{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:5f55a0147eca9a82d821b7cfb73339dd8059c146b9acbb6ed66c9e3d40a8e1b0", "snapshot_id": "sha256:fbf4583b80f8936d9b7b75906adc86f38f5612cd0a7329839daea7b71ad2b9ce", "artifact_sha256": "sha256:ec393385ec4e7be15a393d925f0df78d54a12787f2995a84fad1b570583dac06", "data": { "entity_id": "ent_01kyh8fpe3n3yye39kmzvy410z", "entity_slug": "microsoft", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzd4bb9sf13ma4xaxb73d82x", "entity_id": "ent_01kyh8fpe3n3yye39kmzvy410z", "scope": { "product": { "key": "microsoft-azure", "name": "Microsoft Azure" }, "funnel": { "key": "api-resource-management", "name": "API resource management" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:a569131c2422a72436aea7d8dfa1b846f87a3500dbc533c3ea06bfd806a27e2f" }, "declaration_revision_digest": "sha256:310f4c381bb6e9a96cf1316405b000eedf8809a97131ca4328e5b1f8b3bcb857", "declaration": { "declaration_id": "declaration_microsoft_azure_api_resource_management", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/mi/microsoft.yaml", "git_blob_oid": "c0a37ea7489d07ac09ccdebedbe36920fe29d1a4", "blob_digest": "sha256:1d7f60b3cceae515bad1143dffefba613908654253f3ecad5ff631f424f819df" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "cost-visibility", "name": "Microsoft Azure cost visibility", "interface_ids": [ "pricing-and-cost" ] }, { "target_id": "service-use", "name": "Create and reconcile Azure resource groups through the API", "interface_ids": [ "azure-resource-manager" ] } ], "participants": [ { "participant_id": "microsoft", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe3n3yye39kmzvy410z" } } ], "resources": [ { "resource_id": "asynchronous-operations", "uri": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/async-operations", "roles": [ "documentation", "operations", "provisioning", "recovery", "status" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-account", "uri": "https://signup.azure.com/", "roles": [ "access" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-legal", "uri": "https://azure.microsoft.com/en-us/support/legal/", "roles": [ "terms" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-pricing", "uri": "https://azure.microsoft.com/en-us/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-product-terms", "uri": "https://www.microsoft.com/licensing/terms/product/MicrosoftAzure/MCA", "roles": [ "eligibility", "terms" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-rest-api", "uri": "https://learn.microsoft.com/en-us/rest/api/azure/", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "azure-support", "uri": "https://azure.microsoft.com/en-us/support/options/", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "client-credentials", "uri": "https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow", "roles": [ "authentication", "descriptor", "documentation" ], "operated_by_participant_id": "microsoft", "standard_bindings": [ { "namespace": "oauth", "version": "2.0", "relation": "implements" } ] }, { "resource_id": "cost-management-permissions", "uri": "https://learn.microsoft.com/en-us/azure/cost-management-billing/automate/cost-management-api-permissions", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2", "uri": "https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription", "roles": [ "access", "checkout", "documentation" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "resource-group-api", "uri": "https://learn.microsoft.com/en-us/rest/api/resources/resource-groups/create-or-update?view=rest-resources-2021-04-01&tabs=HTTP", "roles": [ "documentation", "provisioning" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "resource-manager-limits", "uri": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/request-limits-and-throttling", "roles": [ "documentation", "operations" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "resource-manager-rest", "uri": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resources-rest?tabs=azure-cli", "roles": [ "documentation", "operations", "provisioning" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "retail-prices-api", "uri": "https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices", "roles": [ "documentation", "operations", "pricing" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "resource_id": "service-principals", "uri": "https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals?tabs=browser", "roles": [ "authentication", "descriptor", "documentation" ], "operated_by_participant_id": "microsoft", "standard_bindings": [ { "namespace": "oauth", "version": "2.0", "relation": "uses" } ] } ], "endpoints": [ { "endpoint_id": "azure-resource-manager", "uri": "https://management.azure.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "endpoint_id": "entra-token", "uri": "https://login.microsoftonline.com/organizations/oauth2/v2.0/token", "transport": "http", "roles": [ "authorization", "token" ], "operated_by_participant_id": "microsoft", "standard_bindings": [ { "namespace": "oauth", "version": "2.0", "relation": "implements" } ] }, { "endpoint_id": "registration", "uri": "https://signup.azure.com/", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "endpoint_id": "retail-prices", "uri": "https://prices.azure.com/api/retail/prices", "transport": "http", "roles": [ "service" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "azure-resource-manager", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "azure-resource-manager" ], "resource_ids": [ "asynchronous-operations", "azure-rest-api", "resource-group-api", "resource-manager-limits", "resource-manager-rest" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "interface_id": "pricing-and-cost", "modality": "network_api", "functions": [ "commerce", "service_operation" ], "endpoint_ids": [ "retail-prices" ], "resource_ids": [ "azure-pricing", "cost-management-permissions", "retail-prices-api" ], "operated_by_participant_id": "microsoft", "standard_bindings": [] }, { "interface_id": "workload-authentication", "modality": "network_api", "functions": [ "authentication", "service_operation" ], "endpoint_ids": [ "entra-token" ], "resource_ids": [ "client-credentials", "service-principals" ], "operated_by_participant_id": "microsoft", "standard_bindings": [ { "namespace": "oauth", "version": "2.0", "relation": "uses" } ] } ], "relations": [ { "relation_id": "account-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "azure-account" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } }, { "relation_id": "authentication-authenticates-resource-manager", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "workload-authentication" }, "to": { "node_kind": "interface", "node_id": "azure-resource-manager" } }, { "relation_id": "client-credentials-describe-authentication", "kind": "describes", "from": { "node_kind": "resource", "node_id": "client-credentials" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } }, { "relation_id": "pricing-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "retail-prices-api" }, "to": { "node_kind": "interface", "node_id": "pricing-and-cost" } }, { "relation_id": "resource-creation-precedes-status", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "resource-group-api" }, "to": { "node_kind": "resource", "node_id": "asynchronous-operations" } }, { "relation_id": "resource-manager-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "resource-manager-rest" }, "to": { "node_kind": "interface", "node_id": "azure-resource-manager" } } ], "surface_exclusions": [] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:d14a6222e147bd0e94678c9212d85c0ec9e89a57a79997a8583c855c33955d0d", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "A", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "operate", "stage_label": "Operate", "public_state": "limited", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Azure Resource Manager documents asynchronous status tracking, Retry-After intervals, terminal provisioning states and error objects; the selected quotes do not establish idempotency semantics for resource operations." } }, "limitations": [ { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Azure Resource Manager documents asynchronous status tracking, Retry-After intervals, terminal provisioning states and error objects; the selected quotes do not establish idempotency semantics for resource operations." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Microsoft identity platform evidence establishes that applications use client secrets, certificates, or federated credentials, and documents deactivating or deleting applications to revoke or suspend token issuance. However, full automated rotation and recovery lifecycle semantics under delegated agent authority are not completely established in the retained text." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "The Azure REST API reference documentation clearly identifies Azure REST endpoints as stable entrypoints and provides guidance on acquiring OAuth2 access tokens via Microsoft Entra ID authorize and token endpoints." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts for Microsoft Azure are human documentation pages; they contain no first-party statement that structured discovery artifacts are absent, and no artifact was captured or verified either way." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts for Microsoft Azure do not state a web-agent or crawler access policy for the assessed resources in either direction." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Terms are readable but materially incomplete, ambiguous, contextual, or unstable.", "context": "Azure's legal page identifies the applicable agreements, including MCA and MOSA, based on acquisition channel and geography. However, the exact governing terms defer to external agreements and regional availability." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "Microsoft's Azure product terms state explicit conditions for Limited Access Services, which a customer may use only for the permitted uses in its registration form; general Azure account eligibility is not defined in the terms." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "The Azure Retail Prices REST API provides an unauthenticated, programmatic experience to retrieve retail rates, currencies (USD by default, with support for EUR and other currencies), SKUs, meters, and pricing variables for all Azure services." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.787Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-product-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f6d298ee71ac8a3c4510ef952980f47be5b674b434b7573a22cb651b1397bd3c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3e74599ba9577d9dee1c7d35959ed820f8c64fd66148749380de4683612e29d3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:8f96796a0d5ab868e2a58a450e7fdc96d481cc7f8cec9913f067a41379dcf167", "sha256:926d9a62e96110cb914d25da978fdc6df97c777528d5442dd1df2cd35f0d6512" ], "source_surface": { "node_kind": "resource", "node_id": "azure-product-terms" }, "locators": [ { "artifact_digest": "sha256:926d9a62e96110cb914d25da978fdc6df97c777528d5442dd1df2cd35f0d6512", "start_byte": 117820, "end_byte": 118088, "value_digest": "sha256:67e204c954069746b6b0f9d92b7942755c66b0b361ca43bfb45a939e273f614c" } ] } ], "note": "Microsoft's Azure product terms state explicit conditions for Limited Access Services, which a customer may use only for the permitted uses in its registration form; general Azure account eligibility is not defined in the terms." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:01.648Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-pricing" }, { "node_kind": "resource", "node_id": "retail-prices-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8a351ea32d9b38db44a99172a29a851f55a2d7eca17b1f45bf0f60eab05c2349", "capture_rung": "http" } ], "artifact_digests": [ "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9a91510ec4e7b1660e38aae8c3a21a9c39f800c334dce72ca9a250290b65bf60", "sha256:b8b8c1279558a4692b82048fe301f40dc3f0a2cca8f9eb7387adba9933d017cc" ], "source_surface": { "node_kind": "resource", "node_id": "retail-prices-api" }, "locators": [ { "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "start_byte": 11493, "end_byte": 12287, "value_digest": "sha256:1df2fd8ee5c8de93a22b7f0b223b5738f5c995198deb9fc1b391623a19b18166" }, { "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "start_byte": 5231, "end_byte": 6028, "value_digest": "sha256:c883979935aa613b52dc9efc85753bbc532a811e1bb29198e3318e5d53592cc2" } ] } ], "note": "The Azure Retail Prices REST API provides an unauthenticated, programmatic experience to retrieve retail rates, currencies (USD by default, with support for EUR and other currencies), SKUs, meters, and pricing variables for all Azure services." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.814Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-rest-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f2c5c23083fa760c8599e096422689c997cd336c72a0adab7e4199a7bfad9f2a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:a2d310b6234e40290a6a316550ce9aa082f7838f782068ab6cd82eac0ab95595", "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b", "sha256:eca799e17f78be8a01bedf14180368cedc089c3f9c7da0e0604ce8065bd0d646" ], "source_surface": { "node_kind": "resource", "node_id": "azure-rest-api" }, "locators": [ { "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "start_byte": 15486, "end_byte": 16265, "value_digest": "sha256:292d69db1b289c4b596cf044251029013b484dc1e23df7c41253f0f831ec508f" }, { "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "start_byte": 6766, "end_byte": 7551, "value_digest": "sha256:0d843d1c1e910002f7e68cb2e6aa0983d01f0e1b6d26fd965b61a403d9d31dd7" } ] } ], "note": "The Azure REST API reference documentation clearly identifies Azure REST endpoints as stable entrypoints and provides guidance on acquiring OAuth2 access tokens via Microsoft Entra ID authorize and token endpoints." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.814Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-rest-api" }, { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts for Microsoft Azure are human documentation pages; they contain no first-party statement that structured discovery artifacts are absent, and no artifact was captured or verified either way." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Terms are readable but materially incomplete, ambiguous, contextual, or unstable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:26.217Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-legal" }, { "node_kind": "resource", "node_id": "azure-product-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ba953dd7b6fe0b6fa219118a091ea6ec47d738a2ef2abd209cb0f404d849f965", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:67fbdb9c070d855e3841d94fcefc55fc3978f009bc4541409ce5b3aed609931f", "sha256:6c197cf74cd69e8d362dd7ba8a08992f41e89b26e5a57ae2897316bc411fb87a", "sha256:f1c0e1299c576393336303b94b29b361ae7b0bb6b845743599e204c7569e3f0b" ], "source_surface": { "node_kind": "resource", "node_id": "azure-legal" }, "locators": [ { "artifact_digest": "sha256:6c197cf74cd69e8d362dd7ba8a08992f41e89b26e5a57ae2897316bc411fb87a", "start_byte": 18514, "end_byte": 19307, "value_digest": "sha256:7108db6f48f3fbd6b6fe4e76b5a9b10f43b2254a8e3226f8f4f48bd69cfcd6d6" }, { "artifact_digest": "sha256:6c197cf74cd69e8d362dd7ba8a08992f41e89b26e5a57ae2897316bc411fb87a", "start_byte": 19308, "end_byte": 20107, "value_digest": "sha256:6b13d661d5e5d1ceb5e9fc7500722b0d2bdf5ed262d30ed5c4418c16642747bb" } ] } ], "note": "Azure's legal page identifies the applicable agreements, including MCA and MOSA, based on acquisition channel and geography. However, the exact governing terms defer to external agreements and regional availability." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.814Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-rest-api" }, { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts for Microsoft Azure do not state a web-agent or crawler access policy for the assessed resources in either direction." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "A stable route to begin service access exists at https://signup.azure.com/ ('Azure - Sign up')." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured sign-up page contains only the page title 'Azure - Sign up' and metadata, which is insufficient to establish access control operability." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence does not contain explicit declarations or direct observations regarding CAPTCHA requirements or alternative agent paths across all evaluated surfaces." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence does not establish whether phone verification is required, absent, or explicitly resumable during sign-up." }, { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "context": "Microsoft identity platform explicitly supports two-legged OAuth 2.0 client credentials grant flow for daemons and service accounts, allowing access tokens to be acquired via POST requests to the /token endpoint." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.708Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured sign-up page contains only the page title 'Azure - Sign up' and metadata, which is insufficient to establish access control operability." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.708Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-account" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f7ac0e55314faec745bfa456f00ad28afefb47d7ba7f72802fe437cb97ac68e1", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:0d7f17485280193aecdc4279c9fbd0e95b792f45ec209963389f2698a349965f", "sha256:3878570f4a62a0d65f57cf1754e0269e56ec797f4e36e26b44c172eb6e800401", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5a4511f550faafd6dc3973bcc258596dfb0581728a4f2c34c2bde3b3915b1afa", "sha256:e36c31ddf3b70e4d949d56f24ce83c3139ad7dd50aaaae8c18215ed2233a1e26", "sha256:f541a6f496ac81a1433d7666cc8bf4dedcf99edb97a4fb520cd5ffa667285a37" ], "source_surface": { "node_kind": "resource", "node_id": "azure-account" }, "locators": [ { "artifact_digest": "sha256:5a4511f550faafd6dc3973bcc258596dfb0581728a4f2c34c2bde3b3915b1afa", "start_byte": 58, "end_byte": 83, "value_digest": "sha256:3309d2a80bfde468d3b973949beee621b43bc65a82148d83ef2ee99f67e94db2" } ] } ], "note": "A stable route to begin service access exists at https://signup.azure.com/ ('Azure - Sign up')." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.232Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "azure-account" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Current admissible evidence does not contain explicit declarations or direct observations regarding CAPTCHA requirements or alternative agent paths across all evaluated surfaces." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:16.675Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f7d1895f3eee7632ffde333427dbf8c088bb5a9e0d2d7703926c014f73da07c6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "sha256:8a26e659150dceb05e95ce6ea21a302817aa81602ca301e6347ad8d0d3e61b5b", "sha256:db3fbf28022eee9d201d6c97393304361a5d655c5cd8c874e0cbed8d10b0842e" ], "source_surface": { "node_kind": "resource", "node_id": "client-credentials" }, "locators": [ { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 17077, "end_byte": 17877, "value_digest": "sha256:d52edc6968e20da6ec5f2bbcf6728c4ed2b3dc3a74ed2cab0d28a6f71ffeecfc" }, { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 6680, "end_byte": 7484, "value_digest": "sha256:07e6a9632a7e59f0b3f67d8910f56847a209a90a1fbd13cbf258a83c7c601188" } ] } ], "note": "Microsoft identity platform explicitly supports two-legged OAuth 2.0 client credentials grant flow for daemons and service accounts, allowing access tokens to be acquired via POST requests to the /token endpoint." }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.232Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-account" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Current admissible evidence does not establish whether phone verification is required, absent, or explicitly resumable during sign-up." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "Azure discloses pricing details, pay-as-you-go rates, US dollar pricing worldwide, local currency conversion rules, and credit card or invoice payment options." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence describes adding or replacing credit cards and creating Azure subscriptions in the Azure portal, but it does not document an agent checkout sequence with bounded approval handoff and safe resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence outlines supported payment methods (credit card, debit card, wire transfer) and account role permissions, but does not state a documented rail for scoped delegation or human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "Azure documents a direct self-service subscription creation path in the Azure portal and programmatically, reaching immediate paid access for users with appropriate billing permissions without a required vendor decision point." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:37.458Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence describes adding or replacing credit cards and creating Azure subscriptions in the Azure portal, but it does not document an agent checkout sequence with bounded approval handoff and safe resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:51.823Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "azure-pricing" }, { "node_kind": "resource", "node_id": "retail-prices-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e68304acc7a6a52fa00d71b44b61f2852f9aabe072cd53523ba8bfd68ae9438f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "sha256:9b828fb2c40cef1d39c4ba94db86d5f14e2a1a7ce67ee4e4856defbb287726c5", "sha256:ad05a749243d5f1fcfea5d47c418ed29bc2abd434d3ddd3bc91f97180b0b197d" ], "source_surface": { "node_kind": "resource", "node_id": "azure-pricing" }, "locators": [ { "artifact_digest": "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "start_byte": 47222, "end_byte": 48020, "value_digest": "sha256:74fa1b1340314fbbd6f3499c8d51e4e089f3deeb41b67578fe616f24a11c004a" }, { "artifact_digest": "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "start_byte": 48021, "end_byte": 48821, "value_digest": "sha256:eb7c6003872756ad12f5626fd0ca7ce01620b77836300baa735006d4cfa578e3" } ] } ], "note": "Azure discloses pricing details, pay-as-you-go rates, US dollar pricing worldwide, local currency conversion rules, and credit card or invoice payment options." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:37.458Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The evidence outlines supported payment methods (credit card, debit card, wire transfer) and account role permissions, but does not state a documented rail for scoped delegation or human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:28.717Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8144a6a961c3eeeadac69891426cde49b138e79f914444ea7d18e9c8f20873fa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:59b6ec15ae358327c2afe02d0c4ef9d26778110fde29ea510273f32ae7c2c090", "sha256:9971342ddc55711a4fa1cfb0921d59f291988182259cb73022155d4ca8a44caa", "sha256:9a1c7515c0c9ae778fb7f0fb19925472c244bae1f5b7220f7e532a2c6386c5ec" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2" }, "locators": [ { "artifact_digest": "sha256:9a1c7515c0c9ae778fb7f0fb19925472c244bae1f5b7220f7e532a2c6386c5ec", "start_byte": 13686, "end_byte": 14473, "value_digest": "sha256:6c91498c3cec26a4eeefbddd11e00180ec0dfb47867e11dd71a6f66ab4ecbeef" }, { "artifact_digest": "sha256:9a1c7515c0c9ae778fb7f0fb19925472c244bae1f5b7220f7e532a2c6386c5ec", "start_byte": 8893, "end_byte": 9691, "value_digest": "sha256:c76a19fc874b9dba8763ea539cab707b4eba1456323516aca4e4d340f5ed5c17" } ] } ], "note": "Azure documents a direct self-service subscription creation path in the Azure portal and programmatically, reaching immediate paid access for users with appropriate billing permissions without a required vendor decision point." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Azure Resource Manager operations can be programmatically initiated via machine-triggerable REST API endpoints, such as resource group creation (`PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}`) and resource deployment." }, "secondary_context": [ { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "Microsoft identity platform supports access material delivery via a documented token request flow (`POST /{tenant}/oauth2/v2.0/token`) using client credentials, returning access tokens for authorized API calls." }, { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "context": "Azure Resource Manager tracks asynchronous operations using HTTP status codes 201/202, provisioningState values (Succeeded, Failed, Canceled), operation status polling via Azure-AsyncOperation or Location headers, and Retry-After interval bounds." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:16.675Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f7d1895f3eee7632ffde333427dbf8c088bb5a9e0d2d7703926c014f73da07c6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "sha256:c5547526b4374f1b600e25d0f2622b6aab5a74cabd74cbc8ae83863ca1ac89bf", "sha256:db3fbf28022eee9d201d6c97393304361a5d655c5cd8c874e0cbed8d10b0842e" ], "source_surface": { "node_kind": "resource", "node_id": "client-credentials" }, "locators": [ { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 17077, "end_byte": 17877, "value_digest": "sha256:d52edc6968e20da6ec5f2bbcf6728c4ed2b3dc3a74ed2cab0d28a6f71ffeecfc" }, { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 22610, "end_byte": 23407, "value_digest": "sha256:edb4fc7a11ca03791e28d3debe1af2d2c02b293f31751049baa7e5e01eaf1e3c" } ] } ], "note": "Microsoft identity platform supports access material delivery via a documented token request flow (`POST /{tenant}/oauth2/v2.0/token`) using client credentials, returning access tokens for authorized API calls." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:30.851Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "asynchronous-operations" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:26f9d53ab6eacd2cca02f9583b8fd75195ab01910d6495a599b7fbcdd4e8ed86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "sha256:1ea5e88662feb1f1518546b4c5f126a6d42b08749c80888a151a06b3266d5da3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5f212ee577b8cdcd3491bce8bd80aac75bfedaa3c67c39f0c8af5b6df0da10e1" ], "source_surface": { "node_kind": "resource", "node_id": "asynchronous-operations" }, "locators": [ { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 5893, "end_byte": 6685, "value_digest": "sha256:5a4a4c167c559c98ff76fb149c135aed00f9bb6dbdbeb3dcd4b5f228fbbc0e2b" }, { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 6686, "end_byte": 7482, "value_digest": "sha256:5f3e512ea3bd77b848b11c61b46349a5a9f29ee26317e8fc7e367b3d1d39f6c8" } ] } ], "note": "Azure Resource Manager tracks asynchronous operations using HTTP status codes 201/202, provisioningState values (Succeeded, Failed, Canceled), operation status polling via Azure-AsyncOperation or Location headers, and Retry-After interval bounds." }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:47.722Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "asynchronous-operations" }, { "node_kind": "resource", "node_id": "resource-group-api" }, { "node_kind": "resource", "node_id": "resource-manager-rest" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:a80d29b235d0c330e4d27447ca60e9f7f374388b80918862bc29e453bbecfd75", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:c27bffb924f6131dd5083299f00d09e501c0737258feeec07375ca98d51fbc5c", "sha256:ee09d7c050d1a7f970c97c39153978fcdcd84ad14f8a0eeb44365a7ac8714bae" ], "source_surface": { "node_kind": "resource", "node_id": "resource-manager-rest" }, "locators": [ { "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "start_byte": 9012, "end_byte": 9805, "value_digest": "sha256:416cdc9e50db8802341dd9e70fe66bfa47f7f4351fdf3adaffafebc77549c6bc" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4dedc1d7d818357aa43545b81579ceb34b26e3f0e7c77d3e97ff1a76c8fa4daa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:8f3e87b2d0cd88725af5ac3de901ea9372abf5ebd6258680b5f57c67f2dc2ace", "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "sha256:f8db1e193feaa765a1af9364d17ccd80bbaaa85ded8b23ef9f410b47ad604a93" ], "source_surface": { "node_kind": "resource", "node_id": "resource-group-api" }, "locators": [ { "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "start_byte": 4795, "end_byte": 5594, "value_digest": "sha256:8e73fccb7ab28e2aa56bd3d56795fdd6f9856a32b50d022b6a7d29d1c7ef8cd4" } ] } ], "note": "Azure Resource Manager operations can be programmatically initiated via machine-triggerable REST API endpoints, such as resource group creation (`PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}`) and resource deployment." } ], "blockers": [], "remediations": [] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Azure Resource Manager documents asynchronous status tracking, Retry-After intervals, terminal provisioning states and error objects; the selected quotes do not establish idempotency semantics for resource operations." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for Microsoft Azure; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Microsoft identity platform evidence establishes that applications use client secrets, certificates, or federated credentials, and documents deactivating or deleting applications to revoke or suspend token issuance. However, full automated rotation and recovery lifecycle semantics under delegated agent authority are not completely established in the retained text." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Every essential target provides documented, machine-operable HTTP REST API endpoints and CLI commands, enabling programmatically structured access to Azure resource management, pricing, cost permissions, resource group deployment, and async operation tracking." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "The OAuth 2.0 client credentials grant flow on the Microsoft identity platform allows web services and daemons to authenticate using scoped application permissions via token requests with client secrets or certificates, presenting Bearer tokens to call secured APIs under scoped authority." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "The evaluated Azure documentation targets explicitly specify HTTP request methods, URI path parameters, headers, structured JSON request/response schemas, status codes, and error formats across asynchronous operations, retail pricing, REST APIs, cost management permissions, resource group creation, limits/throttling, and resource management operations." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.814Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "azure-resource-manager" }, { "node_kind": "interface", "node_id": "pricing-and-cost" }, { "node_kind": "interface", "node_id": "workload-authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for Microsoft Azure; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.151Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2eaea555f1137eaff89eadf06e1d133138660d7a8d52c3edf0e9ae3b7e7631ec", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5563d7a32ac6fee65948663bcf749e3f8a22b2569956bbc5f463934af22b4711", "sha256:68bd24794b8c027e73d48600534df0ee8288bd547a1dc8a1fc4850c247d25e38", "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f" ], "source_surface": { "node_kind": "resource", "node_id": "service-principals" }, "locators": [ { "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f", "start_byte": 13153, "end_byte": 13950, "value_digest": "sha256:ea35599d4d630c18462c2d7c19faae966e17e6240ef6d22014c62782baf38da8" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f7d1895f3eee7632ffde333427dbf8c088bb5a9e0d2d7703926c014f73da07c6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "sha256:862a715a45fc13adf2934ab3c65ad67363d161d076452fdeff68a99daacfb49e", "sha256:db3fbf28022eee9d201d6c97393304361a5d655c5cd8c874e0cbed8d10b0842e" ], "source_surface": { "node_kind": "resource", "node_id": "client-credentials" }, "locators": [ { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 8282, "end_byte": 9080, "value_digest": "sha256:b1fd0df5795afbd1c68d8dedbd16faf25cb7b4bf1606bf05afb5ea2f35ae37ae" } ] } ], "note": "Microsoft identity platform evidence establishes that applications use client secrets, certificates, or federated credentials, and documents deactivating or deleting applications to revoke or suspend token issuance. However, full automated rotation and recovery lifecycle semantics under delegated agent authority are not completely established in the retained text.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:30.851Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "asynchronous-operations" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:26f9d53ab6eacd2cca02f9583b8fd75195ab01910d6495a599b7fbcdd4e8ed86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "sha256:1ea5e88662feb1f1518546b4c5f126a6d42b08749c80888a151a06b3266d5da3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:717623a652a4950287387bb06a7bdf4426d327d78602851e66b8d69f06187313" ], "source_surface": { "node_kind": "resource", "node_id": "asynchronous-operations" }, "locators": [ { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 6686, "end_byte": 7482, "value_digest": "sha256:5f3e512ea3bd77b848b11c61b46349a5a9f29ee26317e8fc7e367b3d1d39f6c8" }, { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 9081, "end_byte": 9880, "value_digest": "sha256:5856909e1cdaed92d9597fa5828a0400da360c535e04d11199c19f36564322cf" } ] } ], "note": "Azure Resource Manager documents asynchronous status tracking, Retry-After intervals, terminal provisioning states and error objects; the selected quotes do not establish idempotency semantics for resource operations.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.151Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "client-credentials" }, { "node_kind": "resource", "node_id": "service-principals" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f7d1895f3eee7632ffde333427dbf8c088bb5a9e0d2d7703926c014f73da07c6", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "sha256:52df009d3133b360d30ce7aea0fef66e96e8d19032714695f6b1fb15785c3cd4", "sha256:db3fbf28022eee9d201d6c97393304361a5d655c5cd8c874e0cbed8d10b0842e" ], "source_surface": { "node_kind": "resource", "node_id": "client-credentials" }, "locators": [ { "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf", "start_byte": 6680, "end_byte": 7484, "value_digest": "sha256:07e6a9632a7e59f0b3f67d8910f56847a209a90a1fbd13cbf258a83c7c601188" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2eaea555f1137eaff89eadf06e1d133138660d7a8d52c3edf0e9ae3b7e7631ec", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5563d7a32ac6fee65948663bcf749e3f8a22b2569956bbc5f463934af22b4711", "sha256:84b2906cc6be6a177f3e31058196eae77bae42ac909f770f0c1b9437b5bef12c", "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f" ], "source_surface": { "node_kind": "resource", "node_id": "service-principals" }, "locators": [ { "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f", "start_byte": 8385, "end_byte": 9175, "value_digest": "sha256:199a24d82f1db201e97f453e11d59742b8cb175877229b08889b2d8e1503d900" } ] } ], "note": "The OAuth 2.0 client credentials grant flow on the Microsoft identity platform allows web services and daemons to authenticate using scoped application permissions via token requests with client secrets or certificates, presenting Bearer tokens to call secured APIs under scoped authority." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:01.482Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "azure-resource-manager" }, { "node_kind": "interface", "node_id": "pricing-and-cost" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:a80d29b235d0c330e4d27447ca60e9f7f374388b80918862bc29e453bbecfd75", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:e5e277abf8118506299fa7467e7f5155d8839347647b8952ae03f3bf0f9fbe86", "sha256:ee09d7c050d1a7f970c97c39153978fcdcd84ad14f8a0eeb44365a7ac8714bae" ], "source_surface": { "node_kind": "resource", "node_id": "resource-manager-rest" }, "locators": [ { "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "start_byte": 8265, "end_byte": 9011, "value_digest": "sha256:3fc5c85cbd6255458d14cdf4a052a6dc0c455d41555217b2a7575ad9b6dbacde" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f2c5c23083fa760c8599e096422689c997cd336c72a0adab7e4199a7bfad9f2a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:396c2d060cdcdf6fa8d4eb5a4082670a2eb028d805053f6961d267267a2a1c0b", "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b", "sha256:eca799e17f78be8a01bedf14180368cedc089c3f9c7da0e0604ce8065bd0d646" ], "source_surface": { "node_kind": "resource", "node_id": "azure-rest-api" }, "locators": [ { "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "start_byte": 9951, "end_byte": 10732, "value_digest": "sha256:7996b76edea0159d36223628951c3c4a35541fb5dda4ae2a9d218d42a52ce1bc" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8a351ea32d9b38db44a99172a29a851f55a2d7eca17b1f45bf0f60eab05c2349", "capture_rung": "http" } ], "artifact_digests": [ "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b8b8c1279558a4692b82048fe301f40dc3f0a2cca8f9eb7387adba9933d017cc", "sha256:bc89f1c0408485a11859b6b2d1f6e976e0f48c2de60913a2ad322f732b288008" ], "source_surface": { "node_kind": "resource", "node_id": "retail-prices-api" }, "locators": [ { "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "start_byte": 8372, "end_byte": 9101, "value_digest": "sha256:a4620c6fd61bcbbe1d12719720bc0ab1a063e291ba48be9e4a99867ee079f069" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:26f9d53ab6eacd2cca02f9583b8fd75195ab01910d6495a599b7fbcdd4e8ed86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "sha256:1ea5e88662feb1f1518546b4c5f126a6d42b08749c80888a151a06b3266d5da3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:63d131b90fb98dffb572994b3b76262dff9fa69063f5fe658dce82216c06062d" ], "source_surface": { "node_kind": "resource", "node_id": "asynchronous-operations" }, "locators": [ { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 10670, "end_byte": 11465, "value_digest": "sha256:e066f5227002fddc3b46ad6e8a3dc7d345d41bf6b10a06e8b26c37e6ee02019f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4dedc1d7d818357aa43545b81579ceb34b26e3f0e7c77d3e97ff1a76c8fa4daa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:8f3e87b2d0cd88725af5ac3de901ea9372abf5ebd6258680b5f57c67f2dc2ace", "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "sha256:f8db1e193feaa765a1af9364d17ccd80bbaaa85ded8b23ef9f410b47ad604a93" ], "source_surface": { "node_kind": "resource", "node_id": "resource-group-api" }, "locators": [ { "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "start_byte": 4795, "end_byte": 5594, "value_digest": "sha256:8e73fccb7ab28e2aa56bd3d56795fdd6f9856a32b50d022b6a7d29d1c7ef8cd4" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:56671975d2f7788a805c0b7c088b3a3db4ea535b7ea3bb099725802e68119906", "capture_rung": "http" } ], "artifact_digests": [ "sha256:160bb53004d29ab91ba0a6fb899d42913f6ca98037906886d1ca9aa65d8e8121", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7", "sha256:c59c134af95133f2c80c5c6c5c1ffb107e52b795637fcdc4ccfe75f0c044035a" ], "source_surface": { "node_kind": "resource", "node_id": "cost-management-permissions" }, "locators": [ { "artifact_digest": "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7", "start_byte": 6458, "end_byte": 7258, "value_digest": "sha256:510f2b524ee0d6fe3adc04dccd6a51b09e85afd46ebca0f2193a9dce3da44f27" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b4060f449d9a45c1f3c4093a1c47fb5ba3c682b007eab39289ccb725c3201695", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:c3082e0ad7533102056257e8762faa26877c483b278dfad8b779f55396a19654", "sha256:c82fc5bb1bc56117d6949bdb41fb64b3e56f4887523b36c5646b0cf136d863c4", "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683" ], "source_surface": { "node_kind": "resource", "node_id": "resource-manager-limits" }, "locators": [ { "artifact_digest": "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683", "start_byte": 13078, "end_byte": 13875, "value_digest": "sha256:08b7379e552b12f2f6938d545582d2a2038f6f583dd50459e51366257057b87f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e68304acc7a6a52fa00d71b44b61f2852f9aabe072cd53523ba8bfd68ae9438f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:63207f6037d85d6bd6dd0d81ed7f41c0b4f8bea5b86a4e1207551c559a9f9cdb", "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "sha256:9b828fb2c40cef1d39c4ba94db86d5f14e2a1a7ce67ee4e4856defbb287726c5" ], "source_surface": { "node_kind": "resource", "node_id": "azure-pricing" }, "locators": [ { "artifact_digest": "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "start_byte": 0, "end_byte": 800, "value_digest": "sha256:253a1bd5a5e8366345f32a701949f3c1a20c463b16889b060bb077d177018642" } ] } ], "note": "The evaluated Azure documentation targets explicitly specify HTTP request methods, URI path parameters, headers, structured JSON request/response schemas, status codes, and error formats across asynchronous operations, retail pricing, REST APIs, cost management permissions, resource group creation, limits/throttling, and resource management operations." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:01.482Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "azure-resource-manager" }, { "node_kind": "interface", "node_id": "pricing-and-cost" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f2c5c23083fa760c8599e096422689c997cd336c72a0adab7e4199a7bfad9f2a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4ebf011a70740bc362818bd6f5c54cc4035d493f9d0f29b990c717e4bf97ebc1", "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b", "sha256:eca799e17f78be8a01bedf14180368cedc089c3f9c7da0e0604ce8065bd0d646" ], "source_surface": { "node_kind": "resource", "node_id": "azure-rest-api" }, "locators": [ { "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6", "start_byte": 7552, "end_byte": 8349, "value_digest": "sha256:6bf313b5c6f03c6c08d1e143478b62e617538ff1e08bcef0ade78d3949a11d44" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8a351ea32d9b38db44a99172a29a851f55a2d7eca17b1f45bf0f60eab05c2349", "capture_rung": "http" } ], "artifact_digests": [ "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5f6fd28fecf901b709fdfac86771bcb9f39de6b6f0b7f1de6ff96a43924099d8", "sha256:b8b8c1279558a4692b82048fe301f40dc3f0a2cca8f9eb7387adba9933d017cc" ], "source_surface": { "node_kind": "resource", "node_id": "retail-prices-api" }, "locators": [ { "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82", "start_byte": 5231, "end_byte": 6028, "value_digest": "sha256:c883979935aa613b52dc9efc85753bbc532a811e1bb29198e3318e5d53592cc2" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:a80d29b235d0c330e4d27447ca60e9f7f374388b80918862bc29e453bbecfd75", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:e5e277abf8118506299fa7467e7f5155d8839347647b8952ae03f3bf0f9fbe86", "sha256:ee09d7c050d1a7f970c97c39153978fcdcd84ad14f8a0eeb44365a7ac8714bae" ], "source_surface": { "node_kind": "resource", "node_id": "resource-manager-rest" }, "locators": [ { "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5", "start_byte": 8265, "end_byte": 9011, "value_digest": "sha256:3fc5c85cbd6255458d14cdf4a052a6dc0c455d41555217b2a7575ad9b6dbacde" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:26f9d53ab6eacd2cca02f9583b8fd75195ab01910d6495a599b7fbcdd4e8ed86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "sha256:1ea5e88662feb1f1518546b4c5f126a6d42b08749c80888a151a06b3266d5da3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:63d131b90fb98dffb572994b3b76262dff9fa69063f5fe658dce82216c06062d" ], "source_surface": { "node_kind": "resource", "node_id": "asynchronous-operations" }, "locators": [ { "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f", "start_byte": 10670, "end_byte": 11465, "value_digest": "sha256:e066f5227002fddc3b46ad6e8a3dc7d345d41bf6b10a06e8b26c37e6ee02019f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4dedc1d7d818357aa43545b81579ceb34b26e3f0e7c77d3e97ff1a76c8fa4daa", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:8f3e87b2d0cd88725af5ac3de901ea9372abf5ebd6258680b5f57c67f2dc2ace", "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "sha256:f8db1e193feaa765a1af9364d17ccd80bbaaa85ded8b23ef9f410b47ad604a93" ], "source_surface": { "node_kind": "resource", "node_id": "resource-group-api" }, "locators": [ { "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69", "start_byte": 4795, "end_byte": 5594, "value_digest": "sha256:8e73fccb7ab28e2aa56bd3d56795fdd6f9856a32b50d022b6a7d29d1c7ef8cd4" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:56671975d2f7788a805c0b7c088b3a3db4ea535b7ea3bb099725802e68119906", "capture_rung": "http" } ], "artifact_digests": [ "sha256:160bb53004d29ab91ba0a6fb899d42913f6ca98037906886d1ca9aa65d8e8121", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7", "sha256:c59c134af95133f2c80c5c6c5c1ffb107e52b795637fcdc4ccfe75f0c044035a" ], "source_surface": { "node_kind": "resource", "node_id": "cost-management-permissions" }, "locators": [ { "artifact_digest": "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7", "start_byte": 6458, "end_byte": 7258, "value_digest": "sha256:510f2b524ee0d6fe3adc04dccd6a51b09e85afd46ebca0f2193a9dce3da44f27" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b4060f449d9a45c1f3c4093a1c47fb5ba3c682b007eab39289ccb725c3201695", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7c98eb7ad7cc31c11ebf56d6b685c66cc55909969f3f3ad12ff32b69d7227128", "sha256:c82fc5bb1bc56117d6949bdb41fb64b3e56f4887523b36c5646b0cf136d863c4", "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683" ], "source_surface": { "node_kind": "resource", "node_id": "resource-manager-limits" }, "locators": [ { "artifact_digest": "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683", "start_byte": 8318, "end_byte": 9117, "value_digest": "sha256:d261d9dc1d921a09f6121d53ef237cb01952cde9f05af8fdb6f35b533267f9f9" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e68304acc7a6a52fa00d71b44b61f2852f9aabe072cd53523ba8bfd68ae9438f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:63207f6037d85d6bd6dd0d81ed7f41c0b4f8bea5b86a4e1207551c559a9f9cdb", "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "sha256:9b828fb2c40cef1d39c4ba94db86d5f14e2a1a7ce67ee4e4856defbb287726c5" ], "source_surface": { "node_kind": "resource", "node_id": "azure-pricing" }, "locators": [ { "artifact_digest": "sha256:7d0fc372683f9dd262e7b24e35397fad95bdd251706e776d58ffc4b275531645", "start_byte": 0, "end_byte": 800, "value_digest": "sha256:253a1bd5a5e8366345f32a701949f3c1a20c463b16889b060bb077d177018642" } ] } ], "note": "Every essential target provides documented, machine-operable HTTP REST API endpoints and CLI commands, enabling programmatically structured access to Azure resource management, pricing, cost permissions, resource group deployment, and async operation tracking." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:52:01.482Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:009a23ed5b9a49e8bbb9f3a03c2ffe07a391605f33e2dbe1aaa9315bd49aaf86", "sha256:05e3abe70ea6d10c341d7fca66e8fef5ad8180442b5e39c7d4d87c85a57c436e", "sha256:0822e4b6aa32b1b882a39512d7f787a230e20f576c316bfca3c7db884528edb2", "sha256:08964ebb93a22ceeb8c4b1ee97fd3c3e286d1557e1bafdc3e8e414c9cdcfd813", "sha256:0dc5f7a2e75bfecf245f9434f389c24cd3b9b8b87951116d1bdff02ea16b26a0", "sha256:10990bd3e3966a99e5d10c38107d69fac2c46720e0007989ab38551ca3589e8c", "sha256:18e5362c3adba7b0563f44a1ef570b108cf4ebe89177032a8779f23ddc6489f4", "sha256:192baba37ffba33906b9735cc0858aa609752c3e8c0ef9a4be4a4c48a9fea3ce", "sha256:19e78dfd9f039b061b2e40a9cfce7f6af2cb9ab6cc5c4d46b5f56c765573feaa", "sha256:2ca384743e6317496c794349ea2358757b04edcbedbe593acc290b87bbd16a53", "sha256:3975ee9694293dd744e0e980423dd6ff87d7103a465ab720f48c70b7b1ef27d0", "sha256:3d69c71833d1ecd633b637fe1cacc8e49dde583978ee3af3f62991b9007a384e", "sha256:43251048560674b4b5356980ca834d9df063771629e5e1344dd0f68ee942e83f", "sha256:495fe69236ff29a3321f7e329e6e31bb17376b766399811a4d1196870becf9db", "sha256:558a8e36c0d836c14ee4eb37d9fab2f598ead34eecab695555c7fd3ddd84ea67", "sha256:5887750dd9837ab0fddd20164f77dc170e8ae730836cd68d792df23b4b9bdc40", "sha256:5936b98f8754d39b08ca474246f6cbafdb012ca6a440f1fa93224e6da5d84652", "sha256:660d45d63ea9b83646a1cf6a14a207de1061a4d789de524fccfe773915a0382d", "sha256:6a4fbb0f7f41e2b539fea4a3d69ddfcb5f3e575c9cd3a8dc2fe3e5dbfe84f204", "sha256:6be76cc85bd0142459a749039f0b2d330aedb66bf979a76649466f2b53ef2786", "sha256:6bf95fe2d956375506b0c8dba260c9d5370d04d2e005a8b3dd82df17314c15b5", "sha256:7211d1553d6aecaa26598a21953e921224f16d24ca707d2aef2140d110267bbd", "sha256:733a60e7c419da5dfd6f63108af76424ae8720179b201d46204001ee28142200", "sha256:73ff39dfd5fb4b4af42b822f8fb3c52ae4c6647f5ff43c1fa93c1e5020134cca", "sha256:821b526b9a55c5ed04d92427399e7b338c0b264717c96cc7ce508ba4b43ac37c", "sha256:82e4538e0e657a804c825608fd2ec523a3bb7162b27d7c2dd45f1f7cd4e4d35b", "sha256:84846e1aa7ee16f7cda3d08304e6618614cfa3f194aa913405aec05e8cefe41a", "sha256:868fcedadeadeea435486965429738c1d22e53a662e7beef93efed3746e85ee5", "sha256:8a8eeadf0857629430cc69a9eefcf0be52a7106e9a22e328ccc0d125ca3267bc", "sha256:95f7999b2e54e78876f7da45abc9cca9e8dc55ca11a24add29c4b5d5ef296d21", "sha256:99218c9285155415b48da2b0d63f78cc1db44dde42bc4c49c0763ffb1c6cb24d", "sha256:a8324122ea7a630a2c07ed07b923c41967627691d07bd0b67ff21a25b9d57b42", "sha256:aea79387da0139c4d3dc1de5711a5f8d1d398b0d1542b3126940e005f75503c1", "sha256:af47f0284a9ed0efb8b08c067f632e28f3803e62355ad4281f223a689ec9ca61", "sha256:b2e63a680703a47fe2ad6efb6b74f3088f3a4c8f73a80e4a6769693ece165078", "sha256:b7e8d2936e6f9175e4cec91b6d801c999a1c91b9b899235623904331503bf1f4", "sha256:b87b7abae648335dc1a606f75ef03b09fc2660df23e8d1d7c1a2d63f813e4ff2", "sha256:c532c3da0a955568e1286b8fd9910452a283600d600a594ad2bbe6a78bf174ae", "sha256:ca9811b37afba6cc7a72fd34619fee64ffb3ae6361fea654250e79a649fbc55b", "sha256:cc1065be5ebd63f1182911a42c31d6c510bfdd16cc617b8dd9c053e1b526c755", "sha256:d5bcb46569cd5bb4c23edb4224e7db50a8e75cd72212073a721cade486cf235c", "sha256:d80e217f801635ce2ec920d887377b57c81f7605663b89bba1e63a9efbb5f0d3", "sha256:da2c6bc262c4d0c504205fa6c4b4f946c7ea63f7099ace2092ed935161c1bc75", "sha256:e0467e3e8e1521a07a66239bb383a7eecd7cd553c60b8b93fa025d514d33330e", "sha256:e16dc202731647f5f187862e9e93d700b5bc3306af5ca1fb76ba336d0ceba9c6", "sha256:e2e88e64667ee14b419b57eed2184b1970e83a12113576f9f7fc6ed1e5c88c8c", "sha256:f543a8c6ac4333a96f85c6cce0e15517ce255a7ea52d0ceabfafd6d7358dca36" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:08964ebb93a22ceeb8c4b1ee97fd3c3e286d1557e1bafdc3e8e414c9cdcfd813" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.787Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:6a4fbb0f7f41e2b539fea4a3d69ddfcb5f3e575c9cd3a8dc2fe3e5dbfe84f204" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:01.648Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:c532c3da0a955568e1286b8fd9910452a283600d600a594ad2bbe6a78bf174ae" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.814Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:6be76cc85bd0142459a749039f0b2d330aedb66bf979a76649466f2b53ef2786", "sha256:af47f0284a9ed0efb8b08c067f632e28f3803e62355ad4281f223a689ec9ca61" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.814Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:99218c9285155415b48da2b0d63f78cc1db44dde42bc4c49c0763ffb1c6cb24d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:26.217Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:18e5362c3adba7b0563f44a1ef570b108cf4ebe89177032a8779f23ddc6489f4", "sha256:5887750dd9837ab0fddd20164f77dc170e8ae730836cd68d792df23b4b9bdc40" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.814Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:7211d1553d6aecaa26598a21953e921224f16d24ca707d2aef2140d110267bbd" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.708Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:43251048560674b4b5356980ca834d9df063771629e5e1344dd0f68ee942e83f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.708Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:3d69c71833d1ecd633b637fe1cacc8e49dde583978ee3af3f62991b9007a384e", "sha256:5936b98f8754d39b08ca474246f6cbafdb012ca6a440f1fa93224e6da5d84652", "sha256:84846e1aa7ee16f7cda3d08304e6618614cfa3f194aa913405aec05e8cefe41a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.232Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:19e78dfd9f039b061b2e40a9cfce7f6af2cb9ab6cc5c4d46b5f56c765573feaa" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:16.675Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:192baba37ffba33906b9735cc0858aa609752c3e8c0ef9a4be4a4c48a9fea3ce", "sha256:f543a8c6ac4333a96f85c6cce0e15517ce255a7ea52d0ceabfafd6d7358dca36" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.232Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:0822e4b6aa32b1b882a39512d7f787a230e20f576c316bfca3c7db884528edb2" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:37.458Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:733a60e7c419da5dfd6f63108af76424ae8720179b201d46204001ee28142200" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:51.823Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:d5bcb46569cd5bb4c23edb4224e7db50a8e75cd72212073a721cade486cf235c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:37.458Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:6bf95fe2d956375506b0c8dba260c9d5370d04d2e005a8b3dd82df17314c15b5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:28.717Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:73ff39dfd5fb4b4af42b822f8fb3c52ae4c6647f5ff43c1fa93c1e5020134cca" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:16.675Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:82e4538e0e657a804c825608fd2ec523a3bb7162b27d7c2dd45f1f7cd4e4d35b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:30.851Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:868fcedadeadeea435486965429738c1d22e53a662e7beef93efed3746e85ee5", "sha256:e2e88e64667ee14b419b57eed2184b1970e83a12113576f9f7fc6ed1e5c88c8c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:47.722Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:558a8e36c0d836c14ee4eb37d9fab2f598ead34eecab695555c7fd3ddd84ea67", "sha256:e0467e3e8e1521a07a66239bb383a7eecd7cd553c60b8b93fa025d514d33330e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.814Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:495fe69236ff29a3321f7e329e6e31bb17376b766399811a4d1196870becf9db", "sha256:95f7999b2e54e78876f7da45abc9cca9e8dc55ca11a24add29c4b5d5ef296d21" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.151Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:b7e8d2936e6f9175e4cec91b6d801c999a1c91b9b899235623904331503bf1f4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:30.851Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:0dc5f7a2e75bfecf245f9434f389c24cd3b9b8b87951116d1bdff02ea16b26a0", "sha256:8a8eeadf0857629430cc69a9eefcf0be52a7106e9a22e328ccc0d125ca3267bc" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.151Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:009a23ed5b9a49e8bbb9f3a03c2ffe07a391605f33e2dbe1aaa9315bd49aaf86", "sha256:3975ee9694293dd744e0e980423dd6ff87d7103a465ab720f48c70b7b1ef27d0", "sha256:821b526b9a55c5ed04d92427399e7b338c0b264717c96cc7ce508ba4b43ac37c", "sha256:aea79387da0139c4d3dc1de5711a5f8d1d398b0d1542b3126940e005f75503c1", "sha256:b87b7abae648335dc1a606f75ef03b09fc2660df23e8d1d7c1a2d63f813e4ff2", "sha256:cc1065be5ebd63f1182911a42c31d6c510bfdd16cc617b8dd9c053e1b526c755", "sha256:d80e217f801635ce2ec920d887377b57c81f7605663b89bba1e63a9efbb5f0d3", "sha256:e16dc202731647f5f187862e9e93d700b5bc3306af5ca1fb76ba336d0ceba9c6" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:01.482Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:05e3abe70ea6d10c341d7fca66e8fef5ad8180442b5e39c7d4d87c85a57c436e", "sha256:10990bd3e3966a99e5d10c38107d69fac2c46720e0007989ab38551ca3589e8c", "sha256:2ca384743e6317496c794349ea2358757b04edcbedbe593acc290b87bbd16a53", "sha256:660d45d63ea9b83646a1cf6a14a207de1061a4d789de524fccfe773915a0382d", "sha256:a8324122ea7a630a2c07ed07b923c41967627691d07bd0b67ff21a25b9d57b42", "sha256:b2e63a680703a47fe2ad6efb6b74f3088f3a4c8f73a80e4a6769693ece165078", "sha256:ca9811b37afba6cc7a72fd34619fee64ffb3ae6361fea654250e79a649fbc55b", "sha256:da2c6bc262c4d0c504205fa6c4b4f946c7ea63f7099ace2092ed935161c1bc75" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:01.482Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/microsoft/agent-readiness/microsoft-azure/api-resource-management", "projection_digest": "sha256:a44733a4d1ab47dad79730e4b999eb92b1b826325281caf58c199452c7687406" } } }