Skip to content
DarkPrint
Risk marker

Unvalidated external access

unvalidated-external-access

The node reaches the network, an API or an external resource with no validation node upstream.

Where it sits

stands alone
Broader chain
  1. unvalidated-external-access
Narrower terms

No term is narrower than unvalidated-external-access.

What it costs

declared or inferred
41.00points, once per blueprint

A blueprint starts at a clean 4, loses the weight of every marker present, and the result is clamped into 1–4. unvalidated-external-access is charged once for the whole blueprint no matter how many nodes carry it. The explanation still lists every node that established it.

unvalidated-external-access is one of the three markers the analyzer derives from the graph itself. It can fire on a blueprint whose cards never mention it. A card that declares it and a graph that implies it are the same marker, charged once. The finding records which way round it was established.

The number lives in the engine's configuration and not in this vocabulary. A recalibration touches one file, so every blueprint is charged the same way. Nothing records which calibration an evaluation was made under, so move a weight and two evaluations stop being comparable.

Who uses it

2 cards · 2 blueprints