{"ok":true,"data":{"service":"404.platphormnews.com","updatedAt":"2026-05-25T07:25:01.207Z","publicSafeAccess":true,"protectedActions":["redirect mutation","private dead-link reports","backfill and sync jobs","report generation","registry mutation","trusted-domain mutation","sensitive audit details"],"auth":{"publicSafeByDefault":true,"protectedActionKey":"PLATPHORM_API_KEY","enforcementFlag":"PLATPHORM_REQUIRE_API_KEY","enforcementEnabled":false,"acceptedHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"futureProtectedActions":["redirect mutation","private dead-link reports","backfill and sync jobs","report generation","registry mutation","trusted-domain mutation","sensitive audit details"]},"trustedDomains":["*.platphormnews.com","platphormnews.com"],"policies":{"publicRouteRecovery":"Public-safe route recovery is allowed for humans, crawlers, and agents.","deadLinkReports":"Reports are public-safe by default; no private report details are exposed in discovery files.","linkChecking":"Bounded to trusted PlatPhormNews domains with SSRF protection.","sitemapValidation":"Bounded validation; generated sitemaps do not include arbitrary missing paths.","localDraftPersistence":"Browser IndexedDB stores non-sensitive local report drafts only.","modelScaffolding":{"configured":false,"status":"degraded","provider":null,"clientModelCallsAllowed":false,"message":"No model provider is configured. Route recovery uses deterministic matching only.","safeguards":["no client-side provider keys","prompt/input redaction","output validation","trace-linked model spans","deterministic fallback"]},"vercelMetadata":"Safe Vercel metadata may be captured; raw IPs, cookies, and auth headers are never stored.","tracePropagation":"W3C traceparent and PlatPhorm headers are accepted and propagated for outbound calls."},"routeStandard":["/api/health","/api/v1/health","/api/docs","/openapi.yaml","/openapi.json","/llms.txt","/llms-full.txt","/llms-index.json","/robots.txt","/sitemap.xml","/sitemap-main.xml","/sitemap-index.xml","/rss.xml","/feed.xml","/manifest.webmanifest","/faq","/privacy","/terms","/.well-known/mcp.json","/.well-known/agents.json","/.well-known/ai-plugin.json","/.well-known/security.txt","/.well-known/trust.json","/api/mcp"],"trustLine":"Public-safe 404 recovery, route search, dead-link reporting, sitemap validation, redirect suggestions, local non-sensitive report draft persistence, read-only MCP introspection, RSS/feed consumption, trusted-domain discovery, standard route compliance, Vercel metadata capture, backend model scaffolding, and trace-linked 404 operations are intentionally supported for public use. PLATPHORM_API_KEY support is scaffolded for future protected backend services, redirect mutation, private reports, sync, test-triggering, reporting, administrative actions, and sensitive operations.","securityContact":"security@platphormnews.com"}}