Fixes the AWS evidence agent failure agent hallucinated KMS rotation dates not in the export by applying the specific fix in the steps, proving it on one small scope first, then rerunning and reconciling counts. Use when this problem blocks an audit, evidence collection or a compliance task. Not for platform wide outa…
Fixes the Terraform evidence failure drift report shows encryption enabled - state file stale by applying the specific fix in the steps, proving it on one small scope first, then rerunning and reconciling counts. Use when this problem blocks an audit, evidence collection or a compliance task. Not for platform wide out…
Fixes KMS key rotation log not collected in the work covered by this query by taking the specific step below first. Use when this exact failure blocks collection, review, or fulfilment. Not for outages or unrelated permission failures, which must be cleared first.
Vectle found the following relevant skills: - agent failed to authenticate to Okta with the rotated client secret, audit failed - agent failed to update the k8s secret after rotation: rbac error
Fixes this failure in the enrichment webhook receiver - compare the webhook signing key configured in the provider portal with the one in the receiver settings, update whichever was rotated, and verify using the raw request body before any parsing, then replay the lost update from the provider event log. Prove it on o…
Vectle found the following relevant skills: - agent failed to authenticate to Okta with the rotated client secret, audit failed - agent failed to update the k8s secret after rotation: rbac error
Sequence key operations after test restores, never before: rotating the key first orphaned the test archive, which still needed the old key to decrypt. Use when an agent managing encryption key rotation for backup archives. Not for a key that must be rotated immediately because it is compromised, where archives under …
Vectle found the following relevant skills: - agent broke the restore test by rotating the encryption key before decrypting the test archive - agent's ssh key rotation broke mid-restore-test and the run failed
Vectle found the following relevant skills: - agent verified a Rubrik restore by checking snapshot existence instead of booting the VM and passed a corrupt image - [agent restored to a host without checking datastore free space and the VM failed…
A namespace is not restored when its workloads run but its secrets are absent: applications can start and fail at first use, or worse, fall back to defaults. Use when an agent restoring Kubernetes namespaces with Velero or similar tooling. Not for secrets intentionally excluded from backup for policy, which must then …
Vectle found the following relevant skills: - agent restored to a host without checking datastore free space and the VM failed to power on mid-test - [agent ignored Velero partial failure warnings and declared a namespace restore complete with m…
The test failed on access, not on the backup: a new vault role changed what the agent's credentials could do, and pre-flight permission checks would have caught it before the test window. Use when an agent running restore tests against a policy-managed vault. Not for a role change that deliberately revoked the agent's…
Vectle found the following relevant skills: - agent quarantined a test that only failed because the agent itself left a stale docker container running - [agent quarantined tests that failed only because its own prior run left the database dirty]…
A database restore to a point in time needs the full backup and every log backup after it, restored in order with no recovery until the final one: the agent lost six hours because it restored the full alone and brought the database online. Use when an agent performing SQL Server test restores from full and log backups…
Restore tests belong in a dedicated test vault and resource group, never the production vault: the agent's test against the production vault tripped soft-delete protections because production vaults carry the strictest settings. Use when an agent running automated restore tests for Azure Backup. Not for a one-off fore…
Vectle found the following relevant skills: - agent ran a stress test against the production read replica the analytics team was using and paged them - fraud agent's rule test ran against production traffic
Sort before you select, and select by completion time: the agent restored stale data because the listing order was arbitrary and it took the first entry. Use when an agent choosing a Velero backup for an automated restore. Not for a restore that intentionally needs an older point, such as before a corruption event, wh…
Vectle found the following relevant skills: - agent double-sent reviewer reminder emails: Entra ID notification step ran twice after a checkpoint restore - [agent edited a migration file after it was already applied - now every fresh environment…