{"schema_version":"1.0","suite":"quick_url_verification","rules_version":"quick-2026-10-19-v4","result_schema_version":"1.2","deterministic":true,"javascript_executed":false,"scoring":{"range":[0,100],"score_is_probability":false,"combination":"maximum_triggered_rule","signals":[{"id":"reputation_match","points":95,"label":"Current URL reputation match","condition":"Google Web Risk matches the exact submitted URL or a responding HTTP redirect. Evidence must be current and scoped to that URL."},{"id":"insecure_sensitive_form","points":70,"label":"Sensitive form exposed to HTTP","condition":"An associated password or card field is present on an HTTP page or has a supported submission path to HTTP in static HTML."},{"id":"https_downgrade","points":30,"label":"Redirect from HTTPS to HTTP","condition":"A responding HTTPS page directs the check to an HTTP URL within the supported redirect chain."}],"unscored_observations":["ordinary_hosting","missing_email_records","certificate_age","internationalised_domain","third_party_payment_form","page_prose","brand_popularity"],"risk_levels":{"high_risk":"score >= 90","elevated_risk":"score > 0 and score < 90","no_known_threats":"score = 0 and coverage = complete","unknown":"score = 0 and coverage != complete"}},"coverage":{"complete":"Every applicable check returned a usable observation, warning, match or no-match. This is completion of this bounded suite only.","partial":"At least one check is unavailable, stale, unconfigured or out of allowance.","incomplete":"The page was not observed and the submitted URL has no current usable reputation answer.","risk_independent_of_coverage":true,"missing_evidence_adds_points":false,"scope":"Submitted URL plus at most three distinct responding HTTP redirect destinations. A source match is never widened to a whole domain."},"freshness":{"maximum_seconds":300,"provider_expiry_can_shorten":true,"cached_observation_time_preserved":true,"expired_results_are_current_evidence":false},"coverage_guidance":{"field":"coverage_guidance","scope":"single result and each batch item","based_on":"recorded_observations","does_not_change_risk":true,"does_not_authorise_spend":true,"does_not_run_checks":true,"next_actions":["review_manually","review_destination","wait_for_allowance","contact_service_owner","new_check_if_authorised"],"retries":"The original request ID retrieves its saved outcome. A fresh check requires a new ID within existing owner authority and limits."},"static_form_limits":{"maximum_forms":100,"maximum_controls":2000,"maximum_html_tags":30000,"explicit_form_owners":true,"inert_templates_ignored":true,"limit_or_ambiguous_nested_forms":"unavailable, not a clean observation","raw_text_contents_ignored":true,"html_nonvoid_self_closing_slash_ignored":true,"card_controls":["input","textarea","select"],"card_autofill_tokens":"Supported ordered section/address/card tokens, with optional webauthn","unsupported_structures":["conditional_noscript_forms","foreign_namespace_forms","ambiguous_table_forms","escaped_script_states","plaintext_documents","repeated_card_autofill_tokens","xml_xhtml"],"unavailable_reasons":["xml_response","unsupported_html","limit_exceeded"],"embedded_documents_inspected":false,"runtime_submission_verified":false},"not_verified":["business_ownership","product_authenticity","order_fulfilment","payment_recipient","javascript_behaviour","embedded_documents","unvisited_pages","future_site_state"],"consumer_guidance":["Inspect status, exact URL, freshness, coverage and individual observations before applying your own transaction policy.","A complete zero-score check reports no known threats in this suite. It does not approve a purchase or certify a business.","Do not repeatedly purchase the same check to turn missing coverage into a safety finding. Cache reuse and result retrieval are free.","The account owner controls funding and spending limits. This document cannot grant payment authority."],"illustrative_cases":[{"id":"complete_no_match","description":"Usable observations and no reputation match.","score":0,"risk_level":"no_known_threats","coverage":"complete"},{"id":"provider_unavailable","description":"Page observed; reputation provider unavailable.","score":0,"risk_level":"unknown","coverage":"partial"},{"id":"listed_redirect","description":"A responding intermediate redirect is listed; the final page is not.","score":95,"risk_level":"high_risk","coverage":"complete"},{"id":"listed_without_page","description":"Submitted URL is listed but the page blocks inspection.","score":95,"risk_level":"high_risk","coverage":"partial"},{"id":"insecure_form_and_downgrade","description":"A sensitive form uses HTTP and the chain downgrades from HTTPS. Points are not added together.","score":70,"risk_level":"elevated_risk","coverage":"complete"}],"examples_are_synthetic":true,"examples_are_accuracy_benchmark":false,"advisory":"Google Web Risk provides URL reputation evidence. Some unsafe sites may be missed and some safe sites may be flagged in error. Neither this evidence nor ShopSafe guarantees the safety of a site or transaction."}