{ "schema": "varexis-index-publication-manifest/1", "version": "ice-06-tranche-63-v1", "baseline_commit": "5406a5cced32b6c06d3187e51f8f32a0d6e04086", "tranches": [ "public-safe-tranche-63" ], "record_count": 31, "route_count": 31, "complete": true, "next_page": null, "lookup": "Enumerate this complete manifest; compare record_id or route_id for exact equality and fetch its listed HTTPS JSON URL. Never infer a URL or fall back to related evidence for an unknown ID.", "boundary": "Catalogue additions are available free through the exact HTTP JSON links below. Enhanced natural-language discovery is not yet qualified for these records. They are outside MCP search, MCP preview and paid saved retrieval. No search qualification, executable capability or entitlement is added.", "records": [ { "record_id": "VXI-EXT-ICE06-IAM-NOTPRINCIPAL-BOUNDARY-DENIAL-01-v1", "route_id": "agentic_reviewed_iam_notprincipal_boundary_denial", "title": "IAM notprincipal boundary denial", "question": "Can a NotPrincipal Deny reject an IAM role despite an intended exclusion?", "record_url": "/varexis-index/records/iam-notprincipal-boundary-denial.json", "record_sha256": "edd263464dab2bbee4f701df7c33627cc9be6e35875fbdeddd4571e63766503e", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_iam_notprincipal_boundary_denial.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-IAM-NOTPRINCIPAL-BOUNDARY-DENIAL-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-REQUEST-EXPIRY-RESUBMISSION-01-v1", "route_id": "agentic_reviewed_entra_pim_request_expiry_resubmission", "title": "Entra PIM request expiry resubmission", "question": "Can an unapproved Entra PIM request remain valid indefinitely?", "record_url": "/varexis-index/records/entra-pim-request-expiry-resubmission.json", "record_sha256": "c90b42b2fe9d140f98e2ad3ca56033da9db439e14799120adf62ff2a4f66313c", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_entra_pim_request_expiry_resubmission.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-REQUEST-EXPIRY-RESUBMISSION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-approval-workflow", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GCP-PAM-EDIT-GRANT-VERSION-BOUNDARY-01-v1", "route_id": "agentic_reviewed_gcp_pam_edit_grant_version_boundary", "title": "Google Cloud pam edit grant version boundary", "question": "Does editing a PAM entitlement update existing grants and all pending approvals uniformly?", "record_url": "/varexis-index/records/gcp-pam-edit-grant-version-boundary.json", "record_sha256": "ecc3fbf16af25433eb0e2f289f8ca1a339f2938c8ef3151f6303b50af3ec8a56", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_gcp_pam_edit_grant_version_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-PAM-EDIT-GRANT-VERSION-BOUNDARY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.cloud.google.com/iam/docs/pam-view-update-delete-entitlements", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GCP-PAM-POLICY-CAPACITY-GRANT-FAILURE-01-v1", "route_id": "agentic_reviewed_gcp_pam_policy_capacity_grant_failure", "title": "Google Cloud pam policy capacity grant failure", "question": "Does a PAM entitlement guarantee that a new temporary grant can be applied?", "record_url": "/varexis-index/records/gcp-pam-policy-capacity-grant-failure.json", "record_sha256": "bf98c20f6575ab58be2a4a5e0f34476025f2f5ae5f11fe98fa97edf5ee015c55", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_gcp_pam_policy_capacity_grant_failure.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-PAM-POLICY-CAPACITY-GRANT-FAILURE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.cloud.google.com/iam/docs/pam-best-practices", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-ACTIVE-ASSIGNMENT-MFA-ACTOR-01-v1", "route_id": "agentic_reviewed_entra_pim_active_assignment_mfa_actor", "title": "Entra PIM active assignment MFA actor", "question": "Does MFA on creation of an active PIM assignment prove the assignee authenticated for later use?", "record_url": "/varexis-index/records/entra-pim-active-assignment-mfa-actor.json", "record_sha256": "456acb553bba693b6e627610dd2f0a1f2fa632603fbb6c7dbc9933122c98f54d", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_entra_pim_active_assignment_mfa_actor.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-ACTIVE-ASSIGNMENT-MFA-ACTOR-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-LOCK-RETENTION-INDEPENDENT-01-v1", "route_id": "agentic_reviewed_aws_backup_lock_retention_independent", "title": "AWS backup lock retention independent", "question": "Does a new Vault Lock minimum replace the lifecycle already assigned to each backup?", "record_url": "/varexis-index/records/aws-backup-lock-retention-independent.json", "record_sha256": "3bac7a55412340b63a99745c88a57a6a6374ece908d0146bab63b9d213d4522e", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_aws_backup_lock_retention_independent.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-LOCK-RETENTION-INDEPENDENT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-PRIMARY-AIRGAP-FALLBACK-01-v1", "route_id": "agentic_reviewed_aws_backup_primary_airgap_fallback", "title": "AWS backup primary airgap fallback", "question": "Does a completed primary-backup job prove the recovery point reached its logically air-gapped target?", "record_url": "/varexis-index/records/aws-backup-primary-airgap-fallback.json", "record_sha256": "19e6359f2c3e95ebceddba50e5028bd86b6695fc03e430c0a39a5104de8575ff", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_aws_backup_primary_airgap_fallback.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-PRIMARY-AIRGAP-FALLBACK-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/lag-vault-primary-backup.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-RESTORE-TEST-CLEANUP-STATUS-01-v1", "route_id": "agentic_reviewed_aws_backup_restore_test_cleanup_status", "title": "AWS backup restore test cleanup status", "question": "Does a completed AWS Backup restore test establish that its temporary resource was deleted?", "record_url": "/varexis-index/records/aws-backup-restore-test-cleanup-status.json", "record_sha256": "2f0e16065683704c42ed64a1e4d111a97a8e2e165a69a126ced8cd9f9764e401", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_aws_backup_restore_test_cleanup_status.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-RESTORE-TEST-CLEANUP-STATUS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-RESTORE-TAG-API-DEFAULT-01-v1", "route_id": "agentic_reviewed_aws_backup_restore_tag_api_default", "title": "AWS backup restore tag api default", "question": "Does an API-driven AWS Backup restore preserve the same tags as the console default?", "record_url": "/varexis-index/records/aws-backup-restore-tag-api-default.json", "record_sha256": "b1728dc5df61acbd5963b1ae8e494ea34f14ca61013f977344913cbd97c2b0d2", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_aws_backup_restore_tag_api_default.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-RESTORE-TAG-API-DEFAULT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-a-backup.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-BACKUP-SOFTDELETE-ROLLOUT-API-SCOPE-01-v1", "route_id": "agentic_reviewed_azure_backup_softdelete_rollout_api_scope", "title": "Azure backup softdelete rollout api scope", "question": "Does an Azure Backup delete operation have the same retention effect in every region and API version?", "record_url": "/varexis-index/records/azure-backup-softdelete-rollout-api-scope.json", "record_sha256": "e0009dce51f2f854ed3b1e4602861cae9bf749a671017e5fc387a3f5d9e97619", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_azure_backup_softdelete_rollout_api_scope.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-BACKUP-SOFTDELETE-ROLLOUT-API-SCOPE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/azure/backup/backup-azure-enhanced-soft-delete-about", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ADYEN-PAYOUT-BOOKED-CREDIT-EVIDENCE-01-v1", "route_id": "agentic_reviewed_adyen_payout_booked_credit_evidence", "title": "Adyen payout booked credit evidence", "question": "Does an Adyen payout booked event establish credit to the beneficiary bank?", "record_url": "/varexis-index/records/adyen-payout-booked-credit-evidence.json", "record_sha256": "93302e753ed3676759e4df5b3ad9af1bfa1bb6659858340efe74be6a3ae350d4", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_adyen_payout_booked_credit_evidence.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ADYEN-PAYOUT-BOOKED-CREDIT-EVIDENCE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.adyen.com/platforms/payout-webhooks", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-WISE-FUNDING-INITIATION-VERSUS-RECEIPT-01-v1", "route_id": "agentic_reviewed_wise_funding_initiation_versus_receipt", "title": "Wise funding initiation versus receipt", "question": "Does a Wise transfer in incoming_payment_initiated establish received funding?", "record_url": "/varexis-index/records/wise-funding-initiation-versus-receipt.json", "record_sha256": "7514e1e02e36db3fa678824417b60066b4f6276a8b4891fec6e4deac613696a9", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_wise_funding_initiation_versus_receipt.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-FUNDING-INITIATION-VERSUS-RECEIPT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.wise.com/guides/product/send-money/tracking/transfer-statuses", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-WISE-QUOTE-RATE-EXPIRY-DISTINCTION-01-v1", "route_id": "agentic_reviewed_wise_quote_rate_expiry_distinction", "title": "Wise quote rate expiry distinction", "question": "Does an unexpired Wise quote guarantee the originally approved rate remains locked?", "record_url": "/varexis-index/records/wise-quote-rate-expiry-distinction.json", "record_sha256": "a6576bfce62770b287c6e360f48ba64b1a3477c3d3ebb5859c5b898e578c1cbc", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_wise_quote_rate_expiry_distinction.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-QUOTE-RATE-EXPIRY-DISTINCTION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.wise.com/guides/product/send-money/quotes/authenticated-quote", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-WISE-ORIGINATOR-REFERENCE-RESTRICTION-01-v1", "route_id": "agentic_reviewed_wise_originator_reference_restriction", "title": "Wise originator reference restriction", "question": "Can changing an originator reference safely resolve Wise's originator-not-allowed error?", "record_url": "/varexis-index/records/wise-originator-reference-restriction.json", "record_sha256": "447219ca9e946cb58c893b1fb9bae6b70bb94a7ed8e4f93157aa15d62303c473", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_wise_originator_reference_restriction.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-ORIGINATOR-REFERENCE-RESTRICTION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.wise.com/guides/developer/errors/transfers", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GOCARDLESS-SUBMITTED-CANCELLATION-BOUNDARY-01-v1", "route_id": "agentic_reviewed_gocardless_submitted_cancellation_boundary", "title": "GoCardless submitted cancellation boundary", "question": "Can a GoCardless payment still be cancelled after submission to the banking system?", "record_url": "/varexis-index/records/gocardless-submitted-cancellation-boundary.json", "record_sha256": "ca1611c75bac45e82378fe68e7f2f52e89d1f4ffd4199a51a18dd23daf714de5", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_gocardless_submitted_cancellation_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GOCARDLESS-SUBMITTED-CANCELLATION-BOUNDARY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://support.gocardless.com/hc/en-us/articles/213146225-Overview-of-payment-statuses", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GITHUB-AUDIT-STREAM-START-TIME-COVERAGE-01-v1", "route_id": "agentic_reviewed_github_audit_stream_start_time_coverage", "title": "GitHub audit stream start time coverage", "question": "Does enabling GitHub audit streaming backfill all earlier enterprise events?", "record_url": "/varexis-index/records/github-audit-stream-start-time-coverage.json", "record_sha256": "18524b7ad6c481becf2f55845aa33ff370423badcec4d05e404a25492fb1348a", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_github_audit_stream_start_time_coverage.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GITHUB-AUDIT-STREAM-START-TIME-COVERAGE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.github.com/en/enterprise-cloud%40latest/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-LOGEXPORT-UNSUPPORTED-TABLE-SUCCESS-01-v1", "route_id": "agentic_reviewed_azure_logexport_unsupported_table_success", "title": "Azure logexport unsupported table success", "question": "Does successful creation of an Azure data-export rule prove every selected table is exported?", "record_url": "/varexis-index/records/azure-logexport-unsupported-table-success.json", "record_sha256": "9ddda2d009406e58e5e947595dbaadc9d42186622b8cb272898ae2c89bb3b7fd", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_azure_logexport_unsupported_table_success.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-LOGEXPORT-UNSUPPORTED-TABLE-SUCCESS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-data-export", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GCP-TRANSPARENCY-CUSTOMER-IAM-ACCESS-EXCLUSION-01-v1", "route_id": "agentic_reviewed_gcp_transparency_customer_iam_access_exclusion", "title": "Google Cloud transparency customer IAM access exclusion", "question": "Does Access Transparency contain Google personnel activity authorised by the customer's own IAM policy?", "record_url": "/varexis-index/records/gcp-transparency-customer-iam-access-exclusion.json", "record_sha256": "677792aadc1c6a75baae22a8d5b8750c9d860bd1956262141702137e5eb715b2", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_gcp_transparency_customer_iam_access_exclusion.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-TRANSPARENCY-CUSTOMER-IAM-ACCESS-EXCLUSION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.cloud.google.com/assured-workloads/access-transparency/docs/exclusions", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-SQS-DEAD-LETTER-RETENTION-CLOCK-01-v1", "route_id": "agentic_reviewed_sqs_dead_letter_retention_clock", "title": "SQS dead letter retention clock", "question": "Does moving a message to an SQS dead-letter queue restart its retention clock?", "record_url": "/varexis-index/records/sqs-dead-letter-retention-clock.json", "record_sha256": "e536b68d96a70d1a2198f3535ee45e9bd0e5f7c70d6317e1b1d457f6b05a13ac", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_sqs_dead_letter_retention_clock.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-SQS-DEAD-LETTER-RETENTION-CLOCK-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/en_en/AWSSimpleQueueService/latest/SQSDeveloperGuide/setting-up-dead-letter-queue-retention.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-STEP-FUNCTIONS-SYNC-CANCELLATION-BEST-EFFORT-01-v1", "route_id": "agentic_reviewed_step_functions_sync_cancellation_best_effort", "title": "Step functions sync cancellation best effort", "question": "Does stopping a Step Functions workflow guarantee its synchronous service job stopped?", "record_url": "/varexis-index/records/step-functions-sync-cancellation-best-effort.json", "record_sha256": "1e76fbb1aaa5439c4c738acc0380267e2c581c90897dd84574df519a897029e3", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_step_functions_sync_cancellation_best_effort.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-STEP-FUNCTIONS-SYNC-CANCELLATION-BEST-EFFORT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/step-functions/latest/dg/connect-to-resource.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-EVENTBRIDGE-PUTEVENTS-PARTIAL-ENTRY-RESULT-01-v1", "route_id": "agentic_reviewed_eventbridge_putevents_partial_entry_result", "title": "EventBridge PutEvents partial entry result", "question": "Does an EventBridge PutEvents response establish that every entry was accepted?", "record_url": "/varexis-index/records/eventbridge-putevents-partial-entry-result.json", "record_sha256": "36d12dd5f0d710361930d57ac32089858a14219b4eb1fd9099b08a0a22668ad9", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_eventbridge_putevents_partial_entry_result.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-EVENTBRIDGE-PUTEVENTS-PARTIAL-ENTRY-RESULT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-putevents.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-EVENTBRIDGE-ARCHIVE-FRESHNESS-COVERAGE-01-v1", "route_id": "agentic_reviewed_eventbridge_archive_freshness_coverage", "title": "EventBridge archive freshness coverage", "question": "Can an immediate EventBridge archive count prove all recent events are available for replay?", "record_url": "/varexis-index/records/eventbridge-archive-freshness-coverage.json", "record_sha256": "c96d7775b37d51731e61179efe671e7a81e6cf48ceb6627957d16345f752b83a", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_eventbridge_archive_freshness_coverage.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-EVENTBRIDGE-ARCHIVE-FRESHNESS-COVERAGE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-archive.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-SAVINGSPLAN-NEGATION-GROUPING-01-v1", "route_id": "agentic_reviewed_aws_savingsplan_negation_grouping", "title": "AWS Savings Plan negation grouping", "question": "Must every SavingsPlanCoveredUsage row match exactly one SavingsPlanNegation row?", "record_url": "/varexis-index/records/aws-savingsplan-negation-grouping.json", "record_sha256": "410a0ff09327f3cdece4428a298bcb0910c6c546ce2f1a598774d89aac0a1482", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_aws_savingsplan_negation_grouping.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-SAVINGSPLAN-NEGATION-GROUPING-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/cur/latest/userguide/cur-sp.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-DATABRICKS-SHARED-SKU-ORIGIN-ATTRIBUTION-01-v1", "route_id": "agentic_reviewed_databricks_shared_sku_origin_attribution", "title": "Databricks shared SKU origin attribution", "question": "Can a Databricks SKU uniquely identify which product generated usage?", "record_url": "/varexis-index/records/databricks-shared-sku-origin-attribution.json", "record_sha256": "b5dfb1440d7afb36809f54b1569fb67671a7d890c938707cd37fdaceab84af8d", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_databricks_shared_sku_origin_attribution.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-DATABRICKS-SHARED-SKU-ORIGIN-ATTRIBUTION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.databricks.com/gcp/en/admin/system-tables/billing", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-COST-EXPORT-MISSING-ATTRIBUTES-01-v1", "route_id": "agentic_reviewed_azure_cost_export_missing_attributes", "title": "Azure cost export missing attributes", "question": "Should Azure cost rows with missing subscription attributes be rejected as malformed?", "record_url": "/varexis-index/records/azure-cost-export-missing-attributes.json", "record_sha256": "c3bda4bcea4b2a4aa74f7f17008b22035ec28fac1c1f53445f02a5059c7c9560", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_azure_cost_export_missing_attributes.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-COST-EXPORT-MISSING-ATTRIBUTES-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/azure/cost-management-billing/costs/tutorial-export-acm-data", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-TAG-REUSE-01-v1", "route_id": "agentic_reviewed_github_immutable_release_tag_reuse", "title": "GitHub immutable release tag reuse", "question": "Can deleting an immutable GitHub release restore reuse of its tag name?", "record_url": "/varexis-index/records/github-immutable-release-tag-reuse.json", "record_sha256": "c298e39584ae40a03316f134adfeb69d7c35794225ae0c3f68ac6109d7ecd311", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_github_immutable_release_tag_reuse.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-TAG-REUSE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-ACTION-SCOPE-01-v1", "route_id": "agentic_reviewed_npm_trusted_publisher_action_scope", "title": "Npm trusted publisher action scope", "question": "Does npm trusted publishing grant direct publication and dist-tag management together?", "record_url": "/varexis-index/records/npm-trusted-publisher-action-scope.json", "record_sha256": "3384b1553b54bee1ae481497eeccecf09cbba05b1f2f47a502ba67ff33e3825e", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_npm_trusted_publisher_action_scope.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-ACTION-SCOPE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.npmjs.com/trusted-publishers/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NPM-CALLING-WORKFLOW-IDENTITY-CHECK-01-v1", "route_id": "agentic_reviewed_npm_calling_workflow_identity_check", "title": "Npm calling workflow identity check", "question": "Which workflow identity must match npm trusted publishing when one workflow calls another?", "record_url": "/varexis-index/records/npm-calling-workflow-identity-check.json", "record_sha256": "fd3870ddfade1ec95a5d1a0dc27d33b1bc37fc61735d8961727dd3bef0572f34", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_npm_calling_workflow_identity_check.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NPM-CALLING-WORKFLOW-IDENTITY-CHECK-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.npmjs.com/trusted-publishers/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-THIRD-PARTY-CONTINGENCY-01-v1", "route_id": "agentic_reviewed_nist_ai_rmf_third_party_contingency", "title": "NIST AI RMF third party contingency", "question": "Does recording a third-party AI dependency satisfy the AI RMF contingency outcome?", "record_url": "/varexis-index/records/nist-ai-rmf-third-party-contingency.json", "record_sha256": "242dcf99d628ace2fcb70f3723380bdd02701762497ea4968ebc731073c96b1f", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_nist_ai_rmf_third_party_contingency.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-THIRD-PARTY-CONTINGENCY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-RESIDUAL-RISK-DOWNSTREAM-01-v1", "route_id": "agentic_reviewed_nist_ai_rmf_residual_risk_downstream", "title": "NIST AI RMF residual risk downstream", "question": "Can a risk review close without recording remaining risks to downstream users?", "record_url": "/varexis-index/records/nist-ai-rmf-residual-risk-downstream.json", "record_sha256": "4d3a65665b66dccda4d43b91b54b393b68a87ea7f117a1d9fe44033deff9e9e1", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_nist_ai_rmf_residual_risk_downstream.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-RESIDUAL-RISK-DOWNSTREAM-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-EMERGENCY-IDENTITY-DEPENDENCY-01-v1", "route_id": "agentic_reviewed_entra_emergency_identity_dependency", "title": "Entra emergency identity dependency", "question": "Can an eligible federated administrator be treated as a fully independent emergency-access path?", "record_url": "/varexis-index/records/entra-emergency-identity-dependency.json", "record_sha256": "9671b933b06ae171b93a15dca81eab21426ef85eb12bcfee81b39ab8ea49accb", "preview_url": "/varexis-index/publications/ice-06-tranche-63-v1/routes/agentic_reviewed_entra_emergency_identity_dependency.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-EMERGENCY-IDENTITY-DEPENDENCY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false } ] }