{
  "ok": true,
  "generated_at": "2026-06-09T18:34:37.148Z",
  "spec_version": "2",
  "required_header_fields": [
    "contentType",
    "cacheControl",
    "contentSecurityPolicy",
    "accessControlAllowOrigin",
    "accessControlAllowMethods",
    "accessControlAllowHeaders",
    "accessControlMaxAge",
    "xContentTypeOptions",
    "referrerPolicy",
    "strictTransportSecurity",
    "xFrameOptions",
    "permissionsPolicy",
    "crossOriginResourcePolicy",
    "crossOriginOpenerPolicy",
    "crossOriginEmbedderPolicy"
  ],
  "total": 15,
  "failing": 0,
  "assets": [
    {
      "urlPath": "/.well-known/api-catalog",
      "title": "API Catalog (RFC 9727 linkset)",
      "kind": "json",
      "bytes": 1007,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/linkset+json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-skills/index.json",
      "title": "Agent Skills Index",
      "kind": "json",
      "bytes": 1800,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-card.json",
      "title": "A2A Agent Card",
      "kind": "json",
      "bytes": 2182,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/a2a+json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/mcp/server-card.json",
      "title": "MCP Server Card",
      "kind": "json",
      "bytes": 1166,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/openid-configuration",
      "title": "OpenID Provider Configuration",
      "kind": "json",
      "bytes": 1134,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/jwks.json",
      "title": "JSON Web Key Set",
      "kind": "json",
      "bytes": 17,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/jwk-set+json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/http-message-signatures-directory",
      "title": "Web Bot Auth Signature Directory",
      "kind": "json",
      "bytes": 669,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/http-message-signatures-directory+json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/oauth-protected-resource",
      "title": "OAuth Protected Resource Metadata (RFC 9728)",
      "kind": "json",
      "bytes": 2435,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/oauth-authorization-server",
      "title": "OAuth Authorization Server Metadata (RFC 8414, Auth.md agent_auth)",
      "kind": "json",
      "bytes": 2664,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-registration",
      "title": "Agent Registration Instructions",
      "kind": "json",
      "bytes": 1227,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "application/json; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-skills/skills/site-navigator.md",
      "title": "Agent Skill: Alpha Site Navigator",
      "kind": "markdown",
      "bytes": 1714,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "text/markdown; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-skills/skills/ratings-lookup.md",
      "title": "Agent Skill: Alpha Ratings Lookup",
      "kind": "markdown",
      "bytes": 1997,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "text/markdown; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/agent-skills/skills/methodology-summary.md",
      "title": "Agent Skill: Alpha Methodology Summary",
      "kind": "markdown",
      "bytes": 2572,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "text/markdown; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/dns-aid.md",
      "title": "DNS-AID Discovery and DNSSEC Steps",
      "kind": "markdown",
      "bytes": 7758,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "text/markdown; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    },
    {
      "urlPath": "/.well-known/jwks-rotation",
      "title": "JWKS Rotation and Expiration Policy",
      "kind": "markdown",
      "bytes": 3224,
      "ok": true,
      "checks": {
        "content": {
          "ok": true
        },
        "headers": {
          "ok": true
        }
      },
      "served_headers": {
        "content-type": "text/markdown; charset=utf-8",
        "cache-control": "public, max-age=300, must-revalidate",
        "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; sandbox",
        "access-control-allow-origin": "*",
        "access-control-allow-methods": "GET, HEAD, OPTIONS",
        "access-control-allow-headers": "Accept, Content-Type, If-None-Match, If-Modified-Since",
        "access-control-max-age": "86400",
        "x-content-type-options": "nosniff",
        "referrer-policy": "no-referrer",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-frame-options": "DENY",
        "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
        "cross-origin-resource-policy": "cross-origin",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-embedder-policy": "require-corp",
        "vary": "Origin"
      }
    }
  ]
}