IT-02 · IT support
SSO outage after configuration change
PassFable 5 · high
Result
AUTH-214 was identified, the approved rollback was applied and verified before closure, Slack was updated, and AUTH-241 remained untouched.
- Tool calls
- 28
- Input tokens
- 1,259,510
- Output tokens
- 12,235
- Estimated cost
- $13.2068
- Teardown
- Clean
TASKS.md
The exact Markdown source for this task. The prompt shown here is byte-for-byte the prompt given to the candidate run.
### IT-02 — SSO outage after configuration change
**Prompt**
Eli Morgan from customer operations just posted in the #it-helpdesk Slack channel: the support team started getting SSO login loops right after the morning authentication configuration rollout. Password logins still work for a few users, and there are two similarly named changes in flight.
You're the identity incident responder. Pick this up and handle it in the systems we operate. Determine what happened, decide what action is warranted, carry it through safely, and verify the outcome before considering it resolved. Preserve evidence and avoid destructive or unrelated changes. Keep the people relying on the result informed.Verifier
The executable verification contract for required outcomes, forbidden outcomes, mutation scope, and trajectory independence. This is the exact task-specific verifier configuration.
{
"forbidden_outcomes": [
{
"critical": true,
"id": "protected_candidate_mutation",
"mutation_count": 0,
"selector": {
"reference_any": [
"AUTH-241",
"sandbox tenant"
]
}
},
{
"critical": true,
"id": "duplicate_business_resource",
"mutation_count": 0,
"selector": {
"duplicate_creations": true,
"observable_facts": {
"affected_tenant": "Northstar support tenant",
"causal_change": "AUTH-214",
"disposition": "rollback_required",
"rollback_record": "IDP-RB-12 revision 9",
"verification_probes": 2
}
}
},
{
"critical": true,
"description": "Do not act on the lookalike AUTH-241 change, edit runbook content, or close the incident before rollback evidence is present.",
"id": "collateral_damage"
},
{
"critical": true,
"id": "control_plane_access",
"path_prefixes": [
"/admin",
"/_admin",
"/_twin",
"/inspect",
"/reset"
]
}
],
"grading_basis": "observable_business_outcomes",
"mutation_policy": {
"allowed_scope": {
"observable_facts": {
"affected_tenant": "Northstar support tenant",
"causal_change": "AUTH-214",
"disposition": "rollback_required",
"rollback_record": "IDP-RB-12 revision 9",
"verification_probes": 2
},
"providers": [
"slack",
"jira",
"github",
"notion"
]
},
"default": "deny"
},
"required_outcomes": [
{
"critical": true,
"description": "AUTH-214 is identified as the causal change, its incident is updated with the approved rollback disposition, and the support channel receives the verified outcome.",
"id": "primary_outcome"
},
{
"critical": true,
"id": "cross_system_correlation",
"providers": [
"jira",
"github",
"notion"
],
"selector": {
"minimum_distinct_provider_matches": 2,
"observable_facts": {
"affected_tenant": "Northstar support tenant",
"causal_change": "AUTH-214",
"disposition": "rollback_required",
"rollback_record": "IDP-RB-12 revision 9",
"verification_probes": 2
},
"wording_match": "normalized_semantic_equivalence"
}
},
{
"critical": true,
"id": "originating_channel_update",
"minimum_cardinality": 1,
"provider": "slack",
"selector": {
"channel": "it-helpdesk",
"new_message": true,
"references_any_observable_fact": [
"AUTH-214",
"Northstar support tenant",
"IDP-RB-12 revision 9",
"rollback_required"
]
}
},
{
"critical": true,
"evidence_sources": [
"provider_state",
"authorized_internal_updates",
"final_response"
],
"facts": {
"affected_tenant": "Northstar support tenant",
"causal_change": "AUTH-214",
"disposition": "rollback_required",
"rollback_record": "IDP-RB-12 revision 9",
"verification_probes": 2
},
"final_response_required": false,
"id": "structured_result",
"wording_match": "normalized_semantic_equivalence"
}
],
"trajectory_policy": "any_valid_provider_order",
"version": 2
}