{"database": "pub10", "table": "candidates", "is_view": false, "human_description_en": "where app_id = \"F1-046\"", "rows": [["F1-046-A001", "F1-046", "a", "The system lets a user maintain a risk register", "Risk register, inherent/residual scoring, treatment strategies (mitigate, accept, avoid, transfer), threat-based risk assessments", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A002", "F1-046", "a", "The system lets a user maintain a control library with maturity levels", "Control library with maturity levels, custom framework import/export, Statement of Applicability (SoA)", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A003", "F1-046", "a", "The system lets a user import and export custom frameworks", "custom framework import/export", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A004", "F1-046", "a", "The system lets a user keep a vendor inventory and track data processing agreements", "Vendor inventory, automated website risk assessment, DPA/BAA tracking, subprocessor discovery", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "corrected", "Compound statement; vendor inventory is the single capability here, contract tracking is covered by A020.", "The system lets a user keep an inventory of vendors.", "corrected", "Compound statement; agreement tracking is already covered by the surviving third-party contract-tracking statement.", 1.0], ["F1-046-A005", "F1-046", "a", "The system lets a user record processing activities and maintain a data inventory", "processing activity records, data inventory", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "corrected", "Compound statement; processing activities are covered separately by A026.", "The system lets a user maintain a data inventory.", "corrected", "Compound statement; processing activity records are covered by a separate surviving statement.", 1.0], ["F1-046-A006", "F1-046", "a", "The system lets a user collect evidence as files and URLs and track implementation state", "Evidence collection (files and URLs), implementation state tracking, task assignment", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "corrected", "Compound statement; implementation-state tracking is not a separate evidenced capability.", "The system lets a user collect evidence as files and URLs.", "corrected", "Compound statement; splitting keeps one capability per statement and the bare table cell gives no further detail on implementation-state tracking.", 1.0], ["F1-046-A007", "F1-046", "a", "The system lets a user require quorum approval and electronic signatures on versioned documents", "Versioned documents, approval quorums, electronic signatures, PDF export, bulk operations", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A008", "F1-046", "a", "The system lets a user publish a public compliance portal with custom domain support", "Public compliance portal, NDA management, certification publishing, custom domain support", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A009", "F1-046", "a", "The system lets a user manage cookie banners and keep consent records", "Cookie banner management, tracker detection, consent records", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "rejected", "duplicate of F1-046-A077", null, "rejected (duplicate upheld)", "duplicate upheld", 0.0], ["F1-046-A010", "F1-046", "a", "The system lets a user automate compliance work through a command-line client", "A fully-featured command-line client for scripting, automation, and CI/CD integration.", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A011", "F1-046", "a", "The system lets a user connect an AI agent to read and write compliance data", "Any MCP-compatible LLM agent (Claude, Cursor, Continue, and others) can connect directly and interact with your compliance data.", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A012", "F1-046", "a", "The system lets a user automate compliance tasks in an external no-code workflow tool", "brings Probo into n8n workflows for no-code automation of compliance tasks over the GraphQL API", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A013", "F1-046", "a", "The system lets an auditor scope audits, map controls, track findings, and generate reports", "Audit scoping, control mapping, finding tracking, report generation", "https://raw.githubusercontent.com/getprobo/probo/HEAD/README.md", "01.txt", "passed", "corrected", "Compound statement; finding tracking is covered by A024, report generation is listed as missed.", "The system lets an auditor scope audits and map controls to them.", "corrected", "Compound statement; finding tracking is covered separately and report generation is accepted as a missed item.", 1.0], ["F1-046-A014", "F1-046", "a", "The system lets a user receive task and comment lifecycle events through webhooks", "Use GraphQL, the `prb` CLI, MCP, n8n, and webhooks instead of limiting work to the console.", "https://www.probo.com/docs/product/getting-started/product-overview.md", "03.txt", "passed", "corrected", "Describes an automation, not a user action.", "The system automatically sends task and comment lifecycle events through webhooks when tasks or comments change.", "corrected", "The source (09.txt: 'Webhooks Receive task and comment lifecycle events') supports it, and event delivery is an automation.", 1.0], ["F1-046-A015", "F1-046", "a", "The system lets a user publish certifications, commitments, references, and protected files through a compliance portal", "Publish certifications, commitments, references, and protected files through the Compliance Portal.", "https://www.probo.com/docs/product/getting-started/product-overview.md", "03.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A016", "F1-046", "a", "The system lets a user collect endpoint posture through a device agent", "collect endpoint posture through Device Agent", "https://www.probo.com/docs/product/getting-started/product-overview.md", "03.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A017", "F1-046", "a", "The system lets a user invite members to an organization", "Users are invited as members of an organization.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A018", "F1-046", "a", "The system lets a user link one internal control to multiple controls across different frameworks", "A single internal control can satisfy multiple controls across different frameworks.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A019", "F1-046", "a", "The system lets a user link risks to internal controls, obligations, vendor assessments, and risk-assessment scenarios", "Risks can be linked to internal controls, obligations, vendor assessments, and structured risk-assessment scenarios.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A020", "F1-046", "a", "The system lets a user track contracts, conduct risk assessments, and monitor compliance status of third parties", "Third-party management includes tracking contracts, conducting risk assessments, vetting, and monitoring compliance status.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A021", "F1-046", "a", "The system lets a user inventory assets and link them to the controls and risks that apply", "Assets are inventoried and linked to the controls and risks that apply to them.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A022", "F1-046", "a", "The system automatically repeats a task when its deadline passes", "A task has a state, a priority, an optional deadline, and can repeat when that deadline passes.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A023", "F1-046", "a", "The system lets a user keep tasks in sync with an external issue tracker", "Tasks can stay in sync with Linear.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A024", "F1-046", "a", "The system lets a user record audit findings as major nonconformity, minor nonconformity, observation, or exception and link them to audits", "Finding kinds include major nonconformity, minor nonconformity, observation, and exception. Findings can be linked to one or more audits.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A025", "F1-046", "a", "The system lets a user track legal and regulatory obligations separately from framework controls", "Obligations are tracked separately from framework controls to capture jurisdiction-specific requirements.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A026", "F1-046", "a", "The system lets a user record data processing activities with the data processed, legal basis, retention periods, and data subjects", "Each record documents what data is processed, the legal basis, retention periods, and data subjects involved.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A027", "F1-046", "a", "The system lets a user run Data Protection Impact Assessments", "DPIAs evaluate the necessity and proportionality of processing, and identify measures to mitigate risks to data subjects.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A028", "F1-046", "a", "The system lets a user run Transfer Impact Assessments for international data transfers", "TIAs evaluate whether the destination country provides adequate data protection and what supplementary measures are needed.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A029", "F1-046", "a", "The system lets a user record which controls apply to the organization and why in a Statement of Applicability", "A reviewed record of which controls apply to an organization and why.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A030", "F1-046", "a", "The system lets a user run access review campaigns from Probo memberships, CSV data, or connected providers", "Campaigns that bring access entries from Probo memberships, CSV data, or connected providers into one review.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A031", "F1-046", "a", "The system lets a user keep records of enrolled devices and their reported posture", "Device records represent enrolled endpoints and their reported posture.", "https://www.probo.com/docs/product/getting-started/core-concepts.md", "04.txt", "passed", "rejected", "duplicate of F1-046-A016", null, "rejected (duplicate upheld)", "duplicate upheld", 0.0], ["F1-046-A032", "F1-046", "a", "The system lets a user assign a task with an optional due date", "A task assigns a concrete piece of work, optionally with a due date.", "https://www.probo.com/docs/product/compliance-program", "05.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A033", "F1-046", "a", "The system lets a user publish a list or statement as a stable representation for review", "Publishing a list or statement creates a stable representation for review.", "https://www.probo.com/docs/product/compliance-program", "05.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A034", "F1-046", "a", "The system lets a user investigate important changes using an audit log", "use the audit log to investigate important changes", "https://www.probo.com/docs/product/compliance-program", "05.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A035", "F1-046", "a", "The system lets a user model threat-based risk assessments with scopes, nodes, boundaries, processes, threats, and scenarios", "A risk assessment can contain scopes, nodes, boundaries, processes, threats, and scenarios.", "https://www.probo.com/docs/product/risk-management", "06.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A036", "F1-046", "a", "The system lets a user export scope diagrams as Mermaid", "Scope diagrams can be exported as Mermaid for use in technical review.", "https://www.probo.com/docs/product/risk-management", "06.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A037", "F1-046", "a", "The system lets a user track rights requests such as access or erasure through their lifecycle", "Rights requests track requests such as access or erasure through their operational lifecycle.", "https://www.probo.com/docs/product/privacy-management", "07.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A038", "F1-046", "a", "The system lets a visitor submit a rights request from the public site through a compliance portal", "To let visitors submit a request from your public site, see Rights requests in the Compliance Portal.", "https://www.probo.com/docs/product/privacy-management", "07.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A039", "F1-046", "a", "The system lets a user authenticate with SAML single sign-on through an identity provider", "use SAML single sign-on (SSO) to authenticate them through your identity provider", "https://www.probo.com/docs/product/identity-and-access", "08.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A040", "F1-046", "a", "The system lets an administrator create, update, and deactivate user access from an identity provider with SCIM", "use SCIM to create, update, and deactivate their access", "https://www.probo.com/docs/product/identity-and-access", "08.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A041", "F1-046", "a", "The system lets an administrator invite and role-manage members in the organization", "Invite and role-manage members in the organization", "https://www.probo.com/docs/product/identity-and-access", "08.txt", "passed", "corrected", "Invitation is a duplicate of A017; only the role-management part is new.", "The system lets an administrator assign roles to organization members.", "corrected", "Inviting members is already covered by A017; only role management is new.", 1.0], ["F1-046-A042", "F1-046", "a", "The system lets an administrator map membership roles from an identity provider with a SAML role attribute", "or map them from your identity provider with the SAML Role Attribute", "https://www.probo.com/docs/product/identity-and-access", "08.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A043", "F1-046", "a", "The system lets an administrator verify the email domain used by organization members", "Verify the email domain used by organization members.", "https://www.probo.com/docs/product/identity-and-access", "08.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A044", "F1-046", "a", "The system lets an owner or admin create tasks", "Owners and admins can create tasks.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A045", "F1-046", "a", "The system lets a viewer read tasks, comments, and activity", "Viewers can read tasks, comments, and activity.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A046", "F1-046", "a", "The system lets a user search tasks by name and filter them by state or assignee", "The list can be searched by name and filtered by state or assignee.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A047", "F1-046", "a", "The system lets a user reorder tasks by dragging, which updates the priority when dropped next to tasks of another priority", "Drag a task to change its order. Dropping it next to tasks of another priority updates its priority too.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A048", "F1-046", "a", "The system lets a user set a time estimate on a task as a duration", "Expected effort, as an ISO-8601 duration such as PT2H or P1D.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A049", "F1-046", "a", "The system lets a user set a task state of backlog, to do, in progress, done, canceled, or duplicate", "Defaults to To do.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0], ["F1-046-A050", "F1-046", "a", "The system lets a user set a task priority of urgent, high, medium, or low", "Urgent, High, Medium, or Low. Defaults to Medium.", "https://www.probo.com/docs/product/tasks/overview", "09.txt", "passed", "confirmed", null, null, "(not sent: confirmed)", null, 1.0]], "truncated": false, "filtered_table_rows_count": 143, "expanded_columns": [], "expandable_columns": [[{"column": "app_id", "other_table": "apps", "other_column": "app_id"}, "name"]], "columns": ["candidate_id", "app_id", "run", "statement", "excerpt", "source_url", "source_file", "script_check", "verifier_verdict", "verifier_reason", "verifier_correction", "adjudicator", "adjudicator_reason", "in_final_set"], "primary_keys": ["candidate_id"], "units": {}, "query": {"sql": "select candidate_id, app_id, run, statement, excerpt, source_url, source_file, script_check, verifier_verdict, verifier_reason, verifier_correction, adjudicator, adjudicator_reason, in_final_set from candidates where \"app_id\" = :p0 order by candidate_id limit 51", "params": {"p0": "F1-046"}}, "facet_results": {"app_id": {"name": "app_id", "type": "column", "hideable": false, "toggle_url": "/pub10/candidates.json?app_id=F1-046", "results": [{"value": "F1-046", "label": "Probo", "count": 143, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json", "selected": true}], "truncated": false}, "run": {"name": "run", "type": "column", "hideable": false, "toggle_url": "/pub10/candidates.json?app_id=F1-046", "results": [{"value": "a", "label": "a", "count": 85, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&run=a", "selected": false}, {"value": "b", "label": "b", "count": 58, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&run=b", "selected": false}], "truncated": false}, "verifier_verdict": {"name": "verifier_verdict", "type": "column", "hideable": false, "toggle_url": "/pub10/candidates.json?app_id=F1-046", "results": [{"value": "confirmed", "label": "confirmed", "count": 76, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&verifier_verdict=confirmed", "selected": false}, {"value": "rejected", "label": "rejected", "count": 61, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&verifier_verdict=rejected", "selected": false}, {"value": "corrected", "label": "corrected", "count": 6, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&verifier_verdict=corrected", "selected": false}], "truncated": false}, "adjudicator": {"name": "adjudicator", "type": "column", "hideable": false, "toggle_url": "/pub10/candidates.json?app_id=F1-046", "results": [{"value": "(not sent: confirmed)", "label": "(not sent: confirmed)", "count": 76, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&adjudicator=%28not+sent%3A+confirmed%29", "selected": false}, {"value": "rejected (duplicate upheld)", "label": "rejected (duplicate upheld)", "count": 61, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&adjudicator=rejected+%28duplicate+upheld%29", "selected": false}, {"value": "corrected", "label": "corrected", "count": 6, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&adjudicator=corrected", "selected": false}], "truncated": false}, "in_final_set": {"name": "in_final_set", "type": "column", "hideable": false, "toggle_url": "/pub10/candidates.json?app_id=F1-046", "results": [{"value": 1.0, "label": 1.0, "count": 82, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&in_final_set=1.0", "selected": false}, {"value": 0.0, "label": 0.0, "count": 61, "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&in_final_set=0.0", "selected": false}], "truncated": false}}, "suggested_facets": [{"name": "source_url", "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&_facet=source_url"}, {"name": "source_file", "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&_facet=source_file"}, {"name": "adjudicator_reason", "toggle_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&_facet=adjudicator_reason"}], "next": "F1-046-A050", "next_url": "http://pub10.vps.elbatanony.com/pub10/candidates.json?app_id=F1-046&_next=F1-046-A050", "private": false, "allow_execute_sql": true, "query_ms": 835.0337073206902, "source": "Ahmed ElBatanony, Innopolis University", "license": "Not yet licensed \u2014 internal review only"}