The index behind a query endpoint or alias may be swapped, redeployed, or re-pointed by an identity with excess permissions, or rebuilt from a stale or poisoned source. Queries are answered from an index whose contents were not reviewed, and the change is not visible to consuming applications. Integrity and availability of search results are compromised.
Queries are Served from a Replaced or Stale Index
CCC.Vector.TH04
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Vector.CP02 | Vector Indexing | The service may be configured to build indexes optimized for similarity search, such as HNSW, IVF, or product-quantized structures, with user-selected algorithm and tuning parameters. |
| CCC.Core.CP06 | Access Control | The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes. |
| CCC.Core.CP14 | API Access | The service exposes a port enabling external actors to interact programmatically with the service and its resources using HTTP protocol methods such as GET, POST, PUT, and DELETE. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.Vector.CN02 | Enforce Role-Based Index Lifecycle Management | Restrict index lifecycle operations (create, delete, replace, or re-point an endpoint or alias) to privileged identities using fine-grained access controls. |