Skip to content

chore(08,12): scrub tenant identifiers and refresh deep-research outputs#14

Merged
corticalstack merged 2 commits into
mainfrom
chore/scrub-tenant-identifiers
May 27, 2026
Merged

chore(08,12): scrub tenant identifiers and refresh deep-research outputs#14
corticalstack merged 2 commits into
mainfrom
chore/scrub-tenant-identifiers

Conversation

@corticalstack
Copy link
Copy Markdown
Owner

@corticalstack corticalstack commented May 27, 2026

Summary

Two things in one PR:

  1. Tenant-identifier scrub across cached notebook outputs in sections 08 and 12. Replaced nine tenant-specific UUIDs with the conventional 00000000-0000-0000-0000-000000000000 placeholder, per the notebook-output hygiene policy in CONTRIBUTING.md.
  2. Refreshed cached outputs in 12-01-deploy-o3-backend.ipynb and 12-02-deep-research-loop.ipynb from a successful end-to-end run after the v0.8.4 / v0.8.5 fixes landed.

Scrub targets

File UUID Type
08-03-01-deploy-hosted-agent.ipynb 5db0aa5d-… Entra principal ID
08-03-01-deploy-hosted-agent.ipynb def3c675-… ACR build volume ID
08-05-01-contoso-pmo-agent-setup.ipynb 187581c6-… project MI principal
08-05b-01-private-banking-agent-setup.ipynb 67bc2a77-… project MI principal
08-06-05-results-and-portal.ipynb 3e864d4f-… eval-run ID in portal URL
08-06-05-results-and-portal.ipynb b845d325-… eval-run ID in portal URL
08-07-01-deploy-observability-infra.ipynb 5db0aa5d-… Entra principal ID
12-01-deploy-o3-backend.ipynb 025aba94-… Azure subscription ID
12-01-deploy-o3-backend.ipynb 5db0aa5d-… Entra principal ID

Intentionally kept (not personal data)

  • 08-03-01-deploy-hosted-agent.ipynb: 53ca6127-db72-4b80-b1b0-d745d6d5456d is the public Azure built-in role-definition ID for "Foundry User" (FOUNDRY_USER_ROLE_ID = …). Identical across all Azure tenants.
  • Deterministic resource-name suffixes c2676f and n5d3ja - kept by repo convention so resource names stay readable.

Verification

Re-scanned all 33 notebooks in sections 08 / 09 / 10 / 11 / 12 after the scrub. Clean: no real UUIDs remain (excluding the kept role-def ID and the zero placeholder). Also re-confirmed no leaked home paths, 32-char hex keys, or App Insights instrumentation keys / connection strings.

All seven touched notebooks parse as valid JSON post-edit.

Patch release 0.8.6.

Test plan

  • grep -rE '\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b' over sections 08-12 returns only cell IDs, the kept role-def ID, and zero placeholders
  • Touched notebooks open cleanly in Jupyter / VS Code

Replaced nine tenant-specific UUIDs with the conventional
00000000-0000-0000-0000-000000000000 placeholder, per the notebook-output
hygiene policy in CONTRIBUTING.md. Targets: subscription ID, Entra
principal IDs, project managed-identity principals, eval-run IDs in
portal URLs, and one ACR build volume ID.

Files scrubbed:
- 08-03-hosted-agents/08-03-01-deploy-hosted-agent.ipynb (2)
- 08-05-contoso-pmo-mcp/08-05-01-contoso-pmo-agent-setup.ipynb (1)
- 08-05b-contoso-private-banking-mcp/08-05b-01-private-banking-agent-setup.ipynb (1)
- 08-06-agent-offline-evaluation/08-06-05-results-and-portal.ipynb (2)
- 08-07-agent-live-observability/08-07-01-deploy-observability-infra.ipynb (1)
- 12-foundry-iq-deep-research/12-01-deploy-o3-backend.ipynb (2)

Deterministic resource-name suffixes (c2676f, n5d3ja) are kept by
convention. FOUNDRY_USER_ROLE_ID (53ca6127-...) is kept - it is the
public Azure built-in role-definition ID, identical across tenants.

Also refreshes cached outputs in 12-01 and 12-02 from a successful
end-to-end run after the v0.8.4 / v0.8.5 fixes landed.
@corticalstack corticalstack merged commit b3253c2 into main May 27, 2026
1 of 2 checks passed
@corticalstack corticalstack deleted the chore/scrub-tenant-identifiers branch May 27, 2026 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant