{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:5f55a0147eca9a82d821b7cfb73339dd8059c146b9acbb6ed66c9e3d40a8e1b0", "snapshot_id": "sha256:fbf4583b80f8936d9b7b75906adc86f38f5612cd0a7329839daea7b71ad2b9ce", "artifact_sha256": "sha256:ec393385ec4e7be15a393d925f0df78d54a12787f2995a84fad1b570583dac06", "data": { "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n", "entity_slug": "resend", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xg7f2qx5a9t4kn8yc1", "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n", "scope": { "product": { "key": "resend-email-api", "name": "Resend Email API" }, "funnel": { "key": "email-operations", "name": "Email operations" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:fa431d85735d9d0d9bb6217327736315684c127693bbdcb7cccded272abd8e3f" }, "declaration_revision_digest": "sha256:6cb7a7727c7a72439ef0309a5451fac024196dfa1243c9ed485f3d473154a8cd", "declaration": { "declaration_id": "declaration_resend_email_api_operations", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/re/resend.yaml", "git_blob_oid": "b73bb52d14ded6ea52f74765cae8c32cc1ba7b46", "blob_digest": "sha256:880195b74abb9136a0685dd2e1362eb768c21f659142ca092002a9adcde21fc9" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Send email through the API", "interface_ids": [ "email-api" ] } ], "participants": [ { "participant_id": "resend", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe5xfhy18q4ccs4a07n" } } ], "resources": [ { "resource_id": "account-signup", "uri": "https://resend.com/signup", "roles": [ "access" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-errors", "uri": "https://resend.com/docs/api-reference/errors", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-keys", "uri": "https://resend.com/docs/dashboard/api-keys/introduction", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://resend.com/docs/api-reference/introduction", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://resend.com/docs/dashboard/settings/billing", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "domain-provisioning", "uri": "https://resend.com/docs/api-reference/domains/create-domain", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://resend.com/pricing", "roles": [ "checkout", "documentation", "pricing" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351", "uri": "https://resend.com/docs/api-reference/api-keys/create-api-key", "roles": [ "authentication", "documentation" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "send-email", "uri": "https://resend.com/docs/api-reference/emails/send-email", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://resend.com/legal/terms-of-service", "roles": [ "terms" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://resend.com/docs/knowledge-base/introduction", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "registration", "uri": "https://resend.com/signup", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "endpoint_id": "resend-api", "uri": "https://api.resend.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "api-keys" ], "operated_by_participant_id": "resend", "standard_bindings": [] }, { "interface_id": "email-api", "modality": "network_api", "functions": [ "events", "service_operation" ], "endpoint_ids": [ "resend-api" ], "resource_ids": [ "api-errors", "send-email" ], "operated_by_participant_id": "resend", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "relation-describes-6c4d56035c5e22a92de30089f00893064e796c95327ba614484ea47b04c629c9", "kind": "describes", "from": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } }, { "relation_id": "sending-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "send-email" }, "to": { "node_kind": "interface", "node_id": "email-api" } }, { "relation_id": "signup-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-signup" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:5f0b1a9cbf4228c44673a4ae0f72287b15162553a1745f5f246f06effe5ccca5", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "sign_up", "stage_label": "Sign up", "public_state": "limited", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides machine credentials in the form of API keys with specific permissions (e.g. full access vs sending access) that can be created, updated, and deleted via API or Dashboard, but keys cannot be viewed after creation and manual handling or copying may be involved." } }, "limitations": [ { "stage": "sign_up", "stage_label": "Sign up", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides machine credentials in the form of API keys with specific permissions (e.g. full access vs sending access) that can be created, updated, and deleted via API or Dashboard, but keys cannot be viewed after creation and manual handling or copying may be involved." }, "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "stage": "pay", "stage_label": "Pay", "finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "Resend provides a documented self-service path to upgrade, downgrade, or modify plans (such as Pro and Scale) via the Billing settings page without vendor review, but Enterprise plans require contacting sales." }, "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Resend documents programmatically creating, listing, updating names, and deleting API keys via API/CLI, as well as scoping permissions (full_access vs sending_access) and domain restrictions. However, automated credential rotation or secret compromise recovery procedures remain manual or unaddressed." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "Resend documents its RESTful API introduction and base URL as https://api.resend.com, requiring HTTPS and Bearer token authentication with an API Key." }, "secondary_context": [ { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "Resend makes its complete Terms of Service agreement publicly retrievable and readable at https://resend.com/legal/terms-of-service." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "Resend's Terms of Service state that the service is intended for individuals at least 18 years old with the full authority, right, and capacity to enter into the agreement." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "Resend provides explicit pricing details, including a Free tier ($0/mo for 3,000 emails/mo), Pro ($20/mo for 50,000 emails/mo plus $0.90 per 1,000 extra emails), Scale ($90/mo for 100,000 emails/mo plus $0.90 per 1,000 extra emails), and explicit pay-as-you-go automation pricing ($0.0015 per run)." }, { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "context": "Resend provides a verified structured documentation index artifact at /docs/llms.txt to discover all available pages." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Web-agent access policy is explicit and verified for the assessed resources.", "context": "Resend explicitly declares web agent access policy metadata allowing indexing and following (robots: index, follow, googlebot: index, follow)." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:46.842Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8121144366feb2dde6ac753a38dd33e4378c272ce574e597c298e55e7f3e92c2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0168150a905d68619ba1555b7c3c2fe82841c04f34789c8583856ee01c2201f2", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:d9c0ab6d2aad3ccd83bb9b140dfc187445d989a0cfaa874b6249da1f08414436", "sha256:dfdf79a92d964e56548d77421bc85817ddb5d9c91f08df55571d43c3142159f7" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:dfdf79a92d964e56548d77421bc85817ddb5d9c91f08df55571d43c3142159f7", "start_byte": 12480, "end_byte": 13280, "value_digest": "sha256:0e6df3651295f9a93b09aedba50d27ed9f42c3f605ac41c0055a4075803dd6aa" } ] } ], "note": "Resend's Terms of Service state that the service is intended for individuals at least 18 years old with the full authority, right, and capacity to enter into the agreement." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:35.643Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fd6dedb311db9a161aa1aa6c7148a0812825c8145118a5ca0fc7ecf78951a4ac", "capture_rung": "http" } ], "artifact_digests": [ "sha256:14a4fcf5ce0a326b2fcf47d0ea5f42b7bc36606da9b36cd832cdc865cf8fe62d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5b12a710cdf7071404831b2446aaae94fd8f30707a4394d589c7560241b51565", "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7", "start_byte": 14430, "end_byte": 15225, "value_digest": "sha256:c65ba9b244885316e666ce8f7bdb3e17557c3537c8131814a795f44f98a24297" }, { "artifact_digest": "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7", "start_byte": 15226, "end_byte": 16009, "value_digest": "sha256:9af0e7da7c9d5815ea264ee31b7b3de4e7dc584fb9e3c58c68be6b350a27c061" } ] } ], "note": "Resend provides explicit pricing details, including a Free tier ($0/mo for 3,000 emails/mo), Pro ($20/mo for 50,000 emails/mo plus $0.90 per 1,000 extra emails), Scale ($90/mo for 100,000 emails/mo plus $0.90 per 1,000 extra emails), and explicit pay-as-you-go automation pricing ($0.0015 per run)." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:16.983Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:954c4908819786c72628034d3888672c3016b80be81bfa1803426c4088c51145", "capture_rung": "http" } ], "artifact_digests": [ "sha256:3a1e463420ca58a01d7a9a7d0e71061a6e97f3b15d11e0c7dedd0df371edebd6", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b25cbd8507d3401500e4738db2a4d757d630c98d39da686a142ea33a796d5648", "sha256:d015cebf7540c4cc73c17d9a8e123bb1275d160deef604adb46a099257981f9e" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:b25cbd8507d3401500e4738db2a4d757d630c98d39da686a142ea33a796d5648", "start_byte": 15362, "end_byte": 16161, "value_digest": "sha256:5b60e8012392bb58020c8cc1204cfe609ae70d6b3f9b0855aae3cd2276d4f1cc" } ] } ], "note": "Resend documents its RESTful API introduction and base URL as https://api.resend.com, requiring HTTPS and Bearer token authentication with an API Key." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4e6673e2fd3a3a64474086d5c952fd76ebe90fe1302f5847487a59b1de709bce", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 9378, "end_byte": 10151, "value_digest": "sha256:34226db8b3adceab88f57e03aa4c5ebc933acd3930341bd4a6817ebafef4d092" } ] } ], "note": "Resend provides a verified structured documentation index artifact at /docs/llms.txt to discover all available pages." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:46.842Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8121144366feb2dde6ac753a38dd33e4378c272ce574e597c298e55e7f3e92c2", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0168150a905d68619ba1555b7c3c2fe82841c04f34789c8583856ee01c2201f2", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:982112fb033790db19ac01519b0cde5d827672ac88f1f55402d971cd67827154", "sha256:dfdf79a92d964e56548d77421bc85817ddb5d9c91f08df55571d43c3142159f7" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:dfdf79a92d964e56548d77421bc85817ddb5d9c91f08df55571d43c3142159f7", "start_byte": 2916, "end_byte": 3714, "value_digest": "sha256:c0ae1aaecde73642459e3f1456d441fc44b30695a64cfe7eb70b81dd8db946a6" } ] } ], "note": "Resend makes its complete Terms of Service agreement publicly retrievable and readable at https://resend.com/legal/terms-of-service." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Web-agent access policy is explicit and verified for the assessed resources.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "sha256:f456fd563d10aff2d3a4ae1f8f0340abb52ca522717be04c52251bfce54ce104" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 0, "end_byte": 792, "value_digest": "sha256:acb1ab24e64181edc19a4e635cdf1758b3a9d47585fdb3733529702cfba863d2" } ] } ], "note": "Resend explicitly declares web agent access policy metadata allowing indexing and following (robots: index, follow, googlebot: index, follow)." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Resend provides machine credentials in the form of API keys with specific permissions (e.g. full access vs sending access) that can be created, updated, and deleted via API or Dashboard, but keys cannot be viewed after creation and manual handling or copying may be involved." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The Resend sign-up form exposes email and password fields with validation hints and OAuth options; whether the required controls, validation, navigation and handoffs are machine-operable was not established by the single captured page." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The Resend sign-up form renders email, password and Google or GitHub options; the captured first page does not establish whether a CAPTCHA appears on submission or a supported agent alternative exists." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured Resend sign-up form shows no phone field; the quotes do not establish whether phone verification appears later in the flow or how such a step would resume." }, { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "A stable canonical route to begin obtaining service access exists at https://resend.com/signup, featuring a 'Create a Resend account' form." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.886Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The Resend sign-up form exposes email and password fields with validation hints and OAuth options; whether the required controls, validation, navigation and handoffs are machine-operable was not established by the single captured page." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.886Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:b073d4769215a072e3627c257775e2ad494b61679bd8fe5592b125b88d7b7678", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:235ce0aa82abc451284e6de5043d74c79114936be94cdd3333bc31fb601d2ea7", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:894499213df316d146caac686c105fb4547c6fbcdcbbc9e0b9ed3970c93110b9", "sha256:b5a70b279feda1152218c7cd0b6f8e1c2d190d0133dfa157c276378a3bbcc6f6", "sha256:d44f59877afaf8a4a1ebff13bbdd2a70f7a810ec77b6f66244a3e2e4f3d04547", "sha256:ffd98c3bb9a34a300267defdf8c13a0bbb4343958be7dc02672ad1c16602f482" ], "locators": [ { "artifact_digest": "sha256:894499213df316d146caac686c105fb4547c6fbcdcbbc9e0b9ed3970c93110b9", "start_byte": 716, "end_byte": 1051, "value_digest": "sha256:d76bff3b37cb950802d1eca12f0c1c495aefd4c181ea0e552baa9583bc2c7611" } ] } ], "note": "A stable canonical route to begin obtaining service access exists at https://resend.com/signup, featuring a 'Create a Resend account' form." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.886Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The Resend sign-up form renders email, password and Google or GitHub options; the captured first page does not establish whether a CAPTCHA appears on submission or a supported agent alternative exists." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:385ff558b8eab37f1721f2f5a0887461d4461d30e6808d2f356c4c7be9d7631a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:02b36ec5d19e8531029d9df58058985d1219eeb2d7c150407fbd512e7b1e54d4", "sha256:48c611d0e47dbd180c8984056fb6ef3ef20af3b1f95a5313253a311f9d5719d4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "start_byte": 14359, "end_byte": 15121, "value_digest": "sha256:6c06b3b5960aa5d0b7a5bbbb146d5044767409cb5f1b673567d32e7dd8814820" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "sha256:f294189f8590f173e456c54715d07a0f4ae31d939cabb7b106b92a7515613a54" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 10942, "end_byte": 11739, "value_digest": "sha256:6f27880693a9395a8537fa6dc7a5da80ed3ae8d12f52588ab18d53105622502e" } ] } ], "note": "Resend provides machine credentials in the form of API keys with specific permissions (e.g. full access vs sending access) that can be created, updated, and deleted via API or Dashboard, but keys cannot be viewed after creation and manual handling or copying may be involved.", "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:15.886Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured Resend sign-up form shows no phone field; the quotes do not establish whether phone verification appears later in the flow or how such a step would resume." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } ] }, { "stage": "pay", "stage_label": "Pay", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "Resend provides a documented self-service path to upgrade, downgrade, or modify plans (such as Pro and Scale) via the Billing settings page without vendor review, but Enterprise plans require contacting sales." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence for Resend describes managing subscriptions and adding payment methods in the billing settings, but it does not establish deterministic agent checkout construction, bounded authorization handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence describes updating payment information and credit card details in the Billing section, but it does not document scoped delegation or explicit human-confirmed payment authorization rails with receipts." }, { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "Resend explicitly discloses commercial commitments on its pricing page, including fixed plans ($0/mo Free, $20/mo Pro, $90/mo Scale in USD) and variable pay-as-you-go rates ($0.90 per 1,000 extra emails and $0.0015 per automation run)." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:20.312Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence for Resend describes managing subscriptions and adding payment methods in the billing settings, but it does not establish deterministic agent checkout construction, bounded authorization handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:35.643Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fd6dedb311db9a161aa1aa6c7148a0812825c8145118a5ca0fc7ecf78951a4ac", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5b12a710cdf7071404831b2446aaae94fd8f30707a4394d589c7560241b51565", "sha256:cbf4b402cdcca7db33ef2282f554d2ff0570cd857b850778db25c1e0ec227b76", "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7", "start_byte": 4868, "end_byte": 5666, "value_digest": "sha256:030b6d26ce4769ed9dc7ba202f003ebc6957c4ef7421150ec824d7b06e699566" } ] } ], "note": "Resend explicitly discloses commercial commitments on its pricing page, including fixed plans ($0/mo Free, $20/mo Pro, $90/mo Scale in USD) and variable pay-as-you-go rates ($0.90 per 1,000 extra emails and $0.0015 per automation run)." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:20.312Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The evidence describes updating payment information and credit card details in the Billing section, but it does not document scoped delegation or explicit human-confirmed payment authorization rails with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:35.643Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:fd6dedb311db9a161aa1aa6c7148a0812825c8145118a5ca0fc7ecf78951a4ac", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5b12a710cdf7071404831b2446aaae94fd8f30707a4394d589c7560241b51565", "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7", "sha256:edf9413ad7f695d252f8f2bf9d881332d4162a0bad85f98917407f0e0871240f" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:d36297e71473ef699515f8c6b2909f1139445a83e1ddd6ebf2b129e8c2798ee7", "start_byte": 15226, "end_byte": 16009, "value_digest": "sha256:9af0e7da7c9d5815ea264ee31b7b3de4e7dc584fb9e3c58c68be6b350a27c061" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1524a60e4b85bb9e8c2f820bab79abaed25cba877e281ebf2bb3113ae94885ce", "capture_rung": "http" } ], "artifact_digests": [ "sha256:312820bddf6b4524e1fd07602f61e9b1e398b9a15b7cee4d82bc4fcdd8f0e913", "sha256:35b561f199a746412edf10e7889e6beee3bd0ae8955616b6915c6f8f68afabde", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:633f8b66d7300e67c2072ce22de46700aa93209ed1a9f0280c7311470bee66c1" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:633f8b66d7300e67c2072ce22de46700aa93209ed1a9f0280c7311470bee66c1", "start_byte": 10397, "end_byte": 11195, "value_digest": "sha256:1c9bb187591f6d4ac032404301f4e08ad9f08ec66dcf2ec62cb1d52822428738" } ] } ], "note": "Resend provides a documented self-service path to upgrade, downgrade, or modify plans (such as Pro and Scale) via the Billing settings page without vendor review, but Enterprise plans require contacting sales.", "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } } ], "blockers": [], "remediations": [ { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } ] }, { "stage": "provision", "stage_label": "Provision", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "API keys and email sending operations can be programmatically created and initiated via the documented API and CLI endpoints." }, "secondary_context": [ { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "Resend provides a documented POST /api-keys programmatic endpoint that creates and returns new API key credentials with a 'token' property in a JSON response object." }, { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "context": "The POST /emails endpoint synchronously returns a usable created resource containing an 'id' property upon success." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:37.655Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:385ff558b8eab37f1721f2f5a0887461d4461d30e6808d2f356c4c7be9d7631a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:02b36ec5d19e8531029d9df58058985d1219eeb2d7c150407fbd512e7b1e54d4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "sha256:ef3780df4b4bca60bfd8af7e741bfaf7679e873b471d311b8564d49ff0e782e7" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "start_byte": 16212, "end_byte": 17006, "value_digest": "sha256:7d3b1e708c8b40187d5a04a1a81b05d70bf3520a7ab9707854058849c2750ad0" }, { "artifact_digest": "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "start_byte": 18267, "end_byte": 19071, "value_digest": "sha256:b19e150a15a1f1ce3db952de3eb267a238e87737dbe69fa89c4eb9bbbe0caefc" } ] } ], "note": "Resend provides a documented POST /api-keys programmatic endpoint that creates and returns new API key credentials with a 'token' property in a JSON response object." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:56.598Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "send-email" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b94c67b0d109027fc56e5c21b359424fce6d0fed4888644c839aafc0e6797379", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0127e440973426c840ef2c7ee3b237f03fc93855f5c1172414b5e1a82a6609d1", "sha256:202a244ffd5a23af004eb346d56cbefdc64a70520549e4d513b8a4ae02a473be", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05", "start_byte": 21048, "end_byte": 21854, "value_digest": "sha256:b26ddfbf13a4617a1028ae8eb4ba0f1c09b6da1e6f0894da13bb857c32b0676e" } ] } ], "note": "The POST /emails endpoint synchronously returns a usable created resource containing an 'id' property upon success." }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "send-email" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "sha256:6b2379e612586d7d979e855794ea738210f17ffc4c44b82b00259c3f2dd7bc47" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 11740, "end_byte": 12544, "value_digest": "sha256:20a5f47d2a73b002f5e60634e9028eced061a2cddc99a063f8e7b0d602debcf5" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b94c67b0d109027fc56e5c21b359424fce6d0fed4888644c839aafc0e6797379", "capture_rung": "http" } ], "artifact_digests": [ "sha256:202a244ffd5a23af004eb346d56cbefdc64a70520549e4d513b8a4ae02a473be", "sha256:2cc3018c805d8b3a9611e388791fab0bd7649308e1f64bb718f1eaf1a1e5ace9", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05", "start_byte": 14395, "end_byte": 15157, "value_digest": "sha256:6c06b3b5960aa5d0b7a5bbbb146d5044767409cb5f1b673567d32e7dd8814820" } ] } ], "note": "API keys and email sending operations can be programmatically created and initiated via the documented API and CLI endpoints." } ], "blockers": [], "remediations": [] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "Resend documents programmatically creating, listing, updating names, and deleting API keys via API/CLI, as well as scoping permissions (full_access vs sending_access) and domain restrictions. However, automated credential rotation or secret compromise recovery procedures remain manual or unaddressed." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for Resend Email API; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Every essential target has a usable, documented HTTP REST API interface alongside CLI and SDK alternatives." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "Resend documents request-time bearer token authentication using API keys via the 'Authorization: Bearer YOUR_API_KEY' header, supporting scoped authorization such as full_access or restricted sending_access." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "Both essential targets (Errors documentation and Send Email endpoint) have defined, stable request methods (POST /emails), schema parameters (from, to, subject, html, template), required fields, HTTP response status codes, and return body structures." }, { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "context": "Resend explicitly documents HTTP response codes, error types, rate limits (429 rate_limit_exceeded with response headers advice), quotas (daily/monthly exceeded), idempotency key requirements and conflict behaviors (409 concurrent_idempotent_requests, invalid_idempotent_request), and retry suggestions." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.698Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "email-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for Resend Email API; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "sha256:6b2379e612586d7d979e855794ea738210f17ffc4c44b82b00259c3f2dd7bc47" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 11740, "end_byte": 12544, "value_digest": "sha256:20a5f47d2a73b002f5e60634e9028eced061a2cddc99a063f8e7b0d602debcf5" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:385ff558b8eab37f1721f2f5a0887461d4461d30e6808d2f356c4c7be9d7631a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:02b36ec5d19e8531029d9df58058985d1219eeb2d7c150407fbd512e7b1e54d4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "sha256:c8e844c13bc91966846a2403f5838688786e74a476a5e45fc64901ab08d63161" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "start_byte": 19072, "end_byte": 19715, "value_digest": "sha256:a1af7d1b821d7bbe4dab27e01ed2bcca13bb821f9c1b466aec4545cf1adf26b9" } ] } ], "note": "Resend documents programmatically creating, listing, updating names, and deleting API keys via API/CLI, as well as scoping permissions (full_access vs sending_access) and domain restrictions. However, automated credential rotation or secret compromise recovery procedures remain manual or unaddressed.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Applicable limits, errors, retry, idempotency, cancellation, and reconciliation semantics are documented.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.698Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:46b0c27310d1b5d808006d662f9201015ed248df2728b2092363288edae2f608", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1154b6b76d927a2de73a1efd2b13eacdc2f230d7c1ecf176742966ddba87dbfb", "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "sha256:4d93dc9bc7d88d8bd37144ed4ae59b8dec8726638783f5afec3d4218c8ac9c8c", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "start_byte": 16289, "end_byte": 17098, "value_digest": "sha256:55d4559c1e0132506e23877bd56375fe94454faffa54999051c0f6413e6e511d" }, { "artifact_digest": "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "start_byte": 20317, "end_byte": 21122, "value_digest": "sha256:764cb10d9c77422f1ec2c80767ec8b80b08ef934009d5fa8ae650eb8262d1ff8" } ] } ], "note": "Resend explicitly documents HTTP response codes, error types, rate limits (429 rate_limit_exceeded with response headers advice), quotas (daily/monthly exceeded), idempotency key requirements and conflict behaviors (409 concurrent_idempotent_requests, invalid_idempotent_request), and retry suggestions." }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.769Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-keys" }, { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:385ff558b8eab37f1721f2f5a0887461d4461d30e6808d2f356c4c7be9d7631a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:02b36ec5d19e8531029d9df58058985d1219eeb2d7c150407fbd512e7b1e54d4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "sha256:bd0282ec074878a943a206b8f13676bd5665b5f91770b5a4497fec37974ff407" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-9d5754b3e4da24415ca78fa40ecba0b3ca9ce3ef666e7063fd8d1258bdecc351" }, "locators": [ { "artifact_digest": "sha256:9785c811328f9076e77f6857a1a529dc5eb5d52ea593e125495a175542e2d1d3", "start_byte": 21297, "end_byte": 21430, "value_digest": "sha256:07590119262e4b3cd8161859abb1e3995383ce66540da6e982e46149576211d5" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:1e56376b640d3530b91e085c5c57221240791fa1bb81a0d9d341508f11cf3732", "capture_rung": "http" } ], "artifact_digests": [ "sha256:08f9f0038544499cbbac6ecf420dde88433a191a98730f727a3f6423f6ead8ca", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "sha256:f294189f8590f173e456c54715d07a0f4ae31d939cabb7b106b92a7515613a54" ], "source_surface": { "node_kind": "resource", "node_id": "api-keys" }, "locators": [ { "artifact_digest": "sha256:517be653c7b1c0f7aab3a6750a9fe593d342de3efbd4ac7a77285cd518e7a180", "start_byte": 10942, "end_byte": 11739, "value_digest": "sha256:6f27880693a9395a8537fa6dc7a5da80ed3ae8d12f52588ab18d53105622502e" } ] } ], "note": "Resend documents request-time bearer token authentication using API keys via the 'Authorization: Bearer YOUR_API_KEY' header, supporting scoped authorization such as full_access or restricted sending_access." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.698Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "email-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b94c67b0d109027fc56e5c21b359424fce6d0fed4888644c839aafc0e6797379", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0127e440973426c840ef2c7ee3b237f03fc93855f5c1172414b5e1a82a6609d1", "sha256:202a244ffd5a23af004eb346d56cbefdc64a70520549e4d513b8a4ae02a473be", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05", "start_byte": 21048, "end_byte": 21854, "value_digest": "sha256:b26ddfbf13a4617a1028ae8eb4ba0f1c09b6da1e6f0894da13bb857c32b0676e" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:46b0c27310d1b5d808006d662f9201015ed248df2728b2092363288edae2f608", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1154b6b76d927a2de73a1efd2b13eacdc2f230d7c1ecf176742966ddba87dbfb", "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f13210e30b22084466dabec9243c148a53700bd103da07447e4f01e3a18faa6a" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "start_byte": 18701, "end_byte": 19505, "value_digest": "sha256:78f9c9a79e6955eb164a3669207537fae3dc2bb4863a235915c3954896197c2f" } ] } ], "note": "Both essential targets (Errors documentation and Send Email endpoint) have defined, stable request methods (POST /emails), schema parameters (from, to, subject, html, template), required fields, HTTP response status codes, and return body structures." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.698Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "email-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:46b0c27310d1b5d808006d662f9201015ed248df2728b2092363288edae2f608", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1154b6b76d927a2de73a1efd2b13eacdc2f230d7c1ecf176742966ddba87dbfb", "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7cf4a4c0ea54ed0fcd22c0d1547175ce3c86dc85b8a545d83caf0425f6197923" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:4b46514193fbf028532458781c3bb9bc27371f2ba1d6c0382156d0286da201c4", "start_byte": 12429, "end_byte": 13210, "value_digest": "sha256:403e87175d90d77a5c657caef7461e666b8f1595436e810ededeb1e3decbd318" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b94c67b0d109027fc56e5c21b359424fce6d0fed4888644c839aafc0e6797379", "capture_rung": "http" } ], "artifact_digests": [ "sha256:202a244ffd5a23af004eb346d56cbefdc64a70520549e4d513b8a4ae02a473be", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:f01e9dafaeae951d75981e59d4d798415eb0bb3f733044a2ec4d4b9a2f502470", "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05" ], "source_surface": { "node_kind": "resource", "node_id": "send-email" }, "locators": [ { "artifact_digest": "sha256:f072e87e600ff928ff04aadfd0840a242f826307f661266af0b4caebb3a59d05", "start_byte": 16226, "end_byte": 16970, "value_digest": "sha256:9a95c0df5fcc4bed8c3ffafecac9d5b4b28dca07a8f9ed2c64f4a2f66e04aa04" } ] } ], "note": "Every essential target has a usable, documented HTTP REST API interface alongside CLI and SDK alternatives." } ], "blockers": [], "remediations": [ { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:51:51.698Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:008a0f171b826cdfb1eb1109ab47fd40ffa2d7132721065a88cdc793e11c411c", "sha256:060321475950185ce8be38ec44d392e1fe3434b4386c0d8d5e186bdf97846992", "sha256:09f5475ac840704f6b2f62dbf4437653b10985eaf6104832694d3cc2fa0291c8", "sha256:12df55c50b0cbad1cefdcdf809cce1cce1c8ad7800d6cac37a1404cb2eeee74d", "sha256:1872699e340a8eba03d95160019a2007427d42c277bfe6335739bbd0a463ec91", "sha256:23aa1b027f887f624f4eae458f43a9d2e0bc6771c8a79310dae2c9dd5665ddb1", "sha256:2423a6b62ad11eabea04bcb9d47088baa735cc819502be0cb4971508a4576800", "sha256:3970c076b379461574d957308644e3eaf352aa7c4c750aa93d82d5cc8041a615", "sha256:3cbe341451f4ffb92f516cf3a1907b5c4e32c46a0237fb5ab24a02ab3c40d1b5", "sha256:3fe250e52ead88181961662035c2f0fb00052baadcaaf44dc57fd847c17a47b8", "sha256:541cba313807ab3543201f4833d95b8a8aeb24811c1d14378d0c9d549b89735d", "sha256:5775c2dee8e9cb89d498308eb31e61cfa4bfa024a589929b77f3de0aa639c16a", "sha256:583b054a50b00a1fd822503b23e29823ce5f227fd459a8367e38d2860a45b0ec", "sha256:5ce94883c68e2a046cafdda08da237a12ba464fdd7556efc4cce17ebf6468074", "sha256:6453f45d6a7f9c83c4e880df04e4e8f5214cc4af6cabe76db1119d7efae9101b", "sha256:708c2a9953eeaec71f4dd22713b369440a8bd7d3574818458c63fceb66bce980", "sha256:81eb4263722195549eee9b91c9940b802962a50b2754f7c35f1d2c71782c0b2d", "sha256:89a5e5bb8a862419c1e3a84cc73ae3be698bdc2d096a3cd0cc2e730a451fb12b", "sha256:8ecfd2104eb2af4ba80cb22ca3f7d926da667e3f75a3db4864943fecda4d8e31", "sha256:97a27f780282962ca2b47b167da2b35bc8be4c02aabe86c587b9c86f023e1f3b", "sha256:9cfed80a353552c35c2e87842049a58d4f511c7083f75a9d5a4ea3c28b0aa04f", "sha256:a275dd2e34edff7b64e62cfd95dc0a4fcb082d96fd91b7bd29ef0a0f89e97207", "sha256:aa1725a06c86cf45eeef868490defbbbd99c9b4021e7e7df20a1501265259f0c", "sha256:b0f9fdeb4881656a4ec752fe9ea7e851379a55e6cd272a65491eb1ee706aac57", "sha256:b27e9c6a0e78b3387fb7728633cf8f34eec0cb5f6b209b0239f976990729d691", "sha256:c3895a8f80730ad7a89d92ac86078357466b1ff1729d34c4dac73f984cbaf9cf", "sha256:d68b1a256e07a9addecda9773d8b2174ffb5f6e293f072abec6f7c5cf0feaee4", "sha256:e680e3f4549dad298881d4f9228659f2b3295d6423a71a3554bd724c7fa4fe5c", "sha256:eb5859c40c7e36e7fc2d0702ac4a4ad043299f86c5ac9fd3af53e46bc4460b6a", "sha256:eb675ac14240a56efa2a1ff953156e9f9459c89c0a8f90a5925aa6adc3bd9d6f", "sha256:eea8c9f89a7f1b6f406bba98580d1051f3a48278e63ec4792d57335053c172c8", "sha256:f1d25704613c6331cb1e40db03ee0cdd53ba10f2e8b34ca8e86f560b659446da", "sha256:f2e63e41942d15b55fe87a237492be024706f53ea4e57e0c2d695dd9da639ec1" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:583b054a50b00a1fd822503b23e29823ce5f227fd459a8367e38d2860a45b0ec" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:46.842Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:5775c2dee8e9cb89d498308eb31e61cfa4bfa024a589929b77f3de0aa639c16a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:35.643Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:12df55c50b0cbad1cefdcdf809cce1cce1c8ad7800d6cac37a1404cb2eeee74d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:16.983Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:6453f45d6a7f9c83c4e880df04e4e8f5214cc4af6cabe76db1119d7efae9101b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:81eb4263722195549eee9b91c9940b802962a50b2754f7c35f1d2c71782c0b2d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:46.842Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:eb5859c40c7e36e7fc2d0702ac4a4ad043299f86c5ac9fd3af53e46bc4460b6a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:3970c076b379461574d957308644e3eaf352aa7c4c750aa93d82d5cc8041a615" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.886Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:e680e3f4549dad298881d4f9228659f2b3295d6423a71a3554bd724c7fa4fe5c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.886Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:a275dd2e34edff7b64e62cfd95dc0a4fcb082d96fd91b7bd29ef0a0f89e97207", "sha256:f1d25704613c6331cb1e40db03ee0cdd53ba10f2e8b34ca8e86f560b659446da" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.886Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:09f5475ac840704f6b2f62dbf4437653b10985eaf6104832694d3cc2fa0291c8", "sha256:541cba313807ab3543201f4833d95b8a8aeb24811c1d14378d0c9d549b89735d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:708c2a9953eeaec71f4dd22713b369440a8bd7d3574818458c63fceb66bce980" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:15.886Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:23aa1b027f887f624f4eae458f43a9d2e0bc6771c8a79310dae2c9dd5665ddb1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:20.312Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:eea8c9f89a7f1b6f406bba98580d1051f3a48278e63ec4792d57335053c172c8" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:35.643Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:c3895a8f80730ad7a89d92ac86078357466b1ff1729d34c4dac73f984cbaf9cf" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:20.312Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:b0f9fdeb4881656a4ec752fe9ea7e851379a55e6cd272a65491eb1ee706aac57", "sha256:b27e9c6a0e78b3387fb7728633cf8f34eec0cb5f6b209b0239f976990729d691" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:35.643Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:3cbe341451f4ffb92f516cf3a1907b5c4e32c46a0237fb5ab24a02ab3c40d1b5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:37.655Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:2423a6b62ad11eabea04bcb9d47088baa735cc819502be0cb4971508a4576800" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:56.598Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:9cfed80a353552c35c2e87842049a58d4f511c7083f75a9d5a4ea3c28b0aa04f", "sha256:f2e63e41942d15b55fe87a237492be024706f53ea4e57e0c2d695dd9da639ec1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:8ecfd2104eb2af4ba80cb22ca3f7d926da667e3f75a3db4864943fecda4d8e31", "sha256:d68b1a256e07a9addecda9773d8b2174ffb5f6e293f072abec6f7c5cf0feaee4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.698Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:1872699e340a8eba03d95160019a2007427d42c277bfe6335739bbd0a463ec91", "sha256:3fe250e52ead88181961662035c2f0fb00052baadcaaf44dc57fd847c17a47b8" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:aa1725a06c86cf45eeef868490defbbbd99c9b4021e7e7df20a1501265259f0c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.698Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:008a0f171b826cdfb1eb1109ab47fd40ffa2d7132721065a88cdc793e11c411c", "sha256:97a27f780282962ca2b47b167da2b35bc8be4c02aabe86c587b9c86f023e1f3b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.769Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:5ce94883c68e2a046cafdda08da237a12ba464fdd7556efc4cce17ebf6468074", "sha256:89a5e5bb8a862419c1e3a84cc73ae3be698bdc2d096a3cd0cc2e730a451fb12b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.698Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:060321475950185ce8be38ec44d392e1fe3434b4386c0d8d5e186bdf97846992", "sha256:eb675ac14240a56efa2a1ff953156e9f9459c89c0a8f90a5925aa6adc3bd9d6f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.698Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/resend/agent-readiness/resend-email-api/email-operations", "projection_digest": "sha256:f5e4ec48bff5ded58221cda88edd045d60776714bd1adc2e131b1cf4837c18cc" } } }