{
  "schema": "varexis-index-publication-manifest/1",
  "version": "ice-05-tranche-61-v1",
  "baseline_commit": "5406a5cced32b6c06d3187e51f8f32a0d6e04086",
  "tranches": [
    "public-safe-tranche-61"
  ],
  "record_count": 35,
  "route_count": 35,
  "complete": true,
  "next_page": null,
  "lookup": "Enumerate this complete manifest; compare record_id or route_id for exact equality and fetch its listed HTTPS JSON URL. Never infer a URL or fall back to related evidence for an unknown ID.",
  "boundary": "Catalogue additions are available free through the exact HTTP JSON links below. Enhanced natural-language discovery is not yet qualified for these records. They are outside MCP search, MCP preview and paid saved retrieval. No search qualification, executable capability or entitlement is added.",
  "records": [
    {
      "record_id": "VXI-EXT-ICE05-COUPA-ORDER-TRANSMISSION-ACKNOWLEDGEMENT-01-v1",
      "route_id": "agentic_reviewed_coupa_order_transmission_acknowledgement",
      "title": "Coupa order transmission and supplier acknowledgement",
      "question": "Does a sent Coupa purchase order establish supplier acknowledgement or completed confirmation?",
      "record_url": "/varexis-index/records/coupa-order-transmission-acknowledgement.json",
      "record_sha256": "1e1bce8169bb60cc1fab107a950e12538b376cac8cf67316e385baf19e7cb51b",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_order_transmission_acknowledgement.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-ORDER-TRANSMISSION-ACKNOWLEDGEMENT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/purchase-orders-api-%28purchase_orders%29",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-CREATE-SUBMIT-BOUNDARY-01-v1",
      "route_id": "agentic_reviewed_coupa_invoice_create_submit_boundary",
      "title": "Coupa invoice creation and approval submission",
      "question": "Does creating a Coupa invoice through the API submit it for approval?",
      "record_url": "/varexis-index/records/coupa-invoice-create-submit-boundary.json",
      "record_sha256": "4cf4ae15c8f9ccf92d270387965531e157245cdecd6913a4f2d1d00585c0d6de",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_invoice_create_submit_boundary.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-INVOICE-CREATE-SUBMIT-BOUNDARY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-APPROVAL-BYPASS-01-v1",
      "route_id": "agentic_reviewed_coupa_invoice_approval_bypass",
      "title": "Coupa invoice approval and bypass provenance",
      "question": "Does approved Coupa invoice status prove each configured approver reviewed it?",
      "record_url": "/varexis-index/records/coupa-invoice-approval-bypass.json",
      "record_sha256": "2b0ec3884eb10ff98916f72b747fe61754fb0dafb33bd0341a65711830e9ae32",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_invoice_approval_bypass.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-INVOICE-APPROVAL-BYPASS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-INVOICE-RESTARTED-APPROVAL-CHAIN-01-v1",
      "route_id": "agentic_reviewed_coupa_invoice_restarted_approval_chain",
      "title": "Coupa modified invoices and restarted approval chains",
      "question": "Can an earlier Coupa invoice approval chain be reused after restart_approvals?",
      "record_url": "/varexis-index/records/coupa-invoice-restarted-approval-chain.json",
      "record_sha256": "9d8399ab6d9b80af3b924c4c65ab4370eb30ccf710cf89bb4a5c5a7f5e09c7f4",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_invoice_restarted_approval_chain.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-INVOICE-RESTARTED-APPROVAL-CHAIN-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/invoices-api-%28invoices%29",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-EXPORT-NOT-SETTLEMENT-01-v1",
      "route_id": "agentic_reviewed_coupa_payment_export_not_settlement",
      "title": "Coupa payment export and accounting acknowledgement",
      "question": "Does marking a Coupa Pay payment exported prove the supplier was paid?",
      "record_url": "/varexis-index/records/coupa-payment-export-not-settlement.json",
      "record_sha256": "418aa720392e89ceca7d78c838a5d7308c67f526e88fe4584ea2c40c6583c0e8",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_payment_export_not_settlement.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-PAYMENT-EXPORT-NOT-SETTLEMENT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/_dita_/en-us/documentation/plat/integ/coupa_core_api/topics/payments_api_coupa_paypayments_.dita",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-PAYABLE-EXTERNAL-HANDOFF-01-v1",
      "route_id": "agentic_reviewed_coupa_payable_external_handoff",
      "title": "Coupa external payment and tracking handoff",
      "question": "Does pay_externally in Coupa independently verify an external payment?",
      "record_url": "/varexis-index/records/coupa-payable-external-handoff.json",
      "record_sha256": "daac95cf95b3ec6fed823ffd7abf66301705862fcd8634803876b6358503ea82",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_payable_external_handoff.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-PAYABLE-EXTERNAL-HANDOFF-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/payables-api-%28payables%29/payablesinvoices-api",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-DETAIL-INVOICE-ALLOCATION-01-v1",
      "route_id": "agentic_reviewed_coupa_payment_detail_invoice_allocation",
      "title": "Coupa payment details and invoice allocation",
      "question": "Can a Coupa payment header total be assigned to one invoice without inspecting payment-details?",
      "record_url": "/varexis-index/records/coupa-payment-detail-invoice-allocation.json",
      "record_sha256": "ad31b3d394f893b5315700be2b7ee903c85ee86a8458f1466ae8b8f8a7cb51d2",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_payment_detail_invoice_allocation.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-PAYMENT-DETAIL-INVOICE-ALLOCATION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/_dita_/en-us/documentation/plat/integ/coupa_core_api/topics/payments_api_coupa_paypayments_.dita",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COUPA-PAYMENT-UPDATED-STATUS-EXTRACTION-01-v1",
      "route_id": "agentic_reviewed_coupa_payment_updated_status_extraction",
      "title": "Coupa payment status changes after an export",
      "question": "Does an export-once Coupa payment extract prove later payment status changes were captured?",
      "record_url": "/varexis-index/records/coupa-payment-updated-status-extraction.json",
      "record_sha256": "9202f0c0c205c745f7106657877770d49ac057dff079eb353924fafcb7d0a90d",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_coupa_payment_updated_status_extraction.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COUPA-PAYMENT-UPDATED-STATUS-EXTRACTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://compass.coupa.com/_dita_/en-us/documentation/plat/integ/coupa_core_api/topics/payments_api_coupa_paypayments_.dita",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-BUDGET-AGGREGATION-LAG-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_budget_aggregation_lag",
      "title": "Stripe Issuing budget aggregation and overshoot",
      "question": "Is an Issuing spending limit a strict instantaneous maximum for an agent budget?",
      "record_url": "/varexis-index/records/stripe-issuing-budget-aggregation-lag.json",
      "record_sha256": "948d8227df353961a455a10983babd4ae388813488805430e4dc0d97e4b90420",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_budget_aggregation_lag.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-BUDGET-AGGREGATION-LAG-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/spending-controls.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-CATEGORY-LIMIT-NOT-ALLOWLIST-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_category_limit_not_allowlist",
      "title": "Stripe Issuing category limits and permitted merchants",
      "question": "Does an Issuing spending limit for one merchant category block every other category?",
      "record_url": "/varexis-index/records/stripe-issuing-category-limit-not-allowlist.json",
      "record_sha256": "a6e053b37f5fb63e0228f5421c5ff0942d9d6aed0457459fe53b560f088ccb02",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_category_limit_not_allowlist.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-CATEGORY-LIMIT-NOT-ALLOWLIST-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/spending-controls.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-REPLACEMENT-BUDGET-CONTINUITY-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_replacement_budget_continuity",
      "title": "Stripe Issuing replacement cards and shared limits",
      "question": "Does replacing an Issuing card reset its spending-limit history?",
      "record_url": "/varexis-index/records/stripe-issuing-replacement-budget-continuity.json",
      "record_sha256": "4b01913ade8963469b44c599931e4c3b396a347531876af880eb165e3322c2ee",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_replacement_budget_continuity.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-REPLACEMENT-BUDGET-CONTINUITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/spending-controls.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-CAPTURE-CURRENT-CONTROLS-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_capture_current_controls",
      "title": "Stripe Issuing capture after card restrictions change",
      "question": "Does deactivating an Issuing card block capture of an already approved authorization?",
      "record_url": "/varexis-index/records/stripe-issuing-capture-current-controls.json",
      "record_sha256": "29c60026931c88f9ec8df4811f586bef76344dd02043113dd746417b6d54771e",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_capture_current_controls.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-CAPTURE-CURRENT-CONTROLS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/purchases/transactions.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-REFUND-LINK-UNCERTAINTY-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_refund_link_uncertainty",
      "title": "Stripe Issuing refund linkage and invoice attribution",
      "question": "Does an Issuing refund authorization link reliably identify the original purchase?",
      "record_url": "/varexis-index/records/stripe-issuing-refund-link-uncertainty.json",
      "record_sha256": "fa705c0c4241f92adae0b2f01d9edeeb27c9946e9ce8ddec52adf2e937e129be",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_refund_link_uncertainty.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-REFUND-LINK-UNCERTAINTY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/purchases/transactions.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-REFUND-REVERSAL-DIRECTION-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_refund_reversal_direction",
      "title": "Stripe Issuing refund reversals and amount direction",
      "question": "Does every Issuing transaction with type refund add a credit?",
      "record_url": "/varexis-index/records/stripe-issuing-refund-reversal-direction.json",
      "record_sha256": "ceace025ea167516e906657db1f7c13d47d5340f1d3755ee94f9340f737a26f0",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_refund_reversal_direction.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-REFUND-REVERSAL-DIRECTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/purchases/transactions.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-FORCE-CAPTURE-AUTHORITY-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_force_capture_authority",
      "title": "Stripe Issuing force capture and missing authorization",
      "question": "Does absence of an approved Issuing authorization prove no capture can occur?",
      "record_url": "/varexis-index/records/stripe-issuing-force-capture-authority.json",
      "record_sha256": "8a2089c1a1d068547603fbbe9ce5f7f59c0c868405270dde7a0fe246695c3afd",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_force_capture_authority.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-FORCE-CAPTURE-AUTHORITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/purchases/transactions.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-FALLBACK-APPROVAL-HEALTH-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_fallback_approval_health",
      "title": "Stripe Issuing fallback decisions and callback health",
      "question": "Does approved=true prove the agent authorization callback successfully decided the purchase?",
      "record_url": "/varexis-index/records/stripe-issuing-fallback-approval-health.json",
      "record_sha256": "6ca6d6b171038e6c66a175ced2c626a2091bd94dd1969e023dd09169982ca657",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_fallback_approval_health.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-FALLBACK-APPROVAL-HEALTH-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/real-time-authorizations.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-PENDING-REQUEST-AMOUNT-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_pending_request_amount",
      "title": "Stripe Issuing pending amount and decision-time evidence",
      "question": "Should an Issuing decision use the initial top-level amount instead of pending_request.amount?",
      "record_url": "/varexis-index/records/stripe-issuing-pending-request-amount.json",
      "record_sha256": "462e9bca3f2647c0dc2bf10952cf1983ee1894217d24a020d819caed7256c463",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_pending_request_amount.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-PENDING-REQUEST-AMOUNT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/real-time-authorizations.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-MULTIPLE-CAPTURE-RECONCILIATION-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_multiple_capture_reconciliation",
      "title": "Stripe Issuing partial and multiple capture accounting",
      "question": "Can one Issuing authorization be reconciled using only one capture transaction?",
      "record_url": "/varexis-index/records/stripe-issuing-multiple-capture-reconciliation.json",
      "record_sha256": "d6900440ba74b6e5c902509841439af661cd12605408dda173c984cde38d806d",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_multiple_capture_reconciliation.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-MULTIPLE-CAPTURE-RECONCILIATION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/purchases/transactions.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-STRIPE-ISSUING-PRECALLBACK-DECLINE-COVERAGE-01-v1",
      "route_id": "agentic_reviewed_stripe_issuing_precallback_decline_coverage",
      "title": "Stripe Issuing declines before the agent callback",
      "question": "Does no Issuing authorization-request callback mean no purchase was attempted?",
      "record_url": "/varexis-index/records/stripe-issuing-precallback-decline-coverage.json",
      "record_sha256": "23bf450068607502a558bf625bb78a3ad5f8818e47297a737013949112af3276",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_stripe_issuing_precallback_decline_coverage.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-STRIPE-ISSUING-PRECALLBACK-DECLINE-COVERAGE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.stripe.com/issuing/controls/spending-controls.md",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1",
      "route_id": "agentic_reviewed_gitlab_trigger_user_authority",
      "title": "GitLab trigger-token user authority",
      "question": "Whose project permissions does a GitLab pipeline trigger token use?",
      "record_url": "/varexis-index/records/gitlab-trigger-user-authority.json",
      "record_sha256": "4a7198c2b6b0a7439aab7daa7343767b7dcdcfddc491eb3d0b28f5467ed37c3f",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_trigger_user_authority.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-TRIGGER-USER-AUTHORITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/triggers/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-DOWNSTREAM-ACTOR-PERMISSION-01-v1",
      "route_id": "agentic_reviewed_gitlab_downstream_actor_permission",
      "title": "GitLab downstream pipeline initiating-user permission",
      "question": "Does a successful upstream GitLab pipeline prove that its user may start a downstream project pipeline?",
      "record_url": "/varexis-index/records/gitlab-downstream-actor-permission.json",
      "record_sha256": "965a6887c598b00a9263909b388ad8df0727f6729d3cf6545b617fa81d99da75",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_downstream_actor_permission.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-DOWNSTREAM-ACTOR-PERMISSION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1",
      "route_id": "agentic_reviewed_gitlab_trigger_success_not_completion",
      "title": "GitLab trigger success and downstream completion",
      "question": "Does a passed GitLab trigger job prove its downstream pipeline completed successfully?",
      "record_url": "/varexis-index/records/gitlab-trigger-success-not-completion.json",
      "record_sha256": "5ba05d057f47caa61b04a881f8c12f85632ebc7e283acd09d19c0d9b3d8a0a04",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_trigger_success_not_completion.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-TRIGGER-SUCCESS-NOT-COMPLETION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-MULTIPROJECT-CANCEL-BOUNDARY-01-v1",
      "route_id": "agentic_reviewed_gitlab_multiproject_cancel_boundary",
      "title": "GitLab multi-project cancellation boundary",
      "question": "Does starting a replacement upstream GitLab pipeline automatically stop its earlier multi-project downstream work?",
      "record_url": "/varexis-index/records/gitlab-multiproject-cancel-boundary.json",
      "record_sha256": "af203c64a3d4800a4cbbbba36d63de9218efe1a8002f06e8dc0a63238cdf2e95",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_multiproject_cancel_boundary.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-MULTIPROJECT-CANCEL-BOUNDARY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-FORWARDED-MASKING-LOSS-01-v1",
      "route_id": "agentic_reviewed_gitlab_forwarded_masking_loss",
      "title": "GitLab forwarded-variable masking boundary",
      "question": "Does forwarding a masked GitLab variable to another project preserve its masking configuration?",
      "record_url": "/varexis-index/records/gitlab-forwarded-masking-loss.json",
      "record_sha256": "cbfde4c92f6e198aa32989ee2eda66eaf9a61b535c3481dc34b41203d7353a12",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_forwarded_masking_loss.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-FORWARDED-MASKING-LOSS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1",
      "route_id": "agentic_reviewed_gitlab_forwarded_variable_precedence",
      "title": "GitLab forwarded-variable precedence",
      "question": "Can a GitLab downstream project’s variable value override a forwarded upstream value of the same name?",
      "record_url": "/varexis-index/records/gitlab-forwarded-variable-precedence.json",
      "record_sha256": "15541b857951adb69c2471a0db1b63448b96affce30bb4183c891a19940852dc",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_forwarded_variable_precedence.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-FORWARDED-VARIABLE-PRECEDENCE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITLAB-MR-ARTIFACT-REF-IDENTITY-01-v1",
      "route_id": "agentic_reviewed_gitlab_mr_artifact_ref_identity",
      "title": "GitLab merge-request artifact ref identity",
      "question": "Does fetching downstream artifacts by branch name identify the upstream merge-request pipeline’s artifacts?",
      "record_url": "/varexis-index/records/gitlab-mr-artifact-ref-identity.json",
      "record_sha256": "73e1c3549176928286933d4386204c1a989a428ab320861166ccc04ae4a0a3b2",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_gitlab_mr_artifact_ref_identity.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITLAB-MR-ARTIFACT-REF-IDENTITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gitlab.com/ci/pipelines/downstream_pipelines/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1",
      "route_id": "agentic_reviewed_github_environment_secret_selection",
      "title": "GitHub reusable-workflow environment secret selection",
      "question": "Does passing a repository secret to a reusable workflow establish the secret value used by a job with an environment?",
      "record_url": "/varexis-index/records/github-environment-secret-selection.json",
      "record_sha256": "5efad68f7334b1bc5eed3d9a7e3921f9e61151eddb0880033347f172e277fce5",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_github_environment_secret_selection.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITHUB-ENVIRONMENT-SECRET-SELECTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1",
      "route_id": "agentic_reviewed_github_attestation_signer_workflow",
      "title": "GitHub attestation reusable-workflow signer policy",
      "question": "When a GitHub attestation uses a reusable workflow, which workflow identity must a verifier constrain?",
      "record_url": "/varexis-index/records/github-attestation-signer-workflow.json",
      "record_sha256": "642ac75db484e2a44cc488481f0cafaea3f6d971516b18bde0e1626a15495a61",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_github_attestation_signer_workflow.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITHUB-ATTESTATION-SIGNER-WORKFLOW-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://cli.github.com/manual/gh_attestation_verify",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1",
      "route_id": "agentic_reviewed_github_attestation_offline_name_rebinding",
      "title": "GitHub offline attestation repository-name binding",
      "question": "Can offline GitHub attestation verification detect that a repository name was later renamed or reused?",
      "record_url": "/varexis-index/records/github-attestation-offline-name-rebinding.json",
      "record_sha256": "14efbfb06a77e76336c60fa001051a7abc3dbac4b161c4f7b33fafceadcc52f0",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_github_attestation_offline_name_rebinding.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITHUB-ATTESTATION-OFFLINE-NAME-REBINDING-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://cli.github.com/manual/gh_attestation_verify",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1",
      "route_id": "agentic_reviewed_github_attestation_predicate_trust",
      "title": "GitHub attestation predicate trust boundary",
      "question": "Does a successfully verified GitHub artifact attestation establish that all provenance predicate claims are trustworthy?",
      "record_url": "/varexis-index/records/github-attestation-predicate-trust.json",
      "record_sha256": "ec4d4b0b560b558d1ac813aad36ea7129a417636a37123835a61a2bdaddf2ee9",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_github_attestation_predicate_trust.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITHUB-ATTESTATION-PREDICATE-TRUST-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://cli.github.com/manual/gh_attestation_verify",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-GITHUB-PRIVATE-ATTESTATION-LOG-ABSENCE-01-v1",
      "route_id": "agentic_reviewed_github_private_attestation_log_absence",
      "title": "GitHub private attestation transparency-log scope",
      "question": "Should a GitHub private-repository attestation be assumed to have the public Sigstore transparency-log evidence?",
      "record_url": "/varexis-index/records/github-private-attestation-log-absence.json",
      "record_sha256": "47e0129decc58792cc38052fad59982759c106805316fdeb041f874f67d1e45b",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_github_private_attestation_log_absence.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-GITHUB-PRIVATE-ATTESTATION-LOG-ABSENCE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.github.com/en/actions/concepts/security/artifact-attestations",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1",
      "route_id": "agentic_reviewed_sigstore_bundle_digest_input",
      "title": "Sigstore bundle informational digest input",
      "question": "Can a verifier use the message digest inside a Sigstore bundle as proof of the artifact’s own digest?",
      "record_url": "/varexis-index/records/sigstore-bundle-digest-input.json",
      "record_sha256": "3a019922988b038416c3243360b8c0685c8ebc1ae91e7587c27851166fca0dcb",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_sigstore_bundle_digest_input.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-SIGSTORE-BUNDLE-DIGEST-INPUT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.sigstore.dev/about/bundle/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-SIGSTORE-BUNDLE-SINGLE-SIGNATURE-PROFILE-01-v1",
      "route_id": "agentic_reviewed_sigstore_bundle_single_signature_profile",
      "title": "Sigstore bundle DSSE single-signature profile",
      "question": "Does a Sigstore bundle’s DSSE envelope establish a multi-signer quorum?",
      "record_url": "/varexis-index/records/sigstore-bundle-single-signature-profile.json",
      "record_sha256": "0cbef7e4dfc1b16517383f345c0a46474d50a230965649cfbb712d677afbb7fa",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_sigstore_bundle_single_signature_profile.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-SIGSTORE-BUNDLE-SINGLE-SIGNATURE-PROFILE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.sigstore.dev/about/bundle/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-COSIGN-ANNOTATION-SUBSET-POLICY-01-v1",
      "route_id": "agentic_reviewed_cosign_annotation_subset_policy",
      "title": "Cosign annotation verification subset semantics",
      "question": "Does verifying specified Cosign annotations reject an attestation or signature that contains additional annotations?",
      "record_url": "/varexis-index/records/cosign-annotation-subset-policy.json",
      "record_sha256": "e6faf3a6cc7cef28307627f1ac1458d209fd8ee039d98e848cc9e3dc29a230cb",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_cosign_annotation_subset_policy.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-COSIGN-ANNOTATION-SUBSET-POLICY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.sigstore.dev/cosign/verifying/verify/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1",
      "route_id": "agentic_reviewed_sigstore_rekor_timestamp_version",
      "title": "Sigstore Rekor timestamp trust and version",
      "question": "Can Rekor’s signed integrated time be treated as an immutable independently trusted signing timestamp?",
      "record_url": "/varexis-index/records/sigstore-rekor-timestamp-version.json",
      "record_sha256": "78165b63326d053d01351380a1e8c8ff7393e7eb58d622ccbe8d2b55ac623aa1",
      "preview_url": "/varexis-index/publications/ice-05-tranche-61-v1/routes/agentic_reviewed_sigstore_rekor_timestamp_version.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE05-SIGSTORE-REKOR-TIMESTAMP-VERSION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.sigstore.dev/cosign/verifying/timestamps/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    }
  ]
}