{
  "alg": "Ed25519",
  "atom_id": "oao-LITELLM-62794bc9a6",
  "decision": "GOVERNED:UNGOVERNED",
  "evidence": {
    "ontology": {
      "action_maps": [
        {
          "label": "act",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "act"
        },
        {
          "label": "add",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_add"
        },
        {
          "label": "components",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_components"
        },
        {
          "label": "multiply",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_multiply"
        },
        {
          "label": "paths",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_paths"
        },
        {
          "label": "Create chat completion for 100+ LLM APIs",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_post_chat_completions"
        },
        {
          "label": "Create completion",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "cap_post_completions"
        },
        {
          "label": "dec",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "dec"
        },
        {
          "label": "approve_mcp_server",
          "mappings": [
            {
              "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'approve'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_approve_mcp_server"
        },
        {
          "label": "delete",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete"
        },
        {
          "label": "delete_agent",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_agent"
        },
        {
          "label": "delete_agent_from_db",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_agent_from_db"
        },
        {
          "label": "delete_all_versions",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_versions"
        },
        {
          "label": "delete_assistant",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_assistant"
        },
        {
          "label": "delete_attachment_from_db",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_attachment_from_db"
        },
        {
          "label": "delete_budget",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_budget"
        },
        {
          "label": "delete_by_name",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_name"
        },
        {
          "label": "delete_cache",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_cache"
        },
        {
          "label": "delete_cache_keys",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_cache_keys"
        },
        {
          "label": "delete_credentials",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_credentials"
        },
        {
          "label": "delete_data",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_data"
        },
        {
          "label": "delete_deployment",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_deployment"
        },
        {
          "label": "delete_eval_handler",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_eval_handler"
        },
        {
          "label": "delete_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_file"
        },
        {
          "label": "delete_gcs_object",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_gcs_object"
        },
        {
          "label": "delete_guardrail_from_db",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_guardrail_from_db"
        },
        {
          "label": "delete_in_memory_guardrail",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_in_memory_guardrail"
        },
        {
          "label": "delete_interaction",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_interaction"
        },
        {
          "label": "delete_key",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_key"
        },
        {
          "label": "delete_key_aliases",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_key_aliases"
        },
        {
          "label": "delete_many",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_many"
        },
        {
          "label": "delete_mcp_server",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_mcp_server"
        },
        {
          "label": "delete_mcp_server_from_team",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_mcp_server_from_team"
        },
        {
          "label": "delete_mcp_server_from_virtualkey",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_mcp_server_from_virtualkey"
        },
        {
          "label": "delete_mcp_toolset",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_mcp_toolset"
        },
        {
          "label": "delete_member",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_member"
        },
        {
          "label": "delete_member_from_org",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_member_from_org"
        },
        {
          "label": "delete_model",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_model"
        },
        {
          "label": "delete_nested_value",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_nested_value"
        },
        {
          "label": "delete_object",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_object"
        },
        {
          "label": "delete_organization",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_organization"
        },
        {
          "label": "delete_param",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_param"
        },
        {
          "label": "delete_permission",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_permission"
        },
        {
          "label": "delete_policy_from_db",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_policy_from_db"
        },
        {
          "label": "delete_polling",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_polling"
        },
        {
          "label": "delete_project",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_project"
        },
        {
          "label": "delete_prompts_by_base_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_prompts_by_base_id"
        },
        {
          "label": "delete_response_api_handler",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_response_api_handler"
        },
        {
          "label": "delete_run_handler",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_run_handler"
        },
        {
          "label": "delete_search_tool_from_db",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_search_tool_from_db"
        },
        {
          "label": "delete_skill_handler",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_skill_handler"
        },
        {
          "label": "delete_team",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_team"
        },
        {
          "label": "delete_team_member",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_team_member"
        },
        {
          "label": "delete_team_model_alias",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_team_model_alias"
        },
        {
          "label": "delete_team_models",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_team_models"
        },
        {
          "label": "delete_thread",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_thread"
        },
        {
          "label": "delete_token",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_token"
        },
        {
          "label": "delete_unified_file_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_unified_file_id"
        },
        {
          "label": "delete_unified_resource_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_unified_resource_id"
        },
        {
          "label": "delete_user",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user"
        },
        {
          "label": "delete_user_credential",
          "mappings": [
            {
              "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'credential'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_credential"
        },
        {
          "label": "delete_user_env_vars",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_env_vars"
        },
        {
          "label": "delete_vector_store_from_registry",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_vector_store_from_registry"
        },
        {
          "label": "delete_vector_store_index",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_vector_store_index"
        },
        {
          "label": "delete_verification_tokens",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_verification_tokens"
        },
        {
          "label": "drop_none",
          "mappings": [
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_drop_none"
        },
        {
          "label": "drop_params_from_unprocessable_entity_error",
          "mappings": [
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_drop_params_from_unprocessable_entity_error"
        },
        {
          "label": "drop_partitions_older_than",
          "mappings": [
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'drop'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_drop_partitions_older_than"
        },
        {
          "label": "execute",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute"
        },
        {
          "label": "execute_command",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_command"
        },
        {
          "label": "execute_completion",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_completion"
        },
        {
          "label": "execute_guardrail",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_guardrail"
        },
        {
          "label": "execute_mcp_tool",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_mcp_tool"
        },
        {
          "label": "execute_raw",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_raw"
        },
        {
          "label": "execute_with_code_execution",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_with_code_execution"
        },
        {
          "label": "export",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export"
        },
        {
          "label": "export_all",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_all"
        },
        {
          "label": "export_usage_data",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_usage_data"
        },
        {
          "label": "export_verifier",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_verifier"
        },
        {
          "label": "export_window",
          "mappings": [
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_export_window"
        },
        {
          "label": "migrate_file_to_image_url",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_file_to_image_url"
        },
        {
          "label": "migrate_models",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_models"
        },
        {
          "label": "migrate_passwords_to_scrypt_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_passwords_to_scrypt_async"
        },
        {
          "label": "migrate_verification_tokens",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_verification_tokens"
        },
        {
          "label": "post",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post"
        },
        {
          "label": "post_call",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call"
        },
        {
          "label": "post_call_failure_hook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_failure_hook"
        },
        {
          "label": "post_call_hook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_hook"
        },
        {
          "label": "post_call_processing",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_processing"
        },
        {
          "label": "post_call_response_headers_hook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_response_headers_hook"
        },
        {
          "label": "post_call_rules",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_rules"
        },
        {
          "label": "post_call_success_hook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_call_success_hook"
        },
        {
          "label": "post_compile_prompt_processing",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_compile_prompt_processing"
        },
        {
          "label": "post_non_streaming",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_non_streaming"
        },
        {
          "label": "post_response_rule",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_response_rule"
        },
        {
          "label": "post_side_effect",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_side_effect"
        },
        {
          "label": "post_stream_processing",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_stream_processing"
        },
        {
          "label": "publish_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'publish'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_publish_message"
        },
        {
          "label": "reject_mcp_server",
          "mappings": [
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_reject_mcp_server"
        },
        {
          "label": "release",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release"
        },
        {
          "label": "release_budget_reservation",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release_budget_reservation"
        },
        {
          "label": "release_health_check_lock",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release_health_check_lock"
        },
        {
          "label": "release_lock",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release_lock"
        },
        {
          "label": "run",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run"
        },
        {
          "label": "run_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_agent"
        },
        {
          "label": "run_all_tests",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_all_tests"
        },
        {
          "label": "run_async_completion",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_completion"
        },
        {
          "label": "run_async_fallback",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_fallback"
        },
        {
          "label": "run_async_function",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_function"
        },
        {
          "label": "run_async_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_async_test"
        },
        {
          "label": "run_benchmark",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_benchmark"
        },
        {
          "label": "run_case",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_case"
        },
        {
          "label": "run_comparison",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_comparison"
        },
        {
          "label": "run_env_setup",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_env_setup"
        },
        {
          "label": "run_eval",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_eval"
        },
        {
          "label": "run_good_model_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_good_model_test"
        },
        {
          "label": "run_grayswan_guardrail",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_grayswan_guardrail"
        },
        {
          "label": "run_health_check",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_health_check"
        },
        {
          "label": "run_health_checks",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_health_checks"
        },
        {
          "label": "run_in_loop",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_in_loop"
        },
        {
          "label": "run_in_new_loop",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_in_new_loop"
        },
        {
          "label": "run_in_thread",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_in_thread"
        },
        {
          "label": "run_integration_tests_for_auth_method",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_integration_tests_for_auth_method"
        },
        {
          "label": "run_lint_check",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_lint_check"
        },
        {
          "label": "run_load_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_load_test"
        },
        {
          "label": "run_memory_baseline_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_memory_baseline_test"
        },
        {
          "label": "run_memory_test",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_memory_test"
        },
        {
          "label": "run_non_standard_fallback_format",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_non_standard_fallback_format"
        },
        {
          "label": "run_non_streaming_benchmark",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_non_streaming_benchmark"
        },
        {
          "label": "run_ollama_serve",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_ollama_serve"
        },
        {
          "label": "run_pillar_guardrail",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_pillar_guardrail"
        },
        {
          "label": "run_plain",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_plain"
        },
        {
          "label": "run_realtime_guardrails",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_realtime_guardrails"
        },
        {
          "label": "run_scenario",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_scenario"
        },
        {
          "label": "run_server",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_server"
        },
        {
          "label": "run_setup_wizard",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_setup_wizard"
        },
        {
          "label": "run_streaming_full_benchmark",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_streaming_full_benchmark"
        },
        {
          "label": "run_streaming_ttft_benchmark",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_streaming_ttft_benchmark"
        },
        {
          "label": "run_success_logging_and_cache_storage",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_success_logging_and_cache_storage"
        },
        {
          "label": "run_sync",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_sync"
        },
        {
          "label": "run_tests",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_tests"
        },
        {
          "label": "run_thread",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_thread"
        },
        {
          "label": "run_thread_stream",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_thread_stream"
        },
        {
          "label": "run_voice_agent",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_voice_agent"
        },
        {
          "label": "run_with_session",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_session"
        },
        {
          "label": "run_with_timeout",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_with_timeout"
        },
        {
          "label": "send",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send"
        },
        {
          "label": "send_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_alert"
        },
        {
          "label": "send_alert_to_pagerduty",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_alert_to_pagerduty"
        },
        {
          "label": "send_alerts_for_hanging_requests",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_alerts_for_hanging_requests"
        },
        {
          "label": "send_audio_chunk",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_audio_chunk"
        },
        {
          "label": "send_batched",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_batched"
        },
        {
          "label": "send_daily_reports",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_daily_reports"
        },
        {
          "label": "send_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_email"
        },
        {
          "label": "send_email_alert_using_smtp",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_email_alert_using_smtp"
        },
        {
          "label": "send_fallback_stats_from_prometheus",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_fallback_stats_from_prometheus"
        },
        {
          "label": "send_hanging_request_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_hanging_request_alert"
        },
        {
          "label": "send_key_created_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_key_created_email"
        },
        {
          "label": "send_key_created_or_user_invited_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_key_created_or_user_invited_email"
        },
        {
          "label": "send_key_rotated_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_key_rotated_email"
        },
        {
          "label": "send_llm_exception_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_llm_exception_alert"
        },
        {
          "label": "send_management_endpoint_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_management_endpoint_alert"
        },
        {
          "label": "send_max_budget_alert_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_max_budget_alert_email"
        },
        {
          "label": "send_message",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_message"
        },
        {
          "label": "send_message_streaming",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_message_streaming"
        },
        {
          "label": "send_monthly_spend_report",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_monthly_spend_report"
        },
        {
          "label": "send_request",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_request"
        },
        {
          "label": "send_session",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_session"
        },
        {
          "label": "send_session_update",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_session_update"
        },
        {
          "label": "send_soft_budget_alert_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_soft_budget_alert_email"
        },
        {
          "label": "send_team_budget_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_team_budget_alert"
        },
        {
          "label": "send_team_soft_budget_alert_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_team_soft_budget_alert_email"
        },
        {
          "label": "send_text",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_text"
        },
        {
          "label": "send_to_backend",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_to_backend"
        },
        {
          "label": "send_to_webhook",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_to_webhook"
        },
        {
          "label": "send_user_invitation_email",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_user_invitation_email"
        },
        {
          "label": "send_virtual_key_event_slack",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_virtual_key_event_slack"
        },
        {
          "label": "send_webhook",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_webhook"
        },
        {
          "label": "send_webhook_alert",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_webhook_alert"
        },
        {
          "label": "send_weekly_spend_report",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_weekly_spend_report"
        },
        {
          "label": "shutdown",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_shutdown"
        },
        {
          "label": "shutdown_handler",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_shutdown_handler"
        },
        {
          "label": "shutdown_session_managers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_shutdown_session_managers"
        },
        {
          "label": "terminate",
          "mappings": [
            {
              "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MEASURE",
              "name": "Measure function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "autonomous execution without oversight maps to command/scripting abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_terminate"
        },
        {
          "label": "upload",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload"
        },
        {
          "label": "upload_bytes_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_bytes_async"
        },
        {
          "label": "upload_bytes_sync",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_bytes_sync"
        },
        {
          "label": "upload_data_to_s3",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_data_to_s3"
        },
        {
          "label": "upload_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file"
        },
        {
          "label": "upload_file_async",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file_async"
        },
        {
          "label": "upload_file_sync",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file_sync"
        },
        {
          "label": "upload_to_azure_data_lake_with_azure_account_key",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_to_azure_data_lake_with_azure_account_key"
        },
        {
          "label": "gate",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate"
        },
        {
          "label": "airline-brand-protection-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_airline_brand_protection_filter"
        },
        {
          "label": "airline-contact-info-uae",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_airline_contact_info_uae"
        },
        {
          "label": "airline-off-topic-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_airline_off_topic_filter"
        },
        {
          "label": "airline-passport-multinational",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_airline_passport_multinational"
        },
        {
          "label": "airline-payment-financial",
          "mappings": [
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-5",
              "name": "Separation of Duties",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'payment'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MANAGE",
              "name": "Manage function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "separation of duties mitigates valid-account / privilege abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1078",
              "name": "Valid Accounts",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_airline_payment_financial"
        },
        {
          "label": "airline-pnr-skywards-pii",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_airline_pnr_skywards_pii"
        },
        {
          "label": "au-pii-passports",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_au_pii_passports"
        },
        {
          "label": "au-pii-tax-identifiers",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_au_pii_tax_identifiers"
        },
        {
          "label": "aviation-ops-data-protection",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_aviation_ops_data_protection"
        },
        {
          "label": "aviation-safety-topic-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_aviation_safety_topic_filter"
        },
        {
          "label": "ca-pii-contact-information",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_contact_information"
        },
        {
          "label": "ca-pii-financial",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_financial"
        },
        {
          "label": "ca-pii-government-identifiers",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_government_identifiers"
        },
        {
          "label": "ca-pii-health-drivers",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_health_drivers"
        },
        {
          "label": "ca-pii-immigration",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_immigration"
        },
        {
          "label": "ca-pii-institutional-ids",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_ca_pii_institutional_ids"
        },
        {
          "label": "claims-fraud-coaching-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_claims_fraud_coaching_filter"
        },
        {
          "label": "claims-medical-advice-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_claims_medical_advice_filter"
        },
        {
          "label": "claims-phi-disclosure-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_claims_phi_disclosure_filter"
        },
        {
          "label": "claims-prior-auth-gaming-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_claims_prior_auth_gaming_filter"
        },
        {
          "label": "claims-system-override-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_claims_system_override_filter"
        },
        {
          "label": "code-injection-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_code_injection_blocker"
        },
        {
          "label": "competitor-comparison-input-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_comparison_input_filter"
        },
        {
          "label": "competitor-comparison-output-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_comparison_output_filter"
        },
        {
          "label": "competitor-input-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_input_blocker"
        },
        {
          "label": "competitor-name-input-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_name_input_blocker"
        },
        {
          "label": "competitor-name-output-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_name_output_blocker"
        },
        {
          "label": "competitor-output-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_output_blocker"
        },
        {
          "label": "competitor-recommendation-input-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_recommendation_input_filter"
        },
        {
          "label": "competitor-recommendation-output-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_competitor_recommendation_output_filter"
        },
        {
          "label": "components",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_components"
        },
        {
          "label": "contact-information-pii",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_contact_information_pii"
        },
        {
          "label": "content-safety-permissive",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_content_safety_permissive"
        },
        {
          "label": "content-safety-strict",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_content_safety_strict"
        },
        {
          "label": "credentials-api-keys",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_credentials_api_keys"
        },
        {
          "label": "eu-ai-act-art5-biometric-profiling",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_biometric_profiling"
        },
        {
          "label": "eu-ai-act-art5-biometric-profiling-fr",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_biometric_profiling_fr"
        },
        {
          "label": "eu-ai-act-art5-emotion-recognition",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_emotion_recognition"
        },
        {
          "label": "eu-ai-act-art5-emotion-recognition-fr",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_emotion_recognition_fr"
        },
        {
          "label": "eu-ai-act-art5-manipulation",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_manipulation"
        },
        {
          "label": "eu-ai-act-art5-manipulation-fr",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_manipulation_fr"
        },
        {
          "label": "eu-ai-act-art5-social-scoring",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_social_scoring"
        },
        {
          "label": "eu-ai-act-art5-social-scoring-fr",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_social_scoring_fr"
        },
        {
          "label": "eu-ai-act-art5-vulnerability",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_vulnerability"
        },
        {
          "label": "eu-ai-act-art5-vulnerability-fr",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_eu_ai_act_art5_vulnerability_fr"
        },
        {
          "label": "financial-pii",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_financial_pii"
        },
        {
          "label": "gdpr-eu-business-identifiers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_gdpr_eu_business_identifiers"
        },
        {
          "label": "gdpr-eu-contact-information",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_gdpr_eu_contact_information"
        },
        {
          "label": "gdpr-eu-financial-data",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_gdpr_eu_financial_data"
        },
        {
          "label": "gdpr-eu-national-identifiers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_gdpr_eu_national_identifiers"
        },
        {
          "label": "international-pii-identifiers",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_international_pii_identifiers"
        },
        {
          "label": "mcp-security-block",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_mcp_security_block"
        },
        {
          "label": "network-infrastructure-pii",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_network_infrastructure_pii"
        },
        {
          "label": "nsfw-child-safety-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_child_safety_filter"
        },
        {
          "label": "nsfw-child-safety-filter-basic",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_child_safety_filter_basic"
        },
        {
          "label": "nsfw-child-safety-filter-global",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_child_safety_filter_global"
        },
        {
          "label": "nsfw-content-filter-australian",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_content_filter_australian"
        },
        {
          "label": "nsfw-content-filter-english",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_content_filter_english"
        },
        {
          "label": "nsfw-content-filter-english-only",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_content_filter_english_only"
        },
        {
          "label": "nsfw-filter-australian",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_filter_australian"
        },
        {
          "label": "nsfw-filter-english",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_filter_english"
        },
        {
          "label": "nsfw-filter-french",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_filter_french"
        },
        {
          "label": "nsfw-filter-german",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_filter_german"
        },
        {
          "label": "nsfw-filter-spanish",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_filter_spanish"
        },
        {
          "label": "nsfw-racial-bias-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_racial_bias_filter"
        },
        {
          "label": "nsfw-racial-bias-filter-basic",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_racial_bias_filter_basic"
        },
        {
          "label": "nsfw-racial-bias-filter-global",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_racial_bias_filter_global"
        },
        {
          "label": "nsfw-self-harm-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_self_harm_filter"
        },
        {
          "label": "nsfw-self-harm-filter-basic",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_self_harm_filter_basic"
        },
        {
          "label": "nsfw-self-harm-filter-global",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_nsfw_self_harm_filter_global"
        },
        {
          "label": "paths",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_paths"
        },
        {
          "label": "prompt-injection-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_prompt_injection_blocker"
        },
        {
          "label": "protected-class-information",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_protected_class_information"
        },
        {
          "label": "sg-mas-data-governance",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_mas_data_governance"
        },
        {
          "label": "sg-mas-fairness-bias",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_mas_fairness_bias"
        },
        {
          "label": "sg-mas-human-oversight",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_mas_human_oversight"
        },
        {
          "label": "sg-mas-model-security",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_mas_model_security"
        },
        {
          "label": "sg-mas-transparency-explainability",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_mas_transparency_explainability"
        },
        {
          "label": "sg-pdpa-business-identifiers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_business_identifiers"
        },
        {
          "label": "sg-pdpa-contact-information",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_contact_information"
        },
        {
          "label": "sg-pdpa-data-transfer",
          "mappings": [
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-5",
              "name": "Separation of Duties",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'transfer'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "Risk treatment: enforce a control commensurate with transaction risk.",
              "confidence": "advisory",
              "fw": "NIST AI RMF",
              "id": "MANAGE",
              "name": "Manage function",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "separation of duties mitigates valid-account / privilege abuse",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1078",
              "name": "Valid Accounts",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_sg_pdpa_data_transfer"
        },
        {
          "label": "sg-pdpa-do-not-call",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_do_not_call"
        },
        {
          "label": "sg-pdpa-financial-data",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_financial_data"
        },
        {
          "label": "sg-pdpa-personal-identifiers",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_personal_identifiers"
        },
        {
          "label": "sg-pdpa-pii-identifiers",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_sg_pdpa_pii_identifiers"
        },
        {
          "label": "sg-pdpa-profiling-automated-decisions",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_profiling_automated_decisions"
        },
        {
          "label": "sg-pdpa-sensitive-data",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sg_pdpa_sensitive_data"
        },
        {
          "label": "sql-injection-blocker",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_sql_injection_blocker"
        },
        {
          "label": "topic-restriction-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_topic_restriction_filter"
        },
        {
          "label": "uae-anti-discrimination-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_uae_anti_discrimination_filter"
        },
        {
          "label": "uae-cultural-sensitivity-filter",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "gate_uae_cultural_sensitivity_filter"
        },
        {
          "label": "uae-data-protection-pii",
          "mappings": [
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Refusing to handle data above a classification ceiling enforces the categorization of the resource.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "RA-2",
              "name": "Security Categorization",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: The ceiling governs the flow of classified information through the agent.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Handling over-classified data is a data-governance violation.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'pii'; confirm against published text (asserted basis: Processing restricted data above ceiling risks sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "handling data above a classification ceiling maps to sensitive-data access",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1530",
              "name": "Data from Cloud Storage",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "gate_uae_data_protection_pii"
        },
        {
          "label": "Home",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "op_get"
        },
        {
          "label": "Get models",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "op_get_models"
        },
        {
          "label": "Retrieve server logs for ollama models",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "op_get_ollama_logs"
        }
      ],
      "edges": [
        {
          "dst": "act",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_approve_mcp_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_agent_from_db",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_all_versions",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_assistant",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_attachment_from_db",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_budget",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_by_name",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_cache",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_cache_keys",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_credentials",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_data",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_deployment",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_eval_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_gcs_object",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_guardrail_from_db",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_in_memory_guardrail",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_interaction",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_key",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_key_aliases",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_many",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_mcp_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_mcp_server_from_team",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_mcp_server_from_virtualkey",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_mcp_toolset",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_member",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_member_from_org",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_model",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_nested_value",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_object",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_organization",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_param",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_permission",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_policy_from_db",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_polling",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_project",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_prompts_by_base_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_response_api_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_run_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_search_tool_from_db",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_skill_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_team",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_team_member",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_team_model_alias",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_team_models",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_thread",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_token",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_unified_file_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_unified_resource_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_user",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_user_credential",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_user_env_vars",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_vector_store_from_registry",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_vector_store_index",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_delete_verification_tokens",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_drop_none",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_drop_params_from_unprocessable_entity_error",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_drop_partitions_older_than",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_command",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_completion",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_guardrail",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_mcp_tool",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_raw",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_execute_with_code_execution",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_export",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_export_all",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_export_usage_data",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_export_verifier",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_export_window",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_migrate_file_to_image_url",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_migrate_models",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_migrate_passwords_to_scrypt_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_migrate_verification_tokens",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_failure_hook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_hook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_processing",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_response_headers_hook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_rules",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_call_success_hook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_compile_prompt_processing",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_non_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_response_rule",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_side_effect",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_post_stream_processing",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_publish_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_reject_mcp_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_release",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_release_budget_reservation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_release_health_check_lock",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_release_lock",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_all_tests",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_async_completion",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_async_fallback",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_async_function",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_async_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_benchmark",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_case",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_comparison",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_env_setup",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_eval",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_good_model_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_grayswan_guardrail",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_health_check",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_health_checks",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_in_loop",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_in_new_loop",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_in_thread",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_integration_tests_for_auth_method",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_lint_check",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_load_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_memory_baseline_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_memory_test",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_non_standard_fallback_format",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_non_streaming_benchmark",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_ollama_serve",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_pillar_guardrail",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_plain",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_realtime_guardrails",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_scenario",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_setup_wizard",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_streaming_full_benchmark",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_streaming_ttft_benchmark",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_success_logging_and_cache_storage",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_sync",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_tests",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_thread",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_thread_stream",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_voice_agent",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_with_session",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_run_with_timeout",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_alert_to_pagerduty",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_alerts_for_hanging_requests",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_audio_chunk",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_batched",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_daily_reports",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_email_alert_using_smtp",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_fallback_stats_from_prometheus",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_hanging_request_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_key_created_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_key_created_or_user_invited_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_key_rotated_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_llm_exception_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_management_endpoint_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_max_budget_alert_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_message",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_message_streaming",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_monthly_spend_report",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_request",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_session",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_session_update",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_soft_budget_alert_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_team_budget_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_team_soft_budget_alert_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_text",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_to_backend",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_to_webhook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_user_invitation_email",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_virtual_key_event_slack",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_webhook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_webhook_alert",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_send_weekly_spend_report",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_shutdown",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_shutdown_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_shutdown_session_managers",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_terminate",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_bytes_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_bytes_sync",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_data_to_s3",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_file_async",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_file_sync",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "fn_upload_to_azure_data_lake_with_azure_account_key",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "op_get",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "op_get_models",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "op_get_ollama_logs",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "op_post_chat_completions",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "op_post_completions",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_litellm"
        },
        {
          "dst": "gate",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_brand_protection_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_contact_info_uae",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_off_topic_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_passport_multinational",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_payment_financial",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_airline_pnr_skywards_pii",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_au_pii_passports",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_au_pii_tax_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_aviation_ops_data_protection",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_aviation_safety_topic_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_contact_information",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_financial",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_government_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_health_drivers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_immigration",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_ca_pii_institutional_ids",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_claims_fraud_coaching_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_claims_medical_advice_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_claims_phi_disclosure_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_claims_prior_auth_gaming_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_claims_system_override_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_code_injection_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_comparison_input_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_comparison_output_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_input_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_name_input_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_name_output_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_output_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_recommendation_input_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_competitor_recommendation_output_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_components",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_contact_information_pii",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_content_safety_permissive",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_content_safety_strict",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_credentials_api_keys",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_biometric_profiling",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_biometric_profiling_fr",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_emotion_recognition",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_emotion_recognition_fr",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_manipulation",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_manipulation_fr",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_social_scoring",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_social_scoring_fr",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_vulnerability",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_eu_ai_act_art5_vulnerability_fr",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_financial_pii",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_gdpr_eu_business_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_gdpr_eu_contact_information",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_gdpr_eu_financial_data",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_gdpr_eu_national_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_international_pii_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_mcp_security_block",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_network_infrastructure_pii",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_child_safety_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_child_safety_filter_basic",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_child_safety_filter_global",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_content_filter_australian",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_content_filter_english",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_content_filter_english_only",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_filter_australian",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_filter_english",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_filter_french",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_filter_german",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_filter_spanish",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_racial_bias_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_racial_bias_filter_basic",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_racial_bias_filter_global",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_self_harm_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_self_harm_filter_basic",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_nsfw_self_harm_filter_global",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_paths",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_prompt_injection_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_protected_class_information",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_mas_data_governance",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_mas_fairness_bias",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_mas_human_oversight",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_mas_model_security",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_mas_transparency_explainability",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_business_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_contact_information",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_data_transfer",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_do_not_call",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_financial_data",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_personal_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_pii_identifiers",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_profiling_automated_decisions",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sg_pdpa_sensitive_data",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_sql_injection_blocker",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_topic_restriction_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_uae_anti_discrimination_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_uae_cultural_sensitivity_filter",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "gate_uae_data_protection_pii",
          "provenance": "EXTRACTED",
          "rel": "GATED_BY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_add",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_components",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_multiply",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_paths",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_post_chat_completions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "cap_post_completions",
          "provenance": "EXTRACTED",
          "rel": "HAS_CAPABILITY",
          "src": "agent_litellm"
        },
        {
          "dst": "dec",
          "provenance": "EXTRACTED",
          "rel": "MAKES",
          "src": "agent_litellm"
        }
      ],
      "frameworks": [],
      "nodes": [
        {
          "id": "act",
          "name": "act",
          "props": {
            "action": "act"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "agent_litellm",
          "name": "litellm",
          "props": {
            "source_kind": "directory"
          },
          "provenance": "EXTRACTED",
          "type": "Agent"
        },
        {
          "id": "cap_add",
          "name": "add",
          "props": {
            "action": "add"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_components",
          "name": "components",
          "props": {
            "action": "components"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_multiply",
          "name": "multiply",
          "props": {
            "action": "multiply"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_paths",
          "name": "paths",
          "props": {
            "action": "paths"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_post_chat_completions",
          "name": "Create chat completion for 100+ LLM APIs",
          "props": {
            "action": "Create chat completion for 100+ LLM APIs"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "cap_post_completions",
          "name": "Create completion",
          "props": {
            "action": "Create completion"
          },
          "provenance": "EXTRACTED",
          "type": "Capability"
        },
        {
          "id": "dec",
          "name": "dec",
          "props": {
            "action": "dec"
          },
          "provenance": "EXTRACTED",
          "type": "Decision"
        },
        {
          "id": "fn_approve_mcp_server",
          "name": "approve_mcp_server",
          "props": {
            "action": "approve_mcp_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete",
          "name": "delete",
          "props": {
            "action": "delete"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_agent",
          "name": "delete_agent",
          "props": {
            "action": "delete_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_agent_from_db",
          "name": "delete_agent_from_db",
          "props": {
            "action": "delete_agent_from_db"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_versions",
          "name": "delete_all_versions",
          "props": {
            "action": "delete_all_versions"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_assistant",
          "name": "delete_assistant",
          "props": {
            "action": "delete_assistant"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_attachment_from_db",
          "name": "delete_attachment_from_db",
          "props": {
            "action": "delete_attachment_from_db"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_budget",
          "name": "delete_budget",
          "props": {
            "action": "delete_budget"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_name",
          "name": "delete_by_name",
          "props": {
            "action": "delete_by_name"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_cache",
          "name": "delete_cache",
          "props": {
            "action": "delete_cache"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_cache_keys",
          "name": "delete_cache_keys",
          "props": {
            "action": "delete_cache_keys"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_credentials",
          "name": "delete_credentials",
          "props": {
            "action": "delete_credentials"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_data",
          "name": "delete_data",
          "props": {
            "action": "delete_data"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_deployment",
          "name": "delete_deployment",
          "props": {
            "action": "delete_deployment"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_eval_handler",
          "name": "delete_eval_handler",
          "props": {
            "action": "delete_eval_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_file",
          "name": "delete_file",
          "props": {
            "action": "delete_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_gcs_object",
          "name": "delete_gcs_object",
          "props": {
            "action": "delete_gcs_object"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_guardrail_from_db",
          "name": "delete_guardrail_from_db",
          "props": {
            "action": "delete_guardrail_from_db"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_in_memory_guardrail",
          "name": "delete_in_memory_guardrail",
          "props": {
            "action": "delete_in_memory_guardrail"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_interaction",
          "name": "delete_interaction",
          "props": {
            "action": "delete_interaction"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_key",
          "name": "delete_key",
          "props": {
            "action": "delete_key"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_key_aliases",
          "name": "delete_key_aliases",
          "props": {
            "action": "delete_key_aliases"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_many",
          "name": "delete_many",
          "props": {
            "action": "delete_many"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_mcp_server",
          "name": "delete_mcp_server",
          "props": {
            "action": "delete_mcp_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_mcp_server_from_team",
          "name": "delete_mcp_server_from_team",
          "props": {
            "action": "delete_mcp_server_from_team"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_mcp_server_from_virtualkey",
          "name": "delete_mcp_server_from_virtualkey",
          "props": {
            "action": "delete_mcp_server_from_virtualkey"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_mcp_toolset",
          "name": "delete_mcp_toolset",
          "props": {
            "action": "delete_mcp_toolset"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_member",
          "name": "delete_member",
          "props": {
            "action": "delete_member"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_member_from_org",
          "name": "delete_member_from_org",
          "props": {
            "action": "delete_member_from_org"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_model",
          "name": "delete_model",
          "props": {
            "action": "delete_model"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_nested_value",
          "name": "delete_nested_value",
          "props": {
            "action": "delete_nested_value"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_object",
          "name": "delete_object",
          "props": {
            "action": "delete_object"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_organization",
          "name": "delete_organization",
          "props": {
            "action": "delete_organization"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_param",
          "name": "delete_param",
          "props": {
            "action": "delete_param"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_permission",
          "name": "delete_permission",
          "props": {
            "action": "delete_permission"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_policy_from_db",
          "name": "delete_policy_from_db",
          "props": {
            "action": "delete_policy_from_db"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_polling",
          "name": "delete_polling",
          "props": {
            "action": "delete_polling"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_project",
          "name": "delete_project",
          "props": {
            "action": "delete_project"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_prompts_by_base_id",
          "name": "delete_prompts_by_base_id",
          "props": {
            "action": "delete_prompts_by_base_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_response_api_handler",
          "name": "delete_response_api_handler",
          "props": {
            "action": "delete_response_api_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_run_handler",
          "name": "delete_run_handler",
          "props": {
            "action": "delete_run_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_search_tool_from_db",
          "name": "delete_search_tool_from_db",
          "props": {
            "action": "delete_search_tool_from_db"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_skill_handler",
          "name": "delete_skill_handler",
          "props": {
            "action": "delete_skill_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_team",
          "name": "delete_team",
          "props": {
            "action": "delete_team"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_team_member",
          "name": "delete_team_member",
          "props": {
            "action": "delete_team_member"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_team_model_alias",
          "name": "delete_team_model_alias",
          "props": {
            "action": "delete_team_model_alias"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_team_models",
          "name": "delete_team_models",
          "props": {
            "action": "delete_team_models"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_thread",
          "name": "delete_thread",
          "props": {
            "action": "delete_thread"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_token",
          "name": "delete_token",
          "props": {
            "action": "delete_token"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_unified_file_id",
          "name": "delete_unified_file_id",
          "props": {
            "action": "delete_unified_file_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_unified_resource_id",
          "name": "delete_unified_resource_id",
          "props": {
            "action": "delete_unified_resource_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user",
          "name": "delete_user",
          "props": {
            "action": "delete_user"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_credential",
          "name": "delete_user_credential",
          "props": {
            "action": "delete_user_credential"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_env_vars",
          "name": "delete_user_env_vars",
          "props": {
            "action": "delete_user_env_vars"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_vector_store_from_registry",
          "name": "delete_vector_store_from_registry",
          "props": {
            "action": "delete_vector_store_from_registry"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_vector_store_index",
          "name": "delete_vector_store_index",
          "props": {
            "action": "delete_vector_store_index"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_verification_tokens",
          "name": "delete_verification_tokens",
          "props": {
            "action": "delete_verification_tokens"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_drop_none",
          "name": "drop_none",
          "props": {
            "action": "drop_none"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_drop_params_from_unprocessable_entity_error",
          "name": "drop_params_from_unprocessable_entity_error",
          "props": {
            "action": "drop_params_from_unprocessable_entity_error"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_drop_partitions_older_than",
          "name": "drop_partitions_older_than",
          "props": {
            "action": "drop_partitions_older_than"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute",
          "name": "execute",
          "props": {
            "action": "execute"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_command",
          "name": "execute_command",
          "props": {
            "action": "execute_command"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_completion",
          "name": "execute_completion",
          "props": {
            "action": "execute_completion"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_guardrail",
          "name": "execute_guardrail",
          "props": {
            "action": "execute_guardrail"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_mcp_tool",
          "name": "execute_mcp_tool",
          "props": {
            "action": "execute_mcp_tool"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_raw",
          "name": "execute_raw",
          "props": {
            "action": "execute_raw"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_with_code_execution",
          "name": "execute_with_code_execution",
          "props": {
            "action": "execute_with_code_execution"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export",
          "name": "export",
          "props": {
            "action": "export"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_all",
          "name": "export_all",
          "props": {
            "action": "export_all"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_usage_data",
          "name": "export_usage_data",
          "props": {
            "action": "export_usage_data"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_verifier",
          "name": "export_verifier",
          "props": {
            "action": "export_verifier"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_export_window",
          "name": "export_window",
          "props": {
            "action": "export_window"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_file_to_image_url",
          "name": "migrate_file_to_image_url",
          "props": {
            "action": "migrate_file_to_image_url"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_models",
          "name": "migrate_models",
          "props": {
            "action": "migrate_models"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_passwords_to_scrypt_async",
          "name": "migrate_passwords_to_scrypt_async",
          "props": {
            "action": "migrate_passwords_to_scrypt_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_verification_tokens",
          "name": "migrate_verification_tokens",
          "props": {
            "action": "migrate_verification_tokens"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post",
          "name": "post",
          "props": {
            "action": "post"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call",
          "name": "post_call",
          "props": {
            "action": "post_call"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_failure_hook",
          "name": "post_call_failure_hook",
          "props": {
            "action": "post_call_failure_hook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_hook",
          "name": "post_call_hook",
          "props": {
            "action": "post_call_hook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_processing",
          "name": "post_call_processing",
          "props": {
            "action": "post_call_processing"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_response_headers_hook",
          "name": "post_call_response_headers_hook",
          "props": {
            "action": "post_call_response_headers_hook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_rules",
          "name": "post_call_rules",
          "props": {
            "action": "post_call_rules"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_call_success_hook",
          "name": "post_call_success_hook",
          "props": {
            "action": "post_call_success_hook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_compile_prompt_processing",
          "name": "post_compile_prompt_processing",
          "props": {
            "action": "post_compile_prompt_processing"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_non_streaming",
          "name": "post_non_streaming",
          "props": {
            "action": "post_non_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_response_rule",
          "name": "post_response_rule",
          "props": {
            "action": "post_response_rule"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_side_effect",
          "name": "post_side_effect",
          "props": {
            "action": "post_side_effect"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_stream_processing",
          "name": "post_stream_processing",
          "props": {
            "action": "post_stream_processing"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_publish_message",
          "name": "publish_message",
          "props": {
            "action": "publish_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_reject_mcp_server",
          "name": "reject_mcp_server",
          "props": {
            "action": "reject_mcp_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release",
          "name": "release",
          "props": {
            "action": "release"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release_budget_reservation",
          "name": "release_budget_reservation",
          "props": {
            "action": "release_budget_reservation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release_health_check_lock",
          "name": "release_health_check_lock",
          "props": {
            "action": "release_health_check_lock"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release_lock",
          "name": "release_lock",
          "props": {
            "action": "release_lock"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run",
          "name": "run",
          "props": {
            "action": "run"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_agent",
          "name": "run_agent",
          "props": {
            "action": "run_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_all_tests",
          "name": "run_all_tests",
          "props": {
            "action": "run_all_tests"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_completion",
          "name": "run_async_completion",
          "props": {
            "action": "run_async_completion"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_fallback",
          "name": "run_async_fallback",
          "props": {
            "action": "run_async_fallback"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_function",
          "name": "run_async_function",
          "props": {
            "action": "run_async_function"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_async_test",
          "name": "run_async_test",
          "props": {
            "action": "run_async_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_benchmark",
          "name": "run_benchmark",
          "props": {
            "action": "run_benchmark"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_case",
          "name": "run_case",
          "props": {
            "action": "run_case"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_comparison",
          "name": "run_comparison",
          "props": {
            "action": "run_comparison"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_env_setup",
          "name": "run_env_setup",
          "props": {
            "action": "run_env_setup"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_eval",
          "name": "run_eval",
          "props": {
            "action": "run_eval"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_good_model_test",
          "name": "run_good_model_test",
          "props": {
            "action": "run_good_model_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_grayswan_guardrail",
          "name": "run_grayswan_guardrail",
          "props": {
            "action": "run_grayswan_guardrail"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_health_check",
          "name": "run_health_check",
          "props": {
            "action": "run_health_check"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_health_checks",
          "name": "run_health_checks",
          "props": {
            "action": "run_health_checks"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_in_loop",
          "name": "run_in_loop",
          "props": {
            "action": "run_in_loop"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_in_new_loop",
          "name": "run_in_new_loop",
          "props": {
            "action": "run_in_new_loop"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_in_thread",
          "name": "run_in_thread",
          "props": {
            "action": "run_in_thread"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_integration_tests_for_auth_method",
          "name": "run_integration_tests_for_auth_method",
          "props": {
            "action": "run_integration_tests_for_auth_method"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_lint_check",
          "name": "run_lint_check",
          "props": {
            "action": "run_lint_check"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_load_test",
          "name": "run_load_test",
          "props": {
            "action": "run_load_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_memory_baseline_test",
          "name": "run_memory_baseline_test",
          "props": {
            "action": "run_memory_baseline_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_memory_test",
          "name": "run_memory_test",
          "props": {
            "action": "run_memory_test"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_non_standard_fallback_format",
          "name": "run_non_standard_fallback_format",
          "props": {
            "action": "run_non_standard_fallback_format"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_non_streaming_benchmark",
          "name": "run_non_streaming_benchmark",
          "props": {
            "action": "run_non_streaming_benchmark"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_ollama_serve",
          "name": "run_ollama_serve",
          "props": {
            "action": "run_ollama_serve"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_pillar_guardrail",
          "name": "run_pillar_guardrail",
          "props": {
            "action": "run_pillar_guardrail"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_plain",
          "name": "run_plain",
          "props": {
            "action": "run_plain"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_realtime_guardrails",
          "name": "run_realtime_guardrails",
          "props": {
            "action": "run_realtime_guardrails"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_scenario",
          "name": "run_scenario",
          "props": {
            "action": "run_scenario"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_server",
          "name": "run_server",
          "props": {
            "action": "run_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_setup_wizard",
          "name": "run_setup_wizard",
          "props": {
            "action": "run_setup_wizard"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_streaming_full_benchmark",
          "name": "run_streaming_full_benchmark",
          "props": {
            "action": "run_streaming_full_benchmark"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_streaming_ttft_benchmark",
          "name": "run_streaming_ttft_benchmark",
          "props": {
            "action": "run_streaming_ttft_benchmark"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_success_logging_and_cache_storage",
          "name": "run_success_logging_and_cache_storage",
          "props": {
            "action": "run_success_logging_and_cache_storage"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_sync",
          "name": "run_sync",
          "props": {
            "action": "run_sync"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_tests",
          "name": "run_tests",
          "props": {
            "action": "run_tests"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_thread",
          "name": "run_thread",
          "props": {
            "action": "run_thread"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_thread_stream",
          "name": "run_thread_stream",
          "props": {
            "action": "run_thread_stream"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_voice_agent",
          "name": "run_voice_agent",
          "props": {
            "action": "run_voice_agent"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_session",
          "name": "run_with_session",
          "props": {
            "action": "run_with_session"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_with_timeout",
          "name": "run_with_timeout",
          "props": {
            "action": "run_with_timeout"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send",
          "name": "send",
          "props": {
            "action": "send"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_alert",
          "name": "send_alert",
          "props": {
            "action": "send_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_alert_to_pagerduty",
          "name": "send_alert_to_pagerduty",
          "props": {
            "action": "send_alert_to_pagerduty"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_alerts_for_hanging_requests",
          "name": "send_alerts_for_hanging_requests",
          "props": {
            "action": "send_alerts_for_hanging_requests"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_audio_chunk",
          "name": "send_audio_chunk",
          "props": {
            "action": "send_audio_chunk"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_batched",
          "name": "send_batched",
          "props": {
            "action": "send_batched"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_daily_reports",
          "name": "send_daily_reports",
          "props": {
            "action": "send_daily_reports"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_email",
          "name": "send_email",
          "props": {
            "action": "send_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_email_alert_using_smtp",
          "name": "send_email_alert_using_smtp",
          "props": {
            "action": "send_email_alert_using_smtp"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_fallback_stats_from_prometheus",
          "name": "send_fallback_stats_from_prometheus",
          "props": {
            "action": "send_fallback_stats_from_prometheus"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_hanging_request_alert",
          "name": "send_hanging_request_alert",
          "props": {
            "action": "send_hanging_request_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_key_created_email",
          "name": "send_key_created_email",
          "props": {
            "action": "send_key_created_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_key_created_or_user_invited_email",
          "name": "send_key_created_or_user_invited_email",
          "props": {
            "action": "send_key_created_or_user_invited_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_key_rotated_email",
          "name": "send_key_rotated_email",
          "props": {
            "action": "send_key_rotated_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_llm_exception_alert",
          "name": "send_llm_exception_alert",
          "props": {
            "action": "send_llm_exception_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_management_endpoint_alert",
          "name": "send_management_endpoint_alert",
          "props": {
            "action": "send_management_endpoint_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_max_budget_alert_email",
          "name": "send_max_budget_alert_email",
          "props": {
            "action": "send_max_budget_alert_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_message",
          "name": "send_message",
          "props": {
            "action": "send_message"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_message_streaming",
          "name": "send_message_streaming",
          "props": {
            "action": "send_message_streaming"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_monthly_spend_report",
          "name": "send_monthly_spend_report",
          "props": {
            "action": "send_monthly_spend_report"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_request",
          "name": "send_request",
          "props": {
            "action": "send_request"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_session",
          "name": "send_session",
          "props": {
            "action": "send_session"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_session_update",
          "name": "send_session_update",
          "props": {
            "action": "send_session_update"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_soft_budget_alert_email",
          "name": "send_soft_budget_alert_email",
          "props": {
            "action": "send_soft_budget_alert_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_team_budget_alert",
          "name": "send_team_budget_alert",
          "props": {
            "action": "send_team_budget_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_team_soft_budget_alert_email",
          "name": "send_team_soft_budget_alert_email",
          "props": {
            "action": "send_team_soft_budget_alert_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_text",
          "name": "send_text",
          "props": {
            "action": "send_text"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_to_backend",
          "name": "send_to_backend",
          "props": {
            "action": "send_to_backend"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_to_webhook",
          "name": "send_to_webhook",
          "props": {
            "action": "send_to_webhook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_user_invitation_email",
          "name": "send_user_invitation_email",
          "props": {
            "action": "send_user_invitation_email"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_virtual_key_event_slack",
          "name": "send_virtual_key_event_slack",
          "props": {
            "action": "send_virtual_key_event_slack"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_webhook",
          "name": "send_webhook",
          "props": {
            "action": "send_webhook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_webhook_alert",
          "name": "send_webhook_alert",
          "props": {
            "action": "send_webhook_alert"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_weekly_spend_report",
          "name": "send_weekly_spend_report",
          "props": {
            "action": "send_weekly_spend_report"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_shutdown",
          "name": "shutdown",
          "props": {
            "action": "shutdown"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_shutdown_handler",
          "name": "shutdown_handler",
          "props": {
            "action": "shutdown_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_shutdown_session_managers",
          "name": "shutdown_session_managers",
          "props": {
            "action": "shutdown_session_managers"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_terminate",
          "name": "terminate",
          "props": {
            "action": "terminate"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload",
          "name": "upload",
          "props": {
            "action": "upload"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_bytes_async",
          "name": "upload_bytes_async",
          "props": {
            "action": "upload_bytes_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_bytes_sync",
          "name": "upload_bytes_sync",
          "props": {
            "action": "upload_bytes_sync"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_data_to_s3",
          "name": "upload_data_to_s3",
          "props": {
            "action": "upload_data_to_s3"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file",
          "name": "upload_file",
          "props": {
            "action": "upload_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file_async",
          "name": "upload_file_async",
          "props": {
            "action": "upload_file_async"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file_sync",
          "name": "upload_file_sync",
          "props": {
            "action": "upload_file_sync"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_to_azure_data_lake_with_azure_account_key",
          "name": "upload_to_azure_data_lake_with_azure_account_key",
          "props": {
            "action": "upload_to_azure_data_lake_with_azure_account_key"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "gate",
          "name": "gate",
          "props": {
            "action": "gate"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_brand_protection_filter",
          "name": "airline-brand-protection-filter",
          "props": {
            "action": "airline-brand-protection-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_contact_info_uae",
          "name": "airline-contact-info-uae",
          "props": {
            "action": "airline-contact-info-uae"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_off_topic_filter",
          "name": "airline-off-topic-filter",
          "props": {
            "action": "airline-off-topic-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_passport_multinational",
          "name": "airline-passport-multinational",
          "props": {
            "action": "airline-passport-multinational"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_payment_financial",
          "name": "airline-payment-financial",
          "props": {
            "action": "airline-payment-financial"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_airline_pnr_skywards_pii",
          "name": "airline-pnr-skywards-pii",
          "props": {
            "action": "airline-pnr-skywards-pii"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_au_pii_passports",
          "name": "au-pii-passports",
          "props": {
            "action": "au-pii-passports"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_au_pii_tax_identifiers",
          "name": "au-pii-tax-identifiers",
          "props": {
            "action": "au-pii-tax-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_aviation_ops_data_protection",
          "name": "aviation-ops-data-protection",
          "props": {
            "action": "aviation-ops-data-protection"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_aviation_safety_topic_filter",
          "name": "aviation-safety-topic-filter",
          "props": {
            "action": "aviation-safety-topic-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_contact_information",
          "name": "ca-pii-contact-information",
          "props": {
            "action": "ca-pii-contact-information"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_financial",
          "name": "ca-pii-financial",
          "props": {
            "action": "ca-pii-financial"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_government_identifiers",
          "name": "ca-pii-government-identifiers",
          "props": {
            "action": "ca-pii-government-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_health_drivers",
          "name": "ca-pii-health-drivers",
          "props": {
            "action": "ca-pii-health-drivers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_immigration",
          "name": "ca-pii-immigration",
          "props": {
            "action": "ca-pii-immigration"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_ca_pii_institutional_ids",
          "name": "ca-pii-institutional-ids",
          "props": {
            "action": "ca-pii-institutional-ids"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_claims_fraud_coaching_filter",
          "name": "claims-fraud-coaching-filter",
          "props": {
            "action": "claims-fraud-coaching-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_claims_medical_advice_filter",
          "name": "claims-medical-advice-filter",
          "props": {
            "action": "claims-medical-advice-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_claims_phi_disclosure_filter",
          "name": "claims-phi-disclosure-filter",
          "props": {
            "action": "claims-phi-disclosure-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_claims_prior_auth_gaming_filter",
          "name": "claims-prior-auth-gaming-filter",
          "props": {
            "action": "claims-prior-auth-gaming-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_claims_system_override_filter",
          "name": "claims-system-override-filter",
          "props": {
            "action": "claims-system-override-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_code_injection_blocker",
          "name": "code-injection-blocker",
          "props": {
            "action": "code-injection-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_comparison_input_filter",
          "name": "competitor-comparison-input-filter",
          "props": {
            "action": "competitor-comparison-input-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_comparison_output_filter",
          "name": "competitor-comparison-output-filter",
          "props": {
            "action": "competitor-comparison-output-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_input_blocker",
          "name": "competitor-input-blocker",
          "props": {
            "action": "competitor-input-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_name_input_blocker",
          "name": "competitor-name-input-blocker",
          "props": {
            "action": "competitor-name-input-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_name_output_blocker",
          "name": "competitor-name-output-blocker",
          "props": {
            "action": "competitor-name-output-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_output_blocker",
          "name": "competitor-output-blocker",
          "props": {
            "action": "competitor-output-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_recommendation_input_filter",
          "name": "competitor-recommendation-input-filter",
          "props": {
            "action": "competitor-recommendation-input-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_competitor_recommendation_output_filter",
          "name": "competitor-recommendation-output-filter",
          "props": {
            "action": "competitor-recommendation-output-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_components",
          "name": "components",
          "props": {
            "action": "components"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_contact_information_pii",
          "name": "contact-information-pii",
          "props": {
            "action": "contact-information-pii"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_content_safety_permissive",
          "name": "content-safety-permissive",
          "props": {
            "action": "content-safety-permissive"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_content_safety_strict",
          "name": "content-safety-strict",
          "props": {
            "action": "content-safety-strict"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_credentials_api_keys",
          "name": "credentials-api-keys",
          "props": {
            "action": "credentials-api-keys"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_biometric_profiling",
          "name": "eu-ai-act-art5-biometric-profiling",
          "props": {
            "action": "eu-ai-act-art5-biometric-profiling"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_biometric_profiling_fr",
          "name": "eu-ai-act-art5-biometric-profiling-fr",
          "props": {
            "action": "eu-ai-act-art5-biometric-profiling-fr"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_emotion_recognition",
          "name": "eu-ai-act-art5-emotion-recognition",
          "props": {
            "action": "eu-ai-act-art5-emotion-recognition"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_emotion_recognition_fr",
          "name": "eu-ai-act-art5-emotion-recognition-fr",
          "props": {
            "action": "eu-ai-act-art5-emotion-recognition-fr"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_manipulation",
          "name": "eu-ai-act-art5-manipulation",
          "props": {
            "action": "eu-ai-act-art5-manipulation"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_manipulation_fr",
          "name": "eu-ai-act-art5-manipulation-fr",
          "props": {
            "action": "eu-ai-act-art5-manipulation-fr"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_social_scoring",
          "name": "eu-ai-act-art5-social-scoring",
          "props": {
            "action": "eu-ai-act-art5-social-scoring"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_social_scoring_fr",
          "name": "eu-ai-act-art5-social-scoring-fr",
          "props": {
            "action": "eu-ai-act-art5-social-scoring-fr"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_vulnerability",
          "name": "eu-ai-act-art5-vulnerability",
          "props": {
            "action": "eu-ai-act-art5-vulnerability"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_eu_ai_act_art5_vulnerability_fr",
          "name": "eu-ai-act-art5-vulnerability-fr",
          "props": {
            "action": "eu-ai-act-art5-vulnerability-fr"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_financial_pii",
          "name": "financial-pii",
          "props": {
            "action": "financial-pii"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_gdpr_eu_business_identifiers",
          "name": "gdpr-eu-business-identifiers",
          "props": {
            "action": "gdpr-eu-business-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_gdpr_eu_contact_information",
          "name": "gdpr-eu-contact-information",
          "props": {
            "action": "gdpr-eu-contact-information"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_gdpr_eu_financial_data",
          "name": "gdpr-eu-financial-data",
          "props": {
            "action": "gdpr-eu-financial-data"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_gdpr_eu_national_identifiers",
          "name": "gdpr-eu-national-identifiers",
          "props": {
            "action": "gdpr-eu-national-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_international_pii_identifiers",
          "name": "international-pii-identifiers",
          "props": {
            "action": "international-pii-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_mcp_security_block",
          "name": "mcp-security-block",
          "props": {
            "action": "mcp-security-block"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_network_infrastructure_pii",
          "name": "network-infrastructure-pii",
          "props": {
            "action": "network-infrastructure-pii"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_child_safety_filter",
          "name": "nsfw-child-safety-filter",
          "props": {
            "action": "nsfw-child-safety-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_child_safety_filter_basic",
          "name": "nsfw-child-safety-filter-basic",
          "props": {
            "action": "nsfw-child-safety-filter-basic"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_child_safety_filter_global",
          "name": "nsfw-child-safety-filter-global",
          "props": {
            "action": "nsfw-child-safety-filter-global"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_content_filter_australian",
          "name": "nsfw-content-filter-australian",
          "props": {
            "action": "nsfw-content-filter-australian"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_content_filter_english",
          "name": "nsfw-content-filter-english",
          "props": {
            "action": "nsfw-content-filter-english"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_content_filter_english_only",
          "name": "nsfw-content-filter-english-only",
          "props": {
            "action": "nsfw-content-filter-english-only"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_filter_australian",
          "name": "nsfw-filter-australian",
          "props": {
            "action": "nsfw-filter-australian"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_filter_english",
          "name": "nsfw-filter-english",
          "props": {
            "action": "nsfw-filter-english"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_filter_french",
          "name": "nsfw-filter-french",
          "props": {
            "action": "nsfw-filter-french"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_filter_german",
          "name": "nsfw-filter-german",
          "props": {
            "action": "nsfw-filter-german"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_filter_spanish",
          "name": "nsfw-filter-spanish",
          "props": {
            "action": "nsfw-filter-spanish"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_racial_bias_filter",
          "name": "nsfw-racial-bias-filter",
          "props": {
            "action": "nsfw-racial-bias-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_racial_bias_filter_basic",
          "name": "nsfw-racial-bias-filter-basic",
          "props": {
            "action": "nsfw-racial-bias-filter-basic"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_racial_bias_filter_global",
          "name": "nsfw-racial-bias-filter-global",
          "props": {
            "action": "nsfw-racial-bias-filter-global"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_self_harm_filter",
          "name": "nsfw-self-harm-filter",
          "props": {
            "action": "nsfw-self-harm-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_self_harm_filter_basic",
          "name": "nsfw-self-harm-filter-basic",
          "props": {
            "action": "nsfw-self-harm-filter-basic"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_nsfw_self_harm_filter_global",
          "name": "nsfw-self-harm-filter-global",
          "props": {
            "action": "nsfw-self-harm-filter-global"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_paths",
          "name": "paths",
          "props": {
            "action": "paths"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_prompt_injection_blocker",
          "name": "prompt-injection-blocker",
          "props": {
            "action": "prompt-injection-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_protected_class_information",
          "name": "protected-class-information",
          "props": {
            "action": "protected-class-information"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_mas_data_governance",
          "name": "sg-mas-data-governance",
          "props": {
            "action": "sg-mas-data-governance"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_mas_fairness_bias",
          "name": "sg-mas-fairness-bias",
          "props": {
            "action": "sg-mas-fairness-bias"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_mas_human_oversight",
          "name": "sg-mas-human-oversight",
          "props": {
            "action": "sg-mas-human-oversight"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_mas_model_security",
          "name": "sg-mas-model-security",
          "props": {
            "action": "sg-mas-model-security"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_mas_transparency_explainability",
          "name": "sg-mas-transparency-explainability",
          "props": {
            "action": "sg-mas-transparency-explainability"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_business_identifiers",
          "name": "sg-pdpa-business-identifiers",
          "props": {
            "action": "sg-pdpa-business-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_contact_information",
          "name": "sg-pdpa-contact-information",
          "props": {
            "action": "sg-pdpa-contact-information"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_data_transfer",
          "name": "sg-pdpa-data-transfer",
          "props": {
            "action": "sg-pdpa-data-transfer"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_do_not_call",
          "name": "sg-pdpa-do-not-call",
          "props": {
            "action": "sg-pdpa-do-not-call"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_financial_data",
          "name": "sg-pdpa-financial-data",
          "props": {
            "action": "sg-pdpa-financial-data"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_personal_identifiers",
          "name": "sg-pdpa-personal-identifiers",
          "props": {
            "action": "sg-pdpa-personal-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_pii_identifiers",
          "name": "sg-pdpa-pii-identifiers",
          "props": {
            "action": "sg-pdpa-pii-identifiers"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_profiling_automated_decisions",
          "name": "sg-pdpa-profiling-automated-decisions",
          "props": {
            "action": "sg-pdpa-profiling-automated-decisions"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sg_pdpa_sensitive_data",
          "name": "sg-pdpa-sensitive-data",
          "props": {
            "action": "sg-pdpa-sensitive-data"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_sql_injection_blocker",
          "name": "sql-injection-blocker",
          "props": {
            "action": "sql-injection-blocker"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_topic_restriction_filter",
          "name": "topic-restriction-filter",
          "props": {
            "action": "topic-restriction-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_uae_anti_discrimination_filter",
          "name": "uae-anti-discrimination-filter",
          "props": {
            "action": "uae-anti-discrimination-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_uae_cultural_sensitivity_filter",
          "name": "uae-cultural-sensitivity-filter",
          "props": {
            "action": "uae-cultural-sensitivity-filter"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "gate_uae_data_protection_pii",
          "name": "uae-data-protection-pii",
          "props": {
            "action": "uae-data-protection-pii"
          },
          "provenance": "EXTRACTED",
          "type": "Gate"
        },
        {
          "id": "op_get",
          "name": "Home",
          "props": {
            "action": "Home"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "op_get_models",
          "name": "Get models",
          "props": {
            "action": "Get models"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "op_get_ollama_logs",
          "name": "Retrieve server logs for ollama models",
          "props": {
            "action": "Retrieve server logs for ollama models"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "op_post_chat_completions",
          "name": "Create chat completion for 100+ LLM APIs",
          "props": {
            "action": "Create chat completion for 100+ LLM APIs"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "op_post_completions",
          "name": "Create completion",
          "props": {
            "action": "Create completion"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        }
      ],
      "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.",
      "source": "litellm",
      "source_kind": "directory"
    },
    "summary": {
      "asserted_covered": 0,
      "edges": 290,
      "frameworks": [],
      "governed_actions": 288,
      "nodes": 291,
      "source": "litellm",
      "source_kind": "directory",
      "ungoverned_actions": 92
    }
  },
  "evidence_hash": "62794bc9a695d91353e756003cae348c610a27a4f62626e7407861cdee356fc6",
  "ml_dsa_public_key_b64": "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",
  "ml_dsa_signature_b64": "EclQ1+6+p0z9KVptpDjbjab6VXdlsIqZr2WDa3tUUbycK6BGl8OWsPDfRvwITPsZDZYIIHiKtQI4IuWw4qF6OWznueXKNtiTgdCrY2PqOLlZ7bfSxDvT31bl0gH5tVpwEigmYj8+3dA/HUXlD6uLdcImXYv/bVxhQefBbPv0eMJqKK70qY1RSDREJXPKnhCCN8rdbV9tJ3x/46KoOigRDbvtzEa3FEjW65wrZO8O/GbIzZ/Xb95LzZM35g5G8bSFRY5obroRZyluTgBUKTCfvSTApZCTa/h1+pOO9bB7/NZUrDD24urlcnCUdvFwrkOlV8zVt7cxwfx/pkvGbj6R7A1KQbbQWiqKqTHp+JrAIQKcyR2uEEO6TcSxODoiDB7tWOFZ7PcuLiKRB1sbPnvzxjiuShCu+6HiQlKS4ZMSrsD8JWzJZoc1OqKu6Jp3/nFanIdmZTMqC/w3Ya2oToJT272Jcv+Y/AEzD9yiabxTw/t9VwRcEzL80d0zTP35DSDT/uM7zT73L8GUqOt4s0lnNnhWEdl0+4VTGGt+9gKnaejmACK1jEGKmTouW1awB6Ke8yUjjpgS6pCgRHT7oDtL/UEKpPOPFyohspoYzdEZhU8EDpAhguRF36yto1GPVxcyXG9D7kffEBzPG9XOabT2JZ2sullB0U1vQvp5MgytXLADYDx2iAH5KYI5rIbn+2vVoGutzRjnd93lyr6z171MWZ9c5heb5I1FDWyLE0Ic16hWqmjL5sn8/Zr2vCKVV0ZoNl8Nn+e5gmYbSyrLVHkwY4+3KWgu1wT/foXFTKbY5qOC9W16Yk/FwfSlQzwQISsDInNRE1rKybT8+t0Fp2pFicwvqdFFf0ePIjUImNSh2EX5XR5nOZilmwI5V7cnYa1jl11eCI6zncaeXfzo9lG8FpUg3kFyUwY1FYPYYWFaMSwxOcqDzW7yxcLNJGyEFcktOjsaudR5T4ol+PSrYjV6YrUxnPUoOnV8HEQ+ecG1Xwy/9X5mjM+RX46hyJp2b+AVNmTCVZ++I4nzxkG1F+jGEFgcq4BztCJIGd2Qsna9i4y0T9iVAUXPe2d/HMrSvGreemru27IvMGTmGLBqYupvKwtSvM9CeIZBhEH0u+lZvWaYYE431WYX6jBMQIe/gzwERzjPx6BYrFyMZ2CtFgjJwnOh0s7yHlvUBlqtxsgXyvFNQ5ebCLMLBLgSaIKz1Oj6xKdM6NTH90VWhWfULCPele2bY9+pHp9/tAqfKujKW1tQOVN+/jTnZJsu+rEZHN5n91L4Ef8wa774+q8PgddyHvfujX8HJmPs9cTOdqwPgIW9Dsz0Uf7yFnYqVDB3ANTj3qmPmkH5btvd8bf22c8t673XB8EhQqv2Sw4yHWyEmDBmUHYVez2josyZjUC1la239B3BCFxrWF8zlMWilxwB+LSBLmh8AilhV0GGDa9708wS1X4QVQFHPeIi0oLg+9Z4xrfiBbFW960SJykirznjCQWFWtvbz0hU2ZiVCsPgg7B4cbVwAKNULbBsQgAHrdsHkRHkp0b74PGqqcq3QxLYg6kmktidkPKXV6gheA9DuiyGLIAUgg3aYH+T8oQta74Ya5mOiyhWRjNujthalT7cbg8E/82286AjgXoOvw4WtZektBGutVXkbR3pvX2C1hW9rqZLfHYhzyLzY0oSeMiia76wUC64SKP7Sa1LzZGO9cAzSBsPCPvYRpyRDHnrhXywvXAyGc2uqIpnCXyaoQJYAqYG0C2102/RMNAo9GY8brcRf0stNDJO4ncYKepPIwER4jiJxdtew6rIItcP/LZxmI5NblLHzIYtdnEZi8O813pkHEa/KoFQ/xpVmy+5rkX+eQbQOX6nZIpmr2U+jd72On68fy06zS9A7laIW8xaSbV24WiY6zXkkxO+3OZbkwh8AyV3O7ngcN7cjZJT2FgVzRqZKgtXPwvMZqsmZ0smVh+Rjrj0kvNcFrApx9WC4t0Pc8SZAqjHCVXE1EVuseAoc2tIMDiPPUAKSmTGs6UvY1jbyUbksoTceoqOZUgUy9IV1jOAzA9qSGUVyzHtPhaubXV15SC/uEWhpkvOGUef+zVxWYUbUI4+cMB7yVhlDVokyYdFBm/M18gYuFSSmAvAnXr9IW83dXyF+vV4UTt3AHwHp1msw6vgdjupNX9prhwhxarVcqPjyPwHLvybU6MGVI4NCw1keWSp2QiR+skLQ4TXTRlsCPwGMYJZ2EvuMx1xM3q/8xW95HDg+DDRzXTr8JXUx6Kbcf2U4lXOEFuEIiX9yGXcBujbbVVUNVD2YhZ/WK8mrgaSGE6SOulfmFem8GKJqTN8W+TQbj+o8cfKPx+CDkIL0hxnAeAkpItKoL29oshD4g6HQKpXTb//VCFNpsbx8JkFERiyV13QuKNG9j6Rpuy3NuUREIy19BcoaXeYGBFNzEJfBZfPplZqZRu6uWHRqk3bHhOOXOk6fwIKAzHU3QqKOu9eTAxHWHkeyzHaDrSt+rq9d1ubxgW5qxa39oJ+az8CZp4I6GOfcCqzOyqvC2A1DRkxEDGXWvmRNjTxsxh/9G02ZtIpOUsoMxXUGlP8kK5braxzXFgzy59QlcGN1bZouWJipnx0mPwDTAOh6ItGsn92gigajN4IHthIiQLRhj+9H8cXI6B6xeCNC4dhByFVuTZDM98sIuW/sxz/C+KMg8nCY+9eMKiVYcf1FpPhoX6e9zBjRWNzzrpjvYhmRM1RokqQArLYgz/aP+d0FYmIY0wtqCqrV+ip0bed+O90+x5m9XDhQhE+CfW9iwuE+FDI4cbW6z9LT86Pw/dQoOMFJXvBGlUX1ssS23gShO24No4GKYUPOKZKlrs7BXgh9phcqq5Nso0gw/sC8TMHiuWPfISA2O3NJBzPgQynB/r5Uek+pM8KGPVT/VVobZyc1L5RuDz0yhW/kUsEARohYv1/PJKoeUISeN73hhpU+8rgiS4hf6oSgBUrq0Vkp/QCuJ8vWl0Ou4HKTNwSOgkarjZxx6SdaiuA6EEp43slM15dBAYHWS+xtTDtmrhEfA4Z8+kIoaa0x4Is/2q/+5Ynv4fz1u+unEbrAZBVsHRZhiUEN6eBQFNhRc94CGxMcGXfZlcQcvn30te6AqzBme5NmUKCIXForfpyJL0TgsAdfIwvRRlpdb91ZgkC3zzqixDo1leZn9Po2a/WkCUVV2JL4F2BkQTq5m+RcR16mqpaS5tADBvB/tMxFMohM93CkHrzqU0xUseyfNoxHQLbV4GDcTYfh6tcvkXQiHIX5JYJl0XrncO6nHGWm/cuMbRCh2E1SL3bgCxBv18FVY5SAyNZp2kyjHPEjPYmrNgeRM9Fw0Ro9fbXVlR+/Gt4rJu7k/USMOkhRaDOILqy/y0r4TEb+EDHCBNexicw7/ibPxDyXH544kj6iXFF6CuY/W6Jer8IZmCRgV94gxkfuzNYuopPi7Z0ZdfgFlBWFwxvZmZJmBgZg/QAZe2vH2LQCK3+L/5jOkQAhO+E1CFTKspYNKHlFv5Q080aViPt+BM9UgrXfeSUpojfZq0Nn89NdgOJUPgAQSylZfnfGipNWI/HTOZfFF+4RxxkQSyycM2w2iVzi93ycokui2cTul9OzIcRjVzPmYTJki0zwlGl3xQPkkWYQn4i1ajw37f01toesUpB9Dp22zpzFRjngPM9UMDKA0ggVHTgP3fa7p4rBy4dmzYyE8tudVvXLoyecbn2NBi48GE3aDRxBLRvjKyi5vDZuQVQZt9ahp9f+aATy74idrHLm4Eczg6ugXz/DOiWPTsPN9b4gAkRqJSYfXUj9wilUHSj8jm7kA1Hz2viGmHVMJOHCwqJu3Y0PqvhjRqwX27taUfSz6+ygs9nHfqvYy3JkKdu8wZKGUtueO04pGxTUA9mSeWikLGRunEOkt6YvPLRflhYj6ntctGxn3+OJuZ4AVOV4m3cQX1CGOsHUJXwPEkuU4svJFqyrZcehKPzcWhHG2PlSeNicuV9SEIWBeReaNsbkHJLOU+BHoNO7hBAYoRH15rcW0La6ZugmcWaEWZTlWjq9HlgsXDYNjU4nqHQUq0WJCDe6yN1Oo3ZZG5jlDMSSuuYVF+Ogwipt/KXeZucLbLXSsObeh0/iL6rcIo+/ZUlvTtayyZsTk/LST9JiBdy08uEJBPYhK3QInzxHMt9eMZlFVum1KTsov9gElhRK0uW92SDEdUwW8gten0YMmWywNomCp0dLNO+csEMmvMuXqtDYoZ6pjyv/Go2F/tfmLrCw3kARlT19Neh0NJ3rLUO6+Rt3ojdrUPOkJuBSYHkAjPKAQWeWr86cN4yPmaLBJoilLLF0vohdYKOpau78PwMQHnG5hNnkLilLDRoaXWZqq/yAAAAAAAAAAAAAAAAAAAAAAAAAAAABg8UGBki",
  "note_pq": "Hybrid signature: Ed25519 always; ML-DSA-65 (FIPS 204) and SLH-DSA (FIPS 205) added when a PQ backend is installed. Each leg signs the same canonical body; any one verifying proves authenticity. Install: pip install \"openagentontology[pq]\".",
  "signature_alg": "Ed25519+ML-DSA-65+SLH-DSA",
  "signature_b64": "UrDg/ucqCN20ARCUbeliZ28LAWu98zPPFZ8OiwCeZ7sNvi1I868hg/tjb15Z7ceqcPgl3hTzgA0y9jC9udJGCQ==",
  "signed": true,
  "signed_at": "2026-06-12T06:59:40.415040+00:00",
  "slh_dsa_public_key_b64": "bXNhZNeO0U50ZGJz/hQQCpW03+uEluFG/BkVrNlKk1k=",
  "slh_dsa_signature_b64": "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",
  "type": "AgentGovernanceReceipt",
  "verify_pubkey_b64": "ig6AWna3kodv7bngRvd6hJ+AbhXGznIh6dhFlA2pfPQ="
}
