generated: '2026-08-07'
method: probed
source: live GETs against every host in apis.yml and every OpenAPI servers[] host
host: https://bluejaytx.com
result: no /.well-known/ document is published
summary: 'Every RFC 8615 well-known path probed on bluejaytx.com returned 404. No security.txt, no OIDC
  or OAuth discovery metadata, no api-catalog, no ai-plugin manifest and no A2A agent card at either the
  canonical or the legacy path. Two response shapes were observed and the difference is worth recording:
  /.well-known/security.txt and /llms.txt return a 146-byte text/html body served by the edge, while every
  other path returns the full ~60 KB WordPress HTML 404 page. Neither is a document; both are misses.
  No raw files were saved because none returned 200.'
other_discovery_documents_that_do_exist:
- path: /wp-json/
  status: 200
  content_type: application/json
  note: The site's real discovery document. A self-describing WordPress route index carrying 372 routes
    across 17 namespaces with per-argument schemas, plus the supported authentication mechanisms. It is
    machine-readable and explicitly crawlable (robots.txt disallows only /wp-admin/), it is simply not
    published at a well-known path.
- path: /robots.txt
  status: 200
  content_type: text/plain
  note: Disallows /wp-admin/ only; Crawl-delay 10; declares both sitemaps. Does NOT disallow /wp-json/.
- path: /sitemap.xml
  status: 200
  content_type: text/xml
  note: All in One SEO sitemap index — post, page, category and post_tag children.
- path: /sitemap.rss
  status: 200
- path: /feed/
  status: 200
  content_type: application/rss+xml
  note: RSS 2.0, 10 most recent items.
hosts_probed:
- host: bluejaytx.com
  resolves: true
  probed: true
- host: api.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: developer.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: docs.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: portal.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: status.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: trust.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: security.bluejaytx.com
  resolves: false
  note: NXDOMAIN
- host: app.bluejaytx.com
  resolves: false
  note: NXDOMAIN
x-evidence:
  fetched: '2026-08-07'
  method: curl -L, following redirects, per path
hosts:
- host: https://bluejaytx.com
  documents:
  - path: /.well-known/security.txt
    status: 404
    note: RFC 9116. Edge 404, 146-byte text/html body.
  - path: /.well-known/openid-configuration
    status: 404
    note: OIDC discovery. WordPress HTML 404.
  - path: /.well-known/oauth-authorization-server
    status: 404
    note: RFC 8414. WordPress HTML 404.
  - path: /.well-known/api-catalog
    status: 404
    note: RFC 9727. WordPress HTML 404.
  - path: /.well-known/ai-plugin.json
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
    note: A2A 1.0.0 canonical path. Miss. No card is authored on the provider's behalf, so no a2a/ directory
      exists in this repository.
  - path: /.well-known/agent.json
    status: 404
    note: Pre-0.3 legacy A2A path. Also a miss.
x-shape-fix:
  converted: '2026-08-20'
  from: documents
  note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served
    .well-known surface recorded in any other shape scores as absent.