{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77", "snapshot_id": "sha256:0679a3f0d41c0733e76d10ab3fb1b331811893c7d428749740ec0f21ac731d3e", "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021", "data": { "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm", "entity_slug": "pinecone", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xf5d9pv2y8s1jm6rw3", "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm", "scope": { "product": { "key": "pinecone-database-api", "name": "Pinecone Database API" }, "funnel": { "key": "index-lifecycle", "name": "Index lifecycle" } }, "catalog_binding": { "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d", "entity_revision_digest": "sha256:e9e189b94a2779ae87069ff0564d9b42af13a48dd09efba1da4d509f66e08195" }, "declaration_revision_digest": "sha256:a46426271da24d2228774f1b40ced8efc3d854d61fc199666f33a650a33e2e4f", "declaration": { "declaration_id": "declaration_pinecone_api_index_lifecycle", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "62b512f0c49352e55a399ba53866a5effa431d71", "path": "vendors/pi/pinecone.yaml", "git_blob_oid": "9a235b9232b880b96008d7847d529d7fdac961c7", "blob_digest": "sha256:499fe9c88966e0919478f109a1f8bc71c9b5ec1c73b80370ee7560280629e781" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Create indexes and read and write vectors through the API", "interface_ids": [ "index-api" ] } ], "participants": [ { "participant_id": "pinecone", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm" } } ], "resources": [ { "resource_id": "api-errors", "uri": "https://docs.pinecone.io/reference/api/errors", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://docs.pinecone.io/reference/api/introduction", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "authentication", "uri": "https://docs.pinecone.io/reference/api/authentication", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://docs.pinecone.io/guides/organizations/manage-billing/change-payment-method", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "console-access", "uri": "https://app.pinecone.io/", "roles": [ "access" ], "operated_by_participant_id": "pinecone", "standard_bindings": [], "allowed_redirect_hosts": [ "login.pinecone.io" ] }, { "resource_id": "create-index", "uri": "https://docs.pinecone.io/reference/api/2025-04/control-plane/create_index", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "database-limits", "uri": "https://docs.pinecone.io/reference/api/database-limits", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://www.pinecone.io/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b", "uri": "https://docs.pinecone.io/guides/organizations/manage-service-accounts", "roles": [ "authentication", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d", "uri": "https://docs.pinecone.io/guides/organizations/understanding-organizations", "roles": [ "access", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://www.pinecone.io/legal/master-subscription-agreement/", "roles": [ "terms" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://docs.pinecone.io/troubleshooting/how-to-work-with-support", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "control-plane-api", "uri": "https://api.pinecone.io", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://app.pinecone.io/", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "pinecone", "standard_bindings": [], "allowed_redirect_hosts": [ "login.pinecone.io" ] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "authentication" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "interface_id": "index-api", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "control-plane-api" ], "resource_ids": [ "api-errors", "api-reference", "create-index", "database-limits" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "console-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "console-access" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } }, { "relation_id": "create-index-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "create-index" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "relation-describes-55929b53f57ecd7278ff26842c4a8a886b0996c33c7f0eb4e486df1398d7f604", "kind": "describes", "from": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-08-20T14:33:24.000Z", "revision_digest": "sha256:39645b9dc50771b06448b68dea635ae651a08aac56e5e3230cdcf7bb88998eec", "policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "policy_version": "service-use-2026-08-20-public-evidence-r9", "policy_as_of": "2026-08-20T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B+", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect actual Blocked stages by lifecycle severity.", "coverage_rule": "Every core graded metric must have supported, fresh, non-conflicting evidence. Barrier checks constrain the report when verified and cap an otherwise higher grade at B+ while unverified.", "outcome_rule": "Each stage takes its worst core metric or verified barrier, and the overall grade is derived from the five stage states plus the explicit unverified-barrier cap." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "provision", "stage_label": "Provision", "public_state": "limited", "finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "Pinecone documentation states that API keys can be created in the Pinecone console or generated via a connect widget, and client secrets for service accounts are displayed once upon creation in the console for manual copying, leaving credential delivery as a manual transfer step." } }, "limitations": [ { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "Pinecone documentation states that API keys can be created in the Pinecone console or generated via a connect widget, and client secrets for service accounts are displayed once upon creation in the console for manual copying, leaving credential delivery as a manual transfer step." }, "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Creating a Pinecone index returns a synchronous JSON response containing status fields such as ready (boolean), state ('Ready' or 'ScalingUpPodSize'), and host URL, establishing observable completion state but omitting explicit terminal error bounds or reconciliation guarantees." }, "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Pinecone documentation details HTTP response status codes for client errors (4xx) and server errors (5xx), and explicitly instructs implementing retry logic with exponential backoff for rate limiting (429) and transient server errors (500, 502, 503, 504). Safe failure handling is only partially documented as cancellation and explicit reconciliation semantics are not established in the evidence." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Pinecone documents service account client secret rotation and retrieval of an access token via the /oauth/token endpoint. However, rotating a service account secret is documented as a manual action performed in the Pinecone console." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "The Pinecone API reference documentation explicitly outlines stable entrypoints and discovery routes for Pinecone Database, Inference, and Admin APIs along with supported SDKs." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The Master Subscription Agreement is publicly retrievable and readable, containing the explicit terms and conditions governing the purchase and use of Pinecone's Services." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "Pinecone's Master Subscription Agreement explicitly defines eligibility requirements, stating that individuals using the Services for their own purposes must be legally permitted and competent to enter into the contract, and individuals acting on behalf of an entity represent that they have full legal right, power, and authority to bind that entity." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "Pinecone explicitly discloses its pricing model on its pricing page, detailing a free Starter tier as well as paid tiers including Builder at $20/month flat and Standard at $50/month minimum usage, alongside pay-as-you-go options." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:59.542Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:61bbb1b2c103d157b85a8791452145739dec9742652830453385205c411c98cc", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "sha256:118d6ae7b9950339e6f8d70428222e2d3f1abf2a45fa99ac2c8280bfb7602e03", "sha256:7fe868e2dfd22e56b2254f2f8195a99eb90bbd57b03ad700a3c609b0a538880e", "sha256:f909667b75d655a26f9fe7c46a4bd05bd73d2199f655ee74b028a3851cbc96e8" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3012, "end_byte": 3819, "value_digest": "sha256:8e6c627870c30c0249a9a4795f1d3c74e056a9f393ba897b8001ee0260e9ca86" }, { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3820, "end_byte": 4636, "value_digest": "sha256:f8a19ed8213630b7677c67a97defd882c341a316713094d8c7d2d4978e09c013" } ] } ], "note": "Pinecone's Master Subscription Agreement explicitly defines eligibility requirements, stating that individuals using the Services for their own purposes must be legally permitted and competent to enter into the contract, and individuals acting on behalf of an entity represent that they have full legal right, power, and authority to bind that entity." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:34.450Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b063e5a0dae2ca4ad0bc4390eb81249e86a60726d9474457eb5e4094e5e8c6df", "capture_rung": "http" } ], "artifact_digests": [ "sha256:003e6b8778f832938ae207229f6bf6b1899a17e296018c831d78d17829b0cd71", "sha256:3335b235fb1a42fbfeb83851d2ec10c44e4a19d4eb2fbc39495d6119a538e702", "sha256:8f0f32cae66d8e95cdbe7e5b471318888087d43a50efa77f9095296b5f2ebf51", "sha256:fd4cf08cb0ded4e28d75c8304d70f77cdd451483d2ed33273ea80b3091348c51" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:3335b235fb1a42fbfeb83851d2ec10c44e4a19d4eb2fbc39495d6119a538e702", "start_byte": 4951, "end_byte": 5750, "value_digest": "sha256:06ce6eb6d8dd3f11c4f2c08486b1ecd24f322f7fe8f2e93171207f7c2e4115f6" }, { "artifact_digest": "sha256:3335b235fb1a42fbfeb83851d2ec10c44e4a19d4eb2fbc39495d6119a538e702", "start_byte": 5751, "end_byte": 6539, "value_digest": "sha256:14e44ccac0ba5e7fbaf1d0e488a44a91fd62be4d48ef342916b6362aa7281645" } ] } ], "note": "Pinecone explicitly discloses its pricing model on its pricing page, detailing a free Starter tier as well as paid tiers including Builder at $20/month flat and Standard at $50/month minimum usage, alongside pay-as-you-go options." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:01.299Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ba31e92cc82ba13621d35b4503a3af7536514b109c69810bffb797f64094128f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3cc726284c18b338634143845dd88476f4916a16c60c2407bf86bb0ec65c7bf2", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "sha256:883bb0b416f157a9cdb316a5d2428c7eba0043889e1f790c814b0af2f95af97e" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "start_byte": 5353, "end_byte": 6131, "value_digest": "sha256:ca307d9601559d11a70691db439f41e5fac102a3d625fdfdbdf4fa5e5afe7da3" }, { "artifact_digest": "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "start_byte": 6132, "end_byte": 6938, "value_digest": "sha256:2f39d8040ef356be9cae814f48783fb7dab446300d9aad238894a67cefe625e1" } ] } ], "note": "The Pinecone API reference documentation explicitly outlines stable entrypoints and discovery routes for Pinecone Database, Inference, and Admin APIs along with supported SDKs." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "terms_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:59.542Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:61bbb1b2c103d157b85a8791452145739dec9742652830453385205c411c98cc", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "sha256:5b8feef220f63e55f75f3999d5b9a2c2b8d7248adcb99186cc33531c309fc0d1", "sha256:7fe868e2dfd22e56b2254f2f8195a99eb90bbd57b03ad700a3c609b0a538880e", "sha256:f909667b75d655a26f9fe7c46a4bd05bd73d2199f655ee74b028a3851cbc96e8" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3012, "end_byte": 3819, "value_digest": "sha256:8e6c627870c30c0249a9a4795f1d3c74e056a9f393ba897b8001ee0260e9ca86" }, { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 4637, "end_byte": 5444, "value_digest": "sha256:8728cea531f9fa90a93d5e459d0d70471737e5bb70b8e116dd1d46d18612b4ac" } ] } ], "note": "The Master Subscription Agreement is publicly retrievable and readable, containing the explicit terms and conditions governing the purchase and use of Pinecone's Services." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "Pinecone documentation includes functional links to 'Log In' and 'Sign up free', providing a stable entrypoint to begin service access." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained capture from https://app.pinecone.io/ returns an application shell ('Pinecone Console') without accessible web form fields or controls, leaving access control operability unresolved." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained captures across the pinecone application shell and documentation pages contain no explicit declaration or direct observation regarding CAPTCHA requirements or alternative agent access routes." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence across the console application shell and documentation pages contains no explicit declaration or direct observation regarding phone verification requirements." }, { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "context": "Pinecone documents API keys scoped to projects and service accounts that enable programmatic access using client secrets and OAuth client credentials via https://login.pinecone.io/oauth/token." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:14.025Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained capture from https://app.pinecone.io/ returns an application shell ('Pinecone Console') without accessible web form fields or controls, leaving access control operability unresolved." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:14.219Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:3df880ab8cc43bee9d7c2490e243c92fba2727c80c15b3277d2e59aba99e6f37", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:31937a2c9cba2f78a1f8754f46c9d0a3d764f27bca7b6cf6fa57f108cc97a04b", "sha256:37565ae8a28f31970762755d39bb4095705ce2ef2d9b27f8fff1ae73bb8f6cdc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5970d7da7af08a200f74ff05236ee0ed4ccc3c927c2d16ebe95fb5fbc42beeb5", "sha256:74d1ae6d32ddd4979faa7149523922a905f3dc0483fd65ff9babdf9821899c19", "sha256:ec140beb3db5de7909454ee428bc1436b24ee3ee401be1316e72bc03d230f2a7" ], "locators": [ { "artifact_digest": "sha256:37565ae8a28f31970762755d39bb4095705ce2ef2d9b27f8fff1ae73bb8f6cdc", "start_byte": 8361, "end_byte": 9153, "value_digest": "sha256:a1bc3566328b8a093175acc347be521c92ff37e6a4809b20b2a17459e0e515b0" } ] } ], "note": "Pinecone documentation includes functional links to 'Log In' and 'Sign up free', providing a stable entrypoint to begin service access." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:14.219Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained captures across the pinecone application shell and documentation pages contain no explicit declaration or direct observation regarding CAPTCHA requirements or alternative agent access routes." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:33.433Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8fab5d5b5fda016d943697e1ad167a11fd1c1dcaf683632604cd3fabccd17374", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9f285ee30b57a5acacebee26b8d61e59da3d125d028393a698c9149039c91628", "sha256:fc5d831218e2bd4bdfe54906a79e3e0cb447bfad278884f7fe40e787f606a604" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "start_byte": 10616, "end_byte": 11413, "value_digest": "sha256:8d091a740115ff4d9b2e3ad61e87fc115649151dfa5940236bd76c9cfd9c75c5" }, { "artifact_digest": "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "start_byte": 11414, "end_byte": 12200, "value_digest": "sha256:d458db53fce9ae0c323ab839c774487d5001679faaa7f9ed9b44ac53d3351668" } ] } ], "note": "Pinecone documents API keys scoped to projects and service accounts that enable programmatic access using client secrets and OAuth client credentials via https://login.pinecone.io/oauth/token." }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:14.219Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The retained evidence across the console application shell and documentation pages contains no explicit declaration or direct observation regarding phone verification requirements." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "Pinecone's pricing page explicitly discloses charge terms, currencies, monthly recurring rates, and min usage commitments, such as the Builder plan at $20/month flat and Standard plan at $50/month minimum usage." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence does not establish the full deterministic checkout construction, approval handoff, and resumption flow." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Documentation states payment methods can be updated by an organization owner or billing admin, but does not detail a delegated agent rail or explicit human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "Pinecone documents a direct self-service path to upgrade to paid Standard or Enterprise plans by navigating to Settings > Billing > Plans, clicking Upgrade, selecting Credit / Debit card, and entering payment details." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.252Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "Current admissible evidence does not establish the full deterministic checkout construction, approval handoff, and resumption flow." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:34.450Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b063e5a0dae2ca4ad0bc4390eb81249e86a60726d9474457eb5e4094e5e8c6df", "capture_rung": "http" } ], "artifact_digests": [ "sha256:003e6b8778f832938ae207229f6bf6b1899a17e296018c831d78d17829b0cd71", "sha256:0604ef48dd5afc832772099ad7e861595be1e36b11e8aaaa0975859c4317db0e", "sha256:3335b235fb1a42fbfeb83851d2ec10c44e4a19d4eb2fbc39495d6119a538e702", "sha256:fd4cf08cb0ded4e28d75c8304d70f77cdd451483d2ed33273ea80b3091348c51" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:3335b235fb1a42fbfeb83851d2ec10c44e4a19d4eb2fbc39495d6119a538e702", "start_byte": 5751, "end_byte": 6539, "value_digest": "sha256:14e44ccac0ba5e7fbaf1d0e488a44a91fd62be4d48ef342916b6362aa7281645" } ] } ], "note": "Pinecone's pricing page explicitly discloses charge terms, currencies, monthly recurring rates, and min usage commitments, such as the Builder plan at $20/month flat and Standard plan at $50/month minimum usage." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.252Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "Documentation states payment methods can be updated by an organization owner or billing admin, but does not detail a delegated agent rail or explicit human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:10.252Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:911ea76b297d1993bf2d07a6c4c43f941eb057baa03135c0844c0d9c1ddb5c83", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0f9fad59597738bd5efd72b551e03925b5272a715486e54657246fd2e2b31409", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:80960e414e18c3edd2444caf0e70672d6a7a0c81c82c95fa1d30c89bf738301c", "sha256:f0a88d5bb01c26a6c728de226e965c2858aaf436ff3edf07b62a88f158cf6671" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:80960e414e18c3edd2444caf0e70672d6a7a0c81c82c95fa1d30c89bf738301c", "start_byte": 33001, "end_byte": 33747, "value_digest": "sha256:b6b44202fc72b4fba1c74747731c165be7b61532fa49cd784377a4b6f59dd98e" } ] } ], "note": "Pinecone documents a direct self-service path to upgrade to paid Standard or Enterprise plans by navigating to Settings > Billing > Plans, clicking Upgrade, selecting Credit / Debit card, and entering payment details." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "Pinecone documentation states that API keys can be created in the Pinecone console or generated via a connect widget, and client secrets for service accounts are displayed once upon creation in the console for manual copying, leaving credential delivery as a manual transfer step." }, "secondary_context": [ { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Creating a Pinecone index returns a synchronous JSON response containing status fields such as ready (boolean), state ('Ready' or 'ScalingUpPodSize'), and host URL, establishing observable completion state but omitting explicit terminal error bounds or reconciliation guarantees." }, { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Pinecone index provisioning can be initiated programmatically within supported agent authority by issuing an HTTP POST request to the https://api.pinecone.io/indexes endpoint using a valid Api-Key header or via SDK methods like CreateServerlessIndex." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:33.695Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:51a67dd7c9dc1a40e0a3522feddac7c704d969f85d5b02ee15540d6784e81f7b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5becadcc174ce0374345481057b3da6e77861b216d0eae6ef71f8ca8b158a92d", "sha256:79216e9a9c53b6a3b8224a2dff3d761d0d612b536a20ec3bbe65c20957b52a67", "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677", "start_byte": 5797, "end_byte": 6588, "value_digest": "sha256:e14315bf235cc1d8a7925d69190b283d558f5ce0eeb9b4a750ca5e880c97af98" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8fab5d5b5fda016d943697e1ad167a11fd1c1dcaf683632604cd3fabccd17374", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0e5f9558b59beda9db7522162e661604dccd796c93e61f5dcef2e03e79455226", "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9f285ee30b57a5acacebee26b8d61e59da3d125d028393a698c9149039c91628" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "start_byte": 10616, "end_byte": 11413, "value_digest": "sha256:8d091a740115ff4d9b2e3ad61e87fc115649151dfa5940236bd76c9cfd9c75c5" } ] } ], "note": "Pinecone documentation states that API keys can be created in the Pinecone console or generated via a connect widget, and client secrets for service accounts are displayed once upon creation in the console for manual copying, leaving credential delivery as a manual transfer step.", "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:31.608Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "create-index" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:82d5899acba186ab50d77aa31104dd38f4ccd0b203d2bb124b8bfe26fc959424", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:86b97220eedaa9e34b9fbdb7b5014d1b693877546d899ba63e7f5d99007f0847", "sha256:c4f4c5b6fc8057427e89806eed2abe78e8181cd74656f76249fc7e196351a216" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "start_byte": 11260, "end_byte": 11855, "value_digest": "sha256:881289a3956e5219232b5461f8e9748eef535110f1b6bced778878afd02343d5" }, { "artifact_digest": "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "start_byte": 23828, "end_byte": 24635, "value_digest": "sha256:d6736a9cd52ca388764fafe1138ca60372b956aaf1f6459707c4ed80325a4e3e" } ] } ], "note": "Creating a Pinecone index returns a synchronous JSON response containing status fields such as ready (boolean), state ('Ready' or 'ScalingUpPodSize'), and host URL, establishing observable completion state but omitting explicit terminal error bounds or reconciliation guarantees.", "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:33.695Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "create-index" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:51a67dd7c9dc1a40e0a3522feddac7c704d969f85d5b02ee15540d6784e81f7b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5becadcc174ce0374345481057b3da6e77861b216d0eae6ef71f8ca8b158a92d", "sha256:65fb14bf810e70a7d26ed4612ce0b58eb3262e1b73128d7bd94e1ccb4701adce", "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677", "start_byte": 8843, "end_byte": 9632, "value_digest": "sha256:526629b7030b7882039ed52ecbe384a5fda6e7e375a92a496d3eb9cb3f2e215f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:82d5899acba186ab50d77aa31104dd38f4ccd0b203d2bb124b8bfe26fc959424", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:ba4f39f09afbfcf9804128d91b3117a7dfba07a0378cdd08986b3093adc5d1f9", "sha256:c4f4c5b6fc8057427e89806eed2abe78e8181cd74656f76249fc7e196351a216" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "start_byte": 9783, "end_byte": 10579, "value_digest": "sha256:df6a8a3329a56d6b942b7870504739d77e4eafcb2e14c3710544dbcc881dab92" } ] } ], "note": "Pinecone index provisioning can be initiated programmatically within supported agent authority by issuing an HTTP POST request to the https://api.pinecone.io/indexes endpoint using a valid Api-Key header or via SDK methods like CreateServerlessIndex." } ], "blockers": [], "remediations": [ { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." }, { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Pinecone documentation details HTTP response status codes for client errors (4xx) and server errors (5xx), and explicitly instructs implementing retry logic with exponential backoff for rate limiting (429) and transient server errors (500, 502, 503, 504). Safe failure handling is only partially documented as cancellation and explicit reconciliation semantics are not established in the evidence." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Pinecone documents service account client secret rotation and retrieval of an access token via the /oauth/token endpoint. However, rotating a service account secret is documented as a manual action performed in the Pinecone console." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Machine-operable interfaces including official SDKs (Python, Node.js, Java, Go), a CLI tool, and direct REST HTTP endpoints are provided and documented for all essential operation targets." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "All requests to Pinecone APIs must contain an Api-Key header specifying a valid API key for the target project, which can be passed directly in HTTP headers or configured within initialized SDK clients." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "The API reference and database limits endpoints define request schemas, parameters, response object structures, HTTP methods, status codes, and operating limits across all evaluated surfaces." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:33.433Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8fab5d5b5fda016d943697e1ad167a11fd1c1dcaf683632604cd3fabccd17374", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6105407d6a2fb9ab1e16a816b39bd06a18e3928a3f9945e5b8c813f1cc572798", "sha256:9f285ee30b57a5acacebee26b8d61e59da3d125d028393a698c9149039c91628" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "start_byte": 11414, "end_byte": 12200, "value_digest": "sha256:d458db53fce9ae0c323ab839c774487d5001679faaa7f9ed9b44ac53d3351668" }, { "artifact_digest": "sha256:4660bd21c4985a758a0c7b8a6c1291f9b063430ca553c4e99275b9e3e1b5dc30", "start_byte": 12990, "end_byte": 13798, "value_digest": "sha256:791fbd0eab67c82f3eb3ed240e75e417587b7f7a00e0f52e1813a571bd3997e8" } ] } ], "note": "Pinecone documents service account client secret rotation and retrieval of an access token via the /oauth/token endpoint. However, rotating a service account secret is documented as a manual action performed in the Pinecone console.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:23.232Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ce41a35e3fd6355da3f20c793e86ce2ed66d4e0f94925e626f32e1620abb826b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e648c14916f39d975dfa811e6edd6958975f7673005d962e972f28c52542880", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "sha256:80ded8e7716ebc4f023cee2a887a6e886bfb4dd782efccfab3b9ea4d7fc33bb5" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "start_byte": 7081, "end_byte": 7889, "value_digest": "sha256:5cf6825cc7da0ebed7e93c603dea61a08e01dfa778f4fb54933c16fa6af52afb" }, { "artifact_digest": "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "start_byte": 7890, "end_byte": 8704, "value_digest": "sha256:207eed41e1ea7bb4520207030bb415cb524336ad2c2eb4a744fd96888d851da9" } ] } ], "note": "Pinecone documentation details HTTP response status codes for client errors (4xx) and server errors (5xx), and explicitly instructs implementing retry logic with exponential backoff for rate limiting (429) and transient server errors (500, 502, 503, 504). Safe failure handling is only partially documented as cancellation and explicit reconciliation semantics are not established in the evidence.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:33.695Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:51a67dd7c9dc1a40e0a3522feddac7c704d969f85d5b02ee15540d6784e81f7b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5becadcc174ce0374345481057b3da6e77861b216d0eae6ef71f8ca8b158a92d", "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677", "sha256:f8310ac08ee81c14479336d60ab743714047be35651129aefe83ec0733ce71e5" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677", "start_byte": 5797, "end_byte": 6588, "value_digest": "sha256:e14315bf235cc1d8a7925d69190b283d558f5ce0eeb9b4a750ca5e880c97af98" }, { "artifact_digest": "sha256:a0ac6e380787b2724280bf6a8f21ab58614c2a1c3e9a64f3ee80a56b702b6677", "start_byte": 8843, "end_byte": 9632, "value_digest": "sha256:526629b7030b7882039ed52ecbe384a5fda6e7e375a92a496d3eb9cb3f2e215f" } ] } ], "note": "All requests to Pinecone APIs must contain an Api-Key header specifying a valid API key for the target project, which can be passed directly in HTTP headers or configured within initialized SDK clients." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:01.299Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "index-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4cd179785f5f2a1be1c0bcd12c509472ae2a442b92c387817652ab2b31f71f82", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:71ef7aaf3aa0babc2765d9559b728ae6dfe8164fd8322b68ad6476c8a89bd85f", "sha256:8781a19439d96132ee45f1ac24b2bdd0db4de09d037e7992b536a846dcfc139e", "sha256:d4fb1079255f12aaffb6dd4b9ff83a82929777b2ebd1bf731ee204f1f3e1a1de" ], "source_surface": { "node_kind": "resource", "node_id": "database-limits" }, "locators": [ { "artifact_digest": "sha256:71ef7aaf3aa0babc2765d9559b728ae6dfe8164fd8322b68ad6476c8a89bd85f", "start_byte": 19169, "end_byte": 19968, "value_digest": "sha256:f21bee7c996b8be4d5a31adc3735d97014de24a19a288e0d880436912e478c20" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ce41a35e3fd6355da3f20c793e86ce2ed66d4e0f94925e626f32e1620abb826b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e648c14916f39d975dfa811e6edd6958975f7673005d962e972f28c52542880", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "sha256:ae41aa15ea24dec7970012632be26cdd43d882a22f299282698a6e854ebc56e3" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "start_byte": 7081, "end_byte": 7889, "value_digest": "sha256:5cf6825cc7da0ebed7e93c603dea61a08e01dfa778f4fb54933c16fa6af52afb" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:82d5899acba186ab50d77aa31104dd38f4ccd0b203d2bb124b8bfe26fc959424", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:ba4f39f09afbfcf9804128d91b3117a7dfba07a0378cdd08986b3093adc5d1f9", "sha256:c4f4c5b6fc8057427e89806eed2abe78e8181cd74656f76249fc7e196351a216" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "start_byte": 9783, "end_byte": 10579, "value_digest": "sha256:df6a8a3329a56d6b942b7870504739d77e4eafcb2e14c3710544dbcc881dab92" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ba31e92cc82ba13621d35b4503a3af7536514b109c69810bffb797f64094128f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:75d46d7db6658ee907a47f0e06c6db44b9251a945571030319e77cdb28e1c99f", "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "sha256:883bb0b416f157a9cdb316a5d2428c7eba0043889e1f790c814b0af2f95af97e" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "start_byte": 6132, "end_byte": 6938, "value_digest": "sha256:2f39d8040ef356be9cae814f48783fb7dab446300d9aad238894a67cefe625e1" } ] } ], "note": "The API reference and database limits endpoints define request schemas, parameters, response object structures, HTTP methods, status codes, and operating limits across all evaluated surfaces." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:01.299Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "index-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4cd179785f5f2a1be1c0bcd12c509472ae2a442b92c387817652ab2b31f71f82", "capture_rung": "http" } ], "artifact_digests": [ "sha256:105e7661036559f8b8905784a7465e3e4fbff8bb80920b6fc5da0e0f51dde3ef", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:71ef7aaf3aa0babc2765d9559b728ae6dfe8164fd8322b68ad6476c8a89bd85f", "sha256:8781a19439d96132ee45f1ac24b2bdd0db4de09d037e7992b536a846dcfc139e" ], "source_surface": { "node_kind": "resource", "node_id": "database-limits" }, "locators": [ { "artifact_digest": "sha256:71ef7aaf3aa0babc2765d9559b728ae6dfe8164fd8322b68ad6476c8a89bd85f", "start_byte": 8798, "end_byte": 9586, "value_digest": "sha256:2c7c11804a2eb510f540e4456a16d01e54236353ddd6699911d7680a5e0baf6e" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ce41a35e3fd6355da3f20c793e86ce2ed66d4e0f94925e626f32e1620abb826b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e648c14916f39d975dfa811e6edd6958975f7673005d962e972f28c52542880", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "sha256:ae41aa15ea24dec7970012632be26cdd43d882a22f299282698a6e854ebc56e3" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:54369025a299a523f3a0110bddb38d96b551e70f3593cfa55b820ae3bef8b694", "start_byte": 7081, "end_byte": 7889, "value_digest": "sha256:5cf6825cc7da0ebed7e93c603dea61a08e01dfa778f4fb54933c16fa6af52afb" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ba31e92cc82ba13621d35b4503a3af7536514b109c69810bffb797f64094128f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:75d46d7db6658ee907a47f0e06c6db44b9251a945571030319e77cdb28e1c99f", "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "sha256:883bb0b416f157a9cdb316a5d2428c7eba0043889e1f790c814b0af2f95af97e" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:82c7407d19201ccea260b4e82de51d30220ab77473b1a70ecfdb697d3e2f8324", "start_byte": 6132, "end_byte": 6938, "value_digest": "sha256:2f39d8040ef356be9cae814f48783fb7dab446300d9aad238894a67cefe625e1" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:82d5899acba186ab50d77aa31104dd38f4ccd0b203d2bb124b8bfe26fc959424", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9f409e8f68c9ec59457625e1d80912715264c4527c5ff6cf937c563c33917f7f", "sha256:c4f4c5b6fc8057427e89806eed2abe78e8181cd74656f76249fc7e196351a216" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:4885f4ccd34fd5dcec3c68fff2fe37a64d41a7f720cbdfe3081ca5d9bae3a600", "start_byte": 7694, "end_byte": 8372, "value_digest": "sha256:5dbbc70b54ca8a3e964916c102f4389a821b4e3c39adbda32f9147ea38f6deff" } ] } ], "note": "Machine-operable interfaces including official SDKs (Python, Node.js, Java, Go), a CLI tool, and direct REST HTTP endpoints are provided and documented for all essential operation targets." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 16, "covered_signals": 16, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-08-20T15:57:14.219Z", "freshness": "fresh", "provenance": { "tier": "observed", "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "freshness_policy_digest": "sha256:00f7f2a35f37b184e57ce2cc116f6a5e3feb4813991aacd7e29e322f2d3607a8", "basis_event_ids": [ "sha256:06bd73c84b26722b17b24761fa3604e5d88ac85c7d027aa656143692be6ae6da", "sha256:09d01e090a44cbcb6d33bf33135073041e8c3b7047d19e6a4cdeffe9e93334c6", "sha256:0ef80fc2d3dff15fc370803077370885ad4375000b2df7ccf0444f4ae52661d1", "sha256:103530a81d44614b433e6ee54242a7a465d6ba9490b0c75d513b8cbe892b0bed", "sha256:1ce151de77c7477de15dd7ee284698db783579db8b6848e6ac6e271ee64ea847", "sha256:2acbfbc5995b336c9dfd4cb9c07ba28289f20169fd081198a1e7a80b09fa33b7", "sha256:405924775f7b24165fb640a47311a883e43c3943b423e6fedebeb5571dcf53de", "sha256:42722bd32e9757e3274a2568cc2feb1daa7b7963304785785541fd8d0c0daecd", "sha256:448122eb3113c8b20fd3c19fd5ebeaac1c3b9c692e32e9ef5dcaf771489eb74a", "sha256:4798e192594eeb874c664d6f8f0b6c8674dc4eb235b1e8e687fd9c67969f0040", "sha256:4a8f902944abdc1af86a459b35be3e1bf2e9d126f0e70dd4281a929af873e570", "sha256:528aaa6ed8fed75e57b7cf0acbe5be7641c024e334a135c473d31e8e0bd78145", "sha256:55b1364d7149ce69e49241bd82b08b58a9aa15aebc443e904af86bd6bb2dd6dc", "sha256:5711a40837ae627deb1e983a2d2fb1e84a9bd32f1ce6d662f13f5ee2507d402d", "sha256:584891a9348d94a830e7e85f63c3b76280efd74ed3ee9de0a9b73100e6e4f213", "sha256:6ce0a8734abf20ce8ab3cdb84ee2f59859bc49702f9d8a7c4b411a3173931f24", "sha256:6d79e7b03733c76842661d0b2b4854f7c81ffa4f168dfc87ca3f7bcbcdb24e69", "sha256:6e3a361eea3d51454fca6ce5c7cafffe628c18db08f10006e141d6666406cb09", "sha256:7193d7ee4467a840e16a77eb1b12af62916558fe2a1ab7ea8a4e5674dfef09ca", "sha256:7f10d79ae0288ea20ac22551b12ff5b7586a082b02c3712271a5018acecb4a72", "sha256:88eefd93dff0ceedae43a4af30b21c4efd003c65b4e9703291979e16552e74a5", "sha256:8eb7fc5b4e95cff56233f41f949741fa223822aae26dba19d1cdffb4cf17e2e2", "sha256:a21e814cc3a800ec457c5154b76f0e75a628365b1c4f5aa5f28196b628589865", "sha256:a3254169129e08b801931e0e2e9c0f0c29981e539b603b80c4e966fd106769e7", "sha256:aa01741f061ea41dd633603df65a7cd0c665e6b4e8f03aaa47e6aeee040f31f7", "sha256:b187f6c68700f922e5ed22972beea38a457e03d4a9f9fff375f149668ea8f301", "sha256:bfe8afe6cfd349a13066e352191bbee65858504af3568acaf9fabfd8e4abce39", "sha256:c8904dfe0c89dfa7f1d2f1088f6b540a9bc5f5de105dc7cd59c345912b43aa8c", "sha256:d0b756ac250e2543183fc0f8da79278f3b353199ad1e20b4b071a2175ceb9cd2", "sha256:d8275f1fa5192dedb203af18811bbd0a5472e4b07fc93e108c330474066b6655", "sha256:f4179cfc33e8aa2d8dda16e000647d90f5ccb4545746d7b1d92044236144bedd", "sha256:f879a08fc3cdb0d3585d34fd8b76dec5c185424b1acd3e5aeddc41dbb2d44906" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:0ef80fc2d3dff15fc370803077370885ad4375000b2df7ccf0444f4ae52661d1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:59.542Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:09d01e090a44cbcb6d33bf33135073041e8c3b7047d19e6a4cdeffe9e93334c6" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:34.450Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:c8904dfe0c89dfa7f1d2f1088f6b540a9bc5f5de105dc7cd59c345912b43aa8c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:01.299Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:aa01741f061ea41dd633603df65a7cd0c665e6b4e8f03aaa47e6aeee040f31f7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:59.542Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:d0b756ac250e2543183fc0f8da79278f3b353199ad1e20b4b071a2175ceb9cd2" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:14.025Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:06bd73c84b26722b17b24761fa3604e5d88ac85c7d027aa656143692be6ae6da" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:14.219Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:55b1364d7149ce69e49241bd82b08b58a9aa15aebc443e904af86bd6bb2dd6dc", "sha256:5711a40837ae627deb1e983a2d2fb1e84a9bd32f1ce6d662f13f5ee2507d402d", "sha256:6e3a361eea3d51454fca6ce5c7cafffe628c18db08f10006e141d6666406cb09" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:14.219Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:4a8f902944abdc1af86a459b35be3e1bf2e9d126f0e70dd4281a929af873e570" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:33.433Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:8eb7fc5b4e95cff56233f41f949741fa223822aae26dba19d1cdffb4cf17e2e2", "sha256:bfe8afe6cfd349a13066e352191bbee65858504af3568acaf9fabfd8e4abce39" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:14.219Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:f4179cfc33e8aa2d8dda16e000647d90f5ccb4545746d7b1d92044236144bedd" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.252Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:4798e192594eeb874c664d6f8f0b6c8674dc4eb235b1e8e687fd9c67969f0040" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:34.450Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:88eefd93dff0ceedae43a4af30b21c4efd003c65b4e9703291979e16552e74a5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.252Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:7193d7ee4467a840e16a77eb1b12af62916558fe2a1ab7ea8a4e5674dfef09ca" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:10.252Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:103530a81d44614b433e6ee54242a7a465d6ba9490b0c75d513b8cbe892b0bed", "sha256:1ce151de77c7477de15dd7ee284698db783579db8b6848e6ac6e271ee64ea847" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:33.695Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:2acbfbc5995b336c9dfd4cb9c07ba28289f20169fd081198a1e7a80b09fa33b7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:31.608Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:6ce0a8734abf20ce8ab3cdb84ee2f59859bc49702f9d8a7c4b411a3173931f24", "sha256:d8275f1fa5192dedb203af18811bbd0a5472e4b07fc93e108c330474066b6655" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:33.695Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:448122eb3113c8b20fd3c19fd5ebeaac1c3b9c692e32e9ef5dcaf771489eb74a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:33.433Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:6d79e7b03733c76842661d0b2b4854f7c81ffa4f168dfc87ca3f7bcbcdb24e69" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:23.232Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:a3254169129e08b801931e0e2e9c0f0c29981e539b603b80c4e966fd106769e7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:33.695Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:42722bd32e9757e3274a2568cc2feb1daa7b7963304785785541fd8d0c0daecd", "sha256:528aaa6ed8fed75e57b7cf0acbe5be7641c024e334a135c473d31e8e0bd78145", "sha256:584891a9348d94a830e7e85f63c3b76280efd74ed3ee9de0a9b73100e6e4f213", "sha256:f879a08fc3cdb0d3585d34fd8b76dec5c185424b1acd3e5aeddc41dbb2d44906" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:01.299Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:405924775f7b24165fb640a47311a883e43c3943b423e6fedebeb5571dcf53de", "sha256:7f10d79ae0288ea20ac22551b12ff5b7586a082b02c3712271a5018acecb4a72", "sha256:a21e814cc3a800ec457c5154b76f0e75a628365b1c4f5aa5f28196b628589865", "sha256:b187f6c68700f922e5ed22972beea38a457e03d4a9f9fff375f149668ea8f301" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:01.299Z", "freshness": "fresh" } ] }, "canonical_url": "https://sourcey.com/catalog/pinecone/agent-readiness/pinecone-database-api/index-lifecycle", "projection_digest": "sha256:4719d9b9387d551cba5189db43a928ba2c662b1229dfb1e8c879fc8c865f1093" } } }