{ "schema": "varexis-index-publication-manifest/1", "version": "ice-09-tranche-68-v1", "baseline_commit": "5406a5cced32b6c06d3187e51f8f32a0d6e04086", "tranches": [ "public-safe-tranche-68" ], "record_count": 38, "route_count": 38, "complete": true, "next_page": null, "lookup": "Enumerate this complete manifest; compare record_id or route_id for exact equality and fetch its listed HTTPS JSON URL. Never infer a URL or fall back to related evidence for an unknown ID.", "boundary": "Catalogue additions are available free through the exact HTTP JSON links below. Enhanced natural-language discovery is not yet qualified for these records. They are outside MCP search, MCP preview and paid saved retrieval. No search qualification, executable capability or entitlement is added.", "records": [ { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-BLUEPRINT-CREDENTIAL-CUSTODY-01-v1", "route_id": "agentic_reviewed_entra_agent_blueprint_credential_custody", "title": "Where must an Entra agent identity obtain its authentication credentials", "question": "Where must an Entra agent identity obtain its authentication credentials?", "record_url": "/varexis-index/records/entra-agent-blueprint-credential-custody.json", "record_sha256": "2316c7b9d1f05df28e7c698bf3cee88d329b090c52ad046eca08dbb606480e05", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_blueprint_credential_custody.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-BLUEPRINT-CREDENTIAL-CUSTODY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-identities?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-SINGLE-TENANT-BLUEPRINT-MULTITENANCY-01-v1", "route_id": "agentic_reviewed_entra_agent_single_tenant_blueprint_multitenancy", "title": "Can a multitenant Entra blueprint make one child identity valid across tenants", "question": "Can a multitenant Entra blueprint make one child identity valid across tenants?", "record_url": "/varexis-index/records/entra-agent-single-tenant-blueprint-multitenancy.json", "record_sha256": "27dee04159e57e961a2aaabfb23e893eed4b32298a91e052802e43d464882c5c", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_single_tenant_blueprint_multitenancy.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-SINGLE-TENANT-BLUEPRINT-MULTITENANCY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-identities?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-ACCOUNT-DISTINCT-ID-LINK-01-v1", "route_id": "agentic_reviewed_entra_agent_user_account_distinct_id_link", "title": "May an Entra agent user ID replace its agent identity ID in an audit", "question": "May an Entra agent user ID replace its agent identity ID in an audit?", "record_url": "/varexis-index/records/entra-agent-user-account-distinct-id-link.json", "record_sha256": "27c3d90967594fb335ac2256947a8fcfe3c19e9fa3ef091abff642cdf9f3fe3a", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_user_account_distinct_id_link.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-USER-ACCOUNT-DISTINCT-ID-LINK-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-identities?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-INHERITANCE-CONSENT-TWO-CONDITIONS-01-v1", "route_id": "agentic_reviewed_entra_agent_inheritance_consent_two_conditions", "title": "Does declaring an Entra resource inheritable grant its permissions to child agents", "question": "Does declaring an Entra resource inheritable grant its permissions to child agents?", "record_url": "/varexis-index/records/entra-agent-inheritance-consent-two-conditions.json", "record_sha256": "51cb38f097c5cdeeae76424df169b1bc21e52d76d91c4216b3ac7d9ada2b5395", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_inheritance_consent_two_conditions.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-INHERITANCE-CONSENT-TWO-CONDITIONS-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/concept-inheritable-permissions", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-CONSENT-STATIC-INVENTORY-GAP-01-v1", "route_id": "agentic_reviewed_entra_agent_dynamic_consent_static_inventory_gap", "title": "Can a blueprint's initial permission list describe all later inherited access", "question": "Can a blueprint's initial permission list describe all later inherited access?", "record_url": "/varexis-index/records/entra-agent-dynamic-consent-static-inventory-gap.json", "record_sha256": "c23dcf93ede285c72aa825c1bfcb61fb26d356918a2f0fb8c5c19c8d1b5b4dc5", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_dynamic_consent_static_inventory_gap.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-CONSENT-STATIC-INVENTORY-GAP-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/concept-inheritable-permissions", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-INHERITED-PERMISSIONS-TOKEN-OBSERVABILITY-01-v1", "route_id": "agentic_reviewed_entra_agent_inherited_permissions_token_observability", "title": "Can an Entra child-agent permissions listing establish complete inherited scope", "question": "Can an Entra child-agent permissions listing establish complete inherited scope?", "record_url": "/varexis-index/records/entra-agent-inherited-permissions-token-observability.json", "record_sha256": "51c53070dee172a010d486ef58f0818ed420a5367fb372d404780108bf08dad9", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_inherited_permissions_token_observability.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-INHERITED-PERMISSIONS-TOKEN-OBSERVABILITY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/concept-inheritable-permissions", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-SPONSOR-DISABLE-RESTORE-ASYMMETRY-01-v1", "route_id": "agentic_reviewed_entra_agent_sponsor_disable_restore_asymmetry", "title": "Can an Entra sponsor restore an agent after disabling it", "question": "Can an Entra sponsor restore an agent after disabling it?", "record_url": "/varexis-index/records/entra-agent-sponsor-disable-restore-asymmetry.json", "record_sha256": "5c978ddf9900b7800e31397473bfd493afdf6d75adfa5053f8e535199ca2807e", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_sponsor_disable_restore_asymmetry.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-SPONSOR-DISABLE-RESTORE-ASYMMETRY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-owners-sponsors-managers", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-SPONSOR-MEMBERSHIP-DELAY-01-v1", "route_id": "agentic_reviewed_entra_agent_dynamic_sponsor_membership_delay", "title": "Does a dynamic-group membership change immediately authorize agent sponsor actions", "question": "Does a dynamic-group membership change immediately authorize agent sponsor actions?", "record_url": "/varexis-index/records/entra-agent-dynamic-sponsor-membership-delay.json", "record_sha256": "a9be2107fe0703837e74204ad4ef12b13e939b3d527a3486cc43ff49ba9eaa8c", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_dynamic_sponsor_membership_delay.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-DYNAMIC-SPONSOR-MEMBERSHIP-DELAY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/manage-owners-sponsors-agents", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-APP-ROLE-PRINCIPAL-OBJECT-ID-01-v1", "route_id": "agentic_reviewed_entra_agent_app_role_principal_object_id", "title": "Which identifier receives an autonomous Entra agent app-role assignment", "question": "Can a blueprint client ID receive a child agent's resource app-role assignment?", "record_url": "/varexis-index/records/entra-agent-app-role-principal-object-id.json", "record_sha256": "fb1f9ab772c9d0ea4b41a176c992025a067b7df27af477013909e9a653ea1652", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_app_role_principal_object_id.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-APP-ROLE-PRINCIPAL-OBJECT-ID-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/autonomous-agent-authentication-authorization-flow?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-BLOCKED-HIGH-PRIVILEGE-GRANTS-01-v1", "route_id": "agentic_reviewed_entra_agent_blocked_high_privilege_grants", "title": "Can administrator consent override Agent ID high-privilege restrictions", "question": "Can administrator consent override Agent ID high-privilege restrictions?", "record_url": "/varexis-index/records/entra-agent-blocked-high-privilege-grants.json", "record_sha256": "74a093ff9daaedae732ec83b52a4663cb74de53ab14ccd9bf5c1da69c08e5142", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_blocked_high_privilege_grants.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-BLOCKED-HIGH-PRIVILEGE-GRANTS-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/authorization-agent-id?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-CONDITIONAL-ACCESS-SUBJECT-PATTERNS-01-v1", "route_id": "agentic_reviewed_entra_agent_conditional_access_subject_patterns", "title": "Does an Entra agent identity policy also cover its agent-user and delegated-user tokens", "question": "Does an Entra agent identity policy also cover its agent-user and delegated-user tokens?", "record_url": "/varexis-index/records/entra-agent-conditional-access-subject-patterns.json", "record_sha256": "4d5a36447274b320bbe68164d6d1e39b99958ed5d773265bc9742066f96d0420", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_conditional_access_subject_patterns.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-CONDITIONAL-ACCESS-SUBJECT-PATTERNS-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-API-KEY-CONDITIONAL-ACCESS-BYPASS-01-v1", "route_id": "agentic_reviewed_entra_agent_api_key_conditional_access_bypass", "title": "Does Entra Conditional Access govern an agent's direct API-key access", "question": "Does Entra Conditional Access govern an agent's direct API-key access?", "record_url": "/varexis-index/records/entra-agent-api-key-conditional-access-bypass.json", "record_sha256": "1f24bc7edc518b5c18ccb4b61aa8f6013aa55ced9a5eab2c396f2fb124d41364", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_api_key_conditional_access_bypass.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-API-KEY-CONDITIONAL-ACCESS-BYPASS-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-NO-PASSWORD-INTERACTIVE-IDENTITY-01-v1", "route_id": "agentic_reviewed_entra_agent_user_no_password_interactive_identity", "title": "Can an Entra agent user account operate as an ordinary password-based user", "question": "Can an Entra agent user account operate as an ordinary password-based user?", "record_url": "/varexis-index/records/entra-agent-user-no-password-interactive-identity.json", "record_sha256": "da321d84fa986367ab6fa748519c7ad04b5dae7f1de36a75830405b3f27f4a70", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_user_no_password_interactive_identity.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-USER-NO-PASSWORD-INTERACTIVE-IDENTITY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-users?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-BLUEPRINT-DISABLE-CREATION-EXISTING-AGENTS-01-v1", "route_id": "agentic_reviewed_entra_blueprint_disable_creation_existing_agents", "title": "Does disabling a blueprint affect only future agent provisioning", "question": "Does disabling a blueprint affect only future agent provisioning?", "record_url": "/varexis-index/records/entra-blueprint-disable-creation-existing-agents.json", "record_sha256": "573f59370cc071a3c8225e2ad47a2464f3777302560679b96f2a5c0b991c31d8", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_blueprint_disable_creation_existing_agents.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-BLUEPRINT-DISABLE-CREATION-EXISTING-AGENTS-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/manage-agent-identities-admin?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-BLUEPRINT-PRINCIPAL-PROVISIONING-AUDIT-IDENTITY-01-v1", "route_id": "agentic_reviewed_entra_blueprint_principal_provisioning_audit_identity", "title": "Whose identity appears when an Entra blueprint provisions an agent", "question": "Whose identity appears when an Entra blueprint provisions an agent?", "record_url": "/varexis-index/records/entra-blueprint-principal-provisioning-audit-identity.json", "record_sha256": "1de8757e80bac2d8126754c1c4dde622d88d5d29f90e68cb1d47378a09b616b9", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_blueprint_principal_provisioning_audit_identity.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-BLUEPRINT-PRINCIPAL-PROVISIONING-AUDIT-IDENTITY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/agent-blueprint?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-BLUEPRINT-FEDERATED-CREDENTIAL-ADMIN-BOUNDARY-01-v1", "route_id": "agentic_reviewed_entra_blueprint_federated_credential_admin_boundary", "title": "Do Agent ID Developer and Administrator permit the same credential changes", "question": "Do Agent ID Developer and Administrator permit the same credential changes?", "record_url": "/varexis-index/records/entra-blueprint-federated-credential-admin-boundary.json", "record_sha256": "a65befaadde9862dbe551e569f7afe866977baa6322914306e61c4b8902af57a", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_blueprint_federated_credential_admin_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-BLUEPRINT-FEDERATED-CREDENTIAL-ADMIN-BOUNDARY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/create-blueprint?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-CONSENT-CALLBACK-ACTIVE-USER-BINDING-01-v1", "route_id": "agentic_reviewed_agentcore_consent_callback_active_user_binding", "title": "Can an AgentCore callback accept consent from anyone opening its URL", "question": "Can an AgentCore callback accept consent from anyone opening its URL?", "record_url": "/varexis-index/records/agentcore-consent-callback-active-user-binding.json", "record_sha256": "2613a3933f3c651339c79d1c8deb5d1ba44675cdc90cf0b435a427d94e435219", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_consent_callback_active_user_binding.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-CONSENT-CALLBACK-ACTIVE-USER-BINDING-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/oauth2-authorization-url-session-binding.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-VAULT-TOKEN-PROVIDER-REVOCATION-RECOVERY-01-v1", "route_id": "agentic_reviewed_agentcore_vault_token_provider_revocation_recovery", "title": "Does an AgentCore vault token prove the provider still accepts it", "question": "Does an AgentCore vault token prove the provider still accepts it?", "record_url": "/varexis-index/records/agentcore-vault-token-provider-revocation-recovery.json", "record_sha256": "db825b076b07b929972fc898c450e5e75f3f5d53285d3a382421d44ce02d4420", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_vault_token_provider_revocation_recovery.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-VAULT-TOKEN-PROVIDER-REVOCATION-RECOVERY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity-authentication.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-PROVIDER-ACCESS-IAM-NO-EXTRA-BINDING-01-v1", "route_id": "agentic_reviewed_agentcore_provider_access_iam_no_extra_binding", "title": "Does an AgentCore workload identity automatically isolate its credential provider", "question": "Does an AgentCore workload identity automatically isolate its credential provider?", "record_url": "/varexis-index/records/agentcore-provider-access-iam-no-extra-binding.json", "record_sha256": "a3869146bfc9afbd98e7db4549e2fa4a2f2300100790c0d3c1f5e13837acbac3", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_provider_access_iam_no_extra_binding.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-PROVIDER-ACCESS-IAM-NO-EXTRA-BINDING-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/scope-credential-provider-access.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-OBO-ACTOR-TOKEN-CONFIGURED-EVIDENCE-01-v1", "route_id": "agentic_reviewed_agentcore_obo_actor_token_configured_evidence", "title": "Does AgentCore OBO always transmit the same actor evidence", "question": "Does AgentCore OBO always transmit the same actor evidence?", "record_url": "/varexis-index/records/agentcore-obo-actor-token-configured-evidence.json", "record_sha256": "893cab75eb9550ad76a4b6c2390ee7cd85d5ff896b308912761802ac2bc18372", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_obo_actor_token_configured_evidence.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-OBO-ACTOR-TOKEN-CONFIGURED-EVIDENCE-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/on-behalf-of-token-exchange.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-SIGV4-USER-ID-HEADER-TRUST-BOUNDARY-01-v1", "route_id": "agentic_reviewed_agentcore_sigv4_user_id_header_trust_boundary", "title": "Is an AgentCore user-ID header equivalent to a validated user JWT", "question": "Is an AgentCore user-ID header equivalent to a validated user JWT?", "record_url": "/varexis-index/records/agentcore-sigv4-user-id-header-trust-boundary.json", "record_sha256": "01d0c6dd3a0d5c3a2a338ac509bb563bb3418e81feb0b818caf187672a61ce1f", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_sigv4_user_id_header_trust_boundary.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-SIGV4-USER-ID-HEADER-TRUST-BOUNDARY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-oauth.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-AGENTCORE-OBO-PROVIDER-GRANT-MODE-COMPATIBILITY-01-v1", "route_id": "agentic_reviewed_agentcore_obo_provider_grant_mode_compatibility", "title": "Can AgentCore use one OBO wire format for every identity provider", "question": "Can AgentCore use one OBO wire format for every identity provider?", "record_url": "/varexis-index/records/agentcore-obo-provider-grant-mode-compatibility.json", "record_sha256": "6f324086add64fc89e515623d904603b3f66bd2f8cd34bc9c137cbc859e34683", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_agentcore_obo_provider_grant_mode_compatibility.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-AGENTCORE-OBO-PROVIDER-GRANT-MODE-COMPATIBILITY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/on-behalf-of-token-exchange.html", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-ID-JAG-NOT-RESOURCE-ACCESS-TOKEN-01-v1", "route_id": "agentic_reviewed_mcp_id_jag_not_resource_access_token", "title": "Can an enterprise ID-JAG directly serve as an MCP bearer access token", "question": "Can an enterprise ID-JAG directly serve as an MCP bearer access token?", "record_url": "/varexis-index/records/mcp-id-jag-not-resource-access-token.json", "record_sha256": "4b43c706d952462ef74ea7823d2fe5c4722022180a07f1901c638324bba27987", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_id_jag_not_resource_access_token.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-ID-JAG-NOT-RESOURCE-ACCESS-TOKEN-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://raw.githubusercontent.com/modelcontextprotocol/ext-auth/15ca394e00a66434520b9ade26294999295a43ae/specification/stable/enterprise-managed-authorization/2026-07-28/enterprise-managed-authorization.mdx", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-ID-JAG-AUDIENCE-RESOURCE-SEPARATION-01-v1", "route_id": "agentic_reviewed_mcp_id_jag_audience_resource_separation", "title": "Which audience and resource identify an MCP enterprise grant", "question": "Which audience and resource identify an MCP enterprise grant?", "record_url": "/varexis-index/records/mcp-id-jag-audience-resource-separation.json", "record_sha256": "09aa07948243aa237d4decafc684c4f9bfa14bb815706b3ec872a17d7e5d6ba2", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_id_jag_audience_resource_separation.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-ID-JAG-AUDIENCE-RESOURCE-SEPARATION-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://raw.githubusercontent.com/modelcontextprotocol/ext-auth/15ca394e00a66434520b9ade26294999295a43ae/specification/stable/enterprise-managed-authorization/2026-07-28/enterprise-managed-authorization.mdx", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-CIMD-DOCUMENT-REDIRECT-BINDING-01-v1", "route_id": "agentic_reviewed_mcp_cimd_document_redirect_binding", "title": "Does fetching MCP client metadata establish an acceptable redirect", "question": "Does fetching MCP client metadata establish an acceptable redirect?", "record_url": "/varexis-index/records/mcp-cimd-document-redirect-binding.json", "record_sha256": "7f7b414aba3cad5d1abef1aa4a2c4b2550f67ff6b74fa1c8795426cd4b3b759c", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_cimd_document_redirect_binding.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-CIMD-DOCUMENT-REDIRECT-BINDING-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/client-registration.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-MULTIPLE-ISSUERS-SEPARATE-REGISTRATION-STATE-01-v1", "route_id": "agentic_reviewed_mcp_multiple_issuers_separate_registration_state", "title": "Can MCP credentials carry over to another advertised authorization server", "question": "Can MCP credentials carry over to another advertised authorization server?", "record_url": "/varexis-index/records/mcp-multiple-issuers-separate-registration-state.json", "record_sha256": "3ebbcd3d544c31afb8007b96802df33d3ea1bb05e34b907b69f38dfac25910a0", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_multiple_issuers_separate_registration_state.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-MULTIPLE-ISSUERS-SEPARATE-REGISTRATION-STATE-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/authorization-server-discovery.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-SCOPE-CHALLENGE-VERSUS-ADVERTISED-SCOPES-01-v1", "route_id": "agentic_reviewed_mcp_scope_challenge_versus_advertised_scopes", "title": "Must an MCP scope challenge be a subset of advertised scopes", "question": "Must an MCP scope challenge be a subset of advertised scopes?", "record_url": "/varexis-index/records/mcp-scope-challenge-versus-advertised-scopes.json", "record_sha256": "209b8084db47e817ba82d6f9f85eed6dd0d0740300ec9fa8f2fa6333f109f6f9", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_scope_challenge_versus_advertised_scopes.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-SCOPE-CHALLENGE-VERSUS-ADVERTISED-SCOPES-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-ISSUER-PATH-METADATA-DISCOVERY-ORDER-01-v1", "route_id": "agentic_reviewed_mcp_issuer_path_metadata_discovery_order", "title": "Can MCP assume authorization metadata exists only at the domain root", "question": "Can MCP assume authorization metadata exists only at the domain root?", "record_url": "/varexis-index/records/mcp-issuer-path-metadata-discovery-order.json", "record_sha256": "457000dbe0e9e029cb562907fdbdd8e59c02f09c378eb07f60f008fbbdeec6af", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_issuer_path_metadata_discovery_order.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-ISSUER-PATH-METADATA-DISCOVERY-ORDER-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/authorization-server-discovery.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-CLIENT-CREDENTIALS-OUT-OF-BAND-REGISTRATION-01-v1", "route_id": "agentic_reviewed_mcp_client_credentials_out_of_band_registration", "title": "Does the MCP client-credentials extension use dynamic registration", "question": "Does the MCP client-credentials extension use dynamic registration?", "record_url": "/varexis-index/records/mcp-client-credentials-out-of-band-registration.json", "record_sha256": "d0f44d4da0f3c63c9386e1f40c24d7869e56bf37f260aed89aae5667e3e4cd0d", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_client_credentials_out_of_band_registration.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-CLIENT-CREDENTIALS-OUT-OF-BAND-REGISTRATION-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://raw.githubusercontent.com/modelcontextprotocol/ext-auth/15ca394e00a66434520b9ade26294999295a43ae/specification/stable/oauth-client-credentials/2026-07-28/oauth-client-credentials.mdx", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-MCP-CLIENT-ASSERTION-AUTHENTICATION-GRANT-DISTINCTION-01-v1", "route_id": "agentic_reviewed_mcp_client_assertion_authentication_grant_distinction", "title": "Is the MCP client-authentication JWT itself the authorization grant", "question": "Is the MCP client-authentication JWT itself the authorization grant?", "record_url": "/varexis-index/records/mcp-client-assertion-authentication-grant-distinction.json", "record_sha256": "5d0ff037090a03c9295bf412ae35617357e7546bec0f857630b4696d721c30ed", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_mcp_client_assertion_authentication_grant_distinction.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-MCP-CLIENT-ASSERTION-AUTHENTICATION-GRANT-DISTINCTION-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://raw.githubusercontent.com/modelcontextprotocol/ext-auth/15ca394e00a66434520b9ade26294999295a43ae/specification/stable/oauth-client-credentials/2026-07-28/oauth-client-credentials.mdx", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-CROSS-PROVIDER-SUBJECT-COLLISION-01-v1", "route_id": "agentic_reviewed_gcp_federation_cross_provider_subject_collision", "title": "Can two providers in one workload pool map different identities to one principal", "question": "Can two providers in one workload pool map different identities to one principal?", "record_url": "/varexis-index/records/gcp-federation-cross-provider-subject-collision.json", "record_sha256": "fc97657512596c5031b45e21e5405db31b8f277d1305ace2a5f0a42d73e9df6c", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_gcp_federation_cross_provider_subject_collision.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-GCP-FEDERATION-CROSS-PROVIDER-SUBJECT-COLLISION-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.cloud.google.com/iam/docs/best-practices-for-using-workload-identity-federation", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-MUTABLE-SUBJECT-ACCESS-CONTINUITY-01-v1", "route_id": "agentic_reviewed_gcp_federation_mutable_subject_access_continuity", "title": "Can user-editable attributes safely anchor workload federation access", "question": "Can user-editable attributes safely anchor workload federation access?", "record_url": "/varexis-index/records/gcp-federation-mutable-subject-access-continuity.json", "record_sha256": "374cf09470c2cd1962c9889b3fe864e6fdd9ac8ab518a53241cb1a2dc4af5889", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_gcp_federation_mutable_subject_access_continuity.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-GCP-FEDERATION-MUTABLE-SUBJECT-ACCESS-CONTINUITY-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.cloud.google.com/iam/docs/best-practices-for-using-workload-identity-federation", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-MAPPING-CHANGE-EFFECTIVE-PRINCIPAL-01-v1", "route_id": "agentic_reviewed_gcp_federation_mapping_change_effective_principal", "title": "Can changing federation mappings alter access without editing IAM bindings", "question": "Can changing federation mappings alter access without editing IAM bindings?", "record_url": "/varexis-index/records/gcp-federation-mapping-change-effective-principal.json", "record_sha256": "a6ceeb000990e9581e41391aa45d3ce7eba9bd8fdd5c715d9a46b3ec41c1561a", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_gcp_federation_mapping_change_effective_principal.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-GCP-FEDERATION-MAPPING-CHANGE-EFFECTIVE-PRINCIPAL-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.cloud.google.com/iam/docs/best-practices-for-using-workload-identity-federation", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-GCP-FEDERATION-REUSABLE-SUBJECT-OFFBOARDING-RISK-01-v1", "route_id": "agentic_reviewed_gcp_federation_reusable_subject_offboarding_risk", "title": "Does account deletion retire a federation binding to a reusable name", "question": "Does account deletion retire a federation binding to a reusable name?", "record_url": "/varexis-index/records/gcp-federation-reusable-subject-offboarding-risk.json", "record_sha256": "5962f623f174ca3a0479cd33d38cdbe497c0de4b9e6a1a1e10c37147f53e21f8", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_gcp_federation_reusable_subject_offboarding_risk.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-GCP-FEDERATION-REUSABLE-SUBJECT-OFFBOARDING-RISK-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://docs.cloud.google.com/iam/docs/best-practices-for-using-workload-identity-federation", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-CLAUDE-SDK-DENY-RULE-HOOK-ALLOW-PRECEDENCE-01-v1", "route_id": "agentic_reviewed_claude_sdk_deny_rule_hook_allow_precedence", "title": "Can a Claude SDK hook allow override a matching deny rule", "question": "Can a Claude SDK hook allow override a matching deny rule?", "record_url": "/varexis-index/records/claude-sdk-deny-rule-hook-allow-precedence.json", "record_sha256": "0b39d8f24f7c60e16c46426735de48707afbc3b4ef854d6088a2573fa69971e8", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_claude_sdk_deny_rule_hook_allow_precedence.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-CLAUDE-SDK-DENY-RULE-HOOK-ALLOW-PRECEDENCE-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://code.claude.com/docs/en/agent-sdk/permissions.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-CLAUDE-SDK-SUBAGENT-PERMISSION-MODE-INHERITANCE-01-v1", "route_id": "agentic_reviewed_claude_sdk_subagent_permission_mode_inheritance", "title": "Can a Claude SDK subagent independently weaken its parent permission mode", "question": "Can a Claude SDK subagent independently weaken its parent permission mode?", "record_url": "/varexis-index/records/claude-sdk-subagent-permission-mode-inheritance.json", "record_sha256": "a081a5ea69a83f3e1aa0fb64cece25c0fe61f6b8b68fb4b077b10ffa43ec2be4", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_claude_sdk_subagent_permission_mode_inheritance.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-CLAUDE-SDK-SUBAGENT-PERMISSION-MODE-INHERITANCE-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://code.claude.com/docs/en/agent-sdk/permissions.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-CLAUDE-SDK-CANUSETOOL-SHADOWED-APPROVAL-PATH-01-v1", "route_id": "agentic_reviewed_claude_sdk_canusetool_shadowed_approval_path", "title": "Does a canUseTool callback review every Claude SDK tool call", "question": "Does a canUseTool callback review every Claude SDK tool call?", "record_url": "/varexis-index/records/claude-sdk-canusetool-shadowed-approval-path.json", "record_sha256": "a68a9d2a59b84286d08a57ce51e3593f2a85242746af8f89f342a9fe99b21774", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_claude_sdk_canusetool_shadowed_approval_path.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-CLAUDE-SDK-CANUSETOOL-SHADOWED-APPROVAL-PATH-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://code.claude.com/docs/en/agent-sdk/permissions.md", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false }, { "record_id": "VXI-EXT-ICE09-ENTRA-AGENT-USER-CREATION-SEPARATE-RESOURCE-CONSENT-01-v1", "route_id": "agentic_reviewed_entra_agent_user_creation_separate_resource_consent", "title": "Entra agent user creation and separate resource consent", "question": "Does creating an Entra agent user authorize its agent identity to read a mailbox?", "record_url": "/varexis-index/records/entra-agent-user-creation-separate-resource-consent.json", "record_sha256": "4db99ca7019c2d55e607bb7990971bc552117863886a09b01b220994d761a65a", "preview_url": "/varexis-index/publications/ice-09-tranche-68-v1/routes/agentic_reviewed_entra_agent_user_creation_separate_resource_consent.json", "review_url": "/varexis-index/vendor-evidence.html#VXI-EXT-ICE09-ENTRA-AGENT-USER-CREATION-SEPARATE-RESOURCE-CONSENT-01-v1", "reviewed_on": "2026-10-30", "source_url": "https://learn.microsoft.com/en-us/entra/agent-id/autonomous-agent-authentication-authorization-flow?view=entra-agent-id", "payment_required": false, "purchase_url": null, "access": "exact_http_only", "mcp_available": false, "natural_language_search_qualified": false } ] }