SAMPLE OPERATOR PACK

This is a real report generated from GraphVerdict's included demo workflow—not a customer result.

Audit your workflow free ↗
← GraphVerdictCOMPLETE EVIDENCE REPORT

WORKFLOW / DEMO

Content launch swarm

40/100
BLOCK

4 agents · 3 edges · 5 findings

Run mine free

DEPENDENCY EVIDENCE

LIVE DEPENDENCY MAP
100%
BUILDScout0 IN · 1 OUTCLEARBUILDBuilder1 IN · 2 OUTCLEARBUILDPublisher1 IN · 0 OUTCRITICALVERIFYVerifier1 IN · 0 OUTHIGH
clear medium high critical no evidence passed

PRIORITIZED HARDENING ORDER

Fix the permission path before polishing the agents.

  1. 01
    publisherpublisher can cross a trust boundary without owner approval.

    Bind the exact action and parameters to an owner-gated approval before execution.

  2. 02
    publisherpublisher has no rollback target.

    Declare and test a bounded rollback or compensating action.

  3. 03
    verifierverifier shares the worker’s context.

    Use a separate verifier context and restricted evidence packet.

  4. 04
    verifierverifier emits no exact verification receipt.

    Emit the exact verification artifact or fail closed.

COMPLETE FINDINGS

1 critical · 4 high · 0 medium · 0 low
01critical

publisher can cross a trust boundary without owner approval.

A tool or declared action can create an external, financial, destructive, or publicly visible effect.

Repair

Bind the exact action and parameters to an owner-gated approval before execution.

node: publisher
02high

publisher has no rollback target.

The workflow declares consequential authority but no recovery path.

Repair

Declare and test a bounded rollback or compensating action.

node: publisher
03high

verifier shares the worker’s context.

The reviewer is not independent from the work it evaluates.

Repair

Use a separate verifier context and restricted evidence packet.

node: verifier
04high

verifier emits no exact verification receipt.

The expected artifact is verification:builder.

Repair

Emit the exact verification artifact or fail closed.

node: verifier
05high

publisher has consequential authority but no independent verifier.

Its output can cross a trust boundary without a separate check.

Repair

Add a context-separated verifier before the approval gate.

node: publisher

YOUR TURN

Find the failure path in your own graph.

The risk score and most urgent finding are free. Your file stays in your browser.

Audit my workflow — free ↗