[{"data":1,"prerenderedAt":3481},["ShallowReactive",2],{"navigation_docs":3,"docs-page:\u002Fgovern\u002Fincidents":1849,"docs-surround:\u002Fgovern\u002Fincidents":3476},[4,72,214,304,947,1040,1230,1504,1590,1701,1830],{"title":5,"path":6,"stem":7,"children":8,"icon":71},"Get started","\u002Fgetting-started","01.getting-started\u002F00.index",[9,10,15,20,25,36],{"title":5,"path":6,"stem":7},{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","01.getting-started\u002F01.introduction","i-ph-house",{"title":16,"path":17,"stem":18,"icon":19},"Quickstart","\u002Fgetting-started\u002Fquickstart","01.getting-started\u002F02.quickstart","i-ph-rocket-launch",{"title":21,"path":22,"stem":23,"icon":24},"Concepts","\u002Fgetting-started\u002Fconcepts","01.getting-started\u002F03.concepts","i-ph-book-open",{"title":26,"path":27,"stem":28,"children":29,"icon":31},"Install","\u002Fgetting-started\u002Finstall","01.getting-started\u002F04.install\u002F00.index",[30,32],{"title":26,"path":27,"stem":28,"icon":31},"i-ph-download-simple",{"title":33,"path":34,"stem":35},"Prepare the Linux sandbox","\u002Fgetting-started\u002Finstall\u002Flinux-sandbox","01.getting-started\u002F04.install\u002F01.linux-sandbox",{"title":37,"path":38,"stem":39,"children":40,"icon":42},"Web UI","\u002Fgetting-started\u002Fweb-ui","01.getting-started\u002F05.web-ui\u002F00.index",[41,43,47,51,55,59,63,67],{"title":37,"path":38,"stem":39,"icon":42},"i-ph-monitor",{"title":44,"path":45,"stem":46},"Choose a tenant","\u002Fgetting-started\u002Fweb-ui\u002Ftenants","01.getting-started\u002F05.web-ui\u002F01.tenants",{"title":48,"path":49,"stem":50},"Find a page","\u002Fgetting-started\u002Fweb-ui\u002Fnavigation","01.getting-started\u002F05.web-ui\u002F02.navigation",{"title":52,"path":53,"stem":54},"Use the chat drawer","\u002Fgetting-started\u002Fweb-ui\u002Fchats","01.getting-started\u002F05.web-ui\u002F03.chats",{"title":56,"path":57,"stem":58},"Create and edit records","\u002Fgetting-started\u002Fweb-ui\u002Fforms","01.getting-started\u002F05.web-ui\u002F04.forms",{"title":60,"path":61,"stem":62},"Keyboard and accessibility","\u002Fgetting-started\u002Fweb-ui\u002Faccessibility","01.getting-started\u002F05.web-ui\u002F05.accessibility",{"title":64,"path":65,"stem":66},"Accounts and permissions","\u002Fgetting-started\u002Fweb-ui\u002Faccounts","01.getting-started\u002F05.web-ui\u002F06.accounts",{"title":68,"path":69,"stem":70},"Console page directory","\u002Fgetting-started\u002Fweb-ui\u002Fpage-directory","01.getting-started\u002F05.web-ui\u002F07.page-directory",false,{"title":21,"path":73,"stem":74,"children":75,"icon":71},"\u002Fconcepts","02.concepts\u002F00.index",[76,77,82,87,92,123,128,143,166,185,204,209],{"title":21,"path":73,"stem":74},{"title":78,"path":79,"stem":80,"icon":81},"Architecture","\u002Fconcepts\u002Farchitecture","02.concepts\u002F01.architecture","i-ph-planet",{"title":83,"path":84,"stem":85,"icon":86},"Jobs and durability","\u002Fconcepts\u002Fjobs","02.concepts\u002F02.jobs","i-ph-infinity",{"title":88,"path":89,"stem":90,"icon":91},"Routing","\u002Fconcepts\u002Frouting","02.concepts\u002F03.routing","i-ph-path",{"title":93,"path":94,"stem":95,"children":96,"icon":98},"Security model","\u002Fconcepts\u002Fsecurity","02.concepts\u002F04.security\u002F00.index",[97,99,103,107,111,115,119],{"title":93,"path":94,"stem":95,"icon":98},"i-ph-shield-check",{"title":100,"path":101,"stem":102},"Node identity and tenant secrets","\u002Fconcepts\u002Fsecurity\u002Fidentity-and-secrets","02.concepts\u002F04.security\u002F01.identity-and-secrets",{"title":104,"path":105,"stem":106},"Plugin processes and operator exemptions","\u002Fconcepts\u002Fsecurity\u002Fplugins","02.concepts\u002F04.security\u002F02.plugins",{"title":108,"path":109,"stem":110},"Sandbox tiers and routing","\u002Fconcepts\u002Fsecurity\u002Fsandbox-tiers","02.concepts\u002F04.security\u002F03.sandbox-tiers",{"title":112,"path":113,"stem":114},"Sandbox egress rules","\u002Fconcepts\u002Fsecurity\u002Fegress","02.concepts\u002F04.security\u002F04.egress",{"title":116,"path":117,"stem":118},"Protected files and sandbox limits","\u002Fconcepts\u002Fsecurity\u002Fprotected-files","02.concepts\u002F04.security\u002F05.protected-files",{"title":120,"path":121,"stem":122},"Security assurance","\u002Fconcepts\u002Fsecurity\u002Fassurance","02.concepts\u002F04.security\u002F06.assurance",{"title":124,"path":125,"stem":126,"icon":127},"Temporal","\u002Fconcepts\u002Ftemporal","02.concepts\u002F05.temporal","i-ph-clock",{"title":129,"path":130,"stem":131,"children":132,"icon":134},"Limits and scaling","\u002Fconcepts\u002Flimits-and-scaling","02.concepts\u002F06.limits-and-scaling\u002F00.index",[133,135,139],{"title":129,"path":130,"stem":131,"icon":134},"i-ph-gauge",{"title":136,"path":137,"stem":138},"Tenant and queue limits","\u002Fconcepts\u002Flimits-and-scaling\u002Flimits","02.concepts\u002F06.limits-and-scaling\u002F01.limits",{"title":140,"path":141,"stem":142},"Capacity measurements","\u002Fconcepts\u002Flimits-and-scaling\u002Fmeasurements","02.concepts\u002F06.limits-and-scaling\u002F02.measurements",{"title":144,"path":145,"stem":146,"children":147,"icon":149},"Threat model","\u002Fconcepts\u002Fthreat-model","02.concepts\u002F07.threat-model\u002F00.index",[148,150,154,158,162],{"title":144,"path":145,"stem":146,"icon":149},"i-ph-crosshair",{"title":151,"path":152,"stem":153},"Trust boundaries and compromise","\u002Fconcepts\u002Fthreat-model\u002Ftrust-boundaries","02.concepts\u002F07.threat-model\u002F01.trust-boundaries",{"title":155,"path":156,"stem":157},"Harness and tool boundaries","\u002Fconcepts\u002Fthreat-model\u002Fharness-tools","02.concepts\u002F07.threat-model\u002F02.harness-tools",{"title":159,"path":160,"stem":161},"Known security gaps","\u002Fconcepts\u002Fthreat-model\u002Fknown-gaps","02.concepts\u002F07.threat-model\u002F03.known-gaps",{"title":163,"path":164,"stem":165},"Origins, sequences and tool results","\u002Fconcepts\u002Fthreat-model\u002Forigins-and-results","02.concepts\u002F07.threat-model\u002F04.origins-and-results",{"title":167,"path":168,"stem":169,"children":170,"icon":172},"Outbound connections","\u002Fconcepts\u002Foutbound-connections","02.concepts\u002F08.outbound-connections\u002F00.index",[171,173,177,181],{"title":167,"path":168,"stem":169,"icon":172},"i-ph-arrow-square-out",{"title":174,"path":175,"stem":176},"Server outbound connections","\u002Fconcepts\u002Foutbound-connections\u002Fserver","02.concepts\u002F08.outbound-connections\u002F01.server",{"title":178,"path":179,"stem":180},"Node and plugin outbound connections","\u002Fconcepts\u002Foutbound-connections\u002Fnodes-and-plugins","02.concepts\u002F08.outbound-connections\u002F02.nodes-and-plugins",{"title":182,"path":183,"stem":184},"Addresses a model provider fetches","\u002Fconcepts\u002Foutbound-connections\u002Fprovider-fetches","02.concepts\u002F08.outbound-connections\u002F03.provider-fetches",{"title":186,"path":187,"stem":188,"children":189,"icon":191},"Run receipts","\u002Fconcepts\u002Frun-receipts","02.concepts\u002F09.run-receipts\u002F00.index",[190,192,196,200],{"title":186,"path":187,"stem":188,"icon":191},"i-ph-receipt",{"title":193,"path":194,"stem":195},"Authority envelopes and delegation","\u002Fconcepts\u002Frun-receipts\u002Fauthority","02.concepts\u002F09.run-receipts\u002F01.authority",{"title":197,"path":198,"stem":199},"Call bindings and budget charges","\u002Fconcepts\u002Frun-receipts\u002Fcalls-and-charges","02.concepts\u002F09.run-receipts\u002F02.calls-and-charges",{"title":201,"path":202,"stem":203},"Verify run receipts offline","\u002Fconcepts\u002Frun-receipts\u002Fverify","02.concepts\u002F09.run-receipts\u002F03.verify",{"title":205,"path":206,"stem":207,"icon":208},"Delegation and identity","\u002Fconcepts\u002Fdelegation-and-identity","02.concepts\u002F10.delegation-and-identity","i-ph-identification-badge",{"title":210,"path":211,"stem":212,"icon":213},"How a tool call is decided","\u002Fconcepts\u002Fhow-a-tool-call-is-decided","02.concepts\u002F11.how-a-tool-call-is-decided","i-ph-list-checks",{"title":215,"path":216,"stem":217,"children":218,"icon":71},"Run","\u002Fagents","03.agents\u002F00.index",[219,221,226,231,236,240,245,250,268,299],{"title":220,"path":216,"stem":217},"Run agents",{"title":222,"path":223,"stem":224,"icon":225},"Run jobs","\u002Fagents\u002Frun-jobs","03.agents\u002F01.run-jobs","i-ph-play",{"title":227,"path":228,"stem":229,"icon":230},"Job history","\u002Fagents\u002Fhistory","03.agents\u002F02.history","i-ph-clock-counter-clockwise",{"title":232,"path":233,"stem":234,"icon":235},"Long jobs","\u002Fagents\u002Flong-jobs","03.agents\u002F03.long-jobs","i-ph-hourglass-medium",{"title":237,"path":238,"stem":239,"icon":235},"Waiting for events","\u002Fagents\u002Fwaiting-for-events","03.agents\u002F04.waiting-for-events",{"title":241,"path":242,"stem":243,"icon":244},"Delegation","\u002Fagents\u002Fdelegation","03.agents\u002F05.delegation","i-ph-git-fork",{"title":246,"path":247,"stem":248,"icon":249},"Colleagues and the board","\u002Fagents\u002Fcolleagues","03.agents\u002F06.colleagues","i-ph-chats-circle",{"title":251,"path":252,"stem":253,"children":254,"icon":249},"Conversations","\u002Fagents\u002Fconversations","03.agents\u002F07.conversations\u002F00.index",[255,256,260,264],{"title":251,"path":252,"stem":253,"icon":249},{"title":257,"path":258,"stem":259},"Conversation access and history","\u002Fagents\u002Fconversations\u002Faccess-and-history","03.agents\u002F07.conversations\u002F02.access-and-history",{"title":261,"path":262,"stem":263},"Use conversations from an app","\u002Fagents\u002Fconversations\u002Fapps","03.agents\u002F07.conversations\u002F03.apps",{"title":265,"path":266,"stem":267},"Hand off a conversation and use Ask","\u002Fagents\u002Fconversations\u002Fhandoffs-and-ask","03.agents\u002F07.conversations\u002F04.handoffs-and-ask",{"title":269,"path":270,"stem":271,"children":272,"icon":274},"Decide an approval","\u002Fagents\u002Fapprovals","03.agents\u002F08.approvals\u002F00.index",[273,275,279,283,287,291,295],{"title":269,"path":270,"stem":271,"icon":274},"i-ph-hand-palm",{"title":276,"path":277,"stem":278},"Configure approval ownership and deadlines","\u002Fagents\u002Fapprovals\u002Fconfigure","03.agents\u002F08.approvals\u002F02.configure",{"title":280,"path":281,"stem":282},"How approval decisions bind a call","\u002Fagents\u002Fapprovals\u002Fsecurity","03.agents\u002F08.approvals\u002F03.security",{"title":284,"path":285,"stem":286},"Edit an approval or allow repeated calls","\u002Fagents\u002Fapprovals\u002Fedits-and-repeat-calls","03.agents\u002F08.approvals\u002F04.edits-and-repeat-calls",{"title":288,"path":289,"stem":290},"Resolve loop, budget and recovery waits","\u002Fagents\u002Fapprovals\u002Frecovery","03.agents\u002F08.approvals\u002F05.recovery",{"title":292,"path":293,"stem":294},"Review approval statistics and test cards","\u002Fagents\u002Fapprovals\u002Fstatistics","03.agents\u002F08.approvals\u002F06.statistics",{"title":296,"path":297,"stem":298},"Decide approvals from an app","\u002Fagents\u002Fapprovals\u002Fapps","03.agents\u002F08.approvals\u002F07.apps",{"title":300,"path":301,"stem":302,"icon":303},"Asking people","\u002Fagents\u002Fasking-people","03.agents\u002F09.asking-people","i-ph-chat-circle-dots",{"title":305,"path":306,"stem":307,"children":308,"icon":71},"Build","\u002Fbuild","04.build\u002F00.index",[309,310,655,844],{"title":305,"path":306,"stem":307},{"title":311,"path":312,"stem":313,"children":314,"icon":71},"Plugins","\u002Fbuild\u002Fplugins","04.build\u002F01.plugins\u002F00.index",[315,316,321,352,357,362,367,378,397,412,417,422,427,442,447,452,457,472,476,481,492,497,502,640],{"title":311,"path":312,"stem":313},{"title":317,"path":318,"stem":319,"icon":320},"What a plugin is","\u002Fbuild\u002Fplugins\u002Foverview","04.build\u002F01.plugins\u002F01.overview","i-ph-puzzle-piece",{"title":322,"path":323,"stem":324,"children":325,"icon":327},"Install a plugin","\u002Fbuild\u002Fplugins\u002Finstall","04.build\u002F01.plugins\u002F02.install\u002F00.index",[326,328,332,336,340,344,348],{"title":322,"path":323,"stem":324,"icon":327},"i-ph-package",{"title":329,"path":330,"stem":331,"icon":327},"Review an install","\u002Fbuild\u002Fplugins\u002Finstall\u002Freview","04.build\u002F01.plugins\u002F02.install\u002F01.review",{"title":333,"path":334,"stem":335,"icon":327},"Install from a source","\u002Fbuild\u002Fplugins\u002Finstall\u002Fsources","04.build\u002F01.plugins\u002F02.install\u002F02.sources",{"title":337,"path":338,"stem":339,"icon":327},"Update a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Fupdate","04.build\u002F01.plugins\u002F02.install\u002F03.update",{"title":341,"path":342,"stem":343,"icon":327},"Roll out a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Frollouts","04.build\u002F01.plugins\u002F02.install\u002F04.rollouts",{"title":345,"path":346,"stem":347,"icon":327},"Grant access between plugins","\u002Fbuild\u002Fplugins\u002Finstall\u002Fgrants","04.build\u002F01.plugins\u002F02.install\u002F05.grants",{"title":349,"path":350,"stem":351,"icon":327},"Retire or remove a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Fretire-and-remove","04.build\u002F01.plugins\u002F02.install\u002F06.retire-and-remove",{"title":353,"path":354,"stem":355,"icon":356},"Configure an installed plugin","\u002Fbuild\u002Fplugins\u002Fconfigure","04.build\u002F01.plugins\u002F03.configure","i-ph-sliders-horizontal",{"title":358,"path":359,"stem":360,"icon":361},"Sets","\u002Fbuild\u002Fplugins\u002Fsets","04.build\u002F01.plugins\u002F04.sets","i-ph-stack",{"title":363,"path":364,"stem":365,"icon":366},"Your first plugin","\u002Fbuild\u002Fplugins\u002Ffirst-plugin","04.build\u002F01.plugins\u002F05.first-plugin","i-ph-hammer",{"title":368,"path":369,"stem":370,"children":371,"icon":373},"Structure a plugin","\u002Fbuild\u002Fplugins\u002Fstructure","04.build\u002F01.plugins\u002F06.structure\u002F00.index",[372,374],{"title":368,"path":369,"stem":370,"icon":373},"i-ph-tree-structure",{"title":375,"path":376,"stem":377,"icon":373},"Plugin structure rules","\u002Fbuild\u002Fplugins\u002Fstructure\u002Flint-rules","04.build\u002F01.plugins\u002F06.structure\u002F01.lint-rules",{"title":379,"path":380,"stem":381,"children":382,"icon":384},"Develop a plugin","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test","04.build\u002F01.plugins\u002F07.develop-and-test\u002F00.index",[383,385,389,393],{"title":379,"path":380,"stem":381,"icon":384},"i-ph-flask",{"title":386,"path":387,"stem":388,"icon":384},"Check a plugin candidate","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Fcandidate-checks","04.build\u002F01.plugins\u002F07.develop-and-test\u002F01.candidate-checks",{"title":390,"path":391,"stem":392,"icon":384},"Lint and test a plugin","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Flint-and-tests","04.build\u002F01.plugins\u002F07.develop-and-test\u002F02.lint-and-tests",{"title":394,"path":395,"stem":396,"icon":384},"Run failure drills","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Ftests-and-drills","04.build\u002F01.plugins\u002F07.develop-and-test\u002F03.tests-and-drills",{"title":398,"path":399,"stem":400,"children":401,"icon":403},"Build in Studio","\u002Fbuild\u002Fplugins\u002Fstudio","04.build\u002F01.plugins\u002F08.studio\u002F00.index",[402,404,408],{"title":398,"path":399,"stem":400,"icon":403},"i-ph-code",{"title":405,"path":406,"stem":407,"icon":403},"Test and explain a draft","\u002Fbuild\u002Fplugins\u002Fstudio\u002Ftest-and-explain","04.build\u002F01.plugins\u002F08.studio\u002F01.test-and-explain",{"title":409,"path":410,"stem":411,"icon":403},"Release a workspace plugin","\u002Fbuild\u002Fplugins\u002Fstudio\u002Frelease","04.build\u002F01.plugins\u002F08.studio\u002F02.release",{"title":413,"path":414,"stem":415,"icon":416},"The build kit","\u002Fbuild\u002Fplugins\u002Fclaude-code","04.build\u002F01.plugins\u002F09.claude-code","i-ph-sparkle",{"title":418,"path":419,"stem":420,"icon":421},"Example: support triage","\u002Fbuild\u002Fplugins\u002Fexample-support-triage","04.build\u002F01.plugins\u002F10.example-support-triage","i-ph-lifebuoy",{"title":423,"path":424,"stem":425,"icon":426},"Publish and version","\u002Fbuild\u002Fplugins\u002Fpublish","04.build\u002F01.plugins\u002F11.publish","i-ph-tag",{"title":428,"path":429,"stem":430,"children":431,"icon":433},"List a plugin","\u002Fbuild\u002Fplugins\u002Flist-a-plugin","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F00.index",[432,434,438],{"title":428,"path":429,"stem":430,"icon":433},"i-ph-storefront",{"title":435,"path":436,"stem":437,"icon":433},"Hub review checks","\u002Fbuild\u002Fplugins\u002Flist-a-plugin\u002Freview","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F01.review",{"title":439,"path":440,"stem":441,"icon":433},"Maintain a listing","\u002Fbuild\u002Fplugins\u002Flist-a-plugin\u002Fmaintain","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F02.maintain",{"title":443,"path":444,"stem":445,"icon":446},"The catalog","\u002Fbuild\u002Fplugins\u002Fcatalog","04.build\u002F01.plugins\u002F13.catalog","i-ph-books",{"title":448,"path":449,"stem":450,"icon":451},"Folders, bundles and OCI","\u002Fbuild\u002Fplugins\u002Fsources","04.build\u002F01.plugins\u002F14.sources","i-ph-archive",{"title":453,"path":454,"stem":455,"icon":456},"The workspace","\u002Fbuild\u002Fplugins\u002Fworkspace","04.build\u002F01.plugins\u002F15.workspace","i-ph-folder-notch-open",{"title":458,"path":459,"stem":460,"children":461,"icon":463},"Use a plugin index","\u002Fbuild\u002Fplugins\u002Findexes","04.build\u002F01.plugins\u002F16.indexes\u002F00.index",[462,464,468],{"title":458,"path":459,"stem":460,"icon":463},"i-ph-seal-check",{"title":465,"path":466,"stem":467,"icon":463},"Read index version records","\u002Fbuild\u002Fplugins\u002Findexes\u002Fversion-records","04.build\u002F01.plugins\u002F16.indexes\u002F01.version-records",{"title":469,"path":470,"stem":471,"icon":463},"Manage plugin indexes","\u002Fbuild\u002Fplugins\u002Findexes\u002Fmanage","04.build\u002F01.plugins\u002F16.indexes\u002F02.manage",{"title":473,"path":474,"stem":475,"icon":327},"Existing MCP packages","\u002Fbuild\u002Fplugins\u002Fpackages","04.build\u002F01.plugins\u002F17.packages",{"title":477,"path":478,"stem":479,"icon":480},"MCP servers from container images","\u002Fbuild\u002Fplugins\u002Fcontainer-images","04.build\u002F01.plugins\u002F18.container-images","i-ph-cube",{"title":482,"path":483,"stem":484,"children":485,"icon":487},"Import agent plugins","\u002Fbuild\u002Fplugins\u002Fclaude-code-and-agent-plugins","04.build\u002F01.plugins\u002F19.claude-code-and-agent-plugins\u002F00.index",[486,488],{"title":482,"path":483,"stem":484,"icon":487},"i-ph-arrow-square-in",{"title":489,"path":490,"stem":491,"icon":487},"Import from registries","\u002Fbuild\u002Fplugins\u002Fclaude-code-and-agent-plugins\u002Fmarketplaces","04.build\u002F01.plugins\u002F19.claude-code-and-agent-plugins\u002F01.marketplaces",{"title":493,"path":494,"stem":495,"icon":496},"GitHub","\u002Fbuild\u002Fplugins\u002Fgithub","04.build\u002F01.plugins\u002F20.github","i-ph-github-logo",{"title":498,"path":499,"stem":500,"icon":501},"Known vulnerabilities","\u002Fbuild\u002Fplugins\u002Fvulnerabilities","04.build\u002F01.plugins\u002F21.vulnerabilities","i-ph-shield-warning",{"title":503,"path":504,"stem":505,"children":506,"icon":71},"Verified plugins","\u002Fbuild\u002Fplugins\u002Fverified","04.build\u002F01.plugins\u002F22.verified\u002F01.index",[507,508,513,518,523,528,533,538,543,548,553,558,580,585,589,594,599,604,608,612,617,622,626],{"title":503,"path":504,"stem":505,"icon":463},{"title":509,"path":510,"stem":511,"icon":512},"ai.oz0\u002Fweb","\u002Fbuild\u002Fplugins\u002Fverified\u002Fweb","04.build\u002F01.plugins\u002F22.verified\u002F02.web","i-ph-globe",{"title":514,"path":515,"stem":516,"icon":517},"ai.oz0\u002Fnet-diag","\u002Fbuild\u002Fplugins\u002Fverified\u002Fnet-diag","04.build\u002F01.plugins\u002F22.verified\u002F03.net-diag","i-ph-network",{"title":519,"path":520,"stem":521,"icon":522},"ai.oz0\u002Fcve-triage","\u002Fbuild\u002Fplugins\u002Fverified\u002Fcve-triage","04.build\u002F01.plugins\u002F22.verified\u002F04.cve-triage","i-ph-bug",{"title":524,"path":525,"stem":526,"icon":527},"ai.oz0\u002Fhost-health","\u002Fbuild\u002Fplugins\u002Fverified\u002Fhost-health","04.build\u002F01.plugins\u002F22.verified\u002F05.host-health","i-ph-heartbeat",{"title":529,"path":530,"stem":531,"icon":532},"ai.oz0\u002Fpr-reviewer","\u002Fbuild\u002Fplugins\u002Fverified\u002Fpr-reviewer","04.build\u002F01.plugins\u002F22.verified\u002F06.pr-reviewer","i-ph-git-pull-request",{"title":534,"path":535,"stem":536,"icon":537},"Slack","\u002Fbuild\u002Fplugins\u002Fverified\u002Fslack","04.build\u002F01.plugins\u002F22.verified\u002F07.slack","i-ph-slack-logo",{"title":539,"path":540,"stem":541,"icon":542},"Discord","\u002Fbuild\u002Fplugins\u002Fverified\u002Fdiscord","04.build\u002F01.plugins\u002F22.verified\u002F08.discord","i-ph-discord-logo",{"title":544,"path":545,"stem":546,"icon":547},"Microsoft Teams","\u002Fbuild\u002Fplugins\u002Fverified\u002Fteams","04.build\u002F01.plugins\u002F22.verified\u002F09.teams","i-ph-microsoft-teams-logo",{"title":549,"path":550,"stem":551,"icon":552},"ai.oz0\u002Fai-spend","\u002Fbuild\u002Fplugins\u002Fverified\u002Fai-spend","04.build\u002F01.plugins\u002F22.verified\u002F10.ai-spend","i-ph-coins",{"title":554,"path":555,"stem":556,"icon":557},"ai.oz0\u002Fa2a-remote","\u002Fbuild\u002Fplugins\u002Fverified\u002Fa2a-remote","04.build\u002F01.plugins\u002F22.verified\u002F11.a2a-remote","i-ph-arrows-left-right",{"title":559,"path":560,"stem":561,"children":562,"icon":98},"Guardrails","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F00.index",[563,564,568,572,576],{"title":559,"path":560,"stem":561,"icon":98},{"title":565,"path":566,"stem":567,"icon":98},"Configure guardrails","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fsettings","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F01.settings",{"title":569,"path":570,"stem":571,"icon":98},"Check classified text","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fclassified-text","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F02.classified-text",{"title":573,"path":574,"stem":575,"icon":98},"Check shell commands","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fcommands","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F03.commands",{"title":577,"path":578,"stem":579,"icon":98},"Guardrail coverage and limits","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fintent-and-limits","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F04.intent-and-limits",{"title":581,"path":582,"stem":583,"icon":584},"ai.oz0\u002Fmemory","\u002Fbuild\u002Fplugins\u002Fverified\u002Fmemory","04.build\u002F01.plugins\u002F22.verified\u002F13.memory","i-ph-brain",{"title":586,"path":587,"stem":588,"icon":416},"ai.oz0\u002Fsetup-assistant","\u002Fbuild\u002Fplugins\u002Fverified\u002Fsetup-assistant","04.build\u002F01.plugins\u002F22.verified\u002F14.setup-assistant",{"title":590,"path":591,"stem":592,"icon":593},"ai.oz0\u002Fpublic-access","\u002Fbuild\u002Fplugins\u002Fverified\u002Fpublic-access","04.build\u002F01.plugins\u002F22.verified\u002F15.public-access","i-ph-files",{"title":595,"path":596,"stem":597,"icon":598},"ai.oz0\u002Femail","\u002Fbuild\u002Fplugins\u002Fverified\u002Femail","04.build\u002F01.plugins\u002F22.verified\u002F16.email","i-ph-envelope-simple",{"title":600,"path":601,"stem":602,"icon":603},"Atlassian Cloud","\u002Fbuild\u002Fplugins\u002Fverified\u002Fatlassian","04.build\u002F01.plugins\u002F22.verified\u002F17.atlassian","i-ph-kanban",{"title":605,"path":606,"stem":607,"icon":603},"Atlassian Data Center","\u002Fbuild\u002Fplugins\u002Fverified\u002Fatlassian-dc","04.build\u002F01.plugins\u002F22.verified\u002F18.atlassian-dc",{"title":609,"path":610,"stem":611,"icon":421},"ServiceNow","\u002Fbuild\u002Fplugins\u002Fverified\u002Fservicenow","04.build\u002F01.plugins\u002F22.verified\u002F19.servicenow",{"title":613,"path":614,"stem":615,"icon":616},"GitLab","\u002Fbuild\u002Fplugins\u002Fverified\u002Fgitlab","04.build\u002F01.plugins\u002F22.verified\u002F20.gitlab","i-ph-git-merge",{"title":618,"path":619,"stem":620,"icon":621},"Support triage","\u002Fbuild\u002Fplugins\u002Fverified\u002Fsupport-triage","04.build\u002F01.plugins\u002F22.verified\u002F21.support-triage","i-ph-ticket",{"title":623,"path":624,"stem":625,"icon":361},"Essentials","\u002Fbuild\u002Fplugins\u002Fverified\u002Fessentials","04.build\u002F01.plugins\u002F22.verified\u002F22.essentials",{"title":627,"path":628,"stem":629,"children":630,"icon":532},"Plugin improver","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F00.index",[631,632,636],{"title":627,"path":628,"stem":629,"icon":532},{"title":633,"path":634,"stem":635,"icon":532},"How an improvement runs","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver\u002Fjob-lifecycle","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F01.job-lifecycle",{"title":637,"path":638,"stem":639,"icon":532},"Improver limits and records","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver\u002Flimits-and-records","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F02.limits-and-records",{"title":641,"path":642,"stem":643,"children":644,"icon":646},"Plugin size limits","\u002Fbuild\u002Fplugins\u002Flimits","04.build\u002F01.plugins\u002F23.limits\u002F00.index",[645,647,651],{"title":641,"path":642,"stem":643,"icon":646},"i-ph-ruler",{"title":648,"path":649,"stem":650,"icon":646},"Documentation limits","\u002Fbuild\u002Fplugins\u002Flimits\u002Fdocumentation","04.build\u002F01.plugins\u002F23.limits\u002F01.documentation",{"title":652,"path":653,"stem":654,"icon":646},"Artifact and index limits","\u002Fbuild\u002Fplugins\u002Flimits\u002Fartifacts","04.build\u002F01.plugins\u002F23.limits\u002F02.artifacts",{"title":656,"path":657,"stem":658,"children":659,"icon":71},"Parts","\u002Fbuild\u002Fparts","04.build\u002F02.parts\u002F00.index",[660,662,667,672,690,721,726,730,741,756,761,776,791,814,818,823,828,839],{"title":661,"path":657,"stem":658},"Plugin parts",{"title":663,"path":664,"stem":665,"icon":666},"Agents","\u002Fbuild\u002Fparts\u002Fagents","04.build\u002F02.parts\u002F01.agents","i-ph-robot",{"title":668,"path":669,"stem":670,"icon":671},"What an agent combines","\u002Fbuild\u002Fparts\u002Fwhat-an-agent-combines","04.build\u002F02.parts\u002F02.what-an-agent-combines","i-ph-intersect-three",{"title":673,"path":674,"stem":675,"children":676,"icon":646},"Agent contracts","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F00.index",[677,678,682,686],{"title":673,"path":674,"stem":675,"icon":646},{"title":679,"path":680,"stem":681,"icon":646},"Agent failure kinds","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Ffailures","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F01.failures",{"title":683,"path":684,"stem":685,"icon":646},"Agent limits","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Flimits","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F02.limits",{"title":687,"path":688,"stem":689,"icon":646},"Agent budgets","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Fbudgets","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F03.budgets",{"title":691,"path":692,"stem":693,"children":694,"icon":696},"Write a tool","\u002Fbuild\u002Fparts\u002Ftools","04.build\u002F02.parts\u002F04.tools\u002F00.index",[695,697,701,705,709,713,717],{"title":691,"path":692,"stem":693,"icon":696},"i-ph-wrench",{"title":698,"path":699,"stem":700,"icon":696},"Describe tool functions","\u002Fbuild\u002Fparts\u002Ftools\u002Fdefinitions","04.build\u002F02.parts\u002F04.tools\u002F01.definitions",{"title":702,"path":703,"stem":704,"icon":696},"Return results and files","\u002Fbuild\u002Fparts\u002Ftools\u002Fresults-and-files","04.build\u002F02.parts\u002F04.tools\u002F02.results-and-files",{"title":706,"path":707,"stem":708,"icon":696},"Handle tool call lifecycle","\u002Fbuild\u002Fparts\u002Ftools\u002Fcall-lifecycle","04.build\u002F02.parts\u002F04.tools\u002F03.call-lifecycle",{"title":710,"path":711,"stem":712,"icon":696},"Pin tool definitions","\u002Fbuild\u002Fparts\u002Ftools\u002Fsnapshots","04.build\u002F02.parts\u002F04.tools\u002F04.snapshots",{"title":714,"path":715,"stem":716,"icon":696},"Call a model from a tool","\u002Fbuild\u002Fparts\u002Ftools\u002Fmodel-calls","04.build\u002F02.parts\u002F04.tools\u002F05.model-calls",{"title":718,"path":719,"stem":720,"icon":696},"Tool labels and approvals","\u002Fbuild\u002Fparts\u002Ftools\u002Fpolicy","04.build\u002F02.parts\u002F04.tools\u002F06.policy",{"title":722,"path":723,"stem":724,"icon":725},"TypeScript tools","\u002Fbuild\u002Fparts\u002Ftypescript-tools","04.build\u002F02.parts\u002F05.typescript-tools","i-ph-file-code",{"title":727,"path":728,"stem":729,"icon":725},"Import an OpenAPI document","\u002Fbuild\u002Fparts\u002Fopenapi-import","04.build\u002F02.parts\u002F06.openapi-import",{"title":731,"path":732,"stem":733,"children":734,"icon":736},"Write and load skills","\u002Fbuild\u002Fparts\u002Fskills","04.build\u002F02.parts\u002F07.skills\u002F00.index",[735,737],{"title":731,"path":732,"stem":733,"icon":736},"i-ph-graduation-cap",{"title":738,"path":739,"stem":740,"icon":736},"Review skill use and proposals","\u002Fbuild\u002Fparts\u002Fskills\u002Fusage-and-proposals","04.build\u002F02.parts\u002F07.skills\u002F01.usage-and-proposals",{"title":742,"path":743,"stem":744,"children":745,"icon":747},"Write a flow","\u002Fbuild\u002Fparts\u002Fflows","04.build\u002F02.parts\u002F08.flows\u002F00.index",[746,748,752],{"title":742,"path":743,"stem":744,"icon":747},"i-ph-flow-arrow",{"title":749,"path":750,"stem":751,"icon":747},"Flow steps and expressions","\u002Fbuild\u002Fparts\u002Fflows\u002Fsteps-and-expressions","04.build\u002F02.parts\u002F08.flows\u002F01.steps-and-expressions",{"title":753,"path":754,"stem":755,"icon":747},"Expose and explain flows","\u002Fbuild\u002Fparts\u002Fflows\u002Fflow-tools","04.build\u002F02.parts\u002F08.flows\u002F02.flow-tools",{"title":757,"path":758,"stem":759,"icon":760},"Hooks","\u002Fbuild\u002Fparts\u002Fhooks","04.build\u002F02.parts\u002F09.hooks","i-ph-anchor",{"title":762,"path":763,"stem":764,"children":765,"icon":767},"Declare an event source","\u002Fbuild\u002Fparts\u002Fevent-sources","04.build\u002F02.parts\u002F10.event-sources\u002F00.index",[766,768,772],{"title":762,"path":763,"stem":764,"icon":767},"i-ph-broadcast",{"title":769,"path":770,"stem":771,"icon":767},"Bind and answer deliveries","\u002Fbuild\u002Fparts\u002Fevent-sources\u002Fdelivery-binding","04.build\u002F02.parts\u002F10.event-sources\u002F01.delivery-binding",{"title":773,"path":774,"stem":775,"icon":767},"Use platform events","\u002Fbuild\u002Fparts\u002Fevent-sources\u002Fplatform-events","04.build\u002F02.parts\u002F10.event-sources\u002F02.platform-events",{"title":777,"path":778,"stem":779,"children":780,"icon":782},"Declare a connection","\u002Fbuild\u002Fparts\u002Fconnections","04.build\u002F02.parts\u002F11.connections\u002F00.index",[781,783,787],{"title":777,"path":778,"stem":779,"icon":782},"i-ph-plugs-connected",{"title":784,"path":785,"stem":786,"icon":782},"Connection token lifecycle","\u002Fbuild\u002Fparts\u002Fconnections\u002Ftoken-lifecycle","04.build\u002F02.parts\u002F11.connections\u002F01.token-lifecycle",{"title":788,"path":789,"stem":790,"icon":782},"Connection setup and security","\u002Fbuild\u002Fparts\u002Fconnections\u002Fsetup-and-security","04.build\u002F02.parts\u002F11.connections\u002F02.setup-and-security",{"title":792,"path":793,"stem":794,"children":795,"icon":797},"Choose a harness","\u002Fbuild\u002Fparts\u002Fharnesses","04.build\u002F02.parts\u002F12.harnesses\u002F00.index",[796,798,802,806,810],{"title":792,"path":793,"stem":794,"icon":797},"i-ph-cpu",{"title":799,"path":800,"stem":801,"icon":797},"Harness tool controls","\u002Fbuild\u002Fparts\u002Fharnesses\u002Ftool-controls","04.build\u002F02.parts\u002F12.harnesses\u002F01.tool-controls",{"title":803,"path":804,"stem":805,"icon":797},"Recover a harness session","\u002Fbuild\u002Fparts\u002Fharnesses\u002Frecovery","04.build\u002F02.parts\u002F12.harnesses\u002F02.recovery",{"title":807,"path":808,"stem":809,"icon":797},"Write a harness","\u002Fbuild\u002Fparts\u002Fharnesses\u002Fcustom-harnesses","04.build\u002F02.parts\u002F12.harnesses\u002F03.custom-harnesses",{"title":811,"path":812,"stem":813,"icon":797},"Use an ACP agent","\u002Fbuild\u002Fparts\u002Fharnesses\u002Facp","04.build\u002F02.parts\u002F12.harnesses\u002F04.acp",{"title":815,"path":816,"stem":817,"icon":782},"Bring your own agent","\u002Fbuild\u002Fparts\u002Fbring-your-own-agent","04.build\u002F02.parts\u002F13.bring-your-own-agent",{"title":819,"path":820,"stem":821,"icon":822},"Records and start-up text","\u002Fbuild\u002Fparts\u002Frecords-and-startup","04.build\u002F02.parts\u002F14.records-and-startup","i-ph-database",{"title":824,"path":825,"stem":826,"icon":827},"Addresses","\u002Fbuild\u002Fparts\u002Faddresses","04.build\u002F02.parts\u002F15.addresses","i-ph-signpost",{"title":829,"path":830,"stem":831,"children":832,"icon":834},"Define a routine","\u002Fbuild\u002Fparts\u002Froutines","04.build\u002F02.parts\u002F16.routines\u002F00.index",[833,835],{"title":829,"path":830,"stem":831,"icon":834},"i-ph-clock-clockwise",{"title":836,"path":837,"stem":838,"icon":834},"Routine permissions and outputs","\u002Fbuild\u002Fparts\u002Froutines\u002Foutputs-and-permissions","04.build\u002F02.parts\u002F16.routines\u002F01.outputs-and-permissions",{"title":840,"path":841,"stem":842,"icon":843},"When to split an agent","\u002Fbuild\u002Fparts\u002Fwhen-to-split-an-agent","04.build\u002F02.parts\u002F17.when-to-split-an-agent","i-ph-arrows-split",{"title":845,"path":846,"stem":847,"children":848,"icon":71},"Apps on OZ","\u002Fbuild\u002Fapps","04.build\u002F03.apps\u002F00.index",[849,851,862,867,872,876,880,884,894,908,913,928,942],{"title":850,"path":846,"stem":847},"Applications and clients",{"title":852,"path":853,"stem":854,"children":855,"icon":857},"Use the runtime API","\u002Fbuild\u002Fapps\u002Fruntime-api","04.build\u002F03.apps\u002F01.runtime-api\u002F00.index",[856,858],{"title":852,"path":853,"stem":854,"icon":857},"i-ph-plug",{"title":859,"path":860,"stem":861,"icon":857},"Runtime API authentication","\u002Fbuild\u002Fapps\u002Fruntime-api\u002Fauthentication","04.build\u002F03.apps\u002F01.runtime-api\u002F01.authentication",{"title":863,"path":864,"stem":865,"icon":866},"Python SDK","\u002Fbuild\u002Fapps\u002Fsdk-python","04.build\u002F03.apps\u002F02.sdk-python","i-ph-file-py",{"title":868,"path":869,"stem":870,"icon":871},"TypeScript SDK","\u002Fbuild\u002Fapps\u002Fsdk-typescript","04.build\u002F03.apps\u002F03.sdk-typescript","i-ph-file-ts",{"title":873,"path":874,"stem":875,"icon":725},"Go SDK","\u002Fbuild\u002Fapps\u002Fsdk-go","04.build\u002F03.apps\u002F04.sdk-go",{"title":877,"path":878,"stem":879,"icon":782},"AG-UI for your apps","\u002Fbuild\u002Fapps\u002Fag-ui","04.build\u002F03.apps\u002F05.ag-ui",{"title":881,"path":882,"stem":883,"icon":249},"A chat in your own app","\u002Fbuild\u002Fapps\u002Fchat-app","04.build\u002F03.apps\u002F06.chat-app",{"title":885,"path":886,"stem":887,"children":888,"icon":767},"Follow live jobs","\u002Fbuild\u002Fapps\u002Flive-feeds","04.build\u002F03.apps\u002F07.live-feeds\u002F00.index",[889,890],{"title":885,"path":886,"stem":887,"icon":767},{"title":891,"path":892,"stem":893,"icon":767},"Feed access and browser streams","\u002Fbuild\u002Fapps\u002Flive-feeds\u002Fbrowser-and-access","04.build\u002F03.apps\u002F07.live-feeds\u002F01.browser-and-access",{"title":895,"path":896,"stem":897,"children":898,"icon":782},"Call agents over MCP","\u002Fbuild\u002Fapps\u002Fmcp-server","04.build\u002F03.apps\u002F08.mcp-server\u002F00.index",[899,900,904],{"title":895,"path":896,"stem":897,"icon":782},{"title":901,"path":902,"stem":903,"icon":782},"MCP client OAuth","\u002Fbuild\u002Fapps\u002Fmcp-server\u002Foauth","04.build\u002F03.apps\u002F08.mcp-server\u002F01.oauth",{"title":905,"path":906,"stem":907,"icon":782},"MCP security and limits","\u002Fbuild\u002Fapps\u002Fmcp-server\u002Fsecurity-and-limits","04.build\u002F03.apps\u002F08.mcp-server\u002F02.security-and-limits",{"title":909,"path":910,"stem":911,"icon":912},"A2A agents","\u002Fbuild\u002Fapps\u002Fa2a","04.build\u002F03.apps\u002F09.a2a","i-ph-share-network",{"title":914,"path":915,"stem":916,"children":917,"icon":919},"Run a remote agent","\u002Fbuild\u002Fapps\u002Fremote-agents","04.build\u002F03.apps\u002F10.remote-agents\u002F00.index",[918,920,924],{"title":914,"path":915,"stem":916,"icon":919},"i-ph-cloud-arrow-down",{"title":921,"path":922,"stem":923,"icon":919},"Remote sessions and limits","\u002Fbuild\u002Fapps\u002Fremote-agents\u002Fsessions-and-limits","04.build\u002F03.apps\u002F10.remote-agents\u002F01.sessions-and-limits",{"title":925,"path":926,"stem":927,"icon":919},"Connect an outside A2A agent","\u002Fbuild\u002Fapps\u002Fremote-agents\u002Fa2a","04.build\u002F03.apps\u002F10.remote-agents\u002F02.a2a",{"title":929,"path":930,"stem":931,"children":932,"icon":249},"Connect a chat channel","\u002Fbuild\u002Fapps\u002Fchat-channels","04.build\u002F03.apps\u002F11.chat-channels\u002F00.index",[933,934,938],{"title":929,"path":930,"stem":931,"icon":249},{"title":935,"path":936,"stem":937,"icon":249},"Chat channel conversations","\u002Fbuild\u002Fapps\u002Fchat-channels\u002Fconversations","04.build\u002F03.apps\u002F11.chat-channels\u002F01.conversations",{"title":939,"path":940,"stem":941,"icon":249},"Build a chat channel","\u002Fbuild\u002Fapps\u002Fchat-channels\u002Fbuild","04.build\u002F03.apps\u002F11.chat-channels\u002F02.build",{"title":943,"path":944,"stem":945,"icon":946},"Interop matrix","\u002Fbuild\u002Fapps\u002Finterop","04.build\u002F03.apps\u002F12.interop","i-ph-check-square-offset",{"title":948,"path":949,"stem":950,"children":951,"icon":71},"Improve","\u002Fimprove","05.improve\u002F00.index",[952,953,958,963,968,994,1021,1026,1031,1036],{"title":948,"path":949,"stem":950},{"title":954,"path":955,"stem":956,"icon":957},"Search, compare and fix","\u002Fimprove\u002Fsearch-and-compare","05.improve\u002F01.search-and-compare","i-ph-magnifying-glass",{"title":959,"path":960,"stem":961,"icon":962},"Errors and insights","\u002Fimprove\u002Ferrors-and-insights","05.improve\u002F02.errors-and-insights","i-ph-chart-line",{"title":964,"path":965,"stem":966,"icon":967},"Measured savings","\u002Fimprove\u002Fmeasured-savings","05.improve\u002F03.measured-savings","i-ph-scales",{"title":969,"path":970,"stem":971,"children":972,"icon":463},"Evals and quality gates","\u002Fimprove\u002Fevals","05.improve\u002F04.evals\u002F00.index",[973,974,978,982,986,990],{"title":969,"path":970,"stem":971,"icon":463},{"title":975,"path":976,"stem":977},"Case expectations","\u002Fimprove\u002Fevals\u002Fcases","05.improve\u002F04.evals\u002F01.cases",{"title":979,"path":980,"stem":981},"Record and replay answers","\u002Fimprove\u002Fevals\u002Frecordings","05.improve\u002F04.evals\u002F02.recordings",{"title":983,"path":984,"stem":985},"Check policy paths","\u002Fimprove\u002Fevals\u002Fcoverage","05.improve\u002F04.evals\u002F03.coverage",{"title":987,"path":988,"stem":989},"Gate a plugin update","\u002Fimprove\u002Fevals\u002Fquality-gates","05.improve\u002F04.evals\u002F04.quality-gates",{"title":991,"path":992,"stem":993},"Track quality and regressions","\u002Fimprove\u002Fevals\u002Fregressions","05.improve\u002F04.evals\u002F05.regressions",{"title":995,"path":996,"stem":997,"children":998,"icon":1000},"Outcome checks and patterns","\u002Fimprove\u002Foutcome-checks","05.improve\u002F05.outcome-checks\u002F00.index",[999,1001,1005,1009,1013,1017],{"title":995,"path":996,"stem":997,"icon":1000},"i-ph-gavel",{"title":1002,"path":1003,"stem":1004},"Choose a judge and rubric","\u002Fimprove\u002Foutcome-checks\u002Fjudges","05.improve\u002F05.outcome-checks\u002F01.judges",{"title":1006,"path":1007,"stem":1008},"Measure a judge over time","\u002Fimprove\u002Foutcome-checks\u002Fsampling","05.improve\u002F05.outcome-checks\u002F02.sampling",{"title":1010,"path":1011,"stem":1012},"Use a reviewer agent","\u002Fimprove\u002Foutcome-checks\u002Freviewer","05.improve\u002F05.outcome-checks\u002F03.reviewer",{"title":1014,"path":1015,"stem":1016},"Choose among candidate answers","\u002Fimprove\u002Foutcome-checks\u002Fselection","05.improve\u002F05.outcome-checks\u002F04.selection",{"title":1018,"path":1019,"stem":1020},"Test and roll out judged agents","\u002Fimprove\u002Foutcome-checks\u002Frollouts","05.improve\u002F05.outcome-checks\u002F05.rollouts",{"title":1022,"path":1023,"stem":1024,"icon":1025},"Measured results","\u002Fimprove\u002Fmeasured-results","05.improve\u002F06.measured-results","i-ph-chart-bar",{"title":1027,"path":1028,"stem":1029,"icon":1030},"Comparisons of a changed agent","\u002Fimprove\u002Fcomparisons-of-a-changed-agent","05.improve\u002F07.comparisons-of-a-changed-agent","i-ph-git-diff",{"title":1032,"path":1033,"stem":1034,"icon":1035},"Where a fix belongs","\u002Fimprove\u002Fwhere-a-fix-belongs","05.improve\u002F08.where-a-fix-belongs","i-ph-ladder",{"title":1037,"path":1038,"stem":1039,"icon":957},"Evidence for agents","\u002Fimprove\u002Fevidence-for-agents","05.improve\u002F09.evidence-for-agents",{"title":1041,"path":1042,"stem":1043,"children":1044,"icon":71},"Govern","\u002Fgovern","06.govern\u002F00.index",[1045,1047,1085,1089,1111,1115,1120,1151,1170,1175,1180,1184,1207],{"title":1046,"path":1042,"stem":1043},"Govern agents",{"title":1048,"path":1049,"stem":1050,"children":1051,"icon":98},"Tool policy","\u002Fgovern\u002Ftool-policy","06.govern\u002F01.tool-policy\u002F00.index",[1052,1053,1057,1061,1065,1069,1073,1077,1081],{"title":1048,"path":1049,"stem":1050,"icon":98},{"title":1054,"path":1055,"stem":1056},"Export and apply a tool policy","\u002Fgovern\u002Ftool-policy\u002Ffiles","06.govern\u002F01.tool-policy\u002F02.files",{"title":1058,"path":1059,"stem":1060},"Rules for plugin and remote functions","\u002Fgovern\u002Ftool-policy\u002Fplugin-functions","06.govern\u002F01.tool-policy\u002F03.plugin-functions",{"title":1062,"path":1063,"stem":1064},"Function conditions and action classes","\u002Fgovern\u002Ftool-policy\u002Fconditions","06.govern\u002F01.tool-policy\u002F04.conditions",{"title":1066,"path":1067,"stem":1068},"Rules for taint, origins and sequences","\u002Fgovern\u002Ftool-policy\u002Forigins-and-sequences","06.govern\u002F01.tool-policy\u002F05.origins-and-sequences",{"title":1070,"path":1071,"stem":1072},"How the runtime enforces tool policy","\u002Fgovern\u002Ftool-policy\u002Fruntime","06.govern\u002F01.tool-policy\u002F06.runtime",{"title":1074,"path":1075,"stem":1076},"Preview, review and lint tool policy changes","\u002Fgovern\u002Ftool-policy\u002Freview-changes","06.govern\u002F01.tool-policy\u002F07.review-changes",{"title":1078,"path":1079,"stem":1080},"Assign duties to tool calls","\u002Fgovern\u002Ftool-policy\u002Fduties","06.govern\u002F01.tool-policy\u002F08.duties",{"title":1082,"path":1083,"stem":1084},"Command rules in a tool policy","\u002Fgovern\u002Ftool-policy\u002Fcommand-rules","06.govern\u002F01.tool-policy\u002F09.command-rules",{"title":1086,"path":1087,"stem":1088,"icon":230},"Governance replay","\u002Fgovern\u002Fgovernance-replay","06.govern\u002F02.governance-replay",{"title":1090,"path":1091,"stem":1092,"children":1093,"icon":532},"Reviewed changes","\u002Fgovern\u002Freviewed-changes","06.govern\u002F03.reviewed-changes\u002F00.index",[1094,1095,1099,1103,1107],{"title":1090,"path":1091,"stem":1092,"icon":532},{"title":1096,"path":1097,"stem":1098},"Review assistant and job proposals","\u002Fgovern\u002Freviewed-changes\u002Fproposals","06.govern\u002F03.reviewed-changes\u002F02.proposals",{"title":1100,"path":1101,"stem":1102},"Review plugin configurations","\u002Fgovern\u002Freviewed-changes\u002Fplugin-configurations","06.govern\u002F03.reviewed-changes\u002F03.plugin-configurations",{"title":1104,"path":1105,"stem":1106},"Review and roll back changesets","\u002Fgovern\u002Freviewed-changes\u002Fchangesets","06.govern\u002F03.reviewed-changes\u002F04.changesets",{"title":1108,"path":1109,"stem":1110},"Review changes to protected paths","\u002Fgovern\u002Freviewed-changes\u002Fprotected-paths","06.govern\u002F03.reviewed-changes\u002F05.protected-paths",{"title":1112,"path":1113,"stem":1114,"icon":666},"AI labels","\u002Fgovern\u002Fai-labels","06.govern\u002F04.ai-labels",{"title":1116,"path":1117,"stem":1118,"icon":1119},"Kill switches","\u002Fgovern\u002Fkill-switches","06.govern\u002F05.kill-switches","i-ph-power",{"title":1121,"path":1122,"stem":1123,"children":1124,"icon":1126},"Personal data","\u002Fgovern\u002Fpersonal-data","06.govern\u002F06.personal-data\u002F00.index",[1125,1127,1131,1135,1139,1143,1147],{"title":1121,"path":1122,"stem":1123,"icon":1126},"i-ph-user-minus",{"title":1128,"path":1129,"stem":1130},"Associate people and purposes with jobs","\u002Fgovern\u002Fpersonal-data\u002Fassociate-people","06.govern\u002F06.personal-data\u002F01.associate-people",{"title":1132,"path":1133,"stem":1134},"Find and export personal data","\u002Fgovern\u002Fpersonal-data\u002Fexport","06.govern\u002F06.personal-data\u002F02.export",{"title":1136,"path":1137,"stem":1138},"Restrict processing and record contests","\u002Fgovern\u002Fpersonal-data\u002Frestrictions-and-contests","06.govern\u002F06.personal-data\u002F03.restrictions-and-contests",{"title":1140,"path":1141,"stem":1142},"Erase personal data","\u002Fgovern\u002Fpersonal-data\u002Ferase","06.govern\u002F06.personal-data\u002F04.erase",{"title":1144,"path":1145,"stem":1146},"Retain records and restore backups","\u002Fgovern\u002Fpersonal-data\u002Fretention","06.govern\u002F06.personal-data\u002F05.retention",{"title":1148,"path":1149,"stem":1150},"Personal data held by plugins","\u002Fgovern\u002Fpersonal-data\u002Fplugin-records","06.govern\u002F06.personal-data\u002F06.plugin-records",{"title":1152,"path":1153,"stem":1154,"children":1155,"icon":1157},"Taint and labels","\u002Fgovern\u002Ftaint-and-labels","06.govern\u002F07.taint-and-labels\u002F00.index",[1156,1158,1162,1166],{"title":1152,"path":1153,"stem":1154,"icon":1157},"i-ph-drop-half-bottom",{"title":1159,"path":1160,"stem":1161},"Set rules on taint and labels","\u002Fgovern\u002Ftaint-and-labels\u002Frules","06.govern\u002F07.taint-and-labels\u002F02.rules",{"title":1163,"path":1164,"stem":1165},"Set clearance, egress and content walls","\u002Fgovern\u002Ftaint-and-labels\u002Flabel-policies","06.govern\u002F07.taint-and-labels\u002F03.label-policies",{"title":1167,"path":1168,"stem":1169},"Read outside text in a quarantine child","\u002Fgovern\u002Ftaint-and-labels\u002Fquarantine","06.govern\u002F07.taint-and-labels\u002F04.quarantine",{"title":1171,"path":1172,"stem":1173,"icon":1174},"Works-council mode","\u002Fgovern\u002Fworks-council-mode","06.govern\u002F08.works-council-mode","i-ph-users-three",{"title":1176,"path":1177,"stem":1178,"icon":1179},"Incidents","\u002Fgovern\u002Fincidents","06.govern\u002F09.incidents","i-ph-siren",{"title":1181,"path":1182,"stem":1183,"icon":213},"Inventory","\u002Fgovern\u002Finventory","06.govern\u002F10.inventory",{"title":1185,"path":1186,"stem":1187,"children":1188,"icon":1190},"Audit trail","\u002Fgovern\u002Faudit-trail","06.govern\u002F11.audit-trail\u002F00.index",[1189,1191,1195,1199,1203],{"title":1185,"path":1186,"stem":1187,"icon":1190},"i-ph-scroll",{"title":1192,"path":1193,"stem":1194},"Audit records and run identity","\u002Fgovern\u002Faudit-trail\u002Frecords","06.govern\u002F11.audit-trail\u002F02.records",{"title":1196,"path":1197,"stem":1198},"Verify the audit chain","\u002Fgovern\u002Faudit-trail\u002Fverification","06.govern\u002F11.audit-trail\u002F03.verification",{"title":1200,"path":1201,"stem":1202},"Export and verify evidence bundles","\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles","06.govern\u002F11.audit-trail\u002F04.evidence-bundles",{"title":1204,"path":1205,"stem":1206},"Audit retention, erasure and legal holds","\u002Fgovern\u002Faudit-trail\u002Fretention","06.govern\u002F11.audit-trail\u002F05.retention",{"title":1208,"path":1209,"stem":1210,"children":1211,"icon":1213},"Command rules","\u002Fgovern\u002Fcommand-rules","06.govern\u002F12.command-rules\u002F00.index",[1212,1214,1218,1222,1226],{"title":1208,"path":1209,"stem":1210,"icon":1213},"i-ph-terminal",{"title":1215,"path":1216,"stem":1217},"Command rule patterns","\u002Fgovern\u002Fcommand-rules\u002Fpatterns","06.govern\u002F12.command-rules\u002F02.patterns",{"title":1219,"path":1220,"stem":1221},"What the command reader understands","\u002Fgovern\u002Fcommand-rules\u002Fcommand-reader","06.govern\u002F12.command-rules\u002F03.command-reader",{"title":1223,"path":1224,"stem":1225},"Create a command rule from an approval","\u002Fgovern\u002Fcommand-rules\u002Fallow-from-card","06.govern\u002F12.command-rules\u002F04.allow-from-card",{"title":1227,"path":1228,"stem":1229},"Command rule evaluation and limits","\u002Fgovern\u002Fcommand-rules\u002Fevaluation-and-limits","06.govern\u002F12.command-rules\u002F05.evaluation-and-limits",{"title":1231,"path":1232,"stem":1233,"children":1234,"icon":71},"Fleet","\u002Ffleet","07.fleet\u002F00.index",[1235,1237,1242,1247,1251,1256,1260,1265,1270,1274,1278,1297,1302,1307,1325,1329,1333,1352,1357,1380,1385,1390,1395,1399,1458,1462,1467,1481,1486,1490,1494],{"title":1236,"path":1232,"stem":1233},"Operate a fleet",{"title":1238,"path":1239,"stem":1240,"icon":1241},"Dev mode","\u002Ffleet\u002Fdev-mode","07.fleet\u002F01.dev-mode","i-ph-laptop",{"title":1243,"path":1244,"stem":1245,"icon":1246},"Run a cluster","\u002Ffleet\u002Fcluster","07.fleet\u002F02.cluster","i-ph-hard-drives",{"title":1248,"path":1249,"stem":1250,"icon":782},"Join nodes","\u002Ffleet\u002Fjoin-nodes","07.fleet\u002F03.join-nodes",{"title":1252,"path":1253,"stem":1254,"icon":1255},"Manage nodes","\u002Ffleet\u002Fmanage-nodes","07.fleet\u002F04.manage-nodes","i-ph-list-bullets",{"title":1257,"path":1258,"stem":1259,"icon":527},"Node health","\u002Ffleet\u002Fnodes","07.fleet\u002F05.nodes",{"title":1261,"path":1262,"stem":1263,"icon":1264},"Nodes as services","\u002Ffleet\u002Fservices","07.fleet\u002F06.services","i-ph-gear-six",{"title":1266,"path":1267,"stem":1268,"icon":1269},"Doctor","\u002Ffleet\u002Fdoctor","07.fleet\u002F07.doctor","i-ph-stethoscope",{"title":1271,"path":1272,"stem":1273,"icon":421},"Troubleshooting","\u002Ffleet\u002Ftroubleshooting","07.fleet\u002F08.troubleshooting",{"title":1275,"path":1276,"stem":1277,"icon":962},"Tracing and metrics","\u002Ffleet\u002Fobservability","07.fleet\u002F09.observability",{"title":1279,"path":1280,"stem":1281,"children":1282,"icon":1284},"Choose sandbox tier 2","\u002Ffleet\u002Fsandbox-tier-2","07.fleet\u002F10.sandbox-tier-2\u002F00.index",[1283,1285,1289,1293],{"title":1279,"path":1280,"stem":1281,"icon":1284},"i-ph-shield-chevron",{"title":1286,"path":1287,"stem":1288,"icon":1284},"Set up gVisor","\u002Ffleet\u002Fsandbox-tier-2\u002Fgvisor","07.fleet\u002F10.sandbox-tier-2\u002F01.gvisor",{"title":1290,"path":1291,"stem":1292,"icon":1284},"Set up microVM isolation","\u002Ffleet\u002Fsandbox-tier-2\u002Fmicrovms","07.fleet\u002F10.sandbox-tier-2\u002F02.microvms",{"title":1294,"path":1295,"stem":1296,"icon":1284},"Configure remote sandboxes","\u002Ffleet\u002Fsandbox-tier-2\u002Fremote","07.fleet\u002F10.sandbox-tier-2\u002F03.remote",{"title":1298,"path":1299,"stem":1300,"icon":1301},"Sandbox on macOS","\u002Ffleet\u002Fsandbox-on-macos","07.fleet\u002F11.sandbox-on-macos","i-ph-apple-logo",{"title":1303,"path":1304,"stem":1305,"icon":1306},"Sandbox on Windows","\u002Ffleet\u002Fsandbox-on-windows","07.fleet\u002F12.sandbox-on-windows","i-ph-windows-logo",{"title":1308,"path":1309,"stem":1310,"children":1311,"icon":797},"Configure local models","\u002Ffleet\u002Flocal-models","07.fleet\u002F13.local-models\u002F00.index",[1312,1313,1317,1321],{"title":1308,"path":1309,"stem":1310,"icon":797},{"title":1314,"path":1315,"stem":1316,"icon":797},"Share a local model with the fleet","\u002Ffleet\u002Flocal-models\u002Ffleet","07.fleet\u002F13.local-models\u002F01.fleet",{"title":1318,"path":1319,"stem":1320,"icon":797},"Review local-model safety checks","\u002Ffleet\u002Flocal-models\u002Ftrust","07.fleet\u002F13.local-models\u002F02.trust",{"title":1322,"path":1323,"stem":1324,"icon":797},"Size and price local models","\u002Ffleet\u002Flocal-models\u002Fsizing-and-cost","07.fleet\u002F13.local-models\u002F03.sizing-and-cost",{"title":1326,"path":1327,"stem":1328,"icon":1241},"Agents on a Mac with MLX","\u002Ffleet\u002Flocal-models-on-a-mac","07.fleet\u002F14.local-models-on-a-mac",{"title":1330,"path":1331,"stem":1332,"icon":127},"Queues","\u002Ffleet\u002Fqueues","07.fleet\u002F15.queues",{"title":1334,"path":1335,"stem":1336,"children":1337,"icon":1339},"Choose a Temporal backend","\u002Ffleet\u002Ftemporal-backends","07.fleet\u002F16.temporal-backends\u002F00.index",[1338,1340,1344,1348],{"title":1334,"path":1335,"stem":1336,"icon":1339},"i-ph-cloud",{"title":1341,"path":1342,"stem":1343},"Set retention and move tenants","\u002Ffleet\u002Ftemporal-backends\u002Fretention-and-migration","07.fleet\u002F16.temporal-backends\u002F01.retention-and-migration",{"title":1345,"path":1346,"stem":1347},"Encrypt Temporal payloads","\u002Ffleet\u002Ftemporal-backends\u002Fencryption","07.fleet\u002F16.temporal-backends\u002F02.encryption",{"title":1349,"path":1350,"stem":1351},"Read payloads in Temporal UI","\u002Ffleet\u002Ftemporal-backends\u002Fcodec","07.fleet\u002F16.temporal-backends\u002F03.codec",{"title":1353,"path":1354,"stem":1355,"icon":1356},"Regions","\u002Ffleet\u002Fregions","07.fleet\u002F17.regions","i-ph-globe-hemisphere-east",{"title":1358,"path":1359,"stem":1360,"children":1361,"icon":1363},"Run the roles separately","\u002Ffleet\u002Fseparate-roles","07.fleet\u002F18.separate-roles\u002F00.index",[1362,1364,1368,1372,1376],{"title":1358,"path":1359,"stem":1360,"icon":1363},"i-ph-squares-four",{"title":1365,"path":1366,"stem":1367},"Prepare database rights","\u002Ffleet\u002Fseparate-roles\u002Fdatabase-rights","07.fleet\u002F18.separate-roles\u002F01.database-rights",{"title":1369,"path":1370,"stem":1371},"Keep plaintext secrets on edges","\u002Ffleet\u002Fseparate-roles\u002Fsecrets","07.fleet\u002F18.separate-roles\u002F02.secrets",{"title":1373,"path":1374,"stem":1375},"Operate through role outages","\u002Ffleet\u002Fseparate-roles\u002Foutages","07.fleet\u002F18.separate-roles\u002F03.outages",{"title":1377,"path":1378,"stem":1379},"Use Temporal UI with separate roles","\u002Ffleet\u002Fseparate-roles\u002Ftemporal-ui","07.fleet\u002F18.separate-roles\u002F04.temporal-ui",{"title":1381,"path":1382,"stem":1383,"icon":1384},"High availability","\u002Ffleet\u002Fhigh-availability","07.fleet\u002F19.high-availability","i-ph-copy",{"title":1386,"path":1387,"stem":1388,"icon":1389},"Management over a WAN","\u002Ffleet\u002Fmanagement-over-a-wan","07.fleet\u002F20.management-over-a-wan","i-ph-globe-hemisphere-west",{"title":1391,"path":1392,"stem":1393,"icon":1394},"Cloud federation","\u002Ffleet\u002Fcloud-federation","07.fleet\u002F21.cloud-federation","i-ph-cloud-check",{"title":1396,"path":1397,"stem":1398,"icon":451},"Payload storage","\u002Ffleet\u002Fpayload-storage","07.fleet\u002F22.payload-storage",{"title":1400,"path":1401,"stem":1402,"children":1403,"icon":1405},"Upgrade a cluster","\u002Ffleet\u002Fupgrades","07.fleet\u002F23.upgrades\u002F00.index",[1404,1406,1410,1414,1418,1422,1426,1430,1434,1438,1442,1446,1450,1454],{"title":1400,"path":1401,"stem":1402,"icon":1405},"i-ph-arrows-clockwise",{"title":1407,"path":1408,"stem":1409},"Prepare for sandbox changes","\u002Ffleet\u002Fupgrades\u002Fsandbox-changes","07.fleet\u002F23.upgrades\u002F01.sandbox-changes",{"title":1411,"path":1412,"stem":1413},"Review policy changes","\u002Ffleet\u002Fupgrades\u002Fpolicy-changes","07.fleet\u002F23.upgrades\u002F02.policy-changes",{"title":1415,"path":1416,"stem":1417},"Review data and privacy migrations","\u002Ffleet\u002Fupgrades\u002Fdata-migrations","07.fleet\u002F23.upgrades\u002F03.data-migrations",{"title":1419,"path":1420,"stem":1421},"Prepare storage and identity migrations","\u002Ffleet\u002Fupgrades\u002Fstorage-and-identity","07.fleet\u002F23.upgrades\u002F04.storage-and-identity",{"title":1423,"path":1424,"stem":1425},"Prepare plugins for an upgrade","\u002Ffleet\u002Fupgrades\u002Fplugin-changes","07.fleet\u002F23.upgrades\u002F05.plugin-changes",{"title":1427,"path":1428,"stem":1429},"Keep calls compatible during upgrades","\u002Ffleet\u002Fupgrades\u002Fcall-compatibility","07.fleet\u002F23.upgrades\u002F06.call-compatibility",{"title":1431,"path":1432,"stem":1433},"Review model and budget migrations","\u002Ffleet\u002Fupgrades\u002Fmodel-and-budget-changes","07.fleet\u002F23.upgrades\u002F07.model-and-budget-changes",{"title":1435,"path":1436,"stem":1437},"Migrate to shared worker pools","\u002Ffleet\u002Fupgrades\u002Fshared-pools","07.fleet\u002F23.upgrades\u002F08.shared-pools",{"title":1439,"path":1440,"stem":1441},"Upgrade node binaries and runtimes","\u002Ffleet\u002Fupgrades\u002Fnodes","07.fleet\u002F23.upgrades\u002F09.nodes",{"title":1443,"path":1444,"stem":1445},"Understand runtime shutdown","\u002Ffleet\u002Fupgrades\u002Fruntime-shutdown","07.fleet\u002F23.upgrades\u002F10.runtime-shutdown",{"title":1447,"path":1448,"stem":1449},"Review runtime behaviour changes","\u002Ffleet\u002Fupgrades\u002Fruntime-changes","07.fleet\u002F23.upgrades\u002F11.runtime-changes",{"title":1451,"path":1452,"stem":1453},"Verify releases and switch channels","\u002Ffleet\u002Fupgrades\u002Frelease-verification","07.fleet\u002F23.upgrades\u002F12.release-verification",{"title":1455,"path":1456,"stem":1457},"Roll a runtime out in steps","\u002Ffleet\u002Fupgrades\u002Fruntime-rollouts","07.fleet\u002F23.upgrades\u002F13.runtime-rollouts",{"title":1459,"path":1460,"stem":1461,"icon":463},"Releases","\u002Ffleet\u002Freleases","07.fleet\u002F24.releases",{"title":1463,"path":1464,"stem":1465,"icon":1466},"Docker","\u002Ffleet\u002Fdocker","07.fleet\u002F25.docker","i-ph-shipping-container",{"title":1468,"path":1469,"stem":1470,"children":1471,"icon":480},"Deploy with Kubernetes","\u002Ffleet\u002Fkubernetes","07.fleet\u002F26.kubernetes\u002F00.index",[1472,1473,1477],{"title":1468,"path":1469,"stem":1470,"icon":480},{"title":1474,"path":1475,"stem":1476,"icon":480},"Helm objects and values","\u002Ffleet\u002Fkubernetes\u002Fvalues","07.fleet\u002F26.kubernetes\u002F01.values",{"title":1478,"path":1479,"stem":1480,"icon":480},"Maintain a Kubernetes deployment","\u002Ffleet\u002Fkubernetes\u002Fmaintenance","07.fleet\u002F26.kubernetes\u002F02.maintenance",{"title":1482,"path":1483,"stem":1484,"icon":1485},"Offline install","\u002Ffleet\u002Foffline-install","07.fleet\u002F27.offline-install","i-ph-airplane-tilt",{"title":1487,"path":1488,"stem":1489,"icon":98},"FIPS builds","\u002Ffleet\u002Ffips","07.fleet\u002F28.fips",{"title":1491,"path":1492,"stem":1493,"icon":249},"Run Orchestrator Zero from an MCP client","\u002Ffleet\u002Fmcp-client","07.fleet\u002F29.mcp-client",{"title":1495,"path":1496,"stem":1497,"children":1498,"icon":451},"Back up a cluster","\u002Ffleet\u002Fbackups","07.fleet\u002F30.backups\u002F00.index",[1499,1500],{"title":1495,"path":1496,"stem":1497,"icon":451},{"title":1501,"path":1502,"stem":1503},"Restore a cluster","\u002Ffleet\u002Fbackups\u002Frestore","07.fleet\u002F30.backups\u002F01.restore",{"title":1505,"path":1506,"stem":1507,"children":1508,"icon":71},"Spend","\u002Fspend","08.spend\u002F00.index",[1509,1511,1533,1547,1585],{"title":1510,"path":1506,"stem":1507},"Manage model access and spending",{"title":1512,"path":1513,"stem":1514,"children":1515,"icon":552},"Read cost and usage","\u002Fspend\u002Fcost-and-usage","08.spend\u002F01.cost-and-usage\u002F00.index",[1516,1517,1521,1525,1529],{"title":1512,"path":1513,"stem":1514,"icon":552},{"title":1518,"path":1519,"stem":1520},"Understand recorded charges","\u002Fspend\u002Fcost-and-usage\u002Faccounting","08.spend\u002F01.cost-and-usage\u002F01.accounting",{"title":1522,"path":1523,"stem":1524},"Read model call timings","\u002Fspend\u002Fcost-and-usage\u002Ftimings","08.spend\u002F01.cost-and-usage\u002F02.timings",{"title":1526,"path":1527,"stem":1528},"Export usage","\u002Fspend\u002Fcost-and-usage\u002Fexports","08.spend\u002F01.cost-and-usage\u002F03.exports",{"title":1530,"path":1531,"stem":1532},"Explain prices and cache costs","\u002Fspend\u002Fcost-and-usage\u002Fprices-and-cache","08.spend\u002F01.cost-and-usage\u002F04.prices-and-cache",{"title":1534,"path":1535,"stem":1536,"children":1537,"icon":134},"Set budgets and quotas","\u002Fspend\u002Fbudgets-and-quotas","08.spend\u002F02.budgets-and-quotas\u002F00.index",[1538,1539,1543],{"title":1534,"path":1535,"stem":1536,"icon":134},{"title":1540,"path":1541,"stem":1542,"icon":134},"Understand quota charging and refusals","\u002Fspend\u002Fbudgets-and-quotas\u002Fcharging","08.spend\u002F02.budgets-and-quotas\u002F01.charging",{"title":1544,"path":1545,"stem":1546,"icon":134},"Request and review budget","\u002Fspend\u002Fbudgets-and-quotas\u002Frequests","08.spend\u002F02.budgets-and-quotas\u002F02.requests",{"title":1548,"path":1549,"stem":1550,"children":1551,"icon":416},"Connect a model provider","\u002Fspend\u002Fmodels-and-keys","08.spend\u002F03.models-and-keys\u002F00.index",[1552,1553,1557,1561,1565,1569,1573,1577,1581],{"title":1548,"path":1549,"stem":1550,"icon":416},{"title":1554,"path":1555,"stem":1556},"Choose model aliases","\u002Fspend\u002Fmodels-and-keys\u002Faliases","08.spend\u002F03.models-and-keys\u002F01.aliases",{"title":1558,"path":1559,"stem":1560},"Map a plugin's models","\u002Fspend\u002Fmodels-and-keys\u002Fmapping","08.spend\u002F03.models-and-keys\u002F02.mapping",{"title":1562,"path":1563,"stem":1564},"Set reasoning effort and cascades","\u002Fspend\u002Fmodels-and-keys\u002Feffort-and-cascades","08.spend\u002F03.models-and-keys\u002F03.effort-and-cascades",{"title":1566,"path":1567,"stem":1568},"Authenticate model calls","\u002Fspend\u002Fmodels-and-keys\u002Fauthentication","08.spend\u002F03.models-and-keys\u002F04.authentication",{"title":1570,"path":1571,"stem":1572},"Control what model calls can reach","\u002Fspend\u002Fmodels-and-keys\u002Fdata-rules","08.spend\u002F03.models-and-keys\u002F05.data-rules",{"title":1574,"path":1575,"stem":1576},"Pool model deployments","\u002Fspend\u002Fmodels-and-keys\u002Fdeployment-pools","08.spend\u002F03.models-and-keys\u002F06.deployment-pools",{"title":1578,"path":1579,"stem":1580},"Configure caches and server tools","\u002Fspend\u002Fmodels-and-keys\u002Fcache-and-tools","08.spend\u002F03.models-and-keys\u002F07.cache-and-tools",{"title":1582,"path":1583,"stem":1584},"Check model changes and retirement","\u002Fspend\u002Fmodels-and-keys\u002Fcanaries-and-retirement","08.spend\u002F03.models-and-keys\u002F08.canaries-and-retirement",{"title":1586,"path":1587,"stem":1588,"icon":1589},"Translating providers","\u002Fspend\u002Ftranslating-providers","08.spend\u002F04.translating-providers","i-ph-translate",{"title":1591,"path":1592,"stem":1593,"children":1594,"icon":71},"Admin","\u002Fadmin","09.admin\u002F00.index",[1595,1597,1623,1650,1654,1658,1680,1685,1696],{"title":1596,"path":1592,"stem":1593},"Administer access and credentials",{"title":1598,"path":1599,"stem":1600,"children":1601,"icon":98},"Configure sign-in","\u002Fadmin\u002Fsign-in","09.admin\u002F01.sign-in\u002F00.index",[1602,1603,1607,1611,1615,1619],{"title":1598,"path":1599,"stem":1600,"icon":98},{"title":1604,"path":1605,"stem":1606},"Configure an identity provider","\u002Fadmin\u002Fsign-in\u002Fidentity-providers","09.admin\u002F01.sign-in\u002F01.identity-providers",{"title":1608,"path":1609,"stem":1610},"Provision accounts from a directory","\u002Fadmin\u002Fsign-in\u002Fprovisioning","09.admin\u002F01.sign-in\u002F02.provisioning",{"title":1612,"path":1613,"stem":1614},"Manage passwords and second factors","\u002Fadmin\u002Fsign-in\u002Fpasswords","09.admin\u002F01.sign-in\u002F03.passwords",{"title":1616,"path":1617,"stem":1618},"Sign in from the CLI and MCP clients","\u002Fadmin\u002Fsign-in\u002Fclients","09.admin\u002F01.sign-in\u002F04.clients",{"title":1620,"path":1621,"stem":1622},"End sessions and inspect sign-in events","\u002Fadmin\u002Fsign-in\u002Fsessions","09.admin\u002F01.sign-in\u002F05.sessions",{"title":1624,"path":1625,"stem":1626,"children":1627,"icon":1629},"Manage tenant secrets","\u002Fadmin\u002Fsecrets","09.admin\u002F02.secrets\u002F00.index",[1628,1630,1634,1638,1642,1646],{"title":1624,"path":1625,"stem":1626,"icon":1629},"i-ph-key",{"title":1631,"path":1632,"stem":1633},"Bind secrets to destination hosts","\u002Fadmin\u002Fsecrets\u002Fhost-bindings","09.admin\u002F02.secrets\u002F01.host-bindings",{"title":1635,"path":1636,"stem":1637},"Test and rotate secrets","\u002Fadmin\u002Fsecrets\u002Frotation","09.admin\u002F02.secrets\u002F02.rotation",{"title":1639,"path":1640,"stem":1641},"Use an external secret store","\u002Fadmin\u002Fsecrets\u002Fexternal-stores","09.admin\u002F02.secrets\u002F03.external-stores",{"title":1643,"path":1644,"stem":1645},"Deliver and scan plugin secrets","\u002Fadmin\u002Fsecrets\u002Fplugin-secrets","09.admin\u002F02.secrets\u002F04.plugin-secrets",{"title":1647,"path":1648,"stem":1649},"Configure plugin settings","\u002Fadmin\u002Fsecrets\u002Fsettings","09.admin\u002F02.secrets\u002F05.settings",{"title":1651,"path":1652,"stem":1653,"icon":1629},"Credential injection","\u002Fadmin\u002Fcredential-injection","09.admin\u002F03.credential-injection",{"title":1655,"path":1656,"stem":1657,"icon":1629},"Key commands","\u002Fadmin\u002Fkey-commands","09.admin\u002F04.key-commands",{"title":1659,"path":1660,"stem":1661,"children":1662,"icon":782},"Connect a plugin to another system","\u002Fadmin\u002Fconnections","09.admin\u002F05.connections\u002F00.index",[1663,1664,1668,1672,1676],{"title":1659,"path":1660,"stem":1661,"icon":782},{"title":1665,"path":1666,"stem":1667,"icon":782},"Renew and reconnect credentials","\u002Fadmin\u002Fconnections\u002Frenewal","09.admin\u002F05.connections\u002F01.renewal",{"title":1669,"path":1670,"stem":1671,"icon":782},"Restrict connection destinations","\u002Fadmin\u002Fconnections\u002Fdestinations","09.admin\u002F05.connections\u002F02.destinations",{"title":1673,"path":1674,"stem":1675,"icon":782},"Diagnose connection failures","\u002Fadmin\u002Fconnections\u002Ftroubleshooting","09.admin\u002F05.connections\u002F03.troubleshooting",{"title":1677,"path":1678,"stem":1679,"icon":782},"Understand connection security","\u002Fadmin\u002Fconnections\u002Fsecurity","09.admin\u002F05.connections\u002F04.security",{"title":1681,"path":1682,"stem":1683,"icon":1684},"Tenants","\u002Fadmin\u002Ftenants","09.admin\u002F06.tenants","i-ph-buildings",{"title":1686,"path":1687,"stem":1688,"children":1689,"icon":1691},"Export and verify a tenant","\u002Fadmin\u002Ftenant-export","09.admin\u002F07.tenant-export\u002F00.index",[1690,1692],{"title":1686,"path":1687,"stem":1688,"icon":1691},"i-ph-export",{"title":1693,"path":1694,"stem":1695,"icon":1691},"Tenant export format","\u002Fadmin\u002Ftenant-export\u002Fformat","09.admin\u002F07.tenant-export\u002F01.format",{"title":1697,"path":1698,"stem":1699,"icon":1700},"Notifications","\u002Fadmin\u002Fnotifications","09.admin\u002F08.notifications","i-ph-bell-ringing",{"title":1702,"path":1703,"stem":1704,"children":1705,"icon":71},"Reference","\u002Freference","10.reference\u002F00.index",[1706,1707,1726,1760,1794,1798,1803,1807,1812,1817,1822,1826],{"title":1702,"path":1703,"stem":1704},{"title":1708,"path":1709,"stem":1710,"children":1711,"icon":1725},"CLI","\u002Freference\u002Fcli","10.reference\u002F01.cli\u002F00.index",[1712,1713,1719],{"title":1708,"path":1709,"stem":1710},{"title":1714,"path":1715,"stem":1716,"children":1717},"oz0","\u002Freference\u002Fcli\u002Foz0","10.reference\u002F01.cli\u002F01.oz0\u002F00.index",[1718],{"title":1714,"path":1715,"stem":1716},{"title":1720,"path":1721,"stem":1722,"children":1723},"oz0-node","\u002Freference\u002Fcli\u002Foz0-node","10.reference\u002F01.cli\u002F02.oz0-node\u002F00.index",[1724],{"title":1720,"path":1721,"stem":1722},"i-ph-terminal-window",{"title":1727,"path":1728,"stem":1729,"children":1730,"icon":725},"oz0-plugin.yaml","\u002Freference\u002Fplugin-manifest","10.reference\u002F02.plugin-manifest\u002F00.index",[1731,1732,1736,1740,1744,1748,1752,1756],{"title":1727,"path":1728,"stem":1729,"icon":725},{"title":1733,"path":1734,"stem":1735},"Dependencies and cross-plugin access","\u002Freference\u002Fplugin-manifest\u002Fdependencies","10.reference\u002F02.plugin-manifest\u002F01.dependencies",{"title":1737,"path":1738,"stem":1739},"Tool declarations","\u002Freference\u002Fplugin-manifest\u002Ftools","10.reference\u002F02.plugin-manifest\u002F02.tools",{"title":1741,"path":1742,"stem":1743},"Harnesses, events and channels","\u002Freference\u002Fplugin-manifest\u002Fruntimes","10.reference\u002F02.plugin-manifest\u002F03.runtimes",{"title":1745,"path":1746,"stem":1747},"Connections and hooks","\u002Freference\u002Fplugin-manifest\u002Fconnections","10.reference\u002F02.plugin-manifest\u002F04.connections",{"title":1749,"path":1750,"stem":1751},"Plugin sets and policies","\u002Freference\u002Fplugin-manifest\u002Fsets-policy","10.reference\u002F02.plugin-manifest\u002F05.sets-policy",{"title":1753,"path":1754,"stem":1755},"Data, evidence and mail","\u002Freference\u002Fplugin-manifest\u002Fdata","10.reference\u002F02.plugin-manifest\u002F06.data",{"title":1757,"path":1758,"stem":1759},"Generated OpenAPI manifests","\u002Freference\u002Fplugin-manifest\u002Fopenapi","10.reference\u002F02.plugin-manifest\u002F07.openapi",{"title":1761,"path":1762,"stem":1763,"children":1764,"icon":666},"Agent definition","\u002Freference\u002Fagent-definition","10.reference\u002F03.agent-definition\u002F00.index",[1765,1766,1770,1774,1778,1782,1786,1790],{"title":1761,"path":1762,"stem":1763,"icon":666},{"title":1767,"path":1768,"stem":1769},"Identity, instructions and tools","\u002Freference\u002Fagent-definition\u002Fidentity","10.reference\u002F03.agent-definition\u002F01.identity",{"title":1771,"path":1772,"stem":1773},"Models and placement","\u002Freference\u002Fagent-definition\u002Fmodels","10.reference\u002F03.agent-definition\u002F02.models",{"title":1775,"path":1776,"stem":1777},"Limits and spend","\u002Freference\u002Fagent-definition\u002Flimits","10.reference\u002F03.agent-definition\u002F03.limits",{"title":1779,"path":1780,"stem":1781},"Judges and candidate selection","\u002Freference\u002Fagent-definition\u002Fquality","10.reference\u002F03.agent-definition\u002F04.quality",{"title":1783,"path":1784,"stem":1785},"Delegation and human decisions","\u002Freference\u002Fagent-definition\u002Fcoordination","10.reference\u002F03.agent-definition\u002F05.coordination",{"title":1787,"path":1788,"stem":1789},"History and recovery","\u002Freference\u002Fagent-definition\u002Fhistory","10.reference\u002F03.agent-definition\u002F06.history",{"title":1791,"path":1792,"stem":1793},"Sandbox, data and retention","\u002Freference\u002Fagent-definition\u002Fsecurity","10.reference\u002F03.agent-definition\u002F07.security",{"title":1795,"path":1796,"stem":1797,"icon":517},"Ports","\u002Freference\u002Fports","10.reference\u002F04.ports",{"title":1799,"path":1800,"stem":1801,"icon":1802},"Environment variables","\u002Freference\u002Fenvironment","10.reference\u002F05.environment","i-ph-brackets-curly",{"title":1804,"path":1805,"stem":1806,"icon":373},"Files and directories","\u002Freference\u002Ffiles","10.reference\u002F06.files",{"title":1808,"path":1809,"stem":1810,"icon":1811},"Lists and pages","\u002Freference\u002Flist-pages","10.reference\u002F07.list-pages","i-ph-list-numbers",{"title":1813,"path":1814,"stem":1815,"icon":1816},"Spend refusals","\u002Freference\u002Fspend-refusals","10.reference\u002F08.spend-refusals","i-ph-hand-coins",{"title":1818,"path":1819,"stem":1820,"icon":1821},"Admin API","\u002Freference\u002Fadmin-api","10.reference\u002F09.admin-api","i-ph-repeat",{"title":1823,"path":1824,"stem":1825},"Compatibility","\u002Freference\u002Fcompatibility","10.reference\u002F10.compatibility",{"title":1827,"path":1828,"stem":1829},"Known issues","\u002Freference\u002Fknown-issues","10.reference\u002F11.known-issues",{"title":1831,"path":1832,"stem":1833,"children":1834,"icon":71},"About","\u002Fabout","11.about\u002F00.index",[1835,1836,1840,1845],{"title":1831,"path":1832,"stem":1833},{"title":1837,"path":1838,"stem":1839,"icon":967},"Licensing","\u002Fabout\u002Flicensing","11.about\u002F01.licensing",{"title":1841,"path":1842,"stem":1843,"icon":1844},"About these docs","\u002Fabout\u002Fcontributing-docs","11.about\u002F02.contributing-docs","i-ph-pencil-simple",{"title":1846,"path":1847,"stem":1848,"icon":42},"A local environment","\u002Fabout\u002Flocal-environment","11.about\u002F03.local-environment",{"id":1850,"title":1176,"body":1851,"description":3467,"extension":3468,"links":3469,"meta":3470,"navigation":3473,"path":1177,"seo":3474,"stem":1178,"__hash__":3475},"docs\u002F06.govern\u002F09.incidents.md",{"type":1852,"value":1853,"toc":3455},"minimark",[1854,1858,1866,1875,1880,1978,2081,2095,2099,2102,2119,2128,2131,2226,2237,2263,2330,2335,2414,2828,2856,2880,2884,2898,2905,2921,2925,3135,3142,3146,3184,3191,3195,3243,3263,3277,3285,3294,3297,3307,3317,3321,3336,3340,3451],[1855,1856,1857],"p",{},"For: tenant admins and governance reviewers.",[1855,1859,1860,1861,1865],{},"Create an incident to record an agent's unwanted action and your organisation's response. The record links the jobs and audit entries that show what happened, the kill switch used, the owner, deadlines and actions taken. The ",[1862,1863,1864],"a",{"href":1186},"audit trail"," records every change with its actor and reason, so the record can support a response to an authority under a deadline.",[1867,1868,1869,1870,1874],"note",{},"The clocks are a tool, not legal advice. Which regimes apply to you, what starts each clock and how a month is counted are for your lawyers to say. The built-in regimes below are ",[1871,1872,1873],"strong",{},"defaults to be confirmed","; change them to what your lawyers tell you. A stage marked notified records what you entered in OZ: it does not say that a notification was made, accepted or sufficient.",[1876,1877,1879],"h2",{"id":1878},"open-one","Open one",[1881,1882,1888],"pre",{"className":1883,"code":1884,"filename":1885,"language":1886,"meta":1887,"style":1887},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","oz0 incident open --title \"Upload to a paste site\" --severity high \\\n  --regime gdpr --regime nis2 --aware-at 2026-10-12T08:30:00Z \\\n  --owner team:security --job job-9eae… --reason \"egress denial on a support agent's job\"\n","Terminal","bash","",[1889,1890,1891,1929,1952],"code",{"__ignoreMap":1887},[1892,1893,1896,1899,1903,1906,1909,1913,1916,1919,1922,1925],"span",{"class":1894,"line":1895},"line",1,[1892,1897,1714],{"class":1898},"sBMFI",[1892,1900,1902],{"class":1901},"sfazB"," incident",[1892,1904,1905],{"class":1901}," open",[1892,1907,1908],{"class":1901}," --title",[1892,1910,1912],{"class":1911},"sMK4o"," \"",[1892,1914,1915],{"class":1901},"Upload to a paste site",[1892,1917,1918],{"class":1911},"\"",[1892,1920,1921],{"class":1901}," --severity",[1892,1923,1924],{"class":1901}," high",[1892,1926,1928],{"class":1927},"sTEyZ"," \\\n",[1892,1930,1932,1935,1938,1941,1944,1947,1950],{"class":1894,"line":1931},2,[1892,1933,1934],{"class":1901},"  --regime",[1892,1936,1937],{"class":1901}," gdpr",[1892,1939,1940],{"class":1901}," --regime",[1892,1942,1943],{"class":1901}," nis2",[1892,1945,1946],{"class":1901}," --aware-at",[1892,1948,1949],{"class":1901}," 2026-10-12T08:30:00Z",[1892,1951,1928],{"class":1927},[1892,1953,1955,1958,1961,1964,1967,1970,1972,1975],{"class":1894,"line":1954},3,[1892,1956,1957],{"class":1901},"  --owner",[1892,1959,1960],{"class":1901}," team:security",[1892,1962,1963],{"class":1901}," --job",[1892,1965,1966],{"class":1901}," job-9eae…",[1892,1968,1969],{"class":1901}," --reason",[1892,1971,1912],{"class":1911},[1892,1973,1974],{"class":1901},"egress denial on a support agent's job",[1892,1976,1977],{"class":1911},"\"\n",[1979,1980,1981,1994],"table",{},[1982,1983,1984],"thead",{},[1985,1986,1987,1991],"tr",{},[1988,1989,1990],"th",{},"Field",[1988,1992,1993],{},"What it is",[1995,1996,1997,2006,2028,2039,2054,2066],"tbody",{},[1985,1998,1999,2003],{},[2000,2001,2002],"td",{},"Title",[2000,2004,2005],{},"One line, at most 200 characters. Keep personal data out of it; notes are for details",[1985,2007,2008,2011],{},[2000,2009,2010],{},"Severity",[2000,2012,2013,2014,2017,2018,2017,2021,2017,2024,2027],{},"One of your tenant's severities (",[1889,2015,2016],{},"low",", ",[1889,2019,2020],{},"medium",[1889,2022,2023],{},"high",[1889,2025,2026],{},"critical"," unless you set others)",[1985,2029,2030,2033],{},[2000,2031,2032],{},"Regimes",[2000,2034,2035,2036],{},"The regimes you say apply; add or remove them later with ",[1889,2037,2038],{},"oz0 incident clock",[1985,2040,2041,2044],{},[2000,2042,2043],{},"Aware",[2000,2045,2046,2047,2050,2051],{},"When you became aware of it (default now). ",[1889,2048,2049],{},"--aware-at"," takes RFC 3339 or how long ago, such as ",[1889,2052,2053],{},"2h",[1985,2055,2056,2059],{},[2000,2057,2058],{},"Classified",[2000,2060,2061,2062,2065],{},"When it was classified, for regimes that count from classification (",[1889,2063,2064],{},"--classified-at",")",[1985,2067,2068,2071],{},[2000,2069,2070],{},"Owner",[2000,2072,2073,2076,2077,2080],{},[1889,2074,2075],{},"person:\u003Caccount>"," or ",[1889,2078,2079],{},"team:\u003Cname>"," of the tenant: who is reminded besides the tenant's admins",[1855,2082,2083,2084,2017,2087,2089,2090,2094],{},"In the console, ",[2085,2086,1041],"em",{},[2085,2088,1176],{}," lists those opened in the ",[1862,2091,2093],{"href":2092},"\u002Fgetting-started\u002Fweb-ui\u002Fnavigation#periods-filters-and-pages","period"," you pick (the last 30 days unless you pick another, so an older incident that is still open shows with a longer period), filtered by state, with their next deadline, and opens each record, which you can print from the browser.",[1876,2096,2098],{"id":2097},"clocks","Clocks",[1855,2100,2101],{},"Each regime that applies has stages, and each stage a deadline: its span after what it counts from. The record shows each one with the time left:",[1881,2103,2105],{"className":1883,"code":2104,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident show inc-01a1300e-53f3-7dbc-bf41-c7f700105376\n",[1889,2106,2107],{"__ignoreMap":1887},[1892,2108,2109,2111,2113,2116],{"class":1894,"line":1895},[1892,2110,1714],{"class":1898},[1892,2112,1902],{"class":1901},[1892,2114,2115],{"class":1901}," show",[1892,2117,2118],{"class":1901}," inc-01a1300e-53f3-7dbc-bf41-c7f700105376\n",[1881,2120,2126],{"className":2121,"code":2123,"filename":2124,"language":2125,"meta":1887},[2122],"language-text","REGIME                         STAGE                 COUNTS FROM  DEADLINE          STATE\ngdpr (to be confirmed)   notification (72h)    awareness    2026-10-15 10:30  70h 12m left\nnis2 (to be confirmed)   early_warning (24h)   awareness    2026-10-13 10:30  22h 12m left\ndora (to be confirmed)   initial (4h)          classification  -              waiting for classification\n","Output","text",[1889,2127,2123],{"__ignoreMap":1887},[1855,2129,2130],{},"The built-in regimes, as data your tenant can change:",[1979,2132,2133,2146],{},[1982,2134,2135],{},[1985,2136,2137,2140,2143],{},[1988,2138,2139],{},"Regime",[1988,2141,2142],{},"Stages",[1988,2144,2145],{},"Counts from",[1995,2147,2148,2165,2188,2210],{},[1985,2149,2150,2156,2162],{},[2000,2151,2152,2155],{},[1889,2153,2154],{},"gdpr"," (GDPR Art. 33)",[2000,2157,2158,2161],{},[1889,2159,2160],{},"notification"," 72 hours",[2000,2163,2164],{},"awareness",[1985,2166,2167,2173,2186],{},[2000,2168,2169,2172],{},[1889,2170,2171],{},"nis2"," (NIS2 Art. 23)",[2000,2174,2175,2178,2179,2181,2182,2185],{},[1889,2176,2177],{},"early_warning"," 24 hours, ",[1889,2180,2160],{}," 72 hours, ",[1889,2183,2184],{},"final_report"," 1 month",[2000,2187,2164],{},[1985,2189,2190,2196,2207],{},[2000,2191,2192,2195],{},[1889,2193,2194],{},"dora"," (DORA Art. 19)",[2000,2197,2198,2201,2202,2181,2205,2185],{},[1889,2199,2200],{},"initial"," 4 hours, ",[1889,2203,2204],{},"intermediate",[1889,2206,2184],{},[2000,2208,2209],{},"classification",[1985,2211,2212,2218,2224],{},[2000,2213,2214,2217],{},[1889,2215,2216],{},"ai_act_73"," (AI Act Art. 73)",[2000,2219,2220,2223],{},[1889,2221,2222],{},"report"," 15 days",[2000,2225,2164],{},[1855,2227,2228,2229,2232,2233,2236],{},"Every one is marked ",[2085,2230,2231],{},"to be confirmed",". A month is a calendar month in UTC. A stage may also count from when an earlier stage of its regime was marked notified (",[1889,2234,2235],{},"\"from\": \"stage:notification\"","), if that is how your lawyers read it.",[1855,2238,2239,2240,2243,2244,2017,2247,2250,2251,2254,2255,2258,2259,2262],{},"A clock is ",[2085,2241,2242],{},"waiting"," while what it counts from is unknown, ",[2085,2245,2246],{},"running",[2085,2248,2249],{},"due soon"," in the last quarter of its window, ",[2085,2252,2253],{},"missed"," after its deadline, and ",[2085,2256,2257],{},"marked"," (or ",[2085,2260,2261],{},"marked late",") once someone marks the stage:",[1881,2264,2266],{"className":1883,"code":2265,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident notify inc-01a1… gdpr notification --reference \"IMY-2026-17\" --reason \"sent through the authority's form\"\noz0 incident notify inc-01a1… gdpr notification --undo --reason \"entered by mistake\"\n",[1889,2267,2268,2304],{"__ignoreMap":1887},[1892,2269,2270,2272,2274,2277,2280,2282,2285,2288,2290,2293,2295,2297,2299,2302],{"class":1894,"line":1895},[1892,2271,1714],{"class":1898},[1892,2273,1902],{"class":1901},[1892,2275,2276],{"class":1901}," notify",[1892,2278,2279],{"class":1901}," inc-01a1…",[1892,2281,1937],{"class":1901},[1892,2283,2284],{"class":1901}," notification",[1892,2286,2287],{"class":1901}," --reference",[1892,2289,1912],{"class":1911},[1892,2291,2292],{"class":1901},"IMY-2026-17",[1892,2294,1918],{"class":1911},[1892,2296,1969],{"class":1901},[1892,2298,1912],{"class":1911},[1892,2300,2301],{"class":1901},"sent through the authority's form",[1892,2303,1977],{"class":1911},[1892,2305,2306,2308,2310,2312,2314,2316,2318,2321,2323,2325,2328],{"class":1894,"line":1931},[1892,2307,1714],{"class":1898},[1892,2309,1902],{"class":1901},[1892,2311,2276],{"class":1901},[1892,2313,2279],{"class":1901},[1892,2315,1937],{"class":1901},[1892,2317,2284],{"class":1901},[1892,2319,2320],{"class":1901}," --undo",[1892,2322,1969],{"class":1901},[1892,2324,1912],{"class":1911},[1892,2326,2327],{"class":1901},"entered by mistake",[1892,2329,1977],{"class":1911},[2331,2332,2334],"h3",{"id":2333},"your-own-regimes","Your own regimes",[1881,2336,2338],{"className":1883,"code":2337,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident regimes                      # what applies now\noz0 incident regimes --json > regimes.json\noz0 incident regimes --file regimes.json --reason \"per our DPO, case 2026\u002F41\"\noz0 incident regimes --defaults --reason \"back to the built-in ones\"\n",[1889,2339,2340,2353,2370,2393],{"__ignoreMap":1887},[1892,2341,2342,2344,2346,2349],{"class":1894,"line":1895},[1892,2343,1714],{"class":1898},[1892,2345,1902],{"class":1901},[1892,2347,2348],{"class":1901}," regimes",[1892,2350,2352],{"class":2351},"sHwdD","                      # what applies now\n",[1892,2354,2355,2357,2359,2361,2364,2367],{"class":1894,"line":1931},[1892,2356,1714],{"class":1898},[1892,2358,1902],{"class":1901},[1892,2360,2348],{"class":1901},[1892,2362,2363],{"class":1901}," --json",[1892,2365,2366],{"class":1911}," >",[1892,2368,2369],{"class":1901}," regimes.json\n",[1892,2371,2372,2374,2376,2378,2381,2384,2386,2388,2391],{"class":1894,"line":1954},[1892,2373,1714],{"class":1898},[1892,2375,1902],{"class":1901},[1892,2377,2348],{"class":1901},[1892,2379,2380],{"class":1901}," --file",[1892,2382,2383],{"class":1901}," regimes.json",[1892,2385,1969],{"class":1901},[1892,2387,1912],{"class":1911},[1892,2389,2390],{"class":1901},"per our DPO, case 2026\u002F41",[1892,2392,1977],{"class":1911},[1892,2394,2396,2398,2400,2402,2405,2407,2409,2412],{"class":1894,"line":2395},4,[1892,2397,1714],{"class":1898},[1892,2399,1902],{"class":1901},[1892,2401,2348],{"class":1901},[1892,2403,2404],{"class":1901}," --defaults",[1892,2406,1969],{"class":1901},[1892,2408,1912],{"class":1911},[1892,2410,2411],{"class":1901},"back to the built-in ones",[1892,2413,1977],{"class":1911},[1881,2415,2420],{"className":2416,"code":2417,"filename":2418,"language":2419,"meta":1887,"style":1887},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n  \"regimes\": [\n    {\"name\": \"gdpr\", \"label\": \"GDPR Art. 33\", \"basis\": \"awareness\", \"stages\": [{\"name\": \"notification\", \"after\": \"72h\"}]},\n    {\"name\": \"sector\", \"label\": \"Our sector's rule\", \"basis\": \"classification\",\n     \"stages\": [{\"name\": \"first\", \"after\": \"24h\"}, {\"name\": \"final\", \"after\": \"1mo\", \"from\": \"stage:first\"}]}\n  ],\n  \"severities\": [\"low\", \"medium\", \"high\", \"critical\"],\n  \"remind_before\": [\"24h\", \"4h\", \"1h\"],\n  \"classify_within\": \"24h\"\n}\n","regimes.json","json",[1889,2421,2422,2427,2444,2550,2605,2710,2716,2764,2804,2822],{"__ignoreMap":1887},[1892,2423,2424],{"class":1894,"line":1895},[1892,2425,2426],{"class":1911},"{\n",[1892,2428,2429,2432,2436,2438,2441],{"class":1894,"line":1931},[1892,2430,2431],{"class":1911},"  \"",[1892,2433,2435],{"class":2434},"spNyl","regimes",[1892,2437,1918],{"class":1911},[1892,2439,2440],{"class":1911},":",[1892,2442,2443],{"class":1911}," [\n",[1892,2445,2446,2449,2451,2454,2456,2458,2460,2462,2464,2467,2469,2472,2474,2476,2478,2481,2483,2485,2487,2490,2492,2494,2496,2498,2500,2502,2504,2507,2509,2511,2514,2516,2519,2521,2523,2525,2527,2529,2531,2533,2536,2538,2540,2542,2545,2547],{"class":1894,"line":1954},[1892,2447,2448],{"class":1911},"    {",[1892,2450,1918],{"class":1911},[1892,2452,2453],{"class":1898},"name",[1892,2455,1918],{"class":1911},[1892,2457,2440],{"class":1911},[1892,2459,1912],{"class":1911},[1892,2461,2154],{"class":1901},[1892,2463,1918],{"class":1911},[1892,2465,2466],{"class":1911},",",[1892,2468,1912],{"class":1911},[1892,2470,2471],{"class":1898},"label",[1892,2473,1918],{"class":1911},[1892,2475,2440],{"class":1911},[1892,2477,1912],{"class":1911},[1892,2479,2480],{"class":1901},"GDPR Art. 33",[1892,2482,1918],{"class":1911},[1892,2484,2466],{"class":1911},[1892,2486,1912],{"class":1911},[1892,2488,2489],{"class":1898},"basis",[1892,2491,1918],{"class":1911},[1892,2493,2440],{"class":1911},[1892,2495,1912],{"class":1911},[1892,2497,2164],{"class":1901},[1892,2499,1918],{"class":1911},[1892,2501,2466],{"class":1911},[1892,2503,1912],{"class":1911},[1892,2505,2506],{"class":1898},"stages",[1892,2508,1918],{"class":1911},[1892,2510,2440],{"class":1911},[1892,2512,2513],{"class":1911}," [{",[1892,2515,1918],{"class":1911},[1892,2517,2453],{"class":2518},"sbssI",[1892,2520,1918],{"class":1911},[1892,2522,2440],{"class":1911},[1892,2524,1912],{"class":1911},[1892,2526,2160],{"class":1901},[1892,2528,1918],{"class":1911},[1892,2530,2466],{"class":1911},[1892,2532,1912],{"class":1911},[1892,2534,2535],{"class":2518},"after",[1892,2537,1918],{"class":1911},[1892,2539,2440],{"class":1911},[1892,2541,1912],{"class":1911},[1892,2543,2544],{"class":1901},"72h",[1892,2546,1918],{"class":1911},[1892,2548,2549],{"class":1911},"}]},\n",[1892,2551,2552,2554,2556,2558,2560,2562,2564,2567,2569,2571,2573,2575,2577,2579,2581,2584,2586,2588,2590,2592,2594,2596,2598,2600,2602],{"class":1894,"line":2395},[1892,2553,2448],{"class":1911},[1892,2555,1918],{"class":1911},[1892,2557,2453],{"class":1898},[1892,2559,1918],{"class":1911},[1892,2561,2440],{"class":1911},[1892,2563,1912],{"class":1911},[1892,2565,2566],{"class":1901},"sector",[1892,2568,1918],{"class":1911},[1892,2570,2466],{"class":1911},[1892,2572,1912],{"class":1911},[1892,2574,2471],{"class":1898},[1892,2576,1918],{"class":1911},[1892,2578,2440],{"class":1911},[1892,2580,1912],{"class":1911},[1892,2582,2583],{"class":1901},"Our sector's rule",[1892,2585,1918],{"class":1911},[1892,2587,2466],{"class":1911},[1892,2589,1912],{"class":1911},[1892,2591,2489],{"class":1898},[1892,2593,1918],{"class":1911},[1892,2595,2440],{"class":1911},[1892,2597,1912],{"class":1911},[1892,2599,2209],{"class":1901},[1892,2601,1918],{"class":1911},[1892,2603,2604],{"class":1911},",\n",[1892,2606,2608,2611,2613,2615,2617,2619,2621,2623,2625,2627,2629,2632,2634,2636,2638,2640,2642,2644,2646,2649,2651,2654,2657,2659,2661,2663,2665,2667,2670,2672,2674,2676,2678,2680,2682,2684,2687,2689,2691,2693,2696,2698,2700,2702,2705,2707],{"class":1894,"line":2607},5,[1892,2609,2610],{"class":1911},"     \"",[1892,2612,2506],{"class":1898},[1892,2614,1918],{"class":1911},[1892,2616,2440],{"class":1911},[1892,2618,2513],{"class":1911},[1892,2620,1918],{"class":1911},[1892,2622,2453],{"class":2518},[1892,2624,1918],{"class":1911},[1892,2626,2440],{"class":1911},[1892,2628,1912],{"class":1911},[1892,2630,2631],{"class":1901},"first",[1892,2633,1918],{"class":1911},[1892,2635,2466],{"class":1911},[1892,2637,1912],{"class":1911},[1892,2639,2535],{"class":2518},[1892,2641,1918],{"class":1911},[1892,2643,2440],{"class":1911},[1892,2645,1912],{"class":1911},[1892,2647,2648],{"class":1901},"24h",[1892,2650,1918],{"class":1911},[1892,2652,2653],{"class":1911},"},",[1892,2655,2656],{"class":1911}," {",[1892,2658,1918],{"class":1911},[1892,2660,2453],{"class":2518},[1892,2662,1918],{"class":1911},[1892,2664,2440],{"class":1911},[1892,2666,1912],{"class":1911},[1892,2668,2669],{"class":1901},"final",[1892,2671,1918],{"class":1911},[1892,2673,2466],{"class":1911},[1892,2675,1912],{"class":1911},[1892,2677,2535],{"class":2518},[1892,2679,1918],{"class":1911},[1892,2681,2440],{"class":1911},[1892,2683,1912],{"class":1911},[1892,2685,2686],{"class":1901},"1mo",[1892,2688,1918],{"class":1911},[1892,2690,2466],{"class":1911},[1892,2692,1912],{"class":1911},[1892,2694,2695],{"class":2518},"from",[1892,2697,1918],{"class":1911},[1892,2699,2440],{"class":1911},[1892,2701,1912],{"class":1911},[1892,2703,2704],{"class":1901},"stage:first",[1892,2706,1918],{"class":1911},[1892,2708,2709],{"class":1911},"}]}\n",[1892,2711,2713],{"class":1894,"line":2712},6,[1892,2714,2715],{"class":1911},"  ],\n",[1892,2717,2719,2721,2724,2726,2728,2731,2733,2735,2737,2739,2741,2743,2745,2747,2749,2751,2753,2755,2757,2759,2761],{"class":1894,"line":2718},7,[1892,2720,2431],{"class":1911},[1892,2722,2723],{"class":2434},"severities",[1892,2725,1918],{"class":1911},[1892,2727,2440],{"class":1911},[1892,2729,2730],{"class":1911}," [",[1892,2732,1918],{"class":1911},[1892,2734,2016],{"class":1901},[1892,2736,1918],{"class":1911},[1892,2738,2466],{"class":1911},[1892,2740,1912],{"class":1911},[1892,2742,2020],{"class":1901},[1892,2744,1918],{"class":1911},[1892,2746,2466],{"class":1911},[1892,2748,1912],{"class":1911},[1892,2750,2023],{"class":1901},[1892,2752,1918],{"class":1911},[1892,2754,2466],{"class":1911},[1892,2756,1912],{"class":1911},[1892,2758,2026],{"class":1901},[1892,2760,1918],{"class":1911},[1892,2762,2763],{"class":1911},"],\n",[1892,2765,2767,2769,2772,2774,2776,2778,2780,2782,2784,2786,2788,2791,2793,2795,2797,2800,2802],{"class":1894,"line":2766},8,[1892,2768,2431],{"class":1911},[1892,2770,2771],{"class":2434},"remind_before",[1892,2773,1918],{"class":1911},[1892,2775,2440],{"class":1911},[1892,2777,2730],{"class":1911},[1892,2779,1918],{"class":1911},[1892,2781,2648],{"class":1901},[1892,2783,1918],{"class":1911},[1892,2785,2466],{"class":1911},[1892,2787,1912],{"class":1911},[1892,2789,2790],{"class":1901},"4h",[1892,2792,1918],{"class":1911},[1892,2794,2466],{"class":1911},[1892,2796,1912],{"class":1911},[1892,2798,2799],{"class":1901},"1h",[1892,2801,1918],{"class":1911},[1892,2803,2763],{"class":1911},[1892,2805,2807,2809,2812,2814,2816,2818,2820],{"class":1894,"line":2806},9,[1892,2808,2431],{"class":1911},[1892,2810,2811],{"class":2434},"classify_within",[1892,2813,1918],{"class":1911},[1892,2815,2440],{"class":1911},[1892,2817,1912],{"class":1911},[1892,2819,2648],{"class":1901},[1892,2821,1977],{"class":1911},[1892,2823,2825],{"class":1894,"line":2824},10,[1892,2826,2827],{"class":1911},"}\n",[1855,2829,2830,2831,2017,2834,2017,2837,2076,2840,2843,2844,2848,2849,2852,2853,2855],{},"Spans are a whole number and ",[1889,2832,2833],{},"m",[1889,2835,2836],{},"h",[1889,2838,2839],{},"d",[1889,2841,2842],{},"mo",", from one minute to twelve months; at most 16 regimes of 8 stages each. Your regimes are a ",[1862,2845,2847],{"href":2846},"\u002Fgovern\u002Freviewed-changes#four-eyes-for-governance-changes","governance setting"," (",[1889,2850,2851],{},"incident_regimes","): removing a regime or a stage, giving a stage longer, counting from a later moment, dropping a reminder, or dropping or lengthening ",[1889,2854,2811],{}," loosens it, so it takes a reason and, with four eyes on, a second admin. An open incident keeps the regimes it was given; editing the defaults never moves its deadlines.",[1855,2857,2858,2859,2861,2862,2865,2866,2868,2869,2872,2873,2876,2877,2879],{},"A regime that counts from classification, such as ",[1889,2860,2194],{},", waits until someone records when the incident was classified (",[1889,2863,2864],{},"oz0 incident clock inc-01a1… --classified-at now --reason \"...\"","). So that a forgotten classification does not stay silent, ",[1889,2867,2811],{}," (24 hours by default; leave it out to turn the warning off) is how long an open incident may wait unclassified after awareness before ",[1889,2870,2871],{},"oz0 doctor"," warns in its ",[1889,2874,2875],{},"incident classification"," row. It is a prompt your tenant sets, not a legal deadline: whether such a regime also has a limit counted from awareness is a question for your lawyers (",[2085,2878,2231],{},").",[1876,2881,2883],{"id":2882},"reminders","Reminders",[1855,2885,2886,2887,2889,2890,2893,2894,2897],{},"Before each deadline of a stage not yet marked, the incident's owner (the person, or the team's members) and the tenant's admins are reminded by email, at each of the tenant's ",[1889,2888,2771],{}," points that falls inside the stage's window (24 hours, 4 hours and 1 hour before, by default) and once more when the deadline passes. Only the latest point that is due is sent, so an incident recorded late gets one reminder, not a burst. ",[1862,2891,2892],{"href":1698},"Notification rules"," that name the event ",[1889,2895,2896],{},"incident.deadline"," reach their webhooks and chat channels too.",[1855,2899,2900,2901,2904],{},"Reminders go out through the email relay and webhooks your operators and admins already configured; nothing new leaves the cluster. A reminder carries the incident's ID, title, severity, the regime and stage, the deadline and the time left; no figure about people. Each one is in the audit trail as ",[1889,2902,2903],{},"incident.reminder"," with how many deliveries it made.",[1855,2906,2907,2909,2910,2913,2914,2917,2918,2920],{},[1889,2908,2871],{}," fails its ",[1889,2911,2912],{},"incident_deadline_missed"," row while a deadline has passed unmarked, warns in ",[1889,2915,2916],{},"incident deadlines"," while one is near, and warns in ",[1889,2919,2875],{}," about an incident left unclassified (above). These rows are computed from the open incidents each time; nothing needs to be resolved by hand.",[1876,2922,2924],{"id":2923},"links","Links",[1881,2926,2928],{"className":1883,"code":2927,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident link inc-01a1… job job-9eae…                       # the job is tagged incident:\u003Cid>\noz0 incident link inc-01a1… egress --job job-9eae…               # every egress denial of the job\noz0 incident link inc-01a1… egress seq:166                       # one, by its audit entry\noz0 incident link inc-01a1… kill kill-01a1000c-299b-…            # a kill switch\noz0 incident link inc-01a1… receipt rcpt-01a1…                   # a kill or revocation receipt\noz0 incident link inc-01a1… audit --since 2026-10-12T08:00:00Z --until 2026-10-12T10:00:00Z\noz0 incident link inc-01a1… audit --from-seq 120 --to-seq 180\noz0 incident link inc-01a1… finding f-7c1d…                      # an eval finding\noz0 incident link inc-01a1… incident inc-01a0…                   # a related incident\noz0 incident unlink inc-01a1… job job-9eae… --reason \"wrong job\"\n",[1889,2929,2930,2949,2969,2987,3006,3025,3050,3074,3093,3111],{"__ignoreMap":1887},[1892,2931,2932,2934,2936,2939,2941,2944,2946],{"class":1894,"line":1895},[1892,2933,1714],{"class":1898},[1892,2935,1902],{"class":1901},[1892,2937,2938],{"class":1901}," link",[1892,2940,2279],{"class":1901},[1892,2942,2943],{"class":1901}," job",[1892,2945,1966],{"class":1901},[1892,2947,2948],{"class":2351},"                       # the job is tagged incident:\u003Cid>\n",[1892,2950,2951,2953,2955,2957,2959,2962,2964,2966],{"class":1894,"line":1931},[1892,2952,1714],{"class":1898},[1892,2954,1902],{"class":1901},[1892,2956,2938],{"class":1901},[1892,2958,2279],{"class":1901},[1892,2960,2961],{"class":1901}," egress",[1892,2963,1963],{"class":1901},[1892,2965,1966],{"class":1901},[1892,2967,2968],{"class":2351},"               # every egress denial of the job\n",[1892,2970,2971,2973,2975,2977,2979,2981,2984],{"class":1894,"line":1954},[1892,2972,1714],{"class":1898},[1892,2974,1902],{"class":1901},[1892,2976,2938],{"class":1901},[1892,2978,2279],{"class":1901},[1892,2980,2961],{"class":1901},[1892,2982,2983],{"class":1901}," seq:166",[1892,2985,2986],{"class":2351},"                       # one, by its audit entry\n",[1892,2988,2989,2991,2993,2995,2997,3000,3003],{"class":1894,"line":2395},[1892,2990,1714],{"class":1898},[1892,2992,1902],{"class":1901},[1892,2994,2938],{"class":1901},[1892,2996,2279],{"class":1901},[1892,2998,2999],{"class":1901}," kill",[1892,3001,3002],{"class":1901}," kill-01a1000c-299b-…",[1892,3004,3005],{"class":2351},"            # a kill switch\n",[1892,3007,3008,3010,3012,3014,3016,3019,3022],{"class":1894,"line":2607},[1892,3009,1714],{"class":1898},[1892,3011,1902],{"class":1901},[1892,3013,2938],{"class":1901},[1892,3015,2279],{"class":1901},[1892,3017,3018],{"class":1901}," receipt",[1892,3020,3021],{"class":1901}," rcpt-01a1…",[1892,3023,3024],{"class":2351},"                   # a kill or revocation receipt\n",[1892,3026,3027,3029,3031,3033,3035,3038,3041,3044,3047],{"class":1894,"line":2712},[1892,3028,1714],{"class":1898},[1892,3030,1902],{"class":1901},[1892,3032,2938],{"class":1901},[1892,3034,2279],{"class":1901},[1892,3036,3037],{"class":1901}," audit",[1892,3039,3040],{"class":1901}," --since",[1892,3042,3043],{"class":1901}," 2026-10-12T08:00:00Z",[1892,3045,3046],{"class":1901}," --until",[1892,3048,3049],{"class":1901}," 2026-10-12T10:00:00Z\n",[1892,3051,3052,3054,3056,3058,3060,3062,3065,3068,3071],{"class":1894,"line":2718},[1892,3053,1714],{"class":1898},[1892,3055,1902],{"class":1901},[1892,3057,2938],{"class":1901},[1892,3059,2279],{"class":1901},[1892,3061,3037],{"class":1901},[1892,3063,3064],{"class":1901}," --from-seq",[1892,3066,3067],{"class":2518}," 120",[1892,3069,3070],{"class":1901}," --to-seq",[1892,3072,3073],{"class":2518}," 180\n",[1892,3075,3076,3078,3080,3082,3084,3087,3090],{"class":1894,"line":2766},[1892,3077,1714],{"class":1898},[1892,3079,1902],{"class":1901},[1892,3081,2938],{"class":1901},[1892,3083,2279],{"class":1901},[1892,3085,3086],{"class":1901}," finding",[1892,3088,3089],{"class":1901}," f-7c1d…",[1892,3091,3092],{"class":2351},"                      # an eval finding\n",[1892,3094,3095,3097,3099,3101,3103,3105,3108],{"class":1894,"line":2806},[1892,3096,1714],{"class":1898},[1892,3098,1902],{"class":1901},[1892,3100,2938],{"class":1901},[1892,3102,2279],{"class":1901},[1892,3104,1902],{"class":1901},[1892,3106,3107],{"class":1901}," inc-01a0…",[1892,3109,3110],{"class":2351},"                   # a related incident\n",[1892,3112,3113,3115,3117,3120,3122,3124,3126,3128,3130,3133],{"class":1894,"line":2824},[1892,3114,1714],{"class":1898},[1892,3116,1902],{"class":1901},[1892,3118,3119],{"class":1901}," unlink",[1892,3121,2279],{"class":1901},[1892,3123,2943],{"class":1901},[1892,3125,1966],{"class":1901},[1892,3127,1969],{"class":1901},[1892,3129,1912],{"class":1911},[1892,3131,3132],{"class":1901},"wrong job",[1892,3134,1977],{"class":1911},[1855,3136,3137,3138,3141],{},"Each item is checked in the incident's tenant when you link it and keeps its own time and a one-line summary for the timeline. An audit range holds at most 50,000 entries; egress denials by job or time at most 100 at once; an incident at most 500 links. Every link and unlink takes a reason. ",[1889,3139,3140],{},"oz0 job search tag:incident:\u003Cid>"," finds the linked jobs.",[1876,3143,3145],{"id":3144},"notes","Notes",[1881,3147,3149],{"className":1883,"code":3148,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident note inc-01a1… \"Customer informed by phone at 10:05.\"\noz0 incident note inc-01a1… --file notes.txt\n",[1889,3150,3151,3169],{"__ignoreMap":1887},[1892,3152,3153,3155,3157,3160,3162,3164,3167],{"class":1894,"line":1895},[1892,3154,1714],{"class":1898},[1892,3156,1902],{"class":1901},[1892,3158,3159],{"class":1901}," note",[1892,3161,2279],{"class":1901},[1892,3163,1912],{"class":1911},[1892,3165,3166],{"class":1901},"Customer informed by phone at 10:05.",[1892,3168,1977],{"class":1911},[1892,3170,3171,3173,3175,3177,3179,3181],{"class":1894,"line":1931},[1892,3172,1714],{"class":1898},[1892,3174,1902],{"class":1901},[1892,3176,3159],{"class":1901},[1892,3178,2279],{"class":1901},[1892,3180,2380],{"class":1901},[1892,3182,3183],{"class":1901}," notes.txt\n",[1855,3185,3186,3187,3190],{},"Notes are free text, at most 8 KiB each and 200 per incident. They are content: only people with the ",[1862,3188,3189],{"href":1682},"content permission"," read them, in the record and in the export. A note's audit entry names its ID and length, never its text.",[1876,3192,3194],{"id":3193},"the-timeline-export","The timeline export",[1881,3196,3198],{"className":1883,"code":3197,"filename":1885,"language":1886,"meta":1887,"style":1887},"oz0 incident export inc-01a1… --out timeline.json --html timeline.html\noz0 incident verify timeline.json --key 1d06721c68a4f066…    # the fingerprint oz0 audit key prints\n",[1889,3199,3200,3223],{"__ignoreMap":1887},[1892,3201,3202,3204,3206,3209,3211,3214,3217,3220],{"class":1894,"line":1895},[1892,3203,1714],{"class":1898},[1892,3205,1902],{"class":1901},[1892,3207,3208],{"class":1901}," export",[1892,3210,2279],{"class":1901},[1892,3212,3213],{"class":1901}," --out",[1892,3215,3216],{"class":1901}," timeline.json",[1892,3218,3219],{"class":1901}," --html",[1892,3221,3222],{"class":1901}," timeline.html\n",[1892,3224,3225,3227,3229,3232,3234,3237,3240],{"class":1894,"line":1931},[1892,3226,1714],{"class":1898},[1892,3228,1902],{"class":1901},[1892,3230,3231],{"class":1901}," verify",[1892,3233,3216],{"class":1901},[1892,3235,3236],{"class":1901}," --key",[1892,3238,3239],{"class":1901}," 1d06721c68a4f066…",[1892,3241,3242],{"class":2351},"    # the fingerprint oz0 audit key prints\n",[1855,3244,3245,3246,3250,3251,3254,3255,3258,3259,3262],{},"A timeline exported without the content permission holds ",[1862,3247,3249],{"href":3248},"\u002Fgovern\u002Faudit-trail\u002Frecords#what-a-job-read-or-wrote","blinded entries",", which only its signature covers, so ",[1889,3252,3253],{},"incident verify"," fails on it without ",[1889,3256,3257],{},"--key"," unless ",[1889,3260,3261],{},"--unpinned"," says that showing the file is whole is enough.",[1855,3264,3265,3268,3269,3272,3273,3276],{},[1889,3266,3267],{},"timeline.json"," (format ",[1889,3270,3271],{},"oz0-incident-timeline\u002F1",") holds the record, its clocks at the export, every link with its time and summary, the notes (with the content permission), a timeline of everything in time order (the incident's own audit entries, which carry their ",[1889,3274,3275],{},"seq",", keep their chain's order: one whose writer's clock had stepped back shows its own time and still follows the entry before it), and the audit entries of its linked ranges, its own entries and each linked item's entries, as whole pieces of the tenant's hash chain.",[1855,3278,3279,3280,3284],{},"A checkpoint signed with the ",[1862,3281,3283],{"href":3282},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#the-audit-key-and-the-gateway-keys","audit key"," names each piece's first link and last entry, the chain's head, and the SHA-256 of the rest of the document.",[1855,3286,3287,3290,3291,3293],{},[1889,3288,3289],{},"oz0 incident verify"," checks all of it without the cluster: the signature (pinned with ",[1889,3292,3257],{},"), that nothing in the document changed, and every entry's hashes and links.",[1855,3295,3296],{},"Without the content permission an entry's private part is left out and its hash kept, so the export still verifies.",[1855,3298,3299,3302,3303,3306],{},[1889,3300,3301],{},"timeline.html"," is one printable page made from the same document; print it from your browser. It is a rendering, not the evidence: hand over the JSON with it. There is no regulator template in it; the export is the input to whatever form your authority asks for. Each export is in the audit trail as ",[1889,3304,3305],{},"incident.export",".",[1855,3308,3309,3310,3313,3314,3306],{},"The incident's records travel with the tenant's other tables in the tenant export (",[1889,3311,3312],{},"oz0 tenant export","); their notes only with ",[1889,3315,3316],{},"--content",[1876,3318,3320],{"id":3319},"who-may","Who may",[1855,3322,3323,3324,3327,3328,3331,3332,3335],{},"The tenant's admins open, change, link, mark, close and export incidents, and so do operator certificates, which act as cluster admins on every admin API. Once roles are data, reading takes ",[1889,3325,3326],{},"incidents.read"," (the auditor and the privacy officer have it) and changing ",[1889,3329,3330],{},"incidents.manage"," (the privacy officer has it); changing the regimes takes ",[1889,3333,3334],{},"governance.write",". Nodes, apps' API keys, scoped keys and other tenants' people are refused.",[1876,3337,3339],{"id":3338},"audit-actions","Audit actions",[1979,3341,3342,3352],{},[1982,3343,3344],{},[1985,3345,3346,3349],{},[1988,3347,3348],{},"Action",[1988,3350,3351],{},"What it records",[1995,3353,3354,3364,3377,3390,3400,3410,3423,3432,3441],{},[1985,3355,3356,3361],{},[2000,3357,3358],{},[1889,3359,3360],{},"incident.open",[2000,3362,3363],{},"the title's length, severity, regimes, moments, owner and reason; the title itself in the entry's private part",[1985,3365,3366,3371],{},[2000,3367,3368],{},[1889,3369,3370],{},"incident.update",[2000,3372,3373,3374,3376],{},"what changed (severity, owner, awareness, classification, regimes; a new title as for ",[1889,3375,3360],{},") and why",[1985,3378,3379,3387],{},[2000,3380,3381,2017,3384],{},[1889,3382,3383],{},"incident.link",[1889,3385,3386],{},"incident.unlink",[2000,3388,3389],{},"the kind and references, and why",[1985,3391,3392,3397],{},[2000,3393,3394],{},[1889,3395,3396],{},"incident.notified",[2000,3398,3399],{},"a stage marked (when, reference) or taken back, and why",[1985,3401,3402,3407],{},[2000,3403,3404],{},[1889,3405,3406],{},"incident.note",[2000,3408,3409],{},"a note's ID and length",[1985,3411,3412,3420],{},[2000,3413,3414,2017,3417],{},[1889,3415,3416],{},"incident.close",[1889,3418,3419],{},"incident.reopen",[2000,3421,3422],{},"why",[1985,3424,3425,3429],{},[2000,3426,3427],{},[1889,3428,2903],{},[2000,3430,3431],{},"a reminder sent by the edge: the stage, its deadline, the phase and how many deliveries",[1985,3433,3434,3438],{},[2000,3435,3436],{},[1889,3437,3305],{},[2000,3439,3440],{},"a timeline exported, and whether with content",[1985,3442,3443,3448],{},[2000,3444,3445],{},[1889,3446,3447],{},"tenant.incident_regimes",[2000,3449,3450],{},"the tenant's regimes changed",[3452,3453,3454],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}",{"title":1887,"searchDepth":1931,"depth":1931,"links":3456},[3457,3458,3461,3462,3463,3464,3465,3466],{"id":1878,"depth":1931,"text":1879},{"id":2097,"depth":1931,"text":2098,"children":3459},[3460],{"id":2333,"depth":1954,"text":2334},{"id":2882,"depth":1931,"text":2883},{"id":2923,"depth":1931,"text":2924},{"id":3144,"depth":1931,"text":3145},{"id":3193,"depth":1931,"text":3194},{"id":3319,"depth":1931,"text":3320},{"id":3338,"depth":1931,"text":3339},"Keep one record of an incident, with the jobs, audit entries, kill switches and egress denials that tell what happened, deadline clocks for the regimes you say apply, reminders before each deadline, and a timeline that verifies offline.","md",null,{"audience":3471,"doc_type":3472},"tenant admins and governance reviewers","how-to",{"icon":1179},{"title":1176,"description":3467},"q6k-DGmmN8_hYJNm6apEG2JdaC7NIGyxvDx0DL4Asuw",[3477,3479],{"title":1171,"path":1172,"stem":1173,"description":3478,"icon":1174,"children":-1},"Usage and cost figures about people only for teams of five or more, a person's own figures to that person, and tenant totals otherwise. On by default.",{"title":1181,"path":1182,"stem":1183,"description":3480,"icon":213,"children":-1},"Every agent and tool with its owner team and person, purpose, risk class, models and their regions, the data it handles, where its data goes, its DPIA and FRIA fields, a report export, and retired items.",1794442946865]