{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77", "snapshot_id": "sha256:0679a3f0d41c0733e76d10ab3fb1b331811893c7d428749740ec0f21ac731d3e", "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021", "data": { "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n", "entity_slug": "resend", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xg7f2qx5a9t4kn8yc1", "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n", "scope": { "product": { "key": "resend-email-api", "name": "Resend Email API" }, "funnel": { "key": "email-operations", "name": "Email operations" } }, "catalog_binding": { "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d", "entity_revision_digest": "sha256:fa431d85735d9d0d9bb6217327736315684c127693bbdcb7cccded272abd8e3f" }, "declaration_revision_digest": "sha256:6cb7a7727c7a72439ef0309a5451fac024196dfa1243c9ed485f3d473154a8cd", "declaration": { "declaration_id": "declaration_resend_email_api_operations", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "62b512f0c49352e55a399ba53866a5effa431d71", "path": "vendors/re/resend.yaml", "git_blob_oid": "66fbf74eadbe0b6ab97fcf33b57ad6c9420b7259", "blob_digest": "sha256:e04a756342783e8b7b5428a70ee3d969f602b1d5c9cb3a92aa1ef3d5c567e8f2" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Send email through the API", "interface_ids": [ "email-api" ] } ], "participants": [ { "participant_id": "resend", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n" } } ], "resources": [ { "resource_id": "account-signup", "uri": "https://resend.com/signup", "roles": [ "access" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-errors", "uri": "https://resend.com/docs/api-reference/errors", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-keys", "uri": "https://resend.com/docs/dashboard/api-keys/introduction", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://resend.com/docs/api-reference/introduction", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://resend.com/docs/dashboard/settings/billing", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "domain-provisioning", "uri": "https://resend.com/docs/api-reference/domains/create-domain", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://resend.com/pricing", "roles": [ "checkout", "documentation", "pricing" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351", "uri": "https://resend.com/docs/api-reference/api-keys/create-api-key", "roles": [ "authentication", "documentation" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "send-email", "uri": "https://resend.com/docs/api-reference/emails/send-email", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://resend.com/legal/terms-of-service", "roles": [ "terms" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://resend.com/docs/knowledge-base/introduction", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "registration", "uri": "https://resend.com/signup", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "endpoint_id": "resend-api", "uri": "https://api.resend.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "api-keys" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "interface_id": "email-api", "modality": "network_api", "functions": [ "events", "service_operation" ], "endpoint_ids": [ "resend-api" ], "resource_ids": [ "api-errors", "send-email" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "relation-describes-6c4d56035c5e22a92de30089f00893064e796c95327ba614484ea47b04c629c9", "kind": "describes", "from": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } }, { "relation_id": "sending-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "send-email" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "signup-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-signup" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-08-20T14:33:24.000Z", "revision_digest": "sha256:8442998404f1dce9c1a71a71f2788de80e9d5e233adf5d63e2184e7a86cc3bc7", "policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "policy_version": "service-use-2026-08-20-public-evidence-r9", "policy_as_of": "2026-08-20T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect actual Blocked stages by lifecycle severity.", "coverage_rule": "Every core graded metric must have supported, fresh, non-conflicting evidence. Barrier checks constrain the report when verified and cap an otherwise higher grade at B+ while unverified.", "outcome_rule": "Each stage takes its worst core metric or verified barrier, and the overall grade is derived from the five stage states plus the explicit unverified-barrier cap." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "sign_up", "stage_label": "Sign up", "public_state": "limited", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides scoped, revocable API keys with permissions such as full_access or sending_access that can be created and managed via the dashboard, CLI, or API, but obtaining initial dashboard keys requires manual human copying as key values cannot be viewed or edited after creation." } }, "limitations": [ { "stage": "sign_up", "stage_label": "Sign up", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides scoped, revocable API keys with permissions such as full_access or sending_access that can be created and managed via the dashboard, CLI, or API, but obtaining initial dashboard keys requires manual human copying as key values cannot be viewed or edited after creation." }, "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "stage": "pay", "stage_label": "Pay", "finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "Resend provides a direct self-service path to upgrade or manage subscriptions via the Billing page in Settings, but the top-tier Enterprise plan requires contacting sales (\"Contact us\")." }, "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Resend documents that API keys can be created, edited (name, permission, domain), listed, and deleted via the Dashboard, API, or CLI. However, the evidence does not document programmatic secret rotation, compromise recovery, or key value viewing after creation." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "Resend's API reference documents the service introduction, stating that all requests use HTTPS and the stable base URL https://api.resend.com, with Bearer token authentication." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The Terms of Service are retrievable and readable, explicitly defining the Agreement between Plus Five Five, Inc. and the User governing the use of resend.com services." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "Resend's Terms of Service state that the service is intended for access and use by individuals who are at least eighteen years old and possess full legal authority, right, and capacity to enter into the agreement." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "Resend explicitly provides pricing details including a free tier, explicit add-on pricing such as $20/month for domains and $30/month for dedicated IPs, as well as pay-as-you-go rates for emails beyond quotas and automations ($0.0015 per run)." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:55:58.078Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fcea5adf49cd2e71fe4a04669be698132f3e3f5638cc713293c24f14f297bd1d", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3030877e4f7b1b9eaf224c40a609f43cb0832b1b7f802dd8561367c4350fe0c6", "sha256:313447f3ca2af918e282499828cfc955d4022c17db79d0e9b10b5b6e1a0ca3bf", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:c211922e8f2c03eca4bc7dd45ef67870956ab6117ab9792024340d981430d289" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:3030877e4f7b1b9eaf224c40a609f43cb0832b1b7f802dd8561367c4350fe0c6", "start_byte": 12498, "end_byte": 13296, "value_digest": "sha256:5191045a73a685030ae3fd9d211739b072e32f0157644c20773efd84eb3deb73" } ] } ], "note": "Resend's Terms of Service state that the service is intended for access and use by individuals who are at least eighteen years old and possess full legal authority, right, and capacity to enter into the agreement." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:29.922Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bc4e32ec89b96e44944f2fbda1a9140760dd477f9a6c758a29b9c4f31bbf45d5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "sha256:de46219baaf32c8bc9649006b7ed2f031dffc5b2118319b5f9abb672b9eb2c7b", "sha256:e69929d794c6cc9692a5aa4addd05b229d7b76fbe336eb6f086557addd37b1d9" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "start_byte": 15223, "end_byte": 15920, "value_digest": "sha256:88032986d477c8584d6bc2fe7653843ad1822009d13e1a2efb6097c8232bfbb6" }, { "artifact_digest": "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "start_byte": 4875, "end_byte": 5676, "value_digest": "sha256:320e7b1e8c574bf6bf6373425392bc8814ef2d589c5eab128ceb7d3c64bb40f2" } ] } ], "note": "Resend explicitly provides pricing details including a free tier, explicit add-on pricing such as $20/month for domains and $30/month for dedicated IPs, as well as pay-as-you-go rates for emails beyond quotas and automations ($0.0015 per run)." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:01.463Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:654c98c474d836b90258b596364412970a3e932430fd2cfc049425ebffee46e2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:39a4bfaa159cf7da0d9597e952238a409031b301ee648dc68bd7feccf1c4461d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:98067d759c6ab5e5a14c0cd091e8415a552866884ec50b3033aa1d49b93c28de", "sha256:cb0d7b0b4e40ecdd60ccc434d44e43044536a80795c636e025b30ebf06017194" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:cb0d7b0b4e40ecdd60ccc434d44e43044536a80795c636e025b30ebf06017194", "start_byte": 16452, "end_byte": 17251, "value_digest": "sha256:5b60e8012392bb58020c8cc1204cfe609ae70d6b3f9b0855aae3cd2276d4f1cc" } ] } ], "note": "Resend's API reference documents the service introduction, stating that all requests use HTTPS and the stable base URL https://api.resend.com, with Bearer token authentication." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "terms_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:55:58.078Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fcea5adf49cd2e71fe4a04669be698132f3e3f5638cc713293c24f14f297bd1d", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3030877e4f7b1b9eaf224c40a609f43cb0832b1b7f802dd8561367c4350fe0c6", "sha256:313447f3ca2af918e282499828cfc955d4022c17db79d0e9b10b5b6e1a0ca3bf", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:585e0118a7d48431894addac14fc09d007e918a9dfd096fefcfc8ffe51005da1" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:3030877e4f7b1b9eaf224c40a609f43cb0832b1b7f802dd8561367c4350fe0c6", "start_byte": 2934, "end_byte": 3730, "value_digest": "sha256:4d03e99a3f373f78bbd4f79497515e5541927baca4fa7ece7d8efc0e1b4099b2" } ] } ], "note": "The Terms of Service are retrievable and readable, explicitly defining the Agreement between Plus Five Five, Inc. and the User governing the use of resend.com services." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides scoped, revocable API keys with permissions such as full_access or sending_access that can be created and managed via the dashboard, CLI, or API, but obtaining initial dashboard keys requires manual human copying as key values cannot be viewed or edited after creation." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The sign-up page displays an email and password registration form with password requirements, but the retained evidence does not establish whether an agent can complete the access controls, navigation, validation, and handoffs deterministically." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "No CAPTCHA challenge is directly observed on the captured sign-up page targets, but the evidence does not explicitly confirm or guarantee the complete absence of CAPTCHA across the entire registration flow." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured registration form does not mention or display phone verification, but the retained evidence does not explicitly declare whether phone verification is absent, optional, or required later in the flow." }, { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "A stable canonical route to begin obtaining access exists at https://resend.com/signup, which provides a 'Create a Resend account' registration form with email/password and social login options." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:08.291Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The sign-up page displays an email and password registration form with password requirements, but the retained evidence does not establish whether an agent can complete the access controls, navigation, validation, and handoffs deterministically." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:08.291Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:b2243adadc672d4eef581943613e61f40f28026ca691e5b111943474f845753c", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:10d6251489ef8e18b38bcbd421b48defb457182012fdd9656079478758a3cf6b", "sha256:2318895c65ae034cb4323c656c7f3d42d0d83a729c299607c8d6af62592d7ef8", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:894499213df316d146caac686c105fb4547c6fbcdcbbc9e0b9ed3970c93110b9", "sha256:976ec89d0515afa7a51ec97662423b299eb147e90c55853c593268c52776b268", "sha256:b5a70b279feda1152218c7cd0b6f8e1c2d190d0133dfa157c276378a3bbcc6f6" ], "locators": [ { "artifact_digest": "sha256:894499213df316d146caac686c105fb4547c6fbcdcbbc9e0b9ed3970c93110b9", "start_byte": 716, "end_byte": 1051, "value_digest": "sha256:d76bff3b37cb950802d1eca12f0c1c495aefd4c181ea0e552baa9583bc2c7611" } ] } ], "note": "A stable canonical route to begin obtaining access exists at https://resend.com/signup, which provides a 'Create a Resend account' registration form with email/password and social login options." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:08.291Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "No CAPTCHA challenge is directly observed on the captured sign-up page targets, but the evidence does not explicitly confirm or guarantee the complete absence of CAPTCHA across the entire registration flow." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:42.404Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e42ca83633f52a8bab83606f83c47519f6ba1b5cb7dd3091510a8ccf897528eb", "capture_rung": "http" } ], "artifact_digests": [ "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:afeb3aea10cd0c91876ad780611de2294e3b0129c27dfc080a6d463655fde7e1", "sha256:f302d53933b1529fef0e9aea21da332bb4ad5a50754fa2d928765098ee9b8ac9" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "start_byte": 11472, "end_byte": 12273, "value_digest": "sha256:67864368adee6b01b91e388dfb9aca396a16ba72a8a528608ee85be9c8353cab" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7780cd9b2921813c20a6bddbe530ec378bc61e8fd8d1bbf34b0cca902420ffaf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:bdc74e7d93a8e08b81ea12fa9811cb63867bce7c2479299b6eaaf30736619e09", "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0", "sha256:ff876842294968516ac0c72bd844aab2d4efe09936605f12f8308cdea58c3aad" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0", "start_byte": 20162, "end_byte": 20805, "value_digest": "sha256:a1af7d1b821d7bbe4dab27e01ed2bcca13bb821f9c1b466aec4545cf1adf26b9" } ] } ], "note": "Resend provides scoped, revocable API keys with permissions such as full_access or sending_access that can be created and managed via the dashboard, CLI, or API, but obtaining initial dashboard keys requires manual human copying as key values cannot be viewed or edited after creation.", "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:57:08.291Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "bounded-headless-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311" }, "determination_bases": [], "note": "The captured registration form does not mention or display phone verification, but the retained evidence does not explicitly declare whether phone verification is absent, optional, or required later in the flow." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } ] }, { "stage": "pay", "stage_label": "Pay", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "Resend provides a direct self-service path to upgrade or manage subscriptions via the Billing page in Settings, but the top-tier Enterprise plan requires contacting sales (\"Contact us\")." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The documentation states that users can upgrade, downgrade, or modify their current plan from the Billing page, but the retained evidence does not document a deterministic flow for an agent to construct checkout, hand off approval safely, and resume." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence notes that users can update payment information by adding or changing credit card details on the Billing page, but it does not detail a rail for scoped delegation or human-confirmed payment authorization." }, { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "Resend discloses commercial commitments including a Free plan ($0/mo for 3,000 emails/mo), a Pro plan ($20/mo for 50,000 emails/mo with overage at $0.90 / 1,000), a Scale plan ($90/mo for 100,000 emails/mo with overage at $0.90 / 1,000), and pay-as-you-go automation runs ($0.0015 / run)." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:55:58.037Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The documentation states that users can upgrade, downgrade, or modify their current plan from the Billing page, but the retained evidence does not document a deterministic flow for an agent to construct checkout, hand off approval safely, and resume." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:29.922Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bc4e32ec89b96e44944f2fbda1a9140760dd477f9a6c758a29b9c4f31bbf45d5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "sha256:de46219baaf32c8bc9649006b7ed2f031dffc5b2118319b5f9abb672b9eb2c7b", "sha256:e69929d794c6cc9692a5aa4addd05b229d7b76fbe336eb6f086557addd37b1d9" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "start_byte": 15223, "end_byte": 15920, "value_digest": "sha256:88032986d477c8584d6bc2fe7653843ad1822009d13e1a2efb6097c8232bfbb6" }, { "artifact_digest": "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "start_byte": 4875, "end_byte": 5676, "value_digest": "sha256:320e7b1e8c574bf6bf6373425392bc8814ef2d589c5eab128ceb7d3c64bb40f2" } ] } ], "note": "Resend discloses commercial commitments including a Free plan ($0/mo for 3,000 emails/mo), a Pro plan ($20/mo for 50,000 emails/mo with overage at $0.90 / 1,000), a Scale plan ($90/mo for 100,000 emails/mo with overage at $0.90 / 1,000), and pay-as-you-go automation runs ($0.0015 / run)." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:55:58.037Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [], "note": "The evidence notes that users can update payment information by adding or changing credit card details on the Billing page, but it does not detail a rail for scoped delegation or human-confirmed payment authorization." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:29.922Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:77cf1fa9ccf3a4f67a9a684be25c645cb801b91faebe94c627c9a02470968535", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:56aed1c67b648c2b1e9b088250783cbf1b5e07d764e806191975d94f5d9a16e8", "sha256:c11ea20298318e857fb6feb58c8cb529509f0c1548872d1c57eb81d5ce211e72", "sha256:c5935373dd1df5edca0f16b820252e77ca7c50ae70eeb51366763c961a10ed81" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:56aed1c67b648c2b1e9b088250783cbf1b5e07d764e806191975d94f5d9a16e8", "start_byte": 11106, "end_byte": 11892, "value_digest": "sha256:a768cddd8bce7f218eb3cba6eb93f4ae2fd0134f010355939e1c1562083cb1c1" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:bc4e32ec89b96e44944f2fbda1a9140760dd477f9a6c758a29b9c4f31bbf45d5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "sha256:e69929d794c6cc9692a5aa4addd05b229d7b76fbe336eb6f086557addd37b1d9", "sha256:f13270410b311b5ab895c181ead958c21a68424c1256cd8a1f29a34729152381" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:cb69d6f3c71117e8de1c322332ee2765591bddc80755e62aaeec33c99bd75e74", "start_byte": 14440, "end_byte": 15222, "value_digest": "sha256:e395f17d080c7b2f2731ef609f7917f6f8eba80c8a124608c752e8063bb22143" } ] } ], "note": "Resend provides a direct self-service path to upgrade or manage subscriptions via the Billing page in Settings, but the top-tier Enterprise plan requires contacting sales (\"Contact us\").", "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } } ], "blockers": [], "remediations": [ { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } ] }, { "stage": "provision", "stage_label": "Provision", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "API keys and email sending operations can be programmatically triggered via direct HTTP requests, the Resend CLI, or official API SDKs." }, "secondary_context": [ { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "Resend documents programmatic delivery of newly created API keys via HTTP POST request responses, returning the secret token string in the JSON payload." }, { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "context": "The synchronous POST /emails API endpoint immediately returns a JSON response containing the created email's usable ID upon successful request completion." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:28.136Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7780cd9b2921813c20a6bddbe530ec378bc61e8fd8d1bbf34b0cca902420ffaf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:bdc74e7d93a8e08b81ea12fa9811cb63867bce7c2479299b6eaaf30736619e09", "sha256:d0194a3d44318772242afb54eea5567fb3b89497cf66db7cf88413faa262ea66", "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0", "start_byte": 17302, "end_byte": 18096, "value_digest": "sha256:7d3b1e708c8b40187d5a04a1a81b05d70bf3520a7ab9707854058849c2750ad0" } ] } ], "note": "Resend documents programmatic delivery of newly created API keys via HTTP POST request responses, returning the secret token string in the JSON payload." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:30.736Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "send-email" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f112b334187c5ad2555c97770f3b216fbbd7903b62a328145b8a0beeb1672da5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "sha256:4dc086b51566d75fe13d0c581b64a248378e159b730d5bfa88f411805891880e", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5d1f3a8ea6f419a4c6084386c40e468a40a9bf9d4b66875afa423c7ddc9153d8" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "start_byte": 22138, "end_byte": 22944, "value_digest": "sha256:b26ddfbf13a4617a1028ae8eb4ba0f1c09b6da1e6f0894da13bb857c32b0676e" } ] } ], "note": "The synchronous POST /emails API endpoint immediately returns a JSON response containing the created email's usable ID upon successful request completion." }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:42.404Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "send-email" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f112b334187c5ad2555c97770f3b216fbbd7903b62a328145b8a0beeb1672da5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0103d9d85c2525e59354f3df747d794c3b555074ff195a2bc77c73acc2d29aea", "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5d1f3a8ea6f419a4c6084386c40e468a40a9bf9d4b66875afa423c7ddc9153d8" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "start_byte": 15470, "end_byte": 16247, "value_digest": "sha256:b7af892a98071cbce770c9a2a76d2d01c4412466335a81bcd0793d524111dc03" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e42ca83633f52a8bab83606f83c47519f6ba1b5cb7dd3091510a8ccf897528eb", "capture_rung": "http" } ], "artifact_digests": [ "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "sha256:4482790a7f4727a2e3878dac1613ff4aeef684022658e9a290caf89995e53584", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f302d53933b1529fef0e9aea21da332bb4ad5a50754fa2d928765098ee9b8ac9" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "start_byte": 12274, "end_byte": 13076, "value_digest": "sha256:773922f16c7647cc678607ed1ea685ca8cbe7d193c7473e7e4377be60d5ea795" } ] } ], "note": "API keys and email sending operations can be programmatically triggered via direct HTTP requests, the Resend CLI, or official API SDKs." } ], "blockers": [], "remediations": [] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Resend documents that API keys can be created, edited (name, permission, domain), listed, and deleted via the Dashboard, API, or CLI. However, the evidence does not document programmatic secret rotation, compromise recovery, or key value viewing after creation." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Resend provides stable machine-operable interfaces including an HTTP REST API, CLI, and SDKs (such as Node.js, Python, Go, and Ruby) for both error handling and email sending targets." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "Resend documents request-time authentication using API keys sent as Bearer tokens in the Authorization header, with options for restricted authority such as sending-only access." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "Resend documents stable operation contracts including HTTP methods, endpoints, required request body parameters, response JSON schemas, and structured error responses across errors and send-email resources." }, { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "context": "Resend documents HTTP status codes, explicit error types (e.g., validation_error, rate_limit_exceeded), retry actions, idempotency key rules, and rate limit reduction mechanisms." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [], "determination_bases": [] }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:42.404Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7780cd9b2921813c20a6bddbe530ec378bc61e8fd8d1bbf34b0cca902420ffaf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:ad17af2908def633f672c54f5da5b7d0b13dc838283d77f7f395052ef62b8ee4", "sha256:bdc74e7d93a8e08b81ea12fa9811cb63867bce7c2479299b6eaaf30736619e09", "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0", "start_byte": 15434, "end_byte": 16211, "value_digest": "sha256:b7af892a98071cbce770c9a2a76d2d01c4412466335a81bcd0793d524111dc03" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e42ca83633f52a8bab83606f83c47519f6ba1b5cb7dd3091510a8ccf897528eb", "capture_rung": "http" } ], "artifact_digests": [ "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:cafa8c6e0b145c42add84903f09b147e46d7af1b9db99b2d9eef910844f91c29", "sha256:f302d53933b1529fef0e9aea21da332bb4ad5a50754fa2d928765098ee9b8ac9" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "start_byte": 11472, "end_byte": 12273, "value_digest": "sha256:67864368adee6b01b91e388dfb9aca396a16ba72a8a528608ee85be9c8353cab" }, { "artifact_digest": "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "start_byte": 12274, "end_byte": 13076, "value_digest": "sha256:773922f16c7647cc678607ed1ea685ca8cbe7d193c7473e7e4377be60d5ea795" } ] } ], "note": "Resend documents that API keys can be created, edited (name, permission, domain), listed, and deleted via the Dashboard, API, or CLI. However, the evidence does not document programmatic secret rotation, compromise recovery, or key value viewing after creation.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.957Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:67fd5901503dfd79745af40f3ce61e33ab7553161c65a9ef330397abb7ae1afa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1d0ff855b9c3b327d80c306b290ef02fadab92faf45246ac22949cdc3b5a583c", "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b0c0cb90d898f4db805b268831123fea6376be93489038a31cb3ac29ced19d26" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "start_byte": 16619, "end_byte": 17419, "value_digest": "sha256:f83d3f0189d6086e988c5464c9ef3bdf2a4663bdc9b987bd9b94e4db99ca0014" }, { "artifact_digest": "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "start_byte": 21464, "end_byte": 22242, "value_digest": "sha256:5112eece87cc17834d1d546d76ce9855bb50ba9b4099088c3bd5fc06ceb61345" } ] } ], "note": "Resend documents HTTP status codes, explicit error types (e.g., validation_error, rate_limit_exceeded), retry actions, idempotency key rules, and rate limit reduction mechanisms." }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:42.404Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e42ca83633f52a8bab83606f83c47519f6ba1b5cb7dd3091510a8ccf897528eb", "capture_rung": "http" } ], "artifact_digests": [ "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:afeb3aea10cd0c91876ad780611de2294e3b0129c27dfc080a6d463655fde7e1", "sha256:f302d53933b1529fef0e9aea21da332bb4ad5a50754fa2d928765098ee9b8ac9" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:055eb8085a363203e0f7d7b2fa12cbea8d0d43ca9f737b35782889f5b86ae764", "start_byte": 11472, "end_byte": 12273, "value_digest": "sha256:67864368adee6b01b91e388dfb9aca396a16ba72a8a528608ee85be9c8353cab" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7780cd9b2921813c20a6bddbe530ec378bc61e8fd8d1bbf34b0cca902420ffaf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3277294ac1e597d8161d27485f901246a39e239ecd81c516812b33836c55695a", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:bdc74e7d93a8e08b81ea12fa9811cb63867bce7c2479299b6eaaf30736619e09", "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:fd1f082e5329de55ed0b8fb323c635f91b4b5c074f59084e41c9c734315539d0", "start_byte": 18097, "end_byte": 18845, "value_digest": "sha256:0d1046407ae342d6055a7cca2ac360474c3d7f1454048aede9e37a442793694f" } ] } ], "note": "Resend documents request-time authentication using API keys sent as Bearer tokens in the Authorization header, with options for restricted authority such as sending-only access." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.957Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "email-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:67fd5901503dfd79745af40f3ce61e33ab7553161c65a9ef330397abb7ae1afa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1d0ff855b9c3b327d80c306b290ef02fadab92faf45246ac22949cdc3b5a583c", "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b1bfcea035327010431707fecf819bbe20ac5da9cfcc155bc21c0531407ef6fb" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "start_byte": 16619, "end_byte": 17419, "value_digest": "sha256:f83d3f0189d6086e988c5464c9ef3bdf2a4663bdc9b987bd9b94e4db99ca0014" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f112b334187c5ad2555c97770f3b216fbbd7903b62a328145b8a0beeb1672da5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "sha256:4dc086b51566d75fe13d0c581b64a248378e159b730d5bfa88f411805891880e", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5d1f3a8ea6f419a4c6084386c40e468a40a9bf9d4b66875afa423c7ddc9153d8" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "start_byte": 22138, "end_byte": 22944, "value_digest": "sha256:b26ddfbf13a4617a1028ae8eb4ba0f1c09b6da1e6f0894da13bb857c32b0676e" } ] } ], "note": "Resend documents stable operation contracts including HTTP methods, endpoints, required request body parameters, response JSON schemas, and structured error responses across errors and send-email resources." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-20T15:56:46.957Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "email-api" } ], "assessment_method": { "name": "public-http-semantic-assessment", "version": "2026-08-20", "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:67fd5901503dfd79745af40f3ce61e33ab7553161c65a9ef330397abb7ae1afa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1d0ff855b9c3b327d80c306b290ef02fadab92faf45246ac22949cdc3b5a583c", "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a194c64818233c57454f55fa2364d4128398af8f8ad23a0fd77d27fb0c81dffb" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:293278b50e70ddda0bb6e70e0c3520fc8db88dd1d638aa0c46c6b8a078976920", "start_byte": 13505, "end_byte": 14291, "value_digest": "sha256:88f5de8cfb6e7659ac27a2a3cb90a4f15e02ad0522b9c06585583537fb8f79a1" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f112b334187c5ad2555c97770f3b216fbbd7903b62a328145b8a0beeb1672da5", "capture_rung": "http" } ], "artifact_digests": [ "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "sha256:21bb522bd39f9a1a8f0f775df391a5849878f85c7a97b0ffccf742b75ebdb668", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5d1f3a8ea6f419a4c6084386c40e468a40a9bf9d4b66875afa423c7ddc9153d8" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:15243b16f730650b8305f6baa863a1080bc37fdc56753898ffbc67f784dca344", "start_byte": 17316, "end_byte": 18060, "value_digest": "sha256:9a95c0df5fcc4bed8c3ffafecac9d5b4b28dca07a8f9ed2c64f4a2f66e04aa04" } ] } ], "note": "Resend provides stable machine-operable interfaces including an HTTP REST API, CLI, and SDKs (such as Node.js, Python, Go, and Ruby) for both error handling and email sending targets." } ], "blockers": [], "remediations": [ { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 16, "covered_signals": 16, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-08-20T15:57:08.291Z", "freshness": "fresh", "provenance": { "tier": "observed", "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139", "freshness_policy_digest": "sha256:00f7f2a35f37b184e57ce2cc116f6a5e3feb4813991aacd7e29e322f2d3607a8", "basis_event_ids": [ "sha256:086835da45e6e069368e3750d5373f4167cd425cc5a2ba0bc83490b15f7c2d02", "sha256:0e687995683c2d2498ad00b3b6654a7b90848f8ca8ccf73d74a64d8e1c17f50f", "sha256:1a43db3f10019aef95b08575135c740cd5fe219db2970fd4738898d7d09ee6bd", "sha256:2f88170c526ba7c618091fd4ec090ea9f243d972b72e2744111bc78f28be486a", "sha256:370300b97df9e491293d655e5f34417accd9770fe2acee6fc5403b0b408cce99", "sha256:51a89f1fff525e02abcab8720a4b40f8de61cfa9c885ceef77beeaa5f923293c", "sha256:54439b9c291aa15fe867573aff11f3a3e5d6d3b56a6a0812607df79fc48ef902", "sha256:64956966846925b54b76bceea48e4ce2a3961b00c494bc21e1b6c799c0456251", "sha256:704ecbffc8b81546103644acda01da186836b1b1fa261b6b24c9c3fd7a470f2e", "sha256:792ca8ab356ca8cad149ccf92f0fc888d5a75ea6b6cb3e4aa59daec5c7394a61", "sha256:7af57b0e1c1c9703846f0ce66cbcbc3d77b18746d7e81b65a4e89ee91bec8e6a", "sha256:8b5b6ca6149fed4f64e9f0a931fbb2442a0e26d497640ba8e7af1b4472c08e83", "sha256:8d10284147679eea8552937ed6a8d452a08eda02a5ad2263a504bde010bc5d55", "sha256:972c02a39d1f9ef28135cb4507d176356d5730a4203b6e9d1a22568907af666a", "sha256:99ec962be5f9664db04ca2553c753cae511f8e2bdf1b691e8184b7c6cc0602b9", "sha256:9b50be069b93871df21254586704d1b12b93d55a646ffbb67eafb4e42e0accd9", "sha256:9b6f6ec757651d111fa6273a0e081a7c3adf61ced748aa25ce945959e3c2d5ad", "sha256:9d2cc73cf6b77c927cd935ee11b3c5b7c2ed37936017cc968a656b24a6cc35a8", "sha256:9eae4377bd8cdae0226798fc90cb5f47f8f709336925636018b34dd90c122cf8", "sha256:a50716a85b09bd941cb4778abd9569e33da39ab7ca67ce93ebe201d987f2723c", "sha256:ac9d51f04dfc5d36288822b403d3b605538b6402172a2bef19195de668f28b3c", "sha256:b1a284255d9d4ef20fc7cd6cd11d15788285c55f414dd1d40c133ef2f038f169", "sha256:b49b88719ae543efc18ee71f566e4e641553b684a51896543cdfa8a5f98204d0", "sha256:c90854dc3d7067d64801f724dd4fda64bca4eb325a2a1e12980c4941beb94c83", "sha256:c999c3b929fc553fadcf8819771ee2ab0d73acb232f63e57978d5f35501740f1", "sha256:e84ed1849febbfcffe056835aea1f588116473c031fc9333fbb6a6c417ef9746", "sha256:f40ce1e11ce29ad94f8116a8a5cdbb97b6ce45d9b9bb2d779526ab4dabfa67af", "sha256:f5cb9a8c32c99d16e4f93b796d60092fd3c4eb7cdaf4db35ff779930d260b5f4", "sha256:fd82614e6bcc4f5cb307abcf1e578b957ec8284c811bc5904109729fc7e633a5" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:c90854dc3d7067d64801f724dd4fda64bca4eb325a2a1e12980c4941beb94c83" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:55:58.078Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:c999c3b929fc553fadcf8819771ee2ab0d73acb232f63e57978d5f35501740f1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:29.922Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:a50716a85b09bd941cb4778abd9569e33da39ab7ca67ce93ebe201d987f2723c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:01.463Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:f5cb9a8c32c99d16e4f93b796d60092fd3c4eb7cdaf4db35ff779930d260b5f4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:55:58.078Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:b49b88719ae543efc18ee71f566e4e641553b684a51896543cdfa8a5f98204d0" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:08.291Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:b1a284255d9d4ef20fc7cd6cd11d15788285c55f414dd1d40c133ef2f038f169" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:08.291Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:0e687995683c2d2498ad00b3b6654a7b90848f8ca8ccf73d74a64d8e1c17f50f", "sha256:ac9d51f04dfc5d36288822b403d3b605538b6402172a2bef19195de668f28b3c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:08.291Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:972c02a39d1f9ef28135cb4507d176356d5730a4203b6e9d1a22568907af666a", "sha256:9eae4377bd8cdae0226798fc90cb5f47f8f709336925636018b34dd90c122cf8" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:42.404Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:9d2cc73cf6b77c927cd935ee11b3c5b7c2ed37936017cc968a656b24a6cc35a8" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:57:08.291Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:792ca8ab356ca8cad149ccf92f0fc888d5a75ea6b6cb3e4aa59daec5c7394a61" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:55:58.037Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:9b6f6ec757651d111fa6273a0e081a7c3adf61ced748aa25ce945959e3c2d5ad" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:29.922Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:8b5b6ca6149fed4f64e9f0a931fbb2442a0e26d497640ba8e7af1b4472c08e83" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:55:58.037Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:2f88170c526ba7c618091fd4ec090ea9f243d972b72e2744111bc78f28be486a", "sha256:54439b9c291aa15fe867573aff11f3a3e5d6d3b56a6a0812607df79fc48ef902" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:29.922Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:f40ce1e11ce29ad94f8116a8a5cdbb97b6ce45d9b9bb2d779526ab4dabfa67af" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:28.136Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:086835da45e6e069368e3750d5373f4167cd425cc5a2ba0bc83490b15f7c2d02" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:30.736Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:1a43db3f10019aef95b08575135c740cd5fe219db2970fd4738898d7d09ee6bd", "sha256:51a89f1fff525e02abcab8720a4b40f8de61cfa9c885ceef77beeaa5f923293c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:42.404Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:8d10284147679eea8552937ed6a8d452a08eda02a5ad2263a504bde010bc5d55", "sha256:9b50be069b93871df21254586704d1b12b93d55a646ffbb67eafb4e42e0accd9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:42.404Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:fd82614e6bcc4f5cb307abcf1e578b957ec8284c811bc5904109729fc7e633a5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.957Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:64956966846925b54b76bceea48e4ce2a3961b00c494bc21e1b6c799c0456251", "sha256:7af57b0e1c1c9703846f0ce66cbcbc3d77b18746d7e81b65a4e89ee91bec8e6a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:42.404Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:370300b97df9e491293d655e5f34417accd9770fe2acee6fc5403b0b408cce99", "sha256:99ec962be5f9664db04ca2553c753cae511f8e2bdf1b691e8184b7c6cc0602b9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.957Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:704ecbffc8b81546103644acda01da186836b1b1fa261b6b24c9c3fd7a470f2e", "sha256:e84ed1849febbfcffe056835aea1f588116473c031fc9333fbb6a6c417ef9746" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-20T15:56:46.957Z", "freshness": "fresh" } ] }, "canonical_url": "https://sourcey.com/catalog/resend/agent-readiness/resend-email-api/email-operations", "projection_digest": "sha256:82f3b6ab6fc04247020755cbe8f682750d0469c061980d51a9529bcf0c982167" } } }