{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:5f55a0147eca9a82d821b7cfb73339dd8059c146b9acbb6ed66c9e3d40a8e1b0", "snapshot_id": "sha256:fbf4583b80f8936d9b7b75906adc86f38f5612cd0a7329839daea7b71ad2b9ce", "artifact_sha256": "sha256:ec393385ec4e7be15a393d925f0df78d54a12787f2995a84fad1b570583dac06", "data": { "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm", "entity_slug": "pinecone", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xf5d9pv2y8s1jm6rw3", "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm", "scope": { "product": { "key": "pinecone-database-api", "name": "Pinecone Database API" }, "funnel": { "key": "index-lifecycle", "name": "Index lifecycle" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:e9e189b94a2779ae87069ff0564d9b42af13a48dd09efba1da4d509f66e08195" }, "declaration_revision_digest": "sha256:a46426271da24d2228774f1b40ced8efc3d854d61fc199666f33a650a33e2e4f", "declaration": { "declaration_id": "declaration_pinecone_api_index_lifecycle", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/pi/pinecone.yaml", "git_blob_oid": "70ad70bfb5b94fae3488efc2115db5780c3548eb", "blob_digest": "sha256:6f5cd37754a66d25d56cb6996084a3d65b67bae015ef0b04f22ba88d07fea392" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Create indexes and read and write vectors through the API", "interface_ids": [ "index-api" ] } ], "participants": [ { "participant_id": "pinecone", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe4a7e0sp2h5gjz9xbm" } } ], "resources": [ { "resource_id": "api-errors", "uri": "https://docs.pinecone.io/reference/api/errors", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://docs.pinecone.io/reference/api/introduction", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "authentication", "uri": "https://docs.pinecone.io/reference/api/authentication", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://docs.pinecone.io/guides/organizations/manage-billing/change-payment-method", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "console-access", "uri": "https://app.pinecone.io/", "roles": [ "access" ], "operated_by_participant_id": "pinecone", "standard_bindings": [], "allowed_redirect_hosts": [ "login.pinecone.io" ] }, { "resource_id": "create-index", "uri": "https://docs.pinecone.io/reference/api/2025-04/control-plane/create_index", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "database-limits", "uri": "https://docs.pinecone.io/reference/api/database-limits", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://www.pinecone.io/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b", "uri": "https://docs.pinecone.io/guides/organizations/manage-service-accounts", "roles": [ "authentication", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d", "uri": "https://docs.pinecone.io/guides/organizations/understanding-organizations", "roles": [ "access", "documentation" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://www.pinecone.io/legal/master-subscription-agreement/", "roles": [ "terms" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://docs.pinecone.io/troubleshooting/how-to-work-with-support", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "control-plane-api", "uri": "https://api.pinecone.io", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://app.pinecone.io/", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "pinecone", "standard_bindings": [], "allowed_redirect_hosts": [ "login.pinecone.io" ] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "authentication" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] }, { "interface_id": "index-api", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "control-plane-api" ], "resource_ids": [ "api-errors", "api-reference", "create-index", "database-limits" ], "operated_by_participant_id": "pinecone", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "console-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "console-access" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } }, { "relation_id": "create-index-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "create-index" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "index-api" } }, { "relation_id": "relation-describes-55929b53f57ecd7278ff26842c4a8a886b0996c33c7f0eb4e486df1398d7f604", "kind": "describes", "from": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:848726687ae60a02d35af86107acfd604238887a002e266f6837a689ad016b7d", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "sign_up", "stage_label": "Sign up", "public_state": "limited", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Pinecone documentation states that service accounts enable programmatic access to the Admin API and use client secrets to retrieve access tokens. However, creating a service account and retrieving its initial client secret requires manual actions in the Pinecone console." } }, "limitations": [ { "stage": "sign_up", "stage_label": "Sign up", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Pinecone documentation states that service accounts enable programmatic access to the Admin API and use client secrets to retrieve access tokens. However, creating a service account and retrieving its initial client secret requires manual actions in the Pinecone console." }, "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "API keys are generated in the Pinecone console. Service accounts created in the console provide client secrets that are displayed once at creation and used to retrieve access tokens." }, "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "The Create Index API response returns an IndexModel containing host and status fields (such as ready: true and state: Ready), exposing progress and ready states, but the retained evidence leaves reconciliation after asynchronous failure unresolved." }, "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Pinecone documents HTTP error semantics and exponential-backoff retry guidance for 429 and 5xx; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for index operations." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "The retained evidence documents rotated client secrets for service accounts and service account deletion in the Pinecone console, as well as API key authentication for project operations. However, full programmatic agent-driven key rotation, revocation, and recovery without console involvement are not fully established." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "Pinecone provides public API documentation detailing the exact Database API. It covers core resources like indexes and vectors, along with supported client SDKs including Python, Node.js, Java, and Go." }, "secondary_context": [ { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "context": "While the documentation index references /llms.txt, the retained evidence does not contain explicit declarations or verified access policies governing web agents, crawlers, or robots." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "Pinecone's Master Subscription Agreement provides readable and retrieveable legal terms governing the purchase and use of Pinecone's Services." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "Pinecone's Master Subscription Agreement specifies that individual users must be legally permitted and competent to enter into the agreement, and users on behalf of an entity represent that they have full legal right, power, and authority to bind the customer." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "Pinecone's pricing page outlines explicit plan rates and conditions, including a free Starter tier, $20/month flat for Builder, $50/month minimum for Standard (with pay-as-you-go after exceeding), and $500/month minimum for Enterprise." }, { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "context": "Pinecone explicitly offers a verified machine-readable discovery artifact, directing clients to fetch the complete documentation index at /llms.txt." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:27.809Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1a4ec24c5f05687d2a7dcfbe8a04c69f2db0dd57a0b1567cbb7cd20aed87e931", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "sha256:118d6ae7b9950339e6f8d70428222e2d3f1abf2a45fa99ac2c8280bfb7602e03", "sha256:35abe8ad66cb54481f5edf6c2bed324615ec07b1151a9f990e5955d6d5ffb0f2", "sha256:f909667b75d655a26f9fe7c46a4bd05bd73d2199f655ee74b028a3851cbc96e8" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3012, "end_byte": 3819, "value_digest": "sha256:8e6c627870c30c0249a9a4795f1d3c74e056a9f393ba897b8001ee0260e9ca86" }, { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3820, "end_byte": 4636, "value_digest": "sha256:f8a19ed8213630b7677c67a97defd882c341a316713094d8c7d2d4978e09c013" } ] } ], "note": "Pinecone's Master Subscription Agreement specifies that individual users must be legally permitted and competent to enter into the agreement, and users on behalf of an entity represent that they have full legal right, power, and authority to bind the customer." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:24.186Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2aa050ceadcb69165ca0a83c11c3385059b43b4567abf9bfbc2da67d43c194ba", "capture_rung": "http" } ], "artifact_digests": [ "sha256:003e6b8778f832938ae207229f6bf6b1899a17e296018c831d78d17829b0cd71", "sha256:1dbbe455f5f03d0a16eadcc9855716d313c0c443b27df076639af4c82b4664f1", "sha256:5934045d97861028568471ca7fda2099360de17d0d2cf92fb68de941db94e7ca", "sha256:e171d1b955d3700de7d4a517a75f4bb717f279ab0e9a7d69efb95250ad1124bd" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:1dbbe455f5f03d0a16eadcc9855716d313c0c443b27df076639af4c82b4664f1", "start_byte": 4967, "end_byte": 5766, "value_digest": "sha256:06ce6eb6d8dd3f11c4f2c08486b1ecd24f322f7fe8f2e93171207f7c2e4115f6" }, { "artifact_digest": "sha256:1dbbe455f5f03d0a16eadcc9855716d313c0c443b27df076639af4c82b4664f1", "start_byte": 5767, "end_byte": 6555, "value_digest": "sha256:14e44ccac0ba5e7fbaf1d0e488a44a91fd62be4d48ef342916b6362aa7281645" } ] } ], "note": "Pinecone's pricing page outlines explicit plan rates and conditions, including a free Starter tier, $20/month flat for Builder, $50/month minimum for Standard (with pay-as-you-go after exceeding), and $500/month minimum for Enterprise." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:05.902Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:59d266abd4de0a9d87c436d0f525d2a620151e197c5429a74ec540ce8157aaad", "capture_rung": "http" } ], "artifact_digests": [ "sha256:31b00f71208693f6030d81af7b014569b1020250c5d3849c5d0e21daaae21760", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5202359294bdf6e2b669779a5d0c25fbc2e82b85d879d114659fedb14003b485", "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468", "start_byte": 5298, "end_byte": 6079, "value_digest": "sha256:97d09d0962816e502534697622f149b68eaf871fb15ea1ccf6e07dba429a0e14" }, { "artifact_digest": "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468", "start_byte": 6080, "end_byte": 6888, "value_digest": "sha256:0b14599a462442c61ff4efd438931b337664efb6e3158ff4f889b235249ff77f" } ] } ], "note": "Pinecone provides public API documentation detailing the exact Database API. It covers core resources like indexes and vectors, along with supported client SDKs including Python, Node.js, Java, and Go." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:05.902Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:59d266abd4de0a9d87c436d0f525d2a620151e197c5429a74ec540ce8157aaad", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5202359294bdf6e2b669779a5d0c25fbc2e82b85d879d114659fedb14003b485", "sha256:6c5e67a54cdb6363488e2dca49232beeb749f07a307d5e1a676cb2fcb476be79", "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468", "start_byte": 5298, "end_byte": 6079, "value_digest": "sha256:97d09d0962816e502534697622f149b68eaf871fb15ea1ccf6e07dba429a0e14" } ] } ], "note": "Pinecone explicitly offers a verified machine-readable discovery artifact, directing clients to fetch the complete documentation index at /llms.txt." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:27.809Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1a4ec24c5f05687d2a7dcfbe8a04c69f2db0dd57a0b1567cbb7cd20aed87e931", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "sha256:35abe8ad66cb54481f5edf6c2bed324615ec07b1151a9f990e5955d6d5ffb0f2", "sha256:eca5bb3ced299054b4f8f6ac5b723040d342ac30dd2ba46804d67416364adb52", "sha256:f909667b75d655a26f9fe7c46a4bd05bd73d2199f655ee74b028a3851cbc96e8" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 3012, "end_byte": 3819, "value_digest": "sha256:8e6c627870c30c0249a9a4795f1d3c74e056a9f393ba897b8001ee0260e9ca86" }, { "artifact_digest": "sha256:0bb82162e5ce2abb5b82d26e780d5bace5f22de8cbff724c864f5338320c7887", "start_byte": 4637, "end_byte": 5444, "value_digest": "sha256:8728cea531f9fa90a93d5e459d0d70471737e5bb70b8e116dd1d46d18612b4ac" } ] } ], "note": "Pinecone's Master Subscription Agreement provides readable and retrieveable legal terms governing the purchase and use of Pinecone's Services." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:05.902Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "While the documentation index references /llms.txt, the retained evidence does not contain explicit declarations or verified access policies governing web agents, crawlers, or robots." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Pinecone documentation states that service accounts enable programmatic access to the Admin API and use client secrets to retrieve access tokens. However, creating a service account and retrieving its initial client secret requires manual actions in the Pinecone console." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured Pinecone Console landing page contains only an application shell titled 'Pinecone Console'. Current evidence does not provide readable interactive form fields, controls, or validation steps to establish access control operability." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence across the console and documentation surfaces does not contain an explicit declaration or observation regarding CAPTCHA boundaries or verified-agent alternatives." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained console and documentation pages make no mention of phone verification requirements, delegation, or resumable verification handoffs." }, { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "Pinecone documentation provides visible canonical entry points to 'Log in' and 'Sign up free' to begin obtaining service access." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:12.557Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured Pinecone Console landing page contains only an application shell titled 'Pinecone Console'. Current evidence does not provide readable interactive form fields, controls, or validation steps to establish access control operability." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.943Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:e3cb77c13e282655e86e90f9e17eccac20b8d4262088dd1df0b8113b9fd925fe", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:01c61359ba266a85676c3c9aa4b051f10c89ba91c0468160dbb562d390ee4b9e", "sha256:2592ce45353b688dbade983b519996dae5a689a3293352f9d7be398ca9b9e244", "sha256:48e16c1998d1929665ab3917c6d4e60f70e94a065e055c1a36d54b0a034dcf7e", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:99374234bc5d0b9687e52f2268e08212eedd1fa91b07dc3d84ef9ee52254fefb", "sha256:ad6f0490be9727ec1aefb45e19d73888c6e04afffcbe866ffda856e4c8d716c5" ], "locators": [ { "artifact_digest": "sha256:01c61359ba266a85676c3c9aa4b051f10c89ba91c0468160dbb562d390ee4b9e", "start_byte": 8158, "end_byte": 8952, "value_digest": "sha256:431de4717650333ea74459ec37cf8684f7cb56b6218d3c81b54da0b011c2375e" } ] } ], "note": "Pinecone documentation provides visible canonical entry points to 'Log in' and 'Sign up free' to begin obtaining service access." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:12.557Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence across the console and documentation surfaces does not contain an explicit declaration or observation regarding CAPTCHA boundaries or verified-agent alternatives." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:21.413Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4a4309e57137d42ce9d51714057c77ac54aadbcd69f3228d1d0c9df10f8b4a86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "sha256:80f32710c8b32c92e9b4ac1eabdeaf4cd1a5de959e4febbac4a7873201dd6a88", "sha256:e8f60b3b88cbe3ff099cbe081cdb3da425224674bf6d5240ee7a08e0d190bcd3" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 10432, "end_byte": 11218, "value_digest": "sha256:c19c0b6801850eac499603ad19bc0b829d8a6be750737cf1ecb569e9369ab332" }, { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 11219, "end_byte": 12012, "value_digest": "sha256:8d0c7a0b0b5093db53eda511ee62410904fbd16c13bb9b0ff9dbcc95179f0302" } ] } ], "note": "Pinecone documentation states that service accounts enable programmatic access to the Admin API and use client secrets to retrieve access tokens. However, creating a service account and retrieving its initial client secret requires manual actions in the Pinecone console.", "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:12.557Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "console-access" }, { "node_kind": "resource", "node_id": "readiness-e8834e7c1bfd2395c514fd62ceeb0233b6ea73c6af2544509e27277d1cdee13d" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained console and documentation pages make no mention of phone verification requirements, delegation, or resumable verification handoffs." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } ] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "Pinecone's pricing page discloses the commercial commitments for its plans, such as $20/month flat for the Builder plan and $50/month minimum usage (pay-as-you-go above that) for the Standard plan." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained documentation describes switching payment methods between credit cards and marketplaces, but does not provide evidence for an API or accessible web flow supporting deterministic checkout, bounded authorization handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The documentation notes that changing payment methods requires being an organization owner or billing admin, but does not describe a payment authorization rail with scoped delegation or human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "Pinecone documents a direct self-service upgrade path in the console under Settings > Billing > Plans, where users can select Upgrade on the Standard or Enterprise plan section and enter credit card information to complete paid access." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:06.644Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained documentation describes switching payment methods between credit cards and marketplaces, but does not provide evidence for an API or accessible web flow supporting deterministic checkout, bounded authorization handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:24.186Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2aa050ceadcb69165ca0a83c11c3385059b43b4567abf9bfbc2da67d43c194ba", "capture_rung": "http" } ], "artifact_digests": [ "sha256:003e6b8778f832938ae207229f6bf6b1899a17e296018c831d78d17829b0cd71", "sha256:1dbbe455f5f03d0a16eadcc9855716d313c0c443b27df076639af4c82b4664f1", "sha256:9b695e29f9746c8db4f99058d80273b5c5d85c26732c3b7b10bdf983b6f56ff2", "sha256:e171d1b955d3700de7d4a517a75f4bb717f279ab0e9a7d69efb95250ad1124bd" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:1dbbe455f5f03d0a16eadcc9855716d313c0c443b27df076639af4c82b4664f1", "start_byte": 5767, "end_byte": 6555, "value_digest": "sha256:14e44ccac0ba5e7fbaf1d0e488a44a91fd62be4d48ef342916b6362aa7281645" } ] } ], "note": "Pinecone's pricing page discloses the commercial commitments for its plans, such as $20/month flat for the Builder plan and $50/month minimum usage (pay-as-you-go above that) for the Standard plan." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:06.644Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The documentation notes that changing payment methods requires being an organization owner or billing admin, but does not describe a payment authorization rail with scoped delegation or human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:06.644Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:dcbc20c62b42ca3b4e3b79577a7d3c311dddf21edc1f3e344b84473992ef4238", "capture_rung": "http" } ], "artifact_digests": [ "sha256:112a4bf4f5a3651d3276aa957bbb49177bfa1963fd0f7097885136466073367d", "sha256:3e5de44d1a87aa8e9be77a8a2b735fcf04e97f332e82f3c78e0e95c11fc64807", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6f7e04cc61f9be4ae3a394fd21563f651bce6a57aeeebef3633437b29c07c0ca" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:112a4bf4f5a3651d3276aa957bbb49177bfa1963fd0f7097885136466073367d", "start_byte": 24099, "end_byte": 24902, "value_digest": "sha256:e7afb71389da50e29c5fefae9304e8f01d811c1b6df57f0b38f3e170d53ad7dc" } ] } ], "note": "Pinecone documents a direct self-service upgrade path in the console under Settings > Billing > Plans, where users can select Upgrade on the Standard or Enterprise plan section and enter credit card information to complete paid access." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "API keys are generated in the Pinecone console. Service accounts created in the console provide client secrets that are displayed once at creation and used to retrieve access tokens." }, "secondary_context": [ { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "The Create Index API response returns an IndexModel containing host and status fields (such as ready: true and state: Ready), exposing progress and ready states, but the retained evidence leaves reconciliation after asynchronous failure unresolved." }, { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Index provisioning is machine-triggerable via POST requests to /indexes using an API key header." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:21.413Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4a4309e57137d42ce9d51714057c77ac54aadbcd69f3228d1d0c9df10f8b4a86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "sha256:80f32710c8b32c92e9b4ac1eabdeaf4cd1a5de959e4febbac4a7873201dd6a88", "sha256:dcb2e0a402f75a9849a7b77a9a31ea97a302c5ed780159e9541471cfe43f362f" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 10432, "end_byte": 11218, "value_digest": "sha256:c19c0b6801850eac499603ad19bc0b829d8a6be750737cf1ecb569e9369ab332" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d28714759d51c18cc039400ccac9a359700cf127984488b23fcdba8890367864", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1a0183888d1385f1d5040255d3322afac92ba66fb08bf878e00c7807b82ec4a4", "sha256:3ae20d39fae060786b9a1589f544ef53df74ff5239d4990d56d5de8d44e71266", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221", "start_byte": 5745, "end_byte": 6546, "value_digest": "sha256:1d84e2c14393458b1e8c10298ecbcf88808b8ca75b2717b69cd91b1b8eb531ad" } ] } ], "note": "API keys are generated in the Pinecone console. Service accounts created in the console provide client secrets that are displayed once at creation and used to retrieve access tokens.", "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:22.602Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "create-index" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:6444300a848781cc398c2c672c73660d8529b53e5067cb01e9183d0ce7e360ee", "capture_rung": "http" } ], "artifact_digests": [ "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:bc8d6cdf53e670fb91a46dd34a77c3f0958f1d0619bb15cbbfff862c77a74ec2", "sha256:e259f3af04bf015e7d23c7ef75464f2f0f32a3967809e028f339c25808268baf" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "start_byte": 11087, "end_byte": 11682, "value_digest": "sha256:881289a3956e5219232b5461f8e9748eef535110f1b6bced778878afd02343d5" }, { "artifact_digest": "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "start_byte": 23658, "end_byte": 24468, "value_digest": "sha256:5bef1e484afb2b086bf44855f9dc714122c1f69b8d02faf126e1d42820374cbf" } ] } ], "note": "The Create Index API response returns an IndexModel containing host and status fields (such as ready: true and state: Ready), exposing progress and ready states, but the retained evidence leaves reconciliation after asynchronous failure unresolved.", "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:22.602Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "create-index" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d28714759d51c18cc039400ccac9a359700cf127984488b23fcdba8890367864", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3ae20d39fae060786b9a1589f544ef53df74ff5239d4990d56d5de8d44e71266", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5c3668bc82950682e60949781264f4d80a5f4f65c72e1ee7c7c3e5b3c3828743", "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221", "start_byte": 8680, "end_byte": 9469, "value_digest": "sha256:526629b7030b7882039ed52ecbe384a5fda6e7e375a92a496d3eb9cb3f2e215f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:6444300a848781cc398c2c672c73660d8529b53e5067cb01e9183d0ce7e360ee", "capture_rung": "http" } ], "artifact_digests": [ "sha256:083d94884cc6eb5d068531a735ff67686166998792db5b4a4878820c136c53ca", "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:bc8d6cdf53e670fb91a46dd34a77c3f0958f1d0619bb15cbbfff862c77a74ec2" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "start_byte": 9610, "end_byte": 10406, "value_digest": "sha256:df6a8a3329a56d6b942b7870504739d77e4eafcb2e14c3710544dbcc881dab92" } ] } ], "note": "Index provisioning is machine-triggerable via POST requests to /indexes using an API key header." } ], "blockers": [], "remediations": [ { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." }, { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Pinecone documents HTTP error semantics and exponential-backoff retry guidance for 429 and 5xx; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for index operations." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Pinecone documentation describes REST APIs and SDKs for Database and Inference. The retained excerpts do not establish a verified agent-native protocol interface such as MCP or A2A." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "The retained evidence documents rotated client secrets for service accounts and service account deletion in the Pinecone console, as well as API key authentication for project operations. However, full programmatic agent-driven key rotation, revocation, and recovery without console involvement are not fully established." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Pinecone provides machine-operable interfaces including curl REST endpoints, a CLI, and SDKs in Python, JavaScript, Java, and Go across database targets." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "All requests to Pinecone APIs require an Api-Key HTTP header for the target project or OAuth access tokens (Bearer tokens) retrieved via client credentials for Admin API operations." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "Pinecone provides decidable request schemas, method endpoints, and structured responses across control plane operations like creating indexes and defines status codes and system limits." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:05.902Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "index-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Pinecone documentation describes REST APIs and SDKs for Database and Inference. The retained excerpts do not establish a verified agent-native protocol interface such as MCP or A2A." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:21.413Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4a4309e57137d42ce9d51714057c77ac54aadbcd69f3228d1d0c9df10f8b4a86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "sha256:80f32710c8b32c92e9b4ac1eabdeaf4cd1a5de959e4febbac4a7873201dd6a88", "sha256:87940a8ae76610ecfafc658e40e573204b66579dfa9f59dd855e344fc7e408e5" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 12013, "end_byte": 12829, "value_digest": "sha256:d629115ae266aa8498b5d0e22443b61a30ed2db83c0c9bdd2a011bf84fa20d87" }, { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 12830, "end_byte": 13618, "value_digest": "sha256:f2d25d25176f89ac33a9bebf645bdb8f2779aefbcdfa00ef1867ecbcb74f8dd7" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d28714759d51c18cc039400ccac9a359700cf127984488b23fcdba8890367864", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1a0183888d1385f1d5040255d3322afac92ba66fb08bf878e00c7807b82ec4a4", "sha256:3ae20d39fae060786b9a1589f544ef53df74ff5239d4990d56d5de8d44e71266", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221", "start_byte": 5745, "end_byte": 6546, "value_digest": "sha256:1d84e2c14393458b1e8c10298ecbcf88808b8ca75b2717b69cd91b1b8eb531ad" } ] } ], "note": "The retained evidence documents rotated client secrets for service accounts and service account deletion in the Pinecone console, as well as API key authentication for project operations. However, full programmatic agent-driven key rotation, revocation, and recovery without console involvement are not fully established.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:00.757Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0bc01f9a81badd1f97fa410f1bfe6132f74fda1160cc46dd67cc92bd541a6d95", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5a8b67747821a8f2ae6fba82e43ecda21d46e05e69291fcd9adc9c241955fe8b", "sha256:90188a61029aba3350b74fb67dd9b27749dac98a93dfb47a6ec2042f1be48f02" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "start_byte": 7008, "end_byte": 7827, "value_digest": "sha256:dec1af4d9c085fa925371eaa86383a0d5b0e14975b102e83867075bf9c779016" }, { "artifact_digest": "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "start_byte": 7828, "end_byte": 8637, "value_digest": "sha256:a2c24490ee6ed675c32327a0808ee0e52122168f6f6aeda76ef94ddbf4864982" } ] } ], "note": "Pinecone documents HTTP error semantics and exponential-backoff retry guidance for 429 and 5xx; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for index operations.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:21.413Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:4a4309e57137d42ce9d51714057c77ac54aadbcd69f3228d1d0c9df10f8b4a86", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:59840126274e370fa24a15adadc39e0f1d5e85b48eb4eda6ba4d8071ab900dac", "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "sha256:80f32710c8b32c92e9b4ac1eabdeaf4cd1a5de959e4febbac4a7873201dd6a88" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-d071de696fe778be745100ce82afc8f60c9a2e0e1ebe9847436a528e9a96957b" }, "locators": [ { "artifact_digest": "sha256:73b6c24fa7cf889f9db87976c6e9b3114ad55e198cbebecb7ee6eb00be982fb0", "start_byte": 11219, "end_byte": 12012, "value_digest": "sha256:8d0c7a0b0b5093db53eda511ee62410904fbd16c13bb9b0ff9dbcc95179f0302" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d28714759d51c18cc039400ccac9a359700cf127984488b23fcdba8890367864", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3ae20d39fae060786b9a1589f544ef53df74ff5239d4990d56d5de8d44e71266", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:fe1acc59e1b3826c27462292f8dd39685d5509b890a70dafe9696e54e4088f3d", "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221", "start_byte": 5745, "end_byte": 6546, "value_digest": "sha256:1d84e2c14393458b1e8c10298ecbcf88808b8ca75b2717b69cd91b1b8eb531ad" }, { "artifact_digest": "sha256:ff3b4e954262281aa655f45bf593ac05ef396f1d422c9c5d4811eee5297f4221", "start_byte": 8680, "end_byte": 9469, "value_digest": "sha256:526629b7030b7882039ed52ecbe384a5fda6e7e375a92a496d3eb9cb3f2e215f" } ] } ], "note": "All requests to Pinecone APIs require an Api-Key HTTP header for the target project or OAuth access tokens (Bearer tokens) retrieved via client credentials for Admin API operations." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:00.757Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "index-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:6444300a848781cc398c2c672c73660d8529b53e5067cb01e9183d0ce7e360ee", "capture_rung": "http" } ], "artifact_digests": [ "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:61cd311b4b7931181f6481b67e2b9a9694a92ad6c165a997bbc1c62026eb6808", "sha256:bc8d6cdf53e670fb91a46dd34a77c3f0958f1d0619bb15cbbfff862c77a74ec2" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "start_byte": 9130, "end_byte": 9609, "value_digest": "sha256:84d8df643fd11c9e4433d93cda86108a598c40e83bd6963187b4d4b785dd36f5" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0bc01f9a81badd1f97fa410f1bfe6132f74fda1160cc46dd67cc92bd541a6d95", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6288c10d62feb8770d5b5c19d9e2ff861d0a5b1dbc6a48160e980dc34bcefca5", "sha256:90188a61029aba3350b74fb67dd9b27749dac98a93dfb47a6ec2042f1be48f02" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "start_byte": 7008, "end_byte": 7827, "value_digest": "sha256:dec1af4d9c085fa925371eaa86383a0d5b0e14975b102e83867075bf9c779016" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:59d266abd4de0a9d87c436d0f525d2a620151e197c5429a74ec540ce8157aaad", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1c0f942068de54d32be41b9d7fce5d7791d0f21e70b97a5dad2d515576e4f147", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5202359294bdf6e2b669779a5d0c25fbc2e82b85d879d114659fedb14003b485", "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468", "start_byte": 6080, "end_byte": 6888, "value_digest": "sha256:0b14599a462442c61ff4efd438931b337664efb6e3158ff4f889b235249ff77f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:96c1567868724360a6542ebd895d2e85ecc30aac4fcee8acfdd0dac20ca06e6a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:44da4caae929bd868b0961ad14a30454089229a4a7dbeee0f9d22b7a2fd10e98", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:68a23c2ac745b5b6c546e69c2a62aaa397fbaf272c377a53b35ec320c6a4db11", "sha256:7d50ad1ea237e3a73aa3ae305135a0873237fc9481eef90711c1138777b57b12" ], "source_surface": { "node_kind": "resource", "node_id": "database-limits" }, "locators": [ { "artifact_digest": "sha256:68a23c2ac745b5b6c546e69c2a62aaa397fbaf272c377a53b35ec320c6a4db11", "start_byte": 6019, "end_byte": 6816, "value_digest": "sha256:948d0a04245d0d7fabeb015d799162d4a2e5a9e59086785ab276f2e3e64f68d2" } ] } ], "note": "Pinecone provides decidable request schemas, method endpoints, and structured responses across control plane operations like creating indexes and defines status codes and system limits." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:00.757Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "index-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:0bc01f9a81badd1f97fa410f1bfe6132f74fda1160cc46dd67cc92bd541a6d95", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "sha256:436c928760f4f9f9189bf1bbd5c435fd54ce1e55756cf9cd82bfb88e15a42933", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90188a61029aba3350b74fb67dd9b27749dac98a93dfb47a6ec2042f1be48f02" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:0ccf3b6688042c2152f218493bbfac8982a6e2bfee0e862e391a6d2f1a6c4ec9", "start_byte": 6208, "end_byte": 7007, "value_digest": "sha256:1f6c9d1c27253e8406589c7b441e376433b1829ac12bd1415ce6d58832eb17f1" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:59d266abd4de0a9d87c436d0f525d2a620151e197c5429a74ec540ce8157aaad", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1c0f942068de54d32be41b9d7fce5d7791d0f21e70b97a5dad2d515576e4f147", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5202359294bdf6e2b669779a5d0c25fbc2e82b85d879d114659fedb14003b485", "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:86321ec7e053d2ba5176fe03d0b3d4ce8fee3eb4e859535b6d4c76e6a39df468", "start_byte": 6080, "end_byte": 6888, "value_digest": "sha256:0b14599a462442c61ff4efd438931b337664efb6e3158ff4f889b235249ff77f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:96c1567868724360a6542ebd895d2e85ecc30aac4fcee8acfdd0dac20ca06e6a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:44da4caae929bd868b0961ad14a30454089229a4a7dbeee0f9d22b7a2fd10e98", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:68a23c2ac745b5b6c546e69c2a62aaa397fbaf272c377a53b35ec320c6a4db11", "sha256:7d50ad1ea237e3a73aa3ae305135a0873237fc9481eef90711c1138777b57b12" ], "source_surface": { "node_kind": "resource", "node_id": "database-limits" }, "locators": [ { "artifact_digest": "sha256:68a23c2ac745b5b6c546e69c2a62aaa397fbaf272c377a53b35ec320c6a4db11", "start_byte": 6019, "end_byte": 6816, "value_digest": "sha256:948d0a04245d0d7fabeb015d799162d4a2e5a9e59086785ab276f2e3e64f68d2" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:6444300a848781cc398c2c672c73660d8529b53e5067cb01e9183d0ce7e360ee", "capture_rung": "http" } ], "artifact_digests": [ "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6fcbcdc0af4dc3c8bbcf1675267e5b28130a01238e3d62c5b8f233ad04ee5602", "sha256:bc8d6cdf53e670fb91a46dd34a77c3f0958f1d0619bb15cbbfff862c77a74ec2" ], "source_surface": { "node_kind": "resource", "node_id": "create-index" }, "locators": [ { "artifact_digest": "sha256:437d2366c4ff6f691646efa1bf0c571e9d821c4a30e2f8e47044ef44573cdebc", "start_byte": 10407, "end_byte": 11086, "value_digest": "sha256:66911df8e0efdf37bca152cb968564f2c5b1b8d6a7740ca63fe7cfdadbad0ed0" } ] } ], "note": "Pinecone provides machine-operable interfaces including curl REST endpoints, a CLI, and SDKs in Python, JavaScript, Java, and Go across database targets." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:52:12.557Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:00d0fd30ffb4aeda74718ade3fc2840bd41fc2eb0927b2ff30a8662f3d2e437e", "sha256:023b9b7c9509a74abcfec5c14e3c8cf6428a448f26a8df899964aa86b3069e32", "sha256:0af402bed8977b6c03f4ccb08636d3b92d132f81d36501a7fe13e26e9a19b3c5", "sha256:0d0b5644f60c7fdea8182e9bdd1ca19396b1764313221bdbe3cbee41847c2b01", "sha256:0d4987837156599442c2c98ffc7f95574ff79bcfde37fe8cd975a95053ddc02e", "sha256:209785a17c37d5bdbca3c3f0c40c3afdb05f3bf5b5050d35ca22f33fcf0c1cef", "sha256:20d06839f8de2b7a6586150af8aa0e0c1b77f3ac1e6a760dcd24d208bb04d3c3", "sha256:23a53770c10be35bc07527cfa41e151e75b8931a41656773a5bff163c895dac1", "sha256:25b9c23c7a396f9279ec5485f22a73636625fd252e0f9de2b71e940ce19b1744", "sha256:302b866ff0fd7b77b1f19d58247e3600f344fd366437547c12249d2ca000ac2a", "sha256:382408ac9995a92b5ec393a368aefa232c3e895c5c61f157dcc77a2dbb1e1ac9", "sha256:4042f63e32b6b86a8a7676d4135370813830b8bfe455d1166c63122e30297e5c", "sha256:41be198c3e74e4ebf7e77b4301c9171e527cc916f5c226aaebf5f5a66e3b941f", "sha256:41d9b452cf3086c447d9a65407e9c205550acc1b8e920691cad2b15cff78968e", "sha256:46ddb7e6e307621956cde09e02bf5c4cbe046cec32e9628a618de8e29f33d532", "sha256:538baec98d70bece5e5398e1430259ed5ce09e5940265d236fdb7a963f38d7a2", "sha256:53e839045974cc7396aa58ff03a3ac506949473cb0669e0859b7161883df51da", "sha256:5ffd8ddf65c931cf72cdaa65b770f2eea1e968f2dc9886e164a2088609641c45", "sha256:623350d36e49ec0e2c7940c29a4f27ef072c99033a38bef2f2cf9600a57b54bf", "sha256:73e152d5b9c7301daa2ee74ff5f3f63a9322fb24ff56471e1c3d791e22496998", "sha256:7c3a50a6aac517a47dd758b78b91022d1ce8caf0dc8bd224f6319d89229f68d7", "sha256:84467f1ad81b8f02f9f4929382867dae7cbf5acef60c6fae192646d4cb1a1a30", "sha256:84f87ed26f3162c18d1002f38323392a8488580cba219b64570f7a3a4986ad00", "sha256:8fdbcd0bc8e4601480338a17ec8a09e660d1d959827ed003356446ace25057da", "sha256:9ae6b37ea5c2c127f2ab13deb78662ab4e51f2a74da6ba3cc7e793dd43677fc0", "sha256:a2b5f353468e521eb8ccf8724fa048c25eeb9d918d9d201e3f276f1d36ac84d5", "sha256:a5bdc09fe79f1b5957a675b516f86f537c507cf84e413adfc03e698cc179f079", "sha256:aea8c380a4e1dbb7befba82fc19c79335c5571dc882234a0675649c7be384a20", "sha256:b2c87183c07d4b5acce341a139012ca92a38a04eae1d2778243b9b898ad1797d", "sha256:b3414409eace92bd544fbc3c9a1bb6748f687e79288e71ede08f94bca6cb17d4", "sha256:b79b86f217c067b8bfa1df52ff8fb18147400ab4566fc5d53f24586db9683436", "sha256:c16dc4debdf2d2f33aba9f179708222ad19270147004d49fbd2723c25d08d23e", "sha256:c5322c0ed71a3564ade033a62e83efa92e84a249fa12675bb351b902ce25a5b1", "sha256:cedaf735b9114a5addb4e3d89332537598d7d4c0f63d8be6a8ce8bdcd8468b7f", "sha256:d7e0aac121da05be150d90b2e584cba89dd21dd8301a6a01f769890d6835ba63", "sha256:e33a2969ae11ccdc63be7063ed0231c752f28543772e373999462ae438f74a6e", "sha256:f25d9159ce06a3302f257989755670af2712f2177a0a67496cbaa9c09e373648" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:0d0b5644f60c7fdea8182e9bdd1ca19396b1764313221bdbe3cbee41847c2b01" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:27.809Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:7c3a50a6aac517a47dd758b78b91022d1ce8caf0dc8bd224f6319d89229f68d7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:24.186Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:84467f1ad81b8f02f9f4929382867dae7cbf5acef60c6fae192646d4cb1a1a30" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:05.902Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:cedaf735b9114a5addb4e3d89332537598d7d4c0f63d8be6a8ce8bdcd8468b7f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:05.902Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:023b9b7c9509a74abcfec5c14e3c8cf6428a448f26a8df899964aa86b3069e32" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:27.809Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:b2c87183c07d4b5acce341a139012ca92a38a04eae1d2778243b9b898ad1797d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:05.902Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:5ffd8ddf65c931cf72cdaa65b770f2eea1e968f2dc9886e164a2088609641c45" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:12.557Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:0d4987837156599442c2c98ffc7f95574ff79bcfde37fe8cd975a95053ddc02e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.943Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:0af402bed8977b6c03f4ccb08636d3b92d132f81d36501a7fe13e26e9a19b3c5", "sha256:4042f63e32b6b86a8a7676d4135370813830b8bfe455d1166c63122e30297e5c", "sha256:41be198c3e74e4ebf7e77b4301c9171e527cc916f5c226aaebf5f5a66e3b941f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:12.557Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:73e152d5b9c7301daa2ee74ff5f3f63a9322fb24ff56471e1c3d791e22496998" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:21.413Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:302b866ff0fd7b77b1f19d58247e3600f344fd366437547c12249d2ca000ac2a", "sha256:9ae6b37ea5c2c127f2ab13deb78662ab4e51f2a74da6ba3cc7e793dd43677fc0" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:12.557Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:aea8c380a4e1dbb7befba82fc19c79335c5571dc882234a0675649c7be384a20" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:06.644Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:b3414409eace92bd544fbc3c9a1bb6748f687e79288e71ede08f94bca6cb17d4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:24.186Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:d7e0aac121da05be150d90b2e584cba89dd21dd8301a6a01f769890d6835ba63" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:06.644Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:8fdbcd0bc8e4601480338a17ec8a09e660d1d959827ed003356446ace25057da" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:06.644Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:209785a17c37d5bdbca3c3f0c40c3afdb05f3bf5b5050d35ca22f33fcf0c1cef", "sha256:84f87ed26f3162c18d1002f38323392a8488580cba219b64570f7a3a4986ad00" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:21.413Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:41d9b452cf3086c447d9a65407e9c205550acc1b8e920691cad2b15cff78968e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:22.602Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:23a53770c10be35bc07527cfa41e151e75b8931a41656773a5bff163c895dac1", "sha256:e33a2969ae11ccdc63be7063ed0231c752f28543772e373999462ae438f74a6e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:22.602Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:46ddb7e6e307621956cde09e02bf5c4cbe046cec32e9628a618de8e29f33d532" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:05.902Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:20d06839f8de2b7a6586150af8aa0e0c1b77f3ac1e6a760dcd24d208bb04d3c3", "sha256:53e839045974cc7396aa58ff03a3ac506949473cb0669e0859b7161883df51da" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:21.413Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:c16dc4debdf2d2f33aba9f179708222ad19270147004d49fbd2723c25d08d23e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:00.757Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:00d0fd30ffb4aeda74718ade3fc2840bd41fc2eb0927b2ff30a8662f3d2e437e", "sha256:b79b86f217c067b8bfa1df52ff8fb18147400ab4566fc5d53f24586db9683436" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:21.413Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:25b9c23c7a396f9279ec5485f22a73636625fd252e0f9de2b71e940ce19b1744", "sha256:a2b5f353468e521eb8ccf8724fa048c25eeb9d918d9d201e3f276f1d36ac84d5", "sha256:a5bdc09fe79f1b5957a675b516f86f537c507cf84e413adfc03e698cc179f079", "sha256:c5322c0ed71a3564ade033a62e83efa92e84a249fa12675bb351b902ce25a5b1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:00.757Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:382408ac9995a92b5ec393a368aefa232c3e895c5c61f157dcc77a2dbb1e1ac9", "sha256:538baec98d70bece5e5398e1430259ed5ce09e5940265d236fdb7a963f38d7a2", "sha256:623350d36e49ec0e2c7940c29a4f27ef072c99033a38bef2f2cf9600a57b54bf", "sha256:f25d9159ce06a3302f257989755670af2712f2177a0a67496cbaa9c09e373648" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:00.757Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/pinecone/agent-readiness/pinecone-database-api/index-lifecycle", "projection_digest": "sha256:401c511096dea81f1a41b4602f4ea4b66f7d7ef28267e04e60eb14680eddc498" } } }