Erik Rekola

A case passes only when the mutation was seen in the bytes the server handed back and the failure names the gate under test, so applied is a diff of the served content rather than a clean write. Restoration fell out of the model instead of getting a hash, since each round copies the source into a temp dir and the live runner mutates at serve time. Nothing is left to restore. A case with applied=0 counts as a hole rather than a third state, because a class the reader learns to skip is how the green happened.

Nothing inside the gate plays that role. The witness exists, since the scanner's own response names the categories and the check count for each, but it is wired to nothing. The fact file holds those five copied in by hand, and all six surfaces are checked against the file, so a seventh would show up in the response and nowhere the gate reads. That part is me. The repair is the same three conditions one level up, response as the enumeration and file as the set. The price is that a relabel by the scanner then turns the run red with nothing broken.

Both, and they sit at different layers. The readable layer is llms.txt, markdown and JSON-LD, so an agent can take in your facts without parsing HTML. The capability layer is a discoverable, authenticated API or MCP endpoint, so it can act on them. Most sites I scan have some of the first and nothing of the second. That gap is the usual one. I run turva.dev as the reference build for both, though its MCP side is read-only by design. Which one matters more comes down to whether you want an agent to know your facts or do something with them.