# Sofiia NODA2 Tool Matrix (2026-03-01)

Legend: `Y`=present/verified, `N`=missing, `NT`=not runtime-tested in this audit run.

| Tool | Wiring | RBAC | Limits | Rollout | Runtime | Risk |
|---|---|---|---|---|---|---|
| agent_email_tool | Y | Y | Y | Y | Y (list_inboxes) | low |
| alert_ingest_tool | Y | Y | Y | N | NT | low |
| architecture_pressure_tool | Y | Y | Y | N | NT | low |
| backlog_tool | Y | Y | Y | N | NT | low |
| binance_account_bots | Y | N | N | N | NT | medium |
| binance_bots_top | Y | N | N | N | NT | medium |
| browser_tool | Y | Y | Y | Y | Y (start/goto/get_current_url/close) | low |
| calc_window_quote | Y | N | N | N | NT | medium |
| calendar_tool | Y | Y | Y | Y | Y (route live; account missing expected) | medium |
| comfy_generate_image | Y | Y | Y | Y | NT | low |
| comfy_generate_video | Y | Y | Y | Y | NT | low |
| config_linter_tool | Y | Y | Y | Y | NT | low |
| contract_tool | Y | Y | Y | Y | NT | low |
| cost_analyzer_tool | Y | Y | Y | Y | NT | low |
| crawl4ai_scrape | Y | Y | Y | Y | NT | low |
| crm_create_job | Y | N | N | N | NT | medium |
| crm_create_quote | Y | N | N | N | NT | medium |
| crm_search_client | Y | N | N | N | NT | medium |
| crm_update_quote | Y | N | N | N | NT | medium |
| crm_upsert_client | Y | N | N | N | NT | medium |
| crm_upsert_site | Y | N | N | N | NT | medium |
| crm_upsert_window_unit | Y | N | N | N | NT | medium |
| data_governance_tool | Y | Y | Y | Y | NT | low |
| dependency_scanner_tool | Y | Y | Y | Y | NT | low |
| docs_render_invoice_pdf | Y | N | N | N | NT | medium |
| docs_render_quote_pdf | Y | N | N | N | NT | medium |
| drift_analyzer_tool | Y | Y | Y | Y | NT | low |
| file_tool | Y | Y | Y | Y | NT | low |
| graph_query | Y | Y | Y | Y | NT | low |
| image_generate | Y | Y | Y | Y | NT | low |
| incident_escalation_tool | Y | Y | Y | N | NT | low |
| incident_intelligence_tool | Y | Y | Y | N | NT | low |
| job_orchestrator_tool | Y | Y | Y | Y | NT | low |
| kb_tool | Y | Y | Y | Y | NT | low |
| market_data | Y | Y | Y | N | NT | low |
| memory_search | Y | Y | Y | Y | NT | low |
| notion_tool | Y | N | N | N | Y (status) | medium |
| observability_tool | Y | Y | Y | Y | NT | low |
| oncall_tool | Y | Y | Y | Y | NT | low |
| pieces_tool | Y | N | N | N | NT | medium |
| pr_reviewer_tool | Y | Y | Y | Y | NT | low |
| presentation_create | Y | Y | Y | Y | NT | low |
| presentation_download | Y | Y | N | Y | NT | low |
| presentation_status | Y | Y | N | Y | NT | low |
| remember_fact | Y | Y | N | Y | NT | low |
| repo_tool | Y | Y | Y | Y | Y (metadata) | low |
| risk_engine_tool | Y | Y | Y | N | NT | low |
| risk_history_tool | Y | Y | Y | N | NT | low |
| safe_code_executor_tool | Y | Y | Y | Y | Y (validate) | low |
| schedule_confirm_slot | Y | N | N | N | NT | medium |
| schedule_propose_slots | Y | N | N | N | NT | medium |
| secure_vault_tool | Y | Y | Y | Y | Y (store) | low |
| threatmodel_tool | Y | Y | Y | Y | NT | low |
| tts_speak | Y | Y | Y | Y | NT | low |
| web_extract | Y | Y | Y | Y | NT | low |
| web_search | Y | Y | Y | Y | NT | low |