generated: '2026-09-10' method: probed source: live GET of the named /.well-known/ path list on every host in this record note: >- Seven hosts probed with the closed named-path list plus a negative control (/.well-known/aerones-negative-control-7f3ab91c.json). operations.aerones.com and portal.aerones.com are single-page-app catch-alls: every path, including the negative control, returned HTTP 200 with the same HTML shell (1244 and 581 bytes), so the path_echo/soft-404 control FAILED on those two hosts and every 200 recorded there is discarded as a non-document. The only real discovery documents Aerones serves are Keycloak realm-scoped OIDC metadata on sso.aerones.com — not at the host root, which 404s, but under /realms/{realm}/.well-known/openid-configuration. No security.txt, no api-catalog, no apis.json, no ai-plugin, no AAuth resource and no A2A agent card exist on any Aerones host. hosts: - host: https://sso.aerones.com path_echo_control: passed hit_count: 4 documents: - path: /realms/aerones/.well-known/openid-configuration status: 200 file: aerones-sso-aerones-openid-configuration.json - path: /realms/aerones/.well-known/oauth-authorization-server status: 200 file: aerones-sso-aerones-openid-configuration.json - path: /realms/master/.well-known/openid-configuration status: 200 file: aerones-sso-master-openid-configuration.json - path: /realms/master/.well-known/oauth-authorization-server status: 200 file: aerones-sso-master-openid-configuration.json - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/security.txt status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/ucp.json status: 404 - path: /.well-known/acp.json status: 404 - path: /.well-known/aauth-resource.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/aerones-negative-control-7f3ab91c.json status: 404 - host: https://aerones.com path_echo_control: passed hit_count: 0 documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/oauth-protected-resource status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/ucp.json status: 404 - path: /.well-known/acp.json status: 404 - path: /.well-known/aauth-resource.json status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /apis.yml status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/aerones-negative-control-7f3ab91c.json status: 404 - host: https://www.aerones.com path_echo_control: passed hit_count: 0 documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/apis.json status: 404 - path: /apis.json status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /.well-known/aerones-negative-control-7f3ab91c.json status: 404 - host: https://operations.aerones.com path_echo_control: failed hit_count: 0 soft_404_control: path: /.well-known/aerones-negative-control-7f3ab91c.json status: 200 bytes: 1244 content_type: text/html verdict: >- Catch-all SPA. All 15 probed paths returned an identical 1244-byte HTML shell, including a path that cannot exist. Every 200 on this host is discarded. documents: - path: /.well-known/security.txt status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /.well-known/api-catalog status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /.well-known/agent-card.json status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /.well-known/agent.json status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /apis.json status: 200 note: HTML SPA shell, not a document - discarded by the negative control - host: https://portal.aerones.com path_echo_control: failed hit_count: 0 soft_404_control: path: /.well-known/aerones-negative-control-7f3ab91c.json status: 200 bytes: 581 content_type: text/html verdict: >- Catch-all Vite SPA. All 15 probed paths returned an identical 581-byte HTML shell, including a path that cannot exist. Every 200 on this host is discarded. documents: - path: /.well-known/security.txt status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /.well-known/agent-card.json status: 200 note: HTML SPA shell, not a document - discarded by the negative control - path: /.well-known/agent.json status: 200 note: HTML SPA shell, not a document - discarded by the negative control - host: https://availability.calc.aerones.com path_echo_control: passed hit_count: 0 documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /apis.json status: 404 - path: /.well-known/aerones-negative-control-7f3ab91c.json status: 404 - host: https://ler.calc.aerones.com path_echo_control: passed hit_count: 0 documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/agent-card.json status: 404 - path: /.well-known/agent.json status: 404 - path: /apis.json status: 404 - path: /.well-known/aerones-negative-control-7f3ab91c.json status: 404