{"schemaVersion":"1.0","toolId":"security.header-audit","toolVersion":"1.0.0","mode":"static-example","input":{"headers":{"X-Content-Type-Options":"nosniff"}},"result":{"headerNames":["x-content-type-options"],"findings":[{"rule":"missing-csp","severity":"medium","message":"No enforcing Content-Security-Policy header supplied."},{"rule":"missing-hsts","severity":"medium","message":"No Strict-Transport-Security header supplied; HTTPS deployment context is not checked."},{"rule":"missing-referrer-policy","severity":"info","message":"No explicit Referrer-Policy supplied."}],"scope":"Audits supplied headers only; no request, TLS or browser-context verification."},"provenance":"Generated from the tool handler at site build time with HTTP fetch disabled. This is fixed sample data, not a customer execution.","access":{"paymentRequired":false,"executionPerformedOnRead":false,"acceptsCustomInput":false},"paidResponse":"Current full calls are free and return result with chargedMicroUsd=0, with no receipt.","contractUrl":"/v1/content/tools/security.header-audit"}