01 Reference
Limits and boundaries
Know what a qualification establishes, what stays local and what still needs review.
A qualification is a scoped claim
The local engine compares declared checks with independently established expectations and retains the evidence behind the result. Qualification applies to those checks, captured observations and current bindings. It does not guarantee every number, visual, security context or future refresh.
People still own the business question, grain ratification, oracle meaning and report acceptance. A technically matching Sales total can answer the wrong question. A correctly queried measure can appear on a confusing page. Keep numerical comparison, business meaning and usability review visible as separate responsibilities.
| Evidence | Limit |
|---|---|
| Generated artifact | Does not establish successful tenant execution. |
| Passed query comparison | Does not establish every rendered label or untested filter state. |
| Valid signature | Authenticates a claim; does not establish source truth or acceptance. |
| Hosted acknowledgement | Establishes envelope acceptance, not a recomputation of the business values. |
Draw the data boundaries honestly
Raw proof stays in customer-controlled custody. Local receipts, oracle files, query results, report exports and atlases may contain business values. They are not the payload sent to the Hosted qualification ledger. The exported attestation is a closed value-free projection with bounded verdicts, times and keyed commitments.
That is a specific disclosure boundary. Approved Fabric execution can move data into the customer's Microsoft environment. Information given to an external assistant follows that provider's controls. Hosted separately handles account and organisation information. Do not turn the ledger's narrow no-values contract into a claim that nothing ever crosses a network.
Keep preview capabilities labelled
Hosted is a protected preview. Production activation, live billing, public self-signup and final commercial plans remain owner-gated. MIT licensing of the local core does not establish a public repository, marketplace listing or approved download route.
Incremental/history, AP and Import paths, report-state depth, bounded rendered-value checks and optional consumers retain scope-specific proof requirements. Data agents are built, not live-qualified. Snowflake is deferred. A compiled artifact or offline grading result does not extend a live Sales demonstration to those routes.
Bounded Windows OCR compares independently authored numeric-label regions with display expectations. It does not verify every pixel or every visual. Missing, clipped or contradictory evidence cannot pass, and the documented empty-state mismatch remains an explicit limit.
Do not turn a gate into a certificate
No SOC 2 report, ISO certification, statutory financial audit or regulatory compliance certification is established by these sources. Security controls must be described by their actual function and operational evidence, not as a general promise of invulnerability.
Proposed academy completion, consultancy partner awards and client reporting certificates are distinct processes. A subscription, course payment or machine eligibility score does not issue an award. None implies Microsoft accreditation or endorsement. Published service levels, incident response commitments, production retention and recovery promises need their own approval.
Review the exact claim before release
Name the scope and current observation. Check for stale evidence and superseded receipts. State missing human reviews and unobserved controls. Treat scheduling machinery as preparation rather than proof of an always-on monitoring service.
Keep private repositories, protected preview origins, operational identifiers and secrets out of public material. Use synthetic examples for learning. Consult Security for custody and access boundaries, and Status vocabulary when communicating what the evidence actually establishes.