AGENTFORCE-SC-01: Agent Metadata Below API v64
🟢 Low · Supply Chain Security
The project contains GenAiPlannerBundle metadata (API v64.0+) but sfdx-project.json sets sourceApiVersion below 64.0. Retrieve/deploy at the older API version can drop or degrade the planner bundle. Legacy GenAiPlanner projects and package.xml manifest versions are not reported.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-SC-01 |
| Severity | Low |
| Category | Supply Chain Security |
| Compliance | SOC2_CC7, NIST_AI_RMF |
Remediation
Set sourceApiVersion to 64.0 or higher in sfdx-project.json when the project contains genAiPlannerBundles/ metadata, or keep the legacy GenAiPlanner format if the org targets an older API.