Act on Verify findings
Turn a Check score or Verify report into Blueprint and repository fixes without treating the next step as an automatic apply.
Last updated September 27, 2026
Read the report
The audit result is a verdict, dimension bars, and a next step. Check shows a score without email. Email unlocks full analysis and peer comparison. Verify is one automated instant report per purchased repo. No human review is included.
Start Audit is /audit/start. Header Audit scrolls to #audit.
What the next step is not
A prefill from Audit + Validation must not silently apply controls. Review every suggested principal, gate, connection, and environment in Designer before compile.
A passing Check score is not a passing install and not a passing Run.
Typical fixes
| Finding | Where to fix it |
|---|---|
| Missing App or permissions | Install live Canon GitHub App on owner/repo |
| No resolved reviewers | Governance and human stages on the Blueprint |
| Missing environments or rulesets | Export repository setup, then confirm in GitHub |
| Copilot CLI blocked | GitHub org policy for the workflow actor |
| Package absent or stale | Compile, export, install |
| Runtime locked | Purchase Operate on the live Deploy |
Re-run Verify only when you need another purchased report. Use the install verifier on the bound repo to confirm files and setup after Orchestrate.