Sources

SRC-475

Central Organization for Financial Control, Syrian Arab Republic, official site cofc.gov.sy and its public API at /api/v1, retried 5 September 2026 for the body's own reports

Source ID: SRC-475
Citation: Central Organization for Financial Control, Syrian Arab Republic, official site cofc.gov.sy and its public API at /api/v1, retried 5 September 2026 for the body's own reports
URL or path: https://cofc.gov.sy/; https://cofc.gov.sy/api/v1/public/reports; https://cofc.gov.sy/api/v1/public/news; research/SRC-475_cofc_public_reports_2026-09-05.json; research/SRC-475_cofc_public_news_2026-09-05.json
Type: Official site of the body, and its own publication API
Hierarchy tier: 1
Published: 2026
Accessed: 2026-09-05
Snapshot: The site resolves and serves 1,721 bytes, which is a head block only: it is a JavaScript application and A PLAIN RETRIEVAL READS ITS METADATA AND NOTHING ELSE. The script bundle, 429,851 bytes, names the API base https://cofc.gov.sy/api/v1. Responses saved 5 September 2026.
Claims: CH2 the Central Organization for Financial Control's report for financial year 2022
Status: READ

Version history

The register keeps changing after the book is fixed in print. Each entry below was added to this row in the order shown.

RETRIED 5 SEPTEMBER 2026 UNDER D-187 DECISION 3 BECAUSE CHAPTER 2 LINE 121 PRINTED 'it has not been tried since', which under D-051 is a bar and not a disclosure. Full record at audits/reports/CH2_control_body_routes_retried_2026-09-05.md. THE BODY'S OWN REPORTS ENDPOINT IS EMPTY: /api/v1/public/reports returns HTTP 200 and {"items":[],"totalCount":0,"pageNumber":1,"pageSize":20,"totalPages":0}, and the same with pageSize=200. THE CONTROL FIRES: /api/v1/public/news returns HTTP 200, 53,129 bytes, totalCount 20, twenty items dated 20 July to 31 August 2026. SO THE API WORKS, IT IS PUBLIC, IT NEEDS NO SESSION, AND THE EMPTINESS IS REAL. As at 5 September 2026 the organisation publishes news on its own site and NO REPORTS AT ALL. THE SUPERVISORY ASSOCIATION, RETRIED THE SAME DAY: arabosai.org returns 200 and 102,180 bytes and NAMES THE ORGANISATION AS A MEMBER in a carousel; /ar/members/ returns THE IDENTICAL 102,180 BYTES, so the members path is the same application shell and NO MEMBER PAGE OR DOCUMENT LISTING IS EXPOSED to a plain retrieval; /en/ returns 403. INTOSAI's root returns 200 and its members page 403. THE SITE ITSELF SERVES 1,721 BYTES, a head block only, being a JavaScript application; the API base was read out of its own 429,851-byte script bundle. WHAT THIS DOES NOT ESTABLISH: that the report does not exist, or anything about the body's publication channels beyond its website, which SRC-258 names and which remain a route for the author.