Blind audit: rows the auditor would not accept
| feature_id | stratum | statement | excerpt | supported_by_excerpt | supported_in_context | single_capability | is_capability | note |
|---|---|---|---|---|---|---|---|---|
| F2-031-S067 | added | The system lets a supervisor deliver targeted, personalized feedback to service reps based on reviewed interactions | deliver targeted, personalized feedback | 0 | 0 | 1 | 1 | Source says the system delivers feedback automatically; 'supervisor' role invented. |
| F2-055-S109 | confirmed | The system lets a customer review quote line items, ask questions in comments, and approve or reject the quote. | They can review line items, ask questions in the comments, and approve or reject the quote. | 1 | 1 | 0 | 1 | Bundles three actions: review line items, comment, approve/reject. |
| F2-061-S054 | confirmed | The system lets a user access service partners for penetration tests, cyber insurance, and background checks | Access the technology and service partners you need for things like penetration tests, cyber insurance, and background checks, all through Vanta. | 1 | 1 | 1 | 0 | Access to third-party service partners (pen testers, insurers) is a partner network, not a software capability. |
| F1-002-S066 | corrected | The system lets a user use the interface in several languages. | - Interface in English, Ukrainian, Russian, Simplified Chinese, Traditional Chinese (Taiwan), Arabic, Persian, French, Portuguese (Brazil), Bahasa Indonesia, Spanish (Spain), Korean, and Turkish | 1 | 1 | 1 | 0 | Interface localization is a non-functional/platform property, not a functional capability. |
| F1-005-S053 | corrected | The system lets a user connect an e-commerce platform to import orders, products and customers into the CRM. | with native Nuvemshop integration | 0 | 0 | 1 | 1 | Import of orders, products and customers not stated on page; only 'native Nuvemshop integration'. |
| F1-046-S012 | corrected | The system lets an auditor scope audits and map controls to them. | Audit scoping, control mapping, finding tracking, report generation | 0 | 1 | 0 | 1 | 'Auditor' role invented; bundles audit scoping with control mapping. |
| F1-046-S013 | corrected | The system automatically sends task and comment lifecycle events through webhooks when tasks or comments change. | Use GraphQL, the `prb` CLI, MCP, n8n, and webhooks instead of limiting work to the console. | 0 | 0 | 1 | 1 | Task/comment lifecycle webhook events not stated on page; excerpt only mentions webhooks generally. |