITY DPI · CONTRADICTED OR UNRESOLVED

High Committed Event

2026-08-27 — KP Assembly Standing Committee

KP committee recommends digital-workplace harassment amendments

committee recommendation; not enacted

The proposal advanced at committee level only.

Evidence dossier

Verified facts: A provincial committee considered and recommended amendments extending workplace-protection concepts to digital, virtual and remote environments and electronic evidence.
Why it matters: It signals recognition of digitally mediated workplace harms but does not yet alter legal duties.
Analysis: Evidence, privacy, jurisdiction and platform-process rules remain central design questions.
What to verify next: Track bill text, Assembly vote, assent, Gazette and rules.
Unresolved: Amendment text; evidentiary safeguards; vote; assent; commencement.
Confidence basis: Official provincial release is clear about committee stage.

EvidenceS029

EVT-KP-20260827-VIRTUAL-WORKPLACE · DATA PROTECTION GOVERNANCE · IN SPAN DEVELOPMENT

High Committed Event

issued 2026-08-25; posted 2026-08-27 — Securities and Exchange Commission of Pakistan

SECP Circular No. 19 of 2026 on investor onboarding

final issued circular; commencement date unstated; three-month transition

A final onboarding framework replaced the 2023 circular and introduced measurable processing deadlines and transition requirements.

Evidence dossier

Verified facts: Circular 19/2026 was issued on 25 August and posted on the official register on 27 August. It repeals Circular 6/2023 while preserving prior actions. For complete individual-customer documents, the maximum accept/decline period is one working day for Sehl/Sahulat accounts and two working days for Normal Accounts; deficiencies must be communicated within the same period and rejection reasons supplied in writing. Firms have three months to align forms and establish portal connectivity, subject to extension.
Source claim: Government reporting linked the reform to a 2.5 million investor-base objective; that is policy context, not an intermediary obligation.
Why it matters: The circular converts a general digitisation agenda into binding process obligations for specified securities and financial-market intermediaries.
Analysis: Do not infer an effective date, extend the individual-account turnaround to juridical applicants, or treat issuance as proof of intermediary compliance.
What to verify next: Track clarification of the immediate-connectivity language, the transition end point, extensions, portal readiness, rejection data and supervisory compliance.
Unresolved: Express effective date; juridical-person turnaround; reconciliation of immediate connectivity with the transition; extensions; operational compliance.
Confidence basis: Official register and eight-page circular were inspected directly; dates and provisions were cross-checked against two reputable reports.

EvidenceS101 S102 S103 S104

EVT-SECP-20260827-C19 · DATA PROTECTION GOVERNANCE · IN SPAN DEVELOPMENT

High Published rule Event

2026-09-01 — Punjab Assembly

Punjab Assembly reportedly passes under-16 social-media resolution

reported non-binding resolution; official text unavailable

A provincial political recommendation entered the debate; no enacted platform duty followed.

Evidence dossier

Verified facts: A news report says the Assembly adopted a resolution urging restrictions and age verification for under-16 accounts.
Why it matters: Age assurance could affect biometric processing, exclusion, appeals and federal-provincial competence.
Analysis: The resolution is agenda-setting, not legislation or a PTA rule.
What to verify next: Obtain the official resolution and track any bill, PTA instrument or implementation design.
Unresolved: Official text; legal route; verification method; retention; redress; federal authority.
Confidence basis: One credible report; no official resolution text located.

EvidenceS032

EVT-PLAT-20260901-PUNJAB-U16 · PLATFORM TELECOM · IN SPAN DEVELOPMENT

Low Signalled Event

2026-08-31 — Islamabad High Court

IHC seeks replies in under-16 age-verification petition

procedural notice/reply stage; no final judgment

The petition moved into a response stage, not final adjudication.

Evidence dossier

Verified facts: Two news reports describe notices and a request for replies within 15 days in a petition concerning age verification.
Why it matters: A future order could shape platform age assurance, regulator duties and privacy safeguards.
Analysis: No substantive rule or obligation should be inferred from notice issuance.
What to verify next: Retrieve the authenticated order, respondent filings and later disposition.
Unresolved: Authenticated order; petition text; respondents; filings; final disposition.
Confidence basis: Two reputable reports align; court order itself was not located.

EvidenceS033 S034

EVT-PLAT-20260831-IHC-U16 · PLATFORM TELECOM · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-09-01 — NADRA; Federal Board of Intermediate and Secondary Education

NADRA–FBISE student identity and certificate integration agreement

agreement signed; deployment not evidenced

The agencies formalized an integration intention; no production milestone or data-protection instrument was published.

Evidence dossier

Verified facts: APP reports an agreement for mutual exchange of name, father’s name and date of birth, with a planned secure digital wallet for certificates.
Why it matters: The project involves student/child data, identity matching and credential recovery, making legal basis and safeguards consequential.
Analysis: A signed agreement is not proof that a secure wallet or live data exchange is operating.
What to verify next: Seek agreement text, data-flow diagrams, access controls, retention, correction, breach response, audits and launch acceptance.
Unresolved: Agreement text; legal basis; production status; minimisation; access/logging; retention; child safeguards; redress.
Confidence basis: Official news-agency report; underlying instrument and system evidence unavailable.

EvidenceS035

EVT-ID-20260901-NADRA-FBISE · DIGITAL IDENTITY DPI · IN SPAN DEVELOPMENT

Medium Committed Event

2026-08-18 to 2026-08-31 — MoITT — Digital Emerging Technologies Wing

National AI Hubs procurement advertised and closed

closed for bids; pre-evaluation/pre-award

The procurement moved from open to closed, but not to evaluated, awarded, contracted or delivered.

Evidence dossier

Verified facts: The consultancy tender was advertised 18 August and the current record shows closing at 14:00 PKT and opening at 14:30 on 31 August, single-stage two-envelope, PKR 3 million bid security and 180-day validity. No evaluation or award was visible.
Source claim: The tender history retains an inconsistent 19 August closing entry.
Why it matters: The tender is a potential delivery vehicle for the National AI Policy, but no hub, site, budget expenditure or service exists merely because bidding closed.
Analysis: Procurement momentum remains upstream of implementation.
What to verify next: Track opening record, bidders, technical evaluation, grievance, award, contract, sites, equipment and acceptance.
Unresolved: Bidder/opening record; evaluation; award; contract; locations; equipment; safeguards; acceptance.
Confidence basis: Official procurement records; internal history conflict preserved.

EvidenceS036 S037

EVT-PROC-20260818-31-AI-HUBS · PROCUREMENT PROGRAM DELIVERY · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-19 — MoITT

MoITT AI capacity-building procurement reaches final evaluation

final evaluation; not awarded

Bid comparison reached final-evaluation stage.

Evidence dossier

Verified facts: The procurement targets 20,000 online trainings; the evaluation listed 17 bids and NCBMS as lowest.
Why it matters: Potential workforce scale is material, but bidder ranking is not delivered training.
Analysis: Outcome claims should wait for award, contract, enrolment, completion and assessment evidence.
What to verify next: Track award, contract value, curriculum, enrolment, completions and independent learning outcomes.
Unresolved: Award; contract; value; provider obligations; delivery; completion and outcome evidence.
Confidence basis: Official procurement record; stage distinction is clear.

EvidenceS038 S039

EVT-PROC-20260819-MOITT-TRAINING · WORKFORCE RESEARCH EDUCATION · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-21 and 2026-08-28 — NAVTTC

NAVTTC AI-enabled services procurement advances from technical to final evaluation

final evaluation; not awarded

This was a genuine procurement-stage update, not duplicate coverage.

Evidence dossier

Verified facts: A technical evaluation on 21 August covered six bids; a final evaluation dated 28 August listed Mercurial Minds as lowest evaluated bidder.
Why it matters: It narrows the likely supplier but does not establish contract execution or an operational AI-enabled service.
Analysis: Procurement registers should be read as a lifecycle, not as binary project completion.
What to verify next: Track award, contract, scope, data safeguards, deployment, tests and acceptance.
Unresolved: Award; price; signed contract; implementation scope; data governance; acceptance.
Confidence basis: Official evaluation records at two stages.

EvidenceS040 S041 S042

EVT-PROC-20260821-28-NAVTTC-AI-SERVICES · PROCUREMENT PROGRAM DELIVERY · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-27 — Pakistan Telecommunication Authority

PTA AI-powered DIRBS tender closes

closed tender; no evaluation or award

Bidding closed; system design, vendor selection and deployment remain unverified.

Evidence dossier

Verified facts: The consultancy tender advertised 10 August closed at 11:00 PKT on 27 August under a single-stage one-envelope procedure with 120-day validity. No result was visible.
Source claim: Annual-plan and tender metadata do not fully align.
Why it matters: AI use in device-registration enforcement could affect lawful device access, false positives and procedural rights.
Analysis: Governance questions are material before procurement reaches operation.
What to verify next: Demand legal basis, data inputs, testing, accuracy thresholds, human review, auditability, retention and appeals.
Unresolved: Metadata reconciliation; evaluation; award; architecture; accuracy; human review; retention; redress.
Confidence basis: Official tender record for closure; technical and safeguards evidence absent.

EvidenceS043 S044

EVT-PROC-20260827-PTA-DIRBS · AI GOVERNANCE · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-20 — NADRA

NADRA NDW racks, containment and PDU tender closes

closed tender; pre-evaluation

Bidding closed without a visible downstream result.

Evidence dossier

Verified facts: The tender for NDW racks, containment systems and rack PDUs closed 20 August at 11:00 PKT with PKR 580,000 bid security and 120-day validity.
Why it matters: The procurement is enabling physical infrastructure, not proof of expanded compute capacity or service resilience.
Analysis: Capacity should be counted only after delivery, testing and acceptance.
What to verify next: Track evaluation, award, installation, commissioning and acceptance.
Unresolved: Evaluation; award; value; delivery; commissioning; accepted capacity.
Confidence basis: Official procurement record.

EvidenceS045

EVT-PROC-20260820-NADRA-RACKS · COMPUTE CLOUD DATACENTRE · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-20 — NADRA

NADRA branch-switch and management-licence tender closes

closed tender; pre-evaluation

Bidding closed without a visible evaluation or award.

Evidence dossier

Verified facts: The tender covered 237 Layer-2 switches, 30 PoE switches and 267 central-management licences; it closed 20 August at 11:00 PKT with PKR 600,000 bid security and 120-day validity.
Why it matters: It may improve branch-network manageability but is not AI compute or proven operational resilience.
Analysis: Keep networking inputs distinct from compute capacity.
What to verify next: Track evaluation, award, rollout, security configuration and acceptance.
Unresolved: Evaluation; award; delivery; deployment; security acceptance.
Confidence basis: Official procurement record.

EvidenceS046

EVT-PROC-20260820-NADRA-SWITCHES · CONNECTIVITY ENERGY RESILIENCE · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-27 pre-bid meeting; deadline extended to 2026-09-06 — World Health Organization Pakistan

WHO GIS-enabled EPI microplanning and NEIR integration RFP updated

open RFP; deadline extended; pre-award

The mutable record and schedule were revised; no award or implementation occurred in the period.

Evidence dossier

Verified facts: B006 captured the notice on 24 August and transcribed its publication field as 24 August; the current mutable UNGM page instead displays publication on 28 August. The current page also records a 27 August 14:00 PKT pre-bid meeting and an extended deadline of 6 September 2026 at 11:00 PKT for GIS-enabled EPI microplanning and NEIR integration.
Source claim: The observed publication date conflicts: 24 August in B006 versus 28 August on the current page. The page also retains superseded 24 and 31 August deadlines in its update history.
Why it matters: The procurement involves geospatial and immunisation data, requiring careful access, retention, hosting and public-health governance.
Analysis: It is a live procurement signal, not a deployed health-data system.
What to verify next: Track award, architecture, security, hosting, role-based access, retention and ethics controls.
Unresolved: Award; contract; data controller/processor roles; hosting; access; retention; ethics; production acceptance.
Confidence basis: Current international procurement record opened directly; version history preserved.

EvidenceS047

EVT-PROC-20260828-WHO-BALOCHISTAN-GIS · PROCUREMENT PROGRAM DELIVERY · IN SPAN DEVELOPMENT

High In procurement Event

2026-08-27 — Jazz

Jazz reports reaching 1,000 live 5G sites

company-reported operational footprint

The operator announced a footprint milestone during the reporting period.

Evidence dossier

Verified facts: Jazz publicly reported 1,000 live 5G sites across ten cities, a target of 2,500 by end-2026, 190 MHz of spectrum and a prior US$1 billion commitment.
Source claim: Operational-site and investment figures are company claims.
Why it matters: 5G reach influences edge connectivity and enterprise/cloud adoption, but site count does not establish coverage quality, affordability or realized capex.
Analysis: Treat the milestone as direct-company evidence pending independent coverage/QoS validation.
What to verify next: Verify coverage maps, independent QoS, spectrum deployment and realized investment.
Unresolved: Site definitions; geographic coverage; QoS; user access; realized capex.
Confidence basis: Direct company release; independent validation absent.

EvidenceS048 S049

EVT-TEL-20260827-JAZZ-5G · PLATFORM TELECOM · IN SPAN DEVELOPMENT

Medium Reported running Event

2026-08-21 — Frequency Allocation Board; Rohde & Schwarz

FAB signs spectrum-monitoring equipment contract

signed contract; commissioning unverified

The procurement reached signed-contract stage.

Evidence dossier

Verified facts: The contract record lists Rohde & Schwarz, PKR 196,308,167, two bids, three digital RF receivers, four sensor systems, training, one-year warranty and ten-year support; signed 21 August and published 25 August.
Why it matters: It can strengthen spectrum oversight relevant to 5G reliability, but equipment is not operational until installed and accepted.
Analysis: This is stronger than an evaluation but weaker than commissioned capability.
What to verify next: Track delivery, installation, training, commissioning, acceptance and utilisation.
Unresolved: Delivery; installation sites; commissioning; acceptance; operational use.
Confidence basis: Official contract record with vendor, value and scope.

EvidenceS050

EVT-TEL-20260821-25-FAB-MONITORING · CONNECTIVITY ENERGY RESILIENCE · IN SPAN DEVELOPMENT

High Committed Event

2026-08-21 — Ministry of Commerce; PDA; Sky47

Commerce Ministry explores sovereign cloud and AI trade infrastructure with PDA and Sky47

exploratory meeting / technical consultation

A government-use discussion occurred; no contract, migration or activation was reported.

Evidence dossier

Verified facts: The minister held separate meetings with PDA and Sky47 on data exchange, sovereign cloud, cybersecurity, disaster recovery, AI-enabled trade analysis and procurement reform; teams were directed to continue technical consultations and develop proposals.
Source claim: Sky47 briefed the minister on existing infrastructure and expansion plans.
Why it matters: The discussion identifies possible public-sector demand and governance questions around authorized data, procurement and domestic hosting.
Analysis: The 8.5 MW Karakoram-01 capacity belongs to a July baseline, not this meeting.
What to verify next: Track approved architecture, procurement, data classification, cloud contracts, migration and acceptance.
Unresolved: Proposal; contract; workloads; hosting; data-sharing controls; budget; acceptance.
Confidence basis: Official release directly supports the meeting and forward-looking status.

EvidenceS051

EVT-INF-20260821-SKY47-COMMERCE · COMPUTE CLOUD DATACENTRE · IN SPAN DEVELOPMENT

High Signalled Event

signing date and place unstated; first-party announcement 2026-08-27 — Resecurity; Sky47

Resecurity–Sky47 cybersecurity cooperation MoU announced

signed exploratory MoU; no deployment or service contract

A prospective cooperation framework was signed and announced; no customer, value, duration, workload, capacity or delivery date was disclosed.

Evidence dossier

Verified facts: Sky47 announced the signing of an MoU with Resecurity and said the parties will explore cooperation. The first-party announcement was posted on 27 August at approximately 13:58 PKT; neither it nor later reports states the physical signing date or place.
Source claim: A Resecurity-supplied Dawn advertorial says the parties intend to explore secure deployment models for threat intelligence, fraud prevention, digital-risk monitoring, identity protection, AI-powered cybersecurity workloads and GPU-enabled infrastructure.
Why it matters: It indicates private demand for data residency and in-country hosting but does not quantify realized capacity.
Analysis: Treat the MoU as a verified relationship milestone, not as service delivery or proof of new AI/GPU capacity.
What to verify next: Verify contracts, customers, data-processing terms, certifications, GPU inventory, deployment and exit obligations.
Unresolved: Physical signing date/place; term; value; contract; customers; workloads; facility; GPUs; processing terms; certifications; deployment.
Confidence basis: First-party announcement verifies the MoU and prospective language; delivery remains low-confidence and the signing date is unknown.

EvidenceS086 S087 S055

EVT-PART-20260827-RESECURITY-SKY47 · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

High Committed Event

2026-08-29 — Pakistan Software Export Board; NED University

PSEB–NED semiconductor education and research cluster contract signed

contract signed / lead-university designation; commencement and disbursement unverified

The South Region institutional agreement was reported complete.

Evidence dossier

Verified facts: PID reports a contract naming NED the South Region lead university and completing three regional SERC agreements. It reports 270 students across all regions and a target exceeding 7,200 professionals by 2030. The procurement framework requires inspection and a commencement certificate before academic activity and disbursement.
Source claim: The ministry says INSPIRE moves into full-scale implementation. The PKR 4.844 billion figure cited elsewhere is the entire National Semiconductor Human Resource Development Program budget, not this NED contract.
Why it matters: This creates an institutional workforce/research structure, though training targets are not yet completed outcomes.
Analysis: The contract milestone is stronger than an MoU, but it does not establish commencement, disbursement, laboratories, training or completed outputs; the NED contract value is undisclosed.
What to verify next: Track contract publication, funding, labs, equipment, enrolment, completion and placements/research outputs.
Unresolved: Contract text/value; commencement certificate; disbursement; lab specifications; delivery calendar; enrolment by cluster; outputs.
Confidence basis: Official PID release and procurement framework support contract status and downstream conditions; contract text and delivery evidence are absent.

EvidenceS088 S089 S090 S056 S057

EVT-RD-20260829-PSEB-NED · WORKFORCE RESEARCH EDUCATION · IN SPAN DEVELOPMENT

High Committed Event

2026-08-28 — Government of Punjab

Punjab announces Data Lake and OneMap integration claims

officially claimed launch/integration; technical operation unverified

The province publicly framed a cross-department data platform as a delivery milestone.

Evidence dossier

Verified facts: APP relays Punjab claims of more than 12 TB of geospatial data, 31 departments and over 6,000 datasets in a Data Lake/OneMap context, alongside sovereign-cloud and AI-office ambitions.
Why it matters: Centralised geospatial/government data can improve planning while magnifying legal-basis, access, security, correction and reuse risks.
Analysis: Treat quantities as government claims; no technical acceptance, architecture or legal instrument was located.
What to verify next: Verify datasets, controllers, hosting, access, audit, retention, public transparency and acceptance tests.
Unresolved: Legal basis; architecture; dataset inventory; hosting; access; retention; audit; procurement; acceptance.
Confidence basis: Official news-agency report; underlying technical and legal evidence unavailable.

EvidenceS058

EVT-PUNJAB-20260828-DATALAKE · DIGITAL IDENTITY DPI · IN SPAN DEVELOPMENT

Medium Reported running Event

2026-08-27 — Government of Khyber Pakhtunkhwa

KP government reports digital-service and cyber delivery

district-centre directive plus provincial self-report; outcomes not independently verified

A new province-wide facilitation-centre directive was issued while earlier delivery items were restated as institutional claims.

Evidence dossier

Verified facts: At a 27 August performance briefing, the minister directed establishment of citizen facilitation centres in every district. The department also self-reported six model IT labs in merged-district schools, six digitised departments, an established Cyber Response Emergency Centre and a Peshawar citizen centre ready for inauguration.
Why it matters: The portfolio suggests subnational service capacity but cannot be compared without budgets, service volumes and outcome measures.
Analysis: Institutional self-report is evidence of a claim, not independent proof of effectiveness.
What to verify next: Obtain project lists, budgets, named sites, usage, uptime, incident and outcome metrics.
Unresolved: District rollout plan; budgets; centre list; opening dates; service volumes; uptime; cybersecurity outcomes; independent validation.
Confidence basis: Official provincial statement supports the meeting and directive; operational assertions are not independently audited.

EvidenceS059 S091

EVT-KP-20260828-DIGITAL-DELIVERY · DIGITAL IDENTITY DPI · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-08-28 — Government of Punjab; Huawei

Punjab and Huawei announce AI-training commitments and discuss data centres

government–vendor meeting and announced commitments; no signed instrument or award

Training commitments and infrastructure proposals were announced at a meeting, without a published MoU, contract, financing or delivery schedule.

Evidence dossier

Verified facts: APP reports a 28 August meeting and commitments to train 1,000 Punjab youth as Huawei master trainers and 300 women trainers in AI. Six data centres, including a sovereign centre at Nawaz Sharif IT City, were discussed; an AI Delivery Unit was proposed; Punjab stated a 2029 target for an AI-integrated system.
Source claim: The sources do not clarify whether the 300 women are included within or additional to the 1,000 youth. Separate language describing a four-tier system is not evidence of a Tier IV data-centre classification.
Why it matters: Vendor concentration, procurement, data residency, power and exit terms would be material if the proposal advances.
Analysis: Do not count six operational data centres or committed capacity from this report.
What to verify next: Seek the agreement, financing, sites, capacity, procurement route, power plan, safeguards and acceptance milestones.
Unresolved: Signed text; financing; sites; capacity; procurement; power; data controls; delivery.
Confidence basis: Government-side APP account verifies the announcement; Huawei confirmation and operative instruments are absent, and delivery confidence is low.

EvidenceS092 S060

EVT-PUNJAB-20260828-HUAWEI · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

Medium Committed Event

2026-08-30 — Government of Punjab; Alibaba Cloud

Punjab and Alibaba Cloud discuss AI public-service partnership

exploratory discussion / potential partnership

A vendor-government discussion occurred; no signed text, workload or implementation followed in the period.

Evidence dossier

Verified facts: Official media report a 30 August exploratory meeting on a potential strategic partnership using AI in agriculture, healthcare, socio-economic programmes and climate forecasting; an Alibaba executive said data-centre discussions were under way.
Source claim: The executive's reference to an MoU signed before the prime minister appears to concern earlier national agreements, not a new Punjab agreement on 30 August.
Why it matters: Potential public-service AI creates procurement, hosting, transfer, accountability and vendor-exit questions.
Analysis: The available evidence supports exploration, not an operational deployment.
What to verify next: Track agreement, site, financing, datasets, model governance, procurement, hosting and acceptance.
Unresolved: Any new signed text; relationship to May national agreements; scope; financing; capacity; data flows; models; hosting; procurement; launch.
Confidence basis: Two official-state reports align on a discussion; implementation evidence absent.

EvidenceS061 S062 S093 S094

EVT-PUNJAB-20260830-ALIBABA · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-08-28 (page says Friday) — Government of Khyber Pakhtunkhwa; World Bank

KP–World Bank talks link digital infrastructure, AI and energy

exploratory meeting; joint working group agreed; no financing

The parties agreed an exploratory working-group mechanism; no World Bank finance, project approval, assessment, site or technical parameters were disclosed.

Evidence dossier

Verified facts: The provincial release was published 31 August and says the meeting occurred Friday, which resolves to 28 August. It reports agreement to create a joint working group to examine technical and other modalities around digital transformation, AI, a KP data centre, hydropower and transmission.
Why it matters: The linkage recognizes that compute infrastructure depends on reliable power and transmission.
Analysis: It is planning-stage evidence, not World Bank financing or a data-centre commitment.
What to verify next: Track formal assessment, working group, finance, site, load, grid and safeguards.
Unresolved: World Bank confirmation; working-group terms; assessment; financing; site; capacity; energy plan.
Confidence basis: Official provincial release and calendar inference support the meeting and working group; no World Bank source independently confirms it.

EvidenceS063 S095

EVT-KP-20260828-WORLDBANK-DIGITAL-ENERGY · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-09-01 — MoITT; Saudi Ministry of Communications and Information Technology

Pakistan and Saudi Arabia announce deeper cloud and cybersecurity cooperation

ministerial cooperation announcement; no cloud project instrument

A ministerial cooperation statement entered the record.

Evidence dossier

Verified facts: APP reports that ministers agreed to enhance cooperation in cloud infrastructure and cybersecurity and discussed B2B partnerships, technology exports, investment, skills and technology transfer.
Why it matters: It could open investment and export channels, but no cloud workload, capital commitment, safeguards or timetable exists in the evidence.
Analysis: This cloud-cooperation announcement is separate from the Saudi NCA–MoITT cybersecurity MoU and should not be converted into a funded infrastructure project.
What to verify next: Track instrument, counterparties, workplan, financing, hosting, transfers, security and exit terms.
Unresolved: Instrument; projects; finance; parties; workplan; hosting; data transfers; cybersecurity obligations.
Confidence basis: Official news-agency report; no bilateral text or project documentation.

EvidenceS064

EVT-INTL-20260901-SAUDI-CLOUD-MEETING · FUNDING INVESTMENT PARTNERSHIP · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-09-01 — Saudi National Cybersecurity Authority; Pakistan Ministry of IT and Telecommunication

Saudi NCA and Pakistan MoITT sign cybersecurity MoU

signed bilateral cybersecurity MoU; implementation not evidenced

A formal bilateral cybersecurity instrument was signed; the supplied briefing set missed it despite covering adjacent Saudi meetings.

Evidence dossier

Verified facts: The Saudi National Cybersecurity Authority and Pakistan's MoITT signed a cybersecurity MoU on 1 September in Riyadh. The Saudi authority's page is dated 1 September and was last modified at 16:23 AST; Pakistani official outlets corroborated the signing on 2 September.
Source claim: Official accounts describe cooperation in cybersecurity without publishing the full instrument.
Why it matters: The event is substantively stronger than a ministerial discussion and exposes the monitoring corpus's severe cadence and discovery gaps.
Analysis: Signed-instrument status is verified, but no operational programme, budget or transfer mechanism should be inferred.
What to verify next: Obtain the MoU, term, workplan, participating agencies, funding, information-sharing rules, data safeguards and delivery evidence.
Unresolved: Full text; term; workplan; financing; data-sharing; operational mechanism; outputs.
Confidence basis: A first-party Saudi authority release and two Pakistani official sources independently confirm signing; implementation particulars are absent.

EvidenceS096 S097 S098

EVT-INTL-20260901-SAUDI-NCA-CYBER-MOU · CYBERSECURITY · IN SPAN DEVELOPMENT

High Committed Event

2026-09-01 — Pakistan MoITT; Saudi Data and Artificial Intelligence Authority

Pakistan and Saudi data authority discuss AI and data-governance cooperation

exploratory official meeting; no instrument or project

A separate AI/data-governance dialogue appeared during verification but was absent from the briefing corpus.

Evidence dossier

Verified facts: APP reports a 1 September meeting between Pakistan's IT minister and the Saudi Data and Artificial Intelligence Authority on possible cooperation in AI and data governance.
Why it matters: It signals international policy coordination, while the absence of an instrument leaves obligations and implementation undefined.
Analysis: Treat as agenda-setting, not a signed agreement, funded programme or shared-data arrangement.
What to verify next: Track any signed instrument, workplan, standards alignment, cross-border data terms, projects, financing and safeguards.
Unresolved: Counterparty confirmation; instrument; workplan; projects; financing; data transfers; safeguards.
Confidence basis: An official news-agency report verifies the meeting; no Saudi first-party confirmation or instrument was located.

EvidenceS109

EVT-INTL-20260901-SAUDI-SDAIA-AI-DATA · DATA PROTECTION GOVERNANCE · IN SPAN DEVELOPMENT

Medium Signalled Event

2026-09-01 — MoITT; Pakistan Digital Authority

Pakistan says national digital stack is under development and may be shared when complete

under development; future sharing intention; not released or deployed

An outward-facing future-sharing intention was announced while the official source expressly described the stack as unfinished.

Evidence dossier

Verified facts: MoITT says Pakistan is developing a national digital stack spanning identity, data and payments and intends to share it free with frontier and emerging economies when complete. The event pavilion included 25 startups and 50 Pakistani technology firms; those are event-context figures, not stack capacity.
Why it matters: Exportable DPI could create interoperability and influence, but also transfers domestic governance assumptions across jurisdictions.
Analysis: No released code, licence, completed system or international deployment exists in the evidence; free-to-share is not yet a verified open-source release.
What to verify next: Verify repositories, licence, architecture, security audit, recipients, budget and pilots.
Unresolved: Code; licence; readiness; architecture; recipients; security; privacy; audited pilots.
Confidence basis: Official ministry source directly states the under-development status; completion and future sharing remain unverified.

EvidenceS099 S065

EVT-DPI-20260901-OPEN-STACK · DIGITAL IDENTITY DPI · IN SPAN DEVELOPMENT

High Signalled Event

2026-09-02 — Punjab Auqaf and Religious Affairs Department

Punjab Auqaf reports AI-assisted monitoring at model shrines

authority-reported operation; system assurance unavailable

A provincial department reported a live deployment footprint.

Evidence dossier

Verified facts: The department says digital monitoring is operational and that 10 of 16 model shrines are connected, naming sites including Badshahi Mosque and Baba Bulleh Shah’s shrine.
Source claim: The authority labels the system AI-based.
Why it matters: Monitoring in religious/public spaces raises proportionality, biometric, retention, security, accuracy and redress issues.
Analysis: Operational scope and AI function remain unverified beyond the department’s account.
What to verify next: Obtain procurement, vendor, model/function description, legal basis, data map, retention, audit and complaints process.
Unresolved: Vendor; contract; AI function; biometrics; lawful authority; retention; accuracy; human review; redress.
Confidence basis: Official authority statement; no independent system evidence or assurance artefacts.

EvidenceS066

EVT-PUNJAB-20260902-AUQAF-AI · AI GOVERNANCE · IN SPAN DEVELOPMENT

Medium Reported running Event

2026-09-02 — Punjab Board of Technical Education; Punjab Industries Department

PBTE reports examination digitisation and assigns policy review

board meeting and authority-reported digitisation; policies assigned for review, not finalised

PBTE reported digitisation measures and initiated policy review; no system acceptance or final policy text was produced.

Evidence dossier

Verified facts: APP reports a 15-point PBTE board agenda and authority claims that examination-centre monitoring, e-marking and digital paper transmission had been introduced. Eleven assessment and certification policies were assigned for review rather than approved as final instruments.
Why it matters: Digital examination systems affect integrity, access, security, auditability and student redress.
Analysis: Institutional self-report is not independent proof of system performance, and assignment for review is not policy adoption.
What to verify next: Track system procurement, operating scope, security and accessibility testing, incident records, final policy approval and publication.
Unresolved: System/vendor details; legal basis; acceptance tests; security; accessibility; audit; final policy texts.
Confidence basis: Official news-agency account verifies the meeting and claims; underlying systems and policy texts are unavailable.

EvidenceS100 S067

EVT-PUNJAB-20260902-PBTE-DIGITISATION · DIGITAL IDENTITY DPI · IN SPAN DEVELOPMENT

Medium Reported running Event

2026-09-02 — Punjab Tianjin University of Technology; Punjab Industries Department

Punjab minister announces planned PTUT AI courses

ministerial launch intention for September; delivery not evidenced

A provincial workforce intention was announced for PTUT, distinct from the PBTE board action described in the same report.

Evidence dossier

Verified facts: The minister said AI courses were being launched during September at Punjab Tianjin University of Technology. The announcement did not identify course titles, intake, budget, faculty or a confirmed first class.
Why it matters: Technical-education pathways could broaden skills supply, but no scale or delivery can yet be assessed.
Analysis: A planned launch is not enrollment, instruction or completion, and the programme should not be attributed to PBTE.
What to verify next: Track university notification, curricula, instructors, budget, enrolment, first teaching date and outcomes.
Unresolved: Notification; curriculum; intake; faculty; budget; enrolment; start date; completion and placement outcomes.
Confidence basis: Official news-agency account supports the ministerial statement; no university artefact or delivery evidence was found.

EvidenceS100 S067

EVT-PUNJAB-20260902-PTUT-AI-COURSES · WORKFORCE RESEARCH EDUCATION · IN SPAN DEVELOPMENT

Low Signalled Event

2025-07-30/31 — Federal Cabinet; MoITT

National Artificial Intelligence Policy 2025 approved

approved policy; implementation instruments not located

No separate constitutive or operating instrument for the major implementation mechanisms was located during the reporting span.

Evidence dossier

Verified facts: MoITT marks the policy Approved with 31 July 2025 approval date; Radio Pakistan reports Cabinet approval on 30 July. The policy envisages an AI Council, implementation cell, action matrix, funds, sandboxes and a public AI register.
Why it matters: The policy is the strategic baseline but does not itself prove funded programmes, institutions or enforcement.
Analysis: Keep policy approval distinct from execution.
What to verify next: Track constitutive notices, budgets, action matrix, sandboxes, register and delivery metrics.
Unresolved: One-day approval-date discrepancy; Council/cell/fund constitution; budget; master plan; implementation evidence.
Confidence basis: Official policy register and text; implementation non-location is bounded.

EvidenceS001 S002 S003

BASE-AIPOL-20250730-31 · AI GOVERNANCE · BASELINE CARRY IN

High Published rule Baseline

2024-09-09 — Senate of Pakistan

Regulation of Artificial Intelligence Bill, 2024 withdrawn/disposed

withdrawn/disposed; not enacted

No successor AI statute was verified during the period.

Evidence dossier

Verified facts: The Senate records introduction and referral on 9 September 2024, committee inaction, and withdrawal/disposal under standing orders.
Why it matters: Pakistan’s AI policy does not rest on this withdrawn bill as an operative law.
Analysis: Do not cite it as enacted authority.
What to verify next: Track any new federal AI bill from introduction onward.
Unresolved: Any successor legislative proposal.
Confidence basis: Official parliamentary disposition.

EvidenceS004

BASE-AIBILL-20240909 · AI GOVERNANCE · BASELINE CARRY IN

High Signalled Baseline

2026-06-26 to 2026-08-21 — MoITT; PDA

National Data Governance Policy 2026 remains draft/finalisation-stage

draft; consultation concluded; finalisation pending

No approval, notification or commencement evidence was found.

Evidence dossier

Verified facts: MoITT currently labels Data Governance Policy 2026 Draft, dated 26 June. PDA invited comments on 30 June, said on 5 August it would incorporate feedback before finalising, and still used draft language on 21 August.
Why it matters: Government data-sharing initiatives remain ahead of a final national governance policy.
Analysis: Final-stage process language is not final issuance.
What to verify next: Track final text, approval, notification, implementation plan and institutional mandates.
Unresolved: Final text; approval; notification; commencement; implementation plan.
Confidence basis: Multiple current official sources align on draft/finalisation status.

EvidenceS001 S009 S010 S011

BASE-DGP-20260626 · DATA PROTECTION GOVERNANCE · BASELINE CARRY IN

High Signalled Baseline

2018-2026 lineages — MoITT; Parliament

No enacted horizontal personal-data law verified

multiple drafts/withdrawn bill; no Act verified

No passage, assent, Gazette or commencement was verified in the supplied span.

Evidence dossier

Verified facts: MoITT lists 2018, 2020 and May 2023 executive drafts. A separate 2023 private member’s bill was withdrawn/disposed. A May 2026 parliamentary answer says MoITT finalised a bill/proposal, while current Acts registers show no horizontal Personal Data Protection Act.
Why it matters: Public-sector data integration, AI and cloud activity continue without a verified horizontal statute in force.
Analysis: Do not merge executive drafts, a withdrawn private bill and a ministry-finalised proposal into one legislative lifecycle.
What to verify next: Track an introduced government bill, committee text, passage, assent, Gazette and commencement.
Unresolved: Current government bill text; Cabinet approval; introduction; parliamentary path; transition rules.
Confidence basis: Official registers support the lineage and non-enactment; negative finding is bounded to registers checked.

EvidenceS005 S006 S007 S008 S085

BASE-PDP-2023-2026 · DATA PROTECTION GOVERNANCE · BASELINE CARRY IN

Medium Signalled Baseline

2026-08-10/11 — Federal Cabinet; PKCERT

Pakistan Information Security Framework 2026 approved and published

Cabinet-approved and published framework; legal force qualified

No standalone PISF SRO or implementation report was located in the monitoring period.

Evidence dossier

Verified facts: PKCERT publishes the revised framework and control suite. The text uses mandatory baseline language for federal/provincial ministries, departments, autonomous bodies, corporations, CERTs and designated CII, with oversight/audit roles. Government and news reporting describe Cabinet approval.
Why it matters: The framework provides a concrete public-sector/CII security baseline but is not a generally applicable private-sector statute.
Analysis: Stronger than aspiration for expressly covered entities; exact enforcement route requires qualification.
What to verify next: Track implementing directions, audit results, sectoral adoption, incidents and enforcement.
Unresolved: Exact Cabinet date; standalone notification; audit/enforcement practice; coverage designations.
Confidence basis: Official framework text and register; medium confidence on enforceability absent standalone notification.

EvidenceS012 S013 S014 S015

BASE-PISF-20260810-11 · CYBERSECURITY · BASELINE CARRY IN

High Published rule Baseline

2026-04-26 and 2026-05-13 — PDA / Digital Nation Pakistan

DNP/WASL standards remain Pilot; supporting documents remain working drafts

Pilot publications; not gazetted regulatory class

No final REG instrument or separate participation regulation appeared.

Evidence dossier

Verified facts: The register shows DNP-X.001 and DNP-D.002 as Pilot/PUB dated 13 May, and DNP-D.250 and DNP-D.300 as Pilot/WD dated 26 April. The framework defines Pilot as mandatory only for pilot participants; REG is the legally binding gazetted class.
Why it matters: Identity/data-exchange architecture is being piloted before a final binding framework is visible.
Analysis: Published architecture is not equivalent to generally binding participation rules.
What to verify next: Track DNP-D.050 REG, participation regulation, security audits and production onboarding.
Unresolved: Missing referenced DNP-D.050 REG; participation rules; production scope; audits.
Confidence basis: Official standards register and documents.

EvidenceS016

BASE-DNP-WASL-20260426-0513 · DIGITAL IDENTITY DPI · BASELINE CARRY IN

High Signalled Baseline

official portfolio action 2026-06-18; public announcement 2026-06-25 — Planning Commission; Defence Division / Ministry of Defence

Emerging Technologies Data Centre recommended to ECNEC and entered PSDP

CDWP in-principle approval / recommendation to ECNEC; PSDP-allocated; ECNEC approval unverified

No later ECNEC approval, fund release, procurement, construction, commissioning or acceptance was located through the cutoff.

Evidence dossier

Verified facts: Official portfolio records give an exact project cost of PKR 7,930.000 million and date the CDWP action 18 June, while contemporaneous Planning Commission and PID releases dated 25 June say the committee met that day. The final PSDP lists ETDC under Defence Division new schemes with zero expenditure through 30 June, a PKR 7,930 million throw-forward and PKR 100 million FY2026–27 allocation.
Source claim: The project is described as a secure, sovereign, government-owned AI and high-performance-computing facility for cloud, analytics, government, academia, research and private-sector use.
Why it matters: It is a potential public compute anchor, but a budget allocation and referral add no usable compute capacity.
Analysis: Preserve the official date conflict and separate recommendation, allocation, release, expenditure, construction, commissioning and utilization.
What to verify next: Track ECNEC decision, revised PC-I, releases, procurement, site, power, cooling, connectivity, GPU inventory and acceptance.
Unresolved: Correct committee date; ECNEC decision; releases; PC-I; site; MW/IT load; GPUs; delivery; utilization.
Confidence basis: Multiple official planning and budget documents confirm cost, referral and allocation; implementation confidence remains low.

EvidenceS068 S105 S106 S107 S108

BASE-ETDC-20260618-25 · COMPUTE CLOUD DATACENTRE · BASELINE CARRY IN

High Committed Baseline

2026-06-25 — Planning Commission; MoITT

National AI Ecosystem Development Program proposal considered by CDWP

PKR 13 billion in-principle/recommended to ECNEC; not delivered

No final approval, release, award or output was verified.

Evidence dossier

Verified facts: The Planning Commission release describes a PKR 13 billion programme including a feasibility study and upgraded PC-I, recommended onward rather than finally delivered.
Why it matters: It may become a national programme vehicle, but pipeline status is upstream of spending and outcomes.
Analysis: Planning approval language must not be treated as a funded programme.
What to verify next: Track ECNEC, PC-I, releases, procurement and outcome metrics.
Unresolved: ECNEC decision; funding release; programme design; procurement; outputs.
Confidence basis: Official planning release supports amount and stage.

EvidenceS068

BASE-NAIEDP-20260625 · PROCUREMENT PROGRAM DELIVERY · BASELINE CARRY IN

High Committed Baseline

2026-07-24 to 2026-09-21 — Ignite National Technology Fund

Sovereign National AI Infrastructure RFP remains open

open RFP; pre-award

No award or delivery milestone occurred within the reporting span.

Evidence dossier

Verified facts: RFP P57167 covers design, deployment, operation and maintenance of sovereign national AI infrastructure, with PKR 2 million bid security, 360-day bid validity and a 21 September 2026 15:00 PKT deadline.
Source claim: The portal labels 21 September as Wednesday; calendar verification shows Monday.
Why it matters: This is the clearest federal procurement pathway toward national AI compute, but no capacity exists yet from the tender.
Analysis: Do not infer GPUs, MW, users or availability before contract and acceptance.
What to verify next: Track bids, evaluation, award, architecture, site, power/cooling, access model and acceptance.
Unresolved: Bidders; award; value; architecture; capacity; location; energy; access; acceptance.
Confidence basis: Official tender record; weekday metadata error explicitly corrected.

EvidenceS069

BASE-SOVAI-RFP-20260724 · COMPUTE CLOUD DATACENTRE · BASELINE CARRY IN

High In procurement Baseline

2026-07-31 to 2026-08-24 — Punjab Information Technology Board

PITB Government AI Cloud consultancy tender has conflicting closing dates

closed/pre-award; tender identity/date conflict

No evaluation, award or deployment was authenticated.

Evidence dossier

Verified facts: The corpus alternately records 17 and 24 August closing dates, with later snapshots treating 24 August as closed and no result visible.
Why it matters: The consultancy may shape Punjab cloud design, but inconsistent metadata prevents a clean procurement timeline.
Analysis: Preserve competing dates until the bid document/corrigendum chain is recovered.
What to verify next: Retrieve tender ID, bid document, corrigenda, opening, evaluation and award.
Unresolved: Tender ID; governing deadline; scope; evaluation; award; architecture; safeguards.
Confidence basis: Official listing exists, but the dataset’s dates conflict and durable document identity is unresolved.

EvidenceS070

BASE-PITB-AICLOUD-20260731 · COMPUTE CLOUD DATACENTRE · CONTRADICTED OR UNRESOLVED

Low In procurement Baseline

2026-07-02 — Punjab Information Technology Board

PITB DC-11 GPU server tender closed

closed procurement; no award verified

No in-span result was found.

Evidence dossier

Verified facts: The DC-11 document describes eight L20 servers (PKR 280 million), one H200 server (PKR 100 million) and two unspecified GPU servers (PKR 600 million), totalling PKR 980 million; the tender closed 2 July.
Why it matters: It is a concrete proposed GPU package but not delivered compute.
Analysis: Do not transfer quantities/value to the separate DC-02 or ITOPS-23 procurements.
What to verify next: Track evaluation, award, delivery, site, power/cooling and acceptance.
Unresolved: Award; vendor; delivery; site; accepted GPU capacity.
Confidence basis: Official bid document; downstream status absent.

EvidenceS071

BASE-PITB-DC11 · COMPUTE CLOUD DATACENTRE · BASELINE CARRY IN

High In procurement Baseline

2026-08-31 (reported closing) — Punjab Information Technology Board

PITB DC-02 GPU server procurement remains separately identified

reported closed; document identity/results unresolved

No verified evaluation or award appeared.

Evidence dossier

Verified facts: Briefing snapshots describe a separate later GPU-server procurement closing 31 August.
Why it matters: Keeping it separate prevents false aggregation of procurement value and hardware.
Analysis: Quantities from DC-11 cannot be imputed to DC-02.
What to verify next: Recover direct tender document and result.
Unresolved: Tender document; quantities; budget; evaluation; award; delivery.
Confidence basis: Mutable listing/corpus reference without a durable direct document in the verified source set.

EvidenceS070

BASE-PITB-DC02 · COMPUTE CLOUD DATACENTRE · CONTRADICTED OR UNRESOLVED

Low Signalled Baseline

2026-07-01 — Punjab Information Technology Board

PITB ITOPS-23 AI-enabled data-centre package tender closed

closed procurement; no award verified

No in-span award or accepted delivery was found.

Evidence dossier

Verified facts: The bid document describes a PKR 600 million turnkey AI-enabled data-centre package with delivery within 24 weeks of award; it closed 1 July.
Why it matters: It is distinct from DC-11 GPU servers and the later DC-02 listing.
Analysis: Budgeted package is not commissioned infrastructure.
What to verify next: Track evaluation, award, site, delivery, security and acceptance.
Unresolved: Award; contract; site; equipment; delivery; acceptance.
Confidence basis: Official bid document; downstream status absent.

EvidenceS072

BASE-PITB-ITOPS23 · COMPUTE CLOUD DATACENTRE · BASELINE CARRY IN

High In procurement Baseline

2026 planned — PDA; DIFC

Pakistan FinTech Summit outcomes remain unverified

advance announcement only; occurrence and outcomes unverified

No later agreement, investment, launch or outcome was authenticated in the supplied span.

Evidence dossier

Verified facts: DIFC published an advance expansion announcement involving PDA.
Why it matters: Advance event promotion cannot substantiate capital or programme outcomes.
Analysis: No event occurrence or material outcome should be inferred from the advance announcement.
What to verify next: Seek event record and signed outcomes if any.
Unresolved: Event occurrence; agreements; investments; launches.
Confidence basis: Direct advance announcement; no outcome evidence.

EvidenceS073

BASE-FINTECH-SUMMIT · FUNDING INVESTMENT PARTNERSHIP · CONTRADICTED OR UNRESOLVED

High Signalled Baseline

2026-07-24 — Sky47

Sky47 Karakoram-01 data centre inaugurated

inaugurated baseline; utilisation and accepted IT load unverified

No new capacity activation was verified during the reporting span; the 21 August Commerce meeting was separate.

Evidence dossier

Verified facts: Official and specialist reporting place the Karakoram-01 inauguration in Islamabad on 24 July; specialist reporting describes an 8.5 MW facility.
Source claim: Company/exchange materials describe later Karachi and Lahore expansion plans.
Why it matters: It is the strongest private physical-infrastructure baseline in the corpus, but facility MW is not the same as available AI compute.
Analysis: Separate inauguration, design capacity, IT load, GPUs, customers and utilisation.
What to verify next: Verify certification, commissioned IT load, power/cooling resilience, GPUs, customers and expansion completion.
Unresolved: Gross vs IT load; GPU inventory; utilisation; customers; PPA; resilience; certification; expansions.
Confidence basis: Official inauguration plus specialist 8.5 MW reporting; detailed operational metrics absent.

EvidenceS052 S053 S054

BASE-SKY47-20260724-KARAKORAM01 · COMPUTE CLOUD DATACENTRE · BASELINE CARRY IN

Medium Reported running Baseline

2026-08-01; invoicing transition 2026-10-01 — Google Pakistan (Private) Limited

Google Pakistan (Private) Limited becomes counterparty for specified advertising products

direct-company commercial/tax counterparty evidence; not physical-office evidence

A limited product/billing counterparty role became directly verifiable outside the briefing discovery set.

Evidence dossier

Verified facts: Google states that from 1 August 2026 its Pakistan private limited entity is the counterparty for new affected-product accounts; from 1 October it will issue invoices for existing Pakistani-billing-address, PKR, monthly-invoice accounts and charge 15% Sindh sales tax. Automatic/manual payment accounts remain contracted with Google Asia Pacific Pte. Ltd.
Why it matters: This is concrete local commercial evidence, but it does not establish office premises, local employment or data hosting.
Analysis: Corporate/tax role and physical office must remain separate evidence categories.
What to verify next: Track invoicing transition, entity disclosures, local contracting scope, employment and premises evidence.
Unresolved: Corporate registration record; address; staffing; employing role; broader product scope; data processing/hosting.
Confidence basis: Direct Google operational guidance with effective dates and product scope.

EvidenceS080

BASE-GOOG-20260801-COMMERCIAL · GOOGLE CORPORATE PRESENCE · BASELINE CARRY IN

High Signalled Baseline

VI.

What would change the story

14 named triggers that turn uncertainty into a research agenda rather than a hedge.

2026-09-05

PVARA transition deadline

Complete applications, NOCs/licences, published reasons, transitional enforcement and cloud/cross-border implementation.

Track via S020 →

2026-09-06 11:00 PKT

WHO Balochistan GIS/NEIR RFP

Final deadline, bids, award, hosting, access, retention, ethics and production acceptance.

Track via S047 →

2026-09-10

NTC power/resilience procurements

Conflicting battery deadline, awards, installation, failover testing and acceptance.

Track via S110 →

2026-09-21 15:00 PKT

Sovereign National AI Infrastructure RFP

Bid opening, evaluation, award, capacity, site, energy/cooling, access model, security and acceptance.

Track via S069 →

2026-09-23

State Life Karachi core switches

Evaluation, award, delivery and commissioning.

Track via S111 →

2026-09-30 target

Sky47 Port Qasim expansion

Actual commissioning, certification, MW/IT load, customers, GPUs, power/cooling and acceptance.

Track via S054 →

2026-10-01

Google Pakistan invoicing transition

Invoices issued by local entity for eligible accounts, tax treatment, product scope and any premises/employment disclosures.

Track via S080 →

Next official register update

National Data Governance Policy and personal-data legislation

Final text, approval/notification, introduced bill, passage, assent, Gazette and commencement.

Track via S001 →

Next procurement update

National AI Hubs, MoITT training, NAVTTC AI services and PTA DIRBS

Opening/evaluation/award/contract/deployment/acceptance; do not infer completion from lowest-bidder or closing status.

Track via S041 →

Next official/company disclosure

Google physical presence

Street address, office type, occupancy, employing entity, staffing, mandate, investment, local processing/hosting, Cloud region or owned data centre.

Track via S081 →

Next court/parliament update

Under-16 platform proposals

IHC authenticated order/filings, official Punjab resolution, any bill or PTA instrument, age-assurance design and privacy/redress safeguards.

Track via S033 →

Next agency publication

NADRA–FBISE and Auqaf monitoring

Legal basis, data maps, access/logging, retention, biometrics, security, human review, correction and audit.

Track via S035 →

Next PITB tender-register update

PITB DC-02 GPU server procurement

Direct tender identity, governing deadline, quantities, budget, evaluation, award, delivery and acceptance.

Track via S070 →

Next primary-source discovery

Gomal University data centre and RDA portal claims

Direct institutional records, technical scope, contract or award, operating status, safeguards and acceptance evidence.

No source URL assigned

VII.

Method and limits

The briefing corpus was a discovery index, never independent corroboration. Confidence attaches to the stated claim, not to eventual delivery.

High

Direct, accessible primary record supports the event and lifecycle status; material contradictions are resolved or explicitly bounded.

Medium

Core event is supported, but the operative instrument, implementation evidence, independent corroboration or important particulars are missing.

Low

Only an indirect, secondary, inaccessible or contradictory record supports the claim; no provision-level or implementation conclusion is drawn.

Lifecycle before language

Proposal is not approval; tender is not award; MoU is not commissioning; inauguration is not verified load or use.

Source hierarchy

Operative law and official records lead, then direct institutional publications, then credible reporting. Repeated handouts are not independent corroboration.

Confidence is scoped

High, Medium and Low attach to the stated event and lifecycle claim — not to future execution, impact or completeness.

Coverage is sparse

14 units against 1,440 nominal intervals. Missing intervals were documented and never imputed as “no change.”

Contradictions stay visible

Mutable dates, inaccessible instruments and conflicting trackers remain unresolved rather than silently harmonised.

Publication boundary

Derived report content and data are licensed CC BY 4.0; repository code is MIT-licensed. Linked third-party material remains under its original rights and is not redistributed here.

VIII.

How this was made

The report asks what the state can show. It is only fair to ask the same of the report. These are the six stages the evidence passed through, marked by who drove each one: a script, a human and an AI agent working together, or a person alone. One stage carries a mark for something else — a method the record does not retain.

Script

Deterministic. Re-running the tool reproduces the output exactly.

Human + agent

Judgement applied together. The record does not attribute individual calls.

Human only

A decision no script or agent made.

01Supplied corpusaudit_dataset.mjs

13 top-level files inventoried. 12 briefing files resolve to 14 units; one unrelated HTML is excluded from the corpus.

02Auditaudit_dataset.mjs

File type, byte count, SHA-256 and OOXML integrity. Internal UTC/PKT windows are treated as authoritative; filenames and filesystem times are discovery metadata only.

03Normaliseprepare_briefings.mjs

Split, NFKC-normalised, hashed and URL-indexed, with duplicate comparison across units. The command that produced the extracted Markdown was not retained.

04Independent verificationno script

111 external sources opened and assessed. Operative law, gazettes and official registers were sought before reporting. Per-source visit times were not logged.

05Classify and curateno script

Verified fact, source claim and interpretation kept in separate fields; lifecycle, confidence and conflicts assigned per record. Repeated handouts were not counted as corroboration.

06Canonical modelbuild_research_dataset.mjs

Every reference resolved and the evidence, source, exclusion and watchlist tables regenerated: 36 events and 16 baselines, 13 exclusions, 14 watch items.

Fig. 03What happens after stage 06. One curated model generates all three artifacts — each by the script named beneath it — and all three clear the same offline checks. The copper point marks the last step, which is the only one no script performs.

Where the agent stopped

An agent can open 111 sources, hold a lifecycle vocabulary steady across 52 records and refuse to let a handout count twice. It did not decide what was in scope, it did not recalculate the workbook in native Excel, and it did not decide to publish. Those stayed with the author, which is why the release gate ends in a person rather than a check.

The release clock

Git and the filesystem record when files were packaged, not how long the work took. The distinction matters: the span below is wall clock, and most of it is not research.

Fig. 04Local assembly and Git milestones in EDT, evenly spaced as a sequence — elapsed time is annotated rather than drawn to scale. The copper mark is the extracted Markdown, present at 23:11 with no record of the command that produced it.

Idle time, source-review labour and per-URL request times cannot be recovered from this record. Stating that is cheaper than implying a number.

IX.

What was not counted

Exclusion is an explicit research decision, not disappearance. All 13 material exclusions remain inspectable.

EXC-001pakistan-music-economy-meaning-man_1.html

lack of Pakistan AI/digital-policy nexus

Readable standalone essay about Pakistan’s music economy; not a monitoring brief and no material AI-policy or digital-infrastructure nexus.

excluded from briefing dataset

EXC-002Strict-window no-change statements in B001–B014

repeated negative observation

A no-change finding describes the bounded search window; it is not an underlying event and repetition is not corroboration.

retained in coverage log, not event count

EXC-003Mutable PPRA headline counts

unstable aggregate

Counts moved and sometimes reset; without identifying underlying rows they do not establish a substantive procurement event.

excluded from findings

EXC-004Generic PPRA rows

out of scope

Pneumatic items, generic security equipment, civil works, fire-hydrant evaluation and office relocation lack a material AI/digital-infrastructure nexus.

excluded

EXC-005Guddu ST-16 / 747 MW work

insufficient AI nexus

General grid rehabilitation is not evidence of dedicated AI-compute energy supply.

excluded

EXC-006ETPB data-centre evaluation EVL00000000515

outside reporting period

Dated 4 May 2026; no in-span update was verified.

excluded

EXC-007Date-only X-access claim

unsupported/contradictory

No primary PTA/Interior notice was located and the claim conflicted with earlier reporting.

excluded pending primary evidence

EXC-008Daily Times under-16 article dated 3 September

syndicated/repeated coverage

Recycles the 31 August IHC proceeding and does not establish a new event.

deduplicated into EVT-PLAT-20260831-IHC-U16

EXC-009Google directories and Pakistan-filtered jobs

verification observation

Directory contents and undated job listings help test claims but are not separate event milestones.

used as evidence, not counted as events

EXC-010Google PID 21 August and MOIB 24 August releases

duplicate official coverage

Both describe the same framework MoU; the later ministry item is not independent corroboration.

clustered into EVT-GOOG-20260821-MOU

EXC-011PISF 1 September press story

repeated coverage

Appears to repeat the 10/11 August Cabinet decision and published framework.

retained as baseline context only

EXC-012Gomal University data-centre and RDA portal claims

unsupported

Mentioned as earlier feed claims without direct item URLs or technical/acceptance evidence.

watchlist only

EXC-013Files absent at 15-minute cadence

missing evidence

Missing briefings are not imputed and their absence is not evidence that no event occurred.

coverage limitation

Source register — 111 assessed records

External links are inert until selected. Availability and limitations reflect the 3 Sep 2026 verification cutoff.

Assessed sources, availability, and evidentiary limitations
ID	Publisher / document	Type	Date	Availability	Limitation
S001	Ministry of IT and Telecommunication (MoITT)Policies register	official ministry register	live	opened and assessed	Mutable register; current status captured at access time.
S002	MoITTNational Artificial Intelligence Policy	official policy text	2025-07-31	opened and assessed	MoITT register and Cabinet announcement differ by one day.
S003	Radio PakistanFederal Cabinet approves Hajj Policy 2026, Artificial Intelligence Policy 2025	official broadcaster	2025-07-30	opened and assessed	Official summary, not the policy text.
S004	Senate of PakistanThe Regulation of Artificial Intelligence Bill, 2024 — bill summary	official parliamentary register	live	opened and assessed	Register records disposition; not an enacted law.
S005	MoITTLegislations register	official ministry register	live	opened and assessed	Mutable register; separates executive draft lineages.
S006	National Assembly of PakistanDebates / answer concerning data-protection legislation	official parliamentary record	2026-05-14	opened and assessed	Uses a heading referring to an Act while operative text still describes a bill/proposal.
S007	Senate of PakistanPrivate Members' Bills register	official parliamentary register	live	opened and assessed	Separate from MoITT executive drafts.
S008	Senate of PakistanActs of Parliament register	official parliamentary register	live	opened and assessed	Negative finding bounded to displayed register entries.
S009	Pakistan Digital Authority (PDA)Pakistan Digital Authority to Oversee the Country's First National Data Governance Policy	official authority release	2026-06-30	opened and assessed	Describes a proposed draft and consultation.
S010	PDAConsultations concluded on the National Data Governance Policy 2026	official authority release	2026-08-05	opened and assessed	'Final stage' is process language, not proof of approval.
S011	PDAFrom Fragmentation to Federation	official authority release	2026-08-21	opened and assessed	Still describes the Data Governance Policy as a draft.
S012	Ministry of Information and BroadcastingCabinet approves Pakistan Information Security Framework 2026	official government release	2026-08-11	opened and assessed	Summarizes Cabinet action; exact Cabinet decision date varies across reporting.
S013	PKCERTGRC Policies — Pakistan Information Security Framework 2026	official cybersecurity authority register	live	opened and assessed	Links the framework and control suite; no standalone PISF SRO was located.
S014	PKCERTPakistan Information Security Framework 2026 — merged version	official framework text	2026	opened and assessed	Not itself an Act; enforceability outside expressly covered entities is not established.
S015	DawnCabinet okays housing policy, cybersecurity framework	reputable news	2026-08-11	opened and assessed	Secondary corroboration.
S016	PDA / Digital Nation PakistanStandards register	official standards register	live	opened and assessed	Four visible entries remain Pilot; two are working drafts.
S017	PVARARegulatory framework	official regulator register	live	opened and assessed	Summary page contains a ten-year statement that is narrower in the operative text.
S018	PVARA / Gazette of PakistanPakistan Virtual Asset Services Regulations, 2026 — S.R.O. 1419(I)/2026	official gazetted regulation	2026-08-21	opened and assessed	Operative primary text.
S019	PVARA / Gazette of PakistanPakistan Virtual Asset Services Activity Specific Regulations, 2026 — S.R.O. 1420(I)/2026	official gazetted regulation	2026-08-21	opened and assessed	Operative primary text.
S020	PVARAVASP licensing	official regulator guidance	live	opened and assessed	Portal/guidance evidence; licence decisions must be checked separately.
S021	Radio PakistanPakistan introduces regulatory system for digital economy	official broadcaster	2026-08-22	opened and assessed	Official summary, not operative text.
S022	PKCERTAdvisories index	official cybersecurity authority register	live	opened and assessed	Index lacks displayed publication dates.
S023	PKCERTAdvisory 16 — Malware Targeting Synchronized Passkeys on Compromised Windows Systems	official advisory	2026-08-24	opened and assessed	Date supported by identifier and PDF metadata; exact release time unavailable.
S024	PKCERTAdvisory 17 — Adobe Acrobat Chrome Extension Vulnerability Exposing WhatsApp Web Sessions	official advisory	2026-08-24	opened and assessed	Date supported by identifier and PDF metadata; exact release time unavailable.
S025	Press Information Department (PID)MoITT to introduce fresh bill to expedite legislative process on PTRA	official government release	2026-08-28	opened and assessed	Fresh bill is stated intent, not a verified introduction.
S026	Senate of PakistanGovernment Bills transmitted by the National Assembly	official parliamentary register	live	opened and assessed	Records withdrawal; no successor text was visible at cutoff.
S027	Khyber Pakhtunkhwa AssemblyThe Khyber Pakhtunkhwa Promotion of Digital Payments Bill, 2026	official provincial parliamentary register	live	opened and assessed	Current status says referred to Standing Committee No. 10.
S028	Express TribuneK-P Assembly approves digital payments bill	reputable news	2026-08-22	opened and assessed	Headline/passsage claim conflicts with current official tracker and article body says introduced.
S029	DGIPR Khyber PakhtunkhwaStanding committee considers workplace-harassment amendments	official provincial release	2026-08-27	opened and assessed	Urdu release; describes committee action, not enactment.
S030	SECPSECP website / circular register	official regulator site	live	opened and assessed	Initial discovery source only; the direct instrument and official document page are S101-S102.
S031	Super Law ServicesSuperNews 28-8-2026	specialist commentary/index	2026-08-28	opened and assessed	Initial discovery corroboration only; not a substitute for the SECP instrument at S101-S102.
S032	HUM NewsPunjab Assembly passes resolution to ban social media accounts for under-16s	news report	2026-09-01	opened and assessed	Official resolution text was not located; resolution is not legislation.
S033	DawnIHC seeks replies on under-16 social-media age verification	reputable news	2026-08-31	opened and assessed	Authenticated court order not located.
S034	Business RecorderSocial media age verification: IHC directs authorities to submit reply	reputable news	2026-09-01	opened and assessed	Secondary corroboration; not the order.
S035	Associated Press of Pakistan (APP)NADRA, FBISE sign agreement to integrate student registration, educational certificates system	official news agency	2026-09-01	opened and assessed	Agreement text and production evidence unavailable.
S036	PPRANational AI Hubs tender TS0000010287E	official procurement record	2026-08-18	opened and assessed	Current closing field and corrigendum history conflict; no evaluation or award visible.
S037	EPADSEstablishment of National AI Hubs procurement 71677	official procurement record	2026-08-18	opened and assessed	Tender-stage record.
S038	PPRAMoITT AI capacity-building tender TS0000006913E	official procurement record	2026-05-23	opened and assessed	Evaluation/lowest-bidder stage is not award.
S039	PPRAEvaluation results register — MoITT AI training	official procurement register	2026-08-19	opened and assessed	Mutable paginated register.
S040	PPRANAVTTC AI-enabled services tender TS0000010237E	official procurement record	2026	opened and assessed	Procurement stage only.
S041	PPRANAVTTC technical evaluation EVL00000002896	official procurement register	2026-08-21	opened and assessed	Six bids; mutable paginated register.
S042	PPRANAVTTC final evaluation EVL00000003006	official procurement register	2026-08-28	opened and assessed	Lowest evaluated bidder is not award/contract.
S043	PPRAPTA AI-powered DIRBS tender TS0000011207E	official procurement record	2026-08-10	opened and assessed	No evaluation, award, system design, or safeguards visible.
S044	EPADSPTA annual procurement-plan record for DIRBS	official procurement-plan record	2026	opened and assessed	Plan/tender metadata conflict; do not conflate stages.
S045	PPRANADRA NDW racks, containment systems and PDUs tender TS0000010535E	official procurement record	2026-07-29	opened and assessed	No evaluation, award, delivery, or commissioning visible.
S046	PPRANADRA branch switches and management licences tender TS0000010591E	official procurement record	2026	opened and assessed	No evaluation, award, delivery, or commissioning visible.
S047	UN Global Marketplace / WHORFP EM/PAK — GIS-Enabled Digital EPI Microplanning and NEIR Integration in Balochistan	international institution procurement	2026-08-24 in B006 capture; current page displays 2026-08-28	opened and assessed	Mutable record: B006 transcribed ‘Published 24 Aug 2026’; the current page displays ‘Published 28-Aug-2026’. The page also retains superseded deadlines; latest displayed deadline is 6 September 2026 11:00 PKT.
S048	JazzJazz becomes first operator to reach 1,000 5G sites	direct company release	2026-08-27	opened and assessed	Company-reported footprint; no independent QoS/capex audit.
S049	JazzJazz secures 190 MHz spectrum to accelerate Pakistan's 5G future	direct company release	2026	opened and assessed	Direct company context for spectrum and investment commitment.
S050	PPRAFAB spectrum-monitoring contract PCN-3884318406	official procurement contract record	2026-08-25	opened and assessed	Contract does not prove installation, commissioning, or acceptance.
S051	PIDJam Kamal Khan pushes sovereign cloud and AI-powered trade ecosystem	official government release	2026-08-21	opened and assessed	Meeting/discussion only; contains no 8.5 MW claim.
S052	Radio PakistanPM, Field Marshal inaugurate Sky47 Karakoram-01 Data Centre	official broadcaster	2026-07-24	opened and assessed	Canonical Radio Pakistan URL replacing the retired new.radio.gov.pk staging host; still only supports the inauguration baseline, not certified IT load, GPU inventory or operational utilisation.
S053	Data Center DynamicsPakistani operator Sky47 inaugurates 8.5MW data center in Islamabad	specialist industry news	2026-07-29	opened and assessed	8.5 MW is facility-level reporting; IT load/utilisation not independently established.
S054	Mari Energies / Pakistan Stock ExchangeMaterial information concerning data-centre venture	company exchange disclosure	2026	opened and assessed	Contains plans/targets that should not be treated as commissioning evidence.
S055	Dawn / ResecurityResecurity and Sky47 partner to enable sovereign cybersecurity and AI infrastructure in Pakistan	advertorial / direct company claim	2026-08-29	opened and assessed	Explicit advertorial; forward-looking partnership language and no deployment proof.
S056	MoITTPakistan's National Semiconductor Cluster Framework now complete as NED joins SERC	official ministry release	2026-08-29	opened and assessed	Contract itself, budget, lab specification and delivery evidence unavailable.
S057	NED UniversityEvents — INSPIRE / PSEB semiconductor cluster	university publication	live	opened and assessed	Sparse supporting entry; no contract text.
S058	APPMaryam delivers address at Big Data Industry Expo	official news agency	2026-08-28	opened and assessed	Relays Punjab government claims; no architecture, legal instrument, or acceptance record.
S059	DGIPR Khyber PakhtunkhwaKP digital-government delivery update	official provincial release	2026-08-28	opened and assessed	Government self-report; independent service-volume/outcome evidence absent.
S060	Business RecorderPunjab, Huawei agree to expand AI, digital cooperation	reputable news	2026-08-29	opened and assessed	No primary signed instrument, financing, site, or capacity source located.
S061	APPAlibaba Cloud shows interest in Punjab's IT sector	official news agency	2026-08-30	opened and assessed	Reports discussion/potential partnership, not implementation.
S062	Radio PakistanAI being integrated into governance system in Punjab: CM	official broadcaster	2026-08-30	opened and assessed	Government handout; no signed text or delivery evidence.
S063	DGIPR Khyber PakhtunkhwaWorld Bank delegation meets KP government on IT, digital infrastructure and energy initiatives	official provincial release	2026-08-31	opened and assessed	Page says meeting occurred Friday; publication and event dates differ.
S064	APPShaza meets Saudi Minister of Communications and Information Technology	official news agency	2026-09-01	opened and assessed	No instrument, project, financing, or timetable disclosed.
S065	Arab News PakistanMinister says Pakistan will share digital infrastructure with emerging economies	reputable international news	2026-09-01	opened and assessed	Ministerial intention; code, licence, readiness, recipients and safeguards unavailable.
S066	Punjab Auqaf and Religious Affairs DepartmentAI-based digital monitoring system at model shrines	official provincial release	2026-09-02	opened and assessed	Operational claim is authority-reported; vendor, biometric scope and assurance evidence absent.
S067	APP VideoPunjab minister announces PBTE digitisation and AI courses	official news agency video	2026-09-02	404 on 2026-09-03 audit; retained as provenance/archive-only	The APP video mixed PBTE digitisation claims with a separate PTUT course announcement and lacks institutional artefacts proving course delivery, system operation or acceptance.
S068	Planning Commission of PakistanCDWP considers Emerging Technologies Data Centre and National AI Ecosystem Development Program	official planning release	2026-06-25	opened and assessed	In-principle/recommendation stage; not ECNEC approval, release, award, construction or operation.
S069	PPRASovereign National AI Infrastructure RFP TS0000010170E	official procurement record	2026-07-24	opened and assessed	Open/pre-award; page's weekday label for 21 September is erroneous.
S070	Punjab Information Technology BoardTender notices	official provincial procurement register	live	opened and assessed	Mutable page; Government AI Cloud and later GPU identities/dates need document-level reconciliation.
S071	PITBBid document DC-11 — GPU servers	official procurement document	2026	opened and assessed	Closed baseline; quantities must not be transferred to other GPU tenders.
S072	PITBBid document ITOPS-23 — AI-enabled data-centre package	official procurement document	2026	opened and assessed	Closed baseline; no award or accepted delivery located.
S073	Dubai International Financial CentreDubai FinTech Summit expands globally with Pakistan Digital Authority	direct institution release	2026-02-23	opened and assessed	Advance announcement does not prove later summit outcomes.
S074	PIDPrime Minister meets Google delegation and unveils plaque	official government release	2026-08-18	opened and assessed	Ceremony occurred at Prime Minister House; no office street address, occupancy or staffing evidence.
S075	PDAGoogle opens office in Pakistan	official authority release	2026-09-01	opened and assessed	Retrospective government claim; no office address or operational particulars.
S076	DawnGoogle announces local office as prime minister unveils plaque	reputable news	2026-08-18	opened and assessed	Relays Google/company statement but provides no premises evidence.
S077	PIDGovernment of Pakistan–Google framework MoU	official government release	2026-08-21	opened and assessed	Instrument and implementation workplan were not published.
S078	Ministry of Information and BroadcastingGoogle framework MoU and digital-skills programmes	official government release	2026-08-24	opened and assessed	Later release describing same agreement; not independent corroboration.
S079	PIDGovernment claims concerning Google programmes in Pakistan	official government release	2026-08-19	opened and assessed	Programme numbers are government claims, not independently audited outcomes.
S080	Google Ads HelpTaxes in your country — Google Pakistan (Private) Limited	direct company operational guidance	live	opened and assessed	Verifies a limited commercial/tax counterparty role, not a physical office.
S081	GoogleOffice locations	direct company directory	live	opened and assessed	No Pakistan match at cutoff; absence does not prove no local presence.
S082	Google CloudGlobal locations — regions and zones	direct company directory	live	opened and assessed	No Pakistan region at cutoff.
S083	Google Data CentersLocations	direct company directory	live	opened and assessed	No Pakistan owned-data-centre location at cutoff.
S084	Google CareersPakistan-filtered jobs	direct company jobs directory	live	opened and assessed	Three matches at cutoff, two explicit Karachi; postings lack a shared event timestamp.
S085	National Assembly of PakistanActs register	official parliamentary register	live	opened and assessed	No in-scope horizontal personal-data Act visible at cutoff.
S086	Sky47Sky47 and Resecurity sign a Memorandum of Understanding	direct company announcement	2026-08-27	opened and assessed	First-party LinkedIn post marked Edited; exact announcement timestamp inferred from the native activity identifier.
S087	C-Suite ExchangeSky47 and Resecurity sign MoU to strengthen cybersecurity collaboration	trade publication	2026-08-27	opened and assessed	Corroborates the public announcement; independence from company-provided material is unclear.
S088	Press Information DepartmentPakistan's National Semiconductor Cluster Framework now complete as NED joins SERC	official government release	2026-08-29	opened and assessed	Confirms contract/designation but does not publish the contract, its value, or a commencement certificate.
S089	Pakistan Software Export BoardRFP for three Semiconductor Education and Research Clusters	official procurement document	2025	opened and assessed	Procurement framework establishes downstream inspection and commencement steps; it is not proof those steps occurred.
S090	Press Information DepartmentNational Semiconductor Human Resource Development Program budget and targets	official government release	2026	opened and assessed	PKR 4.844 billion is the whole NSHRDP budget, not the NED contract value.
S091	Express TribuneCitizen facilitation centres planned	reputable news	2026-08-28	opened and assessed	Appears derived from the same provincial handout and is not independent operational corroboration.
S092	Associated Press of PakistanPunjab CM, Huawei agree to expand AI, digital cooperation	official news agency	2026-08-28	opened and assessed	Government-side account; no Huawei release, signed instrument, financing, site, or capacity specification was found.
S093	Express TribuneChinese firm shows interest in Punjab IT sector	reputable news	2026-08-31	opened and assessed	Appears handout-derived; supports meeting chronology, not an independent project commitment.
S094	Radio PakistanPakistan, Alibaba Group ink agreements to boost digital-economy cooperation	official broadcaster	2026-05-24	opened and assessed	Earlier national agreements are context and must not be conflated with the 30 August Punjab meeting.
S095	Business RecorderKP, World Bank team discuss IT, digital infrastructure and energy initiatives	reputable news	2026-08-31	opened and assessed	Repeats the provincial account; no World Bank release or financing decision was located.
S096	Saudi National Cybersecurity AuthoritySaudi Arabia and Pakistan sign cybersecurity MoU	official foreign-government release	2026-09-01	opened and assessed	Confirms the signed cybersecurity MoU; full instrument, term and workplan were not published.
S097	Radio PakistanPakistan, Saudi Arabia sign MoU in area of cybersecurity	official broadcaster	2026-09-02	opened and assessed	Cross-party governmental corroboration; no full instrument.
S098	Associated Press of PakistanPakistan, Saudi Arabia sign cybersecurity agreement	official news agency	2026-09-02	opened and assessed	Corroborates signing; implementation particulars remain unavailable.
S099	MoITTPakistan will share national digital infrastructure free with emerging economies when complete	official ministry release	2026-09-01	opened and assessed	Explicitly says the stack is under development; no repository, licence, completion, audit or external deployment was found.
S100	Associated Press of PakistanPunjab Industries Minister chairs PBTE board meeting	official news agency	2026-09-02	opened and assessed	Conflates PBTE digitisation claims with a separate PTUT course announcement; no institutional artefacts or delivery evidence.
S101	SECPCircular No. 19 of 2026 — Consolidated Framework for Investor Onboarding	official regulator instrument page	2026-08-27	opened and assessed	Final circular; no express effective date. The direct control yielded an eight-page scanned instrument.
S102	SECPCirculars register	official regulator register	live	opened and assessed	Mutable index; posting date differs from the instrument's issuance date.
S103	DawnSECP overhauls investor onboarding framework	reputable news	2026-08-28	opened and assessed	Secondary corroboration; the circular governs the operative provisions.
S104	Business RecorderSECP revises investor onboarding framework	reputable news	2026-08-28	opened and assessed	Secondary corroboration.
S105	Press Information DepartmentCDWP considers Emerging Technologies Data Centre	official government release	2026-06-25	opened and assessed	Contemporaneous announcement says the meeting occurred that day; later official portfolio records date the action 18 June.
S106	Planning CommissionMonthly Development Update — July 2026	official planning portfolio report	2026-07	opened and assessed	Records ETDC as recommended to ECNEC on 18 June 2026.
S107	Planning CommissionPublic Sector Development Programme 2026–27 — Final	official budget document	2026	opened and assessed	Records PKR 100 million allocation, zero expenditure through 30 June, and full throw-forward; allocation is not release or expenditure.
S108	Planning CommissionAnnual Plan 2026–27	official planning document	2026	opened and assessed	Lists ETDC among proposed major projects.
S109	Associated Press of PakistanPakistan, Saudi Arabia agree to strengthen cooperation in AI, data governance	official news agency	2026-09-01	opened and assessed	Exploratory SDAIA meeting; no instrument, project, financing or timetable disclosed.
S110	Public Procurement Regulatory AuthorityReplacement of NTC Peshawar transmission-hall battery banks — TS0000011042E	official procurement record	2026-08-23	opened and assessed	Mutable record has conflicting deadline fields; procurement status does not prove award, installation, testing or acceptance.
S111	Public Procurement Regulatory AuthorityState Life Karachi data-centre core switches — TS0000012358E	official procurement record	2026-08-28	opened and assessed	Tender-stage record; no evaluation, award, delivery, commissioning or acceptance evidence.

Briefing provenance — 14 observed units

Exact internal windows outrank filenames and filesystem timestamps. Every inter-briefing gap exceeded 30 minutes.

Observed briefing units and their verified UTC windows
ID	Nominal date / unit	UTC window	Timing issue
B001	2026-08-18Tab 1	2026-08-18T19:24:00Z 2026-08-18T19:38:00Z	Title date is UTC date; normalized PKT date is 2026-08-19.
B002	2026-08-20Tab 2	2026-08-20T14:36:50Z 2026-08-20T14:50:39Z	None identified.
B003	2026-08-21Tab 3	2026-08-21T14:56:00Z 2026-08-21T15:05:00Z	Window is explicitly approximate.
B004	2026-08-22whole document	2026-08-22T14:52:00Z 2026-08-22T15:05:00Z	Window start is approximate.
B005	2026-08-23whole document	2026-08-23T14:58:00Z 2026-08-23T15:10:00Z	End time is reconstructed from stated duration and filename.
B006	2026-08-25whole document	2026-08-24T19:10:00Z 2026-08-24T19:25:00Z	UTC date is 2026-08-24 while nominal and PKT date are 2026-08-25.
B007	2026-08-26whole document	2026-08-26T01:38:00Z 2026-08-26T02:10:00Z	32-minute interval materially exceeds the stated approximate 15-minute cadence.
B008	2026-08-27whole document	2026-08-27T13:52:00Z 2026-08-27T14:06:00Z	Window end is approximate.
B009	2026-08-28whole document	2026-08-28T14:37:00Z 2026-08-28T14:52:00Z	Window end is approximate.
B010	2026-08-29whole document	2026-08-29T14:24:00Z 2026-08-29T14:38:00Z	Research cutoff is approximate in method text.
B011	2026-08-30whole document	2026-08-30T14:38:00Z 2026-08-30T14:57:00Z	19-minute interval exceeds the nominal cadence.
B012	2026-08-31whole document	2026-08-31T14:36:00Z 2026-08-31T14:55:00Z	Filename says 1049ET, which converts to 14:49 UTC during EDT and falls inside, not at the end of, the stated window; ET is also DST-ambiguous.
B013	2026-09-01whole document	2026-09-01T16:40:00Z 2026-09-01T16:51:00Z	Filename says 1249ET (16:49 UTC during EDT), two minutes before the explicit 16:51 UTC research cutoff; ET is DST-ambiguous.
B014	2026-09-02whole document	2026-09-03T02:06:00Z 2026-09-03T02:21:00Z	Filename nominal date is EDT; normalized UTC and PKT dates are 2026-09-03. Filename minute is scheduled time, two minutes before research cutoff.

The policy state is assembling itself in public.

The question is no longer whether Pakistan has an AI and digital-infrastructure agenda. It is whether the expanding architecture of rules, procurement, identity, data and partnerships can acquire the budgets, controls, transparency, interoperability and independent evidence required to become accountable capacity.

On this record, the rules are arriving faster than the proof that anything built under them works.

Verified 15-Day Monitoring Report — 18 Aug–3 Sep 2026 UTC Comprehensive within supplied files MMXXVI