{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77", "snapshot_id": "sha256:0679a3f0d41c0733e76d10ab3fb1b331811893c7d428749740ec0f21ac731d3e", "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021", "data": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "entity_slug": "aws", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzez1rxy9f1wce0r3p6yd35y", "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "scope": { "product": { "key": "aws-cloud", "name": "AWS Cloud" }, "funnel": { "key": "api-resource-management", "name": "API resource management" } }, "catalog_binding": { "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d", "entity_revision_digest": "sha256:dca08f2f9410a83d7a9baaeb4e32f36a3828dadb9cf563a07ff5c25fb9f5d236" }, "declaration_revision_digest": "sha256:0a626e30371202e5a17b20a0c3b3a9cfdaedf33be48b1dbb081867c46256ffb1", "declaration": { "declaration_id": "declaration_aws_cloud_api_resource_management", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "62b512f0c49352e55a399ba53866a5effa431d71", "path": "vendors/aw/aws.yaml", "git_blob_oid": "57a682fcafc66fb13c152112ea55dc2efc798bfa", "blob_digest": "sha256:4dd5534d78e892926ff8b658a834a2a9bed3746faa9d3be1d95231bc63ad50b2" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "cost-visibility", "name": "AWS Cloud cost visibility", "interface_ids": [ "public-pricing" ] }, { "target_id": "service-use", "name": "Create and reconcile AWS resources through Cloud Control API", "interface_ids": [ "cloud-control" ] } ], "participants": [ { "participant_id": "aws", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb" } } ], "resources": [ { "resource_id": "account-creation", "uri": "https://signin.aws.amazon.com/signup?request_type=register", "roles": [ "access" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "account-creation-troubleshooting", "uri": "https://docs.aws.amazon.com/accounts/latest/reference/troubleshooting_create-account.html", "roles": [ "access", "documentation", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "account-plan-activation", "uri": "https://docs.aws.amazon.com/accounts/latest/reference/getting-started.html", "roles": [ "access", "checkout", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-payments.html", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-create-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_CreateResource.html", "roles": [ "documentation", "provisioning", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-endpoints", "uri": "https://docs.aws.amazon.com/general/latest/gr/cloudcontrolapi.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-getting-started", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/getting-started.html", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-overview", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/what-is-cloudcontrolapi.html", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-resource-operations", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/resource-operations.html", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-status-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_GetResourceRequestStatus.html", "roles": [ "documentation", "provisioning", "recovery", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "price-list-api", "uri": "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/price-changes.html", "roles": [ "documentation", "operations", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://aws.amazon.com/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984", "uri": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html", "roles": [ "access", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "request-signing", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://aws.amazon.com/service-terms/", "roles": [ "terms" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "sign-in-recovery", "uri": "https://docs.aws.amazon.com/signin/latest/userguide/troubleshooting-sign-in-issues.html", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "temporary-credentials", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html", "roles": [ "authentication", "descriptor", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "cloud-control-api", "uri": "https://cloudcontrolapi.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "pricing-api", "uri": "https://api.pricing.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://signin.aws.amazon.com/signup?request_type=register", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "security-token-service", "uri": "https://sts.amazonaws.com", "transport": "http", "roles": [ "authorization", "token" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "cloud-control", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "cloud-control-api" ], "resource_ids": [ "cloud-control-create-api", "cloud-control-endpoints", "cloud-control-getting-started", "cloud-control-overview", "cloud-control-resource-operations", "cloud-control-status-api" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "public-pricing", "modality": "network_api", "functions": [ "commerce", "service_operation" ], "endpoint_ids": [ "pricing-api" ], "resource_ids": [ "price-list-api", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "workload-authentication", "modality": "network_api", "functions": [ "authentication", "service_operation" ], "endpoint_ids": [ "security-token-service" ], "resource_ids": [ "request-signing", "temporary-credentials" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "relations": [ { "relation_id": "account-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-creation" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } }, { "relation_id": "authentication-authenticates-cloud-control", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "workload-authentication" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "cloud-control-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "getting-started-precedes-resource-operations", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "to": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } }, { "relation_id": "pricing-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "price-list-api" }, "to": { "node_kind": "interface", "node_id": "public-pricing" } }, { "relation_id": "request-signing-describes-authentication", "kind": "describes", "from": { "node_kind": "resource", "node_id": "request-signing" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-08-20T14:33:24.000Z", "revision_digest": "sha256:2db2e5c73843c5b00c46a7f2c4fc745cd83e5a79588fb9fd4f371f92e7ae1c41", "policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "policy_version": "service-use-2026-08-20-public-evidence-r9", "policy_as_of": "2026-08-20T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B+", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect actual Blocked stages by lifecycle severity.", "coverage_rule": "Every core graded metric must have supported, fresh, non-conflicting evidence. Barrier checks constrain the report when verified and cap an otherwise higher grade at B+ while unverified.", "outcome_rule": "Each stage takes its worst core metric or verified barrier, and the overall grade is derived from the five stage states plus the explicit unverified-barrier cap." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "evaluate", "stage_label": "Evaluate", "public_state": "limited", "finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "AWS Service Terms disclose specific eligibility rules for certain regional and account offerings, such as AWS UK switching addendum eligibility and AWS GovCloud (US) registration and eligibility verification requirements." } }, "limitations": [ { "stage": "evaluate", "stage_label": "Evaluate", "finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "AWS Service Terms disclose specific eligibility rules for certain regional and account offerings, such as AWS UK switching addendum eligibility and AWS GovCloud (US) registration and eligibility verification requirements." }, "remediation": { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "AWS STS documentation establishes that agents can request temporary credentials with specified validity durations using operations like GetFederationToken or AssumeRole. However, the evidence does not detail complete agent-executable revocation, compromise response, or recovery procedures." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "AWS Service Terms disclose specific eligibility rules for certain regional and account offerings, such as AWS UK switching addendum eligibility and AWS GovCloud (US) registration and eligibility verification requirements." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "AWS Cloud Control API provides a standardized set of APIs and AWS CLI commands (e.g., create-resource, delete-resource, get-resource, list-resources, update-resource) to discover and perform CRUD-L operations on supported AWS resources." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The applicable AWS Service Terms are retrievable, readable, and publicly accessible online." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "AWS provides explicit pricing details and mechanisms before commitment, including the AWS Price List API catalog of products and prices and a pay-as-you-go pricing approach where users pay only for consumed services." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:17.935Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:568550ec56674d021569f2ae87d8637144f3e0ce0391d9ce165813d054793958", "capture_rung": "http" } ], "artifact_digests": [ "sha256:07470bb5d064a754eac9db0ea8dd451bba49eb6d7942a247d4fc275a5ba9b2b8", "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "sha256:3e91668d68f59f915cb3d3d7c4dc30f5a9d329b67d1886bdcbf2dc7b3301c794", "sha256:e4d38a1e8cbb19cc18ef665be42fa2ef0478dd8ec38d5486ac7338ec32ab4656" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "start_byte": 101674, "end_byte": 102473, "value_digest": "sha256:814ab6bb3ef4b78fbd57e7013ab2c5aa16afbb9962f57a85b38e40cfec131a80" }, { "artifact_digest": "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "start_byte": 40696, "end_byte": 41490, "value_digest": "sha256:4ada0d8a6d2eb4d8a496a2130b18b2ba402a7a60d4552d6b116f50dc0f01857a" } ] } ], "note": "AWS Service Terms disclose specific eligibility rules for certain regional and account offerings, such as AWS UK switching addendum eligibility and AWS GovCloud (US) registration and eligibility verification requirements.", "remediation": { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:58.460Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "price-list-api" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f691eb10c11e872f359f58b1597637882505e552345914d0b4e5201037243bbe", "capture_rung": "http" } ], "artifact_digests": [ "sha256:40a3bbea160007fbf797b0c3790473a58dc8ebb583ecaf1c0da0dcbc57691be3", "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "sha256:942f173079dfd4c678ba156634f9bcf58bf47453ad04143d1e61475809c74f8e", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "start_byte": 20973, "end_byte": 21771, "value_digest": "sha256:b0f877a7745ec8c62108906a193180bb0f69272add0aaea0267fbc651e21ccd9" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bae1ddaef0f4a20e3083b219d8cabc498e573cd4c656475e9b8ca0acf8994cf5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:fbe7b0554ee04f19d476a8b6180f8c162bb947d7ea6f06f918b9282d48bbf1f9" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 3475, "end_byte": 4272, "value_digest": "sha256:5c5b7972913be3be07bb7a22ab4e12c0ccc43fdcba093c73c26ff616e83bdf9f" } ] } ], "note": "AWS provides explicit pricing details and mechanisms before commitment, including the AWS Price List API catalog of products and prices and a pay-as-you-go pricing approach where users pay only for consumed services." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:41.844Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e16ba2e5e04021a56c5e3f79de62976b01da952c5b85e0f7cb6c838325e58202", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5385ac65acb4feaf664aaa331ef440e7a3adf9b9880c50c86f5f0912b83accbf", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 4277, "end_byte": 5064, "value_digest": "sha256:532a9520252bb0407b949f40b83a124eb58d1f8cb6d3e2aa52ca3e244986fa47" }, { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 6655, "end_byte": 7417, "value_digest": "sha256:6a4885bb3e222f35df08a672dd77712d0f6e2a12ab7af12964d0ffa29c107949" } ] } ], "note": "AWS Cloud Control API provides a standardized set of APIs and AWS CLI commands (e.g., create-resource, delete-resource, get-resource, list-resources, update-resource) to discover and perform CRUD-L operations on supported AWS resources." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "terms_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:17.935Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:568550ec56674d021569f2ae87d8637144f3e0ce0391d9ce165813d054793958", "capture_rung": "http" } ], "artifact_digests": [ "sha256:07470bb5d064a754eac9db0ea8dd451bba49eb6d7942a247d4fc275a5ba9b2b8", "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "sha256:3e91668d68f59f915cb3d3d7c4dc30f5a9d329b67d1886bdcbf2dc7b3301c794", "sha256:f1bc95393395e7d8020ec176af4b39a906795e8ca49bbb51001f29f4499bf724" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "start_byte": 19863, "end_byte": 20657, "value_digest": "sha256:edc0aefe421a330e930fd526b9685b1235fb70cae20873e2d43fade38a738830" }, { "artifact_digest": "sha256:1f74554c4b496e2118e44fc748fefdda195c6ec324700940c0bc47c3fba7a8f1", "start_byte": 0, "end_byte": 779, "value_digest": "sha256:6b4cc45daac892f349ef5f660575d317f457e2ab13ba918e2b1bf5844b878eb0" } ] } ], "note": "The applicable AWS Service Terms are retrievable, readable, and publicly accessible online." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] } ], "blockers": [], "remediations": [ { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } ] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "A stable canonical route to begin obtaining service access exists via the 'Sign up for AWS' page and AWS account registration instructions provided in the AWS Account Management User Guide." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The sign-up endpoint evidence contains metadata and a page title ('AWS Console - Signup'), but does not contain sufficient information to determine whether access controls and safe handoffs can be operated deterministically." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence across all target surfaces does not explicitly state whether an unsupported CAPTCHA boundary is required or bypassed during access." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Documentation states that a phone number is required for identity verification during sign-up to receive automated calls or SMS codes, but it does not specify an explicit, supported agent handoff mechanism." }, { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "context": "AWS STS operations such as AssumeRole and AssumeRoleWithWebIdentity provide temporary, scoped, and revocable security credentials in exchange for valid credentials or web identity tokens." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:18.734Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The sign-up endpoint evidence contains metadata and a page title ('AWS Console - Signup'), but does not contain sufficient information to determine whether access controls and safe handoffs can be operated deterministically." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:19.508Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0bae22ac7954a9433f5c3b951b3df66a0411883871c15d857d19aee0aa7993f8", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:135d102d65ba84607b2b36496cd623e39735e3e988fc39723d9917dbb2c72350", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:57f5b6541fdbcb507a61780b8f94f56d062cc61c7ce0ce9709bdb25f6aff6a10", "sha256:6eab202808f94d09326104670b23bc9e77a0017c7ac793bbd3e8d4972d88f6ee", "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "sha256:e939329e15756d6f60b641993938ab668dae43735883f1b0b49550a6ab24c88b" ], "source_surface": { "node_kind": "resource", "node_id": "account-plan-activation" }, "locators": [ { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 3935, "end_byte": 4729, "value_digest": "sha256:fb08d78f6de3d235929a68becae5d37176db0b539572a6a9aa1fb8d559ea179b" }, { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 6314, "end_byte": 7104, "value_digest": "sha256:b3d8108207013dcdc914dbb148db8719c136adaf394965ef605706791eadc065" } ] } ], "note": "A stable canonical route to begin obtaining service access exists via the 'Sign up for AWS' page and AWS account registration instructions provided in the AWS Account Management User Guide." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:19.508Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "Current admissible evidence across all target surfaces does not explicitly state whether an unsupported CAPTCHA boundary is required or bypassed during access." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.892Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9d5e7d621d3145719abb8438552f34b7d0007f44105d0c2aa37fc9c27e04602f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:77a5ee35758acc94c41809debe7bb4663379445b840c6212cfbc7abb2351f7be", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 12229, "end_byte": 13029, "value_digest": "sha256:b5b1beb9d6e8bf07692cb68e1be16b101aedc5cdc237416a9bb44f3f27dfe8ad" }, { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" } ] } ], "note": "AWS STS operations such as AssumeRole and AssumeRoleWithWebIdentity provide temporary, scoped, and revocable security credentials in exchange for valid credentials or web identity tokens." }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:19.508Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "Documentation states that a phone number is required for identity verification during sign-up to receive automated calls or SMS codes, but it does not specify an explicit, supported agent handoff mechanism." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "AWS discloses its pricing models, including pay-as-you-go, flat-rate, and Savings Plans commitments, and provides catalog prices via the AWS Price List APIs and service pricing pages." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence describes adding payment methods and completing account sign-up, but it does not establish a deterministic API or flow for agent-constructed checkout, approval handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence outlines account creation requirements and payment method management in the console, but it does not document a payment authorization rail supporting scoped agent delegation or human authorization with receipts." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "AWS documents a direct self-service path to create an account, enter billing information, select a Support plan, and complete sign-up to activate services without vendor intervention." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:05.033Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The retained evidence describes adding payment methods and completing account sign-up, but it does not establish a deterministic API or flow for agent-constructed checkout, approval handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:58.460Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "price-list-api" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bae1ddaef0f4a20e3083b219d8cabc498e573cd4c656475e9b8ca0acf8994cf5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:fbe7b0554ee04f19d476a8b6180f8c162bb947d7ea6f06f918b9282d48bbf1f9" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 3475, "end_byte": 4272, "value_digest": "sha256:5c5b7972913be3be07bb7a22ab4e12c0ccc43fdcba093c73c26ff616e83bdf9f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f691eb10c11e872f359f58b1597637882505e552345914d0b4e5201037243bbe", "capture_rung": "http" } ], "artifact_digests": [ "sha256:40a3bbea160007fbf797b0c3790473a58dc8ebb583ecaf1c0da0dcbc57691be3", "sha256:50ae5546e266b3516eeb7d178a5c47b69dbc53c94313287cc2998a84e7c67e0c", "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "start_byte": 21772, "end_byte": 22565, "value_digest": "sha256:77f345ce54f14009e9cd0f22ffe0b7129cb04dbd4f3cb3341fadc6f626ddfc3c" } ] } ], "note": "AWS discloses its pricing models, including pay-as-you-go, flat-rate, and Savings Plans commitments, and provides catalog prices via the AWS Price List APIs and service pricing pages." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:05.033Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The evidence outlines account creation requirements and payment method management in the console, but it does not document a payment authorization rail supporting scoped agent delegation or human authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:05.033Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4448d34dbfd2861555f4ba17a26769e0dbc29546e63e0abfae9fa80515073b7f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "sha256:9ac51e9b38c11626e509214a07a922c7aaa8783487d3c4a0d7556aef8fa63fc2", "sha256:d2e2a11bafda3e1bb0924fc29c3a86fe0240ec089d7ccdd7c217618c213149e9" ], "source_surface": { "node_kind": "resource", "node_id": "account-plan-activation" }, "locators": [ { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 7902, "end_byte": 8702, "value_digest": "sha256:edf66ba7b6ec8e7c5096dc120732564f85478246f0f544c05448a87549a67c03" }, { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 8703, "end_byte": 9503, "value_digest": "sha256:0ae98688b7bf727974121338c6abdf01d66d604b2787817bc7f221c7a67b2622" } ] } ], "note": "AWS documents a direct self-service path to create an account, enter billing information, select a Support plan, and complete sign-up to activate services without vendor intervention." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "AWS Cloud Control API provides a CreateResource operation to initiate resource creation programmatically." }, "secondary_context": [ { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "AWS STS API operations create temporary security credentials that include an access key ID, a secret key, and a session token, which applications or users can use to access resources." }, { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "context": "AWS Cloud Control API provides get-resource-request-status to poll request progress using a RequestToken, returning an OperationStatus set to SUCCESS upon successful completion." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.892Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9d5e7d621d3145719abb8438552f34b7d0007f44105d0c2aa37fc9c27e04602f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:93514a0a476768c920d66df71a6156c959d07def7e72b93a534ca3f97a341d2f", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 6689, "end_byte": 7487, "value_digest": "sha256:2cedca06f6a7a6f2747e30bed4edd77a884b45846935617a9d16a33fabd6cded" } ] } ], "note": "AWS STS API operations create temporary security credentials that include an access key ID, a secret key, and a session token, which applications or users can use to access resources." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:12.635Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:00a387782e955c7ffe26a0a8978c52bd1d8d2c316b9d8ca5c155f5b72e352c0b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:046562658938f4c76f43227a46786bc5c7c51c2eda89891eb406a2922dc0fb50", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 4028, "end_byte": 4818, "value_digest": "sha256:d155357bf3432061a072105ea41e0a21978ec27b1c3dfc3b4789c07926d00aae" } ] } ], "note": "AWS Cloud Control API provides get-resource-request-status to poll request progress using a RequestToken, returning an OperationStatus set to SUCCESS upon successful completion." }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.581Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-create-api" }, { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:be32976a5312bb87bc6cfc331c2e9e9a07252fe1a18ff54d6b97f89437bc5ba4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:f5096e17a39e29aa6a3bac6df4a7975fdc4b813f5539035a1bdf0b3be7ccfa73" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6080, "end_byte": 6877, "value_digest": "sha256:7ecd9fe25341c6720540bd124b2dc2da24361c3cc7850d1edc1ad947b48c46f3" } ] } ], "note": "AWS Cloud Control API provides a CreateResource operation to initiate resource creation programmatically." } ], "blockers": [], "remediations": [] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "AWS STS documentation establishes that agents can request temporary credentials with specified validity durations using operations like GetFederationToken or AssumeRole. However, the evidence does not detail complete agent-executable revocation, compromise response, or recovery procedures." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "All evaluated targets provide documented programmatic interfaces, including HTTP APIs, AWS CLI commands, and SDK implementations." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "AWS STS operations allow requesting temporary security credentials (access key ID, secret key, session token) and applying session policies to scope permissions programmatically for service requests." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "Essential operations and pricing endpoints across Cloud Control API, IAM STS, and AWS Price List have stable request/response schemas, JSON/HTTP parameters, and defined operational effects." }, { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "context": "AWS Cloud Control API documents idempotency via client tokens (valid for 36 hours), retries, and detailed HTTP status codes and error types (such as ThrottlingException, ConcurrentOperationException, and HandlerFailureException). Status tracking is supported via GetResourceRequestStatus using a RequestToken." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.892Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9d5e7d621d3145719abb8438552f34b7d0007f44105d0c2aa37fc9c27e04602f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:768eeaa382ef166b362f63ae817f43987c8c9623340a0dabe4aff91de6bee2ef", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 17791, "end_byte": 18590, "value_digest": "sha256:154f2b6f2a57b34052332ab102a796ddebdad7724b251388a5a4a068cb9e36d8" }, { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" } ] } ], "note": "AWS STS documentation establishes that agents can request temporary credentials with specified validity durations using operations like GetFederationToken or AssumeRole. However, the evidence does not detail complete agent-executable revocation, compromise response, or recovery procedures.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.581Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-create-api" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:be32976a5312bb87bc6cfc331c2e9e9a07252fe1a18ff54d6b97f89437bc5ba4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:cd750538a55716b1e16eacf632b1dd4c3fbb1d33f030e9c96cf30e2230006051" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 10794, "end_byte": 11587, "value_digest": "sha256:7bd94c2b2afe4281a42aa3a1c0b4f443f3f16745b58c840e42f8571caf796f5c" }, { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6878, "end_byte": 7677, "value_digest": "sha256:82a735fc2fd0426d7a90f2190adc58e40315995b3706cbcd5d8f86c072c09e01" } ] } ], "note": "AWS Cloud Control API documents idempotency via client tokens (valid for 36 hours), retries, and detailed HTTP status codes and error types (such as ThrottlingException, ConcurrentOperationException, and HandlerFailureException). Status tracking is supported via GetResourceRequestStatus using a RequestToken." }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.892Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9d5e7d621d3145719abb8438552f34b7d0007f44105d0c2aa37fc9c27e04602f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:9970c4422705385f83b3d1c95d40240e3845caba9848672a5965ae452cb74906", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" }, { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5888, "end_byte": 6688, "value_digest": "sha256:29ada5cfce30fef12de71992b383e58d2415ac9d9df1da3a8fc9c43515c2f3b6" } ] } ], "note": "AWS STS operations allow requesting temporary security credentials (access key ID, secret key, session token) and applying session policies to scope permissions programmatically for service requests." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:58.460Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cloud-control" }, { "node_kind": "interface", "node_id": "public-pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:43267f42a02fda38230b8440c83ed3cd49871a0d4c34644eaffabbbb86a5b5d3", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2988eb874aac2ad28045daff5e7ef70f368c889cc9c64e821ce440fe3a354726", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "sha256:6fd2343b49ffc91884ddbca07b941781fd73b51fdf8f0b44b2459254ee1a0fe4" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" }, "locators": [ { "artifact_digest": "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "start_byte": 3239, "end_byte": 4035, "value_digest": "sha256:2a50ff2e7e6c0594277ccdc4e5e70c1ca06674b69252eeded39c4799220de3b8" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bae1ddaef0f4a20e3083b219d8cabc498e573cd4c656475e9b8ca0acf8994cf5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:b3e5b450fd575b21b32911c10cebadb803e891feedb4d21c071a4c1dfcef12ef" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 5043, "end_byte": 5841, "value_digest": "sha256:b38c2ec18980c425eb1553abb45e9a64850cb3572fd880918dedc40cb71cec53" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f691eb10c11e872f359f58b1597637882505e552345914d0b4e5201037243bbe", "capture_rung": "http" } ], "artifact_digests": [ "sha256:40a3bbea160007fbf797b0c3790473a58dc8ebb583ecaf1c0da0dcbc57691be3", "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "sha256:942f173079dfd4c678ba156634f9bcf58bf47453ad04143d1e61475809c74f8e", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "start_byte": 20973, "end_byte": 21771, "value_digest": "sha256:b0f877a7745ec8c62108906a193180bb0f69272add0aaea0267fbc651e21ccd9" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e16ba2e5e04021a56c5e3f79de62976b01da952c5b85e0f7cb6c838325e58202", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b602f2e7272c46399f7c405de40707bd766ce58a5716783e072c6120026beb88", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 4277, "end_byte": 5064, "value_digest": "sha256:532a9520252bb0407b949f40b83a124eb58d1f8cb6d3e2aa52ca3e244986fa47" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f9986d5d2283091d060881b156ee22ea5b3af8ecf834733d62a0b4b6f26c9d98", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:13c079e12e5a21bbb2932831e53703b76f47338be4efb11e108e149e90be0afc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 6842, "end_byte": 7641, "value_digest": "sha256:34743a9b98497d47f5d2890624e172153fb1c1f703837f354f327016db9e0944" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:00a387782e955c7ffe26a0a8978c52bd1d8d2c316b9d8ca5c155f5b72e352c0b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:21ab43e5f3487d6f3f16834d8418bd333ceba9a4dd5354e5bc0fe58373c38ffb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 3230, "end_byte": 4027, "value_digest": "sha256:ad147c28946892e626af58c2b10a48c58b750ef79a484908626cabd98be192d0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:553579b27c9d4de2004c7dc4ff77266b112683417444451701a0a4b5dca16834", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:60eab99edcf9404701bd7807b1116f60fca038e2310ea763be0312318f5d969c", "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "sha256:9e62fc61704bfe22b1829c75c7e471e76aa521be047eae27b8e966788307ae45" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-endpoints" }, "locators": [ { "artifact_digest": "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "start_byte": 3343, "end_byte": 4089, "value_digest": "sha256:6388a7db9d972c003e64702466705889048c399fb4b70b8babcdb8f99ca66ec2" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:be32976a5312bb87bc6cfc331c2e9e9a07252fe1a18ff54d6b97f89437bc5ba4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:f5096e17a39e29aa6a3bac6df4a7975fdc4b813f5539035a1bdf0b3be7ccfa73" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6080, "end_byte": 6877, "value_digest": "sha256:7ecd9fe25341c6720540bd124b2dc2da24361c3cc7850d1edc1ad947b48c46f3" } ] } ], "note": "Essential operations and pricing endpoints across Cloud Control API, IAM STS, and AWS Price List have stable request/response schemas, JSON/HTTP parameters, and defined operational effects." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:58.460Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cloud-control" }, { "node_kind": "interface", "node_id": "public-pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f9986d5d2283091d060881b156ee22ea5b3af8ecf834733d62a0b4b6f26c9d98", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac", "sha256:d0afdc75fab271dee8be147507c465d82c274921ed41e4749dada34615b4bb93" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 6052, "end_byte": 6841, "value_digest": "sha256:f78d9b5d961c83efb7c16d571b324713ccca03e7fa5e73f923c7c69b2b206c28" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f691eb10c11e872f359f58b1597637882505e552345914d0b4e5201037243bbe", "capture_rung": "http" } ], "artifact_digests": [ "sha256:359bafd9aef7a1bc993dc41e88e47ae6f0db462fb6af3799088204824084cd6a", "sha256:40a3bbea160007fbf797b0c3790473a58dc8ebb583ecaf1c0da0dcbc57691be3", "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:524880a25bc99a7986832fcbeb54b1e83572ca41d5a0b8681352871cf84b94bf", "start_byte": 23362, "end_byte": 24162, "value_digest": "sha256:fdcad2a4ce79b9810cc2adb5f6a89ba8c0b7f0dcec359ea2f08b03ed1b51e3c4" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e16ba2e5e04021a56c5e3f79de62976b01da952c5b85e0f7cb6c838325e58202", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:59fd9c80829092e1d12daa3b8dc52d960398cd17bcfc809146582fb07715d046", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 6655, "end_byte": 7417, "value_digest": "sha256:6a4885bb3e222f35df08a672dd77712d0f6e2a12ab7af12964d0ffa29c107949" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:43267f42a02fda38230b8440c83ed3cd49871a0d4c34644eaffabbbb86a5b5d3", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2988eb874aac2ad28045daff5e7ef70f368c889cc9c64e821ce440fe3a354726", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "sha256:6fd2343b49ffc91884ddbca07b941781fd73b51fdf8f0b44b2459254ee1a0fe4" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" }, "locators": [ { "artifact_digest": "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "start_byte": 3239, "end_byte": 4035, "value_digest": "sha256:2a50ff2e7e6c0594277ccdc4e5e70c1ca06674b69252eeded39c4799220de3b8" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bae1ddaef0f4a20e3083b219d8cabc498e573cd4c656475e9b8ca0acf8994cf5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:7514f4dff2140ecfcc063b4776b414b3772357a8bf933c31c6e6f404e68c4264" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 6643, "end_byte": 7442, "value_digest": "sha256:52f322f1b6034b4c7b5762b9cf374f4fc0186aee5a4faa88af8c1164aebf9b43" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:00a387782e955c7ffe26a0a8978c52bd1d8d2c316b9d8ca5c155f5b72e352c0b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:21ab43e5f3487d6f3f16834d8418bd333ceba9a4dd5354e5bc0fe58373c38ffb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 3230, "end_byte": 4027, "value_digest": "sha256:ad147c28946892e626af58c2b10a48c58b750ef79a484908626cabd98be192d0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:553579b27c9d4de2004c7dc4ff77266b112683417444451701a0a4b5dca16834", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:60eab99edcf9404701bd7807b1116f60fca038e2310ea763be0312318f5d969c", "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "sha256:9e62fc61704bfe22b1829c75c7e471e76aa521be047eae27b8e966788307ae45" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-endpoints" }, "locators": [ { "artifact_digest": "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "start_byte": 3343, "end_byte": 4089, "value_digest": "sha256:6388a7db9d972c003e64702466705889048c399fb4b70b8babcdb8f99ca66ec2" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:be32976a5312bb87bc6cfc331c2e9e9a07252fe1a18ff54d6b97f89437bc5ba4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:f5096e17a39e29aa6a3bac6df4a7975fdc4b813f5539035a1bdf0b3be7ccfa73" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6080, "end_byte": 6877, "value_digest": "sha256:7ecd9fe25341c6720540bd124b2dc2da24361c3cc7850d1edc1ad947b48c46f3" } ] } ], "note": "All evaluated targets provide documented programmatic interfaces, including HTTP APIs, AWS CLI commands, and SDK implementations." } ], "blockers": [], "remediations": [ { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 16, "covered_signals": 16, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-08-20T15:57:19.508Z", "freshness": "fresh", "provenance": { "tier": "observed", "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "freshness_policy_digest": "sha256:00f7f2a35f37b184e57ce2cc116f6a5e3feb4813991aacd7e29e322f2d3607a8", "basis_event_ids": [ "sha256:0724f355c22b9c03182cb4398010bd88f7fd589e6021816a0e2ebef6ebd014bb", "sha256:07d5c786127b352d353cd8c4ce9813a15757e14fd466d3f1fbfb028bab2474a2", "sha256:0c7802060f5844a23cde68e2cf8762d601af50495a98f3c98d052dc9866e9776", "sha256:0fc9a21bd3d233b4af62f777c1b65f6b4df2ed5e27b2e50f80b5d2a00cc39b0b", "sha256:1731c7876697d9e7a3bd15fafb458c065cb6e1ed550eeaae91a26048a6061c32", "sha256:194b1d17b11b426feaa4cebc71fde93a50d120196f87a9e7092a1c0a30334d4e", "sha256:30a5c6c403a867c907dbd09f881583e2f25298d5fb9cb7b3a22b3079f99947e1", "sha256:337f3d427682c42edb26681ebeeef786ff98b725170b559008478698f7c8173d", "sha256:390e755fcc14c2d4f28912a9611625c01979fba69d69bbd62b6692a3c64fceb3", "sha256:40b6b1558c36b611da06bea98b6312052672d18bca41a429b346ba8f2b2db512", "sha256:43dae4258facd04f61720e5cdf7a5cc90677ffd630bfa936fb8558e8155a9ab6", "sha256:442dfd33e63426ad5c24ec544996d2b7e2a9562375ad5f8c813eb5866740438d", "sha256:4651cf3de2fa3100a5d052cc8a605565cde4775dea413f8fa105e2c319b98092", "sha256:56d788f8faef6fbab8801a53c7de325fbc48d91bcd07e44f3443da8c806cfb56", "sha256:5cfaf51f710f2aa049fcddfa1ad2bf5ef8ff37564ea7903e8f6c6e5c3be3795e", "sha256:5e13688eca138f4b5b718c2155f09d538ccf436a0bd0337fa7eb341cea6cabf2", "sha256:6081fc01ecb8adfb0cecde556e2a5be37f7b8dab146167b4a27a109dd9095fb2", "sha256:61d4b8f1687d813dd5fa14dbe67099537640b977abcbe1c772a093f32c9f355d", "sha256:64b953594454c2562e87d52d6b1781ab9c5cfde31ae2755095f7f570aa7d6aaf", "sha256:65b6398318eb2b9b955db1ab57e8a7345776de45757b24915f91bc055390f4dd", "sha256:67340d7e857e12cb1794345c86fd58c19f4316f3a3eb3bb419f7e9669946fbed", "sha256:6735e0ea9fc0d7ad57779937e7bc9ffeddb7487b7127ec09afa752c9c141c064", "sha256:6ebe82848dfe3311e17b3ad9bedfe0792a72e3cab801b36d1eac8ade09eefb62", "sha256:71f5552cd48e9e3b9b456a52c81a15dbdd5e0b90303f1a9823cf91aca3164d15", "sha256:752b6fa84d4a871177d930fc545a55d795c64622f0509618f484c57270894452", "sha256:8b3db6346d5735840f49e41f764f2e431687b155f9b3a13553454b65a94e9de1", "sha256:8ebca85c8b07205a556e5949941ea6df4b9477c585cc9a137c8357136c2da649", "sha256:92f906ccb39a02f5aad1d28fd3626e990710123542cb90afd04fdd4ad39c9aa0", "sha256:964e6dcf8793ac75468fc1b7dad7f5e3d9f62ebb7738e546bb073eea27cd7206", "sha256:97e2ad4c9affd956f5f7ef539bb241d3786aff732a8a75d4158bb2d6f8f50d91", "sha256:9d9ec8006f9d7248e5b16c8354e5792b6286213a97d476c5884ec3c05a7ad822", "sha256:a54888b59edef2bb168ac9f38a4fe5cd7a4a3110f83b409285bbb5ca6fb2afd4", "sha256:b1348e29deee04bb09c9b0cc480d229bb7cef101443f4888d808131cd163fb51", "sha256:ce068807fd1d4879df145e21865a5a33e84a8d92d4cc18dca0f4470e1cc912ac", "sha256:d35ee7c51be0ca78a4dbafe5a3aa210b9776dc539f44696da0fd3057d11c62d2", "sha256:d4716dbc6721c889120f4d8d2ccf05cf0400d933e39155e046a576e5a8a074e3", "sha256:e58f09d93e283cdb2caf69bdb9464f97db8da2f6f1f6bd8c31a6281a9c8b068e", "sha256:e8bed8228ad6542fbac6bbe46cec936b31cab42141186ad9336591872c9def3b", "sha256:eba42d16ce39d5c1f21590b30fabd6d331d8d51cb91659c367f836e29f675cc3", "sha256:f0ce97485f7465a64d96f256b95cbd7f5a6d3b61c10091f0088b1f94e0cd5fed", "sha256:f602e6f731ec71bdb7b93a18d44bca72c7e07b5fd60f6004fad7c5da2e08939e", "sha256:fa16562e2ab01c66a99dfe9f6e6669b34180b5b907ec8c2c6f6180ff7d739225", "sha256:fdebb31011c6e1fa036c888173367a8fe105c6f47ab53c72e058781a4e2d18b9" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:e8bed8228ad6542fbac6bbe46cec936b31cab42141186ad9336591872c9def3b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:17.935Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:56d788f8faef6fbab8801a53c7de325fbc48d91bcd07e44f3443da8c806cfb56", "sha256:8ebca85c8b07205a556e5949941ea6df4b9477c585cc9a137c8357136c2da649" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:58.460Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:442dfd33e63426ad5c24ec544996d2b7e2a9562375ad5f8c813eb5866740438d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:41.844Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:fa16562e2ab01c66a99dfe9f6e6669b34180b5b907ec8c2c6f6180ff7d739225" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:17.935Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:5cfaf51f710f2aa049fcddfa1ad2bf5ef8ff37564ea7903e8f6c6e5c3be3795e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:18.734Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:ce068807fd1d4879df145e21865a5a33e84a8d92d4cc18dca0f4470e1cc912ac" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:19.508Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:07d5c786127b352d353cd8c4ce9813a15757e14fd466d3f1fbfb028bab2474a2", "sha256:61d4b8f1687d813dd5fa14dbe67099537640b977abcbe1c772a093f32c9f355d", "sha256:64b953594454c2562e87d52d6b1781ab9c5cfde31ae2755095f7f570aa7d6aaf", "sha256:65b6398318eb2b9b955db1ab57e8a7345776de45757b24915f91bc055390f4dd", "sha256:f602e6f731ec71bdb7b93a18d44bca72c7e07b5fd60f6004fad7c5da2e08939e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:19.508Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:337f3d427682c42edb26681ebeeef786ff98b725170b559008478698f7c8173d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.892Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:964e6dcf8793ac75468fc1b7dad7f5e3d9f62ebb7738e546bb073eea27cd7206" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:19.508Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:194b1d17b11b426feaa4cebc71fde93a50d120196f87a9e7092a1c0a30334d4e", "sha256:71f5552cd48e9e3b9b456a52c81a15dbdd5e0b90303f1a9823cf91aca3164d15" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:05.033Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:97e2ad4c9affd956f5f7ef539bb241d3786aff732a8a75d4158bb2d6f8f50d91", "sha256:d35ee7c51be0ca78a4dbafe5a3aa210b9776dc539f44696da0fd3057d11c62d2" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:58.460Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:6081fc01ecb8adfb0cecde556e2a5be37f7b8dab146167b4a27a109dd9095fb2", "sha256:eba42d16ce39d5c1f21590b30fabd6d331d8d51cb91659c367f836e29f675cc3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:05.033Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:0724f355c22b9c03182cb4398010bd88f7fd589e6021816a0e2ebef6ebd014bb" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:05.033Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:6ebe82848dfe3311e17b3ad9bedfe0792a72e3cab801b36d1eac8ade09eefb62" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.892Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:0c7802060f5844a23cde68e2cf8762d601af50495a98f3c98d052dc9866e9776" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:12.635Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:390e755fcc14c2d4f28912a9611625c01979fba69d69bbd62b6692a3c64fceb3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.581Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:9d9ec8006f9d7248e5b16c8354e5792b6286213a97d476c5884ec3c05a7ad822" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.892Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:40b6b1558c36b611da06bea98b6312052672d18bca41a429b346ba8f2b2db512" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.581Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:4651cf3de2fa3100a5d052cc8a605565cde4775dea413f8fa105e2c319b98092" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.892Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:1731c7876697d9e7a3bd15fafb458c065cb6e1ed550eeaae91a26048a6061c32", "sha256:30a5c6c403a867c907dbd09f881583e2f25298d5fb9cb7b3a22b3079f99947e1", "sha256:67340d7e857e12cb1794345c86fd58c19f4316f3a3eb3bb419f7e9669946fbed", "sha256:752b6fa84d4a871177d930fc545a55d795c64622f0509618f484c57270894452", "sha256:92f906ccb39a02f5aad1d28fd3626e990710123542cb90afd04fdd4ad39c9aa0", "sha256:d4716dbc6721c889120f4d8d2ccf05cf0400d933e39155e046a576e5a8a074e3", "sha256:e58f09d93e283cdb2caf69bdb9464f97db8da2f6f1f6bd8c31a6281a9c8b068e", "sha256:fdebb31011c6e1fa036c888173367a8fe105c6f47ab53c72e058781a4e2d18b9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:58.460Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:0fc9a21bd3d233b4af62f777c1b65f6b4df2ed5e27b2e50f80b5d2a00cc39b0b", "sha256:43dae4258facd04f61720e5cdf7a5cc90677ffd630bfa936fb8558e8155a9ab6", "sha256:5e13688eca138f4b5b718c2155f09d538ccf436a0bd0337fa7eb341cea6cabf2", "sha256:6735e0ea9fc0d7ad57779937e7bc9ffeddb7487b7127ec09afa752c9c141c064", "sha256:8b3db6346d5735840f49e41f764f2e431687b155f9b3a13553454b65a94e9de1", "sha256:a54888b59edef2bb168ac9f38a4fe5cd7a4a3110f83b409285bbb5ca6fb2afd4", "sha256:b1348e29deee04bb09c9b0cc480d229bb7cef101443f4888d808131cd163fb51", "sha256:f0ce97485f7465a64d96f256b95cbd7f5a6d3b61c10091f0088b1f94e0cd5fed" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:58.460Z", "freshness": "fresh" } ] }, "canonical_url": "https://sourcey.com/catalog/aws/agent-readiness/aws-cloud/api-resource-management", "projection_digest": "sha256:b39cc094dae8836d18a1de7af28c175b23975923db55fc94215687d0f3606f6b" } } }