generated: '2026-08-05'
method: derived
source: well-known/veir-well-known.yml + live probes of veir.com
standards:
- id: rfc9727-api-catalog
  name: RFC 9727 — API Catalog well-known URI
  conforms: true
  evidence: >-
    GET https://veir.com/.well-known/api-catalog returned 200 with content-type
    application/linkset+json and a valid linkset[] carrying anchor, service-desc and service-doc.
- id: oidc-discovery
  name: OpenID Connect Discovery 1.0
  conforms: partial
  evidence: >-
    Discovery document present and well-formed at /.well-known/openid-configuration (200), but the
    advertised authorization_endpoint, token_endpoint and jwks_uri all returned 404 on 2026-08-05.
    Metadata conforms; the deployment behind it does not resolve.
- id: rfc9728-oauth-protected-resource
  name: RFC 9728 — OAuth 2.0 Protected Resource Metadata
  conforms: true
  evidence: >-
    GET https://veir.com/.well-known/oauth-protected-resource returned 200 with resource,
    authorization_servers and scopes_supported.
- id: rfc8414-oauth-authorization-server
  name: RFC 8414 — OAuth 2.0 Authorization Server Metadata
  conforms: false
  evidence: /.well-known/oauth-authorization-server returned 404.
- id: rfc9116-security-txt
  name: RFC 9116 — security.txt
  conforms: false
  evidence: /.well-known/security.txt returned 404.
- id: content-signals
  name: Content Signals (robots.txt Content-Signal directive)
  conforms: true
  evidence: >-
    robots.txt carries "Content-Signal: ai-train=no, search=yes, ai-input=no" — an explicit,
    machine-readable AI usage preference expressed at the crawler-policy layer.
- id: a2a-agent-card
  name: A2A Agent Card
  conforms: false
  evidence: Both /.well-known/agent-card.json and /.well-known/agent.json returned 404.
- id: openapi
  name: OpenAPI
  conforms: false
  evidence: >-
    No OpenAPI/Swagger document found. Probed /openapi.json, /openapi.yaml, /swagger.json,
    /api-docs, /docs, /redoc on veir.com; api.veir.com and docs.veir.com do not resolve in DNS.
- id: rfc9457-problem-details
  name: RFC 9457 — Problem Details for HTTP APIs
  conforms: false
  evidence: No JSON error surface published; 404s return an HTML document.
compliance_program:
  published: false
  note: >-
    No trust center, no certification page (SOC 2 / ISO 27001 / PCI / HIPAA / FedRAMP), and no
    security page were found on veir.com. Probed /security, /trust, /status — all 404.
x-evidence:
  fetched: '2026-08-05'