Cargando…
Cargando…
Cargando…
Operation maintains posture, executes eligible remediation, and requires read-back before reporting proof. General purchase remains closed while readiness is blocked; only an exact authorized buyer-and-completed-Audit-scoped pilot may initiate an idempotent API purchase.
PUBLISHED CAPABILITY
The library contains 201 rules; the public Audit reports how many produced a verdict for that tenant and separates those requiring review.
The catalog has 188 playbooks: 97 verified bindings and 104 guidance routes that are not presented as certified execution.
The report orders findings by severity and preserves the result in a PDF that can be shared with the technical team.
21 Microsoft Graph executors can mutate the tenant under required approval; guided, advisory, and monitoring remain separate.
Payment and a submitted change are not proof: proven requires a real mutation, successful read-back, and finding resolution.
PUBLISHED BOUNDARIES
The read-only scan, posture calculation, and email delivery remain available at no cost.
Production rejects payment unless readiness is approved or an explicit pilot matches both the buyer and completed Audit.
A Microsoft policy authority retains consent and remediations follow its approval policy. The buying agent never receives Global Administrator credentials.
Yes. The free Audit is the live deliverable: read-only connection, measured result, prioritized findings, and an emailed Posture Brief.
Not as a general purchase while the state is authorized_pilot_only. An expressly authorized pilot may buy through the API after a completed Audit bound to the same buyer and current terms acceptance.
No. Public consent is read-only. The Audit measures configuration and directory metadata; it does not read email bodies or files, and it does not execute fixes.
Yes, through POST /api/v1/commerce/purchases with an Idempotency-Key, a completed buyer-bound Audit, and current terms acceptance. The endpoint returns next actions or fails closed before payment.
The free Audit remains available, with no card and no required call.