{
  "schema": "varexis-index-publication-manifest/1",
  "version": "ice-06-tranche-62-v1",
  "baseline_commit": "5406a5cced32b6c06d3187e51f8f32a0d6e04086",
  "tranches": [
    "public-safe-tranche-62"
  ],
  "record_count": 32,
  "route_count": 32,
  "complete": true,
  "next_page": null,
  "lookup": "Enumerate this complete manifest; compare record_id or route_id for exact equality and fetch its listed HTTPS JSON URL. Never infer a URL or fall back to related evidence for an unknown ID.",
  "boundary": "Catalogue additions are available free through the exact HTTP JSON links below. Enhanced natural-language discovery is not yet qualified for these records. They are outside MCP search, MCP preview and paid saved retrieval. No search qualification, executable capability or entitlement is added.",
  "records": [
    {
      "record_id": "VXI-EXT-ICE06-IAM-ROLE-RECREATION-PRINCIPAL-BINDING-01-v1",
      "route_id": "agentic_reviewed_iam_role_recreation_principal_binding",
      "title": "IAM role recreation principal binding",
      "question": "Does recreating an IAM role preserve every trust policy that named its ARN?",
      "record_url": "/varexis-index/records/iam-role-recreation-principal-binding.json",
      "record_sha256": "dd1e53d167bbe2a945e5c6d72392fa134f3f940c462ff67cdabc2859c84bf3bb",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_iam_role_recreation_principal_binding.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-IAM-ROLE-RECREATION-PRINCIPAL-BINDING-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-ENTRA-PIM-FIRST-APPROVER-DECISION-01-v1",
      "route_id": "agentic_reviewed_entra_pim_first_approver_decision",
      "title": "Entra PIM first approver decision",
      "question": "Do multiple Entra PIM approvers provide unanimous approval?",
      "record_url": "/varexis-index/records/entra-pim-first-approver-decision.json",
      "record_sha256": "4753dadb852d8488b02af8f13ea8a6854ea19dd4342b130422b46c43d3dae534",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_entra_pim_first_approver_decision.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-FIRST-APPROVER-DECISION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-approval-workflow",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-ENTRA-PIM-MFA-SESSION-REUSE-01-v1",
      "route_id": "agentic_reviewed_entra_pim_mfa_session_reuse",
      "title": "Entra PIM MFA session reuse",
      "question": "Does PIM's MFA requirement ensure a fresh challenge on each activation?",
      "record_url": "/varexis-index/records/entra-pim-mfa-session-reuse.json",
      "record_sha256": "a1d6f6fe9fac68e633d77836e989e20073bece18035d9d26517d373939165f09",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_entra_pim_mfa_session_reuse.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-MFA-SESSION-REUSE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-GCP-PAM-REVOKE-OPERATION-COMPLETION-01-v1",
      "route_id": "agentic_reviewed_gcp_pam_revoke_operation_completion",
      "title": "Google Cloud pam revoke operation completion",
      "question": "Does a returned PAM revoke operation establish completed grant removal?",
      "record_url": "/varexis-index/records/gcp-pam-revoke-operation-completion.json",
      "record_sha256": "dd38412adf1373c75f9e1c2b331c77becfbaf8af32de74e9a383c3f08bf72f0d",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_gcp_pam_revoke_operation_completion.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-PAM-REVOKE-OPERATION-COMPLETION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.cloud.google.com/iam/docs/pam-revoke-grants",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-ENTRA-PIM-ACTIVATION-DEVICE-USE-SEPARATION-01-v1",
      "route_id": "agentic_reviewed_entra_pim_activation_device_use_separation",
      "title": "Entra PIM activation device use separation",
      "question": "Does activating PIM from a compliant device restrict subsequent role use to that device?",
      "record_url": "/varexis-index/records/entra-pim-activation-device-use-separation.json",
      "record_sha256": "f382966eac3720996e47d5655d6337b690949f22e4b4623f533fbe90176f68cc",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_entra_pim_activation_device_use_separation.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-ACTIVATION-DEVICE-USE-SEPARATION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AWS-BACKUP-HOLD-RECORD-RETENTION-01-v1",
      "route_id": "agentic_reviewed_aws_backup_hold_record_retention",
      "title": "AWS backup hold record retention",
      "question": "Does CancelLegalHold DeleteAfterDays control how long the backups remain locked?",
      "record_url": "/varexis-index/records/aws-backup-hold-record-retention.json",
      "record_sha256": "652ebf9fb8b3c0193b863da7b771ec65d976bb4a461a298f0032b65120e501db",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_aws_backup_hold_record_retention.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-HOLD-RECORD-RETENTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/legalhold.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AWS-BACKUP-RESTORE-ACCESS-VIEW-DELETION-01-v1",
      "route_id": "agentic_reviewed_aws_backup_restore_access_view_deletion",
      "title": "AWS backup restore access view deletion",
      "question": "Does deleting a failed restore-access vault remove its underlying protected backups?",
      "record_url": "/varexis-index/records/aws-backup-restore-access-view-deletion.json",
      "record_sha256": "03889040307cda2de7509174ecf3a927b8aade54bbf2f3ca64945613d6c7fa17",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_aws_backup_restore_access_view_deletion.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-RESTORE-ACCESS-VIEW-DELETION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/logicallyairgappedvault.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AWS-BACKUP-DESTRUCTIVE-RESTORE-EXCEPTIONS-01-v1",
      "route_id": "agentic_reviewed_aws_backup_destructive_restore_exceptions",
      "title": "AWS backup destructive restore exceptions",
      "question": "Does AWS Backup always restore into a new resource without overwriting existing data?",
      "record_url": "/varexis-index/records/aws-backup-destructive-restore-exceptions.json",
      "record_sha256": "25e1369304741c8f521bf9ef950a8c93accd3c21c9c780b9fbe37e606b305ffe",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_aws_backup_destructive_restore_exceptions.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-DESTRUCTIVE-RESTORE-EXCEPTIONS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-a-backup.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-DYNAMODB-PITR-RESET-HISTORY-BOUNDARY-01-v1",
      "route_id": "agentic_reviewed_dynamodb_pitr_reset_history_boundary",
      "title": "DynamoDB PITR reset history boundary",
      "question": "Does re-enabling DynamoDB PITR restore the previous recovery window?",
      "record_url": "/varexis-index/records/dynamodb-pitr-reset-history-boundary.json",
      "record_sha256": "7ec86f041bb53183c22bfae3986edcedb5f6fd0e6803a5362b0b3532a6bb10f5",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_dynamodb_pitr_reset_history_boundary.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-DYNAMODB-PITR-RESET-HISTORY-BOUNDARY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Point-in-time-recovery.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-ADYEN-CHARGEBACK-REVERSED-NOT-CLOSED-01-v1",
      "route_id": "agentic_reviewed_adyen_chargeback_reversed_not_closed",
      "title": "Adyen chargeback reversed not closed",
      "question": "Does CHARGEBACK_REVERSED establish that the dispute is finally won?",
      "record_url": "/varexis-index/records/adyen-chargeback-reversed-not-closed.json",
      "record_sha256": "3d74dc6e32d8b09ff9966ee5214a80d3d44a9a18aa3e279d6fb3e244f16c2d38",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_adyen_chargeback_reversed_not_closed.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ADYEN-CHARGEBACK-REVERSED-NOT-CLOSED-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.adyen.com/risk-management/understanding-disputes/dispute-process-and-flow",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-WISE-SENT-NONFINAL-BENEFICIARY-OUTCOME-01-v1",
      "route_id": "agentic_reviewed_wise_sent_nonfinal_beneficiary_outcome",
      "title": "Wise sent nonfinal beneficiary outcome",
      "question": "Does Wise's Completed label prove final receipt at the beneficiary bank?",
      "record_url": "/varexis-index/records/wise-sent-nonfinal-beneficiary-outcome.json",
      "record_sha256": "ecbb2f6cea8e2851d479d381fa390f5688ef93a2c3c61f55f4641a3a9c53c51a",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_wise_sent_nonfinal_beneficiary_outcome.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-SENT-NONFINAL-BENEFICIARY-OUTCOME-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.wise.com/guides/product/send-money/tracking/transfer-statuses",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-WISE-INBOUND-RETURN-ORIGINATOR-RECEIPT-01-v1",
      "route_id": "agentic_reviewed_wise_inbound_return_originator_receipt",
      "title": "Wise inbound return originator receipt",
      "question": "Does a Wise inbound-payment return marked REFUNDED prove the originator received it?",
      "record_url": "/varexis-index/records/wise-inbound-return-originator-receipt.json",
      "record_sha256": "2d5e6e540a31689fea2f37a7fc1375030f86a0356e04810e5b8c2f64eee52f9a",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_wise_inbound_return_originator_receipt.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-INBOUND-RETURN-ORIGINATOR-RECEIPT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.wise.com/guides/product/receive-money/initiate-a-return",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-WISE-QUOTE-RECIPIENT-CONTEXT-BINDING-01-v1",
      "route_id": "agentic_reviewed_wise_quote_recipient_context_binding",
      "title": "Wise quote recipient context binding",
      "question": "Does a valid Wise quote alone authorise a transfer to a changed recipient?",
      "record_url": "/varexis-index/records/wise-quote-recipient-context-binding.json",
      "record_sha256": "c41724596a31555ff7c70432fb25daaf5211fb32e1a3981b3f15b708e862d504",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_wise_quote_recipient_context_binding.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-QUOTE-RECIPIENT-CONTEXT-BINDING-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.wise.com/guides/developer/errors/transfers",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-GOCARDLESS-RETRY-REASON-MANDATE-GATE-01-v1",
      "route_id": "agentic_reviewed_gocardless_retry_reason_mandate_gate",
      "title": "GoCardless retry reason mandate gate",
      "question": "Can every failed GoCardless payment be retried as an insufficient-funds failure?",
      "record_url": "/varexis-index/records/gocardless-retry-reason-mandate-gate.json",
      "record_sha256": "5d6da870b7c8fff967bd07b748a0594b8dddac7792888f8a1ea677020e652183",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_gocardless_retry_reason_mandate_gate.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GOCARDLESS-RETRY-REASON-MANDATE-GATE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gocardless.com/docs/partner-integrations/collecting-payments",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-GOCARDLESS-REFUND-RETURNED-CREDIT-01-v1",
      "route_id": "agentic_reviewed_gocardless_refund_returned_credit",
      "title": "GoCardless refund returned credit",
      "question": "Does a refund debit in a GoCardless payout prove the customer received the refund?",
      "record_url": "/varexis-index/records/gocardless-refund-returned-credit.json",
      "record_sha256": "f944cfee2c491ddd1619d17270d9608c4f004995fb13567533b4e351e3132762",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_gocardless_refund_returned_credit.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GOCARDLESS-REFUND-RETURNED-CREDIT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.gocardless.com/docs/collect-payments/managing-payments/reconciling-payouts",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-KUBERNETES-BLOCKING-STRICT-AUDIT-STAGE-01-v1",
      "route_id": "agentic_reviewed_kubernetes_blocking_strict_audit_stage",
      "title": "Kubernetes blocking strict audit stage",
      "question": "Does any Kubernetes audit-backend failure automatically fail the API operation?",
      "record_url": "/varexis-index/records/kubernetes-blocking-strict-audit-stage.json",
      "record_sha256": "e03fa1ddc07fe65b9bb46ed0c02074d4c922733712ddaa792301c68ea40d8a01",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_kubernetes_blocking_strict_audit_stage.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-KUBERNETES-BLOCKING-STRICT-AUDIT-STAGE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AZURE-LOGEXPORT-RETRY-DUPLICATE-LOSS-01-v1",
      "route_id": "agentic_reviewed_azure_logexport_retry_duplicate_loss",
      "title": "Azure logexport retry duplicate loss",
      "question": "Does Azure Monitor data export deliver each log record exactly once despite destination outages?",
      "record_url": "/varexis-index/records/azure-logexport-retry-duplicate-loss.json",
      "record_sha256": "9c0fab171f5d179c4689edc67c31bef776f235efdf11d8002860beed05c0f659",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_azure_logexport_retry_duplicate_loss.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-LOGEXPORT-RETRY-DUPLICATE-LOSS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-data-export",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AZURE-MANAGEMENT-GROUP-EXPORT-HIERARCHY-GAP-01-v1",
      "route_id": "agentic_reviewed_azure_management_group_export_hierarchy_gap",
      "title": "Azure management group export hierarchy gap",
      "question": "Does a root management-group diagnostic setting capture every subscription activity event?",
      "record_url": "/varexis-index/records/azure-management-group-export-hierarchy-gap.json",
      "record_sha256": "fd3815d7e83c51c2207f41efd4983f5eef5846a6d86727b38d81725dcbac065f",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_azure_management_group_export_hierarchy_gap.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-MANAGEMENT-GROUP-EXPORT-HIERARCHY-GAP-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/activity-log",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-GCP-AGENT-PLATFORM-TRANSPARENCY-COMPONENT-SCOPE-01-v1",
      "route_id": "agentic_reviewed_gcp_agent_platform_transparency_component_scope",
      "title": "Google Cloud agent platform transparency component scope",
      "question": "Does platform-level Access Transparency support cover every AI serving component?",
      "record_url": "/varexis-index/records/gcp-agent-platform-transparency-component-scope.json",
      "record_sha256": "080b90692ead63ce0451c5f431dd6b204bed42516aefee4a46b873be69f675cc",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_gcp_agent_platform_transparency_component_scope.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-AGENT-PLATFORM-TRANSPARENCY-COMPONENT-SCOPE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/machine-learning/general/access-transparency",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-STEP-FUNCTIONS-START-VERSION-BINDING-01-v1",
      "route_id": "agentic_reviewed_step_functions_start_version_binding",
      "title": "Step functions start version binding",
      "question": "Does starting an unqualified state machine ARN execute the previously reviewed version?",
      "record_url": "/varexis-index/records/step-functions-start-version-binding.json",
      "record_sha256": "3b1373c7c301038f7164523f0b74ab9a515d86648cf0ffd08a6b9ad47e3830d9",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_step_functions_start_version_binding.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-STEP-FUNCTIONS-START-VERSION-BINDING-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-STEP-FUNCTIONS-CALLBACK-PRINCIPAL-ACCOUNT-01-v1",
      "route_id": "agentic_reviewed_step_functions_callback_principal_account",
      "title": "Step functions callback principal account",
      "question": "Can a principal in another AWS account directly return a Step Functions task token?",
      "record_url": "/varexis-index/records/step-functions-callback-principal-account.json",
      "record_sha256": "d549358c81acbe6b042d288dfa47f6ab285caf548ca6431e5270984f16761301",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_step_functions_callback_principal_account.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-STEP-FUNCTIONS-CALLBACK-PRINCIPAL-ACCOUNT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/step-functions/latest/dg/connect-to-resource.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-EVENTBRIDGE-REPLAY-ORDER-NOT-PRESERVED-01-v1",
      "route_id": "agentic_reviewed_eventbridge_replay_order_not_preserved",
      "title": "EventBridge replay order not preserved",
      "question": "Does EventBridge archive replay preserve the original event order?",
      "record_url": "/varexis-index/records/eventbridge-replay-order-not-preserved.json",
      "record_sha256": "bb154751256f552f180a72b59aab687ae3aa876d08bf30dad48ad506da7a8a9d",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_eventbridge_replay_order_not_preserved.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-EVENTBRIDGE-REPLAY-ORDER-NOT-PRESERVED-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-archive.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AWS-CUR-SELLER-INVOICING-ENTITY-01-v1",
      "route_id": "agentic_reviewed_aws_cur_seller_invoicing_entity",
      "title": "AWS CUR seller invoicing entity",
      "question": "Does AWS CUR LegalEntity always identify the party issuing the invoice?",
      "record_url": "/varexis-index/records/aws-cur-seller-invoicing-entity.json",
      "record_sha256": "134ac5958505c01001053d102f0fccc645b3c62beadbfa8d27df7ac5f71913cb",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_aws_cur_seller_invoicing_entity.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-CUR-SELLER-INVOICING-ENTITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.aws.amazon.com/cur/latest/userguide/Lineitem-columns.html",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-DATABRICKS-ORIGINAL-RECORD-LATENCY-BOUNDARY-01-v1",
      "route_id": "agentic_reviewed_databricks_original_record_latency_boundary",
      "title": "Databricks original record latency boundary",
      "question": "Does Databricks' typical usage availability establish that later corrections are complete?",
      "record_url": "/varexis-index/records/databricks-original-record-latency-boundary.json",
      "record_sha256": "44c83cbb4f09493386e9f0752fbb7ee00e2354aebc7526d99d39d3b357878a19",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_databricks_original_record_latency_boundary.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-DATABRICKS-ORIGINAL-RECORD-LATENCY-BOUNDARY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.databricks.com/gcp/en/admin/system-tables/billing",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-AZURE-COST-EXPORT-PARTITIONS-REPLACEMENT-01-v1",
      "route_id": "agentic_reviewed_azure_cost_export_partitions_replacement",
      "title": "Azure cost export partitions replacement",
      "question": "Does one downloaded Azure cost-export file preserve the complete report and its earlier version?",
      "record_url": "/varexis-index/records/azure-cost-export-partitions-replacement.json",
      "record_sha256": "203188bb372c9d25929bf7fd8b9758a3711492e4c5bbc5d9ca781126907e0475",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_azure_cost_export_partitions_replacement.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-COST-EXPORT-PARTITIONS-REPLACEMENT-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/azure/cost-management-billing/costs/tutorial-export-acm-data",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-MUTABLE-DESCRIPTION-01-v1",
      "route_id": "agentic_reviewed_github_immutable_release_mutable_description",
      "title": "GitHub immutable release mutable description",
      "question": "Does an immutable GitHub release freeze its title, notes and latest designation?",
      "record_url": "/varexis-index/records/github-immutable-release-mutable-description.json",
      "record_sha256": "c83be910803c63730532a97a4f623224676177d2e41eb41609a29334b67c7371",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_github_immutable_release_mutable_description.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-MUTABLE-DESCRIPTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-TOKEN-COEXISTENCE-01-v1",
      "route_id": "agentic_reviewed_npm_trusted_publisher_token_coexistence",
      "title": "Npm trusted publisher token coexistence",
      "question": "Does adding an npm trusted publisher disable traditional publishing tokens?",
      "record_url": "/varexis-index/records/npm-trusted-publisher-token-coexistence.json",
      "record_sha256": "3f46ec27029b4a4b56316ec89a6a47698334726db4cad664916c977da6432d04",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_npm_trusted_publisher_token_coexistence.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-TOKEN-COEXISTENCE-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.npmjs.com/trusted-publishers/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-NPM-OIDC-PROVENANCE-GENERATION-CONDITIONS-01-v1",
      "route_id": "agentic_reviewed_npm_oidc_provenance_generation_conditions",
      "title": "Npm OIDC provenance generation conditions",
      "question": "Does every npm OIDC publication automatically include provenance?",
      "record_url": "/varexis-index/records/npm-oidc-provenance-generation-conditions.json",
      "record_sha256": "444aacacad2c17eca4dff661198a52428e0e39b6e871accb75546bb734e7811a",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_npm_oidc_provenance_generation_conditions.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NPM-OIDC-PROVENANCE-GENERATION-CONDITIONS-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.npmjs.com/trusted-publishers/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-PYPI-GITHUB-OWNER-IDENTITY-RESURRECTION-01-v1",
      "route_id": "agentic_reviewed_pypi_github_owner_identity_resurrection",
      "title": "PyPI GitHub owner identity resurrection",
      "question": "Can a new GitHub account reusing a former owner's name inherit its PyPI trusted publishing authority?",
      "record_url": "/varexis-index/records/pypi-github-owner-identity-resurrection.json",
      "record_sha256": "2d7767b81a39144df46e4431a7bb57254731a8a38649c7d743a2ea4a9b0423a2",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_pypi_github_owner_identity_resurrection.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-PYPI-GITHUB-OWNER-IDENTITY-RESURRECTION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://docs.pypi.org/trusted-publishers/internals/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-INTERVENTION-RESPONSIBILITY-01-v1",
      "route_id": "agentic_reviewed_nist_ai_rmf_intervention_responsibility",
      "title": "NIST AI RMF intervention responsibility",
      "question": "Does an emergency stop button establish the AI RMF intervention outcome?",
      "record_url": "/varexis-index/records/nist-ai-rmf-intervention-responsibility.json",
      "record_sha256": "62517a00f343e1e1ce54a38a983ef3ca6b0668bc29b7cafcb99817ab76df28ef",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_nist_ai_rmf_intervention_responsibility.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-INTERVENTION-RESPONSIBILITY-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-ADJUDICATED-FEEDBACK-01-v1",
      "route_id": "agentic_reviewed_nist_ai_rmf_adjudicated_feedback",
      "title": "NIST AI RMF adjudicated feedback",
      "question": "Does collecting AI user feedback establish that it influences the system?",
      "record_url": "/varexis-index/records/nist-ai-rmf-adjudicated-feedback.json",
      "record_sha256": "b5c9d5d9d4f1a5c396d13704b5d67a0904a784e8cc0544fd78e58e896bba2f8a",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_nist_ai_rmf_adjudicated_feedback.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-ADJUDICATED-FEEDBACK-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    },
    {
      "record_id": "VXI-EXT-ICE06-ENTRA-EMERGENCY-USE-REVIEW-VALIDATION-01-v1",
      "route_id": "agentic_reviewed_entra_emergency_use_review_validation",
      "title": "Entra emergency use review validation",
      "question": "Does a successful emergency-account sign-in establish that its administrative use was authorized?",
      "record_url": "/varexis-index/records/entra-emergency-use-review-validation.json",
      "record_sha256": "9f9b5ab538f09e0c03baf76771dc3e605604c5d78574def98e3f5358cb725ece",
      "preview_url": "/varexis-index/publications/ice-06-tranche-62-v1/routes/agentic_reviewed_entra_emergency_use_review_validation.json",
      "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-EMERGENCY-USE-REVIEW-VALIDATION-01-v1",
      "reviewed_on": "2026-10-29",
      "source_url": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access",
      "payment_required": false,
      "purchase_url": null,
      "access": "exact_http_only",
      "mcp_available": false,
      "natural_language_search_qualified": false
    }
  ]
}