{
  "alg": "Ed25519",
  "atom_id": "oao-AGNO-7725a22b6e",
  "decision": "GOVERNED:UNGOVERNED",
  "evidence": {
    "ontology": {
      "action_maps": [
        {
          "label": "a",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_a"
        },
        {
          "label": "add",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_add"
        },
        {
          "label": "add_item",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_add_item"
        },
        {
          "label": "add_to_base",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_add_to_base"
        },
        {
          "label": "add_to_watchlist",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_add_to_watchlist"
        },
        {
          "label": "agent_team_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_agent_team_func"
        },
        {
          "label": "Agile",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_agile"
        },
        {
          "label": "Angular",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_angular"
        },
        {
          "label": "answer_from_known_questions",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_answer_from_known_questions"
        },
        {
          "label": "approve_deployment",
          "mappings": [
            {
              "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_approve_deployment"
        },
        {
          "label": "ask_question",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_ask_question"
        },
        {
          "label": "ask_user",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_ask_user"
        },
        {
          "label": "ask_user_2",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_ask_user_2"
        },
        {
          "label": "assess_risk_score",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_assess_risk_score"
        },
        {
          "label": "async_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_async_func"
        },
        {
          "label": "async_function",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_async_function"
        },
        {
          "label": "async_gen_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_async_gen_func"
        },
        {
          "label": "async_generator",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_async_generator"
        },
        {
          "label": "audited_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_audited_func"
        },
        {
          "label": "AWS",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_aws"
        },
        {
          "label": "Azure",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_azure"
        },
        {
          "label": "b",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_b"
        },
        {
          "label": "bare_audit",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_bare_audit"
        },
        {
          "label": "bare_audit_2",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_bare_audit_2"
        },
        {
          "label": "basic_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_basic_func"
        },
        {
          "label": "book_flight",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_book_flight"
        },
        {
          "label": "book-hotel",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_book_hotel"
        },
        {
          "label": "C#",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_c"
        },
        {
          "label": "calculate_compound_interest",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_calculate_compound_interest"
        },
        {
          "label": "calculate_monthly_payment",
          "mappings": [
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-5",
              "name": "Separation of Duties",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MANAGE",
              "name": "Manage function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "separation of duties mitigates valid-account / privilege abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1078",
              "name": "Valid Accounts",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_calculate_monthly_payment"
        },
        {
          "label": "cancel-hotel",
          "mappings": [
            {
              "basis": "inferred from action verb 'cancel'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'cancel'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_cancel_hotel"
        },
        {
          "label": "cancel_subscription",
          "mappings": [
            {
              "basis": "inferred from action verb 'cancel'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'cancel'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_cancel_subscription"
        },
        {
          "label": "CI/CD",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_ci_cd"
        },
        {
          "label": "collect_deployment_specs",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_collect_deployment_specs"
        },
        {
          "label": "collect_value",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_collect_value"
        },
        {
          "label": "complex_types_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_complex_types_func"
        },
        {
          "label": "compute",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_compute"
        },
        {
          "label": "conclude_incident",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_conclude_incident"
        },
        {
          "label": "config",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_config"
        },
        {
          "label": "configured_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_configured_func"
        },
        {
          "label": "create_memory",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_memory"
        },
        {
          "label": "create_plan",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_plan"
        },
        {
          "label": "create_session",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_session"
        },
        {
          "label": "create_support_ticket",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_support_ticket"
        },
        {
          "label": "create_task",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_task"
        },
        {
          "label": "create_user",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_create_user"
        },
        {
          "label": "critical_action",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_critical_action"
        },
        {
          "label": "dangerous_action",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_dangerous_action"
        },
        {
          "label": "decorated_tool",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_decorated_tool"
        },
        {
          "label": "decrement",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_decrement"
        },
        {
          "label": "delete_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_file"
        },
        {
          "label": "delete_memories",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_memories"
        },
        {
          "label": "delete_memory",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_memory"
        },
        {
          "label": "delete_session",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_session"
        },
        {
          "label": "delete_sessions",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_sessions"
        },
        {
          "label": "delete_user_account",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_user_account"
        },
        {
          "label": "delete_user_data",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_delete_user_data"
        },
        {
          "label": "deploy_to_env",
          "mappings": [
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_deploy_to_env"
        },
        {
          "label": "deploy_to_production",
          "mappings": [
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_deploy_to_production"
        },
        {
          "label": "deploy_to_staging",
          "mappings": [
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_deploy_to_staging"
        },
        {
          "label": "divide",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_divide"
        },
        {
          "label": "Docker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_docker"
        },
        {
          "label": "dropped",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_dropped"
        },
        {
          "label": "exclusive_flags_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_exclusive_flags_func"
        },
        {
          "label": "execute_shell_command",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_execute_shell_command"
        },
        {
          "label": "file_incident_retro",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_file_incident_retro"
        },
        {
          "label": "finalize_plan",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_finalize_plan"
        },
        {
          "label": "find-hotels-by-tier-and-location",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_find_hotels_by_tier_and_location"
        },
        {
          "label": "func_a",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_func_a"
        },
        {
          "label": "func_b",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_func_b"
        },
        {
          "label": "func_with_agent_type",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_func_with_agent_type"
        },
        {
          "label": "func_with_team_type",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_func_with_team_type"
        },
        {
          "label": "function",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_function"
        },
        {
          "label": "generate_haiku",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_generate_haiku"
        },
        {
          "label": "get_answer_to_life_universe_and_everything",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_answer_to_life_universe_and_everything"
        },
        {
          "label": "get_birthdays_this_week",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_birthdays_this_week"
        },
        {
          "label": "get_city_timezone",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_city_timezone"
        },
        {
          "label": "get_count",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_count"
        },
        {
          "label": "get_current_weather",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_current_weather"
        },
        {
          "label": "get_customer_profile",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_customer_profile"
        },
        {
          "label": "get_events",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_events"
        },
        {
          "label": "get_greeting",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_greeting"
        },
        {
          "label": "get_large_data",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_large_data"
        },
        {
          "label": "get_memories",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_memories"
        },
        {
          "label": "get_memory",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_memory"
        },
        {
          "label": "get_population",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_population"
        },
        {
          "label": "get_session",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_session"
        },
        {
          "label": "get_session_run",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_get_session_run"
        },
        {
          "label": "get_session_runs",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_session_runs"
        },
        {
          "label": "get_sessions",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_sessions"
        },
        {
          "label": "get_temperature",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_temperature"
        },
        {
          "label": "get_the_weather",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_the_weather"
        },
        {
          "label": "get_time",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_time"
        },
        {
          "label": "get_top_hackernews_stories",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_top_hackernews_stories"
        },
        {
          "label": "get_top_hackernews_stories_async",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_top_hackernews_stories_async"
        },
        {
          "label": "get_user_location",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_user_location"
        },
        {
          "label": "get_user_preference",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_user_preference"
        },
        {
          "label": "get_value",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_value"
        },
        {
          "label": "get_weather",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_get_weather"
        },
        {
          "label": "Git",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_git"
        },
        {
          "label": "greet",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_greet"
        },
        {
          "label": "group_del_stock",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_group_del_stock"
        },
        {
          "label": "hooked_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_hooked_func"
        },
        {
          "label": "HTML/CSS",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_html_css"
        },
        {
          "label": "increment",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_increment"
        },
        {
          "label": "invalid_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_invalid_func"
        },
        {
          "label": "Java",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_java"
        },
        {
          "label": "JavaScript",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_javascript"
        },
        {
          "label": "Jira",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_jira"
        },
        {
          "label": "kept",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_kept"
        },
        {
          "label": "kubectl_get_pods",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_kubectl_get_pods"
        },
        {
          "label": "Kubernetes",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_kubernetes"
        },
        {
          "label": "list_active_subscriptions",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_list_active_subscriptions"
        },
        {
          "label": "list_recent_incidents",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_list_recent_incidents"
        },
        {
          "label": "lookup_customer",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_lookup_customer"
        },
        {
          "label": "lookup_product_price",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_lookup_product_price"
        },
        {
          "label": "lookup_runbook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_lookup_runbook"
        },
        {
          "label": "lookup_service",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_lookup_service"
        },
        {
          "label": "lookup_shipping_time",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_lookup_shipping_time"
        },
        {
          "label": "modulo",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_modulo"
        },
        {
          "label": "mul",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_mul"
        },
        {
          "label": "multiply",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_multiply"
        },
        {
          "label": "multiply_number",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_multiply_number"
        },
        {
          "label": "my_tool",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_my_tool"
        },
        {
          "label": "MySQL",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_mysql"
        },
        {
          "label": ".NET",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_net"
        },
        {
          "label": "Node.js",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_node_js"
        },
        {
          "label": "old_style",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_old_style"
        },
        {
          "label": "plan_delivery",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_plan_delivery"
        },
        {
          "label": "plan_trip",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_plan_trip"
        },
        {
          "label": "post_to_slack",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_post_to_slack"
        },
        {
          "label": "PostgreSQL",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_postgresql"
        },
        {
          "label": "process_payment",
          "mappings": [
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-5",
              "name": "Separation of Duties",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MANAGE",
              "name": "Manage function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "separation of duties mitigates valid-account / privilege abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1078",
              "name": "Valid Accounts",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_process_payment"
        },
        {
          "label": "publish_draft",
          "mappings": [
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_publish_draft"
        },
        {
          "label": "Python",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_python"
        },
        {
          "label": "query_database",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_query_database"
        },
        {
          "label": "React",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_react"
        },
        {
          "label": "React Native",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_react_native"
        },
        {
          "label": "rename_session",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_rename_session"
        },
        {
          "label": "restart_service",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_restart_service"
        },
        {
          "label": "run_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_agent"
        },
        {
          "label": "run_batch_analysis",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_batch_analysis"
        },
        {
          "label": "run_deep_analysis",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_deep_analysis"
        },
        {
          "label": "run_deep_scan",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_deep_scan"
        },
        {
          "label": "run_detailed_analysis",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_detailed_analysis"
        },
        {
          "label": "run_diagnostic",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_diagnostic"
        },
        {
          "label": "run_external",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_external"
        },
        {
          "label": "run_external_2",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_external_2"
        },
        {
          "label": "run_security_scan",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_security_scan"
        },
        {
          "label": "run_shell_command",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_shell_command"
        },
        {
          "label": "run_team",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_team"
        },
        {
          "label": "run_workflow",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_run_workflow"
        },
        {
          "label": "save_learning",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_save_learning"
        },
        {
          "label": "save_note",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_save_note"
        },
        {
          "label": "scale_service",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_scale_service"
        },
        {
          "label": "Scrum",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_scrum"
        },
        {
          "label": "search_existing_tickets",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_search_existing_tickets"
        },
        {
          "label": "search-hotels-by-location",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_search_hotels_by_location"
        },
        {
          "label": "search-hotels-by-name",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_search_hotels_by_name"
        },
        {
          "label": "search_products",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_search_products"
        },
        {
          "label": "send_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_send_alert"
        },
        {
          "label": "send_bulk_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_send_bulk_email"
        },
        {
          "label": "send_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_send_email"
        },
        {
          "label": "send_money",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_send_money"
        },
        {
          "label": "send_sms",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_send_sms"
        },
        {
          "label": "sensitive_action",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sensitive_action"
        },
        {
          "label": "sensitive_action_2",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sensitive_action_2"
        },
        {
          "label": "SQL",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sql"
        },
        {
          "label": "square",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_square"
        },
        {
          "label": "standalone_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_standalone_func"
        },
        {
          "label": "stream_numbers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_stream_numbers"
        },
        {
          "label": "sub",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sub"
        },
        {
          "label": "submit_order",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_submit_order"
        },
        {
          "label": "subtract",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_subtract"
        },
        {
          "label": "sync_function",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sync_function"
        },
        {
          "label": "sync_generator",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_sync_generator"
        },
        {
          "label": "Terraform",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_terraform"
        },
        {
          "label": "test_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_test_func"
        },
        {
          "label": "tool_hooked_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_tool_hooked_func"
        },
        {
          "label": "transfer_funds",
          "mappings": [
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-5",
              "name": "Separation of Duties",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MANAGE",
              "name": "Manage function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "separation of duties mitigates valid-account / privilege abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1078",
              "name": "Valid Accounts",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_transfer_funds"
        },
        {
          "label": "typed_function",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_typed_function"
        },
        {
          "label": "update-hotel",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_update_hotel"
        },
        {
          "label": "update_memory",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_update_memory"
        },
        {
          "label": "update_session",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_update_session"
        },
        {
          "label": "update_state",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "cap_update_state"
        },
        {
          "label": "user_input_func",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_user_input_func"
        },
        {
          "label": "web_extract",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_web_extract"
        },
        {
          "label": "web_search",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_web_search"
        },
        {
          "label": "delete",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete"
        },
        {
          "label": "delete_agno_config",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_agno_config"
        },
        {
          "label": "delete_all_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_content"
        },
        {
          "label": "delete_all_knowledge_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_knowledge_content"
        },
        {
          "label": "delete_all_memories",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_memories"
        },
        {
          "label": "delete_antigravity_agent",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_antigravity_agent"
        },
        {
          "label": "delete_approval",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_approval"
        },
        {
          "label": "delete_awaiting_indicator",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_awaiting_indicator"
        },
        {
          "label": "delete_by_content_hash",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_content_hash"
        },
        {
          "label": "delete_by_content_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_content_id"
        },
        {
          "label": "delete_by_external_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_external_id"
        },
        {
          "label": "delete_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_id"
        },
        {
          "label": "delete_by_metadata",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_metadata"
        },
        {
          "label": "delete_by_name",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_name"
        },
        {
          "label": "delete_component",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_component"
        },
        {
          "label": "delete_config",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_config"
        },
        {
          "label": "delete_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_content"
        },
        {
          "label": "delete_content_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_content_by_id"
        },
        {
          "label": "delete_cultural_knowledge",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_cultural_knowledge"
        },
        {
          "label": "delete_customer_profile",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_customer_profile"
        },
        {
          "label": "delete_document",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_document"
        },
        {
          "label": "delete_eval_run",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_eval_run"
        },
        {
          "label": "delete_eval_runs",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_eval_runs"
        },
        {
          "label": "delete_fact",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_fact"
        },
        {
          "label": "delete_file_search_store",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_file_search_store"
        },
        {
          "label": "delete_files_in_dir",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_files_in_dir"
        },
        {
          "label": "delete_from_fs",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_from_fs"
        },
        {
          "label": "delete_infra",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_infra"
        },
        {
          "label": "delete_knowledge_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_knowledge_content"
        },
        {
          "label": "delete_learning",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_learning"
        },
        {
          "label": "delete_meeting",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_meeting"
        },
        {
          "label": "delete_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_message"
        },
        {
          "label": "delete_old_records",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_old_records"
        },
        {
          "label": "delete_output_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_output_file"
        },
        {
          "label": "delete_record",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_record"
        },
        {
          "label": "delete_repository",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_repository"
        },
        {
          "label": "delete_resources",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_resources"
        },
        {
          "label": "delete_schedule",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_schedule"
        },
        {
          "label": "delete_step",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_step"
        },
        {
          "label": "delete_task",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_task"
        },
        {
          "label": "delete_user_memories",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_memories"
        },
        {
          "label": "delete_user_memory",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_memory"
        },
        {
          "label": "drop",
          "mappings": [
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_drop"
        },
        {
          "label": "drop_namespace",
          "mappings": [
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_drop_namespace"
        },
        {
          "label": "email_user",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_email_user"
        },
        {
          "label": "exec_in_container",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_exec_in_container"
        },
        {
          "label": "execute",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute"
        },
        {
          "label": "execute_entrypoint",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_entrypoint"
        },
        {
          "label": "execute_entrypoint_async",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_entrypoint_async"
        },
        {
          "label": "execute_instructions",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_instructions"
        },
        {
          "label": "execute_post_hooks",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_post_hooks"
        },
        {
          "label": "execute_pre_hooks",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_pre_hooks"
        },
        {
          "label": "execute_query_with_pagination",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_query_with_pagination"
        },
        {
          "label": "execute_step_async_with_index",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_step_async_with_index"
        },
        {
          "label": "execute_step_stream_async_with_index",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_step_stream_async_with_index"
        },
        {
          "label": "execute_step_stream_with_index",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_step_stream_with_index"
        },
        {
          "label": "execute_step_with_index",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_step_with_index"
        },
        {
          "label": "execute_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_stream"
        },
        {
          "label": "execute_system_message",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_system_message"
        },
        {
          "label": "execute_task",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_task"
        },
        {
          "label": "execute_tasks_parallel",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_tasks_parallel"
        },
        {
          "label": "execute_workflow_background",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_workflow_background"
        },
        {
          "label": "execute_workflow_background_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_workflow_background_stream"
        },
        {
          "label": "export",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export"
        },
        {
          "label": "export_chat_history",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_chat_history"
        },
        {
          "label": "export_table_to_path",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_table_to_path"
        },
        {
          "label": "migrate",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate"
        },
        {
          "label": "migrate_database",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_database"
        },
        {
          "label": "migrate_pgvector_table",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_pgvector_table"
        },
        {
          "label": "migrate_singlestore_table",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_singlestore_table"
        },
        {
          "label": "migrate_table_from_v1_to_v2",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_table_from_v1_to_v2"
        },
        {
          "label": "migrate_table_in_batches",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_table_in_batches"
        },
        {
          "label": "post_check",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_check"
        },
        {
          "label": "post_create",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_create"
        },
        {
          "label": "post_delete",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_post_delete"
        },
        {
          "label": "post_denial_cards",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_denial_cards"
        },
        {
          "label": "post_ephemeral",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_ephemeral"
        },
        {
          "label": "post_hook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_hook"
        },
        {
          "label": "post_hook_1",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_hook_1"
        },
        {
          "label": "post_hook_2",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_hook_2"
        },
        {
          "label": "post_hook_async",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_hook_async"
        },
        {
          "label": "post_hook_log",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_hook_log"
        },
        {
          "label": "post_pause_card",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_pause_card"
        },
        {
          "label": "post_telegram_webhook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_telegram_webhook"
        },
        {
          "label": "post_update",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_post_update"
        },
        {
          "label": "publish",
          "mappings": [
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_publish"
        },
        {
          "label": "reject",
          "mappings": [
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_reject"
        },
        {
          "label": "reject_reason_block_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_reject_reason_block_id"
        },
        {
          "label": "reject_tool_call",
          "mappings": [
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_reject_tool_call"
        },
        {
          "label": "release_schedule",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release_schedule"
        },
        {
          "label": "run",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run"
        },
        {
          "label": "run_accuracy_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_accuracy_eval"
        },
        {
          "label": "run_adaptive_assistant_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_adaptive_assistant_example"
        },
        {
          "label": "run_adjudicator",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_adjudicator"
        },
        {
          "label": "run_advanced_filtering_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_advanced_filtering_demo"
        },
        {
          "label": "run_agent_as_judge_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_as_judge_eval"
        },
        {
          "label": "run_agent_manual_loading",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_manual_loading"
        },
        {
          "label": "run_agent_no_ctx_manager",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_no_ctx_manager"
        },
        {
          "label": "run_agent_non_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_non_streaming"
        },
        {
          "label": "run_agent_prompt",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_prompt"
        },
        {
          "label": "run_agent_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_stream"
        },
        {
          "label": "run_agent_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_streaming"
        },
        {
          "label": "run_agent_with_events",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_with_events"
        },
        {
          "label": "run_agent_with_multimcp",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent_with_multimcp"
        },
        {
          "label": "run_agents",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agents"
        },
        {
          "label": "run_antigravity_task",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_antigravity_task"
        },
        {
          "label": "run_async",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async"
        },
        {
          "label": "run_async_batch",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_batch"
        },
        {
          "label": "run_async_collaboration",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_collaboration"
        },
        {
          "label": "run_async_evaluation",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_evaluation"
        },
        {
          "label": "run_async_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_example"
        },
        {
          "label": "run_async_examples",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_examples"
        },
        {
          "label": "run_async_reasoning_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_reasoning_demo"
        },
        {
          "label": "run_async_router",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_router"
        },
        {
          "label": "run_async_streaming_examples",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_streaming_examples"
        },
        {
          "label": "run_async_summary_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_summary_demo"
        },
        {
          "label": "run_async_tool_compression",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_tool_compression"
        },
        {
          "label": "run_background_command",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_background_command"
        },
        {
          "label": "run_basic_examples",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_basic_examples"
        },
        {
          "label": "run_chat_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_chat_agent"
        },
        {
          "label": "run_code",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_code"
        },
        {
          "label": "run_command",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_command"
        },
        {
          "label": "run_component",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_component"
        },
        {
          "label": "run_concurrent_chat_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_concurrent_chat_agent"
        },
        {
          "label": "run_container",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_container"
        },
        {
          "label": "run_cultural_knowledge_task",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_cultural_knowledge_task"
        },
        {
          "label": "run_custom_antigravity_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_custom_antigravity_agent"
        },
        {
          "label": "run_cypher_query",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_cypher_query"
        },
        {
          "label": "run_dataframe_operation",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_dataframe_operation"
        },
        {
          "label": "run_default_reasoning",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_default_reasoning"
        },
        {
          "label": "run_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_demo"
        },
        {
          "label": "run_dispatch",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_dispatch"
        },
        {
          "label": "run_docker_compose_down",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_docker_compose_down"
        },
        {
          "label": "run_docker_compose_up",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_docker_compose_up"
        },
        {
          "label": "run_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_eval"
        },
        {
          "label": "run_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_example"
        },
        {
          "label": "run_examples",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_examples"
        },
        {
          "label": "run_fail_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_fail_example"
        },
        {
          "label": "run_function_call",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_function_call"
        },
        {
          "label": "run_function_calls",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_function_calls"
        },
        {
          "label": "run_gibsonai_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_gibsonai_agent"
        },
        {
          "label": "run_interactive",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_interactive"
        },
        {
          "label": "run_interactive_loop",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_interactive_loop"
        },
        {
          "label": "run_matches_component",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_matches_component"
        },
        {
          "label": "run_mcp_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_mcp_agent"
        },
        {
          "label": "run_member_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_member_agent"
        },
        {
          "label": "run_memories_update",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_memories_update"
        },
        {
          "label": "run_memory_task",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_memory_task"
        },
        {
          "label": "run_migration",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_migration"
        },
        {
          "label": "run_ocr_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_ocr_example"
        },
        {
          "label": "run_output_event_from_dict",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_output_event_from_dict"
        },
        {
          "label": "run_pause_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_pause_example"
        },
        {
          "label": "run_performance_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_performance_eval"
        },
        {
          "label": "run_prompt",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_prompt"
        },
        {
          "label": "run_python_code",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_python_code"
        },
        {
          "label": "run_python_file_return_variable",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_python_file_return_variable"
        },
        {
          "label": "run_python_script",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_python_script"
        },
        {
          "label": "run_query",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_query"
        },
        {
          "label": "run_race_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_race_test"
        },
        {
          "label": "run_reliability_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_reliability_eval"
        },
        {
          "label": "run_remote_examples",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_remote_examples"
        },
        {
          "label": "run_reviewer",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_reviewer"
        },
        {
          "label": "run_script",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_script"
        },
        {
          "label": "run_search",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_search"
        },
        {
          "label": "run_server",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_server"
        },
        {
          "label": "run_shell",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_shell"
        },
        {
          "label": "run_skip_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_skip_example"
        },
        {
          "label": "run_sql",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_sql"
        },
        {
          "label": "run_sql_query",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_sql_query"
        },
        {
          "label": "run_sync",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_sync"
        },
        {
          "label": "run_sync_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_sync_example"
        },
        {
          "label": "run_task_workflow_example",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_task_workflow_example"
        },
        {
          "label": "run_team_for_user",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_team_for_user"
        },
        {
          "label": "run_team_non_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_team_non_streaming"
        },
        {
          "label": "run_team_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_team_stream"
        },
        {
          "label": "run_team_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_team_streaming"
        },
        {
          "label": "run_team_with_events",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_team_with_events"
        },
        {
          "label": "run_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_test"
        },
        {
          "label": "run_tool",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_tool"
        },
        {
          "label": "run_trace_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_trace_demo"
        },
        {
          "label": "run_user_profile_update",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_user_profile_update"
        },
        {
          "label": "run_variant",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_variant"
        },
        {
          "label": "run_with_events",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_events"
        },
        {
          "label": "run_with_message",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_message"
        },
        {
          "label": "run_with_output",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_output"
        },
        {
          "label": "run_with_retries",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_retries"
        },
        {
          "label": "run_workflow_demo",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_workflow_demo"
        },
        {
          "label": "run_workflow_non_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_workflow_non_streaming"
        },
        {
          "label": "run_workflow_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_workflow_stream"
        },
        {
          "label": "run_workflow_streaming",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_workflow_streaming"
        },
        {
          "label": "send_animation",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_animation"
        },
        {
          "label": "send_audio",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_audio"
        },
        {
          "label": "send_dm",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_dm"
        },
        {
          "label": "send_document",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_document"
        },
        {
          "label": "send_error",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_error"
        },
        {
          "label": "send_image",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_image"
        },
        {
          "label": "send_list_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_list_message"
        },
        {
          "label": "send_location",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_location"
        },
        {
          "label": "send_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_message"
        },
        {
          "label": "send_message_thread",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_message_thread"
        },
        {
          "label": "send_notification",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_notification"
        },
        {
          "label": "send_or_edit",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_or_edit"
        },
        {
          "label": "send_photo",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_photo"
        },
        {
          "label": "send_reaction",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_reaction"
        },
        {
          "label": "send_reply_buttons",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_reply_buttons"
        },
        {
          "label": "send_response_media",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_response_media"
        },
        {
          "label": "send_slack_message_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_slack_message_async"
        },
        {
          "label": "send_sticker",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_sticker"
        },
        {
          "label": "send_template_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_template_message"
        },
        {
          "label": "send_text_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_text_message"
        },
        {
          "label": "send_transaction",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_transaction"
        },
        {
          "label": "send_video",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_video"
        },
        {
          "label": "send_whatsapp_message_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_whatsapp_message_async"
        },
        {
          "label": "shutdown",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_shutdown"
        },
        {
          "label": "shutdown_sandbox",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_shutdown_sandbox"
        },
        {
          "label": "upload_and_send_media_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_and_send_media_async"
        },
        {
          "label": "upload_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_content"
        },
        {
          "label": "upload_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file"
        },
        {
          "label": "upload_knowledge_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_knowledge_content"
        },
        {
          "label": "upload_media_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_media_async"
        },
        {
          "label": "upload_response_media_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_response_media_async"
        },
        {
          "label": "upload_text_content",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_text_content"
        },
        {
          "label": "upload_to_file_search_store",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_to_file_search_store"
        }
      ],
      "edges": [
        {
          "dst": "fn_delete",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_agno_config",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_all_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_all_knowledge_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_all_memories",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_antigravity_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_approval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_awaiting_indicator",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_content_hash",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_content_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_external_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_metadata",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_by_name",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_component",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_config",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_content_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_cultural_knowledge",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_customer_profile",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_document",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_eval_run",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_eval_runs",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_fact",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_file_search_store",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_files_in_dir",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_from_fs",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_infra",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_knowledge_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_learning",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_meeting",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_memories",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_memory",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_old_records",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_output_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_record",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_repository",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_resources",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_schedule",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_session",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_sessions",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_step",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_task",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_user_memories",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_delete_user_memory",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_drop",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_drop_namespace",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_email_user",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_exec_in_container",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_entrypoint",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_entrypoint_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_instructions",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_post_hooks",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_pre_hooks",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_query_with_pagination",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_step_async_with_index",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_step_stream_async_with_index",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_step_stream_with_index",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_step_with_index",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_system_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_task",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_tasks_parallel",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_workflow_background",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_execute_workflow_background_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_export",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_export_chat_history",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_export_table_to_path",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate_database",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate_pgvector_table",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate_singlestore_table",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate_table_from_v1_to_v2",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_migrate_table_in_batches",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_check",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_create",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_delete",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_denial_cards",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_ephemeral",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_hook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_hook_1",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_hook_2",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_hook_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_hook_log",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_pause_card",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_telegram_webhook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_post_update",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_publish",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_reject",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_reject_reason_block_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_reject_tool_call",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_release_schedule",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_accuracy_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_adaptive_assistant_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_adjudicator",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_advanced_filtering_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_as_judge_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_manual_loading",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_no_ctx_manager",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_non_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_prompt",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_with_events",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agent_with_multimcp",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_agents",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_antigravity_task",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_batch",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_collaboration",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_evaluation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_examples",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_reasoning_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_router",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_streaming_examples",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_summary_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_async_tool_compression",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_background_command",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_basic_examples",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_chat_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_code",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_command",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_component",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_concurrent_chat_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_container",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_cultural_knowledge_task",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_custom_antigravity_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_cypher_query",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_dataframe_operation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_default_reasoning",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_dispatch",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_docker_compose_down",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_docker_compose_up",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_examples",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_fail_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_function_call",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_function_calls",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_gibsonai_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_interactive",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_interactive_loop",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_matches_component",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_mcp_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_member_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_memories_update",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_memory_task",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_migration",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_ocr_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_output_event_from_dict",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_pause_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_performance_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_prompt",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_python_code",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_python_file_return_variable",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_python_script",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_query",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_race_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_reliability_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_remote_examples",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_reviewer",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_script",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_search",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_shell",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_shell_command",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_skip_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_sql",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_sql_query",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_sync",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_sync_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_task_workflow_example",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team_for_user",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team_non_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_team_with_events",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_tool",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_trace_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_user_profile_update",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_variant",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_with_events",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_with_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_with_output",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_with_retries",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_workflow",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_workflow_demo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_workflow_non_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_workflow_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_run_workflow_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_animation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_audio",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_dm",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_document",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_error",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_image",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_list_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_location",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_message_thread",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_notification",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_or_edit",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_photo",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_reaction",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_reply_buttons",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_response_media",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_slack_message_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_sms",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_sticker",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_template_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_text_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_transaction",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_video",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_send_whatsapp_message_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_shutdown",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_shutdown_sandbox",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_and_send_media_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_knowledge_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_media_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_response_media_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_text_content",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "fn_upload_to_file_search_store",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_agno"
        },
        {
          "dst": "cap_a",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_add",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_add_item",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_add_to_base",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_add_to_watchlist",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_agent_team_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_agile",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_angular",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_answer_from_known_questions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_approve_deployment",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_ask_question",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_ask_user",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_ask_user_2",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_assess_risk_score",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_async_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_async_function",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_async_gen_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_async_generator",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_audited_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_aws",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_azure",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_b",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_bare_audit",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_bare_audit_2",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_basic_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_book_flight",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_book_hotel",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_c",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_calculate_compound_interest",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_calculate_monthly_payment",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_cancel_hotel",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_cancel_subscription",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_ci_cd",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_collect_deployment_specs",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_collect_value",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_complex_types_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_compute",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_conclude_incident",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_config",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_configured_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_memory",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_plan",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_session",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_support_ticket",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_task",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_create_user",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_critical_action",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_dangerous_action",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_decorated_tool",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_decrement",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_file",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_memories",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_memory",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_session",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_sessions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_user_account",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_delete_user_data",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_deploy_to_env",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_deploy_to_production",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_deploy_to_staging",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_divide",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_docker",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_dropped",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_exclusive_flags_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_execute_shell_command",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_file_incident_retro",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_finalize_plan",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_find_hotels_by_tier_and_location",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_func_a",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_func_b",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_func_with_agent_type",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_func_with_team_type",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_function",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_generate_haiku",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_answer_to_life_universe_and_everything",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_birthdays_this_week",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_city_timezone",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_count",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_current_weather",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_customer_profile",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_events",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_greeting",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_large_data",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_memories",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_memory",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_population",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_session",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_session_run",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_session_runs",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_sessions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_temperature",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_the_weather",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_time",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_top_hackernews_stories",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_top_hackernews_stories_async",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_user_location",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_user_preference",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_value",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_get_weather",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_git",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_greet",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_group_del_stock",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_hooked_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_html_css",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_increment",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_invalid_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_java",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_javascript",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_jira",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_kept",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_kubectl_get_pods",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_kubernetes",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_list_active_subscriptions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_list_recent_incidents",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_lookup_customer",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_lookup_product_price",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_lookup_runbook",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_lookup_service",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_lookup_shipping_time",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_modulo",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_mul",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_multiply",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_multiply_number",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_my_tool",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_mysql",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_net",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_node_js",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_old_style",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_plan_delivery",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_plan_trip",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_post_to_slack",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_postgresql",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_process_payment",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_publish_draft",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_python",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_query_database",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_react",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_react_native",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_rename_session",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_restart_service",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_agent",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_batch_analysis",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_deep_analysis",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_deep_scan",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_detailed_analysis",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_diagnostic",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_external",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_external_2",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_security_scan",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_shell_command",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_team",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_run_workflow",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_save_learning",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_save_note",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_scale_service",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_scrum",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_search_existing_tickets",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_search_hotels_by_location",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_search_hotels_by_name",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_search_products",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_send_alert",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_send_bulk_email",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_send_email",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_send_money",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_send_sms",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sensitive_action",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sensitive_action_2",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sql",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_square",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_standalone_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_stream_numbers",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sub",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_submit_order",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_subtract",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sync_function",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_sync_generator",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_terraform",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_test_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_tool_hooked_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_transfer_funds",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_typed_function",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_update_hotel",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_update_memory",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_update_session",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_update_state",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_user_input_func",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_web_extract",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        },
        {
          "dst": "cap_web_search",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_agno"
        }
      ],
      "frameworks": [],
      "nodes": [
        {
          "id": "agent_agno",
          "name": "agno",
          "props": {
            "source_kind": "directory"
          },
          "provenance": "EXTRACTED",
          "type": "Agent"
        },
        {
          "id": "cap_a",
          "name": "a",
          "props": {
            "action": "a"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_add",
          "name": "add",
          "props": {
            "action": "add"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_add_item",
          "name": "add_item",
          "props": {
            "action": "add_item"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_add_to_base",
          "name": "add_to_base",
          "props": {
            "action": "add_to_base"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_add_to_watchlist",
          "name": "add_to_watchlist",
          "props": {
            "action": "add_to_watchlist"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_agent_team_func",
          "name": "agent_team_func",
          "props": {
            "action": "agent_team_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_agile",
          "name": "Agile",
          "props": {
            "action": "Agile"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_angular",
          "name": "Angular",
          "props": {
            "action": "Angular"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_answer_from_known_questions",
          "name": "answer_from_known_questions",
          "props": {
            "action": "answer_from_known_questions"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_approve_deployment",
          "name": "approve_deployment",
          "props": {
            "action": "approve_deployment"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_ask_question",
          "name": "ask_question",
          "props": {
            "action": "ask_question"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_ask_user",
          "name": "ask_user",
          "props": {
            "action": "ask_user"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_ask_user_2",
          "name": "ask_user_2",
          "props": {
            "action": "ask_user_2"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_assess_risk_score",
          "name": "assess_risk_score",
          "props": {
            "action": "assess_risk_score"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_async_func",
          "name": "async_func",
          "props": {
            "action": "async_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_async_function",
          "name": "async_function",
          "props": {
            "action": "async_function"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_async_gen_func",
          "name": "async_gen_func",
          "props": {
            "action": "async_gen_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_async_generator",
          "name": "async_generator",
          "props": {
            "action": "async_generator"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_audited_func",
          "name": "audited_func",
          "props": {
            "action": "audited_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_aws",
          "name": "AWS",
          "props": {
            "action": "AWS"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_azure",
          "name": "Azure",
          "props": {
            "action": "Azure"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_b",
          "name": "b",
          "props": {
            "action": "b"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_bare_audit",
          "name": "bare_audit",
          "props": {
            "action": "bare_audit"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_bare_audit_2",
          "name": "bare_audit_2",
          "props": {
            "action": "bare_audit_2"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_basic_func",
          "name": "basic_func",
          "props": {
            "action": "basic_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_book_flight",
          "name": "book_flight",
          "props": {
            "action": "book_flight"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_book_hotel",
          "name": "book-hotel",
          "props": {
            "action": "book-hotel"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_c",
          "name": "C#",
          "props": {
            "action": "C#"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_calculate_compound_interest",
          "name": "calculate_compound_interest",
          "props": {
            "action": "calculate_compound_interest"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_calculate_monthly_payment",
          "name": "calculate_monthly_payment",
          "props": {
            "action": "calculate_monthly_payment"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_cancel_hotel",
          "name": "cancel-hotel",
          "props": {
            "action": "cancel-hotel"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_cancel_subscription",
          "name": "cancel_subscription",
          "props": {
            "action": "cancel_subscription"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_ci_cd",
          "name": "CI/CD",
          "props": {
            "action": "CI/CD"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_collect_deployment_specs",
          "name": "collect_deployment_specs",
          "props": {
            "action": "collect_deployment_specs"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_collect_value",
          "name": "collect_value",
          "props": {
            "action": "collect_value"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_complex_types_func",
          "name": "complex_types_func",
          "props": {
            "action": "complex_types_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_compute",
          "name": "compute",
          "props": {
            "action": "compute"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_conclude_incident",
          "name": "conclude_incident",
          "props": {
            "action": "conclude_incident"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_config",
          "name": "config",
          "props": {
            "action": "config"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_configured_func",
          "name": "configured_func",
          "props": {
            "action": "configured_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_memory",
          "name": "create_memory",
          "props": {
            "action": "create_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_plan",
          "name": "create_plan",
          "props": {
            "action": "create_plan"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_session",
          "name": "create_session",
          "props": {
            "action": "create_session"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_support_ticket",
          "name": "create_support_ticket",
          "props": {
            "action": "create_support_ticket"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_task",
          "name": "create_task",
          "props": {
            "action": "create_task"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_create_user",
          "name": "create_user",
          "props": {
            "action": "create_user"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_critical_action",
          "name": "critical_action",
          "props": {
            "action": "critical_action"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_dangerous_action",
          "name": "dangerous_action",
          "props": {
            "action": "dangerous_action"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_decorated_tool",
          "name": "decorated_tool",
          "props": {
            "action": "decorated_tool"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_decrement",
          "name": "decrement",
          "props": {
            "action": "decrement"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_file",
          "name": "delete_file",
          "props": {
            "action": "delete_file"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_memories",
          "name": "delete_memories",
          "props": {
            "action": "delete_memories"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_memory",
          "name": "delete_memory",
          "props": {
            "action": "delete_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_session",
          "name": "delete_session",
          "props": {
            "action": "delete_session"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_sessions",
          "name": "delete_sessions",
          "props": {
            "action": "delete_sessions"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_user_account",
          "name": "delete_user_account",
          "props": {
            "action": "delete_user_account"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_delete_user_data",
          "name": "delete_user_data",
          "props": {
            "action": "delete_user_data"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_deploy_to_env",
          "name": "deploy_to_env",
          "props": {
            "action": "deploy_to_env"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_deploy_to_production",
          "name": "deploy_to_production",
          "props": {
            "action": "deploy_to_production"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_deploy_to_staging",
          "name": "deploy_to_staging",
          "props": {
            "action": "deploy_to_staging"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_divide",
          "name": "divide",
          "props": {
            "action": "divide"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_docker",
          "name": "Docker",
          "props": {
            "action": "Docker"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_dropped",
          "name": "dropped",
          "props": {
            "action": "dropped"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_exclusive_flags_func",
          "name": "exclusive_flags_func",
          "props": {
            "action": "exclusive_flags_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_execute_shell_command",
          "name": "execute_shell_command",
          "props": {
            "action": "execute_shell_command"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_file_incident_retro",
          "name": "file_incident_retro",
          "props": {
            "action": "file_incident_retro"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_finalize_plan",
          "name": "finalize_plan",
          "props": {
            "action": "finalize_plan"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_find_hotels_by_tier_and_location",
          "name": "find-hotels-by-tier-and-location",
          "props": {
            "action": "find-hotels-by-tier-and-location"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_func_a",
          "name": "func_a",
          "props": {
            "action": "func_a"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_func_b",
          "name": "func_b",
          "props": {
            "action": "func_b"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_func_with_agent_type",
          "name": "func_with_agent_type",
          "props": {
            "action": "func_with_agent_type"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_func_with_team_type",
          "name": "func_with_team_type",
          "props": {
            "action": "func_with_team_type"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_function",
          "name": "function",
          "props": {
            "action": "function"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_generate_haiku",
          "name": "generate_haiku",
          "props": {
            "action": "generate_haiku"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_answer_to_life_universe_and_everything",
          "name": "get_answer_to_life_universe_and_everything",
          "props": {
            "action": "get_answer_to_life_universe_and_everything"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_birthdays_this_week",
          "name": "get_birthdays_this_week",
          "props": {
            "action": "get_birthdays_this_week"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_city_timezone",
          "name": "get_city_timezone",
          "props": {
            "action": "get_city_timezone"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_count",
          "name": "get_count",
          "props": {
            "action": "get_count"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_current_weather",
          "name": "get_current_weather",
          "props": {
            "action": "get_current_weather"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_customer_profile",
          "name": "get_customer_profile",
          "props": {
            "action": "get_customer_profile"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_events",
          "name": "get_events",
          "props": {
            "action": "get_events"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_greeting",
          "name": "get_greeting",
          "props": {
            "action": "get_greeting"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_large_data",
          "name": "get_large_data",
          "props": {
            "action": "get_large_data"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_memories",
          "name": "get_memories",
          "props": {
            "action": "get_memories"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_memory",
          "name": "get_memory",
          "props": {
            "action": "get_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_population",
          "name": "get_population",
          "props": {
            "action": "get_population"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_session",
          "name": "get_session",
          "props": {
            "action": "get_session"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_session_run",
          "name": "get_session_run",
          "props": {
            "action": "get_session_run"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_session_runs",
          "name": "get_session_runs",
          "props": {
            "action": "get_session_runs"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_sessions",
          "name": "get_sessions",
          "props": {
            "action": "get_sessions"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_temperature",
          "name": "get_temperature",
          "props": {
            "action": "get_temperature"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_the_weather",
          "name": "get_the_weather",
          "props": {
            "action": "get_the_weather"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_time",
          "name": "get_time",
          "props": {
            "action": "get_time"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_top_hackernews_stories",
          "name": "get_top_hackernews_stories",
          "props": {
            "action": "get_top_hackernews_stories"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_top_hackernews_stories_async",
          "name": "get_top_hackernews_stories_async",
          "props": {
            "action": "get_top_hackernews_stories_async"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_user_location",
          "name": "get_user_location",
          "props": {
            "action": "get_user_location"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_user_preference",
          "name": "get_user_preference",
          "props": {
            "action": "get_user_preference"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_value",
          "name": "get_value",
          "props": {
            "action": "get_value"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_get_weather",
          "name": "get_weather",
          "props": {
            "action": "get_weather"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_git",
          "name": "Git",
          "props": {
            "action": "Git"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_greet",
          "name": "greet",
          "props": {
            "action": "greet"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_group_del_stock",
          "name": "group_del_stock",
          "props": {
            "action": "group_del_stock"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_hooked_func",
          "name": "hooked_func",
          "props": {
            "action": "hooked_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_html_css",
          "name": "HTML/CSS",
          "props": {
            "action": "HTML/CSS"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_increment",
          "name": "increment",
          "props": {
            "action": "increment"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_invalid_func",
          "name": "invalid_func",
          "props": {
            "action": "invalid_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_java",
          "name": "Java",
          "props": {
            "action": "Java"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_javascript",
          "name": "JavaScript",
          "props": {
            "action": "JavaScript"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_jira",
          "name": "Jira",
          "props": {
            "action": "Jira"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_kept",
          "name": "kept",
          "props": {
            "action": "kept"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_kubectl_get_pods",
          "name": "kubectl_get_pods",
          "props": {
            "action": "kubectl_get_pods"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_kubernetes",
          "name": "Kubernetes",
          "props": {
            "action": "Kubernetes"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_list_active_subscriptions",
          "name": "list_active_subscriptions",
          "props": {
            "action": "list_active_subscriptions"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_list_recent_incidents",
          "name": "list_recent_incidents",
          "props": {
            "action": "list_recent_incidents"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_lookup_customer",
          "name": "lookup_customer",
          "props": {
            "action": "lookup_customer"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_lookup_product_price",
          "name": "lookup_product_price",
          "props": {
            "action": "lookup_product_price"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_lookup_runbook",
          "name": "lookup_runbook",
          "props": {
            "action": "lookup_runbook"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_lookup_service",
          "name": "lookup_service",
          "props": {
            "action": "lookup_service"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_lookup_shipping_time",
          "name": "lookup_shipping_time",
          "props": {
            "action": "lookup_shipping_time"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_modulo",
          "name": "modulo",
          "props": {
            "action": "modulo"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_mul",
          "name": "mul",
          "props": {
            "action": "mul"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_multiply",
          "name": "multiply",
          "props": {
            "action": "multiply"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_multiply_number",
          "name": "multiply_number",
          "props": {
            "action": "multiply_number"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_my_tool",
          "name": "my_tool",
          "props": {
            "action": "my_tool"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_mysql",
          "name": "MySQL",
          "props": {
            "action": "MySQL"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_net",
          "name": ".NET",
          "props": {
            "action": ".NET"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_node_js",
          "name": "Node.js",
          "props": {
            "action": "Node.js"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_old_style",
          "name": "old_style",
          "props": {
            "action": "old_style"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_plan_delivery",
          "name": "plan_delivery",
          "props": {
            "action": "plan_delivery"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_plan_trip",
          "name": "plan_trip",
          "props": {
            "action": "plan_trip"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_post_to_slack",
          "name": "post_to_slack",
          "props": {
            "action": "post_to_slack"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_postgresql",
          "name": "PostgreSQL",
          "props": {
            "action": "PostgreSQL"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_process_payment",
          "name": "process_payment",
          "props": {
            "action": "process_payment"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_publish_draft",
          "name": "publish_draft",
          "props": {
            "action": "publish_draft"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_python",
          "name": "Python",
          "props": {
            "action": "Python"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_query_database",
          "name": "query_database",
          "props": {
            "action": "query_database"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_react",
          "name": "React",
          "props": {
            "action": "React"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_react_native",
          "name": "React Native",
          "props": {
            "action": "React Native"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_rename_session",
          "name": "rename_session",
          "props": {
            "action": "rename_session"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_restart_service",
          "name": "restart_service",
          "props": {
            "action": "restart_service"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_agent",
          "name": "run_agent",
          "props": {
            "action": "run_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_batch_analysis",
          "name": "run_batch_analysis",
          "props": {
            "action": "run_batch_analysis"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_deep_analysis",
          "name": "run_deep_analysis",
          "props": {
            "action": "run_deep_analysis"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_deep_scan",
          "name": "run_deep_scan",
          "props": {
            "action": "run_deep_scan"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_detailed_analysis",
          "name": "run_detailed_analysis",
          "props": {
            "action": "run_detailed_analysis"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_diagnostic",
          "name": "run_diagnostic",
          "props": {
            "action": "run_diagnostic"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_external",
          "name": "run_external",
          "props": {
            "action": "run_external"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_external_2",
          "name": "run_external_2",
          "props": {
            "action": "run_external_2"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_security_scan",
          "name": "run_security_scan",
          "props": {
            "action": "run_security_scan"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_shell_command",
          "name": "run_shell_command",
          "props": {
            "action": "run_shell_command"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_team",
          "name": "run_team",
          "props": {
            "action": "run_team"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_run_workflow",
          "name": "run_workflow",
          "props": {
            "action": "run_workflow"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_save_learning",
          "name": "save_learning",
          "props": {
            "action": "save_learning"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_save_note",
          "name": "save_note",
          "props": {
            "action": "save_note"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_scale_service",
          "name": "scale_service",
          "props": {
            "action": "scale_service"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_scrum",
          "name": "Scrum",
          "props": {
            "action": "Scrum"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_search_existing_tickets",
          "name": "search_existing_tickets",
          "props": {
            "action": "search_existing_tickets"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_search_hotels_by_location",
          "name": "search-hotels-by-location",
          "props": {
            "action": "search-hotels-by-location"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_search_hotels_by_name",
          "name": "search-hotels-by-name",
          "props": {
            "action": "search-hotels-by-name"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_search_products",
          "name": "search_products",
          "props": {
            "action": "search_products"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_send_alert",
          "name": "send_alert",
          "props": {
            "action": "send_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_send_bulk_email",
          "name": "send_bulk_email",
          "props": {
            "action": "send_bulk_email"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_send_email",
          "name": "send_email",
          "props": {
            "action": "send_email"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_send_money",
          "name": "send_money",
          "props": {
            "action": "send_money"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_send_sms",
          "name": "send_sms",
          "props": {
            "action": "send_sms"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sensitive_action",
          "name": "sensitive_action",
          "props": {
            "action": "sensitive_action"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sensitive_action_2",
          "name": "sensitive_action_2",
          "props": {
            "action": "sensitive_action_2"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sql",
          "name": "SQL",
          "props": {
            "action": "SQL"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_square",
          "name": "square",
          "props": {
            "action": "square"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_standalone_func",
          "name": "standalone_func",
          "props": {
            "action": "standalone_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_stream_numbers",
          "name": "stream_numbers",
          "props": {
            "action": "stream_numbers"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sub",
          "name": "sub",
          "props": {
            "action": "sub"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_submit_order",
          "name": "submit_order",
          "props": {
            "action": "submit_order"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_subtract",
          "name": "subtract",
          "props": {
            "action": "subtract"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sync_function",
          "name": "sync_function",
          "props": {
            "action": "sync_function"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_sync_generator",
          "name": "sync_generator",
          "props": {
            "action": "sync_generator"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_terraform",
          "name": "Terraform",
          "props": {
            "action": "Terraform"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_test_func",
          "name": "test_func",
          "props": {
            "action": "test_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_tool_hooked_func",
          "name": "tool_hooked_func",
          "props": {
            "action": "tool_hooked_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_transfer_funds",
          "name": "transfer_funds",
          "props": {
            "action": "transfer_funds"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_typed_function",
          "name": "typed_function",
          "props": {
            "action": "typed_function"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_update_hotel",
          "name": "update-hotel",
          "props": {
            "action": "update-hotel"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_update_memory",
          "name": "update_memory",
          "props": {
            "action": "update_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_update_session",
          "name": "update_session",
          "props": {
            "action": "update_session"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_update_state",
          "name": "update_state",
          "props": {
            "action": "update_state"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_user_input_func",
          "name": "user_input_func",
          "props": {
            "action": "user_input_func"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_web_extract",
          "name": "web_extract",
          "props": {
            "action": "web_extract"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_web_search",
          "name": "web_search",
          "props": {
            "action": "web_search"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "fn_delete",
          "name": "delete",
          "props": {
            "action": "delete"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_agno_config",
          "name": "delete_agno_config",
          "props": {
            "action": "delete_agno_config"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_content",
          "name": "delete_all_content",
          "props": {
            "action": "delete_all_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_knowledge_content",
          "name": "delete_all_knowledge_content",
          "props": {
            "action": "delete_all_knowledge_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_memories",
          "name": "delete_all_memories",
          "props": {
            "action": "delete_all_memories"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_antigravity_agent",
          "name": "delete_antigravity_agent",
          "props": {
            "action": "delete_antigravity_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_approval",
          "name": "delete_approval",
          "props": {
            "action": "delete_approval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_awaiting_indicator",
          "name": "delete_awaiting_indicator",
          "props": {
            "action": "delete_awaiting_indicator"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_content_hash",
          "name": "delete_by_content_hash",
          "props": {
            "action": "delete_by_content_hash"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_content_id",
          "name": "delete_by_content_id",
          "props": {
            "action": "delete_by_content_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_external_id",
          "name": "delete_by_external_id",
          "props": {
            "action": "delete_by_external_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_id",
          "name": "delete_by_id",
          "props": {
            "action": "delete_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_metadata",
          "name": "delete_by_metadata",
          "props": {
            "action": "delete_by_metadata"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_name",
          "name": "delete_by_name",
          "props": {
            "action": "delete_by_name"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_component",
          "name": "delete_component",
          "props": {
            "action": "delete_component"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_config",
          "name": "delete_config",
          "props": {
            "action": "delete_config"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_content",
          "name": "delete_content",
          "props": {
            "action": "delete_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_content_by_id",
          "name": "delete_content_by_id",
          "props": {
            "action": "delete_content_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_cultural_knowledge",
          "name": "delete_cultural_knowledge",
          "props": {
            "action": "delete_cultural_knowledge"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_customer_profile",
          "name": "delete_customer_profile",
          "props": {
            "action": "delete_customer_profile"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_document",
          "name": "delete_document",
          "props": {
            "action": "delete_document"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_eval_run",
          "name": "delete_eval_run",
          "props": {
            "action": "delete_eval_run"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_eval_runs",
          "name": "delete_eval_runs",
          "props": {
            "action": "delete_eval_runs"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_fact",
          "name": "delete_fact",
          "props": {
            "action": "delete_fact"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_file",
          "name": "delete_file",
          "props": {
            "action": "delete_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_file_search_store",
          "name": "delete_file_search_store",
          "props": {
            "action": "delete_file_search_store"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_files_in_dir",
          "name": "delete_files_in_dir",
          "props": {
            "action": "delete_files_in_dir"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_from_fs",
          "name": "delete_from_fs",
          "props": {
            "action": "delete_from_fs"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_infra",
          "name": "delete_infra",
          "props": {
            "action": "delete_infra"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_knowledge_content",
          "name": "delete_knowledge_content",
          "props": {
            "action": "delete_knowledge_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_learning",
          "name": "delete_learning",
          "props": {
            "action": "delete_learning"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_meeting",
          "name": "delete_meeting",
          "props": {
            "action": "delete_meeting"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memories",
          "name": "delete_memories",
          "props": {
            "action": "delete_memories"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memory",
          "name": "delete_memory",
          "props": {
            "action": "delete_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_message",
          "name": "delete_message",
          "props": {
            "action": "delete_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_old_records",
          "name": "delete_old_records",
          "props": {
            "action": "delete_old_records"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_output_file",
          "name": "delete_output_file",
          "props": {
            "action": "delete_output_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_record",
          "name": "delete_record",
          "props": {
            "action": "delete_record"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_repository",
          "name": "delete_repository",
          "props": {
            "action": "delete_repository"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_resources",
          "name": "delete_resources",
          "props": {
            "action": "delete_resources"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_schedule",
          "name": "delete_schedule",
          "props": {
            "action": "delete_schedule"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_session",
          "name": "delete_session",
          "props": {
            "action": "delete_session"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_sessions",
          "name": "delete_sessions",
          "props": {
            "action": "delete_sessions"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_step",
          "name": "delete_step",
          "props": {
            "action": "delete_step"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_task",
          "name": "delete_task",
          "props": {
            "action": "delete_task"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_memories",
          "name": "delete_user_memories",
          "props": {
            "action": "delete_user_memories"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_memory",
          "name": "delete_user_memory",
          "props": {
            "action": "delete_user_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_drop",
          "name": "drop",
          "props": {
            "action": "drop"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_drop_namespace",
          "name": "drop_namespace",
          "props": {
            "action": "drop_namespace"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_email_user",
          "name": "email_user",
          "props": {
            "action": "email_user"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_exec_in_container",
          "name": "exec_in_container",
          "props": {
            "action": "exec_in_container"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute",
          "name": "execute",
          "props": {
            "action": "execute"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_entrypoint",
          "name": "execute_entrypoint",
          "props": {
            "action": "execute_entrypoint"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_entrypoint_async",
          "name": "execute_entrypoint_async",
          "props": {
            "action": "execute_entrypoint_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_instructions",
          "name": "execute_instructions",
          "props": {
            "action": "execute_instructions"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_post_hooks",
          "name": "execute_post_hooks",
          "props": {
            "action": "execute_post_hooks"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_pre_hooks",
          "name": "execute_pre_hooks",
          "props": {
            "action": "execute_pre_hooks"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_query_with_pagination",
          "name": "execute_query_with_pagination",
          "props": {
            "action": "execute_query_with_pagination"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_step_async_with_index",
          "name": "execute_step_async_with_index",
          "props": {
            "action": "execute_step_async_with_index"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_step_stream_async_with_index",
          "name": "execute_step_stream_async_with_index",
          "props": {
            "action": "execute_step_stream_async_with_index"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_step_stream_with_index",
          "name": "execute_step_stream_with_index",
          "props": {
            "action": "execute_step_stream_with_index"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_step_with_index",
          "name": "execute_step_with_index",
          "props": {
            "action": "execute_step_with_index"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_stream",
          "name": "execute_stream",
          "props": {
            "action": "execute_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_system_message",
          "name": "execute_system_message",
          "props": {
            "action": "execute_system_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_task",
          "name": "execute_task",
          "props": {
            "action": "execute_task"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_tasks_parallel",
          "name": "execute_tasks_parallel",
          "props": {
            "action": "execute_tasks_parallel"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_workflow_background",
          "name": "execute_workflow_background",
          "props": {
            "action": "execute_workflow_background"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_workflow_background_stream",
          "name": "execute_workflow_background_stream",
          "props": {
            "action": "execute_workflow_background_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export",
          "name": "export",
          "props": {
            "action": "export"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_chat_history",
          "name": "export_chat_history",
          "props": {
            "action": "export_chat_history"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_table_to_path",
          "name": "export_table_to_path",
          "props": {
            "action": "export_table_to_path"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate",
          "name": "migrate",
          "props": {
            "action": "migrate"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_database",
          "name": "migrate_database",
          "props": {
            "action": "migrate_database"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_pgvector_table",
          "name": "migrate_pgvector_table",
          "props": {
            "action": "migrate_pgvector_table"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_singlestore_table",
          "name": "migrate_singlestore_table",
          "props": {
            "action": "migrate_singlestore_table"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_table_from_v1_to_v2",
          "name": "migrate_table_from_v1_to_v2",
          "props": {
            "action": "migrate_table_from_v1_to_v2"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_table_in_batches",
          "name": "migrate_table_in_batches",
          "props": {
            "action": "migrate_table_in_batches"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_check",
          "name": "post_check",
          "props": {
            "action": "post_check"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_create",
          "name": "post_create",
          "props": {
            "action": "post_create"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_delete",
          "name": "post_delete",
          "props": {
            "action": "post_delete"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_denial_cards",
          "name": "post_denial_cards",
          "props": {
            "action": "post_denial_cards"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_ephemeral",
          "name": "post_ephemeral",
          "props": {
            "action": "post_ephemeral"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_hook",
          "name": "post_hook",
          "props": {
            "action": "post_hook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_hook_1",
          "name": "post_hook_1",
          "props": {
            "action": "post_hook_1"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_hook_2",
          "name": "post_hook_2",
          "props": {
            "action": "post_hook_2"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_hook_async",
          "name": "post_hook_async",
          "props": {
            "action": "post_hook_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_hook_log",
          "name": "post_hook_log",
          "props": {
            "action": "post_hook_log"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_pause_card",
          "name": "post_pause_card",
          "props": {
            "action": "post_pause_card"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_telegram_webhook",
          "name": "post_telegram_webhook",
          "props": {
            "action": "post_telegram_webhook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_update",
          "name": "post_update",
          "props": {
            "action": "post_update"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_publish",
          "name": "publish",
          "props": {
            "action": "publish"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_reject",
          "name": "reject",
          "props": {
            "action": "reject"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_reject_reason_block_id",
          "name": "reject_reason_block_id",
          "props": {
            "action": "reject_reason_block_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_reject_tool_call",
          "name": "reject_tool_call",
          "props": {
            "action": "reject_tool_call"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release_schedule",
          "name": "release_schedule",
          "props": {
            "action": "release_schedule"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run",
          "name": "run",
          "props": {
            "action": "run"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_accuracy_eval",
          "name": "run_accuracy_eval",
          "props": {
            "action": "run_accuracy_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_adaptive_assistant_example",
          "name": "run_adaptive_assistant_example",
          "props": {
            "action": "run_adaptive_assistant_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_adjudicator",
          "name": "run_adjudicator",
          "props": {
            "action": "run_adjudicator"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_advanced_filtering_demo",
          "name": "run_advanced_filtering_demo",
          "props": {
            "action": "run_advanced_filtering_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent",
          "name": "run_agent",
          "props": {
            "action": "run_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_as_judge_eval",
          "name": "run_agent_as_judge_eval",
          "props": {
            "action": "run_agent_as_judge_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_manual_loading",
          "name": "run_agent_manual_loading",
          "props": {
            "action": "run_agent_manual_loading"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_no_ctx_manager",
          "name": "run_agent_no_ctx_manager",
          "props": {
            "action": "run_agent_no_ctx_manager"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_non_streaming",
          "name": "run_agent_non_streaming",
          "props": {
            "action": "run_agent_non_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_prompt",
          "name": "run_agent_prompt",
          "props": {
            "action": "run_agent_prompt"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_stream",
          "name": "run_agent_stream",
          "props": {
            "action": "run_agent_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_streaming",
          "name": "run_agent_streaming",
          "props": {
            "action": "run_agent_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_with_events",
          "name": "run_agent_with_events",
          "props": {
            "action": "run_agent_with_events"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent_with_multimcp",
          "name": "run_agent_with_multimcp",
          "props": {
            "action": "run_agent_with_multimcp"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agents",
          "name": "run_agents",
          "props": {
            "action": "run_agents"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_antigravity_task",
          "name": "run_antigravity_task",
          "props": {
            "action": "run_antigravity_task"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async",
          "name": "run_async",
          "props": {
            "action": "run_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_batch",
          "name": "run_async_batch",
          "props": {
            "action": "run_async_batch"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_collaboration",
          "name": "run_async_collaboration",
          "props": {
            "action": "run_async_collaboration"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_evaluation",
          "name": "run_async_evaluation",
          "props": {
            "action": "run_async_evaluation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_example",
          "name": "run_async_example",
          "props": {
            "action": "run_async_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_examples",
          "name": "run_async_examples",
          "props": {
            "action": "run_async_examples"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_reasoning_demo",
          "name": "run_async_reasoning_demo",
          "props": {
            "action": "run_async_reasoning_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_router",
          "name": "run_async_router",
          "props": {
            "action": "run_async_router"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_streaming_examples",
          "name": "run_async_streaming_examples",
          "props": {
            "action": "run_async_streaming_examples"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_summary_demo",
          "name": "run_async_summary_demo",
          "props": {
            "action": "run_async_summary_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_tool_compression",
          "name": "run_async_tool_compression",
          "props": {
            "action": "run_async_tool_compression"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_background_command",
          "name": "run_background_command",
          "props": {
            "action": "run_background_command"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_basic_examples",
          "name": "run_basic_examples",
          "props": {
            "action": "run_basic_examples"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_chat_agent",
          "name": "run_chat_agent",
          "props": {
            "action": "run_chat_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_code",
          "name": "run_code",
          "props": {
            "action": "run_code"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_command",
          "name": "run_command",
          "props": {
            "action": "run_command"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_component",
          "name": "run_component",
          "props": {
            "action": "run_component"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_concurrent_chat_agent",
          "name": "run_concurrent_chat_agent",
          "props": {
            "action": "run_concurrent_chat_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_container",
          "name": "run_container",
          "props": {
            "action": "run_container"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_cultural_knowledge_task",
          "name": "run_cultural_knowledge_task",
          "props": {
            "action": "run_cultural_knowledge_task"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_custom_antigravity_agent",
          "name": "run_custom_antigravity_agent",
          "props": {
            "action": "run_custom_antigravity_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_cypher_query",
          "name": "run_cypher_query",
          "props": {
            "action": "run_cypher_query"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_dataframe_operation",
          "name": "run_dataframe_operation",
          "props": {
            "action": "run_dataframe_operation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_default_reasoning",
          "name": "run_default_reasoning",
          "props": {
            "action": "run_default_reasoning"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_demo",
          "name": "run_demo",
          "props": {
            "action": "run_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_dispatch",
          "name": "run_dispatch",
          "props": {
            "action": "run_dispatch"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_docker_compose_down",
          "name": "run_docker_compose_down",
          "props": {
            "action": "run_docker_compose_down"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_docker_compose_up",
          "name": "run_docker_compose_up",
          "props": {
            "action": "run_docker_compose_up"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_eval",
          "name": "run_eval",
          "props": {
            "action": "run_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_example",
          "name": "run_example",
          "props": {
            "action": "run_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_examples",
          "name": "run_examples",
          "props": {
            "action": "run_examples"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_fail_example",
          "name": "run_fail_example",
          "props": {
            "action": "run_fail_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_function_call",
          "name": "run_function_call",
          "props": {
            "action": "run_function_call"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_function_calls",
          "name": "run_function_calls",
          "props": {
            "action": "run_function_calls"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_gibsonai_agent",
          "name": "run_gibsonai_agent",
          "props": {
            "action": "run_gibsonai_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_interactive",
          "name": "run_interactive",
          "props": {
            "action": "run_interactive"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_interactive_loop",
          "name": "run_interactive_loop",
          "props": {
            "action": "run_interactive_loop"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_matches_component",
          "name": "run_matches_component",
          "props": {
            "action": "run_matches_component"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_mcp_agent",
          "name": "run_mcp_agent",
          "props": {
            "action": "run_mcp_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_member_agent",
          "name": "run_member_agent",
          "props": {
            "action": "run_member_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_memories_update",
          "name": "run_memories_update",
          "props": {
            "action": "run_memories_update"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_memory_task",
          "name": "run_memory_task",
          "props": {
            "action": "run_memory_task"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_migration",
          "name": "run_migration",
          "props": {
            "action": "run_migration"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_ocr_example",
          "name": "run_ocr_example",
          "props": {
            "action": "run_ocr_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_output_event_from_dict",
          "name": "run_output_event_from_dict",
          "props": {
            "action": "run_output_event_from_dict"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_pause_example",
          "name": "run_pause_example",
          "props": {
            "action": "run_pause_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_performance_eval",
          "name": "run_performance_eval",
          "props": {
            "action": "run_performance_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_prompt",
          "name": "run_prompt",
          "props": {
            "action": "run_prompt"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_python_code",
          "name": "run_python_code",
          "props": {
            "action": "run_python_code"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_python_file_return_variable",
          "name": "run_python_file_return_variable",
          "props": {
            "action": "run_python_file_return_variable"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_python_script",
          "name": "run_python_script",
          "props": {
            "action": "run_python_script"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_query",
          "name": "run_query",
          "props": {
            "action": "run_query"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_race_test",
          "name": "run_race_test",
          "props": {
            "action": "run_race_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_reliability_eval",
          "name": "run_reliability_eval",
          "props": {
            "action": "run_reliability_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_remote_examples",
          "name": "run_remote_examples",
          "props": {
            "action": "run_remote_examples"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_reviewer",
          "name": "run_reviewer",
          "props": {
            "action": "run_reviewer"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_script",
          "name": "run_script",
          "props": {
            "action": "run_script"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_search",
          "name": "run_search",
          "props": {
            "action": "run_search"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_server",
          "name": "run_server",
          "props": {
            "action": "run_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_shell",
          "name": "run_shell",
          "props": {
            "action": "run_shell"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_shell_command",
          "name": "run_shell_command",
          "props": {
            "action": "run_shell_command"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_skip_example",
          "name": "run_skip_example",
          "props": {
            "action": "run_skip_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_sql",
          "name": "run_sql",
          "props": {
            "action": "run_sql"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_sql_query",
          "name": "run_sql_query",
          "props": {
            "action": "run_sql_query"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_sync",
          "name": "run_sync",
          "props": {
            "action": "run_sync"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_sync_example",
          "name": "run_sync_example",
          "props": {
            "action": "run_sync_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_task_workflow_example",
          "name": "run_task_workflow_example",
          "props": {
            "action": "run_task_workflow_example"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team",
          "name": "run_team",
          "props": {
            "action": "run_team"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team_for_user",
          "name": "run_team_for_user",
          "props": {
            "action": "run_team_for_user"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team_non_streaming",
          "name": "run_team_non_streaming",
          "props": {
            "action": "run_team_non_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team_stream",
          "name": "run_team_stream",
          "props": {
            "action": "run_team_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team_streaming",
          "name": "run_team_streaming",
          "props": {
            "action": "run_team_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_team_with_events",
          "name": "run_team_with_events",
          "props": {
            "action": "run_team_with_events"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_test",
          "name": "run_test",
          "props": {
            "action": "run_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_tool",
          "name": "run_tool",
          "props": {
            "action": "run_tool"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_trace_demo",
          "name": "run_trace_demo",
          "props": {
            "action": "run_trace_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_user_profile_update",
          "name": "run_user_profile_update",
          "props": {
            "action": "run_user_profile_update"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_variant",
          "name": "run_variant",
          "props": {
            "action": "run_variant"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_events",
          "name": "run_with_events",
          "props": {
            "action": "run_with_events"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_message",
          "name": "run_with_message",
          "props": {
            "action": "run_with_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_output",
          "name": "run_with_output",
          "props": {
            "action": "run_with_output"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_retries",
          "name": "run_with_retries",
          "props": {
            "action": "run_with_retries"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_workflow",
          "name": "run_workflow",
          "props": {
            "action": "run_workflow"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_workflow_demo",
          "name": "run_workflow_demo",
          "props": {
            "action": "run_workflow_demo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_workflow_non_streaming",
          "name": "run_workflow_non_streaming",
          "props": {
            "action": "run_workflow_non_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_workflow_stream",
          "name": "run_workflow_stream",
          "props": {
            "action": "run_workflow_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_workflow_streaming",
          "name": "run_workflow_streaming",
          "props": {
            "action": "run_workflow_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_animation",
          "name": "send_animation",
          "props": {
            "action": "send_animation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_audio",
          "name": "send_audio",
          "props": {
            "action": "send_audio"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_dm",
          "name": "send_dm",
          "props": {
            "action": "send_dm"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_document",
          "name": "send_document",
          "props": {
            "action": "send_document"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_email",
          "name": "send_email",
          "props": {
            "action": "send_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_error",
          "name": "send_error",
          "props": {
            "action": "send_error"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_image",
          "name": "send_image",
          "props": {
            "action": "send_image"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_list_message",
          "name": "send_list_message",
          "props": {
            "action": "send_list_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_location",
          "name": "send_location",
          "props": {
            "action": "send_location"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_message",
          "name": "send_message",
          "props": {
            "action": "send_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_message_thread",
          "name": "send_message_thread",
          "props": {
            "action": "send_message_thread"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_notification",
          "name": "send_notification",
          "props": {
            "action": "send_notification"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_or_edit",
          "name": "send_or_edit",
          "props": {
            "action": "send_or_edit"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_photo",
          "name": "send_photo",
          "props": {
            "action": "send_photo"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_reaction",
          "name": "send_reaction",
          "props": {
            "action": "send_reaction"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_reply_buttons",
          "name": "send_reply_buttons",
          "props": {
            "action": "send_reply_buttons"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_response_media",
          "name": "send_response_media",
          "props": {
            "action": "send_response_media"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_slack_message_async",
          "name": "send_slack_message_async",
          "props": {
            "action": "send_slack_message_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_sms",
          "name": "send_sms",
          "props": {
            "action": "send_sms"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_sticker",
          "name": "send_sticker",
          "props": {
            "action": "send_sticker"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_template_message",
          "name": "send_template_message",
          "props": {
            "action": "send_template_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_text_message",
          "name": "send_text_message",
          "props": {
            "action": "send_text_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_transaction",
          "name": "send_transaction",
          "props": {
            "action": "send_transaction"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_video",
          "name": "send_video",
          "props": {
            "action": "send_video"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_whatsapp_message_async",
          "name": "send_whatsapp_message_async",
          "props": {
            "action": "send_whatsapp_message_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_shutdown",
          "name": "shutdown",
          "props": {
            "action": "shutdown"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_shutdown_sandbox",
          "name": "shutdown_sandbox",
          "props": {
            "action": "shutdown_sandbox"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_and_send_media_async",
          "name": "upload_and_send_media_async",
          "props": {
            "action": "upload_and_send_media_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_content",
          "name": "upload_content",
          "props": {
            "action": "upload_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file",
          "name": "upload_file",
          "props": {
            "action": "upload_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_knowledge_content",
          "name": "upload_knowledge_content",
          "props": {
            "action": "upload_knowledge_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_media_async",
          "name": "upload_media_async",
          "props": {
            "action": "upload_media_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_response_media_async",
          "name": "upload_response_media_async",
          "props": {
            "action": "upload_response_media_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_text_content",
          "name": "upload_text_content",
          "props": {
            "action": "upload_text_content"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_to_file_search_store",
          "name": "upload_to_file_search_store",
          "props": {
            "action": "upload_to_file_search_store"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        }
      ],
      "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.",
      "source": "agno",
      "source_kind": "directory"
    },
    "summary": {
      "asserted_covered": 0,
      "edges": 422,
      "frameworks": [],
      "governed_actions": 411,
      "nodes": 423,
      "source": "agno",
      "source_kind": "directory",
      "ungoverned_actions": 162
    }
  },
  "evidence_hash": "7725a22b6e9670344e3a52cae908e78f47d6b67f87ba62659e4a912f122912d6",
  "ml_dsa_public_key_b64": "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",
  "ml_dsa_signature_b64": "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",
  "note_pq": "Hybrid signature: Ed25519 always; ML-DSA-65 (FIPS 204) and SLH-DSA (FIPS 205) added when a PQ backend is installed. Each leg signs the same canonical body; any one verifying proves authenticity. Install: pip install \"openagentontology[pq]\".",
  "signature_alg": "Ed25519+ML-DSA-65+SLH-DSA",
  "signature_b64": "V5UGjo7F3OCGYG9A2qDCVrlOsud/SI3ZgeMsKXRx7NrZ5rLPv0ExhuzL7zn37WOBuMRHkr6F8X+4NbuQCmDyAg==",
  "signed": true,
  "signed_at": "2026-06-12T06:40:42.895544+00:00",
  "slh_dsa_public_key_b64": "bXNhZNeO0U50ZGJz/hQQCpW03+uEluFG/BkVrNlKk1k=",
  "slh_dsa_signature_b64": "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",
  "type": "AgentGovernanceReceipt",
  "verify_pubkey_b64": "ig6AWna3kodv7bngRvd6hJ+AbhXGznIh6dhFlA2pfPQ="
}
