{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-PROCUREMENT-AZURE-BLOB-RECOVERY-01-v1",
  "record_kind": "external_reference",
  "title": "Azure Blob soft delete: Recovery scope and exceptions",
  "system": "Azure Blob soft delete",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does blob soft delete also recover a deleted container or storage account?",
  "near_questions": [
    "Does blob soft delete recover a deleted container?",
    "Can blob protection recover a deleted storage account?",
    "Are metadata changes covered by soft delete?",
    "Do overwrite protections differ with hierarchical namespaces?",
    "Can permanent deletion override a recovery window?",
    "What evidence shows protection was enabled before the loss?",
    "Does an empty listing prove a soft-deleted blob is unrecoverable?",
    "Which resource level should a recovery review identify?",
    "What should procurement ask about storage recovery exceptions?",
    "Can an agent promise restoration from one enabled setting?",
    "Can I save the documented Azure recovery boundary?",
    "When should storage protection assumptions be retested?"
  ],
  "supported_claims": [
    {
      "claim": "No. Microsoft separates blob and container protection, and blob soft delete does not cover account deletion. The documentation also lists overwrite, metadata and permanent-delete limits. Review the exact deletion scenario and enabled protection before promising recovery.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "No. Microsoft separates blob and container protection, and blob soft delete does not cover account deletion. The documentation also lists overwrite, metadata and permanent-delete limits. Review the exact deletion scenario and enabled protection before promising recovery.",
  "related_record_ids": [
    "VXI-EXT-PROCUREMENT-DROPBOX-RECOVERY-01-v1",
    "VXI-EXT-PROCUREMENT-BOX-RETENTION-DISPOSITION-01-v1",
    "VXI-EXT-PROCUREMENT-S3-OBJECT-LOCK-VERSIONS-01-v1",
    "VXI-EXT-PROCUREMENT-R2-JURISDICTION-01-v1",
    "VXI-EXT-PROCUREMENT-NEON-RESTORE-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Azure Blob soft delete recovery coverage",
    "source_url": "https://learn.microsoft.com/en-us/azure/storage/blobs/soft-delete-blob-overview",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-AZURE-BLOB-RECOVERY-01-v1",
    "candidate_record_sha256": "46677051ee41d310e10eb6bc6c2eb858ca07d7aba8f5ee8cbfe51dc14b3bbeb3",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "No. Microsoft separates blob and container protection, and blob soft delete does not cover account deletion. The documentation also lists overwrite, metadata and permanent-delete limits. Review the exact deletion scenario and enabled protection before promising recovery.",
    "required_buyer_context": "Storage namespace type, deleted resource level, enabled protection and deletion time.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "claim_to_check": "Blob soft delete protects every storage loss scenario.",
    "documented_statement": {
      "status": "documented",
      "statement": "No. Microsoft separates blob and container protection, and blob soft delete does not cover account deletion. The documentation also lists overwrite, metadata and permanent-delete limits. Review the exact deletion scenario and enabled protection before promising recovery.",
      "source_ids": [
        "azure-softdelete"
      ]
    },
    "buyer_evidence_required": [
      "Resource level and operation that caused loss",
      "Protection enabled before the event and applicable retention",
      "Relevant permanent-delete, overwrite and namespace settings"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Require scenario-specific protection evidence before a recovery assurance."
    },
    "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
    "evidence_sources": [
      {
        "source_id": "azure-softdelete",
        "url": "https://learn.microsoft.com/en-us/azure/storage/blobs/soft-delete-blob-overview",
        "final_url": "https://learn.microsoft.com/en-us/azure/storage/blobs/soft-delete-blob-overview",
        "title": "Azure Blob soft delete recovery coverage",
        "checked_on": "2026-10-14",
        "sha256": "0a5e2fcb96b8a923c36a5deabc55ce3cb0073e298d18f63c13e76542044583a8",
        "bytes": 81767
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
    "paid_value": {
      "decision_context": "Preserve the recovery-scope checklist for a storage supplier review.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck namespace, deletion controls and retention changes."
    }
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#azure-blob-softdelete-scope-evidence",
  "machine_readable_record": "/varexis-index/records/azure-blob-softdelete-scope-evidence.json"
}