machine-readable surface

API documentation for evidence in, evidence out.

Phase 1 exposes a free audit endpoint and a separate proof-gated interest flow for the proposed weekly layer.

POST /api/audit

free

Runs site HTTP/link checks, safe checkout GET reachability, and supplied SPF/DKIM/DMARC DNS checks. It never submits a purchase.

{
  "siteUrl": "https://your-company.example",
  "checkoutUrl": "https://your-company.example/checkout",
  "emailDomain": "your-company.example",
  "dkimSelector": "selector1"
}

Response contract

{
  "auditId": "audit_<id>",
  "requestedAt": "<ISO timestamp>",
  "checks": [{
    "id": "site | checkout | email",
    "status": "pass | fail | not_verified",
    "evidence": { "summary": "…", "details": [], "urls": [] },
    "testedAt": "<ISO timestamp>",
    "disclaimer": "Results reflect the moment of testing…"
  }],
  "disclaimer": "Results reflect the moment of testing…"
}

Statuses

pass means the bounded check passed. fail means observed evidence failed. not_verified means the input or runtime could not establish the claim.

Ownership flow

POST /api/ownership-verification creates a short-lived DNS TXT or meta-tag challenge, then verifies it. POST /api/weekly-audit-waitlist accepts interest only after verification.

Explicit exclusions

No content-integrity check 4, monitoring, billing, checkout activation, ads, cold-email sending, MCP, partnerships, or pay-per-call payments.

Operational limits

• Same-site links are sampled and bounded; results are not a complete crawl.
• An exact checkout URL is required. The API performs a safe GET and stops before purchase.
• Mobile rendering and hosted payment-step navigation are not_verified until an approved production browser runtime is installed.
• Every check includes evidence, timestamp, and a moment-in-time/no-guarantee disclaimer.
• Weekly pricing is proposed at $9/month. Enrollment records interest only; there is no monitoring or automatic email.