{ "schemaVersion": "1", "scanId": "2eaa0f2d-c173-4e6b-9850-fa967ff70587", "revision": "5", "state": "completed", "stage": "complete", "target": { "hostname": "example.com", "homepageUrl": "https://example.com/", "entryUrl": "https://example.com/", "title": "Example Domain", "description": "" }, "readiness": { "title": "Example Domain", "description": "", "checks": [ { "checkId": "web.identity", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "partial", "applicability": "applicable", "earned": 0.5, "reason": "Title present; description absent.", "evidence": [ { "id": "web.identity", "url": "https://example.com/", "observation": "Title present; description absent." } ], "details": { "remediation": "Provide a meaningful title and meta description.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.navigation", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 sampled crawlable same-origin content links.", "evidence": [ { "id": "web.navigation", "url": "https://example.com/", "observation": "0 sampled crawlable same-origin content links." } ], "details": { "sampleSize": 1, "remediation": "Use descriptive anchor elements with public href destinations.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.discovery-policy", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "No robots.txt policy is published (HTTP 404).", "evidence": [ { "id": "web.discovery-policy", "url": "https://example.com/robots.txt", "observation": "No robots.txt policy is published (HTTP 404)." } ], "details": { "remediation": "Publish a valid robots.txt with the intended crawler access policy.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.http-access", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "Homepage returned HTTP 200.", "evidence": [ { "id": "web.http-access", "url": "https://example.com/", "observation": "Homepage returned HTTP 200." } ], "details": { "remediation": "Serve the public homepage with a successful HTTP status.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.transport", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "HTTPS certificate verified for all fetched hops.", "evidence": [ { "id": "web.transport", "url": "https://example.com/", "observation": "HTTPS certificate verified for all fetched hops." } ], "details": { "remediation": "Use valid HTTPS and remove redirect loops or HTTPS downgrades.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.error-semantics", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "Nonexistent-path probe returned HTTP 404.", "evidence": [ { "id": "web.error-semantics", "url": "https://example.com/.well-known/growthos-missing-900dfb29-3f86-464a-8c02-caa6f76ef46f", "observation": "Nonexistent-path probe returned HTTP 404." } ], "details": { "remediation": "Return HTTP 404 or 410 for nonexistent pages.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.raw-content", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "partial", "applicability": "applicable", "earned": 0.5, "reason": "125 normalized main-text characters in the raw HTML.", "evidence": [ { "id": "web.raw-content", "url": "https://example.com/", "observation": "125 normalized main-text characters in the raw HTML." } ], "details": { "remediation": "Render useful main content in the initial HTML response.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.structure", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "Document language declared; 1 meaningful headings.", "evidence": [ { "id": "web.structure", "url": "https://example.com/", "observation": "Document language declared; 1 meaningful headings." } ], "details": { "remediation": "Set the document language and provide meaningful hierarchical headings.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.link-purpose", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 of 1 sampled content links have descriptive names.", "evidence": [ { "id": "web.link-purpose", "url": "https://example.com/", "observation": "0 of 1 sampled content links have descriptive names." } ], "details": { "sampleSize": 1, "remediation": "Replace ambiguous link names with clear destination descriptions.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.control-names", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "1 of 1 rendered sampled controls have accessible names. Static Chromium profile: target JavaScript, forms, images and embedded frames disabled; actual DOM and Tab focus observed.", "evidence": [ { "id": "web.control-names", "url": "https://example.com/", "observation": "1 of 1 rendered sampled controls have accessible names. Static Chromium profile: target JavaScript, forms, images and embedded frames disabled; actual DOM and Tab focus observed." } ], "details": { "sampleSize": 1, "remediation": "Label buttons, fields, and links using visible text or accessible labels.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.keyboard", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "1 of 1 sampled controls reached by Tab with detectable focus.", "evidence": [ { "id": "web.keyboard", "url": "https://example.com/", "observation": "1 of 1 sampled controls reached by Tab with detectable focus." } ], "details": { "sampleSize": 1, "remediation": "Use native focusable controls and visible focus styles.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "web.navigation-result", "checkVersion": "1.0.0", "surfaceId": "homepage", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public navigation observation: none.", "evidence": [ { "id": "web.navigation-result", "url": "https://example.com/", "observation": "Public navigation observation: none." } ], "details": { "remediation": "Repair public navigation destinations and their HTTP responses.", "verification": "Repeat the documented observation on the public homepage." } }, { "checkId": "discovery.robots", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Published robots.txt format and User-agent directives checked.", "evidence": [ { "id": "discovery.robots", "url": "https://example.com/robots.txt", "observation": "Published robots.txt format and User-agent directives checked." } ], "details": { "remediation": "Publish robots.txt with User-agent and Allow/Disallow directives.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.sitemap", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 public locations in sampled sitemap files. HTTP 404.", "evidence": [ { "id": "discovery.sitemap", "url": "https://example.com/sitemap.xml", "observation": "0 public locations in sampled sitemap files. HTTP 404." } ], "details": { "remediation": "Publish a valid sitemap and advertise it in robots.txt.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.sitemap-freshness", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 valid nonfuture lastmod values for 0 sampled locations; update truth and recency not inferred. HTTP 404.", "evidence": [ { "id": "discovery.sitemap-freshness", "url": "https://example.com/sitemap.xml", "observation": "0 valid nonfuture lastmod values for 0 sampled locations; update truth and recency not inferred. HTTP 404." } ], "details": { "remediation": "Add accurate lastmod values to sitemap entries when content changes.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.link-headers", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 agent-useful HTTP Link relations parsed.", "evidence": [ { "id": "discovery.link-headers", "url": "https://example.com/", "observation": "0 agent-useful HTTP Link relations parsed." } ], "details": { "remediation": "Add service-desc, service-doc, api-catalog, describedby or alternate Link relations.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.dns-aid", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated.", "evidence": [ { "id": "discovery.dns-aid", "url": "https://example.com/", "observation": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated." } ], "details": { "count": 0, "remediation": "Publish DNS-AID service bindings at _index, _mcp or _a2a._agents.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "discovered", "testedOperations": [ "DoH SVCB/HTTPS _index/_mcp/_a2a._agents", "DoH TXT _index._agents" ], "untestedOperations": [ "DNSSEC chain verification", "service invocation" ] } }, { "checkId": "discovery.api-catalog", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404.", "evidence": [ { "id": "discovery.api-catalog", "url": "https://example.com/.well-known/api-catalog", "observation": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404." } ], "details": { "remediation": "Publish /.well-known/api-catalog as application/linkset+json with public service links.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.ard", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404.", "evidence": [ { "id": "discovery.ard", "url": "https://example.com/.well-known/ai-catalog.json", "observation": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404." } ], "details": { "remediation": "Publish an ARD catalog with specVersion, host and complete entries.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.skills", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404.", "evidence": [ { "id": "discovery.skills", "url": "https://example.com/.well-known/agent-skills/index.json", "observation": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404." } ], "details": { "remediation": "Publish the v0.2.0 skills index with name, description, type, URL and digest per skill.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "discovery.agent-interface", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "A declared machine interface is required for complete agent readiness; homepage richness alone does not meet this rule.", "evidence": [ { "id": "discovery.agent-interface", "url": "https://example.com/", "observation": "A declared machine interface is required for complete agent readiness; homepage richness alone does not meet this rule." } ], "details": { "remediation": "Advertise an OpenAPI description, MCP endpoint or Agent Card for your product.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.llms", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "llms.txt non-HTML text representation checked. HTTP 404.", "evidence": [ { "id": "content.llms", "url": "https://example.com/llms.txt", "observation": "llms.txt non-HTML text representation checked. HTTP 404." } ], "details": { "remediation": "Publish concise /llms.txt with a product summary and documentation links.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.llms-structure", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "llms.txt title, blockquote summary, sections and resource links checked. HTTP 404.", "evidence": [ { "id": "content.llms-structure", "url": "https://example.com/llms.txt", "observation": "llms.txt title, blockquote summary, sections and resource links checked. HTTP 404." } ], "details": { "remediation": "Use a single H1, blockquote summary, H2 sections and descriptive Markdown links.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.llms-links", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0/0 sampled llms.txt links acquired.", "evidence": [ { "id": "content.llms-links", "url": "https://example.com/llms.txt", "observation": "0/0 sampled llms.txt links acquired." } ], "details": { "sampleSize": 0, "remediation": "Repair broken llms.txt links and make linked documentation public.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.markdown", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Accept: text/markdown response media type and non-HTML body checked.", "evidence": [ { "id": "content.markdown", "url": "https://example.com/", "observation": "Accept: text/markdown response media type and non-HTML body checked." } ], "details": { "remediation": "Serve an actual Markdown representation with Content-Type: text/markdown.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.markdown-vary", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Negotiated Markdown must declare Vary: Accept to avoid representation cache collisions.", "evidence": [ { "id": "content.markdown-vary", "url": "https://example.com/", "observation": "Negotiated Markdown must declare Vary: Accept to avoid representation cache collisions." } ], "details": { "remediation": "Add Vary: Accept when content changes with the Accept request header.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.markdown-alternate", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Advertised Markdown alternates and fetched Markdown URLs checked.", "evidence": [ { "id": "content.markdown-alternate", "url": "https://example.com/", "observation": "Advertised Markdown alternates and fetched Markdown URLs checked." } ], "details": { "remediation": "Advertise text/markdown alternates in HTML or HTTP Link headers.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.markdown-quality", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Sampled Markdown: 0 characters, 0 fence boundaries, 0 public links.", "evidence": [ { "id": "content.markdown-quality", "url": "https://example.com/", "observation": "Sampled Markdown: 0 characters, 0 fence boundaries, 0 public links." } ], "details": { "remediation": "Keep Markdown concise, balance code fences and name linked resources.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.markdown-frontmatter", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Markdown frontmatter title and description checked.", "evidence": [ { "id": "content.markdown-frontmatter", "url": "https://example.com/", "observation": "Markdown frontmatter title and description checked." } ], "details": { "remediation": "Provide YAML title and description metadata in published Markdown documents.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "access.ai-policy", "checkVersion": "2.0.0", "surfaceId": "access", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "6/6 sampled training and user-agent robots policies allow the homepage.", "evidence": [ { "id": "access.ai-policy", "url": "https://example.com/robots.txt", "observation": "6/6 sampled training and user-agent robots policies allow the homepage." } ], "details": { "types": [ "GPTBot", "ChatGPT-User", "ClaudeBot", "Claude-User", "PerplexityBot", "Perplexity-User" ], "remediation": "Publish intentional policies for training crawlers and user-invoked agents.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "access.content-signals", "checkVersion": "2.0.0", "surfaceId": "access", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission.", "evidence": [ { "id": "access.content-signals", "url": "https://example.com/robots.txt", "observation": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission." } ], "details": { "remediation": "Publish explicit search, ai-input and ai-train Content-Signal values.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "access.agent-reachability", "checkVersion": "2.0.0", "surfaceId": "access", "status": "pass", "applicability": "applicable", "earned": 1, "reason": "Explicit ChatGPT-User/1.0 public acquisition and challenge/representation check; robots restrictions honored.", "evidence": [ { "id": "access.agent-reachability", "url": "https://example.com/", "observation": "Explicit ChatGPT-User/1.0 public acquisition and challenge/representation check; robots restrictions honored." } ], "details": { "remediation": "Allow user-invoked agents to retrieve public content without challenge pages.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "access.agent-markdown", "checkVersion": "2.0.0", "surfaceId": "access", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Explicit ChatGPT-User/1.0 public acquisition and challenge/representation check; robots restrictions honored.", "evidence": [ { "id": "access.agent-markdown", "url": "https://example.com/", "observation": "Explicit ChatGPT-User/1.0 public acquisition and challenge/representation check; robots restrictions honored." } ], "details": { "remediation": "Make Markdown negotiation work for agent User-Agents as well as ordinary clients.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "entity.metadata", "checkVersion": "2.0.0", "surfaceId": "entity", "status": "partial", "applicability": "applicable", "earned": 0.5, "reason": "Title, description, canonical link and Open Graph identity fields checked.", "evidence": [ { "id": "entity.metadata", "url": "https://example.com/", "observation": "Title, description, canonical link and Open Graph identity fields checked." } ], "details": { "remediation": "Provide a title, description, canonical URL and Open Graph title/description.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "entity.jsonld", "checkVersion": "2.0.0", "surfaceId": "entity", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 meaningful schema.org entities; 0 malformed JSON-LD blocks.", "evidence": [ { "id": "entity.jsonld", "url": "https://example.com/", "observation": "0 meaningful schema.org entities; 0 malformed JSON-LD blocks." } ], "details": { "remediation": "Publish valid JSON-LD with a schema.org context and meaningful entity fields.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "entity.organization", "checkVersion": "2.0.0", "surfaceId": "entity", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 Organization entities checked for name, URL, logo, description and contact/address details.", "evidence": [ { "id": "entity.organization", "url": "https://example.com/", "observation": "0 Organization entities checked for name, URL, logo, description and contact/address details." } ], "details": { "remediation": "Add Organization name, URL, logo, description and address/contactPoint details to your structured data.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "entity.linking", "checkVersion": "2.0.0", "surfaceId": "entity", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "JSON-LD sameAs public external identity links checked; profile ownership not verified.", "evidence": [ { "id": "entity.linking", "url": "https://example.com/", "observation": "JSON-LD sameAs public external identity links checked; profile ownership not verified." } ], "details": { "remediation": "Connect your entity to authoritative external profiles through sameAs.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "entity.breadth", "checkVersion": "2.0.0", "surfaceId": "entity", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0 distinct JSON-LD types found.", "evidence": [ { "id": "entity.breadth", "url": "https://example.com/", "observation": "0 distinct JSON-LD types found." } ], "details": { "remediation": "Describe the organization and relevant product, software, service or article types.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.docs", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "0/0 advertised documentation pages publicly acquired.", "evidence": [ { "id": "content.docs", "url": "https://example.com/", "observation": "0/0 advertised documentation pages publicly acquired." } ], "details": { "sampleSize": 0, "remediation": "Link public API documentation from your homepage and permit unauthenticated reading.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.pricing", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Sampled content checked for monetary prices, free tiers or explicit sales/pricing policy.", "evidence": [ { "id": "content.pricing", "url": "https://example.com/", "observation": "Sampled content checked for monetary prices, free tiers or explicit sales/pricing policy." } ], "details": { "remediation": "Publish accessible pricing amounts, free-tier terms or a clear contact-sales policy.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.trust", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Homepage and sampled-page privacy, terms and security links checked; legal adequacy not assessed.", "evidence": [ { "id": "content.trust", "url": "https://example.com/", "observation": "Homepage and sampled-page privacy, terms and security links checked; legal adequacy not assessed." } ], "details": { "remediation": "Link public privacy, terms and security pages.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.onboarding", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "First-request command, credential setup and expected response guidance inspected; onboarding was not executed.", "evidence": [ { "id": "content.onboarding", "url": "https://example.com/", "observation": "First-request command, credential setup and expected response guidance inspected; onboarding was not executed." } ], "details": { "remediation": "Document a first request with credential setup, example command and expected result.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.sdk", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "SDK installation commands and package links checked; packages were not installed.", "evidence": [ { "id": "content.sdk", "url": "https://example.com/", "observation": "SDK installation commands and package links checked; packages were not installed." } ], "details": { "remediation": "Publish SDK package links with installation and usage examples.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.cli", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "CLI availability and installation guidance checked; commands were not run.", "evidence": [ { "id": "content.cli", "url": "https://example.com/", "observation": "CLI availability and installation guidance checked; commands were not run." } ], "details": { "remediation": "Provide documented CLI installation and a first command.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "content.sandbox", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": 0, "reason": "Sandbox/test-mode declarations checked; environment behavior untested.", "evidence": [ { "id": "content.sandbox", "url": "https://example.com/", "observation": "Sandbox/test-mode declarations checked; environment behavior untested." } ], "details": { "remediation": "Document a safe sandbox, test credentials or dry-run environment.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.description", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OpenAPI 3.0–3.2 root title/version/paths structure checked; full specification conformance not implied.", "evidence": [ { "id": "api.description", "url": "https://example.com/openapi.json", "observation": "OpenAPI 3.0–3.2 root title/version/paths structure checked; full specification conformance not implied." } ], "details": { "remediation": "Publish a valid OpenAPI 3.x document and advertise its public URL.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.operations", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 operations meet description and unique operationId requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown.", "evidence": [ { "id": "api.operations", "url": "https://example.com/openapi.json", "observation": "0/0 operations meet description and unique operationId requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown." } ], "details": { "count": 0, "sampleSize": 0, "remediation": "Describe every operation and assign a stable, unique operationId.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "API execution", "external reference resolution", "full OpenAPI schema validation" ] } }, { "checkId": "api.parameters", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 operations meet typed parameter and request body requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown.", "evidence": [ { "id": "api.parameters", "url": "https://example.com/openapi.json", "observation": "0/0 operations meet typed parameter and request body requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown." } ], "details": { "count": 0, "sampleSize": 0, "remediation": "Provide typed parameter and request-body schemas including required fields.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "API execution", "external reference resolution", "full OpenAPI schema validation" ] } }, { "checkId": "api.responses", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 operations meet described success response schema requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown.", "evidence": [ { "id": "api.responses", "url": "https://example.com/openapi.json", "observation": "0/0 operations meet described success response schema requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown." } ], "details": { "count": 0, "sampleSize": 0, "remediation": "Describe responses and publish their content schemas.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "API execution", "external reference resolution", "full OpenAPI schema validation" ] } }, { "checkId": "api.errors", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 operations meet typed error response requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown.", "evidence": [ { "id": "api.errors", "url": "https://example.com/openapi.json", "observation": "0/0 operations meet typed error response requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown." } ], "details": { "count": 0, "sampleSize": 0, "remediation": "Document 4xx/5xx or default responses with typed error schemas.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "API execution", "external reference resolution", "full OpenAPI schema validation" ] } }, { "checkId": "api.authentication", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OpenAPI security schemes and referenced security requirements inspected.", "evidence": [ { "id": "api.authentication", "url": "https://example.com/openapi.json", "observation": "OpenAPI security schemes and referenced security requirements inspected." } ], "details": { "remediation": "Declare securitySchemes and reference them from security requirements.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.pagination", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Pagination parameters/continuation fields inspected Declaration-only; no endpoint execution.", "evidence": [ { "id": "api.pagination", "url": "https://example.com/openapi.json", "observation": "Pagination parameters/continuation fields inspected Declaration-only; no endpoint execution." } ], "details": { "remediation": "Document cursor, page or offset pagination and continuation metadata.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.versioning", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Version and deprecation declarations inspected Declaration-only; no endpoint execution.", "evidence": [ { "id": "api.versioning", "url": "https://example.com/openapi.json", "observation": "Version and deprecation declarations inspected Declaration-only; no endpoint execution." } ], "details": { "remediation": "Document API versions and a deprecation/migration policy.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.idempotency", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Idempotency request support inspected Declaration-only; no endpoint execution.", "evidence": [ { "id": "api.idempotency", "url": "https://example.com/openapi.json", "observation": "Idempotency request support inspected Declaration-only; no endpoint execution." } ], "details": { "remediation": "Document an Idempotency-Key request header or an equivalent deduplication parameter.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.rate-limits", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Observed rate-limit headers and documented retry policy checked.", "evidence": [ { "id": "api.rate-limits", "url": "https://example.com/openapi.json", "observation": "Observed rate-limit headers and documented retry policy checked." } ], "details": { "remediation": "Publish rate-limit headers and Retry-After/backoff instructions.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.async", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Asynchronous operation declarations inspected Declaration-only; no endpoint execution.", "evidence": [ { "id": "api.async", "url": "https://example.com/openapi.json", "observation": "Asynchronous operation declarations inspected Declaration-only; no endpoint execution." } ], "details": { "remediation": "Describe asynchronous jobs, 202 responses, polling or callbacks.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.batch", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Batch/bulk operation declarations inspected Declaration-only; no endpoint execution.", "evidence": [ { "id": "api.batch", "url": "https://example.com/openapi.json", "observation": "Batch/bulk operation declarations inspected Declaration-only; no endpoint execution." } ], "details": { "remediation": "Document batch endpoints where applicable to your API.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "api.function-calling", "checkVersion": "2.0.0", "surfaceId": "api", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 operations meet bounded function naming and input schema requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown.", "evidence": [ { "id": "api.function-calling", "url": "https://example.com/openapi.json", "observation": "0/0 operations meet bounded function naming and input schema requirements. 0 external and 0 unresolved local references; reference-limited observations stay unknown." } ], "details": { "count": 0, "sampleSize": 0, "remediation": "Use unique operationIds and typed, bounded object schemas for tool generation.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "API execution", "external reference resolution", "full OpenAPI schema validation" ] } }, { "checkId": "auth.discovery", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404.", "evidence": [ { "id": "auth.discovery", "url": "https://example.com/.well-known/oauth-authorization-server", "observation": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404." } ], "details": { "remediation": "Publish RFC 8414 or OIDC metadata on the advertised authorization server.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.protected-resource", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404.", "evidence": [ { "id": "auth.protected-resource", "url": "https://example.com/.well-known/oauth-protected-resource", "observation": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404." } ], "details": { "remediation": "Publish RFC 9728 resource metadata and authorization_servers.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.scopes", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0 declared permission scopes; actual enforcement not tested.", "evidence": [ { "id": "auth.scopes", "url": "https://example.com/.well-known/oauth-authorization-server", "observation": "0 declared permission scopes; actual enforcement not tested." } ], "details": { "remediation": "Publish granular scope names and descriptions for least-privilege access.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.pkce", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "PKCE S256 discovery declaration checked; no authorization exchange performed. HTTP 404.", "evidence": [ { "id": "auth.pkce", "url": "https://example.com/.well-known/oauth-authorization-server", "observation": "PKCE S256 discovery declaration checked; no authorization exchange performed. HTTP 404." } ], "details": { "remediation": "Support and advertise the S256 PKCE code challenge method.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.instructions", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404.", "evidence": [ { "id": "auth.instructions", "url": "https://example.com/auth.md", "observation": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404." } ], "details": { "remediation": "Publish auth.md covering discovery, registration, exchange, use, errors and revocation.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.agent-metadata", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "agent_auth declaration and auth.md linkage inspected; full draft request-shape conformance untested.", "evidence": [ { "id": "auth.agent-metadata", "url": "https://example.com/.well-known/oauth-protected-resource", "observation": "agent_auth declaration and auth.md linkage inspected; full draft request-shape conformance untested." } ], "details": { "remediation": "Publish machine-readable agent_auth methods and auth.md instruction URLs.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "auth.challenge", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Observed public authentication challenges checked for RFC 9728 resource_metadata; no artificial protected request or login was sent.", "evidence": [ { "id": "auth.challenge", "url": "https://example.com/", "observation": "Observed public authentication challenges checked for RFC 9728 resource_metadata; no artificial protected request or login was sent." } ], "details": { "remediation": "Add a Bearer WWW-Authenticate resource_metadata parameter to protected responses.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.card", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404.", "evidence": [ { "id": "mcp.card", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404." } ], "details": { "remediation": "Publish a server card with serverInfo, capabilities and a transport endpoint.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.handshake", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "No advertised or explicitly supplied MCP endpoint was discovered.", "evidence": [ { "id": "mcp.handshake", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "No advertised or explicitly supplied MCP endpoint was discovered." } ], "details": { "remediation": "Implement supported MCP initialization and advertised read-only listing methods.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "tools/call", "resources/read", "prompts/get" ] } }, { "checkId": "mcp.identity", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "MCP initialization serverInfo name/version and instructions checked.", "evidence": [ { "id": "mcp.identity", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "MCP initialization serverInfo name/version and instructions checked." } ], "details": { "remediation": "Return a nonempty serverInfo name/version and server instructions.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.tools", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 MCP tools have unique stable names.", "evidence": [ { "id": "mcp.tools", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "0/0 MCP tools have unique stable names." } ], "details": { "count": 0, "remediation": "Expose tools/list with unique descriptive tool names.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.descriptions", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 MCP tools have substantive descriptions.", "evidence": [ { "id": "mcp.descriptions", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "0/0 MCP tools have substantive descriptions." } ], "details": { "remediation": "Describe each tool purpose, inputs and effects.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.schemas", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 MCP inputs have typed described properties and valid required references.", "evidence": [ { "id": "mcp.schemas", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "0/0 MCP inputs have typed described properties and valid required references." } ], "details": { "remediation": "Publish object inputSchema with typed, described properties and valid required arrays.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.annotations", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 MCP tools declare all four safety/idempotency annotations. Hints are not verified effects.", "evidence": [ { "id": "mcp.annotations", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "0/0 MCP tools declare all four safety/idempotency annotations. Hints are not verified effects." } ], "details": { "remediation": "Declare readOnlyHint, destructiveHint, idempotentHint and openWorldHint where accurate.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "mcp.resources", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 MCP resources have name, URI, description and MIME type. Resource contents not read.", "evidence": [ { "id": "mcp.resources", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "0/0 MCP resources have name, URI, description and MIME type. Resource contents not read." } ], "details": { "remediation": "Publish named resources with URI, description and MIME type.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } }, { "checkId": "protocol.a2a", "checkVersion": "2.0.0", "surfaceId": "protocol", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404.", "evidence": [ { "id": "protocol.a2a", "url": "https://example.com/.well-known/agent-card.json", "observation": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404." } ], "details": { "remediation": "Publish an Agent Card with supported interfaces and described, uniquely named skills.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ], "protocols": [ { "id": "structured", "name": "Structured content", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No JSON-LD declaration was discovered in sampled pages.", "evidence": [], "checks": [ { "checkId": "structured.declaration", "checkVersion": "1.0.0", "surfaceId": "structured", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No JSON-LD declaration was discovered in sampled pages.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "openapi", "name": "OpenAPI", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No advertised OpenAPI endpoint was discovered in the sampled pages.", "evidence": [], "checks": [ { "checkId": "openapi.declaration", "checkVersion": "1.0.0", "surfaceId": "openapi", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No advertised OpenAPI endpoint was discovered in the sampled pages.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "oauth", "name": "OAuth / OIDC", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No advertised OAuth / OIDC endpoint was discovered in the sampled pages.", "evidence": [], "checks": [ { "checkId": "oauth.declaration", "checkVersion": "1.0.0", "surfaceId": "oauth", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No advertised OAuth / OIDC endpoint was discovered in the sampled pages.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "mcp", "name": "Model Context Protocol", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No advertised or explicitly supplied MCP endpoint was discovered.", "evidence": [], "checks": [ { "checkId": "mcp.declaration", "checkVersion": "1.0.0", "surfaceId": "mcp", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No advertised or explicitly supplied MCP endpoint was discovered.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "a2a", "name": "Agent2Agent", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No advertised Agent2Agent endpoint was discovered in the sampled pages.", "evidence": [], "checks": [ { "checkId": "a2a.declaration", "checkVersion": "1.0.0", "surfaceId": "a2a", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No advertised Agent2Agent endpoint was discovered in the sampled pages.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "skills", "name": "Agent Skills", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No advertised Agent Skills endpoint was discovered in the sampled pages.", "evidence": [], "checks": [ { "checkId": "skills.declaration", "checkVersion": "1.0.0", "surfaceId": "skills", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No advertised Agent Skills endpoint was discovered in the sampled pages.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "untestedOperations": [ "execution" ], "authenticationRequired": false } } ] }, { "id": "webmcp", "name": "WebMCP", "version": "1.0.0", "status": "unknown", "depth": "discovered", "url": null, "summary": "No WebMCP declaration evidence found in sampled HTML.", "evidence": [], "checks": [ { "checkId": "webmcp.declaration", "checkVersion": "1.0.0", "surfaceId": "webmcp", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No WebMCP declaration evidence found in sampled HTML.", "evidence": [], "details": { "discoverySource": "advertised link or explicit hint", "validationDepth": "discovered", "testedOperations": [], "negotiatedRevision": "draft 2026-09-09", "untestedOperations": [ "runtime discovery", "tool invocation" ], "authenticationRequired": false } } ] }, { "kind": "check-family", "id": "cf.robotsTxt", "name": "robotsTxt", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/robots.txt", "summary": "Published robots.txt format and User-agent directives checked.", "evidence": [ { "id": "discovery.robots", "url": "https://example.com/robots.txt", "observation": "Published robots.txt format and User-agent directives checked." } ], "checks": [ { "checkId": "discovery.robots", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Published robots.txt format and User-agent directives checked.", "evidence": [ { "id": "discovery.robots", "url": "https://example.com/robots.txt", "observation": "Published robots.txt format and User-agent directives checked." } ], "details": { "remediation": "Publish robots.txt with User-agent and Allow/Disallow directives.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.sitemap", "name": "sitemap", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/sitemap.xml", "summary": "0 public locations in sampled sitemap files. HTTP 404.", "evidence": [ { "id": "discovery.sitemap", "url": "https://example.com/sitemap.xml", "observation": "0 public locations in sampled sitemap files. HTTP 404." } ], "checks": [ { "checkId": "discovery.sitemap", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "0 public locations in sampled sitemap files. HTTP 404.", "evidence": [ { "id": "discovery.sitemap", "url": "https://example.com/sitemap.xml", "observation": "0 public locations in sampled sitemap files. HTTP 404." } ], "details": { "remediation": "Publish a valid sitemap and advertise it in robots.txt.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.linkHeaders", "name": "linkHeaders", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/", "summary": "0 agent-useful HTTP Link relations parsed.", "evidence": [ { "id": "discovery.link-headers", "url": "https://example.com/", "observation": "0 agent-useful HTTP Link relations parsed." } ], "checks": [ { "checkId": "discovery.link-headers", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "0 agent-useful HTTP Link relations parsed.", "evidence": [ { "id": "discovery.link-headers", "url": "https://example.com/", "observation": "0 agent-useful HTTP Link relations parsed." } ], "details": { "remediation": "Add service-desc, service-doc, api-catalog, describedby or alternate Link relations.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.dnsAid", "name": "dnsAid", "version": "2.0.0", "status": "fail", "depth": "discovered", "url": "https://example.com/", "summary": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated.", "evidence": [ { "id": "discovery.dns-aid", "url": "https://example.com/", "observation": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated." } ], "checks": [ { "checkId": "discovery.dns-aid", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated.", "evidence": [ { "id": "discovery.dns-aid", "url": "https://example.com/", "observation": "0 DNS-AID service/index answers across 7/7 answered DNS queries. DNSSEC trust and service execution are not validated." } ], "details": { "count": 0, "remediation": "Publish DNS-AID service bindings at _index, _mcp or _a2a._agents.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "discovered", "testedOperations": [ "DoH SVCB/HTTPS _index/_mcp/_a2a._agents", "DoH TXT _index._agents" ], "untestedOperations": [ "DNSSEC chain verification", "service invocation" ] } } ] }, { "kind": "check-family", "id": "cf.markdownNegotiation", "name": "markdownNegotiation", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/", "summary": "Accept: text/markdown response media type and non-HTML body checked.", "evidence": [ { "id": "content.markdown", "url": "https://example.com/", "observation": "Accept: text/markdown response media type and non-HTML body checked." } ], "checks": [ { "checkId": "content.markdown", "checkVersion": "2.0.0", "surfaceId": "content", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Accept: text/markdown response media type and non-HTML body checked.", "evidence": [ { "id": "content.markdown", "url": "https://example.com/", "observation": "Accept: text/markdown response media type and non-HTML body checked." } ], "details": { "remediation": "Serve an actual Markdown representation with Content-Type: text/markdown.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.robotsTxtAiRules", "name": "robotsTxtAiRules", "version": "2.0.0", "status": "pass", "depth": "declaration_validated", "url": "https://example.com/robots.txt", "summary": "6/6 sampled training and user-agent robots policies allow the homepage.", "evidence": [ { "id": "access.ai-policy", "url": "https://example.com/robots.txt", "observation": "6/6 sampled training and user-agent robots policies allow the homepage." } ], "checks": [ { "checkId": "access.ai-policy", "checkVersion": "2.0.0", "surfaceId": "access", "status": "pass", "applicability": "applicable", "earned": null, "reason": "6/6 sampled training and user-agent robots policies allow the homepage.", "evidence": [ { "id": "access.ai-policy", "url": "https://example.com/robots.txt", "observation": "6/6 sampled training and user-agent robots policies allow the homepage." } ], "details": { "types": [ "GPTBot", "ChatGPT-User", "ClaudeBot", "Claude-User", "PerplexityBot", "Perplexity-User" ], "remediation": "Publish intentional policies for training crawlers and user-invoked agents.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.contentSignals", "name": "contentSignals", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/robots.txt", "summary": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission.", "evidence": [ { "id": "access.content-signals", "url": "https://example.com/robots.txt", "observation": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission." } ], "checks": [ { "checkId": "access.content-signals", "checkVersion": "2.0.0", "surfaceId": "access", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission.", "evidence": [ { "id": "access.content-signals", "url": "https://example.com/robots.txt", "observation": "Content-Signal recognized directive/value syntax checked; a declared restriction is not silently treated as permission." } ], "details": { "remediation": "Publish explicit search, ai-input and ai-train Content-Signal values.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.webBotAuth", "name": "webBotAuth", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/http-message-signatures-directory", "summary": "Web Bot Auth public JWKS identity/key fields checked. Signing, key possession, rotation and receiver verification not tested. HTTP 404.", "evidence": [ { "id": "supplemental.web-bot-auth", "url": "https://example.com/.well-known/http-message-signatures-directory", "observation": "Web Bot Auth public JWKS identity/key fields checked. Signing, key possession, rotation and receiver verification not tested. HTTP 404." } ], "checks": [ { "checkId": "supplemental.web-bot-auth", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Web Bot Auth public JWKS identity/key fields checked. Signing, key possession, rotation and receiver verification not tested. HTTP 404.", "evidence": [ { "id": "supplemental.web-bot-auth", "url": "https://example.com/.well-known/http-message-signatures-directory", "observation": "Web Bot Auth public JWKS identity/key fields checked. Signing, key possession, rotation and receiver verification not tested. HTTP 404." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.apiCatalog", "name": "apiCatalog", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/.well-known/api-catalog", "summary": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404.", "evidence": [ { "id": "discovery.api-catalog", "url": "https://example.com/.well-known/api-catalog", "observation": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404." } ], "checks": [ { "checkId": "discovery.api-catalog", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404.", "evidence": [ { "id": "discovery.api-catalog", "url": "https://example.com/.well-known/api-catalog", "observation": "RFC 9727 Linkset anchors, public target links and content type checked; HEAD/profile and nested catalog conformance untested. HTTP 404." } ], "details": { "remediation": "Publish /.well-known/api-catalog as application/linkset+json with public service links.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.oauthDiscovery", "name": "oauthDiscovery", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/oauth-authorization-server", "summary": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404.", "evidence": [ { "id": "auth.discovery", "url": "https://example.com/.well-known/oauth-authorization-server", "observation": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404." } ], "checks": [ { "checkId": "auth.discovery", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404.", "evidence": [ { "id": "auth.discovery", "url": "https://example.com/.well-known/oauth-authorization-server", "observation": "OAuth issuer/HTTPS endpoint and authorization-code response declarations checked; login and token exchange untested. HTTP 404." } ], "details": { "remediation": "Publish RFC 8414 or OIDC metadata on the advertised authorization server.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.oauthProtectedResource", "name": "oauthProtectedResource", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/oauth-protected-resource", "summary": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404.", "evidence": [ { "id": "auth.protected-resource", "url": "https://example.com/.well-known/oauth-protected-resource", "observation": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404." } ], "checks": [ { "checkId": "auth.protected-resource", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404.", "evidence": [ { "id": "auth.protected-resource", "url": "https://example.com/.well-known/oauth-protected-resource", "observation": "RFC 9728 resource identifier and public authorization server declarations checked. HTTP 404." } ], "details": { "remediation": "Publish RFC 9728 resource metadata and authorization_servers.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.authMd", "name": "authMd", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/auth.md", "summary": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404.", "evidence": [ { "id": "auth.instructions", "url": "https://example.com/auth.md", "observation": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404." } ], "checks": [ { "checkId": "auth.instructions", "checkVersion": "2.0.0", "surfaceId": "auth", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404.", "evidence": [ { "id": "auth.instructions", "url": "https://example.com/auth.md", "observation": "auth.md walkthrough sections and substantive section bodies checked; registration/claim/exchange are never performed. HTTP 404." } ], "details": { "remediation": "Publish auth.md covering discovery, registration, exchange, use, errors and revocation.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.mcpServerCard", "name": "mcpServerCard", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/mcp/server-card.json", "summary": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404.", "evidence": [ { "id": "mcp.card", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404." } ], "checks": [ { "checkId": "mcp.card", "checkVersion": "2.0.0", "surfaceId": "mcp", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404.", "evidence": [ { "id": "mcp.card", "url": "https://example.com/.well-known/mcp/server-card.json", "observation": "MCP Server Card identity, capabilities and explicit transport endpoint checked; draft schema subset. HTTP 404." } ], "details": { "remediation": "Publish a server card with serverInfo, capabilities and a transport endpoint.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.a2aAgentCard", "name": "a2aAgentCard", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/agent-card.json", "summary": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404.", "evidence": [ { "id": "protocol.a2a", "url": "https://example.com/.well-known/agent-card.json", "observation": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404." } ], "checks": [ { "checkId": "protocol.a2a", "checkVersion": "2.0.0", "surfaceId": "protocol", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404.", "evidence": [ { "id": "protocol.a2a", "url": "https://example.com/.well-known/agent-card.json", "observation": "A2A identity, declared interfaces, capabilities and skill descriptions checked; tasks are not invoked. HTTP 404." } ], "details": { "remediation": "Publish an Agent Card with supported interfaces and described, uniquely named skills.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.agentSkills", "name": "agentSkills", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/.well-known/agent-skills/index.json", "summary": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404.", "evidence": [ { "id": "discovery.skills", "url": "https://example.com/.well-known/agent-skills/index.json", "observation": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404." } ], "checks": [ { "checkId": "discovery.skills", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404.", "evidence": [ { "id": "discovery.skills", "url": "https://example.com/.well-known/agent-skills/index.json", "observation": "Skills index revision undeclared: typed entries and SHA-256 digest format checked for v0.2.0; legacy v0.1.0 is partial adoption. Package integrity/installation untested. HTTP 404." } ], "details": { "remediation": "Publish the v0.2.0 skills index with name, description, type, URL and digest per skill.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.webMcp", "name": "webMcp", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/", "summary": "Static WebMCP API/declarative-form indicators inspected. Runtime tool discovery and invocation require a supporting browser and were not performed.", "evidence": [ { "id": "supplemental.webmcp", "url": "https://example.com/", "observation": "Static WebMCP API/declarative-form indicators inspected. Runtime tool discovery and invocation require a supporting browser and were not performed." } ], "checks": [ { "checkId": "supplemental.webmcp", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Static WebMCP API/declarative-form indicators inspected. Runtime tool discovery and invocation require a supporting browser and were not performed.", "evidence": [ { "id": "supplemental.webmcp", "url": "https://example.com/", "observation": "Static WebMCP API/declarative-form indicators inspected. Runtime tool discovery and invocation require a supporting browser and were not performed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.ard", "name": "ard", "version": "2.0.0", "status": "fail", "depth": "declaration_validated", "url": "https://example.com/.well-known/ai-catalog.json", "summary": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404.", "evidence": [ { "id": "discovery.ard", "url": "https://example.com/.well-known/ai-catalog.json", "observation": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404." } ], "checks": [ { "checkId": "discovery.ard", "checkVersion": "2.0.0", "surfaceId": "discovery", "status": "fail", "applicability": "applicable", "earned": null, "reason": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404.", "evidence": [ { "id": "discovery.ard", "url": "https://example.com/.well-known/ai-catalog.json", "observation": "ARD host/version and bounded entry identity, media type and exclusive URL/data fields checked; signatures and trust assertions unverified. HTTP 404." } ], "details": { "remediation": "Publish an ARD catalog with specVersion, host and complete entries.", "verification": "Repeat the bounded public acquisition and semantic checks documented in readiness-v2. Runtime transactions are not performed.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded public metadata/content inspection" ], "untestedOperations": [ "authenticated execution", "factual correctness" ] } } ] }, { "kind": "check-family", "id": "cf.x402", "name": "x402", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/", "summary": "Observed 402/payment-required x402 requirements checked for version, network, asset, recipient and amount. No payment sent.", "evidence": [ { "id": "supplemental.x402", "url": "https://example.com/", "observation": "Observed 402/payment-required x402 requirements checked for version, network, asset, recipient and amount. No payment sent." } ], "checks": [ { "checkId": "supplemental.x402", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Observed 402/payment-required x402 requirements checked for version, network, asset, recipient and amount. No payment sent.", "evidence": [ { "id": "supplemental.x402", "url": "https://example.com/", "observation": "Observed 402/payment-required x402 requirements checked for version, network, asset, recipient and amount. No payment sent." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.mpp", "name": "mpp", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/openapi.json", "summary": "OpenAPI x-payment-info intent/method/amount/currency declarations inspected. Payment challenge fulfillment and session behavior not tested.", "evidence": [ { "id": "supplemental.mpp", "url": "https://example.com/openapi.json", "observation": "OpenAPI x-payment-info intent/method/amount/currency declarations inspected. Payment challenge fulfillment and session behavior not tested." } ], "checks": [ { "checkId": "supplemental.mpp", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OpenAPI x-payment-info intent/method/amount/currency declarations inspected. Payment challenge fulfillment and session behavior not tested.", "evidence": [ { "id": "supplemental.mpp", "url": "https://example.com/openapi.json", "observation": "OpenAPI x-payment-info intent/method/amount/currency declarations inspected. Payment challenge fulfillment and session behavior not tested." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.ucp", "name": "ucp", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/ucp", "summary": "UCP profile version, services and capabilities declaration subset checked; endpoints, checkout and signatures untested. HTTP 404.", "evidence": [ { "id": "supplemental.ucp", "url": "https://example.com/.well-known/ucp", "observation": "UCP profile version, services and capabilities declaration subset checked; endpoints, checkout and signatures untested. HTTP 404." } ], "checks": [ { "checkId": "supplemental.ucp", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "UCP profile version, services and capabilities declaration subset checked; endpoints, checkout and signatures untested. HTTP 404.", "evidence": [ { "id": "supplemental.ucp", "url": "https://example.com/.well-known/ucp", "observation": "UCP profile version, services and capabilities declaration subset checked; endpoints, checkout and signatures untested. HTTP 404." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.acp", "name": "acp", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/acp.json", "summary": "ACP discovery protocol/version, API base URL, transports and services checked; checkout sessions never created. HTTP 404.", "evidence": [ { "id": "supplemental.acp", "url": "https://example.com/.well-known/acp.json", "observation": "ACP discovery protocol/version, API base URL, transports and services checked; checkout sessions never created. HTTP 404." } ], "checks": [ { "checkId": "supplemental.acp", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "ACP discovery protocol/version, API base URL, transports and services checked; checkout sessions never created. HTTP 404.", "evidence": [ { "id": "supplemental.acp", "url": "https://example.com/.well-known/acp.json", "observation": "ACP discovery protocol/version, API base URL, transports and services checked; checkout sessions never created. HTTP 404." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "check-family", "id": "cf.ap2", "name": "ap2", "version": "2.0.0", "status": "not_applicable", "depth": "declaration_validated", "url": "https://example.com/.well-known/agent-card.json", "summary": "A2A card AP2 extension URI inspected. Signed mandates, authorization and payments untested; no guessed AP2 endpoint implies conformance.", "evidence": [ { "id": "supplemental.ap2", "url": "https://example.com/.well-known/agent-card.json", "observation": "A2A card AP2 extension URI inspected. Signed mandates, authorization and payments untested; no guessed AP2 endpoint implies conformance." } ], "checks": [ { "checkId": "supplemental.ap2", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "A2A card AP2 extension URI inspected. Signed mandates, authorization and payments untested; no guessed AP2 endpoint implies conformance.", "evidence": [ { "id": "supplemental.ap2", "url": "https://example.com/.well-known/agent-card.json", "observation": "A2A card AP2 extension URI inspected. Signed mandates, authorization and payments untested; no guessed AP2 endpoint implies conformance." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } } ] }, { "kind": "supplemental", "id": "public-observations", "name": "Additional public observations and unperformed assessments", "version": "2.0.0", "status": "partial", "depth": "declaration_validated", "url": "https://example.com/", "summary": "Supplemental declaration observations and explicitly unperformed external/runtime assessments. These have no score weight.", "evidence": [], "checks": [ { "checkId": "public.agent-instructions", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Public when-to-use/agent instruction guidance or explicit instruction-file links inspected; instructions not followed.", "evidence": [ { "id": "public.agent-instructions", "url": "https://example.com/", "observation": "Public when-to-use/agent instruction guidance or explicit instruction-file links inspected; instructions not followed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.agent-configs", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Public links to agent platform configuration files inspected; repository contents not recursively searched.", "evidence": [ { "id": "public.agent-configs", "url": "https://example.com/", "observation": "Public links to agent platform configuration files inspected; repository contents not recursively searched." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.agent-plugins", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Explicit agent-plugin manifest links inspected; full package schema and installation not tested.", "evidence": [ { "id": "public.agent-plugins", "url": "https://example.com/", "observation": "Explicit agent-plugin manifest links inspected; full package schema and installation not tested." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.agent-view", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Public agent-view/mode declarations inspected; alternate UI not executed.", "evidence": [ { "id": "public.agent-view", "url": "https://example.com/", "observation": "Public agent-view/mode declarations inspected; alternate UI not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.markdown-fallback", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "A bounded .md URL fallback sample returns non-HTML Markdown; unrelated URLs are not enumerated.", "evidence": [ { "id": "public.markdown-fallback", "url": "https://example.com/", "observation": "A bounded .md URL fallback sample returns non-HTML Markdown; unrelated URLs are not enumerated." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.modular-llms", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "Advertised product-area llms.txt resources acquired; unadvertised areas not guessed.", "evidence": [ { "id": "public.modular-llms", "url": "https://example.com/", "observation": "Advertised product-area llms.txt resources acquired; unadvertised areas not guessed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.nlweb", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "NLWeb/feed declarations inspected; /ask requests and streaming responses not executed.", "evidence": [ { "id": "public.nlweb", "url": "https://example.com/", "observation": "NLWeb/feed declarations inspected; /ask requests and streaming responses not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.a2ui", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "fail", "applicability": "applicable", "earned": null, "reason": "A2UI declaration indicators inspected; generated UI quality is not evaluated.", "evidence": [ { "id": "public.a2ui", "url": "https://example.com/", "observation": "A2UI declaration indicators inspected; generated UI quality is not evaluated." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.native-controls", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "pass", "applicability": "applicable", "earned": null, "reason": "1 native controls and 0 custom ARIA control declarations observed. Focus/keyboard evidence remains in browser checks.", "evidence": [ { "id": "public.native-controls", "url": "https://example.com/", "observation": "1 native controls and 0 custom ARIA control declarations observed. Focus/keyboard evidence remains in browser checks." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.form-labels", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0/0 source form controls have label associations; runtime accessible names independently sampled by browser.", "evidence": [ { "id": "public.form-labels", "url": "https://example.com/", "observation": "0/0 source form controls have label associations; runtime accessible names independently sampled by browser." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.injection-indicators", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "No bounded source-label injection indicator detected. This is not an injection-safety guarantee or pass.", "evidence": [ { "id": "public.injection-indicators", "url": "https://example.com/", "observation": "No bounded source-label injection indicator detected. This is not an injection-safety guarantee or pass." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "dynamic accessibility-tree injection assessment", "prompt execution" ] } }, { "checkId": "public.graphql-errors", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL errors declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-errors", "url": "https://example.com/", "observation": "Public GraphQL errors declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.graphql-pagination", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL pagination declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-pagination", "url": "https://example.com/", "observation": "Public GraphQL pagination declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.graphql-versioning", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL versioning declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-versioning", "url": "https://example.com/", "observation": "Public GraphQL versioning declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.graphql-async", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL async declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-async", "url": "https://example.com/", "observation": "Public GraphQL async declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.graphql-batch", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL batch declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-batch", "url": "https://example.com/", "observation": "Public GraphQL batch declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.graphql-schema", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "Public GraphQL schema declaration patterns inspected; schema introspection, coverage and operations are not executed.", "evidence": [ { "id": "public.graphql-schema", "url": "https://example.com/", "observation": "Public GraphQL schema declaration patterns inspected; schema introspection, coverage and operations are not executed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.schema-complexity", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "OpenAPI traversal bounded to depth24,20000 nodes per schema and200000 total nodes; 0 external and 0 unresolved references. No LLM comprehension or actual tool generation evaluated.", "evidence": [ { "id": "public.schema-complexity", "url": "https://example.com/openapi.json", "observation": "OpenAPI traversal bounded to depth24,20000 nodes per schema and200000 total nodes; 0 external and 0 unresolved references. No LLM comprehension or actual tool generation evaluated." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.json-errors", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unknown", "applicability": "unknown", "earned": null, "reason": "Actual acquired 4xx responses inspected for JSON objects. No fabricated malformed API calls sent; unobserved error behavior stays unknown.", "evidence": [ { "id": "public.json-errors", "url": "https://example.com/", "observation": "Actual acquired 4xx responses inspected for JSON objects. No fabricated malformed API calls sent; unobserved error behavior stays unknown." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.ard-trust", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "ARD trust/signature/attestation declaration presence inspected; signatures, compliance and identity claims not verified.", "evidence": [ { "id": "public.ard-trust", "url": "https://example.com/.well-known/ai-catalog.json", "observation": "ARD trust/signature/attestation declaration presence inspected; signatures, compliance and identity claims not verified." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.mcp-surfaces", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "not_applicable", "applicability": "not_applicable", "earned": null, "reason": "0 distinct public MCP advertisements; product-vs-docs capability coverage and additional handshakes untested.", "evidence": [ { "id": "public.mcp-surfaces", "url": "https://example.com/", "observation": "0 distinct public MCP advertisements; product-vs-docs capability coverage and additional handshakes untested." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "runtime behavior", "authenticated transactions" ] } }, { "checkId": "public.search-assessment", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unsupported", "applicability": "unknown", "earned": null, "reason": "Category share-of-voice, search ranking, brand accuracy and developer-resource retrieval require an external search/LLM assessment; not performed.", "evidence": [ { "id": "public.search-assessment", "url": "https://example.com/", "observation": "Category share-of-voice, search ranking, brand accuracy and developer-resource retrieval require an external search/LLM assessment; not performed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "external or authenticated assessment" ] } }, { "checkId": "public.registry-assessment", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unsupported", "applicability": "unknown", "earned": null, "reason": "MCP registry, npm/PyPI, skills.sh, ChatGPT app and Wikipedia/Wikidata membership/branding not independently queried in this deterministic scan; public links alone do not prove membership.", "evidence": [ { "id": "public.registry-assessment", "url": "https://example.com/", "observation": "MCP registry, npm/PyPI, skills.sh, ChatGPT app and Wikipedia/Wikidata membership/branding not independently queried in this deterministic scan; public links alone do not prove membership." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "external or authenticated assessment" ] } }, { "checkId": "public.auth-walkthrough", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unsupported", "applicability": "unknown", "earned": null, "reason": "Authentication walkthrough simulation and registration/claim/token transactions not performed; only documentation and discovery metadata inspected.", "evidence": [ { "id": "public.auth-walkthrough", "url": "https://example.com/", "observation": "Authentication walkthrough simulation and registration/claim/token transactions not performed; only documentation and discovery metadata inspected." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "external or authenticated assessment" ] } }, { "checkId": "public.mcp-app-runtime", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unsupported", "applicability": "unknown", "earned": null, "reason": "MCP Apps HTML view loading/CSP, UI quality and interactive app behavior not tested; no resource reads or UI tool executions performed.", "evidence": [ { "id": "public.mcp-app-runtime", "url": "https://example.com/", "observation": "MCP Apps HTML view loading/CSP, UI quality and interactive app behavior not tested; no resource reads or UI tool executions performed." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "external or authenticated assessment" ] } }, { "checkId": "public.mcp-error-behavior", "checkVersion": "2.0.0", "surfaceId": "supplemental", "status": "unsupported", "applicability": "unknown", "earned": null, "reason": "MCP error-response semantics not proactively exercised: only permitted initialize/list operations are sent.", "evidence": [ { "id": "public.mcp-error-behavior", "url": "https://example.com/", "observation": "MCP error-response semantics not proactively exercised: only permitted initialize/list operations are sent." } ], "details": { "remediation": "Publish accurate, public machine-readable declarations and verify their behavior independently.", "verification": "Repeat the documented public declaration inspection; this supplemental observation has no score weight.", "validationDepth": "declaration_validated", "testedOperations": [ "bounded static declaration inspection" ], "untestedOperations": [ "external or authenticated assessment" ] } } ] } ], "score": { "method": "readiness-v2", "profile": "website-v1", "complete": true, "score": 28.727106227106223, "lower": 28.727106227106223, "upper": 28.727106227106223, "coverage": 1, "dimensions": { "discovery": { "lower": 10.714285714285714, "upper": 10.714285714285714, "coverage": 1 }, "access": { "lower": 46.15384615384615, "upper": 46.15384615384615, "coverage": 1 }, "understanding": { "lower": 20.833333333333336, "upper": 20.833333333333336, "coverage": 1 }, "interaction": { "lower": 28.57142857142857, "upper": 28.57142857142857, "coverage": 1 } } }, "observedAt": "2026-09-10T19:03:16.423Z", "budgetExhausted": false, "snapshotId": "b614ac5d-d3e0-4835-a6b4-8f34c9bd04b9" }, "journey": { "state": "completed", "result": { "id": "2eaa0f2d-c173-4e6b-9850-fa967ff70587", "task": "understand-product", "configVersion": "public-static-v1", "modelVersion": "deterministic-v1", "browserVersion": "Chromium 151.0.7922.34", "outcome": "unresolved", "actions": 1, "durationMs": 540, "tokens": 0, "evidence": [], "explanation": "No evidence meeting the task completion criteria was observed.", "observedAt": "2026-09-10T19:03:23.228Z", "steps": [ { "url": "https://example.com/", "action": "navigate and inspect visible text", "observation": "Visible text did not meet task completion criteria." } ] } }, "createdAt": "2026-09-10T19:03:10.147Z", "completedAt": "2026-09-10T19:03:18.851Z", "errorCode": null }