{
  "api_contract": "sourcey.catalog-api/v1",
  "release_id": "sha256:d1cb219c8f6be3606007166b616e13fb46fee27507930122f428f1d5487097e1",
  "artifact_sha256": "sha256:87212334630b6cafa0454a71349079c604bd4373a0518fb676c7623bfd194016",
  "data": {
    "revision_contract": "sourcey.agent-readiness-revision/v1alpha1",
    "agent_readiness_profile_id": "arp_01m08rqxyvw1151ymp6kaxfgcc",
    "entity_id": "ent_01kyh8jtf535570d9z2bng6j1t",
    "scope": {
      "product": {
        "key": "cloudflare-public-dns",
        "name": "Cloudflare 1.1.1.1 Public DNS"
      },
      "funnel": {
        "key": "dns-over-https-query",
        "name": "DNS over HTTPS query"
      }
    },
    "catalog_binding": {
      "base_release_id": "sha256:cad9f851ab1bb553246eb2fb2b2803a4741814a33ccf28997014247439b9013d",
      "entity_revision_digest": "sha256:cddeb11506db30b6ffb13fcff407b1931f123a1eb2cc8edf5ca023ba03c71100"
    },
    "declaration_revision_digest": "sha256:65bf30248c0a730476c82afd8471be2e33d54397a1e8a63b0e34d235315bed5f",
    "declaration": {
      "declaration_id": "declaration_cloudflare_public_dns_over_https",
      "provenance": {
        "repository": "sourcey/agent-ready-services",
        "commit": "62b512f0c49352e55a399ba53866a5effa431d71",
        "path": "vendors/cl/cloudflare.yaml",
        "git_blob_oid": "4499cb0c38945f75501557dd38021a37d46c2f87",
        "blob_digest": "sha256:55def0b3b8a18e6566c98d0ba1f514659988fd9dad49d001a7125194470f8948"
      },
      "status": "community_declared"
    },
    "lifecycle": "active",
    "effective_from": "2026-08-20T05:45:00.000Z",
    "signals": [
      {
        "stage": "evaluate",
        "signal_code": "eligibility_decidability",
        "selector_group_id": "eligibility_decidability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:55:57.821Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "public-dns-overview"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:014f9f042a74e6d24c7dbe144137861f5c17b370b7b6ba8d79784f049c4d2026",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:109a0bbccec2bc7a379364697733d6dbbb8f3f8e2759aa30256b9edf3b3142b7",
              "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
              "sha256:732f5d65d11ece9f9d28b6d45c362b690dec582a9e1020cd2e5e4889f2fc46be",
              "sha256:f7099461e39814dc4f353ace71fb90a2c495f9fbbb4d89763f3530c34eddb5af"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "public-dns-overview"
            },
            "locators": [
              {
                "artifact_digest": "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
                "start_byte": 8294,
                "end_byte": 9109,
                "value_digest": "sha256:a97676fe5a1508d0238fe028050e322a20175829b1d6326cf2f88c3654bd3432"
              },
              {
                "artifact_digest": "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
                "start_byte": 9110,
                "end_byte": 9909,
                "value_digest": "sha256:8e7e7b3b908c2278eaacf81fc5c44983a7632fefbcfc58f568a08f414a534f7e"
              }
            ]
          }
        ],
        "note": "Cloudflare's public DNS resolver 1.1.1.1 is available on all plans and free, requiring no special software and taking minutes to set up."
      },
      {
        "stage": "evaluate",
        "signal_code": "pricing_decidability",
        "selector_group_id": "pricing_decidability-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:55:57.821Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "public-dns-overview"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:014f9f042a74e6d24c7dbe144137861f5c17b370b7b6ba8d79784f049c4d2026",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0a23244f05e7ec8f98b96ba6d9987e31e455c4a0898443ef899fad384d5f1e39",
              "sha256:109a0bbccec2bc7a379364697733d6dbbb8f3f8e2759aa30256b9edf3b3142b7",
              "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
              "sha256:732f5d65d11ece9f9d28b6d45c362b690dec582a9e1020cd2e5e4889f2fc46be"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "public-dns-overview"
            },
            "locators": [
              {
                "artifact_digest": "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
                "start_byte": 9110,
                "end_byte": 9909,
                "value_digest": "sha256:8e7e7b3b908c2278eaacf81fc5c44983a7632fefbcfc58f568a08f414a534f7e"
              }
            ]
          }
        ],
        "note": "Cloudflare explicitly declares that 1.1.1.1 is free."
      },
      {
        "stage": "evaluate",
        "signal_code": "service_discovery",
        "selector_group_id": "service_discovery-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "doh-reference"
          },
          {
            "node_kind": "resource",
            "node_id": "public-dns-overview"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4ee40bf93450098770ac2deb7c285d5571991c974301a646489ecd610c9263ae",
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "doh-reference"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 9300,
                "end_byte": 10096,
                "value_digest": "sha256:53c66d17b6c439f6d3cbc3bfa80e3416443535e382981f97fc3ead21a2443306"
              }
            ]
          }
        ],
        "note": "The exact DNS over HTTPS resolver endpoint for programmatic API requests is publicly discoverable at https://cloudflare-dns.com/dns-query and requires no authentication."
      },
      {
        "stage": "evaluate",
        "signal_code": "terms_access",
        "selector_group_id": "terms_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:56:17.521Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "public-dns-terms"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:d6cecb57cc9c83d8ad9c6fba671be9f07496adf8a979cd0a084e33549e6c85e3",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:1a85cae032b6df6c7bfffa3b9eee84542877989b41d46d86a820715e1457a60f",
              "sha256:2b9377eaffebbce4fc8a3a6fd599d5a4c1c14450a429613350045dc3bead2cae",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "public-dns-terms"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 3964,
                "end_byte": 4764,
                "value_digest": "sha256:94bff3842bcbd936614c23b62afdf18317fdfe7ff902d13ce8bcc56dc4193486"
              },
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "Cloudflare's Website and Online Services Terms of Use explicitly govern publicly available services including the 1.1.1.1 Public DNS Resolver service."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_control_operability",
        "selector_group_id": "access_control_operability-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:31.072Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-access-bootstrap"
          },
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-operation-authentication"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:5d901b47b65af34944acd1683223b77529a97f83924dc229b71cce51b993057e",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:21466df82082a51544519f41c9c76f1b8005becb76a0499fbb5144dcc8e2819c",
              "sha256:31c51c9ca5828bcd6b2e382ddd049153e38b500f42d960349083395a49266221",
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:5bb4c1541aff0547286ccbac6b870aa434a828481f885de843357507ff8cd5f1",
              "sha256:a67aeaa63b05338a3314855b01ecbb6a705645e347776a71ff0b9ab422319ff2",
              "sha256:bbdb3c9aa744964129f0274a0d2482d89dfc56adc9a5e4ae5ac9a31d8ed9f6c8"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-operation-authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:31c51c9ca5828bcd6b2e382ddd049153e38b500f42d960349083395a49266221",
                "start_byte": 10108,
                "end_byte": 10905,
                "value_digest": "sha256:f8878c44ced7526f3237b6d06e0c5e39368bda51882dd1c13bcfcca7cb2d8c55"
              }
            ]
          }
        ],
        "note": "Cloudflare 1.1.1.1 Public DNS is an Online Service publicly available without a subscription or account, requiring no authentication to send DoH requests."
      },
      {
        "stage": "sign_up",
        "signal_code": "access_entrypoint_stability",
        "selector_group_id": "access_entrypoint_stability-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:09.643Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-access-bootstrap"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:87e81c0640c92dc50a4f17b3d273a0ce01297036120e8114d23e8b80874bafa9",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:7efe682f409c95be9ac1a7d752e5807766d3afd61df13ff941570abe707597e1",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:aef8a8db2d84601e15fa958a913c5d8c44e20595ed46954240fafbae48c9cf7f",
              "sha256:d14c9d0a971026b0345207ba8d92ff7529b7668764146d79cf8b8a2d8c83cc8e",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0",
              "sha256:e1518371fced0b17554e22d7fb51a833b95e73f0cdbb1db92373457bf1d17680"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-access-bootstrap"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "Cloudflare Terms of Use explicitly defines Online Services like the 1.1.1.1 Public DNS Resolver service as publicly available without a subscription or a Cloudflare account."
      },
      {
        "stage": "sign_up",
        "signal_code": "captcha_compatible_access",
        "selector_group_id": "captcha_compatible_access-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:09.643Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-access-bootstrap"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:87e81c0640c92dc50a4f17b3d273a0ce01297036120e8114d23e8b80874bafa9",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:7efe682f409c95be9ac1a7d752e5807766d3afd61df13ff941570abe707597e1",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:aef8a8db2d84601e15fa958a913c5d8c44e20595ed46954240fafbae48c9cf7f",
              "sha256:d14c9d0a971026b0345207ba8d92ff7529b7668764146d79cf8b8a2d8c83cc8e",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0",
              "sha256:e1518371fced0b17554e22d7fb51a833b95e73f0cdbb1db92373457bf1d17680"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-access-bootstrap"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "The 1.1.1.1 Public DNS Resolver service is publicly available without requiring a Cloudflare account or registration flow where CAPTCHA would apply."
      },
      {
        "stage": "sign_up",
        "signal_code": "delegated_identity_access",
        "selector_group_id": "delegated_identity_access-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-operation-authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b838be85eb5fe2cd801a0017b4bd011eaa29adb148fe318941b434b6ff9dab24",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-operation-authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 10097,
                "end_byte": 10894,
                "value_digest": "sha256:25fdd276f87744f11a54ece7eb60035f5ba67910733dd05cf439f22435ea80f0"
              }
            ]
          }
        ],
        "note": "Documentation explicitly states that no authentication is required to send requests to the 1.1.1.1 DNS over HTTPS API."
      },
      {
        "stage": "sign_up",
        "signal_code": "phone_verification_compatible",
        "selector_group_id": "phone_verification_compatible-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:09.643Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-access-bootstrap"
          }
        ],
        "assessment_method": {
          "name": "bounded-headless-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f1212e8cd082308cfde3c097bc933c4a4b72046b1f242205c3e27a3b020b3311"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:87e81c0640c92dc50a4f17b3d273a0ce01297036120e8114d23e8b80874bafa9",
                "capture_rung": "headless"
              }
            ],
            "artifact_digests": [
              "sha256:7efe682f409c95be9ac1a7d752e5807766d3afd61df13ff941570abe707597e1",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:aef8a8db2d84601e15fa958a913c5d8c44e20595ed46954240fafbae48c9cf7f",
              "sha256:d14c9d0a971026b0345207ba8d92ff7529b7668764146d79cf8b8a2d8c83cc8e",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0",
              "sha256:e1518371fced0b17554e22d7fb51a833b95e73f0cdbb1db92373457bf1d17680"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-access-bootstrap"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "1.1.1.1 Public DNS is publicly available without a subscription or account, so phone verification does not apply to accessing the service."
      },
      {
        "stage": "pay",
        "signal_code": "checkout_operability",
        "selector_group_id": "checkout_operability-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:17.521Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-checkout-step"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:d6cecb57cc9c83d8ad9c6fba671be9f07496adf8a979cd0a084e33549e6c85e3",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:2b9377eaffebbce4fc8a3a6fd599d5a4c1c14450a429613350045dc3bead2cae",
              "sha256:7efe682f409c95be9ac1a7d752e5807766d3afd61df13ff941570abe707597e1",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-checkout-step"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "Cloudflare 1.1.1.1 Public DNS Resolver service is defined under the Terms of Use as an Online Service publicly available without a subscription or a Cloudflare account. Therefore, checkout step does not apply."
      },
      {
        "stage": "pay",
        "signal_code": "commitment_disclosure",
        "selector_group_id": "commitment_disclosure-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:55:57.821Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "public-dns-overview"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:014f9f042a74e6d24c7dbe144137861f5c17b370b7b6ba8d79784f049c4d2026",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:0a23244f05e7ec8f98b96ba6d9987e31e455c4a0898443ef899fad384d5f1e39",
              "sha256:109a0bbccec2bc7a379364697733d6dbbb8f3f8e2759aa30256b9edf3b3142b7",
              "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
              "sha256:732f5d65d11ece9f9d28b6d45c362b690dec582a9e1020cd2e5e4889f2fc46be"
            ],
            "source_surface": {
              "node_kind": "resource",
              "node_id": "public-dns-overview"
            },
            "locators": [
              {
                "artifact_digest": "sha256:34c623d9d676e73b828ecbe56320fbb80fc121024c9613853a3133a7620d4fb9",
                "start_byte": 9110,
                "end_byte": 9909,
                "value_digest": "sha256:8e7e7b3b908c2278eaacf81fc5c44983a7632fefbcfc58f568a08f414a534f7e"
              }
            ]
          }
        ],
        "note": "Cloudflare's official documentation explicitly discloses that 1.1.1.1 is free, takes minutes to set up, and does not require special software."
      },
      {
        "stage": "pay",
        "signal_code": "payment_authorization",
        "selector_group_id": "payment_authorization-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:17.521Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-checkout-step"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:d6cecb57cc9c83d8ad9c6fba671be9f07496adf8a979cd0a084e33549e6c85e3",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:2b9377eaffebbce4fc8a3a6fd599d5a4c1c14450a429613350045dc3bead2cae",
              "sha256:3c1f003217ba7da29cea6be24d99546dcfe14cc1cec6f38819d3d67e7e0296b0",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-checkout-step"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 10380,
                "end_byte": 11184,
                "value_digest": "sha256:bfe3af35084b3ca847d383c0c07798834ae1db37c52bd59fa215a746308dfcf7"
              }
            ]
          }
        ],
        "note": "Cloudflare 1.1.1.1 Public DNS Resolver service is provided without a subscription or account as a free Online Service, so payment authorization does not apply."
      },
      {
        "stage": "pay",
        "signal_code": "self_service_purchase",
        "selector_group_id": "self_service_purchase-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:17.521Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-checkout-step"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:d6cecb57cc9c83d8ad9c6fba671be9f07496adf8a979cd0a084e33549e6c85e3",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:2b9377eaffebbce4fc8a3a6fd599d5a4c1c14450a429613350045dc3bead2cae",
              "sha256:7efe682f409c95be9ac1a7d752e5807766d3afd61df13ff941570abe707597e1",
              "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
              "sha256:d740c266d6091292b036b60ec75b1f21c0157ca022a9697e5548c3bef0e687e0"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-checkout-step"
            },
            "locators": [
              {
                "artifact_digest": "sha256:86aa71aa4ebc810bf819188d5a3eb280b3c8e0f82029c4ba6310f3cac5dac0e3",
                "start_byte": 4765,
                "end_byte": 5580,
                "value_digest": "sha256:f9b13ad7e475b189f91389ede716f30da710d20705af95bac03e8f820f8a4402"
              }
            ]
          }
        ],
        "note": "Cloudflare 1.1.1.1 Public DNS Resolver service is an Online Service provided publicly without a subscription or account, so self-service paid access does not apply."
      },
      {
        "stage": "provision",
        "signal_code": "access_material_delivery",
        "selector_group_id": "access_material_delivery-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-operation-authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b838be85eb5fe2cd801a0017b4bd011eaa29adb148fe318941b434b6ff9dab24",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-operation-authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 10097,
                "end_byte": 10894,
                "value_digest": "sha256:25fdd276f87744f11a54ece7eb60035f5ba67910733dd05cf439f22435ea80f0"
              }
            ]
          }
        ],
        "note": "Cloudflare explicitly declares that no authentication is required to send requests to this API."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_completion",
        "selector_group_id": "provisioning_completion-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-provisioning-step"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b838be85eb5fe2cd801a0017b4bd011eaa29adb148fe318941b434b6ff9dab24",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-provisioning-step"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 10097,
                "end_byte": 10894,
                "value_digest": "sha256:25fdd276f87744f11a54ece7eb60035f5ba67910733dd05cf439f22435ea80f0"
              }
            ]
          }
        ],
        "note": "Cloudflare explicitly declares that no authentication is required to send requests to this API, meaning provisioning is not applicable."
      },
      {
        "stage": "provision",
        "signal_code": "provisioning_operability",
        "selector_group_id": "provisioning_operability-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:41.421Z",
        "tested_surfaces": [
          {
            "node_kind": "endpoint",
            "node_id": "doh-endpoint"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:6561adcd7c8f0f7381124365c1679803b4e7ae7d157ad86ceea0b8eb96d6327a",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
              "sha256:a2f590d0096a2a00c0fbe6f4adc100df8bfec536f195997646cf6db7970a5c74",
              "sha256:a365ddef1181b3864e6adf834466119fe5bc14fe5d3c550407e5ccbf8f4bffb0",
              "sha256:d316fe3695f0b5b422e906a5ea4e6a4e8a152cf2587ef87a74cba05b80ea7dd1"
            ],
            "source_surface": {
              "node_kind": "endpoint",
              "node_id": "doh-endpoint"
            },
            "locators": [
              {
                "artifact_digest": "sha256:a365ddef1181b3864e6adf834466119fe5bc14fe5d3c550407e5ccbf8f4bffb0",
                "start_byte": 0,
                "end_byte": 251,
                "value_digest": "sha256:e660a59c5b8345e9b43d2c995cfaa19f3d2c0874456cfde9a03406fd440ef453"
              }
            ]
          }
        ],
        "note": "Direct queries to the Cloudflare 1.1.1.1 DNS over HTTPS endpoint execute immediately without requiring any provisioning step."
      },
      {
        "stage": "operate",
        "signal_code": "credential_lifecycle",
        "selector_group_id": "credential_lifecycle-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-operation-authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b838be85eb5fe2cd801a0017b4bd011eaa29adb148fe318941b434b6ff9dab24",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-operation-authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 10097,
                "end_byte": 10894,
                "value_digest": "sha256:25fdd276f87744f11a54ece7eb60035f5ba67910733dd05cf439f22435ea80f0"
              }
            ]
          }
        ],
        "note": "The documentation explicitly states that no authentication is required to send requests to this API, establishing that credential lifecycle operations do not apply to this service."
      },
      {
        "stage": "operate",
        "signal_code": "failure_contract",
        "selector_group_id": "failure_contract-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.849Z",
        "tested_surfaces": [
          {
            "node_kind": "resource",
            "node_id": "doh-json-contract"
          },
          {
            "node_kind": "resource",
            "node_id": "extended-errors"
          },
          {
            "node_kind": "resource",
            "node_id": "upstream-resolution"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "direct_observation",
            "captures": [
              {
                "retained_capture_digest": "sha256:5ee3b304259561f9a74849300a0b6a4bcb92f55e69705d989b84d584fe9c133f",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:8e6c644f4fb282cbc1c86119e2cc6cf181a2f0e03970a6df58b45f166835449e",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:d7b093fcb35da23becb45bc32dd0195f017d205eb4c1befe2eb0012a8d25a075",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:03f6e0ca50209db3b002eb200d82f608eb34e1e1b196cbb6ebd5e57f94808be6",
              "sha256:089a423bf8efc8ce84ec819dc86238a4f49a8eb9b0bd2295b5011bec32c1a30e",
              "sha256:0bf816e13b86cac29e24dcd79f59fd376ca5a3117c3888bc9eb33afb7d6c6d3f",
              "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
              "sha256:24c809e2523e70982093083c1739ffa945d88a5802166dff6ddda0e4e096596a",
              "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
              "sha256:6158813b0004259ed7f20c7463cbf60f4e89e9f15b5bd930bfd7ef3589778b3e",
              "sha256:7db699380853401d7630ee6f1748b38e4f911dd6d1115d7186dcdff34d125747",
              "sha256:d796dc4fa95a4ec74df93d7f533e34c83ccce6db3118f25c0d787712e2c9bbc6",
              "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
              "sha256:f43ed47b543c11ac5c01d7ccc16a812f10aebddb521c7a882fddd238b1a19540",
              "sha256:fbe612c864a86517339f0691c335ddab586a2af2c52bbe29348254bdad57092d"
            ],
            "locators": [
              {
                "artifact_digest": "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
                "start_byte": 13672,
                "end_byte": 14468,
                "value_digest": "sha256:3dd91d8589db851d1803a721289a9cbe2b55c09757fc5a9839977e37f07828a8"
              },
              {
                "artifact_digest": "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
                "start_byte": 9800,
                "end_byte": 10599,
                "value_digest": "sha256:18e93aa3188a3ce63ffa1843d0f2c06fea8e5e8f7c24bbb2ac372d173cae7ef7"
              },
              {
                "artifact_digest": "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
                "start_byte": 10740,
                "end_byte": 11540,
                "value_digest": "sha256:68fc335892938701eec6af019676ff90fac8ff63e57eff9286a1289193b0b898"
              }
            ]
          }
        ],
        "note": "Applicable failure codes (such as HTTP status 400, 413, 415, 504 and Extended DNS Error codes), retry behavior against alternative nameservers for temporary errors/unresponsive servers, and request deduplication semantics are documented."
      },
      {
        "stage": "operate",
        "signal_code": "operation_authentication",
        "selector_group_id": "operation_authentication-primary",
        "value": "not_applicable",
        "observed_at": "2026-08-20T15:56:44.351Z",
        "tested_surfaces": [
          {
            "node_kind": "surface_exclusion",
            "node_id": "no-operation-authentication"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "explicit_first_party_declaration",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b838be85eb5fe2cd801a0017b4bd011eaa29adb148fe318941b434b6ff9dab24",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa"
            ],
            "source_surface": {
              "node_kind": "surface_exclusion",
              "node_id": "no-operation-authentication"
            },
            "locators": [
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 10097,
                "end_byte": 10894,
                "value_digest": "sha256:25fdd276f87744f11a54ece7eb60035f5ba67910733dd05cf439f22435ea80f0"
              }
            ]
          }
        ],
        "note": "The documentation explicitly states that no authentication is required to send requests to this API, establishing that operation authentication does not apply to this service."
      },
      {
        "stage": "operate",
        "signal_code": "operation_contract",
        "selector_group_id": "operation_contract-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.849Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "doh-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "direct_observation",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:5ee3b304259561f9a74849300a0b6a4bcb92f55e69705d989b84d584fe9c133f",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:8e6c644f4fb282cbc1c86119e2cc6cf181a2f0e03970a6df58b45f166835449e",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:d7b093fcb35da23becb45bc32dd0195f017d205eb4c1befe2eb0012a8d25a075",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:03f6e0ca50209db3b002eb200d82f608eb34e1e1b196cbb6ebd5e57f94808be6",
              "sha256:089a423bf8efc8ce84ec819dc86238a4f49a8eb9b0bd2295b5011bec32c1a30e",
              "sha256:0bf816e13b86cac29e24dcd79f59fd376ca5a3117c3888bc9eb33afb7d6c6d3f",
              "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
              "sha256:24c809e2523e70982093083c1739ffa945d88a5802166dff6ddda0e4e096596a",
              "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
              "sha256:4ee40bf93450098770ac2deb7c285d5571991c974301a646489ecd610c9263ae",
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:6158813b0004259ed7f20c7463cbf60f4e89e9f15b5bd930bfd7ef3589778b3e",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:b02a94cf28c6cc0cf8ee8f3a58aeabd1231cc40b8a72e92c35114c040f217da9",
              "sha256:c9d2097cb1e11504e9c2b706fdcd74f2d3c4055f97255262c9b6c19867a52437",
              "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
              "sha256:f43ed47b543c11ac5c01d7ccc16a812f10aebddb521c7a882fddd238b1a19540",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa",
              "sha256:fbe612c864a86517339f0691c335ddab586a2af2c52bbe29348254bdad57092d"
            ],
            "locators": [
              {
                "artifact_digest": "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
                "start_byte": 10529,
                "end_byte": 11323,
                "value_digest": "sha256:3ad7aa73fab81e6370f99557b7d198c490343284256767db74f38ed62214a3a5"
              },
              {
                "artifact_digest": "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
                "start_byte": 9800,
                "end_byte": 10599,
                "value_digest": "sha256:18e93aa3188a3ce63ffa1843d0f2c06fea8e5e8f7c24bbb2ac372d173cae7ef7"
              },
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 9300,
                "end_byte": 10096,
                "value_digest": "sha256:53c66d17b6c439f6d3cbc3bfa80e3416443535e382981f97fc3ead21a2443306"
              },
              {
                "artifact_digest": "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
                "start_byte": 11541,
                "end_byte": 12347,
                "value_digest": "sha256:d620c57769868569aa591bda0a4fa203461ea48c1ca5b7b754b447ee562dab4f"
              }
            ]
          }
        ],
        "note": "Essential operation inputs, outputs, schemas, HTTP methods, MIME types, and upstream response resolution effects are stably documented across all essential targets."
      },
      {
        "stage": "operate",
        "signal_code": "target_interface_access",
        "selector_group_id": "target_interface_access-primary",
        "value": "yes",
        "observed_at": "2026-08-20T15:57:04.849Z",
        "tested_surfaces": [
          {
            "node_kind": "interface",
            "node_id": "doh-api"
          }
        ],
        "assessment_method": {
          "name": "public-http-semantic-assessment",
          "version": "2026-08-20",
          "method_digest": "sha256:f7c4219d9b75928a6bcff8d125dc30bbc718673e579a66f00d832172e8c9d43d"
        },
        "determination_bases": [
          {
            "kind": "direct_observation",
            "captures": [
              {
                "retained_capture_digest": "sha256:0f3f03b6852ce5cf5f3197c0d49e60030caf36368e8284e7c558ec33075c8aa5",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:5ee3b304259561f9a74849300a0b6a4bcb92f55e69705d989b84d584fe9c133f",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:8e6c644f4fb282cbc1c86119e2cc6cf181a2f0e03970a6df58b45f166835449e",
                "capture_rung": "http"
              },
              {
                "retained_capture_digest": "sha256:d7b093fcb35da23becb45bc32dd0195f017d205eb4c1befe2eb0012a8d25a075",
                "capture_rung": "http"
              }
            ],
            "artifact_digests": [
              "sha256:089a423bf8efc8ce84ec819dc86238a4f49a8eb9b0bd2295b5011bec32c1a30e",
              "sha256:0bf816e13b86cac29e24dcd79f59fd376ca5a3117c3888bc9eb33afb7d6c6d3f",
              "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
              "sha256:24c809e2523e70982093083c1739ffa945d88a5802166dff6ddda0e4e096596a",
              "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
              "sha256:4ee40bf93450098770ac2deb7c285d5571991c974301a646489ecd610c9263ae",
              "sha256:56402c0e12997bbac9b4889239e01bf59c60e25ff3726b537a31aac237e683e3",
              "sha256:6158813b0004259ed7f20c7463cbf60f4e89e9f15b5bd930bfd7ef3589778b3e",
              "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
              "sha256:c3f34440bfa8246f2c93d3375591984a8fe71a1e71ee384fa34ec8966be85fd3",
              "sha256:c41927e793a923c9f703d83222761720ccfd3be045326ad81654d67974c267e0",
              "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
              "sha256:e6dcf9fe1d4f4243c26e9b39b33b6b6009b0a3a0c4b19465d729f263381d57cf",
              "sha256:f43ed47b543c11ac5c01d7ccc16a812f10aebddb521c7a882fddd238b1a19540",
              "sha256:f4a5981ff39dbbd738ca38c0c59a6f5be4c4f3e98c6f1271c96f959a328facaa",
              "sha256:fbe612c864a86517339f0691c335ddab586a2af2c52bbe29348254bdad57092d"
            ],
            "locators": [
              {
                "artifact_digest": "sha256:21a9e4d0bc8d7e20921e8a01692f0d95da8be923f2e59b8ef9375025e3b4f2a6",
                "start_byte": 9778,
                "end_byte": 10528,
                "value_digest": "sha256:cdd6f45ec997155a571170bc24d40217d65869c1ad553c154c3ab2c94170eb36"
              },
              {
                "artifact_digest": "sha256:2986052a1dca853f3426f20a547a058fd009e5817f7d2ff05b823374e9bc8cce",
                "start_byte": 11394,
                "end_byte": 12190,
                "value_digest": "sha256:cc76ec2a66104cde5c06ebac59730d7cec5457e86e48e6bfd23715c71c8f518e"
              },
              {
                "artifact_digest": "sha256:8bf4d7084c7adbfb2f440c7043af29a5ba7c4757060de2712fb018508e7404c3",
                "start_byte": 9300,
                "end_byte": 10096,
                "value_digest": "sha256:53c66d17b6c439f6d3cbc3bfa80e3416443535e382981f97fc3ead21a2443306"
              },
              {
                "artifact_digest": "sha256:e4ae39f67be78aa0c88c8f2ee915e62542b133fdfa7f12b51daac4b8f5fb715e",
                "start_byte": 8320,
                "end_byte": 9136,
                "value_digest": "sha256:56a78fc1ae483ff0eef369d760efcb83335a088bf2c64ccbd57859535aa3d05f"
              }
            ]
          }
        ],
        "note": "Every essential target is accessible through documented machine-usable HTTP interfaces (supporting GET/POST with JSON or DNS wireformat MIME types)."
      }
    ],
    "revision_digest": "sha256:9aee48b9f63de43781929ede8fdf938fceb211061e3c5a27d84d941bf3359370"
  }
}