# Spectrum card: Junie

> GAMMA-Ray v0.0.155 (beta, for review; every rating is experimental). The GAMMA-Ray Spectrum beta card of Junie: A4 · R2 · C2 · O3, Scaling; 72 provisions lit across 8 instruments.
> Page: https://gamma-ray.sgit.ai/spectrum/cards/junie/ · Source: data/scans/junie.json


Spectrum 0.2 beta · Public tier · read 2026-11-10 · not reviewed by its vendor yet

JetBrains' coding agent that plans and makes changes in a code base, in JetBrains IDEs, on the command line and in CI through GitHub and GitLab.

Junie a product, as documented SPECTRUM 0.2 BETA · Public tier · 2026-11-10 A4 Autonomy Orchestrates with options on · as shipped A2 π Moderate · S1·R5·A1 ×3 R2 Reach Integrated π Moderate · S1·R5·A1 ×3 C2 Control Configurable π Moderate · S1·R5·A1 ×3 O3 Openness Measured π Moderate · S1·R5·A1 ×3 Draft Stage: Scaling (11 of 16) Shows its work Standout. Autonomy 4 (Orchestrates): "writes, fixes, and validates SQL in the same session that handles your code" Next unlock. Reach 3 (Open protocol): public evidence that there is a published protocol or communication layer between agents would get there. Trust. FACT-Ray : 25 facts: 25 π Moderate · found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it. Standards constellation. 72 provisions lit across 8 of 8 instruments. Salesforce EAAMM OWASP MCP AAGMM Microsoft NIST AI Act Evidence: 14 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

*Figure. The walk from the card down to each indicator, its public source and the instruments it touches; the sections below list the same in text.*

## What each level rests on

*Figure. For each dimension, what its level rests on: one fold-out per fact, each opening that fact's path down to the source.*

This card rates a product as its vendor documents it, not anyone's deployment of it. A feature the operator has to turn on counts, and is marked as available. Levels are computed from the evidence below by [published rules](../../evidence-map/index.md). A dimension with no evidence reads "not yet evidenced".

## Autonomy: level 4, Orchestrates

*What does the agent do on its own?* Runs multi-step workflows across systems or coordinates other agents; a person sets goals and reviews outcomes. **This level holds with: Ask mode; With an allowlist; Brave mode Auto; Brave mode On.** As shipped, with nothing turned on, it is level 2, Suggests.

- `I10` It works across several domains or systems. The release post says Junie connects to databases configured in the IDE through DataGrip and the JetBrains Database plugin and works on SQL in the same session as the code. "writes, fixes, and validates SQL in the same session that handles your code" [Source](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (read, documented, captured 2026-11-10T16:45Z, sha256 `ac014f4922751d9e`) · π Moderate · S1·R5·A1 ×3
- `I18` The agent works independently; the person approves critical decisions only. In brave mode Auto, a safety check approves commands it classes as safe and asks for the rest. "automatically approves the ones it considers safe, while still asking for approval" [Source](https://junie.jetbrains.com/docs/junie-cli.html) (read, documented, available, captured 2026-11-10T16:45Z, sha256 `b0b650713bc6581d`) · π Moderate · S1·R5·A1 ×3
- `I19` The agent has full autonomy within boundaries; the person monitors. With brave mode On, Junie CLI runs every sensitive action without asking; the user turns it on. "Junie CLI executes all potentially sensitive actions without user approval." [Source](https://junie.jetbrains.com/docs/junie-cli.html) (read, documented, available, captured 2026-11-10T16:45Z, sha256 `b0b650713bc6581d`) · π Moderate · S1·R5·A1 ×3

This evidence touches 8 provisions: Salesforce, Microsoft, EAAMM.

## Reach: level 2, Integrated

*How connected is it?* Documented connectors to common tools.

- `I10` It works across several domains or systems. The release post says Junie connects to databases configured in the IDE through DataGrip and the JetBrains Database plugin and works on SQL in the same session as the code. "writes, fixes, and validates SQL in the same session that handles your code" [Source](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (read, documented, captured 2026-11-10T16:45Z, sha256 `ac014f4922751d9e`) · π Moderate · S1·R5·A1 ×3
- `I11` It connects to external tools or services across a trust boundary. Junie CLI can connect to external tools through MCP servers that the user configures. "You can connect Junie CLI to external tools via Model Context Protocol (MCP)." [Source](https://junie.jetbrains.com/docs/junie-cli-mcp-configuration.html) (read, documented, available, captured 2026-11-10T16:45Z, sha256 `6ee3c2568d54ec5b`) · π Moderate · S1·R5·A1 ×3

This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.

**Next unlock: level 3, Open protocol.** Public evidence that there is a published protocol or communication layer between agents.

## Control: level 2, Configurable

*Can people stay in command?* Approval modes, permission scopes and roles are documented settings.

- `I38` High-impact actions need a person's approval. Most terminal commands, edits outside the project and MCP tool calls wait for the user's approval. "Junie CLI will ask for approval from the user" [Source](https://junie.jetbrains.com/docs/junie-cli.html) (read, documented, captured 2026-11-10T16:45Z, sha256 `b0b650713bc6581d`) · π Moderate · S1·R5·A1 ×3
- `I23` What it can reach is enumerated: scopes, permissions, tools. The Action Allowlist page documents a list of five action types (fileEditing, executables, mcpTools, readOutsideProject, readSecretFile), each taking allow or ask rules in the user's allowlist file; this is a documented list, not a measured grant. "There are five types of actions that can be allowed with the" [Source](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (read, documented, captured 2026-11-10T16:45Z, sha256 `ce31f17094967ff1`) · π Moderate · S1·R5·A1 ×3
- `I25` It asks for narrower access than the whole account. The page gives a junie.yaml template that the user copies into the repository's .github/workflows/; its job permissions block has three entries, contents, pull-requests and issues, each set to write. "permissions: contents: write pull-requests: write issues: write" [Source](https://junie.jetbrains.com/docs/junie-on-github.html) (read, documented, available, captured 2026-11-10T16:45Z, sha256 `cf442bf79a61c709`) · π Moderate · S1·R5·A1 ×3

This evidence touches 13 provisions: OWASP, EU AI Act, AAGMM, NIST AI RMF, Salesforce, Microsoft, MCP authorization.

Also evidenced: the rule for level 4. It will count when the level before it is.

**Next unlock: level 3, Observable.** Public evidence that its actions are logged; and that there is a way to pause or stop it; and that it is monitored in operation.

## Openness: level 3, Measured

*Does it show its work?* Publishes evaluations, and a way to report problems or read it by machine.

- `I50` Test or evaluation results are published. The release post reports Junie's SWE-Rebench result (61.6% resolved) in a quote attributed to a Research Lead at Nebius, and links the SWE-Rebench site. "with 61.6% resolved" [Source](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (read, documented, captured 2026-11-10T16:45Z, sha256 `ac014f4922751d9e`) · π Moderate · S1·R5·A1 ×3
- `I57` There is a channel to report problems with it or contest its output. A /feedback command sends feedback on the current session, with its logs, to the Junie team. "Share feedback about the current session with the Junie team." [Source](https://junie.jetbrains.com/docs/slash-commands.html) (read, documented, captured 2026-11-10T16:45Z, sha256 `22503c010b2b1eb3`) · π Moderate · S1·R5·A1 ×3
- `S3` It is machine-readable for agents: it publishes an llms.txt, an AGENTS.md, an API description or an agent card. junie.jetbrains.com serves an llms.txt and links an OpenAPI description; both resolved when fetched on 10 November 2026. "Machine-readable endpoints" [Source](https://junie.jetbrains.com/llms.txt) (probe, observed, captured 2026-11-10T16:45Z, sha256 `47614ecd4279c07e`) · π Moderate · S1·R5·A1 ×3

This evidence touches 14 provisions: NIST AI RMF, EAAMM, EU AI Act, Salesforce, MCP authorization.

**Next unlock: level 4, Verified.** Public evidence that a public certificate or audit report covers it.

## How far to trust this card

**Status: Draft.** Draft means the facts were found in public pages and reviewed by agents. The company has not confirmed them and no customer has gone on record. [FACT-Ray](../../../fact-ray/index.md) says how far each fact can be trusted: who says it (Source), how firmly it is recorded (Record) and who stands behind it (Accountability). It never changes a level.

- **The facts:** 25 facts: 25 π Moderate. Each is written beside its evidence above.
- **The chain:** found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it.
- **Who:** produced by `gamma.studio@web-summit.dinis`; checked by `gamma.review@web-summit.dinis` and `gamma.approve@web-summit.dinis`. [The actors](../../../fact-ray/actors/index.md).
- **What would raise it:** the company's own file at `/.well-known/fact-ray.json` (Source 2), a customer's statement of use (Source 3), or a named person signing the card ([how](../../../fact-ray/well-known/index.md)).

## The standards constellation

One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.

| Instrument | Provisions touched | Of those publicly readable |
|---|---|---|
| Salesforce | 14 | 24 |
| EAAMM | 7 | 8 |
| OWASP | 8 | 18 |
| MCP authorization | 6 | 8 |
| AAGMM | 4 | 6 |
| Microsoft | 14 | 23 |
| NIST AI RMF | 16 | 20 |
| EU AI Act | 3 | 6 |

The 72 provisions lit

Each line item, with the facts that reach it. "Evidenced" is a link of the kind *same*: the fact is what the provision asks. "Partly" is a link of the kind *part*: the fact is one piece of it. "Its absence" points the other way. Each provision has its own page with its text and its place in the source.

| Provision | Instrument | Reached by | How far |
|---|---|---|---|
| [`sf.a01`](../../../provisions/sf.a01/index.md) Level 0, how companies can advance from Level 0 to Level 1 | Salesforce | [I07](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a04`](../../../provisions/sf.a04/index.md) Level 0, how companies can advance from Level 0 to Level 1 | Salesforce | [I58](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai-service/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.L1`](../../../provisions/sf.L1/index.md) Level 1: Information Retrieval Agents | Salesforce | [I07](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.a07`](../../../provisions/sf.a07/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I08](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.a08`](../../../provisions/sf.a08/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I58](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai-service/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a10`](../../../provisions/sf.a10/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I57](https://junie.jetbrains.com/docs/slash-commands.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.L2`](../../../provisions/sf.L2/index.md) Level 2: Simple Orchestration, Single Domain | Salesforce | [I08](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a14`](../../../provisions/sf.a14/index.md) Level 2, how to advance from Level 2 to Level 3 | Salesforce | [I25](https://junie.jetbrains.com/docs/junie-on-github.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a16`](../../../provisions/sf.a16/index.md) Level 2, how to advance from Level 2 to Level 3 | Salesforce | [I10](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.L3`](../../../provisions/sf.L3/index.md) Level 3: Complex Orchestration, Multiple Domain | Salesforce | [I10](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.a17`](../../../provisions/sf.a17/index.md) Level 3, how to advance from Level 3 to Level 4 | Salesforce | [I10](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a21`](../../../provisions/sf.a21/index.md) Level 3, how to advance from Level 3 to Level 4 | Salesforce | [I25](https://junie.jetbrains.com/docs/junie-on-github.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a22`](../../../provisions/sf.a22/index.md) Level 3, how to advance from Level 3 to Level 4 | Salesforce | [I38](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a28`](../../../provisions/sf.a28/index.md) Level 4, how to maximize value | Salesforce | [I57](https://junie.jetbrains.com/docs/slash-commands.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.L2`](../../../provisions/eaamm.L2/index.md) L2 Collaborative (survey item Q9) | EAAMM | [I16](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.L3`](../../../provisions/eaamm.L3/index.md) L3 Consultative (survey item Q9) | EAAMM | [I17](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.L4`](../../../provisions/eaamm.L4/index.md) L4 Supervisory (survey item Q9) | EAAMM | [I18](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.L5`](../../../provisions/eaamm.L5/index.md) L5 Autonomous (survey item Q9) | EAAMM | [I19](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.D1`](../../../provisions/eaamm.D1/index.md) Readiness dimension 1 | EAAMM | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.D2`](../../../provisions/eaamm.D2/index.md) Readiness dimension 2 | EAAMM | [I58](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai-service/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.G3`](../../../provisions/eaamm.G3/index.md) Prerequisite, L2 to L3 | EAAMM | [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.AT4`](../../../provisions/owasp.AT4/index.md) AT4 Code Executing Agent | OWASP | [I04](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.AT6`](../../../provisions/owasp.AT6/index.md) AT6 Externally Extended Agent | OWASP | [I11](https://junie.jetbrains.com/docs/junie-cli-mcp-configuration.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k04`](../../../provisions/owasp.k04/index.md) Maturity Level 0 Unaware and Ad Hoc, key enterprise action | OWASP | [I47](https://junie.jetbrains.com/docs/guidelines-and-memory.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k07`](../../../provisions/owasp.k07/index.md) Maturity Level 1 Experimentation without Guardrails, key enterprise action | OWASP | [I21](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k12`](../../../provisions/owasp.k12/index.md) Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise action | OWASP | [I38](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k14`](../../../provisions/owasp.k14/index.md) Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise action | OWASP | [I61](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai/service-providers/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k19`](../../../provisions/owasp.k19/index.md) Maturity Level 3 Integrated, Continuous Oversight, key enterprise action | OWASP | [I48](https://junie.jetbrains.com/docs/junie-cli-hooks.html) (evidenced), [I45](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k22`](../../../provisions/owasp.k22/index.md) Maturity Level 4 Adaptive, Self-Regulating Governance, key enterprise action | OWASP | [I48](https://junie.jetbrains.com/docs/junie-cli-hooks.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.01`](../../../provisions/mcp.01/index.md) Authorization (draft) | MCP authorization | [S3](https://junie.jetbrains.com/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.02`](../../../provisions/mcp.02/index.md) Authorization (draft) | MCP authorization | [S3](https://junie.jetbrains.com/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.05`](../../../provisions/mcp.05/index.md) Authorization (draft) | MCP authorization | [I23](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.06`](../../../provisions/mcp.06/index.md) Authorization (draft) | MCP authorization | [I25](https://junie.jetbrains.com/docs/junie-on-github.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`mcp.14`](../../../provisions/mcp.14/index.md) Authorization (draft) | MCP authorization | [I23](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.15`](../../../provisions/mcp.15/index.md) Authorization (draft) | MCP authorization | [I25](https://junie.jetbrains.com/docs/junie-on-github.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-02`](../../../provisions/aagmm.GD-02/index.md) GD-02 | AAGMM | [I23](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (partly), [I25](https://junie.jetbrains.com/docs/junie-on-github.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-04`](../../../provisions/aagmm.GD-04/index.md) GD-04 | AAGMM | [I45](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-05`](../../../provisions/aagmm.GD-05/index.md) GD-05 | AAGMM | [I58](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai-service/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-06`](../../../provisions/aagmm.GD-06/index.md) GD-06 | AAGMM | [I38](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.100.1.1`](../../../provisions/ms.100.1.1/index.md) 100: Initial, AI strategy and experience | Microsoft | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (its absence) | its absence · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.1.1`](../../../provisions/ms.200.1.1/index.md) 200: Repeatable, AI strategy and experience | Microsoft | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.1.3`](../../../provisions/ms.200.1.3/index.md) 200: Repeatable, AI strategy and experience | Microsoft | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.2.1`](../../../provisions/ms.200.2.1/index.md) 200: Repeatable, Business strategy | Microsoft | [I08](https://junie.jetbrains.com/docs/junie-ide-plugin.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.3.2`](../../../provisions/ms.200.3.2/index.md) 200: Repeatable, AI governance and security | Microsoft | [I45](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.3.3`](../../../provisions/ms.200.3.3/index.md) 200: Repeatable, AI governance and security | Microsoft | [I45](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.4.2`](../../../provisions/ms.200.4.2/index.md) 200: Repeatable, Technology and data | Microsoft | [I10](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.300.1.1`](../../../provisions/ms.300.1.1/index.md) 300: Defined, AI strategy and experience | Microsoft | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`ms.300.2.3`](../../../provisions/ms.300.2.3/index.md) 300: Defined, Business strategy | Microsoft | [I21](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (partly), [I38](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.400.1.1`](../../../provisions/ms.400.1.1/index.md) 400: Capable, AI strategy and experience | Microsoft | [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.400.2.1`](../../../provisions/ms.400.2.1/index.md) 400: Capable, Business strategy | Microsoft | [I10](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.2.1`](../../../provisions/ms.500.2.1/index.md) 500: Efficient, Business strategy | Microsoft | [I19](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.3.2`](../../../provisions/ms.500.3.2/index.md) 500: Efficient, AI governance and security | Microsoft | [I45](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.3.3`](../../../provisions/ms.500.3.3/index.md) 500: Efficient, AI governance and security | Microsoft | [I48](https://junie.jetbrains.com/docs/junie-cli-hooks.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-5.1`](../../../provisions/nist.GOVERN-5.1/index.md) GOVERN 5.1 | NIST AI RMF | [I57](https://junie.jetbrains.com/docs/slash-commands.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-5.2`](../../../provisions/nist.GOVERN-5.2/index.md) GOVERN 5.2 | NIST AI RMF | [I57](https://junie.jetbrains.com/docs/slash-commands.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-6.1`](../../../provisions/nist.GOVERN-6.1/index.md) GOVERN 6.1 | NIST AI RMF | [I11](https://junie.jetbrains.com/docs/junie-cli-mcp-configuration.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-1.1`](../../../provisions/nist.MAP-1.1/index.md) MAP 1.1 | NIST AI RMF | [I20](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-1.3`](../../../provisions/nist.MAP-1.3/index.md) MAP 1.3 | NIST AI RMF | [I20](https://junie.jetbrains.com/docs/junie-cli.html) (partly), [I65](https://blog.jetbrains.com/blog/2026/09/22/introducing-jetbrains-air/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-2.1`](../../../provisions/nist.MAP-2.1/index.md) MAP 2.1 | NIST AI RMF | [I20](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-2.2`](../../../provisions/nist.MAP-2.2/index.md) MAP 2.2 | NIST AI RMF | [I22](https://junie.jetbrains.com/docs/junie-headless.html) (evidenced), [I21](https://junie.jetbrains.com/docs/action-allowlist-junie-cli.html) (partly) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-3.3`](../../../provisions/nist.MAP-3.3/index.md) MAP 3.3 | NIST AI RMF | [I20](https://junie.jetbrains.com/docs/junie-cli.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-3.5`](../../../provisions/nist.MAP-3.5/index.md) MAP 3.5 | NIST AI RMF | [I38](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-4.1`](../../../provisions/nist.MAP-4.1/index.md) MAP 4.1 | NIST AI RMF | [I11](https://junie.jetbrains.com/docs/junie-cli-mcp-configuration.html) (partly), [I61](https://www.jetbrains.com/legal/docs/terms/jetbrains-ai/service-providers/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-1.1`](../../../provisions/nist.MEASURE-1.1/index.md) MEASURE 1.1 | NIST AI RMF | [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-1.3`](../../../provisions/nist.MEASURE-1.3/index.md) MEASURE 1.3 | NIST AI RMF | [I52](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-2.1`](../../../provisions/nist.MEASURE-2.1/index.md) MEASURE 2.1 | NIST AI RMF | [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-2.3`](../../../provisions/nist.MEASURE-2.3/index.md) MEASURE 2.3 | NIST AI RMF | [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-2.5`](../../../provisions/nist.MEASURE-2.5/index.md) MEASURE 2.5 | NIST AI RMF | [I22](https://junie.jetbrains.com/docs/junie-headless.html) (partly), [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-3.3`](../../../provisions/nist.MEASURE-3.3/index.md) MEASURE 3.3 | NIST AI RMF | [I57](https://junie.jetbrains.com/docs/slash-commands.html) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-13`](../../../provisions/aiact.art-13/index.md) Article 13 | EU AI Act | [I20](https://junie.jetbrains.com/docs/junie-cli.html) (partly), [I22](https://junie.jetbrains.com/docs/junie-headless.html) (partly), [S3](https://junie.jetbrains.com/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-14`](../../../provisions/aiact.art-14/index.md) Article 14 | EU AI Act | [I38](https://junie.jetbrains.com/docs/junie-cli.html) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-15`](../../../provisions/aiact.art-15/index.md) Article 15 | EU AI Act | [I50](https://blog.jetbrains.com/junie/2026/06/junie-coding-agent-out-of-beta/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |

## Upper layers

The public card is the front door. The same evidence, read with the governance rules, is this agent's [GAMMA-Ray rating](../../../scans/junie/index.md): freedom, governance, the level held, the grant and a work order. That layer is written for an operator.

## The vault

Every source behind this card was captured and hashed into a public sgit vault (`zwx0116w`): `captures.json` lists each URL with the SHA-256 of what was fetched and when. Read key:

`sgit_public_read_76f22887a5be444fb2816ffb6b98e9a1b8278e8b351140d4874c78d0ac678601:zwx0116w`

With [sgit](https://sgit.ai/): `sgit clone sgit_public_read_76f22887a5be444fb2816ffb6b98e9a1b8278e8b351140d4874c78d0ac678601:zwx0116w`.