{ "openapi": "3.1.0", "info": { "title": "DATA/AGENT FOUNDRY — Active Product Portfolio", "version": "1.2.2", "description": "Machine-first active product portfolio. Lifecycle is the CONTROL_SKU; UNKNOWN and DATA GAP results are not billable.", "x-human-interface": { "kind": "HUMAN_BROWSER_INTERFACE", "method": "GET", "url": "https://foundry-api-production-95ae.up.railway.app/buy/", "availability": "PINNED_PRODUCTION_HTTPS_ORIGIN_ONLY", "discovery_billable": false, "selection_templates": [ { "product_id": "mach002.lifecycle.status.v1", "sku": "lifecycle", "url_template": "https://foundry-api-production-95ae.up.railway.app/buy/?sku=lifecycle&product={product}&version={version}", "optional_query_parameters": [ "date" ], "required_query_parameters": [ "sku", "product", "version" ], "product_values": [ "nodejs", "python", "postgresql", "kubernetes" ] }, { "product_id": "foundry.domain-host-trust-record.v1", "sku": "domain", "url_template": "https://foundry-api-production-95ae.up.railway.app/buy/?sku=domain&hostname={hostname}", "optional_query_parameters": [], "required_query_parameters": [ "sku", "hostname" ] } ], "parameter_policy": "Public selection only. URL-encode values. The existing shared parseSelection validator rejects unknown/duplicate parameters, invalid dates, unsupported products, malformed versions and invalid public hostnames. No price, wallet, secret, challenge or signature in the URL. A valid selection does not guarantee coverage or a billable result.", "interaction": "Opening a link does not connect a wallet, sign or submit a paid POST. The human must confirm each action; a wallet handoff requires explicit continuation after return.", "agent_invocation": "Agents use each product JSON POST resource and its live x402 challenge; this HTML page is not an API or MCP transport.", "examples_kind": "PUBLIC_SELECTION_TEMPLATES_NOT_PURCHASED_RESULTS" }, "x-guidance": "Discover /v1/products, /v1/coverage and /v1/pricing before calling. POST /v1/software-lifecycle/status accepts schema_version 1.0, product key/version and optional as_of date. POST /v1/domain-host-trust accepts schema_version 1.0 and a public DNS hostname, not a URL or IP. Lifecycle 0.0025 USD; Domain Host Trust 0.01 USD, settled in USDC. The live PAYMENT-REQUIRED challenge is authoritative: decimal USD metadata differs from token atomic units. Public resolved results have zero free allowance. UNKNOWN/DATA GAP are non-billable. DHT reports observed DNS/TLS/HTTPS HEAD facts, not a reputation or security guarantee. Missing coverage is not a global absence assertion. Retry only as directed; MCP is a descriptor only." }, "paths": { "/v1/x402/purchases/recover": { "post": { "operationId": "recoverExistingPurchase", "summary": "Recover an existing purchase without a new token authorization", "description": "A blind 402 issues a five-minute, single-use SIGN-IN-WITH-X READ challenge bound to the exact origin, method, URI, purchase and original request hash. A fresh proof is required after use or expiry. No PAYMENT-SIGNATURE, Bearer fallback, quote retry or new settlement is performed. Requires separately provisioned server recovery dependencies; settled results are retained for thirty days.", "security": [], "parameters": [ { "in": "header", "name": "SIGN-IN-WITH-X", "required": false, "schema": { "type": "string" }, "description": "The encoded EOA READ proof for this exact challenge. Omit to request a challenge." } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "authorization_id", "original_request" ], "properties": { "authorization_id": { "type": "string", "pattern": "^x402_auth_[0-9a-f]{64}$" }, "original_request": { "type": "object", "additionalProperties": true }, "cursor": { "type": "string", "minLength": 1, "maxLength": 8192, "description": "Opaque encrypted continuation for an authenticated original purchase; never grants access by itself." } } } } } }, "responses": { "200": { "description": "Original stored purchase result, after scoped authentication and integrity checks.", "content": { "application/json": { "schema": { "type": "object", "additionalProperties": true } } } }, "400": { "$ref": "#/components/responses/InvalidRequest" }, "402": { "$ref": "#/components/responses/PaymentRequired" }, "403": { "description": "Missing, invalid, used or incorrectly scoped READ proof." }, "404": { "description": "No existing purchase available to this authenticated reader." }, "409": { "description": "Original request mismatch or unresolved settlement; no new payment is attempted." }, "410": { "description": "Purchase retention expired." }, "503": { "description": "Recovery dependencies, storage or purchase integrity unavailable." } } } }, "/": { "get": { "operationId": "discoverPortfolio", "security": [], "responses": { "200": { "description": "Active product portfolio entry point" } } } }, "/.well-known/x402": { "get": { "operationId": "discoverX402", "security": [], "responses": { "200": { "description": "x402 resources and payment contracts for active products" } } } }, "/skill.md": { "get": { "operationId": "discoverAgentSkill", "security": [], "responses": { "200": { "description": "Agent-facing discovery and invocation guide" } } } }, "/openapi.yaml": { "get": { "operationId": "discoverOpenApi", "security": [], "responses": { "200": { "description": "This OpenAPI contract" } } } }, "/openapi.json": { "get": { "operationId": "discoverOpenApiJson", "security": [], "responses": { "200": { "description": "This OpenAPI contract as JSON", "content": { "application/json": { "schema": { "type": "object" } } } } } } }, "/mcp-tool.json": { "get": { "operationId": "discoverMcpTool", "security": [], "responses": { "200": { "description": "Lifecycle tool descriptor only; no operational MCP server or transport is advertised" } } } }, "/robots.txt": { "get": { "operationId": "discoverRobots", "security": [], "responses": { "200": { "description": "Crawl policy and sitemap location" } } } }, "/sitemap.xml": { "get": { "operationId": "discoverSitemap", "security": [], "responses": { "200": { "description": "Active public discovery surfaces" } } } }, "/.well-known/data-agent-foundry.json": { "get": { "operationId": "discoverDataAgentFoundry", "security": [], "responses": { "200": { "description": "Canonical machine capability manifest" } } } }, "/.well-known/mach002.json": { "get": { "operationId": "discoverMach002", "deprecated": true, "security": [], "responses": { "200": { "description": "Backward-compatible alias of the canonical capability manifest" } } } }, "/v1/coverage": { "get": { "operationId": "discoverCoverage", "security": [], "parameters": [ { "name": "product_key", "in": "query", "required": true, "schema": { "type": "string", "minLength": 1, "maxLength": 200 } } ], "responses": { "200": { "description": "Published rights-cleared product coverage; never billable", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CoverageResponse" } } } }, "400": { "$ref": "#/components/responses/InvalidRequest" } } } }, "/v1/versions": { "get": { "operationId": "discoverAdmissibleVersions", "description": "Free published rights-cleared cycle inventory with freshness qualification; no support decisions or transition dates. Coverage never guarantees a billable result.", "security": [], "parameters": [ { "name": "product_key", "in": "query", "required": true, "schema": { "type": "string", "minLength": 1, "maxLength": 200 } } ], "responses": { "200": { "description": "Public cycle parameters only; source metadata and freshness remain in the paid result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VersionInventoryResponse" } } } }, "400": { "$ref": "#/components/responses/InvalidRequest" } } } }, "/v1/pricing": { "get": { "operationId": "discoverPricing", "description": "Public machine pricing with zero free resolved results. Never billable.", "security": [], "responses": { "200": { "description": "Provider-neutral price discovery; NOT_CONFIGURED until governed pricing is supplied" } } } }, "/v1/products": { "get": { "operationId": "discoverActiveProducts", "description": "Public catalog containing ACTIVE and ACTIVE_CONTROL products only. Validation candidates are intentionally absent.", "security": [], "responses": { "200": { "description": "Active product catalog" } } } }, "/health": { "get": { "operationId": "health", "security": [], "responses": { "200": { "description": "Process is alive" } } } }, "/ready": { "get": { "operationId": "readiness", "security": [], "responses": { "200": { "description": "Serving dependency is ready" }, "503": { "description": "Serving dependency is not ready" } } } }, "/v1/software-lifecycle/status": { "post": { "operationId": "getSoftwareLifecycleStatus", "x-payment-info": { "price": { "mode": "fixed", "currency": "USD", "amount": "0.0025" }, "protocols": [ { "x402": {} } ] }, "description": "Current lifecycle price is 0.0025 USD per billable resolved result, settled in USDC; the live PAYMENT-REQUIRED challenge is authoritative. UNKNOWN and DATA GAP are non-billable.", "security": [ { "x402Payment": [] } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/LifecycleRequest" }, "example": { "schema_version": "1.0", "product": { "key": "kubernetes", "version": "1.35.2" }, "as_of": "2026-09-27" } } } }, "responses": { "200": { "description": "Resolved result or non-billable DATA GAP", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/LifecycleResponse" }, "examples": { "resolved": { "summary": "SYNTHETIC contract fixture resolved; not a live result", "value": { "schema_version": "1.0", "request_id": "req_synthetic_contract", "run_id": "run_synthetic_contract", "result_state": "RESOLVED", "decision": { "result_state": "RESOLVED", "lifecycle_state": "SUPPORTED", "reasons": [] }, "product": { "input_key": "nodejs", "canonical_key": "nodejs", "input_version": "24.0.0", "resolved_cycle": "24" }, "lifecycle": { "state": "SUPPORTED", "effective_as_of": "2026-09-27", "release_date": "2025-05-06", "active_support_end": "2026-10-20", "maintenance_end": null, "security_support_end": "2028-04-30", "eol_date": "2028-04-30" }, "confidence": { "score": 1, "level": "HIGH" }, "freshness": { "last_checked_at": "2026-09-27T12:00:00.000Z", "source_observed_at": "2026-09-27T12:00:00.000Z", "imported_at": null, "source_updated_at": "2026-09-27T12:00:00.000Z", "state": "FRESH", "basis": "EXPLICIT_SOURCE_OBSERVATION", "reason": null, "stale": false, "stale_after": "2026-10-04T12:00:00.000Z" }, "provenance": [ { "source_id": "synthetic", "source_type": "SYNTHETIC_CONTRACT_FIXTURE", "source_name": "Synthetic contract fixture; no real observation", "source_url": "https://example.org/contract-fixture", "retrieved_at": "2026-09-27T12:00:00.000Z", "source_observed_at": "2026-09-27T12:00:00.000Z", "imported_at": null, "source_priority": 1, "snapshot_hash": "synthetic-not-a-source-hash" } ], "rights": { "publication_state": "PUBLISHED", "source_license": "SYNTHETIC", "redistribution_allowed": true, "attribution_required": false }, "version": { "record_version": "synthetic-contract-v1", "computation_version": "lifecycle-resolver-1.0.3" }, "metering": { "unit": "resolved_lifecycle_result", "quantity": 1, "billable": true }, "commercial": { "billable": true, "meter": "resolved_lifecycle_result", "unit_quantity": 1, "entitlement": "NOT_EVALUATED", "can_call": true, "free_allowance": { "remaining": null, "exhausted": null }, "pricing": { "price_unit": "resolved_lifecycle_result", "currency": null, "exact_call_price_micros": null } }, "operational": { "duplicates_prevented": 0, "full_refresh_avoided": 0, "retry_count": 0, "human_intervention_required": false, "human_intervention_reason": null, "gap_frequency": 0, "gap_closure": 0, "source_to_published_ms": "UNKNOWN" } } }, "gap": { "summary": "SYNTHETIC contract fixture gap; not a live result", "value": { "schema_version": "1.0", "request_id": "req_synthetic_contract", "run_id": "run_synthetic_contract", "result_state": "NO_COVERAGE", "decision": { "result_state": "NO_COVERAGE", "lifecycle_state": "UNKNOWN", "reasons": [] }, "product": { "input_key": "not-covered", "canonical_key": "not-covered", "input_version": "1.0.0", "resolved_cycle": "1" }, "lifecycle": { "state": "UNKNOWN", "effective_as_of": "2026-09-27", "release_date": null, "active_support_end": null, "maintenance_end": null, "security_support_end": null, "eol_date": null }, "confidence": { "score": 0, "level": "LOW" }, "freshness": { "last_checked_at": null, "source_observed_at": null, "imported_at": null, "source_updated_at": null, "state": "UNKNOWN", "basis": null, "reason": "SOURCE_OBSERVATION_MISSING", "stale": false, "stale_after": null }, "provenance": [], "rights": { "publication_state": null, "source_license": null, "redistribution_allowed": false, "attribution_required": false }, "version": { "record_version": null, "computation_version": "lifecycle-resolver-1.0.3" }, "metering": { "unit": "resolved_lifecycle_result", "quantity": 0, "billable": false }, "commercial": { "billable": false, "meter": "resolved_lifecycle_result", "unit_quantity": 0, "entitlement": "NOT_EVALUATED", "can_call": true, "free_allowance": { "remaining": null, "exhausted": null }, "pricing": { "price_unit": "resolved_lifecycle_result", "currency": null, "exact_call_price_micros": null } }, "operational": { "duplicates_prevented": 0, "full_refresh_avoided": 0, "retry_count": 0, "human_intervention_required": false, "human_intervention_reason": null, "gap_frequency": 0, "gap_closure": 0, "source_to_published_ms": "UNKNOWN" }, "retryable": false, "next_action": "CHECK_COVERAGE_OR_REQUEST_PRODUCT" } } } } } }, "400": { "$ref": "#/components/responses/InvalidRequest" }, "401": { "$ref": "#/components/responses/InvalidApiKey" }, "402": { "$ref": "#/components/responses/PaymentRequired" }, "403": { "$ref": "#/components/responses/ScopeDenied" }, "409": { "$ref": "#/components/responses/RequestConflict" }, "422": { "$ref": "#/components/responses/UnsupportedSchema" }, "429": { "$ref": "#/components/responses/RateLimitExceeded" }, "502": { "$ref": "#/components/responses/PaymentSettlementFailed" }, "503": { "$ref": "#/components/responses/PaymentUnavailable" } } } }, "/v1/domain-host-trust": { "post": { "operationId": "getDomainHostTrustRecord", "x-payment-info": { "price": { "mode": "fixed", "currency": "USD", "amount": "0.01" }, "protocols": [ { "x402": {} } ] }, "description": "Self-observed DNS resolution, TLS certificate validity and HTTPS HEAD header facts. Current price is 0.01 USD per PASS, WARN or FAIL record, settled in USDC; UNKNOWN is non-billable. Observations do not guarantee domain reputation or overall security. Use the live PAYMENT-REQUIRED challenge. Observation scope: HTTPS HEAD on root / port443 only; no redirect following, full-path scan or global trust assessment. HSTS requires a syntactically valid first-field positive max-age policy for PASS.", "security": [ { "x402Payment": [] } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/DomainHostTrustRequest" }, "example": { "schema_version": "1.0", "hostname": "example.org" } } } }, "responses": { "200": { "description": "Resolved trust record or non-billable UNKNOWN observation", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/DomainHostTrustResponse" }, "examples": { "PASS": { "summary": "SYNTHETIC contract fixture PASS; not a live result", "value": { "schema_version": "1.0", "request_id": "req_domain_synthetic_contract", "client_request_id": null, "run_id": "run_domain_synthetic_contract", "product_id": "foundry.domain-host-trust-record.v1", "hostname": "example.org", "result_state": "RESOLVED", "decision": { "state": "PASS", "reasons": [ "PUBLIC_DNS_TLS_AND_BASELINE_HEADERS_OBSERVED" ] }, "dns_resolution": { "addresses": [ "93.184.216.34" ], "dnssec_state": "UNKNOWN_NOT_OBSERVED" }, "tls_certificate_validity": { "state": "VALID", "protocol": "TLSv1.3", "subject_cn": "example.org", "issuer_cn": "Synthetic fixture issuer", "valid_from": "Sep 1 00:00:00 2026 GMT", "valid_to": "Sep 1 00:00:00 2027 GMT", "fingerprint256": null }, "http_security_headers": { "state": "PASS", "required_baseline": [ "STRICT_TRANSPORT_SECURITY", "X_CONTENT_TYPE_OPTIONS_NOSNIFF" ], "missing": [], "present": { "strict_transport_security": true, "x_content_type_options_nosniff": true, "content_security_policy": true, "x_frame_options": true, "referrer_policy": true }, "hsts": { "state": "ACTIVE", "header_present": true, "syntax_valid": true, "policy_active": true, "max_age_seconds": "31536000", "include_subdomains": true, "field_count": 1, "field_selection": "FIRST_FIELD_RFC6797", "reason": null }, "http_status": 200 }, "observed_at": "2026-09-27T12:00:00.000Z", "freshness": { "state": "FRESH", "observed_at": "2026-09-27T12:00:00.000Z", "max_age_seconds": 300 }, "provenance": [ { "source_id": "self_observed_dns", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "DNS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_tls", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "TLS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_https_headers", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "HTTPS_HEADERS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" } ], "rights": { "state": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS", "third_party_reputation_feed": false, "whois_bulk_content": false }, "metering": { "unit": "domain_host_trust_record", "quantity": 1, "billable": true }, "commercial": { "pricing_version": "domain-host-trust-v1" }, "observation_scope": { "protocol": "HTTPS", "method": "HEAD", "path": "/", "port": 443, "redirects_followed": false, "full_paths_checked": false, "global_trust_assessed": false } } }, "WARN": { "summary": "SYNTHETIC contract fixture WARN; not a live result", "value": { "schema_version": "1.0", "request_id": "req_domain_synthetic_contract", "client_request_id": null, "run_id": "run_domain_synthetic_contract", "product_id": "foundry.domain-host-trust-record.v1", "hostname": "example.org", "result_state": "RESOLVED", "decision": { "state": "WARN", "reasons": [ "BASELINE_SECURITY_HEADERS_INCOMPLETE" ] }, "dns_resolution": { "addresses": [ "93.184.216.34" ], "dnssec_state": "UNKNOWN_NOT_OBSERVED" }, "tls_certificate_validity": { "state": "VALID", "protocol": "TLSv1.3", "subject_cn": "example.org", "issuer_cn": "Synthetic fixture issuer", "valid_from": "Sep 1 00:00:00 2026 GMT", "valid_to": "Sep 1 00:00:00 2027 GMT", "fingerprint256": null }, "http_security_headers": { "state": "WARN", "required_baseline": [ "STRICT_TRANSPORT_SECURITY", "X_CONTENT_TYPE_OPTIONS_NOSNIFF" ], "missing": [ "STRICT_TRANSPORT_SECURITY", "X_CONTENT_TYPE_OPTIONS_NOSNIFF" ], "present": { "strict_transport_security": true, "x_content_type_options_nosniff": false, "content_security_policy": false, "x_frame_options": false, "referrer_policy": false }, "hsts": { "state": "INACTIVE", "header_present": true, "syntax_valid": true, "policy_active": false, "max_age_seconds": "0", "include_subdomains": false, "field_count": 1, "field_selection": "FIRST_FIELD_RFC6797", "reason": "MAX_AGE_ZERO" }, "http_status": 200 }, "observed_at": "2026-09-27T12:00:00.000Z", "freshness": { "state": "FRESH", "observed_at": "2026-09-27T12:00:00.000Z", "max_age_seconds": 300 }, "provenance": [ { "source_id": "self_observed_dns", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "DNS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_tls", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "TLS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_https_headers", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "HTTPS_HEADERS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" } ], "rights": { "state": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS", "third_party_reputation_feed": false, "whois_bulk_content": false }, "metering": { "unit": "domain_host_trust_record", "quantity": 1, "billable": true }, "commercial": { "pricing_version": "domain-host-trust-v1" }, "observation_scope": { "protocol": "HTTPS", "method": "HEAD", "path": "/", "port": 443, "redirects_followed": false, "full_paths_checked": false, "global_trust_assessed": false } } }, "FAIL": { "summary": "SYNTHETIC contract fixture FAIL; not a live result", "value": { "schema_version": "1.0", "request_id": "req_domain_synthetic_contract", "client_request_id": null, "run_id": "run_domain_synthetic_contract", "product_id": "foundry.domain-host-trust-record.v1", "hostname": "example.org", "result_state": "RESOLVED", "decision": { "state": "FAIL", "reasons": [ "TLS_CERTIFICATE_INVALID" ] }, "dns_resolution": { "addresses": [ "93.184.216.34" ], "dnssec_state": "UNKNOWN_NOT_OBSERVED" }, "tls_certificate_validity": { "state": "INVALID", "error_code": "CERT_HAS_EXPIRED" }, "http_security_headers": { "state": "UNKNOWN", "present": {} }, "observed_at": "2026-09-27T12:00:00.000Z", "freshness": { "state": "FRESH", "observed_at": "2026-09-27T12:00:00.000Z", "max_age_seconds": 300 }, "provenance": [ { "source_id": "self_observed_dns", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "DNS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_tls", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "TLS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, { "source_id": "self_observed_https_headers", "source_type": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT", "fact_family": "HTTPS_HEADERS", "observed_at": "2026-09-27T12:00:00.000Z", "rights": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" } ], "rights": { "state": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS", "third_party_reputation_feed": false, "whois_bulk_content": false }, "metering": { "unit": "domain_host_trust_record", "quantity": 1, "billable": true }, "commercial": { "pricing_version": "domain-host-trust-v1" }, "observation_scope": { "protocol": "HTTPS", "method": "HEAD", "path": "/", "port": 443, "redirects_followed": false, "full_paths_checked": false, "global_trust_assessed": false } } }, "UNKNOWN": { "summary": "SYNTHETIC contract fixture UNKNOWN; not a live result", "value": { "schema_version": "1.0", "request_id": "req_domain_synthetic_contract", "client_request_id": null, "run_id": "run_domain_synthetic_contract", "product_id": "foundry.domain-host-trust-record.v1", "hostname": "example.org", "result_state": "UNKNOWN", "decision": { "state": "UNKNOWN", "reasons": [ "OBSERVATION_UNAVAILABLE" ] }, "dns_resolution": { "addresses": [], "dnssec_state": "UNKNOWN_NOT_OBSERVED" }, "tls_certificate_validity": { "state": "UNKNOWN" }, "http_security_headers": { "state": "UNKNOWN", "present": {} }, "observed_at": "2026-09-27T12:00:00.000Z", "freshness": { "state": "FRESH", "observed_at": "2026-09-27T12:00:00.000Z", "max_age_seconds": 300 }, "provenance": [], "rights": { "state": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS", "third_party_reputation_feed": false, "whois_bulk_content": false }, "metering": { "unit": "domain_host_trust_record", "quantity": 0, "billable": false }, "commercial": { "pricing_version": "domain-host-trust-v1" }, "observation_scope": { "protocol": "HTTPS", "method": "HEAD", "path": "/", "port": 443, "redirects_followed": false, "full_paths_checked": false, "global_trust_assessed": false } } } } } } }, "400": { "$ref": "#/components/responses/InvalidRequest" }, "402": { "$ref": "#/components/responses/PaymentRequired" }, "409": { "$ref": "#/components/responses/RequestConflict" }, "422": { "$ref": "#/components/responses/UnsupportedSchema" }, "429": { "$ref": "#/components/responses/RateLimitExceeded" }, "502": { "$ref": "#/components/responses/PaymentSettlementFailed" }, "503": { "$ref": "#/components/responses/PaymentUnavailable" } } } } }, "components": { "securitySchemes": { "bearerAuth": { "type": "http", "scheme": "bearer" }, "x402Payment": { "type": "apiKey", "in": "header", "name": "PAYMENT-SIGNATURE", "description": "x402 V2 exact machine-payment authorization" } }, "responses": { "InvalidRequest": { "description": "Invalid JSON or request fields", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "INVALID_REQUEST" } } } }, "InvalidApiKey": { "description": "Missing or invalid API key", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "INVALID_API_KEY" } } } }, "ScopeDenied": { "description": "API key lacks lifecycle:read", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "SCOPE_DENIED" } } } }, "IdempotencyConflict": { "description": "Idempotency key was previously used for another request", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "IDEMPOTENCY_CONFLICT" } } } }, "RequestConflict": { "description": "API-key idempotency conflict or x402 authorization reuse, processing or reconciliation state; follow error-specific next_action", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" } } } }, "PaymentSettlementFailed": { "description": "Payment settlement failed; follow next_action and obtain a new challenge only when instructed", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" } } } }, "UnsupportedSchema": { "description": "schema_version is not 1.0", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "UNSUPPORTED_SCHEMA_VERSION" } } } }, "FreeAllowanceExhausted": { "description": "PAYMENT_REQUIRED — a resolved machine result requires x402 payment; inspect /v1/pricing", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "PAYMENT_REQUIRED" } } } }, "PaymentRequired": { "description": "x402 payment authorization is required before a billable machine result can be retained", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "PAYMENT_REQUIRED", "payment_required": true, "retryable": false, "next_action": "SUBMIT_X402_PAYMENT" } } } }, "PaymentUnavailable": { "description": "Payment runtime unavailable or settlement/local completion requires reconciliation; follow next_action and do not assume zero retained charge for reconciliation errors", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "PAYMENT_UNAVAILABLE", "retryable": true, "next_action": "RETRY_LATER" } } } }, "RateLimitExceeded": { "description": "API key request limit has been exhausted", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Error" }, "example": { "error": "RATE_LIMIT_EXCEEDED" } } } } }, "schemas": { "Error": { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_FINANCIAL_AUTHORIZATION", "PAYMENT_VERIFICATION_UNAVAILABLE", "PURCHASE_RECOVERY_NOT_AUTHORIZED", "PURCHASE_RECOVERY_PRODUCT_NOT_SUPPORTED", "PURCHASE_RECOVERY_REQUEST_MISMATCH", "PURCHASE_RESULT_INTEGRITY_UNAVAILABLE", "PURCHASE_RETENTION_EXPIRED", "PURCHASE_CURSOR_REJECTED", "PURCHASE_CURSOR_EXPIRED", "INVALID_PRODUCT_RESOURCE", "PRODUCT_RESOURCE_MISMATCH", "PURCHASE_PRODUCT_MISMATCH", "PRODUCT_REQUEST_SCHEMA_MISMATCH", "PRODUCT_EXECUTION_UNAVAILABLE", "PRODUCT_OWNERSHIP_STORE_REQUIRED", "PRODUCT_OWNERSHIP_NOT_CURRENT", "RECOVERY_STORE_UPGRADE_REQUIRED", "PRODUCT_KEY_REQUIRED", "INVALID_API_KEY", "SCOPE_DENIED", "IDEMPOTENCY_CONFLICT", "UNSUPPORTED_SCHEMA_VERSION", "RATE_LIMIT_EXCEEDED", "RATE_LIMITED", "FREE_ALLOWANCE_EXHAUSTED", "PAYMENT_REQUIRED", "PAYMENT_UNAVAILABLE", "INTERNAL_ERROR", "INVALID_HOSTNAME", "INVALID_PAYMENT_SIGNATURE", "WRONG_X402_VERSION", "WRONG_SCHEME", "WRONG_NETWORK", "WRONG_AMOUNT", "WRONG_ASSET", "WRONG_PAY_TO", "REQUEST_BINDING_MISMATCH", "PAYMENT_AUTHORIZATION_EXPIRED", "INVALID_PAYMENT_EXPIRY", "INVALID_CHALLENGE_ID", "BAZAAR_EXTENSION_MISMATCH", "PAYMENT_AUTHORIZATION_REUSE", "PAYMENT_RESOURCE_MISMATCH", "UNEXPECTED_PAYMENT_EXTENSIONS", "PROTECTED_RESULT_STORAGE_NOT_READY", "PAYMENT_RECONCILIATION_REQUIRED", "PAYMENT_AUTHORIZATION_TERMINAL", "PAYMENT_PROCESSING", "PAYMENT_VERIFICATION_FAILED", "PAYMENT_SETTLEMENT_FAILED" ] }, "request_id": { "type": [ "string", "null" ] }, "failure": { "type": "string" }, "retryable": { "type": "boolean" }, "next_action": { "type": "string" }, "payment_required": { "type": "boolean" }, "payment": { "type": "object" }, "x402": { "type": "object" }, "entitlement": { "type": "object" }, "commercial": { "type": "object" } } }, "LifecycleRequest": { "type": "object", "additionalProperties": true, "required": [ "schema_version", "product" ], "properties": { "schema_version": { "const": "1.0" }, "client_request_id": { "type": "string", "minLength": 1, "maxLength": 200 }, "product": { "type": "object", "additionalProperties": true, "required": [ "key", "version" ], "properties": { "key": { "type": "string", "minLength": 1, "maxLength": 200 }, "version": { "type": "string", "minLength": 1, "maxLength": 200 } } }, "as_of": { "type": "string", "format": "date" } } }, "LifecycleResponse": { "type": "object", "required": [ "schema_version", "request_id", "run_id", "result_state", "decision", "product", "lifecycle", "confidence", "freshness", "provenance", "rights", "version", "metering", "commercial", "operational" ], "properties": { "schema_version": { "const": "1.0" }, "request_id": { "type": "string", "pattern": "^req_" }, "client_request_id": { "type": [ "string", "null" ] }, "run_id": { "type": "string", "pattern": "^run_" }, "result_state": { "type": "string", "enum": [ "RESOLVED", "VERSION_UNRESOLVED", "NO_COVERAGE", "STALE", "LOW_CONFIDENCE", "SOURCE_CONFLICT", "RIGHTS_UNRESOLVED", "UNKNOWN" ] }, "decision": { "type": "object", "additionalProperties": false, "required": [ "result_state", "lifecycle_state", "reasons" ], "properties": { "result_state": { "type": "string", "enum": [ "RESOLVED", "VERSION_UNRESOLVED", "NO_COVERAGE", "STALE", "LOW_CONFIDENCE", "SOURCE_CONFLICT", "RIGHTS_UNRESOLVED", "UNKNOWN" ] }, "lifecycle_state": { "type": "string", "enum": [ "SUPPORTED", "MAINTENANCE", "SECURITY_ONLY", "EOL", "UNKNOWN" ] }, "reasons": { "type": "array", "items": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } } } }, "retryable": { "type": "boolean" }, "next_action": { "type": "string" }, "product": { "type": "object", "additionalProperties": false, "required": [ "input_key", "canonical_key", "input_version", "resolved_cycle" ], "properties": { "input_key": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "canonical_key": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "input_version": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "resolved_cycle": { "type": [ "string", "null" ] } } }, "lifecycle": { "type": "object", "required": [ "state", "effective_as_of", "release_date", "active_support_end", "maintenance_end", "security_support_end", "eol_date" ], "properties": { "state": { "type": "string", "enum": [ "SUPPORTED", "MAINTENANCE", "SECURITY_ONLY", "EOL", "UNKNOWN" ] }, "effective_as_of": { "type": "string", "format": "date" }, "release_date": { "type": [ "string", "null" ], "pattern": "^\\d{4}-\\d{2}(?:-\\d{2})?$", "description": "Known source date: YYYY-MM-DD day precision or YYYY-MM month precision; null means unavailable. A month is not an inferred day or transition." }, "active_support_end": { "type": [ "string", "null" ], "pattern": "^\\d{4}-\\d{2}(?:-\\d{2})?$", "description": "Known source date: YYYY-MM-DD day precision or YYYY-MM month precision; null means unavailable. A month is not an inferred day or transition." }, "maintenance_end": { "type": [ "string", "null" ], "pattern": "^\\d{4}-\\d{2}(?:-\\d{2})?$", "description": "Known source date: YYYY-MM-DD day precision or YYYY-MM month precision; null means unavailable. A month is not an inferred day or transition." }, "security_support_end": { "type": [ "string", "null" ], "pattern": "^\\d{4}-\\d{2}(?:-\\d{2})?$", "description": "Known source date: YYYY-MM-DD day precision or YYYY-MM month precision; null means unavailable. A month is not an inferred day or transition." }, "eol_date": { "type": [ "string", "null" ], "pattern": "^\\d{4}-\\d{2}(?:-\\d{2})?$", "description": "Known source date: YYYY-MM-DD day precision or YYYY-MM month precision; null means unavailable. A month is not an inferred day or transition." } }, "additionalProperties": false, "description": "Dates are present even when null. Values are source evidence, not a promise that all phase transitions are known. release_date may have month precision; effective_as_of is always a date-only query day." }, "confidence": { "type": "object", "additionalProperties": false, "required": [ "score", "level" ], "properties": { "score": { "type": "number", "minimum": 0, "maximum": 1 }, "level": { "type": "string", "enum": [ "HIGH", "MEDIUM", "LOW" ] } }, "description": "Deterministic source confidence score0..1, not an empirical probability of correctness." }, "freshness": { "$ref": "#/components/schemas/SourceFreshness" }, "provenance": { "type": "array", "items": { "$ref": "#/components/schemas/LifecycleProvenance" } }, "rights": { "type": "object", "additionalProperties": false, "required": [ "publication_state", "source_license", "redistribution_allowed", "attribution_required" ], "properties": { "publication_state": { "type": [ "string", "null" ] }, "source_license": { "type": [ "string", "null" ] }, "redistribution_allowed": { "type": "boolean" }, "attribution_required": { "type": "boolean" } } }, "version": { "type": "object", "additionalProperties": false, "required": [ "record_version", "computation_version" ], "properties": { "record_version": { "type": [ "string", "null" ] }, "computation_version": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "producer_record_version": { "type": "string", "description": "Original producer fact record identity, distinct from consumer record_version binding; present for qualified DF observations." } } }, "commercial": { "$ref": "#/components/schemas/CommercialEnvelope" }, "operational": { "type": "object", "required": [ "duplicates_prevented", "full_refresh_avoided", "retry_count", "human_intervention_required", "human_intervention_reason", "gap_frequency", "gap_closure", "source_to_published_ms" ], "properties": { "duplicates_prevented": { "type": "integer", "minimum": 0 }, "full_refresh_avoided": { "type": "integer", "minimum": 0 }, "retry_count": { "type": "integer", "minimum": 0 }, "human_intervention_required": { "type": "boolean" }, "human_intervention_reason": { "type": [ "string", "null" ] }, "gap_frequency": { "type": "integer", "minimum": 0 }, "gap_closure": { "type": "integer", "minimum": 0 }, "source_to_published_ms": { "oneOf": [ { "type": "number", "minimum": 0 }, { "const": "UNKNOWN" } ], "description": "Milliseconds if measured, otherwise literal UNKNOWN; no invented timing." } } }, "entitlement": { "type": "object", "properties": { "decision": { "type": "string", "enum": [ "ALLOW_FREE", "ALLOW_PAID", "MACHINE_PAYMENT" ] }, "free_allowance_remaining": { "type": [ "integer", "null" ], "minimum": 0 } } }, "metering": { "type": "object", "required": [ "unit", "quantity", "billable" ], "properties": { "unit": { "const": "resolved_lifecycle_result" }, "quantity": { "type": "integer", "enum": [ 0, 1 ] }, "billable": { "type": "boolean" } } }, "payment": { "type": "object", "required": [ "protocol", "settled", "retained_charge" ], "properties": { "protocol": { "const": "x402" }, "settled": { "type": "boolean" }, "retained_charge": { "type": "boolean" }, "reason": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "payment_event_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "meter_event_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "transaction": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "network": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "amount_atomic": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "payer": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "version": { "const": 2 }, "asset": { "type": "string" }, "amount": { "type": "string", "pattern": "^\\d+$", "description": "Token atomic units. USDC native Base has six decimals;2500 atomic=0.0025USDC. Live challenge is authoritative." } }, "additionalProperties": true, "description": "Present on x402 completion; no-charge gaps have settled=false and retained_charge=false. Receipt transport is PAYMENT-RESPONSE." } }, "allOf": [ { "if": { "properties": { "result_state": { "const": "RESOLVED" } } }, "then": { "properties": { "metering": { "properties": { "quantity": { "const": 1 }, "billable": { "const": true } } } } }, "else": { "properties": { "metering": { "properties": { "quantity": { "const": 0 }, "billable": { "const": false } } } } } } ] }, "DomainHostTrustRequest": { "type": "object", "additionalProperties": false, "required": [ "schema_version", "hostname" ], "properties": { "schema_version": { "const": "1.0" }, "hostname": { "type": "string", "minLength": 1, "maxLength": 253, "example": "example.org", "description": "Public DNS hostname only; URLs, ports, paths and IP literals are rejected." }, "client_request_id": { "type": "string", "minLength": 1, "maxLength": 200 } } }, "DomainHostTrustResponse": { "type": "object", "required": [ "schema_version", "request_id", "client_request_id", "run_id", "product_id", "hostname", "result_state", "decision", "dns_resolution", "tls_certificate_validity", "http_security_headers", "observed_at", "freshness", "provenance", "rights", "metering", "commercial", "observation_scope" ], "properties": { "schema_version": { "const": "1.0" }, "request_id": { "type": "string", "pattern": "^req_domain_" }, "client_request_id": { "type": [ "string", "null" ] }, "run_id": { "type": "string", "pattern": "^run_domain_" }, "product_id": { "const": "foundry.domain-host-trust-record.v1" }, "hostname": { "type": "string" }, "result_state": { "type": "string", "enum": [ "RESOLVED", "UNKNOWN" ] }, "decision": { "type": "object", "required": [ "state", "reasons" ], "properties": { "state": { "type": "string", "enum": [ "PASS", "WARN", "FAIL", "UNKNOWN" ] }, "reasons": { "type": "array", "items": { "type": "string" } } } }, "dns_resolution": { "$ref": "#/components/schemas/DomainDns" }, "tls_certificate_validity": { "$ref": "#/components/schemas/DomainTls" }, "http_security_headers": { "$ref": "#/components/schemas/DomainHeaders" }, "observed_at": { "type": "string", "format": "date-time" }, "freshness": { "type": "object", "additionalProperties": false, "required": [ "state", "observed_at", "max_age_seconds" ], "properties": { "state": { "const": "FRESH" }, "observed_at": { "type": "string", "format": "date-time" }, "max_age_seconds": { "type": "integer", "const": 300, "description": "Seconds of observation retention guidance, not a guarantee that UNKNOWN probes succeeded." } } }, "provenance": { "type": "array", "items": { "$ref": "#/components/schemas/DomainProvenance" } }, "rights": { "type": "object", "additionalProperties": false, "required": [ "state", "third_party_reputation_feed", "whois_bulk_content" ], "properties": { "state": { "const": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" }, "third_party_reputation_feed": { "const": false }, "whois_bulk_content": { "const": false } } }, "metering": { "type": "object", "required": [ "unit", "quantity", "billable" ], "properties": { "unit": { "const": "domain_host_trust_record" }, "quantity": { "type": "integer", "enum": [ 0, 1 ] }, "billable": { "type": "boolean" } } }, "commercial": { "type": "object", "required": [ "pricing_version" ], "properties": { "pricing_version": { "const": "domain-host-trust-v1" } } }, "payment": { "type": "object", "required": [ "protocol", "settled", "retained_charge" ], "properties": { "protocol": { "const": "x402" }, "settled": { "type": "boolean" }, "retained_charge": { "type": "boolean" }, "reason": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "payment_event_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "meter_event_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "transaction": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "network": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "amount_atomic": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "payer": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "version": { "const": 2 }, "asset": { "type": "string" }, "amount": { "type": "string", "pattern": "^\\d+$", "description": "Token atomic units. USDC native Base has six decimals;2500 atomic=0.0025USDC. Live challenge is authoritative." } }, "additionalProperties": true, "description": "Present on x402 completion; no-charge gaps have settled=false and retained_charge=false. Receipt transport is PAYMENT-RESPONSE." }, "observation_scope": { "$ref": "#/components/schemas/DomainObservationScope" } }, "description": "Observed DNS/TLS/HEAD facts. VALID TLS may include optional certificate fields; INVALID may provide only state/error_code; UNKNOWN provides only state. UNKNOWN headers may have empty present. DNSSEC is not observed. PASS/WARN/FAIL are billable; UNKNOWN is not. Observation scope is HTTPS HEAD root / port443, no redirects/full paths/global trust assessment. HSTS presence, syntax and active advertised policy are separate; max-age0/invalid/absent cannot satisfy baseline PASS. Unknown headers do not imply absence.", "allOf": [ { "if": { "properties": { "decision": { "properties": { "state": { "enum": [ "PASS", "WARN", "FAIL" ] } } } } }, "then": { "properties": { "metering": { "properties": { "quantity": { "const": 1 }, "billable": { "const": true } } } } }, "else": { "properties": { "metering": { "properties": { "quantity": { "const": 0 }, "billable": { "const": false } } } } } } ] }, "CommercialEnvelope": { "type": "object", "required": [ "billable", "meter", "unit_quantity", "entitlement", "can_call", "free_allowance", "pricing" ], "properties": { "billable": { "type": "boolean" }, "meter": { "const": "resolved_lifecycle_result" }, "unit_quantity": { "type": "integer", "enum": [ 0, 1 ] }, "entitlement": { "type": "string" }, "can_call": { "type": "boolean" }, "free_allowance": { "type": "object", "additionalProperties": false, "required": [ "remaining", "exhausted" ], "properties": { "remaining": { "type": [ "integer", "null" ], "minimum": 0 }, "exhausted": { "type": [ "boolean", "null" ] } } }, "pricing": { "type": "object", "additionalProperties": false, "required": [ "price_unit", "currency", "exact_call_price_micros" ], "properties": { "price_unit": { "const": "resolved_lifecycle_result" }, "currency": { "type": [ "string", "null" ] }, "exact_call_price_micros": { "type": [ "integer", "null" ], "minimum": 0, "description": "Currency millionths per result, not token atomic units." } } } } }, "CoverageResponse": { "type": "object", "additionalProperties": false, "required": [ "schema_version", "product", "covered", "cycle_count", "enumeration", "publication", "commercial", "versions_endpoint" ], "properties": { "schema_version": { "const": "1.0" }, "product": { "type": "object" }, "covered": { "type": "boolean" }, "cycle_count": { "type": "integer", "minimum": 0 }, "enumeration": { "const": "AVAILABLE_AT_VERSIONS_ENDPOINT" }, "publication": { "type": "object" }, "commercial": { "type": "object" }, "versions_endpoint": { "const": "/v1/versions" } } }, "SourceFreshness": { "type": "object", "additionalProperties": false, "required": [ "last_checked_at", "source_observed_at", "imported_at", "source_updated_at", "state", "basis", "reason", "stale", "stale_after" ], "properties": { "last_checked_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "source_observed_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "imported_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "source_updated_at": { "type": [ "string", "null" ], "description": "Product publication/source update metadata, ISO date or timestamp; never capture proof." }, "state": { "type": "string", "enum": [ "FRESH", "STALE", "UNKNOWN" ] }, "basis": { "type": [ "string", "null" ], "enum": [ "PRODUCER_SOURCE_OBSERVATION", "EXPLICIT_SOURCE_OBSERVATION", "SOURCE_REFRESH_CHECK", "NATIVE_RETRIEVAL_LEGACY", null ] }, "reason": { "type": [ "string", "null" ] }, "stale": { "type": "boolean" }, "stale_after": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." } } }, "LifecycleProvenance": { "type": "object", "additionalProperties": false, "required": [ "source_id", "source_type", "source_name", "source_url", "retrieved_at", "source_observed_at", "imported_at", "source_priority", "snapshot_hash" ], "properties": { "source_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "source_type": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "source_name": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "source_url": { "type": "string", "format": "uri" }, "retrieved_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "source_observed_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "imported_at": { "type": [ "string", "null" ], "format": "date-time", "description": "UTC instant, ISO8601 timezone explicit. Normalized observation/import timestamps use millisecond precision; original stored metadata can retain source precision." }, "source_priority": { "type": "number" }, "snapshot_hash": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "data_factory_identity": { "type": "object", "additionalProperties": false, "required": [ "producer_dataset_version", "logical_sha256", "observation_id", "manifest_sha256", "source_snapshot_sha256", "producer_observed_at", "producer_publication_state" ], "properties": { "producer_dataset_version": { "type": "string" }, "logical_sha256": { "type": "string" }, "observation_id": { "type": "string" }, "manifest_sha256": { "type": "string" }, "source_snapshot_sha256": { "type": "string" }, "producer_observed_at": { "type": "string", "format": "date-time" }, "producer_publication_state": { "type": "string" } }, "description": "Qualified observation binding only. Content version is the unchanged producer dataset version; observation is separately hash-pinned. Candidate producer publication status is preserved, not a claim of producer release." } } }, "DomainDns": { "type": "object", "additionalProperties": false, "required": [ "addresses", "dnssec_state" ], "properties": { "addresses": { "type": "array", "items": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } }, "dnssec_state": { "const": "UNKNOWN_NOT_OBSERVED" }, "recheck_addresses": { "type": "array", "items": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } } } }, "DomainTls": { "type": "object", "additionalProperties": false, "required": [ "state" ], "properties": { "state": { "type": "string", "enum": [ "VALID", "INVALID", "UNKNOWN" ] }, "protocol": { "type": [ "string", "null" ] }, "subject_cn": { "type": [ "string", "null" ] }, "issuer_cn": { "type": [ "string", "null" ] }, "valid_from": { "type": [ "string", "null" ], "description": "Node/OpenSSL certificate validity string as returned, e.g. Sep 1 00:00:00 2026 GMT; not ISO or guaranteed on invalid/unobserved certificates." }, "valid_to": { "type": [ "string", "null" ], "description": "Node/OpenSSL certificate validity string; not a normalized ISO timestamp." }, "fingerprint256": { "type": [ "string", "null" ] }, "error_code": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } } }, "DomainHeaders": { "type": "object", "additionalProperties": false, "required": [ "state", "present" ], "properties": { "state": { "type": "string", "enum": [ "PASS", "WARN", "UNKNOWN" ] }, "present": { "type": "object", "additionalProperties": false, "required": [], "properties": { "strict_transport_security": { "type": "boolean", "description": "Physical STS field presence only, even if empty, invalid or max-age0. Baseline PASS requires hsts.policy_active, not presence alone." }, "x_content_type_options_nosniff": { "type": "boolean" }, "content_security_policy": { "type": "boolean" }, "x_frame_options": { "type": "boolean" }, "referrer_policy": { "type": "boolean" } } }, "required_baseline": { "type": "array", "items": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } }, "missing": { "type": "array", "items": { "type": "string" }, "description": "Unmet baseline requirements, not necessarily physically absent fields: STRICT_TRANSPORT_SECURITY requires a valid active first-field policy; nosniff requirement is unchanged." }, "http_status": { "type": [ "integer", "null" ], "minimum": 100, "maximum": 599 }, "hsts": { "$ref": "#/components/schemas/DomainHsts" } }, "allOf": [ { "if": { "properties": { "state": { "enum": [ "PASS", "WARN" ] } }, "required": [ "state" ] }, "then": { "required": [ "hsts", "missing", "required_baseline" ] } }, { "if": { "properties": { "state": { "const": "PASS" } }, "required": [ "state" ] }, "then": { "properties": { "hsts": { "properties": { "state": { "const": "ACTIVE" } } }, "missing": { "maxItems": 0 }, "present": { "required": [ "strict_transport_security", "x_content_type_options_nosniff" ], "properties": { "strict_transport_security": { "const": true }, "x_content_type_options_nosniff": { "const": true } } } } } } ] }, "DomainProvenance": { "type": "object", "additionalProperties": false, "required": [ "source_id", "source_type", "fact_family", "observed_at", "rights" ], "properties": { "source_id": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "source_type": { "const": "SELF_OBSERVED_PUBLIC_PROTOCOL_FACT" }, "fact_family": { "type": "string", "enum": [ "DNS", "TLS", "HTTPS_HEADERS" ] }, "observed_at": { "type": "string", "format": "date-time" }, "rights": { "const": "GREEN_SELF_OBSERVED_PROTOCOL_FACTS" } } }, "VersionInventoryResponse": { "type": "object", "additionalProperties": false, "required": [ "schema_version", "product", "coverage", "versions", "commercial" ], "properties": { "schema_version": { "const": "2.0" }, "product": { "type": "object", "additionalProperties": false, "required": [ "input_key", "canonical_key" ], "properties": { "input_key": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "canonical_key": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." } } }, "coverage": { "type": "object", "additionalProperties": false, "required": [ "state", "cycle_count", "decision_guaranteed", "qualification" ], "properties": { "state": { "type": "string", "enum": [ "PUBLISHED_CLEARED_CYCLES", "NO_PUBLISHED_CYCLES" ] }, "cycle_count": { "type": "integer", "minimum": 0 }, "decision_guaranteed": { "const": false }, "qualification": { "const": "COVERAGE_IS_NOT_A_LIFECYCLE_RESULT" } } }, "versions": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": [ "cycle", "input_version_example", "version_policy" ], "properties": { "cycle": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "input_version_example": { "type": "string", "description": "Immutable consumer source binding. Qualified DATA FACTORY observations include a separate @observation identity, never a fabricated producer dataset version." }, "version_policy": { "type": "string", "enum": [ "MAJOR", "MAJOR_MINOR" ] } } } }, "commercial": { "type": "object", "additionalProperties": false, "required": [ "billable", "financial_effect", "allowance_debit" ], "properties": { "billable": { "const": false }, "financial_effect": { "const": false }, "allowance_debit": { "const": 0 } } } } }, "DomainObservationScope": { "type": "object", "additionalProperties": false, "required": [ "protocol", "method", "path", "port", "redirects_followed", "full_paths_checked", "global_trust_assessed" ], "properties": { "protocol": { "const": "HTTPS" }, "method": { "const": "HEAD" }, "path": { "const": "/" }, "port": { "const": 443 }, "redirects_followed": { "const": false }, "full_paths_checked": { "const": false }, "global_trust_assessed": { "const": false } }, "description": "Configured observation scope, not proof all stages completed: HTTPS HEAD on root /, port443, no redirect following or full-path scan; not a global trust/security assessment." }, "DomainHsts": { "type": "object", "additionalProperties": false, "required": [ "state", "header_present", "syntax_valid", "policy_active", "max_age_seconds", "include_subdomains", "field_count", "field_selection", "reason" ], "properties": { "state": { "enum": [ "ABSENT", "INVALID", "INACTIVE", "ACTIVE" ] }, "header_present": { "type": "boolean" }, "syntax_valid": { "type": [ "boolean", "null" ] }, "policy_active": { "type": "boolean" }, "max_age_seconds": { "type": [ "string", "null" ], "pattern": "^(0|[1-9][0-9]*)$", "description": "Exact normalized unsigned decimal seconds, as a string to avoid integer overflow. Zero removes the advertised host policy." }, "include_subdomains": { "type": [ "boolean", "null" ] }, "field_count": { "type": "integer", "minimum": 0 }, "field_selection": { "enum": [ "NONE", "FIRST_FIELD_RFC6797" ] }, "reason": { "type": [ "string", "null" ] } }, "description": "Only the first STS field in observed wire order is evaluated under RFC6797. Duplicate directive names (case-insensitive) invalidate that field. Valid unknown directives are ignored. No browser cache, parent/preload policy, effective subdomain protection or minimum recommended lifetime is assessed.", "oneOf": [ { "properties": { "state": { "const": "ABSENT" }, "header_present": { "const": false }, "syntax_valid": { "const": null }, "policy_active": { "const": false }, "max_age_seconds": { "const": null }, "include_subdomains": { "const": null }, "field_count": { "const": 0 }, "field_selection": { "const": "NONE" }, "reason": { "const": "HEADER_ABSENT" } } }, { "properties": { "state": { "const": "INVALID" }, "header_present": { "const": true }, "syntax_valid": { "const": false }, "policy_active": { "const": false }, "max_age_seconds": { "const": null }, "include_subdomains": { "const": null }, "field_count": { "minimum": 1 }, "field_selection": { "const": "FIRST_FIELD_RFC6797" }, "reason": { "enum": [ "INVALID_FIELD_SYNTAX", "DUPLICATE_DIRECTIVE", "MAX_AGE_MISSING", "MAX_AGE_INVALID", "INCLUDE_SUBDOMAINS_HAS_VALUE" ] } } }, { "properties": { "state": { "const": "INACTIVE" }, "header_present": { "const": true }, "syntax_valid": { "const": true }, "policy_active": { "const": false }, "max_age_seconds": { "const": "0" }, "include_subdomains": { "type": "boolean" }, "field_count": { "minimum": 1 }, "field_selection": { "const": "FIRST_FIELD_RFC6797" }, "reason": { "const": "MAX_AGE_ZERO" } } }, { "properties": { "state": { "const": "ACTIVE" }, "header_present": { "const": true }, "syntax_valid": { "const": true }, "policy_active": { "const": true }, "max_age_seconds": { "type": "string", "pattern": "^[1-9][0-9]*$" }, "include_subdomains": { "type": "boolean" }, "field_count": { "minimum": 1 }, "field_selection": { "const": "FIRST_FIELD_RFC6797" }, "reason": { "const": null } } } ] } } }, "x-x402": { "protocol": "x402", "version": 2, "scheme": "exact", "payment_environment": "MAINNET", "network": "eip155:8453", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "2500", "price_usd": "0.0025", "payTo": "0xd3fc4b472e1974036159d6b32b1d6bcf0f043f0f", "resource": "/v1/software-lifecycle/status", "meter": "resolved_lifecycle_result", "billable_states": [ "SUPPORTED", "MAINTENANCE", "SECURITY_ONLY", "EOL" ], "non_billable_states": [ "UNKNOWN", "NO_COVERAGE", "LOW_CONFIDENCE", "STALE", "SOURCE_CONFLICT", "VERSION_UNRESOLVED", "RIGHTS_UNRESOLVED" ], "payment_required_for_billable_results": true, "account_required": false, "tenant_required": false, "api_key_required": false } }