{
  "release": "IARPG-OPS-2",
  "version": "2.0.8-wip",
  "generated_utc": "2026-07-21T03:00:31Z",
  "target": "isolated-apache-staging",
  "safe_output": true,
  "secrets_recorded": false,
  "summary": {
    "pass": 19,
    "fail": 0,
    "total": 19
  },
  "sitemap": {
    "routes": 334,
    "http_200": 334,
    "html_routes": 334,
    "metadata_pass": 334
  },
  "checks": [
    {
      "check_id": "HOST-HTTP-001",
      "title": "Public home response",
      "status": "pass",
      "detail": "HTTP 200."
    },
    {
      "check_id": "HOST-HTTP-002",
      "title": "Public response is session-free",
      "status": "pass",
      "detail": "Observed 0 Set-Cookie fields."
    },
    {
      "check_id": "HOST-HTTP-003",
      "title": "Public response is briefly cacheable",
      "status": "pass",
      "detail": "Cache policy: public, max-age=300, stale-while-revalidate=60."
    },
    {
      "check_id": "HOST-HTTP-009",
      "title": "Public response has no legacy session-cache headers",
      "status": "pass",
      "detail": "Pragma present=False; legacy Expires present=False."
    },
    {
      "check_id": "HOST-HTTP-004",
      "title": "Shared security headers are singular",
      "status": "pass",
      "detail": "Each shared field appears exactly once."
    },
    {
      "check_id": "HOST-HTTP-005",
      "title": "Nonce-bearing CSP is present",
      "status": "pass",
      "detail": "CSP contains nonce and frame restriction."
    },
    {
      "check_id": "HOST-HTTP-006",
      "title": "Content language is declared",
      "status": "pass",
      "detail": "Content-Language: en."
    },
    {
      "check_id": "HOST-HTTP-007",
      "title": "Play gateway starts an intentional session",
      "status": "pass",
      "detail": "HTTP 200; Set-Cookie fields: 1."
    },
    {
      "check_id": "HOST-HTTP-008",
      "title": "Play gateway is private and no-store",
      "status": "pass",
      "detail": "Cache policy: private, no-store, max-age=0."
    },
    {
      "check_id": "HOST-HTTP-010",
      "title": "Session cookie uses the neutral name and safety attributes",
      "status": "pass",
      "detail": "name_ok=True; httponly=True; samesite_lax=True; path_root=True; secure_required=False."
    },
    {
      "check_id": "HOST-ROUTE-001",
      "title": "Canonical redirects",
      "status": "pass",
      "detail": "/index.php=301:/; /faq.php=301:/faq; /standard.php?slug=mission-lifecycle=301:/standard/mission-lifecycle; /mission.php?slug=hollow-signal=301:/mission/hollow-signal; /role.php?slug=case-officer=301:/role/case-officer; /docs/view.php?doc=staging-host-and-runtime-validation-report=301:/docs/report/staging-host-and-runtime-validation-report; /faq/=301:/faq"
    },
    {
      "check_id": "HOST-ERROR-001",
      "title": "Unknown route returns noindex 404",
      "status": "pass",
      "detail": "HTTP 404; X-Robots-Tag: noindex, follow, noarchive."
    },
    {
      "check_id": "HOST-ERROR-002",
      "title": "Operator diagnostic is disabled by default",
      "status": "pass",
      "detail": "HTTP 404; noindex=True; no-store=True."
    },
    {
      "check_id": "HOST-PRIVATE-001",
      "title": "Internal paths are denied",
      "status": "pass",
      "detail": "Statuses: [403, 403, 403]."
    },
    {
      "check_id": "HOST-RAW-001",
      "title": "Raw companions are fetchable and noindex",
      "status": "pass",
      "detail": "/answers.json:200:noindex=True; /docs/long-term-memory/reports/staging-host-and-runtime-validation-report.md:200:noindex=True; /docs/uai/index.uai:200:noindex=True; /docs/checksums.sha256:200:noindex=True"
    },
    {
      "check_id": "HOST-ASSET-001",
      "title": "Versioned static asset is immutable",
      "status": "pass",
      "detail": "HTTP 200; cache=public, max-age=31536000, immutable."
    },
    {
      "check_id": "HOST-COMPRESS-001",
      "title": "HTML and CSS compression",
      "status": "pass",
      "detail": "Encodings: ['gzip', 'gzip']."
    },
    {
      "check_id": "HOST-DISCOVERY-001",
      "title": "Discovery artifacts",
      "status": "pass",
      "detail": "/sitemap.xml:200:application/xml; /feed.xml:200:application/xml; /opensearch.xml:200:application/xml; /answers.json:200:application/json; /robots.txt:200:text/plain; /llms.txt:200:text/plain"
    },
    {
      "check_id": "HOST-CRAWL-001",
      "title": "Complete sitemap crawl",
      "status": "pass",
      "detail": "334/334 HTTP 200; 334/334 HTML metadata records passed."
    }
  ]
}