generated: '2026-07-20' method: searched source: live probes of /.well-known/ on olist.com and api.olist.com host: https://olist.com notes: No /.well-known/ discovery documents are published on the public olist.com host. The Olist partner API (Swagger delivered on registration) sits behind api.olist.com, which returns 403 to unauthenticated /.well-known/security.txt requests. Absence recorded as valid data. hosts: - host: https://olist.com documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.