> For the complete documentation index, see [llms.txt](https://docs.bluestorm.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bluestorm.io/checks.md).

# Checks

- [APIs](https://docs.bluestorm.io/checks/api.md)
- [Published APIs must use authentication](https://docs.bluestorm.io/checks/api/api_0001.md)
- [App](https://docs.bluestorm.io/checks/app.md)
- [Project security level](https://docs.bluestorm.io/checks/app/app_0001.md)
- [Project security enabled](https://docs.bluestorm.io/checks/app/app_0002.md)
- [Demo users enabled](https://docs.bluestorm.io/checks/app/app_0003.md)
- [Anonymous user access is disabled](https://docs.bluestorm.io/checks/app/app_0004.md)
- [Strong password policy](https://docs.bluestorm.io/checks/app/app_0005.md)
- [Default admin username changed](https://docs.bluestorm.io/checks/app/app_0006.md)
- [Anonymous user role is restricted](https://docs.bluestorm.io/checks/app/app_0007.md)
- [System administrator role is restricted](https://docs.bluestorm.io/checks/app/app_0008.md)
- [Use strong hash algorithm](https://docs.bluestorm.io/checks/app/app_0009.md)
- [Check user role security for consistency](https://docs.bluestorm.io/checks/app/app_0010.md)
- [Restrict users to a single session](https://docs.bluestorm.io/checks/app/app_0011.md)
- [Perform strict page URL checks](https://docs.bluestorm.io/checks/app/app_0012.md)
- [Project naming standards](https://docs.bluestorm.io/checks/app/app_0013.md)
- [Data is classified](https://docs.bluestorm.io/checks/app/app_0014.md)
- [User roles are validated](https://docs.bluestorm.io/checks/app/app_0015.md)
- [Default user role is restricted](https://docs.bluestorm.io/checks/app/app_0016.md)
- [Components](https://docs.bluestorm.io/checks/component.md)
- [Components with vulnerabilities](https://docs.bluestorm.io/checks/component/comp_0001.md)
- [Mendix runtime version age](https://docs.bluestorm.io/checks/component/comp_0002.md)
- [Mendix runtime support status](https://docs.bluestorm.io/checks/component/comp_0003.md)
- [Non platform supported components](https://docs.bluestorm.io/checks/component/comp_0004.md)
- [Max component age](https://docs.bluestorm.io/checks/component/comp_0005.md)
- [Average age components](https://docs.bluestorm.io/checks/component/comp_0006.md)
- [Use latest version of Marketplace module](https://docs.bluestorm.io/checks/component/comp_0007.md)
- [Use latest version of Marketplace widget](https://docs.bluestorm.io/checks/component/comp_0008.md)
- [Use latest version of Mendix](https://docs.bluestorm.io/checks/component/comp_0009.md)
- [Limit number of Java libraries](https://docs.bluestorm.io/checks/component/comp_0010.md)
- [Limit number of widgets](https://docs.bluestorm.io/checks/component/comp_0011.md)
- [Use minimum Mendix runtime version](https://docs.bluestorm.io/checks/component/comp_0012.md)
- [App uses AI components](https://docs.bluestorm.io/checks/component/comp_0013.md)
- [Constants](https://docs.bluestorm.io/checks/constant.md)
- [Do not expose constants to client](https://docs.bluestorm.io/checks/constant/const_0001.md)
- [Controls](https://docs.bluestorm.io/checks/governance_control.md)
- [Change management](https://docs.bluestorm.io/checks/governance_control/gov_0001.md)
- [Configuration changes are controlled](https://docs.bluestorm.io/checks/governance_control/gov_0002.md)
- [Logs are monitored](https://docs.bluestorm.io/checks/governance_control/gov_0003.md)
- [Access control is monitored](https://docs.bluestorm.io/checks/governance_control/gov_0004.md)
- [Operational tasks are monitored](https://docs.bluestorm.io/checks/governance_control/gov_0005.md)
- [Auditing is enabled](https://docs.bluestorm.io/checks/governance_control/gov_0006.md)
- [Development](https://docs.bluestorm.io/checks/development.md)
- [Last commit to production](https://docs.bluestorm.io/checks/development/dev_0001.md)
- [Last commit to project](https://docs.bluestorm.io/checks/development/dev_0002.md)
- [Project documentation standards](https://docs.bluestorm.io/checks/development/dev_0003.md)
- [Project organization standards](https://docs.bluestorm.io/checks/development/dev_0004.md)
- [Project logging standards](https://docs.bluestorm.io/checks/development/dev_0005.md)
- [Domain Model](https://docs.bluestorm.io/checks/domain_model.md)
- [Default member access rights restricted](https://docs.bluestorm.io/checks/domain_model/dom_0001.md)
- [Use read only attributes in XPath constraints](https://docs.bluestorm.io/checks/domain_model/dom_0002.md)
- [Anonymous users can only change own data](https://docs.bluestorm.io/checks/domain_model/dom_0003.md)
- [Anonymous users cannot change unlimited length strings](https://docs.bluestorm.io/checks/domain_model/dom_0004.md)
- [Domain model standards](https://docs.bluestorm.io/checks/domain_model/dom_0005.md)
- [Anonymous user access restricted](https://docs.bluestorm.io/checks/domain_model/dom_0006.md)
- [Naming standards - Domain Model](https://docs.bluestorm.io/checks/domain_model/dom_0007.md)
- [Documentation standards - Domain Model](https://docs.bluestorm.io/checks/domain_model/dom_0008.md)
- [Module roles are validated](https://docs.bluestorm.io/checks/domain_model/dom_0009.md)
- [Enumerations](https://docs.bluestorm.io/checks/enumeration.md)
- [Naming Standards - Enumerations](https://docs.bluestorm.io/checks/enumeration/enum_0001.md)
- [Microflows](https://docs.bluestorm.io/checks/microflow.md)
- [Incorrect date format](https://docs.bluestorm.io/checks/microflow/mf_0001.md)
- [Incorrect empty string check](https://docs.bluestorm.io/checks/microflow/mf_0002.md)
- [Empty variable used](https://docs.bluestorm.io/checks/microflow/mf_0003.md)
- [Apply entity access when generating documents](https://docs.bluestorm.io/checks/microflow/mf_0004.md)
- [Use inherited entities from System module](https://docs.bluestorm.io/checks/microflow/mf_0005.md)
- [Web service calls with templates should be escaped](https://docs.bluestorm.io/checks/microflow/mf_0006.md)
- [Naming Standards - Microflows](https://docs.bluestorm.io/checks/microflow/mf_0007.md)
- [Logging Standards - Microflows](https://docs.bluestorm.io/checks/microflow/mf_0008.md)
- [Documentation Standards - Microflows](https://docs.bluestorm.io/checks/microflow/mf_0009.md)
- [Pages](https://docs.bluestorm.io/checks/page.md)
- [Attributes in data views should be editable](https://docs.bluestorm.io/checks/page/page_0001.md)
- [Naming Standards - Page Flows](https://docs.bluestorm.io/checks/page/page_0002.md)
- [Documentation Standards - Pages](https://docs.bluestorm.io/checks/page/page_0003.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.bluestorm.io/checks.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.