{ "schema": "varexis-index-publication-manifest/1", "version": "ice-06-tranche-64-v1", "baseline_commit": "5406a5cced32b6c06d3187e51f8f32a0d6e04086", "tranches": [ "public-safe-tranche-64" ], "record_count": 31, "route_count": 31, "complete": true, "next_page": null, "lookup": "Enumerate this complete manifest; compare record_id or route_id for exact equality and fetch its listed HTTPS JSON URL. Never infer a URL or fall back to related evidence for an unknown ID.", "boundary": "Catalogue additions are available free through the exact HTTP JSON links below. Enhanced natural-language discovery is not yet qualified for these records. They are outside MCP search, MCP preview and paid saved retrieval. No search qualification, executable capability or entitlement is added.", "records": [ { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-APPROVER-IDENTITY-RESTRICTIONS-01-v1", "route_id": "agentic_reviewed_entra_pim_approver_identity_restrictions", "title": "Entra PIM approver identity restrictions", "question": "Can an Entra PIM requester or service principal approve the activation request?", "record_url": "/varexis-index/records/entra-pim-approver-identity-restrictions.json", "record_sha256": "de5743a39d1a33a66d44a2130a9f5bf50193c0f7564fc96d6fb14ea6bede0b57", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_entra_pim_approver_identity_restrictions.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-APPROVER-IDENTITY-RESTRICTIONS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-approval-workflow", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-TICKET-REFERENCE-NOT-VALIDATION-01-v1", "route_id": "agentic_reviewed_entra_pim_ticket_reference_not_validation", "title": "Entra PIM ticket reference not validation", "question": "Does requiring a PIM ticket number validate the external approval ticket?", "record_url": "/varexis-index/records/entra-pim-ticket-reference-not-validation.json", "record_sha256": "8760df9ca0c2228d95109635a7037cd9ed4e5fe27a1f4fe5385824c124a3971d", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_entra_pim_ticket_reference_not_validation.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-TICKET-REFERENCE-NOT-VALIDATION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GCP-PAM-DELETE-ACTIVE-GRANT-PRECONDITION-01-v1", "route_id": "agentic_reviewed_gcp_pam_delete_active_grant_precondition", "title": "Google Cloud pam delete active grant precondition", "question": "Can deleting a PAM entitlement substitute for revoking its active grants?", "record_url": "/varexis-index/records/gcp-pam-delete-active-grant-precondition.json", "record_sha256": "2ee4726d4d01cf211e1a5df512d87573d3791375716190b4feee9a3cf705e0fb", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_gcp_pam_delete_active_grant_precondition.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-PAM-DELETE-ACTIVE-GRANT-PRECONDITION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.cloud.google.com/iam/docs/pam-view-update-delete-entitlements", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-AUTH-CONTEXT-FALLBACK-GAPS-01-v1", "route_id": "agentic_reviewed_entra_pim_auth_context_fallback_gaps", "title": "Entra PIM auth context fallback gaps", "question": "Does PIM's authentication-context fallback cover a disabled or report-only Conditional Access policy?", "record_url": "/varexis-index/records/entra-pim-auth-context-fallback-gaps.json", "record_sha256": "a21f6a2f98ffd23e5991e9a55a291741251495952abc010fbff197a05efca873", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_entra_pim_auth_context_fallback_gaps.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-AUTH-CONTEXT-FALLBACK-GAPS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-PIM-DEFAULT-APPROVER-LOCKOUT-01-v1", "route_id": "agentic_reviewed_entra_pim_default_approver_lockout", "title": "Entra PIM default approver lockout", "question": "Can requiring PIM approval leave no available default approver?", "record_url": "/varexis-index/records/entra-pim-default-approver-lockout.json", "record_sha256": "a514ca996db0616ae2293f28d0b1b98e2b9fa39cd08565cb314ece8615fcc62d", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_entra_pim_default_approver_lockout.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-PIM-DEFAULT-APPROVER-LOCKOUT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-MULTIPLE-HOLD-RELEASE-01-v1", "route_id": "agentic_reviewed_aws_backup_multiple_hold_release", "title": "AWS backup multiple hold release", "question": "Does releasing one AWS Backup legal hold make a recovery point deletable?", "record_url": "/varexis-index/records/aws-backup-multiple-hold-release.json", "record_sha256": "26d011e3657fc4c82c4f4ef9c2f2552d27dc10d4f14bbc7cf4217cd59db8dc4a", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_aws_backup_multiple_hold_release.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-MULTIPLE-HOLD-RELEASE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/legalhold.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-TEMPORARY-COPY-CLEANUP-01-v1", "route_id": "agentic_reviewed_aws_backup_temporary_copy_cleanup", "title": "AWS backup temporary copy cleanup", "question": "Does DELETE_AFTER_COPY mean a temporary recovery point disappears after the first copy finishes?", "record_url": "/varexis-index/records/aws-backup-temporary-copy-cleanup.json", "record_sha256": "ab13c2bb7041c266972bdff8708d9c7b66582b487725a6be41c089f2205c6aed", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_aws_backup_temporary_copy_cleanup.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-TEMPORARY-COPY-CLEANUP-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/lag-vault-primary-backup.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-BACKUP-RESTORE-SELECTION-TAG-BOUNDARY-01-v1", "route_id": "agentic_reviewed_aws_backup_restore_selection_tag_boundary", "title": "AWS backup restore selection tag boundary", "question": "Do restore-testing tag conditions ensure the restored recovery point carries those tags?", "record_url": "/varexis-index/records/aws-backup-restore-selection-tag-boundary.json", "record_sha256": "989502d5108d3d69a8aa9c6639f542adbed41e764b38876c88bafd5f9ca4a670", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_aws_backup_restore_selection_tag_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-BACKUP-RESTORE-SELECTION-TAG-BOUNDARY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-DYNAMODB-DELETED-TABLE-SYSTEM-BACKUP-01-v1", "route_id": "agentic_reviewed_dynamodb_deleted_table_system_backup", "title": "DynamoDB deleted table system backup", "question": "Does deleting a DynamoDB table with PITR enabled remove every recoverable table copy?", "record_url": "/varexis-index/records/dynamodb-deleted-table-system-backup.json", "record_sha256": "41196f53f8a9ca77f04e48bf42f5defca392e7d4bd1b1b008ad07429f3c223ae", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_dynamodb_deleted_table_system_backup.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-DYNAMODB-DELETED-TABLE-SYSTEM-BACKUP-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/PointInTimeRecovery_Howitworks.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-BACKUP-OPERATIONAL-SOFTDELETE-EXCLUSIONS-01-v1", "route_id": "agentic_reviewed_azure_backup_operational_softdelete_exclusions", "title": "Azure backup operational softdelete exclusions", "question": "Does Azure Backup soft delete protect all operational snapshots and log recovery points equally?", "record_url": "/varexis-index/records/azure-backup-operational-softdelete-exclusions.json", "record_sha256": "22b13c18f1cfb8f302195a6f501a8fb0290d4ba1eb7d1ea49af8f4c5fb5c79d2", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_azure_backup_operational_softdelete_exclusions.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-BACKUP-OPERATIONAL-SOFTDELETE-EXCLUSIONS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/azure/backup/backup-azure-enhanced-soft-delete-about", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ADYEN-REFUND-REMAINING-BALANCE-SCOPE-01-v1", "route_id": "agentic_reviewed_adyen_refund_remaining_balance_scope", "title": "Adyen refund remaining balance scope", "question": "Can an agent refund the original captured amount without reconciling earlier refunds and chargebacks?", "record_url": "/varexis-index/records/adyen-refund-remaining-balance-scope.json", "record_sha256": "16ed581bf034eff1ef08205ff7e42cb362e4bb9b6c1b12db1295ffeea09e1e88", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_adyen_refund_remaining_balance_scope.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ADYEN-REFUND-REMAINING-BALANCE-SCOPE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.adyen.com/online-payments/refund", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-WISE-CANCELLED-REFUNDED-STATE-DISTINCTION-01-v1", "route_id": "agentic_reviewed_wise_cancelled_refunded_state_distinction", "title": "Wise cancelled refunded state distinction", "question": "Does Wise cancelled identify the same financial outcome as funds_refunded?", "record_url": "/varexis-index/records/wise-cancelled-refunded-state-distinction.json", "record_sha256": "e9ffaed78cafd4a950b03abd9267a73dde4640374477dd3e3f1795c16d725f1c", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_wise_cancelled_refunded_state_distinction.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-CANCELLED-REFUNDED-STATE-DISTINCTION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.wise.com/guides/product/send-money/tracking/transfer-statuses", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-WISE-LOGICAL-TRANSFER-RETRY-IDENTITY-01-v1", "route_id": "agentic_reviewed_wise_logical_transfer_retry_identity", "title": "Wise logical transfer retry identity", "question": "Should an uncertain Wise transfer creation be retried with a new customerTransactionId?", "record_url": "/varexis-index/records/wise-logical-transfer-retry-identity.json", "record_sha256": "7a1c5183c784474b841f44c3ed482e8e95f453e7fe6afaad8bb1266639cc7683", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_wise_logical_transfer_retry_identity.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-WISE-LOGICAL-TRANSFER-RETRY-IDENTITY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.wise.com/guides/developer/errors/transfers", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GOCARDLESS-CONFIRMED-LATE-FAILURE-01-v1", "route_id": "agentic_reviewed_gocardless_confirmed_late_failure", "title": "GoCardless confirmed late failure", "question": "Does a GoCardless confirmed or paid-out payment prove an irreversible collection?", "record_url": "/varexis-index/records/gocardless-confirmed-late-failure.json", "record_sha256": "f710948919834c4eb60cd33593d7f3178ce34bcde4364f6663ebb9040832ffd3", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_gocardless_confirmed_late_failure.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GOCARDLESS-CONFIRMED-LATE-FAILURE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://support.gocardless.com/hc/en-us/articles/213146225-Overview-of-payment-statuses", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GOCARDLESS-PAYOUT-NET-COMPONENTS-01-v1", "route_id": "agentic_reviewed_gocardless_payout_net_components", "title": "GoCardless payout net components", "question": "Does a GoCardless payout amount identify which invoices were paid?", "record_url": "/varexis-index/records/gocardless-payout-net-components.json", "record_sha256": "4403215ad951949f3059e5cff1b1296ea7e4c6509079fd91401908cc12b5e200", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_gocardless_payout_net_components.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GOCARDLESS-PAYOUT-NET-COMPONENTS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.gocardless.com/docs/collect-payments/managing-payments/reconciling-payouts", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-LOGEXPORT-START-TIME-COVERAGE-01-v1", "route_id": "agentic_reviewed_azure_logexport_start_time_coverage", "title": "Azure logexport start time coverage", "question": "Does a new Log Analytics data-export rule include records already stored in the workspace?", "record_url": "/varexis-index/records/azure-logexport-start-time-coverage.json", "record_sha256": "7a2fe49ae865a23dbbc92ea8175f90149a7506e9a23f6b2d5f57311f03e167f9", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_azure_logexport_start_time_coverage.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-LOGEXPORT-START-TIME-COVERAGE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-data-export", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-LOGEXPORT-FAILURE-METRIC-INTERPRETATION-01-v1", "route_id": "agentic_reviewed_azure_logexport_failure_metric_interpretation", "title": "Azure logexport failure metric interpretation", "question": "Does the Azure Export Failures metric count permanently missing log records?", "record_url": "/varexis-index/records/azure-logexport-failure-metric-interpretation.json", "record_sha256": "b5554b76bf35504f9e29573ebc95123a0e386de709af747e4e3a351047088fde", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_azure_logexport_failure_metric_interpretation.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-LOGEXPORT-FAILURE-METRIC-INTERPRETATION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-data-export", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GCP-TRANSPARENCY-AUTOMATION-AND-NOTICE-EXCLUSIONS-01-v1", "route_id": "agentic_reviewed_gcp_transparency_automation_and_notice_exclusions", "title": "Google Cloud transparency automation and notice exclusions", "question": "Does an empty Access Transparency log rule out all Google access to customer content?", "record_url": "/varexis-index/records/gcp-transparency-automation-and-notice-exclusions.json", "record_sha256": "b36caa67a840d3f47a7c5540e7d26b5f500dafafbfeb6ac7d3e190658e56aa37", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_gcp_transparency_automation_and_notice_exclusions.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GCP-TRANSPARENCY-AUTOMATION-AND-NOTICE-EXCLUSIONS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.cloud.google.com/assured-workloads/access-transparency/docs/exclusions", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-STEP-FUNCTIONS-START-IDEMPOTENCY-STATE-01-v1", "route_id": "agentic_reviewed_step_functions_start_idempotency_state", "title": "Step functions start idempotency state", "question": "When can a Step Functions StartExecution retry return the original execution?", "record_url": "/varexis-index/records/step-functions-start-idempotency-state.json", "record_sha256": "3f6039343d056d71ff34c6b754f5035624b971fd0b96f865055124899f6f8d67", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_step_functions_start_idempotency_state.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-STEP-FUNCTIONS-START-IDEMPOTENCY-STATE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-STEP-FUNCTIONS-SYNC-EARLY-CALLBACK-BOUNDARY-01-v1", "route_id": "agentic_reviewed_step_functions_sync_early_callback_boundary", "title": "Step functions sync early callback boundary", "question": "Can a Step Functions .sync task finish before its service job completes?", "record_url": "/varexis-index/records/step-functions-sync-early-callback-boundary.json", "record_sha256": "5bc69621d0dc3503fc96a48eaf7ce0f1bf6733401a02f58c6ca57017a6238c88", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_step_functions_sync_early_callback_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-STEP-FUNCTIONS-SYNC-EARLY-CALLBACK-BOUNDARY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/step-functions/latest/dg/connect-to-resource.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-EVENTBRIDGE-MISSING-BUS-SUCCESS-RESPONSE-01-v1", "route_id": "agentic_reviewed_eventbridge_missing_bus_success_response", "title": "EventBridge missing bus success response", "question": "Can EventBridge return HTTP 200 while dropping an event sent to a nonexistent bus?", "record_url": "/varexis-index/records/eventbridge-missing-bus-success-response.json", "record_sha256": "92780d6c38ca69e417327a6e63df60a98929ab1cd0474205234b39913ee7455f", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_eventbridge_missing_bus_success_response.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-EVENTBRIDGE-MISSING-BUS-SUCCESS-RESPONSE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-putevents.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AWS-CUR-RESOURCE-ID-ABSENCE-01-v1", "route_id": "agentic_reviewed_aws_cur_resource_id_absence", "title": "AWS CUR resource id absence", "question": "Does a blank AWS CUR ResourceId mean the cost row is invalid?", "record_url": "/varexis-index/records/aws-cur-resource-id-absence.json", "record_sha256": "f9308cdb6a6cb83438c4b35dbccfe436f1bdfe341f06eddb2a2532687d78bc08", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_aws_cur_resource_id_absence.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AWS-CUR-RESOURCE-ID-ABSENCE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.aws.amazon.com/cur/latest/userguide/Lineitem-columns.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-DATABRICKS-USAGE-RETRACTION-RESTATEMENT-01-v1", "route_id": "agentic_reviewed_databricks_usage_retraction_restatement", "title": "Databricks usage retraction restatement", "question": "How should Databricks billing usage corrections affect a cost total?", "record_url": "/varexis-index/records/databricks-usage-retraction-restatement.json", "record_sha256": "939462e7acd4599b4fc03ec7ef221fbab52e7af4ef25abf6048dd10292d3882d", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_databricks_usage_retraction_restatement.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-DATABRICKS-USAGE-RETRACTION-RESTATEMENT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.databricks.com/gcp/en/admin/system-tables/billing", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-SNOWFLAKE-DAILY-CLOUD-SERVICES-ADJUSTMENT-01-v1", "route_id": "agentic_reviewed_snowflake_daily_cloud_services_adjustment", "title": "Snowflake daily cloud services adjustment", "question": "Can Snowflake's cloud-services adjustment be calculated from one monthly percentage?", "record_url": "/varexis-index/records/snowflake-daily-cloud-services-adjustment.json", "record_sha256": "68fe864d5ec104a033249c6b872b21a3379586396f530834bb1060248b477855", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_snowflake_daily_cloud_services_adjustment.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-SNOWFLAKE-DAILY-CLOUD-SERVICES-ADJUSTMENT-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.snowflake.com/en/user-guide/cost-understanding-compute", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-AZURE-RESERVATION-RECOMMENDATION-HISTORY-01-v1", "route_id": "agentic_reviewed_azure_reservation_recommendation_history", "title": "Azure reservation recommendation history", "question": "Can an Azure reservation recommendation export reconstruct a past purchasing recommendation?", "record_url": "/varexis-index/records/azure-reservation-recommendation-history.json", "record_sha256": "39f5acdba4538f0cf7f2eabd78eb70549a3dafd597f51aa6b9b54d6958ea19cc", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_azure_reservation_recommendation_history.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-AZURE-RESERVATION-RECOMMENDATION-HISTORY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/azure/cost-management-billing/costs/tutorial-export-acm-data", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-ASSET-COMPLETENESS-01-v1", "route_id": "agentic_reviewed_github_immutable_release_asset_completeness", "title": "GitHub immutable release asset completeness", "question": "Does GitHub release immutability establish that all required deliverable assets were included?", "record_url": "/varexis-index/records/github-immutable-release-asset-completeness.json", "record_sha256": "35fde0e204becd68846b57a4834b34b1ab7b98780845bf3ef965ccaab38e86b7", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_github_immutable_release_asset_completeness.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-GITHUB-IMMUTABLE-RELEASE-ASSET-COMPLETENESS-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-FIRST-USE-EXPIRY-01-v1", "route_id": "agentic_reviewed_npm_trusted_publisher_first_use_expiry", "title": "Npm trusted publisher first use expiry", "question": "Can an unused npm trusted-publisher configuration remain ready indefinitely?", "record_url": "/varexis-index/records/npm-trusted-publisher-first-use-expiry.json", "record_sha256": "98ea520782bbd0d27d060e7f1ec2ebbcae53b015617385adb99aa430b5a427f3", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_npm_trusted_publisher_first_use_expiry.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NPM-TRUSTED-PUBLISHER-FIRST-USE-EXPIRY-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.npmjs.com/trusted-publishers/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-PYPI-PENDING-PUBLISHER-NAME-RESERVATION-01-v1", "route_id": "agentic_reviewed_pypi_pending_publisher_name_reservation", "title": "PyPI pending publisher name reservation", "question": "Does a pending PyPI trusted publisher reserve the proposed project name?", "record_url": "/varexis-index/records/pypi-pending-publisher-name-reservation.json", "record_sha256": "2757ef41535530dbe6fe0bd31572b2744fc25148b42c92bfc72fdff4ef6e04a8", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_pypi_pending_publisher_name_reservation.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-PYPI-PENDING-PUBLISHER-NAME-RESERVATION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://docs.pypi.org/trusted-publishers/creating-a-project-through-oidc/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-SAFE-DECOMMISSIONING-01-v1", "route_id": "agentic_reviewed_nist_ai_rmf_safe_decommissioning", "title": "NIST AI RMF safe decommissioning", "question": "Does removing an AI service from inventory establish a safely managed retirement?", "record_url": "/varexis-index/records/nist-ai-rmf-safe-decommissioning.json", "record_sha256": "4a251bf236e333653f01e94270df947ea86c05e3dfa88bbcecd5097636567998", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_nist_ai_rmf_safe_decommissioning.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-SAFE-DECOMMISSIONING-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-NIST-AI-RMF-ASSESSOR-INDEPENDENCE-01-v1", "route_id": "agentic_reviewed_nist_ai_rmf_assessor_independence", "title": "NIST AI RMF assessor independence", "question": "Does a developer-only assessment establish the AI RMF independent-assessment outcome?", "record_url": "/varexis-index/records/nist-ai-rmf-assessor-independence.json", "record_sha256": "8053ff305e3079d6fe397e903aa14dece4f5bceb03141954cba0dcab82fe225a", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_nist_ai_rmf_assessor_independence.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-NIST-AI-RMF-ASSESSOR-INDEPENDENCE-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE06-ENTRA-EMERGENCY-CONDITIONAL-ACCESS-EXCLUSION-01-v1", "route_id": "agentic_reviewed_entra_emergency_conditional_access_exclusion", "title": "Entra emergency conditional access exclusion", "question": "Must an Entra emergency-access account be excluded from report-only Conditional Access policies?", "record_url": "/varexis-index/records/entra-emergency-conditional-access-exclusion.json", "record_sha256": "a75356a822e113f1b7537fd43410fd4d84853ae72c09e8993a6dcc27a6dcee91", "preview_url": "/varexis-index/publications/ice-06-tranche-64-v1/routes/agentic_reviewed_entra_emergency_conditional_access_exclusion.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE06-ENTRA-EMERGENCY-CONDITIONAL-ACCESS-EXCLUSION-01-v1", "reviewed_on": "2026-10-29", "source_url": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false } ] }