{
  "api_contract": "sourcey.catalog-api/v1",
  "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77",
  "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021",
  "data": {
    "revision_contract": "sourcey.agent-readiness-revision/v1alpha1",
    "agent_readiness_profile_id": "arp_01kzd4bb9sf13ma4xaxb73d82x",
    "entity_id": "ent_01kyh8fpe3n3yye39kmzvy410z",
    "scope": {
      "product": {
        "key": "microsoft-azure",
        "name": "Microsoft Azure"
      },
      "funnel": {
        "key": "api-resource-management",
        "name": "API resource management"
      }
    },
    "catalog_binding": {
      "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d",
      "entity_revision_digest": "sha256:a569131c2422a72436aea7d8dfa1b846f87a3500dbc533c3ea06bfd806a27e2f"
    },
    "declaration_revision_digest": "sha256:09908c134571099e159f32d6a22b43bd4d2339e76a76a46a8f069eae13fc12b7",
    "declaration": {
      "declaration_id": "declaration_microsoft_azure_api_resource_management",
      "provenance": {
        "repository": "sourcey/agent-ready-services",
        "commit": "62b512f0c49352e55a399ba53866a5effa431d71",
        "path": "vendors/mi/microsoft.yaml",
        "git_blob_oid": "5f06a651093c6af9deefb3daaa1f1d34aeaf52ca",
        "blob_digest": "sha256:a64663f982135b87d243a1279283d28360f901a89dd0c50e9314eef437d4a4a3"
      },
      "status": "community_declared"
    },
    "lifecycle": "active",
    "effective_from": "2026-08-20T14:33:24.000Z",
    "signals": [
      {
        "stage": "evaluate",
        "signal_code": "eligibility_decidability",
        "selector_group_id": "eligibility_decidability-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:56:15.463Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-product-terms"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:80a2d21a964452c667661a769f7db4e95b9ea2133b29d9151a5bd0a23a012389",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1d9a3b4e2af771e4beed5f4f02c00a08a00845c6afd1a822a58e5f8ff0218a91",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:bc0e368fc06786b1e198493ad60d2d5e8f486e4ed7624512d1af3a5ea42076c6",
              "sha256:bdcfa4543d3aa774841e206db4142b0130f2189ca816b0dc83e182e151dc7b09"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-product-terms"
            },
            "locators": [
              {
                "artifact_digest": "sha256:bc0e368fc06786b1e198493ad60d2d5e8f486e4ed7624512d1af3a5ea42076c6",
                "start_byte": 119256,
                "end_byte": 120049,
                "value_digest": "sha256:4a40493c86e747ce2f55bc3e94aee920367431d91e56293eb5a3735f6458fcc0"
              }
            ]
          }
        ],
        "note": "Microsoft Azure Product Terms define specific registration and compliance requirements for Limited Access Services (such as certain Azure AI Services), requiring accurate registration forms. However, generic eligibility criteria across all Azure services are not fully detailed in this excerpt."
      },
      {
        "stage": "evaluate",
        "signal_code": "pricing_decidability",
        "selector_group_id": "pricing_decidability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.534Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-pricing"
          },
          {
            "node_kind": "resource",
            "node_id": "retail-prices-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:573ca29fe9d943a1d3397c8b4116d80dad8fdcc4bbf35c4838dbc47403a9c781",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5f6fd28fecf901b709fdfac86771bcb9f39de6b6f0b7f1de6ff96a43924099d8",
              "sha256:bd5eec3b2693115d26badbbb0636edb861de7a9176e6068ce296a2675e62fc91"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "retail-prices-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
                "start_byte": 5231,
                "end_byte": 6028,
                "value_digest": "sha256:c883979935aa613b52dc9efc85753bbc532a811e1bb29198e3318e5d53592cc2"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:e139df7c4aec45fe07c3c7cf93a0e548525cba00065afea115a7daa79d74bcda",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:09d4a9df29e79dd9053240f625688d1d2ee182ed644a21f3246d8d5538afb10e",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
              "sha256:975747e852ce223bc5d28c49b69dc09d28b9f6df04f3c9d3c18df748b7ac6720"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
                "start_byte": 53358,
                "end_byte": 54158,
                "value_digest": "sha256:eb7c6003872756ad12f5626fd0ca7ce01620b77836300baa735006d4cfa578e3"
              }
            ]
          }
        ],
        "note": "Azure pricing models and currencies (USD worldwide) are explicit through the Azure pricing documentation and the Azure Retail Prices REST API, which provides unauthenticated programmatic access to retail rates, SKUs, and meter details."
      },
      {
        "stage": "evaluate",
        "signal_code": "service_discovery",
        "selector_group_id": "service_discovery-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:21.792Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-rest-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c6b1fc853a8535b52d08ad54dd99f2575d64e67ebf8c78f81d361275857b7dc5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1a9c96414360cc08031a3b78b110bd47179abdfa45f15645b4d44e5cfcb0d4fa",
              "sha256:9ddd24caed136fc61b359cbac00275df85396f94cfd3ba79aca56ff985800f28",
              "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
              "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-rest-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
                "start_byte": 6766,
                "end_byte": 7551,
                "value_digest": "sha256:0d843d1c1e910002f7e68cb2e6aa0983d01f0e1b6d26fd965b61a403d9d31dd7"
              },
              {
                "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
                "start_byte": 7552,
                "end_byte": 8349,
                "value_digest": "sha256:6bf313b5c6f03c6c08d1e143478b62e617538ff1e08bcef0ade78d3949a11d44"
              }
            ]
          }
        ],
        "note": "The Azure REST API reference documentation explicitly provides public documentation, HTTP methods, and guidance for discovering and calling stable Azure service REST API endpoints."
      },
      {
        "stage": "evaluate",
        "signal_code": "terms_access",
        "selector_group_id": "terms_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:32.666Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-legal"
          },
          {
            "node_kind": "resource",
            "node_id": "azure-product-terms"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:80a2d21a964452c667661a769f7db4e95b9ea2133b29d9151a5bd0a23a012389",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0694fe89155cb05ea1b5e2a712310fedac6672fe3a7f8723eeb63adf001b58f1",
              "sha256:1d9a3b4e2af771e4beed5f4f02c00a08a00845c6afd1a822a58e5f8ff0218a91",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:bc0e368fc06786b1e198493ad60d2d5e8f486e4ed7624512d1af3a5ea42076c6"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-product-terms"
            },
            "locators": [
              {
                "artifact_digest": "sha256:bc0e368fc06786b1e198493ad60d2d5e8f486e4ed7624512d1af3a5ea42076c6",
                "start_byte": 32903,
                "end_byte": 33703,
                "value_digest": "sha256:3d057b85beee66802592baa97da41fb233c17db7309032f30803dd79e567e8f3"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:710eb1324206815c64d425bff56c6b4d2bbd1b647a42b2f109809b557414f8f9",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:319f9b56a2df730a15c8c697b238d73c6ef23df45a1d5cc9af408e3c6e3ff2ff",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:69a2d4a0fab59b55677df4e339daae2279c1686d193542f6b63eb8eebfb33fdd",
              "sha256:90f83a25f4c27fc2514c719baa4dcd1193ad03ccff1f848822451b28ebcd547e"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-legal"
            },
            "locators": [
              {
                "artifact_digest": "sha256:319f9b56a2df730a15c8c697b238d73c6ef23df45a1d5cc9af408e3c6e3ff2ff",
                "start_byte": 23836,
                "end_byte": 24635,
                "value_digest": "sha256:e08385694a5e93949f408e2f97910312d7f527557041941ce4e1ff46b254ade2"
              }
            ]
          }
        ],
        "note": "Applicable legal terms and product conditions, including the Microsoft Customer Agreement (MCA) and Universal License Terms for Online Services, are publicly retrievable and explicitly defined on Microsoft Azure legal and product terms pages."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_control_operability",
        "selector_group_id": "access_control_operability-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:33.219Z",
        "tested_surfaces": [
          {
            "node_kind": "endpoint",
            "node_id": "registration"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [],
        "note": "The retained capture from signup.azure.com shows only an initial sign-up page heading without establishing agent operability for required access controls, navigation, validation, or handoffs."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_entrypoint_stability",
        "selector_group_id": "access_entrypoint_stability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:33.219Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-account"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "direct_observation",
            "captures": [
              {
                "retained_capture_digest": "sha256:d70ff743835f9ce7a3f2cedfd5f899f4559cd580522baf6ccbde7038e2c6f6da",
                "capture_rung": "headless"
              },
              {
                "retained_capture_digest": "sha256:ed3b651c15c744f8bd0fb5f69a2b14a9d00536d583f32f0a6c31733de844f84b",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:0d7f17485280193aecdc4279c9fbd0e95b792f45ec209963389f2698a349965f",
              "sha256:28406ccdcd0961e9abd03c3f6ddd59a6a033e5b2085313ecc8a9552fa27e76c7",
              "sha256:3878570f4a62a0d65f57cf1754e0269e56ec797f4e36e26b44c172eb6e800401",
              "sha256:399e721bbca269ca88071a7ca78d3da4b85167f38cd737fa8128ebb7451a0825",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5a4511f550faafd6dc3973bcc258596dfb0581728a4f2c34c2bde3b3915b1afa",
              "sha256:a8ce03b1d4dc6c0ed6032917e63bbf3befd89bf03996ac86376b2382804e5bd4",
              "sha256:ae85e860e346daee6a6248097481d40049e1dd08ce0dac986f88f6f5982e5603",
              "sha256:d330143a1600ee39cd0cfde68bd54f9a76f22ea9bd8929ffb629f0f456156b8e",
              "sha256:d91487f698f5fd1d809959af9553c792d0884a5b117102edf4f18d768bc24894",
              "sha256:e7be391f41c683c5dc23f110630c343e5a395230befb3d1dfe378670beb50a1b"
            ],
            "locators": [
              {
                "artifact_digest": "sha256:5a4511f550faafd6dc3973bcc258596dfb0581728a4f2c34c2bde3b3915b1afa",
                "start_byte": 58,
                "end_byte": 83,
                "value_digest": "sha256:3309d2a80bfde468d3b973949beee621b43bc65a82148d83ef2ee99f67e94db2"
              },
              {
                "artifact_digest": "sha256:a8ce03b1d4dc6c0ed6032917e63bbf3befd89bf03996ac86376b2382804e5bd4",
                "start_byte": 21721,
                "end_byte": 22514,
                "value_digest": "sha256:803a365a8e14bba3e0e966249890ac5f3f5e83970cc12f5b55ed0fa893fdaec0"
              }
            ]
          }
        ],
        "note": "Azure sign-up begins at signup.azure.com, and documented access route instructions direct users to sign in to the Azure portal, navigate to Subscriptions, and select Add."
      },
      {
        "stage": "sign_up",
        "signal_code": "captcha_compatible_access",
        "selector_group_id": "captcha_compatible_access-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:33.219Z",
        "tested_surfaces": [
          {
            "node_kind": "endpoint",
            "node_id": "registration"
          },
          {
            "node_kind": "resource",
            "node_id": "azure-account"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [],
        "note": "The captured sign-up page and subscription documentation do not provide explicit evidence regarding whether a mandatory CAPTCHA challenge is present or if a verified-agent alternative exists across the flow."
      },
      {
        "stage": "sign_up",
        "signal_code": "delegated_identity_access",
        "selector_group_id": "delegated_identity_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:56.989Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "client-credentials"
          },
          {
            "node_kind": "resource",
            "node_id": "service-principals"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "direct_observation",
            "captures": [
              {
                "retained_capture_digest": "sha256:3cc787588feddf8a0435ffeb854e7b74ee011ce195c496d5373918c9543c3cc6",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:a1a095423bdfa1b5b61d561d7ec66957142c5babcdf136b18317a108a4653079",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4683447223afe123439d014d949336a8f31162259128813a730bb0a63d924266",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
              "sha256:843c236023beee02551e125ea4c50471b391d9d99e1a10b1603c4d39e29fc8d6",
              "sha256:8a26e659150dceb05e95ce6ea21a302817aa81602ca301e6347ad8d0d3e61b5b",
              "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
              "sha256:db294f18b53a3c264a319c05afb29ee39fec95765b0211e4777e2791e765cfa9"
            ],
            "locators": [
              {
                "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
                "start_byte": 17077,
                "end_byte": 17877,
                "value_digest": "sha256:d52edc6968e20da6ec5f2bbcf6728c4ed2b3dc3a74ed2cab0d28a6f71ffeecfc"
              },
              {
                "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
                "start_byte": 6680,
                "end_byte": 7484,
                "value_digest": "sha256:07e6a9632a7e59f0b3f67d8910f56847a209a90a1fbd13cbf258a83c7c601188"
              },
              {
                "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
                "start_byte": 9968,
                "end_byte": 10765,
                "value_digest": "sha256:5d63818fa83678de1ba65b255c03d32d358d4420a5b51779c962b21c8e2d817a"
              }
            ]
          }
        ],
        "note": "Microsoft Entra supports the OAuth 2.0 client credentials grant flow for machine-to-machine authentication using app-only tokens, service principals, and managed identities to obtain scoped, revocable access."
      },
      {
        "stage": "sign_up",
        "signal_code": "phone_verification_compatible",
        "selector_group_id": "phone_verification_compatible-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:33.219Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-account"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [],
        "note": "The admitted captures do not state phone verification requirements or define a supported resumable boundary for phone verification."
      },
      {
        "stage": "pay",
        "signal_code": "checkout_operability",
        "selector_group_id": "checkout_operability-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:19.145Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "billing-checkout"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [],
        "note": "The retained evidence describes adding or replacing credit cards in the Azure portal, but does not establish a complete end-to-end flow for deterministic agent checkout construction, approval handoff, and resumption."
      },
      {
        "stage": "pay",
        "signal_code": "commitment_disclosure",
        "selector_group_id": "commitment_disclosure-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.534Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "azure-pricing"
          },
          {
            "node_kind": "resource",
            "node_id": "retail-prices-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:573ca29fe9d943a1d3397c8b4116d80dad8fdcc4bbf35c4838dbc47403a9c781",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5f6fd28fecf901b709fdfac86771bcb9f39de6b6f0b7f1de6ff96a43924099d8",
              "sha256:bd5eec3b2693115d26badbbb0636edb861de7a9176e6068ce296a2675e62fc91"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "retail-prices-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
                "start_byte": 5231,
                "end_byte": 6028,
                "value_digest": "sha256:c883979935aa613b52dc9efc85753bbc532a811e1bb29198e3318e5d53592cc2"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:e139df7c4aec45fe07c3c7cf93a0e548525cba00065afea115a7daa79d74bcda",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5a0ff1d035a5178c71dff0dd3966d7707cba544b952d0098a3889b554367dd2c",
              "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
              "sha256:975747e852ce223bc5d28c49b69dc09d28b9f6df04f3c9d3c18df748b7ac6720"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
                "start_byte": 34280,
                "end_byte": 35076,
                "value_digest": "sha256:b381e3d3d218ff3de613de8d1cd09343045ef9ebf4a60d52d1449479c362ee9b"
              }
            ]
          }
        ],
        "note": "Azure explicitly discloses its pay-as-you-go consumption model, USD currency default, and available commitment offers (such as reservations and savings plans) on its pricing page and through the Retail Rates Prices API."
      },
      {
        "stage": "pay",
        "signal_code": "payment_authorization",
        "selector_group_id": "payment_authorization-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:19.145Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "billing-checkout"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [],
        "note": "The retained evidence details requiring account administrator or specific Microsoft Customer Agreement roles to manage payment methods, but does not state a documented rail for scoped delegation or explicit human-confirmed authorization with receipts."
      },
      {
        "stage": "pay",
        "signal_code": "self_service_purchase",
        "selector_group_id": "self_service_purchase-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:55:57.916Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "billing-checkout"
          },
          {
            "node_kind": "resource",
            "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:22f1b088451d2ed8abb58e6c113b7265544da2063dae7a29cbe6a1c9102b10cb",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:72569286367920b2440f7121cca75e28e2d8625e723bd10fe3b4a47f8e8175c8",
              "sha256:92aacd77a5db56876e646c7fdcb36a66ad2dd2e7316dce423df61dd73aedcd5d",
              "sha256:9a1c7515c0c9ae778fb7f0fb19925472c244bae1f5b7220f7e532a2c6386c5ec"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "readiness-2c5e3e9374587cf94c00720160f0e60599f3d9aa340b5adf2c017bf2fc97eea2"
            },
            "locators": [
              {
                "artifact_digest": "sha256:9a1c7515c0c9ae778fb7f0fb19925472c244bae1f5b7220f7e532a2c6386c5ec",
                "start_byte": 8893,
                "end_byte": 9691,
                "value_digest": "sha256:c76a19fc874b9dba8763ea539cab707b4eba1456323516aca4e4d340f5ed5c17"
              }
            ]
          }
        ],
        "note": "Documentation provides a direct self-service procedure in the Azure portal under Subscriptions > Add to select a billing account, billing profile, invoice section, and plan to create a new subscription immediately without vendor intervention."
      },
      {
        "stage": "provision",
        "signal_code": "access_material_delivery",
        "selector_group_id": "access_material_delivery-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:56.989Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "client-credentials"
          },
          {
            "node_kind": "resource",
            "node_id": "service-principals"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:3cc787588feddf8a0435ffeb854e7b74ee011ce195c496d5373918c9543c3cc6",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:3f7f1ea3d01ec466dca3acd6186490b3ca1c68ad7a626f7580074f42ecc459ca",
              "sha256:4683447223afe123439d014d949336a8f31162259128813a730bb0a63d924266",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "client-credentials"
            },
            "locators": [
              {
                "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
                "start_byte": 17077,
                "end_byte": 17877,
                "value_digest": "sha256:d52edc6968e20da6ec5f2bbcf6728c4ed2b3dc3a74ed2cab0d28a6f71ffeecfc"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:a1a095423bdfa1b5b61d561d7ec66957142c5babcdf136b18317a108a4653079",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:995c150ec761cbbd8276f7f02fde54c3dcb283b05c4192698732741177bc5680",
              "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
              "sha256:db294f18b53a3c264a319c05afb29ee39fec95765b0211e4777e2791e765cfa9"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "service-principals"
            },
            "locators": [
              {
                "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
                "start_byte": 6785,
                "end_byte": 7585,
                "value_digest": "sha256:ecba293c95f884505416cbc109113e4074211c5b73584c250bc0026be287a3e7"
              }
            ]
          }
        ],
        "note": "Documented agent-usable flows allow acquiring access material. The OAuth 2.0 client credentials flow supports POST requests to the /token endpoint with client_secret, certificate assertion, or federated credentials to receive an access token. Additionally, app registration and service principal creation provide client IDs and allow adding secrets or certificates programmatically."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_completion",
        "selector_group_id": "provisioning_completion-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:55:58.337Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "asynchronous-operations"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:06ffdb7db0dc64d937f06d8ac58a901758666712e0563d03a6f436edbc5bec15",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:a0dce3ff97e1e6cf4a7a14186b27535a7c30bd72c4353ab155d7da70e000cf9a",
              "sha256:fc777a3a94946520e0ba0eb2428783897f27151baffcaaa82c36c69bc1d2e572"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "asynchronous-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 5893,
                "end_byte": 6685,
                "value_digest": "sha256:5a4a4c167c559c98ff76fb149c135aed00f9bb6dbdbeb3dcd4b5f228fbbc0e2b"
              },
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 9081,
                "end_byte": 9880,
                "value_digest": "sha256:5856909e1cdaed92d9597fa5828a0400da360c535e04d11199c19f36564322cf"
              }
            ]
          }
        ],
        "note": "Azure Resource Manager asynchronous operations report status via response codes (201, 202) and header polling URLs (Azure-AsyncOperation), exposing progress percentComplete, terminal provisioningState values (Succeeded, Failed, Canceled), and error details on failure. However, an explicit time or delay bound and specific reconciliation properties are not fully established in the evidence."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_operability",
        "selector_group_id": "provisioning_operability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:24.579Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "asynchronous-operations"
          },
          {
            "node_kind": "resource",
            "node_id": "resource-group-api"
          },
          {
            "node_kind": "resource",
            "node_id": "resource-manager-rest"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:453620f56583f5e64fb84f3a679afc4f06207f6375dfcd98db33f847e308afed",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
              "sha256:3cc83e3fb6949ce0365241cd5ce5f7a08a8dec19898c64f58b64697ef9252048",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:da9e4e5a9b0ff5cdc6b447545d6ea635ba6f3edc669e0419ab83886b4514cc54"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-manager-rest"
            },
            "locators": [
              {
                "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
                "start_byte": 9806,
                "end_byte": 10516,
                "value_digest": "sha256:a19523d6c8f20bbaf67569684937f3e5322c30972bbec29b647fc190d4b60045"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:2e14a895bbe8486033e8e2509dc05d8f10a3dd031b3d0d1e0c99fda3e763928b",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:055151cd7e4541b00378aa0fce9903c615fd1f53ae67f44669f7165ed8aecac0",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69",
              "sha256:f8db1e193feaa765a1af9364d17ccd80bbaaa85ded8b23ef9f410b47ad604a93"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-group-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69",
                "start_byte": 4795,
                "end_byte": 5594,
                "value_digest": "sha256:8e73fccb7ab28e2aa56bd3d56795fdd6f9856a32b50d022b6a7d29d1c7ef8cd4"
              }
            ]
          }
        ],
        "note": "Resource provisioning can be initiated programmatically via Azure Resource Manager REST APIs, including PUT requests to create or update resource groups, storage accounts, or deploy ARM templates directly using Bearer authorization tokens."
      },
      {
        "stage": "operate",
        "signal_code": "credential_lifecycle",
        "selector_group_id": "credential_lifecycle-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:56:56.989Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "client-credentials"
          },
          {
            "node_kind": "resource",
            "node_id": "service-principals"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:a1a095423bdfa1b5b61d561d7ec66957142c5babcdf136b18317a108a4653079",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:68bd24794b8c027e73d48600534df0ee8288bd547a1dc8a1fc4850c247d25e38",
              "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
              "sha256:db294f18b53a3c264a319c05afb29ee39fec95765b0211e4777e2791e765cfa9"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "service-principals"
            },
            "locators": [
              {
                "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
                "start_byte": 13153,
                "end_byte": 13950,
                "value_digest": "sha256:ea35599d4d630c18462c2d7c19faae966e17e6240ef6d22014c62782baf38da8"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:3cc787588feddf8a0435ffeb854e7b74ee011ce195c496d5373918c9543c3cc6",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4683447223afe123439d014d949336a8f31162259128813a730bb0a63d924266",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
              "sha256:862a715a45fc13adf2934ab3c65ad67363d161d076452fdeff68a99daacfb49e"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "client-credentials"
            },
            "locators": [
              {
                "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
                "start_byte": 8282,
                "end_byte": 9080,
                "value_digest": "sha256:b1fd0df5795afbd1c68d8dedbd16faf25cb7b4bf1606bf05afb5ea2f35ae37ae"
              }
            ]
          }
        ],
        "note": "Microsoft identity platform documentation describes credential security boundaries and mentions rotating/protecting client secrets or certificates. Furthermore, Entra service principal documentation details application deactivation, deletion, and recovery options, but explicit procedures for complete automated credential rotation and compromise recovery across all credential types remain unevidenced."
      },
      {
        "stage": "operate",
        "signal_code": "failure_contract",
        "selector_group_id": "failure_contract-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:55:58.337Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "asynchronous-operations"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:06ffdb7db0dc64d937f06d8ac58a901758666712e0563d03a6f436edbc5bec15",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5f212ee577b8cdcd3491bce8bd80aac75bfedaa3c67c39f0c8af5b6df0da10e1",
              "sha256:fc777a3a94946520e0ba0eb2428783897f27151baffcaaa82c36c69bc1d2e572"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "asynchronous-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 5893,
                "end_byte": 6685,
                "value_digest": "sha256:5a4a4c167c559c98ff76fb149c135aed00f9bb6dbdbeb3dcd4b5f228fbbc0e2b"
              },
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 6686,
                "end_byte": 7482,
                "value_digest": "sha256:5f3e512ea3bd77b848b11c61b46349a5a9f29ee26317e8fc7e367b3d1d39f6c8"
              }
            ]
          }
        ],
        "note": "Azure Resource Manager documentation details status codes for tracking long-running asynchronous operations, headers like Azure-AsyncOperation and Retry-After, provisioning states (Succeeded, Failed, Canceled), and error response objects. However, explicit cancellation and idempotency semantics for all operations remain unevidenced."
      },
      {
        "stage": "operate",
        "signal_code": "operation_authentication",
        "selector_group_id": "operation_authentication-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:56.989Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "client-credentials"
          },
          {
            "node_kind": "resource",
            "node_id": "service-principals"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:a1a095423bdfa1b5b61d561d7ec66957142c5babcdf136b18317a108a4653079",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:84b2906cc6be6a177f3e31058196eae77bae42ac909f770f0c1b9437b5bef12c",
              "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
              "sha256:db294f18b53a3c264a319c05afb29ee39fec95765b0211e4777e2791e765cfa9"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "service-principals"
            },
            "locators": [
              {
                "artifact_digest": "sha256:d294dfa0cc4b8cd4d724fbddc4dd1506441b2f3846ecfe6054bd8ddfdfcd159f",
                "start_byte": 8385,
                "end_byte": 9175,
                "value_digest": "sha256:199a24d82f1db201e97f453e11d59742b8cb175877229b08889b2d8e1503d900"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:3cc787588feddf8a0435ffeb854e7b74ee011ce195c496d5373918c9543c3cc6",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4683447223afe123439d014d949336a8f31162259128813a730bb0a63d924266",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
              "sha256:52df009d3133b360d30ce7aea0fef66e96e8d19032714695f6b1fb15785c3cd4"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "client-credentials"
            },
            "locators": [
              {
                "artifact_digest": "sha256:51bed147e6de6ae6fc7314d995ffedab16d3d4454efb939a347bfffd2393c6bf",
                "start_byte": 6680,
                "end_byte": 7484,
                "value_digest": "sha256:07e6a9632a7e59f0b3f67d8910f56847a209a90a1fbd13cbf258a83c7c601188"
              }
            ]
          }
        ],
        "note": "Microsoft identity platform and Entra ID document service operation authentication using OAuth 2.0 client credentials grant flow (shared secrets, certificates, or federated credentials) and scoped service principals to acquire Bearer tokens for server-to-server interactions without user involvement."
      },
      {
        "stage": "operate",
        "signal_code": "operation_contract",
        "selector_group_id": "operation_contract-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.534Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "azure-resource-manager"
          },
          {
            "node_kind": "interface",
            "node_id": "pricing-and-cost"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:453620f56583f5e64fb84f3a679afc4f06207f6375dfcd98db33f847e308afed",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:da9e4e5a9b0ff5cdc6b447545d6ea635ba6f3edc669e0419ab83886b4514cc54",
              "sha256:e5e277abf8118506299fa7467e7f5155d8839347647b8952ae03f3bf0f9fbe86"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-manager-rest"
            },
            "locators": [
              {
                "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
                "start_byte": 8265,
                "end_byte": 9011,
                "value_digest": "sha256:3fc5c85cbd6255458d14cdf4a052a6dc0c455d41555217b2a7575ad9b6dbacde"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c14e5946ac5fecc48d7e4de303f19502f4b0143f70b4798b005d540a25e55404",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0623c7d6e5e8bc508f5283eb09045d01a506883cfd1a5c2be0ecb278f4401aa2",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7",
              "sha256:c59c134af95133f2c80c5c6c5c1ffb107e52b795637fcdc4ccfe75f0c044035a"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "cost-management-permissions"
            },
            "locators": [
              {
                "artifact_digest": "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7",
                "start_byte": 6458,
                "end_byte": 7258,
                "value_digest": "sha256:510f2b524ee0d6fe3adc04dccd6a51b09e85afd46ebca0f2193a9dce3da44f27"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:573ca29fe9d943a1d3397c8b4116d80dad8fdcc4bbf35c4838dbc47403a9c781",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:622c1394f7a75f443a44a28a3071b9b46b8f4a8160940d509f3036ade555cf66",
              "sha256:bd5eec3b2693115d26badbbb0636edb861de7a9176e6068ce296a2675e62fc91"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "retail-prices-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
                "start_byte": 7579,
                "end_byte": 8371,
                "value_digest": "sha256:8c5b3c93d9f9c971f68d43d9961b79901fae7e7ccbc7aeaa0bf6b090b8bcddad"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c6b1fc853a8535b52d08ad54dd99f2575d64e67ebf8c78f81d361275857b7dc5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:396c2d060cdcdf6fa8d4eb5a4082670a2eb028d805053f6961d267267a2a1c0b",
              "sha256:9ddd24caed136fc61b359cbac00275df85396f94cfd3ba79aca56ff985800f28",
              "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
              "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-rest-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
                "start_byte": 9951,
                "end_byte": 10732,
                "value_digest": "sha256:7996b76edea0159d36223628951c3c4a35541fb5dda4ae2a9d218d42a52ce1bc"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:2e14a895bbe8486033e8e2509dc05d8f10a3dd031b3d0d1e0c99fda3e763928b",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:055151cd7e4541b00378aa0fce9903c615fd1f53ae67f44669f7165ed8aecac0",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:a8bc511ff0b6fce350158c396fb0678f72bec9e831c2b59448aca37ad492710c",
              "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-group-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69",
                "start_byte": 6395,
                "end_byte": 7192,
                "value_digest": "sha256:6cd98f8ce7231b84fe2c5f3205658d643f1b28d8966d4fd4e648f35de0ad1e54"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:06ffdb7db0dc64d937f06d8ac58a901758666712e0563d03a6f436edbc5bec15",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:63d131b90fb98dffb572994b3b76262dff9fa69063f5fe658dce82216c06062d",
              "sha256:fc777a3a94946520e0ba0eb2428783897f27151baffcaaa82c36c69bc1d2e572"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "asynchronous-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 10670,
                "end_byte": 11465,
                "value_digest": "sha256:e066f5227002fddc3b46ad6e8a3dc7d345d41bf6b10a06e8b26c37e6ee02019f"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:adfc34e9ab6797a3e08e3de97c89d9781ccae26492fcc388101bda828db492c2",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:348008f55ef26b2e6e1688fc503645f020f8f4263c7a14504de42c35c5d6f59f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:c3082e0ad7533102056257e8762faa26877c483b278dfad8b779f55396a19654",
              "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-manager-limits"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683",
                "start_byte": 13078,
                "end_byte": 13875,
                "value_digest": "sha256:08b7379e552b12f2f6938d545582d2a2038f6f583dd50459e51366257057b87f"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:e139df7c4aec45fe07c3c7cf93a0e548525cba00065afea115a7daa79d74bcda",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
              "sha256:975747e852ce223bc5d28c49b69dc09d28b9f6df04f3c9d3c18df748b7ac6720",
              "sha256:d556c619122792b5b57b3bbedc37bf6ede2cc6a6e343dccb09537fb3df73c3c8"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
                "start_byte": 33479,
                "end_byte": 34279,
                "value_digest": "sha256:cc620622ac9b1b756f92c497584f93b307854a3def075a345477ac45e9a93b99"
              }
            ]
          }
        ],
        "note": "Across all required targets, Azure REST APIs and pricing services provide documented, stable endpoints, HTTP methods, request parameters, JSON response schemas, HTTP status codes, example payloads, and effect semantics."
      },
      {
        "stage": "operate",
        "signal_code": "target_interface_access",
        "selector_group_id": "target_interface_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.534Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "azure-resource-manager"
          },
          {
            "node_kind": "interface",
            "node_id": "pricing-and-cost"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:573ca29fe9d943a1d3397c8b4116d80dad8fdcc4bbf35c4838dbc47403a9c781",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:5f6fd28fecf901b709fdfac86771bcb9f39de6b6f0b7f1de6ff96a43924099d8",
              "sha256:bd5eec3b2693115d26badbbb0636edb861de7a9176e6068ce296a2675e62fc91"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "retail-prices-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:167a95c819f5a8b1175de5eb871ac1d5f07e35cdf617111aa77be64b38f33b82",
                "start_byte": 5231,
                "end_byte": 6028,
                "value_digest": "sha256:c883979935aa613b52dc9efc85753bbc532a811e1bb29198e3318e5d53592cc2"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c14e5946ac5fecc48d7e4de303f19502f4b0143f70b4798b005d540a25e55404",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0623c7d6e5e8bc508f5283eb09045d01a506883cfd1a5c2be0ecb278f4401aa2",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7",
              "sha256:c59c134af95133f2c80c5c6c5c1ffb107e52b795637fcdc4ccfe75f0c044035a"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "cost-management-permissions"
            },
            "locators": [
              {
                "artifact_digest": "sha256:9fa5dcf7e7f0b387621b300cc17bfdbc35965f51cf2484e813c1a311a3d39cc7",
                "start_byte": 6458,
                "end_byte": 7258,
                "value_digest": "sha256:510f2b524ee0d6fe3adc04dccd6a51b09e85afd46ebca0f2193a9dce3da44f27"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c6b1fc853a8535b52d08ad54dd99f2575d64e67ebf8c78f81d361275857b7dc5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4ebf011a70740bc362818bd6f5c54cc4035d493f9d0f29b990c717e4bf97ebc1",
              "sha256:9ddd24caed136fc61b359cbac00275df85396f94cfd3ba79aca56ff985800f28",
              "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
              "sha256:ec4b68b88759b5b1046c0082c31549200c1f2bb9b637f336983ab5f24321512b"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-rest-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e6cc844f30449fa916a92024ffc63f7ac04489533a9f2d582d52b0b6fca63bf6",
                "start_byte": 7552,
                "end_byte": 8349,
                "value_digest": "sha256:6bf313b5c6f03c6c08d1e143478b62e617538ff1e08bcef0ade78d3949a11d44"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:adfc34e9ab6797a3e08e3de97c89d9781ccae26492fcc388101bda828db492c2",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:348008f55ef26b2e6e1688fc503645f020f8f4263c7a14504de42c35c5d6f59f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:7c98eb7ad7cc31c11ebf56d6b685c66cc55909969f3f3ad12ff32b69d7227128",
              "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-manager-limits"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e527bed1fd52ab093f16f86f10b4d4bdd86c1b34ea2aaea2633afcee5fc6d683",
                "start_byte": 8318,
                "end_byte": 9117,
                "value_digest": "sha256:d261d9dc1d921a09f6121d53ef237cb01952cde9f05af8fdb6f35b533267f9f9"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:453620f56583f5e64fb84f3a679afc4f06207f6375dfcd98db33f847e308afed",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:d7fc99f4ab2d469ba730cf791021230d095b6bf130be1b160503a9432ee4dfe5",
              "sha256:da9e4e5a9b0ff5cdc6b447545d6ea635ba6f3edc669e0419ab83886b4514cc54"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-manager-rest"
            },
            "locators": [
              {
                "artifact_digest": "sha256:1e11cbc08ec10cc8211592e7e356c6d990562d19b8d66d0012a2ff509fd1c8c5",
                "start_byte": 7556,
                "end_byte": 8264,
                "value_digest": "sha256:67f101ba1f3d5445a7edde2b75589c54c13043e24324ff3eebfd5e691e170819"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:06ffdb7db0dc64d937f06d8ac58a901758666712e0563d03a6f436edbc5bec15",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:b304b31bee082de9aad4f6abb7d7da7a3e2c7c829541224b0c347af0c5d644a4",
              "sha256:fc777a3a94946520e0ba0eb2428783897f27151baffcaaa82c36c69bc1d2e572"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "asynchronous-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:140620001c4b8a24e16b3bb066e195b4f1a4d420192825537dbe02f2fd89599f",
                "start_byte": 5100,
                "end_byte": 5892,
                "value_digest": "sha256:d6a962d8299c28c89592b8ebfdb58670f545ad90fd628e2bd7356e1cea947ff6"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:e139df7c4aec45fe07c3c7cf93a0e548525cba00065afea115a7daa79d74bcda",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:37d29852502f8ddef051520e50d2bbd3ff59e036de95459d750de8d69b6ac868",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
              "sha256:975747e852ce223bc5d28c49b69dc09d28b9f6df04f3c9d3c18df748b7ac6720"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "azure-pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:7873dd76744a79ada1a644844fa5f8da10415cd36760910d1644885dfd69d7e7",
                "start_byte": 35860,
                "end_byte": 36658,
                "value_digest": "sha256:d62e5a86d2072fcf7f8c44ccbbe8d29cfedecc6854119b8b038c51bf3109ec81"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:2e14a895bbe8486033e8e2509dc05d8f10a3dd031b3d0d1e0c99fda3e763928b",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:055151cd7e4541b00378aa0fce9903c615fd1f53ae67f44669f7165ed8aecac0",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69",
              "sha256:f8db1e193feaa765a1af9364d17ccd80bbaaa85ded8b23ef9f410b47ad604a93"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "resource-group-api"
            },
            "locators": [
              {
                "artifact_digest": "sha256:b1c68376ef85739904a38ba476f251de2777b8eea5059d56a92ac5d2d5fd5d69",
                "start_byte": 4795,
                "end_byte": 5594,
                "value_digest": "sha256:8e73fccb7ab28e2aa56bd3d56795fdd6f9856a32b50d022b6a7d29d1c7ef8cd4"
              }
            ]
          }
        ],
        "note": "Machine-operable interfaces including REST APIs, Azure CLI, Azure PowerShell, and SDKs are documented and accessible across all assessed Azure service targets."
      }
    ],
    "revision_digest": "sha256:d45bbb78155dd2d5effd1c9fa8b38590b6854a621ceffff10799b645e3065aad"
  }
}