{
  "alg": "Ed25519",
  "atom_id": "oao-OPENWEBUI-a01e1e1fed",
  "decision": "GOVERNED:UNGOVERNED",
  "evidence": {
    "ontology": {
      "action_maps": [
        {
          "label": "delete",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete"
        },
        {
          "label": "delete_all_feedbacks",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_feedbacks"
        },
        {
          "label": "delete_all_files",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_files"
        },
        {
          "label": "delete_all_groups",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_groups"
        },
        {
          "label": "delete_all_knowledge",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_knowledge"
        },
        {
          "label": "delete_all_models",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_all_models"
        },
        {
          "label": "delete_auth_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_auth_by_id"
        },
        {
          "label": "delete_automation",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_automation"
        },
        {
          "label": "delete_by_automation",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_automation"
        },
        {
          "label": "delete_by_chat_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_chat_id"
        },
        {
          "label": "delete_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_by_id"
        },
        {
          "label": "delete_calendar_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_calendar_by_id"
        },
        {
          "label": "delete_calendar_event",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_calendar_event"
        },
        {
          "label": "delete_channel_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_channel_by_id"
        },
        {
          "label": "delete_chat_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_chat_by_id"
        },
        {
          "label": "delete_chat_by_id_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_chat_by_id_and_user_id"
        },
        {
          "label": "delete_chat_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_chat_file"
        },
        {
          "label": "delete_chats_by_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_chats_by_user_id"
        },
        {
          "label": "delete_chats_by_user_id_and_folder_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_chats_by_user_id_and_folder_id"
        },
        {
          "label": "delete_children",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_children"
        },
        {
          "label": "delete_collection",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_collection"
        },
        {
          "label": "delete_directory",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_directory"
        },
        {
          "label": "delete_event_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_event_by_id"
        },
        {
          "label": "delete_feedback_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_feedback_by_id"
        },
        {
          "label": "delete_feedback_by_id_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_feedback_by_id_and_user_id"
        },
        {
          "label": "delete_feedbacks_by_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_feedbacks_by_user_id"
        },
        {
          "label": "delete_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_file"
        },
        {
          "label": "delete_file_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_file_by_id"
        },
        {
          "label": "delete_folder_by_id_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_folder_by_id_and_user_id"
        },
        {
          "label": "delete_function_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_function_by_id"
        },
        {
          "label": "delete_group_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_group_by_id"
        },
        {
          "label": "delete_history_by_prompt_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_history_by_prompt_id"
        },
        {
          "label": "delete_history_entry",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_history_entry"
        },
        {
          "label": "delete_knowledge_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_knowledge_by_id"
        },
        {
          "label": "delete_memories_by_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_memories_by_user_id"
        },
        {
          "label": "delete_memory",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_memory"
        },
        {
          "label": "delete_memory_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_memory_by_id"
        },
        {
          "label": "delete_memory_by_id_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_memory_by_id_and_user_id"
        },
        {
          "label": "delete_message_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_message_by_id"
        },
        {
          "label": "delete_message_ids_by_chat_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_message_ids_by_chat_id"
        },
        {
          "label": "delete_messages_by_chat_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_messages_by_chat_id"
        },
        {
          "label": "delete_model_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_model_by_id"
        },
        {
          "label": "delete_note_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_note_by_id"
        },
        {
          "label": "delete_orphan_tags_for_user",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_orphan_tags_for_user"
        },
        {
          "label": "delete_prompt_by_command",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_prompt_by_command"
        },
        {
          "label": "delete_prompt_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_prompt_by_id"
        },
        {
          "label": "delete_reactions_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_reactions_by_id"
        },
        {
          "label": "delete_replies_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_replies_by_id"
        },
        {
          "label": "delete_request",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_request"
        },
        {
          "label": "delete_session_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_session_by_id"
        },
        {
          "label": "delete_sessions_by_provider",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_sessions_by_provider"
        },
        {
          "label": "delete_sessions_by_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_sessions_by_user_id"
        },
        {
          "label": "delete_sessions_by_user_id_and_provider",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_sessions_by_user_id_and_provider"
        },
        {
          "label": "delete_shared_chat_by_chat_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_shared_chat_by_chat_id"
        },
        {
          "label": "delete_shared_chats_by_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_shared_chats_by_user_id"
        },
        {
          "label": "delete_skill_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_skill_by_id"
        },
        {
          "label": "delete_tag_by_id_and_user_id_and_tag_name",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_tag_by_id_and_user_id_and_tag_name"
        },
        {
          "label": "delete_tag_by_name_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_tag_by_name_and_user_id"
        },
        {
          "label": "delete_tags_by_ids_and_user_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_tags_by_ids_and_user_id"
        },
        {
          "label": "delete_tool_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_tool_by_id"
        },
        {
          "label": "delete_user_api_key_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_api_key_by_id"
        },
        {
          "label": "delete_user_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_user_by_id"
        },
        {
          "label": "delete_webhook_by_id",
          "mappings": [
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-5",
              "name": "Access Restrictions for Change",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "a destructive change during a freeze maps to data destruction",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1485",
              "name": "Data Destruction",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_delete_webhook_by_id"
        },
        {
          "label": "execute_automation",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_automation"
        },
        {
          "label": "execute_code",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_code"
        },
        {
          "label": "execute_code_jupyter",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_code_jupyter"
        },
        {
          "label": "execute_in_jupyter",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_in_jupyter"
        },
        {
          "label": "execute_pipe",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_pipe"
        },
        {
          "label": "execute_tool_server",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_execute_tool_server"
        },
        {
          "label": "grant_access",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_grant_access"
        },
        {
          "label": "migrate_access_control",
          "mappings": [
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_migrate_access_control"
        },
        {
          "label": "post_webhook",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_post_webhook"
        },
        {
          "label": "release_lock",
          "mappings": [
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "CM-3",
              "name": "Configuration Change Control",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 14",
              "name": "Human oversight",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'release'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "INFERRED"
            },
            {
              "basis": "an unapproved production change maps to system-process modification / persistence",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1543",
              "name": "Create or Modify System Process",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_release_lock"
        },
        {
          "label": "revoke_access",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_revoke_access"
        },
        {
          "label": "revoke_all_access",
          "mappings": [],
          "matched_via": "none",
          "subject_id": "fn_revoke_all_access"
        },
        {
          "label": "run",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run"
        },
        {
          "label": "run_migrations",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_migrations"
        },
        {
          "label": "run_migrations_offline",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_migrations_offline"
        },
        {
          "label": "run_migrations_online",
          "mappings": [
            {
              "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text",
              "confidence": "ambiguous",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM06",
              "name": "Excessive Agency",
              "provenance": "AMBIGUOUS"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_run_migrations_online"
        },
        {
          "label": "send_get_request",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_get_request"
        },
        {
          "label": "send_notification",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_notification"
        },
        {
          "label": "send_request",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_request"
        },
        {
          "label": "send_with_timing",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_with_timing"
        },
        {
          "label": "send_wrapper",
          "mappings": [
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_send_wrapper"
        },
        {
          "label": "upload_audio",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_audio"
        },
        {
          "label": "upload_file",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file"
        },
        {
          "label": "upload_file_handler",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_file_handler"
        },
        {
          "label": "upload_image",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_image"
        },
        {
          "label": "upload_request",
          "mappings": [
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "AC-4",
              "name": "Information Flow Enforcement",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)",
              "confidence": "inferred",
              "fw": "NIST SP 800-53r5",
              "id": "SC-7",
              "name": "Boundary Protection",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)",
              "confidence": "inferred",
              "fw": "EU AI Act",
              "id": "Art 10",
              "name": "Data and data governance",
              "provenance": "INFERRED"
            },
            {
              "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)",
              "confidence": "inferred",
              "fw": "OWASP LLM Top 10 (2025)",
              "id": "LLM02",
              "name": "Sensitive Information Disclosure",
              "provenance": "INFERRED"
            },
            {
              "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "TA0010",
              "name": "Exfiltration",
              "provenance": "EXTRACTED"
            },
            {
              "basis": "uncontrolled egress of regulated data maps to exfiltration",
              "confidence": "advisory",
              "fw": "MITRE ATT&CK",
              "id": "T1048",
              "name": "Exfiltration Over Alternative Protocol",
              "provenance": "EXTRACTED"
            }
          ],
          "matched_via": "heuristic",
          "subject_id": "fn_upload_request"
        }
      ],
      "edges": [
        {
          "dst": "fn_delete",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_all_feedbacks",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_all_files",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_all_groups",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_all_knowledge",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_all_models",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_auth_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_automation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_by_automation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_by_chat_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_calendar_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_calendar_event",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_channel_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_chat_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_chat_by_id_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_chat_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_chats_by_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_chats_by_user_id_and_folder_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_children",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_collection",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_directory",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_event_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_feedback_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_feedback_by_id_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_feedbacks_by_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_file_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_folder_by_id_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_function_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_group_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_history_by_prompt_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_history_entry",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_knowledge_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_memories_by_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_memory",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_memory_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_memory_by_id_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_message_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_message_ids_by_chat_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_messages_by_chat_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_model_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_note_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_orphan_tags_for_user",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_prompt_by_command",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_prompt_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_reactions_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_replies_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_request",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_session_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_sessions_by_provider",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_sessions_by_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_sessions_by_user_id_and_provider",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_shared_chat_by_chat_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_shared_chats_by_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_skill_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_tag_by_id_and_user_id_and_tag_name",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_tag_by_name_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_tags_by_ids_and_user_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_tool_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_user_api_key_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_user_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_delete_webhook_by_id",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_automation",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_code",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_code_jupyter",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_in_jupyter",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_pipe",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_execute_tool_server",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_grant_access",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_migrate_access_control",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_post_webhook",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_release_lock",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_revoke_access",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_revoke_all_access",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_run",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_run_migrations",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_run_migrations_offline",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_run_migrations_online",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_send_get_request",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_send_notification",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_send_request",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_send_with_timing",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_send_wrapper",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_upload_audio",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_upload_file",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_upload_file_handler",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_upload_image",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        },
        {
          "dst": "fn_upload_request",
          "provenance": "EXTRACTED",
          "rel": "EXECUTES",
          "src": "agent_open_webui"
        }
      ],
      "frameworks": [],
      "nodes": [
        {
          "id": "agent_open_webui",
          "name": "open-webui",
          "props": {
            "source_kind": "python"
          },
          "provenance": "EXTRACTED",
          "type": "Agent"
        },
        {
          "id": "fn_delete",
          "name": "delete",
          "props": {
            "action": "delete"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_feedbacks",
          "name": "delete_all_feedbacks",
          "props": {
            "action": "delete_all_feedbacks"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_files",
          "name": "delete_all_files",
          "props": {
            "action": "delete_all_files"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_groups",
          "name": "delete_all_groups",
          "props": {
            "action": "delete_all_groups"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_knowledge",
          "name": "delete_all_knowledge",
          "props": {
            "action": "delete_all_knowledge"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_all_models",
          "name": "delete_all_models",
          "props": {
            "action": "delete_all_models"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_auth_by_id",
          "name": "delete_auth_by_id",
          "props": {
            "action": "delete_auth_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_automation",
          "name": "delete_automation",
          "props": {
            "action": "delete_automation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_automation",
          "name": "delete_by_automation",
          "props": {
            "action": "delete_by_automation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_chat_id",
          "name": "delete_by_chat_id",
          "props": {
            "action": "delete_by_chat_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_by_id",
          "name": "delete_by_id",
          "props": {
            "action": "delete_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_calendar_by_id",
          "name": "delete_calendar_by_id",
          "props": {
            "action": "delete_calendar_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_calendar_event",
          "name": "delete_calendar_event",
          "props": {
            "action": "delete_calendar_event"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_channel_by_id",
          "name": "delete_channel_by_id",
          "props": {
            "action": "delete_channel_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_chat_by_id",
          "name": "delete_chat_by_id",
          "props": {
            "action": "delete_chat_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_chat_by_id_and_user_id",
          "name": "delete_chat_by_id_and_user_id",
          "props": {
            "action": "delete_chat_by_id_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_chat_file",
          "name": "delete_chat_file",
          "props": {
            "action": "delete_chat_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_chats_by_user_id",
          "name": "delete_chats_by_user_id",
          "props": {
            "action": "delete_chats_by_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_chats_by_user_id_and_folder_id",
          "name": "delete_chats_by_user_id_and_folder_id",
          "props": {
            "action": "delete_chats_by_user_id_and_folder_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_children",
          "name": "delete_children",
          "props": {
            "action": "delete_children"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_collection",
          "name": "delete_collection",
          "props": {
            "action": "delete_collection"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_directory",
          "name": "delete_directory",
          "props": {
            "action": "delete_directory"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_event_by_id",
          "name": "delete_event_by_id",
          "props": {
            "action": "delete_event_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_feedback_by_id",
          "name": "delete_feedback_by_id",
          "props": {
            "action": "delete_feedback_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_feedback_by_id_and_user_id",
          "name": "delete_feedback_by_id_and_user_id",
          "props": {
            "action": "delete_feedback_by_id_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_feedbacks_by_user_id",
          "name": "delete_feedbacks_by_user_id",
          "props": {
            "action": "delete_feedbacks_by_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_file",
          "name": "delete_file",
          "props": {
            "action": "delete_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_file_by_id",
          "name": "delete_file_by_id",
          "props": {
            "action": "delete_file_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_folder_by_id_and_user_id",
          "name": "delete_folder_by_id_and_user_id",
          "props": {
            "action": "delete_folder_by_id_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_function_by_id",
          "name": "delete_function_by_id",
          "props": {
            "action": "delete_function_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_group_by_id",
          "name": "delete_group_by_id",
          "props": {
            "action": "delete_group_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_history_by_prompt_id",
          "name": "delete_history_by_prompt_id",
          "props": {
            "action": "delete_history_by_prompt_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_history_entry",
          "name": "delete_history_entry",
          "props": {
            "action": "delete_history_entry"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_knowledge_by_id",
          "name": "delete_knowledge_by_id",
          "props": {
            "action": "delete_knowledge_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memories_by_user_id",
          "name": "delete_memories_by_user_id",
          "props": {
            "action": "delete_memories_by_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memory",
          "name": "delete_memory",
          "props": {
            "action": "delete_memory"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memory_by_id",
          "name": "delete_memory_by_id",
          "props": {
            "action": "delete_memory_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_memory_by_id_and_user_id",
          "name": "delete_memory_by_id_and_user_id",
          "props": {
            "action": "delete_memory_by_id_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_message_by_id",
          "name": "delete_message_by_id",
          "props": {
            "action": "delete_message_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_message_ids_by_chat_id",
          "name": "delete_message_ids_by_chat_id",
          "props": {
            "action": "delete_message_ids_by_chat_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_messages_by_chat_id",
          "name": "delete_messages_by_chat_id",
          "props": {
            "action": "delete_messages_by_chat_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_model_by_id",
          "name": "delete_model_by_id",
          "props": {
            "action": "delete_model_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_note_by_id",
          "name": "delete_note_by_id",
          "props": {
            "action": "delete_note_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_orphan_tags_for_user",
          "name": "delete_orphan_tags_for_user",
          "props": {
            "action": "delete_orphan_tags_for_user"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_prompt_by_command",
          "name": "delete_prompt_by_command",
          "props": {
            "action": "delete_prompt_by_command"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_prompt_by_id",
          "name": "delete_prompt_by_id",
          "props": {
            "action": "delete_prompt_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_reactions_by_id",
          "name": "delete_reactions_by_id",
          "props": {
            "action": "delete_reactions_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_replies_by_id",
          "name": "delete_replies_by_id",
          "props": {
            "action": "delete_replies_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_request",
          "name": "delete_request",
          "props": {
            "action": "delete_request"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_session_by_id",
          "name": "delete_session_by_id",
          "props": {
            "action": "delete_session_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_sessions_by_provider",
          "name": "delete_sessions_by_provider",
          "props": {
            "action": "delete_sessions_by_provider"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_sessions_by_user_id",
          "name": "delete_sessions_by_user_id",
          "props": {
            "action": "delete_sessions_by_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_sessions_by_user_id_and_provider",
          "name": "delete_sessions_by_user_id_and_provider",
          "props": {
            "action": "delete_sessions_by_user_id_and_provider"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_shared_chat_by_chat_id",
          "name": "delete_shared_chat_by_chat_id",
          "props": {
            "action": "delete_shared_chat_by_chat_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_shared_chats_by_user_id",
          "name": "delete_shared_chats_by_user_id",
          "props": {
            "action": "delete_shared_chats_by_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_skill_by_id",
          "name": "delete_skill_by_id",
          "props": {
            "action": "delete_skill_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_tag_by_id_and_user_id_and_tag_name",
          "name": "delete_tag_by_id_and_user_id_and_tag_name",
          "props": {
            "action": "delete_tag_by_id_and_user_id_and_tag_name"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_tag_by_name_and_user_id",
          "name": "delete_tag_by_name_and_user_id",
          "props": {
            "action": "delete_tag_by_name_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_tags_by_ids_and_user_id",
          "name": "delete_tags_by_ids_and_user_id",
          "props": {
            "action": "delete_tags_by_ids_and_user_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_tool_by_id",
          "name": "delete_tool_by_id",
          "props": {
            "action": "delete_tool_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_api_key_by_id",
          "name": "delete_user_api_key_by_id",
          "props": {
            "action": "delete_user_api_key_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_user_by_id",
          "name": "delete_user_by_id",
          "props": {
            "action": "delete_user_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_delete_webhook_by_id",
          "name": "delete_webhook_by_id",
          "props": {
            "action": "delete_webhook_by_id"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_automation",
          "name": "execute_automation",
          "props": {
            "action": "execute_automation"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_code",
          "name": "execute_code",
          "props": {
            "action": "execute_code"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_code_jupyter",
          "name": "execute_code_jupyter",
          "props": {
            "action": "execute_code_jupyter"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_in_jupyter",
          "name": "execute_in_jupyter",
          "props": {
            "action": "execute_in_jupyter"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_pipe",
          "name": "execute_pipe",
          "props": {
            "action": "execute_pipe"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_execute_tool_server",
          "name": "execute_tool_server",
          "props": {
            "action": "execute_tool_server"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_grant_access",
          "name": "grant_access",
          "props": {
            "action": "grant_access"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_migrate_access_control",
          "name": "migrate_access_control",
          "props": {
            "action": "migrate_access_control"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_post_webhook",
          "name": "post_webhook",
          "props": {
            "action": "post_webhook"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_release_lock",
          "name": "release_lock",
          "props": {
            "action": "release_lock"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_revoke_access",
          "name": "revoke_access",
          "props": {
            "action": "revoke_access"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_revoke_all_access",
          "name": "revoke_all_access",
          "props": {
            "action": "revoke_all_access"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run",
          "name": "run",
          "props": {
            "action": "run"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_migrations",
          "name": "run_migrations",
          "props": {
            "action": "run_migrations"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_migrations_offline",
          "name": "run_migrations_offline",
          "props": {
            "action": "run_migrations_offline"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_run_migrations_online",
          "name": "run_migrations_online",
          "props": {
            "action": "run_migrations_online"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_get_request",
          "name": "send_get_request",
          "props": {
            "action": "send_get_request"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_notification",
          "name": "send_notification",
          "props": {
            "action": "send_notification"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_request",
          "name": "send_request",
          "props": {
            "action": "send_request"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_with_timing",
          "name": "send_with_timing",
          "props": {
            "action": "send_with_timing"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_send_wrapper",
          "name": "send_wrapper",
          "props": {
            "action": "send_wrapper"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_audio",
          "name": "upload_audio",
          "props": {
            "action": "upload_audio"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file",
          "name": "upload_file",
          "props": {
            "action": "upload_file"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_file_handler",
          "name": "upload_file_handler",
          "props": {
            "action": "upload_file_handler"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_image",
          "name": "upload_image",
          "props": {
            "action": "upload_image"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        },
        {
          "id": "fn_upload_request",
          "name": "upload_request",
          "props": {
            "action": "upload_request"
          },
          "provenance": "EXTRACTED",
          "type": "Task"
        }
      ],
      "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.",
      "source": "open-webui",
      "source_kind": "python"
    },
    "summary": {
      "asserted_covered": 0,
      "edges": 89,
      "frameworks": [],
      "governed_actions": 89,
      "nodes": 90,
      "source": "open-webui",
      "source_kind": "python",
      "ungoverned_actions": 4
    }
  },
  "evidence_hash": "a01e1e1fedd482cc3d33e82b3f0906575de9323d711174e671a3f7aa2ab4b584",
  "ml_dsa_public_key_b64": "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",
  "ml_dsa_signature_b64": "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",
  "note_pq": "Hybrid signature: Ed25519 always; ML-DSA-65 (FIPS 204) and SLH-DSA (FIPS 205) added when a PQ backend is installed. Each leg signs the same canonical body; any one verifying proves authenticity. Install: pip install \"openagentontology[pq]\".",
  "signature_alg": "Ed25519+ML-DSA-65+SLH-DSA",
  "signature_b64": "7m7J/PI8vwExlkEuqZyUGsqEJ2qTwHyPI+IcZLYcwco/985dHtyap52+VHB8WZz2LEWfG6DUhPhigJq+7NJPBg==",
  "signed": true,
  "signed_at": "2026-06-12T07:02:30.774007+00:00",
  "slh_dsa_public_key_b64": "bXNhZNeO0U50ZGJz/hQQCpW03+uEluFG/BkVrNlKk1k=",
  "slh_dsa_signature_b64": "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",
  "type": "AgentGovernanceReceipt",
  "verify_pubkey_b64": "ig6AWna3kodv7bngRvd6hJ+AbhXGznIh6dhFlA2pfPQ="
}
