generated: '2026-07-21' method: searched source: live probes of /.well-known/* on TORTUS hosts host: https://tortus.ai notes: No RFC-style discovery documents are published. trust.tortus.ai serves a Vanta-hosted Trust Center (HTML, not an RFC 9116 security.txt); see security/tortus-trust-center.yml. The API host api.tortus.ai does not respond to unauthenticated root/discovery requests. hosts: - host: https://tortus.ai documents: - path: /.well-known/security.txt status: 404 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 - path: /.well-known/security.txt status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.