{
  "schema": "domain-signals-public-sample-v1",
  "provenance": {
    "type": "synthetic_reserved_domain",
    "domain": "example.org",
    "reportId": "DS-SAMPLE-20260824-EXAMPLE",
    "capturedAt": "2026-08-24T09:30:00Z",
    "boundary": "Synthetic product walkthrough only. Not a customer result, certification, testimonial or claim about example.org."
  },
  "summary": {
    "overallGrade": "B",
    "score": 82.4,
    "evidenceConfidence": 92,
    "materialCoverage": 88,
    "openActions": 4
  },
  "observations": [
    {
      "capability": "email.dmarc.policy",
      "state": "observed",
      "value": "p=none",
      "interpretation": "Monitoring policy; validate senders before controlled enforcement.",
      "owner": "Messaging administrator"
    },
    {
      "capability": "tls.protocol",
      "state": "observed",
      "value": "TLS 1.3",
      "interpretation": "Modern transport protocol observed for the synthetic service.",
      "owner": "Web platform owner"
    },
    {
      "capability": "http.content_security_policy",
      "state": "observed",
      "value": "present",
      "interpretation": "Policy header present; directive quality remains separately assessable.",
      "owner": "Web platform owner"
    },
    {
      "capability": "service.version_association",
      "state": "candidate",
      "value": "unconfirmed",
      "interpretation": "Candidate association requires installed-state and applicability validation.",
      "owner": "Technical validator"
    },
    {
      "capability": "network.shared_provider",
      "state": "dependency",
      "value": "separated",
      "interpretation": "Provider edge context is not attributed as a customer-owned server.",
      "owner": "Assessment reviewer"
    }
  ]
}