{
  "contract": "dolihi-api-audit-v1",
  "reports": [
    {
      "agent": "dolihi-preflight",
      "version": "0.2.3",
      "checked_at": "2026-10-06T05:31:58.438323+00:00",
      "scope": "single-unpaid-https-diagnosis",
      "target_host": "vpic.nhtsa.dot.gov",
      "method": "GET",
      "purchase_cost_usd": 0,
      "payment_attempted": false,
      "capability_version": "openapi-response-v1",
      "limits": "One response; bounded JSON Pointer and schema-subset checks. No uptime, settlement, full JSON Schema, identity or semantic certification.",
      "http_status": 200,
      "response_bytes": 12223,
      "payment_verified": false,
      "semantic_correctness_verified": false,
      "response_fields_verified": true,
      "response_contract_verified": true,
      "response_sha256": "bb8fe0164402b1bb16e100a0a20067287b6ec848e20dcdcde71a8f37912d640b",
      "content_type": "application/json",
      "verdict": "CONTRACT_MATCH",
      "missing_fields": [],
      "next_step": "Declared paths and supported schema constraints match this response; business correctness remains unverified.",
      "path_checks": [
        {
          "path": "/Results",
          "expected_type": "array",
          "passed": true,
          "issue": null
        },
        {
          "path": "/Count",
          "expected_type": "integer",
          "passed": true,
          "issue": null
        }
      ],
      "http_contract_check": {
        "passed": true,
        "checks": [
          {
            "field": "http_status",
            "expected": 200,
            "observed": 200,
            "passed": true
          },
          {
            "field": "content_type",
            "expected": "application/json",
            "observed": "application/json",
            "passed": true
          }
        ]
      },
      "elapsed_ms": 9073
    }
  ],
  "summary": {
    "checks": 1,
    "verdicts": [
      "CONTRACT_MATCH"
    ]
  },
  "reproduction": [
    {
      "method": "GET",
      "url": "https://vpic.nhtsa.dot.gov/api/vehicles/DecodeVin/5YJ3E1EA7KF317000?format=json",
      "command": "curl --proto =https --max-redirs 0 --connect-timeout 8 --max-time 8 --max-filesize 262144 --include -- 'https://vpic.nhtsa.dot.gov/api/vehicles/DecodeVin/5YJ3E1EA7KF317000?format=json'",
      "warning": "Run only after checking the destination. The local command does not enforce Dolihi server public-IP pinning; never use it for an untrusted private destination."
    }
  ],
  "limits": "Single bounded response per target. Requested structural checks only; no business correctness, uptime or full JSON Schema guarantee.",
  "sample_context": {
    "kind": "Real single public endpoint attempt",
    "transport": "Workspace HTTPS proxy, certificate verification enabled, redirects disabled. This does not test production pinned-IP transport.",
    "customer_job": false,
    "revenue": false,
    "input": {
      "url": "https://vpic.nhtsa.dot.gov/api/vehicles/DecodeVin/5YJ3E1EA7KF317000?format=json",
      "expected_status": 200,
      "expected_content_type": "application/json",
      "expected_fields": [
        "Results",
        "Count"
      ],
      "expected_paths": {
        "/Results": "array",
        "/Count": "integer"
      }
    },
    "openapi_note": null
  }
}