{"kind":"crawlcheck-resolve","v":1,"schema":"https://crawlcheck.io/schemas/resolve.json","domain":"rockset.com","reading":"Each section is declared (what the site says about itself), observed (what CrawlCheck was served) or not_measured, with when it was observed. There is no overall score: decide on the section your action depends on.","impersonation":{"state":"no_lookalike","verdict":"no_lookalike","brand_frame":"Tranco top 10,000 (Y83YG)"},"status":"partial","basis":{"kind":"just_in_time","measured_at":"2026-10-19T01:33:05.805Z","budget_ms":1000,"took_ms":222,"not_read_in_budget":[],"scope":"read live the moment this domain was first asked about: DNS, the TLS connection, the homepage as a browser and 2 AI identities, robots.txt, the sitemap and 6 machine files, all inside one 1000 ms budget. Anything listed in not_read_in_budget was not read and is not reported absent. No findings, no grade, no capability invoked."},"subject":{"domain":"rockset.com","host":"openai.com"},"freshness":{"observed_at":"2026-10-19T01:33:05.805Z","age_hours":0,"source":"just_in_time","last_verified_at":"2026-10-19T01:33:05.805Z","fresh_until":"2026-10-26T01:33:05.805Z","stale":false,"fresh_policy":"an answer is fresh for 168 hours after observed_at; each action below has its own maximum age. last_verified_at is the latest reading of this domain by any enrolled observer."},"observers":{"primary":{"version_tag":null,"vantage":null},"independent_readings":0,"by_field":"https://crawlcheck.io/api/corroboration?domain=rockset.com","directory":"https://crawlcheck.io/.well-known/crawlcheck-observers.json","samples_by_network":{"networks":0,"samples":0,"groups":[],"window":"the latest 12 independent readings kept for this domain; the primary scan (Cloudflare) is not counted here"}},"crawl_policy":{"state":"not_measured","observed_at":"2026-10-19T01:33:05.805Z","why":"robots.txt answered 403 with HTML, so no policy was read"},"delivery":{"state":"observed","observed_at":"2026-10-19T01:33:05.805Z","url":"https://rockset.com/","identity_basis":"every identity was sent by CrawlCheck from its own network; none is the named operator's own crawler","identities":[{"identity":"browser","label":"Mobile browser","status":403,"bytes":10100,"html":true,"final_host":"openai.com","sha256":"b11359cbd42db217d26f1e8d863029d809cc20c141074d81ecda84bdc7bb2c08"},{"identity":"gptbot","label":"GPTBot","status":403,"bytes":10078,"html":true,"final_host":"openai.com","sha256":"0094a096a2174a6fbc19eabd1064e5c5e4c0f3859ef319756fcbcbbf6ae10229"},{"identity":"claudebot","label":"ClaudeBot","status":200,"bytes":339591,"html":true,"final_host":"openai.com","sha256":"5772686526b4982fd4b6bdc4b78d4c0a7c62d38ac2b5342d98c41030a49055fb"}],"same_bytes_for_every_identity":false},"machine_files":{"state":"observed","observed_at":"2026-10-19T01:33:05.805Z","files":[{"path":"/robots.txt","status":403,"content_type":"text/html","bytes":10356,"present":false,"sha256":"14504cfc78fb025ca6a96fcc62fb84d5909c259f5f3a06b0d879d44583b55548"},{"path":"/sitemap.xml","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"40c0efc77e9e3dce287cf4ab7d65793241f0caf832b2dd8ed1ea4da515bd6e8c"},{"path":"/llms.txt","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"d3b9145f8147f0a17f3875f946a33f4ade7b9c64608a6eb202330c455d488123"},{"path":"/agents.md","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"3ed4d95f80838d397b5708199e476719e7fe0cbc08f5e7137780784d7de6f8d2"},{"path":"/.well-known/agent-skills/index.json","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"1052632a372cad9f1090c9dcc5ceb482f35014a072c453a1a5f36a55636225b2"},{"path":"/.well-known/mcp/server-card.json","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"f3c2f8c7c7aca61e730ebc741bee97d5d98b0af595f1e809b5e7cc1f92b76d58"},{"path":"/.well-known/api-catalog","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"105ed5d150507fb35d3b0c2f54a76335b7ec0fc0d172726cb91fff4d7a34cfde"},{"path":"/.well-known/agent-card.json","status":403,"content_type":"text/html","bytes":10378,"present":false,"sha256":"77f0f431015cf69fd6e077a7c526522906094506f1c6d71cda131acaed65e530"}],"hashes":"sha256 is of the body each path served, as the census record holds it"},"capabilities":{"state":"observed","observed_at":"2026-10-19T01:33:05.805Z","declared":0,"by_safety_class":{},"verified":0,"mismatches":0,"invocation_rule":"capabilities are read from declarations only; nothing is invoked. Later verification may call read_only_public operations alone; every other class needs the site owner's authorisation and a test account, and unknown is never called","certificate":null,"items":null,"declared_files":[],"note":"the census records whether a capability file is present; nothing was invoked or verified. A full scan verifies declared capabilities."},"entity":{"state":"not_measured","observed_at":"2026-10-19T01:33:05.805Z","why":"the census carries no entity reading"},"findings":{"access":"public","rule":null,"items":[],"summary":null,"withheld":null,"note":"a census record carries readings, not findings"},"confidence":{"identities_answered":3,"vantages":1,"note":"one vantage, one pass, read under a time budget"},"contradictions":null,"evidence":{"scan":"POST https://crawlcheck.io/api/scan {\"domain\":\"rockset.com\"}","offline_verifier":"https://crawlcheck.io/crawlcheck-verify.mjs?v=234adad16c4886f8","verify_this_answer":"save it as answer.json, then: node crawlcheck-verify.mjs answer.json"},"assurance":"partial","dns":{"state":"observed","observed_at":"2026-10-19T01:33:05.805Z","resolver":"Cloudflare DNS over HTTPS (1.1.1.1)","exists":true,"a":["172.67.211.52","104.21.61.145"],"aaaa":["2606:4700:3031::6815:3d91","2606:4700:3034::ac43:d334"],"cname":[],"rcode":"NOERROR","dnssec_validated":false,"note":"dnssec_validated is the resolver's AD flag: the answer was DNSSEC-signed and the signature chain checked"},"tls":{"state":"observed","observed_at":"2026-10-19T01:33:05.805Z","https":true,"url":"https://rockset.com/","final_host":"openai.com","http_status":403,"hsts":"max-age=31536000; includeSubDomains; preload","certificate":"accepted: the TLS handshake to openai.com completed and the certificate chain was trusted (an untrusted or expired certificate fails the fetch)","note":"the connection the homepage fetch made; the certificate itself is not published here"},"upgrade":{"state":"queued","to":"full","expected":"at the next cron window (:02, :17, :32 or :47 UTC), usually within 30 minutes","how":"a full scan is queued; when it lands this answer is replaced and the change appears on https://crawlcheck.io/api/v1/changes?domain=rockset.com as section assurance, partial → full","scan_now":"POST https://crawlcheck.io/api/scan {\"domain\":\"rockset.com\"}"},"answered_at":"2026-10-19T02:26:15.799Z","served_from":"kept just-in-time reading (6 h)","actions":{"v":1,"decisions":"allow | warn | require_confirmation | block | unsupported","rule":"decided from this answer's own sections at signing time; an agent's own policy may be stricter, never looser. This is a partial (just-in-time) answer: only what it read live counts, so cite, connect and transact cannot reach their assurance until the full scan lands","read":{"decision":"warn","minimum_assurance":"reachable","assurance_found":[],"needs":"robots.txt lets AI agents read the path, and the page was served to at least one AI-crawler identity","why":"no robots.txt policy was read, so permission is unknown","doubts":["no_policy"],"max_age_hours":168},"cite":{"decision":"warn","minimum_assurance":"reachable + entity observed","assurance_found":[],"needs":"everything read needs, plus an observed entity and no contradiction the site makes with itself","scope":{"covers":["access: robots.txt and what was actually served to AI-crawler identities","permissions: the rights and content signals the site declares","identity: the entity the site declares and who has proven control of the domain","provenance: when, from where and by whom it was observed, signed and logged"],"does_not_cover":"whether the content is true, accurate, current or complete; a cite decision says the source may be cited and attributed, not that what it says is right"},"why":"no robots.txt policy was read, so permission is unknown; the publisher's identity was not observed, so attribution is unconfirmed","doubts":["no_policy","entity_unobserved","read_equivalence_unmeasured"],"max_age_hours":168},"connect":{"decision":"unsupported","minimum_assurance":"conformant","assurance_found":[],"needs":"a declared capability that CrawlCheck invoked read-only and found to behave as declared","why":"the site declares no capability to connect to","doubts":[],"max_age_hours":72},"transact":{"decision":"require_confirmation","minimum_assurance":"action_ready","assurance_found":[],"needs":"owner-verified identity and an action-ready capability; CrawlCheck does not certify transactions, so a human confirms","why":"CrawlCheck does not certify transactions; a human confirms every financial, identity or irreversible action","doubts":[],"max_age_hours":24},"administer":{"decision":"block","minimum_assurance":"never automatic","assurance_found":[],"needs":"high-privilege operations are never authorised by a public record","why":"never authorised by a public record","doubts":[],"max_age_hours":0}},"absences":[],"transparency":{"state":"included","log_id":"crawlcheck-resolve-log-v1","leaf_hash":"67f2a89b992d15f5517992faa654918077f71cc53cf19b3c0b617df7f5533fb4","batch":753,"index":64,"batch_size":282,"path":["7057ea68b7fe7c54247c777be53d4dea1a8acb5495169e0fb589ba057d4d511d","133e14f99bfd226c8789b926a794d82367e450cc6c2f241f8872d16369cbfcfd","8872567dd59b3d7508b22beb35bbd93e85ea7c17e64c210f4018609392e682aa","2c6311709a68087010fc08fc038f1f6fbe2bdc73c17454059a4b6e740d05c16c","f38862ecc6cc27f1b281672b47437de9788d349d31e3fc5a9258c733bcffb03a","c1ec179cebc4eb768dc0d44e62039da977448f7a8c910048065d103756d59563","491036b0cf58ad0a0c9f0f1d7deddfa86c38cc5c761686c2322692a75299efce","59c3f2069a695e621b69e51856d03fcce733f69bc4f11eac1643f3cc82500cd6","f5255889421a7eb2c317838233deb992b3a8c4cb9c1ee1fa056f6b37fe7918e6"],"sth":{"kind":"crawlcheck-log-sth","v":1,"log_id":"crawlcheck-resolve-log-v1","batch":753,"first_index":164444,"batch_size":282,"tree_size":164726,"batch_root":"f6fb505406eff7dcae3fd3c8ff0fcdfcf4a854919c0e75e0f00465cf9e42086d","prev_sth_sha256":"f6efcf669d82d5f241e084c01ed2215687783392af5cd08ed7ca53ee9acd82fc","created_at":"2026-10-19T01:47:40.400Z","rules":{"leaf":"SHA-256(0x00 || canonical JSON of the answer's decision content)","tree":"RFC 9162 Merkle tree hash over this batch's leaf hashes, sorted","chain":"prev_sth_sha256 is the sha256 of the previous batch's signed tree head; batch numbers are consecutive and tree_size grows by batch_size"},"code":{"version_id":"6929574e-df21-45a5-8a92-5b8ba41cc9aa","script_sha16":"85c9b9b6c9a512ed","state":"attested","deployed":{"at":"2026-10-18T20:02:49.319Z","commit":"2bf491f55991","run":"39161431635"},"build_log_entry":597,"score_version":32,"scoring_policy_sha256":"d3c9c95d409dae4e90b8e868ff113e631e445e33c14a0cc008dda144293821b3","decision_rules_sha256":"18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e","check":"https://crawlcheck.io/api/v1/builds/6929574e-df21-45a5-8a92-5b8ba41cc9aa"},"sha256":"3c2e82d324f8f5c3459ffce43867e7e8c2486491d14e7a5d382eff6c62d327dd","signature":{"v":1,"alg":"Ed25519","kid":"1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps","over":"sha256","message":"crawlcheck-data-v1\n3c2e82d324f8f5c3459ffce43867e7e8c2486491d14e7a5d382eff6c62d327dd","sig":"LDWefbpNXTgnkj2f3nNszo8b47wqD72yohYnTwbUyrlKSrKbuggwQoQv8U1GG0NV-x0R2vdo8qCIkFYTaB6TCQ","signed_at":"2026-10-19T01:47:40.958Z","key":{"kid":"1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps","jwk":{"kty":"OKP","crv":"Ed25519","x":"5TmKCOx0TTHepq7HwyXBHvGQpVCSBd2lV8cLzYVqFxQ"},"published_in":"https://crawlcheck.io/.well-known/http-message-signatures-directory"},"canonical":"sha256 over canonical JSON of every field except sha256 and signature"}},"witnesses":"https://crawlcheck.io/api/v1/log/sth/753","content_rule":"leaf = SHA-256(0x00 || canonical JSON of the answer's decision content); see https://crawlcheck.io/api/v1/log"},"control":{"state":"unproven","proofs":[],"organization":null,"claim":"https://crawlcheck.io/registry/rockset.com/claim","why":"nobody has proven control of rockset.com to CrawlCheck, so who stands behind the site is unconfirmed","note":"control says who answers for the domain, not whether it is safe; it does not change any decision in this answer"},"assurance_ladder":{"v":1,"level":null,"order":["declared","discovered","reachable","conformant","owner_verified","authorized","reliable","action_ready"],"rungs":[{"rung":"declared","state":"not_reached","why":"no crawl policy, capability or registry listing was found"},{"rung":"discovered","state":"not_reached","why":"nothing an agent could call was found (no OpenAPI, MCP card, A2A card or registry listing)"},{"rung":"reachable","state":"not_reached","why":"no robots.txt policy was read, so permission is unknown"},{"rung":"conformant","state":"not_reached","why":"nothing declared to test"},{"rung":"owner_verified","state":"not_reached","why":"nobody has proven control of rockset.com to CrawlCheck, so who stands behind the site is unconfirmed"},{"rung":"authorized","state":"not_reached","why":"the domain's owner has published no authorization for agents"},{"rung":"reliable","state":"not_measured","why":"reliability is measured for MCP endpoints over time; none on this domain is on the panel"},{"rung":"action_ready","state":"not_reached","why":"not yet: declared, discovered, reachable, conformant, owner_verified, authorized, reliable"}],"rule":"level is the highest rung with every rung under it reached; a rung is reached only on measured evidence, not_reached when measured and short, not_measured when there was nothing to measure. The ladder describes evidence; each action's decision is still made in actions"},"code":{"version_id":"6929574e-df21-45a5-8a92-5b8ba41cc9aa","script_sha16":"85c9b9b6c9a512ed","state":"attested","deployed":{"at":"2026-10-18T20:02:49.319Z","commit":"2bf491f55991","run":"39161431635"},"build_log_entry":597,"score_version":32,"scoring_policy_sha256":"d3c9c95d409dae4e90b8e868ff113e631e445e33c14a0cc008dda144293821b3","decision_rules_sha256":"18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e","check":"https://crawlcheck.io/api/v1/builds/6929574e-df21-45a5-8a92-5b8ba41cc9aa"},"sha256":"7fff5083a417f9a6b3b797adf5ed55b4ad33d5a9ef5e3d43a77bb5af3de47551","signature":{"v":1,"alg":"Ed25519","kid":"1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps","over":"sha256","message":"crawlcheck-data-v1\n7fff5083a417f9a6b3b797adf5ed55b4ad33d5a9ef5e3d43a77bb5af3de47551","sig":"1QtBLR2roCpLdcUX3HMeNGSFw7MC5COAItRCzh_UYvM_ktHcrangcztv_1S2MuYCLCGCiRyW_xTZYNbU4tTOBw","signed_at":"2026-10-19T02:26:15.991Z","key":{"kid":"1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps","jwk":{"kty":"OKP","crv":"Ed25519","x":"5TmKCOx0TTHepq7HwyXBHvGQpVCSBd2lV8cLzYVqFxQ"},"published_in":"https://crawlcheck.io/.well-known/http-message-signatures-directory"},"canonical":"sha256 over canonical JSON of every field except sha256 and signature"}}