{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T20:21:57.226Z",
  "record_id": "VXI-EXT-TOOL-TRUST-PULUMI-01-v1",
  "record_kind": "external_reference",
  "title": "Pulumi MCP: Organisation selection and Neo actions",
  "system": "Pulumi",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can a Pulumi inventory question start paid infrastructure work?",
  "near_questions": [
    "Can an inventory assistant start paid cloud work?",
    "Does a Pulumi read role prevent every Neo task?",
    "Which organisation will my infrastructure agent use?",
    "What happens when the Pulumi organisation header is wrong?",
    "Can a Neo approval permit infrastructure changes?",
    "Is generating deployment guidance the same as deploying?",
    "Which tool should an inventory-only review exclude?",
    "Does connecting Pulumi also authorise spending?",
    "What should I retain before approving Neo access?",
    "Can a cloud inventory request open a pull request?",
    "How do Pulumi token and tool permissions differ?",
    "When should I recheck infrastructure-agent scope?"
  ],
  "supported_claims": [
    {
      "claim": "Most tools retrieve information or instructions, but the Neo bridge can start billed tasks and pass approvals that let Neo change infrastructure. The documentation also describes fallback organisation selection. Verify the organisation and enabled tools before treating the connection as inventory-only.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Most tools retrieve information or instructions, but the Neo bridge can start billed tasks and pass approvals that let Neo change infrastructure. The documentation also describes fallback organisation selection. Verify the organisation and enabled tools before treating the connection as inventory-only.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-TERRAFORM-01-v1",
    "VXI-EXT-TOOL-TRUST-WORKOS-01-v1",
    "VXI-EXT-TOOL-TRUST-HARNESS-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Pulumi MCP authentication and organisation selection",
    "source_url": "https://www.pulumi.com/docs/ai/mcp-server/",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-PULUMI-01-v1",
    "candidate_record_sha256": "d579e40a494e82a26d7310c41a8b7e71197230d9f0ad4cc420d65d07a701abdb",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Most tools retrieve information or instructions, but the Neo bridge can start billed tasks and pass approvals that let Neo change infrastructure. The documentation also describes fallback organisation selection. Verify the organisation and enabled tools before treating the connection as inventory-only.",
    "required_buyer_context": "Intended organisation, token identity, enabled Neo tools, approved task and spending authority.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Pulumi",
      "variant": "Hosted Pulumi MCP with optional Neo bridge"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Pulumi operates the hosted server.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Infrastructure discovery, documentation and Neo coordination.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Stack, resource, policy and organisation information.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Neo tasks and approvals can lead to infrastructure changes or pull requests.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Pulumi access token through browser or header authentication.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Token role and client tool permissions; organisation selection requires checking.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Cloud resource information can reach the connected model.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "An unexpected organisation or Neo task may change the intended scope.",
        "source_ids": [
          "pulumi"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "The buyer token, selected organisation and Neo limits were not inspected.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Clarify the target and authority before starting or approving Neo work.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "pulumi",
        "url": "https://www.pulumi.com/docs/ai/mcp-server/",
        "final_url": "https://www.pulumi.com/docs/ai/mcp-server/",
        "title": "Pulumi MCP authentication and organisation selection",
        "checked_on": "2026-10-14",
        "sha256": "a7c25cf7cd59024acebe5eb84355070d3e237962dc38ac1b983dd342832e6f58",
        "bytes": 445443
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Preserve why an inventory-only approval excluded Neo work and which organisation needed checking.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Organisation fallback, Neo capability and billing changes."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#pulumi-mcp-organisation-neo-trust",
  "machine_readable_record": "/varexis-index/records/pulumi-mcp-organisation-neo-trust.json"
}