rage.fail

Validate

Paste RAGE records, one JSON object per line, and check them against the schemas. The box is pre-filled with the minimal example, so the first click succeeds.

NDJSON records

{"kind":"manifest","spec_version":"0.1","taxonomy_version":"0.1","media_type":"application/vnd.rage.graph+ndjson","created_at":"2026-01-01T00:00:00Z","snapshot_at":"2026-01-01T00:00:00Z","scope":{"providers":["gcp"],"foothold":"gcp|proj-a|gcp:iam:service-account|sa-deploy"},"counts":{"nodes":3,"edges":2,"facts":2,"evidence":1,"findings":1,"surfaces":1,"paths":1}}
{"kind":"node","node_id":"gcp|proj-a|gcp:iam:service-account|sa-deploy","node_type":"ServiceAccount","provider":"gcp","name":"sa-deploy","observed_at":"2026-01-01T00:00:00Z"}
{"kind":"node","node_id":"gcp|proj-a|gcp:iam:service-account|sa-admin","node_type":"ServiceAccount","provider":"gcp","name":"sa-admin"}
{"kind":"node","node_id":"gcp|proj-a|gcp:storage:bucket|bucket-crown","node_type":"ObjectStorage","provider":"gcp","name":"bucket-crown"}
{"kind":"evidence","evidence_id":"ev:op-abc123","source":"gcp:iam:getIamPolicy","status":"ok","captured_at":"2026-01-01T00:00:00Z","content_hash":"sha256:abc123"}
{"kind":"fact","fact_id":"fact-77f2","edge_hint":"CanImpersonate","source":"gcp|proj-a|gcp:iam:service-account|sa-deploy","target":"gcp|proj-a|gcp:iam:service-account|sa-admin","provider":"gcp","captured_at":"2026-01-01T00:00:00Z","content_hash":"sha256:77f2","evidence":["ev:op-abc123"]}
{"kind":"fact","fact_id":"fact-88a3","edge_hint":"CanReadData","source":"gcp|proj-a|gcp:iam:service-account|sa-admin","target":"gcp|proj-a|gcp:storage:bucket|bucket-crown","provider":"gcp","captured_at":"2026-01-01T00:00:00Z","content_hash":"sha256:88a3","evidence":["ev:op-abc123"]}
{"kind":"edge","edge_id":"e1","type":"CanImpersonate","source":"gcp|proj-a|gcp:iam:service-account|sa-deploy","target":"gcp|proj-a|gcp:iam:service-account|sa-admin","nature":"derived","state":"ACTIVE","facts":["fact-77f2"],"evidence":["ev:op-abc123"]}
{"kind":"edge","edge_id":"e2","type":"CanReadData","source":"gcp|proj-a|gcp:iam:service-account|sa-admin","target":"gcp|proj-a|gcp:storage:bucket|bucket-crown","nature":"derived","state":"ACTIVE","facts":["fact-88a3"],"evidence":["ev:op-abc123"]}
{"kind":"surface","surface_id":"sf1","resource_id":"gcp|proj-a|gcp:storage:bucket|bucket-crown","category":"public_endpoint","emits_hint":"CanReadData","severity":"high","evidence":["ev:op-abc123"]}
{"kind":"path","path_id":"p1","source":"gcp|proj-a|gcp:iam:service-account|sa-deploy","target":"gcp|proj-a|gcp:storage:bucket|bucket-crown","edge_ids":["e1","e2"],"score":3.0,"narrative":"sa-deploy impersonates sa-admin, then reads the crown bucket."}
{"kind":"finding","resource_id":"gcp|proj-a|gcp:storage:bucket|bucket-crown","severity":"critical","location":"iamPolicy","emits_hint":"CanReadData","evidence":["ev:op-abc123"]}

Runs entirely in your browser - nothing is sent to the server. Up to 64 KB.