{ "action_maps": [ { "label": "create_azure_devops_pr", "mappings": [], "matched_via": "none", "subject_id": "cap_create_azure_devops_pr" }, { "label": "create_bitbucket_data_center_pr", "mappings": [], "matched_via": "none", "subject_id": "cap_create_bitbucket_data_center_pr" }, { "label": "create_bitbucket_pr", "mappings": [], "matched_via": "none", "subject_id": "cap_create_bitbucket_pr" }, { "label": "create_mr", "mappings": [], "matched_via": "none", "subject_id": "cap_create_mr" }, { "label": "create_pr", "mappings": [], "matched_via": "none", "subject_id": "cap_create_pr" }, { "label": "delete", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete" }, { "label": "delete_api_key", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_api_key" }, { "label": "delete_api_key_by_id", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_api_key_by_id" }, { "label": "delete_api_key_by_name", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_api_key_by_name" }, { "label": "delete_app_conversation", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_app_conversation" }, { "label": "delete_app_conversation_info", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_app_conversation_info" }, { "label": "delete_app_conversation_start_tasks", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_app_conversation_start_tasks" }, { "label": "delete_byor_key_from_litellm", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_byor_key_from_litellm" }, { "label": "delete_chunked_cookie", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_chunked_cookie" }, { "label": "delete_event_callback", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_event_callback" }, { "label": "delete_messages_for_conversation", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_messages_for_conversation" }, { "label": "delete_object", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_object" }, { "label": "delete_profile", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_profile" }, { "label": "delete_repository_webhook", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_repository_webhook" }, { "label": "delete_sandbox", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_sandbox" }, { "label": "delete_verified_model", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_verified_model" }, { "label": "delete_webhook", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_webhook" }, { "label": "delete_webhook_by_repo", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_webhook_by_repo" }, { "label": "deny", "mappings": [ { "basis": "inferred from action verb 'deny'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deny'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_deny" }, { "label": "deny_device_code", "mappings": [ { "basis": "inferred from action verb 'deny'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deny'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_deny_device_code" }, { "label": "execute", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute" }, { "label": "execute_callback", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_callback" }, { "label": "execute_callbacks", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_callbacks" }, { "label": "execute_graphql_query", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_graphql_query" }, { "label": "execute_request", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_request" }, { "label": "execute_side_effect", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_side_effect" }, { "label": "export_conversation", "mappings": [ { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_export_conversation" }, { "label": "migrate_customer", "mappings": [ { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "an unapproved production change maps to system-process modification / persistence", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1543", "name": "Create or Modify System Process", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_migrate_customer" }, { "label": "post_veto_note", "mappings": [], "matched_via": "none", "subject_id": "fn_post_veto_note" }, { "label": "reject_x_org_id_path_mismatch", "mappings": [ { "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'reject'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_reject_x_org_id_path_mismatch" }, { "label": "run", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run" }, { "label": "run_alembic", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_alembic" }, { "label": "run_git_command", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_git_command" }, { "label": "run_in_loop", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_in_loop" }, { "label": "run_in_new_loop", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_in_new_loop" }, { "label": "run_migrations_offline", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_migrations_offline" }, { "label": "run_migrations_online", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_migrations_online" }, { "label": "run_setup_scripts", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_setup_scripts" }, { "label": "run_tasks", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_tasks" }, { "label": "send_message", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message" }, { "label": "send_message_to_v1_conversation", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message_to_v1_conversation" }, { "label": "shutdown", "mappings": [], "matched_via": "none", "subject_id": "fn_shutdown" } ], "edges": [ { "dst": "fn_delete", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_api_key", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_api_key_by_id", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_api_key_by_name", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_app_conversation", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_app_conversation_info", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_app_conversation_start_tasks", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_byor_key_from_litellm", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_chunked_cookie", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_event_callback", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_messages_for_conversation", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_object", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_profile", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_repository_webhook", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_sandbox", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_verified_model", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_webhook", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_delete_webhook_by_repo", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_deny", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_deny_device_code", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute_callback", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute_callbacks", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute_graphql_query", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute_request", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_execute_side_effect", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_export_conversation", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_migrate_customer", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_post_veto_note", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_reject_x_org_id_path_mismatch", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_alembic", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_git_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_in_loop", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_in_new_loop", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_migrations_offline", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_migrations_online", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_setup_scripts", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_run_tasks", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_send_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_send_message_to_v1_conversation", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "fn_shutdown", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_openhands" }, { "dst": "cap_create_azure_devops_pr", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_openhands" }, { "dst": "cap_create_bitbucket_data_center_pr", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_openhands" }, { "dst": "cap_create_bitbucket_pr", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_openhands" }, { "dst": "cap_create_mr", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_openhands" }, { "dst": "cap_create_pr", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_openhands" } ], "frameworks": [], "nodes": [ { "id": "agent_openhands", "name": "openhands", "props": { "source_kind": "python" }, "provenance": "EXTRACTED", "type": "Agent" }, { "id": "cap_create_azure_devops_pr", "name": "create_azure_devops_pr", "props": { "action": "create_azure_devops_pr" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_create_bitbucket_data_center_pr", "name": "create_bitbucket_data_center_pr", "props": { "action": "create_bitbucket_data_center_pr" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_create_bitbucket_pr", "name": "create_bitbucket_pr", "props": { "action": "create_bitbucket_pr" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_create_mr", "name": "create_mr", "props": { "action": "create_mr" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_create_pr", "name": "create_pr", "props": { "action": "create_pr" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "fn_delete", "name": "delete", "props": { "action": "delete" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_api_key", "name": "delete_api_key", "props": { "action": "delete_api_key" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_api_key_by_id", "name": "delete_api_key_by_id", "props": { "action": "delete_api_key_by_id" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_api_key_by_name", "name": "delete_api_key_by_name", "props": { "action": "delete_api_key_by_name" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_app_conversation", "name": "delete_app_conversation", "props": { "action": "delete_app_conversation" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_app_conversation_info", "name": "delete_app_conversation_info", "props": { "action": "delete_app_conversation_info" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_app_conversation_start_tasks", "name": "delete_app_conversation_start_tasks", "props": { "action": "delete_app_conversation_start_tasks" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_byor_key_from_litellm", "name": "delete_byor_key_from_litellm", "props": { "action": "delete_byor_key_from_litellm" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_chunked_cookie", "name": "delete_chunked_cookie", "props": { "action": "delete_chunked_cookie" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_event_callback", "name": "delete_event_callback", "props": { "action": "delete_event_callback" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_messages_for_conversation", "name": "delete_messages_for_conversation", "props": { "action": "delete_messages_for_conversation" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_object", "name": "delete_object", "props": { "action": "delete_object" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_profile", "name": "delete_profile", "props": { "action": "delete_profile" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_repository_webhook", "name": "delete_repository_webhook", "props": { "action": "delete_repository_webhook" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_sandbox", "name": "delete_sandbox", "props": { "action": "delete_sandbox" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_verified_model", "name": "delete_verified_model", "props": { "action": "delete_verified_model" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_webhook", "name": "delete_webhook", "props": { "action": "delete_webhook" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_webhook_by_repo", "name": "delete_webhook_by_repo", "props": { "action": "delete_webhook_by_repo" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_deny", "name": "deny", "props": { "action": "deny" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_deny_device_code", "name": "deny_device_code", "props": { "action": "deny_device_code" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute", "name": "execute", "props": { "action": "execute" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_callback", "name": "execute_callback", "props": { "action": "execute_callback" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_callbacks", "name": "execute_callbacks", "props": { "action": "execute_callbacks" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_graphql_query", "name": "execute_graphql_query", "props": { "action": "execute_graphql_query" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_request", "name": "execute_request", "props": { "action": "execute_request" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_side_effect", "name": "execute_side_effect", "props": { "action": "execute_side_effect" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_export_conversation", "name": "export_conversation", "props": { "action": "export_conversation" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_migrate_customer", "name": "migrate_customer", "props": { "action": "migrate_customer" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_post_veto_note", "name": "post_veto_note", "props": { "action": "post_veto_note" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_reject_x_org_id_path_mismatch", "name": "reject_x_org_id_path_mismatch", "props": { "action": "reject_x_org_id_path_mismatch" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run", "name": "run", "props": { "action": "run" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_alembic", "name": "run_alembic", "props": { "action": "run_alembic" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_git_command", "name": "run_git_command", "props": { "action": "run_git_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_in_loop", "name": "run_in_loop", "props": { "action": "run_in_loop" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_in_new_loop", "name": "run_in_new_loop", "props": { "action": "run_in_new_loop" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_migrations_offline", "name": "run_migrations_offline", "props": { "action": "run_migrations_offline" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_migrations_online", "name": "run_migrations_online", "props": { "action": "run_migrations_online" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_setup_scripts", "name": "run_setup_scripts", "props": { "action": "run_setup_scripts" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_tasks", "name": "run_tasks", "props": { "action": "run_tasks" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message", "name": "send_message", "props": { "action": "send_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message_to_v1_conversation", "name": "send_message_to_v1_conversation", "props": { "action": "send_message_to_v1_conversation" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_shutdown", "name": "shutdown", "props": { "action": "shutdown" }, "provenance": "EXTRACTED", "type": "Task" } ], "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.", "source": "openhands", "source_kind": "python" }