@dx-do/cli 5.2.49 → 6.0.1

package/dist-node/index-qffdhwgm.json

@@ -0,0 +1,2479 @@
+[
+  {
+    "id": "agent",
+    "type": "AGENT",
+    "title": "AGENT — a telemetry collector",
+    "universality": "universal",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [
+      "collector",
+      "monitor"
+    ],
+    "common_phrasings": [
+      "the agent on host X",
+      "is X being monitored",
+      "show me the collectors",
+      "which agents are connected"
+    ],
+    "typical_attributes": [
+      "agentName",
+      "name",
+      "agentType",
+      "agentIsConnected",
+      "agentConnectedTime",
+      "SystemFQHostName",
+      "SystemSimpleHostName",
+      "SourceProduct",
+      "product",
+      "agentDomain",
+      "category",
+      "version"
+    ],
+    "typical_metrics_hint": "AGENT vertices do not have their own time-series in the same way HOSTs/JVMs do — the AGENT is the *producer*. Use the `agent` attribute on a metric source name segment, or TRAVERSE `agent-monitors` from the AGENT to its monitored entities to find the metrics.",
+    "related_entities": [
+      "host",
+      "agent_connection",
+      "agent_status",
+      "dxi_service"
+    ],
+    "related_cookbooks": [
+      "tas-quickstart",
+      "metrics-grounding",
+      "metric-source-names"
+    ],
+    "tags": [
+      "apm",
+      "telemetry",
+      "universal"
+    ],
+    "filename": "agent.md"
+  },
+  {
+    "id": "host",
+    "type": "HOST",
+    "title": "HOST — physical or virtual machine in the topology (uppercase, APM convention)",
+    "universality": "universal",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "machine",
+      "node",
+      "server",
+      "box"
+    ],
+    "common_phrasings": [
+      "the host running X",
+      "show me the hosts",
+      "which machines are unhealthy",
+      "this server"
+    ],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "SourceProduct",
+      "product",
+      "agent",
+      "category",
+      "resourceType",
+      "NetworkAddress",
+      "acnHostName",
+      "acnOtherHostNames",
+      "acn_loganalytics_key"
+    ],
+    "typical_metrics_hint": "Host-level CPU/memory/disk/network typically come from an Infrastructure Agent on the same machine. Filter MM by `metric.source` containing the host's simple-or-FQ name. Note: HOST often has an `agent` attribute pointing at its monitoring AGENT(s) — useful as a shortcut without a TRAVERSE.",
+    "related_entities": [
+      "agent",
+      "host_netops",
+      "k8s_node"
+    ],
+    "related_cookbooks": [
+      "tas-quickstart",
+      "metric-source-names"
+    ],
+    "notes": "Distinct from `Host` (mixed-case, NetOps integration). Both can coexist on the same tenant; demo-prod has 32 HOST and 20 Host. See `lexicon/host` for disambiguation.",
+    "tags": [
+      "infrastructure",
+      "universal"
+    ],
+    "filename": "host.md"
+  },
+  {
+    "id": "business_transaction",
+    "type": "BUSINESSTRANSACTION",
+    "title": "BUSINESSTRANSACTION — a named end-to-end APM transaction",
+    "universality": "universal",
+    "layer": "ATC",
+    "synonyms": [
+      "BT",
+      "transaction",
+      "business txn",
+      "btx"
+    ],
+    "common_phrasings": [
+      "the checkout flow",
+      "this transaction",
+      "the BT for X",
+      "how is the login transaction performing"
+    ],
+    "typical_attributes": [
+      "name",
+      "transactionName",
+      "applicationName",
+      "agentDomain",
+      "serviceId",
+      "endUser",
+      "processedBy",
+      "product",
+      "IsExperience",
+      "Experience",
+      "AXAAppName"
+    ],
+    "typical_metrics_hint": "BT metrics are reported by the APM agent of the JVM running the BT — frequency, errors-per-interval, response-time percentiles. Look under the agent's metric source for `Frontends|<frontend>|<bt-name>:<metric>` paths.",
+    "related_entities": [
+      "servlet",
+      "springservice",
+      "genericfrontend",
+      "agent",
+      "database"
+    ],
+    "related_cookbooks": [
+      "investigator-flow",
+      "metrics-grounding"
+    ],
+    "tags": [
+      "apm",
+      "universal"
+    ],
+    "filename": "business_transaction.md"
+  },
+  {
+    "id": "agent_connection",
+    "type": "AGENT_CONNECTION",
+    "title": "AGENT_CONNECTION — an agent's connection lifecycle record",
+    "universality": "platform-internal",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [
+      "connection",
+      "agent session"
+    ],
+    "common_phrasings": [
+      "when did this agent connect",
+      "agent connection history"
+    ],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "SourceProduct",
+      "product",
+      "agent",
+      "backendNode",
+      "category",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "No first-class metrics — this is a state record, not a metric source. Connection events show up in alarms / event streams instead.",
+    "related_entities": [
+      "agent",
+      "agent_status"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "platform-internal",
+      "telemetry"
+    ],
+    "filename": "agent_connection_and_status.md"
+  },
+  {
+    "id": "agent_status",
+    "type": "AGENT_STATUS",
+    "title": "AGENT_STATUS — current health/state of a deployed agent",
+    "universality": "platform-internal",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [
+      "agent health"
+    ],
+    "common_phrasings": [
+      "is this agent healthy",
+      "why is the agent reporting bad"
+    ],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agentHostname",
+      "agentAgent",
+      "agentProcess",
+      "RootResourceFolder",
+      "agentDomain",
+      "createdBy",
+      "Source cluster",
+      "product",
+      "SourceProduct",
+      "ACNId"
+    ],
+    "typical_metrics_hint": "Status-flavored attributes are on the vertex itself; for time-series of agent up/down, look at the agent's own `*Status*` metric path under its source.",
+    "related_entities": [
+      "agent",
+      "agent_connection"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "platform-internal",
+      "telemetry"
+    ],
+    "filename": "agent_connection_and_status.md"
+  },
+  {
+    "id": "dxi_service",
+    "type": "DXI_SERVICE",
+    "title": "DXI_SERVICE — APM-internal service abstraction (NOT the same as a DXO2 service)",
+    "universality": "platform-internal",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [
+      "APM service",
+      "monitored service",
+      "application service"
+    ],
+    "common_phrasings": [
+      "the service this agent feeds",
+      "application service grouping"
+    ],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "SourceProduct",
+      "agent",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Aggregated metrics for the apps an agent feeds — but most \"service\" questions a user asks are about DXO2 services, not DXI_SERVICE. See `lexicon/service`.",
+    "related_entities": [
+      "agent",
+      "service_dxo2"
+    ],
+    "related_cookbooks": [
+      "universes-and-scopes",
+      "investigator-flow"
+    ],
+    "notes": "High-frequency disambiguation trap — when a user says \"service\" they almost never mean DXI_SERVICE.",
+    "tags": [
+      "apm",
+      "platform-internal"
+    ],
+    "filename": "dxi_service.md"
+  },
+  {
+    "id": "entity",
+    "type": "ENTITY",
+    "title": "ENTITY — generic platform-side entity (used by connectors and integrations as a fallback)",
+    "universality": "platform-internal",
+    "layer": "CONNECTOR_METADATA",
+    "synonyms": [
+      "generic entity"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "SourceProduct",
+      "product"
+    ],
+    "typical_metrics_hint": "No metrics specific to ENTITY — it's a typeless container. Look at the integration that produced it.",
+    "related_entities": [
+      "connector",
+      "product"
+    ],
+    "related_cookbooks": [],
+    "notes": "Rare to query directly. Usually appears because an integration emitted a vertex without a more specific type.",
+    "tags": [
+      "connector",
+      "platform-internal"
+    ]
+  },
+  {
+    "id": "product",
+    "type": "PRODUCT",
+    "title": "PRODUCT — registered upstream product/integration",
+    "universality": "platform-internal",
+    "layer": "CONNECTOR_METADATA",
+    "synonyms": [
+      "integration",
+      "datasource"
+    ],
+    "common_phrasings": [
+      "which integrations are wired up",
+      "list connected products"
+    ],
+    "typical_attributes": [
+      "id",
+      "name",
+      "status",
+      "version",
+      "productDetails",
+      "host",
+      "ip"
+    ],
+    "typical_metrics_hint": "PRODUCT vertices represent meta — push-interval and ingestion-status attributes are present, but real metrics come from the entities the product produces.",
+    "related_entities": [
+      "connector",
+      "entity"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "connector",
+      "platform-internal"
+    ]
+  },
+  {
+    "id": "connector",
+    "type": "CONNECTOR",
+    "title": "CONNECTOR — an instance of an integration runtime",
+    "universality": "platform-internal",
+    "layer": "ACN",
+    "synonyms": [
+      "ingestion connector"
+    ],
+    "common_phrasings": [
+      "which connectors are running",
+      "connector ingestion status"
+    ],
+    "typical_attributes": [
+      "id",
+      "name",
+      "status",
+      "version",
+      "host",
+      "ingestionStatus",
+      "ip",
+      "status_description"
+    ],
+    "typical_metrics_hint": "Connector health is an attribute (`ingestionStatus`, `status_description`); for ingestion-volume metrics, look at the source product's own metrics.",
+    "related_entities": [
+      "product",
+      "acn_config"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "connector",
+      "platform-internal"
+    ]
+  },
+  {
+    "id": "acn_config",
+    "type": "ACN_CONFIG",
+    "title": "ACN_CONFIG — singleton configuration for the ACN connector subsystem",
+    "universality": "platform-internal",
+    "layer": "ACN_CONFIGURATION",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "AcnSettings",
+      "AcnSettingsHistory"
+    ],
+    "typical_metrics_hint": "No metrics. Configuration vertex.",
+    "related_entities": [
+      "connector"
+    ],
+    "related_cookbooks": [],
+    "notes": "Singleton in CONNECTOR_METADATA-adjacent layer. Rarely the answer to a user query.",
+    "tags": [
+      "connector",
+      "platform-internal"
+    ]
+  },
+  {
+    "id": "genericfrontend",
+    "type": "GENERICFRONTEND",
+    "title": "GENERICFRONTEND — APM-recorded frontend entry point (HTTP / gRPC / message handler)",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "frontend",
+      "entry point"
+    ],
+    "common_phrasings": [
+      "the API endpoints",
+      "frontends for X application",
+      "entry points into Y"
+    ],
+    "typical_attributes": [
+      "name",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "processedBy",
+      "product",
+      "serviceId",
+      "IsExperience",
+      "Experience",
+      "deployment.environment.name"
+    ],
+    "typical_metrics_hint": "Per-frontend response time, errors, calls-per-interval reported by the APM agent. Path shape: `Frontends|<frontend-name>:<metric>`.",
+    "related_entities": [
+      "servlet",
+      "springservice",
+      "business_transaction",
+      "agent"
+    ],
+    "related_cookbooks": [
+      "investigator-flow"
+    ],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ],
+    "filename": "servlet_or_frontend.md"
+  },
+  {
+    "id": "servlet",
+    "type": "SERVLET",
+    "title": "SERVLET — Java servlet endpoint (Java APM agent)",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "servlet endpoint",
+      "Java servlet"
+    ],
+    "common_phrasings": [
+      "this servlet",
+      "the X servlet",
+      "show me the servlets for application Y"
+    ],
+    "typical_attributes": [
+      "name",
+      "servletClassname",
+      "servletMethod",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "processedBy",
+      "product",
+      "Build Date",
+      "Build Number"
+    ],
+    "typical_metrics_hint": "Per-servlet response time, errors, throughput. Path shape: `Servlets|<servlet>:<metric>`.",
+    "related_entities": [
+      "business_transaction",
+      "springservice",
+      "genericfrontend",
+      "agent"
+    ],
+    "related_cookbooks": [
+      "investigator-flow"
+    ],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ],
+    "filename": "servlet_or_frontend.md"
+  },
+  {
+    "id": "springservice",
+    "type": "SPRINGSERVICE",
+    "title": "SPRINGSERVICE — Spring-framework service endpoint (Java APM agent)",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "Spring controller",
+      "Spring service"
+    ],
+    "common_phrasings": [
+      "the Spring service",
+      "this controller"
+    ],
+    "typical_attributes": [
+      "name",
+      "ServiceName",
+      "Technology",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "processedBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Spring-flavored counterpart to SERVLET — response time, throughput, errors per service method.",
+    "related_entities": [
+      "servlet",
+      "business_transaction",
+      "genericfrontend",
+      "agent"
+    ],
+    "related_cookbooks": [
+      "investigator-flow"
+    ],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ],
+    "filename": "servlet_or_frontend.md"
+  },
+  {
+    "id": "expressjs",
+    "type": "EXPRESSJS",
+    "title": "EXPRESSJS — Express route endpoint (Node.js APM agent)",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "Express route",
+      "Node route"
+    ],
+    "common_phrasings": [
+      "this Express route",
+      "the API in our Node app"
+    ],
+    "typical_attributes": [
+      "name",
+      "HTTPMethodName",
+      "RouteName",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "k8s_pod_container_name",
+      "k8s_pod_name",
+      "k8s_pod_podIP",
+      "k8s_project"
+    ],
+    "typical_metrics_hint": "Per-route response time, throughput, error rate. Often co-located with k8s_POD attributes — Node agents commonly run inside Kubernetes.",
+    "related_entities": [
+      "agent",
+      "k8s_pod",
+      "business_transaction",
+      "genericfrontend"
+    ],
+    "related_cookbooks": [
+      "investigator-flow"
+    ],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "webservice",
+    "type": "WEBSERVICE",
+    "title": "WEBSERVICE — SOAP / WSDL-defined web service endpoint",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SOAP service",
+      "WS endpoint"
+    ],
+    "common_phrasings": [
+      "the web service",
+      "this SOAP endpoint"
+    ],
+    "typical_attributes": [
+      "name",
+      "namespace",
+      "wsNamespace",
+      "operationname",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "backendNode",
+      "processedBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Per-operation response time/error metrics under the producing agent.",
+    "related_entities": [
+      "webservice_server",
+      "webserver",
+      "agent",
+      "business_transaction"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "webservice_server",
+    "type": "WEBSERVICE_SERVER",
+    "title": "WEBSERVICE_SERVER — server endpoint hosting a web service",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "WS server"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "wsNamespace",
+      "wsOperation",
+      "operationname",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "hostname",
+      "processedBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Server-side counters for SOAP/REST traffic — pair with WEBSERVICE for client-side view.",
+    "related_entities": [
+      "webservice",
+      "webserver",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "webserver",
+    "type": "WEBSERVER",
+    "title": "WEBSERVER — Apache / nginx / IIS web server",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "HTTP server"
+    ],
+    "common_phrasings": [
+      "the webserver",
+      "nginx serving X"
+    ],
+    "typical_attributes": [
+      "name",
+      "serverName",
+      "serverType",
+      "agent",
+      "hostname",
+      "product",
+      "__interfaces"
+    ],
+    "typical_metrics_hint": "Connection / request / bandwidth counters per server type.",
+    "related_entities": [
+      "agent",
+      "webservice",
+      "webservice_server"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "database",
+    "type": "DATABASE",
+    "title": "DATABASE — APM-discovered database backend an application talks to.",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "db",
+      "datastore",
+      "backend db"
+    ],
+    "common_phrasings": [
+      "the database for X",
+      "database connection issues",
+      "how are the dbs"
+    ],
+    "typical_attributes": [
+      "name",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "backendNode",
+      "hostname",
+      "processedBy",
+      "product",
+      "port",
+      "provider",
+      "remoteName"
+    ],
+    "typical_metrics_hint": "Backend metrics under the agent's `Backends|<provider>|<remote>:<metric>` path. Connection-pool, query-time, error counters depend on the agent type.",
+    "related_entities": [
+      "inferred_database",
+      "mysql_db",
+      "business_transaction",
+      "agent"
+    ],
+    "related_cookbooks": [
+      "investigator-flow",
+      "metrics-grounding"
+    ],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ],
+    "filename": "database_or_inferred.md"
+  },
+  {
+    "id": "mysql_db",
+    "type": "MYSQL_DB",
+    "title": "MYSQL_DB — first-class MySQL database (typically from a MySQL agent / connector)",
+    "universality": "runtime-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "MySQL",
+      "mysql instance"
+    ],
+    "common_phrasings": [
+      "this MySQL",
+      "the MySQL DB for X"
+    ],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "SourceProduct",
+      "agent",
+      "category",
+      "product",
+      "resourceType",
+      "Database Connection",
+      "Database Host Name",
+      "Database Name",
+      "Database OS"
+    ],
+    "typical_metrics_hint": "MySQL-specific metrics from the MySQL agent — query rates, connection counts, replication lag.",
+    "related_entities": [
+      "database",
+      "host",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "runtime-specific"
+    ],
+    "filename": "database_or_inferred.md"
+  },
+  {
+    "id": "jmx_system",
+    "type": "JMX_SYSTEM",
+    "title": "JMX_SYSTEM — a JMX-instrumented JVM the platform discovered",
+    "universality": "runtime-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "JMX target",
+      "JMX endpoint"
+    ],
+    "common_phrasings": [
+      "JMX for X",
+      "the JVM at host:port"
+    ],
+    "typical_attributes": [
+      "name",
+      "jmx_system_name",
+      "jmx port",
+      "jmxCorId",
+      "jmx_metrics_root",
+      "hostname",
+      "ipaddress",
+      "agent",
+      "category",
+      "product",
+      "SourceProduct",
+      "ACNId"
+    ],
+    "typical_metrics_hint": "JMX is the canonical *orphaned-metric* example — often the metrics provided by JMX are not associated with this node, but it is an indicator that some JMX data is provided by the agent; the underlying connection-pools, queues, caches that JMX exposes often have NO matching topology vertex. To find e.g. JDBC pool metrics, query MM by source/path patterns under the JMX agent rather than traversing for a `JDBC_POOL` vertex (it almost certainly does not exist as a vertex out of the box). See `cookbooks/metrics-grounding`.",
+    "related_entities": [
+      "agent",
+      "host"
+    ],
+    "related_cookbooks": [
+      "metrics-grounding"
+    ],
+    "notes": "Pivotal entity for the \"metrics without entities\" class of question. When a user asks about \"database connection pools\", \"thread pools\", \"queues\", and the only thing showing up is a JMX_SYSTEM, the right move is metric-name search not vertex traversal.",
+    "tags": [
+      "infrastructure",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "kafka_client_consumer",
+    "type": "KAFKA_CLIENT_CONSUMER",
+    "title": "KAFKA_CLIENT_CONSUMER — discovered Kafka consumer client",
+    "universality": "runtime-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "Kafka consumer"
+    ],
+    "common_phrasings": [
+      "Kafka consumers",
+      "who is reading from topic X"
+    ],
+    "typical_attributes": [
+      "name",
+      "client_id",
+      "containerId",
+      "hostname",
+      "k8s_pod_service_name",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "dx_source",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Lag / throughput per consumer client_id — usually under the producing JVM agent's metric source.",
+    "related_entities": [
+      "agent",
+      "k8s_pod",
+      "host"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "queue_manager",
+    "type": "QUEUE_MANAGER",
+    "title": "QUEUE_MANAGER — message-queue manager (e.g. IBM MQ)",
+    "universality": "runtime-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "MQ",
+      "queue manager"
+    ],
+    "common_phrasings": [
+      "the MQ",
+      "queue manager for X"
+    ],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "dx_source",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Per-queue depth / msg-rate metrics under the agent monitoring the QM.",
+    "related_entities": [
+      "agent",
+      "host"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "socket_queue",
+    "type": "SOCKET_QUEUE",
+    "title": "SOCKET_QUEUE — a TCP service-port 'queue' (listener) discovered on a host provide by the field developed socket queue extension; rare for now",
+    "universality": "runtime-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "socket listener",
+      "service port"
+    ],
+    "common_phrasings": [
+      "the listener on port X",
+      "service on host:port"
+    ],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "fullServiceIdentifier",
+      "serviceName",
+      "servicePort",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Connection / accept-rate metrics under the discovering agent.",
+    "related_entities": [
+      "host",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "browser_application",
+    "type": "BROWSER_APPLICATION",
+    "title": "BROWSER_APPLICATION — RUM-recorded browser application",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "browser app",
+      "RUM app"
+    ],
+    "common_phrasings": [
+      "the browser app",
+      "RUM for X"
+    ],
+    "typical_attributes": [
+      "name",
+      "Application",
+      "app_name",
+      "app_version",
+      "agent",
+      "monitoring.type"
+    ],
+    "typical_metrics_hint": "Page-load, error, geo-distribution metrics from the Real-User-Monitoring agent.",
+    "related_entities": [
+      "business_transaction",
+      "genericfrontend",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "genericbackend",
+    "type": "GENERICBACKEND",
+    "title": "GENERICBACKEND — a backend the agent saw being called but couldn't classify",
+    "universality": "runtime-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "generic backend"
+    ],
+    "common_phrasings": [
+      "unknown backend",
+      "this backend service"
+    ],
+    "typical_attributes": [
+      "name",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "backendMetricName",
+      "backendNode",
+      "hostname",
+      "processedBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Backend call counts / response time under `Backends|<backendNode>:<metric>` paths.",
+    "related_entities": [
+      "inferred_genericbackend",
+      "database",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "runtime-specific"
+    ]
+  },
+  {
+    "id": "inferred_database",
+    "type": "INFERRED_DATABASE",
+    "title": "INFERRED_DATABASE — database identity inferred by platform-side rules from APM-agent backend metrics",
+    "universality": "inferred",
+    "layer": "ATC",
+    "synonyms": [
+      "inferred db"
+    ],
+    "common_phrasings": [
+      "the database we infer",
+      "this database backend"
+    ],
+    "typical_attributes": [
+      "name",
+      "inferredBackendNode",
+      "cor.dbname.contains.from",
+      "databasename",
+      "product",
+      "provider",
+      "hostname",
+      "port"
+    ],
+    "typical_metrics_hint": "Same backend-call metrics as DATABASE — the inference produces a stable vertex so two unrelated agents pointing at the same DB get unified.",
+    "related_entities": [
+      "database",
+      "agent",
+      "business_transaction"
+    ],
+    "related_cookbooks": [],
+    "notes": "`INFERRED_*` types are the output of platform-side correlation rules. They're the same shape as the non-inferred type; the prefix tells you who created the vertex.",
+    "tags": [
+      "apm",
+      "inferred"
+    ],
+    "filename": "database_or_inferred.md"
+  },
+  {
+    "id": "inferred_webservice",
+    "type": "INFERRED_WEBSERVICE",
+    "title": "INFERRED_WEBSERVICE — web service inferred by platform-side rules",
+    "universality": "inferred",
+    "layer": "ATC",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "inferredBackendNode",
+      "product",
+      "hostname",
+      "port"
+    ],
+    "typical_metrics_hint": "Same shape as WEBSERVICE; the platform unified backend-call patterns into a single vertex.",
+    "related_entities": [
+      "webservice",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "inferred"
+    ]
+  },
+  {
+    "id": "inferred_genericbackend",
+    "type": "INFERRED_GENERICBACKEND",
+    "title": "INFERRED_GENERICBACKEND — generic backend inferred by platform-side rules",
+    "universality": "inferred",
+    "layer": "ATC",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "inferredBackendNode",
+      "product"
+    ],
+    "typical_metrics_hint": "Sibling of GENERICBACKEND with platform-rule-built identity.",
+    "related_entities": [
+      "genericbackend",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "inferred"
+    ]
+  },
+  {
+    "id": "k8s_cluster",
+    "type": "k8s_CLUSTER",
+    "title": "k8s_CLUSTER — a monitored Kubernetes cluster",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "cluster",
+      "K8s cluster"
+    ],
+    "common_phrasings": [
+      "the cluster",
+      "how is cluster X"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_cluster_name",
+      "k8s_cluster_namespaces",
+      "k8s_cluster_nodes",
+      "k8s_cluster_vertexid",
+      "k8s_agent_data_source",
+      "k8s_project",
+      "k8s_type",
+      "keyPrefix",
+      "agent",
+      "ACNId",
+      "SourceProduct"
+    ],
+    "typical_metrics_hint": "Cluster-level rollups (node count, pod count, namespace inventory) emitted by the k8s agent. Per-resource metrics live on the corresponding k8s_NODE/POD/CONTAINER vertices.",
+    "related_entities": [
+      "k8s_namespace",
+      "k8s_node",
+      "k8s_pod",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ],
+    "filename": "k8s_deployment_and_namespace.md"
+  },
+  {
+    "id": "k8s_namespace",
+    "type": "k8s_NAMESPACE",
+    "title": "k8s_NAMESPACE — a Kubernetes namespace within a cluster",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "namespace",
+      "ns"
+    ],
+    "common_phrasings": [
+      "the namespace",
+      "pods in namespace X",
+      "all of namespace prod"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_cluster_name",
+      "k8s_namespace_phase",
+      "k8s_namespace_uuid",
+      "k8s_namespace_vertexid",
+      "k8s_namespace_agent1_metricPath",
+      "k8s_namespace_labels_kubernetes.io/metadata.name",
+      "k8s_agent_data_source",
+      "k8s_project"
+    ],
+    "typical_metrics_hint": "Namespace inventory + aggregate counts. Use `contains` edges to walk down to deployments / pods.",
+    "related_entities": [
+      "k8s_cluster",
+      "k8s_deployment",
+      "k8s_pod"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ],
+    "filename": "k8s_deployment_and_namespace.md"
+  },
+  {
+    "id": "k8s_deployment",
+    "type": "k8s_DEPLOYMENT",
+    "title": "k8s_DEPLOYMENT — a Kubernetes deployment",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "deployment",
+      "k8s deployment",
+      "app"
+    ],
+    "common_phrasings": [
+      "the deployment for X",
+      "how is the X deployment",
+      "this app"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_deployment.name",
+      "k8s_deployment_vertexid",
+      "k8s_deployment_agent1_metricPath",
+      "k8s_deployment_annotations_deployment.kubernetes.io/revision",
+      "k8s_cluster_name",
+      "k8s_project",
+      "k8s_type",
+      "keyPrefix",
+      "k8s_agent_data_source"
+    ],
+    "typical_metrics_hint": "Replica counts, rollout state. Per-pod CPU/memory aggregate up via `composed_of`/`orchestrates` edges.",
+    "related_entities": [
+      "k8s_replicaset",
+      "k8s_pod",
+      "k8s_namespace",
+      "k8s_service"
+    ],
+    "related_cookbooks": [],
+    "notes": "Frequently the answer when a user says \"application X\" in a k8s-native shop. Cross-reference `lexicon/application`.",
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ],
+    "filename": "k8s_deployment_and_namespace.md"
+  },
+  {
+    "id": "k8s_replicaset",
+    "type": "k8s_REPLICASET",
+    "title": "k8s_REPLICASET — a deployment's replica set",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "replicaset",
+      "rs"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "k8s_replicaset.name",
+      "k8s_replicaset_agent1_metricPath",
+      "k8s_replicaset_annotations_deployment.kubernetes.io/desired-replicas",
+      "k8s_replicaset_annotations_deployment.kubernetes.io/max-replicas",
+      "k8s_replicaset_annotations_deployment.kubernetes.io/revision",
+      "k8s_deployment.name",
+      "k8s_cluster_name",
+      "k8s_project"
+    ],
+    "typical_metrics_hint": "Replica desired/actual counts; users usually go straight from deployment to pods and skip this layer.",
+    "related_entities": [
+      "k8s_deployment",
+      "k8s_pod"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ]
+  },
+  {
+    "id": "k8s_daemonset",
+    "type": "k8s_DAEMONSET",
+    "title": "k8s_DAEMONSET — a Kubernetes daemonset",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "daemonset",
+      "ds"
+    ],
+    "common_phrasings": [
+      "the daemonset",
+      "logging agent daemonset"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_daemonset.name",
+      "k8s_daemonset_vertexid",
+      "k8s_daemonset_agent1_metricPath",
+      "k8s_daemonset_annotations_deprecated.daemonset.template.generation",
+      "k8s_cluster_name",
+      "k8s_project",
+      "k8s_type"
+    ],
+    "typical_metrics_hint": "One-pod-per-node fleets — pod counts and rollout state.",
+    "related_entities": [
+      "k8s_pod",
+      "k8s_namespace"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ]
+  },
+  {
+    "id": "k8s_statefulset",
+    "type": "k8s_STATEFULSET",
+    "title": "k8s_STATEFULSET — a Kubernetes statefulset",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "statefulset",
+      "sts"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "k8s_statefulset.name",
+      "k8s_statefulset_vertexid",
+      "k8s_statefulset_agent1_metricPath",
+      "k8s_cluster_name",
+      "k8s_project",
+      "k8s_type",
+      "keyPrefix"
+    ],
+    "typical_metrics_hint": "Replica counts + ordinal-stable identity. Pair with PVC info on the pods.",
+    "related_entities": [
+      "k8s_pod",
+      "k8s_namespace"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ]
+  },
+  {
+    "id": "k8s_pod",
+    "type": "k8s_POD",
+    "title": "k8s_POD — a Kubernetes pod (one or more containers)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "pod"
+    ],
+    "common_phrasings": [
+      "this pod",
+      "the pods for X",
+      "crashlooping pods"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_pod_nodename",
+      "k8s_pod_vertexid",
+      "k8s_container.name",
+      "k8s_cluster_name",
+      "k8s_agent_data_source",
+      "k8s_project",
+      "agent",
+      "product",
+      "ACNId",
+      "SourceProduct",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Pod-level CPU/memory/restart-count aggregated across containers. Container-level detail is on k8s_CONTAINER children.",
+    "related_entities": [
+      "k8s_container",
+      "k8s_deployment",
+      "k8s_namespace",
+      "k8s_service"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ],
+    "filename": "k8s_pod_and_container.md"
+  },
+  {
+    "id": "k8s_container",
+    "type": "k8s_CONTAINER",
+    "title": "k8s_CONTAINER — a container inside a Kubernetes pod",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "container"
+    ],
+    "common_phrasings": [
+      "this container",
+      "the container running X"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_pod_nodename",
+      "k8s_container_image",
+      "k8s_container_imagePullPolicy",
+      "k8s_cluster_name",
+      "k8s_agent_data_source",
+      "agent",
+      "product",
+      "ACNId",
+      "SourceProduct",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Container-level CPU/memory/disk-IO metrics. Often more than one container per pod (sidecars, init containers).",
+    "related_entities": [
+      "k8s_pod",
+      "k8s_node"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ],
+    "filename": "k8s_pod_and_container.md"
+  },
+  {
+    "id": "k8s_service",
+    "type": "k8s_SERVICE",
+    "title": "k8s_SERVICE — a Kubernetes Service (NOT a DXO2 service)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "k8s svc",
+      "cluster IP"
+    ],
+    "common_phrasings": [
+      "the X service in k8s",
+      "cluster IP for X"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_service.name",
+      "k8s_service_clusterip",
+      "k8s_service_service_type",
+      "k8s_service_serviceport",
+      "k8s_service_agent1_metricPath",
+      "k8s_cluster_name",
+      "k8s_agent_data_source",
+      "k8s_project"
+    ],
+    "typical_metrics_hint": "Endpoint counts, service-port traffic. Edges to the pods that back the service.",
+    "related_entities": [
+      "k8s_pod",
+      "k8s_deployment",
+      "k8s_namespace"
+    ],
+    "related_cookbooks": [],
+    "notes": "Disambiguation trap — when a user says \"service\" in a Kubernetes-heavy environment they may mean k8s_SERVICE, not a DXO2 service. See `lexicon/service`.",
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ]
+  },
+  {
+    "id": "k8s_node",
+    "type": "k8s_NODE",
+    "title": "k8s_NODE — a worker node in a Kubernetes cluster (the k8s analogue of HOST)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "node",
+      "k8s node",
+      "worker node"
+    ],
+    "common_phrasings": [
+      "the node hosting X",
+      "how are the nodes",
+      "which nodes are pressured"
+    ],
+    "typical_attributes": [
+      "name",
+      "k8s_node_name",
+      "k8s_cluster_name",
+      "k8s_node_addresses",
+      "k8s_node_capacity_cpu",
+      "k8s_node_capacity_memory",
+      "agent",
+      "ACNId",
+      "SourceProduct"
+    ],
+    "typical_metrics_hint": "Node-level CPU/memory/disk pressure, allocatable vs capacity. Pair with HOST when both are present (k8s agent emits the node, infra agent the host).",
+    "related_entities": [
+      "k8s_pod",
+      "k8s_cluster",
+      "host"
+    ],
+    "related_cookbooks": [],
+    "notes": "Not present in the demo-prod survey snapshot but expected on every Kubernetes-monitored tenant. Catalog row included for grounding completeness.",
+    "tags": [
+      "infrastructure",
+      "integration-specific",
+      "k8s"
+    ]
+  },
+  {
+    "id": "aws_account",
+    "type": "AWS_Account",
+    "title": "AWS_Account — a monitored AWS account (the AWS integration's top-level)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "AWS account"
+    ],
+    "common_phrasings": [
+      "the AWS account"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Account-level rollups. Children: AWS_Region.",
+    "related_entities": [
+      "aws_region",
+      "aws_service_type",
+      "aws_ecs_fargate_cluster"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "aws_region",
+    "type": "AWS_Region",
+    "title": "AWS_Region — a monitored AWS region within an account",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "AWS region"
+    ],
+    "common_phrasings": [
+      "us-east-1",
+      "the EU region"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "AWS_Region",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Regional rollups across services within the account.",
+    "related_entities": [
+      "aws_account",
+      "aws_ecs_fargate_cluster",
+      "aws_service_type"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "aws_service_type",
+    "type": "AWS Service Type",
+    "title": "AWS Service Type — a class of AWS services (literal type name has spaces)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [],
+    "common_phrasings": [
+      "the AWS service type"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "AWS_Region",
+      "AWS_Service",
+      "agent",
+      "category",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Service-class rollups. Below: specific services like AWS_ECS_FARGATE_*.",
+    "related_entities": [
+      "aws_account",
+      "aws_region",
+      "aws_ecs_fargate_cluster"
+    ],
+    "related_cookbooks": [],
+    "notes": "Type name literally contains a space. When filtering, `ATTRIBUTE` `type IN [\"AWS Service Type\"]` works; do not collapse spaces.",
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "aws_ecs_fargate_cluster",
+    "type": "AWS_ECS_FARGATE_CLUSTER",
+    "title": "AWS_ECS_FARGATE_CLUSTER — a monitored AWS ECS Fargate cluster",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "ECS cluster",
+      "Fargate cluster"
+    ],
+    "common_phrasings": [
+      "the Fargate cluster",
+      "the ECS cluster"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "AWS_Region",
+      "AWS_Service",
+      "AWS_Type",
+      "AWS_Resource_Group",
+      "AWS_ECS_Fargate_Cluster_Name",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "layer"
+    ],
+    "typical_metrics_hint": "Cluster CPU/memory/utilization. Children: services and containers.",
+    "related_entities": [
+      "aws_ecs_fargate_service",
+      "aws_ecs_fargate_container"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "aws_ecs_fargate_service",
+    "type": "AWS_ECS_FARGATE_SERVICE",
+    "title": "AWS_ECS_FARGATE_SERVICE — an ECS Fargate service in a cluster",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "Fargate service",
+      "ECS service"
+    ],
+    "common_phrasings": [
+      "the Fargate service",
+      "this ECS task definition"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "AWS_Region",
+      "AWS_Service",
+      "AWS_Type",
+      "AWS_Resource_Group",
+      "AWS_ECS_Fargate_Cluster_Name",
+      "AWS_ECS_Fargate_Service_Name",
+      "agent",
+      "SourceProduct",
+      "ACNId",
+      "layer"
+    ],
+    "typical_metrics_hint": "Per-service running task count, CPU/memory utilization.",
+    "related_entities": [
+      "aws_ecs_fargate_cluster",
+      "aws_ecs_fargate_container"
+    ],
+    "related_cookbooks": [],
+    "notes": "Disambiguation: AWS_ECS_FARGATE_SERVICE vs DXO2 `service` vs k8s_SERVICE — three completely different concepts. See `lexicon/service`.",
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "aws_ecs_fargate_container",
+    "type": "AWS_ECS_FARGATE_CONTAINER",
+    "title": "AWS_ECS_FARGATE_CONTAINER — a running Fargate container",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "Fargate container",
+      "ECS task"
+    ],
+    "common_phrasings": [
+      "the running task",
+      "this Fargate container"
+    ],
+    "typical_attributes": [
+      "name",
+      "AWS_Account",
+      "AWS_ECS_Container_ARN",
+      "AWS_ECS_Container_Docker_ID",
+      "AWS_ECS_Container_Docker_Name",
+      "AWS_ECS_Container_DomainNameServers",
+      "AWS_ECS_Container_IPv4Address",
+      "AWS_ECS_Container_Image_ID",
+      "AWS_ECS_Container_Macaddress",
+      "AWS_ECS_Container_Networkmode",
+      "AWS_ECS_Container_PrivateDNSName",
+      "AWS_ECS_Fargate_Cluster_Name",
+      "ACNId"
+    ],
+    "typical_metrics_hint": "Per-container CPU/memory/network metrics emitted by the AWS integration.",
+    "related_entities": [
+      "aws_ecs_fargate_service",
+      "aws_ecs_fargate_cluster"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "aws",
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "host_netops",
+    "type": "Host",
+    "title": "Host — NetOps Spectrum host (mixed-case, distinct from APM HOST)",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE_UIM",
+    "synonyms": [
+      "NetOps host",
+      "Spectrum host"
+    ],
+    "common_phrasings": [
+      "the host in NetOps"
+    ],
+    "typical_attributes": [
+      "alias",
+      "ACNId",
+      "CSType",
+      "ProbeName",
+      "SourceProduct",
+      "acnOtherHostNames",
+      "correlationNames",
+      "csId",
+      "cs_id",
+      "dx_hostname_list",
+      "monitoredBy"
+    ],
+    "typical_metrics_hint": "NetOps probe metrics — interface stats, ping/availability, SNMP-derived counters.",
+    "related_entities": [
+      "host",
+      "host_device",
+      "device",
+      "lan"
+    ],
+    "related_cookbooks": [],
+    "notes": "Coexists with uppercase HOST on tenants that monitor with both APM and NetOps — they are distinct vertices and rarely connected by an edge. Match by hostname/IP attribute similarity instead.",
+    "tags": [
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "host_device",
+    "type": "Host_Device",
+    "title": "Host_Device — NetOps host with attached device record",
+    "universality": "integration-specific",
+    "layer": "NETWORK_SPECTRUM",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "ACNId",
+      "CAPC_Item_Id",
+      "Condition",
+      "MacAddr",
+      "ModelClass",
+      "ModelHandle",
+      "NetworkAddress",
+      "SourceProduct",
+      "TopologyModelNameString",
+      "acnHostName",
+      "acn_loganalytics_key",
+      "category"
+    ],
+    "typical_metrics_hint": "Device condition + reachability metrics from Spectrum.",
+    "related_entities": [
+      "host_netops",
+      "device",
+      "lan"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "integration-specific",
+      "network"
+    ]
+  },
+  {
+    "id": "device",
+    "type": "Device",
+    "title": "Device — NetOps Spectrum device record",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE_UIM",
+    "synonyms": [
+      "Spectrum device"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "alias",
+      "ACNId",
+      "CSType",
+      "ProbeName",
+      "SourceProduct",
+      "acnOtherHostNames",
+      "correlationNames",
+      "csId",
+      "cs_id",
+      "dx_hostname_list",
+      "monitoredBy"
+    ],
+    "typical_metrics_hint": "Per-device condition rollup; details flow up to LAN-level views.",
+    "related_entities": [
+      "host_netops",
+      "host_device",
+      "lan"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "rtr_cisco",
+    "type": "Rtr_Cisco",
+    "title": "Rtr_Cisco — Cisco router record from NetOps Spectrum",
+    "universality": "integration-specific",
+    "layer": "NETWORK_SPECTRUM",
+    "synonyms": [
+      "Cisco router"
+    ],
+    "common_phrasings": [
+      "the routers"
+    ],
+    "typical_attributes": [
+      "ACNId",
+      "CAPC_Item_Id",
+      "Condition",
+      "MacAddr",
+      "ModelClass",
+      "ModelHandle",
+      "NetworkAddress",
+      "SourceProduct",
+      "TopologyModelNameString",
+      "acnHostName",
+      "acn_loganalytics_key",
+      "category"
+    ],
+    "typical_metrics_hint": "Interface counters + condition. Cisco-vendor-specific MIB metrics.",
+    "related_entities": [
+      "lan",
+      "host_device",
+      "spi_link_network"
+    ],
+    "related_cookbooks": [],
+    "notes": "Tenant-pattern-adjacent: customers running NetOps will have *some* router type, but the literal name varies by vendor (`Rtr_Cisco`, `Rtr_Juniper`, etc.).",
+    "tags": [
+      "integration-specific",
+      "network"
+    ]
+  },
+  {
+    "id": "lan",
+    "type": "LAN",
+    "title": "LAN — NetOps LAN-level grouping",
+    "universality": "integration-specific",
+    "layer": "NETWORK_SPECTRUM",
+    "synonyms": [
+      "network segment"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "ACNId",
+      "Condition",
+      "ModelClass",
+      "ModelHandle",
+      "NetworkAddress",
+      "SourceProduct",
+      "TopologyModelNameString",
+      "acnHostName",
+      "acn_loganalytics_key",
+      "category",
+      "dx_hostname",
+      "dx_ip_address"
+    ],
+    "typical_metrics_hint": "Aggregated condition for the LAN; constituent devices reachable via traversal.",
+    "related_entities": [
+      "rtr_cisco",
+      "host_device",
+      "spi_link_network"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "integration-specific",
+      "network"
+    ]
+  },
+  {
+    "id": "spi_link_network",
+    "type": "SPI_LINK_NETWORK",
+    "title": "SPI_LINK_NETWORK — NetOps inter-device link record",
+    "universality": "integration-specific",
+    "layer": "NETWORK_SPECTRUM",
+    "synonyms": [
+      "network link"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "linkName",
+      "linkTarget",
+      "product"
+    ],
+    "typical_metrics_hint": "Link-level utilization / errors.",
+    "related_entities": [
+      "rtr_cisco",
+      "lan",
+      "host_device"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "integration-specific",
+      "network"
+    ]
+  },
+  {
+    "id": "unplaced",
+    "type": "Unplaced",
+    "title": "Unplaced — NetOps record that hasn't been placed in the topology yet",
+    "universality": "integration-specific",
+    "layer": "NETWORK_SPECTRUM",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "CAPC_Item_Id",
+      "Condition",
+      "ModelClass",
+      "ModelHandle",
+      "SourceProduct",
+      "TopologyModelNameString",
+      "category",
+      "interfaces",
+      "product",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Same as the typed siblings; placement is metadata, not data.",
+    "related_entities": [
+      "host_device",
+      "device"
+    ],
+    "related_cookbooks": [],
+    "notes": "Bucket for NetOps imports waiting for a topology resolution rule. Rarely a useful query target on its own.",
+    "tags": [
+      "integration-specific",
+      "network"
+    ]
+  },
+  {
+    "id": "siteminder_policy_server",
+    "type": "SITEMINDER_POLICY_SERVER",
+    "title": "SITEMINDER_POLICY_SERVER — a SiteMinder Policy Server instance",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "policy server",
+      "SM PS"
+    ],
+    "common_phrasings": [
+      "the policy server",
+      "SiteMinder PS"
+    ],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "policyServerId",
+      "product"
+    ],
+    "typical_metrics_hint": "PS auth/authz throughput, latency, error counts under the SM agent's metric source.",
+    "related_entities": [
+      "siteminder_policy_server_database",
+      "siteminder_web_agent",
+      "siteminder_access_gateway_virtual_host",
+      "siteminder_federation",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "siteminder"
+    ]
+  },
+  {
+    "id": "siteminder_policy_server_database",
+    "type": "SITEMINDER_POLICY_SERVER_DATABASE",
+    "title": "SITEMINDER_POLICY_SERVER_DATABASE — backing database for a SiteMinder PS",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SM PS database"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "databaseType",
+      "policyServerId",
+      "product"
+    ],
+    "typical_metrics_hint": "DB query stats specific to the policy store / session store.",
+    "related_entities": [
+      "siteminder_policy_server",
+      "database"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "siteminder"
+    ]
+  },
+  {
+    "id": "siteminder_web_agent",
+    "type": "SITEMINDER_WEB_AGENT",
+    "title": "SITEMINDER_WEB_AGENT — SiteMinder web agent instance",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SM web agent",
+      "WA"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "WebAgentFQDN",
+      "product"
+    ],
+    "typical_metrics_hint": "Web-agent request counts, cache hit rates, PS round-trip latency.",
+    "related_entities": [
+      "siteminder_policy_server",
+      "webserver"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "siteminder"
+    ]
+  },
+  {
+    "id": "siteminder_access_gateway_virtual_host",
+    "type": "SITEMINDER_ACCESS_GATEWAY_VIRTUAL_HOST",
+    "title": "SITEMINDER_ACCESS_GATEWAY_VIRTUAL_HOST — SiteMinder Access Gateway virtual host config",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SM AG vhost",
+      "SPS virtual host"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "AccessGatewayFQDN",
+      "AccessGatewayHostname",
+      "virtualHost",
+      "product"
+    ],
+    "typical_metrics_hint": "AG traffic counters per virtual host.",
+    "related_entities": [
+      "siteminder_policy_server",
+      "siteminder_federation"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "siteminder"
+    ]
+  },
+  {
+    "id": "siteminder_federation",
+    "type": "SITEMINDER_FEDERATION",
+    "title": "SITEMINDER_FEDERATION — SiteMinder federation partnership record",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SAML federation"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "AccessGatewayFQDN",
+      "AccessGatewayHostname",
+      "federationName",
+      "federationType",
+      "product"
+    ],
+    "typical_metrics_hint": "Federation-token flows, partnership-level error rates.",
+    "related_entities": [
+      "siteminder_policy_server",
+      "siteminder_access_gateway_virtual_host"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "siteminder"
+    ]
+  },
+  {
+    "id": "symantec_directory",
+    "type": "SYMANTEC_DIRECTORY",
+    "title": "SYMANTEC_DIRECTORY — Symantec Directory server instance",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "SymDir",
+      "Symantec LDAP"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "DirectoryName",
+      "DirectoryLocation",
+      "DirectoryVersion",
+      "Hostname",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Directory query rate, replication metrics, multi-write status.",
+    "related_entities": [
+      "symantec_directory_multiwrite_target",
+      "symantec_im_ccs_server"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "symantec"
+    ]
+  },
+  {
+    "id": "symantec_directory_multiwrite_target",
+    "type": "SYMANTEC_DIRECTORY_MULTIWRITE_TARGET",
+    "title": "SYMANTEC_DIRECTORY_MULTIWRITE_TARGET — replication target for SymDir",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "MultiWrite target"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "DirectoryName",
+      "Hostname",
+      "MultiWriteTargetName",
+      "RootResourceFolder",
+      "agent",
+      "agentDomain",
+      "createdBy",
+      "product"
+    ],
+    "typical_metrics_hint": "Replication lag / status per target.",
+    "related_entities": [
+      "symantec_directory"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "symantec"
+    ]
+  },
+  {
+    "id": "symantec_im_ccs_server",
+    "type": "SYMANTEC_IM_CCS_SERVER",
+    "title": "SYMANTEC_IM_CCS_SERVER — Symantec IM CCS server",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agent",
+      "agentDomain",
+      "externalHostname",
+      "imccs_log_location",
+      "instance",
+      "port"
+    ],
+    "typical_metrics_hint": "Server-side CCS metrics from the Symantec integration agent.",
+    "related_entities": [
+      "symantec_directory"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "symantec"
+    ]
+  },
+  {
+    "id": "synthetic_monitor",
+    "type": "SYNTHETIC_MONITOR",
+    "title": "SYNTHETIC_MONITOR — a configured synthetic check (ASM agent)",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "synthetic check",
+      "ASM monitor"
+    ],
+    "common_phrasings": [
+      "the synthetic check",
+      "ping monitor for X",
+      "ASM monitor"
+    ],
+    "typical_attributes": [
+      "name",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "Hostname",
+      "asmFolderId",
+      "asmFolderName",
+      "asmFolderPath",
+      "asmLocationGroup",
+      "asmLocationId",
+      "asmLocationIsPrivate",
+      "asmLocationLatitude"
+    ],
+    "typical_metrics_hint": "Per-check latency, success rate, geo-broken-down probe results.",
+    "related_entities": [
+      "synthetic_location",
+      "synthetic_target",
+      "asm_tenant"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "synthetic"
+    ]
+  },
+  {
+    "id": "synthetic_location",
+    "type": "SYNTHETIC_LOCATION",
+    "title": "SYNTHETIC_LOCATION — a probe location for synthetics",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "probe location"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "asmLocationGroup",
+      "asmLocationId",
+      "asmLocationIsPrivate",
+      "asmLocationLatitude",
+      "asmLocationLongitude",
+      "asmLocationName",
+      "asmLocationPath",
+      "asmLocationType"
+    ],
+    "typical_metrics_hint": "Location-side metrics (probe queue, processing time).",
+    "related_entities": [
+      "synthetic_monitor",
+      "synthetic_target"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "synthetic"
+    ]
+  },
+  {
+    "id": "synthetic_target",
+    "type": "SYNTHETIC_TARGET",
+    "title": "SYNTHETIC_TARGET — what a synthetic monitor probes",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "asmTarget",
+      "asmTargetPath",
+      "asmUserEmail",
+      "asmUserId"
+    ],
+    "typical_metrics_hint": "Target-side response metrics. Matches up with monitor results by target identity.",
+    "related_entities": [
+      "synthetic_monitor",
+      "synthetic_location"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "synthetic"
+    ]
+  },
+  {
+    "id": "asm_tenant",
+    "type": "ASM_TENANT",
+    "title": "ASM_TENANT — top-level App Synthetic Monitor tenant",
+    "universality": "integration-specific",
+    "layer": "ATC",
+    "synonyms": [
+      "ASM tenant"
+    ],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "Hostname",
+      "agent",
+      "agentDomain",
+      "applicationName",
+      "asmUserEmail",
+      "asmUserId"
+    ],
+    "typical_metrics_hint": "Tenant-level synthetic rollups; mostly attribute metadata.",
+    "related_entities": [
+      "synthetic_monitor",
+      "synthetic_location"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "integration-specific",
+      "synthetic"
+    ]
+  },
+  {
+    "id": "lpar_host",
+    "type": "LPAR_HOST",
+    "title": "LPAR_HOST — IBM LPAR-style logical host",
+    "universality": "integration-specific",
+    "layer": "INFRASTRUCTURE",
+    "synonyms": [
+      "LPAR"
+    ],
+    "common_phrasings": [
+      "the LPAR",
+      "mainframe partition"
+    ],
+    "typical_attributes": [
+      "name",
+      "lparName",
+      "agent",
+      "product",
+      "SourceProduct",
+      "ACNId",
+      "dx_source",
+      "layer",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "LPAR CPU/memory consumption from the mainframe-side integration.",
+    "related_entities": [
+      "host",
+      "agent"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "infrastructure",
+      "integration-specific"
+    ]
+  },
+  {
+    "id": "dx_extension",
+    "type": "DX_EXTENSION",
+    "title": "DX_EXTENSION — a registered DX platform extension",
+    "universality": "tenant-pattern",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "Hostname",
+      "SourceProduct",
+      "agent",
+      "agentDomain",
+      "extensionBundle",
+      "extensionName",
+      "extensionType",
+      "extensionVersion",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Per-extension health/heartbeat. Metric set is extension-defined.",
+    "related_entities": [
+      "dx_extension_monitor",
+      "dx_extension_service"
+    ],
+    "related_cookbooks": [],
+    "notes": "Pattern: tenants that load DX extensions (custom monitoring add-ons) will have these. Specific names vary per customer.",
+    "tags": [
+      "apm",
+      "extension",
+      "tenant-pattern"
+    ]
+  },
+  {
+    "id": "dx_extension_monitor",
+    "type": "DX_EXTENSION_MONITOR",
+    "title": "DX_EXTENSION_MONITOR — monitor instance owned by a DX extension",
+    "universality": "tenant-pattern",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "Hostname",
+      "SourceProduct",
+      "agent",
+      "agentDomain",
+      "extensionBundle",
+      "extensionName",
+      "extensionVersion",
+      "monitorClassName",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Whatever metrics the extension chooses to emit.",
+    "related_entities": [
+      "dx_extension",
+      "dx_extension_service"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "extension",
+      "tenant-pattern"
+    ]
+  },
+  {
+    "id": "dx_extension_service",
+    "type": "DX_EXTENSION_SERVICE",
+    "title": "DX_EXTENSION_SERVICE — service-style record from a DX extension",
+    "universality": "tenant-pattern",
+    "layer": "APM_INFRASTRUCTURE",
+    "synonyms": [],
+    "common_phrasings": [],
+    "typical_attributes": [
+      "name",
+      "ACNId",
+      "Hostname",
+      "SourceProduct",
+      "agent",
+      "agentDomain",
+      "extensionBundle",
+      "extensionName",
+      "extensionVersion",
+      "serviceClassName",
+      "resourceType"
+    ],
+    "typical_metrics_hint": "Extension-defined.",
+    "related_entities": [
+      "dx_extension",
+      "dx_extension_monitor"
+    ],
+    "related_cookbooks": [],
+    "tags": [
+      "apm",
+      "extension",
+      "tenant-pattern"
+    ]
+  }
+]