[{"data":1,"prerenderedAt":2890},["ShallowReactive",2],{"cycle-doc-design-c123-owasp-agentic-tour-v2.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":22},{"id":5,"title":6},"c123","Compliance Frameworks",{"id":8,"label":9},"design","Design","owasp-agentic-tour-v2.md","The addressable tour: where Qpoint is strongest against the OWASP® Agentic Top 10",[13,14,15,16,17,18,19,20,21],"The shift","The route: five stops, plus an opening and a close","Stop 1 · Source health","Stop 2 · MCP: watch it, and tune it to suit you","Stops 3–5 in brief","What's new (product asks)","What the artboards decided (2026-10-27)","The Drill beat, and the lab tour (2026-10-27)","Open",{"type":23,"children":24},"root",[25,57,83,89,109,127,179,192,197,417,429,434,444,454,641,653,661,705,715,725,730,739,749,833,838,846,1056,1068,1077,1086,1091,1194,1199,1204,1284,1297,1369,1374,1434,1444,1541,1549,1695,1705,1742,1767,1782,1858,1873,1961,1999,2004,2024,2068,2085,2394,2404,2734,2742,2840,2844],{"type":26,"tag":27,"props":28,"children":29},"element","p",{},[30,33,40,42,48,50,55],{"type":31,"value":32},"text","Mark, 2026-10-27 (",{"type":26,"tag":34,"props":35,"children":37},"a",{"href":36},"\u002Fcycles\u002Fdesign\u002Fc123\u002Fdoc\u002Fowasp-agentic-prompt",[38],{"type":31,"value":39},"prompt",{"type":31,"value":41},"): design the tour around the parts of the Top 10 Qpoint can most address. Source contamination becomes ",{"type":26,"tag":43,"props":44,"children":45},"strong",{},[46],{"type":31,"value":47},"source health",{"type":31,"value":49},". MCP concerns become ",{"type":26,"tag":43,"props":51,"children":52},{},[53],{"type":31,"value":54},"how we watch, and how you tune it to your organization",{"type":31,"value":56},".",{"type":26,"tag":27,"props":58,"children":59},{},[60,62,73,75,82],{"type":31,"value":61},"This replaces the ten-stop walk in ",{"type":26,"tag":34,"props":63,"children":65},{"href":64},"\u002Fcycles\u002Fdesign\u002Fc123\u002Fdoc\u002Fowasp-agentic-tour",[66],{"type":26,"tag":67,"props":68,"children":70},"code",{"className":69},[],[71],{"type":31,"value":72},"owasp-agentic-tour.md",{"type":31,"value":74}," §3 as the tour we build first. That file keeps the per-risk map (§1), the stop anatomy Mark liked (§3), the shared content record (§4) and the attribution footer (§5). The concept canvas has the new stops: ",{"type":26,"tag":34,"props":76,"children":80},{"href":77,"rel":78},"https:\u002F\u002Fclaude.ai\u002Fartifact\u002FV4qJ4c8sgfuTZv1nvcfmy1",[79],"nofollow",[81],{"type":31,"value":77},{"type":31,"value":56},{"type":26,"tag":84,"props":85,"children":87},"h2",{"id":86},"the-shift",[88],{"type":31,"value":13},{"type":26,"tag":27,"props":90,"children":91},{},[92,94,99,101,107],{"type":31,"value":93},"v1 walked the paper's ten risks in order. This tour is organized by the ",{"type":26,"tag":43,"props":95,"children":96},{},[97],{"type":31,"value":98},"customer's concern",{"type":31,"value":100},", and it only goes where Qpoint can watch ",{"type":26,"tag":102,"props":103,"children":104},"em",{},[105],{"type":31,"value":106},"and",{"type":31,"value":108}," act. Each stop names the risks and numbered mitigations it answers, so the paper is still the spine; it's just not the agenda. Risks Qpoint mostly can't address (ASI06 memory internals, ASI09 human trust) get one honest line in the closing step and a link to the paper, not a stop.",{"type":26,"tag":27,"props":110,"children":111},{},[112,117,119,125],{"type":26,"tag":43,"props":113,"children":114},{},[115],{"type":31,"value":116},"Every stop has four beats",{"type":31,"value":118}," (Drill added by Mark, 2026-10-27; see ",{"type":26,"tag":34,"props":120,"children":122},{"href":121},"#the-drill-beat-and-the-lab-tour-2026-10-27",[123],{"type":31,"value":124},"§ The Drill beat",{"type":31,"value":126},"):",{"type":26,"tag":128,"props":129,"children":130},"ol",{},[131,142,152,169],{"type":26,"tag":132,"props":133,"children":134},"li",{},[135,140],{"type":26,"tag":43,"props":136,"children":137},{},[138],{"type":31,"value":139},"Watch:",{"type":31,"value":141}," what Qpoint sees, on the real page, with the region ringed.",{"type":26,"tag":132,"props":143,"children":144},{},[145,150],{"type":26,"tag":43,"props":146,"children":147},{},[148],{"type":31,"value":149},"Tune:",{"type":31,"value":151}," how you set it to suit your organization: which teams, how strict, what's allowed, until when. Shown in the Policy Config draft with Change impact.",{"type":26,"tag":132,"props":153,"children":154},{},[155,160,162,167],{"type":26,"tag":43,"props":156,"children":157},{},[158],{"type":31,"value":159},"Drill:",{"type":31,"value":161}," what would happen if the violation occurred. Example instances show the cards it would light, the panel shows your settings today, and ",{"type":26,"tag":43,"props":163,"children":164},{},[165],{"type":31,"value":166},"Simulate violation",{"type":31,"value":168}," sends real, clearly marked test messages through your channels.",{"type":26,"tag":132,"props":170,"children":171},{},[172,177],{"type":26,"tag":43,"props":173,"children":174},{},[175],{"type":31,"value":176},"Prove:",{"type":31,"value":178}," what Qpoint keeps as evidence (findings, enforcement events, config history), which is what framework detail and the export use.",{"type":26,"tag":27,"props":180,"children":181},{},[182,184,190],{"type":31,"value":183},"The panel anatomy is the ASI04 stop Mark liked. The beat is the panel's sub-step (",{"type":26,"tag":67,"props":185,"children":187},{"className":186},[],[188],{"type":31,"value":189},"Watch · Tune · Drill · Prove",{"type":31,"value":191},").",{"type":26,"tag":84,"props":193,"children":195},{"id":194},"the-route-five-stops-plus-an-opening-and-a-close",[196],{"type":31,"value":14},{"type":26,"tag":198,"props":199,"children":200},"table",{},[201,230],{"type":26,"tag":202,"props":203,"children":204},"thead",{},[205],{"type":26,"tag":206,"props":207,"children":208},"tr",{},[209,215,220,225],{"type":26,"tag":210,"props":211,"children":212},"th",{},[213],{"type":31,"value":214},"#",{"type":26,"tag":210,"props":216,"children":217},{},[218],{"type":31,"value":219},"Concern (the customer's words)",{"type":26,"tag":210,"props":221,"children":222},{},[223],{"type":31,"value":224},"Answers",{"type":26,"tag":210,"props":226,"children":227},{},[228],{"type":31,"value":229},"Strength",{"type":26,"tag":231,"props":232,"children":233},"tbody",{},[234,262,290,315,340,365,390],{"type":26,"tag":206,"props":235,"children":236},{},[237,243,253,258],{"type":26,"tag":238,"props":239,"children":240},"td",{},[241],{"type":31,"value":242},"0",{"type":26,"tag":238,"props":244,"children":245},{},[246,251],{"type":26,"tag":102,"props":247,"children":248},{},[249],{"type":31,"value":250},"Opening.",{"type":31,"value":252}," The map: where agents get their parts and where Qpoint sees",{"type":26,"tag":238,"props":254,"children":255},{},[256],{"type":31,"value":257},"—",{"type":26,"tag":238,"props":259,"children":260},{},[261],{"type":31,"value":257},{"type":26,"tag":206,"props":263,"children":264},{},[265,270,280,285],{"type":26,"tag":238,"props":266,"children":267},{},[268],{"type":31,"value":269},"1",{"type":26,"tag":238,"props":271,"children":272},{},[273,278],{"type":26,"tag":43,"props":274,"children":275},{},[276],{"type":31,"value":277},"Are the parts my agents load healthy?",{"type":31,"value":279}," Source health",{"type":26,"tag":238,"props":281,"children":282},{},[283],{"type":31,"value":284},"ASI04 #1 #2 #6 #7 · ASI06 #4 · ASI01 #6",{"type":26,"tag":238,"props":286,"children":287},{},[288],{"type":31,"value":289},"Strong",{"type":26,"tag":206,"props":291,"children":292},{},[293,298,306,311],{"type":26,"tag":238,"props":294,"children":295},{},[296],{"type":31,"value":297},"2",{"type":26,"tag":238,"props":299,"children":300},{},[301],{"type":26,"tag":43,"props":302,"children":303},{},[304],{"type":31,"value":305},"What are my MCP servers doing, and on whose terms?",{"type":26,"tag":238,"props":307,"children":308},{},[309],{"type":31,"value":310},"ASI02 #1 #4 #7 #8 · ASI04 #2 · ASI07 #1 #4",{"type":26,"tag":238,"props":312,"children":313},{},[314],{"type":31,"value":289},{"type":26,"tag":206,"props":316,"children":317},{},[318,323,331,336],{"type":26,"tag":238,"props":319,"children":320},{},[321],{"type":31,"value":322},"3",{"type":26,"tag":238,"props":324,"children":325},{},[326],{"type":26,"tag":43,"props":327,"children":328},{},[329],{"type":31,"value":330},"What can my agents change, and who signs off?",{"type":26,"tag":238,"props":332,"children":333},{},[334],{"type":31,"value":335},"ASI02 #2 #5 · ASI03 #4 · ASI05 #6 · ASI08 #5 · ASI09 #1",{"type":26,"tag":238,"props":337,"children":338},{},[339],{"type":31,"value":289},{"type":26,"tag":206,"props":341,"children":342},{},[343,348,356,361],{"type":26,"tag":238,"props":344,"children":345},{},[346],{"type":31,"value":347},"4",{"type":26,"tag":238,"props":349,"children":350},{},[351],{"type":26,"tag":43,"props":352,"children":353},{},[354],{"type":31,"value":355},"Do secrets or sensitive data reach a model?",{"type":26,"tag":238,"props":357,"children":358},{},[359],{"type":31,"value":360},"ASI03 ex.2 · ASI06 #2 · ASI09 #3 · ASI02 #8",{"type":26,"tag":238,"props":362,"children":363},{},[364],{"type":31,"value":289},{"type":26,"tag":206,"props":366,"children":367},{},[368,373,381,386],{"type":26,"tag":238,"props":369,"children":370},{},[371],{"type":31,"value":372},"5",{"type":26,"tag":238,"props":374,"children":375},{},[376],{"type":26,"tag":43,"props":377,"children":378},{},[379],{"type":31,"value":380},"If something goes bad, can I stop it everywhere, and how far did it reach?",{"type":26,"tag":238,"props":382,"children":383},{},[384],{"type":31,"value":385},"ASI04 #8 · ASI10 #4 #5 · ASI08 #4 #6 #9",{"type":26,"tag":238,"props":387,"children":388},{},[389],{"type":31,"value":289},{"type":26,"tag":206,"props":391,"children":392},{},[393,398,408,413],{"type":26,"tag":238,"props":394,"children":395},{},[396],{"type":31,"value":397},"6",{"type":26,"tag":238,"props":399,"children":400},{},[401,406],{"type":26,"tag":102,"props":402,"children":403},{},[404],{"type":31,"value":405},"Close.",{"type":31,"value":407}," What you've got, what's still yours, and Track this framework",{"type":26,"tag":238,"props":409,"children":410},{},[411],{"type":31,"value":412},"the rest",{"type":26,"tag":238,"props":414,"children":415},{},[416],{"type":31,"value":257},{"type":26,"tag":27,"props":418,"children":419},{},[420,422,427],{"type":31,"value":421},"Host guardrails (ASI05: root, sandbox, restricted paths) are a strong fit too. I left them as an optional sixth stop, ",{"type":26,"tag":43,"props":423,"children":424},{},[425],{"type":31,"value":426},"\"Where do my agents run code, and with what rights?\"",{"type":31,"value":428},", because the lab has no endpoint-process view to show yet.",{"type":26,"tag":84,"props":430,"children":432},{"id":431},"stop-1-source-health",[433],{"type":31,"value":15},{"type":26,"tag":27,"props":435,"children":436},{},[437,442],{"type":26,"tag":43,"props":438,"children":439},{},[440],{"type":31,"value":441},"The concern.",{"type":31,"value":443}," Contamination comes in through what the agent loads or reads: an MCP server or skill that's malicious, an impostor, or changed since someone checked it, a model from a provider nobody approved, a knowledge source seeded with instructions. The paper's live supply chain (ASI04), poisoned knowledge sources (ASI06 ex.1, ASI04 ex.6) and untrusted inputs (ASI01 #6).",{"type":26,"tag":27,"props":445,"children":446},{},[447,452],{"type":26,"tag":43,"props":448,"children":449},{},[450],{"type":31,"value":451},"Watch: a health card per source, as checks, not a score.",{"type":31,"value":453}," A source is anything an agent loads or pulls from: MCP servers, skills, models and providers, harnesses (and their extensions), and knowledge or memory endpoints. Each source carries a row of checks, each passing, failing or not yet known:",{"type":26,"tag":198,"props":455,"children":456},{},[457,478],{"type":26,"tag":202,"props":458,"children":459},{},[460],{"type":26,"tag":206,"props":461,"children":462},{},[463,468,473],{"type":26,"tag":210,"props":464,"children":465},{},[466],{"type":31,"value":467},"Check",{"type":26,"tag":210,"props":469,"children":470},{},[471],{"type":31,"value":472},"Question",{"type":26,"tag":210,"props":474,"children":475},{},[476],{"type":31,"value":477},"Today",{"type":26,"tag":231,"props":479,"children":480},{},[481,502,523,549,570,595,616],{"type":26,"tag":206,"props":482,"children":483},{},[484,492,497],{"type":26,"tag":238,"props":485,"children":486},{},[487],{"type":26,"tag":43,"props":488,"children":489},{},[490],{"type":31,"value":491},"Sanctioned",{"type":26,"tag":238,"props":493,"children":494},{},[495],{"type":31,"value":496},"Is it on your list for this team?",{"type":26,"tag":238,"props":498,"children":499},{},[500],{"type":31,"value":501},"P-MCP, P-PROVIDERS",{"type":26,"tag":206,"props":503,"children":504},{},[505,513,518],{"type":26,"tag":238,"props":506,"children":507},{},[508],{"type":26,"tag":43,"props":509,"children":510},{},[511],{"type":31,"value":512},"Reviewed version",{"type":26,"tag":238,"props":514,"children":515},{},[516],{"type":31,"value":517},"Is the running version the one someone reviewed?",{"type":26,"tag":238,"props":519,"children":520},{},[521],{"type":31,"value":522},"P-PROVENANCE (observe-only)",{"type":26,"tag":206,"props":524,"children":525},{},[526,534,539],{"type":26,"tag":238,"props":527,"children":528},{},[529],{"type":26,"tag":43,"props":530,"children":531},{},[532],{"type":31,"value":533},"Origin",{"type":26,"tag":238,"props":535,"children":536},{},[537],{"type":31,"value":538},"Official publisher, registry package, or remote endpoint? Look-alike name?",{"type":26,"tag":238,"props":540,"children":541},{},[542,544],{"type":31,"value":543},"origin: inventory · look-alike: ",{"type":26,"tag":102,"props":545,"children":546},{},[547],{"type":31,"value":548},"new",{"type":26,"tag":206,"props":550,"children":551},{},[552,560,565],{"type":26,"tag":238,"props":553,"children":554},{},[555],{"type":26,"tag":43,"props":556,"children":557},{},[558],{"type":31,"value":559},"Encrypted",{"type":26,"tag":238,"props":561,"children":562},{},[563],{"type":31,"value":564},"Does traffic to it use approved encrypted transport?",{"type":26,"tag":238,"props":566,"children":567},{},[568],{"type":31,"value":569},"P-TRANSPORT",{"type":26,"tag":206,"props":571,"children":572},{},[573,581,586],{"type":26,"tag":238,"props":574,"children":575},{},[576],{"type":26,"tag":43,"props":577,"children":578},{},[579],{"type":31,"value":580},"Tool surface",{"type":26,"tag":238,"props":582,"children":583},{},[584],{"type":31,"value":585},"Has the list of tools it offers changed since it was approved?",{"type":26,"tag":238,"props":587,"children":588},{},[589,593],{"type":26,"tag":102,"props":590,"children":591},{},[592],{"type":31,"value":548},{"type":31,"value":594}," (descriptor drift)",{"type":26,"tag":206,"props":596,"children":597},{},[598,606,611],{"type":26,"tag":238,"props":599,"children":600},{},[601],{"type":26,"tag":43,"props":602,"children":603},{},[604],{"type":31,"value":605},"Clean responses",{"type":26,"tag":238,"props":607,"children":608},{},[609],{"type":31,"value":610},"Has content from it tripped injection inspection?",{"type":26,"tag":238,"props":612,"children":613},{},[614],{"type":31,"value":615},"P-PROMPT-INSPECT",{"type":26,"tag":206,"props":617,"children":618},{},[619,627,632],{"type":26,"tag":238,"props":620,"children":621},{},[622],{"type":26,"tag":43,"props":623,"children":624},{},[625],{"type":31,"value":626},"Known incidents",{"type":26,"tag":238,"props":628,"children":629},{},[630],{"type":31,"value":631},"Is it named in a public incident or advisory?",{"type":26,"tag":238,"props":633,"children":634},{},[635,639],{"type":26,"tag":102,"props":636,"children":637},{},[638],{"type":31,"value":548},{"type":31,"value":640}," (the paper's Appendix D tracker as seed)",{"type":26,"tag":27,"props":642,"children":643},{},[644,646,651],{"type":31,"value":645},"Above the list, the counts read like the rest of the product: ",{"type":26,"tag":102,"props":647,"children":648},{},[649],{"type":31,"value":650},"41 sources · 35 healthy · 4 failing at least one check · 2 not yet known",{"type":31,"value":652},". \"Healthy\" means every check that applies passes, and an unknown never counts as passing, which is why the not-yet-known count is its own tile. The ring lands on the failing rows. (The artboard settled these numbers; the first draft of this line, \"37 healthy\", counted unknowns as healthy.)",{"type":26,"tag":27,"props":654,"children":655},{},[656],{"type":26,"tag":43,"props":657,"children":658},{},[659],{"type":31,"value":660},"Tune.",{"type":26,"tag":662,"props":663,"children":664},"ul",{},[665,685,690,695,700],{"type":26,"tag":132,"props":666,"children":667},{},[668,670,675,677,683],{"type":31,"value":669},"Sanction a source for a team (an ",{"type":26,"tag":102,"props":671,"children":672},{},[673],{"type":31,"value":674},"advanced",{"type":31,"value":676}," exception that allows the resource, e.g. ",{"type":26,"tag":67,"props":678,"children":680},{"className":679},[],[681],{"type":31,"value":682},"browser-tools",{"type":31,"value":684}," for Engineering), with a reason and an until date.",{"type":26,"tag":132,"props":686,"children":687},{},[688],{"type":31,"value":689},"Require reviewed versions: P-PROVENANCE on, and a source that changes since review fails its check.",{"type":26,"tag":132,"props":691,"children":692},{},[693],{"type":31,"value":694},"Choose strictness per team: Finance on Enforce (an unsanctioned server is blocked), Engineering on Observe (it's flagged).",{"type":26,"tag":132,"props":696,"children":697},{},[698],{"type":31,"value":699},"Severity: raise \"changed since review\" to high for production device groups.",{"type":26,"tag":132,"props":701,"children":702},{},[703],{"type":31,"value":704},"Every change lands in the Policy Config draft with Change impact before publish (\"would have blocked 2 servers on 5 endpoints last week\").",{"type":26,"tag":27,"props":706,"children":707},{},[708,713],{"type":26,"tag":43,"props":709,"children":710},{},[711],{"type":31,"value":712},"Prove.",{"type":31,"value":714}," First-seen and change events per source; findings for each failed check; Policy Config history showing who sanctioned what, when, and until when. Framework detail cites these under ASI04 #1, #2, #6 and #7.",{"type":26,"tag":27,"props":716,"children":717},{},[718,723],{"type":26,"tag":43,"props":719,"children":720},{},[721],{"type":31,"value":722},"Honest limit.",{"type":31,"value":724}," Qpoint sees the parts in use and how they behave on the wire. It doesn't sign artifacts or scan their code (ASI04 #1 provenance attestation, #4 version control): those are the builder's.",{"type":26,"tag":84,"props":726,"children":728},{"id":727},"stop-2-mcp-watch-it-and-tune-it-to-suit-you",[729],{"type":31,"value":16},{"type":26,"tag":27,"props":731,"children":732},{},[733,737],{"type":26,"tag":43,"props":734,"children":735},{},[736],{"type":31,"value":441},{"type":31,"value":738}," MCP servers hand agents tools. A legitimate server can be used to do damage (ASI02), an impostor can sit in its place (ASI04), and a remote one can be reached over a weak channel (ASI07).",{"type":26,"tag":27,"props":740,"children":741},{},[742,747],{"type":26,"tag":43,"props":743,"children":744},{},[745],{"type":31,"value":746},"Watch: one server, end to end.",{"type":31,"value":748}," The MCP server detail shows:",{"type":26,"tag":662,"props":750,"children":751},{},[752,793,803,813,823],{"type":26,"tag":132,"props":753,"children":754},{},[755,760,762,767,769,774,775,780,781,786,787,792],{"type":26,"tag":43,"props":756,"children":757},{},[758],{"type":31,"value":759},"Tools it offers",{"type":31,"value":761},", each tagged by what it does: ",{"type":26,"tag":102,"props":763,"children":764},{},[765],{"type":31,"value":766},"reads",{"type":31,"value":768},", ",{"type":26,"tag":102,"props":770,"children":771},{},[772],{"type":31,"value":773},"writes",{"type":31,"value":768},{"type":26,"tag":102,"props":776,"children":777},{},[778],{"type":31,"value":779},"sends",{"type":31,"value":768},{"type":26,"tag":102,"props":782,"children":783},{},[784],{"type":31,"value":785},"deletes",{"type":31,"value":768},{"type":26,"tag":102,"props":788,"children":789},{},[790],{"type":31,"value":791},"executes",{"type":31,"value":56},{"type":26,"tag":132,"props":794,"children":795},{},[796,801],{"type":26,"tag":43,"props":797,"children":798},{},[799],{"type":31,"value":800},"Calls this week",{"type":31,"value":802}," by tool and by consequence, with who made them (people, teams, agents).",{"type":26,"tag":132,"props":804,"children":805},{},[806,811],{"type":26,"tag":43,"props":807,"children":808},{},[809],{"type":31,"value":810},"Transport:",{"type":31,"value":812}," stdio or remote, encrypted or not.",{"type":26,"tag":132,"props":814,"children":815},{},[816,821],{"type":26,"tag":43,"props":817,"children":818},{},[819],{"type":31,"value":820},"Reach:",{"type":31,"value":822}," how many endpoints and people use it.",{"type":26,"tag":132,"props":824,"children":825},{},[826,831],{"type":26,"tag":43,"props":827,"children":828},{},[829],{"type":31,"value":830},"Its health checks",{"type":31,"value":832}," from stop 1.",{"type":26,"tag":27,"props":834,"children":835},{},[836],{"type":31,"value":837},"The ring lands on the consequential tools (send, delete, execute), which is where ASI02's damage happens.",{"type":26,"tag":27,"props":839,"children":840},{},[841],{"type":26,"tag":43,"props":842,"children":843},{},[844],{"type":31,"value":845},"Tune: the controls, in the order a customer reaches for them.",{"type":26,"tag":198,"props":847,"children":848},{},[849,870],{"type":26,"tag":202,"props":850,"children":851},{},[852],{"type":26,"tag":206,"props":853,"children":854},{},[855,860,865],{"type":26,"tag":210,"props":856,"children":857},{},[858],{"type":31,"value":859},"Control",{"type":26,"tag":210,"props":861,"children":862},{},[863],{"type":31,"value":864},"What it does",{"type":26,"tag":210,"props":866,"children":867},{},[868],{"type":31,"value":869},"In the model today",{"type":26,"tag":231,"props":871,"children":872},{},[873,898,919,948,989,1014,1035],{"type":26,"tag":206,"props":874,"children":875},{},[876,884,889],{"type":26,"tag":238,"props":877,"children":878},{},[879],{"type":26,"tag":43,"props":880,"children":881},{},[882],{"type":31,"value":883},"Mode",{"type":26,"tag":238,"props":885,"children":886},{},[887],{"type":31,"value":888},"Off, Observe or Enforce for the policy",{"type":26,"tag":238,"props":890,"children":891},{},[892],{"type":26,"tag":67,"props":893,"children":895},{"className":894},[],[896],{"type":31,"value":897},"PolicyModeState",{"type":26,"tag":206,"props":899,"children":900},{},[901,909,914],{"type":26,"tag":238,"props":902,"children":903},{},[904],{"type":26,"tag":43,"props":905,"children":906},{},[907],{"type":31,"value":908},"Per-team context",{"type":26,"tag":238,"props":910,"children":911},{},[912],{"type":31,"value":913},"Finance enforces, Engineering observes, Contractors off",{"type":26,"tag":238,"props":915,"children":916},{},[917],{"type":31,"value":918},"mode exceptions",{"type":26,"tag":206,"props":920,"children":921},{},[922,930,935],{"type":26,"tag":238,"props":923,"children":924},{},[925],{"type":26,"tag":43,"props":926,"children":927},{},[928],{"type":31,"value":929},"Allow this server for…",{"type":26,"tag":238,"props":931,"children":932},{},[933],{"type":31,"value":934},"Sanction one server for a team or person, with a reason and an until date",{"type":26,"tag":238,"props":936,"children":937},{},[938,940,946],{"type":31,"value":939},"advanced exception (",{"type":26,"tag":67,"props":941,"children":943},{"className":942},[],[944],{"type":31,"value":945},"allow: { kind: 'mcpServer' }",{"type":31,"value":947},")",{"type":26,"tag":206,"props":949,"children":950},{},[951,959,980],{"type":26,"tag":238,"props":952,"children":953},{},[954],{"type":26,"tag":43,"props":955,"children":956},{},[957],{"type":31,"value":958},"Tools allowed on this server",{"type":26,"tag":238,"props":960,"children":961},{},[962,964,970,972,978],{"type":31,"value":963},"Allow-list individual tools (e.g. ",{"type":26,"tag":67,"props":965,"children":967},{"className":966},[],[968],{"type":31,"value":969},"github",{"type":31,"value":971},": read tools yes, ",{"type":26,"tag":67,"props":973,"children":975},{"className":974},[],[976],{"type":31,"value":977},"delete_repo",{"type":31,"value":979}," no)",{"type":26,"tag":238,"props":981,"children":982},{},[983,987],{"type":26,"tag":102,"props":984,"children":985},{},[986],{"type":31,"value":548},{"type":31,"value":988},": P-TOOL-ALLOW needs a per-server tool list",{"type":26,"tag":206,"props":990,"children":991},{},[992,1000,1005],{"type":26,"tag":238,"props":993,"children":994},{},[995],{"type":26,"tag":43,"props":996,"children":997},{},[998],{"type":31,"value":999},"Which actions need approval",{"type":26,"tag":238,"props":1001,"children":1002},{},[1003],{"type":31,"value":1004},"Pick the verbs that pause for a human: send, delete, execute",{"type":26,"tag":238,"props":1006,"children":1007},{},[1008,1012],{"type":26,"tag":102,"props":1009,"children":1010},{},[1011],{"type":31,"value":548},{"type":31,"value":1013},": P-TOOL-APPROVAL needs a verb set",{"type":26,"tag":206,"props":1015,"children":1016},{},[1017,1025,1030],{"type":26,"tag":238,"props":1018,"children":1019},{},[1020],{"type":26,"tag":43,"props":1021,"children":1022},{},[1023],{"type":31,"value":1024},"Pin the version",{"type":26,"tag":238,"props":1026,"children":1027},{},[1028],{"type":31,"value":1029},"Load only the reviewed version",{"type":26,"tag":238,"props":1031,"children":1032},{},[1033],{"type":31,"value":1034},"P-PROVENANCE",{"type":26,"tag":206,"props":1036,"children":1037},{},[1038,1046,1051],{"type":26,"tag":238,"props":1039,"children":1040},{},[1041],{"type":26,"tag":43,"props":1042,"children":1043},{},[1044],{"type":31,"value":1045},"Severity",{"type":26,"tag":238,"props":1047,"children":1048},{},[1049],{"type":31,"value":1050},"Raise or lower what a finding means here",{"type":26,"tag":238,"props":1052,"children":1053},{},[1054],{"type":31,"value":1055},"severity override",{"type":26,"tag":27,"props":1057,"children":1058},{},[1059,1061,1066],{"type":31,"value":1060},"Every change is staged in the Policy Config draft, Change impact replays last week against it (",{"type":26,"tag":102,"props":1062,"children":1063},{},[1064],{"type":31,"value":1065},"\"14 calls would have paused for approval; 3 people affected; 0 blocked\"",{"type":31,"value":1067},"), and nothing applies until publish. That's the paper's ASI08 #9 (replay before you expand policy) as an ordinary workflow.",{"type":26,"tag":27,"props":1069,"children":1070},{},[1071,1075],{"type":26,"tag":43,"props":1072,"children":1073},{},[1074],{"type":31,"value":712},{"type":31,"value":1076}," Per-call records with the policy decision; approvals with who approved and how fast; the server's config history.",{"type":26,"tag":27,"props":1078,"children":1079},{},[1080,1084],{"type":26,"tag":43,"props":1081,"children":1082},{},[1083],{"type":31,"value":722},{"type":31,"value":1085}," Qpoint governs the call on the wire. It can't see why the agent chose the tool (ASI01 intent) or whether a tool's own permissions are too wide inside the SaaS behind it (ASI02 #1 at the API).",{"type":26,"tag":84,"props":1087,"children":1089},{"id":1088},"stops-35-in-brief",[1090],{"type":31,"value":17},{"type":26,"tag":662,"props":1092,"children":1093},{},[1094,1128,1161],{"type":26,"tag":132,"props":1095,"children":1096},{},[1097,1102,1104,1108,1110,1114,1116,1120,1122,1126],{"type":26,"tag":43,"props":1098,"children":1099},{},[1100],{"type":31,"value":1101},"3 · What can my agents change, and who signs off?",{"type":31,"value":1103}," ",{"type":26,"tag":102,"props":1105,"children":1106},{},[1107],{"type":31,"value":139},{"type":31,"value":1109}," consequential tool calls across all servers and harnesses, and approval health (approval rate, time-to-approve, bulk approvals). ",{"type":26,"tag":102,"props":1111,"children":1112},{},[1113],{"type":31,"value":149},{"type":31,"value":1115}," which verbs need approval, per team; spend ceilings. ",{"type":26,"tag":102,"props":1117,"children":1118},{},[1119],{"type":31,"value":176},{"type":31,"value":1121}," approvals and blocks. ",{"type":26,"tag":102,"props":1123,"children":1124},{},[1125],{"type":31,"value":224},{"type":31,"value":1127}," ASI02 #2\u002F#5, ASI03 #4, ASI05 #6, ASI08 #5, ASI09 #1.",{"type":26,"tag":132,"props":1129,"children":1130},{},[1131,1136,1137,1141,1143,1147,1149,1153,1155,1159],{"type":26,"tag":43,"props":1132,"children":1133},{},[1134],{"type":31,"value":1135},"4 · Do secrets or sensitive data reach a model?",{"type":31,"value":1103},{"type":26,"tag":102,"props":1138,"children":1139},{},[1140],{"type":31,"value":139},{"type":31,"value":1142}," Data Protection, with secrets and personal data caught in prompts and tool payloads, by destination. ",{"type":26,"tag":102,"props":1144,"children":1145},{},[1146],{"type":31,"value":149},{"type":31,"value":1148}," redact vs block per data class; boundaries per team; exceptions for a sanctioned provider. ",{"type":26,"tag":102,"props":1150,"children":1151},{},[1152],{"type":31,"value":176},{"type":31,"value":1154}," redaction and block events. ",{"type":26,"tag":102,"props":1156,"children":1157},{},[1158],{"type":31,"value":224},{"type":31,"value":1160}," ASI03 ex.2 (memory-based privilege retention), ASI06 #2, ASI09 #3.",{"type":26,"tag":132,"props":1162,"children":1163},{},[1164,1169,1170,1174,1176,1180,1182,1186,1188,1192],{"type":26,"tag":43,"props":1165,"children":1166},{},[1167],{"type":31,"value":1168},"5 · Stop it everywhere, and see how far it reached.",{"type":31,"value":1103},{"type":26,"tag":102,"props":1171,"children":1172},{},[1173],{"type":31,"value":139},{"type":31,"value":1175}," blast radius on any source (people, devices, agents, sessions that touched it). ",{"type":26,"tag":102,"props":1177,"children":1178},{},[1179],{"type":31,"value":149},{"type":31,"value":1181}," block a source fleet-wide in one change, with Change impact; quarantine by context. ",{"type":26,"tag":102,"props":1183,"children":1184},{},[1185],{"type":31,"value":176},{"type":31,"value":1187}," timestamped enforcement events and the rollout's reach. ",{"type":26,"tag":102,"props":1189,"children":1190},{},[1191],{"type":31,"value":224},{"type":31,"value":1193}," ASI04 #8 (kill switch), ASI10 #4\u002F#5, ASI08 #4\u002F#6\u002F#9.",{"type":26,"tag":84,"props":1195,"children":1197},{"id":1196},"whats-new-product-asks",[1198],{"type":31,"value":18},{"type":26,"tag":27,"props":1200,"children":1201},{},[1202],{"type":31,"value":1203},"Surfaces and knobs this tour assumes that neither the lab nor qdash has today:",{"type":26,"tag":128,"props":1205,"children":1206},{},[1207,1217,1227,1237,1247,1264,1274],{"type":26,"tag":132,"props":1208,"children":1209},{},[1210,1215],{"type":26,"tag":43,"props":1211,"children":1212},{},[1213],{"type":31,"value":1214},"Source health",{"type":31,"value":1216}," as a view across MCP servers, skills, providers, harnesses and knowledge endpoints, with per-source checks.",{"type":26,"tag":132,"props":1218,"children":1219},{},[1220,1225],{"type":26,"tag":43,"props":1221,"children":1222},{},[1223],{"type":31,"value":1224},"Tool-surface (descriptor) drift",{"type":31,"value":1226}," per MCP server.",{"type":26,"tag":132,"props":1228,"children":1229},{},[1230,1235],{"type":26,"tag":43,"props":1231,"children":1232},{},[1233],{"type":31,"value":1234},"Look-alike name",{"type":31,"value":1236}," check.",{"type":26,"tag":132,"props":1238,"children":1239},{},[1240,1245],{"type":26,"tag":43,"props":1241,"children":1242},{},[1243],{"type":31,"value":1244},"Known-incident",{"type":31,"value":1246}," check against a curated list (seeded from the paper's Appendix D).",{"type":26,"tag":132,"props":1248,"children":1249},{},[1250,1255,1257,1262],{"type":26,"tag":43,"props":1251,"children":1252},{},[1253],{"type":31,"value":1254},"Per-server tool allow-list",{"type":31,"value":1256}," on P-TOOL-ALLOW, and a ",{"type":26,"tag":43,"props":1258,"children":1259},{},[1260],{"type":31,"value":1261},"verb set",{"type":31,"value":1263}," on P-TOOL-APPROVAL.",{"type":26,"tag":132,"props":1265,"children":1266},{},[1267,1272],{"type":26,"tag":43,"props":1268,"children":1269},{},[1270],{"type":31,"value":1271},"Tool tags by consequence",{"type":31,"value":1273}," (reads \u002F writes \u002F sends \u002F deletes \u002F executes).",{"type":26,"tag":132,"props":1275,"children":1276},{},[1277,1282],{"type":26,"tag":43,"props":1278,"children":1279},{},[1280],{"type":31,"value":1281},"Blast radius",{"type":31,"value":1283}," panel.",{"type":26,"tag":27,"props":1285,"children":1286},{},[1287,1289,1295],{"type":31,"value":1288},"The artboards found three more, by checking the Tune beats against ",{"type":26,"tag":67,"props":1290,"children":1292},{"className":1291},[],[1293],{"type":31,"value":1294},"governance-fixture.ts",{"type":31,"value":1296},":",{"type":26,"tag":128,"props":1298,"children":1300},{"start":1299},8,[1301,1326,1351],{"type":26,"tag":132,"props":1302,"children":1303},{},[1304,1309,1310,1316,1318,1324],{"type":26,"tag":43,"props":1305,"children":1306},{},[1307],{"type":31,"value":1308},"Sanction a skill or knowledge endpoint.",{"type":31,"value":1103},{"type":26,"tag":67,"props":1311,"children":1313},{"className":1312},[],[1314],{"type":31,"value":1315},"Resource.kind",{"type":31,"value":1317}," has ",{"type":26,"tag":67,"props":1319,"children":1321},{"className":1320},[],[1322],{"type":31,"value":1323},"mcpServer | account | provider | path | dataClass",{"type":31,"value":1325},", so an advanced exception can allow a server or a provider but not a skill or a vector store.",{"type":26,"tag":132,"props":1327,"children":1328},{},[1329,1334,1335,1341,1343,1349],{"type":26,"tag":43,"props":1330,"children":1331},{},[1332],{"type":31,"value":1333},"Severity per scope.",{"type":31,"value":1103},{"type":26,"tag":67,"props":1336,"children":1338},{"className":1337},[],[1339],{"type":31,"value":1340},"SeverityOverride",{"type":31,"value":1342}," is ",{"type":26,"tag":67,"props":1344,"children":1346},{"className":1345},[],[1347],{"type":31,"value":1348},"{ policyId, severity, actor, at }",{"type":31,"value":1350}," with no scope, so \"high on Production Macs\" can't be said today.",{"type":26,"tag":132,"props":1352,"children":1353},{},[1354,1359,1361,1367],{"type":26,"tag":43,"props":1355,"children":1356},{},[1357],{"type":31,"value":1358},"Blocking an unreviewed version.",{"type":31,"value":1360}," P-PROVENANCE is ",{"type":26,"tag":67,"props":1362,"children":1364},{"className":1363},[],[1365],{"type":31,"value":1366},"enforceable: false",{"type":31,"value":1368},". \"Require reviewed versions\" is Observe: a changed source fails its check and raises a finding, and nothing stops it loading.",{"type":26,"tag":84,"props":1370,"children":1372},{"id":1371},"what-the-artboards-decided-2026-10-27",[1373],{"type":31,"value":19},{"type":26,"tag":27,"props":1375,"children":1376},{},[1377,1379,1385,1387,1393,1394,1400,1402,1408,1410,1416,1418,1424,1426,1432],{"type":31,"value":1378},"Five boards on the ",{"type":26,"tag":34,"props":1380,"children":1382},{"href":77,"rel":1381},[79],[1383],{"type":31,"value":1384},"concept canvas",{"type":31,"value":1386},", in a new row under the v1 boards (y 2380, titled \"v2 · The addressable tour\"): ",{"type":26,"tag":67,"props":1388,"children":1390},{"className":1389},[],[1391],{"type":31,"value":1392},"Route",{"type":31,"value":768},{"type":26,"tag":67,"props":1395,"children":1397},{"className":1396},[],[1398],{"type":31,"value":1399},"SourceHealth",{"type":31,"value":1401}," (stop 1 Watch), ",{"type":26,"tag":67,"props":1403,"children":1405},{"className":1404},[],[1406],{"type":31,"value":1407},"SourceTune",{"type":31,"value":1409}," (stop 1 Tune), ",{"type":26,"tag":67,"props":1411,"children":1413},{"className":1412},[],[1414],{"type":31,"value":1415},"McpWatch",{"type":31,"value":1417}," (stop 2 Watch), ",{"type":26,"tag":67,"props":1419,"children":1421},{"className":1420},[],[1422],{"type":31,"value":1423},"McpTune",{"type":31,"value":1425}," (stop 2 Tune). The v1 boards and Mark's ",{"type":26,"tag":67,"props":1427,"children":1429},{"className":1428},[],[1430],{"type":31,"value":1431},"Artboard-oy7o",{"type":31,"value":1433}," are untouched. The Prove beats are specified above but not drawn yet.",{"type":26,"tag":27,"props":1435,"children":1436},{},[1437,1442],{"type":26,"tag":43,"props":1438,"children":1439},{},[1440],{"type":31,"value":1441},"The panel, v2.",{"type":31,"value":1443}," It keeps the anatomy of the ASI04 stop Mark liked: 420 px docked right, the ring and one numbered callout on the live page, a \"Here's yours\" block, the mitigation chips, a \"Yours\" line, and Next. What changed:",{"type":26,"tag":662,"props":1445,"children":1446},{},[1447,1459,1486,1498,1517,1529],{"type":26,"tag":132,"props":1448,"children":1449},{},[1450,1452,1457],{"type":31,"value":1451},"The title is the ",{"type":26,"tag":43,"props":1453,"children":1454},{},[1455],{"type":31,"value":1456},"customer's question",{"type":31,"value":1458},". The stop's short name sits above it (\"Source health\", \"MCP · watch it, then tune it\"), with the fit chip beside it.",{"type":26,"tag":132,"props":1460,"children":1461},{},[1462,1464,1469,1471,1477,1479,1485],{"type":31,"value":1463},"Under the title, three ",{"type":26,"tag":43,"props":1465,"children":1466},{},[1467],{"type":31,"value":1468},"beat pills",{"type":31,"value":1470}," (",{"type":26,"tag":67,"props":1472,"children":1474},{"className":1473},[],[1475],{"type":31,"value":1476},"Watch · Tune · Prove",{"type":31,"value":1478},"; done ones tinted, the current one filled), with the stop's risk IDs on the right (",{"type":26,"tag":67,"props":1480,"children":1482},{"className":1481},[],[1483],{"type":31,"value":1484},"ASI04 · ASI06 · ASI01",{"type":31,"value":191},{"type":26,"tag":132,"props":1487,"children":1488},{},[1489,1491,1496],{"type":31,"value":1490},"The step bar has ",{"type":26,"tag":43,"props":1492,"children":1493},{},[1494],{"type":31,"value":1495},"7 segments",{"type":31,"value":1497}," (opening, five stops, close) and reads \"Stop N of 5\". Beats don't add segments.",{"type":26,"tag":132,"props":1499,"children":1500},{},[1501,1503,1508,1509,1515],{"type":31,"value":1502},"Mitigation rows carry the ",{"type":26,"tag":43,"props":1504,"children":1505},{},[1506],{"type":31,"value":1507},"risk ID with the number",{"type":31,"value":1470},{"type":26,"tag":67,"props":1510,"children":1512},{"className":1511},[],[1513],{"type":31,"value":1514},"ASI04 #2",{"type":31,"value":1516},"), because a stop answers several risks.",{"type":26,"tag":132,"props":1518,"children":1519},{},[1520,1522,1527],{"type":31,"value":1521},"Chip states gain ",{"type":26,"tag":43,"props":1523,"children":1524},{},[1525],{"type":31,"value":1526},"Staged",{"type":31,"value":1528}," (dashed outline) for a change that is in the draft but not published. The others are unchanged: Observed, Enforced, Evidenced, Ready, Off.",{"type":26,"tag":132,"props":1530,"children":1531},{},[1532,1534,1539],{"type":31,"value":1533},"The Watch action stays \"Stage … at Observe\". The Tune panel says that the tour staged the draft and ",{"type":26,"tag":102,"props":1535,"children":1536},{},[1537],{"type":31,"value":1538},"you",{"type":31,"value":1540}," publish. The page's Publish button belongs to the customer; the tour never presses it.",{"type":26,"tag":27,"props":1542,"children":1543},{},[1544],{"type":26,"tag":43,"props":1545,"children":1546},{},[1547],{"type":31,"value":1548},"Stop 1 Watch: Sources.",{"type":26,"tag":662,"props":1550,"children":1551},{},[1552,1570,1575,1592,1604,1662,1683],{"type":26,"tag":132,"props":1553,"children":1554},{},[1555,1557,1562,1564,1568],{"type":31,"value":1556},"A new ",{"type":26,"tag":43,"props":1558,"children":1559},{},[1560],{"type":31,"value":1561},"Sources",{"type":31,"value":1563}," item heads Inventory in the nav, tagged ",{"type":26,"tag":102,"props":1565,"children":1566},{},[1567],{"type":31,"value":548},{"type":31,"value":1569},". Kind filters: All 41 · MCP servers 14 · Skills 9 · Providers 4 · Harnesses 6 · Knowledge 8.",{"type":26,"tag":132,"props":1571,"children":1572},{},[1573],{"type":31,"value":1574},"Four count tiles, with no total score: 41 sources, 35 healthy, 4 failing at least one check, 2 not yet known.",{"type":26,"tag":132,"props":1576,"children":1577},{},[1578,1583,1585,1590],{"type":26,"tag":43,"props":1579,"children":1580},{},[1581],{"type":31,"value":1582},"Four marks, not three.",{"type":31,"value":1584}," Pass, fail, not yet known, and ",{"type":26,"tag":43,"props":1586,"children":1587},{},[1588],{"type":31,"value":1589},"doesn't apply",{"type":31,"value":1591}," (a dash). A skill has no transport, tool surface or responses, and a provider has no reviewed version. A source with a check that doesn't apply can still be healthy; a source with one that is unknown can't.",{"type":26,"tag":132,"props":1593,"children":1594},{},[1595,1597,1602],{"type":31,"value":1596},"Each check's column header carries its ",{"type":26,"tag":43,"props":1598,"children":1599},{},[1600],{"type":31,"value":1601},"fail count",{"type":31,"value":1603}," (Sanctioned 3 fail, Reviewed version 3, and 1 each for the rest). That's the \"which check is hurting\" view without a score.",{"type":26,"tag":132,"props":1605,"children":1606},{},[1607,1609],{"type":31,"value":1608},"The list is sorted failing first, and the ring sits on the four failing rows:\n",{"type":26,"tag":662,"props":1610,"children":1611},{},[1612,1623,1633,1644],{"type":26,"tag":132,"props":1613,"children":1614},{},[1615,1621],{"type":26,"tag":67,"props":1616,"children":1618},{"className":1617},[],[1619],{"type":31,"value":1620},"postmark-mcp-server",{"type":31,"value":1622},": unsanctioned, never reviewed, a look-alike origin, named in a public incident.",{"type":26,"tag":132,"props":1624,"children":1625},{},[1626,1631],{"type":26,"tag":67,"props":1627,"children":1629},{"className":1628},[],[1630],{"type":31,"value":682},{"type":31,"value":1632},": unsanctioned, never reviewed, has tripped injection inspection.",{"type":26,"tag":132,"props":1634,"children":1635},{},[1636,1642],{"type":26,"tag":67,"props":1637,"children":1639},{"className":1638},[],[1640],{"type":31,"value":1641},"sheets-bridge",{"type":31,"value":1643},": unsanctioned, HTTP without TLS.",{"type":26,"tag":132,"props":1645,"children":1646},{},[1647,1653,1655,1661],{"type":26,"tag":67,"props":1648,"children":1650},{"className":1649},[],[1651],{"type":31,"value":1652},"jira-sync",{"type":31,"value":1654},": sanctioned, but it changed since review and its tool surface grew (",{"type":26,"tag":67,"props":1656,"children":1658},{"className":1657},[],[1659],{"type":31,"value":1660},"delete_issue",{"type":31,"value":191},{"type":26,"tag":132,"props":1663,"children":1664},{},[1665,1667,1673,1675,1681],{"type":31,"value":1666},"The two not-yet-known rows are ",{"type":26,"tag":67,"props":1668,"children":1670},{"className":1669},[],[1671],{"type":31,"value":1672},"release-notes",{"type":31,"value":1674}," (a skill with no recorded pin) and ",{"type":26,"tag":67,"props":1676,"children":1678},{"className":1677},[],[1679],{"type":31,"value":1680},"kb-vectors",{"type":31,"value":1682}," (a knowledge endpoint whose responses aren't inspected yet).",{"type":26,"tag":132,"props":1684,"children":1685},{},[1686,1688,1693],{"type":31,"value":1687},"The ASI04 #2 chip reads ",{"type":26,"tag":43,"props":1689,"children":1690},{},[1691],{"type":31,"value":1692},"Observed",{"type":31,"value":1694}," on this beat, not \"Enforced · Finance\": Finance moves to Enforce in the Tune draft.",{"type":26,"tag":27,"props":1696,"children":1697},{},[1698,1703],{"type":26,"tag":43,"props":1699,"children":1700},{},[1701],{"type":31,"value":1702},"Stop 1 Tune: the Policy Config draft.",{"type":31,"value":1704}," Four staged changes, each tagged with the model term it uses:",{"type":26,"tag":128,"props":1706,"children":1707},{},[1708,1720,1725,1737],{"type":26,"tag":132,"props":1709,"children":1710},{},[1711,1713,1718],{"type":31,"value":1712},"P-MCP: allow ",{"type":26,"tag":67,"props":1714,"children":1716},{"className":1715},[],[1717],{"type":31,"value":682},{"type":31,"value":1719}," for Engineering until Dec 31, with a reason (advanced exception). Engineering otherwise stays on Observe.",{"type":26,"tag":132,"props":1721,"children":1722},{},[1723],{"type":31,"value":1724},"P-MCP: Finance moves from Observe to Enforce (mode exception).",{"type":26,"tag":132,"props":1726,"children":1727},{},[1728,1730,1735],{"type":31,"value":1729},"P-PROVENANCE: Off → Observe, org-wide (",{"type":26,"tag":67,"props":1731,"children":1733},{"className":1732},[],[1734],{"type":31,"value":897},{"type":31,"value":1736},"), noting that blocking an unreviewed version is new.",{"type":26,"tag":132,"props":1738,"children":1739},{},[1740],{"type":31,"value":1741},"P-PROVENANCE: severity medium → high on Production Macs (severity override, with per-scope tagged new).",{"type":26,"tag":27,"props":1743,"children":1744},{},[1745,1747,1752,1753,1758,1760,1765],{"type":31,"value":1746},"Change impact is four tiles: 2 servers would have been blocked on 5 Finance endpoints (",{"type":26,"tag":67,"props":1748,"children":1750},{"className":1749},[],[1751],{"type":31,"value":1620},{"type":31,"value":768},{"type":26,"tag":67,"props":1754,"children":1756},{"className":1755},[],[1757],{"type":31,"value":1641},{"type":31,"value":1759},"); 31 ",{"type":26,"tag":67,"props":1761,"children":1763},{"className":1762},[],[1764],{"type":31,"value":682},{"type":31,"value":1766}," calls by 6 Engineering people are no longer flagged; 1 source fails Reviewed version; 0 calls blocked outside Finance. The ring is on Change impact, and the callout names ASI08 #9.",{"type":26,"tag":27,"props":1768,"children":1769},{},[1770],{"type":26,"tag":43,"props":1771,"children":1772},{},[1773,1775,1780],{"type":31,"value":1774},"Stop 2 Watch: ",{"type":26,"tag":67,"props":1776,"children":1778},{"className":1777},[],[1779],{"type":31,"value":969},{"type":31,"value":1781}," server detail.",{"type":26,"tag":662,"props":1783,"children":1784},{},[1785,1790,1800,1805,1845],{"type":26,"tag":132,"props":1786,"children":1787},{},[1788],{"type":31,"value":1789},"The server is sanctioned for 5 teams. Its cards show transport (stdio, reaching api.github.com over TLS 1.3), reach (61 endpoints, 48 people, 1 unattended agent), the version (0.9.1, reviewed Oct 2), and its health checks (7 of 7 pass, linking back to Sources).",{"type":26,"tag":132,"props":1791,"children":1792},{},[1793,1798],{"type":26,"tag":43,"props":1794,"children":1795},{},[1796],{"type":31,"value":1797},"Consequence tags:",{"type":31,"value":1799}," reads in neutral grey, writes in amber, and sends, deletes and executes filled red. Only those last three count as consequential and get ringed. Writes are common, and ringing them would ring most of the page.",{"type":26,"tag":132,"props":1801,"children":1802},{},[1803],{"type":31,"value":1804},"Calls this week by consequence: reads 8,379, writes 413, sends 96, deletes 14, executes 23. The 31 read tools collapse into one row.",{"type":26,"tag":132,"props":1806,"children":1807},{},[1808,1810,1816,1817,1823,1824,1830,1831,1836,1838,1844],{"type":31,"value":1809},"The ringed rows are ",{"type":26,"tag":67,"props":1811,"children":1813},{"className":1812},[],[1814],{"type":31,"value":1815},"add_issue_comment",{"type":31,"value":768},{"type":26,"tag":67,"props":1818,"children":1820},{"className":1819},[],[1821],{"type":31,"value":1822},"delete_branch",{"type":31,"value":768},{"type":26,"tag":67,"props":1825,"children":1827},{"className":1826},[],[1828],{"type":31,"value":1829},"delete_file",{"type":31,"value":768},{"type":26,"tag":67,"props":1832,"children":1834},{"className":1833},[],[1835],{"type":31,"value":977},{"type":31,"value":1837}," (0 calls) and ",{"type":26,"tag":67,"props":1839,"children":1841},{"className":1840},[],[1842],{"type":31,"value":1843},"run_workflow",{"type":31,"value":56},{"type":26,"tag":132,"props":1846,"children":1847},{},[1848,1850,1856],{"type":31,"value":1849},"\"By who\" for those 133 calls: Engineering 92 (28 people), Platform 30 (4 people), ",{"type":26,"tag":67,"props":1851,"children":1853},{"className":1852},[],[1854],{"type":31,"value":1855},"release-agent",{"type":31,"value":1857}," 11 (unattended).",{"type":26,"tag":27,"props":1859,"children":1860},{},[1861,1866,1868,1872],{"type":26,"tag":43,"props":1862,"children":1863},{},[1864],{"type":31,"value":1865},"Stop 2 Tune: the server's Policy tab.",{"type":31,"value":1867}," The controls run in the v2 table's order. Each row shows the model term, and the two the model lacks are tagged ",{"type":26,"tag":102,"props":1869,"children":1870},{},[1871],{"type":31,"value":548},{"type":31,"value":1296},{"type":26,"tag":662,"props":1874,"children":1875},{},[1876,1886,1896,1906,1927,1941,1951],{"type":26,"tag":132,"props":1877,"children":1878},{},[1879,1884],{"type":26,"tag":43,"props":1880,"children":1881},{},[1882],{"type":31,"value":1883},"Mode:",{"type":31,"value":1885}," P-TOOL-APPROVAL, Observe → Enforce. Mode is policy-wide, so the row says \"approval, everywhere\". A per-server mode would be one more ask; it's left unmarked for now.",{"type":26,"tag":132,"props":1887,"children":1888},{},[1889,1894],{"type":26,"tag":43,"props":1890,"children":1891},{},[1892],{"type":31,"value":1893},"Per-team context:",{"type":31,"value":1895}," Engineering and Contractors on Enforce; Platform on Observe until Nov 30.",{"type":26,"tag":132,"props":1897,"children":1898},{},[1899,1904],{"type":26,"tag":43,"props":1900,"children":1901},{},[1902],{"type":31,"value":1903},"Allow this server for:",{"type":31,"value":1905}," Contractors, until Dec 31.",{"type":26,"tag":132,"props":1907,"children":1908},{},[1909,1913,1914,1918,1920,1925],{"type":26,"tag":43,"props":1910,"children":1911},{},[1912],{"type":31,"value":958},{"type":31,"value":1470},{"type":26,"tag":102,"props":1915,"children":1916},{},[1917],{"type":31,"value":548},{"type":31,"value":1919},"): 38 of 39, with ",{"type":26,"tag":67,"props":1921,"children":1923},{"className":1922},[],[1924],{"type":31,"value":977},{"type":31,"value":1926}," struck out.",{"type":26,"tag":132,"props":1928,"children":1929},{},[1930,1934,1935,1939],{"type":26,"tag":43,"props":1931,"children":1932},{},[1933],{"type":31,"value":999},{"type":31,"value":1470},{"type":26,"tag":102,"props":1936,"children":1937},{},[1938],{"type":31,"value":548},{"type":31,"value":1940},"): a checkbox per verb, with only deletes ticked.",{"type":26,"tag":132,"props":1942,"children":1943},{},[1944,1949],{"type":26,"tag":43,"props":1945,"children":1946},{},[1947],{"type":31,"value":1948},"Pin:",{"type":31,"value":1950}," 0.9.1. Another version is flagged, not blocked.",{"type":26,"tag":132,"props":1952,"children":1953},{},[1954,1959],{"type":26,"tag":43,"props":1955,"children":1956},{},[1957],{"type":31,"value":1958},"Severity:",{"type":31,"value":1960}," a delete that ran without approval goes from medium to high.",{"type":26,"tag":27,"props":1962,"children":1963},{},[1964,1966,1971,1973,1978,1980,1985,1987,1992,1994],{"type":31,"value":1965},"The draft holds 7 changes. Change impact: ",{"type":26,"tag":102,"props":1967,"children":1968},{},[1969],{"type":31,"value":1970},"14 calls would have paused for approval; 3 people affected; 0 blocked.",{"type":31,"value":1972}," The 14 are ",{"type":26,"tag":67,"props":1974,"children":1976},{"className":1975},[],[1977],{"type":31,"value":1822},{"type":31,"value":1979}," 9 (Priya, Jordan) and ",{"type":26,"tag":67,"props":1981,"children":1983},{"className":1982},[],[1984],{"type":31,"value":1829},{"type":31,"value":1986}," 5 (Mateo). Nothing is blocked because ",{"type":26,"tag":67,"props":1988,"children":1990},{"className":1989},[],[1991],{"type":31,"value":977},{"type":31,"value":1993}," was never called. Contractors have no calls yet. The ring is on the two new controls. The panel's \"Ask your fleet\" for this beat: ",{"type":26,"tag":102,"props":1995,"children":1996},{},[1997],{"type":31,"value":1998},"What would change if deletes on github needed a person?",{"type":26,"tag":84,"props":2000,"children":2002},{"id":2001},"the-drill-beat-and-the-lab-tour-2026-10-27",[2003],{"type":31,"value":20},{"type":26,"tag":27,"props":2005,"children":2006},{},[2007,2009,2014,2016,2022],{"type":31,"value":2008},"Mark, after the boards: talk about the ",{"type":26,"tag":43,"props":2010,"children":2011},{},[2012],{"type":31,"value":2013},"signals",{"type":31,"value":2015}," Qpoint would emit for an addressable violation, and take people to the part of the dashboard that lights up (the ",{"type":26,"tag":67,"props":2017,"children":2019},{"className":2018},[],[2020],{"type":31,"value":2021},"DataMachine",{"type":31,"value":2023},"s on Home, built from the top of each listing). Show error-state examples in the tour space. Let people simulate a violation so their chosen alert channels (Slack, PagerDuty, an HTTP POST) light up in a test run. Keep the dashboard's footprint to IDs. He then ruled: the panel floats; real messages; keep drill receipts; start row keys light; and rebuild the boards as lab mockups, keeping the canvas boards as concept sketches.",{"type":26,"tag":27,"props":2025,"children":2026},{},[2027,2032,2034,2044,2046,2052,2054,2059,2061,2066],{"type":26,"tag":43,"props":2028,"children":2029},{},[2030],{"type":31,"value":2031},"The tour layer",{"type":31,"value":2033}," (protocol, materials, drill rules, work packages): ",{"type":26,"tag":34,"props":2035,"children":2037},{"href":2036},"\u002Fcycles\u002Fdesign\u002Fc125\u002Fdoc\u002Ftour-layer",[2038],{"type":26,"tag":67,"props":2039,"children":2041},{"className":2040},[],[2042],{"type":31,"value":2043},"c125 tour-layer.md",{"type":31,"value":2045},". In short: pages carry ",{"type":26,"tag":67,"props":2047,"children":2049},{"className":2048},[],[2050],{"type":31,"value":2051},"data-qp-id",{"type":31,"value":2053},", and nothing else; the tour floats over them in its own dark-grape material; an ",{"type":26,"tag":43,"props":2055,"children":2056},{},[2057],{"type":31,"value":2058},"Example",{"type":31,"value":2060}," is a real component with example props, floated over its live counterpart in a dashed frame; a ",{"type":26,"tag":43,"props":2062,"children":2063},{},[2064],{"type":31,"value":2065},"Drill",{"type":31,"value":2067}," is a real delivery about a simulated cause, tagged in the delivery log and never in findings or evidence.",{"type":26,"tag":27,"props":2069,"children":2070},{},[2071,2076,2078,2084],{"type":26,"tag":43,"props":2072,"children":2073},{},[2074],{"type":31,"value":2075},"In the lab",{"type":31,"value":2077}," (rebuilt from the canvas boards, on the shared world): start at ",{"type":26,"tag":67,"props":2079,"children":2081},{"className":2080},[],[2082],{"type":31,"value":2083},"\u002Fpages\u002Fphase4\u002Ftour-owasp-agentic",{"type":31,"value":56},{"type":26,"tag":198,"props":2086,"children":2087},{},[2088,2109],{"type":26,"tag":202,"props":2089,"children":2090},{},[2091],{"type":26,"tag":206,"props":2092,"children":2093},{},[2094,2099,2104],{"type":26,"tag":210,"props":2095,"children":2096},{},[2097],{"type":31,"value":2098},"Step",{"type":26,"tag":210,"props":2100,"children":2101},{},[2102],{"type":31,"value":2103},"Page",{"type":26,"tag":210,"props":2105,"children":2106},{},[2107],{"type":31,"value":2108},"What it shows",{"type":26,"tag":231,"props":2110,"children":2111},{},[2112,2147,2174,2200,2236,2263,2290,2312,2343,2368],{"type":26,"tag":206,"props":2113,"children":2114},{},[2115,2124,2135],{"type":26,"tag":238,"props":2116,"children":2117},{},[2118],{"type":26,"tag":67,"props":2119,"children":2121},{"className":2120},[],[2122],{"type":31,"value":2123},"open",{"type":26,"tag":238,"props":2125,"children":2126},{},[2127,2133],{"type":26,"tag":67,"props":2128,"children":2130},{"className":2129},[],[2131],{"type":31,"value":2132},"\u002Fpages\u002Fphase4\u002Fmock\u002Fhome",{"type":31,"value":2134}," (new)",{"type":26,"tag":238,"props":2136,"children":2137},{},[2138,2140,2145],{"type":31,"value":2139},"Home's six ",{"type":26,"tag":67,"props":2141,"children":2143},{"className":2142},[],[2144],{"type":31,"value":2021},{"type":31,"value":2146},"s, the route in the panel",{"type":26,"tag":206,"props":2148,"children":2149},{},[2150,2159,2169],{"type":26,"tag":238,"props":2151,"children":2152},{},[2153],{"type":26,"tag":67,"props":2154,"children":2156},{"className":2155},[],[2157],{"type":31,"value":2158},"s1-watch",{"type":26,"tag":238,"props":2160,"children":2161},{},[2162,2168],{"type":26,"tag":67,"props":2163,"children":2165},{"className":2164},[],[2166],{"type":31,"value":2167},"\u002Finventory\u002Fsources",{"type":31,"value":2134},{"type":26,"tag":238,"props":2170,"children":2171},{},[2172],{"type":31,"value":2173},"Source health: four marks per check, counts above, the four failing rows ringed",{"type":26,"tag":206,"props":2175,"children":2176},{},[2177,2186,2195],{"type":26,"tag":238,"props":2178,"children":2179},{},[2180],{"type":26,"tag":67,"props":2181,"children":2183},{"className":2182},[],[2184],{"type":31,"value":2185},"s1-tune",{"type":26,"tag":238,"props":2187,"children":2188},{},[2189],{"type":26,"tag":67,"props":2190,"children":2192},{"className":2191},[],[2193],{"type":31,"value":2194},"\u002Fpolicy-config\u002Fproposed-changes",{"type":26,"tag":238,"props":2196,"children":2197},{},[2198],{"type":31,"value":2199},"The tour stages three real changes in the shared draft (browser-tools for Engineering, Finance on Enforce, P-PROVENANCE at Observe); the impact card and itemized changes are ringed",{"type":26,"tag":206,"props":2201,"children":2202},{},[2203,2212,2217],{"type":26,"tag":238,"props":2204,"children":2205},{},[2206],{"type":26,"tag":67,"props":2207,"children":2209},{"className":2208},[],[2210],{"type":31,"value":2211},"s1-drill",{"type":26,"tag":238,"props":2213,"children":2214},{},[2215],{"type":31,"value":2216},"Home",{"type":26,"tag":238,"props":2218,"children":2219},{},[2220,2222,2227,2229,2234],{"type":31,"value":2221},"Examples over ",{"type":26,"tag":102,"props":2223,"children":2224},{},[2225],{"type":31,"value":2226},"Sources failing a check",{"type":31,"value":2228}," and ",{"type":26,"tag":102,"props":2230,"children":2231},{},[2232],{"type":31,"value":2233},"Open findings",{"type":31,"value":2235},"; signals, settings, Simulate",{"type":26,"tag":206,"props":2237,"children":2238},{},[2239,2248,2258],{"type":26,"tag":238,"props":2240,"children":2241},{},[2242],{"type":26,"tag":67,"props":2243,"children":2245},{"className":2244},[],[2246],{"type":31,"value":2247},"s1-drill-run",{"type":26,"tag":238,"props":2249,"children":2250},{},[2251,2257],{"type":26,"tag":67,"props":2252,"children":2254},{"className":2253},[],[2255],{"type":31,"value":2256},"\u002Fintegrations",{"type":31,"value":2134},{"type":26,"tag":238,"props":2259,"children":2260},{},[2261],{"type":31,"value":2262},"Receipts in the panel; the delivery log ringed",{"type":26,"tag":206,"props":2264,"children":2265},{},[2266,2275,2285],{"type":26,"tag":238,"props":2267,"children":2268},{},[2269],{"type":26,"tag":67,"props":2270,"children":2272},{"className":2271},[],[2273],{"type":31,"value":2274},"s2-watch",{"type":26,"tag":238,"props":2276,"children":2277},{},[2278,2284],{"type":26,"tag":67,"props":2279,"children":2281},{"className":2280},[],[2282],{"type":31,"value":2283},"\u002Finventory\u002Fmcp-servers\u002Fdetail?server=github",{"type":31,"value":2134},{"type":26,"tag":238,"props":2286,"children":2287},{},[2288],{"type":31,"value":2289},"Tools by consequence; the five that send, delete or execute ringed",{"type":26,"tag":206,"props":2291,"children":2292},{},[2293,2302,2307],{"type":26,"tag":238,"props":2294,"children":2295},{},[2296],{"type":26,"tag":67,"props":2297,"children":2299},{"className":2298},[],[2300],{"type":31,"value":2301},"s2-tune",{"type":26,"tag":238,"props":2303,"children":2304},{},[2305],{"type":31,"value":2306},"same page, Policy section",{"type":26,"tag":238,"props":2308,"children":2309},{},[2310],{"type":31,"value":2311},"The controls, the two new ones ringed, live Change impact (14 · 3 · 0); stages P-TOOL-APPROVAL at Enforce",{"type":26,"tag":206,"props":2313,"children":2314},{},[2315,2324,2328],{"type":26,"tag":238,"props":2316,"children":2317},{},[2318],{"type":26,"tag":67,"props":2319,"children":2321},{"className":2320},[],[2322],{"type":31,"value":2323},"s2-drill",{"type":26,"tag":238,"props":2325,"children":2326},{},[2327],{"type":31,"value":2216},{"type":26,"tag":238,"props":2329,"children":2330},{},[2331,2333,2338,2339],{"type":31,"value":2332},"Mark's example: PII to an unapproved MCP server. Examples over ",{"type":26,"tag":102,"props":2334,"children":2335},{},[2336],{"type":31,"value":2337},"Sensitive data, unapproved destinations",{"type":31,"value":2228},{"type":26,"tag":102,"props":2340,"children":2341},{},[2342],{"type":31,"value":2233},{"type":26,"tag":206,"props":2344,"children":2345},{},[2346,2355,2363],{"type":26,"tag":238,"props":2347,"children":2348},{},[2349],{"type":26,"tag":67,"props":2350,"children":2352},{"className":2351},[],[2353],{"type":31,"value":2354},"s2-drill-run",{"type":26,"tag":238,"props":2356,"children":2357},{},[2358],{"type":26,"tag":67,"props":2359,"children":2361},{"className":2360},[],[2362],{"type":31,"value":2256},{"type":26,"tag":238,"props":2364,"children":2365},{},[2366],{"type":31,"value":2367},"Receipts; PagerDuty (not connected) ringed",{"type":26,"tag":206,"props":2369,"children":2370},{},[2371,2380,2389],{"type":26,"tag":238,"props":2372,"children":2373},{},[2374],{"type":26,"tag":67,"props":2375,"children":2377},{"className":2376},[],[2378],{"type":31,"value":2379},"close",{"type":26,"tag":238,"props":2381,"children":2382},{},[2383],{"type":26,"tag":67,"props":2384,"children":2386},{"className":2385},[],[2387],{"type":31,"value":2388},"\u002Fcompliance",{"type":26,"tag":238,"props":2390,"children":2391},{},[2392],{"type":31,"value":2393},"What's still yours (ASI06, ASI09)",{"type":26,"tag":27,"props":2395,"children":2396},{},[2397,2402],{"type":26,"tag":43,"props":2398,"children":2399},{},[2400],{"type":31,"value":2401},"Signals, stops 1 and 2",{"type":31,"value":2403}," (W5 in the c125 note). Severity is the catalog's recommended one unless Tuned.",{"type":26,"tag":198,"props":2405,"children":2406},{},[2407,2438],{"type":26,"tag":202,"props":2408,"children":2409},{},[2410],{"type":26,"tag":206,"props":2411,"children":2412},{},[2413,2418,2423,2428,2433],{"type":26,"tag":210,"props":2414,"children":2415},{},[2416],{"type":31,"value":2417},"Stop",{"type":26,"tag":210,"props":2419,"children":2420},{},[2421],{"type":31,"value":2422},"Trigger",{"type":26,"tag":210,"props":2424,"children":2425},{},[2426],{"type":31,"value":2427},"Policy",{"type":26,"tag":210,"props":2429,"children":2430},{},[2431],{"type":31,"value":2432},"Finding",{"type":26,"tag":210,"props":2434,"children":2435},{},[2436],{"type":31,"value":2437},"Lights",{"type":26,"tag":231,"props":2439,"children":2440},{},[2441,2468,2493,2520,2548,2575,2599,2623,2650,2677,2702],{"type":26,"tag":206,"props":2442,"children":2443},{},[2444,2448,2453,2458,2463],{"type":26,"tag":238,"props":2445,"children":2446},{},[2447],{"type":31,"value":269},{"type":26,"tag":238,"props":2449,"children":2450},{},[2451],{"type":31,"value":2452},"an unsanctioned source is first seen",{"type":26,"tag":238,"props":2454,"children":2455},{},[2456],{"type":31,"value":2457},"P-MCP · P-PROVIDERS",{"type":26,"tag":238,"props":2459,"children":2460},{},[2461],{"type":31,"value":2462},"medium",{"type":26,"tag":238,"props":2464,"children":2465},{},[2466],{"type":31,"value":2467},"Sources failing a check · MCP servers · Open findings",{"type":26,"tag":206,"props":2469,"children":2470},{},[2471,2475,2480,2484,2489],{"type":26,"tag":238,"props":2472,"children":2473},{},[2474],{"type":31,"value":269},{"type":26,"tag":238,"props":2476,"children":2477},{},[2478],{"type":31,"value":2479},"a source loads at a version nobody reviewed",{"type":26,"tag":238,"props":2481,"children":2482},{},[2483],{"type":31,"value":1034},{"type":26,"tag":238,"props":2485,"children":2486},{},[2487],{"type":31,"value":2488},"medium (high on Production Macs, once severity can be scoped)",{"type":26,"tag":238,"props":2490,"children":2491},{},[2492],{"type":31,"value":2226},{"type":26,"tag":206,"props":2494,"children":2495},{},[2496,2500,2505,2512,2516],{"type":26,"tag":238,"props":2497,"children":2498},{},[2499],{"type":31,"value":269},{"type":26,"tag":238,"props":2501,"children":2502},{},[2503],{"type":31,"value":2504},"a look-alike name",{"type":26,"tag":238,"props":2506,"children":2507},{},[2508],{"type":26,"tag":102,"props":2509,"children":2510},{},[2511],{"type":31,"value":548},{"type":26,"tag":238,"props":2513,"children":2514},{},[2515],{"type":31,"value":2462},{"type":26,"tag":238,"props":2517,"children":2518},{},[2519],{"type":31,"value":2226},{"type":26,"tag":206,"props":2521,"children":2522},{},[2523,2527,2532,2539,2544],{"type":26,"tag":238,"props":2524,"children":2525},{},[2526],{"type":31,"value":269},{"type":26,"tag":238,"props":2528,"children":2529},{},[2530],{"type":31,"value":2531},"a source is named in a known incident",{"type":26,"tag":238,"props":2533,"children":2534},{},[2535],{"type":26,"tag":102,"props":2536,"children":2537},{},[2538],{"type":31,"value":548},{"type":26,"tag":238,"props":2540,"children":2541},{},[2542],{"type":31,"value":2543},"high",{"type":26,"tag":238,"props":2545,"children":2546},{},[2547],{"type":31,"value":2226},{"type":26,"tag":206,"props":2549,"children":2550},{},[2551,2555,2560,2567,2571],{"type":26,"tag":238,"props":2552,"children":2553},{},[2554],{"type":31,"value":269},{"type":26,"tag":238,"props":2556,"children":2557},{},[2558],{"type":31,"value":2559},"a source's tool surface changes since approval",{"type":26,"tag":238,"props":2561,"children":2562},{},[2563],{"type":26,"tag":102,"props":2564,"children":2565},{},[2566],{"type":31,"value":548},{"type":26,"tag":238,"props":2568,"children":2569},{},[2570],{"type":31,"value":2462},{"type":26,"tag":238,"props":2572,"children":2573},{},[2574],{"type":31,"value":2226},{"type":26,"tag":206,"props":2576,"children":2577},{},[2578,2582,2587,2591,2595],{"type":26,"tag":238,"props":2579,"children":2580},{},[2581],{"type":31,"value":269},{"type":26,"tag":238,"props":2583,"children":2584},{},[2585],{"type":31,"value":2586},"a response trips injection inspection",{"type":26,"tag":238,"props":2588,"children":2589},{},[2590],{"type":31,"value":615},{"type":26,"tag":238,"props":2592,"children":2593},{},[2594],{"type":31,"value":2462},{"type":26,"tag":238,"props":2596,"children":2597},{},[2598],{"type":31,"value":2226},{"type":26,"tag":206,"props":2600,"children":2601},{},[2602,2606,2611,2615,2619],{"type":26,"tag":238,"props":2603,"children":2604},{},[2605],{"type":31,"value":269},{"type":26,"tag":238,"props":2607,"children":2608},{},[2609],{"type":31,"value":2610},"traffic to a source isn't on approved encrypted transport",{"type":26,"tag":238,"props":2612,"children":2613},{},[2614],{"type":31,"value":569},{"type":26,"tag":238,"props":2616,"children":2617},{},[2618],{"type":31,"value":2462},{"type":26,"tag":238,"props":2620,"children":2621},{},[2622],{"type":31,"value":2226},{"type":26,"tag":206,"props":2624,"children":2625},{},[2626,2630,2635,2640,2645],{"type":26,"tag":238,"props":2627,"children":2628},{},[2629],{"type":31,"value":297},{"type":26,"tag":238,"props":2631,"children":2632},{},[2633],{"type":31,"value":2634},"sensitive data in a tool payload to an unsanctioned server",{"type":26,"tag":238,"props":2636,"children":2637},{},[2638],{"type":31,"value":2639},"P-SENS-DETECT + P-MCP",{"type":26,"tag":238,"props":2641,"children":2642},{},[2643],{"type":31,"value":2644},"high + medium",{"type":26,"tag":238,"props":2646,"children":2647},{},[2648],{"type":31,"value":2649},"Sensitive data, unapproved destinations · Open findings",{"type":26,"tag":206,"props":2651,"children":2652},{},[2653,2657,2662,2667,2672],{"type":26,"tag":238,"props":2654,"children":2655},{},[2656],{"type":31,"value":297},{"type":26,"tag":238,"props":2658,"children":2659},{},[2660],{"type":31,"value":2661},"a consequential call waits for approval",{"type":26,"tag":238,"props":2663,"children":2664},{},[2665],{"type":31,"value":2666},"P-TOOL-APPROVAL",{"type":26,"tag":238,"props":2668,"children":2669},{},[2670],{"type":31,"value":2671},"an approval request, not a finding",{"type":26,"tag":238,"props":2673,"children":2674},{},[2675],{"type":31,"value":2676},"(stop 3's approvals view)",{"type":26,"tag":206,"props":2678,"children":2679},{},[2680,2684,2689,2693,2698],{"type":26,"tag":238,"props":2681,"children":2682},{},[2683],{"type":31,"value":297},{"type":26,"tag":238,"props":2685,"children":2686},{},[2687],{"type":31,"value":2688},"a delete ran without approval",{"type":26,"tag":238,"props":2690,"children":2691},{},[2692],{"type":31,"value":2666},{"type":26,"tag":238,"props":2694,"children":2695},{},[2696],{"type":31,"value":2697},"high, after Tune",{"type":26,"tag":238,"props":2699,"children":2700},{},[2701],{"type":31,"value":2233},{"type":26,"tag":206,"props":2703,"children":2704},{},[2705,2709,2714,2725,2730],{"type":26,"tag":238,"props":2706,"children":2707},{},[2708],{"type":31,"value":297},{"type":26,"tag":238,"props":2710,"children":2711},{},[2712],{"type":31,"value":2713},"a tool not on the server's list is called",{"type":26,"tag":238,"props":2715,"children":2716},{},[2717,2719,2723],{"type":31,"value":2718},"P-TOOL-ALLOW (",{"type":26,"tag":102,"props":2720,"children":2721},{},[2722],{"type":31,"value":548},{"type":31,"value":2724},": per server)",{"type":26,"tag":238,"props":2726,"children":2727},{},[2728],{"type":31,"value":2729},"medium; blocked under Enforce",{"type":26,"tag":238,"props":2731,"children":2732},{},[2733],{"type":31,"value":2233},{"type":26,"tag":27,"props":2735,"children":2736},{},[2737],{"type":26,"tag":43,"props":2738,"children":2739},{},[2740],{"type":31,"value":2741},"What the lab decided beyond the boards:",{"type":26,"tag":662,"props":2743,"children":2744},{},[2745,2755,2765,2775,2785,2802,2812,2822],{"type":26,"tag":132,"props":2746,"children":2747},{},[2748,2753],{"type":26,"tag":43,"props":2749,"children":2750},{},[2751],{"type":31,"value":2752},"Examples replace the ring.",{"type":31,"value":2754}," When an Example covers a target, the step doesn't ring it; the dashed frame and its tab (\"Example · your live value is N\") do that job.",{"type":26,"tag":132,"props":2756,"children":2757},{},[2758,2763],{"type":26,"tag":43,"props":2759,"children":2760},{},[2761],{"type":31,"value":2762},"\"So, today\" is computed",{"type":31,"value":2764},", from each signal policy's live mode and from the channels that take each severity. So the sentence changes when Tune changes the draft or someone connects PagerDuty.",{"type":26,"tag":132,"props":2766,"children":2767},{},[2768,2773],{"type":26,"tag":43,"props":2769,"children":2770},{},[2771],{"type":31,"value":2772},"The tour stages, and saves to the draft.",{"type":31,"value":2774}," It never publishes: the PublishTray still owns publishing. The stage action reports how many changes it staged.",{"type":26,"tag":132,"props":2776,"children":2777},{},[2778,2783],{"type":26,"tag":43,"props":2779,"children":2780},{},[2781],{"type":31,"value":2782},"The new MCP controls are page state.",{"type":31,"value":2784}," The tool list per server and the approval verb set live on the page until the model has them. P-TOOL-APPROVAL's mode is real and staged.",{"type":26,"tag":132,"props":2786,"children":2787},{},[2788,2793,2795,2800],{"type":26,"tag":43,"props":2789,"children":2790},{},[2791],{"type":31,"value":2792},"A drill raises what live would raise.",{"type":31,"value":2794}," A signal whose policy is Off is struck through (\"Off: not raised\") and isn't delivered. The Example's extra findings come from the same raised signals. \"Your settings today\" means ",{"type":26,"tag":102,"props":2796,"children":2797},{},[2798],{"type":31,"value":2799},"live",{"type":31,"value":2801},": a change staged in the draft shows there only once it's published, and the panel says so.",{"type":26,"tag":132,"props":2803,"children":2804},{},[2805,2810],{"type":26,"tag":43,"props":2806,"children":2807},{},[2808],{"type":31,"value":2809},"Home leads with what needs attention.",{"type":31,"value":2811}," Open findings, Sensitive data and Machines come first, then Sources, MCP servers and Agent sessions. Both Drill beats' Examples sit in the two left columns, clear of the floating panel.",{"type":26,"tag":132,"props":2813,"children":2814},{},[2815,2820],{"type":26,"tag":43,"props":2816,"children":2817},{},[2818],{"type":31,"value":2819},"The close rings OWASP Agentic's row",{"type":31,"value":2821}," on Compliance & Frameworks. That row still shows the listing's \"Compliance 10%\", which this cycle's Stage 2 cleanup (X1, X2) removes; until then the tour points at a percentage it shouldn't.",{"type":26,"tag":132,"props":2823,"children":2824},{},[2825,2830,2832,2838],{"type":26,"tag":43,"props":2826,"children":2827},{},[2828],{"type":31,"value":2829},"The paper link",{"type":31,"value":2831}," goes to OWASP's resource page. Hosting the PDF with ",{"type":26,"tag":67,"props":2833,"children":2835},{"className":2834},[],[2836],{"type":31,"value":2837},"#page=",{"type":31,"value":2839}," anchors remains framework detail's decision (v1 §3).",{"type":26,"tag":84,"props":2841,"children":2842},{"id":2123},[2843],{"type":31,"value":21},{"type":26,"tag":128,"props":2845,"children":2846},{},[2847,2852,2857,2862,2880,2885],{"type":26,"tag":132,"props":2848,"children":2849},{},[2850],{"type":31,"value":2851},"Is \"source\" the right noun for the customer? Alternatives: \"supply\", \"parts\", \"components\". The paper says components; \"source health\" is Mark's phrase.",{"type":26,"tag":132,"props":2853,"children":2854},{},[2855],{"type":31,"value":2856},"Does knowledge\u002Fmemory (RAG, vector stores) belong in Source health now, given Qpoint only sees the endpoint and what's sent to it?",{"type":26,"tag":132,"props":2858,"children":2859},{},[2860],{"type":31,"value":2861},"Stop 6 (host guardrails): in, once the lab has an endpoint view, or left in the close?",{"type":26,"tag":132,"props":2863,"children":2864},{},[2865,2867,2871,2873,2878],{"type":31,"value":2866},"Should ",{"type":26,"tag":102,"props":2868,"children":2869},{},[2870],{"type":31,"value":773},{"type":31,"value":2872}," be consequential? The artboards ring only sends, deletes and executes. A \"writes need approval\" default would pause 413 ",{"type":26,"tag":67,"props":2874,"children":2876},{"className":2875},[],[2877],{"type":31,"value":969},{"type":31,"value":2879}," calls a week.",{"type":26,"tag":132,"props":2881,"children":2882},{},[2883],{"type":31,"value":2884},"The Prove beat for stops 1 and 2: one shared evidence view (findings + config history, filtered to the stop), or a board per stop?",{"type":26,"tag":132,"props":2886,"children":2887},{},[2888],{"type":31,"value":2889},"Do drill receipts belong only in the delivery log, or also on framework detail as \"alert path last tested\" (for ASI08 and incident-response requirements)? They are kept apart from findings and evidence today.",1794599401571]