{
  "budget_bytes": 524288,
  "bytes": 16003,
  "over_budget": false,
  "records": [
    {
      "capabilities": [],
      "description": "Reword a request a safety filter declined, in a fixed order, and keep the pair — because the refusal is usually about how it was asked rather than what was asked.",
      "execution": "human-only",
      "min_runtime_profile": "R0",
      "profile": "P1",
      "ref": "adapted/a-prompt-the-filter-refuses",
      "risk": "read-only",
      "targets": [
        "copilot-studio"
      ],
      "title": "a-prompt-the-filter-refuses",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Work out why a change made through an integration reported success while the far system shows the old value — a lock, a cache, a stale binding, or the wrong identity.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/a-write-that-reported-success-and-changed-nothing",
      "risk": "reversible-write",
      "targets": [
        "dynamics-365"
      ],
      "title": "a-write-that-reported-success-and-changed-nothing",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Find why an agent keeps replanning past its budget — usually because nothing it called ever said plainly that it had succeeded.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/an-agent-loop-that-will-not-stop",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "an-agent-loop-that-will-not-stop",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Find out why a Copilot Studio agent is answering wrongly — whether the content is missing, unreachable, or being ignored — before changing anything.",
      "execution": "human-only",
      "min_runtime_profile": "R0",
      "profile": "P1",
      "ref": "adapted/copilot-agent-answers-wrong",
      "risk": "read-only",
      "targets": [
        "copilot-studio"
      ],
      "title": "copilot-agent-answers-wrong",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Take a published Copilot Studio agent back out of service, least drastic action first, when it is answering badly in front of users.",
      "execution": "human-only",
      "min_runtime_profile": "R2",
      "profile": "P1",
      "ref": "adapted/copilot-agent-withdraw-after-publish",
      "risk": "irreversible",
      "targets": [
        "copilot-studio"
      ],
      "title": "copilot-agent-withdraw-after-publish",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Stop a Copilot Studio agent burning credits faster than it was budgeted for, before deciding whether the consumption is genuine.",
      "execution": "human-only",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/copilot-credit-spike-contain",
      "risk": "destructive",
      "targets": [
        "copilot-studio",
        "power-platform"
      ],
      "title": "copilot-credit-spike-contain",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Make an approval gate real — the draft visible where the record lives, a cap on what one approval covers, and a rejection path somebody has actually taken.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/design-the-rejection-path-too",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "design-the-rejection-path-too",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Deploy one tool that reports the caller identity it actually observes, in the host you will really use, before designing an integration around an identity you assumed.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/find-out-what-identity-your-tool-receives",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "find-out-what-identity-your-tool-receives",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Hand back a handle instead of waiting, tell the person what to expect, and make sure the retry they will attempt anyway does not do the work twice.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/never-block-a-conversation-on-slow-work",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "never-block-a-conversation-on-slow-work",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Reconcile what was indexed against what exists, then test the permissions in both directions — including one query for the most sensitive content in scope.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/prove-an-index-cannot-show-what-it-must-not",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "prove-an-index-cannot-show-what-it-must-not",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Turn \"we can block it\" into a measured control by withdrawing something on purpose, checking it as an ordinary user, and writing down how long it took.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/rehearse-the-withdrawal-before-you-need-it",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "rehearse-the-withdrawal-before-you-need-it",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Measure the thing you are replacing before you lose access to it, gate the switch on the same questions, and set the decommission date at cutover.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/replace-a-system-without-guessing",
      "risk": "irreversible",
      "targets": [
        "copilot-studio"
      ],
      "title": "replace-a-system-without-guessing",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Check a document generator against sparse and missing input, where fabrication is disqualifying rather than one score among several.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/test-a-generator-for-what-it-invents",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "test-a-generator-for-what-it-invents",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Set the threshold above which extracted values are accepted unreviewed from measured accuracy on real documents, after establishing that the results can be written anywhere at all.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "adapted/what-an-extraction-may-do-without-a-person",
      "risk": "reversible-write",
      "targets": [
        "copilot-studio"
      ],
      "title": "what-an-extraction-may-do-without-a-person",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Make a scheduled send tell an empty period from a failed look, so a broken source does not mark everybody served and defer them to the next run.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/a-failed-look-is-not-a-quiet-week",
      "risk": "reversible-write",
      "targets": [
        "postgres"
      ],
      "title": "a-failed-look-is-not-a-quiet-week",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "The pipeline refuses a run before it starts, so the deploy has to happen from a workstation — told apart from a real failure first, and with what the manual path costs put back afterwards.",
      "execution": "human-only",
      "min_runtime_profile": "R2",
      "profile": "P1",
      "ref": "std/ci-refuses-to-start-deploy-by-hand",
      "risk": "irreversible",
      "targets": [
        "github-actions",
        "terraform",
        "aws"
      ],
      "title": "ci-refuses-to-start-deploy-by-hand",
      "trust": "T2"
    },
    {
      "capabilities": [],
      "description": "Establish whether an action in somebody else's web interface actually happened, when a stale success looks like a fresh one and an open form looks like a failure.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/confirm-an-action-in-a-browser-you-drive",
      "risk": "reversible-write",
      "targets": [
        "linux"
      ],
      "title": "confirm-an-action-in-a-browser-you-drive",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Measure what rules can extract from a corpus before paying a model to read all of it, and tell a rule that is weak from a corpus that is silent.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/decide-where-a-model-is-needed",
      "risk": "reversible-write",
      "targets": [
        "postgres"
      ],
      "title": "decide-where-a-model-is-needed",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:df",
        "cli:du"
      ],
      "description": "Find what is filling a volume before deciding whether to delete anything, so the deletion is informed rather than hopeful.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/disk-pressure-triage",
      "risk": "read-only",
      "targets": [
        "linux"
      ],
      "title": "disk-pressure-triage",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:curl"
      ],
      "description": "Fill fields from pages somebody else serves, at volume, without recording a guess as a fact or a refusal as an answer.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/enrich-from-pages-you-do-not-control",
      "risk": "reversible-write",
      "targets": [
        "linux"
      ],
      "title": "enrich-from-pages-you-do-not-control",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:test"
      ],
      "description": "Poll a condition that is slow to settle, and give up on a schedule instead of waiting indefinitely.",
      "execution": "agent-autonomous",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/flaky-check-retry-budget",
      "risk": "read-only",
      "targets": [
        "linux"
      ],
      "title": "flaky-check-retry-budget",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:kubectl"
      ],
      "description": "Drain a node stuck NotReady and reschedule its pods, after establishing whether the kubelet is gone or merely unreachable.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R2",
      "profile": "P1",
      "ref": "std/k8s-node-not-ready-drain",
      "risk": "destructive",
      "targets": [
        "k8s"
      ],
      "title": "k8s-node-not-ready-drain",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:kafka-consumer-groups"
      ],
      "description": "Restart a consumer group that has stopped advancing its offsets, after confirming the lag is real and not a monitoring artefact.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/kafka-consumer-group-stuck-restart",
      "risk": "reversible-write",
      "targets": [
        "kafka"
      ],
      "title": "kafka-consumer-group-stuck-restart",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:pgrep"
      ],
      "description": "Run an integration whose credential is one account session without losing that session — a second worker on the same key reads as a hijack, and the key does not come back.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R2",
      "profile": "P1",
      "ref": "std/one-worker-for-a-single-session-credential",
      "risk": "irreversible",
      "targets": [
        "aws"
      ],
      "title": "one-worker-for-a-single-session-credential",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Drop a replication slot that is pinning WAL and filling the disk, after confirming nothing is consuming it.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R2",
      "profile": "P1",
      "ref": "std/postgres-drop-stale-replication-slot",
      "risk": "destructive",
      "targets": [
        "postgres"
      ],
      "title": "postgres-drop-stale-replication-slot",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Confirm that a database role handed to an agent actually refuses writes, by the permission check rather than by an error that happened to arrive first.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/prove-a-read-only-credential-cannot-write",
      "risk": "read-only",
      "targets": [
        "postgres"
      ],
      "title": "prove-a-read-only-credential-cannot-write",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:curl"
      ],
      "description": "Post to a platform that has no usable API by driving a browser a person signed into by hand, and check the result as a stranger rather than as the author.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/publish-through-a-browser-already-signed-in",
      "risk": "reversible-write",
      "targets": [
        "linux"
      ],
      "title": "publish-through-a-browser-already-signed-in",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:curl"
      ],
      "description": "Publish one item to a feed strangers read, with the address assigned once by the server and kept even after the item comes off again.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/put-an-item-on-a-public-feed",
      "risk": "reversible-write",
      "targets": [
        "postgres"
      ],
      "title": "put-an-item-on-a-public-feed",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Make a rate mean something by counting a denominator every response passes through and a signal only a person can produce, without joining the two.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/separate-people-from-automation-in-traffic",
      "risk": "reversible-write",
      "targets": [
        "postgres"
      ],
      "title": "separate-people-from-automation-in-traffic",
      "trust": "T2"
    },
    {
      "capabilities": [
        "cli:psql"
      ],
      "description": "Check an entry against the page its subject publishes, not the aggregator that carried it, and write down only what that page actually said.",
      "execution": "human-with-agent",
      "min_runtime_profile": "R1",
      "profile": "P1",
      "ref": "std/verify-a-listing-against-its-source",
      "risk": "reversible-write",
      "targets": [
        "postgres"
      ],
      "title": "verify-a-listing-against-its-source",
      "trust": "T2"
    }
  ],
  "synonyms": {
    "actions": "github-actions",
    "aks": "k8s",
    "amazon-web-services": "aws",
    "amqp": "rabbitmq",
    "apache-airflow": "airflow",
    "apache-kafka": "kafka",
    "apache-spark": "spark",
    "centos": "linux",
    "containerd": "docker",
    "copilot": "copilot-studio",
    "d365": "dynamics-365",
    "dataverse": "power-platform",
    "debian": "linux",
    "dynamics": "dynamics-365",
    "dynamics365": "dynamics-365",
    "ec2": "aws",
    "eks": "k8s",
    "elastic": "elasticsearch",
    "elasticache-redis": "redis",
    "emr-spark": "spark",
    "f-and-o": "dynamics-365",
    "finance-and-operations": "dynamics-365",
    "gce": "gcp",
    "gha": "github-actions",
    "gke": "k8s",
    "gnu-linux": "linux",
    "google-cloud": "gcp",
    "hashicorp-vault": "vault",
    "k8": "k8s",
    "kube": "k8s",
    "kubernetes": "k8s",
    "mariadb": "mysql",
    "microsoft-azure": "azure",
    "microsoft-copilot-studio": "copilot-studio",
    "msk": "kafka",
    "mwaa": "airflow",
    "openresty": "nginx",
    "opensearch": "elasticsearch",
    "opentofu": "terraform",
    "pg": "postgres",
    "podman": "docker",
    "postgresql": "postgres",
    "power-apps": "power-platform",
    "power-automate": "power-platform",
    "power-virtual-agents": "copilot-studio",
    "powerplatform": "power-platform",
    "promql": "prometheus",
    "psql": "postgres",
    "pva": "copilot-studio",
    "rds-mysql": "mysql",
    "rds-postgres": "postgres",
    "redpanda": "kafka",
    "rhel": "linux",
    "tofu": "terraform",
    "ubuntu": "linux",
    "valkey": "redis"
  }
}