Oliver Kieselbach 34edadf0db docs(rules): document observability limits of the ZTD known-issue rules ...

The agent is normally installed by an IME platform script AFTER MDM
enrollment succeeded, so pre-enrollment failures (enrollment blockers,
TPM attestation) are invisible in the normal flow — no enrollment means
no agent and no authenticable session. Await-enrollment mode does not
help either: the binary only polls for the MDM certificate and cannot
authenticate without it. Only bootstrap-token deployments (one pilot
customer) can report pre-MDM.

- New Observability section in docs/agent/autopilot-ztd-diagnostics.md
  with a per-rule visibility matrix (normal / bootstrap / await) and the
  follow-up option of backfilling Autopilot-channel error records
- ANALYZE-ENRL-003/004 descriptions state the limitation explicitly so
  portal users understand why these rules rarely fire

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-16 19:14:36 +02:00

..

ANALYZE-APP-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-APP-002.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-APP-003.json

feat: externalize rules to GitHub + API consolidation + preview mode

2026-02-28 13:12:09 +01:00

ANALYZE-APP-004.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-APP-005.json

feat: externalize rules to GitHub + API consolidation + preview mode

2026-02-28 13:12:09 +01:00

ANALYZE-APP-006.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-APP-007.json

refactor(v2): app_tracking_summary back to flat V1 schema

2026-04-27 22:39:09 +02:00

ANALYZE-APP-008.json

feat: externalize rules to GitHub + API consolidation + preview mode

2026-02-28 13:12:09 +01:00

ANALYZE-APP-010.json

feat: externalize rules to GitHub + API consolidation + preview mode

2026-02-28 13:12:09 +01:00

ANALYZE-APP-012.json

Better app failure detection and reporting

2026-04-10 18:12:30 +02:00

ANALYZE-APP-013.json

fix(rules): make detection-failure result actionable for end users

2026-05-28 15:53:02 +02:00

ANALYZE-APP-014.json

feat(agent): AppX/MSIX failure enrichment in ESP settle window (esp_appx_failure_analysis)

2026-07-09 15:49:27 +02:00

ANALYZE-CORR-003.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-DEV-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-DEV-002.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-DEV-003.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-DEV-004.json

feat(wu-oobe): detect & surface Windows Update during OOBE + self-maintaining rule sunset

2026-07-08 18:22:41 +02:00

ANALYZE-DEV-005.json

feat(wu-oobe): detect & surface Windows Update during OOBE + self-maintaining rule sunset

2026-07-08 18:22:41 +02:00

ANALYZE-DEV-006.json

feat(agent): os_build_changed detection + WU channel blind-spot census (session 7443317c)

2026-07-10 18:42:48 +02:00

ANALYZE-DEV-007.json

feat(agent+rules): evidence-backed ZTD diagnostics for missing Autopilot profiles

2026-07-16 19:07:05 +02:00

ANALYZE-ENRL-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-ENRL-002.json

fix(sessions): emit terminal session_timeout event so 5h-timeout sessions analyze

2026-05-31 18:09:39 +02:00

ANALYZE-ENRL-003.json

docs(rules): document observability limits of the ZTD known-issue rules

2026-07-16 19:14:36 +02:00

ANALYZE-ENRL-004.json

docs(rules): document observability limits of the ZTD known-issue rules

2026-07-16 19:14:36 +02:00

ANALYZE-ENRL-005.json

feat(agent+rules): evidence-backed ZTD diagnostics for missing Autopilot profiles

2026-07-16 19:07:05 +02:00

ANALYZE-ESP-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-ESP-002.json

feat: enhanced analyze rule engine (in not_in support) MarkSessionAsFailed support, new ESP rule for cert errors

2026-04-14 21:46:20 +02:00

ANALYZE-ESP-004.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-ID-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-ID-002.json

changed link reference in admin analyze

2026-03-18 11:17:08 +01:00

ANALYZE-ID-003.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-OFFICE-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-SEC-001.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-SEC-003.json

feat(agent): AutoLogon detector + analyze rules (V2)

2026-06-07 12:09:52 +02:00

ANALYZE-SEC-004.json

fix(rules): drop AutoLogon false-positive on normal Autopilot enrollments

2026-06-08 19:06:53 +02:00

ANALYZE-SEC-005.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-SEC-006.json

feat(rules): built-in analyze-rule hygiene pass ahead of public docs catalog

2026-07-06 12:32:32 +02:00

ANALYZE-SEC-007.json

feat(ppkg): array-aware analyze rules + allow-list + size-chunked scan event

2026-06-07 15:14:51 +02:00