{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77", "snapshot_id": "sha256:0679a3f0d41c0733e76d10ab3fb1b331811893c7d428749740ec0f21ac731d3e", "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021", "data": { "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv", "entity_slug": "mongodb", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xb4p2kv9d7n6ts3c8y", "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv", "scope": { "product": { "key": "mongodb-atlas-api", "name": "MongoDB Atlas Administration API" }, "funnel": { "key": "cluster-lifecycle", "name": "Cluster lifecycle" } }, "catalog_binding": { "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d", "entity_revision_digest": "sha256:ed7f1d3dbbabc7c328bc3491fa2396c0fb1b1d5fcc5c5d88ede28578918e7126" }, "declaration_revision_digest": "sha256:a095b2c61d24a5e449b610ac24c8106f2afaf24b22bfaa6a7123d3d72b7e8e60", "declaration": { "declaration_id": "declaration_mongodb_atlas_api_cluster_lifecycle", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "62b512f0c49352e55a399ba53866a5effa431d71", "path": "vendors/mo/mongodb.yaml", "git_blob_oid": "089b8c2a5b946f08bfcb7e8f5c60168de1c46a2e", "blob_digest": "sha256:aa70632b8c675ea5e1973d2fd255ab2b50dcd92c408a195c0a7cc8349d1c0c7a" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Create and manage Atlas clusters through the Administration API", "interface_ids": [ "cluster-api" ] } ], "participants": [ { "participant_id": "mongodb", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv" } } ], "resources": [ { "resource_id": "account-signup", "uri": "https://account.mongodb.com/account/register", "roles": [ "access" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "api-errors", "uri": "https://www.mongodb.com/docs/atlas/reference/api-errors/", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://www.mongodb.com/docs/atlas/api/atlas-admin-api-ref/", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "authentication", "uri": "https://www.mongodb.com/docs/atlas/api/api-authentication/", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://www.mongodb.com/docs/atlas/billing/", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "cluster-create", "uri": "https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupcluster", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "cluster-operations", "uri": "https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://www.mongodb.com/pricing", "roles": [ "pricing" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "rate-limits", "uri": "https://www.mongodb.com/docs/atlas/api/api-rate-limit/", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3", "uri": "https://www.mongodb.com/docs/atlas/tutorial/create-atlas-account", "roles": [ "access", "documentation" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://www.mongodb.com/legal/terms-and-conditions/cloud", "roles": [ "terms" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://www.mongodb.com/docs/atlas/support/", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "atlas-api", "uri": "https://cloud.mongodb.com/api/atlas/v2", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://account.mongodb.com/account/register", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "authentication" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "interface_id": "cluster-api", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "atlas-api" ], "resource_ids": [ "api-errors", "api-reference", "cluster-operations", "rate-limits" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "cluster-create-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cluster-create" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "clusters-describe-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cluster-operations" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "signup-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-signup" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-08-20T14:33:24.000Z", "revision_digest": "sha256:359afc773b074f7fb13c09a5ab0193a6962e689f3575c14388e859d490e03000", "policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "policy_version": "service-use-2026-08-20-public-evidence-r9", "policy_as_of": "2026-08-20T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "C+", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect actual Blocked stages by lifecycle severity.", "coverage_rule": "Every core graded metric must have supported, fresh, non-conflicting evidence. Barrier checks constrain the report when verified and cap an otherwise higher grade at B+ while unverified.", "outcome_rule": "Each stage takes its worst core metric or verified barrier, and the overall grade is derived from the five stage states plus the explicit unverified-barrier cap." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "evaluate", "stage_label": "Evaluate", "public_state": "limited", "finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "MongoDB Cloud Terms of Service state that users must comply with all applicable laws and regulations and represent authority if acting on behalf of an organization, but do not provide a complete list of pre-commitment eligibility conditions such as explicit age or geographic restrictions." } }, "limitations": [ { "stage": "evaluate", "stage_label": "Evaluate", "finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "MongoDB Cloud Terms of Service state that users must comply with all applicable laws and regulations and represent authority if acting on behalf of an organization, but do not provide a complete list of pre-commitment eligibility conditions such as explicit age or geographic restrictions." }, "remediation": { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } }, { "stage": "pay", "stage_label": "Pay", "finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "MongoDB Atlas permits paying for usage via accepted payment methods or purchasing a subscription through MongoDB Sales or a marketplace, making self-service direct purchase tier- or condition-limited." }, "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Cluster creation returns stateName indicating control plane activity, including CREATING while provisioning and IDLE when all requested changes have been applied. Current admissible evidence does not establish asynchronous failure reconciliation or explicit time bounds." }, "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "The operation contract omits a material operation, field, or effect.", "context": "The API specification and documentation describe HTTP methods, REST endpoints, JSON structures, parameters, response codes, and rate limits across the evaluated targets. However, exact schema definitions and complete effect semantics for all individual endpoints are not fully detailed within the provided excerpts." }, "remediation": { "signal_code": "operation_contract", "code": "improve.operate.operation_contract", "instruction": "Document stable inputs, outputs, effects, and target coverage for essential operations." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Documentation covers API error codes (including 429 RATE_LIMITED), retry strategies with exponential backoff and jitter, and token bucket limits, but does not fully establish idempotency, cancellation, or reconciliation semantics." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Atlas Administration API documentation describes service accounts with rotatable secrets, token generation, and token revocation, but does not document a complete programmatic compromise recovery flow." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "MongoDB Cloud Terms of Service state that users must comply with all applicable laws and regulations and represent authority if acting on behalf of an organization, but do not provide a complete list of pre-commitment eligibility conditions such as explicit age or geographic restrictions." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "The Atlas Administration API is documented as providing RESTful access to administrative features in Atlas following REST architectural principles." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The MongoDB Cloud Terms of Service provide readable and retrievable legal terms governing the use of MongoDB Cloud Services, including account creation and service usage requirements." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "Pricing for MongoDB Atlas is explicit and variable-based. Dedicated clusters are listed with hourly rates (e.g., M80 at $7.30/hr) based on hardware configuration and region. Flex clusters are billed hourly based on usage tiers ($0.0110 to $0.0411 per hour, costing between $8 and $30 per month)." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:15.023Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:271c3c0625ed0878c680759b211056e836719cabc0001bf32d94df794b3917b4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7de25afaf897fbb0ae69ee4a061908832bf03becdd56073e8c9ed6d5591b0e53", "sha256:81967e8fb985e30dcbf2ea0e0df9a0c60ec14b840bd95c92d7fb75e9f85a1e2e", "sha256:ada1d2f46a22319db66f783521f367c907b729bcc07884f44576ac59e186c286" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:7de25afaf897fbb0ae69ee4a061908832bf03becdd56073e8c9ed6d5591b0e53", "start_byte": 11275, "end_byte": 12071, "value_digest": "sha256:6358f131f090f7bf73e618f13fa0dfcb512d5d55a74c2065f406bdcd9bd37426" } ] } ], "note": "MongoDB Cloud Terms of Service state that users must comply with all applicable laws and regulations and represent authority if acting on behalf of an organization, but do not provide a complete list of pre-commitment eligibility conditions such as explicit age or geographic restrictions.", "remediation": { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:04.809Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d2cb2aeb0e22d1af7742cae6035edbc044c97ddebce95e8eb008068141eb6a2d", "capture_rung": "http" } ], "artifact_digests": [ "sha256:07ca01635959c018f4bc31b13e0348dd9baaca930280b807426322068c78a776", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "sha256:608bec95f204fe9bf33450518bca087d8a03bc5ffab2a16adda50088c38250e7" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18995, "end_byte": 19805, "value_digest": "sha256:fdc693e0c3d5e1ce83a98df1d274efadcdf05d1b36fa6f51adf71503f18d6593" }, { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 19806, "end_byte": 20606, "value_digest": "sha256:759ad848baa2650ca2f9b141e009aa84eefc1ad19507ebcbd33b61f28879ee2e" } ] } ], "note": "Pricing for MongoDB Atlas is explicit and variable-based. Dedicated clusters are listed with hourly rates (e.g., M80 at $7.30/hr) based on hardware configuration and region. Flex clusters are billed hourly based on usage tiers ($0.0110 to $0.0411 per hour, costing between $8 and $30 per month)." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:16.308Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c86cde4538e329a303b5c6db40207fdb1e2e869a318677e101658909abdf1f9b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:2e9a172fa0d34f16647341bf17bdf83866f252e5ccecafa8300cc0211b241709", "sha256:50e86248ba2cb56af4de0e688830422ed34f8aecfe32295def009dc064cc0d65", "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1", "start_byte": 18829, "end_byte": 19624, "value_digest": "sha256:96c5130862989ebe0ea5733df94823d8858437d4af2b333506cd4d6f59d1f592" }, { "artifact_digest": "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1", "start_byte": 0, "end_byte": 800, "value_digest": "sha256:d13ad42b2b181c2c9c887a477a4aa22f178099a168a571190e83f87521dad1a8" } ] } ], "note": "The Atlas Administration API is documented as providing RESTful access to administrative features in Atlas following REST architectural principles." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "terms_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:15.023Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:271c3c0625ed0878c680759b211056e836719cabc0001bf32d94df794b3917b4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7de25afaf897fbb0ae69ee4a061908832bf03becdd56073e8c9ed6d5591b0e53", "sha256:81967e8fb985e30dcbf2ea0e0df9a0c60ec14b840bd95c92d7fb75e9f85a1e2e", "sha256:e212bced12341b4442eddc3cf2ce4381e1c63936c2782ad353ee058637e791c0" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:7de25afaf897fbb0ae69ee4a061908832bf03becdd56073e8c9ed6d5591b0e53", "start_byte": 10453, "end_byte": 11274, "value_digest": "sha256:33df8da137bdae24a5a560093de278ea53c3f74dd863bce91a5087806e74d75f" }, { "artifact_digest": "sha256:7de25afaf897fbb0ae69ee4a061908832bf03becdd56073e8c9ed6d5591b0e53", "start_byte": 11275, "end_byte": 12071, "value_digest": "sha256:6358f131f090f7bf73e618f13fa0dfcb512d5d55a74c2065f406bdcd9bd37426" } ] } ], "note": "The MongoDB Cloud Terms of Service provide readable and retrievable legal terms governing the use of MongoDB Cloud Services, including account creation and service usage requirements." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] } ], "blockers": [], "remediations": [ { "signal_code": "eligibility_decidability", "code": "improve.evaluate.eligibility_decidability", "instruction": "State every material eligibility condition and required input explicitly." } ] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "Documentation explicitly provides a stable route to begin obtaining access by registering for a new MongoDB Atlas account using an email address, GitHub, or Google credentials." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence for the registration page consists of viewport metadata and 'Cloud: MongoDB Cloud'. It does not contain form fields, validation controls, buttons, or submission handoffs to verify machine operability." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence does not document or demonstrate the presence or absence of a mandatory CAPTCHA boundary during account registration." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence describes registration options via email, GitHub, or Google credentials, but does not state phone verification requirements or supported handoff boundaries." }, { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "context": "MongoDB Atlas supports Service Accounts with OAuth 2.0 Client Credentials flow for authenticating requests to the Atlas Administration API. Service accounts provide access tokens, role-based scoping, and rotatable secrets." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:05.663Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained evidence for the registration page consists of viewport metadata and 'Cloud: MongoDB Cloud'. It does not contain form fields, validation controls, buttons, or submission handoffs to verify machine operability." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:24.644Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:92a46f2af1ee92a77816a818306b9ef338a41641d3ebc94081a70d6205924dec", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:1f64cb56382cca98c33a6422466290e355d7606553a81e00c07be4af73b5b18c", "sha256:261f6e1847eeb4ed71e8933929bbd866897108e7b8e5f16d7fb29f8e66906dfc", "sha256:6adabd4ee5af2ed83e79b20688d51ccfdc30274c5da6a219f792ba138d52d308", "sha256:7e21c5deaa44b556efff337e32bc2427d3c71979fd6f3b1e3f8b4257855f3e8a", "sha256:87ca823af0945bb3ffd633d62ac611bcd7c8c6787077ba4b0518954c0412bd1e", "sha256:f6a4d6f09de608bdd7d5585c8f03911b7c4a5591ffed0232366e858967a344ce" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" }, "locators": [ { "artifact_digest": "sha256:1f64cb56382cca98c33a6422466290e355d7606553a81e00c07be4af73b5b18c", "start_byte": 15871, "end_byte": 16669, "value_digest": "sha256:08e0a79ae63f5d2b60af4aa0382b32f68c933506a1401e464947dc201d0944f4" }, { "artifact_digest": "sha256:1f64cb56382cca98c33a6422466290e355d7606553a81e00c07be4af73b5b18c", "start_byte": 0, "end_byte": 799, "value_digest": "sha256:07977402a6d4756aef11853e77f6d271ff6b60daec27208fe4cde9226d222b2e" } ] } ], "note": "Documentation explicitly provides a stable route to begin obtaining access by registering for a new MongoDB Atlas account using an email address, GitHub, or Google credentials." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:24.644Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained evidence does not document or demonstrate the presence or absence of a mandatory CAPTCHA boundary during account registration." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:22.066Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:3b8f558241b205773d75822305682b25bab9c09da3a70c4b48cadf98bd2b37ae", "capture_rung": "http" } ], "artifact_digests": [ "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "sha256:4a2c14db869191526babe206fc7acaaeb9283627d8559f8083b0ba0dfa7e0a46", "sha256:6e903e5d0efc92719fbbf80cc5b4d242b815305e7893160777c80f1153ffb619" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 17334, "end_byte": 18133, "value_digest": "sha256:b801440490b5c13813008d4008628dcdcb6418197388fa91f03efd4dcf7280b3" }, { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 18931, "end_byte": 19729, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" } ] } ], "note": "MongoDB Atlas supports Service Accounts with OAuth 2.0 Client Credentials flow for authenticating requests to the Atlas Administration API. Service accounts provide access tokens, role-based scoping, and rotatable secrets." }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:24.644Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained evidence describes registration options via email, GitHub, or Google credentials, but does not state phone verification requirements or supported handoff boundaries." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "MongoDB Atlas permits paying for usage via accepted payment methods or purchasing a subscription through MongoDB Sales or a marketplace, making self-service direct purchase tier- or condition-limited." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence describes setting payment methods and purchasing subscriptions, but does not provide evidence of an API, protocol, or accessible web flow supporting deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence documents accepted payment methods (Card, Google Pay, US bank account, SEPA Direct Debit, Revolut Pay, Link, PayPal) and authorization verification charges, but does not state a documented rail supporting scoped delegation or explicit human-confirmed authorization with receipts." }, { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "MongoDB discloses cluster tier pricing, base prices in USD (e.g., Free for M0, $9/mo for M2, $25/mo for M5, hourly rates for dedicated tiers M10-M700), pay-as-you-go hourly billing with monthly invoices, and storage/RAM/vCPU specifications." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.320Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The retained evidence describes setting payment methods and purchasing subscriptions, but does not provide evidence of an API, protocol, or accessible web flow supporting deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:04.809Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d2cb2aeb0e22d1af7742cae6035edbc044c97ddebce95e8eb008068141eb6a2d", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "sha256:608bec95f204fe9bf33450518bca087d8a03bc5ffab2a16adda50088c38250e7", "sha256:d7d33bac926f4f9a37dfe1abb5eb9008ebc45424a7567ea3b2236ea7ba5bcf9c" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18195, "end_byte": 18994, "value_digest": "sha256:39dd2c773c5653624484811dc15e5df93d08dd4478db1c524475a016662a4207" }, { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18995, "end_byte": 19805, "value_digest": "sha256:fdc693e0c3d5e1ce83a98df1d274efadcdf05d1b36fa6f51adf71503f18d6593" } ] } ], "note": "MongoDB discloses cluster tier pricing, base prices in USD (e.g., Free for M0, $9/mo for M2, $25/mo for M5, hourly rates for dedicated tiers M10-M700), pay-as-you-go hourly billing with monthly invoices, and storage/RAM/vCPU specifications." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.320Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The evidence documents accepted payment methods (Card, Google Pay, US bank account, SEPA Direct Debit, Revolut Pay, Link, PayPal) and authorization verification charges, but does not state a documented rail supporting scoped delegation or explicit human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.320Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5b2afb656f2835cbff5ce755794efac2d67b006eb655f58cd44dbb270db5db1c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:13bd9c91ebbaebacc26508035ada420b1117d24e7fb2ea2381e651c82a1bfe7c", "sha256:77149b877f6b25961a416f6b6d98a345da6fcd9f892ce9e623e36a63128611f6", "sha256:efe634f8d577847ab6f6c47f3357a920d3e7846a58802d7dde85ceeaa934e7b8", "sha256:f3cb36755f9e1348b67acf885e670946f81468b8d1953741a28eeeef420a2d39" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:f3cb36755f9e1348b67acf885e670946f81468b8d1953741a28eeeef420a2d39", "start_byte": 42244, "end_byte": 43038, "value_digest": "sha256:816a47452f2e3e64688e80ffc433eafed563af063bf01e872b9ca86040383be2" } ] } ], "note": "MongoDB Atlas permits paying for usage via accepted payment methods or purchasing a subscription through MongoDB Sales or a marketplace, making self-service direct purchase tier- or condition-limited.", "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } } ], "blockers": [], "remediations": [ { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } ] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Cluster creation returns stateName indicating control plane activity, including CREATING while provisioning and IDLE when all requested changes have been applied. Current admissible evidence does not establish asynchronous failure reconciliation or explicit time bounds." }, "secondary_context": [ { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Cluster provisioning can be triggered programmatically by submitting an HTTP POST request to the Create One Cluster in One Project endpoint (operation-creategroupcluster) using an authorized service account access token." }, { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "MongoDB Atlas Administration API accepts OAuth 2.0 service account access tokens using the Client Credentials flow. Each service account has a client ID and a rotatable secret for creating access tokens, and an access token can be generated programmatically via an API request." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:22.066Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:3b8f558241b205773d75822305682b25bab9c09da3a70c4b48cadf98bd2b37ae", "capture_rung": "http" } ], "artifact_digests": [ "sha256:07e82c2e01ebc30558000a856e7554517af7644a069439fbb7042aaca5d437d1", "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "sha256:6e903e5d0efc92719fbbf80cc5b4d242b815305e7893160777c80f1153ffb619" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 18931, "end_byte": 19729, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" } ] } ], "note": "MongoDB Atlas Administration API accepts OAuth 2.0 service account access tokens using the Client Credentials flow. Each service account has a client ID and a rotatable secret for creating access tokens, and an access token can be generated programmatically via an API request." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.103Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cluster-create" }, { "node_kind": "resource", "node_id": "cluster-operations" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fffaf672e7e52a879aea97e3e5b6e8fd9733f12398e25ab9f08826283d664cd6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2a1b49b48aa71947fabd0242b0bc88eddc646687ef726297338df9dad2f32a4b", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b9fb7832123811e30c1901c54365778c02a8c23acafdc53a6a5d435a9d9e2218", "sha256:c1acae8a0ab4e7ec794aac958f1469835286bcb3a484b8ee138cb0afaa04973a" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-create" }, "locators": [ { "artifact_digest": "sha256:b9fb7832123811e30c1901c54365778c02a8c23acafdc53a6a5d435a9d9e2218", "start_byte": 783120, "end_byte": 783920, "value_digest": "sha256:fc0b507c7208e55fad332ccaa6728911aeb7b6c17824cf56a7064db41c04737b" } ] } ], "note": "Cluster creation returns stateName indicating control plane activity, including CREATING while provisioning and IDLE when all requested changes have been applied. Current admissible evidence does not establish asynchronous failure reconciliation or explicit time bounds.", "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.103Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "cluster-create" }, { "node_kind": "resource", "node_id": "cluster-operations" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fffaf672e7e52a879aea97e3e5b6e8fd9733f12398e25ab9f08826283d664cd6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:415da90e42a6c6d3a468da8174ff255f946f3e5a6c9dba259b98ebeade48f29b", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b9fb7832123811e30c1901c54365778c02a8c23acafdc53a6a5d435a9d9e2218", "sha256:c1acae8a0ab4e7ec794aac958f1469835286bcb3a484b8ee138cb0afaa04973a" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-create" }, "locators": [ { "artifact_digest": "sha256:b9fb7832123811e30c1901c54365778c02a8c23acafdc53a6a5d435a9d9e2218", "start_byte": 373965, "end_byte": 374763, "value_digest": "sha256:d041f38d52da3c8133175a545693b4ba4d65aae91dd85b6e9ba5a0ad56de002a" } ] } ], "note": "Cluster provisioning can be triggered programmatically by submitting an HTTP POST request to the Create One Cluster in One Project endpoint (operation-creategroupcluster) using an authorized service account access token." } ], "blockers": [], "remediations": [ { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "The operation contract omits a material operation, field, or effect.", "context": "The API specification and documentation describe HTTP methods, REST endpoints, JSON structures, parameters, response codes, and rate limits across the evaluated targets. However, exact schema definitions and complete effect semantics for all individual endpoints are not fully detailed within the provided excerpts." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Documentation covers API error codes (including 429 RATE_LIMITED), retry strategies with exponential backoff and jitter, and token bucket limits, but does not fully establish idempotency, cancellation, or reconciliation semantics." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Atlas Administration API documentation describes service accounts with rotatable secrets, token generation, and token revocation, but does not document a complete programmatic compromise recovery flow." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "The Atlas Administration API offers machine-operable, usable HTTPS REST interfaces across all essential assessment targets including error references, cluster operations, and rate limits." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "Atlas Administration API supports request-time authentication using OAuth 2.0 Client Credentials flow for service account access tokens with scoped authority controlled by assigned Atlas roles." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:22.066Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:3b8f558241b205773d75822305682b25bab9c09da3a70c4b48cadf98bd2b37ae", "capture_rung": "http" } ], "artifact_digests": [ "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "sha256:6e903e5d0efc92719fbbf80cc5b4d242b815305e7893160777c80f1153ffb619", "sha256:8323ca19b0a5ee2d8d2d25368720e79462956b76efff2b449533558d886ca2bd" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 18931, "end_byte": 19729, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" }, { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 19730, "end_byte": 20530, "value_digest": "sha256:935ea36f8e7a6cd074fbda3c0449704efd3885e241b55938e7f5f379cddee9bb" } ] } ], "note": "Atlas Administration API documentation describes service accounts with rotatable secrets, token generation, and token revocation, but does not document a complete programmatic compromise recovery flow.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:07.723Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:22cf3e6a8c743d10ffd69fc2b2b368b5743d6ce3e16ff9bc381394e74db7037c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:50d3c71980e64d2e91361e0f60a2ee33d6b3743076452e904ed2eaed069afa71", "sha256:5946db6ba6a0de61f5f6079547d53bf6e0675c1e3dee0d8007c7882aa1be26f4", "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "start_byte": 87261, "end_byte": 88058, "value_digest": "sha256:51600246a5ec1d3fc08094b2d3e8fb756f1c183d3808383a5aacb00df829f872" }, { "artifact_digest": "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "start_byte": 88059, "end_byte": 88857, "value_digest": "sha256:c8f2953db6e06e82e80fe35ab468c7a6f75ccacd738861a653e497cc636997d7" } ] } ], "note": "Documentation covers API error codes (including 429 RATE_LIMITED), retry strategies with exponential backoff and jitter, and token bucket limits, but does not fully establish idempotency, cancellation, or reconciliation semantics.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:22.066Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:3b8f558241b205773d75822305682b25bab9c09da3a70c4b48cadf98bd2b37ae", "capture_rung": "http" } ], "artifact_digests": [ "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "sha256:4a2c14db869191526babe206fc7acaaeb9283627d8559f8083b0ba0dfa7e0a46", "sha256:6e903e5d0efc92719fbbf80cc5b4d242b815305e7893160777c80f1153ffb619" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 17334, "end_byte": 18133, "value_digest": "sha256:b801440490b5c13813008d4008628dcdcb6418197388fa91f03efd4dcf7280b3" }, { "artifact_digest": "sha256:34f41527272f8cba6496a9b5d9b3f898d23666f0061a8ea5f556949b976fa1ba", "start_byte": 18931, "end_byte": 19729, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" } ] } ], "note": "Atlas Administration API supports request-time authentication using OAuth 2.0 Client Credentials flow for service account access tokens with scoped authority controlled by assigned Atlas roles." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "The operation contract omits a material operation, field, or effect.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:16.308Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cluster-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c86cde4538e329a303b5c6db40207fdb1e2e869a318677e101658909abdf1f9b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:0e64959660a504cc4cdb3071120ba8eda54fa9113e10301092e386aee078dacf", "sha256:2e9a172fa0d34f16647341bf17bdf83866f252e5ccecafa8300cc0211b241709", "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1", "start_byte": 21218, "end_byte": 21999, "value_digest": "sha256:71d461a0c843b991c031609af7a4c9232a5eff8af4005089daed36ff9f135ef7" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0df4d258219afe55eaeb640a347b31245f5b6b90f4135f742eafea3ebc812bf2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2f25b5616d4f21dd1f2f35d5f677cdfe9f5025e1a786d42ca7c0c4209221b22d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:d85237b56e236778ff604abb9efa62ce37c8aafdfc8f4f9e5c0994e0708262cc", "sha256:e33909044b069f77a41dab7808911895bc8512cca7ff24ed6b947ef8ef62a042" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-operations" }, "locators": [ { "artifact_digest": "sha256:e33909044b069f77a41dab7808911895bc8512cca7ff24ed6b947ef8ef62a042", "start_byte": 114323, "end_byte": 115108, "value_digest": "sha256:7ec5975c92da30c70bbcb19765375b07439d02c748d715217bd336a51df76f68" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:22cf3e6a8c743d10ffd69fc2b2b368b5743d6ce3e16ff9bc381394e74db7037c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:50d3c71980e64d2e91361e0f60a2ee33d6b3743076452e904ed2eaed069afa71", "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "sha256:934dbdd11618fb5f766bd612ada0fb2fb4ad2f3ba3ff6216cbf3b8617be07333", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "start_byte": 0, "end_byte": 789, "value_digest": "sha256:f6e3ff263a3784b18d5c2fdc5f9e53c65225989a5ac96580809b10a554118050" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5fdfe41ac78fad222729d76cb623d08edf8352d80fb7e5075dd138d1af581ea2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6d237c12d1452cef1a62c95e6504b903e5cead63fe5952edbad49d79dd4f52", "sha256:6209d7394fda1a1db2098ec35cc999c905c1caeab6004491cccf52bd61ad856b", "sha256:b9de7c39097d1b5a663fcea9fc8963798ab5f2858c35139a2e5d7230430273c3", "sha256:fc050cc8541f2449d821b4a6d9eeb3e0ffc24639f167d35ca7857b59a749d001" ], "source_surface": { "node_kind": "resource", "node_id": "rate-limits" }, "locators": [ { "artifact_digest": "sha256:b9de7c39097d1b5a663fcea9fc8963798ab5f2858c35139a2e5d7230430273c3", "start_byte": 16666, "end_byte": 17450, "value_digest": "sha256:fd78f3412b8fa637e4095a5c8a5b3cbb90785085d87c39aab1c7e35ae9f01350" } ] } ], "note": "The API specification and documentation describe HTTP methods, REST endpoints, JSON structures, parameters, response codes, and rate limits across the evaluated targets. However, exact schema definitions and complete effect semantics for all individual endpoints are not fully detailed within the provided excerpts.", "remediation": { "signal_code": "operation_contract", "code": "improve.operate.operation_contract", "instruction": "Document stable inputs, outputs, effects, and target coverage for essential operations." } }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:16.308Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cluster-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:22cf3e6a8c743d10ffd69fc2b2b368b5743d6ce3e16ff9bc381394e74db7037c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4ea7c79d3aeb17251f145767ef2c0ad9ed7d3fa6994e657e3406a0a90ec15ca0", "sha256:50d3c71980e64d2e91361e0f60a2ee33d6b3743076452e904ed2eaed069afa71", "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:6b6eac76abc3935ad18d514b2708a0968fc3100c61ebb5674d01d62479fab94c", "start_byte": 11476, "end_byte": 12276, "value_digest": "sha256:315ba551e55baf7245fda3bdc5cf4935c2b3f7fc0be3676248c9af099e95645c" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c86cde4538e329a303b5c6db40207fdb1e2e869a318677e101658909abdf1f9b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:2e9a172fa0d34f16647341bf17bdf83866f252e5ccecafa8300cc0211b241709", "sha256:6a97d9e1e0771364ffd849a7b81cb7098a4d26d89837b2642cad86c5102297eb", "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:e314256beacd69a4d0a6d0071aa8f9b509449349762a883fe149f58b00550bc1", "start_byte": 18829, "end_byte": 19624, "value_digest": "sha256:96c5130862989ebe0ea5733df94823d8858437d4af2b333506cd4d6f59d1f592" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5fdfe41ac78fad222729d76cb623d08edf8352d80fb7e5075dd138d1af581ea2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6d237c12d1452cef1a62c95e6504b903e5cead63fe5952edbad49d79dd4f52", "sha256:6209d7394fda1a1db2098ec35cc999c905c1caeab6004491cccf52bd61ad856b", "sha256:b9de7c39097d1b5a663fcea9fc8963798ab5f2858c35139a2e5d7230430273c3", "sha256:fc050cc8541f2449d821b4a6d9eeb3e0ffc24639f167d35ca7857b59a749d001" ], "source_surface": { "node_kind": "resource", "node_id": "rate-limits" }, "locators": [ { "artifact_digest": "sha256:b9de7c39097d1b5a663fcea9fc8963798ab5f2858c35139a2e5d7230430273c3", "start_byte": 16666, "end_byte": 17450, "value_digest": "sha256:fd78f3412b8fa637e4095a5c8a5b3cbb90785085d87c39aab1c7e35ae9f01350" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0df4d258219afe55eaeb640a347b31245f5b6b90f4135f742eafea3ebc812bf2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:192227d954287492df0eed9500b2d03dd504eb957b4812d0ab16beb009f13467", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:d85237b56e236778ff604abb9efa62ce37c8aafdfc8f4f9e5c0994e0708262cc", "sha256:e33909044b069f77a41dab7808911895bc8512cca7ff24ed6b947ef8ef62a042" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-operations" }, "locators": [ { "artifact_digest": "sha256:e33909044b069f77a41dab7808911895bc8512cca7ff24ed6b947ef8ef62a042", "start_byte": 0, "end_byte": 798, "value_digest": "sha256:c1acab4e7db3290d5b39541a479866174b33a3c78823b93353eeb4d20fc10a5e" } ] } ], "note": "The Atlas Administration API offers machine-operable, usable HTTPS REST interfaces across all essential assessment targets including error references, cluster operations, and rate limits." } ], "blockers": [], "remediations": [ { "signal_code": "operation_contract", "code": "improve.operate.operation_contract", "instruction": "Document stable inputs, outputs, effects, and target coverage for essential operations." }, { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 16, "covered_signals": 16, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-08-20T15:57:24.644Z", "freshness": "fresh", "provenance": { "tier": "observed", "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "freshness_policy_digest": "sha256:00f7f2a35f37b184e57ce2cc116f6a5e3feb4813991aacd7e29e322f2d3607a8", "basis_event_ids": [ "sha256:0078949ce0b36aeaa080ed3ea2d1a1f76e1cdeaf4752758dd967076fad9fc6d7", "sha256:0d4ffc7e7ddb1201c39b1d4e2a73bba7521046490c47eb3ba4506f91e74d7d97", "sha256:1034e697ab7104bcf8376032bbaa746c1eb5202085472f35fd50bdfeb83c71ab", "sha256:1705f9db8ee605cc59b8eb4eeea5a6852584f0d94dd0831ce06c63d19db4357a", "sha256:17e394d6d85350386f134ce4a79c9fb0b54d665a72468bb2e59b361eddc86918", "sha256:19bd9f67188fed51c4fa899c0f5d673c9f26a0e8bcbb99d94b03847eec9faa41", "sha256:19e6a4e2a7f4b5b809a6ec0b8c14c0be229717d4cc6414c2b45f99e9a598c1cc", "sha256:2e00e8d6e7404c4a68d2cd135ced119482a0dc52fad20e5106963cbb9ac41950", "sha256:320623e48f5364b75703fc5157bcdb66b2853d39a07c261e48fd297953bc251c", "sha256:333cec4f2328c9372d84b91ee9a4c9ce2080d695b7d15d41d9d89de0b4361f96", "sha256:3381b497e06f776766c58afa3560c9b5c55cf15c878f2d115e52404d9be74df4", "sha256:36cef499bbcc5ea8307642584c82d83764328e27ad1a3394be43efbe1ca712bc", "sha256:37a5fdc42e691c412b39ef2fd2b2afdfedc355ba6f2875283c14a010f8addcdc", "sha256:3cc753395776053d426271c1041bb2096d251e37fb6fc0935a8c53188369c0ce", "sha256:450899b0a14c27850b456005addda1f602d8ca3d1f1c4cd83aa35c6974aea176", "sha256:4af640c2842c8d2a8c74c9db44ccd111adbcaead617f35f3c6f566ad7d9953cb", "sha256:4b95f869149411e3fa169fefa4164fcce49eccb687fad3c5a332f2a6ddb2644c", "sha256:5e6c2127371af1865491b7be0f5ad49b2a93273b9e4b5f8d8f6506338813041a", "sha256:631acd55ae2c5fee5bf8f2839bfeb84d2ff12bb211b68cd1e9ad9ef387d91f50", "sha256:67f8628a69ba820b6fa816ecdb86c03df179545f172d7ad8590e7f7bc2fc599c", "sha256:74e77c365f7f2988dd1ab171b45fbbab2479b82e7305213acb531ded1fde890f", "sha256:777cb3d899b6d9679e8cd5ecaa3ba3d62bd27eaf4dfcb7a36dff4872553bd293", "sha256:83abeceddc7721451cd60c12df889d6fb367eb61734d736c807cdc665b4d1b25", "sha256:a6ad336fbf34ec9d8bbaf1112dc441640ec2accef6b291354189d5bf18bedfce", "sha256:b0d56cfcd8cd91955a164952e4eb1851791d90f44bade3099d0b080c220029a3", "sha256:c567ae6dd9c10890a411ebfd16655e54ea1162a38ee7dcd0298b07732aefb9cd", "sha256:c577b23bddc5b8bab7865044c9a421881fd0af1e9fa5f543c78a0834d0eb2dbf", "sha256:c93cfdc503e141fdfbaa4f6bb0d9a7b5f90b16ef31cf2109c2d124ba4213cc74", "sha256:d21eb834b52724f60ddc792555331660ce92057dfb5180034750341345d301d0", "sha256:ff130e01d9eadef6a69f8756c7c5f12d76fd037a7342b637a0040d635db252d3" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:1705f9db8ee605cc59b8eb4eeea5a6852584f0d94dd0831ce06c63d19db4357a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:15.023Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:c93cfdc503e141fdfbaa4f6bb0d9a7b5f90b16ef31cf2109c2d124ba4213cc74" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:04.809Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:37a5fdc42e691c412b39ef2fd2b2afdfedc355ba6f2875283c14a010f8addcdc" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:16.308Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:67f8628a69ba820b6fa816ecdb86c03df179545f172d7ad8590e7f7bc2fc599c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:15.023Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:0d4ffc7e7ddb1201c39b1d4e2a73bba7521046490c47eb3ba4506f91e74d7d97" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:05.663Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:a6ad336fbf34ec9d8bbaf1112dc441640ec2accef6b291354189d5bf18bedfce" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:24.644Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:1034e697ab7104bcf8376032bbaa746c1eb5202085472f35fd50bdfeb83c71ab", "sha256:36cef499bbcc5ea8307642584c82d83764328e27ad1a3394be43efbe1ca712bc", "sha256:4b95f869149411e3fa169fefa4164fcce49eccb687fad3c5a332f2a6ddb2644c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:24.644Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:17e394d6d85350386f134ce4a79c9fb0b54d665a72468bb2e59b361eddc86918" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:22.066Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:0078949ce0b36aeaa080ed3ea2d1a1f76e1cdeaf4752758dd967076fad9fc6d7", "sha256:19bd9f67188fed51c4fa899c0f5d673c9f26a0e8bcbb99d94b03847eec9faa41" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:24.644Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:2e00e8d6e7404c4a68d2cd135ced119482a0dc52fad20e5106963cbb9ac41950" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.320Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:631acd55ae2c5fee5bf8f2839bfeb84d2ff12bb211b68cd1e9ad9ef387d91f50" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:04.809Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:777cb3d899b6d9679e8cd5ecaa3ba3d62bd27eaf4dfcb7a36dff4872553bd293" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.320Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:320623e48f5364b75703fc5157bcdb66b2853d39a07c261e48fd297953bc251c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.320Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:83abeceddc7721451cd60c12df889d6fb367eb61734d736c807cdc665b4d1b25" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:22.066Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:333cec4f2328c9372d84b91ee9a4c9ce2080d695b7d15d41d9d89de0b4361f96" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.103Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:5e6c2127371af1865491b7be0f5ad49b2a93273b9e4b5f8d8f6506338813041a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.103Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:74e77c365f7f2988dd1ab171b45fbbab2479b82e7305213acb531ded1fde890f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:22.066Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:b0d56cfcd8cd91955a164952e4eb1851791d90f44bade3099d0b080c220029a3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:07.723Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:3cc753395776053d426271c1041bb2096d251e37fb6fc0935a8c53188369c0ce" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:22.066Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:19e6a4e2a7f4b5b809a6ec0b8c14c0be229717d4cc6414c2b45f99e9a598c1cc", "sha256:450899b0a14c27850b456005addda1f602d8ca3d1f1c4cd83aa35c6974aea176", "sha256:c567ae6dd9c10890a411ebfd16655e54ea1162a38ee7dcd0298b07732aefb9cd", "sha256:c577b23bddc5b8bab7865044c9a421881fd0af1e9fa5f543c78a0834d0eb2dbf" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:16.308Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:3381b497e06f776766c58afa3560c9b5c55cf15c878f2d115e52404d9be74df4", "sha256:4af640c2842c8d2a8c74c9db44ccd111adbcaead617f35f3c6f566ad7d9953cb", "sha256:d21eb834b52724f60ddc792555331660ce92057dfb5180034750341345d301d0", "sha256:ff130e01d9eadef6a69f8756c7c5f12d76fd037a7342b637a0040d635db252d3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:16.308Z", "freshness": "fresh" } ] }, "canonical_url": "https://sourcey.com/catalog/mongodb/agent-readiness/mongodb-atlas-api/cluster-lifecycle", "projection_digest": "sha256:6ac67874865554ae1579efabcc872c9b1c5e7358411dc7c61010b6caecac954e" } } }