VAREXIS-INDEX · Free decision guide
Agent Tool Change & Execution Provenance
Delegated workflows and signed artifacts can look consistent while credential selection, configuration overrides or missing execution outcomes change what the evidence actually supports.
For: Platform engineers reviewing changed workflows, delegated execution and artifact evidence.
Your decision: Review a changed execution plan and its artifact evidence before relying on declared authority, completion or provenance.
Evidence to bring
Dated workflow revisions, initiating identity and target access, forwarding and credential-selection declarations without secret values, linked pipeline results, artifact bytes or independently bound digests, attestation bundles and expected signer policy.
- Identify the initiating principal and intended target.
- Resolve forwarded configuration and credential-source changes.
- Collect the linked downstream outcome rather than a creation signal.
- Bind the supplied artifact digest and expected signing workflow.
- Retain unresolved predicate or timestamp trust as an evidence gap.
What this evidence supports
The selected GitLab, GitHub and Sigstore documentation separates trigger authority, effective configuration, downstream completion, environment credential selection and artifact identity from signature or metadata claims. Apply each source only to its recorded version and scope.
What remains unestablished
These records do not verify cryptographic signatures, live permissions, secret values, artifact safety or actual execution. A missing downstream result, unbound digest, unexpected signer or unresolved configuration conflict prevents an approval conclusion.
Read the source evidence
These 9 existing records are free. Review the source version and limitations before applying a finding to your decision.
GitLab trigger-token user authority
Bind a trigger token to its creating user and permitted target.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1"}- Record identifier
VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1- SHA-256
4a7198c2b6b0a7439aab7daa7343767b7dcdcfddc491eb3d0b28f5467ed37c3f
GitLab forwarded-variable precedence
Reconcile upstream overrides with downstream configuration.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1"}- Record identifier
VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1- SHA-256
15541b857951adb69c2471a0db1b63448b96affce30bb4183c891a19940852dc
GitLab trigger success and downstream completion
Collect the downstream execution result beyond trigger success.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1"}- Record identifier
VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1- SHA-256
5ba05d057f47caa61b04a881f8c12f85632ebc7e283acd09d19c0d9b3d8a0a04
GitHub reusable-workflow environment secret selection
Establish the credential source without exposing its value.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1"}- Record identifier
VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1- SHA-256
5efad68f7334b1bc5eed3d9a7e3921f9e61151eddb0880033347f172e277fce5
GitHub attestation reusable-workflow signer policy
Constrain the reusable workflow that actually signs the artifact.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1"}- Record identifier
VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1- SHA-256
642ac75db484e2a44cc488481f0cafaea3f6d971516b18bde0e1626a15495a61
GitHub offline attestation repository-name binding
Separate historical certificate names from current repository ownership.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1"}- Record identifier
VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1- SHA-256
14efbfb06a77e76336c60fa001051a7abc3dbac4b161c4f7b33fafceadcc52f0
Sigstore bundle informational digest input
Obtain the intended artifact digest independently of the informational bundle field.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1"}- Record identifier
VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1- SHA-256
3a019922988b038416c3243360b8c0685c8ebc1ae91e7587c27851166fca0dcb
GitHub attestation predicate trust boundary
Check trust in the producing context beyond signature validity.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1"}- Record identifier
VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1- SHA-256
ec4d4b0b560b558d1ac813aad36ea7129a417636a37123835a61a2bdaddf2ee9
Sigstore Rekor timestamp trust and version
Identify the timestamp version and trust source before relying on signing time.
Original source · Reviewed 2026-10-29. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1"}- Record identifier
VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1- SHA-256
78165b63326d053d01351380a1e8c8ff7393e7eb58d622ccbe8d2b55ac623aa1
Connect an evidence client
Configure the two existing MCP connectors, then use the endpoint and arguments shown for each record. The original /mcp provides its frozen search and previews; /mcp/catalogue provides bounded browsing and exact access to additional published records. They are separate tool contracts, not interchangeable connections.
Canonical decision-guide JSON: records, provenance, hashes and checker selection. Enhanced natural-language search remains on HOLD. Keep credentials and private declarations local; public MCP supplies evidence and does not run licensed analysis.
When a local checker helps
Tool Admission (£49 + VAT) compares supported GitHub, Playwright, Notion and Slack declarations. Audit Coverage (£79 + VAT) checks supported declared identity/authority/action/outcome chains and capture gaps. GitLab and Sigstore evidence informs manual review; it adds no native connector or signature-verification capability.
Each separate one-time internal-use licence adds reusable local declaration analysis, structured conflicts or gaps and content hashes. The free guide supplies source context; it does not run those analyses, enforce policy or grant access to either executable through a subscription.
Agent Tool Admission & Permission Control
£49 + VAT · One-time internal-use licence. Separate from saved evidence and subscriptions. VAT is confirmed at checkout.
Supplied inputs: JSON declarations of GitHub, Playwright, Notion or Slack connector identity, requested and allowed actions, resources, recipients and authority; an earlier inventory supports comparison.
Local results: Structured findings about declared permission conflicts, inventory changes and missing verification, with source and content hashes.
Synthetic demonstration: A requested destination is outside the declared authority. Obtain authority evidence before relying on the plan.
Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement.
Read the free demonstration and licence terms · Review purchase — £49 + VAT · Existing product details
Agent Audit & Evidence Coverage
£79 + VAT · One-time internal-use licence. Separate from saved evidence and subscriptions. VAT is confirmed at checkout.
Supplied inputs: JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.
Local results: Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.
Synthetic demonstration: An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.
Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement.
Read the free demonstration and licence terms · Review purchase — £79 + VAT · Existing product details
A free record supplies documented evidence. A licensed checker performs reusable local analysis of supported customer-supplied declarations. Full operational schemas, runnable examples and executable archives accompany the existing licensed package. These examples are concise synthetic excerpts, not complete operational inputs or analyses. No runtime enforcement, live-system verification or certification is supplied. Compare existing prices · Checkout and recovery terms.
Original evidence-pack section · Choose another decision guide
