{
  "action_maps": [
    {
      "label": "act",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "act"
    },
    {
      "label": "add",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_add"
    },
    {
      "label": "components",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_components"
    },
    {
      "label": "multiply",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_multiply"
    },
    {
      "label": "paths",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_paths"
    },
    {
      "label": "Create chat completion for 100+ LLM APIs",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_post_chat_completions"
    },
    {
      "label": "Create completion",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "cap_post_completions"
    },
    {
      "label": "dec",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "dec"
    },
    {
      "label": "approve_mcp_server",
      "mappings": [
        {
          "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
          "confidence": "advisory",
          "fw": "NIST AI RMF",
          "id": "MEASURE",
          "name": "Measure function",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "autonomous execution without oversight maps to command/scripting abuse",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_approve_mcp_server"
    },
    {
      "label": "delete",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete"
    },
    {
      "label": "delete_agent",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_agent"
    },
    {
      "label": "delete_agent_from_db",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_agent_from_db"
    },
    {
      "label": "delete_all_versions",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_all_versions"
    },
    {
      "label": "delete_assistant",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_assistant"
    },
    {
      "label": "delete_attachment_from_db",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_attachment_from_db"
    },
    {
      "label": "delete_budget",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_budget"
    },
    {
      "label": "delete_by_name",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_by_name"
    },
    {
      "label": "delete_cache",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_cache"
    },
    {
      "label": "delete_cache_keys",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_cache_keys"
    },
    {
      "label": "delete_credentials",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_credentials"
    },
    {
      "label": "delete_data",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_data"
    },
    {
      "label": "delete_deployment",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_deployment"
    },
    {
      "label": "delete_eval_handler",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_eval_handler"
    },
    {
      "label": "delete_file",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_file"
    },
    {
      "label": "delete_gcs_object",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_gcs_object"
    },
    {
      "label": "delete_guardrail_from_db",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_guardrail_from_db"
    },
    {
      "label": "delete_in_memory_guardrail",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_in_memory_guardrail"
    },
    {
      "label": "delete_interaction",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_interaction"
    },
    {
      "label": "delete_key",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_key"
    },
    {
      "label": "delete_key_aliases",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_key_aliases"
    },
    {
      "label": "delete_many",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_many"
    },
    {
      "label": "delete_mcp_server",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_mcp_server"
    },
    {
      "label": "delete_mcp_server_from_team",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_mcp_server_from_team"
    },
    {
      "label": "delete_mcp_server_from_virtualkey",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_mcp_server_from_virtualkey"
    },
    {
      "label": "delete_mcp_toolset",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_mcp_toolset"
    },
    {
      "label": "delete_member",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_member"
    },
    {
      "label": "delete_member_from_org",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_member_from_org"
    },
    {
      "label": "delete_model",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_model"
    },
    {
      "label": "delete_nested_value",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_nested_value"
    },
    {
      "label": "delete_object",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_object"
    },
    {
      "label": "delete_organization",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_organization"
    },
    {
      "label": "delete_param",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_param"
    },
    {
      "label": "delete_permission",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_permission"
    },
    {
      "label": "delete_policy_from_db",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_policy_from_db"
    },
    {
      "label": "delete_polling",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_polling"
    },
    {
      "label": "delete_project",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_project"
    },
    {
      "label": "delete_prompts_by_base_id",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_prompts_by_base_id"
    },
    {
      "label": "delete_response_api_handler",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_response_api_handler"
    },
    {
      "label": "delete_run_handler",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_run_handler"
    },
    {
      "label": "delete_search_tool_from_db",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_search_tool_from_db"
    },
    {
      "label": "delete_skill_handler",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_skill_handler"
    },
    {
      "label": "delete_team",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_team"
    },
    {
      "label": "delete_team_member",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_team_member"
    },
    {
      "label": "delete_team_model_alias",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_team_model_alias"
    },
    {
      "label": "delete_team_models",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_team_models"
    },
    {
      "label": "delete_thread",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_thread"
    },
    {
      "label": "delete_token",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_token"
    },
    {
      "label": "delete_unified_file_id",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_unified_file_id"
    },
    {
      "label": "delete_unified_resource_id",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_unified_resource_id"
    },
    {
      "label": "delete_user",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_user"
    },
    {
      "label": "delete_user_credential",
      "mappings": [
        {
          "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_user_credential"
    },
    {
      "label": "delete_user_env_vars",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_user_env_vars"
    },
    {
      "label": "delete_vector_store_from_registry",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_vector_store_from_registry"
    },
    {
      "label": "delete_vector_store_index",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_vector_store_index"
    },
    {
      "label": "delete_verification_tokens",
      "mappings": [
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_delete_verification_tokens"
    },
    {
      "label": "drop_none",
      "mappings": [
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_drop_none"
    },
    {
      "label": "drop_params_from_unprocessable_entity_error",
      "mappings": [
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_drop_params_from_unprocessable_entity_error"
    },
    {
      "label": "drop_partitions_older_than",
      "mappings": [
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-5",
          "name": "Access Restrictions for Change",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "a destructive change during a freeze maps to data destruction",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1485",
          "name": "Data Destruction",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_drop_partitions_older_than"
    },
    {
      "label": "execute",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute"
    },
    {
      "label": "execute_command",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_command"
    },
    {
      "label": "execute_completion",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_completion"
    },
    {
      "label": "execute_guardrail",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_guardrail"
    },
    {
      "label": "execute_mcp_tool",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_mcp_tool"
    },
    {
      "label": "execute_raw",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_raw"
    },
    {
      "label": "execute_with_code_execution",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_execute_with_code_execution"
    },
    {
      "label": "export",
      "mappings": [
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_export"
    },
    {
      "label": "export_all",
      "mappings": [
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_export_all"
    },
    {
      "label": "export_usage_data",
      "mappings": [
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_export_usage_data"
    },
    {
      "label": "export_verifier",
      "mappings": [
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_export_verifier"
    },
    {
      "label": "export_window",
      "mappings": [
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_export_window"
    },
    {
      "label": "migrate_file_to_image_url",
      "mappings": [
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_migrate_file_to_image_url"
    },
    {
      "label": "migrate_models",
      "mappings": [
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_migrate_models"
    },
    {
      "label": "migrate_passwords_to_scrypt_async",
      "mappings": [
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_migrate_passwords_to_scrypt_async"
    },
    {
      "label": "migrate_verification_tokens",
      "mappings": [
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_migrate_verification_tokens"
    },
    {
      "label": "post",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post"
    },
    {
      "label": "post_call",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call"
    },
    {
      "label": "post_call_failure_hook",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_failure_hook"
    },
    {
      "label": "post_call_hook",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_hook"
    },
    {
      "label": "post_call_processing",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_processing"
    },
    {
      "label": "post_call_response_headers_hook",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_response_headers_hook"
    },
    {
      "label": "post_call_rules",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_rules"
    },
    {
      "label": "post_call_success_hook",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_call_success_hook"
    },
    {
      "label": "post_compile_prompt_processing",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_compile_prompt_processing"
    },
    {
      "label": "post_non_streaming",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_non_streaming"
    },
    {
      "label": "post_response_rule",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_response_rule"
    },
    {
      "label": "post_side_effect",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_side_effect"
    },
    {
      "label": "post_stream_processing",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_post_stream_processing"
    },
    {
      "label": "publish_message",
      "mappings": [
        {
          "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_publish_message"
    },
    {
      "label": "reject_mcp_server",
      "mappings": [
        {
          "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
          "confidence": "advisory",
          "fw": "NIST AI RMF",
          "id": "MEASURE",
          "name": "Measure function",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "autonomous execution without oversight maps to command/scripting abuse",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_reject_mcp_server"
    },
    {
      "label": "release",
      "mappings": [
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_release"
    },
    {
      "label": "release_budget_reservation",
      "mappings": [
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_release_budget_reservation"
    },
    {
      "label": "release_health_check_lock",
      "mappings": [
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_release_health_check_lock"
    },
    {
      "label": "release_lock",
      "mappings": [
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "CM-3",
          "name": "Configuration Change Control",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "an unapproved production change maps to system-process modification / persistence",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1543",
          "name": "Create or Modify System Process",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_release_lock"
    },
    {
      "label": "run",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run"
    },
    {
      "label": "run_agent",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_agent"
    },
    {
      "label": "run_all_tests",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_all_tests"
    },
    {
      "label": "run_async_completion",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_async_completion"
    },
    {
      "label": "run_async_fallback",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_async_fallback"
    },
    {
      "label": "run_async_function",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_async_function"
    },
    {
      "label": "run_async_test",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_async_test"
    },
    {
      "label": "run_benchmark",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_benchmark"
    },
    {
      "label": "run_case",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_case"
    },
    {
      "label": "run_comparison",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_comparison"
    },
    {
      "label": "run_env_setup",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_env_setup"
    },
    {
      "label": "run_eval",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_eval"
    },
    {
      "label": "run_good_model_test",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_good_model_test"
    },
    {
      "label": "run_grayswan_guardrail",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_grayswan_guardrail"
    },
    {
      "label": "run_health_check",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_health_check"
    },
    {
      "label": "run_health_checks",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_health_checks"
    },
    {
      "label": "run_in_loop",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_in_loop"
    },
    {
      "label": "run_in_new_loop",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_in_new_loop"
    },
    {
      "label": "run_in_thread",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_in_thread"
    },
    {
      "label": "run_integration_tests_for_auth_method",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_integration_tests_for_auth_method"
    },
    {
      "label": "run_lint_check",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_lint_check"
    },
    {
      "label": "run_load_test",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_load_test"
    },
    {
      "label": "run_memory_baseline_test",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_memory_baseline_test"
    },
    {
      "label": "run_memory_test",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_memory_test"
    },
    {
      "label": "run_non_standard_fallback_format",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_non_standard_fallback_format"
    },
    {
      "label": "run_non_streaming_benchmark",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_non_streaming_benchmark"
    },
    {
      "label": "run_ollama_serve",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_ollama_serve"
    },
    {
      "label": "run_pillar_guardrail",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_pillar_guardrail"
    },
    {
      "label": "run_plain",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_plain"
    },
    {
      "label": "run_realtime_guardrails",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_realtime_guardrails"
    },
    {
      "label": "run_scenario",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_scenario"
    },
    {
      "label": "run_server",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_server"
    },
    {
      "label": "run_setup_wizard",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_setup_wizard"
    },
    {
      "label": "run_streaming_full_benchmark",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_streaming_full_benchmark"
    },
    {
      "label": "run_streaming_ttft_benchmark",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_streaming_ttft_benchmark"
    },
    {
      "label": "run_success_logging_and_cache_storage",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_success_logging_and_cache_storage"
    },
    {
      "label": "run_sync",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_sync"
    },
    {
      "label": "run_tests",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_tests"
    },
    {
      "label": "run_thread",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_thread"
    },
    {
      "label": "run_thread_stream",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_thread_stream"
    },
    {
      "label": "run_voice_agent",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_voice_agent"
    },
    {
      "label": "run_with_session",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_with_session"
    },
    {
      "label": "run_with_timeout",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_run_with_timeout"
    },
    {
      "label": "send",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send"
    },
    {
      "label": "send_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_alert"
    },
    {
      "label": "send_alert_to_pagerduty",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_alert_to_pagerduty"
    },
    {
      "label": "send_alerts_for_hanging_requests",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_alerts_for_hanging_requests"
    },
    {
      "label": "send_audio_chunk",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_audio_chunk"
    },
    {
      "label": "send_batched",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_batched"
    },
    {
      "label": "send_daily_reports",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_daily_reports"
    },
    {
      "label": "send_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_email"
    },
    {
      "label": "send_email_alert_using_smtp",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_email_alert_using_smtp"
    },
    {
      "label": "send_fallback_stats_from_prometheus",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_fallback_stats_from_prometheus"
    },
    {
      "label": "send_hanging_request_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_hanging_request_alert"
    },
    {
      "label": "send_key_created_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_key_created_email"
    },
    {
      "label": "send_key_created_or_user_invited_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_key_created_or_user_invited_email"
    },
    {
      "label": "send_key_rotated_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_key_rotated_email"
    },
    {
      "label": "send_llm_exception_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_llm_exception_alert"
    },
    {
      "label": "send_management_endpoint_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_management_endpoint_alert"
    },
    {
      "label": "send_max_budget_alert_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_max_budget_alert_email"
    },
    {
      "label": "send_message",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_message"
    },
    {
      "label": "send_message_streaming",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_message_streaming"
    },
    {
      "label": "send_monthly_spend_report",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_monthly_spend_report"
    },
    {
      "label": "send_request",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_request"
    },
    {
      "label": "send_session",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_session"
    },
    {
      "label": "send_session_update",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_session_update"
    },
    {
      "label": "send_soft_budget_alert_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_soft_budget_alert_email"
    },
    {
      "label": "send_team_budget_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_team_budget_alert"
    },
    {
      "label": "send_team_soft_budget_alert_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_team_soft_budget_alert_email"
    },
    {
      "label": "send_text",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_text"
    },
    {
      "label": "send_to_backend",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_to_backend"
    },
    {
      "label": "send_to_webhook",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_to_webhook"
    },
    {
      "label": "send_user_invitation_email",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_user_invitation_email"
    },
    {
      "label": "send_virtual_key_event_slack",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_virtual_key_event_slack"
    },
    {
      "label": "send_webhook",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_webhook"
    },
    {
      "label": "send_webhook_alert",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_webhook_alert"
    },
    {
      "label": "send_weekly_spend_report",
      "mappings": [
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_send_weekly_spend_report"
    },
    {
      "label": "shutdown",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_shutdown"
    },
    {
      "label": "shutdown_handler",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_shutdown_handler"
    },
    {
      "label": "shutdown_session_managers",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "fn_shutdown_session_managers"
    },
    {
      "label": "terminate",
      "mappings": [
        {
          "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
          "confidence": "advisory",
          "fw": "NIST AI RMF",
          "id": "MEASURE",
          "name": "Measure function",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "autonomous execution without oversight maps to command/scripting abuse",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_terminate"
    },
    {
      "label": "upload",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload"
    },
    {
      "label": "upload_bytes_async",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_bytes_async"
    },
    {
      "label": "upload_bytes_sync",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_bytes_sync"
    },
    {
      "label": "upload_data_to_s3",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_data_to_s3"
    },
    {
      "label": "upload_file",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_file"
    },
    {
      "label": "upload_file_async",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_file_async"
    },
    {
      "label": "upload_file_sync",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_file_sync"
    },
    {
      "label": "upload_to_azure_data_lake_with_azure_account_key",
      "mappings": [
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "SC-7",
          "name": "Boundary Protection",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "TA0010",
          "name": "Exfiltration",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "uncontrolled egress of regulated data maps to exfiltration",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1048",
          "name": "Exfiltration Over Alternative Protocol",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "fn_upload_to_azure_data_lake_with_azure_account_key"
    },
    {
      "label": "gate",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate"
    },
    {
      "label": "airline-brand-protection-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_airline_brand_protection_filter"
    },
    {
      "label": "airline-contact-info-uae",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_airline_contact_info_uae"
    },
    {
      "label": "airline-off-topic-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_airline_off_topic_filter"
    },
    {
      "label": "airline-passport-multinational",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_airline_passport_multinational"
    },
    {
      "label": "airline-payment-financial",
      "mappings": [
        {
          "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-5",
          "name": "Separation of Duties",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
          "confidence": "advisory",
          "fw": "NIST AI RMF",
          "id": "MANAGE",
          "name": "Manage function",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "separation of duties mitigates valid-account / privilege abuse",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1078",
          "name": "Valid Accounts",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_airline_payment_financial"
    },
    {
      "label": "airline-pnr-skywards-pii",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_airline_pnr_skywards_pii"
    },
    {
      "label": "au-pii-passports",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_au_pii_passports"
    },
    {
      "label": "au-pii-tax-identifiers",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_au_pii_tax_identifiers"
    },
    {
      "label": "aviation-ops-data-protection",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_aviation_ops_data_protection"
    },
    {
      "label": "aviation-safety-topic-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_aviation_safety_topic_filter"
    },
    {
      "label": "ca-pii-contact-information",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_contact_information"
    },
    {
      "label": "ca-pii-financial",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_financial"
    },
    {
      "label": "ca-pii-government-identifiers",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_government_identifiers"
    },
    {
      "label": "ca-pii-health-drivers",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_health_drivers"
    },
    {
      "label": "ca-pii-immigration",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_immigration"
    },
    {
      "label": "ca-pii-institutional-ids",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_ca_pii_institutional_ids"
    },
    {
      "label": "claims-fraud-coaching-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_claims_fraud_coaching_filter"
    },
    {
      "label": "claims-medical-advice-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_claims_medical_advice_filter"
    },
    {
      "label": "claims-phi-disclosure-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_claims_phi_disclosure_filter"
    },
    {
      "label": "claims-prior-auth-gaming-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_claims_prior_auth_gaming_filter"
    },
    {
      "label": "claims-system-override-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_claims_system_override_filter"
    },
    {
      "label": "code-injection-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_code_injection_blocker"
    },
    {
      "label": "competitor-comparison-input-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_comparison_input_filter"
    },
    {
      "label": "competitor-comparison-output-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_comparison_output_filter"
    },
    {
      "label": "competitor-input-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_input_blocker"
    },
    {
      "label": "competitor-name-input-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_name_input_blocker"
    },
    {
      "label": "competitor-name-output-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_name_output_blocker"
    },
    {
      "label": "competitor-output-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_output_blocker"
    },
    {
      "label": "competitor-recommendation-input-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_recommendation_input_filter"
    },
    {
      "label": "competitor-recommendation-output-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_competitor_recommendation_output_filter"
    },
    {
      "label": "components",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_components"
    },
    {
      "label": "contact-information-pii",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_contact_information_pii"
    },
    {
      "label": "content-safety-permissive",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_content_safety_permissive"
    },
    {
      "label": "content-safety-strict",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_content_safety_strict"
    },
    {
      "label": "credentials-api-keys",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_credentials_api_keys"
    },
    {
      "label": "eu-ai-act-art5-biometric-profiling",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_biometric_profiling"
    },
    {
      "label": "eu-ai-act-art5-biometric-profiling-fr",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_biometric_profiling_fr"
    },
    {
      "label": "eu-ai-act-art5-emotion-recognition",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_emotion_recognition"
    },
    {
      "label": "eu-ai-act-art5-emotion-recognition-fr",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_emotion_recognition_fr"
    },
    {
      "label": "eu-ai-act-art5-manipulation",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_manipulation"
    },
    {
      "label": "eu-ai-act-art5-manipulation-fr",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_manipulation_fr"
    },
    {
      "label": "eu-ai-act-art5-social-scoring",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_social_scoring"
    },
    {
      "label": "eu-ai-act-art5-social-scoring-fr",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_social_scoring_fr"
    },
    {
      "label": "eu-ai-act-art5-vulnerability",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_vulnerability"
    },
    {
      "label": "eu-ai-act-art5-vulnerability-fr",
      "mappings": [
        {
          "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
          "confidence": "ambiguous",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "AMBIGUOUS"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_eu_ai_act_art5_vulnerability_fr"
    },
    {
      "label": "financial-pii",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_financial_pii"
    },
    {
      "label": "gdpr-eu-business-identifiers",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_gdpr_eu_business_identifiers"
    },
    {
      "label": "gdpr-eu-contact-information",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_gdpr_eu_contact_information"
    },
    {
      "label": "gdpr-eu-financial-data",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_gdpr_eu_financial_data"
    },
    {
      "label": "gdpr-eu-national-identifiers",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_gdpr_eu_national_identifiers"
    },
    {
      "label": "international-pii-identifiers",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_international_pii_identifiers"
    },
    {
      "label": "mcp-security-block",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_mcp_security_block"
    },
    {
      "label": "network-infrastructure-pii",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_network_infrastructure_pii"
    },
    {
      "label": "nsfw-child-safety-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_child_safety_filter"
    },
    {
      "label": "nsfw-child-safety-filter-basic",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_child_safety_filter_basic"
    },
    {
      "label": "nsfw-child-safety-filter-global",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_child_safety_filter_global"
    },
    {
      "label": "nsfw-content-filter-australian",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_content_filter_australian"
    },
    {
      "label": "nsfw-content-filter-english",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_content_filter_english"
    },
    {
      "label": "nsfw-content-filter-english-only",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_content_filter_english_only"
    },
    {
      "label": "nsfw-filter-australian",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_filter_australian"
    },
    {
      "label": "nsfw-filter-english",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_filter_english"
    },
    {
      "label": "nsfw-filter-french",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_filter_french"
    },
    {
      "label": "nsfw-filter-german",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_filter_german"
    },
    {
      "label": "nsfw-filter-spanish",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_filter_spanish"
    },
    {
      "label": "nsfw-racial-bias-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_racial_bias_filter"
    },
    {
      "label": "nsfw-racial-bias-filter-basic",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_racial_bias_filter_basic"
    },
    {
      "label": "nsfw-racial-bias-filter-global",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_racial_bias_filter_global"
    },
    {
      "label": "nsfw-self-harm-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_self_harm_filter"
    },
    {
      "label": "nsfw-self-harm-filter-basic",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_self_harm_filter_basic"
    },
    {
      "label": "nsfw-self-harm-filter-global",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_nsfw_self_harm_filter_global"
    },
    {
      "label": "paths",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_paths"
    },
    {
      "label": "prompt-injection-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_prompt_injection_blocker"
    },
    {
      "label": "protected-class-information",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_protected_class_information"
    },
    {
      "label": "sg-mas-data-governance",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_mas_data_governance"
    },
    {
      "label": "sg-mas-fairness-bias",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_mas_fairness_bias"
    },
    {
      "label": "sg-mas-human-oversight",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_mas_human_oversight"
    },
    {
      "label": "sg-mas-model-security",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_mas_model_security"
    },
    {
      "label": "sg-mas-transparency-explainability",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_mas_transparency_explainability"
    },
    {
      "label": "sg-pdpa-business-identifiers",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_business_identifiers"
    },
    {
      "label": "sg-pdpa-contact-information",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_contact_information"
    },
    {
      "label": "sg-pdpa-data-transfer",
      "mappings": [
        {
          "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-5",
          "name": "Separation of Duties",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 14",
          "name": "Human oversight",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM06",
          "name": "Excessive Agency",
          "provenance": "INFERRED"
        },
        {
          "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
          "confidence": "advisory",
          "fw": "NIST AI RMF",
          "id": "MANAGE",
          "name": "Manage function",
          "provenance": "EXTRACTED"
        },
        {
          "basis": "separation of duties mitigates valid-account / privilege abuse",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1078",
          "name": "Valid Accounts",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_sg_pdpa_data_transfer"
    },
    {
      "label": "sg-pdpa-do-not-call",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_do_not_call"
    },
    {
      "label": "sg-pdpa-financial-data",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_financial_data"
    },
    {
      "label": "sg-pdpa-personal-identifiers",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_personal_identifiers"
    },
    {
      "label": "sg-pdpa-pii-identifiers",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_sg_pdpa_pii_identifiers"
    },
    {
      "label": "sg-pdpa-profiling-automated-decisions",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_profiling_automated_decisions"
    },
    {
      "label": "sg-pdpa-sensitive-data",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sg_pdpa_sensitive_data"
    },
    {
      "label": "sql-injection-blocker",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_sql_injection_blocker"
    },
    {
      "label": "topic-restriction-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_topic_restriction_filter"
    },
    {
      "label": "uae-anti-discrimination-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_uae_anti_discrimination_filter"
    },
    {
      "label": "uae-cultural-sensitivity-filter",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "gate_uae_cultural_sensitivity_filter"
    },
    {
      "label": "uae-data-protection-pii",
      "mappings": [
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "RA-2",
          "name": "Security Categorization",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
          "confidence": "inferred",
          "fw": "NIST SP 800-53r5",
          "id": "AC-4",
          "name": "Information Flow Enforcement",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
          "confidence": "inferred",
          "fw": "EU AI Act",
          "id": "Art 10",
          "name": "Data and data governance",
          "provenance": "INFERRED"
        },
        {
          "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
          "confidence": "inferred",
          "fw": "OWASP LLM Top 10 (2025)",
          "id": "LLM02",
          "name": "Sensitive Information Disclosure",
          "provenance": "INFERRED"
        },
        {
          "basis": "handling data above a classification ceiling maps to sensitive-data access",
          "confidence": "advisory",
          "fw": "MITRE ATT&CK",
          "id": "T1530",
          "name": "Data from Cloud Storage",
          "provenance": "EXTRACTED"
        }
      ],
      "matched_via": "heuristic",
      "subject_id": "gate_uae_data_protection_pii"
    },
    {
      "label": "Home",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "op_get"
    },
    {
      "label": "Get models",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "op_get_models"
    },
    {
      "label": "Retrieve server logs for ollama models",
      "mappings": [],
      "matched_via": "none",
      "subject_id": "op_get_ollama_logs"
    }
  ],
  "edges": [
    {
      "dst": "act",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_approve_mcp_server",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_agent",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_agent_from_db",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_all_versions",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_assistant",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_attachment_from_db",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_budget",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_by_name",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_cache",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_cache_keys",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_credentials",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_data",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_deployment",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_eval_handler",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_file",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_gcs_object",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_guardrail_from_db",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_in_memory_guardrail",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_interaction",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_key",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_key_aliases",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_many",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_mcp_server",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_mcp_server_from_team",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_mcp_server_from_virtualkey",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_mcp_toolset",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_member",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_member_from_org",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_model",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_nested_value",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_object",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_organization",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_param",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_permission",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_policy_from_db",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_polling",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_project",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_prompts_by_base_id",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_response_api_handler",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_run_handler",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_search_tool_from_db",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_skill_handler",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_team",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_team_member",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_team_model_alias",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_team_models",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_thread",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_token",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_unified_file_id",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_unified_resource_id",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_user",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_user_credential",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_user_env_vars",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_vector_store_from_registry",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_vector_store_index",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_delete_verification_tokens",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_drop_none",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_drop_params_from_unprocessable_entity_error",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_drop_partitions_older_than",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_command",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_completion",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_guardrail",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_mcp_tool",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_raw",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_execute_with_code_execution",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_export",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_export_all",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_export_usage_data",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_export_verifier",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_export_window",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_migrate_file_to_image_url",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_migrate_models",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_migrate_passwords_to_scrypt_async",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_migrate_verification_tokens",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_failure_hook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_hook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_processing",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_response_headers_hook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_rules",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_call_success_hook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_compile_prompt_processing",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_non_streaming",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_response_rule",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_side_effect",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_post_stream_processing",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_publish_message",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_reject_mcp_server",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_release",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_release_budget_reservation",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_release_health_check_lock",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_release_lock",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_agent",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_all_tests",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_async_completion",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_async_fallback",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_async_function",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_async_test",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_benchmark",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_case",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_comparison",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_env_setup",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_eval",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_good_model_test",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_grayswan_guardrail",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_health_check",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_health_checks",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_in_loop",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_in_new_loop",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_in_thread",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_integration_tests_for_auth_method",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_lint_check",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_load_test",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_memory_baseline_test",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_memory_test",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_non_standard_fallback_format",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_non_streaming_benchmark",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_ollama_serve",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_pillar_guardrail",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_plain",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_realtime_guardrails",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_scenario",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_server",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_setup_wizard",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_streaming_full_benchmark",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_streaming_ttft_benchmark",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_success_logging_and_cache_storage",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_sync",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_tests",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_thread",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_thread_stream",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_voice_agent",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_with_session",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_run_with_timeout",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_alert_to_pagerduty",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_alerts_for_hanging_requests",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_audio_chunk",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_batched",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_daily_reports",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_email_alert_using_smtp",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_fallback_stats_from_prometheus",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_hanging_request_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_key_created_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_key_created_or_user_invited_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_key_rotated_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_llm_exception_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_management_endpoint_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_max_budget_alert_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_message",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_message_streaming",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_monthly_spend_report",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_request",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_session",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_session_update",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_soft_budget_alert_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_team_budget_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_team_soft_budget_alert_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_text",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_to_backend",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_to_webhook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_user_invitation_email",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_virtual_key_event_slack",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_webhook",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_webhook_alert",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_send_weekly_spend_report",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_shutdown",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_shutdown_handler",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_shutdown_session_managers",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_terminate",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_bytes_async",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_bytes_sync",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_data_to_s3",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_file",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_file_async",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_file_sync",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "fn_upload_to_azure_data_lake_with_azure_account_key",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "op_get",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "op_get_models",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "op_get_ollama_logs",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "op_post_chat_completions",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "op_post_completions",
      "provenance": "EXTRACTED",
      "rel": "EXECUTES",
      "src": "agent_litellm"
    },
    {
      "dst": "gate",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_brand_protection_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_contact_info_uae",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_off_topic_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_passport_multinational",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_payment_financial",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_airline_pnr_skywards_pii",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_au_pii_passports",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_au_pii_tax_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_aviation_ops_data_protection",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_aviation_safety_topic_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_contact_information",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_financial",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_government_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_health_drivers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_immigration",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_ca_pii_institutional_ids",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_claims_fraud_coaching_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_claims_medical_advice_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_claims_phi_disclosure_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_claims_prior_auth_gaming_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_claims_system_override_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_code_injection_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_comparison_input_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_comparison_output_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_input_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_name_input_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_name_output_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_output_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_recommendation_input_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_competitor_recommendation_output_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_components",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_contact_information_pii",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_content_safety_permissive",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_content_safety_strict",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_credentials_api_keys",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_biometric_profiling",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_biometric_profiling_fr",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_emotion_recognition",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_emotion_recognition_fr",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_manipulation",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_manipulation_fr",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_social_scoring",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_social_scoring_fr",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_vulnerability",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_eu_ai_act_art5_vulnerability_fr",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_financial_pii",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_gdpr_eu_business_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_gdpr_eu_contact_information",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_gdpr_eu_financial_data",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_gdpr_eu_national_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_international_pii_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_mcp_security_block",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_network_infrastructure_pii",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_child_safety_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_child_safety_filter_basic",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_child_safety_filter_global",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_content_filter_australian",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_content_filter_english",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_content_filter_english_only",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_filter_australian",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_filter_english",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_filter_french",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_filter_german",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_filter_spanish",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_racial_bias_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_racial_bias_filter_basic",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_racial_bias_filter_global",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_self_harm_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_self_harm_filter_basic",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_nsfw_self_harm_filter_global",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_paths",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_prompt_injection_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_protected_class_information",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_mas_data_governance",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_mas_fairness_bias",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_mas_human_oversight",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_mas_model_security",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_mas_transparency_explainability",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_business_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_contact_information",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_data_transfer",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_do_not_call",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_financial_data",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_personal_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_pii_identifiers",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_profiling_automated_decisions",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sg_pdpa_sensitive_data",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_sql_injection_blocker",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_topic_restriction_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_uae_anti_discrimination_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_uae_cultural_sensitivity_filter",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "gate_uae_data_protection_pii",
      "provenance": "EXTRACTED",
      "rel": "GATED_BY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_add",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_components",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_multiply",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_paths",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_post_chat_completions",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "cap_post_completions",
      "provenance": "EXTRACTED",
      "rel": "HAS_CAPABILITY",
      "src": "agent_litellm"
    },
    {
      "dst": "dec",
      "provenance": "EXTRACTED",
      "rel": "MAKES",
      "src": "agent_litellm"
    }
  ],
  "frameworks": [],
  "nodes": [
    {
      "id": "act",
      "name": "act",
      "props": {
        "action": "act"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "agent_litellm",
      "name": "litellm",
      "props": {
        "source_kind": "directory"
      },
      "provenance": "EXTRACTED",
      "type": "Agent"
    },
    {
      "id": "cap_add",
      "name": "add",
      "props": {
        "action": "add"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "cap_components",
      "name": "components",
      "props": {
        "action": "components"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "cap_multiply",
      "name": "multiply",
      "props": {
        "action": "multiply"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "cap_paths",
      "name": "paths",
      "props": {
        "action": "paths"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "cap_post_chat_completions",
      "name": "Create chat completion for 100+ LLM APIs",
      "props": {
        "action": "Create chat completion for 100+ LLM APIs"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "cap_post_completions",
      "name": "Create completion",
      "props": {
        "action": "Create completion"
      },
      "provenance": "EXTRACTED",
      "type": "Capability"
    },
    {
      "id": "dec",
      "name": "dec",
      "props": {
        "action": "dec"
      },
      "provenance": "EXTRACTED",
      "type": "Decision"
    },
    {
      "id": "fn_approve_mcp_server",
      "name": "approve_mcp_server",
      "props": {
        "action": "approve_mcp_server"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete",
      "name": "delete",
      "props": {
        "action": "delete"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_agent",
      "name": "delete_agent",
      "props": {
        "action": "delete_agent"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_agent_from_db",
      "name": "delete_agent_from_db",
      "props": {
        "action": "delete_agent_from_db"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_all_versions",
      "name": "delete_all_versions",
      "props": {
        "action": "delete_all_versions"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_assistant",
      "name": "delete_assistant",
      "props": {
        "action": "delete_assistant"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_attachment_from_db",
      "name": "delete_attachment_from_db",
      "props": {
        "action": "delete_attachment_from_db"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_budget",
      "name": "delete_budget",
      "props": {
        "action": "delete_budget"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_by_name",
      "name": "delete_by_name",
      "props": {
        "action": "delete_by_name"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_cache",
      "name": "delete_cache",
      "props": {
        "action": "delete_cache"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_cache_keys",
      "name": "delete_cache_keys",
      "props": {
        "action": "delete_cache_keys"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_credentials",
      "name": "delete_credentials",
      "props": {
        "action": "delete_credentials"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_data",
      "name": "delete_data",
      "props": {
        "action": "delete_data"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_deployment",
      "name": "delete_deployment",
      "props": {
        "action": "delete_deployment"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_eval_handler",
      "name": "delete_eval_handler",
      "props": {
        "action": "delete_eval_handler"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_file",
      "name": "delete_file",
      "props": {
        "action": "delete_file"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_gcs_object",
      "name": "delete_gcs_object",
      "props": {
        "action": "delete_gcs_object"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_guardrail_from_db",
      "name": "delete_guardrail_from_db",
      "props": {
        "action": "delete_guardrail_from_db"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_in_memory_guardrail",
      "name": "delete_in_memory_guardrail",
      "props": {
        "action": "delete_in_memory_guardrail"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_interaction",
      "name": "delete_interaction",
      "props": {
        "action": "delete_interaction"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_key",
      "name": "delete_key",
      "props": {
        "action": "delete_key"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_key_aliases",
      "name": "delete_key_aliases",
      "props": {
        "action": "delete_key_aliases"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_many",
      "name": "delete_many",
      "props": {
        "action": "delete_many"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_mcp_server",
      "name": "delete_mcp_server",
      "props": {
        "action": "delete_mcp_server"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_mcp_server_from_team",
      "name": "delete_mcp_server_from_team",
      "props": {
        "action": "delete_mcp_server_from_team"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_mcp_server_from_virtualkey",
      "name": "delete_mcp_server_from_virtualkey",
      "props": {
        "action": "delete_mcp_server_from_virtualkey"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_mcp_toolset",
      "name": "delete_mcp_toolset",
      "props": {
        "action": "delete_mcp_toolset"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_member",
      "name": "delete_member",
      "props": {
        "action": "delete_member"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_member_from_org",
      "name": "delete_member_from_org",
      "props": {
        "action": "delete_member_from_org"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_model",
      "name": "delete_model",
      "props": {
        "action": "delete_model"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_nested_value",
      "name": "delete_nested_value",
      "props": {
        "action": "delete_nested_value"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_object",
      "name": "delete_object",
      "props": {
        "action": "delete_object"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_organization",
      "name": "delete_organization",
      "props": {
        "action": "delete_organization"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_param",
      "name": "delete_param",
      "props": {
        "action": "delete_param"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_permission",
      "name": "delete_permission",
      "props": {
        "action": "delete_permission"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_policy_from_db",
      "name": "delete_policy_from_db",
      "props": {
        "action": "delete_policy_from_db"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_polling",
      "name": "delete_polling",
      "props": {
        "action": "delete_polling"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_project",
      "name": "delete_project",
      "props": {
        "action": "delete_project"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_prompts_by_base_id",
      "name": "delete_prompts_by_base_id",
      "props": {
        "action": "delete_prompts_by_base_id"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_response_api_handler",
      "name": "delete_response_api_handler",
      "props": {
        "action": "delete_response_api_handler"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_run_handler",
      "name": "delete_run_handler",
      "props": {
        "action": "delete_run_handler"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_search_tool_from_db",
      "name": "delete_search_tool_from_db",
      "props": {
        "action": "delete_search_tool_from_db"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_skill_handler",
      "name": "delete_skill_handler",
      "props": {
        "action": "delete_skill_handler"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_team",
      "name": "delete_team",
      "props": {
        "action": "delete_team"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_team_member",
      "name": "delete_team_member",
      "props": {
        "action": "delete_team_member"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_team_model_alias",
      "name": "delete_team_model_alias",
      "props": {
        "action": "delete_team_model_alias"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_team_models",
      "name": "delete_team_models",
      "props": {
        "action": "delete_team_models"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_thread",
      "name": "delete_thread",
      "props": {
        "action": "delete_thread"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_token",
      "name": "delete_token",
      "props": {
        "action": "delete_token"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_unified_file_id",
      "name": "delete_unified_file_id",
      "props": {
        "action": "delete_unified_file_id"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_unified_resource_id",
      "name": "delete_unified_resource_id",
      "props": {
        "action": "delete_unified_resource_id"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_user",
      "name": "delete_user",
      "props": {
        "action": "delete_user"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_user_credential",
      "name": "delete_user_credential",
      "props": {
        "action": "delete_user_credential"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_user_env_vars",
      "name": "delete_user_env_vars",
      "props": {
        "action": "delete_user_env_vars"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_vector_store_from_registry",
      "name": "delete_vector_store_from_registry",
      "props": {
        "action": "delete_vector_store_from_registry"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_vector_store_index",
      "name": "delete_vector_store_index",
      "props": {
        "action": "delete_vector_store_index"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_delete_verification_tokens",
      "name": "delete_verification_tokens",
      "props": {
        "action": "delete_verification_tokens"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_drop_none",
      "name": "drop_none",
      "props": {
        "action": "drop_none"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_drop_params_from_unprocessable_entity_error",
      "name": "drop_params_from_unprocessable_entity_error",
      "props": {
        "action": "drop_params_from_unprocessable_entity_error"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_drop_partitions_older_than",
      "name": "drop_partitions_older_than",
      "props": {
        "action": "drop_partitions_older_than"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute",
      "name": "execute",
      "props": {
        "action": "execute"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_command",
      "name": "execute_command",
      "props": {
        "action": "execute_command"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_completion",
      "name": "execute_completion",
      "props": {
        "action": "execute_completion"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_guardrail",
      "name": "execute_guardrail",
      "props": {
        "action": "execute_guardrail"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_mcp_tool",
      "name": "execute_mcp_tool",
      "props": {
        "action": "execute_mcp_tool"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_raw",
      "name": "execute_raw",
      "props": {
        "action": "execute_raw"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_execute_with_code_execution",
      "name": "execute_with_code_execution",
      "props": {
        "action": "execute_with_code_execution"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_export",
      "name": "export",
      "props": {
        "action": "export"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_export_all",
      "name": "export_all",
      "props": {
        "action": "export_all"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_export_usage_data",
      "name": "export_usage_data",
      "props": {
        "action": "export_usage_data"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_export_verifier",
      "name": "export_verifier",
      "props": {
        "action": "export_verifier"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_export_window",
      "name": "export_window",
      "props": {
        "action": "export_window"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_migrate_file_to_image_url",
      "name": "migrate_file_to_image_url",
      "props": {
        "action": "migrate_file_to_image_url"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_migrate_models",
      "name": "migrate_models",
      "props": {
        "action": "migrate_models"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_migrate_passwords_to_scrypt_async",
      "name": "migrate_passwords_to_scrypt_async",
      "props": {
        "action": "migrate_passwords_to_scrypt_async"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_migrate_verification_tokens",
      "name": "migrate_verification_tokens",
      "props": {
        "action": "migrate_verification_tokens"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post",
      "name": "post",
      "props": {
        "action": "post"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call",
      "name": "post_call",
      "props": {
        "action": "post_call"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_failure_hook",
      "name": "post_call_failure_hook",
      "props": {
        "action": "post_call_failure_hook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_hook",
      "name": "post_call_hook",
      "props": {
        "action": "post_call_hook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_processing",
      "name": "post_call_processing",
      "props": {
        "action": "post_call_processing"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_response_headers_hook",
      "name": "post_call_response_headers_hook",
      "props": {
        "action": "post_call_response_headers_hook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_rules",
      "name": "post_call_rules",
      "props": {
        "action": "post_call_rules"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_call_success_hook",
      "name": "post_call_success_hook",
      "props": {
        "action": "post_call_success_hook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_compile_prompt_processing",
      "name": "post_compile_prompt_processing",
      "props": {
        "action": "post_compile_prompt_processing"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_non_streaming",
      "name": "post_non_streaming",
      "props": {
        "action": "post_non_streaming"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_response_rule",
      "name": "post_response_rule",
      "props": {
        "action": "post_response_rule"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_side_effect",
      "name": "post_side_effect",
      "props": {
        "action": "post_side_effect"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_post_stream_processing",
      "name": "post_stream_processing",
      "props": {
        "action": "post_stream_processing"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_publish_message",
      "name": "publish_message",
      "props": {
        "action": "publish_message"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_reject_mcp_server",
      "name": "reject_mcp_server",
      "props": {
        "action": "reject_mcp_server"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_release",
      "name": "release",
      "props": {
        "action": "release"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_release_budget_reservation",
      "name": "release_budget_reservation",
      "props": {
        "action": "release_budget_reservation"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_release_health_check_lock",
      "name": "release_health_check_lock",
      "props": {
        "action": "release_health_check_lock"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_release_lock",
      "name": "release_lock",
      "props": {
        "action": "release_lock"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run",
      "name": "run",
      "props": {
        "action": "run"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_agent",
      "name": "run_agent",
      "props": {
        "action": "run_agent"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_all_tests",
      "name": "run_all_tests",
      "props": {
        "action": "run_all_tests"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_async_completion",
      "name": "run_async_completion",
      "props": {
        "action": "run_async_completion"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_async_fallback",
      "name": "run_async_fallback",
      "props": {
        "action": "run_async_fallback"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_async_function",
      "name": "run_async_function",
      "props": {
        "action": "run_async_function"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_async_test",
      "name": "run_async_test",
      "props": {
        "action": "run_async_test"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_benchmark",
      "name": "run_benchmark",
      "props": {
        "action": "run_benchmark"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_case",
      "name": "run_case",
      "props": {
        "action": "run_case"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_comparison",
      "name": "run_comparison",
      "props": {
        "action": "run_comparison"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_env_setup",
      "name": "run_env_setup",
      "props": {
        "action": "run_env_setup"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_eval",
      "name": "run_eval",
      "props": {
        "action": "run_eval"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_good_model_test",
      "name": "run_good_model_test",
      "props": {
        "action": "run_good_model_test"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_grayswan_guardrail",
      "name": "run_grayswan_guardrail",
      "props": {
        "action": "run_grayswan_guardrail"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_health_check",
      "name": "run_health_check",
      "props": {
        "action": "run_health_check"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_health_checks",
      "name": "run_health_checks",
      "props": {
        "action": "run_health_checks"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_in_loop",
      "name": "run_in_loop",
      "props": {
        "action": "run_in_loop"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_in_new_loop",
      "name": "run_in_new_loop",
      "props": {
        "action": "run_in_new_loop"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_in_thread",
      "name": "run_in_thread",
      "props": {
        "action": "run_in_thread"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_integration_tests_for_auth_method",
      "name": "run_integration_tests_for_auth_method",
      "props": {
        "action": "run_integration_tests_for_auth_method"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_lint_check",
      "name": "run_lint_check",
      "props": {
        "action": "run_lint_check"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_load_test",
      "name": "run_load_test",
      "props": {
        "action": "run_load_test"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_memory_baseline_test",
      "name": "run_memory_baseline_test",
      "props": {
        "action": "run_memory_baseline_test"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_memory_test",
      "name": "run_memory_test",
      "props": {
        "action": "run_memory_test"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_non_standard_fallback_format",
      "name": "run_non_standard_fallback_format",
      "props": {
        "action": "run_non_standard_fallback_format"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_non_streaming_benchmark",
      "name": "run_non_streaming_benchmark",
      "props": {
        "action": "run_non_streaming_benchmark"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_ollama_serve",
      "name": "run_ollama_serve",
      "props": {
        "action": "run_ollama_serve"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_pillar_guardrail",
      "name": "run_pillar_guardrail",
      "props": {
        "action": "run_pillar_guardrail"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_plain",
      "name": "run_plain",
      "props": {
        "action": "run_plain"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_realtime_guardrails",
      "name": "run_realtime_guardrails",
      "props": {
        "action": "run_realtime_guardrails"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_scenario",
      "name": "run_scenario",
      "props": {
        "action": "run_scenario"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_server",
      "name": "run_server",
      "props": {
        "action": "run_server"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_setup_wizard",
      "name": "run_setup_wizard",
      "props": {
        "action": "run_setup_wizard"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_streaming_full_benchmark",
      "name": "run_streaming_full_benchmark",
      "props": {
        "action": "run_streaming_full_benchmark"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_streaming_ttft_benchmark",
      "name": "run_streaming_ttft_benchmark",
      "props": {
        "action": "run_streaming_ttft_benchmark"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_success_logging_and_cache_storage",
      "name": "run_success_logging_and_cache_storage",
      "props": {
        "action": "run_success_logging_and_cache_storage"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_sync",
      "name": "run_sync",
      "props": {
        "action": "run_sync"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_tests",
      "name": "run_tests",
      "props": {
        "action": "run_tests"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_thread",
      "name": "run_thread",
      "props": {
        "action": "run_thread"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_thread_stream",
      "name": "run_thread_stream",
      "props": {
        "action": "run_thread_stream"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_voice_agent",
      "name": "run_voice_agent",
      "props": {
        "action": "run_voice_agent"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_with_session",
      "name": "run_with_session",
      "props": {
        "action": "run_with_session"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_run_with_timeout",
      "name": "run_with_timeout",
      "props": {
        "action": "run_with_timeout"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send",
      "name": "send",
      "props": {
        "action": "send"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_alert",
      "name": "send_alert",
      "props": {
        "action": "send_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_alert_to_pagerduty",
      "name": "send_alert_to_pagerduty",
      "props": {
        "action": "send_alert_to_pagerduty"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_alerts_for_hanging_requests",
      "name": "send_alerts_for_hanging_requests",
      "props": {
        "action": "send_alerts_for_hanging_requests"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_audio_chunk",
      "name": "send_audio_chunk",
      "props": {
        "action": "send_audio_chunk"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_batched",
      "name": "send_batched",
      "props": {
        "action": "send_batched"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_daily_reports",
      "name": "send_daily_reports",
      "props": {
        "action": "send_daily_reports"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_email",
      "name": "send_email",
      "props": {
        "action": "send_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_email_alert_using_smtp",
      "name": "send_email_alert_using_smtp",
      "props": {
        "action": "send_email_alert_using_smtp"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_fallback_stats_from_prometheus",
      "name": "send_fallback_stats_from_prometheus",
      "props": {
        "action": "send_fallback_stats_from_prometheus"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_hanging_request_alert",
      "name": "send_hanging_request_alert",
      "props": {
        "action": "send_hanging_request_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_key_created_email",
      "name": "send_key_created_email",
      "props": {
        "action": "send_key_created_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_key_created_or_user_invited_email",
      "name": "send_key_created_or_user_invited_email",
      "props": {
        "action": "send_key_created_or_user_invited_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_key_rotated_email",
      "name": "send_key_rotated_email",
      "props": {
        "action": "send_key_rotated_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_llm_exception_alert",
      "name": "send_llm_exception_alert",
      "props": {
        "action": "send_llm_exception_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_management_endpoint_alert",
      "name": "send_management_endpoint_alert",
      "props": {
        "action": "send_management_endpoint_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_max_budget_alert_email",
      "name": "send_max_budget_alert_email",
      "props": {
        "action": "send_max_budget_alert_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_message",
      "name": "send_message",
      "props": {
        "action": "send_message"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_message_streaming",
      "name": "send_message_streaming",
      "props": {
        "action": "send_message_streaming"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_monthly_spend_report",
      "name": "send_monthly_spend_report",
      "props": {
        "action": "send_monthly_spend_report"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_request",
      "name": "send_request",
      "props": {
        "action": "send_request"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_session",
      "name": "send_session",
      "props": {
        "action": "send_session"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_session_update",
      "name": "send_session_update",
      "props": {
        "action": "send_session_update"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_soft_budget_alert_email",
      "name": "send_soft_budget_alert_email",
      "props": {
        "action": "send_soft_budget_alert_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_team_budget_alert",
      "name": "send_team_budget_alert",
      "props": {
        "action": "send_team_budget_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_team_soft_budget_alert_email",
      "name": "send_team_soft_budget_alert_email",
      "props": {
        "action": "send_team_soft_budget_alert_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_text",
      "name": "send_text",
      "props": {
        "action": "send_text"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_to_backend",
      "name": "send_to_backend",
      "props": {
        "action": "send_to_backend"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_to_webhook",
      "name": "send_to_webhook",
      "props": {
        "action": "send_to_webhook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_user_invitation_email",
      "name": "send_user_invitation_email",
      "props": {
        "action": "send_user_invitation_email"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_virtual_key_event_slack",
      "name": "send_virtual_key_event_slack",
      "props": {
        "action": "send_virtual_key_event_slack"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_webhook",
      "name": "send_webhook",
      "props": {
        "action": "send_webhook"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_webhook_alert",
      "name": "send_webhook_alert",
      "props": {
        "action": "send_webhook_alert"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_send_weekly_spend_report",
      "name": "send_weekly_spend_report",
      "props": {
        "action": "send_weekly_spend_report"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_shutdown",
      "name": "shutdown",
      "props": {
        "action": "shutdown"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_shutdown_handler",
      "name": "shutdown_handler",
      "props": {
        "action": "shutdown_handler"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_shutdown_session_managers",
      "name": "shutdown_session_managers",
      "props": {
        "action": "shutdown_session_managers"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_terminate",
      "name": "terminate",
      "props": {
        "action": "terminate"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload",
      "name": "upload",
      "props": {
        "action": "upload"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_bytes_async",
      "name": "upload_bytes_async",
      "props": {
        "action": "upload_bytes_async"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_bytes_sync",
      "name": "upload_bytes_sync",
      "props": {
        "action": "upload_bytes_sync"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_data_to_s3",
      "name": "upload_data_to_s3",
      "props": {
        "action": "upload_data_to_s3"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_file",
      "name": "upload_file",
      "props": {
        "action": "upload_file"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_file_async",
      "name": "upload_file_async",
      "props": {
        "action": "upload_file_async"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_file_sync",
      "name": "upload_file_sync",
      "props": {
        "action": "upload_file_sync"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "fn_upload_to_azure_data_lake_with_azure_account_key",
      "name": "upload_to_azure_data_lake_with_azure_account_key",
      "props": {
        "action": "upload_to_azure_data_lake_with_azure_account_key"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "gate",
      "name": "gate",
      "props": {
        "action": "gate"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_brand_protection_filter",
      "name": "airline-brand-protection-filter",
      "props": {
        "action": "airline-brand-protection-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_contact_info_uae",
      "name": "airline-contact-info-uae",
      "props": {
        "action": "airline-contact-info-uae"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_off_topic_filter",
      "name": "airline-off-topic-filter",
      "props": {
        "action": "airline-off-topic-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_passport_multinational",
      "name": "airline-passport-multinational",
      "props": {
        "action": "airline-passport-multinational"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_payment_financial",
      "name": "airline-payment-financial",
      "props": {
        "action": "airline-payment-financial"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_airline_pnr_skywards_pii",
      "name": "airline-pnr-skywards-pii",
      "props": {
        "action": "airline-pnr-skywards-pii"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_au_pii_passports",
      "name": "au-pii-passports",
      "props": {
        "action": "au-pii-passports"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_au_pii_tax_identifiers",
      "name": "au-pii-tax-identifiers",
      "props": {
        "action": "au-pii-tax-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_aviation_ops_data_protection",
      "name": "aviation-ops-data-protection",
      "props": {
        "action": "aviation-ops-data-protection"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_aviation_safety_topic_filter",
      "name": "aviation-safety-topic-filter",
      "props": {
        "action": "aviation-safety-topic-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_contact_information",
      "name": "ca-pii-contact-information",
      "props": {
        "action": "ca-pii-contact-information"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_financial",
      "name": "ca-pii-financial",
      "props": {
        "action": "ca-pii-financial"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_government_identifiers",
      "name": "ca-pii-government-identifiers",
      "props": {
        "action": "ca-pii-government-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_health_drivers",
      "name": "ca-pii-health-drivers",
      "props": {
        "action": "ca-pii-health-drivers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_immigration",
      "name": "ca-pii-immigration",
      "props": {
        "action": "ca-pii-immigration"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_ca_pii_institutional_ids",
      "name": "ca-pii-institutional-ids",
      "props": {
        "action": "ca-pii-institutional-ids"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_claims_fraud_coaching_filter",
      "name": "claims-fraud-coaching-filter",
      "props": {
        "action": "claims-fraud-coaching-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_claims_medical_advice_filter",
      "name": "claims-medical-advice-filter",
      "props": {
        "action": "claims-medical-advice-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_claims_phi_disclosure_filter",
      "name": "claims-phi-disclosure-filter",
      "props": {
        "action": "claims-phi-disclosure-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_claims_prior_auth_gaming_filter",
      "name": "claims-prior-auth-gaming-filter",
      "props": {
        "action": "claims-prior-auth-gaming-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_claims_system_override_filter",
      "name": "claims-system-override-filter",
      "props": {
        "action": "claims-system-override-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_code_injection_blocker",
      "name": "code-injection-blocker",
      "props": {
        "action": "code-injection-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_comparison_input_filter",
      "name": "competitor-comparison-input-filter",
      "props": {
        "action": "competitor-comparison-input-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_comparison_output_filter",
      "name": "competitor-comparison-output-filter",
      "props": {
        "action": "competitor-comparison-output-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_input_blocker",
      "name": "competitor-input-blocker",
      "props": {
        "action": "competitor-input-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_name_input_blocker",
      "name": "competitor-name-input-blocker",
      "props": {
        "action": "competitor-name-input-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_name_output_blocker",
      "name": "competitor-name-output-blocker",
      "props": {
        "action": "competitor-name-output-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_output_blocker",
      "name": "competitor-output-blocker",
      "props": {
        "action": "competitor-output-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_recommendation_input_filter",
      "name": "competitor-recommendation-input-filter",
      "props": {
        "action": "competitor-recommendation-input-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_competitor_recommendation_output_filter",
      "name": "competitor-recommendation-output-filter",
      "props": {
        "action": "competitor-recommendation-output-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_components",
      "name": "components",
      "props": {
        "action": "components"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_contact_information_pii",
      "name": "contact-information-pii",
      "props": {
        "action": "contact-information-pii"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_content_safety_permissive",
      "name": "content-safety-permissive",
      "props": {
        "action": "content-safety-permissive"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_content_safety_strict",
      "name": "content-safety-strict",
      "props": {
        "action": "content-safety-strict"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_credentials_api_keys",
      "name": "credentials-api-keys",
      "props": {
        "action": "credentials-api-keys"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_biometric_profiling",
      "name": "eu-ai-act-art5-biometric-profiling",
      "props": {
        "action": "eu-ai-act-art5-biometric-profiling"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_biometric_profiling_fr",
      "name": "eu-ai-act-art5-biometric-profiling-fr",
      "props": {
        "action": "eu-ai-act-art5-biometric-profiling-fr"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_emotion_recognition",
      "name": "eu-ai-act-art5-emotion-recognition",
      "props": {
        "action": "eu-ai-act-art5-emotion-recognition"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_emotion_recognition_fr",
      "name": "eu-ai-act-art5-emotion-recognition-fr",
      "props": {
        "action": "eu-ai-act-art5-emotion-recognition-fr"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_manipulation",
      "name": "eu-ai-act-art5-manipulation",
      "props": {
        "action": "eu-ai-act-art5-manipulation"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_manipulation_fr",
      "name": "eu-ai-act-art5-manipulation-fr",
      "props": {
        "action": "eu-ai-act-art5-manipulation-fr"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_social_scoring",
      "name": "eu-ai-act-art5-social-scoring",
      "props": {
        "action": "eu-ai-act-art5-social-scoring"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_social_scoring_fr",
      "name": "eu-ai-act-art5-social-scoring-fr",
      "props": {
        "action": "eu-ai-act-art5-social-scoring-fr"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_vulnerability",
      "name": "eu-ai-act-art5-vulnerability",
      "props": {
        "action": "eu-ai-act-art5-vulnerability"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_eu_ai_act_art5_vulnerability_fr",
      "name": "eu-ai-act-art5-vulnerability-fr",
      "props": {
        "action": "eu-ai-act-art5-vulnerability-fr"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_financial_pii",
      "name": "financial-pii",
      "props": {
        "action": "financial-pii"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_gdpr_eu_business_identifiers",
      "name": "gdpr-eu-business-identifiers",
      "props": {
        "action": "gdpr-eu-business-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_gdpr_eu_contact_information",
      "name": "gdpr-eu-contact-information",
      "props": {
        "action": "gdpr-eu-contact-information"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_gdpr_eu_financial_data",
      "name": "gdpr-eu-financial-data",
      "props": {
        "action": "gdpr-eu-financial-data"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_gdpr_eu_national_identifiers",
      "name": "gdpr-eu-national-identifiers",
      "props": {
        "action": "gdpr-eu-national-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_international_pii_identifiers",
      "name": "international-pii-identifiers",
      "props": {
        "action": "international-pii-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_mcp_security_block",
      "name": "mcp-security-block",
      "props": {
        "action": "mcp-security-block"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_network_infrastructure_pii",
      "name": "network-infrastructure-pii",
      "props": {
        "action": "network-infrastructure-pii"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_child_safety_filter",
      "name": "nsfw-child-safety-filter",
      "props": {
        "action": "nsfw-child-safety-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_child_safety_filter_basic",
      "name": "nsfw-child-safety-filter-basic",
      "props": {
        "action": "nsfw-child-safety-filter-basic"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_child_safety_filter_global",
      "name": "nsfw-child-safety-filter-global",
      "props": {
        "action": "nsfw-child-safety-filter-global"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_content_filter_australian",
      "name": "nsfw-content-filter-australian",
      "props": {
        "action": "nsfw-content-filter-australian"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_content_filter_english",
      "name": "nsfw-content-filter-english",
      "props": {
        "action": "nsfw-content-filter-english"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_content_filter_english_only",
      "name": "nsfw-content-filter-english-only",
      "props": {
        "action": "nsfw-content-filter-english-only"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_filter_australian",
      "name": "nsfw-filter-australian",
      "props": {
        "action": "nsfw-filter-australian"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_filter_english",
      "name": "nsfw-filter-english",
      "props": {
        "action": "nsfw-filter-english"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_filter_french",
      "name": "nsfw-filter-french",
      "props": {
        "action": "nsfw-filter-french"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_filter_german",
      "name": "nsfw-filter-german",
      "props": {
        "action": "nsfw-filter-german"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_filter_spanish",
      "name": "nsfw-filter-spanish",
      "props": {
        "action": "nsfw-filter-spanish"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_racial_bias_filter",
      "name": "nsfw-racial-bias-filter",
      "props": {
        "action": "nsfw-racial-bias-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_racial_bias_filter_basic",
      "name": "nsfw-racial-bias-filter-basic",
      "props": {
        "action": "nsfw-racial-bias-filter-basic"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_racial_bias_filter_global",
      "name": "nsfw-racial-bias-filter-global",
      "props": {
        "action": "nsfw-racial-bias-filter-global"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_self_harm_filter",
      "name": "nsfw-self-harm-filter",
      "props": {
        "action": "nsfw-self-harm-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_self_harm_filter_basic",
      "name": "nsfw-self-harm-filter-basic",
      "props": {
        "action": "nsfw-self-harm-filter-basic"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_nsfw_self_harm_filter_global",
      "name": "nsfw-self-harm-filter-global",
      "props": {
        "action": "nsfw-self-harm-filter-global"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_paths",
      "name": "paths",
      "props": {
        "action": "paths"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_prompt_injection_blocker",
      "name": "prompt-injection-blocker",
      "props": {
        "action": "prompt-injection-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_protected_class_information",
      "name": "protected-class-information",
      "props": {
        "action": "protected-class-information"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_mas_data_governance",
      "name": "sg-mas-data-governance",
      "props": {
        "action": "sg-mas-data-governance"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_mas_fairness_bias",
      "name": "sg-mas-fairness-bias",
      "props": {
        "action": "sg-mas-fairness-bias"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_mas_human_oversight",
      "name": "sg-mas-human-oversight",
      "props": {
        "action": "sg-mas-human-oversight"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_mas_model_security",
      "name": "sg-mas-model-security",
      "props": {
        "action": "sg-mas-model-security"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_mas_transparency_explainability",
      "name": "sg-mas-transparency-explainability",
      "props": {
        "action": "sg-mas-transparency-explainability"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_business_identifiers",
      "name": "sg-pdpa-business-identifiers",
      "props": {
        "action": "sg-pdpa-business-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_contact_information",
      "name": "sg-pdpa-contact-information",
      "props": {
        "action": "sg-pdpa-contact-information"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_data_transfer",
      "name": "sg-pdpa-data-transfer",
      "props": {
        "action": "sg-pdpa-data-transfer"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_do_not_call",
      "name": "sg-pdpa-do-not-call",
      "props": {
        "action": "sg-pdpa-do-not-call"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_financial_data",
      "name": "sg-pdpa-financial-data",
      "props": {
        "action": "sg-pdpa-financial-data"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_personal_identifiers",
      "name": "sg-pdpa-personal-identifiers",
      "props": {
        "action": "sg-pdpa-personal-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_pii_identifiers",
      "name": "sg-pdpa-pii-identifiers",
      "props": {
        "action": "sg-pdpa-pii-identifiers"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_profiling_automated_decisions",
      "name": "sg-pdpa-profiling-automated-decisions",
      "props": {
        "action": "sg-pdpa-profiling-automated-decisions"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sg_pdpa_sensitive_data",
      "name": "sg-pdpa-sensitive-data",
      "props": {
        "action": "sg-pdpa-sensitive-data"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_sql_injection_blocker",
      "name": "sql-injection-blocker",
      "props": {
        "action": "sql-injection-blocker"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_topic_restriction_filter",
      "name": "topic-restriction-filter",
      "props": {
        "action": "topic-restriction-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_uae_anti_discrimination_filter",
      "name": "uae-anti-discrimination-filter",
      "props": {
        "action": "uae-anti-discrimination-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_uae_cultural_sensitivity_filter",
      "name": "uae-cultural-sensitivity-filter",
      "props": {
        "action": "uae-cultural-sensitivity-filter"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "gate_uae_data_protection_pii",
      "name": "uae-data-protection-pii",
      "props": {
        "action": "uae-data-protection-pii"
      },
      "provenance": "EXTRACTED",
      "type": "Gate"
    },
    {
      "id": "op_get",
      "name": "Home",
      "props": {
        "action": "Home"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "op_get_models",
      "name": "Get models",
      "props": {
        "action": "Get models"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "op_get_ollama_logs",
      "name": "Retrieve server logs for ollama models",
      "props": {
        "action": "Retrieve server logs for ollama models"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "op_post_chat_completions",
      "name": "Create chat completion for 100+ LLM APIs",
      "props": {
        "action": "Create chat completion for 100+ LLM APIs"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    },
    {
      "id": "op_post_completions",
      "name": "Create completion",
      "props": {
        "action": "Create completion"
      },
      "provenance": "EXTRACTED",
      "type": "Task"
    }
  ],
  "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.",
  "source": "litellm",
  "source_kind": "directory"
}
