adapted

Tier
V — owned by the catalog, last confirmed 2026-09-04
Why
adapted is the catalog's own namespace. There is nobody to prove that to, so this one does not lapse.
Records
14

Reaching tier S

  1. Prove control of the source. A DNS TXT record on the domain, or ownership of the GitHub organisation the records come from. The namespace is claimed, not granted.
  2. Keep proving it. Verification is rechecked. A tier granted once and never revisited survives a domain expiring into somebody else's hands.
  3. For tier S, publish a signing key. An ed25519 key at /.well-known/runbooks-attestation-keys.json, and records signed with it. A signature is what makes a record resistant to substitution after publication, and it is the prerequisite for trust T3. A key that is retired or revoked still verifies what it signed and no longer earns the tier.
  4. And two people approve it. The promotion to tier S is approved by two different maintainers (§15), recorded in the registry beside the verification. Nothing about your key or your records is enough on its own.

Attestations

Nothing here has been attested. T2 is what the catalog checks on its own; T3 needs somebody to run a procedure and sign for it, and nobody has.

Records

a-prompt-the-filter-refuses

Reword a request a safety filter declined, in a fixed order, and keep the pair — because the refusal is usually about how it was asked rather than what was asked.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
read-only
Execution
human-only
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

a-write-that-reported-success-and-changed-nothing

Work out why a change made through an integration reported success while the far system shows the old value — a lock, a cache, a stale binding, or the wrong identity.

Publisher
adapted tier V
Targets
dynamics-365
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

an-agent-loop-that-will-not-stop

Find why an agent keeps replanning past its budget — usually because nothing it called ever said plainly that it had succeeded.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

copilot-agent-answers-wrong

Find out why a Copilot Studio agent is answering wrongly — whether the content is missing, unreachable, or being ignored — before changing anything.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-only
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

copilot-agent-withdraw-after-publish

Take a published Copilot Studio agent back out of service, least drastic action first, when it is answering badly in front of users.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
irreversible
Execution
human-only
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

copilot-credit-spike-contain

Stop a Copilot Studio agent burning credits faster than it was budgeted for, before deciding whether the consumption is genuine.

Publisher
adapted tier V
Targets
copilot-studio, power-platform
Highest risk
destructive
Execution
human-only
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

design-the-rejection-path-too

Make an approval gate real — the draft visible where the record lives, a cap on what one approval covers, and a rejection path somebody has actually taken.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

find-out-what-identity-your-tool-receives

Deploy one tool that reports the caller identity it actually observes, in the host you will really use, before designing an integration around an identity you assumed.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

never-block-a-conversation-on-slow-work

Hand back a handle instead of waiting, tell the person what to expect, and make sure the retry they will attempt anyway does not do the work twice.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

prove-an-index-cannot-show-what-it-must-not

Reconcile what was indexed against what exists, then test the permissions in both directions — including one query for the most sensitive content in scope.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

rehearse-the-withdrawal-before-you-need-it

Turn "we can block it" into a measured control by withdrawing something on purpose, checking it as an ordinary user, and writing down how long it took.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

replace-a-system-without-guessing

Measure the thing you are replacing before you lose access to it, gate the switch on the same questions, and set the decommission date at cutover.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
irreversible
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

test-a-generator-for-what-it-invents

Check a document generator against sparse and missing input, where fabrication is disqualifying rather than one score among several.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory

what-an-extraction-may-do-without-a-person

Set the threshold above which extracted values are accepted unreviewed from measured accuracy on real documents, after establishing that the results can be written anywhere at all.

Publisher
adapted tier V
Targets
copilot-studio
Highest risk
reversible-write
Execution
human-with-agent
Profile
P1
Trust
T2 · 2026-10-11 · runbooks.directory