{
  "schemaVersion": 1,
  "observedAt": "2026-08-06T11:47:00Z",
  "allFeaturesValidated": false,
  "clientAccessRecommendation": "controlled-pilot",
  "summary": "Core, Temporal, Cloudflare, Docker, Kubernetes, database, and exact-package Azure Databricks paths have current evidence. Several optional provider suites were unconfigured in the latest protected run, and the separate Databricks rolling claim is not established.",
  "sourceRuns": {
    "ci": {
      "id": 31075955448,
      "status": "passed",
      "url": "https://github.com/Fabric-Pro/fabric-harness/actions/runs/31075955448"
    },
    "liveIntegrations": {
      "id": 31078933221,
      "status": "passed-with-unconfigured-suites",
      "url": "https://github.com/Fabric-Pro/fabric-harness/actions/runs/31078933221"
    },
    "databricksRolling": {
      "id": 31098509447,
      "status": "not-established",
      "url": "https://github.com/Fabric-Pro/fabric-harness/actions/runs/31098509447"
    }
  },
  "capabilities": [
    {
      "name": "Core SDK, CLI, Node, and package consumption",
      "status": "contract-verified",
      "evidence": "Type, runtime, package, example, build, release, and clean-consumer gates passed on Node 20 and 22.",
      "clientGuidance": "Supported for a scoped pilot with explicit authentication, durable stores, limits, and monitoring."
    },
    {
      "name": "Temporal",
      "status": "deployment-conformance",
      "evidence": "Temporal service integration, worker restart, replay, and HTTP black-box conformance passed.",
      "clientGuidance": "Repeat namespace authentication, worker replacement, and real-model tests in the customer environment."
    },
    {
      "name": "Cloudflare",
      "status": "deployment-conformance",
      "evidence": "Credentialed Worker, Sandbox, restart, Shell Workspace, and deployment conformance checks passed.",
      "clientGuidance": "Re-run with the customer's bindings, account policy, storage, and egress configuration."
    },
    {
      "name": "Docker and Kubernetes sandboxes",
      "status": "provider-verified",
      "evidence": "Container and Kind-backed shell, lifecycle, cancellation, timeout, portable reference, and cleanup contracts passed.",
      "clientGuidance": "Pin images and validate resource, network, namespace, and reclamation policy in the deployment cluster."
    },
    {
      "name": "Postgres, Redis, MySQL, MongoDB, and libSQL",
      "status": "provider-verified",
      "evidence": "Service-backed persistence, concurrency, cascade, restart, scheduler, and database bundle contracts passed.",
      "clientGuidance": "Run load, backup, restore, retention, and tenant-isolation tests against the selected managed service."
    },
    {
      "name": "Databricks 7.0.2 on Azure eastus2",
      "status": "live-certified",
      "evidence": "Exact package Tier R 21/21 and same-package Tier A 10/10 passed with one two-user isolation run.",
      "clientGuidance": "Use the exact package and repeat target-workspace preflight, denial, identity, restart, and cleanup tests."
    },
    {
      "name": "Databricks 14-day rolling first-class claim",
      "status": "not-established",
      "evidence": "The latest rolling gate reports missing daily Tier R, new dynamic-agent, App-isolation binding, and cross-tier evidence.",
      "clientGuidance": "Do not describe the single exact-package record as a continuous multi-week claim."
    },
    {
      "name": "E2B, Daytona, Modal, and Vercel sandboxes",
      "status": "unconfigured",
      "evidence": "Adapter contracts build, but credentialed provider steps were skipped in the latest protected run.",
      "clientGuidance": "Run and retain the nine-check provider certification before including one in a supported client profile."
    },
    {
      "name": "Channels",
      "status": "unconfigured",
      "evidence": "The latest channels job completed with all 17 credentialed tests skipped.",
      "clientGuidance": "Certify only the selected channel's signature, identity, retry, deduplication, and governed-reply path."
    },
    {
      "name": "Direct model provider presets",
      "status": "unconfigured",
      "evidence": "The latest direct-provider job completed with all 13 credentialed tests skipped.",
      "clientGuidance": "Run the selected provider's real request, streaming, cancellation, error, usage, and redaction smoke."
    },
    {
      "name": "Remote MCP transport",
      "status": "unconfigured",
      "evidence": "The two-server credentialed transport smoke was not configured in the latest protected run.",
      "clientGuidance": "Validate authentication, discovery, allowlists, effects, timeout, and cancellation for the chosen servers."
    },
    {
      "name": "Azure and Foundry hosted targets",
      "status": "target-validation-required",
      "evidence": "Typed contracts and opt-in diagnostics exist; no current retained deployment record is linked here.",
      "clientGuidance": "Validate tenant identity, RBAC, regional availability, networking, deployment, and cleanup before client use."
    }
  ]
}