{
  "$schema": "https://services.datasourceapi.com/schema/conformance.schema.json",
  "schemaVersion": "1.0.0",
  "standardsVersion": "1.2.2",
  "generatedAt": "2026-09-08T20:30:36.110Z",
  "summary": {
    "repositories": 21,
    "clean": 3,
    "failing": 18,
    "unassessed": 0,
    "unavailable": 0
  },
  "repositories": [
    {
      "repository": "coopalliance/cca-aerospace",
      "serviceIds": [
        "aerospace"
      ],
      "status": "failing",
      "commit": "19712a77ca95c6d7502169768e3d351a4966cb2e",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:04.137Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: operation-operationId: Operation must have \"operationId\". at paths./api/v1/status.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/alerts.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/sources.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/sources.get.responses; operation-operationId: Operation must have \"operationId\". at paths./api/v1/search.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/airports.geojson.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/airport/search.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/airport/nearest.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/airport/{id}.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases",
            "wrangler.toml:env.dev.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-community",
      "serviceIds": [
        "community"
      ],
      "status": "failing",
      "commit": "e41a4230f84484971f684665ad95891585560fb6",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:02.107Z",
      "counts": {
        "pass": 1,
        "fail": 2,
        "manualReview": 3,
        "notApplicable": 1
      },
      "failingRules": [
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-OAS-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-cucm-services",
      "serviceIds": [
        "hts",
        "names",
        "sic",
        "naics",
        "geo",
        "phone-services"
      ],
      "status": "failing",
      "commit": "7b55972adc092ef1d6e3ee4abd0a684b25d17870",
      "branch": "main",
      "auditedAt": "2026-09-08T20:29:59.224Z",
      "counts": {
        "pass": 1,
        "fail": 1,
        "manualReview": 3,
        "notApplicable": 2
      },
      "failingRules": [
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-OAS-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-deviceinfo",
      "serviceIds": [
        "deviceinfo"
      ],
      "status": "failing",
      "commit": "bd6950b71463ad4cd59bc873baf3182b1eab4ec7",
      "branch": "main",
      "auditedAt": "2026-09-08T20:29:59.944Z",
      "counts": {
        "pass": 2,
        "fail": 2,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; no-http-server: Published API server URLs must use HTTPS. at servers.1.url; operation-description: Operation \"description\" must be present and non-empty string. at paths./.get; operation-operationId: Operation must have \"operationId\". at paths./.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./platforms.get; operation-operationId: Operation must have \"operationId\". at paths./platforms.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./platforms.get.responses (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.jsonc:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-entities",
      "serviceIds": [
        "entities"
      ],
      "status": "clean",
      "commit": "5e88d1fe1c71bd08c1f5d117723292a7574a099d",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:02.627Z",
      "counts": {
        "pass": 6,
        "fail": 0,
        "manualReview": 1,
        "notApplicable": 0
      },
      "failingRules": [],
      "manualReviewRules": [
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-exemptorgs",
      "serviceIds": [
        "exemptorgs"
      ],
      "status": "failing",
      "commit": "df625b42dfba198c1155de0850273a60bab73656",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:15.834Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; no-http-server: Published API server URLs must use HTTPS. at servers.0.url; operation-description: Operation \"description\" must be present and non-empty string. at paths./health.get; operation-operationId: Operation must have \"operationId\". at paths./health.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./health.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./status.get; operation-operationId: Operation must have \"operationId\". at paths./status.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./status.get.responses (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-faacharts",
      "serviceIds": [
        "faa-charts"
      ],
      "status": "failing",
      "commit": "dd1a0a2abc01352f9d71b13a596aaf51be54543c",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:03.609Z",
      "counts": {
        "pass": 0,
        "fail": 1,
        "manualReview": 1,
        "notApplicable": 5
      },
      "failingRules": [
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-geocode",
      "serviceIds": [
        "geocode"
      ],
      "status": "failing",
      "commit": "1c80b1b29f9c0ce29f8d2f45237bdf76a8794c35",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:05.971Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; operation-operationId: Operation must have \"operationId\". at paths./api/v1/geocode.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./api/v1/geocode.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/reverse.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./api/v1/reverse.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/search.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./api/v1/search.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/suggest.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./api/v1/suggest.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-party-screening",
      "serviceIds": [
        "party-screening"
      ],
      "status": "clean",
      "commit": "59632d861e34ec76a425377c779b941136ca0f60",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:06.118Z",
      "counts": {
        "pass": 4,
        "fail": 0,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-politicalfinance",
      "serviceIds": [
        "political-finance"
      ],
      "status": "failing",
      "commit": "12c4297eab5ba0dc0b71a635b17b5e99560dd61d",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:06.370Z",
      "counts": {
        "pass": 2,
        "fail": 2,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; operation-description: Operation \"description\" must be present and non-empty string. at paths./health.get; operation-operationId: Operation must have \"operationId\". at paths./health.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./health.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./health.get.responses; operation-operationId: Operation must have \"operationId\". at paths./status.get; operation-tags: Operation must have non-empty \"tags\" array. at paths./status.get; operation-description: Operation \"description\" must be present and non-empty string. at paths./sources.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.jsonc:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-postalfacilities",
      "serviceIds": [
        "postal-facilities"
      ],
      "status": "failing",
      "commit": "566516e80e04178d532210d9d8ba3501ddb458c6",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:08.067Z",
      "counts": {
        "pass": 0,
        "fail": 4,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/api/v1/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; no-http-server: Published API server URLs must use HTTPS. at servers.1.url; oas3-unused-component: Potentially unused component has been detected. at components.schemas.Facility; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/status.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/status.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/status.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/pobox.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/pobox.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-UI-003",
          "evidence": [
            "public/api/v1/docs.html: script src https://cdn.jsdelivr.net/npm/@scalar/api-reference loads executable code from cdn.jsdelivr.net; only .prodcdn.com subdomains are approved"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-radiodb",
      "serviceIds": [
        "radiodb"
      ],
      "status": "failing",
      "commit": "072f1d19c062a69791f0044a0040e1a29f2f4824",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:09.568Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: no-http-server: Published API server URLs must use HTTPS. at servers.1.url; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/countries.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/countries.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/countries/{coid}.get; oas3-valid-media-example: \"example\" property must match pattern \"^\\\\d+(,\\\\d+)*$\" at paths./api/v1/states.get.parameters.0.example; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/states/{stid}.get; oas3-valid-media-example: \"example\" property must match pattern \"^\\\\d+(,\\\\d+)*$\" at paths./api/v1/counties.get.parameters.0.example; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/metros.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-religiousorgs",
      "serviceIds": [
        "religiousorgs"
      ],
      "status": "failing",
      "commit": "bba1c11f039aa6a69578838bf7e738ca034ffb37",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:08.693Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; no-http-server: Published API server URLs must use HTTPS. at servers.0.url; operation-description: Operation \"description\" must be present and non-empty string. at paths./health.get; operation-operationId: Operation must have \"operationId\". at paths./health.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./health.get.responses; operation-operationId: Operation must have \"operationId\". at paths./status.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./status.get.responses; operation-operationId: Operation must have \"operationId\". at paths./sources.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-schools",
      "serviceIds": [
        "schools"
      ],
      "status": "failing",
      "commit": "2747a1aadcbe4a2487a847f3900a300fec9093a4",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:10.899Z",
      "counts": {
        "pass": 3,
        "fail": 1,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: oas3-schema: \"400\" property must not have unevaluated properties. at paths./domain/{domain}.get.responses.400"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-weather",
      "serviceIds": [
        "weather"
      ],
      "status": "failing",
      "commit": "0415ffc99243f665b7ea2f5a1db8dd4a5dc5d309",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:11.369Z",
      "counts": {
        "pass": 0,
        "fail": 4,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-contact: Info object must have \"contact\" object. at info; info-license: Info object must have \"license\" object. at info; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/status.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/status.get; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/layers.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/layers.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/layers.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/frames/{layer}/{product}.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/frames/{layer}/{product}.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-UI-003",
          "evidence": [
            "src/index.js: script src https://cdn.jsdelivr.net/npm/@scalar/api-reference loads executable code from cdn.jsdelivr.net; only .prodcdn.com subdomains are approved",
            "src/index.js: script src https://cdn.jsdelivr.net/npm/@scalar/api-reference loads executable code from cdn.jsdelivr.net; only .prodcdn.com subdomains are approved"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/cca-wildfire",
      "serviceIds": [
        "wildfire"
      ],
      "status": "failing",
      "commit": "6404845171cc6e22f47dc4aa59ebd9429db4176b",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:11.747Z",
      "counts": {
        "pass": 1,
        "fail": 1,
        "manualReview": 3,
        "notApplicable": 2
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "openapi.json: info-license: Info object must have \"license\" object. at info; operation-operationId: Operation must have \"operationId\". at paths./api/v1/stats.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/stats.get.responses; operation-operationId: Operation must have \"operationId\". at paths./api/v1/stats/by-cause.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/stats/by-cause.get.responses; operation-operationId: Operation must have \"operationId\". at paths./api/v1/stats/by-state.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./api/v1/stats/by-state.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./api/v1/fires/active.get; operation-operationId: Operation must have \"operationId\". at paths./api/v1/fires/active.get (further findings were truncated; re-run the audit for the full report)"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/domain-security-information",
      "serviceIds": [
        "domain-security"
      ],
      "status": "failing",
      "commit": "1e249023084fed8f91a4b1c4d22fbeb0d40c90f1",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:13.895Z",
      "counts": {
        "pass": 0,
        "fail": 4,
        "manualReview": 2,
        "notApplicable": 1
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "openapi.yaml: oas3-valid-media-example: \"mtaStsStatus\" property must have required property \"status\" at paths./{domain}.get.responses.200.content.application/json.examples.full.value.data.mtaStsStatus"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc"
          ]
        },
        {
          "ruleId": "CCA-UI-003",
          "evidence": [
            "src/admin-html.js: script src https://cdn.jsdelivr.net/npm/chart.js@4.4.7/dist/chart.umd.min.js loads executable code from cdn.jsdelivr.net; only .prodcdn.com subdomains are approved"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/phonenumber-query",
      "serviceIds": [
        "phone"
      ],
      "status": "failing",
      "commit": "f58a3dc1c725c1cd84748b867a60ee4e433454a4",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:13.426Z",
      "counts": {
        "pass": 1,
        "fail": 3,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "openapi.yaml: oas3-schema: \"examples\" property must be array. at paths./api/v1/{phoneNumber}.get.parameters.0.schema.examples; typed-enum: Enum value null must be \"string\". at components.schemas.CarrierInfo.properties.type.enum.4; typed-enum: Enum value null must be \"string\". at components.schemas.Portability.properties.line_type.enum.5; typed-enum: Enum value null must be \"string\". at components.schemas.Portability.properties.ported_status.enum.2"
          ]
        },
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/violencedb",
      "serviceIds": [
        "violence"
      ],
      "status": "failing",
      "commit": "e3384e32fb990a9f31826c8694a4fa2864e7e294",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:15.725Z",
      "counts": {
        "pass": 2,
        "fail": 2,
        "manualReview": 3,
        "notApplicable": 0
      },
      "failingRules": [
        {
          "ruleId": "CCA-OAS-001",
          "evidence": [
            "public/openapi.yaml: info-license: Info object must have \"license\" object. at info; oas3-schema: \"0\" property must not have unevaluated properties. at tags.0; oas3-schema: \"4\" property must not have unevaluated properties. at tags.4; operation-description: Operation \"description\" must be present and non-empty string. at paths./health.get; operation-operationId: Operation must have \"operationId\". at paths./health.get; operation-operationId: Operation must have \"operationId\". at paths./status.get; operation-error-response: Every operation must document at least one 4xx, 5xx, or default response. at paths./status.get.responses; operation-description: Operation \"description\" must be present and non-empty string. at paths./limitations.get; operation-operationId: Operation must have \"operationId\". at paths./limitations.get (further findings were truncated; re-run the audit for the full report)"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "apps/audit/wrangler.jsonc:root.d1_databases",
            "apps/pii/wrangler.jsonc:root.d1_databases",
            "wrangler.jsonc:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-DISC-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/whois-query",
      "serviceIds": [
        "whois"
      ],
      "status": "failing",
      "commit": "30eb4a77d76c056597388edd7eb15104bdd61928",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:36.011Z",
      "counts": {
        "pass": 1,
        "fail": 2,
        "manualReview": 3,
        "notApplicable": 1
      },
      "failingRules": [
        {
          "ruleId": "CCA-WORKER-001",
          "evidence": [
            "wrangler.toml: legacy wrangler.toml must migrate to wrangler.jsonc",
            "wrangler.toml: observability.enabled is not true"
          ]
        },
        {
          "ruleId": "CCA-D1-002",
          "evidence": [
            "wrangler.toml:root.d1_databases"
          ]
        }
      ],
      "manualReviewRules": [
        "CCA-OAS-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    },
    {
      "repository": "coopalliance/zipmap",
      "serviceIds": [
        "maps",
        "zip-map"
      ],
      "status": "clean",
      "commit": "44b8b5a807d9df2753f0e764819ddd15813b2fde",
      "branch": "main",
      "auditedAt": "2026-09-08T20:30:22.020Z",
      "counts": {
        "pass": 2,
        "fail": 0,
        "manualReview": 3,
        "notApplicable": 2
      },
      "failingRules": [],
      "manualReviewRules": [
        "CCA-OAS-001",
        "CCA-UI-001",
        "CCA-MANIFEST-001"
      ]
    }
  ],
  "notice": "Point-in-time snapshot. Each result is evidence about the recorded commit on the published default branch, not a live status. A repository may have changed since generatedAt; re-run the audit to confirm before acting on a result.",
  "standards": "https://services.datasourceapi.com/api/v1/standards"
}