{
  "api_contract": "sourcey.catalog-api/v1",
  "release_id": "sha256:f94358e3c57b6e575ca58c8031b9b7552cbfdb411f937b8ecdc3b042c4980a77",
  "artifact_sha256": "sha256:7472396c2449279d33e7a0fb2426f02a89991501262d1db8c04c81d57bdf9021",
  "data": {
    "revision_contract": "sourcey.agent-readiness-revision/v1alpha1",
    "agent_readiness_profile_id": "arp_01kzf0m4xh9j6rz3b1v8mp5td2",
    "entity_id": "ent_01kyxthgq3w0q894h0tadvr0cq",
    "scope": {
      "product": {
        "key": "sentry-web-api",
        "name": "Sentry Web API"
      },
      "funnel": {
        "key": "issue-operations",
        "name": "Issue and project operations"
      }
    },
    "catalog_binding": {
      "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d",
      "entity_revision_digest": "sha256:0acca7e30e16523f5718208ac027acb0b1b432e023c6310e1ae7161a05b6f422"
    },
    "declaration_revision_digest": "sha256:df394c8bad741315c50fa635b608e071d5022d3f32281d60b6cc623c53012a5c",
    "declaration": {
      "declaration_id": "declaration_sentry_api_issue_operations",
      "provenance": {
        "repository": "sourcey/agent-ready-services",
        "commit": "62b512f0c49352e55a399ba53866a5effa431d71",
        "path": "vendors/se/sentry.yaml",
        "git_blob_oid": "5afa8b37e840e0b23cff9c7368437e5944aa3ec3",
        "blob_digest": "sha256:b4021b863ee3fef9ba7bb4dcd08ff5f958446a3d84f13ec0b1dc0ef9711d3f57"
      },
      "status": "community_declared"
    },
    "lifecycle": "active",
    "effective_from": "2026-08-20T14:33:24.000Z",
    "signals": [
      {
        "stage": "evaluate",
        "signal_code": "eligibility_decidability",
        "selector_group_id": "eligibility_decidability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:56.185Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "service-terms"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:522c87bb63ac8001c34fe82d8084b4c103d56ee2a3dac28ed7e3ac0c20e47504",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:bfccbb51fa3c024dec1055d958ce8235cd34b3dab530c45fb01c6b8977abc158",
              "sha256:cb15a518946e5f6a481ba5ceea201b54152759ec496a779d1edb6431492bef25",
              "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
              "sha256:d8c68496dcee213a4c71346180bea8ad7ef349b104c3e9490e05d6ddbcf19cac"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "service-terms"
            },
            "locators": [
              {
                "artifact_digest": "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
                "start_byte": 17701,
                "end_byte": 18492,
                "value_digest": "sha256:506781e64b18fcd697d8a71f9ad0569c4cf610749869b27ec30e7ff951baee9a"
              },
              {
                "artifact_digest": "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
                "start_byte": 40156,
                "end_byte": 40959,
                "value_digest": "sha256:e3f1e56b6405abf38b1ee03c251d5c51ef0e62ccbae396e052b5befa5030ff39"
              }
            ]
          }
        ],
        "note": "Sentry's terms explicitly define material eligibility conditions, requiring that customers be at least 16 years old, hold necessary rights and consents for submitted data, and warrant that they are not on U.S. restricted party lists or located in embargoed countries."
      },
      {
        "stage": "evaluate",
        "signal_code": "pricing_decidability",
        "selector_group_id": "pricing_decidability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:55:59.830Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "pricing"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c109a7136fda7e87ca4d9cc3b5e40d9cb9917ac88617da65d524164898ac0ca9",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:5a28ff29eb7a1917969e535263cdb5e3a6343eb7f2a1e343d6c35280ead2381c",
              "sha256:6ee0d56590b72ba4327aa692b6f5b0bc6eb8b4981135b882a78c7502a577127a",
              "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
              "sha256:af803614bb8791d99a99c109bbf91e5ff38a41eff22e491560e1f403df769d72"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
                "start_byte": 10091,
                "end_byte": 10889,
                "value_digest": "sha256:09589196c339019255440032eda3217eba8540b7ea6c5ed44937faa2fc046c55"
              },
              {
                "artifact_digest": "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
                "start_byte": 15680,
                "end_byte": 16485,
                "value_digest": "sha256:ef485c2205f1955aaf420d25060d68d1310d605605cfba83638a79c80d805267"
              }
            ]
          }
        ],
        "note": "Sentry explicitly discloses pricing tiers (Free Developer plan at $0, Team plan at $26/mo when billed annually, Business plan at $80/mo) and pay-as-you-go rates in USD for usage exceeding base quotas."
      },
      {
        "stage": "evaluate",
        "signal_code": "service_discovery",
        "selector_group_id": "service_discovery-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:11.048Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "api-reference"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:45325e642b14062fdde5003c01db8be1db105209a01258ea044669dd1c0f441d",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
              "sha256:64c91ed500336db29f3b898a923dd158b24dc71d2c4d653558416de008ecf71d",
              "sha256:9af24c95d017b001878c84614a329c98965c001174e2b835401694849b039607",
              "sha256:e018477628f8313e9827fc3c655d44cb668807159993a59449af9ddf6ec79450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "api-reference"
            },
            "locators": [
              {
                "artifact_digest": "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
                "start_byte": 2021,
                "end_byte": 2819,
                "value_digest": "sha256:4eb255e37b88b093d846d13a1f0beb383c82818fb3ad8583f9b160b53f507c5d"
              },
              {
                "artifact_digest": "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
                "start_byte": 2820,
                "end_byte": 3620,
                "value_digest": "sha256:290865711cee24bdeafd87c9db9a112c49d5b39df00b99b9f565f199246ef150"
              }
            ]
          }
        ],
        "note": "The Sentry web API is publicly documented under v0, and stable base domain entrypoints are explicitly identified (e.g., sentry.io, us.sentry.io, and de.sentry.io)."
      },
      {
        "stage": "evaluate",
        "signal_code": "terms_access",
        "selector_group_id": "terms_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:56.185Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "service-terms"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:522c87bb63ac8001c34fe82d8084b4c103d56ee2a3dac28ed7e3ac0c20e47504",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:9043949c4d8b4439ed17d101425f142c6fafe0a7f63143fe231435560f3dbf20",
              "sha256:cb15a518946e5f6a481ba5ceea201b54152759ec496a779d1edb6431492bef25",
              "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
              "sha256:d8c68496dcee213a4c71346180bea8ad7ef349b104c3e9490e05d6ddbcf19cac"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "service-terms"
            },
            "locators": [
              {
                "artifact_digest": "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
                "start_byte": 9707,
                "end_byte": 10504,
                "value_digest": "sha256:e4ed6663896450b56ad912700e926852026c43bd309eb2fa34b18398effbf73b"
              },
              {
                "artifact_digest": "sha256:cfe624af516690115e577b5aad3a8ff8a1bfc077098f48f77a79feb4453600ea",
                "start_byte": 7274,
                "end_byte": 8098,
                "value_digest": "sha256:915700905f7cb6f419696442c822aba4d372e9176b8c332fa2e6f001da70fb55"
              }
            ]
          }
        ],
        "note": "The Sentry Terms of Service (version 3.0.0, February 12, 2024) are stable, retrievable, and define the complete legal agreement governing use of the service."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_control_operability",
        "selector_group_id": "access_control_operability-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:56:52.386Z",
        "tested_surfaces": [
          {
            "node_kind": "endpoint",
            "node_id": "registration"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:9abe4424089f08de3698e9ad6ca9f4c5b5de64934c83ce6f04cc7fc8fcc391e0",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
              "sha256:1a637c8bddfdc50563fb6ae30bc31a209c9985ee6785ed4db39d9d0b7f2a0aaf",
              "sha256:613be4aa52d0ec141684ceef57ecf40312882a8e5f1506026236ad6b71e98e8e",
              "sha256:759435422d0cf1a2a279bf175b117ea07115fae13417110e51517328ae442f5a",
              "sha256:a2eaf0a8e16122221393e1946f772e477aa90bb21988ef0ab8fb73ecf9f20196",
              "sha256:d38239ce7bd22e115d7ebd88c933f43bf39a2d069dcba700bbde368dbe59a066"
            ],
            "source_surface": {
              "node_kind": "endpoint",
              "node_id": "registration"
            },
            "locators": [
              {
                "artifact_digest": "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
                "start_byte": 7174,
                "end_byte": 7970,
                "value_digest": "sha256:301cd5d234944b72b07508e57d8257ddd77396e189b095aa9c2f488af00b6704"
              }
            ]
          }
        ],
        "note": "The signup page provides form fields for Name, Organization, Email, Password, and Data Storage Location with a submit button ('Get set up'), but it includes a reCAPTCHA notice ('This form is protected by reCAPTCHA'), leaving the initial account creation flow only partially operable for automated agents without human interaction."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_entrypoint_stability",
        "selector_group_id": "access_entrypoint_stability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:52.386Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "account-signup"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:9abe4424089f08de3698e9ad6ca9f4c5b5de64934c83ce6f04cc7fc8fcc391e0",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
              "sha256:150dd90ab7b543d42bee082af1b1e7d6b203be88cd1808a04925e3899e44dec1",
              "sha256:1a637c8bddfdc50563fb6ae30bc31a209c9985ee6785ed4db39d9d0b7f2a0aaf",
              "sha256:759435422d0cf1a2a279bf175b117ea07115fae13417110e51517328ae442f5a",
              "sha256:a2eaf0a8e16122221393e1946f772e477aa90bb21988ef0ab8fb73ecf9f20196",
              "sha256:d38239ce7bd22e115d7ebd88c933f43bf39a2d069dcba700bbde368dbe59a066"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "account-signup"
            },
            "locators": [
              {
                "artifact_digest": "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
                "start_byte": 4837,
                "end_byte": 5626,
                "value_digest": "sha256:d250ce4fccd2ac9a4c509da8f30e8f1ede029fc995b7e5bbfe0b7c49c006f4d6"
              },
              {
                "artifact_digest": "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
                "start_byte": 7174,
                "end_byte": 7970,
                "value_digest": "sha256:301cd5d234944b72b07508e57d8257ddd77396e189b095aa9c2f488af00b6704"
              }
            ]
          }
        ],
        "note": "Sentry provides a stable, canonical self-service registration entrypoint at https://sentry.io/signup/ with options to sign up via account details or single sign-on providers like Google, GitHub, and Azure DevOps."
      },
      {
        "stage": "sign_up",
        "signal_code": "captcha_compatible_access",
        "selector_group_id": "captcha_compatible_access-primary",
        "value": "no",
        "observed_at": "2026-08-20T15:56:52.386Z",
        "tested_surfaces": [
          {
            "node_kind": "endpoint",
            "node_id": "registration"
          },
          {
            "node_kind": "resource",
            "node_id": "account-signup"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:9abe4424089f08de3698e9ad6ca9f4c5b5de64934c83ce6f04cc7fc8fcc391e0",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
              "sha256:1a637c8bddfdc50563fb6ae30bc31a209c9985ee6785ed4db39d9d0b7f2a0aaf",
              "sha256:613be4aa52d0ec141684ceef57ecf40312882a8e5f1506026236ad6b71e98e8e",
              "sha256:759435422d0cf1a2a279bf175b117ea07115fae13417110e51517328ae442f5a",
              "sha256:a2eaf0a8e16122221393e1946f772e477aa90bb21988ef0ab8fb73ecf9f20196",
              "sha256:d38239ce7bd22e115d7ebd88c933f43bf39a2d069dcba700bbde368dbe59a066"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "account-signup"
            },
            "locators": [
              {
                "artifact_digest": "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
                "start_byte": 7174,
                "end_byte": 7970,
                "value_digest": "sha256:301cd5d234944b72b07508e57d8257ddd77396e189b095aa9c2f488af00b6704"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:9abe4424089f08de3698e9ad6ca9f4c5b5de64934c83ce6f04cc7fc8fcc391e0",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
              "sha256:1a637c8bddfdc50563fb6ae30bc31a209c9985ee6785ed4db39d9d0b7f2a0aaf",
              "sha256:613be4aa52d0ec141684ceef57ecf40312882a8e5f1506026236ad6b71e98e8e",
              "sha256:759435422d0cf1a2a279bf175b117ea07115fae13417110e51517328ae442f5a",
              "sha256:a2eaf0a8e16122221393e1946f772e477aa90bb21988ef0ab8fb73ecf9f20196",
              "sha256:d38239ce7bd22e115d7ebd88c933f43bf39a2d069dcba700bbde368dbe59a066"
            ],
            "source_surface": {
              "node_kind": "endpoint",
              "node_id": "registration"
            },
            "locators": [
              {
                "artifact_digest": "sha256:05faa932f97e078417a860fa2d703967a7c5ca5b041e46a71eefa6b2dcb6e4c5",
                "start_byte": 7174,
                "end_byte": 7970,
                "value_digest": "sha256:301cd5d234944b72b07508e57d8257ddd77396e189b095aa9c2f488af00b6704"
              }
            ]
          }
        ],
        "note": "Sentry explicitly states that the registration form is protected by reCAPTCHA, and no supported agent-safe bypass is established in the admitted evidence."
      },
      {
        "stage": "sign_up",
        "signal_code": "delegated_identity_access",
        "selector_group_id": "delegated_identity_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:42.050Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0c0ac2a2fca3f03dd697c6a4329358d998d806f5c7b8c91cee264bc802070c74",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:cdbdef9b07860d6d277da9d8bf69bf0eadd6a0b232196f945752689dedd09791",
              "sha256:dfc1809eab855ddc761d56b8268166e5f4abf2e8d0cdddac76f242cc29041814",
              "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
              "sha256:fda38180303f5144e6fb49309c270bc679016a2c9730453d1bb70e78082e2450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 3409,
                "end_byte": 4198,
                "value_digest": "sha256:68606515017ec8ea1fb5a65c44f9e8241035c55a548a26e416a71c7963f9aa66"
              },
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 7164,
                "end_byte": 7958,
                "value_digest": "sha256:34792ed5d1e1c889b70e92c9f100e9c4afa8193ac21de25e407e5bf2fedeb8cb"
              }
            ]
          }
        ],
        "note": "Sentry supports delegated authorization via OAuth2 (authorization code grant) with defined scopes, refresh tokens, and a Device Authorization Flow (RFC 8628) for headless CLI and automated environments."
      },
      {
        "stage": "sign_up",
        "signal_code": "phone_verification_compatible",
        "selector_group_id": "phone_verification_compatible-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:52.386Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "account-signup"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [],
        "note": "The listed form fields do not establish that downstream phone verification is absent."
      },
      {
        "stage": "pay",
        "signal_code": "checkout_operability",
        "selector_group_id": "checkout_operability-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:36.374Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "pricing"
          },
          {
            "node_kind": "resource",
            "node_id": "self-service-plan"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [],
        "note": "Sentry pricing and help documentation mention checkout for upgrades in settings/billing/checkout and annual/prepaid options during checkout. However, the evidence does not detail a complete deterministic flow for an agent to construct checkout, hand off approval safely, and resume."
      },
      {
        "stage": "pay",
        "signal_code": "commitment_disclosure",
        "selector_group_id": "commitment_disclosure-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:55:59.830Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "pricing"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:c109a7136fda7e87ca4d9cc3b5e40d9cb9917ac88617da65d524164898ac0ca9",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:5a28ff29eb7a1917969e535263cdb5e3a6343eb7f2a1e343d6c35280ead2381c",
              "sha256:6ee0d56590b72ba4327aa692b6f5b0bc6eb8b4981135b882a78c7502a577127a",
              "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
              "sha256:9ae5deeaf5ab178999214650da19bd7cc0ef34d0d0bf48c7b76be1bd21f76c19"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "pricing"
            },
            "locators": [
              {
                "artifact_digest": "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
                "start_byte": 10890,
                "end_byte": 11686,
                "value_digest": "sha256:9065c7392bb75b37766438070f248d1e8ec7a94f5382e4c90d20ece5b3c1f50c"
              },
              {
                "artifact_digest": "sha256:84f9686b1d5a7beb91ddbf94ae199636403876754cc82a5584742695986c1953",
                "start_byte": 14880,
                "end_byte": 15679,
                "value_digest": "sha256:dccd4820e7d408d3312ac0b6525145c879712aa8eb31800d43f883e7c1b92c77"
              }
            ]
          }
        ],
        "note": "Sentry discloses recurring pricing for Team ($26/mo) and Business ($80/mo) plans along with pay-as-you-go error rates in USD, but notes that annual and prepaid billing options with additional discounts are available during checkout, leaving those discounted terms contextual."
      },
      {
        "stage": "pay",
        "signal_code": "payment_authorization",
        "selector_group_id": "payment_authorization-primary",
        "value": "unknown",
        "observed_at": "2026-08-20T15:56:36.374Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "pricing"
          },
          {
            "node_kind": "resource",
            "node_id": "self-service-plan"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [],
        "note": "The evidence references billing checkout and paying for plan upgrades, but does not document a delegated payment rail or human-confirmed authorization workflow with explicit scoped delegation and receipts."
      },
      {
        "stage": "pay",
        "signal_code": "self_service_purchase",
        "selector_group_id": "self_service_purchase-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:36.374Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "pricing"
          },
          {
            "node_kind": "resource",
            "node_id": "self-service-plan"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:fa6e1a488e59ff0f47d58567acd9b3082b1505f77c8a2a143a17dd8dd6c44b38",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0fc3261831af6b8f1a3296c602ab7d3377d8036f7810f1291be08559832a9f47",
              "sha256:2345b904c7cc6f3538a9237aca315fab0f63f4327fe5e69e471197dce7fc254c",
              "sha256:4e1976ef092179df38c7d7943d85b0b8be4609aef9b6a882eaa7c9667d9e823b",
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "self-service-plan"
            },
            "locators": [
              {
                "artifact_digest": "sha256:0fc3261831af6b8f1a3296c602ab7d3377d8036f7810f1291be08559832a9f47",
                "start_byte": 2959,
                "end_byte": 3684,
                "value_digest": "sha256:42fa465f2b4660659fad87d47e7d4d630d75c3da491b0822a1811ca383655bc7"
              }
            ]
          }
        ],
        "note": "Sentry's Help Center explicitly states that existing customers can review plans and upgrade through the Manage Plan flow in their Sentry account settings billing checkout URL, providing a direct self-service path to paid access without requiring sales intervention for self-serve plans."
      },
      {
        "stage": "provision",
        "signal_code": "access_material_delivery",
        "selector_group_id": "access_material_delivery-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:42.050Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0c0ac2a2fca3f03dd697c6a4329358d998d806f5c7b8c91cee264bc802070c74",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:b4d35a16b956603eadcbdfe6ed93c99afdb91533d1294a9da3a4dea0a7028ecf",
              "sha256:cdbdef9b07860d6d277da9d8bf69bf0eadd6a0b232196f945752689dedd09791",
              "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
              "sha256:fda38180303f5144e6fb49309c270bc679016a2c9730453d1bb70e78082e2450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 4886,
                "end_byte": 5631,
                "value_digest": "sha256:087de26cfe0d35c2bd5b011cd235b84624633c3da35f400cb23c862b42fee7ab"
              },
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 7164,
                "end_byte": 7958,
                "value_digest": "sha256:34792ed5d1e1c889b70e92c9f100e9c4afa8193ac21de25e407e5bf2fedeb8cb"
              }
            ]
          }
        ],
        "note": "Sentry documents agent-usable OAuth token exchange and Device Authorization Grant flows to deliver access tokens."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_completion",
        "selector_group_id": "provisioning_completion-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:22.383Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "project-provisioning"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:6ff91bdf477b38c10b66f881336fcef4c88bba430fea64c14534adeb9fc09d80",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:12bfbe255d624f7860d33694564ab16582ebce9ba5d5db793fbe81cbc21fd8c0",
              "sha256:54837ecb6d45a34f19b54b7735ec7a203b64ff333505f4bd9393e2abd9a309ed",
              "sha256:572bf842e19da0da855d1945531b153e0b77327e830d8c34aa2de3f4483e5022",
              "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "project-provisioning"
            },
            "locators": [
              {
                "artifact_digest": "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
                "start_byte": 5663,
                "end_byte": 6459,
                "value_digest": "sha256:8a2fe83f81f8aafe9904f2026847e2cf8bea3e90e9ed970233e4f8bddf4165e0"
              },
              {
                "artifact_digest": "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
                "start_byte": 6460,
                "end_byte": 7164,
                "value_digest": "sha256:852baabc265ff0c71f4b9b78273ab6518f943e7111c2910e27bc6067f493c7b9"
              }
            ]
          }
        ],
        "note": "The POST project creation endpoint synchronously returns a 201 success response containing the created project resource object."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_operability",
        "selector_group_id": "provisioning_operability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:42.050Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "authentication"
          },
          {
            "node_kind": "resource",
            "node_id": "project-provisioning"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0c0ac2a2fca3f03dd697c6a4329358d998d806f5c7b8c91cee264bc802070c74",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:ba62da7ae7fe5695f305325faf1f87129fdae5bad8c276be5ca0428c00aa3b75",
              "sha256:cdbdef9b07860d6d277da9d8bf69bf0eadd6a0b232196f945752689dedd09791",
              "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
              "sha256:fda38180303f5144e6fb49309c270bc679016a2c9730453d1bb70e78082e2450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 5632,
                "end_byte": 6367,
                "value_digest": "sha256:55aa44b29bde97e816cb50530614a906f3f95a2e4694275c3c0d6bef3f47fd6d"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:6ff91bdf477b38c10b66f881336fcef4c88bba430fea64c14534adeb9fc09d80",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:12bfbe255d624f7860d33694564ab16582ebce9ba5d5db793fbe81cbc21fd8c0",
              "sha256:54837ecb6d45a34f19b54b7735ec7a203b64ff333505f4bd9393e2abd9a309ed",
              "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
              "sha256:a224481d9ac17fb69100b324860a6e646939464e4f93ae4b380fd7eecc2da3ae"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "project-provisioning"
            },
            "locators": [
              {
                "artifact_digest": "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
                "start_byte": 5663,
                "end_byte": 6459,
                "value_digest": "sha256:8a2fe83f81f8aafe9904f2026847e2cf8bea3e90e9ed970233e4f8bddf4165e0"
              }
            ]
          }
        ],
        "note": "Project provisioning can be initiated via an HTTP POST request to the team's projects API endpoint using a bearer auth token with project:write or project:admin scopes."
      },
      {
        "stage": "operate",
        "signal_code": "credential_lifecycle",
        "selector_group_id": "credential_lifecycle-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:56:42.050Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0c0ac2a2fca3f03dd697c6a4329358d998d806f5c7b8c91cee264bc802070c74",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:abe400fa5d76ff4fea2b0f50d0c3337312034fe155200a7d2596e2c3ba1d6a4c",
              "sha256:cdbdef9b07860d6d277da9d8bf69bf0eadd6a0b232196f945752689dedd09791",
              "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
              "sha256:fda38180303f5144e6fb49309c270bc679016a2c9730453d1bb70e78082e2450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 16556,
                "end_byte": 16975,
                "value_digest": "sha256:12bafbf1aaa37c0845072bb32f083348f4507b55e12d782b3f3535b7775184a6"
              },
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 5632,
                "end_byte": 6367,
                "value_digest": "sha256:55aa44b29bde97e816cb50530614a906f3f95a2e4694275c3c0d6bef3f47fd6d"
              }
            ]
          }
        ],
        "note": "Sentry documents access token expiration and token refresh operations via POST requests, as well as 401 error handling for expired or revoked tokens. However, the provided documentation does not detail complete agent-operable credential rotation, revocation endpoints, or recovery mechanisms."
      },
      {
        "stage": "operate",
        "signal_code": "failure_contract",
        "selector_group_id": "failure_contract-primary",
        "value": "partial",
        "observed_at": "2026-08-20T15:56:44.597Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "rate-limits"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:f47066bd0c9a6df3b469982e64a8590133d9117b6db2fb65a877690ae5e9c5ee",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:83d7526e67d8e5f97f6f1d652a3c9fd513d4a337253baa404574e7fcdab3d7f0",
              "sha256:84fc874b212154ebfa6564f786029f031667d61a62623246ef700a7a54668d4b",
              "sha256:bf0289287a248e90f8d83f246ba3d853b77eb1347f9a2fe1eaab105ae902aeee",
              "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "rate-limits"
            },
            "locators": [
              {
                "artifact_digest": "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
                "start_byte": 1619,
                "end_byte": 2418,
                "value_digest": "sha256:28b80e9c2ea4ac74620429160c4cb731d8e4fa719685946fedf0a905ac961725"
              },
              {
                "artifact_digest": "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
                "start_byte": 2419,
                "end_byte": 3215,
                "value_digest": "sha256:14fe7c6ef197d6b48d04c74a0fdf467f21223c2031060b7b05e181b38ee51495"
              }
            ]
          }
        ],
        "note": "Sentry documents rate limit enforcement (fixed window requests per second and concurrent limits) and response headers for limit tracking. However, explicit details on safe retries, idempotency semantics, request cancellation, or reconciliation are not fully provided in the captured evidence."
      },
      {
        "stage": "operate",
        "signal_code": "operation_authentication",
        "selector_group_id": "operation_authentication-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:42.050Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0c0ac2a2fca3f03dd697c6a4329358d998d806f5c7b8c91cee264bc802070c74",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:cdbdef9b07860d6d277da9d8bf69bf0eadd6a0b232196f945752689dedd09791",
              "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
              "sha256:f619ae4b437612f2f67f974696d219604936ebe971103bb8104ef0aa059c3727",
              "sha256:fda38180303f5144e6fb49309c270bc679016a2c9730453d1bb70e78082e2450"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 1807,
                "end_byte": 2607,
                "value_digest": "sha256:e483f8c30845501753d9f539a4f1b048e8852bf9f9f90577dc51f87432a8500c"
              },
              {
                "artifact_digest": "sha256:e88c8759aad7fb0f4a904e9695d0003a145faf1e773ae8db782a949e2b4e22f2",
                "start_byte": 2608,
                "end_byte": 3408,
                "value_digest": "sha256:586509df0476af2abe8a0ed9421b9057c67c081de5a40e09f51c85382adf6f2d"
              }
            ]
          }
        ],
        "note": "Request-time authentication with scoped authority is documented using Bearer authentication tokens with specific scopes, user personal tokens, internal integration tokens, and OAuth2 access tokens."
      },
      {
        "stage": "operate",
        "signal_code": "operation_contract",
        "selector_group_id": "operation_contract-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.619Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "issue-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:45325e642b14062fdde5003c01db8be1db105209a01258ea044669dd1c0f441d",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
              "sha256:9af24c95d017b001878c84614a329c98965c001174e2b835401694849b039607",
              "sha256:e018477628f8313e9827fc3c655d44cb668807159993a59449af9ddf6ec79450",
              "sha256:f0bd31f5d8185cfb77eed47beafe20f0a722a1e7fb07a070e743bd08b2153221"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "api-reference"
            },
            "locators": [
              {
                "artifact_digest": "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
                "start_byte": 2021,
                "end_byte": 2819,
                "value_digest": "sha256:4eb255e37b88b093d846d13a1f0beb383c82818fb3ad8583f9b160b53f507c5d"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:f47066bd0c9a6df3b469982e64a8590133d9117b6db2fb65a877690ae5e9c5ee",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:83d7526e67d8e5f97f6f1d652a3c9fd513d4a337253baa404574e7fcdab3d7f0",
              "sha256:84fc874b212154ebfa6564f786029f031667d61a62623246ef700a7a54668d4b",
              "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
              "sha256:f176005ec5046f52c3a566573cdc125ab2270e9db36271022ae7f796e6ca21cf"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "rate-limits"
            },
            "locators": [
              {
                "artifact_digest": "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
                "start_byte": 1619,
                "end_byte": 2418,
                "value_digest": "sha256:28b80e9c2ea4ac74620429160c4cb731d8e4fa719685946fedf0a905ac961725"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:ca0c9dd40f7874932fb219fd4af6276f546155f6d50145138ec90ac752964123",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:3c2d03871cbe117939a8a78737aacb0e834eb4524bca44899315a68b2a9a026c",
              "sha256:629e7322d73fcf1491ef382527c2673a86782ef4ccddfccc7af0072692bde5e7",
              "sha256:a2f97a95b5a8bfee2cb35f0b46faf5b535d57fc96e285d7ba5548e8e56e3b7a2",
              "sha256:a917820e9dd5ef3970ab8b222360730d2cfc2af698c6d97468e24b051d3e5c1b"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "permissions"
            },
            "locators": [
              {
                "artifact_digest": "sha256:a2f97a95b5a8bfee2cb35f0b46faf5b535d57fc96e285d7ba5548e8e56e3b7a2",
                "start_byte": 1906,
                "end_byte": 2705,
                "value_digest": "sha256:ac8786bd52eb268d61c312f512bb49bcb5b8286ea6000b3c172641fee339e01d"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:5194214d92b8e46434a1ee993a5bfecf1d864bd880be39b21befdb4eae52011b",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:111fe10493663b49523440fee76aa4ebbafe83393b1a6177b49bbe8a8cf1b829",
              "sha256:42772ea3ae5a9999dcd450d19ca3fb2c213fb3535be720681a621724bee5e1dc",
              "sha256:ab7ff946576a91de39d1b9216b10f7d43ea8c68a2eca1e88c9c676e6e2060880",
              "sha256:f3526b7e3172ef428adf499d8a5111a154a4ce070804ba65066041cb136af5b3"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "issue-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:42772ea3ae5a9999dcd450d19ca3fb2c213fb3535be720681a621724bee5e1dc",
                "start_byte": 2830,
                "end_byte": 3627,
                "value_digest": "sha256:3add99255d242c0fdac5e5e60327919bcbef88ed43f7512c9a510de678d7dbe7"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:6ff91bdf477b38c10b66f881336fcef4c88bba430fea64c14534adeb9fc09d80",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:12bfbe255d624f7860d33694564ab16582ebce9ba5d5db793fbe81cbc21fd8c0",
              "sha256:54837ecb6d45a34f19b54b7735ec7a203b64ff333505f4bd9393e2abd9a309ed",
              "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
              "sha256:a224481d9ac17fb69100b324860a6e646939464e4f93ae4b380fd7eecc2da3ae"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "project-provisioning"
            },
            "locators": [
              {
                "artifact_digest": "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
                "start_byte": 5663,
                "end_byte": 6459,
                "value_digest": "sha256:8a2fe83f81f8aafe9904f2026847e2cf8bea3e90e9ed970233e4f8bddf4165e0"
              }
            ]
          }
        ],
        "note": "The API reference, issue operations, permissions, project creation, and rate limits documentation clearly define endpoints, HTTP methods, required scopes, request path/body parameters, response status codes, and response schemas."
      },
      {
        "stage": "operate",
        "signal_code": "target_interface_access",
        "selector_group_id": "target_interface_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.619Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "issue-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:45325e642b14062fdde5003c01db8be1db105209a01258ea044669dd1c0f441d",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
              "sha256:9af24c95d017b001878c84614a329c98965c001174e2b835401694849b039607",
              "sha256:e018477628f8313e9827fc3c655d44cb668807159993a59449af9ddf6ec79450",
              "sha256:f0bd31f5d8185cfb77eed47beafe20f0a722a1e7fb07a070e743bd08b2153221"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "api-reference"
            },
            "locators": [
              {
                "artifact_digest": "sha256:18cb99da16286a0e81f2b25f2ec2b84b8cc0bcf92f56bcf0b33cc94b65e1c223",
                "start_byte": 2021,
                "end_byte": 2819,
                "value_digest": "sha256:4eb255e37b88b093d846d13a1f0beb383c82818fb3ad8583f9b160b53f507c5d"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:f47066bd0c9a6df3b469982e64a8590133d9117b6db2fb65a877690ae5e9c5ee",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:83d7526e67d8e5f97f6f1d652a3c9fd513d4a337253baa404574e7fcdab3d7f0",
              "sha256:84fc874b212154ebfa6564f786029f031667d61a62623246ef700a7a54668d4b",
              "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
              "sha256:f176005ec5046f52c3a566573cdc125ab2270e9db36271022ae7f796e6ca21cf"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "rate-limits"
            },
            "locators": [
              {
                "artifact_digest": "sha256:dce72df22f0d916a84acebbaa1daf7cae66dd3178d97b367c6d014ea70e099b1",
                "start_byte": 1619,
                "end_byte": 2418,
                "value_digest": "sha256:28b80e9c2ea4ac74620429160c4cb731d8e4fa719685946fedf0a905ac961725"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:ca0c9dd40f7874932fb219fd4af6276f546155f6d50145138ec90ac752964123",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:3c2d03871cbe117939a8a78737aacb0e834eb4524bca44899315a68b2a9a026c",
              "sha256:629e7322d73fcf1491ef382527c2673a86782ef4ccddfccc7af0072692bde5e7",
              "sha256:a2f97a95b5a8bfee2cb35f0b46faf5b535d57fc96e285d7ba5548e8e56e3b7a2",
              "sha256:a917820e9dd5ef3970ab8b222360730d2cfc2af698c6d97468e24b051d3e5c1b"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "permissions"
            },
            "locators": [
              {
                "artifact_digest": "sha256:a2f97a95b5a8bfee2cb35f0b46faf5b535d57fc96e285d7ba5548e8e56e3b7a2",
                "start_byte": 1906,
                "end_byte": 2705,
                "value_digest": "sha256:ac8786bd52eb268d61c312f512bb49bcb5b8286ea6000b3c172641fee339e01d"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:5194214d92b8e46434a1ee993a5bfecf1d864bd880be39b21befdb4eae52011b",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:111fe10493663b49523440fee76aa4ebbafe83393b1a6177b49bbe8a8cf1b829",
              "sha256:42772ea3ae5a9999dcd450d19ca3fb2c213fb3535be720681a621724bee5e1dc",
              "sha256:ab7ff946576a91de39d1b9216b10f7d43ea8c68a2eca1e88c9c676e6e2060880",
              "sha256:f3526b7e3172ef428adf499d8a5111a154a4ce070804ba65066041cb136af5b3"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "issue-operations"
            },
            "locators": [
              {
                "artifact_digest": "sha256:42772ea3ae5a9999dcd450d19ca3fb2c213fb3535be720681a621724bee5e1dc",
                "start_byte": 2830,
                "end_byte": 3627,
                "value_digest": "sha256:3add99255d242c0fdac5e5e60327919bcbef88ed43f7512c9a510de678d7dbe7"
              }
            ]
          },
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:6ff91bdf477b38c10b66f881336fcef4c88bba430fea64c14534adeb9fc09d80",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:12bfbe255d624f7860d33694564ab16582ebce9ba5d5db793fbe81cbc21fd8c0",
              "sha256:54837ecb6d45a34f19b54b7735ec7a203b64ff333505f4bd9393e2abd9a309ed",
              "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
              "sha256:a224481d9ac17fb69100b324860a6e646939464e4f93ae4b380fd7eecc2da3ae"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "project-provisioning"
            },
            "locators": [
              {
                "artifact_digest": "sha256:957c8d25bc0efe83c5835cbea5b92c94d03e968f60e2800f5c7c079201a610f3",
                "start_byte": 5663,
                "end_byte": 6459,
                "value_digest": "sha256:8a2fe83f81f8aafe9904f2026847e2cf8bea3e90e9ed970233e4f8bddf4165e0"
              }
            ]
          }
        ],
        "note": "Sentry provides a usable Web API interface for all essential targets including managing organizations, teams, events, issues, projects, permissions, and rate limit tracking via HTTP endpoints."
      }
    ],
    "revision_digest": "sha256:f4aed7a4224898cdac6d922746b24fee741bdbb2ea56678b0b2c5482385fd438"
  }
}