Bounded evidence · deterministic JSON · Base USDC

Website Release Evidence Dossier

One public HTTPS release URL. One served-HTML observation. Twenty-two transparent checks across transport, response headers, SEO metadata, and accessibility surface patterns—each with evidence and a concrete fix.

5.00 USDC · one report · no account

Buy the audit for 5 USDCRun the $0.05 preflight

Agents can buy direct via x402. See the OpenAPI contract or x402 resource manifest.

22fixed checks with a 100-point score and section breakdown.
512 KiBhard response cap, three redirects, and a 12-second total deadline.
0JavaScript execution, form submissions, logins, subresource calls, or exploit tests.
SHA-256body evidence, report digest, timestamp, TLS facts, and a stable dossier ID.

Paid request

POST https://agent402.dev/site-release-audit Content-Type: application/json {"url":"https://example.com/"}

What the report checks

Authenticated HTTPS and final status; HSTS, CSP, nosniff, frame, referrer, and permissions policies; title, description, canonical, robots, language, H1, Open Graph, and JSON-LD; image alt attributes, form labels, heading order, main landmark, and skip link.

This is release evidence, not a full SEO, WCAG, penetration, compliance, or legal audit. It reads served HTML only and does not render JavaScript. Header snippets are starting points that must be tested before deployment.

Redirects may cross origins only after the same public-DNS, TLS, and pinned-IP validation is repeated. The dossier ID is stable for the same requested URL, final URL, response body, and allowlisted headers.

Public methodology and examples