Plan to consolidate duplicated Azure functionality across the entra-servicenow and azure-foundry connectors (ARM RBAC role resolution, scope parsing, Entra Graph SP lookups, credential type detection) into a shared package.
Gemini-authored critical architecture review of the SaaS connector ETL pipeline from a CISO security lens, with explicit recognition of SaaS visibility constraints (no source-system instrumentation).
Honest per-connector accounting of how SecurityV0 derives execution counts, where those numbers match ground truth, and where they don't.
Plan to extend the azure-foundry connector to synthesize the data-plane authority chain (workload to RUNS_AS to identity to HAS_ROLE to role to GRANTS to permission to APPLIES_TO to resource) without platform-side changes.