{"ok":true,"protocol":"PFOS/1.0","name":"platform-foundation-os","pillars":[{"id":"mutator_safety","ok":true,"detail":"File mutators refused (DISABLE_SELF_MUTATION=1 or ENABLE_FILE_MUTATORS unset)."},{"id":"health_hygiene","ok":true,"detail":"Public /health and /api/health return a redacted subset; internals live behind admin-gated /api/health/full."},{"id":"commerce_validation","ok":true,"detail":"Sovereign createOrder sanitizes serviceId and validates email before allocating a BTC invoice."},{"id":"funnel_visibility","ok":true,"detail":"Checkout create/open/paid transitions emit funnel events and are counted at /api/commerce/funnel."},{"id":"timing_safe_deploy_webhook","ok":true,"detail":"POST /deploy compares the webhook secret in constant time and fails closed when no secret is set."},{"id":"runtime_stable","ok":true,"detail":"Runtime profile \"stable\" pauses autonomous background loops."}],"score":100,"grade":"A+","ts":"2026-07-25T19:01:14.513Z"}