{
  "schema": "varexis-agentic-production-pathway/1",
  "title": "Agentic Production Pathway",
  "page_url": "/index-packs#agentic-production-pathway",
  "discovery_url": "/varexis-index/agentic-production-pathway.json",
  "purpose": "An explanatory progression, not a bundle, prerequisite sequence or additional paid product. Each available checker is purchased separately only when needed.",
  "authority_boundary": "Enforced allow/refuse decisions are NOT provided or validated by current INDEX. The available products check supplied declarations only; they do not provide live runtime enforcement, verify effective permissions or actual event completeness, or provide safety certification or deployment approval.",
  "current_runtime_enforcement": false,
  "current_safety_certification": false,
  "supporting_evidence": {
    "availability": "available_now",
    "payment_required": false,
    "reviewed_on": "2026-10-17",
    "review_count": 52,
    "comparison_route_count": 12,
    "question_routes_url": "/varexis-index/questions.json",
    "review_catalogue_url": "/varexis-index/vendor-evidence.html",
    "boundary": "Free documentation reviews across several platforms. These reviews do not expand either licensed checker's supported profiles, inspect a buyer deployment or validate runtime enforcement.",
    "licensed_checker_coverage_changed": false,
    "topics": [
      {
        "label": "Authority and policy context",
        "question": "Which evidence distinguishes a declared AWS permission from effective agent authority?",
        "route_id": "agentic_reviewed_review_agent_authority_grants_and_policy_context",
        "preview_url": "/index-access?route=agentic_reviewed_review_agent_authority_grants_and_policy_context",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-IAM-SIMULATION-LIVE-01-v1",
            "url": "/varexis-index/records/iam-simulation-does-not-execute-authority.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-STS-SESSION-INTERSECTION-01-v1",
            "url": "/varexis-index/records/sts-session-policy-cannot-expand-role.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-IAM-PASSROLE-DELEGATION-01-v1",
            "url": "/varexis-index/records/iam-passrole-service-delegation-evidence.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-IAM-IFEXISTS-DENY-01-v1",
            "url": "/varexis-index/records/iam-negated-ifexists-deny-missing-context.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SCP-CEILING-NOT-GRANT-01-v1",
            "url": "/varexis-index/records/scp-permission-ceiling-not-authority-grant.json"
          }
        ]
      },
      {
        "label": "Identity and delegation",
        "question": "What should an agent declare before using delegated or impersonated authority?",
        "route_id": "agentic_reviewed_review_agent_identity_and_delegation_scope",
        "preview_url": "/index-access?route=agentic_reviewed_review_agent_identity_and_delegation_scope",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-BIND-ESCALATE-01-v1",
            "url": "/varexis-index/records/kubernetes-bind-escalate-delegation-boundary.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-IMPERSONATION-IDENTITY-01-v1",
            "url": "/varexis-index/records/kubernetes-impersonation-caller-and-effective-identity.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-INSTALLATION-DOWNSCOPE-01-v1",
            "url": "/varexis-index/records/github-installation-token-repository-permission-downscope.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GCP-PERMISSION-PROBE-SCOPE-01-v1",
            "url": "/varexis-index/records/gcp-permission-probe-explicit-caller-resource-scope.json"
          }
        ]
      },
      {
        "label": "Policy results and enforcement boundaries",
        "question": "When does a policy evaluation fail to prove that an action was refused?",
        "route_id": "agentic_reviewed_review_policy_result_activation_and_enforcement_boundaries",
        "preview_url": "/index-access?route=agentic_reviewed_review_policy_result_activation_and_enforcement_boundaries",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-AUTHORIZATION-CACHE-01-v1",
            "url": "/varexis-index/records/kubernetes-webhook-authorization-cache-window.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-VALIDATION-ACTIONS-01-v1",
            "url": "/varexis-index/records/kubernetes-validation-warn-audit-versus-deny.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-ADMISSION-DRYRUN-01-v1",
            "url": "/varexis-index/records/kubernetes-dry-run-admission-not-persisted-action.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-OPA-UNDEFINED-RESULT-01-v1",
            "url": "/varexis-index/records/opa-data-api-http-success-undefined-result.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-OPA-BUNDLE-ACTIVATION-01-v1",
            "url": "/varexis-index/records/opa-rejected-bundle-retains-previous-policy.json"
          }
        ]
      },
      {
        "label": "Audit collection and reconstruction",
        "question": "What evidence is needed before calling an audit chain complete?",
        "route_id": "agentic_reviewed_review_audit_collection_routing_and_event_reconstruction",
        "preview_url": "/index-access?route=agentic_reviewed_review_audit_collection_routing_and_event_reconstruction",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-AUDIT-BUFFER-LOSS-01-v1",
            "url": "/varexis-index/records/kubernetes-audit-buffer-export-loss.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-CLOUDTRAIL-EVENT-ORDER-01-v1",
            "url": "/varexis-index/records/cloudtrail-file-order-not-action-causality.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-CLOUDTRAIL-DUPLICATE-EVENTS-01-v1",
            "url": "/varexis-index/records/cloudtrail-duplicate-records-not-distinct-actions.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GCP-LOG-SINK-FILTERS-01-v1",
            "url": "/varexis-index/records/gcp-log-sink-filters-destination-coverage.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-AZURE-INGESTION-TRANSFORM-01-v1",
            "url": "/varexis-index/records/azure-monitor-transformation-filtered-evidence.json"
          }
        ]
      },
      {
        "label": "Trace coverage and delivery gaps",
        "question": "Can an exported trace establish complete agent activity?",
        "route_id": "agentic_reviewed_review_trace_sampling_content_and_delivery_gaps",
        "preview_url": "/index-access?route=agentic_reviewed_review_trace_sampling_content_and_delivery_gaps",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-OTEL-SAMPLING-COVERAGE-01-v1",
            "url": "/varexis-index/records/otel-sampled-traces-not-complete-action-history.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-OTEL-QUEUE-RETRY-LOSS-01-v1",
            "url": "/varexis-index/records/otel-collector-queue-retry-loss-boundary.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-OTEL-SPAN-CONTENT-LIMITS-01-v1",
            "url": "/varexis-index/records/otel-span-limits-discarded-events-and-links.json"
          }
        ]
      },
      {
        "label": "Event replay and ordering",
        "question": "What evidence separates delivered events from actions performed once?",
        "route_id": "agentic_reviewed_review_event_replay_ordering_and_once_only_claims",
        "preview_url": "/index-access?route=agentic_reviewed_review_event_replay_ordering_and_once_only_claims",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-WEBHOOK-REPLAY-01-v1",
            "url": "/varexis-index/records/github-webhook-signature-replay-delivery-identity.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-EVENT-RETRY-IDENTITY-01-v1",
            "url": "/varexis-index/records/slack-event-retries-event-id-not-new-action.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-STEPFUNCTIONS-EXECUTION-SEMANTICS-01-v1",
            "url": "/varexis-index/records/step-functions-workflow-type-execution-guarantees.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-LAMBDA-ASYNC-DUPLICATE-01-v1",
            "url": "/varexis-index/records/lambda-async-success-can-still-redeliver.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-PUBSUB-ORDER-REDELIVERY-01-v1",
            "url": "/varexis-index/records/pubsub-ordering-key-redelivery-not-global-order.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-POSTGRES-DECODING-REPLAY-01-v1",
            "url": "/varexis-index/records/postgres-logical-slot-crash-replay-consumer-state.json"
          }
        ]
      },
      {
        "label": "Workflow tokens and bypass authority",
        "question": "Which declarations define an automated GitHub workflow's authority?",
        "route_id": "agentic_reviewed_review_workflow_token_grants_and_bypass_authority",
        "preview_url": "/index-access?route=agentic_reviewed_review_workflow_token_grants_and_bypass_authority",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-JOB-TOKEN-PERMISSIONS-01-v1",
            "url": "/varexis-index/records/github-job-token-permissions-and-omitted-scopes.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-REUSABLE-RERUN-REVISION-01-v1",
            "url": "/varexis-index/records/github-reusable-workflow-rerun-revision.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-OIDC-TOKEN-NOT-RESOURCE-GRANT-01-v1",
            "url": "/varexis-index/records/github-oidc-token-request-not-cloud-permission.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-RULESET-BYPASS-MODE-01-v1",
            "url": "/varexis-index/records/github-ruleset-bypass-mode-and-actor.json"
          }
        ]
      },
      {
        "label": "Content, posting and undo authority",
        "question": "What should be declared before an agent creates content or sends a message?",
        "route_id": "agentic_reviewed_review_content_creation_posting_and_undo_authority",
        "preview_url": "/index-access?route=agentic_reviewed_review_content_creation_posting_and_undo_authority",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-NOTION-CONTENT-CAPABILITY-SEPARATION-01-v1",
            "url": "/varexis-index/records/notion-insert-update-read-capability-separation.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-PUBLIC-POSTING-MEMBERSHIP-01-v1",
            "url": "/varexis-index/records/slack-public-posting-without-channel-membership.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-WEBHOOK-DESTINATION-BINDING-01-v1",
            "url": "/varexis-index/records/slack-incoming-webhook-fixed-destination.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-MESSAGE-DELETE-AUTHORSHIP-01-v1",
            "url": "/varexis-index/records/slack-message-delete-token-authorship-boundary.json"
          }
        ]
      },
      {
        "label": "Browser credentials and session context",
        "question": "What hidden context can change the authority of a declared agent session?",
        "route_id": "agentic_reviewed_review_browser_credentials_and_role_session_context",
        "preview_url": "/index-access?route=agentic_reviewed_review_browser_credentials_and_role_session_context",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-PLAYWRIGHT-AUTH-STATE-CREDENTIAL-01-v1",
            "url": "/varexis-index/records/playwright-saved-auth-state-is-credential-material.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-PLAYWRIGHT-SERVICE-WORKER-ROUTING-01-v1",
            "url": "/varexis-index/records/playwright-service-worker-request-routing-gap.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-STS-SOURCE-IDENTITY-PERSISTENCE-01-v1",
            "url": "/varexis-index/records/sts-source-identity-role-chain-attribution.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-STS-SESSION-TAG-TRANSITIVITY-01-v1",
            "url": "/varexis-index/records/sts-session-tag-transitivity-and-authority-context.json"
          }
        ]
      },
      {
        "label": "Pagination and content depth",
        "question": "What makes a successful evidence retrieval incomplete?",
        "route_id": "agentic_reviewed_review_paginated_evidence_and_content_depth",
        "preview_url": "/index-access?route=agentic_reviewed_review_paginated_evidence_and_content_depth",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-GITHUB-REST-PAGINATION-COVERAGE-01-v1",
            "url": "/varexis-index/records/github-rest-pagination-evidence-coverage.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-AUDIT-NOT-MESSAGE-CONTENT-01-v1",
            "url": "/varexis-index/records/slack-audit-logs-not-message-transcript.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-SLACK-HISTORY-CURSOR-TIME-WINDOW-01-v1",
            "url": "/varexis-index/records/slack-history-cursors-and-time-boundaries.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-NOTION-PROPERTY-ROLLUP-PAGINATION-01-v1",
            "url": "/varexis-index/records/notion-property-pagination-before-rollup-reliance.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-NOTION-BLOCK-DEPTH-COVERAGE-01-v1",
            "url": "/varexis-index/records/notion-block-children-depth-and-pagination.json"
          }
        ]
      },
      {
        "label": "Log selection, fields and masking",
        "question": "Which collection choices can remove fields or events from an audit record?",
        "route_id": "agentic_reviewed_review_log_selection_shape_and_masking",
        "preview_url": "/index-access?route=agentic_reviewed_review_log_selection_shape_and_masking",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-CLOUDFLARE-OUTPUT-REPLACEMENT-01-v1",
            "url": "/varexis-index/records/cloudflare-output-options-replacement-and-fields.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-CLOUDFLARE-FILTER-SAMPLING-COVERAGE-01-v1",
            "url": "/varexis-index/records/cloudflare-logpush-filter-and-sample-coverage.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-OPA-DECISION-LOG-MASKING-01-v1",
            "url": "/varexis-index/records/opa-masked-decision-log-not-original-input.json"
          }
        ]
      },
      {
        "label": "Event time, corrections and request identity",
        "question": "How should an audit chain distinguish timing, corrections and repeated records?",
        "route_id": "agentic_reviewed_review_event_time_corrections_and_request_identity",
        "preview_url": "/index-access?route=agentic_reviewed_review_event_time_corrections_and_request_identity",
        "records": [
          {
            "record_id": "VXI-EXT-PROCUREMENT-OTEL-EVENT-OBSERVED-TIMESTAMPS-01-v1",
            "url": "/varexis-index/records/otel-log-event-time-versus-observation-time.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-CLOUDTRAIL-ADDENDUM-CORRECTIONS-01-v1",
            "url": "/varexis-index/records/cloudtrail-addendum-late-and-corrected-evidence.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-GCP-LOG-QUERY-EXPORT-DEDUP-01-v1",
            "url": "/varexis-index/records/gcp-log-insertid-query-versus-export-deduplication.json"
          },
          {
            "record_id": "VXI-EXT-PROCUREMENT-K8S-AUDIT-REQUEST-STAGE-CORRELATION-01-v1",
            "url": "/varexis-index/records/kubernetes-audit-id-and-request-stage-correlation.json"
          }
        ]
      }
    ],
    "free_collections": {
      "url": "/varexis-index/evidence-collections.json",
      "collections": [
        {
          "id": "agent-access-lifecycle-evidence",
          "title": "Agent Access Lifecycle Evidence",
          "page_url": "/index-packs#agent-access-lifecycle-evidence",
          "route_id": "agentic_reviewed_agent_access_lifecycle_evidence",
          "record_count": 30,
          "payment_required": false
        },
        {
          "id": "agent-action-assurance-recovery-evidence",
          "title": "Agent Action Assurance & Recovery Evidence",
          "page_url": "/index-packs#agent-action-assurance-recovery-evidence",
          "route_id": "agentic_reviewed_agent_action_assurance_recovery_evidence",
          "record_count": 170,
          "payment_required": false
        },
        {
          "id": "agent-authority-and-tool-integrity-evidence",
          "title": "Agent Authority & Tool Integrity Evidence",
          "page_url": "/index-packs#agent-authority-and-tool-integrity-evidence",
          "route_id": "agentic_reviewed_agent_authority_and_tool_integrity_evidence",
          "record_count": 114,
          "payment_required": false
        },
        {
          "id": "enterprise-ai-data-custody-exit-assurance",
          "title": "Enterprise AI Data Custody & Exit Assurance",
          "page_url": "/index-packs#enterprise-ai-data-custody-exit-assurance",
          "route_id": "agentic_reviewed_enterprise_ai_data_custody_exit_assurance",
          "record_count": 108,
          "payment_required": false
        },
        {
          "id": "dependency-exposure-advisory-reliance-evidence",
          "title": "Dependency Exposure & Advisory Reliance Evidence",
          "page_url": "/index-packs#dependency-exposure-advisory-reliance-evidence",
          "route_id": "agentic_reviewed_dependency_exposure_advisory_reliance_evidence",
          "record_count": 11,
          "payment_required": false
        }
      ],
      "checklists": [
        {
          "id": "agent-offboarding-checklist",
          "title": "Free agent offboarding evidence checklist",
          "page_url": "/index-packs#agent-offboarding-checklist",
          "route_id": "agentic_reviewed_agent_offboarding_checklist",
          "record_count": 8,
          "payment_required": false
        }
      ]
    }
  },
  "purchasing": {
    "capabilities_url": "/api/index/capabilities",
    "hosted_contract_url": "/varexis-index/automatic-api.json",
    "agent_contract_url": "/varexis-index/agent-payments.json",
    "authority": "Compatible agents require owner spending authority for the exact VAT-inclusive quote. Discovery is not permission to spend.",
    "recovery": "Use the original purchasing path and key; MPP retries retain the original credential. Never repurchase to recover uncertain payment. Existing subscribers and saved-result owners retrieve before buying again."
  },
  "stages": [
    {
      "id": "free-evidence-discovery",
      "label": "Evidence discovery",
      "status_label": "FREE",
      "availability": "available_now",
      "kind": "public_evidence_discovery",
      "summary": "Read published evidence, sources and limits before choosing a checker.",
      "price": {
        "currency": "GBP",
        "excluding_vat": 0,
        "payment_required": false
      },
      "licence": "Public evidence retains its existing terms; discovery does not grant executable-product or upstream redistribution rights.",
      "terms_url": "/checkout-terms",
      "inputs": "An evidence question or published route ID.",
      "outputs": "Published bounded answers, source references, review dates and limitations.",
      "exclusions": [
        "Fresh investigation",
        "Runtime verification",
        "Paid executables"
      ],
      "purchase_url": null,
      "links": [
        {
          "label": "Explore free evidence",
          "href": "/index-access"
        }
      ]
    },
    {
      "id": "agent-tool-admission",
      "label": "Tool Admission",
      "status_label": "AVAILABLE NOW",
      "availability": "available_now",
      "kind": "existing_licensed_local_validator",
      "summary": "Check declared tool permissions and authority boundaries.",
      "capability": "Compare exact actions, resources and recipients across GitHub, Playwright, Notion and Slack declarations; identify authority conflicts, changes and missing verification.",
      "route_id": "agentic_pack_tool_admission_v1",
      "service_id": "tool_admission",
      "price_display": "£49 + VAT · one-time",
      "price": {
        "currency": "GBP",
        "excluding_vat": 49,
        "recurring": false,
        "per_run_fee": false,
        "vat": "Calculated at checkout where applicable",
        "published_terms_url": "/pricing#index"
      },
      "licence": "VAREXIS Agent Tool Admission & Permission Control v1.0.0\nOne-time licence for one purchasing individual or one legal entity, including its staff and agents acting internally on its behalf. Reusable local execution and internal CI use; no per-run fee. No sublicensing, redistribution of executable/rules, hosted customer service, API resale or external agent distribution. The other product profile is not licensed. Public evidence retains its existing terms. No updates, monitoring, deployment assurance, certification or support SLA is included. Billing and delivery support follows https://varexis.tech/checkout-terms. Statutory rights are unaffected.\n",
      "terms_url": "/checkout-terms",
      "existing_subscriptions_eligible": false,
      "other_product_profile_licensed": false,
      "runtime": "Node.js 24; tested 24.13.0",
      "execution": "local; no customer declarations uploaded",
      "inputs": {
        "description": "Declared connector identities, allowed/requested actions, resources, recipients, authority references and previous inventory. Supported declarations: GitHub, Playwright, Notion and Slack.",
        "schema_url": null,
        "interface_summary_url": "/varexis-index/product-previews/v2/agent-tool-admission.json",
        "required_profile": "admission"
      },
      "outputs": {
        "description": "Source-bound JSON findings, matrix, declared changes, missing-verification checklist and content hashes. A complete declaration is not a verified deployment or permission to act.",
        "schema_url": null,
        "schema_availability": "Included in licensed delivery",
        "dispositions": [
          "DECLARATIONS_COMPLETE_NOT_VERIFIED",
          "REFUSE_RELIANCE",
          "UNSUPPORTED",
          "REQUIRE_REVIEW",
          "INSUFFICIENT_EVIDENCE"
        ],
        "example_url": "/varexis-index/product-previews/v2/agent-tool-admission.json"
      },
      "delivery": "Versioned licensed ZIP and source-bound JSON saved result through the existing purchase and recovery paths.",
      "preview_url": "/varexis-index/packs/agent-tool-admission-preview-v2.json",
      "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1",
      "availability_endpoint": "/api/index/capabilities",
      "availability_note": "Published product; check live capabilities for checkout availability before attempting purchase.",
      "exclusions": [
        "Effective-permission inspection",
        "Verification that referenced records exist or are complete",
        "Live tool execution or runtime enforcement",
        "Safety certification or deployment approval",
        "Fresh source review, updates or monitoring",
        "Redistribution, hosted resale or external API service",
        "Support SLA",
        "The other product profile"
      ],
      "links": [
        {
          "label": "Free preview",
          "href": "/varexis-index/packs/agent-tool-admission-preview-v2.json"
        },
        {
          "label": "Buy Tool Admission",
          "href": "/index-access?route=agentic_pack_tool_admission_v1"
        }
      ]
    },
    {
      "id": "agent-audit-coverage",
      "label": "Audit Coverage",
      "status_label": "AVAILABLE NOW",
      "availability": "available_now",
      "kind": "existing_licensed_local_validator",
      "summary": "Check declared event chains and completeness.",
      "capability": "Link identity, authorization, action and outcome declarations; report missing events, conflicting references and unresolved export, retention or recovery coverage.",
      "route_id": "agentic_pack_audit_coverage_v1",
      "service_id": "audit_coverage",
      "price_display": "£79 + VAT · one-time",
      "price": {
        "currency": "GBP",
        "excluding_vat": 79,
        "recurring": false,
        "per_run_fee": false,
        "vat": "Calculated at checkout where applicable",
        "published_terms_url": "/pricing#index"
      },
      "licence": "VAREXIS Agent Audit & Evidence Coverage v1.0.0\nOne-time licence for one purchasing individual or one legal entity, including its staff and agents acting internally on its behalf. Reusable local execution and internal CI use; no per-run fee. No sublicensing, redistribution of executable/rules, hosted customer service, API resale or external agent distribution. The other product profile is not licensed. Public evidence retains its existing terms. No updates, monitoring, deployment assurance, certification or support SLA is included. Billing and delivery support follows https://varexis.tech/checkout-terms. Statutory rights are unaffected.\n",
      "terms_url": "/checkout-terms",
      "existing_subscriptions_eligible": false,
      "other_product_profile_licensed": false,
      "runtime": "Node.js 24; tested 24.13.0",
      "execution": "local; no customer declarations uploaded",
      "inputs": {
        "description": "Declared identity, authorization, action and outcome events, invocation references and export, retention and recovery coverage. Supported source profiles: GitHub audit, Slack export and Cloudflare Logpush.",
        "schema_url": null,
        "interface_summary_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json",
        "required_profile": "audit"
      },
      "outputs": {
        "description": "Source-bound JSON findings, matrix, declared changes, missing-verification checklist and content hashes. A complete declaration is not a verified deployment or permission to act.",
        "schema_url": null,
        "schema_availability": "Included in licensed delivery",
        "dispositions": [
          "DECLARATIONS_COMPLETE_NOT_VERIFIED",
          "REFUSE_RELIANCE",
          "UNSUPPORTED",
          "REQUIRE_REVIEW",
          "INSUFFICIENT_EVIDENCE"
        ],
        "example_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json"
      },
      "delivery": "Versioned licensed ZIP and source-bound JSON saved result through the existing purchase and recovery paths.",
      "preview_url": "/varexis-index/packs/agent-audit-coverage-preview-v2.json",
      "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1",
      "availability_endpoint": "/api/index/capabilities",
      "availability_note": "Published product; check live capabilities for checkout availability before attempting purchase.",
      "exclusions": [
        "Effective-permission inspection",
        "Verification that referenced records exist or are complete",
        "Live tool execution or runtime enforcement",
        "Safety certification or deployment approval",
        "Fresh source review, updates or monitoring",
        "Redistribution, hosted resale or external API service",
        "Support SLA",
        "The other product profile"
      ],
      "links": [
        {
          "label": "Free preview",
          "href": "/varexis-index/packs/agent-audit-coverage-preview-v2.json"
        },
        {
          "label": "Buy Audit Coverage",
          "href": "/index-access?route=agentic_pack_audit_coverage_v1"
        }
      ]
    },
    {
      "id": "production-enforcement-integration",
      "label": "Production enforcement integration",
      "status_label": "FUTURE, NOT AVAILABLE",
      "availability": "future_not_available",
      "kind": "roadmap_only",
      "summary": "A future integration would need to enforce allow/refuse decisions at execution boundaries. Current INDEX does not provide or validate those decisions.",
      "capability_available": false,
      "runtime_enforcement_available": false,
      "price": null,
      "licence": null,
      "inputs": null,
      "outputs": null,
      "purchase_url": null,
      "release_date": null,
      "boundary": "Roadmap direction only. No production enforcement integration, safety certification or deployment approval is offered or validated by current INDEX.",
      "links": []
    }
  ]
}