generated: '2026-07-21' method: searched host: https://us.tractionguest.com notes: 'OpenID Connect discovery (RFC 8414 OAuth authorization-server metadata and the OIDC configuration) is published on the API host us.tractionguest.com and drives the API''s authorization/token/introspection/revocation endpoints and its scope set. No security.txt or api-catalog document is published on the API host. ' hosts: - host: https://us.tractionguest.com documents: - path: /.well-known/openid-configuration status: 200 file: sign-in-enterprise-openid-configuration.json - path: /.well-known/oauth-authorization-server status: 200 file: sign-in-enterprise-oauth-authorization-server.json - path: /.well-known/security.txt status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.