{"service":"desa","version":"1.0.0","publicSafeAccessEnabled":true,"staticOnlyAnalysis":true,"noExecutionPolicy":{"scriptsExecuted":false,"powershellInvoked":false,"decodedPayloadsExecuted":false,"embeddedPayloadUrlsFetched":false},"auth":{"requirement":"future-protected","enforced":false,"acceptedHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"environmentVariable":"PLATPHORM_API_KEY","publicSafeDefault":true},"sourceDataHandling":{"submittedScripts":"returned to caller only; not included in public feeds, sitemap, llms, or discovery output","localHistory":"browser-local metadata history where available; no PLATPHORM_API_KEY storage","backendPersistence":"metadata-oriented and future protected for private persistence"},"detectionRules":"public deterministic rules; mutation is future protected","modelScaffolding":"server-only, degraded until protected provider configuration exists","integrations":{"jsonAsciiXml":"public-safe calls with local degraded fallbacks where possible","trace":"trace context accepted and propagated in response metadata","reports":"Docs/Sheets/Decks report generation is scaffolded and degraded until protected configuration exists"},"trustedDomains":{"default":"*.platphormnews.com","rootGraph":"https://platphormnews.com/api/network/graph","baseSitemapIndex":"https://base.platphormnews.com/sitemap-index.xml","ssrf":"localhost, private IPs, link-local, metadata services, credentials, and redirects are blocked for public URL fetches"},"routeStandard":["/","/analyze","/iocs","/history","/rules","/integrations","/docs","/settings","/faq","/guidance","/roadmap","/contributors","/privacy","/license","/api/docs","/openapi.json","/openapi.yaml","/llms.txt","/llms-full.txt","/llms-index.json","/rss.xml","/feed.xml","/sitemap.xml","/sitemap-main.xml","/robots.txt","/manifest.webmanifest","/humans.txt","/.well-known/mcp.json","/.well-known/agents.json","/.well-known/ai-plugin.json","/.well-known/security.txt","/.well-known/trust.json"],"vercelMetadataPolicy":"captures safe Vercel request metadata; hashes IP-derived headers; never captures Authorization, X-PlatPhorm-API-Key, cookies, sessions, or raw bodies in public output","tracePropagationPolicy":"accepts traceparent/tracestate and emits X-PlatPhorm trace headers without script content or secrets","securityContact":"security@platphormnews.com","requiredTrustLine":"Public-safe static encoded-script analysis, PowerShell decoding, IOC extraction, detection-rule browsing, local non-sensitive analysis history, read-only MCP introspection, RSS/feed consumption, trusted-domain discovery, standard route compliance, Vercel metadata capture, backend model scaffolding, and trace-linked DESA operations are intentionally supported for public defensive use. DESA does not execute submitted scripts. PLATPHORM_API_KEY support is scaffolded for future protected backend services, private analysis persistence, bulk analysis, sync, test-triggering, reporting, administrative actions, and sensitive operations."}