{ "schema": "varexis-index-decision-guides/1", "version": "1.5.0", "curated_on": "2026-10-30", "page_url": "/index-packs#free-decision-guides", "manifest_url": "/varexis-index/decision-guides.json", "guide_count": 12, "distinct_record_count": 99, "boundary": "Free guides reference dated source records; guide selection adds no search capability, executable or entitlement. Original /mcp search and previews stay frozen; /mcp/catalogue reads exact published additions. Enhanced-search HOLD conditions remain unchanged. Documentation and synthetic findings do not establish live permissions, deletion, settlement or certification. Do not send private declarations to public MCP.", "paid_value": "A free record supplies documented evidence. A licensed checker performs reusable local analysis of supported customer-supplied declarations. Full operational schemas, runnable examples and executable archives accompany the existing licensed package.", "guides": [ { "id": "agent-authority-tool-trust", "title": "Agent Authority & Tool Trust", "problem": "A tool is visible and its metadata looks credible, but that does not establish who may use it or what the proposed action is allowed to change.", "decision": "Decide which requested operation needs additional identity, permission or destination evidence before relying on the supplied plan.", "required_inputs": "The intended action, resource and recipient; declared owner authority and validity dates; connector identity, credential context, protocol version and dated tool inventories. Keep credentials and private declarations local.", "establishes": "The selected documentation distinguishes inventory visibility, token audience, annotation hints and asserted signer identity from authority to perform an action. Apply each source only to its recorded version and scope.", "unsupported": "These sources do not verify effective permissions, certificate validity, trusted keys or a live deployment. They do not authorise execution. Missing or conflicting identity, audience, scope or destination evidence requires further review.", "selection": "Choose Tool Admission for supported GitHub, Playwright, Notion or Slack declaration comparisons. The SPIFFE and DSSE references inform evidence questions; they do not add native certificate or signature verification to the checker.", "value": "Buying the existing checker adds repeatable local comparison of supported customer declarations, structured conflicts and content hashes. Reading these free records supplies context but does not analyse your input.", "page_url": "/index-packs#agent-authority-tool-trust", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-MCP-LIST-AUTH-CONTEXT-01-v1", "title": "MCP: Tool inventory depends on request authority", "decision_use": "Bind the inventory to the credential context and capture time of the proposed call.", "record_url": "/varexis-index/records/mcp-tool-list-authorization-cache-context.json", "record_sha256": "ee1354bddeb675d5165328503912388164339599b3e5b552b34a52aa72105f02", "route_id": "agentic_reviewed_mcp_tool_list_authorization_cache_context", "provenance": { "source_type": "official_external_documentation", "source_title": "MCP: Tools", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/server/tools", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-MCP-LIST-AUTH-CONTEXT-01-v1", "candidate_record_sha256": "e2e78b14b1442693ba6b56c01adb9896416e6511bea4ccf9408395ff42fe4b2a", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_mcp_tool_list_authorization_cache_context" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-MCP-TOKEN-AUDIENCE-01-v1", "title": "MCP: Access tokens must match the resource audience", "decision_use": "Check which resource the token audience is intended to represent.", "record_url": "/varexis-index/records/mcp-token-audience-not-upstream-authority.json", "record_sha256": "8715f08855f7bf6de6db9222753ffffa62465549ae75d853be9a99cfd930cde6", "route_id": "agentic_reviewed_mcp_token_audience_not_upstream_authority", "provenance": { "source_type": "official_external_documentation", "source_title": "MCP: Authorization", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-MCP-TOKEN-AUDIENCE-01-v1", "candidate_record_sha256": "ce94099b2e5bcb94f188e5220df77fa64b62bc9c8e351cac7874b9dee8f9e9e4", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_mcp_token_audience_not_upstream_authority" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-ANNOTATIONS-HINTS-NOT-PERMISSION-ENFORCEMENT-01-v1", "title": "MCP: Tool annotations describe hints, not enforced authority", "decision_use": "Separate descriptive tool hints from evidence of enforced authority.", "record_url": "/varexis-index/records/mcp-tool-annotations-hints-not-permission-enforcement.json", "record_sha256": "4f5ad4c44cbe328fb5eabf096988b33d45f0bbe96c57f6ee44ed48cdd8df9916", "route_id": "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement", "provenance": { "source_type": "official_external_documentation", "source_title": "Schema Reference - Model Context Protocol", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/schema", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-ANNOTATIONS-HINTS-NOT-PERMISSION-ENFORCEMENT-01-v1", "candidate_record_sha256": "448595cd7689190810e0c8a008cfeefabd6bf7844c39da798db0d1dba20698f7", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-LIST-CHANGE-SUBSCRIPTION-BOUNDARY-01-v1", "title": "MCP tool-change notification coverage", "decision_use": "Check notification subscription coverage before treating silence as an unchanged inventory.", "record_url": "/varexis-index/records/mcp-tool-list-change-subscription-boundary.json", "record_sha256": "b04fd254d52225a58c4831eaf0127d622b40e17168f5d4955a807783612d76c3", "route_id": "agentic_reviewed_mcp_tool_list_change_subscription_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Tools - Model Context Protocol", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/server/tools", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-LIST-CHANGE-SUBSCRIPTION-BOUNDARY-01-v1", "candidate_record_sha256": "2a3b1c21448154429825fbdd23480c0b33fcbf9672b23e729211e257b532ff47", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_mcp_tool_list_change_subscription_boundary" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-SPIFFE-SIGNING-CERTIFICATE-NOT-WORKLOAD-01-v1", "title": "SPIFFE signing authority versus caller identity", "decision_use": "Distinguish a signing certificate from a workload authentication leaf.", "record_url": "/varexis-index/records/spiffe-signing-certificate-not-workload.json", "record_sha256": "3c761098f88c8e9b9d134c40642cd3d69d6d98753d5a22be8b82549787758ab3", "route_id": "agentic_reviewed_spiffe_signing_certificate_not_workload", "provenance": { "source_type": "official_external_documentation", "source_title": "The X.509 SPIFFE Verifiable Identity Document", "source_url": "https://raw.githubusercontent.com/spiffe/spiffe/49a9cbbc018c39ec6643ad3301632f9f4549258b/standards/X509-SVID.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-SPIFFE-SIGNING-CERTIFICATE-NOT-WORKLOAD-01-v1", "candidate_record_sha256": "32d49a1b5d8c3a8b156eb083a55794e71f2d7f30e7964554d409d318376ee7cc", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-SPIFFE-SIGNING-CERTIFICATE-NOT-WORKLOAD-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-DSSE-KEYID-UNTRUSTED-SELECTION-HINT-01-v1", "title": "DSSE key identifiers and trusted signers", "decision_use": "Ask for trusted-key verification evidence beyond a matching key identifier.", "record_url": "/varexis-index/records/dsse-keyid-untrusted-selection-hint.json", "record_sha256": "c7df30ca8243c4aa1438c60fbcb272dadbb5a4bdba3f9a3f9a3e6a24ddb67081", "route_id": "agentic_reviewed_dsse_keyid_untrusted_selection_hint", "provenance": { "source_type": "official_external_documentation", "source_title": "DSSE v1.0.2 — protocol", "source_url": "https://raw.githubusercontent.com/secure-systems-lab/dsse/b531b787bb3e5f0c3e1c19cee84da1c5d569b061/protocol.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-DSSE-KEYID-UNTRUSTED-SELECTION-HINT-01-v1", "candidate_record_sha256": "3f9b1e3988ab98ac7e47c16951811b4513e993b4e7b082c48e23a2e0be1072dc", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-DSSE-KEYID-UNTRUSTED-SELECTION-HINT-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-tool-admission", "title": "Agent Tool Admission & Permission Control", "price_gbp_excluding_vat": 49, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "d9c1d4a63ed87644d0bc49ad8d7b37aa92a463a6cd6681a5225ca94f2b61bb6b", "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1", "product_page": "/index-packs#agent-tool-admission", "preview_url": "/varexis-index/product-previews/v2/agent-tool-admission.json", "preview_sha256": "3accb4cae50ebbe9096319451d9836decaabf53b146e0807d0e7ebd7816b2a3f", "inputs": "JSON declarations of GitHub, Playwright, Notion or Slack connector identity, requested and allowed actions, resources, recipients and authority; an earlier inventory supports comparison.", "outputs": "Structured findings about declared permission conflicts, inventory changes and missing verification, with source and content hashes.", "representative_finding": "A requested destination is outside the declared authority. Obtain authority evidence before relying on the plan.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "autonomous-payment-transaction-integrity", "title": "Agent Payment & Entitlement Reconciliation", "problem": "An agent reports a completed purchase, but spending authority, amended terms, provider payment state, feature entitlement and application delivery can describe different outcomes.", "decision": "Decide whether the supplied transaction narrative reconciles, or which discrepancies need provider or owner evidence before the purchase is treated as resolved.", "required_inputs": "Declared spending authority and expiry, approved recipient/currency/amount, amendments, provider/account context, attempt and idempotency references, reported outcomes and fulfilment references. Do not submit payment tokens or private transaction data to public MCP.", "establishes": "The selected Stripe documentation distinguishes token scope, calculated terms, retry-key behaviour, Checkout completion, authenticated events and recovered-session identity. These are dated documentation boundaries, not confirmation of a buyer transaction. Current feature inventories and truncated entitlement summaries must also be distinguished from local provisioning and delivery.", "unsupported": "No record or checker establishes live payment approval, actual settlement, successful delivery or guaranteed prevention of duplicate charges. Unknown payment state, changed terms or conflicting references must remain unresolved pending authoritative evidence.", "selection": "Choose Transaction Integrity for local reconciliation of the supported versioned transaction declarations. It does not execute payments, query Stripe, or turn the supplied narrative into provider verification. Stripe Billing feature reconciliation is source guidance; it does not add a provider integration or entitlement-provisioning capability to the checker.", "value": "Buying the existing checker adds repeatable local reconciliation of spending declarations, amended terms, scoped retries and reported outcomes, with structured findings and hashes. The free JSON explains why those distinctions matter.", "page_url": "/index-packs#autonomous-payment-transaction-integrity", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-SHARED-PAYMENT-TOKEN-AUTHORITY-LIFECYCLE-01-v1", "title": "Stripe shared payment tokens: Seller scope and lifecycle limit delegated spending", "decision_use": "Check seller scope, spending limits and expiry separately from payment outcome.", "record_url": "/varexis-index/records/stripe-shared-payment-token-authority-lifecycle.json", "record_sha256": "db12015b6ce13749e96756b8bb7e58bd0431708b07251b268d6614c6b3b085b5", "route_id": "agentic_reviewed_stripe_shared_payment_token_authority_lifecycle", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe shared payment tokens for agents", "source_url": "https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens?agent-seller=agent", "checked_on": "2026-10-23", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-SHARED-PAYMENT-TOKEN-AUTHORITY-LIFECYCLE-01-v1", "candidate_record_sha256": "1697ead35ec753b95cce9a29f4e2e680ce5c8482f90f67b3b5867db49c154ba0", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_shared_payment_token_authority_lifecycle" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-TAX-CALCULATION-PAYMENT-TERMS-RECONCILIATION-01-v1", "title": "Stripe Tax: Calculated amounts need a transaction binding", "decision_use": "Bind calculated terms and transaction references to the intended purchase.", "record_url": "/varexis-index/records/stripe-tax-calculation-payment-terms-reconciliation.json", "record_sha256": "f6a43780143af1ff68a76f0d20357467730befe4c26cb0afc8b9dbabc713b567", "route_id": "agentic_reviewed_stripe_tax_calculation_payment_terms_reconciliation", "provenance": { "source_type": "official_external_documentation", "source_title": "Custom Stripe Tax API | Stripe Documentation", "source_url": "https://docs.stripe.com/tax/payment-intent/custom", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-TAX-CALCULATION-PAYMENT-TERMS-RECONCILIATION-01-v1", "candidate_record_sha256": "eb69503ee808f579c2dbb13cdac20d75b61de3cb55a686a37e316987370f9100", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_tax_calculation_payment_terms_reconciliation" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-V1-IDEMPOTENCY-EXPIRY-CACHED-FAILURE-01-v1", "title": "Stripe API v1: Retry keys, cached failures and expiry", "decision_use": "Distinguish cached retry responses and expired keys from a resolved payment.", "record_url": "/varexis-index/records/stripe-v1-idempotency-expiry-cached-failure.json", "record_sha256": "c2e83edbb6c83cde7eb58c8720a7d9ed01f8961b2c71fe4c4e58231990af9f42", "route_id": "agentic_reviewed_stripe_v1_idempotency_expiry_cached_failure", "provenance": { "source_type": "official_external_documentation", "source_title": "Idempotent requests", "source_url": "https://docs.stripe.com/api/idempotent_requests", "checked_on": "2026-10-22", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-V1-IDEMPOTENCY-EXPIRY-CACHED-FAILURE-01-v1", "candidate_record_sha256": "200a98ca5d7071ffa3a9d239f45e1b3140d96ad0a119548922175fec80057f5c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_v1_idempotency_expiry_cached_failure" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-CHECKOUT-COMPLETED-ASYNC-PAYMENT-OUTCOME-01-v1", "title": "Stripe Checkout: Session completion and delayed payment outcomes", "decision_use": "Separate session completion from delayed payment success or failure.", "record_url": "/varexis-index/records/stripe-checkout-completed-async-payment-outcome.json", "record_sha256": "a7c1db621cfca05cb7efca0be1c9f2f27e371c5bd0885a1e311a79aa64446045", "route_id": "agentic_reviewed_stripe_checkout_completed_async_payment_outcome", "provenance": { "source_type": "official_external_documentation", "source_title": "Fulfill orders | Stripe Documentation", "source_url": "https://docs.stripe.com/payments/checkout/fulfill-orders", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-CHECKOUT-COMPLETED-ASYNC-PAYMENT-OUTCOME-01-v1", "candidate_record_sha256": "8adab4515f4b62fc44ea99febe9f95d4d345f4edf974d1d6f9a9f52d21a3d32a", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_checkout_completed_async_payment_outcome" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-WEBHOOK-01-v1", "title": "Stripe delivery evidence: Verified events and duplicate handling", "decision_use": "Reconcile authenticated events, current object state and application fulfilment records.", "record_url": "/varexis-index/records/stripe-webhook-delivery-evidence-check.json", "record_sha256": "d281aae113d6427628d3657b1cc969f615c8875e58513a07214daf361b9e5e8f", "route_id": "agentic_reviewed_stripe_webhook_delivery_evidence_check", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe event delivery and verification boundaries", "source_url": "https://docs.stripe.com/webhooks", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-WEBHOOK-01-v1", "candidate_record_sha256": "565343c20c65837defffe4ccad59f5e3cb3e67c295fd76e2dd12ca91a57e73d0", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_webhook_delivery_evidence_check" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-STRIPE-EXPIRED-CHECKOUT-RECOVERY-NEW-SESSION-IDENTITY-01-v1", "title": "Stripe Checkout recovery creates a new session", "decision_use": "Correlate the recovered session with the original attempt without conflating their outcomes.", "record_url": "/varexis-index/records/stripe-expired-checkout-recovery-new-session-identity.json", "record_sha256": "332bec94d4cfc291da95706953a1eee419e61e30540a0a11d9839c875083b74f", "route_id": "agentic_reviewed_stripe_expired_checkout_recovery_new_session_identity", "provenance": { "source_type": "official_external_documentation", "source_title": "Expire a Checkout Session", "source_url": "https://docs.stripe.com/api/checkout/sessions/expire", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-EXPIRED-CHECKOUT-RECOVERY-NEW-SESSION-IDENTITY-01-v1", "candidate_record_sha256": "724c6618a38125942bfd0a402ec8fe1b6744add52e902616877ebda31bc89ac2", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_stripe_expired_checkout_recovery_new_session_identity" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-SUMMARY-PAGINATION-01-v1", "title": "Stripe entitlement-summary completeness", "decision_use": "Read the complete customer feature inventory before treating an omitted feature as revoked.", "record_url": "/varexis-index/records/stripe-entitlement-summary-pagination.json", "record_sha256": "a78d134b8c31543c54db92d3e3ebf14c71a36d23e117a3a943a4c8a86685fe3c", "route_id": "agentic_reviewed_stripe_entitlement_summary_pagination", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe Billing Entitlements (API)", "source_url": "https://docs.stripe.com/billing/entitlements.md?dashboard-or-api=api", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-SUMMARY-PAGINATION-01-v1", "candidate_record_sha256": "30fa98f4fedcdfff5e16208e05e0ffeea09f7c1b0898802b286d30e4130adf03", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-SUMMARY-PAGINATION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-RECONCILIATION-AFTER-OUTAGE-01-v1", "title": "Stripe entitlement recovery after webhook loss", "decision_use": "Reconcile current provider features after an outage, then separately verify local provisioning and delivery.", "record_url": "/varexis-index/records/stripe-entitlement-reconciliation-after-outage.json", "record_sha256": "b0f618ed47c3a113d374b45dbf092149c396977d06cf72d745483350d0a950bc", "route_id": "agentic_reviewed_stripe_entitlement_reconciliation_after_outage", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe Billing Entitlements (API)", "source_url": "https://docs.stripe.com/billing/entitlements.md?dashboard-or-api=api", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-RECONCILIATION-AFTER-OUTAGE-01-v1", "candidate_record_sha256": "1cfba181f12d1c38ec1c23ba98a12cb0c4f15fae858918e37ea510e9371ccb22", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-STRIPE-ENTITLEMENT-RECONCILIATION-AFTER-OUTAGE-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-transaction-integrity", "title": "Agent Transaction Integrity & Replay Analyzer", "price_gbp_excluding_vat": 149, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "957856c965985711127b6c07ca8bf3226c94eb2db33f02b10c4d4ea437bbecff", "purchase_url": "/index-access?route=agentic_pack_transaction_integrity_v1", "product_page": "/index-packs#agent-transaction-integrity", "preview_url": "/varexis-index/product-previews/v2/agent-transaction-integrity.json", "preview_sha256": "576c4a0d16f81e0fe6ccef815a036f5986b6015a6be187065e911544e011aff6", "inputs": "Versioned JSON declarations of spending authority, approved terms, transaction amendments, retry/idempotency references and reported payment outcomes.", "outputs": "Structured inconsistencies and missing-evidence findings, with input, rules and result hashes.", "representative_finding": "Declared payment terms differ from the approved terms. Reconcile the discrepancy before relying on the transaction record.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "data-exit-audit-evidence", "title": "Data Exit & Audit Evidence", "problem": "An export or deletion task says it is complete, while excluded tenants, retained backups or missing audit payloads may leave the conclusion unsupported.", "decision": "Decide whether declared holdings, export scope, deletion results and event references support the intended exit conclusion, or identify the evidence still needed.", "required_inputs": "A dated holdings inventory; export cut-off and item/tenant coverage; deletion outcomes, retention or hold conditions and residual-copy declarations; event-parent references and payload capture/retention evidence. Use supported local declaration formats.", "establishes": "The selected documentation separates bounded export and deletion scopes, snapshot-reference removal, backup expiry and retained event context from complete exit evidence. Vendor versions and preview-feature restrictions remain part of each record.", "unsupported": "This guide does not prove erasure, discover unknown copies, determine legal obligations or verify that live audit data exists. Missing coverage, unresolved holds, residual holdings or broken event references require review rather than an exit-complete assertion.", "selection": "Choose Data Exit for holdings, exports, deletion states and residual-copy reconciliation. Choose Audit Coverage for identity/authority/action/outcome chains and capture or retention gaps. They are separate £79 licences; these references do not add vendor integrations to either tool.", "value": "Buying a relevant checker adds repeatable local analysis of your supported declarations and structured evidence requests. Data Exit reconciles data-state claims; Audit Coverage checks declared event-chain completeness. Neither verifies the underlying system.", "page_url": "/index-packs#data-exit-audit-evidence", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-EXPORT-CUTOFF-TENANT-COVERAGE-01-v1", "title": "Weaviate preview export scope", "decision_use": "Reconcile the preview export cut-off and skipped tenants against the intended exit inventory.", "record_url": "/varexis-index/records/weaviate-export-cutoff-tenant-coverage.json", "record_sha256": "dd7e24b8cac9c2aeaffa2a7acc2291ccd088f7f07b8940c777c615610a1e11f8", "route_id": "agentic_reviewed_weaviate_export_cutoff_tenant_coverage", "provenance": { "source_type": "official_external_documentation", "source_title": "Weaviate pinned documentation — export", "source_url": "https://raw.githubusercontent.com/weaviate/docs/5dcf1d6dcd357a4cfaf613a63d052b932cd2f9c9/docs/deploy/configuration/export.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-EXPORT-CUTOFF-TENANT-COVERAGE-01-v1", "candidate_record_sha256": "47a65f013f6a903a76115f64d538875ce9a8dc9a17a957e1f24d8b22e4193e47", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-EXPORT-CUTOFF-TENANT-COVERAGE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-BULK-DELETE-RESULT-CAP-01-v1", "title": "Weaviate bounded bulk deletion", "decision_use": "Check bounded deletion batches against the full intended tenant and filter scope.", "record_url": "/varexis-index/records/weaviate-bulk-delete-result-cap.json", "record_sha256": "c212b171d319f6cc9fa28452ab5a48e3775a5b58c96dca803dbc93be69cd9f0c", "route_id": "agentic_reviewed_weaviate_bulk_delete_result_cap", "provenance": { "source_type": "official_external_documentation", "source_title": "Weaviate pinned documentation — delete", "source_url": "https://raw.githubusercontent.com/weaviate/docs/5dcf1d6dcd357a4cfaf613a63d052b932cd2f9c9/docs/weaviate/manage-objects/delete.mdx", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-BULK-DELETE-RESULT-CAP-01-v1", "candidate_record_sha256": "1adbd7914b02f0128a7abc347aadd228f016266d34d0e96944180856dcb2cef1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-WEAVIATE-BULK-DELETE-RESULT-CAP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-RESTIC-FORGET-PRUNE-RESIDUAL-DATA-01-v1", "title": "restic forgotten snapshots and retained data", "decision_use": "Distinguish removed snapshot references from retained repository data and physical erasure.", "record_url": "/varexis-index/records/restic-forget-prune-residual-data.json", "record_sha256": "c4a7f81c7f68dac58b2790cf0a12c106eca397cccf8b8eab1659fc0671254ab7", "route_id": "agentic_reviewed_restic_forget_prune_residual_data", "provenance": { "source_type": "official_external_documentation", "source_title": "restic v0.19.1 — 060_forget", "source_url": "https://raw.githubusercontent.com/restic/restic/6aa3a516ce654808a1f28f9fa21e9b7c8e6e90bf/doc/060_forget.rst", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-RESTIC-FORGET-PRUNE-RESIDUAL-DATA-01-v1", "candidate_record_sha256": "987ab1051ce4dfaa25ee0700fdbd512e2374156776c2a7146de7f5c566119861", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-RESTIC-FORGET-PRUNE-RESIDUAL-DATA-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-VELERO-BACKUP-EXPIRY-GC-OUTCOMES-01-v1", "title": "Velero backup TTL and deletion failures", "decision_use": "Check deletion outcomes and failures instead of relying on elapsed backup TTL.", "record_url": "/varexis-index/records/velero-backup-expiry-gc-outcomes.json", "record_sha256": "713371832c45520a5d126f41a869d638b361b7a0de3d9f0f13b03f67ab36949a", "route_id": "agentic_reviewed_velero_backup_expiry_gc_outcomes", "provenance": { "source_type": "official_external_documentation", "source_title": "Velero v1.18.4 — how-velero-works", "source_url": "https://raw.githubusercontent.com/vmware-tanzu/velero/4ee1e79a7aed367fd9b767b8219ec65bd0c96892/site/content/docs/main/how-velero-works.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-VELERO-BACKUP-EXPIRY-GC-OUTCOMES-01-v1", "candidate_record_sha256": "930a6f3d69db6deffc82e19ccb39b6ae23abd7c74a9c79863cd44d021f7d8e0a", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-VELERO-BACKUP-EXPIRY-GC-OUTCOMES-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-PURVIEW-RETENTION-CONFLICT-01-v1", "title": "Purview retention: Conflicts and permanent deletion", "decision_use": "Identify applicable retention or hold conditions before inferring a deletion outcome.", "record_url": "/varexis-index/records/purview-retention-deletion-policy-precedence.json", "record_sha256": "534ed28c55f122d6a02d0e5abe15f1cdd174b546351b1b2b24975d007bdcb7a2", "route_id": "agentic_reviewed_purview_retention_deletion_policy_precedence", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft Purview retention principles", "source_url": "https://learn.microsoft.com/en-us/purview/retention", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-PROCUREMENT-PURVIEW-RETENTION-CONFLICT-01-v1", "candidate_record_sha256": "f2015b259f583ce852086c2ba2e845cdd07bbdf20bf177de5c1252084d5a9465", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_purview_retention_deletion_policy_precedence" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-DATAREF-RETENTION-EVIDENCE-01-v1", "title": "CloudEvents referenced payload lifetime", "decision_use": "Retain evidence of the referenced payload rather than assuming the event reference preserves it.", "record_url": "/varexis-index/records/cloudevents-dataref-retention-evidence.json", "record_sha256": "694f2365ef62d72a839ecee1932802537627f0e3c86ebe8ef8f39516e8d2a1a4", "route_id": "agentic_reviewed_cloudevents_dataref_retention_evidence", "provenance": { "source_type": "official_external_documentation", "source_title": "CloudEvents v1.0.2 — dataref", "source_url": "https://raw.githubusercontent.com/cloudevents/spec/fc1f6f31f5f011a72183f1bcea20c987cb683ade/cloudevents/extensions/dataref.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-DATAREF-RETENTION-EVIDENCE-01-v1", "candidate_record_sha256": "b101e7dd0d93421bbcd50c1eb5922ebb5a8fdd56bff8499838f6afe839cc15bd", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-DATAREF-RETENTION-EVIDENCE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-TRACE-EXTENSION-ORIGINAL-CONTEXT-01-v1", "title": "CloudEvents original trace versus transport hops", "decision_use": "Distinguish original trace context from per-hop audit evidence and optional extension support.", "record_url": "/varexis-index/records/cloudevents-trace-extension-original-context.json", "record_sha256": "0623c9119eee5e5daccf4471dd1ffe8f381e4f2ced07ddb92b8c294e49d42e98", "route_id": "agentic_reviewed_cloudevents_trace_extension_original_context", "provenance": { "source_type": "official_external_documentation", "source_title": "CloudEvents v1.0.2 — distributed-tracing", "source_url": "https://raw.githubusercontent.com/cloudevents/spec/fc1f6f31f5f011a72183f1bcea20c987cb683ade/cloudevents/extensions/distributed-tracing.md", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-TRACE-EXTENSION-ORIGINAL-CONTEXT-01-v1", "candidate_record_sha256": "714a8f2dd3a2e24994c8718a25a1c80c13fd25bda4b45b7029de651d3c0f8577", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-PROCUREMENT-CLOUDEVENTS-TRACE-EXTENSION-ORIGINAL-CONTEXT-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-data-exit", "title": "Agent Data Exit & Retention Reconciler", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "445a7e8d317182649f09d9201005c71f6b2158c9a8c6e56327494f46669a5468", "purchase_url": "/index-access?route=agentic_pack_data_exit_v1", "product_page": "/index-packs#agent-data-exit", "preview_url": "/varexis-index/product-previews/v2/agent-data-exit.json", "preview_sha256": "9259e1a7dac16fea81458cc412ead9e83c7b4eb1e39cb288d129368f2280e471", "inputs": "Versioned JSON declarations of holdings, export coverage, deletion states, retention conditions and residual copies, evaluated at a supplied time.", "outputs": "Structured reconciliation findings and evidence requests, with input, rules and result hashes.", "representative_finding": "A declared residual holding conflicts with the claimed deletion state. Review the underlying evidence; this finding does not verify deletion.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." }, { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "ai-cost-invoice-assurance", "title": "AI Cost & Invoice Assurance", "problem": "Token reports, tool charges, credit balances and invoices can cover different usage populations or accounting stages.", "decision": "Identify which missing dimensions, invoice cutoffs or provisional totals prevent a defensible cost reconciliation.", "required_inputs": "Dated provider usage and cost exports, organization and workspace scope, model and service tier, meter event identities and receipt times, invoice periods and finalization, credit applications and applicable rates. Keep private billing data local.", "establishes": "The selected documentation separates accepted usage from invoice inclusion, Priority Tier and code-execution reporting scopes, null attribution buckets, provisional agent accounting and token subsets. Each finding is limited to its captured source and applicable API.", "unsupported": "This guide does not calculate a final invoice, verify actual consumption, identify a customer from an anonymous bucket or establish settlement. Missing dimensions or provisional values remain unresolved until corroborated.", "selection": "Use the free records to assemble and compare the stated evidence. VAREXIS does not currently offer an executable AI cost reconciler; potential FinOps functionality remains a research hypothesis.", "value": "The free guide helps define a repeatable manual evidence review. No purchase, additional licence, monitoring or new executable is supplied. Existing commercial products retain their current supported declaration formats.", "page_url": "/index-packs#ai-cost-invoice-assurance", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE04-STRIPE-LATE-METER-EVENT-INVOICE-CUTOFF-01-v1", "title": "Stripe late usage and invoice finalization", "decision_use": "Compare receipt and finalization times before assuming an accepted usage event reached an invoice.", "record_url": "/varexis-index/records/stripe-late-meter-event-invoice-cutoff.json", "record_sha256": "b810f6438284fb730b32086b58cd08a1dd8cfa19a30b7d2f3b52642dd3886154", "route_id": "agentic_reviewed_stripe_late_meter_event_invoice_cutoff", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe: Record usage for billing with the API", "source_url": "https://docs.stripe.com/billing/subscriptions/usage-based/recording-usage-api.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-STRIPE-LATE-METER-EVENT-INVOICE-CUTOFF-01-v1", "candidate_record_sha256": "238b39ac2ff707e8de6d0a7c8c999f948a8477cabfd0c5bc463a420832b8c982", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-STRIPE-LATE-METER-EVENT-INVOICE-CUTOFF-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-STRIPE-CREDIT-NOTE-GRANT-RESTORATION-01-v1", "title": "Stripe credit notes and billing-credit restoration", "decision_use": "Reconcile restored spendable credits separately from invoice corrections or cash refunds.", "record_url": "/varexis-index/records/stripe-credit-note-grant-restoration.json", "record_sha256": "377cceeb371b2fcac1798bf1632647b3e7f78cbbdfd541215eeff29c5ccff63c", "route_id": "agentic_reviewed_stripe_credit_note_grant_restoration", "provenance": { "source_type": "official_external_documentation", "source_title": "Stripe: Billing credits", "source_url": "https://docs.stripe.com/billing/subscriptions/usage-based/billing-credits.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-STRIPE-CREDIT-NOTE-GRANT-RESTORATION-01-v1", "candidate_record_sha256": "323db3b8fcdca97e30bd965518328cbc56d87c0e9e6a336b92243e2322c76b5b", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-STRIPE-CREDIT-NOTE-GRANT-RESTORATION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-CLAUDE-PRIORITY-TIER-COST-REPORT-GAP-01-v1", "title": "Claude Priority Tier cost-report scope", "decision_use": "Obtain separate Priority Tier billing evidence where the cost endpoint excludes those charges.", "record_url": "/varexis-index/records/claude-priority-tier-cost-report-gap.json", "record_sha256": "da3f86d2ec202605ba8e47acff9958f907000445702b584c54b5a2947805960a", "route_id": "agentic_reviewed_claude_priority_tier_cost_report_gap", "provenance": { "source_type": "official_external_documentation", "source_title": "Claude: Usage and Cost API", "source_url": "https://platform.claude.com/docs/en/manage-claude/usage-cost-api.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-CLAUDE-PRIORITY-TIER-COST-REPORT-GAP-01-v1", "candidate_record_sha256": "04de2b580120372572a9ecd49a20dd6fb4a69b8d6b8e579c306755102db9f8a3", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-CLAUDE-PRIORITY-TIER-COST-REPORT-GAP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-CLAUDE-CODE-EXECUTION-COST-USAGE-GAP-01-v1", "title": "Claude code execution and token-report completeness", "decision_use": "Include the cost report when token usage omits code-execution charges.", "record_url": "/varexis-index/records/claude-code-execution-cost-usage-gap.json", "record_sha256": "1f88ff26cd9da6bd3ed2371687339c54deba616cfa3d207171390388d5c0a604", "route_id": "agentic_reviewed_claude_code_execution_cost_usage_gap", "provenance": { "source_type": "official_external_documentation", "source_title": "Claude: Usage and Cost API", "source_url": "https://platform.claude.com/docs/en/manage-claude/usage-cost-api.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-CLAUDE-CODE-EXECUTION-COST-USAGE-GAP-01-v1", "candidate_record_sha256": "8a9d7332219e07c4a0a63e039e29d9e7245cd68539942a03de5cb98ca2e68d95", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-CLAUDE-CODE-EXECUTION-COST-USAGE-GAP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-CLAUDE-NULL-ATTRIBUTION-BUCKETS-01-v1", "title": "Claude null API-key and workspace attribution", "decision_use": "Preserve documented null attribution populations without inventing customer identities.", "record_url": "/varexis-index/records/claude-null-attribution-buckets.json", "record_sha256": "c9c25e7a7cb44d4873f7cff0bab541b58373a0a277cc4862a16d94a18e8ad4a1", "route_id": "agentic_reviewed_claude_null_attribution_buckets", "provenance": { "source_type": "official_external_documentation", "source_title": "Claude: Usage and Cost API", "source_url": "https://platform.claude.com/docs/en/manage-claude/usage-cost-api.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-CLAUDE-NULL-ATTRIBUTION-BUCKETS-01-v1", "candidate_record_sha256": "887db680801fe419870d289d282486a4056bb57b4ae3199e1f715c9e50d718a5", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-CLAUDE-NULL-ATTRIBUTION-BUCKETS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-CLAUDE-THREAD-SESSION-COST-RECONCILIATION-01-v1", "title": "Claude thread totals and session runtime cost", "decision_use": "Account for rounding, concurrent runtime and differing thread versus session scopes.", "record_url": "/varexis-index/records/claude-thread-session-cost-reconciliation.json", "record_sha256": "752c81bd892bfa2bae2bf0fc56378160393a612182d0f83e405155374f69ed10", "route_id": "agentic_reviewed_claude_thread_session_cost_reconciliation", "provenance": { "source_type": "official_external_documentation", "source_title": "Claude Managed Agents: Budgets", "source_url": "https://platform.claude.com/docs/en/managed-agents/budgets.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-CLAUDE-THREAD-SESSION-COST-RECONCILIATION-01-v1", "candidate_record_sha256": "1a76f5a443eba9021b0022b9c6c6fa671b1b2b867bafca765a1f51dca045dc89", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-CLAUDE-THREAD-SESSION-COST-RECONCILIATION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-OPENAI-AGENT-USAGE-PROVISIONAL-ACCOUNTING-01-v1", "title": "OpenAI Agents usage and provisional accounting", "decision_use": "Treat missing or revisable usage as unestablished rather than zero or final.", "record_url": "/varexis-index/records/openai-agent-usage-provisional-accounting.json", "record_sha256": "8db4d27ea44ef91d9a4e4abbed84bce4799fd1bce31869a1b7f52fe9367b6e2b", "route_id": "agentic_reviewed_openai_agent_usage_provisional_accounting", "provenance": { "source_type": "official_external_documentation", "source_title": "OpenAI Agents API: Observability and usage", "source_url": "https://developers.openai.com/api/docs/guides/agents-api/observability.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-OPENAI-AGENT-USAGE-PROVISIONAL-ACCOUNTING-01-v1", "candidate_record_sha256": "0096667d76d39f40aa79cc78ff1c683f7b7c0ff2afae0f1443d908df26b7c422", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-OPENAI-AGENT-USAGE-PROVISIONAL-ACCOUNTING-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE04-OPENAI-AGENT-TOKEN-SUBSETS-01-v1", "title": "OpenAI Agents token subsets and double counting", "decision_use": "Avoid adding cached and reasoning subsets twice to their parent token totals.", "record_url": "/varexis-index/records/openai-agent-token-subsets.json", "record_sha256": "d3c666d3786585b228095e0751046384fb8c138ad089ba91f3127684a5a2763e", "route_id": "agentic_reviewed_openai_agent_token_subsets", "provenance": { "source_type": "official_external_documentation", "source_title": "OpenAI Agents API: Observability and usage", "source_url": "https://developers.openai.com/api/docs/guides/agents-api/observability.md", "checked_on": "2026-10-28", "candidate_record_id": "VXI-EXT-ICE04-OPENAI-AGENT-TOKEN-SUBSETS-01-v1", "candidate_record_sha256": "b66bf82f658bcc42382e0ce50cda87a1c54bafabf741825dba84259bb4c32503", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE04-OPENAI-AGENT-TOKEN-SUBSETS-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [] }, { "id": "autonomous-procurement-supplier-payment", "title": "Autonomous Procurement & Supplier Payment Evidence", "problem": "An order, approved invoice, exported payment and supplier receipt can represent different stages of a purchase. Treating one stage as proof of another leaves authority and reconciliation gaps.", "decision": "Determine which supplier-order, approval or payment-stage evidence is still needed before accepting the declared procurement outcome.", "required_inputs": "Supplier and order identifiers, approved terms and order revisions, acknowledgement records, invoice identity and approval history, payment detail references, currency and amount, current outcome and independent receipt evidence. Keep bank details and private transaction data local.", "establishes": "The selected Coupa documentation distinguishes object-specific approval, order revisions, supplier acknowledgement, invoice submission and bypass, exported payments and external tracking handoffs. These are dated field and action contracts, not verification of a supplier or bank transaction.", "unsupported": "The guide does not validate supplier bank ownership, matching tolerances, delegated monetary limits, goods receipt or settlement. Missing identities, changed terms, bypassed approvals or uncorrelated payment references require review.", "selection": "Use Transaction Integrity only where the purchase can be expressed in its supported transaction declaration format. It reconciles declared authority, amendments, scoped retries and reported outcomes; it does not connect to Coupa, validate invoices natively or verify supplier payment.", "value": "The £149 + VAT one-time internal-use licence adds repeatable local analysis and structured discrepancies for supported declarations. Free records explain the source boundaries. No monitoring, provider access, new schema or subscription entitlement is included.", "decision_sequence": [ "Bind supplier, order identity and approved revision.", "Separate communication and approval stages from final acceptance.", "Inspect bypasses and later approval changes.", "Reconcile invoice references to payment-detail amounts and currency.", "Obtain independent outcome evidence before closing the purchase." ], "agent_selection": { "use_when": "Determine which supplier-order, approval or payment-stage evidence is still needed before accepting the declared procurement outcome.", "required_evidence": "Supplier and order identifiers, approved terms and order revisions, acknowledgement records, invoice identity and approval history, payment detail references, currency and amount, current outcome and independent receipt evidence. Keep bank details and private transaction data local.", "free_result": "The selected Coupa documentation distinguishes object-specific approval, order revisions, supplier acknowledgement, invoice submission and bypass, exported payments and external tracking handoffs. These are dated field and action contracts, not verification of a supplier or bank transaction.", "optional_paid_analysis": "Use Transaction Integrity only where the purchase can be expressed in its supported transaction declaration format. It reconciles declared authority, amendments, scoped retries and reported outcomes; it does not connect to Coupa, validate invoices natively or verify supplier payment. The £149 + VAT one-time internal-use licence adds repeatable local analysis and structured discrepancies for supported declarations. Free records explain the source boundaries. No monitoring, provider access, new schema or subscription entitlement is included.", "do_not_use_when": "The guide does not validate supplier bank ownership, matching tolerances, delegated monetary limits, goods receipt or settlement. Missing identities, changed terms, bypassed approvals or uncorrelated payment references require review.", "next_action": "Follow the exact record access in this guide, then inspect the linked checker preview only if its existing input contract fits. Otherwise retain the stated evidence gap and request the missing source evidence." }, "page_url": "/index-packs#autonomous-procurement-supplier-payment", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-COUPA-APPROVAL-OBJECT-STATE-SPECIFIC-AUTHORITY-01-v1", "title": "Coupa approval objects and decision scope", "decision_use": "Identify which object and state were actually approved.", "record_url": "/varexis-index/records/coupa-approval-object-state-specific-authority.json", "record_sha256": "0f33bb639f2405149d96c610b2bb41f41c6620d5905798570878738786f45fea", "route_id": "agentic_reviewed_coupa_approval_object_state_specific_authority", "provenance": { "source_type": "official_external_documentation", "source_title": "Approvals API (/approvals) | Coupa", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/approvals-api-%28approvals%29", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-COUPA-APPROVAL-OBJECT-STATE-SPECIFIC-AUTHORITY-01-v1", "candidate_record_sha256": "744958ea455151569b4d6387cc4d4965feeba8b1058409c99249f765aaa1d6ce", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_coupa_approval_object_state_specific_authority" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-COUPA-PURCHASE-ORDER-VERSION-EXPORT-RECONCILIATION-01-v1", "title": "Coupa purchase-order revision reconciliation", "decision_use": "Bind approved terms to the relevant order revision and export state.", "record_url": "/varexis-index/records/coupa-purchase-order-version-export-reconciliation.json", "record_sha256": "afd9445c6e62b666cf74ef267f1b9dcb5d08e2fe3b35b3aa13de81c431f42412", "route_id": "agentic_reviewed_coupa_purchase_order_version_export_reconciliation", "provenance": { "source_type": "official_external_documentation", "source_title": "Purchase Orders API (/purchase_orders) | Coupa", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/purchase-orders-api-%28purchase_orders%29", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-COUPA-PURCHASE-ORDER-VERSION-EXPORT-RECONCILIATION-01-v1", "candidate_record_sha256": "2341915e851e2f106225b7ee24c2e658acf3733a5186f649584f7295989ddb23", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_coupa_purchase_order_version_export_reconciliation" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-ICE05-COUPA-ORDER-TRANSMISSION-ACKNOWLEDGEMENT-01-v1", "title": "Coupa order transmission and supplier acknowledgement", "decision_use": "Separate a sent order from supplier acknowledgement.", "record_url": "/varexis-index/records/coupa-order-transmission-acknowledgement.json", "record_sha256": "1e1bce8169bb60cc1fab107a950e12538b376cac8cf67316e385baf19e7cb51b", "route_id": "agentic_reviewed_coupa_order_transmission_acknowledgement", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Purchase Orders API", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/purchase-orders-api-%28purchase_orders%29", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-ORDER-TRANSMISSION-ACKNOWLEDGEMENT-01-v1", "candidate_record_sha256": "fba53129cc05b1d0ff69b885ab3952482b221ccb85ae1035dab65162dc729f44", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-ORDER-TRANSMISSION-ACKNOWLEDGEMENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-CREATE-SUBMIT-BOUNDARY-01-v1", "title": "Coupa invoice creation and approval submission", "decision_use": "Distinguish a created draft from an invoice submitted for approval.", "record_url": "/varexis-index/records/coupa-invoice-create-submit-boundary.json", "record_sha256": "4cf4ae15c8f9ccf92d270387965531e157245cdecd6913a4f2d1d00585c0d6de", "route_id": "agentic_reviewed_coupa_invoice_create_submit_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Invoices API", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-INVOICE-CREATE-SUBMIT-BOUNDARY-01-v1", "candidate_record_sha256": "0dcd6bdf96a577691a0022264d9cbe5026dbcfb6959550ae6e28f3550dabe236", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-CREATE-SUBMIT-BOUNDARY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-APPROVAL-BYPASS-01-v1", "title": "Coupa invoice approval and bypass provenance", "decision_use": "Check whether the approved status includes a bypass.", "record_url": "/varexis-index/records/coupa-invoice-approval-bypass.json", "record_sha256": "2b0ec3884eb10ff98916f72b747fe61754fb0dafb33bd0341a65711830e9ae32", "route_id": "agentic_reviewed_coupa_invoice_approval_bypass", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Invoices API", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-INVOICE-APPROVAL-BYPASS-01-v1", "candidate_record_sha256": "f8317137aa261c0d71f76797faa13601ea4d1a5a004ab6157d7f67e379aad879", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-APPROVAL-BYPASS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-RESTARTED-APPROVAL-CHAIN-01-v1", "title": "Coupa modified invoices and restarted approval chains", "decision_use": "Keep the current approval chain distinct from prior review history.", "record_url": "/varexis-index/records/coupa-invoice-restarted-approval-chain.json", "record_sha256": "9d8399ab6d9b80af3b924c4c65ab4370eb30ccf710cf89bb4a5c5a7f5e09c7f4", "route_id": "agentic_reviewed_coupa_invoice_restarted_approval_chain", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Invoices API", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-INVOICE-RESTARTED-APPROVAL-CHAIN-01-v1", "candidate_record_sha256": "89984a0eeec6c5823bf45092ed05b7a3cde0dfb5b52be087ac9a2145bb6deeae", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-RESTARTED-APPROVAL-CHAIN-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-DETAIL-INVOICE-ALLOCATION-01-v1", "title": "Coupa payment details and invoice allocation", "decision_use": "Bind each invoice reference to payment-detail amounts and currency.", "record_url": "/varexis-index/records/coupa-payment-detail-invoice-allocation.json", "record_sha256": "ad31b3d394f893b5315700be2b7ee903c85ee86a8458f1466ae8b8f8a7cb51d2", "route_id": "agentic_reviewed_coupa_payment_detail_invoice_allocation", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Payments API", "source_url": "https://compass.coupa.com/_dita_/en-us/documentation/plat/integ/coupa_core_api/topics/payments_api_coupa_paypayments_.dita", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-DETAIL-INVOICE-ALLOCATION-01-v1", "candidate_record_sha256": "0694ae612cadd3cbce1be433f88915cafd4eb4ec09a607d6d6dc3d5d27ef9976", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-DETAIL-INVOICE-ALLOCATION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-EXPORT-NOT-SETTLEMENT-01-v1", "title": "Coupa payment export and accounting acknowledgement", "decision_use": "Treat export as an integration marker rather than a settled payment.", "record_url": "/varexis-index/records/coupa-payment-export-not-settlement.json", "record_sha256": "418aa720392e89ceca7d78c838a5d7308c67f526e88fe4584ea2c40c6583c0e8", "route_id": "agentic_reviewed_coupa_payment_export_not_settlement", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Payments API", "source_url": "https://compass.coupa.com/_dita_/en-us/documentation/plat/integ/coupa_core_api/topics/payments_api_coupa_paypayments_.dita", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-EXPORT-NOT-SETTLEMENT-01-v1", "candidate_record_sha256": "5068250f36cb3615f15b87b989e5277f86cae6cdf9c66f079f3e13f9d83ef888", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-EXPORT-NOT-SETTLEMENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-COUPA-PAYABLE-EXTERNAL-HANDOFF-01-v1", "title": "Coupa external payment and tracking handoff", "decision_use": "Identify when payment tracking moved outside Coupa.", "record_url": "/varexis-index/records/coupa-payable-external-handoff.json", "record_sha256": "daac95cf95b3ec6fed823ffd7abf66301705862fcd8634803876b6358503ea82", "route_id": "agentic_reviewed_coupa_payable_external_handoff", "provenance": { "source_type": "official_external_documentation", "source_title": "Coupa: Payables Invoices API", "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/payables-api-%28payables%29/payablesinvoices-api", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-COUPA-PAYABLE-EXTERNAL-HANDOFF-01-v1", "candidate_record_sha256": "a5c215bfffb66b7d1fe7d6471aecfa2b7f6ca44839c8d0899f187522443d51f3", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-COUPA-PAYABLE-EXTERNAL-HANDOFF-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-transaction-integrity", "title": "Agent Transaction Integrity & Replay Analyzer", "price_gbp_excluding_vat": 149, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "957856c965985711127b6c07ca8bf3226c94eb2db33f02b10c4d4ea437bbecff", "purchase_url": "/index-access?route=agentic_pack_transaction_integrity_v1", "product_page": "/index-packs#agent-transaction-integrity", "preview_url": "/varexis-index/product-previews/v2/agent-transaction-integrity.json", "preview_sha256": "576c4a0d16f81e0fe6ccef815a036f5986b6015a6be187065e911544e011aff6", "inputs": "Versioned JSON declarations of spending authority, approved terms, transaction amendments, retry/idempotency references and reported payment outcomes.", "outputs": "Structured inconsistencies and missing-evidence findings, with input, rules and result hashes.", "representative_finding": "Declared payment terms differ from the approved terms. Reconcile the discrepancy before relying on the transaction record.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "agent-tool-change-execution-provenance", "title": "Agent Tool Change & Execution Provenance", "problem": "Delegated workflows and signed artifacts can look consistent while credential selection, configuration overrides or missing execution outcomes change what the evidence actually supports.", "decision": "Review a changed execution plan and its artifact evidence before relying on declared authority, completion or provenance.", "required_inputs": "Dated workflow revisions, initiating identity and target access, forwarding and credential-selection declarations without secret values, linked pipeline results, artifact bytes or independently bound digests, attestation bundles and expected signer policy.", "establishes": "The selected GitLab, GitHub and Sigstore documentation separates trigger authority, effective configuration, downstream completion, environment credential selection and artifact identity from signature or metadata claims. Apply each source only to its recorded version and scope.", "unsupported": "These records do not verify cryptographic signatures, live permissions, secret values, artifact safety or actual execution. A missing downstream result, unbound digest, unexpected signer or unresolved configuration conflict prevents an approval conclusion.", "selection": "Tool Admission (£49 + VAT) compares supported GitHub, Playwright, Notion and Slack declarations. Audit Coverage (£79 + VAT) checks supported declared identity/authority/action/outcome chains and capture gaps. GitLab and Sigstore evidence informs manual review; it adds no native connector or signature-verification capability.", "value": "Each separate one-time internal-use licence adds reusable local declaration analysis, structured conflicts or gaps and content hashes. The free guide supplies source context; it does not run those analyses, enforce policy or grant access to either executable through a subscription.", "decision_sequence": [ "Identify the initiating principal and intended target.", "Resolve forwarded configuration and credential-source changes.", "Collect the linked downstream outcome rather than a creation signal.", "Bind the supplied artifact digest and expected signing workflow.", "Retain unresolved predicate or timestamp trust as an evidence gap." ], "agent_selection": { "use_when": "Review a changed execution plan and its artifact evidence before relying on declared authority, completion or provenance.", "required_evidence": "Dated workflow revisions, initiating identity and target access, forwarding and credential-selection declarations without secret values, linked pipeline results, artifact bytes or independently bound digests, attestation bundles and expected signer policy.", "free_result": "The selected GitLab, GitHub and Sigstore documentation separates trigger authority, effective configuration, downstream completion, environment credential selection and artifact identity from signature or metadata claims. Apply each source only to its recorded version and scope.", "optional_paid_analysis": "Tool Admission (£49 + VAT) compares supported GitHub, Playwright, Notion and Slack declarations. Audit Coverage (£79 + VAT) checks supported declared identity/authority/action/outcome chains and capture gaps. GitLab and Sigstore evidence informs manual review; it adds no native connector or signature-verification capability. Each separate one-time internal-use licence adds reusable local declaration analysis, structured conflicts or gaps and content hashes. The free guide supplies source context; it does not run those analyses, enforce policy or grant access to either executable through a subscription.", "do_not_use_when": "These records do not verify cryptographic signatures, live permissions, secret values, artifact safety or actual execution. A missing downstream result, unbound digest, unexpected signer or unresolved configuration conflict prevents an approval conclusion.", "next_action": "Follow the exact record access in this guide, then inspect the linked checker preview only if its existing input contract fits. Otherwise retain the stated evidence gap and request the missing source evidence." }, "page_url": "/index-packs#agent-tool-change-execution-provenance", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1", "title": "GitLab trigger-token user authority", "decision_use": "Bind a trigger token to its creating user and permitted target.", "record_url": "/varexis-index/records/gitlab-trigger-user-authority.json", "record_sha256": "4a7198c2b6b0a7439aab7daa7343767b7dcdcfddc491eb3d0b28f5467ed37c3f", "route_id": "agentic_reviewed_gitlab_trigger_user_authority", "provenance": { "source_type": "official_external_documentation", "source_title": "GitLab: Trigger pipelines with the API", "source_url": "https://docs.gitlab.com/ci/triggers/", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1", "candidate_record_sha256": "ff0226ae9f179998bcce2096885e3265ead872bc024afe9e2faaeaf6ef0abebd", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1", "title": "GitLab forwarded-variable precedence", "decision_use": "Reconcile upstream overrides with downstream configuration.", "record_url": "/varexis-index/records/gitlab-forwarded-variable-precedence.json", "record_sha256": "15541b857951adb69c2471a0db1b63448b96affce30bb4183c891a19940852dc", "route_id": "agentic_reviewed_gitlab_forwarded_variable_precedence", "provenance": { "source_type": "official_external_documentation", "source_title": "GitLab: Downstream pipelines", "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1", "candidate_record_sha256": "e68b2ca0d91abebf951b3a441261afdf80ad95e80dcb425076258ab079c4d74c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1", "title": "GitLab trigger success and downstream completion", "decision_use": "Collect the downstream execution result beyond trigger success.", "record_url": "/varexis-index/records/gitlab-trigger-success-not-completion.json", "record_sha256": "5ba05d057f47caa61b04a881f8c12f85632ebc7e283acd09d19c0d9b3d8a0a04", "route_id": "agentic_reviewed_gitlab_trigger_success_not_completion", "provenance": { "source_type": "official_external_documentation", "source_title": "GitLab: Downstream pipelines", "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1", "candidate_record_sha256": "4aae0653e11e2f75048a4df7e772b54549d404070fceb13bd5485d58d7543ec2", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1", "title": "GitHub reusable-workflow environment secret selection", "decision_use": "Establish the credential source without exposing its value.", "record_url": "/varexis-index/records/github-environment-secret-selection.json", "record_sha256": "5efad68f7334b1bc5eed3d9a7e3921f9e61151eddb0880033347f172e277fce5", "route_id": "agentic_reviewed_github_environment_secret_selection", "provenance": { "source_type": "official_external_documentation", "source_title": "GitHub: Reuse workflows", "source_url": "https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1", "candidate_record_sha256": "7ec300cd333efb2d9bfb6cf60f19428689ba74fcd879907c8e6a871aefe70ae2", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1", "title": "GitHub attestation reusable-workflow signer policy", "decision_use": "Constrain the reusable workflow that actually signs the artifact.", "record_url": "/varexis-index/records/github-attestation-signer-workflow.json", "record_sha256": "642ac75db484e2a44cc488481f0cafaea3f6d971516b18bde0e1626a15495a61", "route_id": "agentic_reviewed_github_attestation_signer_workflow", "provenance": { "source_type": "official_external_documentation", "source_title": "GitHub CLI: gh attestation verify", "source_url": "https://cli.github.com/manual/gh_attestation_verify", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1", "candidate_record_sha256": "7263c37f7de57698224648a208c06f9d92d8f48dedd2baed44805962641a3c2c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1", "title": "GitHub offline attestation repository-name binding", "decision_use": "Separate historical certificate names from current repository ownership.", "record_url": "/varexis-index/records/github-attestation-offline-name-rebinding.json", "record_sha256": "14efbfb06a77e76336c60fa001051a7abc3dbac4b161c4f7b33fafceadcc52f0", "route_id": "agentic_reviewed_github_attestation_offline_name_rebinding", "provenance": { "source_type": "official_external_documentation", "source_title": "GitHub CLI: gh attestation verify", "source_url": "https://cli.github.com/manual/gh_attestation_verify", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1", "candidate_record_sha256": "6b1e112314b4ec7b7beec508fb3ae657f13b2a621fea6f6b6b384853d0699314", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1", "title": "Sigstore bundle informational digest input", "decision_use": "Obtain the intended artifact digest independently of the informational bundle field.", "record_url": "/varexis-index/records/sigstore-bundle-digest-input.json", "record_sha256": "3a019922988b038416c3243360b8c0685c8ebc1ae91e7587c27851166fca0dcb", "route_id": "agentic_reviewed_sigstore_bundle_digest_input", "provenance": { "source_type": "official_external_documentation", "source_title": "Sigstore: Bundle specification", "source_url": "https://docs.sigstore.dev/about/bundle/", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1", "candidate_record_sha256": "c164d87273aa84424bb6f4def02bdf5212c4f6abce0d301cea51784a4488a175", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1", "title": "GitHub attestation predicate trust boundary", "decision_use": "Check trust in the producing context beyond signature validity.", "record_url": "/varexis-index/records/github-attestation-predicate-trust.json", "record_sha256": "ec4d4b0b560b558d1ac813aad36ea7129a417636a37123835a61a2bdaddf2ee9", "route_id": "agentic_reviewed_github_attestation_predicate_trust", "provenance": { "source_type": "official_external_documentation", "source_title": "GitHub CLI: gh attestation verify", "source_url": "https://cli.github.com/manual/gh_attestation_verify", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1", "candidate_record_sha256": "09e850591bfbe0e33ec1eae97a7ab9978967c08cd39ff9d47ec114f560303c0f", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1", "title": "Sigstore Rekor timestamp trust and version", "decision_use": "Identify the timestamp version and trust source before relying on signing time.", "record_url": "/varexis-index/records/sigstore-rekor-timestamp-version.json", "record_sha256": "78165b63326d053d01351380a1e8c8ff7393e7eb58d622ccbe8d2b55ac623aa1", "route_id": "agentic_reviewed_sigstore_rekor_timestamp_version", "provenance": { "source_type": "official_external_documentation", "source_title": "Sigstore: Timestamps", "source_url": "https://docs.sigstore.dev/cosign/verifying/timestamps/", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1", "candidate_record_sha256": "246fb274a8d41017bdc511f807ef3ae0a5a9b6ba0f32b04a86f146698a40fa2d", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-tool-admission", "title": "Agent Tool Admission & Permission Control", "price_gbp_excluding_vat": 49, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "d9c1d4a63ed87644d0bc49ad8d7b37aa92a463a6cd6681a5225ca94f2b61bb6b", "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1", "product_page": "/index-packs#agent-tool-admission", "preview_url": "/varexis-index/product-previews/v2/agent-tool-admission.json", "preview_sha256": "3accb4cae50ebbe9096319451d9836decaabf53b146e0807d0e7ebd7816b2a3f", "inputs": "JSON declarations of GitHub, Playwright, Notion or Slack connector identity, requested and allowed actions, resources, recipients and authority; an earlier inventory supports comparison.", "outputs": "Structured findings about declared permission conflicts, inventory changes and missing verification, with source and content hashes.", "representative_finding": "A requested destination is outside the declared authority. Obtain authority evidence before relying on the plan.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." }, { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "value": "The free records explain documented boundaries and the evidence to collect. The optional existing Audit Coverage licence adds repeatable local analysis of supported supplied event declarations, chain gaps and completeness findings. It does not inspect a provider account or establish that a reported event really occurred.", "id": "workflow-completion-recovery", "title": "Workflow Completion & Recovery Evidence", "problem": "A queue accepted, cancelled or replayed a message, but the resulting business action may still be missing, duplicated or uncertain.", "decision": "Decide which attempts can safely be reconciled, which retained data remains recoverable and which unresolved effects need operator review before another attempt.", "required_inputs": "Message and operation identities; channel, session or subscription context; acknowledgements, cancellation and replay timestamps; retention settings; external-effect results and a declared event chain. Keep customer payloads and credentials local.", "establishes": "The selected dated documentation distinguishes broker acknowledgement from completion, in-flight work from cancelled subscriptions, external effects from broker transactions, and retained replay coverage from an assumed recovery window.", "unsupported": "These records do not query queues, execute recovery, cancel live work or guarantee exactly-once business effects. Missing outcome, retention or correlation evidence leaves the recovery decision unresolved.", "selection": "Use Audit Coverage only when the review involves its supported declared event-chain and completeness inputs. Provider-native queue payloads require your own evidence preparation; this guide adds no RabbitMQ, Service Bus or Pub/Sub integration.", "decision_sequence": [ "Identify the operation and all delivery attempts before suppressing or repeating work.", "Separate broker state from external effects and retained session data.", "Check replay eligibility and transition behavior against actual retained evidence.", "Review supported declared event chains locally; leave unknown outcomes unresolved." ], "page_url": "/index-packs#workflow-completion-recovery", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE07-RABBITMQ-AUTO-ACK-PROCESSING-GAP-01-v1", "title": "Does RabbitMQ automatic acknowledgement establish completed processing", "decision_use": "Require an application result beyond automatic acknowledgement.", "record_url": "/varexis-index/records/rabbitmq-auto-ack-processing-gap.json", "record_sha256": "495b4f47733ea4fef7556c597fe2d77a3a5ad0809de2e7f8213e6187d9700762", "route_id": "agentic_reviewed_rabbitmq_auto_ack_processing_gap", "provenance": { "source_type": "official_external_documentation", "source_title": "Consumer Acknowledgements and Publisher Confirms | RabbitMQ", "source_url": "https://www.rabbitmq.com/docs/confirms", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-RABBITMQ-AUTO-ACK-PROCESSING-GAP-01-v1", "candidate_record_sha256": "f3dc421f80608d9f0c8488f88dedc0b54a0763a206a53605d3da24f34f544d46", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-RABBITMQ-AUTO-ACK-PROCESSING-GAP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-RABBITMQ-CONSUMER-CANCEL-INFLIGHT-WORK-01-v1", "title": "Does cancelling a RabbitMQ consumer stop or requeue in-flight work", "decision_use": "Account for in-flight work after cancellation.", "record_url": "/varexis-index/records/rabbitmq-consumer-cancel-inflight-work.json", "record_sha256": "f4c3381aa6fdc364fd97318d0647264c848db6a57dc34a6e1da8b21e63ce8e2f", "route_id": "agentic_reviewed_rabbitmq_consumer_cancel_inflight_work", "provenance": { "source_type": "official_external_documentation", "source_title": "Consumers | RabbitMQ", "source_url": "https://www.rabbitmq.com/docs/consumers", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-RABBITMQ-CONSUMER-CANCEL-INFLIGHT-WORK-01-v1", "candidate_record_sha256": "c868db5fe8209a7186e9264f998d000f7aa7c878a196f883aac3df1537f98507", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-RABBITMQ-CONSUMER-CANCEL-INFLIGHT-WORK-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-SERVICEBUS-SESSION-STATE-RETAINED-AFTER-CONSUMPTION-01-v1", "title": "Is Service Bus session state removed after consuming every message", "decision_use": "Inspect retained session state after consuming messages.", "record_url": "/varexis-index/records/servicebus-session-state-retained-after-consumption.json", "record_sha256": "c66ae669c53e9749d885517d29ce82c5515912bc66814928741238645d184edf", "route_id": "agentic_reviewed_servicebus_session_state_retained_after_consumption", "provenance": { "source_type": "official_external_documentation", "source_title": "Azure Service Bus Enable FIFO with Sessions - Azure Service Bus | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/azure/service-bus-messaging/message-sessions", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-SERVICEBUS-SESSION-STATE-RETAINED-AFTER-CONSUMPTION-01-v1", "candidate_record_sha256": "8a565c1c912c2ed4815a8fe6b903c9976de96ff399f9b4986f8d5827cf5718be", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-SERVICEBUS-SESSION-STATE-RETAINED-AFTER-CONSUMPTION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-SERVICEBUS-TRANSACTION-EXTERNAL-RESOURCE-BOUNDARY-01-v1", "title": "Does a Service Bus transaction roll back external database or API effects", "decision_use": "Reconcile external effects outside the broker transaction.", "record_url": "/varexis-index/records/servicebus-transaction-external-resource-boundary.json", "record_sha256": "4fe1aee8848b5b6e41a575d74b4e6756dcf7e80f3c57ec7472d065a45e840ada", "route_id": "agentic_reviewed_servicebus_transaction_external_resource_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Transactions in Azure Service Bus - Azure Service Bus | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-transactions", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-SERVICEBUS-TRANSACTION-EXTERNAL-RESOURCE-BOUNDARY-01-v1", "candidate_record_sha256": "933d07def1aa28be84975efd186d996b14d8f486e2492194c6e876de219232ba", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-SERVICEBUS-TRANSACTION-EXTERNAL-RESOURCE-BOUNDARY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-SERVICEBUS-SCHEDULE-CANCEL-ACTIVATION-RACE-01-v1", "title": "Can Service Bus activate a scheduled message while cancellation occurs", "decision_use": "Check activation after cancellation near the scheduled time.", "record_url": "/varexis-index/records/servicebus-schedule-cancel-activation-race.json", "record_sha256": "1863fe3078823d075b9bc7e670d68a434962a1f86c3c45013db7b8dadfc89307", "route_id": "agentic_reviewed_servicebus_schedule_cancel_activation_race", "provenance": { "source_type": "official_external_documentation", "source_title": "Azure Service Bus message sequencing and timestamps - Azure Service Bus | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/azure/service-bus-messaging/message-sequencing", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-SERVICEBUS-SCHEDULE-CANCEL-ACTIVATION-RACE-01-v1", "candidate_record_sha256": "dc948b94ebbd969f549d8a9bdb45ce1993cf817168d8e31350ef7a34012cd5ec", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-SERVICEBUS-SCHEDULE-CANCEL-ACTIVATION-RACE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-PUBSUB-DEADLETTER-ATTEMPT-COUNT-APPROXIMATE-01-v1", "title": "Does Pub/Sub maxDeliveryAttempts enforce an exact retry ceiling", "decision_use": "Do not treat a configured retry count as an execution ceiling.", "record_url": "/varexis-index/records/pubsub-deadletter-attempt-count-approximate.json", "record_sha256": "b21b1e2f7e363ab995ee40a693d7c100abf443e72265807b3ef9036ffc43aa46", "route_id": "agentic_reviewed_pubsub_deadletter_attempt_count_approximate", "provenance": { "source_type": "official_external_documentation", "source_title": "Dead-letter topics  |  Pub/Sub  |  Google Cloud Documentation", "source_url": "https://docs.cloud.google.com/pubsub/docs/dead-letter-topics", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-PUBSUB-DEADLETTER-ATTEMPT-COUNT-APPROXIMATE-01-v1", "candidate_record_sha256": "ed33cdda896752a130d8645c21ab2b3199fd4df5ad18c96a69587f7f2405d60d", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-PUBSUB-DEADLETTER-ATTEMPT-COUNT-APPROXIMATE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-PUBSUB-SNAPSHOT-BACKLOG-LIFETIME-01-v1", "title": "Does every Pub/Sub snapshot provide seven new days of recovery", "decision_use": "Confirm the snapshot recovery window before relying on rollback.", "record_url": "/varexis-index/records/pubsub-snapshot-backlog-lifetime.json", "record_sha256": "846cdfbf9d65ea99d0e78b08c2f7e4009675655adb8b3b1a37f0a6b43b785153", "route_id": "agentic_reviewed_pubsub_snapshot_backlog_lifetime", "provenance": { "source_type": "official_external_documentation", "source_title": "Replay and purge messages with seek  |  Pub/Sub  |  Google Cloud Documentation", "source_url": "https://docs.cloud.google.com/pubsub/docs/replay-overview", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-PUBSUB-SNAPSHOT-BACKLOG-LIFETIME-01-v1", "candidate_record_sha256": "9440484cd2eb749aaad78506b2dc6a31dfb76dda68f3c858912c0cdf11928467", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-PUBSUB-SNAPSHOT-BACKLOG-LIFETIME-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-PUBSUB-SEEK-DELIVERY-EVENTUAL-CONSISTENCY-01-v1", "title": "Does successful Pub/Sub seek instantly change all delivered messages", "decision_use": "Reconcile deliveries while the seek state converges.", "record_url": "/varexis-index/records/pubsub-seek-delivery-eventual-consistency.json", "record_sha256": "ca92bbabf984559bcd3efbc62d0d90567b05881fe0552c704e44a4517fbf8d4a", "route_id": "agentic_reviewed_pubsub_seek_delivery_eventual_consistency", "provenance": { "source_type": "official_external_documentation", "source_title": "Replay and purge messages with seek  |  Pub/Sub  |  Google Cloud Documentation", "source_url": "https://docs.cloud.google.com/pubsub/docs/replay-overview", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-PUBSUB-SEEK-DELIVERY-EVENTUAL-CONSISTENCY-01-v1", "candidate_record_sha256": "15de32f3d4e5d98ade42452ca3e504e0dafac50335331335eaf8b2aced5f9693", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-PUBSUB-SEEK-DELIVERY-EVENTUAL-CONSISTENCY-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "value": "The free records explain documented boundaries and the evidence to collect. The optional existing Audit Coverage licence adds repeatable local analysis of supported supplied event declarations, chain gaps and completeness findings. It does not inspect a provider account or establish that a reported event really occurred.", "id": "software-artifact-acceptance", "title": "Software Artifact Acceptance Evidence", "problem": "An image has attached signatures or provenance, yet an incomplete inventory, an unverified digest or a relaxed trust policy can leave its acceptance unsupported.", "decision": "Decide whether the collected artifact identity, evidence attachments and effective verification policy support the intended acceptance statement, or which missing checks must remain explicit.", "required_inputs": "Registry and fully qualified repository; expected digest and retrieved bytes; complete referrer responses; attachment types; verifier version, effective trust policy, accepted signer and individual validation results. Do not provide signing keys or private build data to public MCP.", "establishes": "The selected specifications separate content integrity from publisher trust, attachment discovery from endorsement, and policy acceptance from every validation passing. Pinned Notary specification snapshots describe requirements, not tested behavior of your installed verifier.", "unsupported": "This guide does not verify signatures, certify software, test deployment compatibility or approve a release. A digest identifies bytes; associations and policy labels do not independently establish safety, authority or complete verification.", "selection": "Perform cryptographic and registry checks with the appropriate trusted tooling. Audit Coverage is optional only for supported declarations describing the resulting evidence chain; it is not a Notation, Cosign or OCI verifier and this guide adds no such capability.", "decision_sequence": [ "Bind artifact evidence to the intended repository and verified content digest.", "Resolve referrer pagination and fallback before asserting evidence completeness.", "Inspect the selected trust policy, overrides and individual signature outcomes.", "Keep technical acceptance distinct from safety claims; optionally reconcile the declared audit chain locally." ], "page_url": "/index-packs#software-artifact-acceptance", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE07-OCI-DESCRIPTOR-SIZE-DIGEST-BEFORE-CONSUMPTION-01-v1", "title": "Does a valid OCI descriptor establish trustworthy downloaded content", "decision_use": "Verify byte size and digest before consuming untrusted content.", "record_url": "/varexis-index/records/oci-descriptor-size-digest-before-consumption.json", "record_sha256": "4e7ce2dca5d312a7835f024e4bab6f229015d53c75f3d4e6a2c0bc067cd9a88c", "route_id": "agentic_reviewed_oci_descriptor_size_digest_before_consumption", "provenance": { "source_type": "official_external_documentation", "source_title": "OCI Content Descriptors", "source_url": "https://raw.githubusercontent.com/opencontainers/image-spec/v1.1.1/descriptor.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-OCI-DESCRIPTOR-SIZE-DIGEST-BEFORE-CONSUMPTION-01-v1", "candidate_record_sha256": "fb21285a99107462cb9ba643955552ade17c9605900cb957078bede878ed703f", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-OCI-DESCRIPTOR-SIZE-DIGEST-BEFORE-CONSUMPTION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-OCI-REFERRERS-PAGINATION-COMPLETENESS-01-v1", "title": "Does the first OCI referrers response contain every evidence attachment", "decision_use": "Resolve all continuation pages for the evidence inventory.", "record_url": "/varexis-index/records/oci-referrers-pagination-completeness.json", "record_sha256": "c68fd85af15b922d2be4d0536c72828613cd738d6351ccbb7ca8bea1b2d97bce", "route_id": "agentic_reviewed_oci_referrers_pagination_completeness", "provenance": { "source_type": "official_external_documentation", "source_title": "Open Container Initiative Distribution Specification", "source_url": "https://raw.githubusercontent.com/opencontainers/distribution-spec/v1.1.1/spec.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-OCI-REFERRERS-PAGINATION-COMPLETENESS-01-v1", "candidate_record_sha256": "4a1015d9a813172e2d813c5e354ac71a245fba0b8e9f3d502d9c812926d658d4", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-OCI-REFERRERS-PAGINATION-COMPLETENESS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-OCI-REFERRERS-404-FALLBACK-BOUNDARY-01-v1", "title": "Does a referrers API 404 prove no OCI evidence exists", "decision_use": "Distinguish unsupported API discovery from absent attachments.", "record_url": "/varexis-index/records/oci-referrers-404-fallback-boundary.json", "record_sha256": "3065eeced1ecff2f19f01b72f8e70b44907d4ce892aa4de3cad8edc45c89b9c7", "route_id": "agentic_reviewed_oci_referrers_404_fallback_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Open Container Initiative Distribution Specification", "source_url": "https://raw.githubusercontent.com/opencontainers/distribution-spec/v1.1.1/spec.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-OCI-REFERRERS-404-FALLBACK-BOUNDARY-01-v1", "candidate_record_sha256": "4e217866828b1559a09e9fe899b1a8a05ae89ded72da94a73b4ab643d8011fae", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-OCI-REFERRERS-404-FALLBACK-BOUNDARY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-OCI-SUBJECT-WEAK-ASSOCIATION-NOT-ENDORSEMENT-01-v1", "title": "Does an OCI subject field approve the referenced artifact", "decision_use": "Treat subject linkage as association, not approval.", "record_url": "/varexis-index/records/oci-subject-weak-association-not-endorsement.json", "record_sha256": "35c91ca1985607da9dd2599d84fde7f5d430164d429116da1370f8175772ccd1", "route_id": "agentic_reviewed_oci_subject_weak_association_not_endorsement", "provenance": { "source_type": "official_external_documentation", "source_title": "OCI Image Manifest Specification", "source_url": "https://raw.githubusercontent.com/opencontainers/image-spec/v1.1.1/manifest.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-OCI-SUBJECT-WEAK-ASSOCIATION-NOT-ENDORSEMENT-01-v1", "candidate_record_sha256": "c3243f4a15e0e7cccd6eeba8f3b95e19233c731d2dcb693812928bba2ff4d28d", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-OCI-SUBJECT-WEAK-ASSOCIATION-NOT-ENDORSEMENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-NOTARY-VERIFICATION-LEVEL-ENFORCEMENT-01-v1", "title": "Does a Notary policy pass mean every signature check passed", "decision_use": "Record which checks were enforced or only logged.", "record_url": "/varexis-index/records/notary-verification-level-enforcement.json", "record_sha256": "95d90604f35f180bc08e4b2c0e3a7f8889865d7702a6f004cdda47c651def1bc", "route_id": "agentic_reviewed_notary_verification_level_enforcement", "provenance": { "source_type": "official_external_documentation", "source_title": "Trust Store and Trust Policy Specification", "source_url": "https://raw.githubusercontent.com/notaryproject/specifications/d4b62b949228911bd5e62da4f5f8dd38682d293a/specs/trust-store-trust-policy.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-NOTARY-VERIFICATION-LEVEL-ENFORCEMENT-01-v1", "candidate_record_sha256": "c620a2985a8dc4714753159fb2724f45ddce9c3fd593fadcba307d7e814397e1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-NOTARY-VERIFICATION-LEVEL-ENFORCEMENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-NOTARY-CUSTOM-OVERRIDES-CHANGE-ASSURANCE-01-v1", "title": "Does the Notary strict label establish the effective verification policy", "decision_use": "Inspect overrides rather than trusting the level name.", "record_url": "/varexis-index/records/notary-custom-overrides-change-assurance.json", "record_sha256": "877123276ee6ac3fe4c601f3781ec638cd0ac624a616630da057ad54b5cfbfc5", "route_id": "agentic_reviewed_notary_custom_overrides_change_assurance", "provenance": { "source_type": "official_external_documentation", "source_title": "Trust Store and Trust Policy Specification", "source_url": "https://raw.githubusercontent.com/notaryproject/specifications/d4b62b949228911bd5e62da4f5f8dd38682d293a/specs/trust-store-trust-policy.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-NOTARY-CUSTOM-OVERRIDES-CHANGE-ASSURANCE-01-v1", "candidate_record_sha256": "393b6f40412495abc158ca0766a575e9a2daacbe3906cc4ef6b111df58d67658", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-NOTARY-CUSTOM-OVERRIDES-CHANGE-ASSURANCE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-NOTARY-EXACT-REPOSITORY-POLICY-PRECEDENCE-01-v1", "title": "Does a global Notary policy govern every artifact repository", "decision_use": "Resolve the exact repository policy before a global fallback.", "record_url": "/varexis-index/records/notary-exact-repository-policy-precedence.json", "record_sha256": "c6213e5328dcafa29a45f45c11afb614c7e13a2473644cc5ddff45498c77f665", "route_id": "agentic_reviewed_notary_exact_repository_policy_precedence", "provenance": { "source_type": "official_external_documentation", "source_title": "Trust Store and Trust Policy Specification", "source_url": "https://raw.githubusercontent.com/notaryproject/specifications/d4b62b949228911bd5e62da4f5f8dd38682d293a/specs/trust-store-trust-policy.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-NOTARY-EXACT-REPOSITORY-POLICY-PRECEDENCE-01-v1", "candidate_record_sha256": "8be3299fe27b5b93b4184ae20ea704beba233d08f948f018f836bd76b4364555", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-NOTARY-EXACT-REPOSITORY-POLICY-PRECEDENCE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE07-NOTARY-ONE-VALID-SIGNATURE-NOT-ALL-01-v1", "title": "Does Notary artifact success validate every attached signature", "decision_use": "Identify the accepted signature without claiming every signature passed.", "record_url": "/varexis-index/records/notary-one-valid-signature-not-all.json", "record_sha256": "0e5e7d99c599488a3d8f639a61b6dea546ba9790abad252fa40a862b2cd25004", "route_id": "agentic_reviewed_notary_one_valid_signature_not_all", "provenance": { "source_type": "official_external_documentation", "source_title": "Signing and Verification Workflow", "source_url": "https://raw.githubusercontent.com/notaryproject/specifications/d4b62b949228911bd5e62da4f5f8dd38682d293a/specs/signing-and-verification-workflow.md", "checked_on": "2026-10-29", "candidate_record_id": "VXI-EXT-ICE07-NOTARY-ONE-VALID-SIGNATURE-NOT-ALL-01-v1", "candidate_record_sha256": "ca8abafe3d9437606aac2a456bdfdc9b74f5dba418302f936511fd2267433309", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE07-NOTARY-ONE-VALID-SIGNATURE-NOT-ALL-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "connector-sync-access-evidence", "title": "Connector Sync & Access Evidence", "problem": "A connector reports a successful sync, yet files, messages or access changes may still be missing from the review.", "decision": "Determine whether the declared collection covers the intended resources and permissions, and which gaps need another capture before accepting a complete handover.", "required_inputs": "The selected resource and folder scope; caller identity and granted permissions; delta parameters and completed page chain; webhook acknowledgement and processing records; dated access observations. Keep tokens and private content local.", "establishes": "The Microsoft Graph, Google Drive and Slack documentation distinguishes returned items from complete scope, caller-visible permissions from a full access inventory, and accepted notifications from processed changes. The selected records provide a checklist for reconciling declared collection evidence.", "unsupported": "No account is inspected and no live access or complete synchronisation is verified. An absent event does not prove no change. A free guide or saved source snapshot does not perform connector reconciliation.", "selection": "Audit Coverage can assess supported supplied event-chain and completeness declarations. It does not connect to Graph, Drive or Slack, collect missing pages, discover effective permissions or validate a native connector export.", "value": "The guide helps prepare a bounded evidence review. The separately licensed checker adds repeatable local analysis of its supported declarations; it adds no native connector support. Optional saved evidence below preserves an eligible existing source answer, not an analysis of your system.", "decision_sequence": [ "Declare resources, caller permissions and collection parameters.", "Complete page chains and distinguish notification acceptance from processing.", "Record visibility limits, retry identity and missing evidence before relying on completeness." ], "saved_evidence": { "scope": "Selected existing eligible records only; this guide and its newer catalogue records remain free and cannot be purchased as a saved bundle.", "offers": [ { "service_id": "single_request", "price_gbp_excluding_vat": 5, "deliverable": "One saved version-bound evidence result" }, { "service_id": "evidence_receipt", "price_gbp_excluding_vat": 19, "deliverable": "One unsigned evidence receipt" } ], "provides_executable_licence": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-GRAPH-DELTA-REPLAY-RESET-AUDIT-BOUNDARY-01-v1", "title": "Microsoft Graph delta: Replays and synchronization resets", "route_id": "agentic_reviewed_graph_delta_replay_reset_audit_boundary", "purchase_options_url": "/index-access?route=agentic_reviewed_graph_delta_replay_reset_audit_boundary" }, { "record_id": "VXI-EXT-PROCUREMENT-SLACK-EVENT-RETRY-IDENTITY-01-v1", "title": "Slack Events: Retry delivery is not a new event", "route_id": "agentic_reviewed_slack_event_retries_event_id_not_new_action", "purchase_options_url": "/index-access?route=agentic_reviewed_slack_event_retries_event_id_not_new_action" } ] }, "page_url": "/index-packs#connector-sync-access-evidence", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE08-GRAPH-MESSAGE-DELTA-FOLDER-COVERAGE-01-v1", "title": "Does one Graph message delta stream cover the whole mailbox", "decision_use": "Check which folders were actually tracked before accepting mailbox-wide coverage.", "record_url": "/varexis-index/records/graph-message-delta-folder-coverage.json", "record_sha256": "809bda067a39a778c57af28adbb624c02be4063333d504103edaf6ca7094ac16", "route_id": "agentic_reviewed_graph_message_delta_folder_coverage", "provenance": { "source_type": "official_external_documentation", "source_title": "Get incremental changes to messages in a folder - Microsoft Graph | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/graph/delta-query-messages", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-GRAPH-MESSAGE-DELTA-FOLDER-COVERAGE-01-v1", "candidate_record_sha256": "c7482abd63734b9b8b44006990e388336cfc846eb0ca5e0d8e12ab899553b315", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-GRAPH-MESSAGE-DELTA-FOLDER-COVERAGE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-GRAPH-PERMISSION-LIST-CALLER-VISIBILITY-01-v1", "title": "Does a non-owner Graph permissions response inventory every sharing grant", "decision_use": "Qualify a permission inventory by what the caller can see.", "record_url": "/varexis-index/records/graph-permission-list-caller-visibility.json", "record_sha256": "26d0af10e43c468ec26a5898b61a72cbbb070cf100a69b4e958f18a68cf2d449", "route_id": "agentic_reviewed_graph_permission_list_caller_visibility", "provenance": { "source_type": "official_external_documentation", "source_title": "List who has access to a file - Microsoft Graph v1.0 | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/graph/api/driveitem-list-permissions?view=graph-rest-1.0", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-GRAPH-PERMISSION-LIST-CALLER-VISIBILITY-01-v1", "candidate_record_sha256": "c926595f276fedc831d77eccaee61d676fbc6dbe6e0ab60e47993ab6eaa31ef7", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-GRAPH-PERMISSION-LIST-CALLER-VISIBILITY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-GRAPH-DELTA-HIERARCHICALSHARING-EMPTY-FACET-01-v1", "title": "Does an empty Graph sharing facet mean the item inherits its parent permissions", "decision_use": "Interpret the sharing facet in the documented hierarchy context.", "record_url": "/varexis-index/records/graph-delta-hierarchicalsharing-empty-facet.json", "record_sha256": "910e0f856f31da51d21f2689789ca83aac58766ff0a9fb986cd25f90115979f6", "route_id": "agentic_reviewed_graph_delta_hierarchicalsharing_empty_facet", "provenance": { "source_type": "official_external_documentation", "source_title": "driveItem: delta - Microsoft Graph v1.0 | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/graph/api/driveitem-delta?view=graph-rest-1.0", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-GRAPH-DELTA-HIERARCHICALSHARING-EMPTY-FACET-01-v1", "candidate_record_sha256": "16b5c3dd5415df0fb3f0ce0512eff696df74d20eead8c7298671c1d9da02ef20", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-GRAPH-DELTA-HIERARCHICALSHARING-EMPTY-FACET-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-GRAPH-WEBHOOK-ACKNOWLEDGEMENT-QUEUED-NOT-PROCESSED-01-v1", "title": "Does Graph considering a webhook delivered prove the business action completed", "decision_use": "Separate notification acceptance from completion of downstream processing.", "record_url": "/varexis-index/records/graph-webhook-acknowledgement-queued-not-processed.json", "record_sha256": "ef74e32f1d684ddf0ddd117427bf379cb722b5580c4d9bd8e49b4ceaaf2f48ac", "route_id": "agentic_reviewed_graph_webhook_acknowledgement_queued_not_processed", "provenance": { "source_type": "official_external_documentation", "source_title": "Receive change notifications through webhooks - Microsoft Graph | Microsoft Learn", "source_url": "https://learn.microsoft.com/en-us/graph/change-notifications-delivery-webhooks", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-GRAPH-WEBHOOK-ACKNOWLEDGEMENT-QUEUED-NOT-PROCESSED-01-v1", "candidate_record_sha256": "fc01d54444799fd7c0f021ca2c2563cd6de0bef7935d1b93d60e6165e72f16db", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-GRAPH-WEBHOOK-ACKNOWLEDGEMENT-QUEUED-NOT-PROCESSED-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-DRIVE-CHANGE-NEXTPAGE-BEFORE-CHECKPOINT-01-v1", "title": "Can a Drive client advance its durable change checkpoint while nextPageToken remains", "decision_use": "Complete every returned page before accepting the new checkpoint.", "record_url": "/varexis-index/records/drive-change-nextpage-before-checkpoint.json", "record_sha256": "766d6add24dd88f7f10237c78ebc9e65a845f0169d3613e80543c21522b26299", "route_id": "agentic_reviewed_drive_change_nextpage_before_checkpoint", "provenance": { "source_type": "official_external_documentation", "source_title": "Method: changes.list  |  Google Drive  |  Google for Developers", "source_url": "https://developers.google.com/workspace/drive/api/reference/rest/v3/changes/list?hl=en", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-DRIVE-CHANGE-NEXTPAGE-BEFORE-CHECKPOINT-01-v1", "candidate_record_sha256": "23b7990aea9a91f0296685379c285c669813e2d15a40e1666980b62e86d41e12", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-DRIVE-CHANGE-NEXTPAGE-BEFORE-CHECKPOINT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-DRIVE-SHARED-CHANGE-SUPPORT-FLAGS-01-v1", "title": "Does a working My Drive changes integration automatically include shared drives", "decision_use": "Check shared-drive support and scope flags before interpreting omissions.", "record_url": "/varexis-index/records/drive-shared-change-support-flags.json", "record_sha256": "944591089539c0f2b4c5e684b9c3390518e52ce610b6117983ef6477c3dc3f79", "route_id": "agentic_reviewed_drive_shared_change_support_flags", "provenance": { "source_type": "official_external_documentation", "source_title": "Implement shared drive support  |  Google Drive  |  Google for Developers", "source_url": "https://developers.google.com/workspace/drive/api/guides/enable-shareddrives?hl=en", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-DRIVE-SHARED-CHANGE-SUPPORT-FLAGS-01-v1", "candidate_record_sha256": "ff89c580aae6da13f23a2b2cf614df399a7f7faeebe87815a768b5533565eb16", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-DRIVE-SHARED-CHANGE-SUPPORT-FLAGS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-SLACK-EVENT-AUTHORIZATION-SUMMARY-NOT-FULL-INSTALLATIONS-01-v1", "title": "Does the Slack event authorizations field enumerate every installation that can see an event", "decision_use": "Avoid treating an event authorization summary as every relevant installation.", "record_url": "/varexis-index/records/slack-event-authorization-summary-not-full-installations.json", "record_sha256": "de02baa3f501a15130b180aa4d70f96e7ee990c7a2efbeaa6a09dc64b565e8c9", "route_id": "agentic_reviewed_slack_event_authorization_summary_not_full_installations", "provenance": { "source_type": "official_external_documentation", "source_title": "The Events API | Slack Developer Docs", "source_url": "https://docs.slack.dev/apis/events-api/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-SLACK-EVENT-AUTHORIZATION-SUMMARY-NOT-FULL-INSTALLATIONS-01-v1", "candidate_record_sha256": "521a21d129711c5cde7dc567d23167e9cf294169b7b59491c500a661bc77de98", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-SLACK-EVENT-AUTHORIZATION-SUMMARY-NOT-FULL-INSTALLATIONS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-GRAPH-DELTA-REPLAY-RESET-AUDIT-BOUNDARY-01-v1", "title": "Microsoft Graph delta: Replays and synchronization resets", "decision_use": "Use the existing replay/reset review to plan recovery evidence.", "record_url": "/varexis-index/records/graph-delta-replay-reset-audit-boundary.json", "record_sha256": "f4436f38b11ade05d12132f91d4abeb71022d71d7c14b20b94d8bfd794a5a04d", "route_id": "agentic_reviewed_graph_delta_replay_reset_audit_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Use delta query to track changes in Microsoft Graph data", "source_url": "https://learn.microsoft.com/en-us/graph/delta-query-overview", "checked_on": "2026-10-22", "candidate_record_id": "VXI-EXT-PROCUREMENT-GRAPH-DELTA-REPLAY-RESET-AUDIT-BOUNDARY-01-v1", "candidate_record_sha256": "5f88b626b4318093655b24ce287420f60b71ab3956cdab43aed436d3fe2bc07c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_graph_delta_replay_reset_audit_boundary" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-SLACK-EVENT-RETRY-IDENTITY-01-v1", "title": "Slack Events: Retry delivery is not a new event", "decision_use": "Use the existing event identity review to separate redelivery from a new action.", "record_url": "/varexis-index/records/slack-event-retries-event-id-not-new-action.json", "record_sha256": "abc3f58164ca700e70efac45c45ef5c3defabd9324d4a34484ad82ac0ff089a9", "route_id": "agentic_reviewed_slack_event_retries_event_id_not_new_action", "provenance": { "source_type": "official_external_documentation", "source_title": "Slack: Events API", "source_url": "https://docs.slack.dev/apis/events-api/", "checked_on": "2026-10-17", "candidate_record_id": "VXI-EXT-PROCUREMENT-SLACK-EVENT-RETRY-IDENTITY-01-v1", "candidate_record_sha256": "39458b5ce8198e58605aa0ca5aa4819cc6618400a9525c4488f5c387fcb15328", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_slack_event_retries_event_id_not_new_action" }, "population": "original_frozen_population" } } ], "checkers": [ { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "agent-run-cost-trace-evidence", "title": "Agent Run Cost & Trace Evidence", "problem": "An agent run has a trace and a cost total, but sampled spans, price mapping, evaluator limits or exporter routing may leave the apparent result incomplete.", "decision": "Decide which declared trace and usage totals are fit for operational review, and which require missing-span, pricing or routing evidence before reconciliation.", "required_inputs": "The trace and observation types; model identifiers and usage buckets; price-table version; sampling and exporter configuration; evaluator spend settings; project routing and flush outcomes. Use redacted declarations rather than credentials or private prompts.", "establishes": "LangSmith and Langfuse documentation defines where displayed cost comes from, what evaluator limits control, and how trace sampling and routing affect recorded evidence. Existing OpenTelemetry and flush reviews supply complementary completion boundaries.", "unsupported": "A trace is not a provider invoice, settled charge or proof of successful action. These records do not verify live telemetry, recover dropped spans, enforce a spending limit or guarantee complete cost attribution.", "selection": "Audit Coverage can check supported supplied event-chain and completeness declarations. It does not import LangSmith or Langfuse exports, calculate provider bills, validate token prices or enforce evaluator budgets.", "value": "The guide helps identify missing evidence before relying on a trace or cost report. The existing checker provides repeatable local analysis only for its supported declarations. Optional saved evidence preserves an eligible existing source answer; it does not save this entire guide or execute a cost analysis.", "decision_sequence": [ "Identify model, usage and price inputs and separate observed from inferred cost.", "Check sampling, evaluator caps and project-routing scope.", "Reconcile completed export evidence and disclose missing spans or unsettled totals." ], "saved_evidence": { "scope": "Selected existing eligible records only; this guide and its newer catalogue records remain free and cannot be purchased as a saved bundle.", "offers": [ { "service_id": "single_request", "price_gbp_excluding_vat": 5, "deliverable": "One saved version-bound evidence result" }, { "service_id": "evidence_receipt", "price_gbp_excluding_vat": 19, "deliverable": "One unsigned evidence receipt" } ], "provides_executable_licence": false, "records": [ { "record_id": "VXI-EXT-PROCUREMENT-LANGSMITH-SERVERLESS-TRACE-FLUSH-COMPLETION-01-v1", "title": "LangSmith: Function completion can precede trace delivery", "route_id": "agentic_reviewed_langsmith_serverless_trace_flush_completion", "purchase_options_url": "/index-access?route=agentic_reviewed_langsmith_serverless_trace_flush_completion" }, { "record_id": "VXI-EXT-PROCUREMENT-OTEL-FORCEFLUSH-TIMEOUT-OUTCOME-BOUNDARY-01-v1", "title": "OpenTelemetry ForceFlush timeout and outcome", "route_id": "agentic_reviewed_otel_forceflush_timeout_outcome_boundary", "purchase_options_url": "/index-access?route=agentic_reviewed_otel_forceflush_timeout_outcome_boundary" } ] }, "page_url": "/index-packs#agent-run-cost-trace-evidence", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE08-LANGSMITH-COST-REQUIRED-USAGE-MODEL-PRICE-01-v1", "title": "Does a recorded LangSmith LLM trace necessarily have a calculable cost", "decision_use": "Require usage, model identity and a matched price definition before relying on computed cost.", "record_url": "/varexis-index/records/langsmith-cost-required-usage-model-price.json", "record_sha256": "2e2b9a08781eabe886c07392dcc5f1d913a152c64996f26d06e158bb5efe48bc", "route_id": "agentic_reviewed_langsmith_cost_required_usage_model_price", "provenance": { "source_type": "official_external_documentation", "source_title": "Cost tracking", "source_url": "https://docs.langchain.com/langsmith/cost-tracking.md", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGSMITH-COST-REQUIRED-USAGE-MODEL-PRICE-01-v1", "candidate_record_sha256": "8a811bd36dd0821600462a9c6497ec973198231a2b0b270971e0e075ef3d0dc1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGSMITH-COST-REQUIRED-USAGE-MODEL-PRICE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGSMITH-EVALUATOR-CAP-NOT-AGENT-STOP-01-v1", "title": "Does reaching a LangSmith evaluator budget stop the underlying agent", "decision_use": "Distinguish evaluator spend controls from limits on the evaluated application.", "record_url": "/varexis-index/records/langsmith-evaluator-cap-not-agent-stop.json", "record_sha256": "b7ef13143a90c534ff14e02abd1a911788db3fdb20a9d192345c28a88618aec1", "route_id": "agentic_reviewed_langsmith_evaluator_cap_not_agent_stop", "provenance": { "source_type": "official_external_documentation", "source_title": "Track and limit evaluator spend", "source_url": "https://docs.langchain.com/langsmith/evaluator-spend.md", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGSMITH-EVALUATOR-CAP-NOT-AGENT-STOP-01-v1", "candidate_record_sha256": "e8f7257dc398c3839b5e08749e38b548691dee372b0383d14acb840532c09c3e", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGSMITH-EVALUATOR-CAP-NOT-AGENT-STOP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGSMITH-THREAD-CHILD-METADATA-COST-OMISSION-01-v1", "title": "Does adding a thread identifier only to the parent preserve all child cost totals", "decision_use": "Check child-run grouping before accepting thread totals.", "record_url": "/varexis-index/records/langsmith-thread-child-metadata-cost-omission.json", "record_sha256": "9f66c7051fb7142cb26f146c4221d18e0b6588b2a3f559362e149a232bf0c1aa", "route_id": "agentic_reviewed_langsmith_thread_child_metadata_cost_omission", "provenance": { "source_type": "official_external_documentation", "source_title": "Configure threads", "source_url": "https://docs.langchain.com/langsmith/threads.md", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGSMITH-THREAD-CHILD-METADATA-COST-OMISSION-01-v1", "candidate_record_sha256": "24128f62956d8420f809f92acd546733e02899cd33eb729b7ba92ee7fbcd541a", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGSMITH-THREAD-CHILD-METADATA-COST-OMISSION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGFUSE-INGESTED-COST-PRECEDES-INFERENCE-01-v1", "title": "Does changing a Langfuse model price necessarily change an explicitly supplied cost", "decision_use": "Determine whether cost was supplied directly or inferred.", "record_url": "/varexis-index/records/langfuse-ingested-cost-precedes-inference.json", "record_sha256": "5ea52e67ac1735a6a9706578e13a2a6fbee2015daf3c4a35c4e332515f9c6f33", "route_id": "agentic_reviewed_langfuse_ingested_cost_precedes_inference", "provenance": { "source_type": "official_external_documentation", "source_title": "Token & Cost Tracking - Langfuse", "source_url": "https://langfuse.com/docs/observability/features/token-and-cost-tracking", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGFUSE-INGESTED-COST-PRECEDES-INFERENCE-01-v1", "candidate_record_sha256": "0bb32e24b4f5536611df3ae58de8b2713529d733e7c5cfb947e2833576b08dd6", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGFUSE-INGESTED-COST-PRECEDES-INFERENCE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGFUSE-USAGE-BUCKETS-OVERLAP-DOUBLE-COUNT-01-v1", "title": "Can cached input tokens be counted both within input and in a separate Langfuse usage bucket", "decision_use": "Check that supplied usage buckets do not overlap.", "record_url": "/varexis-index/records/langfuse-usage-buckets-overlap-double-count.json", "record_sha256": "645b494250ac036146dfe89ac54c66cc65dd194ad628f4f5c54fc5ca472f146e", "route_id": "agentic_reviewed_langfuse_usage_buckets_overlap_double_count", "provenance": { "source_type": "official_external_documentation", "source_title": "Token & Cost Tracking - Langfuse", "source_url": "https://langfuse.com/docs/observability/features/token-and-cost-tracking", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGFUSE-USAGE-BUCKETS-OVERLAP-DOUBLE-COUNT-01-v1", "candidate_record_sha256": "e882a04bde0f2c23038875a0dd62ee533c3646d44c85c92ade903190cf4fb03d", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGFUSE-USAGE-BUCKETS-OVERLAP-DOUBLE-COUNT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGFUSE-MASKING-FAILURE-EXPORT-LOSS-01-v1", "title": "Can a masking error cause Langfuse telemetry to disappear", "decision_use": "Account for export loss when a masking hook fails.", "record_url": "/varexis-index/records/langfuse-masking-failure-export-loss.json", "record_sha256": "21349de1e441eadc473597843d44cfca1fa735e46aa3094f014a5d239ac08d24", "route_id": "agentic_reviewed_langfuse_masking_failure_export_loss", "provenance": { "source_type": "official_external_documentation", "source_title": "Masking - Langfuse", "source_url": "https://langfuse.com/docs/observability/features/masking", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGFUSE-MASKING-FAILURE-EXPORT-LOSS-01-v1", "candidate_record_sha256": "b52365fac66af06c70c9918ab850adea7fefc259788ef25650afa2c7bbac5c66", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGFUSE-MASKING-FAILURE-EXPORT-LOSS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE08-LANGFUSE-SHARED-QUEUE-REQUEST-PROJECT-MISATTRIBUTION-01-v1", "title": "Can shared background work be attributed to the wrong Langfuse project", "decision_use": "Reconcile request-level project routing with shared export queues.", "record_url": "/varexis-index/records/langfuse-shared-queue-request-project-misattribution.json", "record_sha256": "55bf8978823da8209e961a77cc11b1e6003f9d2f1b0e609f3ec5795f88f004a5", "route_id": "agentic_reviewed_langfuse_shared_queue_request_project_misattribution", "provenance": { "source_type": "official_external_documentation", "source_title": "Advanced Features - Langfuse", "source_url": "https://langfuse.com/docs/observability/sdk/advanced-features", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE08-LANGFUSE-SHARED-QUEUE-REQUEST-PROJECT-MISATTRIBUTION-01-v1", "candidate_record_sha256": "c00e7fd01e3396628d8881ff86955b5661ab11cf18733e0482b6ecfe58032c6c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE08-LANGFUSE-SHARED-QUEUE-REQUEST-PROJECT-MISATTRIBUTION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-PROCUREMENT-LANGSMITH-SERVERLESS-TRACE-FLUSH-COMPLETION-01-v1", "title": "LangSmith: Function completion can precede trace delivery", "decision_use": "Use the existing serverless flush review to qualify export completion.", "record_url": "/varexis-index/records/langsmith-serverless-trace-flush-completion.json", "record_sha256": "63e30be64d4dfca30fd9bffba25ebdb3d6330e0dc5fedbf385f1efd9e8519ccd", "route_id": "agentic_reviewed_langsmith_serverless_trace_flush_completion", "provenance": { "source_type": "official_external_documentation", "source_title": "LangSmith tracing in serverless environments", "source_url": "https://docs.langchain.com/langsmith/serverless-environments", "checked_on": "2026-10-18", "candidate_record_id": "VXI-EXT-PROCUREMENT-LANGSMITH-SERVERLESS-TRACE-FLUSH-COMPLETION-01-v1", "candidate_record_sha256": "e63164bc6109ead7213ef0cf5a7b1d1f933390f4919ce662a14a65833c87ad1d", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_langsmith_serverless_trace_flush_completion" }, "population": "original_frozen_population" } }, { "record_id": "VXI-EXT-PROCUREMENT-OTEL-FORCEFLUSH-TIMEOUT-OUTCOME-BOUNDARY-01-v1", "title": "OpenTelemetry ForceFlush timeout and outcome", "decision_use": "Use the existing timeout review to distinguish a flush request from acknowledged completion.", "record_url": "/varexis-index/records/otel-forceflush-timeout-outcome-boundary.json", "record_sha256": "746e905c3da2b6b43dfffffdf36c8fbdcbafac093a59ca25c283d4eb702c5c8d", "route_id": "agentic_reviewed_otel_forceflush_timeout_outcome_boundary", "provenance": { "source_type": "official_external_documentation", "source_title": "Tracing SDK | OpenTelemetry", "source_url": "https://opentelemetry.io/docs/specs/otel/trace/sdk/", "checked_on": "2026-10-24", "candidate_record_id": "VXI-EXT-PROCUREMENT-OTEL-FORCEFLUSH-TIMEOUT-OUTCOME-BOUNDARY-01-v1", "candidate_record_sha256": "b95cfbe3d3bd90b2fe845409f0f298e5545ebb0803faaea3dc5e0d649e7fe5ac", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp", "tool": "preview_evidence_answer", "arguments": { "route_id": "agentic_reviewed_otel_forceflush_timeout_outcome_boundary" }, "population": "original_frozen_population" } } ], "checkers": [ { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "delegated-agent-identity-continuity", "title": "Delegated Agent Identity Continuity", "problem": "A child agent is approved, but its credential owner, inherited consent or effective access can differ from the identity and permissions recorded at installation.", "decision": "Determine which identity, consent and lifecycle facts must be reconciled before relying on a delegated agent authority declaration.", "required_inputs": "Tenant and provider; agent and parent identities; credential custody; current consent and resource grants; inheritance settings; lifecycle changes; applicable SDK and authorization profile. Use redacted references, never credentials or live tokens.", "establishes": "The reviewed provider and protocol documentation separates parent credentials, child grants, later inheritance and provider-specific identity translation. It identifies evidence needed to distinguish installation approval from a current declared authority chain.", "unsupported": "Source documentation does not inspect a tenant, verify a token, prove revocation propagation or test effective access. A sponsor, agent identifier or successful sign-in is not a universal authority grant. Optional profiles and rolling SDK behaviour require version checks.", "selection": "Tool Admission can check supported supplied tool and authority declarations locally. It does not ingest Entra, AgentCore or Google identity exports, validate OAuth tokens, query provider permissions or enforce revocation. Prepare its existing input format separately.", "value": "Use the free guide to identify missing identity relationships and changed grants before an authority review. The separately licensed checker adds repeatable local checks of supported declarations; no new provider integration or licence right is included. These new records are outside the existing paid saved-evidence and receipt offers.", "decision_sequence": [ "Bind the agent, parent and tenant to the documented credential and resource-grant relationship.", "Reconcile later consent, inheritance and lifecycle changes against the current declaration.", "Check the applicable provider or optional protocol version; leave unobserved effective access unresolved." ], "page_url": "/index-packs#delegated-agent-identity-continuity", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-BLUEPRINT-CREDENTIAL-CUSTODY-01-v1", "title": "Where must an Entra agent identity obtain its authentication credentials", "decision_use": "Identify the parent credential path rather than treating the child identifier as a credential.", "record_url": "/varexis-index/records/entra-agent-blueprint-credential-custody.json", "record_sha256": "2316c7b9d1f05df28e7c698bf3cee88d329b090c52ad046eca08dbb606480e05", "route_id": "agentic_reviewed_entra_agent_blueprint_credential_custody", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft primary documentation: entra agent identities", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-identities?view=entra-agent-id", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ENTRA-AGENT-BLUEPRINT-CREDENTIAL-CUSTODY-01-v1", "candidate_record_sha256": "be1c51fa6e458c8a829261dca090594af25ed828b4b6cb918c8cacd2e344ef79", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-BLUEPRINT-CREDENTIAL-CUSTODY-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-INHERITANCE-CONSENT-TWO-CONDITIONS-01-v1", "title": "Does declaring an Entra resource inheritable grant its permissions to child agents", "decision_use": "Check both conditions for inherited authority.", "record_url": "/varexis-index/records/entra-agent-inheritance-consent-two-conditions.json", "record_sha256": "51cb38f097c5cdeeae76424df169b1bc21e52d76d91c4216b3ac7d9ada2b5395", "route_id": "agentic_reviewed_entra_agent_inheritance_consent_two_conditions", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft primary documentation: entra inheritance", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/concept-inheritable-permissions", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ENTRA-AGENT-INHERITANCE-CONSENT-TWO-CONDITIONS-01-v1", "candidate_record_sha256": "f8f477870c5aa0d3707918e34f0b6aba8997a1bf1ea73d11da415b066a20f935", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-INHERITANCE-CONSENT-TWO-CONDITIONS-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-CONSENT-STATIC-INVENTORY-GAP-01-v1", "title": "Can a blueprint's initial permission list describe all later inherited access", "decision_use": "Account for later consent and inheritance changes beyond installation declarations.", "record_url": "/varexis-index/records/entra-agent-dynamic-consent-static-inventory-gap.json", "record_sha256": "c23dcf93ede285c72aa825c1bfcb61fb26d356918a2f0fb8c5c19c8d1b5b4dc5", "route_id": "agentic_reviewed_entra_agent_dynamic_consent_static_inventory_gap", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft primary documentation: entra inheritance", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/concept-inheritable-permissions", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-CONSENT-STATIC-INVENTORY-GAP-01-v1", "candidate_record_sha256": "31378bf93cca80ab7e65b2bf1fd6d3de596b7625b63a74c38227e6106ec41d04", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-CONSENT-STATIC-INVENTORY-GAP-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-APP-ROLE-PRINCIPAL-OBJECT-ID-01-v1", "title": "Which identifier receives an autonomous Entra agent app-role assignment", "decision_use": "Distinguish the child resource principal from the blueprint client.", "record_url": "/varexis-index/records/entra-agent-app-role-principal-object-id.json", "record_sha256": "fb1f9ab772c9d0ea4b41a176c992025a067b7df27af477013909e9a653ea1652", "route_id": "agentic_reviewed_entra_agent_app_role_principal_object_id", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft primary documentation: entra autonomous agent authentication authorization flow", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/autonomous-agent-authentication-authorization-flow?view=entra-agent-id", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ENTRA-AGENT-APP-ROLE-PRINCIPAL-OBJECT-ID-01-v1", "candidate_record_sha256": "313c2881ed7f23e3b2c725663025744ec52c48fb49d4ced82062448fd765b052", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-APP-ROLE-PRINCIPAL-OBJECT-ID-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-CREATION-SEPARATE-RESOURCE-CONSENT-01-v1", "title": "Entra agent user creation and separate resource consent", "decision_use": "Separate account creation from consent to use the paired agent-user account.", "record_url": "/varexis-index/records/entra-agent-user-creation-separate-resource-consent.json", "record_sha256": "4db99ca7019c2d55e607bb7990971bc552117863886a09b01b220994d761a65a", "route_id": "agentic_reviewed_entra_agent_user_creation_separate_resource_consent", "provenance": { "source_type": "official_external_documentation", "source_title": "Microsoft primary documentation: entra autonomous agent authentication authorization flow", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/autonomous-agent-authentication-authorization-flow?view=entra-agent-id", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-CREATION-SEPARATE-RESOURCE-CONSENT-01-v1", "candidate_record_sha256": "6989d5cdf13d64e5fd51c680d5c7b6b3c762aa92025e01d75a2a4f51c4e577cd", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-CREATION-SEPARATE-RESOURCE-CONSENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-CONSENT-CALLBACK-ACTIVE-USER-BINDING-01-v1", "title": "Can an AgentCore callback accept consent from anyone opening its URL", "decision_use": "Bind the authorization callback to the active user before accepting provider consent.", "record_url": "/varexis-index/records/agentcore-consent-callback-active-user-binding.json", "record_sha256": "2613a3933f3c651339c79d1c8deb5d1ba44675cdc90cf0b435a427d94e435219", "route_id": "agentic_reviewed_agentcore_consent_callback_active_user_binding", "provenance": { "source_type": "official_external_documentation", "source_title": "Amazon Web Services primary documentation: aws oauth2 authorization url session binding", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/oauth2-authorization-url-session-binding.html", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-AGENTCORE-CONSENT-CALLBACK-ACTIVE-USER-BINDING-01-v1", "candidate_record_sha256": "362882fa3956dafc3f236f6699a10e00718aa6af00c5de146dc44e107b3f7bb6", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-AGENTCORE-CONSENT-CALLBACK-ACTIVE-USER-BINDING-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-MCP-ID-JAG-NOT-RESOURCE-ACCESS-TOKEN-01-v1", "title": "Can an enterprise ID-JAG directly serve as an MCP bearer access token", "decision_use": "Distinguish the enterprise intermediate grant from the final resource token.", "record_url": "/varexis-index/records/mcp-id-jag-not-resource-access-token.json", "record_sha256": "4b43c706d952462ef74ea7823d2fe5c4722022180a07f1901c638324bba27987", "route_id": "agentic_reviewed_mcp_id_jag_not_resource_access_token", "provenance": { "source_type": "official_external_documentation", "source_title": "Model Context Protocol primary documentation: ext enterprise managed authorization", "source_url": "https://raw.githubusercontent.com/modelcontextprotocol/ext-auth/15ca394e00a66434520b9ade26294999295a43ae/specification/stable/enterprise-managed-authorization/2026-07-28/enterprise-managed-authorization.mdx", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-MCP-ID-JAG-NOT-RESOURCE-ACCESS-TOKEN-01-v1", "candidate_record_sha256": "b2c90f929818c31192c0ea0def21dffc8849f2d3228513b7f9b30be6afc43e2c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-MCP-ID-JAG-NOT-RESOURCE-ACCESS-TOKEN-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-MAPPING-CHANGE-EFFECTIVE-PRINCIPAL-01-v1", "title": "Can changing federation mappings alter access without editing IAM bindings", "decision_use": "Review mapping changes that can change effective principals without a grant edit.", "record_url": "/varexis-index/records/gcp-federation-mapping-change-effective-principal.json", "record_sha256": "a6ceeb000990e9581e41391aa45d3ce7eba9bd8fdd5c715d9a46b3ec41c1561a", "route_id": "agentic_reviewed_gcp_federation_mapping_change_effective_principal", "provenance": { "source_type": "official_external_documentation", "source_title": "Google primary documentation: gcp federation practices", "source_url": "https://docs.cloud.google.com/iam/docs/best-practices-for-using-workload-identity-federation", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-GCP-FEDERATION-MAPPING-CHANGE-EFFECTIVE-PRINCIPAL-01-v1", "candidate_record_sha256": "dad69361466482fbdcb518f9cf650a7c65fad8974aced6f1cb896f01a3bddc7c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-MAPPING-CHANGE-EFFECTIVE-PRINCIPAL-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-CLAUDE-SDK-SUBAGENT-PERMISSION-MODE-INHERITANCE-01-v1", "title": "Can a Claude SDK subagent independently weaken its parent permission mode", "decision_use": "Check the installed runtime and effective inherited mode before relying on a sub-agent configuration.", "record_url": "/varexis-index/records/claude-sdk-subagent-permission-mode-inheritance.json", "record_sha256": "a081a5ea69a83f3e1aa0fb64cece25c0fe61f6b8b68fb4b077b10ffa43ec2be4", "route_id": "agentic_reviewed_claude_sdk_subagent_permission_mode_inheritance", "provenance": { "source_type": "official_external_documentation", "source_title": "Anthropic primary documentation: claude permissions valid", "source_url": "https://code.claude.com/docs/en/agent-sdk/permissions.md", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-CLAUDE-SDK-SUBAGENT-PERMISSION-MODE-INHERITANCE-01-v1", "candidate_record_sha256": "5f4bc4521fa14f98fc5ccf5dc3cbb2658e7d5f93ef6bfe467551d00e463658de", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-CLAUDE-SDK-SUBAGENT-PERMISSION-MODE-INHERITANCE-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-tool-admission", "title": "Agent Tool Admission & Permission Control", "price_gbp_excluding_vat": 49, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "d9c1d4a63ed87644d0bc49ad8d7b37aa92a463a6cd6681a5225ca94f2b61bb6b", "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1", "product_page": "/index-packs#agent-tool-admission", "preview_url": "/varexis-index/product-previews/v2/agent-tool-admission.json", "preview_sha256": "3accb4cae50ebbe9096319451d9836decaabf53b146e0807d0e7ebd7816b2a3f", "inputs": "JSON declarations of GitHub, Playwright, Notion or Slack connector identity, requested and allowed actions, resources, recipients and authority; an earlier inventory supports comparison.", "outputs": "Structured findings about declared permission conflicts, inventory changes and missing verification, with source and content hashes.", "representative_finding": "A requested destination is outside the declared authority. Obtain authority evidence before relying on the plan.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] }, { "id": "cross-agent-handoff-acceptance", "title": "Cross-Agent Handoff Acceptance Evidence", "problem": "One agent reports a task, stream or artifact as complete, while the receiving application still lacks a correctly linked final result or exact delivered version.", "decision": "Determine whether the evidence handed between agents identifies the intended task and a usable final result, or which protocol and artifact checks remain unresolved.", "required_inputs": "Protocol or SDK version; task and context identifiers; request capabilities; response type and final tool result; stream completion; artifact namespace and version; retained event references. Use synthetic or redacted declarations.", "establishes": "A2A, MCP Tasks, ADK and OpenAI SDK documentation defines different handoff boundaries: a direct message may have no task, a completed task can carry a tool error, a stream can outlive its visible text, and an artifact event can reference a separately stored version.", "unsupported": "These sources do not certify artifact quality, prove fulfilment or settlement, inspect another agent, or guarantee delivery. The guide is a handoff-evidence review, not a provider-neutral task runner or a replacement for the existing workflow recovery guide.", "selection": "Audit Coverage checks supported supplied event-chain and completeness declarations locally. It does not import these frameworks automatically, run tasks, fetch artifacts or verify a live remote outcome. Prepare its existing input format separately.", "value": "The free guide helps a receiving team avoid accepting the wrong task, incomplete stream or unexamined artifact as a completed handoff. The existing licensed checker adds repeatable analysis of supported event declarations. These catalogue-only records are not delivered by the existing paid saved-evidence or receipt offers.", "decision_sequence": [ "Bind the requested task and context, and distinguish a direct response from a tracked task.", "Inspect the actual final result and wait for the documented stream completion point.", "Retrieve the exact scoped artifact version and reconcile the receiving application evidence before acceptance." ], "page_url": "/index-packs#cross-agent-handoff-acceptance", "kind": "free_curated_evidence_guide", "purchasable": false, "provides_entitlement": false, "records": [ { "record_id": "VXI-EXT-ICE09-A2A-TASK-CONTEXT-MISMATCH-REJECTION-01-v1", "title": "May an A2A follow-up attach an existing task to a different conversation context", "decision_use": "Match the task to its recorded conversation context.", "record_url": "/varexis-index/records/a2a-task-context-mismatch-rejection.json", "record_sha256": "09fe6b5fce307f4e798fb1e442bdb36060100123222f3c7fd1b9329fecb3c918", "route_id": "agentic_reviewed_a2a_task_context_mismatch_rejection", "provenance": { "source_type": "official_external_documentation", "source_title": "A2A Project primary documentation: a2a spec", "source_url": "https://a2a-protocol.org/latest/specification/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-A2A-TASK-CONTEXT-MISMATCH-REJECTION-01-v1", "candidate_record_sha256": "cbd174bbb24500638871b9c9161fa63c2f5703ede79170face8d9b83f449c131", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-A2A-TASK-CONTEXT-MISMATCH-REJECTION-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-A2A-MESSAGE-ONLY-STREAM-NO-TASK-TRACKING-01-v1", "title": "Does every A2A streaming reply create a task that can later be polled", "decision_use": "Establish whether a pollable task exists at all.", "record_url": "/varexis-index/records/a2a-message-only-stream-no-task-tracking.json", "record_sha256": "55549cb29cd42d6955df7e60270ef9527eeb3e917d85f1a6c9368484c42655f7", "route_id": "agentic_reviewed_a2a_message_only_stream_no_task_tracking", "provenance": { "source_type": "official_external_documentation", "source_title": "A2A Project primary documentation: a2a spec", "source_url": "https://a2a-protocol.org/latest/specification/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-A2A-MESSAGE-ONLY-STREAM-NO-TASK-TRACKING-01-v1", "candidate_record_sha256": "c379d3da410a5237b7f2cde010f39ab16599f44a19f9a3039b87fae6a8866327", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-A2A-MESSAGE-ONLY-STREAM-NO-TASK-TRACKING-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-A2A-TERMINAL-TASK-NEW-MESSAGE-REFUSAL-01-v1", "title": "Can an A2A client resume a completed task by sending it another message", "decision_use": "Do not reuse a terminal task as a new work channel.", "record_url": "/varexis-index/records/a2a-terminal-task-new-message-refusal.json", "record_sha256": "4810d39514d23b300aa9446b58fb0b57a04b67d0180c15f5ccb351dd69c8841e", "route_id": "agentic_reviewed_a2a_terminal_task_new_message_refusal", "provenance": { "source_type": "official_external_documentation", "source_title": "A2A Project primary documentation: a2a spec", "source_url": "https://a2a-protocol.org/latest/specification/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-A2A-TERMINAL-TASK-NEW-MESSAGE-REFUSAL-01-v1", "candidate_record_sha256": "35fded639b86cf614b190483bce73430acd5c304bc8a28ae8c9a98658711a6bc", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-A2A-TERMINAL-TASK-NEW-MESSAGE-REFUSAL-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-MCP-TASK-PER-REQUEST-CAPABILITY-RESULT-CHOICE-01-v1", "title": "Does advertising MCP Tasks once force all later tool calls to return task handles", "decision_use": "Handle the actual response shape under the declared per-request capability.", "record_url": "/varexis-index/records/mcp-task-per-request-capability-result-choice.json", "record_sha256": "b22c20d4dc3ddc792c26d4ef3bd060b5bac2e4b62b15614ea47d4f162ed5797c", "route_id": "agentic_reviewed_mcp_task_per_request_capability_result_choice", "provenance": { "source_type": "official_external_documentation", "source_title": "Model Context Protocol primary documentation: mcp tasks current", "source_url": "https://tasks.extensions.modelcontextprotocol.io/specification/2026-07-28/tasks", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-MCP-TASK-PER-REQUEST-CAPABILITY-RESULT-CHOICE-01-v1", "candidate_record_sha256": "541bd9d6069c6799a98d645a1b05e1796ce30b26121e0316ca844164e4db567e", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-MCP-TASK-PER-REQUEST-CAPABILITY-RESULT-CHOICE-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-MCP-COMPLETED-TASK-TOOL-ERROR-RESULT-01-v1", "title": "Can an MCP task marked completed still contain an unsuccessful tool result", "decision_use": "Inspect the embedded tool result instead of accepting task status alone.", "record_url": "/varexis-index/records/mcp-completed-task-tool-error-result.json", "record_sha256": "ad71692b43b4ed5cb911c219c5606348d561c41cbe5fe6748863adf2d091dc28", "route_id": "agentic_reviewed_mcp_completed_task_tool_error_result", "provenance": { "source_type": "official_external_documentation", "source_title": "Model Context Protocol primary documentation: mcp tasks current", "source_url": "https://tasks.extensions.modelcontextprotocol.io/specification/2026-07-28/tasks", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-MCP-COMPLETED-TASK-TOOL-ERROR-RESULT-01-v1", "candidate_record_sha256": "a3400bd04594fa4daf79e142cc0a6ced693cfdf54957ff6a7cfefd93424bc4a2", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-MCP-COMPLETED-TASK-TOOL-ERROR-RESULT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-MCP-TASK-INPUT-KEY-LIFETIME-BINDING-01-v1", "title": "May an MCP server reuse an inputRequests key for a different question later in a task", "decision_use": "Bind delayed responses to the original unique input request.", "record_url": "/varexis-index/records/mcp-task-input-key-lifetime-binding.json", "record_sha256": "12b182f2a31f06de2b9b70d5e8b75ee775c757be6e47d656a6cc8956a8964195", "route_id": "agentic_reviewed_mcp_task_input_key_lifetime_binding", "provenance": { "source_type": "official_external_documentation", "source_title": "Model Context Protocol primary documentation: mcp tasks current", "source_url": "https://tasks.extensions.modelcontextprotocol.io/specification/2026-07-28/tasks", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-MCP-TASK-INPUT-KEY-LIFETIME-BINDING-01-v1", "candidate_record_sha256": "542b61a7a4de547f7743dde54894edaaec99736f18f8f7a795bbd761db9a8162", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-MCP-TASK-INPUT-KEY-LIFETIME-BINDING-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-VERSION-PINNED-RETRIEVAL-01-v1", "title": "Does loading an ADK artifact by filename recover the exact version previously reviewed", "decision_use": "Retrieve the scoped version used in the handoff, with suitable storage evidence.", "record_url": "/varexis-index/records/adk-artifact-version-pinned-retrieval.json", "record_sha256": "a143fcdf04229631a2cf8bf392afa6c36083f1cc4d5a7ba7447d3752c42b668e", "route_id": "agentic_reviewed_adk_artifact_version_pinned_retrieval", "provenance": { "source_type": "official_external_documentation", "source_title": "Google primary documentation: adk artifacts", "source_url": "https://adk.dev/artifacts/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-VERSION-PINNED-RETRIEVAL-01-v1", "candidate_record_sha256": "654f1fced3468764b87d54f33d4d5ae9022d5fb4a325381ab44a615a5549a9dd", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-VERSION-PINNED-RETRIEVAL-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-DELTA-NOT-DELIVERED-CONTENT-01-v1", "title": "Does an ADK artifact_delta event contain the generated file needed for an acceptance review", "decision_use": "Distinguish an artifact reference from retrieved file content.", "record_url": "/varexis-index/records/adk-artifact-delta-not-delivered-content.json", "record_sha256": "e0cb90d08c19bce514c2ea2f27b948cb5150db4a07bd8bbf3e10ea264a4370a5", "route_id": "agentic_reviewed_adk_artifact_delta_not_delivered_content", "provenance": { "source_type": "official_external_documentation", "source_title": "Google primary documentation: adk artifacts", "source_url": "https://adk.dev/artifacts/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-DELTA-NOT-DELIVERED-CONTENT-01-v1", "candidate_record_sha256": "d8a1ef40bceb5283bbba5ce6a77c9b0543233f0ea60f0e21b8297f11145775ab", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-ADK-ARTIFACT-DELTA-NOT-DELIVERED-CONTENT-01-v1" }, "population": "static_publication_addition" } }, { "record_id": "VXI-EXT-ICE09-OPENAI-STREAM-LAST-TOKEN-BEFORE-PERSISTENCE-01-v1", "title": "Does the last visible token mean an OpenAI Agents SDK streamed run is fully complete", "decision_use": "Wait for the completed iterator and remaining persistence work.", "record_url": "/varexis-index/records/openai-stream-last-token-before-persistence.json", "record_sha256": "e1d072013f2b5749fea7995e99643f4638e8e969de435754aa855e753bd72d78", "route_id": "agentic_reviewed_openai_stream_last_token_before_persistence", "provenance": { "source_type": "official_external_documentation", "source_title": "OpenAI primary documentation: openai streaming", "source_url": "https://openai.github.io/openai-agents-python/streaming/", "checked_on": "2026-10-30", "candidate_record_id": "VXI-EXT-ICE09-OPENAI-STREAM-LAST-TOKEN-BEFORE-PERSISTENCE-01-v1", "candidate_record_sha256": "12a45f534fdcf3d9d532316a90e5b0d309695ff35979ad557ee4f079a6757e01", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "access": { "endpoint": "/mcp/catalogue", "tool": "get_publication_record", "arguments": { "record_id": "VXI-EXT-ICE09-OPENAI-STREAM-LAST-TOKEN-BEFORE-PERSISTENCE-01-v1" }, "population": "static_publication_addition" } } ], "checkers": [ { "product_id": "agent-audit-coverage", "title": "Agent Audit & Evidence Coverage", "price_gbp_excluding_vat": 79, "billing": "one_time", "licence_scope": "Separate internal-use licence; excluded from subscriptions.", "licence_sha256": "a9dbe3fee5b4786aa77815242ebc62c0175b95a5e434dc8631a1ad102fa34594", "purchase_url": "/index-access?route=agentic_pack_audit_coverage_v1", "product_page": "/index-packs#agent-audit-coverage", "preview_url": "/varexis-index/product-previews/v2/agent-audit-coverage.json", "preview_sha256": "257575bbc11f7897d7c808b8bc2817aa3742921149300a9b65d650375e72488f", "inputs": "JSON declarations of identity, authorisation, action and outcome events, invocation references, and capture, retention, export and recovery coverage for supported source profiles.", "outputs": "Structured event-chain gaps, conflicting references and review requirements, with source and content hashes.", "representative_finding": "An outcome cannot be connected to its declared parent event. Resolve the missing reference before relying on the chain.", "synthetic": true, "complete_operational_input": false, "complete_analysis": false, "boundary": "Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement." } ] } ], "content_sha256": "fb03b084069e04ca5b49cc90a4e38db1bd830ead1f73a986062d1f2274c62756" }