{
  "schema": "varexis-index-paid-scopes/0.1",
  "generated_at_utc": "2026-10-06T23:36:13Z",
  "status": "PREPARED_FOR_ASYNC_OPERATOR_HANDLING",
  "scope_count": 26,
  "note": "Public record IDs remain the evidence anchors for paid requests. One paid review may combine several records; packs are fulfilment templates, not additional findings.",
  "request_guide": "/varexis-index/request.html",
  "scopes": [
    {
      "scope_id": "pump-evidence-scope",
      "title": "Pump evidence scope",
      "purpose": "Compare consumed positive, challenged, locked outer and safe non-selective pump evidence.",
      "source_record_ids": [
        "VXI-BDAS-20261002-PUMP-E2C-7022048-CONSUMED-ENGINEERING-SELECTIVE-v1",
        "VXI-BDAS-20261001-PUMP-E1-CHALLENGED-NEGATIVE-v1",
        "VXI-BDAS-20260915-C1-PUMP-LOCKED-OUTER-v1",
        "VXI-BDAS-202604-H2-1-HYDRAULIC-PUMP-SAFE-NOT-SELECTIVE-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "correctness-and-economics",
      "title": "Correctness and economics",
      "purpose": "Review a cost or acceleration claim without converting correctness into economics.",
      "source_record_ids": [
        "VXI-BDAS-20261002-7026446-CORRECTNESS-NOT-ECONOMICS-v1",
        "VXI-BDAS-20260915-QV1-PCB1-VISION-CORRECTNESS-NOT-ECONOMICS-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "synthetic-to-customer",
      "title": "Synthetic and customer evidence",
      "purpose": "Separate controlled synthetic evidence from real customer validation.",
      "source_record_ids": [
        "VXI-BDAS-20260913-G5-2-LOCKED-SYNTHETIC-CONFIRMATION-v1",
        "VXI-BDAS-202606-IIOT-SYNTHETIC-60M-LOGS-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "development-maturity",
      "title": "Development maturity",
      "purpose": "Preserve the distinction between development progress, non-promotion and deployed capability.",
      "source_record_ids": [
        "VXI-BDAS-202604-I1-DEVELOPMENT-PASS-v1",
        "VXI-BDAS-20260915-C3-INFO-GEOMETRY-DEV-v1",
        "VXI-BDAS-20260915-C4-MACHINE-LOCAL-CALIBRATION-v1",
        "VXI-BDAS-20260915-OT3-FREQUENCY-LOCALIZED-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "holdout-and-protocol",
      "title": "Holdout and protocol discipline",
      "purpose": "Review reservation, protocol and capture claims separately from scored outcomes.",
      "source_record_ids": [
        "VXI-BDAS-202604-I2-HOLDOUT-RESERVED-HASHED-v1",
        "VXI-BDAS-202608-M4-MANUFACTURING-EXTERNAL-PROTOCOL-v1",
        "VXI-BDAS-20260919-CK4A-CAPTURE-NO-PROMOTION-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "pipeline-and-runtime",
      "title": "Pipeline checks and runtime availability",
      "purpose": "Prepare integration scope while preserving the contract-only runtime boundary.",
      "source_record_ids": [
        "VXI-BDAS-20260912-CENTERED-LIVE-PROBE-V1-v1",
        "VXI-BDAS-20260912-DECODER-V4-v1",
        "VXI-BDAS-20260912-CONSUMER-BINDING-V1-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "traceability-and-truth",
      "title": "Traceability and truth",
      "purpose": "Separate binding, preservation and grouping from claim truth or deployment.",
      "source_record_ids": [
        "VXI-BDAS-20260912-FUSED-ATTRIBUTION-V2-v1",
        "VXI-BDAS-20260912-PERSISTENT-OUTPUT-V3-v1",
        "VXI-BDAS-20261004-LEDGER-0042-CANONICAL-FREEZE-BUNDLE-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "negative-and-refusal",
      "title": "Negative evidence and refusal",
      "purpose": "Preserve refusal and non-qualified states in downstream answer wording.",
      "source_record_ids": [
        "VXI-BDAS-20260504-M3-EXTERNAL-LOCKED-SAFE-REFUSAL-v1",
        "VXI-BDAS-202604-STAGE-FG-SAFE-NOT-SELECTIVE-v1",
        "VXI-BDAS-20260913-NASA-IMS-E4-1-SAFE-NOT-PERFORMANCE-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "corpus-and-candidates",
      "title": "Corpus and candidate status",
      "purpose": "Distinguish recovered or staged material from new results and publication permission.",
      "source_record_ids": [
        "VXI-BDAS-20261004-7001071-INDEX-CORPUS-TRANCHE-v1",
        "VXI-BDAS-20261002-7026447-CANDIDATE-BATCH-SUMMARY-v1",
        "VXI-BDAS-20261004-LEDGER-0042-CANONICAL-FREEZE-BUNDLE-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "spectral-reliance",
      "title": "Spectral evidence reliance",
      "purpose": "Separate exact replay and reference compatibility from production alarms and certification.",
      "source_record_ids": [
        "VXI-BDAS-20260912-S1-SPECTRAL-CPU-REPLAY-v1",
        "VXI-BDAS-20260912-S1-SPECTRAL-ALARM-REFERENCE-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "ip-and-consumer-scope",
      "title": "IP and consumer scope",
      "purpose": "Keep hardware matching and source disclosure limits explicit in integration and export requests.",
      "source_record_ids": [
        "VXI-BDAS-20261002-PUMP-E2C-7022048-CONSUMED-ENGINEERING-SELECTIVE-v1",
        "VXI-BDAS-202604-H1-3-LOCKED-SEED-VALIDATION-v1",
        "VXI-BDAS-20260912-FUSED-ATTRIBUTION-V2-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "scale-and-applicability",
      "title": "Scale and applicability",
      "purpose": "Review scale and qualification claims without claiming universal applicability.",
      "source_record_ids": [
        "VXI-BDAS-202604-STAGE-B-CONTROLLED-REDUCTION-v1",
        "VXI-BDAS-202606-163M-ROW-PUBLIC-REDUCTION-v1",
        "VXI-BDAS-202608-M1-QUALIFICATION-AURIC-MONITOR-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "agent-protocol-scope",
      "title": "Agent protocol scope",
      "purpose": "Review interoperability, advertised capability and task-exchange claims against the documented protocol.",
      "source_record_ids": [
        "VXI-EXT-A2A-100-02-v1",
        "VXI-EXT-A2A-100-03-v1",
        "VXI-EXT-A2A-100-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "workload-identity-scope",
      "title": "Workload identity scope",
      "purpose": "Separate identity, trust domains, retrieval and caller checks from permission to act.",
      "source_record_ids": [
        "VXI-EXT-SPIFFE-01-v1",
        "VXI-EXT-SPIFFE-02-v1",
        "VXI-EXT-SPIFFE-03-v1",
        "VXI-EXT-SPIFFE-04-v1",
        "VXI-EXT-SPIFFE-05-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "policy-and-enforcement",
      "title": "Policy and enforcement",
      "purpose": "Review policy inputs, enforcement boundaries and management evidence.",
      "source_record_ids": [
        "VXI-EXT-OPA-01-v1",
        "VXI-EXT-OPA-02-v1",
        "VXI-EXT-OPA-03-v1",
        "VXI-EXT-OPA-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "sandbox-reliance",
      "title": "Sandbox reliance",
      "purpose": "Assess the scope of documented isolation, compatibility and host-protection claims.",
      "source_record_ids": [
        "VXI-EXT-GVISOR-01-v1",
        "VXI-EXT-GVISOR-02-v1",
        "VXI-EXT-GVISOR-03-v1",
        "VXI-EXT-GVISOR-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "artifact-provenance-review",
      "title": "Artifact provenance review",
      "purpose": "Link origin, signing and verification evidence while preserving the distinction from artifact safety.",
      "source_record_ids": [
        "VXI-EXT-SLSA-12-PROV-01-v1",
        "VXI-EXT-SLSA-12-TRACK-01-v1",
        "VXI-EXT-SLSA-12-03-v1",
        "VXI-EXT-SIGSTORE-01-v1",
        "VXI-EXT-SIGSTORE-02-v1",
        "VXI-EXT-SIGSTORE-03-v1",
        "VXI-EXT-SIGSTORE-BUNDLE-01-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "observability-scope",
      "title": "Observability scope",
      "purpose": "Review whether a telemetry claim concerns naming conventions, captured evidence or deployment coverage.",
      "source_record_ids": [
        "VXI-EXT-OTEL-SEMCONV-01-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "external-refusal-outcomes",
      "title": "External refusal outcomes",
      "purpose": "Compare external refusal outcomes and prospective observation without promoting performance or authority.",
      "source_record_ids": [
        "VXI-BDAS-20260902-N1-6256446-WIND-SCADA-PORTFOLIO-SAFE-REFUSAL-v1",
        "VXI-BDAS-20260824-M4B-6111326-CENTRIFUGE-EXTERNAL-SAFE-REFUSAL-v1",
        "VXI-BDAS-20260824-OBS-M4B-001-PROSPECTIVE-QUALIFICATION-SCORE-v1",
        "VXI-BDAS-20260821-M4-6080185-MANUFACTURING-EXTERNAL-SAFE-REFUSAL-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "backblaze-stage-review",
      "title": "Backblaze stage review",
      "purpose": "Separate completed development preparation from a failed worker campaign and missing qualification.",
      "source_record_ids": [
        "VXI-BDAS-BACKBLAZE-D0-7135082-DEVELOPMENT-v1",
        "VXI-BDAS-BACKBLAZE-D1-7135360-WORKER-FAILED-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "cedar-policy-review",
      "title": "Cedar policy review",
      "purpose": "Review policy intent, request context, schema checks and error handling without inferring deployment enforcement.",
      "source_record_ids": [
        "VXI-EXT-CEDAR-01-v1",
        "VXI-EXT-CEDAR-02-v1",
        "VXI-EXT-CEDAR-03-v1",
        "VXI-EXT-CEDAR-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "vulnerability-severity-review",
      "title": "Vulnerability severity review",
      "purpose": "Preserve severity inputs, environmental uncertainty and unassessed safety context.",
      "source_record_ids": [
        "VXI-EXT-CVSS-40-01-v1",
        "VXI-EXT-CVSS-40-02-v1",
        "VXI-EXT-CVSS-40-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "vulnerability-lookup-review",
      "title": "Vulnerability lookup review",
      "purpose": "Review advisory provenance and scan coverage without treating missing matches as proof of safety.",
      "source_record_ids": [
        "VXI-EXT-OSV-API-01-v1",
        "VXI-EXT-OSV-API-03-v1",
        "VXI-EXT-OSV-API-04-v1",
        "VXI-EXT-OSV-06-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "oauth-deployment-claims",
      "title": "OAuth deployment claims",
      "purpose": "Separate documented OAuth requirements from evidence of a particular deployment's configuration and enforcement.",
      "source_record_ids": [
        "VXI-EXT-RFC9700-01-v1",
        "VXI-EXT-RFC9700-02-v1",
        "VXI-EXT-RFC9700-03-v1",
        "VXI-EXT-RFC9700-04-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "inventory-evidence-review",
      "title": "Inventory evidence review",
      "purpose": "Review inventory format, scope and revision traceability without claiming completeness or certification.",
      "source_record_ids": [
        "VXI-EXT-SPDX-30-02-v1",
        "VXI-EXT-CYCLONEDX-17-01-v1",
        "VXI-EXT-CYCLONEDX-17-02-v1",
        "VXI-EXT-CDX-17-05-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    },
    {
      "scope_id": "project-practice-review",
      "title": "Project practice review",
      "purpose": "Frame project-practice results against the exact checks, revision and intended dependency use.",
      "source_record_ids": [
        "VXI-EXT-OPENSSF-SCORECARD-01-v1"
      ],
      "service_ids": [
        "single_request",
        "evidence_receipt",
        "research_subscription",
        "developer_api"
      ],
      "request_guide": "/varexis-index/request.html"
    }
  ]
}
