{
  "schema": "varexis-index-evidence-pack-listing/1",
  "listing_url": "/index-packs",
  "pack_count": 8,
  "public_evidence_pack_count": 7,
  "executable_integration_kit_count": 1,
  "free_preview": "The seven complete published evidence packs remain free to read and save locally. The integration kit has free source evidence, schema and a worked demonstration; its executable is delivered to entitled buyers.",
  "paid_value": "Single Request supplies the selected version: a saved public pack or the reusable integration executable. Evidence Receipt adds an unsigned delivery receipt. Payment adds no evidence or independent assurance.",
  "prices_gbp_excluding_vat": {
    "single_request": 5,
    "evidence_receipt": 19,
    "research_monthly": 29,
    "developer_api_monthly": 149
  },
  "pricing_url": "/pricing#index",
  "subscription": "Eligible active subscribers retrieve a whole pack using one query without another checkout. Developer/API includes 100 new queries per paid monthly period; Research is subject to operational rate limits. Monthly plans renew until cancelled.",
  "retention": "Keep your private access key. Saved results are version-bound, not continually refreshed; no permanent-retention promise is made.",
  "limitations": "Documentation reviews or selected dated advisory source assertions, not independent tool tests, fresh investigation, current safety verdicts, certification or deployment approval.",
  "purchasing": {
    "hosted_checkout": "/index-access",
    "availability": "/api/index/capabilities",
    "contract": "/varexis-index/automatic-api.json",
    "compatible_agent_contract": "/varexis-index/agent-payments.json",
    "mcp": "Free, unauthenticated and read-only discovery/preview. Purchasing uses the separate authenticated REST paths.",
    "authority": "Compatible MPP/Stripe SPT agents require owner spending authority for the exact VAT-inclusive quote and any provider authentication. Not every agent or wallet is supported.",
    "recovery": "Use the original purchasing path and key; MPP retries retain the original credential. Never repurchase to recover uncertain payment. Existing subscribers and saved-result owners retrieve before buying again."
  },
  "packs": [
    {
      "pack_id": "repository-browser-trust",
      "title": "Repository and browser Tool-Trust Evidence Pack",
      "route_id": "agentic_pack_repository_browser_trust_v1",
      "url": "/varexis-index/packs/repository-browser-trust-v1.json",
      "content_sha256": "11f937d49e39f4871245e37caaf3c15626421426ab0980559cfd90cc80083f39",
      "snapshot_sha256": "efb07a282354db948fa9d9d3c36b24633824c2c821e748792793c14c4669e526",
      "version": "1.0.0",
      "member_count": 2,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Compare repository and browser permissions before connecting an agent to authenticated tools.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_github_mcp_repository_access_trust",
          "question": "How can an agent review repository access without enabling GitHub MCP writes?"
        },
        {
          "route_id": "agentic_reviewed_playwright_mcp_browser_session_trust",
          "question": "Does an isolated Playwright MCP browser session prevent privileged web actions or data disclosure?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-11"
      ],
      "source_capture_date": null,
      "source_date_boundary": "The records report when sources were checked. A separate source capture timestamp and an independently tested runtime version are not established.",
      "scope_and_limits": "GitHub MCP and Playwright MCP expose different authority boundaries. GitHub documents read-only mode separately from credential scope. Playwright session isolation does not make authenticated browser actions read-only. This pack compares the two published documentation reviews, including read/write capability, authentication, data movement, unknowns and refusal conditions. The reviews are dated 11 October 2026; neither your deployment nor current tool behaviour has been independently tested.",
      "listing_url": "/index-packs#repository-browser-trust",
      "preview_url": "/varexis-index/packs/repository-browser-trust-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_repository_browser_trust_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "agent-permissions-data",
      "title": "Agent Tool Permissions & Data Handling — Notion + Slack",
      "route_id": "agentic_pack_agent_permissions_data_v1",
      "url": "/varexis-index/packs/agent-permissions-data-v1.json",
      "content_sha256": "d1c6f319efc250d2239bf5ef30edcdded9c66c7ab4c346016b101060163c6002",
      "snapshot_sha256": "b76f7ccadbcd99a60ac2082809b8ef9aba487a5b41a1c4a4ac0a57c9fccc8a01",
      "version": "1.0.0",
      "member_count": 2,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Review workspace access and where content can go before connecting Notion or Slack.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_notion_mcp_content_sharing_trust",
          "question": "Can an agent assume Notion content stays inside Notion when using its MCP connector?"
        },
        {
          "route_id": "agentic_reviewed_slack_mcp_search_posting_trust",
          "question": "What should an agent check before searching private Slack content without posting messages?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-11"
      ],
      "source_capture_date": null,
      "source_date_boundary": "Existing dated review and upstream hash metadata are preserved. No new source bytes were acquired for this compilation; separate capture timestamps and independently tested runtime versions are not established.",
      "scope_and_limits": "Compare Notion and Slack connector access before retrieving workspace content. This pack keeps their documented authentication, read/write permissions and data-sharing boundaries together, with unresolved client and workspace questions. Notion content may leave Notion through the connected client; Slack search and posting permissions are distinct. These are the existing 11 October 2026 documentation reviews, not tests of your configuration or current tool behaviour.",
      "listing_url": "/index-packs#agent-permissions-data",
      "preview_url": "/varexis-index/packs/agent-permissions-data-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_agent_permissions_data_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "evidence-boundary-audit",
      "title": "Evidence Boundary Pack — Audit & Export Coverage",
      "route_id": "agentic_pack_evidence_boundary_audit_v1",
      "url": "/varexis-index/packs/evidence-boundary-audit-v1.json",
      "content_sha256": "21782b6a878ac62ca78485ad6714d78a51785179aa96c2375953d63e5a625943",
      "snapshot_sha256": "c7c7d6732af629186ed5444fa13515a480d7b0c472d6ef4474f24d814acc1949",
      "version": "1.0.0",
      "member_count": 3,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Check what a supplier's audit or export claim actually covers before using it in procurement.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_github_audit_export_evidence_check",
          "question": "Does a GitHub audit export establish a complete history of repository activity?"
        },
        {
          "route_id": "agentic_reviewed_slack_export_plan_coverage_check",
          "question": "Does a Slack workspace export contain private channels, direct messages and the files themselves?"
        },
        {
          "route_id": "agentic_reviewed_cloudflare_logpush_history_evidence_check",
          "question": "Does enabling Cloudflare Logpush provide a complete searchable archive of past activity?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-14"
      ],
      "source_capture_date": null,
      "source_date_boundary": "Existing dated review and upstream hash metadata are preserved. No new source bytes were acquired for this compilation; separate capture timestamps and independently tested runtime versions are not established.",
      "scope_and_limits": "Review what an activity-history claim can establish before using it in a technical review or procurement discussion. This pack compares the existing GitHub audit, Slack export and Cloudflare Logpush documentation reviews dated 14 October 2026. It preserves event and conversation scope, required buyer evidence, retention and delivery gaps, and conditions for withholding broader conclusions. Missing records do not establish that nothing happened; no buyer export or deployment has been inspected.",
      "listing_url": "/index-packs#evidence-boundary-audit",
      "preview_url": "/varexis-index/packs/evidence-boundary-audit-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_evidence_boundary_audit_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "nextjs-advisory-snapshot",
      "title": "Next.js: three dated advisory source assertions",
      "route_id": "agentic_pack_nextjs_advisory_snapshot_v1",
      "url": "/varexis-index/packs/nextjs-advisory-snapshot-v1.json",
      "content_sha256": "2df8f6db94491685cc58cac83ea9a99915b49563508c897ae7619caac48fb555",
      "snapshot_sha256": "762bf0c67fd4d8d52192ce617ba84e9225c4c596802924bfd71d2bf84c6b2e21",
      "version": "1.0.0",
      "member_count": 3,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Keep three selected Next.js affected/fixed source assertions and their separately dated enrichment together.",
      "included_questions": [
        {
          "route_id": "advisory:osv-canonical-20261013-v1:VXI-OSV-00dcfd09566248d312c068773642a33a5266ec38-7957083216b5",
          "question": "What does GHSA-g77x-44xx-532m record about npm/next in the 2026-10-08 snapshot?"
        },
        {
          "route_id": "advisory:osv-canonical-20261013-v1:VXI-OSV-0eb087e4456480db7b701d09df9c487ddc979573-609d01b74612",
          "question": "What does GHSA-c59h-r6p8-q9wc record about npm/next in the 2026-10-08 snapshot?"
        },
        {
          "route_id": "advisory:osv-canonical-20261013-v1:VXI-OSV-10e21bdfa027ab126a74204fe8a895cb6b736e79-04da9b7ccb75",
          "question": "What does GHSA-39w2-rjm5-chcv record about npm/next in the 2026-10-08 snapshot?"
        }
      ],
      "review_status": "FROZEN_EXTERNAL_SOURCE_PROJECTION_REVIEW",
      "source_checked_on": [
        "2026-10-13"
      ],
      "source_capture_date": "2026-10-08",
      "source_date_boundary": "Individual capture, publication, modification and enrichment dates are retained per member; these are not current deployment assessments.",
      "scope_and_limits": "These three dated Next.js advisory projections preserve the selected affected/fixed source assertions and their separately dated enrichment. This selection is not complete coverage or an assessment of an installed deployment.",
      "listing_url": "/index-packs#nextjs-advisory-snapshot",
      "preview_url": "/varexis-index/packs/nextjs-advisory-snapshot-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_nextjs_advisory_snapshot_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "code-scanner-trust",
      "title": "Code-Scanner Trust — SonarQube, Snyk & Semgrep",
      "route_id": "agentic_pack_code_scanner_trust_v1",
      "url": "/varexis-index/packs/code-scanner-trust-v1.json",
      "content_sha256": "43eaccabed104acb0479f54fce4950fe653822ce7915ed74ec997bbf20474775",
      "snapshot_sha256": "3141c4a658f62ceabd16bc84d6f3260fdedea5c31595dd8344e7835431614f49",
      "version": "1.0.0",
      "member_count": 6,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Check scanner permissions and the evidence needed before accepting a clean report or claimed fix.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_sonarqube_mcp_read_only_filter_and_variant",
          "question": "Does connecting SonarQube MCP automatically restrict an agent to reading findings?"
        },
        {
          "route_id": "agentic_reviewed_sonarqube_token_type_and_effective_user_rights",
          "question": "Does a SonarQube token used by a scanner have only analysis permissions?"
        },
        {
          "route_id": "agentic_reviewed_snyk_mcp_folder_scan_execution_trust",
          "question": "Can a Snyk dependency scan execute project tooling, even when the task is only a security review?"
        },
        {
          "route_id": "agentic_reviewed_snyk_ignore_scope_expiry_not_remediation",
          "question": "Does a Snyk ignore rule establish that a vulnerability was fixed?"
        },
        {
          "route_id": "agentic_reviewed_semgrep_guardian_mcp_enforcement_trust",
          "question": "Does installing Semgrep MCP prove every agent code change was scanned?"
        },
        {
          "route_id": "agentic_reviewed_semgrep_exclusions_versus_ignored_finding_coverage",
          "question": "Does an empty Semgrep findings list prove every relevant file was scanned?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-14",
        "2026-10-16"
      ],
      "source_capture_date": null,
      "source_date_boundary": "Existing dated review and upstream hash metadata are preserved. No new source bytes were acquired for this compilation; separate capture timestamps and independently tested runtime versions are not established.",
      "scope_and_limits": "Review access before connecting a scanner and interpret what its findings establish. Six dated documentation reviews compare SonarQube server filters and token scope, Snyk folder execution and ignore policies, and Semgrep invocation and scan exclusions. They preserve the evidence still needed before accepting a clean report or a claimed fix. They do not test your repository, credentials or deployment.",
      "listing_url": "/index-packs#code-scanner-trust",
      "preview_url": "/varexis-index/packs/code-scanner-trust-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_code_scanner_trust_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "telemetry-redaction",
      "title": "Telemetry Redaction — Coverage, Exceptions & Data Flow",
      "route_id": "agentic_pack_telemetry_redaction_v1",
      "url": "/varexis-index/packs/telemetry-redaction-v1.json",
      "content_sha256": "fb9a70e1911ad3c16545dec4eee3ea3d19c41299e979d73a8b767c52021651a5",
      "snapshot_sha256": "872e3a822b404e14fcc9cbc56e510a4edbaf8dcb0cbf9e3382c8a7f2908e8f4d",
      "version": "1.0.0",
      "member_count": 5,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Review where sensitive data can remain or leave a pipeline despite a redaction claim.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_otel_redaction_allowlists_and_exception_precedence",
          "question": "Does configuring the OpenTelemetry redaction processor prove every sensitive attribute is masked?"
        },
        {
          "route_id": "agentic_reviewed_vector_remap_error_path_original_event_disclosure",
          "question": "Can a Vector remap error send the original sensitive event downstream?"
        },
        {
          "route_id": "agentic_reviewed_elastic_redact_licence_skip_and_failure_policy",
          "question": "Does a successful ingest pipeline prove the redact processor changed the document?"
        },
        {
          "route_id": "agentic_reviewed_presidio_detection_coverage_not_complete_anonymization",
          "question": "Does a clean Presidio result prove a document contains no sensitive information?"
        },
        {
          "route_id": "agentic_reviewed_datadog_sensitive_scanner_redaction_location",
          "question": "Does Datadog sensitive-data scanning prove raw content never leaves our environment?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-16"
      ],
      "source_capture_date": null,
      "source_date_boundary": "Existing dated review and upstream hash metadata are preserved. No new source bytes were acquired for this compilation; separate capture timestamps and independently tested runtime versions are not established.",
      "scope_and_limits": "Review where sensitive data can remain or leave a pipeline despite a redaction claim. Five dated documentation reviews cover OpenTelemetry exceptions, Vector error paths, Elastic licence skips, Presidio detection limits and Datadog scanning location. They keep configuration evidence and unresolved coverage questions with the source versions. They do not establish complete removal, regulatory compliance or permission to disclose data.",
      "listing_url": "/index-packs#telemetry-redaction",
      "preview_url": "/varexis-index/packs/telemetry-redaction-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_telemetry_redaction_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "github-release-acceptance",
      "title": "GitHub Release Acceptance — Approval, Execution & Artifact Identity",
      "route_id": "agentic_pack_github_release_acceptance_v1",
      "url": "/varexis-index/packs/github-release-acceptance-v1.json",
      "content_sha256": "fd8840837e9d0da1978e5bae3e0d7f432f4dac079c8f3db25070419c4bfe3900",
      "snapshot_sha256": "8b86a5f6ae7575763b014b9c7d3e8543611dc8264de63e2a4e056e4131b89a0d",
      "version": "1.0.0",
      "member_count": 5,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Check whether approval and execution evidence is bound to the exact artifact being accepted.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_github_codeowners_matching_not_required_approval",
          "question": "Does a CODEOWNERS file prove the right owner must approve every change?"
        },
        {
          "route_id": "agentic_reviewed_github_required_check_skipped_versus_executed",
          "question": "Does a passing required GitHub check prove its test job actually ran?"
        },
        {
          "route_id": "agentic_reviewed_github_oidc_reusable_workflow_caller_and_callee_identity",
          "question": "Does a valid GitHub OIDC token prove an approved reusable deployment workflow ran?"
        },
        {
          "route_id": "agentic_reviewed_github_upload_artifact_overwrite_new_object_identity",
          "question": "Does reusing an artifact name mean a later download contains the same approved build?"
        },
        {
          "route_id": "agentic_reviewed_cosign_verification_expected_signer_digest",
          "question": "Does any valid Cosign signature establish the supplier artifact we intended to accept?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-16"
      ],
      "source_capture_date": null,
      "source_date_boundary": "Existing dated review and upstream hash metadata are preserved. No new source bytes were acquired for this compilation; separate capture timestamps and independently tested runtime versions are not established.",
      "scope_and_limits": "Review whether approval and execution evidence is bound to the artifact being accepted. Five dated documentation reviews connect GitHub code-owner enforcement, skipped checks, reusable-workflow OIDC identity and artifact replacement with Cosign signer and digest verification. They preserve the buyer evidence still required for the exact revision and artifact. They do not approve a release, verify your configuration or certify software safety.",
      "listing_url": "/index-packs#github-release-acceptance",
      "preview_url": "/varexis-index/packs/github-release-acceptance-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_github_release_acceptance_v1",
      "product_kind": "public_evidence_pack",
      "free_preview": "Complete published pack, including its sources, comparison and limitations.",
      "paid_value": "One saved version-bound result; Evidence Receipt also adds an unsigned delivery receipt. Existing eligible subscribers use one query."
    },
    {
      "pack_id": "agent-tool-integration",
      "title": "Agent Tool Evaluation & Integration - GitHub + Playwright",
      "route_id": "agentic_pack_agent_integration_v1",
      "url": "/varexis-index/packs/agent-integration-v1.json",
      "content_sha256": "e56c5d70d7051d06f81a4539f85140074f17a7135ecd370602ef5900f215d61b",
      "snapshot_sha256": "923fb93ff84bb0c9b909288008e9f69a94a7ad032d48e267f3ff5724033a1662",
      "version": "1.0.0",
      "member_count": 2,
      "counted_as_new_evidence_records": false,
      "subscription_query_units": 1,
      "benefit": "Run a local check of a declared GitHub and Playwright integration: find permission conflicts and turn missing evidence into a source-linked checklist.",
      "included_questions": [
        {
          "route_id": "agentic_reviewed_github_mcp_repository_access_trust",
          "question": "How can an agent review repository access without enabling GitHub MCP writes?"
        },
        {
          "route_id": "agentic_reviewed_playwright_mcp_browser_session_trust",
          "question": "Does an isolated Playwright MCP browser session prevent privileged web actions or data disclosure?"
        }
      ],
      "review_status": "documentation_review_only",
      "source_checked_on": [
        "2026-10-11"
      ],
      "source_capture_date": null,
      "source_date_boundary": "The records report when sources were checked. A separate source capture timestamp and an independently tested runtime version are not established.",
      "scope_and_limits": "Evaluate declared GitHub-hosted remote MCP and local Playwright tool inventories against a frozen review matrix. The reusable local checker flags scope and permission conflicts, unsupported operations and missing verification requirements, with source-bound JSON and CI exit codes. It does not connect to tools or verify their behaviour. Full source evidence, input schema and a worked example are free; the newly authored executable is supplied with the selected paid offer or eligible subscription.",
      "listing_url": "/index-packs#agent-tool-integration",
      "preview_url": "/varexis-index/packs/agent-integration-v1.json",
      "purchase_url": "/index-access?route=agentic_pack_agent_integration_v1",
      "product_kind": "executable_integration_kit",
      "free_preview": "Complete source evidence, input schema, scope and worked demonstration; executable supplied through paid/entitled delivery.",
      "workflow_questions": [
        "Which requested tools conflict with my read-only GitHub and browser task?",
        "What authentication or permission evidence is missing from my integration plan?",
        "Can an agent consume a source-bound integration checklist and CI status?"
      ],
      "demonstration_url": "/varexis-index/examples/agent-integration/review-plan.result.json",
      "input_schema_url": "/varexis-index/examples/agent-integration/input.schema.json",
      "paid_value": "Reusable internal-use executable kit plus bound source evidence. Existing GBP 5/19 offers and one eligible subscription query; no extra member purchases."
    }
  ]
}