Site Intelligence

Store a bounded HTTPS-origin and check-profile contract without performing network or evaluation work.

Site Audit Specifications are Preview, contract-only Site Intelligence resources. They freeze an authorized HTTPS target and allow-listed check profile for a future readiness audit. The gateway does not resolve DNS, fetch pages, execute scripts, scan infrastructure, or evaluate the site.

Preview operation create_site_audit_specification_v1_site_audit_specifications_post requires a caller key, target, check profile, expected policy version, and auditable reason. Target validation rejects credentials, fragments, unsupported schemes, unsafe addressing, and scope outside the declared origin.

curl --fail-with-body --silent --show-error \
  --request POST "$BLACKPEARL_API_BASE_URL/v1/site-audit-specifications" \
  --header "Authorization: Bearer $BLACKPEARL_API_KEY" \
  --header "Content-Type: application/json" \
  --data @site-audit-specification.json

Preview operation list_site_audit_specifications_v1_site_audit_specifications_get lists project/environment specifications with cursor pagination. Preview operation get_site_audit_specification_v1_site_audit_specifications__specification_id__get reads one.

Every response states that execution is unavailable and reports zero fetch, evaluation, and finding counts. A stored plan does not prove site ownership or permission; callers remain responsible for explicit authorization and a future executor must revalidate the target at execution time.