{
  "schemaVersion": 1,
  "observedDate": "2026-10-25",
  "result": "hosted-preflight-pass-delegated-sign-in-blocked",
  "standingDeploymentAuthorizationUsed": true,
  "intendedAdministratorAndTenantIndependentlyVerified": true,
  "unavailableQuestionCountedAsApproval": false,
  "newOwnedResources": {
    "resourceGroups": 1,
    "linuxAppServicePlans": 1,
    "pythonWebApps": 1,
    "singleTenantAppRegistrations": 2,
    "servicePrincipals": 2,
    "storageAccounts": 0,
    "foundryOrModelDeployments": 0
  },
  "hosting": {
    "running": true,
    "region": "swedencentral",
    "sku": "B1 Linux",
    "runtime": "PYTHON|3.13",
    "httpsOnly": true,
    "minimumTlsVersion": "1.2",
    "ftpDisabled": true,
    "scmAndFtpBasicPublishingDisabled": true,
    "completeEntraSettingsReadBack": true,
    "managedIdentityCredentialExplicitlyConfigured": true,
    "newManagedIdentityRoles": 1,
    "outboundRole": "Cognitive Services OpenAI User",
    "outboundRoleScope": "Existing Foundry account only",
    "outboundManagedIdentityRetrievalVerified": false,
    "noBearerHttpStatus": 401,
    "invalidBearerHttpStatus": 401,
    "protectedResourceDiscoveryHttpStatus": 200,
    "discoveredResourceAndTenantMatch": true,
    "discoveredDelegatedScope": "Evidence.Read"
  },
  "package": {
    "sha256": "ce44a623056aed448c2414f66230e19b6c193c4b030b8f495d3c7f77e932d362",
    "allowlistIndependentlyVerified": true,
    "sourceFiles": 5,
    "dependencyManifests": 2,
    "environmentCredentialCacheOrTestFilesIncluded": false,
    "rootRequirementsReferenceDistinctBaseManifest": true
  },
  "connector": {
    "createdThroughOfficialPac": true,
    "displayName": "Workshop Verified adecc89a",
    "actualNativeMcpCatalogEntryVisible": true,
    "streamableProtocol": "mcp-streamable-1.0",
    "dedicatedDelegatedApiScope": "Evidence.Read",
    "graphPermissionsRequested": [],
    "generatedUniqueCallbackIndependentlyReadBack": true,
    "callbackRegisteredOnOwnedClientAndReadBack": true,
    "localCredentialStorage": "Current-user Windows DPAPI",
    "credentialLifetimeDays": 7,
    "secretProvidedThroughAccessRestrictedTransientInput": true,
    "transientSecretInputAndRawDownloadedPropertiesRemoved": true,
    "rawCredentialPrintedOrCommitted": false,
    "userConsentGrantsObserved": 0,
    "tenantWideConsentGranted": false,
    "usableDelegatedConnectionVerified": false,
    "candidateBindingCreated": false
  },
  "authenticationBoundary": {
    "nativeConsentPopupBlockedByIntegratedBrowser": true,
    "standardNewTabAuthorizationCodeWithPkceAttempted": true,
    "intendedAdministratorPasswordPromptObserved": true,
    "humanResponse": "Unavailable",
    "genuineEntraBearerSuccessVerified": false,
    "oauthCodeOrTokensPersisted": false,
    "boundedLoopbackHelperStopped": true,
    "loopbackPortVerifiedClosed": true,
    "temporaryLoopbackRedirectRemoved": true,
    "actualConnectorCallbackPreserved": true,
    "laterNormalDismissClickTimedOut": true,
    "forcedDomActions": 0
  },
  "preservation": {
    "protectedRetrieverFullDefinitionExactlyUnchanged": true,
    "currentHostedVersion": "5",
    "currentHostedDefinitionExactlyUnchanged": true,
    "currentHostedPrincipalAndClientIdsUnchanged": true,
    "additionalIdentityReadbackField": "status",
    "wholeIdentityObjectEqualityClaimed": false,
    "freshNativeReceipt": "mcp-hosted-native-preservation.json",
    "originalParentAnd26CompleteRowsUnchanged": true,
    "candidateComponentCount": 28,
    "candidateAuthoringFilesBindingsAndStatesUnchanged": true,
    "azurePolicyOrStorageNetworkingChanges": 0,
    "publicationPerformed": false
  },
  "retainedFailures": [
    "A local atomic-receipt lock interrupted identity setup; exact owned client lookup recovered the created application without duplicate registration.",
    "The first PAC connector title exceeded its 30-character limit; a corrected 26-character title then created one connector.",
    "Strict whole-identity-object comparison found an added status field; independent comparison verifies unchanged version-5 definition, principal ID and client ID.",
    "The consent popup was blocked; normal new-tab authorization reached a password prompt, not a successful OAuth callback."
  ],
  "billing": {
    "publishedComputeRetailUsdPerHour": 0.018,
    "retailUnit": "1 Hour",
    "priceSource": "Azure Retail Prices API, Sweden Central Linux Basic B1",
    "actualBillOrTotalCopilotCreditsEstablished": false,
    "retainedHostRemainsBillable": true,
    "numericalBudgetProvided": false,
    "retentionOwnerAndReviewDateProvided": false
  },
  "paidMcpToolCalls": 0,
  "newNativeQuestionsSubmitted": 0,
  "nativeBroadSarWholeOutputFidelityRepaired": false,
  "fullElevenCaseNativeMatrixPassed": false,
  "completedRoadmapTasks": [],
  "wholeRoadmapComplete": false
}