{"licensed_products":{"agentic_pack_data_exit_v1":{"service_id":"data_exit","net_amount":7900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"price_configured":true,"existing_subscription_eligible":false},"agentic_pack_transaction_integrity_v1":{"service_id":"transaction_integrity","net_amount":14900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"price_configured":true,"existing_subscription_eligible":false},"agentic_pack_tool_admission_v1":{"service_id":"tool_admission","net_amount":4900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"price_configured":true,"existing_subscription_eligible":false},"agentic_pack_audit_coverage_v1":{"service_id":"audit_coverage","net_amount":7900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"price_configured":true,"existing_subscription_eligible":false}},"operator_packs":{"agentic_operator_skill_admission_v1":{"service_id":"skill_admission_operator_pack","net_amount":1900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"existing_subscription_eligible":false,"price_configured":true},"agentic_operator_memory_custody_v1":{"service_id":"memory_custody_operator_pack","net_amount":1900,"currency":"gbp","amount_unit":"minor_units","enabled":true,"existing_subscription_eligible":false,"price_configured":true}},"operator_pack_contract":"/varexis-index/operator-packs.json","schema":"varexis-index-service/1","automatic_checkout_active":true,"agent_payments_active":true,"agent_payments_contract":"/varexis-index/agent-payments.json","fulfilment":"automatic_published_snapshot_delivery","scope":"Published bounded routes and frozen external advisory projections. Fresh investigations and custom claim assessments are not automated.","external_advisory_collection":{"schema":"varexis-index-advisory-dataset/2","dataset_id":"osv-canonical-20261013-v1","collection_version":"osv-canonical-20261013-v1","captured_on":"2026-10-08","capture_dates":["2026-10-08","2026-10-11"],"reviewed_on":"2026-10-13","live_revalidation":false,"published_records":304384,"distinct_advisory_ids":295627,"s2_records":280531,"s3_records":23853,"ecosystems":{"GitHub Actions":56,"Go":11202,"Hex":364,"Linux":13575,"Maven":6132,"NuGet":4990,"Packagist":4770,"Pub":13,"PyPI":25298,"RubyGems":5131,"crates.io":3279,"npm":229574},"publishers":{"EEF":260,"GHSA":35675,"GO":6465,"GSD":13575,"MAL":239309,"OSV":13,"PYSEC":7811,"RUSTSEC":1276},"statuses":{"SOURCE_ASSERTION":302433,"WITHDRAWN":1951},"staged_records":589449,"quarantined_excluded":31848,"rights_review_excluded":253217,"historical_upstream_quarantine_outside_input":12,"enrichment_counts":{"epss_linked":45498,"fixed_boundaries":41205,"kev_linked":170},"enrichment_feeds":{"captured_at":"2026-10-11T08:26:20.394528+00:00","epss":{"bytes":2706276,"days_old_at_capture":1,"declared_primary_url":"https://epss.empiricalsecurity.com/epss_scores-current.csv.gz","final_url":"https://epss.empiricalsecurity.com/epss_scores-2026-10-10.csv.gz","model_version":"v2026.06.15","observed_at":"2026-10-11T08:26:18.237534+00:00","official_mirror_used":false,"requested_url":"https://epss.empiricalsecurity.com/epss_scores-current.csv.gz","rows":385386,"score_date":"2026-10-10","sha256":"46d23ca8b8822d42f89f5de05eec8b104ee8c3e1d822bc16c6266edde1462cfc","stale_at_capture":false},"kev":{"bytes":1777558,"catalog_version":"2026.10.08","count":1739,"date_released":"2026-10-08T20:09:18.9833Z","declared_primary_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","final_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","observed_at":"2026-10-11T08:26:20.382104+00:00","official_mirror_used":false,"requested_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","sha256":"fb1621beec7db19d99c1f919dede3d4cc01ad88acd16f79f1592929c4826dfee"}},"enrichment_checked_on":"2026-10-13","api":"/api/index/advisories","page":"/index-advisories","attribution":"/varexis-index/advisory-attribution.json","release_manifest":"/varexis-index/advisory-release.json","storage":{"mode":"hash_bound_compressed_server_shards","metadata_only_database":false,"advisory_payloads_in_database":false,"saved_deliveries":"Existing authenticated saved snapshots remain in the service database."},"counting":"Advisory/package source records, not independent vulnerabilities or reviewed VAREXIS findings. Entire ambiguous advisory/package groups are withheld; no affected ranges are split to increase counts. S1 is S2 lineage, not an additional population. Withdrawn historical records are included separately labelled.","boundary":"No match, withdrawal or absence from an explicit version list does not establish package safety. Range evaluation and deployment applicability are not implemented. EPSS and KEV are separately dated direct-CVE source joins, not a current asset-risk assessment. Missing scores are unknown, not zero.","changes_from_previous_live":{"previous_records":304011,"retained":280955,"added":23429,"removed":23056,"net_change":373}},"routes":[{"route_id":"agentic_reduce_compute_sensor_workloads","question":"Can VAREXIS/BDAS reduce compute on quiet sensor or telemetry workloads?"},{"route_id":"agentic_safe_refusal_records","question":"Which records show safe refusal, non-promotion, or not-qualified outcomes?"},{"route_id":"agentic_index_corpus_depth","question":"Is VAREXIS-INDEX more than one public record?"},{"route_id":"agentic_developer_access","question":"What should a developer or agent pay for?"},{"route_id":"agentic_claim_overreach_check","question":"Can this evidence be used to claim production readiness, savings, or broad deployment?"},{"route_id":"agentic_positive_selective_execution_evidence","question":"Which BDAS records show positive selective-execution or workload-reduction evidence?"},{"route_id":"agentic_non_promotion_and_negative_records","question":"Which records should prevent an overclaim?"},{"route_id":"agentic_pipeline_and_contract_due_diligence","question":"Can VAREXIS show evidence pipeline discipline before a developer integrates?"},{"route_id":"agentic_external_protocol_and_holdout_check","question":"Which records show protocol, holdout, or external evaluation discipline?"},{"route_id":"agentic_paid_subscription_fit","question":"When is paid VAREXIS-INDEX access justified?"},{"route_id":"agentic_boundary_pump_e2c_fresh_holdout_boundary","question":"Can PUMP-E2C be cited as a fresh holdout result?"},{"route_id":"agentic_boundary_pump_e2c_customer_savings_boundary","question":"Can a buyer infer customer savings from PUMP-E2C?"},{"route_id":"agentic_boundary_ledger_0042_deployment_boundary","question":"Does Ledger 0042 establish production deployment?"},{"route_id":"agentic_boundary_candidate_batch_canonical_status_boundary","question":"Can every staged candidate in batch 7026447 be counted as canonical?"},{"route_id":"agentic_boundary_pump_e1_promotion_boundary","question":"Can challenged PUMP-E1 evidence be promoted as a safe result?"},{"route_id":"agentic_boundary_nasa_ims_performance_boundary","question":"Does the safe NASA IMS E4.1 result establish performance qualification?"},{"route_id":"agentic_boundary_m3_qualification_promotion_boundary","question":"Does the M3 safe-refusal record qualify the workload for promotion?"},{"route_id":"agentic_boundary_correctness_economic_gain_boundary","question":"Does correctness qualification in record 7026446 establish economic gain?"},{"route_id":"agentic_boundary_qv1_pcb1_net_economics_boundary","question":"Can QV1 PCB1 correctness evidence support net end-to-end economic gain?"},{"route_id":"agentic_boundary_ck4a_capture_promotion_boundary","question":"Does completed CK4A capture establish a promotion decision?"},{"route_id":"agentic_boundary_s1_replay_alarm_boundary","question":"Does S1 exact replay establish a production alarm system?"},{"route_id":"agentic_boundary_h1_3_generalisation_boundary","question":"Does H1.3 locked-seed validation establish external generalisation?"},{"route_id":"agentic_boundary_h2_1_pump_diagnostics_boundary","question":"Does H2.1 establish broad pump diagnostic capability?"},{"route_id":"agentic_boundary_i2_reservation_performance_boundary","question":"Does I2 holdout reservation demonstrate holdout performance?"},{"route_id":"agentic_boundary_stage_b_general_acceleration_boundary","question":"Does Stage B controlled reduction establish general acceleration?"},{"route_id":"agentic_boundary_iiot_synthetic_customer_validation_boundary","question":"Does the synthetic IIoT record establish real customer environment validation?"},{"route_id":"agentic_boundary_public_row_scale_applicability_boundary","question":"Does the public row-scale reduction record establish broad workload applicability?"},{"route_id":"agentic_boundary_live_probe_public_api_boundary","question":"Does a Centered Live Probe V1 pass prove public API availability?"},{"route_id":"agentic_boundary_attribution_claim_truth_boundary","question":"Does an Attribution V2 check prove the truth of all linked claims?"},{"route_id":"agentic_boundary_consumer_binding_runtime_boundary","question":"Does Consumer Binding V1 establish public runtime deployment?"},{"route_id":"agentic_boundary_corpus_recovery_performance_boundary","question":"Does recovering corpus 7001071 establish a new performance result?"},{"route_id":"agentic_boundary_m1_workload_qualification_boundary","question":"Does the M1 qualification-engine record establish that all workloads qualify?"},{"route_id":"agentic_boundary_i1_independent_replication_boundary","question":"Does the I1 development pass establish independent replication?"},{"route_id":"agentic_boundary_stage_fg_selectivity_boundary","question":"Does Stage F/G safety establish selective-execution qualification?"},{"route_id":"agentic_boundary_persistence_claim_truth_boundary","question":"Does preserving an Output V3 result establish claim truth?"},{"route_id":"agentic_boundary_decoder_v4_acceleration_boundary","question":"Does a Decoder V4 check establish performance acceleration?"},{"route_id":"agentic_boundary_g5_2_real_world_performance_boundary","question":"Does G5.2 synthetic confirmation establish real-world performance?"},{"route_id":"agentic_boundary_ot3_workload_reduction_boundary","question":"Does the OT3 development record establish workload reduction?"},{"route_id":"agentic_boundary_c1_pump_diagnostic_scope_boundary","question":"Does C1 Pump locked outer evaluation establish broad pump diagnostics?"},{"route_id":"agentic_boundary_c3_qualification_promotion_boundary","question":"Does promising C3 development establish qualification promotion?"},{"route_id":"agentic_boundary_c4_performance_improvement_boundary","question":"Does the C4 development record establish performance improvement?"},{"route_id":"agentic_boundary_m4_protocol_performance_boundary","question":"Does the M4 protocol and dataset receipt establish performance qualification?"},{"route_id":"agentic_boundary_s1_reference_certification_boundary","question":"Does S1 reference compatibility establish safety certification?"},{"route_id":"agentic_boundary_pump_e2c_hardware_contract_boundary","question":"Can PUMP-E2C support a hardware-mismatched consumer contract?"},{"route_id":"agentic_boundary_pump_e2c_reconstruction_boundary","question":"Does the PUMP-E2C public record support full score reconstruction?"},{"route_id":"agentic_boundary_candidate_batch_publication_boundary","question":"Does the 7026447 staging summary make every candidate public-safe?"},{"route_id":"agentic_boundary_correctness_outer_holdout_boundary","question":"Does correctness qualification in 7026446 establish outer holdout promotion?"},{"route_id":"agentic_boundary_ck4a_holdout_access_boundary","question":"Does CK4A capture completion establish new holdout access?"},{"route_id":"agentic_boundary_attribution_private_source_boundary","question":"Does Attribution V2 permit public exposure of private sources?"},{"route_id":"agentic_boundary_h1_3_mechanism_disclosure_boundary","question":"Does H1.3 validation justify disclosing protected mechanisms?"},{"route_id":"agentic_reviewed_a2a_agent_interoperability","question":"What does A2A establish about communication between independent agents?"},{"route_id":"agentic_reviewed_a2a_capability_discovery","question":"Can an agent discover another agent's advertised capabilities through A2A?"},{"route_id":"agentic_reviewed_a2a_task_state_boundary","question":"Does A2A task collaboration require exposing an agent's internal memory or tools?"},{"route_id":"agentic_reviewed_opa_structured_policy_decisions","question":"Can OPA evaluate policy for a proposed agent action?"},{"route_id":"agentic_reviewed_opa_decision_enforcement_separation","question":"Does an OPA decision by itself enforce an agent's permissions?"},{"route_id":"agentic_reviewed_opa_distributed_deployment","question":"Can OPA run alongside services that need policy decisions?"},{"route_id":"agentic_reviewed_opa_management_interfaces","question":"What do OPA's management interfaces cover?"},{"route_id":"agentic_reviewed_spiffe_workload_identity","question":"What does a SPIFFE SVID establish about a workload?"},{"route_id":"agentic_reviewed_spiffe_trust_domain","question":"Can an SVID from any SPIFFE trust domain be accepted automatically?"},{"route_id":"agentic_reviewed_spiffe_workload_api_material","question":"What can a workload obtain through the SPIFFE Workload API?"},{"route_id":"agentic_reviewed_spiffe_short_lived_credentials","question":"Can SPIFFE tooling support short-lived credentials for workload authentication?"},{"route_id":"agentic_reviewed_spiffe_caller_identification","question":"Does the Workload API's lack of an explicit client secret mean caller checks are unnecessary?"},{"route_id":"agentic_reviewed_gvisor_isolation_model","question":"What isolation model does gVisor provide for agent-executed code?"},{"route_id":"agentic_reviewed_gvisor_sentry_boundary","question":"Does a sandboxed workload directly use the host kernel's full interface through gVisor?"},{"route_id":"agentic_reviewed_gvisor_oci_runtime","question":"Can gVisor integrate with container tooling through runsc?"},{"route_id":"agentic_reviewed_gvisor_host_exposure","question":"Does gVisor's security model eliminate every host-side risk?"},{"route_id":"agentic_reviewed_slsa_artifact_provenance","question":"What does SLSA mean by software provenance?"},{"route_id":"agentic_reviewed_slsa_build_source_tracks","question":"Can a SLSA claim be assessed without naming its track and requirements?"},{"route_id":"agentic_reviewed_slsa_attestation_format_scope","question":"Does using a recommended SLSA attestation format demonstrate SLSA assurance?"},{"route_id":"agentic_reviewed_sigstore_identity_signing","question":"What does Sigstore's keyless signing model bind together?"},{"route_id":"agentic_reviewed_sigstore_transparency_log","question":"What does a Rekor transparency entry establish?"},{"route_id":"agentic_reviewed_sigstore_verification_expectations","question":"Is verifying an artifact signature sufficient for a Sigstore reliance decision?"},{"route_id":"agentic_reviewed_sigstore_bundle_evidence","question":"Does possession of a Sigstore bundle mean an artifact has already been verified?"},{"route_id":"agentic_reviewed_otel_semantic_conventions","question":"What do OpenTelemetry semantic conventions contribute to agent observability?"},{"route_id":"agentic_reviewed_bdas_n1_wind_safe_refusal","question":"Does the N1 wind-SCADA outcome establish selective-execution performance?"},{"route_id":"agentic_reviewed_bdas_m4b_centrifuge_safe_refusal","question":"What does M4B establish when its centrifuge candidate was not qualified?"},{"route_id":"agentic_reviewed_bdas_m4b_prospective_observation","question":"Does the M4B prospective prediction establish a validated workload classifier?"},{"route_id":"agentic_reviewed_bdas_m4_manufacturing_safe_refusal","question":"Does M4's manufacturing outcome demonstrate selective performance?"},{"route_id":"agentic_reviewed_bdas_backblaze_d0_development","question":"Does Backblaze D0 characterisation establish a qualified selective operator?"},{"route_id":"agentic_reviewed_bdas_backblaze_d1_worker_failure","question":"Can Backblaze D1 be cited as a successful performance result?"},{"route_id":"agentic_reviewed_agent_discovery_versus_identity","question":"Does discovering an agent establish its identity or permissions?"},{"route_id":"agentic_reviewed_policy_management_versus_enforcement","question":"Does distributing policy prove an agent action was enforced correctly?"},{"route_id":"agentic_reviewed_provenance_versus_artifact_safety","question":"Do provenance and a valid signature prove an artifact is safe to execute?"},{"route_id":"agentic_reviewed_bdas_selector_correctness_and_fallback","question":"Which BDAS evidence distinguishes selective correctness, safe fallback and run failure?"},{"route_id":"agentic_reviewed_cedar_policy_decisions","question":"Does using Cedar establish that an agent's actions are authorised?"},{"route_id":"agentic_reviewed_cedar_request_context","question":"What context does a Cedar authorization request need?"},{"route_id":"agentic_reviewed_cedar_deny_and_error_boundary","question":"Does Cedar's default denial mean every policy error denies the whole request?"},{"route_id":"agentic_reviewed_cedar_schema_validation","question":"Does Cedar policy validation prove that the policy expresses the intended permissions?"},{"route_id":"agentic_reviewed_cvss_severity_context","question":"Can a CVSS score alone determine a buyer's operational risk?"},{"route_id":"agentic_reviewed_cvss_vector_traceability","question":"What does a CVSS vector add to a published score?"},{"route_id":"agentic_reviewed_cvss_safety_context","question":"Does an omitted CVSS Safety value mean there are no safety impacts?"},{"route_id":"agentic_reviewed_osv_known_vulnerability_query","question":"Does an empty OSV query prove a package has no vulnerabilities?"},{"route_id":"agentic_reviewed_osv_advisory_provenance","question":"What does OSV aggregation establish about a vulnerability advisory?"},{"route_id":"agentic_reviewed_osv_import_quality_boundary","question":"Are OSV import findings accepted vulnerability results?"},{"route_id":"agentic_reviewed_osv_scanner_input_coverage","question":"Does scanning a lockfile or SBOM establish complete deployment coverage?"},{"route_id":"agentic_reviewed_spdx_standard_versus_certification","question":"Does publishing an SPDX document certify the software it describes?"},{"route_id":"agentic_reviewed_scorecard_project_practice_boundary","question":"Does an OpenSSF Scorecard result guarantee that a dependency is safe?"},{"route_id":"agentic_reviewed_oauth_security_bcp_scope","question":"Does citing RFC 9700 establish that an OAuth deployment is secure?"},{"route_id":"agentic_reviewed_oauth_public_client_pkce","question":"What does RFC 9700 require for public clients using authorization codes?"},{"route_id":"agentic_reviewed_oauth_sender_constrained_tokens","question":"What can sender-constrained access tokens support in an OAuth security claim?"},{"route_id":"agentic_reviewed_oauth_server_metadata","question":"Does OAuth server metadata prove the deployment is correctly configured?"},{"route_id":"agentic_reviewed_cyclonedx_schema_identification","question":"Do CycloneDX format and version fields establish that a BOM is complete?"},{"route_id":"agentic_reviewed_cyclonedx_document_revisions","question":"What do CycloneDX serial numbers and BOM versions establish?"},{"route_id":"agentic_reviewed_cyclonedx_inventory_relationships","question":"Can CycloneDX represent service and dependency relationships as well as components?"},{"route_id":"agentic_reviewed_policy_validation_and_enforcement","question":"Does policy validation prove an agent's action was enforced correctly?"},{"route_id":"agentic_reviewed_identity_token_and_permission","question":"Do workload identity and OAuth protection grant permission to act?"},{"route_id":"agentic_reviewed_inventory_and_vulnerability_coverage","question":"Does a valid SBOM and an empty vulnerability lookup prove a release is safe?"},{"route_id":"agentic_reviewed_project_scores_and_severity","question":"Can a project practice score replace vulnerability severity and deployment review?"},{"route_id":"agentic_reviewed_bdas_backblaze_d1_recovery_review","question":"Did the later Backblaze D1 recovery establish exact output and a qualified speedup?"},{"route_id":"agentic_reviewed_bdas_backblaze_d2_development_review","question":"Does the supplied Backblaze D2 review establish a performance-qualified result?"},{"route_id":"agentic_reviewed_agent_protocol_run_state_interface","question":"What does Agent Protocol standardise for agent runs and state?"},{"route_id":"agentic_reviewed_agent_protocol_superset_compatibility","question":"Does a platform implementing a superset of Agent Protocol guarantee every client's compatibility?"},{"route_id":"agentic_reviewed_langgraph_durable_execution_boundary","question":"Does LangGraph's durable execution support establish recovery for a deployed agent?"},{"route_id":"agentic_reviewed_langgraph_framework_dependency","question":"Is LangChain required to use LangGraph?"},{"route_id":"agentic_reviewed_nist_generative_ai_profile_scope","question":"What does NIST AI 600-1 add to AI risk management?"},{"route_id":"agentic_reviewed_nist_generative_ai_action_evidence","question":"Do NIST's suggested generative AI risk actions demonstrate that controls were completed?"},{"route_id":"agentic_reviewed_nist_ai_rmf_voluntary_framework","question":"Does using NIST AI RMF amount to a certified safety result?"},{"route_id":"agentic_reviewed_caep_draft_interoperability_profile","question":"Is the reviewed CAEP interoperability profile a final deployment assurance?"},{"route_id":"agentic_reviewed_caep_profile_event_coverage","question":"Does the CAEP interoperability profile mean every event use case is implemented?"},{"route_id":"agentic_reviewed_openid_shared_signals_transport","question":"What does the OpenID Shared Signals Framework establish?"},{"route_id":"agentic_reviewed_openid_caep_access_response","question":"Does receiving a CAEP event prove that access changed?"},{"route_id":"agentic_reviewed_openid_risc_risk_signals","question":"Does a RISC risk event establish that remediation occurred?"},{"route_id":"agentic_reviewed_owasp_agentic_risk_catalogue","question":"What does OWASP's 2026 Agentic Top 10 provide?"},{"route_id":"agentic_reviewed_owasp_agentic_guidance_assurance","question":"Does adopting OWASP agentic guidance establish tested security controls?"},{"route_id":"agentic_reviewed_owasp_mcp_server_security_scope","question":"What does OWASP's MCP server development guide help assess?"},{"route_id":"agentic_reviewed_owasp_mcp_delegated_permission","question":"Does connecting an assistant to an MCP server authorise every chained tool action?"},{"route_id":"agentic_reviewed_mcp_stateless_core_application_state","question":"Does MCP's July 2026 stateless core mean an application cannot keep state?"},{"route_id":"agentic_reviewed_mcp_extension_support_boundary","question":"Does MCP's extension framework establish support for every optional capability?"},{"route_id":"agentic_reviewed_backblaze_development_review_sequence","question":"How do the Backblaze D1 failure, recovery and D2 reviews differ?"},{"route_id":"agentic_reviewed_agent_interface_runtime_state","question":"Do agent interface and runtime features establish deployed reliability?"},{"route_id":"agentic_reviewed_security_signal_access_enforcement","question":"Does a shared security signal prove access enforcement or remediation?"},{"route_id":"agentic_reviewed_ai_guidance_implementation_evidence","question":"Do NIST and OWASP references establish implemented agent safeguards?"},{"route_id":"agentic_reviewed_aws_agentcore_workload_identity","question":"Does an AgentCore workload identity authorise every action an agent can request?"},{"route_id":"agentic_reviewed_aws_agentcore_memory_scope","question":"Does AgentCore memory support establish correct or appropriately retained agent knowledge?"},{"route_id":"agentic_reviewed_aws_agentcore_outbound_authentication","question":"Does outbound authentication from AgentCore Runtime prove a tool action is permitted?"},{"route_id":"agentic_reviewed_aws_agentcore_tracing_boundary","question":"Does AgentCore Runtime tracing prove a complete or correct agent decision?"},{"route_id":"agentic_reviewed_google_adk_machine_documentation","question":"What do Google ADK’s machine-readable documentation files provide?"},{"route_id":"agentic_reviewed_google_adk_documentation_mcp","question":"Does ADK’s documentation MCP server deploy or run an application agent?"},{"route_id":"agentic_reviewed_microsoft_agent_framework_workflows","question":"What does Microsoft Agent Framework workflow support establish about execution?"},{"route_id":"agentic_reviewed_microsoft_agent_framework_session_state","question":"Does Agent Framework session-state support prove durable or isolated recovery?"},{"route_id":"agentic_reviewed_cedar_level_validation_slicing","question":"When can Cedar entity slicing preserve an authorisation result?"},{"route_id":"agentic_reviewed_sigstore_signing_time_verification","question":"Can a Sigstore signature remain verifiable after its short-lived certificate expires?"},{"route_id":"agentic_reviewed_owasp_acs_foundation_scope","question":"Does citing the OWASP Agent Control Standard establish certified agent safety?"},{"route_id":"agentic_reviewed_owasp_acs_middleware_enforcement","question":"Does portable agent-control configuration prove middleware enforces it?"},{"route_id":"agentic_reviewed_agent_identity_policy_enforcement","question":"Does agent identity plus a control declaration prove an action is allowed?"},{"route_id":"agentic_reviewed_agent_memory_workflow_recovery","question":"Do memory and workflow features establish reliable recovery for an agent?"},{"route_id":"agentic_reviewed_documentation_connector_execution_boundary","question":"Does a documentation MCP connector provide agent execution and tracing?"},{"route_id":"agentic_varexis_authority_boundary","question":"Can VAREXIS support, refuse or halt this claim?"},{"route_id":"agentic_eap_intake_scope_routing","question":"Should submitted material route to quote, review, manual triage or refusal?"},{"route_id":"agentic_review_delivery_admissibility","question":"Can this material enter the evidential basis for a VAREXIS review?"},{"route_id":"agentic_provenance_receipt_boundary","question":"What does a VAREXIS seal or receipt prove?"},{"route_id":"agentic_analytical_review_output","question":"What would a VAREXIS Analytical Review contain?"},{"route_id":"agentic_public_assurance_posture","question":"Can VAREXIS explain its own supplier and AI oversight posture?"},{"route_id":"agentic_forge_vss_authorised_security","question":"Can Forge or a VSS scan authorise security testing or prove exploitability?"},{"route_id":"agentic_reviewed_aws_agentcore_execution_role_credentials","question":"Does an isolated agent runtime hide its execution-role credentials from code running inside it?"},{"route_id":"agentic_reviewed_aws_agentcore_runtime_hardening","question":"Does enabling MMDSv2 and running a non-root container establish that an agent runtime is secure?"},{"route_id":"agentic_reviewed_agent_runtime_credential_reliance","question":"Can I rely on runtime isolation to protect the credentials available to my agent?"},{"route_id":"agentic_reviewed_advisory_corpus_staging_release_boundary","question":"What does a completed advisory-staging run establish before public release?"},{"route_id":"agentic_reviewed_advisory_projection_retrieval_validation","question":"Do exact-key retrieval checks establish that an advisory answer is true?"},{"route_id":"agentic_reviewed_auric_archived_study_attention_boundary","question":"Can an experimental anomaly signal approve a vulnerability finding?"},{"route_id":"agentic_reviewed_osv_withdrawn_advisory_meaning","question":"Does a withdrawn advisory mean the package is safe?"},{"route_id":"agentic_reviewed_osv_aliases_corroboration_boundary","question":"Do multiple advisory IDs provide independent confirmation of a vulnerability?"},{"route_id":"agentic_reviewed_osv_affected_version_boundaries","question":"Is a version unaffected if it is missing from an advisory versions list?"},{"route_id":"agentic_reviewed_advisory_evidence_before_deployment_decision","question":"What evidence is needed before using an advisory match for a deployment decision?"},{"route_id":"agentic_reviewed_staged_data_and_signal_admission","question":"Can successful staging and an anomaly signal replace an evidence-admission review?"},{"route_id":"agentic_reviewed_osv_api_service_limits","question":"Does an API with no published rate limit guarantee unlimited retrieval?"},{"route_id":"agentic_reviewed_cyclonedx_vex_not_affected_evidence","question":"What should accompany a CycloneDX not_affected vulnerability assessment?"},{"route_id":"agentic_reviewed_advisory_withdrawal_versus_vex_assessment","question":"Is advisory withdrawal the same as a component being not affected?"},{"route_id":"agentic_reviewed_archive_custody_completeness_review","question":"Does a verified ledger chain prove that a backup is complete and recoverable?"},{"route_id":"agentic_reviewed_agentcore_bidirectional_streaming_contract","question":"What should I check before using a hosted agent for two-way audio or message streaming?"},{"route_id":"agentic_reviewed_semantic_kernel_orchestration_maturity","question":"Does a documented multi-agent orchestration pattern mean its SDK implementation is stable?"},{"route_id":"agentic_reviewed_agent_framework_migration_contract","question":"Is moving from Semantic Kernel to Microsoft Agent Framework a drop-in replacement?"},{"route_id":"agentic_reviewed_otel_telemetry_stability_contract","question":"Can I assume telemetry names and attributes stay unchanged after an instrumentation upgrade?"},{"route_id":"agentic_reviewed_agent_skills_versus_mcp_security_scope","question":"Does reviewing an MCP connection cover the security of the agent skills that use it?"},{"route_id":"agentic_reviewed_agent_migration_and_telemetry_regression","question":"What separate compatibility checks belong in an agent framework upgrade?"},{"route_id":"agentic_reviewed_custody_versus_experimental_qualification","question":"Does preserving an experiment change the strength of its result?"},{"route_id":"agentic_reviewed_agent_tool_guardrail_coverage","question":"Where should validation run when an agent hands work to another agent or calls a tool?"},{"route_id":"agentic_reviewed_agent_approval_resume_state","question":"How should an application continue an agent run after a tool call waits for approval?"},{"route_id":"agentic_reviewed_agent_trace_capture_configuration","question":"What should I check before assuming an agent run has a usable trace?"},{"route_id":"agentic_reviewed_agent_sdk_application_responsibilities","question":"What remains the application's responsibility when using an agent SDK?"},{"route_id":"agentic_reviewed_mcp_sdk_upgrade_compatibility","question":"Does an SDK supporting a protocol release make an existing MCP integration a drop-in upgrade?"},{"route_id":"agentic_reviewed_agentcore_configuration_versus_provisioning","question":"Does adding memory or credentials to an agent project mean the cloud resources are already provisioned?"},{"route_id":"agentic_reviewed_tool_validation_approval_and_trace","question":"Which checks separate validation, approval and observation of an agent tool call?"},{"route_id":"agentic_reviewed_agent_library_to_hosted_deployment","question":"What evidence separates a working agent library from a provisioned service?"},{"route_id":"agentic_reviewed_agent_middleware_streaming_output","question":"Can adding agent middleware change streaming behaviour or leave output unchecked?"},{"route_id":"agentic_reviewed_llm_security_framework_mappings","question":"Where can I connect LLM security risks to an existing control review?"},{"route_id":"agentic_reviewed_advisory_enrichment_dates_and_coverage","question":"Does adding newer vulnerability context refresh the underlying advisory evidence?"},{"route_id":"agentic_reviewed_detector_recall_and_qualification_gate","question":"Can improved event detection justify promotion when a false-alert requirement fails?"},{"route_id":"agentic_reviewed_detector_alert_metric_denominators","question":"Does a low false-alert rate per check mean few monitored streams will alert?"},{"route_id":"agentic_reviewed_epss_probability_and_asset_risk","question":"Does an EPSS score establish the risk to my deployed asset?"},{"route_id":"agentic_reviewed_epss_dated_and_bulk_retrieval","question":"How should a vulnerability workflow retrieve EPSS scores and preserve the decision date?"},{"route_id":"agentic_reviewed_advisory_source_age_and_score_meaning","question":"What should an enriched vulnerability answer preserve before a risk decision?"},{"route_id":"agentic_reviewed_detector_acceptance_and_alert_workload","question":"How should detection gains and alert workload be assessed together?"},{"route_id":"agentic_reviewed_agent_workflow_data_dependencies","question":"Should agents run in parallel when one task needs another agent's output?"},{"route_id":"agentic_reviewed_osv_query_package_and_version_identity","question":"How should an agent identify a package version in an OSV query?"},{"route_id":"agentic_reviewed_caep_revocation_session_scope","question":"Does a session-revocation event apply to every session belonging to a user?"},{"route_id":"agentic_reviewed_benchmark_reuse_and_new_input_claims","question":"Can a benchmark gain on repeated work support a claim about processing new inputs?"},{"route_id":"agentic_reviewed_requests_proxy_credential_exposure_conditions","question":"Does an affected Requests version prove that proxy credentials leaked?"},{"route_id":"agentic_reviewed_urllib3_cookie_redirect_branch_fixes","question":"Why does the urllib3 cookie-redirect advisory list two fix versions?"},{"route_id":"agentic_reviewed_log4j_component_and_historical_fix_scope","question":"Does a Log4j name match or a recorded 2.15.0 fix establish deployment safety?"},{"route_id":"agentic_reviewed_go_netip_toolchain_and_reachability","question":"Is checking third-party dependencies enough to assess Go CVE-2024-24790?"},{"route_id":"agentic_reviewed_changed_files_compromise_history_and_source_conflict","question":"Does upgrading changed-files establish that earlier workflow secrets were not exposed?"},{"route_id":"agentic_reviewed_lodash_template_package_specific_fix","question":"Does the lodash 4.17.21 fix also cover lodash.template and lodash-template?"},{"route_id":"agentic_reviewed_nextjs_middleware_authorization_hosting_scope","question":"Can an agent assess middleware authorization bypass from a Next.js version alone?"},{"route_id":"agentic_reviewed_axios_base_url_destination_boundary","question":"Does configuring a base URL stop an agent's HTTP tool from contacting other hosts?"},{"route_id":"agentic_reviewed_starlette_multipart_text_field_resource_limits","question":"Do file-upload limits alone cover the Starlette multipart denial-of-service advisory?"},{"route_id":"agentic_reviewed_jinja_untrusted_template_sandbox_boundary","question":"Does a Jinja sandbox establish that agent-supplied templates are safe to execute?"},{"route_id":"agentic_reviewed_pyjwt_algorithm_and_key_type_policy","question":"Is enabling every supported JWT algorithm safe for an agent's token-verification helper?"},{"route_id":"agentic_reviewed_jsonwebtoken_missing_key_verification_conditions","question":"Can a missing JWT verification key change how an unsigned token is handled?"},{"route_id":"agentic_reviewed_aiohttp_client_versus_static_server_scope","question":"Does an agent using aiohttp only as an HTTP client match the static-file traversal conditions?"},{"route_id":"agentic_reviewed_pillow_imagemath_input_control_scope","question":"Does accepting image uploads establish the input conditions of Pillow CVE-2023-50447?"},{"route_id":"agentic_reviewed_github_mcp_repository_access_trust","question":"How can an agent review repository access without enabling GitHub MCP writes?"},{"route_id":"agentic_reviewed_gitlab_mcp_project_permission_trust","question":"Does a GitLab MCP tool listing establish permission to change a project?"},{"route_id":"agentic_reviewed_atlassian_mcp_workspace_controls_trust","question":"How should an agent check whether an Atlassian connector can search documents without changing them?"},{"route_id":"agentic_reviewed_notion_mcp_content_sharing_trust","question":"Can an agent assume Notion content stays inside Notion when using its MCP connector?"},{"route_id":"agentic_reviewed_linear_mcp_workspace_identity_trust","question":"What should an agent check before using Linear MCP across more than one workspace?"},{"route_id":"agentic_reviewed_sentry_mcp_project_debugging_trust","question":"What should an agent check before sending project error data through Sentry MCP?"},{"route_id":"agentic_reviewed_stripe_mcp_account_action_trust","question":"Does connecting Stripe MCP authorize an agent to refund or change a live account?"},{"route_id":"agentic_reviewed_cloudflare_mcp_api_authority_trust","question":"Does a small Cloudflare MCP tool list imply narrow account permissions?"},{"route_id":"agentic_reviewed_supabase_mcp_database_access_trust","question":"What should an agent check before connecting a database project to Supabase MCP?"},{"route_id":"agentic_reviewed_playwright_mcp_browser_session_trust","question":"Does an isolated Playwright MCP browser session prevent privileged web actions or data disclosure?"},{"route_id":"agentic_reviewed_slack_mcp_search_posting_trust","question":"What should an agent check before searching private Slack content without posting messages?"},{"route_id":"agentic_reviewed_asana_mcp_workspace_action_trust","question":"Can an agent assume every Asana MCP change has a confirmation step or a read-only scope?"},{"route_id":"agentic_reviewed_hubspot_mcp_crm_disclosure_trust","question":"What should an agent check before treating a CRM connector's search results as complete or allowing publication?"},{"route_id":"agentic_reviewed_figma_mcp_design_transfer_trust","question":"Can an agent treat a design connector as read-only when it can also capture UI and write to canvas?"},{"route_id":"agentic_reviewed_vercel_mcp_team_deployment_trust","question":"What should an agent verify before using a deployment connector to inspect or change a team's project?"},{"route_id":"agentic_reviewed_aws_mcp_iam_authority_trust","question":"Do old MCP-specific deny actions still establish a read-only boundary for an AWS agent?"},{"route_id":"agentic_reviewed_azure_mcp_identity_deployment_trust","question":"Can an agent assume a locally running cloud connector is isolated from production or has limited authority?"},{"route_id":"agentic_reviewed_datadog_mcp_telemetry_completeness_trust","question":"Can an agent treat an observability connector's returned trace as complete or assume it cannot change monitoring?"},{"route_id":"agentic_reviewed_grafana_mcp_query_write_trust","question":"Does a read-only monitoring connector prevent every database query or disclosure?"},{"route_id":"agentic_reviewed_elastic_mcp_space_key_trust","question":"Can an agent assume a shared search connector isolates each user's permissions and project data?"},{"route_id":"agentic_reviewed_mcp_client_protocol_fallback","question":"Does connecting successfully prove that an MCP client used the required protocol version?"},{"route_id":"agentic_reviewed_adk_language_feature_evidence","question":"Can an agent use an ADK feature matrix as proof that a feature is supported in its chosen language?"},{"route_id":"agentic_reviewed_nist_critical_infrastructure_profile_status","question":"Does citing the NIST critical-infrastructure AI profile establish that a supplier completed a readiness assessment?"},{"route_id":"agentic_reviewed_mongodb_mcp_database_authority_trust","question":"Can an agent inspect MongoDB without receiving permission to change data or clusters?"},{"route_id":"agentic_reviewed_postman_mcp_region_toolset_trust","question":"Which Postman MCP configuration fits API discovery without granting unnecessary workspace changes?"},{"route_id":"agentic_reviewed_snowflake_mcp_role_tool_authority_trust","question":"Does permission to connect to Snowflake MCP also authorize every configured data tool?"},{"route_id":"agentic_reviewed_qdrant_mcp_memory_write_trust","question":"Can a retrieval agent search Qdrant without adding persistent memories?"},{"route_id":"agentic_reviewed_pinecone_developer_mcp_index_trust","question":"Can I give an agent Pinecone documentation access without exposing project data or index writes?"},{"route_id":"agentic_reviewed_clickhouse_mcp_write_optin_trust","question":"What evidence separates an analytical ClickHouse MCP session from one that may alter data?"},{"route_id":"agentic_reviewed_zapier_mcp_discovery_action_trust","question":"What should I check before a Zapier agent can discover tools and take actions across connected apps?"},{"route_id":"agentic_reviewed_docker_mcp_profile_credential_trust","question":"Does removing a Docker MCP server also revoke its credentials and eliminate its previous access?"},{"route_id":"agentic_reviewed_shopify_cart_mcp_purchase_boundary_trust","question":"Can a shopping agent prepare a Shopify cart without committing the buyer to payment?"},{"route_id":"agentic_reviewed_redis_mcp_acl_memory_trust","question":"What prevents a Redis agent from changing session memory while performing a read task?"},{"route_id":"agentic_reviewed_github_audit_export_evidence_check","question":"Does a GitHub audit export establish a complete history of repository activity?"},{"route_id":"agentic_reviewed_slack_export_plan_coverage_check","question":"Does a Slack workspace export contain private channels, direct messages and the files themselves?"},{"route_id":"agentic_reviewed_notion_ai_training_retention_check","question":"Does Notion AI not training on customer data mean no provider retains any of it?"},{"route_id":"agentic_reviewed_figma_ai_training_setting_check","question":"Can Figma AI be enabled while our team content is excluded from model training?"},{"route_id":"agentic_reviewed_atlassian_residency_data_scope_check","question":"Does pinning an Atlassian app to a region keep every account, integration and AI data flow there?"},{"route_id":"agentic_reviewed_supabase_backup_object_coverage_check","question":"Does a Supabase database backup also recover the uploaded files used by my application?"},{"route_id":"agentic_reviewed_vercel_audit_entitlement_evidence_check","question":"Does having Vercel deployment logs mean our plan provides administrative audit evidence?"},{"route_id":"agentic_reviewed_linear_scim_offboarding_evidence_check","question":"Does enabling Linear SCIM prove every former user and integration has lost access?"},{"route_id":"agentic_reviewed_stripe_webhook_delivery_evidence_check","question":"Does receiving a Stripe webhook prove that payment was verified and fulfilled exactly once?"},{"route_id":"agentic_reviewed_cloudflare_logpush_history_evidence_check","question":"Does enabling Cloudflare Logpush provide a complete searchable archive of past activity?"},{"route_id":"agentic_reviewed_review_database_agent_permission_evidence","question":"What evidence should I collect before connecting an agent to business databases?"},{"route_id":"agentic_reviewed_review_ai_training_and_residency_evidence","question":"What evidence separates no-training, retention and regional-hosting claims?"},{"route_id":"agentic_reviewed_review_audit_and_export_completeness","question":"What makes a supplier audit or export record sufficient for a claimed activity history?"},{"route_id":"agentic_reviewed_review_agent_action_and_payment_boundaries","question":"What distinguishes preparation, authorized action and verified payment in an agent workflow?"},{"route_id":"agentic_reviewed_apify_mcp_actor_execution_trust","question":"Can I let an agent discover Apify Actors without authorizing paid execution or storage access?"},{"route_id":"agentic_reviewed_firecrawl_mcp_endpoint_action_trust","question":"Does a Firecrawl search connection also allow browser interactions or saved login state?"},{"route_id":"agentic_reviewed_tavily_mcp_account_attribution_trust","question":"Does signing in to Tavily MCP prove that queries use the intended team API key?"},{"route_id":"agentic_reviewed_exa_mcp_research_billing_trust","question":"Can adding Exa authentication expose billable research beyond keyless search?"},{"route_id":"agentic_reviewed_brave_search_mcp_plan_result_trust","question":"Can I assume a Brave Search MCP response is a complete local-business or factual answer?"},{"route_id":"agentic_reviewed_browserbase_mcp_session_action_trust","question":"Can Browserbase MCP use a logged-in browser session to make changes on a website?"},{"route_id":"agentic_reviewed_n8n_instance_mcp_workflow_authority_trust","question":"Does connecting to n8n MCP only let an agent run a fixed workflow?"},{"route_id":"agentic_reviewed_semgrep_guardian_mcp_enforcement_trust","question":"Does installing Semgrep MCP prove every agent code change was scanned?"},{"route_id":"agentic_reviewed_snyk_mcp_folder_scan_execution_trust","question":"Can a Snyk dependency scan execute project tooling, even when the task is only a security review?"},{"route_id":"agentic_reviewed_pagerduty_hosted_mcp_incident_authority_trust","question":"Can I connect PagerDuty MCP for incident review without granting authority to change operations?"},{"route_id":"agentic_reviewed_github_actions_privileged_workflow_check","question":"Does a pull-request workflow prove external contributions cannot access privileged execution?"},{"route_id":"agentic_reviewed_gitlab_job_token_allowlist_permission_check","question":"Does a GitLab job-token allowlist grant the pipeline user access to another project?"},{"route_id":"agentic_reviewed_datadog_log_exclusion_retention_check","question":"Does excluding a Datadog log from an index mean it was deleted or never collected?"},{"route_id":"agentic_reviewed_elastic_role_union_access_check","question":"Does one restrictive Elasticsearch role prove a user cannot read other documents or fields?"},{"route_id":"agentic_reviewed_sentry_scrubbing_transmission_history_check","question":"Does enabling Sentry server-side scrubbing prove sensitive data never left the application or was removed historically?"},{"route_id":"agentic_reviewed_okta_service_app_scope_role_check","question":"Are OAuth scopes alone sufficient evidence of the authority granted to an Okta service app?"},{"route_id":"agentic_reviewed_auth0_log_retention_completeness_check","question":"Does an empty Auth0 tenant-log search establish that no authentication event occurred?"},{"route_id":"agentic_reviewed_onepassword_service_account_vault_check","question":"Does giving an agent a 1Password service account restrict it to the intended secrets?"},{"route_id":"agentic_reviewed_microsoft_graph_delegated_application_check","question":"Does a Microsoft Graph permission name mean the same access with and without a signed-in user?"},{"route_id":"agentic_reviewed_workspace_domain_delegation_impersonation_check","question":"Does Google Workspace domain-wide delegation give a service account unlimited direct access to user data?"},{"route_id":"agentic_reviewed_review_agent_research_spending_scope","question":"What should I verify before an agent uses paid web research tools?"},{"route_id":"agentic_reviewed_review_agent_workflow_and_scan_authority","question":"What separates tool availability from permission and proof of execution?"},{"route_id":"agentic_reviewed_review_log_absence_and_data_handling_claims","question":"Can missing logs or an enabled scrubber prove no data exposure?"},{"route_id":"agentic_reviewed_review_service_identity_effective_access","question":"What evidence establishes the actual data access of a service identity?"},{"route_id":"agentic_reviewed_airtable_mcp_base_and_draft_trust","question":"Can an agent update my Airtable records without activating an automation?"},{"route_id":"agentic_reviewed_box_mcp_content_sharing_trust","question":"Does connecting Box MCP give my agent only document-search access?"},{"route_id":"agentic_reviewed_miro_mcp_team_board_trust","question":"Can my agent use a Miro board from a different team after one connection?"},{"route_id":"agentic_reviewed_monday_mcp_graphql_action_trust","question":"Can a monday.com agent connection do more than read task boards?"},{"route_id":"agentic_reviewed_webflow_mcp_design_publish_trust","question":"Does keeping the Webflow Designer closed stop an agent from changing my site?"},{"route_id":"agentic_reviewed_canva_mcp_user_design_export_trust","question":"Can one Canva MCP authorisation stand in for every user of an AI application?"},{"route_id":"agentic_reviewed_intercom_mcp_region_note_trust","question":"Can an Intercom agent add a note when I only asked it to inspect a conversation?"},{"route_id":"agentic_reviewed_launchdarkly_mcp_flag_environment_trust","question":"How can I review a feature-flag agent without granting broad change authority?"},{"route_id":"agentic_reviewed_sanity_mcp_draft_release_trust","question":"Does creating a Sanity release through MCP schedule its publication?"},{"route_id":"agentic_reviewed_netlify_mcp_deploy_resource_trust","question":"Does adding Netlify MCP only give my agent deployment guidance?"},{"route_id":"agentic_reviewed_aws_cloudtrail_data_event_coverage_check","question":"Does an empty CloudTrail event history prove no application data was accessed?"},{"route_id":"agentic_reviewed_azure_activity_data_plane_coverage_check","question":"Does the Azure Activity Log show everything an application did inside a resource?"},{"route_id":"agentic_reviewed_google_cloud_data_access_logging_check","question":"Can a missing Google Cloud Data Access result mean the event was never logged?"},{"route_id":"agentic_reviewed_purview_audit_retention_license_check","question":"Does buying an audit licence preserve every existing Microsoft 365 audit record for longer?"},{"route_id":"agentic_reviewed_vault_audit_device_availability_check","question":"Does a working Vault server prove its secret-access audit trail is complete?"},{"route_id":"agentic_reviewed_anthropic_api_retention_exceptions_check","question":"Does an Anthropic API retention statement apply to every feature and model?"},{"route_id":"agentic_reviewed_bedrock_invocation_content_logging_check","question":"Can Bedrock invocation logging retain prompts even when I only want operational diagnostics?"},{"route_id":"agentic_reviewed_dropbox_file_residency_scope_check","question":"Does a Dropbox storage region prove every data category stays in that region?"},{"route_id":"agentic_reviewed_box_shared_link_audience_check","question":"Does sending a Box link only to a colleague keep the linked file private?"},{"route_id":"agentic_reviewed_twilio_restricted_key_action_check","question":"Does a restricted Twilio API key make an agent communication task read-only?"},{"route_id":"agentic_reviewed_review_collaboration_agent_read_write_scope","question":"Can a collaboration assistant read information without changing or sharing it?"},{"route_id":"agentic_reviewed_review_agent_draft_publication_evidence","question":"What proves an agent prepared, exported or published content?"},{"route_id":"agentic_reviewed_review_audit_capture_visibility_retention","question":"What makes an audit-history claim complete enough to review?"},{"route_id":"agentic_reviewed_review_service_data_lifecycle_action_claims","question":"What should I verify before sending data to an automated service?"},{"route_id":"agentic_reviewed_neon_mcp_grant_and_role_trust","question":"Does selecting a Neon tool category make a database agent read-only?"},{"route_id":"agentic_reviewed_prisma_mcp_cli_guardrail_trust","question":"Do Prisma CLI destructive-command safeguards also protect MCP operations?"},{"route_id":"agentic_reviewed_planetscale_mcp_branch_query_trust","question":"Do PlanetScale query safeguards make full-access agent queries harmless?"},{"route_id":"agentic_reviewed_aiven_mcp_readonly_exception_trust","question":"Can an Aiven connection marked read-only still expose selected write tools?"},{"route_id":"agentic_reviewed_databricks_mcp_gateway_legacy_trust","question":"Does every Databricks MCP call pass through Unity Gateway controls?"},{"route_id":"agentic_reviewed_motherduck_local_readonly_host_trust","question":"Does read-only mode isolate a self-hosted MotherDuck MCP server from its host?"},{"route_id":"agentic_reviewed_dbt_mcp_local_remote_capability_trust","question":"Can a dbt remote MCP connection replace every local development workflow?"},{"route_id":"agentic_reviewed_clickup_mcp_task_time_trust","question":"Does the absence of ClickUp deletion tools make an agent connection read-only?"},{"route_id":"agentic_reviewed_todoist_mcp_task_change_trust","question":"Does connecting Todoist for a daily review also expose task-changing tools?"},{"route_id":"agentic_reviewed_glean_mcp_tenant_tool_trust","question":"Does enabling Glean MCP mean any assistant can access all company knowledge?"},{"route_id":"agentic_reviewed_amplitude_mcp_identity_analytics_trust","question":"Does an Amplitude analytics connection only retrieve charts?"},{"route_id":"agentic_reviewed_mixpanel_mcp_verified_mode_trust","question":"Does Mixpanel Verified Mode exclude unverified entities from MCP results?"},{"route_id":"agentic_reviewed_posthog_mcp_ai_spend_action_trust","question":"Does free PostHog MCP access mean every operation has no additional usage cost?"},{"route_id":"agentic_reviewed_render_mcp_workspace_deploy_trust","question":"Does read-only SQL support mean Render MCP cannot change my application?"},{"route_id":"agentic_reviewed_railway_mcp_user_scope_confirmation_trust","question":"Can a Railway project token restrict an MCP agent to one project?"},{"route_id":"agentic_reviewed_firebase_mcp_cli_identity_core_trust","question":"Does limiting Firebase MCP feature groups remove every other capability?"},{"route_id":"agentic_reviewed_resend_mcp_draft_send_trust","question":"Does connecting Resend for support drafting authorise the agent to send email?"},{"route_id":"agentic_reviewed_cloudinary_mcp_environment_asset_trust","question":"Does enabling Cloudinary media analysis also define every available asset action?"},{"route_id":"agentic_reviewed_algolia_mcp_offering_scope_trust","question":"Does every Algolia MCP connection access and modify my search indices?"},{"route_id":"agentic_reviewed_paypal_mcp_sandbox_production_trust","question":"Does a successful PayPal MCP sandbox call establish a live merchant outcome?"},{"route_id":"agentic_reviewed_github_push_protection_bypass_evidence","question":"Does enabled push protection prove no secret can be pushed?"},{"route_id":"agentic_reviewed_gitlab_variable_masking_exposure_evidence","question":"Does masking a GitLab variable prevent a job from disclosing it?"},{"route_id":"agentic_reviewed_slack_scim_deactivation_erasure_evidence","question":"Does a successful Slack SCIM offboarding action prove user data was erased?"},{"route_id":"agentic_reviewed_atlassian_app_rule_exemption_evidence","question":"Does an Atlassian app access rule block every API data category?"},{"route_id":"agentic_reviewed_notion_parent_child_permission_evidence","question":"Does moving a Notion parent page to Private revoke every child-page grant?"},{"route_id":"agentic_reviewed_sharepoint_anyone_link_audience_evidence","question":"Does sending a SharePoint link to one recipient limit access to that person?"},{"route_id":"agentic_reviewed_google_drive_folder_inheritance_evidence","question":"Can a file-level sharing change remove access inherited from a Drive folder?"},{"route_id":"agentic_reviewed_dropbox_recovery_window_evidence","question":"Does a Dropbox subscription guarantee every deleted file can be restored?"},{"route_id":"agentic_reviewed_box_retention_trash_disposition_evidence","question":"Does removing a file from a Box folder prove permanent deletion under retention?"},{"route_id":"agentic_reviewed_s3_object_lock_version_boundary_evidence","question":"Does locking an S3 object version prevent new versions or delete markers?"},{"route_id":"agentic_reviewed_azure_blob_softdelete_scope_evidence","question":"Does blob soft delete also recover a deleted container or storage account?"},{"route_id":"agentic_reviewed_cloudflare_r2_hint_jurisdiction_evidence","question":"Does an R2 location hint guarantee a storage jurisdiction?"},{"route_id":"agentic_reviewed_neon_restore_history_root_evidence","question":"Does Neon instant restore apply to every branch and any past time?"},{"route_id":"agentic_reviewed_pinecone_namespace_routing_evidence","question":"Does one namespace per tenant prove an application always selects the authorised tenant?"},{"route_id":"agentic_reviewed_postgres_rls_role_exception_evidence","question":"Does enabling row-level security constrain every database identity?"},{"route_id":"agentic_reviewed_snowflake_query_history_coverage_evidence","question":"Does an empty Snowflake query-history result prove no query ran?"},{"route_id":"agentic_reviewed_mongodb_change_stream_resume_evidence","question":"Does storing a change-stream resume token guarantee recovery after any outage?"},{"route_id":"agentic_reviewed_databricks_mcp_direct_connection_evidence","question":"Does an MCP tool allowlist constrain identities that also have direct connection access?"},{"route_id":"agentic_reviewed_google_cloud_service_key_expiry_evidence","question":"Do user-managed Google Cloud service-account keys expire automatically by default?"},{"route_id":"agentic_reviewed_aws_last_accessed_attempt_evidence","question":"Does AWS last-accessed data prove a permission was successfully used?"},{"route_id":"agentic_reviewed_review_database_agent_readonly_control","question":"Does a read-only database agent also have host or management authority?"},{"route_id":"agentic_reviewed_review_analytics_agent_identity_cost_evidence","question":"What must I check before an analytics agent can query or change a product?"},{"route_id":"agentic_reviewed_review_work_assistant_task_versus_action","question":"Does a request to review work also authorise changing or sending it?"},{"route_id":"agentic_reviewed_review_platform_agent_target_completion","question":"What proves an agent acted in the intended project and environment?"},{"route_id":"agentic_reviewed_review_identity_control_proof","question":"What evidence is missing from a secret-control or offboarding claim?"},{"route_id":"agentic_reviewed_review_sharing_revocation_coverage","question":"What proves a sharing change removed the intended audience?"},{"route_id":"agentic_reviewed_review_storage_retention_recovery_claims","question":"Does a retention or recovery feature prove the file can be restored?"},{"route_id":"agentic_reviewed_review_data_isolation_history_proof","question":"What proves data isolation and complete activity history?"},{"route_id":"agentic_reviewed_pulumi_mcp_organisation_neo_trust","question":"Can a Pulumi inventory question start paid infrastructure work?"},{"route_id":"agentic_reviewed_terraform_mcp_toolset_operation_trust","question":"Does disabling destructive Terraform operations make MCP read-only?"},{"route_id":"agentic_reviewed_vault_mcp_secret_disclosure_beta_trust","question":"Does keeping secrets in Vault keep them out of an AI client?"},{"route_id":"agentic_reviewed_auth0_mcp_tenant_onboarding_trust","question":"Can an Auth0 onboarding assistant change the tenant and write local credentials?"},{"route_id":"agentic_reviewed_workos_mcp_role_environment_trust","question":"Does the WorkOS sandbox default prevent production changes?"},{"route_id":"agentic_reviewed_infisical_mcp_value_mask_tool_trust","question":"Does a read-only Infisical tool list keep secret values out of model context?"},{"route_id":"agentic_reviewed_bitwarden_mcp_vault_admin_trust","question":"Does protecting the master-password prompt prevent an agent from reading vault items?"},{"route_id":"agentic_reviewed_doppler_mcp_readonly_token_trust","question":"Do Doppler MCP scope flags enforce access beyond the connector?"},{"route_id":"agentic_reviewed_contentstack_mcp_product_group_trust","question":"Does connecting a content delivery tool also enable publishing or deployments?"},{"route_id":"agentic_reviewed_twilio_docs_mcp_execution_trust","question":"Can the Twilio documentation MCP send a message or read my account?"},{"route_id":"agentic_reviewed_contentful_mcp_protected_environment_trust","question":"Does the Contentful MCP environment guard block every possible write?"},{"route_id":"agentic_reviewed_strapi_mcp_admin_permission_trust","question":"Does Strapi MCP audit logging prove every content read was recorded?"},{"route_id":"agentic_reviewed_new_relic_mcp_auth_feature_trust","question":"Does a working New Relic API key provide all MCP analysis tools?"},{"route_id":"agentic_reviewed_circleci_mcp_hosted_cli_trust","question":"Can a CircleCI troubleshooting connector rerun or cancel builds?"},{"route_id":"agentic_reviewed_buildkite_mcp_version_evidence_trust","question":"Does a Buildkite MCP failure summary mean the job is finished and evidence is complete?"},{"route_id":"agentic_reviewed_harness_mcp_default_target_trust","question":"Do Harness MCP default organisation and project settings prevent other targets?"},{"route_id":"agentic_reviewed_kubernetes_secret_list_disclosure","question":"Can a Kubernetes inventory role reveal secrets without a get permission?"},{"route_id":"agentic_reviewed_iam_boundary_resource_grant_scope","question":"Does an IAM permissions boundary alone prove every access path is restricted?"},{"route_id":"agentic_reviewed_azure_resource_lock_data_plane","question":"Does an Azure read-only resource lock prevent changes to stored data?"},{"route_id":"agentic_reviewed_s3_presigned_url_lifetime_reuse","question":"Is an S3 presigned download a single-use link valid until its stated expiry?"},{"route_id":"agentic_reviewed_azure_sas_policy_revocation_scope","question":"Can one stored access policy revoke every Azure shared access signature?"},{"route_id":"agentic_reviewed_okta_session_token_revocation","question":"Does removing an Okta session prove that related API tokens were revoked?"},{"route_id":"agentic_reviewed_auth0_refresh_reuse_family_boundary","question":"Does refresh-token rotation let an agent safely retry any old refresh token?"},{"route_id":"agentic_reviewed_terraform_sensitive_state_persistence","question":"Does marking a Terraform value sensitive keep it out of state and plan files?"},{"route_id":"agentic_reviewed_pulumi_secret_runtime_disclosure","question":"Does Pulumi secret encryption prove a value cannot appear in application logs?"},{"route_id":"agentic_reviewed_vault_static_secret_lease_boundary","question":"Does a Vault lease policy prove that a copied static password expires?"},{"route_id":"agentic_reviewed_github_deployment_review_independence","question":"Does listing several required reviewers mean every reviewer must approve a deployment?"},{"route_id":"agentic_reviewed_codeql_build_mode_coverage","question":"Does a successful CodeQL run prove generated code and every dependency were analysed?"},{"route_id":"agentic_reviewed_fastly_soft_purge_removal_boundary","question":"Does a successful soft purge prove cached content can no longer be served?"},{"route_id":"agentic_reviewed_cloudflare_access_saas_session_boundary","question":"Does an Access application-session limit end the session inside a SaaS app?"},{"route_id":"agentic_reviewed_circleci_context_restriction_combination","question":"Does adding a group restriction prove a CI secret is limited to the intended project?"},{"route_id":"agentic_reviewed_gcp_kms_rotation_existing_data","question":"Does rotating a Cloud KMS key prove old encrypted data no longer depends on the old version?"},{"route_id":"agentic_reviewed_review_infrastructure_defaults_authority","question":"Does an infrastructure-agent default establish its permitted scope?"},{"route_id":"agentic_reviewed_review_secrets_agent_disclosure_controls","question":"Does a read-only secrets assistant keep credentials out of model context?"},{"route_id":"agentic_reviewed_review_content_docs_execution_boundary","question":"Does connecting a content tool authorise publication or account actions?"},{"route_id":"agentic_reviewed_review_operations_connection_result_proof","question":"Does a connected operations tool prove complete analysis and a final outcome?"},{"route_id":"agentic_reviewed_review_access_label_effective_permission","question":"Does a limiting access-control label prove the effective permission boundary?"},{"route_id":"agentic_reviewed_review_link_session_revocation_proof","question":"Does expiring or revoking one credential end every relevant access path?"},{"route_id":"agentic_reviewed_review_secret_lifecycle_claim_proof","question":"Does a secret-management feature prove non-disclosure and reliable expiry?"},{"route_id":"agentic_reviewed_review_success_signal_completion_proof","question":"Does a successful control signal prove the intended change is complete?"},{"route_id":"agentic_pack_repository_browser_trust_v1","question":"GitHub + Playwright access?"},{"route_id":"agentic_pack_agent_permissions_data_v1","question":"Notion + Slack permissions?"},{"route_id":"agentic_pack_evidence_boundary_audit_v1","question":"Audit and export evidence?"},{"route_id":"agentic_pack_nextjs_advisory_snapshot_v1","question":"Next.js: three dated advisory sources?"},{"route_id":"agentic_reviewed_chrome_devtools_browser_session_boundary","question":"What can a Chrome DevTools agent see or change in my browser session?"},{"route_id":"agentic_reviewed_microsoft_learn_public_documentation_boundary","question":"Can Microsoft Learn MCP verify how my Microsoft tenant is configured?"},{"route_id":"agentic_reviewed_huggingface_mcp_optional_tools_and_recipients","question":"Is Hugging Face MCP limited to searching public models and datasets?"},{"route_id":"agentic_reviewed_jfrog_mcp_artifact_administration_boundary","question":"Can an agent treat the JFrog MCP server as an artifact search-only integration?"},{"route_id":"agentic_reviewed_gitguardian_developer_mcp_secret_handling","question":"Does GitGuardian MCP automatically revoke secrets or fix code after detecting an incident?"},{"route_id":"agentic_reviewed_sonarqube_mcp_read_only_filter_and_variant","question":"Does connecting SonarQube MCP automatically restrict an agent to reading findings?"},{"route_id":"agentic_reviewed_dynatrace_mcp_query_authority_and_results","question":"Does asking Dynatrace MCP to generate DQL authorise it to execute that query?"},{"route_id":"agentic_reviewed_splunk_platform_mcp_v1_query_guardrails","question":"Does a Splunk MCP 1.0 search result establish complete log coverage?"},{"route_id":"agentic_reviewed_appdynamics_mcp_controller_events_identity","question":"Does every AppDynamics MCP HTTP call validate the supplied bearer identity with the Controller?"},{"route_id":"agentic_reviewed_azure_devops_mcp_remote_local_identity","question":"Can the same Azure DevOps MCP setup be assumed to work for every organisation and action?"},{"route_id":"agentic_reviewed_google_developer_knowledge_mcp_api_identity","question":"Does Google Developer Knowledge MCP inspect or change my Google Cloud resources?"},{"route_id":"agentic_reviewed_bigquery_mcp_query_writes_and_billing","question":"Does selecting a read-only BigQuery MCP tool eliminate cost and permission concerns?"},{"route_id":"agentic_reviewed_entra_cae_client_enforcement_boundary","question":"Does Continuous Access Evaluation guarantee immediate revocation in every application?"},{"route_id":"agentic_reviewed_workspace_third_party_scope_boundary","question":"Does marking a third-party app Trusted prove it has only the scopes needed for my task?"},{"route_id":"agentic_reviewed_aws_role_session_revocation_cutoff","question":"Does revoking active IAM role sessions prevent the role from being assumed again?"},{"route_id":"agentic_reviewed_github_app_installation_user_authority","question":"Does a GitHub App user token have the same effective access as its installation token?"},{"route_id":"agentic_reviewed_gitlab_token_rotation_continuity","question":"Does rotating a GitLab personal access token preserve uninterrupted access for existing consumers?"},{"route_id":"agentic_reviewed_snowflake_secondary_role_authority","question":"Does a restricted primary Snowflake role prove the session cannot use broader privileges?"},{"route_id":"agentic_reviewed_entra_retention_upgrade_history","question":"Does upgrading an Entra licence recover audit or sign-in records that already expired?"},{"route_id":"agentic_reviewed_notion_agent_audit_run_coverage","question":"Does the Notion audit log show everything a Custom Agent did during a run?"},{"route_id":"agentic_reviewed_gitlab_audit_stream_duplicate_events","question":"Can an audit receiver count each GitLab streamed event as a unique action?"},{"route_id":"agentic_reviewed_cloudtrail_digest_generation_validation","question":"Does enabling CloudTrail log-file integrity validation prove the delivered files were validated?"},{"route_id":"agentic_reviewed_gcp_log_sink_exclusion_scope","question":"Does excluding a log from one Cloud Logging sink prove Google never received or stored it elsewhere?"},{"route_id":"agentic_reviewed_s3_access_log_best_effort_boundary","question":"Can S3 server access logs prove that every request was recorded exactly once?"},{"route_id":"agentic_reviewed_gemini_paid_unpaid_data_terms","question":"Does a free Gemini API request always have the same data-use terms as an unbilled service?"},{"route_id":"agentic_reviewed_azure_ai_training_stateful_storage","question":"Does Azure AI not training foundation models on prompts mean every feature is stateless?"},{"route_id":"agentic_reviewed_cohere_encrypted_vault_metadata_boundary","question":"Does Model Vault Encrypted mean no information about a request is visible outside its enclave?"},{"route_id":"agentic_reviewed_mistral_zdr_stateless_feature_scope","question":"Does enabling Mistral zero data retention cover every model and stateful product?"},{"route_id":"agentic_reviewed_pinecone_project_deletion_dependencies","question":"Does a project deletion request prove every Pinecone resource was already removed?"},{"route_id":"agentic_reviewed_qdrant_tiered_tenant_shard_capacity","question":"Does tiered multitenancy give every small Qdrant tenant independent physical capacity?"},{"route_id":"agentic_reviewed_s3_replication_delete_version_boundary","question":"Does S3 replication keep every source and destination deletion state identical?"},{"route_id":"agentic_reviewed_gcs_soft_delete_retention_recovery","question":"Does Cloud Storage soft delete guarantee recovery of every deleted object and its access settings?"},{"route_id":"agentic_reviewed_atlas_continuous_restore_target_boundary","question":"Can an agent restore an Atlas cluster to a timestamp without affecting its current data?"},{"route_id":"agentic_reviewed_snowflake_failsafe_recovery_service_boundary","question":"Can an agent use Snowflake Fail-safe as routine extended historical-query access?"},{"route_id":"agentic_reviewed_github_deleted_repository_restore_scope","question":"Does restoring a deleted GitHub repository restore its original access configuration?"},{"route_id":"agentic_reviewed_cloudflare_d1_restore_in_place_boundary","question":"Can an agent use D1 Time Travel as a read-only way to inspect a past database?"},{"route_id":"agentic_reviewed_github_artifact_attestation_policy_boundary","question":"Does a valid GitHub artifact attestation prove the artifact is secure to run?"},{"route_id":"agentic_reviewed_docker_image_digest_update_boundary","question":"Does pinning a container image digest automatically keep its security fixes current?"},{"route_id":"agentic_reviewed_npm_provenance_not_malware_clearance","question":"Does npm provenance guarantee that a package contains no malicious code?"},{"route_id":"agentic_reviewed_pypi_trusted_publisher_identity_scope","question":"Does PyPI Trusted Publishing mean PyPI has reviewed and approved the package code?"},{"route_id":"agentic_reviewed_gitlab_immutable_tag_rule_lifecycle","question":"Does an immutable container-tag rule make every tag permanently undeletable?"},{"route_id":"agentic_reviewed_artifact_registry_cleanup_keep_dryrun","question":"Does configuring an Artifact Registry cleanup policy prove matching artifacts were deleted?"},{"route_id":"agentic_reviewed_aws_budget_alert_billing_delay","question":"Does an AWS budget notification threshold impose an immediate per-call spending cap?"},{"route_id":"agentic_reviewed_azure_budget_alert_not_consumption_stop","question":"Does creating an Azure Cost Management budget stop resources when the amount is reached?"},{"route_id":"agentic_reviewed_gcp_alerts_only_spend_cap_distinction","question":"Does every Google Cloud budget automatically pause services at its threshold?"},{"route_id":"agentic_reviewed_vercel_spend_pause_excluded_usage","question":"Does Vercel Spend Management stop every charge as soon as the spend amount is reached?"},{"route_id":"agentic_reviewed_bigquery_maximum_bytes_query_boundary","question":"Does maximum bytes billed cap every BigQuery charge for an agent workflow?"},{"route_id":"agentic_reviewed_snowflake_resource_monitor_serverless_boundary","question":"Does an account-level Snowflake resource monitor stop all serverless and cloud-services charges?"},{"route_id":"agentic_reviewed_review_browser_dynamic_tool_authority","question":"Which authority is needed before a search agent uses browser, Space or administrative tools?"},{"route_id":"agentic_reviewed_review_documentation_versus_resource_state","question":"Can a documentation MCP answer prove the configuration of my cloud tenant?"},{"route_id":"agentic_reviewed_review_observability_mcp_result_boundaries","question":"Does an authenticated observability tool prove complete evidence and caller identity for every query?"},{"route_id":"agentic_reviewed_review_tool_action_spending_entitlement","question":"Does tool access authorise remediation, project changes or billable queries?"},{"route_id":"agentic_reviewed_review_identity_effective_session_proof","question":"What evidence shows an agent identity has the intended scope and can be revoked?"},{"route_id":"agentic_reviewed_review_audit_evidence_completeness_integrity","question":"What does an audit export prove about completeness, uniqueness and integrity?"},{"route_id":"agentic_reviewed_review_ai_data_handling_scope","question":"What evidence distinguishes no training, no retention, encryption and deletion?"},{"route_id":"agentic_reviewed_review_recovery_object_access_readiness","question":"Does recovered data mean the service, permissions and current state are restored?"},{"route_id":"agentic_reviewed_review_artifact_provenance_lifecycle","question":"Does artifact provenance or immutability establish safe and current software?"},{"route_id":"agentic_reviewed_review_agent_budget_enforcement_scope","question":"Which budget controls actually constrain an agent workflow and which only report spend?"},{"route_id":"agentic_reviewed_salesforce_hosted_mcp_user_authority","question":"Can a Salesforce MCP connection grant an agent unrestricted or unattended access?"},{"route_id":"agentic_reviewed_okta_mcp_scope_loading_admin_authority","question":"Does the Okta MCP server expose only directory reads?"},{"route_id":"agentic_reviewed_confluent_managed_mcp_confirmation_boundary","question":"Can an agent assume Confluent MCP cannot change streaming resources?"},{"route_id":"agentic_reviewed_couchbase_mcp_readonly_effective_config","question":"Does Couchbase MCP always allow an agent to modify documents?"},{"route_id":"agentic_reviewed_dremio_mcp_variant_mock_evidence","question":"Does a successful Dremio MCP demonstration prove access to real project data?"},{"route_id":"agentic_reviewed_oracle_sqlcl_mcp_command_database_boundary","question":"Does SQLcl MCP restrict level 4 prove that an Oracle connection is read-only?"},{"route_id":"agentic_reviewed_langfuse_mcp_project_readwrite_boundary","question":"Is the Langfuse MCP connection a public documentation-only tool?"},{"route_id":"agentic_reviewed_langsmith_remote_mcp_evaluation_authority","question":"Can a LangSmith MCP agent inspect traces without also being authorised to run evaluations?"},{"route_id":"agentic_reviewed_port_mcp_readonly_and_connector_scope","question":"Is Port MCP automatically read-only when added from an IDE?"},{"route_id":"agentic_reviewed_kong_konnect_mcp_debug_publishing_authority","question":"Is Kong Konnect MCP limited to reading gateway configuration?"},{"route_id":"agentic_reviewed_zoom_mcp_product_scope_content_boundary","question":"Does connecting Zoom MCP give an agent only meeting search?"},{"route_id":"agentic_reviewed_turso_mcp_oauth_database_management","question":"Does Turso MCP OAuth mean an agent can only query a database?"},{"route_id":"agentic_reviewed_snowflake_external_access_destination_grants","question":"Does a Snowflake function with external access have unrestricted internet access?"},{"route_id":"agentic_reviewed_databricks_catalog_workspace_binding_grants","question":"Does a SELECT grant prove an agent can access a catalog from any Databricks workspace?"},{"route_id":"agentic_reviewed_bigquery_authorized_view_data_scope","question":"Does a BigQuery authorized view require giving the reader direct access to source tables?"},{"route_id":"agentic_reviewed_redshift_rls_cross_database_exceptions","question":"Can an agent assume a Redshift RLS policy follows every cross-database or shared-data access path?"},{"route_id":"agentic_reviewed_aws_iam_policy_change_propagation","question":"Does an accepted IAM policy update prove the new permission is effective everywhere immediately?"},{"route_id":"agentic_reviewed_entra_pim_eligibility_active_authority","question":"Does an eligible PIM assignment mean an agent's user already has the privileged role?"},{"route_id":"agentic_reviewed_gcp_workload_federation_attribute_scope","question":"Does trusting an external identity provider let every identity from it access Google Cloud?"},{"route_id":"agentic_reviewed_github_pat_sso_authorization_lifecycle","question":"Does possessing a GitHub personal token prove it can access an SSO-linked organization?"},{"route_id":"agentic_reviewed_github_ephemeral_runner_disposal_evidence","question":"Does an ephemeral self-hosted runner registration prove the underlying machine was wiped?"},{"route_id":"agentic_reviewed_gitlab_runner_executor_trust_boundary","question":"Does running a GitLab job in Docker establish isolation from the runner host?"},{"route_id":"agentic_reviewed_circleci_cache_first_writer_reproducibility","question":"Does an immutable CircleCI cache prove a build used the correct dependencies?"},{"route_id":"agentic_reviewed_buildkite_local_hook_enforcement_boundary","question":"Does an agent-wide Buildkite hook alone enforce the same security policy for every repository?"},{"route_id":"agentic_reviewed_notion_export_coverage_not_restoration","question":"Does a Notion workspace export prove that the whole workspace can be restored?"},{"route_id":"agentic_reviewed_airtable_csv_attachment_exit_boundary","question":"Does an Airtable CSV export preserve everything needed to leave the service?"},{"route_id":"agentic_reviewed_jira_backup_excluded_app_automation_data","question":"Does a Jira Cloud backup include third-party app data and automation configuration?"},{"route_id":"agentic_reviewed_confluence_export_format_coverage","question":"Can a Confluence PDF or HTML export stand in for a complete space backup?"},{"route_id":"agentic_reviewed_s3_vpc_endpoint_bucket_policy_evidence","question":"Does creating an S3 VPC endpoint prove the bucket can only be reached through it?"},{"route_id":"agentic_reviewed_gcp_service_perimeter_iam_complement","question":"Does a Google Cloud service perimeter replace resource permissions?"},{"route_id":"agentic_reviewed_azure_private_endpoint_public_access_evidence","question":"Does adding an Azure Storage private endpoint automatically disable public network access?"},{"route_id":"agentic_reviewed_snowflake_network_policy_activation_scope","question":"Does creating a Snowflake network rule make it an enforced account restriction?"},{"route_id":"agentic_reviewed_langfuse_trace_deletion_completion","question":"Does a Langfuse trace deletion response prove all related personal data is gone?"},{"route_id":"agentic_reviewed_langsmith_public_trace_audience","question":"Does a read-only LangSmith trace link keep its content restricted to account members?"},{"route_id":"agentic_reviewed_datadog_audit_retention_archive_separation","question":"Does enabling Datadog Audit Trail guarantee indefinite searchable audit history?"},{"route_id":"agentic_reviewed_sentry_dropped_event_coverage_boundary","question":"Does an empty Sentry event search prove that no error occurred?"},{"route_id":"agentic_reviewed_kubernetes_projected_token_audience_lifetime","question":"Can an agent reuse a projected Kubernetes service-account token as a permanent general API credential?"},{"route_id":"agentic_reviewed_github_app_private_key_rotation_lifecycle","question":"Does generating a new GitHub App private key automatically retire the old one?"},{"route_id":"agentic_reviewed_vault_wrapping_token_secret_lifetime","question":"Does a short-lived Vault wrapping token make the underlying secret expire at the same time?"},{"route_id":"agentic_reviewed_gcp_secret_rotation_notification_action","question":"Does configuring a Secret Manager rotation schedule replace the credential and update every application?"},{"route_id":"agentic_reviewed_review_enterprise_agent_effective_identity","question":"What proves the identity and permissions of an enterprise agent connection?"},{"route_id":"agentic_reviewed_review_database_mcp_readonly_proof","question":"What evidence proves a database MCP workflow is read-only?"},{"route_id":"agentic_reviewed_review_operational_tools_confirmation_disclosure","question":"Does connecting an operational MCP tool authorise changes or content publication?"},{"route_id":"agentic_reviewed_review_observability_agent_write_cost","question":"Can an observability agent inspect traces without authority to publish prompts or run experiments?"},{"route_id":"agentic_reviewed_review_data_platform_access_path","question":"Does a data-platform access control cover every execution and sharing path?"},{"route_id":"agentic_reviewed_review_identity_state_before_action","question":"What identity evidence is needed immediately before a privileged agent action?"},{"route_id":"agentic_reviewed_review_ci_execution_reuse_evidence","question":"What evidence supports isolation and reproducibility in an agent-triggered CI job?"},{"route_id":"agentic_reviewed_review_saas_export_exit_completeness","question":"Does a SaaS export provide everything required for migration or recovery?"},{"route_id":"agentic_reviewed_review_private_connectivity_enforcement","question":"Does private connectivity prove that public and unauthorized access are blocked?"},{"route_id":"agentic_reviewed_review_telemetry_evidence_lifecycle","question":"What evidence is missing when a trace is shared, deleted, retained or dropped?"},{"route_id":"agentic_reviewed_review_credential_lifecycle_completion","question":"What proves a credential handoff or rotation is complete?"},{"route_id":"agentic_reviewed_airbyte_mcp_connector_identity_boundary","question":"Does an Airbyte agent read upstream data as the signed-in person?"},{"route_id":"agentic_reviewed_fivetran_management_mcp_scope_confirmation","question":"Does a Fivetran MCP confirmation warning enforce approval?"},{"route_id":"agentic_reviewed_fivetran_context_mcp_warehouse_query_role","question":"Does Fivetran Agent Context query with each user's warehouse permissions?"},{"route_id":"agentic_reviewed_prefect_mcp_readonly_client_capabilities","question":"Does read-only Prefect MCP make the whole agent read-only?"},{"route_id":"agentic_reviewed_fabric_core_mcp_resource_management_scope","question":"Is Fabric Core MCP only a data-query connection?"},{"route_id":"agentic_reviewed_kestra_flow_mcp_authentication_execution","question":"Do read-only annotations prevent a Kestra flow from changing systems?"},{"route_id":"agentic_reviewed_retool_mcp_building_query_admin_scope","question":"Does connecting Retool MCP only expose app previews?"},{"route_id":"agentic_reviewed_dagster_plus_mcp_region_role_boundary","question":"Does installing the Dagster plugin establish the correct deployment access?"},{"route_id":"agentic_reviewed_sqs_visibility_not_completion_proof","question":"Does an SQS visibility timeout prove a task was processed once?"},{"route_id":"agentic_reviewed_sqs_fifo_deduplication_business_effect","question":"Does FIFO deduplication prevent every duplicate business action?"},{"route_id":"agentic_reviewed_eventbridge_retry_exhaustion_recovery","question":"Does an EventBridge rule guarantee eventual delivery to its target?"},{"route_id":"agentic_reviewed_lambda_async_duplicate_expiry_boundary","question":"Does successful asynchronous Lambda invocation prove the function completed?"},{"route_id":"agentic_reviewed_step_functions_redrive_original_version","question":"Does redriving a failed workflow use the newly deployed fix?"},{"route_id":"agentic_reviewed_dynamodb_ttl_expiry_not_erasure","question":"Does an expired DynamoDB TTL make a record immediately unavailable?"},{"route_id":"agentic_reviewed_s3_lifecycle_billing_not_deletion_proof","question":"Does storage billing stopping prove an S3 object has already been deleted?"},{"route_id":"agentic_reviewed_pubsub_exactly_once_ack_region_boundary","question":"Does Pub/Sub exactly-once delivery cover every subscription and external action?"},{"route_id":"agentic_reviewed_cloud_tasks_name_versus_handler_completion","question":"Does assigning a Cloud Tasks name make the handler operation exactly-once?"},{"route_id":"agentic_reviewed_bigquery_deletion_recovery_window","question":"Does deleting a BigQuery table immediately remove all retained history?"},{"route_id":"agentic_reviewed_secret_manager_delayed_destruction_state","question":"Does a destroy request always mean secret material is already irrecoverable?"},{"route_id":"agentic_reviewed_service_bus_message_id_dedup_window","question":"Does a successful Service Bus send prove a new message was enqueued?"},{"route_id":"agentic_reviewed_event_grid_order_retry_deadletter_boundary","question":"Does Event Grid guarantee ordered delivery until a subscriber succeeds?"},{"route_id":"agentic_reviewed_cosmos_ttl_query_hiding_deletion_delay","question":"Does an expired Cosmos DB item disappear physically as soon as queries stop returning it?"},{"route_id":"agentic_reviewed_key_vault_recovery_not_complete_restoration","question":"Does recovering a Key Vault restore every surrounding integration?"},{"route_id":"agentic_reviewed_github_actions_concurrency_not_all_runs","question":"Does a concurrency group guarantee every queued workflow will run?"},{"route_id":"agentic_reviewed_github_webhook_failure_no_automatic_redelivery","question":"Does GitHub automatically retry every failed webhook delivery?"},{"route_id":"agentic_reviewed_gitlab_protected_tag_overlap_permission","question":"Does a protected GitLab tag mean nobody can create or delete a matching release tag?"},{"route_id":"agentic_reviewed_kubernetes_networkpolicy_enforcement_evidence","question":"Does a Kubernetes NetworkPolicy object prove an agent pod cannot reach the internet?"},{"route_id":"agentic_reviewed_kubernetes_cronjob_idempotency_concurrency","question":"Does a Kubernetes CronJob guarantee exactly one run for each scheduled time?"},{"route_id":"agentic_reviewed_dbt_semantic_layer_token_warehouse_identity","question":"Does each Semantic Layer service token use an independent warehouse identity?"},{"route_id":"agentic_reviewed_databricks_vacuum_history_and_cache_boundary","question":"Does keeping Delta history guarantee old table versions remain queryable after VACUUM?"},{"route_id":"agentic_reviewed_slack_token_rotation_refresh_continuity","question":"Does enabling Slack token rotation provide uninterrupted access without further state handling?"},{"route_id":"agentic_reviewed_notion_webhook_not_complete_content_snapshot","question":"Does a Notion webhook contain the full page content as it existed when the event occurred?"},{"route_id":"agentic_reviewed_review_data_pipeline_agent_authority","question":"Which data-pipeline agent connection fits a diagnosis-only task?"},{"route_id":"agentic_reviewed_review_analytics_agent_identity_mapping","question":"Which identity controls an analytical agent's access to warehouse data?"},{"route_id":"agentic_reviewed_review_workflow_tools_action_approval","question":"What must be checked before an agent invokes a workflow or app-building tool?"},{"route_id":"agentic_reviewed_review_queue_exactly_once_business_boundary","question":"Does a queue's exactly-once or deduplication feature prove one business effect?"},{"route_id":"agentic_reviewed_review_event_delivery_exhaustion","question":"Who recovers an integration when event delivery fails or retries are exhausted?"},{"route_id":"agentic_reviewed_review_data_expiry_erasure_evidence","question":"What evidence distinguishes data expiry from completed erasure?"},{"route_id":"agentic_reviewed_review_recovery_version_dependencies","question":"Does recovery restore the intended version and all service dependencies?"},{"route_id":"agentic_reviewed_review_scheduled_work_completion","question":"Does serialised or scheduled automation guarantee every requested operation completes?"},{"route_id":"agentic_reviewed_falcon_mcp_tool_filter_http_authentication","question":"Does selecting Falcon MCP modules prove the connection is read-only and authenticated?"},{"route_id":"agentic_reviewed_checkmarx_mcp_license_scan_authority","question":"Does Checkmarx MCP access authorize every scanner and remediation operation?"},{"route_id":"agentic_reviewed_socket_mcp_package_score_not_deployment_assessment","question":"Does a Socket MCP dependency score establish that my application is safe to deploy?"},{"route_id":"agentic_reviewed_endor_mcp_local_process_cloud_findings","question":"Does a local Endor Labs MCP process keep analysis offline or prove reachability?"},{"route_id":"agentic_reviewed_cloudwatch_masking_ingestion_unmask_boundary","question":"Does enabling CloudWatch masking hide sensitive content in every stored log?"},{"route_id":"agentic_reviewed_datadog_sensitive_scanner_redaction_location","question":"Does Datadog sensitive-data scanning prove raw content never leaves our environment?"},{"route_id":"agentic_reviewed_snowflake_masking_context_not_source_erasure","question":"Does Snowflake Dynamic Data Masking replace the underlying sensitive values?"},{"route_id":"agentic_reviewed_bigquery_masking_role_change_cache_boundary","question":"Does replacing raw-data access with Masked Reader immediately hide earlier query results?"},{"route_id":"agentic_reviewed_github_codeowners_matching_not_required_approval","question":"Does a CODEOWNERS file prove the right owner must approve every change?"},{"route_id":"agentic_reviewed_github_merge_queue_check_target_identity","question":"Does a green pull-request check prove the queued merge combination passed?"},{"route_id":"agentic_reviewed_gitlab_approval_committer_and_revision_boundary","question":"Does a GitLab approval count prove independent review of the latest revision?"},{"route_id":"agentic_reviewed_gitlab_deployment_approval_not_job_completion","question":"Does an approved GitLab deployment mean the deployment job has run?"},{"route_id":"agentic_reviewed_kms_disable_cached_data_key_boundary","question":"Does disabling a KMS key immediately stop every read of the protected data?"},{"route_id":"agentic_reviewed_secrets_manager_rotation_external_system_boundary","question":"Does enabling rotation for a non-database secret prove the external credential changed?"},{"route_id":"agentic_reviewed_ssm_parameter_history_current_value_access","question":"Does denying GetParameter prevent an agent from reading the current parameter value?"},{"route_id":"agentic_reviewed_iam_policy_validation_not_effective_access_test","question":"Does a clean IAM policy-validation result prove the deployed role has only intended access?"},{"route_id":"agentic_reviewed_teleport_mcp_upstream_oauth_separate_authority","question":"Does a Teleport login also authorize the upstream MCP service?"},{"route_id":"agentic_reviewed_kubernetes_admission_failure_policy_not_denial_bypass","question":"Does an unavailable admission webhook always stop a Kubernetes change?"},{"route_id":"agentic_reviewed_kubernetes_audit_rule_order_body_coverage","question":"Does enabling Kubernetes auditing prove every request body is retained?"},{"route_id":"agentic_reviewed_azure_policy_assignment_enforcement_mode_boundary","question":"Does an assigned Azure policy prove non-compliant changes are blocked?"},{"route_id":"agentic_reviewed_gcp_organization_policy_existing_resource_boundary","question":"Does a new Google organization policy automatically correct existing violations?"},{"route_id":"agentic_reviewed_aws_config_daily_recording_not_every_transition","question":"Does AWS Config daily recording preserve every resource configuration change?"},{"route_id":"agentic_reviewed_s3_block_public_access_retained_policy_boundary","question":"Does enabling S3 Block Public Access remove the old public grants?"},{"route_id":"agentic_reviewed_aws_backup_restore_completion_validation_boundary","question":"Does a completed AWS Backup restore test prove the application works?"},{"route_id":"agentic_reviewed_rds_instance_deletion_retained_snapshots","question":"Does deleting an RDS instance also remove every recoverable database copy?"},{"route_id":"agentic_reviewed_google_vault_user_licence_preservation_boundary","question":"Does a Vault retention arrangement survive deletion of the user or required licence?"},{"route_id":"agentic_reviewed_purview_retention_deletion_policy_precedence","question":"Does a short deletion policy prove Microsoft 365 content will be permanently removed on that date?"},{"route_id":"agentic_reviewed_elastic_ilm_rollover_age_retention_boundary","question":"Does an ILM minimum age mean each log is deleted that long after its event timestamp?"},{"route_id":"agentic_reviewed_cosign_verification_expected_signer_digest","question":"Does any valid Cosign signature establish the supplier artifact we intended to accept?"},{"route_id":"agentic_reviewed_slsa_provenance_expected_build_parameters","question":"Does possessing SLSA provenance prove the package came from the expected build?"},{"route_id":"agentic_reviewed_dependabot_no_alert_supported_coverage_boundary","question":"Does having no Dependabot alerts prove all dependencies are free of known issues?"},{"route_id":"agentic_reviewed_npm_ignore_scripts_explicit_command_boundary","question":"Does ignore-scripts make every npm operation safe from project script execution?"},{"route_id":"agentic_reviewed_review_security_operations_connector_admission","question":"What evidence is needed before connecting an agent to a security platform?"},{"route_id":"agentic_reviewed_review_dependency_tool_result_coverage","question":"What can a dependency tool result establish before accepting a software supplier?"},{"route_id":"agentic_reviewed_review_sensitive_data_mask_placement","question":"Does masking prevent sensitive data from reaching a provider or an authorized reader?"},{"route_id":"agentic_reviewed_review_release_approval_exact_revision","question":"Does a recorded approval establish independent acceptance of the release that ran?"},{"route_id":"agentic_reviewed_review_credential_control_effective_access","question":"What proves an agent credential change actually changes effective access?"},{"route_id":"agentic_reviewed_review_policy_assignment_versus_enforcement","question":"Does a valid or assigned policy prove a supplier control is enforced?"},{"route_id":"agentic_reviewed_review_audit_event_and_transition_coverage","question":"Does an audit or inventory record provide the complete change evidence we need?"},{"route_id":"agentic_reviewed_review_recovery_retention_supplier_exit","question":"What evidence distinguishes retained copies from proven recovery or completed deletion?"},{"route_id":"agentic_reviewed_review_signed_software_agent_execution","question":"Does signed build evidence authorize an agent to execute the package?"},{"route_id":"agentic_reviewed_tenable_hexa_mcp_scan_authority_data_egress","question":"Does Tenable Hexa AI MCP only read vulnerability findings?"},{"route_id":"agentic_reviewed_aikido_mcp_scan_input_scope_and_client_authority","question":"Does connecting Aikido MCP prove all generated code and repository issues were checked?"},{"route_id":"agentic_reviewed_snyk_ignore_scope_expiry_not_remediation","question":"Does a Snyk ignore rule establish that a vulnerability was fixed?"},{"route_id":"agentic_reviewed_sonarqube_token_type_and_effective_user_rights","question":"Does a SonarQube token used by a scanner have only analysis permissions?"},{"route_id":"agentic_reviewed_gitguardian_revocation_validity_and_incident_state","question":"Does a resolved GitGuardian incident prove the exposed credential was revoked?"},{"route_id":"agentic_reviewed_github_secret_validity_issuer_disclosure_and_unknown_state","question":"Does an unknown GitHub secret-validity result mean the credential is inactive?"},{"route_id":"agentic_reviewed_trivy_offline_scan_network_and_database_boundary","question":"Does Trivy --offline-scan guarantee no network access and current vulnerability data?"},{"route_id":"agentic_reviewed_semgrep_exclusions_versus_ignored_finding_coverage","question":"Does an empty Semgrep findings list prove every relevant file was scanned?"},{"route_id":"agentic_reviewed_otel_redaction_allowlists_and_exception_precedence","question":"Does configuring the OpenTelemetry redaction processor prove every sensitive attribute is masked?"},{"route_id":"agentic_reviewed_vector_remap_error_path_original_event_disclosure","question":"Can a Vector remap error send the original sensitive event downstream?"},{"route_id":"agentic_reviewed_elastic_redact_licence_skip_and_failure_policy","question":"Does a successful ingest pipeline prove the redact processor changed the document?"},{"route_id":"agentic_reviewed_presidio_detection_coverage_not_complete_anonymization","question":"Does a clean Presidio result prove a document contains no sensitive information?"},{"route_id":"agentic_reviewed_macie_automated_discovery_sampling_not_exhaustive_scan","question":"Does Macie automated discovery prove every object in an S3 bucket was inspected?"},{"route_id":"agentic_reviewed_google_pseudonymization_reversibility_and_key_boundary","question":"Does tokenizing data with Sensitive Data Protection permanently erase the original meaning?"},{"route_id":"agentic_reviewed_purview_dlp_simulation_not_enforced_blocking","question":"Does a Purview DLP simulation alert prove the attempted transfer was blocked?"},{"route_id":"agentic_reviewed_snowflake_tag_mask_datatype_and_direct_policy_precedence","question":"Does assigning a masking tag prove its policy governs every tagged column?"},{"route_id":"agentic_reviewed_github_required_check_skipped_versus_executed","question":"Does a passing required GitHub check prove its test job actually ran?"},{"route_id":"agentic_reviewed_github_reusable_workflow_token_permission_ceiling","question":"Can a reusable GitHub workflow grant itself broader GITHUB_TOKEN permissions than its caller?"},{"route_id":"agentic_reviewed_github_nested_workflow_secret_forwarding_boundary","question":"Does passing secrets to one reusable GitHub workflow automatically pass them to every nested workflow?"},{"route_id":"agentic_reviewed_github_oidc_reusable_workflow_caller_and_callee_identity","question":"Does a valid GitHub OIDC token prove an approved reusable deployment workflow ran?"},{"route_id":"agentic_reviewed_github_upload_artifact_overwrite_new_object_identity","question":"Does reusing an artifact name mean a later download contains the same approved build?"},{"route_id":"agentic_reviewed_gitlab_manual_job_optional_versus_blocking","question":"Does a manual GitLab job necessarily block release until someone approves it?"},{"route_id":"agentic_reviewed_gitlab_needs_project_latest_successful_not_current_pipeline","question":"Does GitLab needs:project wait for the current upstream pipeline before downloading its artifact?"},{"route_id":"agentic_reviewed_docker_provenance_mode_build_argument_disclosure","question":"Does publishing a Docker provenance attestation keep build arguments private?"},{"route_id":"agentic_reviewed_review_security_scan_credential_and_input_authority","question":"What should an agent verify before scanning private code or security assets?"},{"route_id":"agentic_reviewed_review_security_clean_result_and_remediation_evidence","question":"Does a clean security report prove full coverage and completed remediation?"},{"route_id":"agentic_reviewed_review_redaction_error_and_exception_paths","question":"Can sensitive data survive redaction through exceptions or processing failures?"},{"route_id":"agentic_reviewed_review_data_control_coverage_and_reversibility","question":"What evidence distinguishes data discovery, reversible masking and enforced prevention?"},{"route_id":"agentic_reviewed_review_workflow_credential_chain_and_release_gates","question":"Does a reusable release workflow prove approved identity and mandatory checks?"},{"route_id":"agentic_reviewed_review_approved_artifact_retrieval_and_provenance","question":"How can an agent check that a retrieved build is the artifact that was approved?"},{"route_id":"agentic_pack_code_scanner_trust_v1","question":"Code-scanner access and findings?"},{"route_id":"agentic_pack_telemetry_redaction_v1","question":"Telemetry redaction and data flow?"},{"route_id":"agentic_pack_github_release_acceptance_v1","question":"GitHub release acceptance evidence?"},{"route_id":"agentic_pack_agent_integration_v1","question":"Check a GitHub + Playwright integration plan?"},{"route_id":"agentic_pack_tool_admission_v1","question":"Check declared tool permissions, authority and changes before integration?"},{"route_id":"agentic_pack_audit_coverage_v1","question":"Check whether a declared event inventory can explain an agent action?"},{"route_id":"agentic_reviewed_attio_mcp_crm_writes_and_user_authority","question":"Can an Attio research assistant also change CRM records?"},{"route_id":"agentic_reviewed_front_mcp_drafting_versus_sending_authority","question":"Can I connect a Front drafting assistant without allowing it to send?"},{"route_id":"agentic_reviewed_onepassword_saas_mcp_remote_local_write_boundary","question":"Are the remote and local SaaS Manager MCP connections equally read-only?"},{"route_id":"agentic_reviewed_nylas_mcp_mail_calendar_grant_and_action_scope","question":"Does connecting Nylas MCP give an agent only mailbox-reading access?"},{"route_id":"agentic_reviewed_drive_incomplete_search_not_document_absence","question":"Can an agent treat no Google Drive search match as proof a document does not exist?"},{"route_id":"agentic_reviewed_notion_search_not_complete_workspace_inventory","question":"Can a Notion search export establish every document an integration can access?"},{"route_id":"agentic_reviewed_slack_real_time_search_user_context_and_file_download","question":"Can a Slack bot token search private conversations from an external assistant?"},{"route_id":"agentic_reviewed_graph_selected_consent_resource_grant_token","question":"Does consenting to Sites.Selected give an application access to a SharePoint site?"},{"route_id":"agentic_reviewed_azure_search_security_filter_not_authentication","question":"Does an Azure AI Search security filter authenticate the user named in the filter?"},{"route_id":"agentic_reviewed_bedrock_crawler_source_permissions_versus_retrieve","question":"Does a Bedrock web-crawler knowledge base preserve the source site's access controls?"},{"route_id":"agentic_reviewed_bedrock_sync_completion_and_deleted_source_data","question":"Does deleting a source file immediately remove it from a Bedrock managed knowledge base?"},{"route_id":"agentic_reviewed_glean_loopio_deletion_and_permission_sync_window","question":"Does removing a Loopio user or project immediately remove it from Glean search?"},{"route_id":"agentic_reviewed_graph_sendmail_accepted_not_delivered","question":"Does a successful Microsoft Graph sendMail response prove the recipient received the message?"},{"route_id":"agentic_reviewed_gmail_send_scope_versus_mailbox_read","question":"Does an agent that only sends Gmail messages need permission to read and delete the mailbox?"},{"route_id":"agentic_reviewed_google_calendar_event_versus_conference_readiness","question":"Does creating a Calendar event prove its meeting link is ready?"},{"route_id":"agentic_reviewed_zendesk_safe_update_and_stale_ticket_state","question":"Can an agent overwrite a newer Zendesk ticket update using an old preview?"},{"route_id":"agentic_reviewed_salesforce_composite_http_success_and_subrequest_rollback","question":"Does HTTP 200 from Salesforce Composite prove every requested change committed?"},{"route_id":"agentic_reviewed_graph_lifecycle_events_and_missed_change_recovery","question":"Does restoring a Microsoft Graph subscription recover every notification missed during an outage?"},{"route_id":"agentic_reviewed_gmail_history_expired_cursor_full_sync","question":"Does a Gmail history 404 mean there were no mailbox changes?"},{"route_id":"agentic_reviewed_twilio_queued_sent_delivered_read_status_boundary","question":"Does a queued or delivered Twilio message prove that a customer read it?"},{"route_id":"agentic_reviewed_gcp_disabled_key_and_existing_short_lived_credentials","question":"Does disabling a Google service-account key revoke tokens already issued from it?"},{"route_id":"agentic_reviewed_github_oauth_requested_granted_normalized_scopes","question":"Can an agent infer GitHub access from the scopes listed in an OAuth installation link?"},{"route_id":"agentic_reviewed_gitlab_com_scim_group_removal_not_account_deletion","question":"Does GitLab.com group SCIM deprovisioning delete the user's GitLab account?"},{"route_id":"agentic_reviewed_okta_api_token_owner_permissions_and_inactivity","question":"Is an Okta API token's authority fixed when it is created?"},{"route_id":"agentic_reviewed_google_oauth_revocation_user_project_wide_grant","question":"Does revoking one Google OAuth token only disconnect that one client?"},{"route_id":"agentic_reviewed_slack_uninstall_versus_token_revocation_event_order","question":"Does a Slack token-revocation event prove the whole app was uninstalled?"},{"route_id":"agentic_reviewed_aws_external_access_findings_zone_of_trust","question":"Does an empty external Access Analyzer report prove nobody else can access a resource?"},{"route_id":"agentic_reviewed_cloudflare_token_resources_ip_and_expiry_boundaries","question":"Does a Cloudflare token's Read or Edit label establish its complete access boundary?"},{"route_id":"agentic_reviewed_review_business_connectors_read_write_and_send","question":"What should an agent check before connecting CRM, inbox or SaaS-management tools?"},{"route_id":"agentic_reviewed_review_enterprise_search_scope_and_missing_results","question":"Can an agent rely on enterprise search results as a complete accessible-document inventory?"},{"route_id":"agentic_reviewed_review_knowledge_ingestion_permissions_and_removal","question":"What evidence shows that an AI knowledge connector respects access changes and deleted content?"},{"route_id":"agentic_reviewed_review_outbound_actions_acceptance_and_recovery","question":"What should an agent verify before reporting that a business action completed?"},{"route_id":"agentic_reviewed_review_credential_authority_and_owner_changes","question":"How can an agent check whether a service credential still has the intended authority?"},{"route_id":"agentic_reviewed_review_application_offboarding_scope_and_evidence","question":"What evidence distinguishes app offboarding from account deletion or complete access removal?"},{"route_id":"agentic_reviewed_iam_simulation_does_not_execute_authority","question":"Does an allowed IAM simulation prove an agent can execute the production action?"},{"route_id":"agentic_reviewed_sts_session_policy_cannot_expand_role","question":"Can an AssumeRole session policy grant an agent permissions beyond its role?"},{"route_id":"agentic_reviewed_iam_passrole_service_delegation_evidence","question":"What evidence explains the authority an agent delegates when it passes an IAM role to a service?"},{"route_id":"agentic_reviewed_iam_negated_ifexists_deny_missing_context","question":"Does IfExists make an IAM deny harmless when the condition key is absent?"},{"route_id":"agentic_reviewed_scp_permission_ceiling_not_authority_grant","question":"Does an SCP allow statement give an agent permission to act in an AWS account?"},{"route_id":"agentic_reviewed_kubernetes_bind_escalate_delegation_boundary","question":"Can permission to edit Kubernetes roles or bindings be treated as ordinary configuration access?"},{"route_id":"agentic_reviewed_kubernetes_impersonation_caller_and_effective_identity","question":"Do Kubernetes impersonation headers alone establish authority to act as another identity?"},{"route_id":"agentic_reviewed_kubernetes_webhook_authorization_cache_window","question":"Does changing a webhook authorisation policy guarantee every Kubernetes request immediately uses the new decision?"},{"route_id":"agentic_reviewed_kubernetes_validation_warn_audit_versus_deny","question":"Does a failing ValidatingAdmissionPolicy necessarily reject a Kubernetes request?"},{"route_id":"agentic_reviewed_kubernetes_dry_run_admission_not_persisted_action","question":"Can an admitted Kubernetes dry-run request prove that the requested action took effect?"},{"route_id":"agentic_reviewed_opa_data_api_http_success_undefined_result","question":"Can a successful OPA Data API response be interpreted as an allow decision?"},{"route_id":"agentic_reviewed_opa_rejected_bundle_retains_previous_policy","question":"Does publishing a newly signed OPA bundle prove that running agents use it?"},{"route_id":"agentic_reviewed_github_installation_token_repository_permission_downscope","question":"Does a GitHub App installation token automatically have the narrow scope intended for one agent task?"},{"route_id":"agentic_reviewed_gcp_permission_probe_explicit_caller_resource_scope","question":"Does projects.testIamPermissions produce a complete inventory of an agent identity's authority?"},{"route_id":"agentic_reviewed_kubernetes_audit_buffer_export_loss","question":"Does enabling Kubernetes auditing establish that every selected event reached storage?"},{"route_id":"agentic_reviewed_cloudtrail_file_order_not_action_causality","question":"Can an agent reconstruct an action chain from the order of CloudTrail records in a file?"},{"route_id":"agentic_reviewed_cloudtrail_duplicate_records_not_distinct_actions","question":"Do repeated CloudTrail records necessarily mean an agent performed the action twice?"},{"route_id":"agentic_reviewed_gcp_log_sink_filters_destination_coverage","question":"Does an empty destination log search prove that no matching Google Cloud action occurred?"},{"route_id":"agentic_reviewed_azure_monitor_transformation_filtered_evidence","question":"Can a Log Analytics table be assumed to contain the original unfiltered event stream?"},{"route_id":"agentic_reviewed_otel_sampled_traces_not_complete_action_history","question":"Can sampled traces establish a complete history of agent actions?"},{"route_id":"agentic_reviewed_otel_collector_queue_retry_loss_boundary","question":"Does an enabled Collector sending queue guarantee that telemetry eventually reaches the backend?"},{"route_id":"agentic_reviewed_otel_span_limits_discarded_events_and_links","question":"Does exporting a span prove that all its events, links and attributes were retained?"},{"route_id":"agentic_reviewed_github_webhook_signature_replay_delivery_identity","question":"Does validating a GitHub webhook secret prove that a delivery has not already been processed?"},{"route_id":"agentic_reviewed_slack_event_retries_event_id_not_new_action","question":"Should each Slack Events API delivery trigger a fresh agent action?"},{"route_id":"agentic_reviewed_step_functions_workflow_type_execution_guarantees","question":"Can every Step Functions workflow be described as exactly-once execution?"},{"route_id":"agentic_reviewed_lambda_async_success_can_still_redeliver","question":"Does a successful asynchronous Lambda invocation rule out a duplicate event later?"},{"route_id":"agentic_reviewed_pubsub_ordering_key_redelivery_not_global_order","question":"Does Pub/Sub message ordering provide one global, duplicate-free agent action sequence?"},{"route_id":"agentic_reviewed_postgres_logical_slot_crash_replay_consumer_state","question":"Does a crash-safe logical replication slot guarantee each change reaches a consumer only once?"},{"route_id":"agentic_reviewed_review_agent_authority_grants_and_policy_context","question":"Which evidence distinguishes a declared AWS permission from effective agent authority?"},{"route_id":"agentic_reviewed_review_agent_identity_and_delegation_scope","question":"What should an agent declare before using delegated or impersonated authority?"},{"route_id":"agentic_reviewed_review_policy_result_activation_and_enforcement_boundaries","question":"When does a policy evaluation fail to prove that an action was refused?"},{"route_id":"agentic_reviewed_review_audit_collection_routing_and_event_reconstruction","question":"What evidence is needed before calling an audit chain complete?"},{"route_id":"agentic_reviewed_review_trace_sampling_content_and_delivery_gaps","question":"Can an exported trace establish complete agent activity?"},{"route_id":"agentic_reviewed_review_event_replay_ordering_and_once_only_claims","question":"What evidence separates delivered events from actions performed once?"},{"route_id":"agentic_reviewed_github_job_token_permissions_and_omitted_scopes","question":"Does a workflow permission declaration describe every job token without checking job overrides?"},{"route_id":"agentic_reviewed_github_reusable_workflow_rerun_revision","question":"Does rerunning a GitHub job guarantee that a reusable workflow uses the same approved revision?"},{"route_id":"agentic_reviewed_github_oidc_token_request_not_cloud_permission","question":"Does id-token: write give a GitHub workflow write permission over cloud resources?"},{"route_id":"agentic_reviewed_github_ruleset_bypass_mode_and_actor","question":"Does requiring a pull request prevent every authorised GitHub ruleset bypass?"},{"route_id":"agentic_reviewed_notion_insert_update_read_capability_separation","question":"Does permission to insert Notion content imply permission to read full objects or update existing pages?"},{"route_id":"agentic_reviewed_slack_public_posting_without_channel_membership","question":"Does a Slack bot being absent from a public channel prove it cannot post there?"},{"route_id":"agentic_reviewed_slack_incoming_webhook_fixed_destination","question":"Can an agent redirect a Slack incoming webhook by changing channel or username in its payload?"},{"route_id":"agentic_reviewed_slack_message_delete_token_authorship_boundary","question":"Can an agent assume it can undo every Slack message it sends by calling chat.delete?"},{"route_id":"agentic_reviewed_playwright_saved_auth_state_is_credential_material","question":"Can a saved Playwright authentication-state file be treated as harmless test configuration?"},{"route_id":"agentic_reviewed_playwright_service_worker_request_routing_gap","question":"Does browserContext.route establish that every browser request passes through an agent's declared filter?"},{"route_id":"agentic_reviewed_sts_source_identity_role_chain_attribution","question":"Does a shared role session name alone preserve the original identity through an AWS role chain?"},{"route_id":"agentic_reviewed_sts_session_tag_transitivity_and_authority_context","question":"Do session tags automatically persist when an agent assumes another AWS role?"},{"route_id":"agentic_reviewed_github_rest_pagination_evidence_coverage","question":"Does a successful GitHub REST list response establish that every matching evidence item was collected?"},{"route_id":"agentic_reviewed_slack_audit_logs_not_message_transcript","question":"Can Slack Audit Logs API records substitute for a transcript of what an agent read or posted?"},{"route_id":"agentic_reviewed_slack_history_cursors_and_time_boundaries","question":"Does receiving fewer Slack history messages than requested prove the conversation has no more evidence?"},{"route_id":"agentic_reviewed_notion_property_pagination_before_rollup_reliance","question":"Can an agent rely on the first Notion property response as the complete relation or rollup result?"},{"route_id":"agentic_reviewed_notion_block_children_depth_and_pagination","question":"Does one Notion block-children response capture all nested page content?"},{"route_id":"agentic_reviewed_cloudflare_output_options_replacement_and_fields","question":"Does updating one Logpush output option preserve every previously configured evidence field and format?"},{"route_id":"agentic_reviewed_cloudflare_logpush_filter_and_sample_coverage","question":"Does successful Logpush delivery prove the destination includes every event in the chosen dataset?"},{"route_id":"agentic_reviewed_opa_masked_decision_log_not_original_input","question":"Can an exported OPA decision log be assumed to preserve the exact policy input and result?"},{"route_id":"agentic_reviewed_otel_log_event_time_versus_observation_time","question":"Can an OpenTelemetry log observation timestamp be treated as the time the agent action occurred?"},{"route_id":"agentic_reviewed_cloudtrail_addendum_late_and_corrected_evidence","question":"Can a saved CloudTrail event be treated as the final record without considering later addenda?"},{"route_id":"agentic_reviewed_gcp_log_insertid_query_versus_export_deduplication","question":"Does a duplicate-free Google Cloud log query prove that exported records are unique?"},{"route_id":"agentic_reviewed_kubernetes_audit_id_and_request_stage_correlation","question":"Do Kubernetes audit records with the same auditID necessarily represent duplicate delivery?"},{"route_id":"agentic_reviewed_review_workflow_token_grants_and_bypass_authority","question":"Which declarations define an automated GitHub workflow's authority?"},{"route_id":"agentic_reviewed_review_content_creation_posting_and_undo_authority","question":"What should be declared before an agent creates content or sends a message?"},{"route_id":"agentic_reviewed_review_browser_credentials_and_role_session_context","question":"What hidden context can change the authority of a declared agent session?"},{"route_id":"agentic_reviewed_review_paginated_evidence_and_content_depth","question":"What makes a successful evidence retrieval incomplete?"},{"route_id":"agentic_reviewed_review_log_selection_shape_and_masking","question":"Which collection choices can remove fields or events from an audit record?"},{"route_id":"agentic_reviewed_review_event_time_corrections_and_request_identity","question":"How should an audit chain distinguish timing, corrections and repeated records?"},{"route_id":"agentic_reviewed_vault_force_revocation_backend_residual_access","question":"Does a successful Vault force-revoke establish that the backend credential can no longer be used?"},{"route_id":"agentic_reviewed_kubernetes_offline_jwt_bound_object_deletion","question":"Does offline validation of a Kubernetes service-account JWT detect that its bound Pod was deleted?"},{"route_id":"agentic_reviewed_oauth_token_exchange_no_automatic_revocation_link","question":"Does revoking an input token automatically revoke every token obtained through OAuth token exchange?"},{"route_id":"agentic_reviewed_github_app_permission_update_installation_approval","question":"Does changing a GitHub App registration prove every existing installation has the new permissions?"},{"route_id":"agentic_reviewed_iam_managed_policy_default_version_authority_drift","question":"Does denying CreatePolicyVersion alone prevent an agent from changing the operative IAM policy?"},{"route_id":"agentic_reviewed_gcp_iam_policy_version_etag_condition_loss","question":"Can an agent overwrite a conditional Google IAM policy without preserving its version and etag?"},{"route_id":"agentic_reviewed_lambda_sqs_partial_batch_retry_successful_items","question":"Can one failed SQS batch item cause an agent to repeat actions that already succeeded?"},{"route_id":"agentic_reviewed_graph_json_batch_status_per_request_recovery","question":"Does HTTP 200 for a Microsoft Graph batch prove every agent action in it succeeded?"},{"route_id":"agentic_reviewed_s3_multi_object_delete_partial_success_evidence","question":"Does an HTTP 200 DeleteObjects response prove every requested S3 object was deleted?"},{"route_id":"agentic_reviewed_spanner_longrunning_cancellation_terminal_result","question":"Does a successful long-running-operation cancel request prove the Spanner operation stopped?"},{"route_id":"agentic_reviewed_postgres_serialization_retry_whole_transaction","question":"After a PostgreSQL serialization failure, is retrying only the last SQL statement sufficient?"},{"route_id":"agentic_reviewed_ssm_run_command_aggregate_success_target_evidence","question":"Does Run Command Success prove the intended change completed on every targeted machine?"},{"route_id":"agentic_reviewed_agent_access_lifecycle_evidence","question":"What evidence is needed to review agent access lifecycle, offboarding and permission drift?"},{"route_id":"agentic_reviewed_agent_action_assurance_recovery_evidence","question":"What evidence distinguishes completed agent actions from partial failures, retries and recovery?"},{"route_id":"agentic_reviewed_ec2_client_token_regional_zonal_retry_scope","question":"Does reusing an EC2 client token prevent duplicate creation after an agent changes Region or Availability Zone?"},{"route_id":"agentic_reviewed_gcs_retry_generation_precondition_target_identity","question":"Can a delayed object-delete retry remove a newer Cloud Storage object with the same name?"},{"route_id":"agentic_reviewed_compensating_transaction_residual_effects_recovery","question":"Does completing a compensating workflow prove every original effect was reversed?"},{"route_id":"agentic_reviewed_cloudformation_skipped_rollback_resource_reconciliation","question":"Does CloudFormation rollback completion prove skipped resources match the stack template?"},{"route_id":"agentic_reviewed_agent_offboarding_checklist","question":"What evidence should I gather before concluding an agent has lost access?"},{"route_id":"agentic_reviewed_transactional_outbox_commit_event_publication_gap","question":"Can a database change commit while its agent completion event is never published?"},{"route_id":"agentic_reviewed_durable_task_termination_child_work_propagation","question":"Does terminating a Durable Task orchestration stop the activities and sub-orchestrations it already launched?"},{"route_id":"agentic_reviewed_sqs_dead_letter_redrive_identity_lineage","question":"Can an SQS redrive preserve the original message identity and undo messages already moved?"},{"route_id":"agentic_reviewed_hazelcast_fencedlock_stale_worker_external_effects","question":"Can an old Hazelcast lock holder still act after a new worker acquires the lock?"},{"route_id":"agentic_reviewed_rabbitmq_publisher_confirm_unroutable_message","question":"Does a RabbitMQ publisher confirm prove that the message reached a destination queue?"},{"route_id":"agentic_reviewed_kinesis_putrecords_partial_retry_action_order","question":"Can retrying a failed Kinesis PutRecords item change the intended action sequence?"},{"route_id":"agentic_reviewed_sqs_delete_message_stale_receipt_handle","question":"Does a successful SQS DeleteMessage response using an old receipt handle prove the message was removed?"},{"route_id":"agentic_reviewed_servicebus_complete_failure_committed_work","question":"If Service Bus Complete fails after processing, does that mean the agent action failed too?"},{"route_id":"agentic_reviewed_dynamodb_transaction_stream_interleaving_evidence","question":"Does a DynamoDB transaction appear as one atomic, ordered group in its change stream?"},{"route_id":"agentic_reviewed_postgres_asynchronous_commit_crash_loss_boundary","question":"Can PostgreSQL report a successful asynchronous commit that is lost in a subsequent crash?"},{"route_id":"agentic_reviewed_postgres_prepared_transaction_in_doubt_recovery","question":"Does PostgreSQL PREPARE TRANSACTION mean a multi-system action has committed?"},{"route_id":"agentic_reviewed_elasticsearch_delete_by_query_partial_residual_state","question":"Does a failed Elasticsearch delete-by-query leave the original matching documents intact?"},{"route_id":"agentic_reviewed_kubernetes_job_replacement_terminating_pod_overlap","question":"Does a Kubernetes Job parallelism setting prevent replacement workers overlapping terminating Pods?"},{"route_id":"agentic_reviewed_durable_task_external_event_instance_existence","question":"Will a Durable Task approval event wait for an orchestration instance that has not been created?"},{"route_id":"agentic_reviewed_temporal_activity_cancellation_heartbeat_cooperation","question":"Does requesting Temporal activity cancellation forcibly stop the worker or its external action?"},{"route_id":"agentic_reviewed_s3_multipart_abort_inflight_parts_cleanup","question":"Does one S3 multipart abort prove all in-flight parts and their storage charges are gone?"},{"route_id":"agentic_reviewed_s3_multipart_completion_http200_embedded_error","question":"Does HTTP 200 from S3 CompleteMultipartUpload establish that the final object was created?"},{"route_id":"agentic_reviewed_azure_blob_copy_abort_zero_length_destination","question":"Does aborting an Azure Blob copy restore the destination to its pre-copy contents and metadata?"},{"route_id":"agentic_reviewed_kafka_transaction_external_sink_effect_boundary","question":"Do Kafka transactions make an agent's writes to an external service exactly once?"},{"route_id":"agentic_reviewed_lambda_kinesis_partial_failure_checkpoint_replay","question":"Does Lambda retry only the failed Kinesis records listed in a partial batch response?"},{"route_id":"agentic_reviewed_s3_failed_replication_repair_and_version_reconciliation","question":"What evidence closes recovery for an S3 object marked FAILED for replication?"},{"route_id":"agentic_reviewed_servicebus_deferred_message_retrieval_expiry","question":"Can a deferred Service Bus message be treated as completed or expired because normal receives no longer return it?"},{"route_id":"agentic_reviewed_rabbitmq_dead_letter_republication_loss_boundary","question":"Does configuring a RabbitMQ dead-letter exchange guarantee that failed work is retained for recovery?"},{"route_id":"agentic_reviewed_github_actions_cancellation_job_condition_continuation","question":"Does canceling a GitHub Actions workflow immediately stop every running job and unfinished step?"},{"route_id":"agentic_reviewed_ap2_open_mandate_constraint_verification","question":"Does a signed AP2 open mandate authorise any purchase the agent chooses?"},{"route_id":"agentic_reviewed_coinbase_recurring_token_spend_authority","question":"Does a Coinbase spend permission give an agent arbitrary control of the wallet?"},{"route_id":"agentic_reviewed_mcp_tool_list_authorization_cache_context","question":"Can an earlier MCP tools list prove which tools remain available under changed credentials?"},{"route_id":"agentic_reviewed_mcp_token_audience_not_upstream_authority","question":"Can an MCP server accept a valid token issued for a different service?"},{"route_id":"agentic_reviewed_mcp_registry_publisher_namespace_boundary","question":"Does an authenticated MCP Registry publisher establish that its server is approved for our tools?"},{"route_id":"agentic_reviewed_mcpb_registry_hash_client_verification","question":"Does an MCPB fileSha256 in the Registry prove the downloaded bundle was verified?"},{"route_id":"agentic_reviewed_mcp_tool_result_error_not_protocol_success","question":"Does a successful MCP JSON-RPC result mean the underlying tool action succeeded?"},{"route_id":"agentic_reviewed_cloudtrail_cross_account_shared_event_correlation","question":"Can different CloudTrail eventIDs in two accounts describe the same cross-account action?"},{"route_id":"agentic_reviewed_databricks_sql_result_chunks_truncation","question":"Does Databricks SQL SUCCEEDED mean the agent retrieved the complete evidence result?"},{"route_id":"agentic_reviewed_cloudformation_drift_result_coverage_boundary","question":"Does an IN_SYNC CloudFormation drift result prove every agent-managed resource matches its intended configuration?"},{"route_id":"agentic_reviewed_bedrock_data_source_delete_retained_vector_boundary","question":"Does deleting a Bedrock knowledge-base data source remove its vector data and store?"},{"route_id":"agentic_reviewed_copilot_conversation_deletion_memory_separation","question":"Does deleting a Copilot conversation through eDiscovery also delete its associated memory?"},{"route_id":"agentic_reviewed_copilot_connector_pause_visibility_deletion_boundary","question":"Does pausing a Copilot connector or hiding it from search remove its indexed data?"},{"route_id":"agentic_reviewed_gemini_vault_hold_and_content_coverage","question":"Does a Vault hold or export cover every type of data in Gemini activity?"},{"route_id":"agentic_reviewed_claude_enterprise_project_retention_clock_scope","question":"Does a Claude Enterprise chat retention period bound every project conversation and cloud AI feature?"},{"route_id":"agentic_reviewed_claude_organization_export_deleted_content_boundary","question":"Can a later Claude organization export recover content already deleted by users or retention?"},{"route_id":"agentic_reviewed_claude_member_removal_data_survival","question":"Does removing a Claude Team or Enterprise member delete their account and organization data?"},{"route_id":"agentic_reviewed_copilot_pages_embedded_container_export_scope","question":"Does selecting a user's OneDrive for eDiscovery include their Copilot Pages and Notebooks?"},{"route_id":"agentic_reviewed_agent_authority_and_tool_integrity_evidence","question":"What evidence should a buyer review before granting agent spending or tool authority?"},{"route_id":"agentic_reviewed_enterprise_ai_data_custody_exit_assurance","question":"What evidence is needed to review enterprise AI data custody and exit completeness?"},{"route_id":"agentic_reviewed_foundry_agent_state_explicit_deletion","question":"Does ending a Foundry Agent Service run remove its stored agent data?"},{"route_id":"agentic_reviewed_copilot_studio_transcript_saving_residual_copies","question":"Does disabling Copilot Studio transcript saving erase existing conversations and every stored copy?"},{"route_id":"agentic_reviewed_copilot_studio_csv_response_truncation","question":"Can a Copilot Studio session CSV establish the complete text of every agent response?"},{"route_id":"agentic_reviewed_vertex_ai_grounding_session_retention_exceptions","question":"Does a zero-retention objective apply automatically to every Vertex AI grounding and session feature?"},{"route_id":"agentic_reviewed_langsmith_retention_change_existing_traces","question":"Does reducing LangSmith retention shorten the lifetime of already stored traces?"},{"route_id":"agentic_reviewed_langsmith_dataset_soft_delete_history","question":"Does deleting a LangSmith dataset example remove its inputs and outputs from all versions?"},{"route_id":"agentic_reviewed_rovo_github_disconnect_jira_index_cleanup","question":"Does disconnecting GitHub from Rovo alone remove its indexed GitHub content?"},{"route_id":"agentic_reviewed_rovo_provider_zdr_hosted_chat_retention","question":"Does Rovo provider zero retention mean Atlassian keeps no chat inputs or outputs?"},{"route_id":"agentic_reviewed_cohere_dataset_expiry_not_evidence_archive","question":"Can a Cohere Datasets API upload serve as the long-term evidence archive for an embedding job?"},{"route_id":"agentic_reviewed_cohere_encrypted_vault_visible_metadata","question":"Does Cohere Model Vault Encrypted hide all request metadata from infrastructure operators?"},{"route_id":"agentic_reviewed_snowflake_cortex_processing_storage_region","question":"Does Snowflake account storage residency prove Cortex inference stays in the same region?"},{"route_id":"agentic_reviewed_rovo_hosted_llm_processor_boundary","question":"Does a Rovo no-training commitment restrict processing to our single approved external LLM provider?"},{"route_id":"agentic_reviewed_gemini_notebook_export_deleted_history","question":"Which Gemini Notebook artifacts does Workspace export preserve, and can it recover deleted chats?"},{"route_id":"agentic_reviewed_gemini_workspace_history_inactivity_clock","question":"Does Gemini in Workspace conversation auto-deletion run from the chat creation date?"},{"route_id":"agentic_reviewed_copilot_offboarding_inactive_mailbox_retention","question":"Does deleting a Microsoft 365 user account erase Copilot messages that are subject to retention?"},{"route_id":"agentic_reviewed_copilot_cloud_attachment_retained_copy_scope","question":"Does an automatic retention label for a Copilot cloud attachment label the original file and chat too?"},{"route_id":"agentic_reviewed_copilot_shared_chat_recipient_copy_retention","question":"Does disabling Copilot content sharing remove conversations recipients already continued?"},{"route_id":"agentic_reviewed_box_custodian_hold_preservation_scope","question":"Does placing a Box custodian on legal hold preserve every file they could encounter?"},{"route_id":"agentic_reviewed_aws_kms_pending_key_deletion_not_erasure","question":"Does scheduling an AWS KMS key for deletion prove protected AI data has already been erased?"},{"route_id":"agentic_reviewed_aws_backup_vault_lock_grace_retention_boundary","question":"Does an AWS Backup Vault Lock configuration prove its protection can no longer be removed?"},{"route_id":"agentic_reviewed_kubernetes_rbac_bind_escalate_delegation","question":"Do Kubernetes RBAC escalation checks prevent every role administrator from delegating stronger permissions?"},{"route_id":"agentic_reviewed_kubernetes_admission_missing_parameter_action","question":"Does a Kubernetes validating admission policy always reject requests when its parameter is missing?"},{"route_id":"agentic_reviewed_github_copilot_content_exclusion_mode_boundary","question":"Does a GitHub Copilot content-exclusion rule protect the same files in every agent mode?"},{"route_id":"agentic_reviewed_bedrock_guardrail_tagging_enforcement_scope","question":"Does attaching a Bedrock guardrail establish that every part of a prompt was evaluated?"},{"route_id":"agentic_reviewed_gcp_iam_deny_supported_permission_exceptions","question":"Does a Google Cloud IAM deny policy automatically block every action by a named principal?"},{"route_id":"agentic_reviewed_copilot_studio_publish_test_channel_policy_gate","question":"Does an enabled Publish button prove every Copilot Studio agent channel has passed data-policy checks?"},{"route_id":"agentic_reviewed_opentelemetry_sampling_evidence_absence","question":"Does a missing OpenTelemetry trace prove that an agent action never happened?"},{"route_id":"agentic_reviewed_langsmith_serverless_trace_flush_completion","question":"Does a returned serverless function prove its LangSmith traces were delivered?"},{"route_id":"agentic_reviewed_gemini_vault_export_count_error_reconciliation","question":"Does receiving a Gemini app Vault export ZIP establish that all matching conversation evidence was exported?"},{"route_id":"agentic_reviewed_slsa_resolved_dependencies_completeness_boundary","question":"Does SLSA Build L3 provenance guarantee that resolvedDependencies lists every build dependency?"},{"route_id":"agentic_reviewed_paypal_request_id_latest_status_recovery","question":"Can an agent safely retry an uncertain PayPal capture as a new request?"},{"route_id":"agentic_reviewed_adyen_idempotency_regional_boundary","question":"Does reusing an Adyen idempotency key prevent duplicate payments across regional endpoints?"},{"route_id":"agentic_reviewed_square_refund_pending_payment_status","question":"Does a Square refund request or a COMPLETED payment establish that the buyer was refunded?"},{"route_id":"agentic_reviewed_paypal_authorization_reauthorization_capture_evidence","question":"Does a PayPal payment authorisation guarantee that a later agent capture will succeed?"},{"route_id":"agentic_reviewed_github_dependency_graph_build_variable_omission","question":"Will GitHub dependency graph include packages whose names or versions are supplied through build variables?"},{"route_id":"agentic_reviewed_trivy_ignore_unfixed_hidden_findings","question":"Does a clean Trivy report using --ignore-unfixed show that no known affected packages remain?"},{"route_id":"agentic_reviewed_trivy_os_vendor_backport_detection_boundary","question":"Can an upstream fixed-version comparison replace Trivy OS-vendor advisory assessment?"},{"route_id":"agentic_reviewed_github_dependency_submission_source_precedence","question":"Does enabling automatic dependency submission replace a user-submitted manifest snapshot in GitHub graph?"},{"route_id":"agentic_reviewed_dependency_exposure_advisory_reliance_evidence","question":"What evidence is needed before relying on a clean dependency or advisory report?"},{"route_id":"agentic_reviewed_aws_rcp_external_principal_resource_boundary","question":"Does an AWS resource control policy restrict the external resources an agent can access?"},{"route_id":"agentic_reviewed_gatekeeper_dryrun_violation_not_admission_denial","question":"Does a Gatekeeper constraint violation prove that the corresponding request was blocked?"},{"route_id":"agentic_reviewed_github_environment_review_quorum_bypass_boundary","question":"Does naming several GitHub environment reviewers require every reviewer to approve an agent deployment?"},{"route_id":"agentic_reviewed_kubernetes_mutating_webhook_order_final_validation","question":"Can an agent rely on a fixed ordering of Kubernetes mutating admission webhooks?"},{"route_id":"agentic_reviewed_terraform_saved_plan_submission_is_approval","question":"Will Terraform ask an agent for approval again when it applies a saved plan file?"},{"route_id":"agentic_reviewed_azure_abac_condition_not_global_deny","question":"Does an Azure role-assignment condition explicitly deny the resource through every other grant?"},{"route_id":"agentic_reviewed_vault_orphan_token_revocation_tree_boundary","question":"Does revoking a Vault parent token revoke orphan credentials created from that workflow?"},{"route_id":"agentic_reviewed_gcp_impersonation_chain_each_hop_authority","question":"Does a Google service-account delegation list itself grant permission to impersonate the final account?"},{"route_id":"agentic_reviewed_entra_workload_conditional_access_direct_scope","question":"Does an Entra Conditional Access policy assigned to a group govern service principals inside that group?"},{"route_id":"agentic_reviewed_spire_node_alias_workload_identity_scope","question":"Does a SPIRE workload registration parent identify only one machine when it names a node alias?"},{"route_id":"agentic_reviewed_github_app_refresh_invalidates_old_token_pair","question":"Can an agent keep using its old GitHub App user token after refreshing the token pair?"},{"route_id":"agentic_reviewed_azure_managed_identity_membership_cache_delay","question":"Does removing an Azure managed identity from a group immediately remove its access everywhere?"},{"route_id":"agentic_reviewed_entra_noninteractive_signin_row_aggregation","question":"Can one non-interactive Entra sign-in log row be counted as one credential use?"},{"route_id":"agentic_reviewed_w3c_trace_context_not_authenticated_event_lineage","question":"Does a matching traceparent identifier prove that two records belong to an authentic agent action chain?"},{"route_id":"agentic_reviewed_cloudtrail_field_size_omission_reconstruction","question":"Does a CloudTrail event guarantee its full request and response fields were preserved?"},{"route_id":"agentic_reviewed_azure_logs_http_200_partialerror_evidence","question":"Does HTTP 200 from the Azure Monitor Logs API prove an evidence query completed without errors?"},{"route_id":"agentic_reviewed_bigquery_script_child_job_data_access_lineage","question":"Can an agent reconstruct a BigQuery script data footprint from the parent job events alone?"},{"route_id":"agentic_reviewed_square_payment_version_token_amendment_race","question":"Does a Square payment update protect an agent from overwriting another concurrent amendment?"},{"route_id":"agentic_reviewed_square_delayed_payment_automatic_terminal_action","question":"Does leaving a Square delayed-capture payment untouched guarantee it will be cancelled?"},{"route_id":"agentic_reviewed_adyen_capture_success_late_scheme_failure","question":"Does an Adyen CAPTURE webhook with success true prove final settlement?"},{"route_id":"agentic_reviewed_adyen_partial_capture_remainder_release","question":"Does an Adyen partial capture leave the unused authorization available for another shipment?"},{"route_id":"agentic_reviewed_adyen_reversal_eligibility_and_later_outcomes","question":"Can an agent use an Adyen reversal for every uncertain capture and treat acceptance as a completed refund?"},{"route_id":"agentic_reviewed_paypal_order_amendment_after_payer_approval","question":"Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?"},{"route_id":"agentic_reviewed_npm_ignore_scripts_explicit_command_exception","question":"Does npm ignore-scripts prevent an agent from executing npm test or npm run?"},{"route_id":"agentic_reviewed_pip_require_hashes_complete_dependency_set","question":"Does hashing only the top-level Python requirement establish a fully hash-checked installation?"},{"route_id":"agentic_reviewed_docker_manifest_list_platform_review_scope","question":"Does reviewing one Docker image platform establish the contents selected on every other platform?"},{"route_id":"agentic_reviewed_opensearch_manual_snapshot_separate_exit_inventory","question":"Can an OpenSearch exit inventory omit manual snapshots because automated recovery has a retention window?"},{"route_id":"agentic_reviewed_elasticsearch_snapshot_export_coverage_exclusions","question":"Does an Elasticsearch snapshot preserve every index and setting needed for an AI application exit?"},{"route_id":"agentic_reviewed_qdrant_distributed_snapshot_node_coverage","question":"Does one Qdrant node snapshot establish a complete distributed collection export?"},{"route_id":"agentic_pack_data_exit_v1","question":"How can I reconcile declared data exports, deletion, retention and residual holdings offline?"},{"route_id":"agentic_pack_transaction_integrity_v1","question":"How can I reconcile declared transaction authority, amendments, retries and payment outcomes offline?"},{"route_id":"agentic_reviewed_openai_spend_alert_hard_limit_rate_boundary","question":"Do OpenAI spending alerts and rate limits prevent an agent from incurring further API costs?"},{"route_id":"agentic_reviewed_anthropic_workspace_cap_archive_usage_boundary","question":"Do Anthropic workspace caps or archiving stop all further usage by an agent?"},{"route_id":"agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement","question":"Can an agent rely on MCP readOnlyHint, destructiveHint or idempotentHint as enforced permissions?"},{"route_id":"agentic_reviewed_openai_function_call_application_execution_evidence","question":"Does a model-generated OpenAI function call prove that the external action happened?"},{"route_id":"agentic_reviewed_bedrock_return_control_application_action_handoff","question":"Does Bedrock RETURN_CONTROL mean that an action group operation has already executed?"},{"route_id":"agentic_reviewed_openai_service_account_role_key_scope_propagation","question":"What establishes an OpenAI project service-account key's effective authority after a role or scope change?"},{"route_id":"agentic_reviewed_databricks_external_location_unbind_existing_table_access","question":"Does unbinding a Databricks external location from a workspace stop access through tables already created there?"},{"route_id":"agentic_reviewed_docusign_completion_event_document_processing_evidence","question":"Does a Docusign completion notification prove which signed document was retained and processed downstream?"},{"route_id":"agentic_reviewed_stripe_checkout_completed_async_payment_outcome","question":"Does a completed Stripe Checkout session prove successful payment for an asynchronous payment method?"},{"route_id":"agentic_reviewed_shopify_paid_order_fulfillment_delivery_separation","question":"Does a Shopify order marked paid demonstrate that its goods were fulfilled or delivered?"},{"route_id":"agentic_reviewed_stripe_refund_created_pending_failed_reversal_boundary","question":"Does creating a Stripe refund establish that the customer received it and the original effects were reversed?"},{"route_id":"agentic_reviewed_stripe_tax_calculation_payment_terms_reconciliation","question":"What binds a Stripe tax calculation and approved purchase terms to the payment actually submitted?"},{"route_id":"agentic_reviewed_openai_responses_store_retention_feature_boundary","question":"What OpenAI response state can persist after a call when storage or retention settings change?"},{"route_id":"agentic_reviewed_openai_vector_file_removal_underlying_upload_retained","question":"Does deleting a file from an OpenAI vector store also delete the underlying uploaded file?"},{"route_id":"agentic_reviewed_azure_search_source_delete_indexer_policy_residual","question":"Can source document deletion leave retrievable copies in an Azure AI Search index?"},{"route_id":"agentic_reviewed_slack_connect_external_content_retention_export_boundary","question":"Can one organization's Slack Connect retention and exports cover all externally contributed content?"},{"route_id":"agentic_reviewed_weaviate_backup_tenant_state_restore_deletion_boundary","question":"Can a Weaviate backup restore tenant content beyond a declared deletion boundary?"},{"route_id":"agentic_reviewed_cloudflare_r2_lifecycle_expiration_observed_deletion","question":"Does an R2 lifecycle rule prove that all targeted objects were deleted immediately?"},{"route_id":"agentic_reviewed_gemini_explicit_cache_expiry_metadata_retention_scope","question":"What do Gemini explicit cache expiry, deletion and usage metadata establish about retained context?"},{"route_id":"agentic_reviewed_stripe_v1_idempotency_expiry_cached_failure","question":"Does reusing a Stripe API v1 idempotency key guarantee that a payment retry is safe indefinitely?"},{"route_id":"agentic_reviewed_stripe_manual_capture_deadline_remainder","question":"Can an agent treat a Stripe card authorization as available funds for any later capture?"},{"route_id":"agentic_reviewed_stripe_incremental_authorization_decline_deadline","question":"Does increasing a Stripe authorization renew its deadline or replace the original amount when declined?"},{"route_id":"agentic_reviewed_stripe_connect_refund_transfer_reversal_separation","question":"Does refunding a Stripe separate charge automatically recover money transferred to connected accounts?"},{"route_id":"agentic_reviewed_stripe_invoice_paid_out_of_band_collection_evidence","question":"Does a Stripe invoice marked paid prove that Stripe collected the money?"},{"route_id":"agentic_reviewed_stripe_payout_paid_later_failure_reconciliation","question":"Does a Stripe payout initially marked paid establish irreversible receipt by the destination bank?"},{"route_id":"agentic_reviewed_openai_responses_mcp_import_approval_boundary","question":"Does allowing a remote MCP tool in OpenAI Responses also approve sending it data?"},{"route_id":"agentic_reviewed_anthropic_mcp_toolset_default_enable_overrides","question":"Does listing a few tool overrides restrict Anthropic MCP connector access to only those tools?"},{"route_id":"agentic_reviewed_sharepoint_application_restrictions_effective_scope","question":"Does a SharePoint application allowlist block every unlisted agent from the site?"},{"route_id":"agentic_reviewed_sharepoint_restricted_discovery_not_access_revocation","question":"Does Restricted Content Discovery revoke access to a SharePoint site or remove its search index data?"},{"route_id":"agentic_reviewed_sharepoint_agent_block_host_coverage","question":"Does blocking a SharePoint agent in the Microsoft 365 agent inventory disable it in every host?"},{"route_id":"agentic_reviewed_aws_backup_legal_hold_copy_scope","question":"Does an AWS Backup legal hold automatically protect copied and continuous backups?"},{"route_id":"agentic_reviewed_atlas_backup_policy_cluster_termination_residue","question":"Does terminating an Atlas cluster remove snapshots governed by a Backup Compliance Policy?"},{"route_id":"agentic_reviewed_databricks_drop_object_storage_purge_boundary","question":"Does dropping a Unity Catalog table or volume immediately delete its underlying files?"},{"route_id":"agentic_reviewed_databricks_clone_source_dependency_export_completeness","question":"Does a Databricks table clone constitute an independent, complete exit archive?"},{"route_id":"agentic_reviewed_google_drive_change_removed_access_versus_deletion","question":"Does removed=true in a Google Drive change record prove that the underlying file was deleted?"},{"route_id":"agentic_reviewed_s3_inventory_eventual_consistency_exit_evidence","question":"Can an S3 Inventory report prove the current absence of an object after deletion?"},{"route_id":"agentic_reviewed_openai_batch_request_result_reconciliation","question":"Does a completed OpenAI Batch output file establish success for every submitted request?"},{"route_id":"agentic_reviewed_mcp_pagination_empty_cursor_inventory_completeness","question":"Does one successful MCP tools/list response establish the complete tool inventory?"},{"route_id":"agentic_reviewed_shopify_bulk_finish_partial_export_evidence","question":"Does a Shopify bulk_operations/finish webhook prove that a complete export is ready?"},{"route_id":"agentic_reviewed_graph_delta_replay_reset_audit_boundary","question":"Can Microsoft Graph delta responses be treated as an ordered, duplicate-free action ledger?"},{"route_id":"agentic_reviewed_mcp_url_elicitation_consent_not_completion","question":"Does accepting an MCP URL elicitation prove that its payment or authorization completed?"},{"route_id":"agentic_reviewed_langgraph_interrupt_resume_preapproval_reexecution","question":"Does resuming a LangGraph approval interrupt avoid repeating actions earlier in the same node?"},{"route_id":"agentic_reviewed_github_deploy_key_offboarding_residual_access","question":"Does removing a GitHub user revoke repository deploy keys that the user created?"},{"route_id":"agentic_reviewed_agentcore_policy_mcp_method_coverage_boundary","question":"Does AgentCore Gateway Policy apply its tool rules to MCP prompts and resources?"},{"route_id":"agentic_reviewed_agentcore_default_listing_tool_schema_sync","question":"Does AgentCore Gateway automatically reflect independently changed MCP tools in DEFAULT listing mode?"},{"route_id":"agentic_reviewed_github_audit_stream_pause_recovery_window","question":"Can a GitHub Enterprise audit stream recover every event after a prolonged pause or configuration failure?"},{"route_id":"agentic_reviewed_agentcore_event_delete_derived_memory_residue","question":"Does deleting an AgentCore event also delete long-term memory extracted from it?"},{"route_id":"agentic_reviewed_openai_conversation_delete_retained_items","question":"Does deleting an OpenAI Conversations API conversation also delete its items?"},{"route_id":"agentic_reviewed_s3_batch_complete_task_result_reconciliation","question":"Does a Complete S3 Batch Operations job prove every manifest object's operation succeeded?"},{"route_id":"agentic_reviewed_mcp_elicitation_form_sensitive_input_boundary","question":"May an MCP server collect API keys or payment credentials through form elicitation?"},{"route_id":"agentic_reviewed_agentcore_policy_shadow_mode_activation","question":"Does an ACTIVE AgentCore policy enforce its decision when the gateway is in LOG_ONLY mode?"},{"route_id":"agentic_reviewed_agentcore_updategateway_policy_downgrade_authority","question":"Can AgentCore UpdateGateway authority downgrade or detach a gateway policy engine?"},{"route_id":"agentic_reviewed_agentcore_gateway_cloudtrail_resource_selector","question":"Which CloudTrail data-event resource selector is required for AgentCore Gateway requests?"},{"route_id":"agentic_reviewed_mcp_task_cancel_acknowledgement_not_stopped_work","question":"Does a successful MCP tasks/cancel response prove the underlying work stopped?"},{"route_id":"agentic_reviewed_mcp_task_ttl_expiry_result_evidence_boundary","question":"Does expiry of an MCP task prove its external action failed or never happened?"},{"route_id":"agentic_reviewed_langgraph_durability_mode_process_crash_boundary","question":"Do LangGraph exit, async and sync modes preserve the same recovery state after a process crash?"},{"route_id":"agentic_reviewed_langgraph_pending_writes_parallel_failure_recovery","question":"Must LangGraph rerun every parallel node when one node in the same super-step fails?"},{"route_id":"agentic_reviewed_stripe_shared_payment_token_authority_lifecycle","question":"What spending authority does an agent grant with a Stripe shared payment token?"},{"route_id":"agentic_reviewed_temporal_timeout_uncertain_side_effect_retry","question":"Does a Temporal Activity timeout prove that its external action did not complete?"},{"route_id":"agentic_reviewed_temporal_replay_versus_activity_reexecution","question":"Does Temporal Workflow replay itself repeat a completed Activity external side effect?"},{"route_id":"agentic_reviewed_temporal_nonretryable_business_failure_policy","question":"Will Temporal automatically recognise a business refusal as a non-retryable Activity failure?"},{"route_id":"agentic_reviewed_temporal_workflow_id_reuse_retention_boundary","question":"Does Temporal Workflow ID reuse policy deduplicate every external API call made by an agent?"},{"route_id":"agentic_reviewed_temporal_closed_history_retention_archive_evidence","question":"Can Temporal retention expiry remove the history needed to reconstruct a closed Workflow?"},{"route_id":"agentic_reviewed_temporal_continue_as_new_run_history_chain","question":"Does Temporal Continue-As-New preserve one run ID and one continuous event history?"},{"route_id":"agentic_reviewed_temporal_parent_close_child_workflow_policy","question":"Can a Temporal child Workflow continue after its parent closes?"},{"route_id":"agentic_reviewed_otel_span_ok_status_assertion_precedence","question":"Does an OpenTelemetry span with status OK independently prove an external action succeeded?"},{"route_id":"agentic_reviewed_otlp_acknowledgement_single_hop_delivery","question":"Does an OTLP exporter acknowledgement prove durable retention in the final telemetry backend?"},{"route_id":"agentic_reviewed_otel_forceflush_timeout_outcome_boundary","question":"Does calling OpenTelemetry ForceFlush guarantee that pending spans were exported before shutdown?"},{"route_id":"agentic_reviewed_otel_baggage_untrusted_authority_claims","question":"Can OpenTelemetry baggage be trusted as authenticated user identity or agent spending authority?"},{"route_id":"agentic_reviewed_otel_instrumentation_scope_not_remote_tool_vendor","question":"Does an OpenTelemetry instrumentation scope identify the vendor of the remote tool being called?"},{"route_id":"agentic_reviewed_otlp_partial_success_rejected_spans_no_retry","question":"Should an OTLP client retry an export when the response contains partial_success?"},{"route_id":"agentic_reviewed_otel_service_name_instance_identity_boundary","question":"Does OpenTelemetry service.name uniquely identify the production instance that performed an action?"},{"route_id":"agentic_reviewed_oauth_confidential_client_pkce_authentication_boundary","question":"Can OAuth PKCE replace client authentication for a confidential authorization-code client?"},{"route_id":"agentic_reviewed_oauth_exact_redirect_uri_comparison_boundary","question":"Can an OAuth server replace exact redirect URI matching with a trusted parent-domain check?"},{"route_id":"agentic_reviewed_oauth_authorization_response_issuer_comparison","question":"How should a multi-provider OAuth client verify the issuer of an authorization response?"},{"route_id":"agentic_reviewed_oauth_client_credentials_not_human_approval","question":"Does an OAuth client-credentials token prove that a human approved this particular agent action?"},{"route_id":"agentic_reviewed_oauth_introspection_active_not_action_authority","question":"Can a resource server treat an OAuth introspection active response as approval for the requested action?"},{"route_id":"agentic_reviewed_oauth_revocation_success_invalid_token_ambiguity","question":"Does an OAuth token revocation HTTP 200 prove that the submitted token previously existed?"},{"route_id":"agentic_reviewed_kubernetes_rbac_additive_grants_no_deny","question":"Can a Kubernetes RBAC Role deny a permission granted through another RoleBinding?"},{"route_id":"agentic_reviewed_mcp_state_handle_not_authentication_credential","question":"Can an MCP application state handle or legacy session ID replace authentication?"},{"route_id":"agentic_reviewed_mcp_http_resumption_version_boundary","question":"Can an MCP client assume that Streamable HTTP always supports resuming a stream with Last-Event-ID?"},{"route_id":"agentic_reviewed_mcp_progress_not_terminal_action_evidence","question":"Can MCP progress notifications establish that an external action completed successfully?"},{"route_id":"agentic_reviewed_slack_history_token_type_channel_membership","question":"Can a Slack bot read private-channel history merely because its token has a history scope?"},{"route_id":"agentic_reviewed_stripe_payment_link_reference_optional_untrusted","question":"Does a Stripe Payment Link guarantee a trustworthy unique order identifier in every Checkout Session?"},{"route_id":"agentic_reviewed_stripe_expired_checkout_recovery_new_session_identity","question":"Does recovering an expired Stripe Checkout Session resume the same provider session identity?"},{"route_id":"agentic_reviewed_stripe_payment_link_adjustable_quantity_entitlement","question":"Can a Stripe Payment Link buyer change purchased quantity while retaining the same Price ID?"},{"route_id":"agentic_reviewed_stripe_no_payment_required_not_cash_receipt","question":"Does a Stripe Checkout Session with no_payment_required prove a new cash payment?"},{"route_id":"agentic_reviewed_stripe_checkout_line_item_pagination_completeness","question":"Does expanding line_items on a Stripe Checkout Session necessarily return every purchased item?"},{"route_id":"agentic_reviewed_stripe_subscription_active_invoice_settlement_boundary","question":"Does an active Stripe subscription establish that every outstanding invoice is paid?"},{"route_id":"agentic_reviewed_stripe_proration_credit_not_collected_payment","question":"Does a Stripe subscription proration establish that the old or changed plan was actually paid?"},{"route_id":"agentic_reviewed_stripe_period_end_cancellation_access_timing","question":"Does setting Stripe cancel_at_period_end mean the subscription has already ended?"},{"route_id":"agentic_reviewed_stripe_collection_pause_draft_invoice_recovery","question":"Does resuming Stripe payment collection automatically settle invoices created during the pause?"},{"route_id":"agentic_reviewed_stripe_invoice_credit_balance_not_new_cash","question":"Does a Stripe invoice marked paid after balance adjustments prove new money was received?"},{"route_id":"agentic_reviewed_stripe_credit_note_refund_allocation_boundary","question":"Does issuing a Stripe credit note guarantee a refund to the original payment method?"},{"route_id":"agentic_reviewed_stripe_pending_update_application_payment_exception","question":"Do Stripe pending subscription updates always prevent a plan change before successful payment?"},{"route_id":"agentic_reviewed_stripe_connect_charge_model_dispute_liability","question":"Does Stripe on_behalf_of move dispute debits to a connected account for every charge model?"},{"route_id":"agentic_reviewed_stripe_transfer_source_transaction_funds_availability","question":"Does a successful Stripe transfer request prove that the associated charge funds were already available?"},{"route_id":"agentic_reviewed_stripe_transfer_group_association_not_funding_proof","question":"Does a shared Stripe transfer_group prove a one-to-one funding relationship between a charge and transfer?"},{"route_id":"agentic_reviewed_stripe_destination_application_fee_refund_allocation","question":"Does refunding a Stripe destination charge automatically refund the platform application fee?"},{"route_id":"agentic_reviewed_stripe_account_charges_payouts_separate_capabilities","question":"Does charges_enabled on a Stripe connected account establish that it can also receive payouts?"},{"route_id":"agentic_reviewed_stripe_balance_transaction_gross_fee_net_reconciliation","question":"Is a Stripe balance transaction amount the net proceeds of the underlying payment?"},{"route_id":"agentic_reviewed_stripe_dispute_after_delivery_financial_reversal","question":"Does successful software delivery make a Stripe card payment immune to a later dispute debit?"},{"route_id":"agentic_reviewed_mpp_challenge_description_not_merchant_authority","question":"Does an HTTP 402 MPP challenge establish that its stated merchant and payment terms are authorised?"},{"route_id":"agentic_reviewed_mpp_request_body_digest_resource_binding","question":"Does an MPP payment credential automatically authorise a different request body or resource?"},{"route_id":"agentic_reviewed_mpp_receipt_payment_reference_not_service_delivery","question":"Does an MPP receipt alone prove the intended API result was delivered for the agreed amount and currency?"},{"route_id":"agentic_reviewed_mpp_expiry_and_method_specific_proof_verification","question":"Can an MPP server accept a caller payment assertion after the challenge expired merely because it was signed earlier?"},{"route_id":"agentic_reviewed_mpp_replay_state_and_idempotent_operation_recovery","question":"Does cryptographically binding an MPP challenge guarantee safe retries across multiple server instances?"},{"route_id":"agentic_reviewed_mpp_payment_credential_separate_application_authority","question":"Does a valid MPP payment credential by itself authorise access to a customer private resource?"},{"route_id":"agentic_reviewed_mpp_payment_method_settlement_semantics","question":"Does switching MPP payment methods preserve the same verification and settlement behavior?"},{"route_id":"agentic_reviewed_ucp_profile_capability_intersection_not_action_authority","question":"Does a capability advertised in a UCP profile become active for every checkout operation?"},{"route_id":"agentic_reviewed_ucp_checkout_update_final_terms_approval","question":"Does the initial UCP checkout response freeze the terms an agent will later commit to purchase?"},{"route_id":"agentic_reviewed_ucp_checkout_readiness_not_order_completion","question":"Does UCP ready_for_complete establish a completed or paid order?"},{"route_id":"agentic_reviewed_ucp_payment_handler_credential_recipient_review","question":"Can an agent assume every UCP payment handler sends credentials to the same parties?"},{"route_id":"agentic_reviewed_ucp_order_confirmation_not_fulfillment_evidence","question":"Does a confirmed UCP order prove that the purchased entitlement or goods were delivered?"},{"route_id":"agentic_reviewed_ucp_authentication_profile_principal_binding","question":"Does UCP require one universal authentication scheme for every merchant endpoint?"},{"route_id":"agentic_reviewed_ucp_profile_cache_version_revalidation","question":"Can an agent rely indefinitely on a cached UCP profile because its dated version is unchanged?"},{"route_id":"agentic_reviewed_ap2_checkout_hash_latest_terms_and_payee","question":"Can an AP2 mandate be reused after the checkout terms or payment recipient have changed?"},{"route_id":"agentic_reviewed_ap2_payment_mandate_versus_outcome_receipt","question":"Does an AP2 Payment Mandate replace evidence of the actual payment outcome?"},{"route_id":"agentic_reviewed_ap2_dispute_evidence_not_universal_outcome","question":"Does AP2 define a universal dispute outcome or evidence-retention service for an agent purchase?"},{"route_id":"agentic_reviewed_ap2_agent_to_agent_delegation_outside_v02","question":"Does AP2 v0.2 fully specify passing purchase mandates between independent shopping agents?"},{"route_id":"agentic_reviewed_adyen_split_instructions_not_recipient_credit_proof","question":"Does an accepted Adyen split payment prove that the intended balance account received the funds?"},{"route_id":"agentic_reviewed_square_idempotency_key_changed_payment_request","question":"Can a Square CreatePayment retry reuse its idempotency key with a changed payment amount?"},{"route_id":"agentic_reviewed_ap2_human_present_autonomous_verification_chain","question":"Do AP2 direct and autonomous purchases use the same signer evidence for a closed mandate?"},{"route_id":"agentic_reviewed_openai_file_expiry_purpose_batch_completion","question":"Does completing an OpenAI batch establish that its uploaded files and application state have been deleted?"},{"route_id":"agentic_reviewed_openai_residency_storage_processing_region_boundary","question":"Does an OpenAI regional-storage configuration establish that all processing stays in that region?"},{"route_id":"agentic_reviewed_openai_abuse_retention_exception_boundary","question":"Is OpenAI abuse-monitoring retention an unconditional maximum that applies despite all safety and legal exceptions?"},{"route_id":"agentic_reviewed_openai_remote_tool_retention_separate_controller","question":"Do OpenAI organization retention controls automatically govern data sent to a remote MCP service?"},{"route_id":"agentic_reviewed_purview_preservation_lock_irreversible_policy_floor","question":"Can a global administrator later shorten or disable a Purview policy after applying Preservation Lock?"},{"route_id":"agentic_reviewed_purview_teams_hidden_mailbox_evidence_copy","question":"Does a Teams message disappearing from chat prove that its retained compliance copy is gone?"},{"route_id":"agentic_reviewed_purview_disposition_approval_versus_deletion_evidence","question":"Does approving a Purview disposition review prove immediate deletion of every copy of the item?"},{"route_id":"agentic_reviewed_purview_sharepoint_versioning_preservation_copy","question":"Does applying Purview retention to a SharePoint site alone guarantee preservation of every file version?"},{"route_id":"agentic_reviewed_purview_policy_release_site_exclusion_grace","question":"Does excluding a SharePoint site from a Purview retention policy receive the same grace period as releasing the policy?"},{"route_id":"agentic_reviewed_purview_event_retention_untriggered_record","question":"Does applying an event-based Purview record label start its retention countdown before the event is matched?"},{"route_id":"agentic_reviewed_google_vault_matter_close_holds_export_loss","question":"Can a Google Vault matter be closed while preserving its active holds and existing downloadable exports?"},{"route_id":"agentic_reviewed_google_vault_export_download_expiry","question":"Can a Google Vault export remain a downloadable evidence archive indefinitely after it is created?"},{"route_id":"agentic_reviewed_google_vault_retention_expiry_service_purge_timing","question":"Does expiry of a Google Vault retention rule prove immediate removal from every supported service and from Vault?"},{"route_id":"agentic_reviewed_google_vault_version_date_current_metadata","question":"Does a Vault version-date search reproduce every historical Drive revision and its metadata exactly as they existed then?"},{"route_id":"agentic_reviewed_google_vault_shared_drive_search_scope","question":"Does selecting custodian accounts in a Vault Drive search automatically include all relevant shared-drive files?"},{"route_id":"agentic_reviewed_s3_lifecycle_expiration_noncurrent_version_residue","question":"Does an S3 Lifecycle Expiration action permanently remove all versions of an object in a versioned bucket?"},{"route_id":"agentic_reviewed_s3_legal_hold_independent_retention_expiry","question":"Does an S3 Object Lock legal hold end automatically when the object version’s retention date passes?"},{"route_id":"agentic_reviewed_s3_accesspoint_removal_other_access_paths","question":"Does deleting one S3 access point revoke access through other access points or the bucket hostname?"},{"route_id":"agentic_reviewed_gcs_soft_delete_bucket_object_restoration","question":"Does deleting a Cloud Storage bucket with soft delete enabled prove that the bucket and its objects are permanently gone?"},{"route_id":"agentic_reviewed_gcs_bucket_lock_irreversible_retention_floor","question":"Can a project owner unlock or shorten a Cloud Storage bucket retention policy after it is locked?"},{"route_id":"agentic_reviewed_gcs_lifecycle_asynchronous_policy_transition","question":"Does a Cloud Storage lifecycle eligibility timestamp establish when an object was actually deleted?"},{"route_id":"agentic_reviewed_azure_blob_versioning_overwrite_residual","question":"Does overwriting an Azure blob remove the data stored in its previous versions when versioning is enabled?"},{"route_id":"agentic_reviewed_azure_point_in_time_restore_scope_exclusions","question":"Does Azure Blob point-in-time restore recover every blob type and a container deleted during the restore period?"},{"route_id":"agentic_reviewed_azure_legal_hold_retention_combined_eligibility","question":"Does clearing an Azure Blob legal hold permit deletion while a separate time-based retention policy still applies?"},{"route_id":"agentic_reviewed_azure_key_disabled_versus_deleted_state","question":"Does setting an Azure Key Vault key to disabled prove that its key material has been destroyed?"},{"route_id":"agentic_reviewed_azure_replication_policy_removal_data_boundary","question":"Does removing an Azure object-replication policy itself demonstrate cleanup of destination blob copies?"},{"route_id":"agentic_reviewed_pinecone_delete_eventual_query_visibility","question":"Does a successful Pinecone delete response establish that an immediate query cannot return the deleted records?"},{"route_id":"agentic_reviewed_pinecone_backup_survives_source_index_deletion","question":"Does deleting a Pinecone index establish that all of its independently created backups are gone?"},{"route_id":"agentic_reviewed_pinecone_id_list_not_complete_content_export","question":"Does a Pinecone record count or paginated list of IDs establish a complete export of stored vector values and metadata?"},{"route_id":"agentic_reviewed_pinecone_import_continue_incomplete_record_set","question":"Does a completed Pinecone import prove every source record was successfully imported when error_mode is continue?"},{"route_id":"agentic_reviewed_qdrant_write_wait_replica_acknowledgement","question":"Does a Qdrant write completed with wait=true establish that every configured replica has applied the change?"},{"route_id":"agentic_reviewed_qdrant_snapshot_recovery_priority_boundary","question":"Does recovering a Qdrant snapshot always replace existing collection data with the snapshot contents?"},{"route_id":"agentic_reviewed_qdrant_payload_index_removal_not_field_deletion","question":"Does deleting a Qdrant payload index remove the indexed values from stored point payloads?"},{"route_id":"agentic_reviewed_qdrant_alias_switch_retained_collection","question":"Does atomically moving a Qdrant alias to a replacement collection remove the old collection and its data?"},{"route_id":"agentic_reviewed_qdrant_readonly_snapshot_download_boundary","question":"Does Qdrant read-only collection access prevent a permitted user from downloading a collection snapshot?"},{"route_id":"agentic_reviewed_snowflake_transient_table_recovery_window","question":"Does a Snowflake transient table retain the same historical recovery window as a permanent table?"},{"route_id":"agentic_reviewed_snowflake_long_query_retention_transition","question":"Does expiry of a Snowflake Time Travel retention period prove the historical data has already moved into Fail-safe?"},{"route_id":"agentic_reviewed_snowflake_clone_shared_partition_retention","question":"Can a transient clone retain shared Snowflake micro-partitions after its permanent source table is dropped?"},{"route_id":"agentic_reviewed_snowflake_secure_sharing_not_independent_export","question":"Does access to a Snowflake secure data share give the consumer an independently stored exit copy?"},{"route_id":"agentic_reviewed_snowflake_unload_policy_context_completeness","question":"Does a successful Snowflake COPY INTO location export prove that all unmasked source rows and their governance policies were preserved?"},{"route_id":"agentic_reviewed_snowflake_drop_external_table_file_residue","question":"Does DROP EXTERNAL TABLE in Snowflake delete the underlying files from external storage?"},{"route_id":"agentic_reviewed_databricks_deletion_vector_physical_removal_stages","question":"Does a Delta row deletion using deletion vectors immediately remove the row bytes from all underlying data files?"},{"route_id":"agentic_reviewed_exchange_application_rbac_additive_entra_grants","question":"Does a scoped Exchange application RBAC assignment restrict an existing unscoped Entra application grant?"},{"route_id":"agentic_reviewed_entra_admin_consent_role_specific_graph_exclusion","question":"Does owning an app registration establish authority to grant every Microsoft Graph application permission?"},{"route_id":"agentic_reviewed_entra_federated_credential_exact_subject_branch","question":"Does an Entra federated credential for one GitHub branch automatically trust every branch in that repository?"},{"route_id":"agentic_reviewed_playwright_storage_state_session_storage_exclusion","question":"Does Playwright saved storage state automatically preserve every authentication mechanism?"},{"route_id":"agentic_reviewed_playwright_actionability_not_server_acceptance","question":"Does a successful Playwright click establish that a server accepted the intended business action?"},{"route_id":"agentic_reviewed_oauth_token_exchange_subject_actor_policy","question":"Does supplying a subject token and requested audience automatically grant delegated OAuth authority?"},{"route_id":"agentic_reviewed_oauth_refresh_invalid_grant_cause_boundary","question":"Can an agent treat a retained refresh token or an invalid_grant response as proof of continuing authority?"},{"route_id":"agentic_reviewed_kubernetes_tokenreview_returned_audience_intersection","question":"Does TokenReview authenticated=true establish that a Kubernetes token is valid for any service audience?"},{"route_id":"agentic_reviewed_github_installation_token_narrowing_grant_ceiling","question":"Can a GitHub installation token request broader permissions or repositories than the app installation allows?"},{"route_id":"agentic_reviewed_github_fine_grained_token_pending_approval_access","question":"Can a newly generated fine-grained GitHub token access private organization resources while required approval is pending?"},{"route_id":"agentic_reviewed_github_ruleset_app_bypass_separate_authority","question":"Does repository contents-write permission establish that a GitHub App can bypass repository rulesets?"},{"route_id":"agentic_reviewed_slack_app_preapproval_not_installation","question":"Does Slack administrator preapproval establish that an app is already installed and active in the workspace?"},{"route_id":"agentic_reviewed_slack_app_level_token_method_boundary","question":"Can a Slack app-level token replace a bot token for arbitrary Web API operations?"},{"route_id":"agentic_reviewed_slack_customized_message_user_impetus","question":"Does approval of chat:write.customize alone justify posting a Slack message as a user?"},{"route_id":"agentic_reviewed_workspace_domain_delegation_user_scope_limit","question":"Do OAuth scopes restrict which users a Google Workspace domain-wide delegated account can impersonate?"},{"route_id":"agentic_reviewed_google_oauth_testing_refresh_expiry_exception","question":"Can an external Google OAuth app assume the same refresh-token lifetime in testing and production?"},{"route_id":"agentic_reviewed_drive_download_capability_format_boundary","question":"Does seeing Google Drive file metadata establish that an agent can download or export its content?"},{"route_id":"agentic_reviewed_salesforce_client_credentials_run_as_authority","question":"Can the documented Salesforce connected-app client-credentials flow operate without a configured run-as user?"},{"route_id":"agentic_reviewed_salesforce_permission_group_recalculation_state","question":"Does editing a Salesforce permission-set group immediately change its assigned users’ effective permissions?"},{"route_id":"agentic_reviewed_salesforce_apex_api_version_execution_mode","question":"Does every Apex version enforce the same default field and object permissions as the Salesforce user interface?"},{"route_id":"agentic_reviewed_salesforce_oauth_full_user_access_ceiling","question":"Does Salesforce OAuth full scope grant data access beyond the logged-in user’s assigned authority?"},{"route_id":"agentic_reviewed_notion_page_lock_ui_not_api_denial","question":"Does locking a Notion page prevent edits through its API by an otherwise authorized connection?"},{"route_id":"agentic_reviewed_notion_relation_related_database_access","question":"Does sharing one Notion database guarantee complete relation and rollup values from its related databases?"},{"route_id":"agentic_reviewed_servicenow_rest_endpoint_table_field_acls","question":"Does access to a ServiceNow REST endpoint establish permission to every table and field it exposes?"},{"route_id":"agentic_reviewed_servicenow_ui_policy_data_policy_api_boundary","question":"Does hiding or restricting a field with a ServiceNow UI policy establish the same restriction for REST writes?"},{"route_id":"agentic_reviewed_mcp_authorization_url_validation_opening_boundary","question":"Can an MCP client safely open an authorization URL merely because an MCP server supplied it?"},{"route_id":"agentic_reviewed_smart_launch_context_not_patient_read_grant","question":"Does SMART launch/patient context grant an agent permission to read that patient’s clinical records?"},{"route_id":"agentic_reviewed_smart_backend_preauthorization_not_patient_consent","question":"Does a SMART Backend Services access token establish patient consent for an administrative workflow?"},{"route_id":"agentic_reviewed_fhir_capabilitystatement_kind_deployment_boundary","question":"Does every FHIR CapabilityStatement describe the controls enforced by a deployed endpoint?"},{"route_id":"agentic_reviewed_smart_successful_search_permission_omissions","question":"Does HTTP 200 from a SMART-authorized FHIR search prove that every matching clinical record was returned?"},{"route_id":"agentic_reviewed_fhir_delete_version_history_retention","question":"Does a successful FHIR R5 DELETE erase all historical versions and physical copies of a resource?"},{"route_id":"agentic_reviewed_fhir_bulk_export_partial_success_manifest","question":"Does a completed FHIR Bulk Data export with HTTP 200 guarantee a complete error-free dataset?"},{"route_id":"agentic_reviewed_fhir_consent_resource_not_access_enforcement","question":"Does storing a FHIR Consent resource cause the server to enforce its privacy choices?"},{"route_id":"agentic_reviewed_fhir_provenance_recordkeeping_assertion_boundary","question":"Does a FHIR Provenance resource or signature establish that its clinical content is true?"},{"route_id":"agentic_reviewed_opcua_application_trust_node_permission_separation","question":"Does trusting an OPC UA application certificate authorize every node operation for its user?"},{"route_id":"agentic_reviewed_opcua_good_status_source_timestamp_freshness","question":"Does a Good OPC UA DataValue status prove the underlying measurement is fresh?"},{"route_id":"agentic_reviewed_opcua_monitoreditem_queue_overflow_loss","question":"Does receiving OPC UA subscription updates prove every intermediate value was preserved?"},{"route_id":"agentic_reviewed_opcua_republish_retained_notification_limit","question":"Can OPC UA Republish reconstruct every missing notification after a sequence gap?"},{"route_id":"agentic_reviewed_opcua_method_result_physical_completion_boundary","question":"Does an OPC UA Call result alone prove that the intended physical operation completed?"},{"route_id":"agentic_reviewed_opcua_application_uri_certificate_binding","question":"Can an OPC UA endpoint be accepted when its ApplicationURI differs from the certificate identity?"},{"route_id":"agentic_reviewed_coupa_approval_object_state_specific_authority","question":"Does an approved Coupa document establish authority for a later purchase-order change?"},{"route_id":"agentic_reviewed_coupa_purchase_order_version_export_reconciliation","question":"Does an unchanged Coupa purchase-order version prove no order data changed before ERP synchronization?"},{"route_id":"agentic_reviewed_coupa_requisition_submission_not_approval_completion","question":"Does submitting a Coupa requisition through the API establish that its approval chain completed?"},{"route_id":"agentic_reviewed_purview_ediscovery_count_error_reconciliation","question":"Does a Purview eDiscovery estimate or successful process status prove that the exported evidence is complete?"},{"route_id":"agentic_reviewed_purview_ediscovery_partial_index_search_omissions","question":"Does a Purview eDiscovery search automatically include content that was not fully indexed?"},{"route_id":"agentic_reviewed_purview_ediscovery_hold_location_status","question":"Does naming a custodian in a Purview eDiscovery hold establish that every intended location is successfully held?"},{"route_id":"agentic_reviewed_purview_ediscovery_decryption_not_content_search","question":"Does a Purview eDiscovery search hit guarantee that encrypted content can be reviewed or exported in plaintext?"},{"route_id":"agentic_reviewed_aws_cost_data_estimates_late_adjustments","question":"Does current AWS Cost Explorer or Cost and Usage Report data prove the final charge for a completed workflow?"},{"route_id":"agentic_reviewed_aws_cost_tag_backfill_historical_assignment","question":"Can activating an AWS cost-allocation tag today reconstruct attribution for resources that were never tagged?"},{"route_id":"agentic_reviewed_openai_prompt_cache_usage_rate_distinction","question":"Can an agent estimate OpenAI prompt cost by charging every input token at one uncached rate?"},{"route_id":"agentic_reviewed_vercel_gateway_fallback_model_cost_attribution","question":"Does using one AI Gateway endpoint mean every fallback request used the same model and cost basis?"},{"route_id":"agentic_reviewed_npm_ci_lockfile_mismatch_dependency_boundary","question":"Does a compatible dependency range alone guarantee that npm installs the previously reviewed dependency tree?"},{"route_id":"agentic_reviewed_a2a_task_completed_business_acceptance","question":"Does an A2A task’s completed state establish that the buyer accepted the delivered service?"},{"route_id":"agentic_reviewed_a2a_extension_version_required_negotiation","question":"Does advertising an A2A extension guarantee compatible semantics with every version of that extension?"},{"route_id":"agentic_reviewed_a2a_push_notification_identity_event_state","question":"Does receiving an authenticated A2A push notification establish a final task outcome?"},{"route_id":"agentic_reviewed_otel_memory_limiter_refusal_upstream_retry","question":"Can an OpenTelemetry Collector memory limiter refuse telemetry before durable storage?"},{"route_id":"agentic_reviewed_w3c_sampled_flag_not_recording_guarantee","question":"Does a W3C sampled trace flag require every downstream component to record the operation?"},{"route_id":"agentic_reviewed_w3c_traceparent_version_invalid_id_validation","question":"Can an unfamiliar traceparent version or all-zero identifier be accepted without validation?"},{"route_id":"agentic_reviewed_w3c_parent_id_immediate_span_not_history","question":"Does the W3C parent-id field contain the complete upstream request history?"},{"route_id":"agentic_reviewed_w3c_trace_context_sensitive_data_prohibition","question":"Can customer identifiers or sensitive business data be embedded in W3C trace context?"},{"route_id":"agentic_reviewed_stripe_separate_event_objects_duplicate_effect","question":"Can different Stripe Event IDs still represent duplicate processing of the same underlying effect?"},{"route_id":"agentic_reviewed_stripe_event_created_versus_delivery_timestamp","question":"Does a new Stripe webhook signature timestamp mean the business event was created again?"},{"route_id":"agentic_reviewed_stripe_event_schema_fixed_at_creation","question":"Does retrieving an old Stripe Event with a newer API version upgrade its stored data schema?"},{"route_id":"agentic_reviewed_stripe_webhook_raw_body_signature_boundary","question":"Can a parsed and reserialized Stripe webhook body be substituted for the original bytes during signature verification?"},{"route_id":"agentic_reviewed_stripe_event_account_context_retrieval","question":"Can a Stripe event be reconciled against an arbitrary account when it originated from a connected account or organisation context?"},{"route_id":"agentic_reviewed_stripe_webhook_signing_secret_overlap","question":"Can more than one Stripe webhook signing secret remain valid during a planned rotation?"},{"route_id":"agentic_reviewed_stripe_thin_event_latest_object_not_snapshot","question":"Does fetching the related object for a Stripe thin event reconstruct its exact historical state?"},{"route_id":"agentic_reviewed_stripe_v1_event_retrieval_window","question":"Can the Stripe v1 Event retrieval API reconstruct events older than its documented retrieval window?"},{"route_id":"agentic_reviewed_github_actions_run_attempt_evidence_identity","question":"Can a GitHub Actions rerun keep the same run ID while producing different attempt evidence?"},{"route_id":"agentic_reviewed_mcp_legacy_initialization_capability_sequence","question":"For MCP 2025-11-25, does successful initialization permit calls to every client-advertised capability?"},{"route_id":"agentic_reviewed_mcp_tool_list_change_subscription_boundary","question":"Does absence of an MCP tools/list_changed notification prove a cached tool schema is unchanged?"},{"route_id":"agentic_reviewed_agentcore_runtime_version_endpoint_session_binding","question":"Does publishing an AgentCore Runtime update put every endpoint and existing session on the new version?"},{"route_id":"agentic_reviewed_agentcore_compute_timeout_session_resumption","question":"Does an AgentCore idle timeout necessarily invalidate the session identifier and erase every persisted state?"},{"route_id":"agentic_reviewed_gcp_log_sink_writer_destination_permission","question":"Does creating a Google Cloud log sink always grant its writer permission at the destination?"},{"route_id":"agentic_reviewed_gcp_audit_authorizationinfo_permission_tuple","question":"Does one granted authorizationInfo entry prove every permission required for a Google Cloud action was granted?"},{"route_id":"agentic_reviewed_azure_log_retention_query_mode_boundary","question":"Does total Azure Log Analytics retention guarantee the same interactive query window for every table plan?"},{"route_id":"agentic_reviewed_azure_diagnostic_destination_network_boundary","question":"Can an Azure diagnostic setting deliver to a firewalled Storage or Event Hubs destination without the required network allowance?"},{"route_id":"agentic_reviewed_a2a_resubscribe_current_state_not_event_replay","question":"Does A2A task resubscription guarantee replay of every event missed while disconnected?"},{"route_id":"agentic_reviewed_a2a_artifact_append_final_chunk_task_state","question":"Does an A2A artifact’s lastChunk flag mean the entire task has completed?"},{"route_id":"agentic_reviewed_a2a_history_length_server_limit","question":"Does omitting A2A historyLength guarantee the server returns the complete retained conversation?"},{"route_id":"agentic_reviewed_a2a_extended_card_authenticated_capability_scope","question":"Can an authenticated A2A Agent Card expose different capabilities from its public card or another client’s card?"},{"route_id":"agentic_reviewed_foundry_classic_function_request_output_evidence","question":"Does a Foundry classic run in requires_action state prove its requested external function has executed?"},{"route_id":"agentic_reviewed_vertex_agent_engine_runtime_identity_selection","question":"Does deploying an Agent Engine mean downstream tools run with the deploying caller’s identity?"}],"preview_endpoint":"/api/index/preview","payment_links_active":true,"payment_link_contract":"/varexis-index/licensed-payment-links.json","checkout_endpoint":"/api/index/checkout","result_endpoint":"/api/index/result","subscription_query_endpoint":"/api/index/query"}