{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-16T07:59:18.009Z",
  "record_id": "VXI-EXT-TOOL-TRUST-DREMIO-01-v1",
  "record_kind": "external_reference",
  "title": "Dremio MCP: Deployment mode and mock-result limits",
  "system": "Dremio MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does a successful Dremio MCP demonstration prove access to real project data?",
  "near_questions": [
    "Can Dremio MCP run with no real project connection?",
    "Does mock mode preserve real tool schemas?",
    "Are placeholder responses evidence of data access?",
    "Which server modes expose system metrics?",
    "Can view creation be enabled?",
    "Does the hosted endpoint use the project region?",
    "Does a self-hosted token reach every API path?",
    "Which project is selected?",
    "Is the open-source server covered by standard support?",
    "What should a buyer test outside mock mode?",
    "Does OAuth completion establish a successful query?",
    "Can I preserve the Dremio deployment review?"
  ],
  "supported_claims": [
    {
      "claim": "The guide distinguishes hosted OAuth connections from self-hosted token configuration. Self-hosted modes expose data exploration, introspection or metrics, with optional view creation. Mock mode preserves tool names and schemas but returns placeholders; a successful mock call therefore does not validate data access.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The guide distinguishes hosted OAuth connections from self-hosted token configuration. Self-hosted modes expose data exploration, introspection or metrics, with optional view creation. Mock mode preserves tool names and schemas but returns placeholders; a successful mock call therefore does not validate data access.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Dremio Cloud MCP connection guide",
    "source_url": "https://docs.dremio.com/dremio-cloud/developer/mcp-server",
    "checked_on": "2026-10-16",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-DREMIO-01-v1",
    "candidate_record_sha256": "25604068a4edf50ec242cc9fb8e0cd2cd713bef596ae5235c504689730c22982",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The guide distinguishes hosted OAuth connections from self-hosted token configuration. Self-hosted modes expose data exploration, introspection or metrics, with optional view creation. Mock mode preserves tool names and schemas but returns placeholders; a successful mock call therefore does not validate data access.",
    "required_buyer_context": "Hosted or self-hosted variant, region, project, real/mock mode, identity and enabled capabilities.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Dremio MCP",
      "variant": "Hosted Cloud endpoint and separately configured self-hosted server"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-16",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Dremio publishes the service and open-source server.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Explore project data, system state or metrics.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Tables, query results and configured diagnostic sources.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Optional self-hosted configuration permits view creation.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Hosted OAuth or self-hosted personal access token.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Project access, chosen mode and optional capabilities.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Results reach the client; optional metrics add another source.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Mock success, wrong project and client incompatibility can mislead.",
        "source_ids": [
          "dremio"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer mode, real data connection and effective permissions are unknown.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Do not present mock responses as production evidence.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "dremio",
        "url": "https://docs.dremio.com/dremio-cloud/developer/mcp-server",
        "final_url": "https://docs.dremio.com/dremio-cloud/ai-integration/mcp-server/",
        "title": "Dremio Cloud MCP connection guide",
        "checked_on": "2026-10-16",
        "sha256": "e599de083fa671aff9abf814a9f35051198e2c6c3c7fee49157c692f312ca0af",
        "bytes": 103919
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save which integration evidence came from a real project versus a client-only demonstration.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Deployment modes, write options, project access and support policy."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-16",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#dremio-mcp-variant-mock-evidence",
  "machine_readable_record": "/varexis-index/records/dremio-mcp-variant-mock-evidence.json"
}