Live-Read Canary Control Room
Execution rehearsal and control plane. No real provider execution.
LIVE ACTION BLOCKEDPARKED GATEEXECUTION REHEARSAL ONLYNOT LIVE ACTIVATED
Selected first canary
Microsoft 365 / Entra ID
Recommended First Canary. High compliance impact for SOC 2 IAM controls. Robust read-only graph API scoping.
Required Scopes: User.Read.All, Directory.Read.All, Policy.Read.All, DeviceManagementConfiguration.Read.All
Alternate candidates: Google Workspace, GitHub
Owner approvals still required
- Scope Review Approval
- Read-Only Credentials Setup
- Tenant Admin Consent
- First Canary Execution Approval
OWNER ACTION REQUIRED
Abort criteria
- API request timeout > 5000ms
- Provider returns HTTP 403 or 401
- Response payload > 10MB
- Unexpected data classes detected
HUMAN REVIEW REQUIRED
What will be read later
Expected evidence output format: JSON structure matching standardized identity schema.
evidence persistence is simulated
real database persistence remains PARKED GATE
future DB writes require explicit owner approval
no current live-read canary writes to DB
no current provider read is executed
What will never be written
ZERO WRITE CONTRACT ACTIVE: No HTTP POST, PUT, PATCH, or DELETE requests allowed.
Execution rehearsal
[SYSTEM] Initiating First Live-Read Canary Rehearsal.
[SYSTEM] Target Provider: Microsoft 365 / Entra ID.
[GATE] Checking Scope Review Approval... PENDING.
[GATE] Checking Read-Only Credentials Setup... PENDING.
[GATE] Checking Tenant Admin Consent... PENDING.
[GATE] Checking First Canary Execution Approval... PENDING.
[SYSTEM] Execution blocked. Missing owner approvals.
[SYSTEM] SIMULATED REHEARSAL PAUSED.