{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "3.0.0-rc.3",
    "pattern_version": "2026.09.4",
    "scan_id": "8b8b1dda58681eb7e07face1",
    "domain": "impots.gouv.fr",
    "scanned_at": "2026-09-20T19:36:39+00:00",
    "evidence_count": 37,
    "evidence": [
        {
            "id": "939c61410462c24ac94be70b0b6079b1b183acb8853155b476ea12aa02171c89",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "00e42fb41fee7a8acdd2f7988fb7f82a1747bcdd3aace350bb6e06d87a2422d0"
            ],
            "excerpt": {
                "name": "Drupal 10 (https://www.drupal.org)",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "1d11d0c03102b5a52aef7428722998bfbcbf7c2044462bf09bb023bf4afe0ae0",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "223d6f5bda2638c9f8b02d67b304fa4146c6d84f17db8e50a0577dab3c1081a2"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "c73764a3eb3c98993828dfae49b5cdc9f22b85d3a278a0a83dd4ae397340d715",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3d9d9f183ee49f96c8d893a1a86c80819fbbcffa7e479eb24a7dafd5d1d85b06"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "30ef8ba1e13f57176ce6379e25777f3da90e480ba1042b481a9bd4c92c15e1f7",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "423e90f196f435f72e539f1c200cc6e9217424318b210b8df061ee198826f7c2"
            ],
            "excerpt": "193.246.48.80",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "ea87afcb68667e5c13e30de6d61ab6eaca7acfe2457e598a05f3c22b632ec9cb",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4a725d740f58474a7e2a9704c370d22a77f0746b3b1866eafc8ff8d3fbeaaa6f"
            ],
            "excerpt": {
                "evidence": 200,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "f4794994cb81c7796ab1a2e5c55e26e7edb259c8a6fabe0bee9f87d25e3db4ec",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5209f3bae66193de2afe585c953c02da646d542f3ff2d4260fa4fff1eb152b8d"
            ],
            "excerpt": {
                "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:",
                "severity": "high"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "331a192ac491a3bf94f8cdf52543d3b3c96dbfb6557aaab1b42fdbbc0eebff39",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "56631b82e9474f144e4d11a980f85db5004b811756e9fdc80f9e132921cd53a8"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "27d757fc4812e631a3595b312e9d864f1fd02489d0fc9c711dd8e85185684585",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "57c80728df15c282519a41dd9eb6401f98556f84e36217391e2df74aec76fe0e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5f0661c68c93cd84e1366dc2859a515041a1ae9d576001b84b6a3839f925ea36"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "8c051b367b42cf4ebd68384eb0210084c7aed76c05d49724b1c60c06fed3e040",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "62599acea862e365b47b65014ee68b0eea960f34d701143669ece8ca1543bcd8"
            ],
            "excerpt": {
                "evidence": [],
                "severity": "high"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "10cafdbae5038002855ff58978aafedd907770b9aabdb03d3c4ddd1a31154e91",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "667ef041a2b281fae6b98b4443a8e2b86a624f5b49085dea6915c39efcfca395"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "80ad21656ae037abb1219bb10dfcf79ca848dc650c0f630137a1fdc81ac2ef2d",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6d709db4c3cd23cfb3f58a8e88ba13e7784629646be9787b7c377b404b6e62f1"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "08a376e225fa1fa7f2f835d7627ed804df1cdc9d3f4fee0d6f59301c687cde46",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "706c3d42e55afcbfb637c9dde9ca041ca3f2a32ca49b2cfcc5eea173d8208088"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "706d4ee60763f2985b32e59d02235f2ca9ef8513afed22d5066b925663be49d7"
            ],
            "excerpt": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "da77a821be1812ae1a8aa29cce23dd93e6edab59987edd4e85d9920905109a9f",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "848cc37446dce5d1fdcfa087ceee74f5e6d74c42bcc6142f34ab3ec9f23026d0"
            ],
            "excerpt": "2026-10-03T23:59:59+00:00",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "7caf9d481a3d8d0dad3a1a6c0e8af0c789b62194b4899efc54867467358454b7",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "85b1a1f8b7b5726feecb9730fe0522325bdb6701b972794cc260e96c185f4cf9"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "3ab196516bff362147fb25e8bf46eb0156e0ea768428777d025b09a412310dc5",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8786993ec46a6b30485ebecfb2046ffad7f5313c1c74b64ab820ac0e9688b70d"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": false,
                "object_src": false,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "a1b91240e9b508961ada33dd086d399b78156eee8f094e73915e1f0910347871",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8919b362bbb4ec7f65193ab104f2ae680e571c0f9d242ba8f143e0121b96f231"
            ],
            "excerpt": [
                "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:"
            ],
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "7a9a99611db62fd127b9a0658c548ad95d980237e751597e077b197ed403daa1",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8e93ef906fe0fbc0267db82c0cf31cd33405d4ee4f2ea5c092ec6e9a2c1bc962"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "6b9a4fa65e440ab44ee9a867afa7489686811fac62bcfb244a42ae246404d7c9",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8ea6930fb7ae7373a700deb96f1b1d0c652f04c5392f2b6f161ffa554557a9bb"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-03-19T00:00:00+00:00",
                    "valid_to": "2026-10-03T23:59:59+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "193.246.48.80",
                        "193.246.48.99"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:918:ffcb::c1f6:3050",
                        "2001:918:ffcb::c1f6:3063"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "070e3dcb7c4d68182110d19ef1b3ef9d6f381c0dffc3d830c678d600df0299ff",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "94956e683d439f3665f5b8c64fe8214ed9d13e91a01c1151cc4e262d4a034837"
            ],
            "excerpt": [
                "SAMEORIGIN"
            ],
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9795719527d6652c41ed856c68da255f696e984a529b13c20e184dced2c5d086"
            ],
            "excerpt": "missing",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "6523d083ab08fac927ced59e901c75538c46c4569061999b7849f6e0f2aa52ae",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "99e346aa469b1850674fc4901cdea98e1b3ee474b0a7eea2947fde350aa077fb"
            ],
            "excerpt": {
                "evidence": 3,
                "severity": "low"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "9552ca19228f1a9329b935c08956c5f46ebabe047ef4fd587857f22d567d8eea",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a330173bb6e6bf2b032b2a704a1e318733530e796e728b0fe31931e153f74d61"
            ],
            "excerpt": "2001:918:ffcb::c1f6:3063",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "3ea810e63fe4ca0c8f903e41df59b5a94ef8bd295bda4aa72d6149b5a91ceb04",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ae4f0095481959efbbfad3ccf0089c653003eabb53715ea9e64e257d3d526ad7"
            ],
            "excerpt": {
                "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:",
                "severity": "high"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "affd55a06fc0e857f02956b50128593f8f816fcfbe26cb9a03ec4aaa14a9b32e"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "05f7ff09f6e7c6aa20fa308ed57fbb7d2c41e83e8a327070da90826a56a67d7c",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b4839ce381a82a1c262727f66bf93eee11d271be24705e1120298fea70b7de2b"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "881aa2079d0e3b57199368042011d08e255c8405418236635498d183ece3ab0c",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "be90da2668501cc2ea541dc4c5068ccc56d8698efe96f81d2c89f9d773550438"
            ],
            "excerpt": [
                "max-age=34560000; includeSubDomains"
            ],
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "db673a75a08a881dc6285a5aa8f4441d4da83133a9f959d8f09fb54f3579d769",
            "evidence_type": "module_finding",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c7b04a1db6bd84ff14fe4cca375164395e91d50b3b8f657c0f62b94c0b384d9e"
            ],
            "excerpt": {
                "evidence": "13 days",
                "severity": "high"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "512374c9ec3b0e96f8604688c00a4cb4178cf517a2bf6a3450fc5266fbc5ba9a",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c9043bb2103f551fe41779d7212fd6c9c943f497e667e0a3baa43f5303f072e4"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "40a608777bc033cb4493333fc716abe6702dda08eca56e660c279929d4bc587b",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d2d7ab8deddf4c00ae649266e8529b83f7b4ff4bb7df6597f1bd9691005af026"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "d68977bcaa4861e68e7c3788cb3be1a63dafaed5f6fd88b795c26fb640880e26",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d6d42d948bfd5d016a358b078f712c5378b38ba6b8f3e4289ee6305bac01aef1"
            ],
            "excerpt": "193.246.48.99",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "dd18b02868e014fb6f484369991fa1026874df16d8df82ce0c3e44dced92ed9d",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d87d22ce27f27ede1705fb136bee23811ae084f56523d2981e197405c870212e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "aac86f03253f52a4b4a840f8b62d3ca06ec9aec10bb334563b7f59bb86d5b9a5",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ded62117c7d994b9fbf0bcff9ced645463f0a401ec7f779dedf181b1b79a2032"
            ],
            "excerpt": {
                "name": "Drupal",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eb3c0ef56c02b6eb938f18d51a952ca0cd1404f309d134a9da89834dbd295767"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "48ac1bf95bc6526112a0c29948d57aaf1c30e9db46d446d6cfda03af40555d3f",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ecd0ca3518f8a97a1d498d7252cbd37b644aa1e7572724fb60c6f01a5fe1484a"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        },
        {
            "id": "fee6ae9564426e922e7191e3c8dab27f83ea5e75e269aec92cd5584d9b2be841",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f707db67a11bdb4bf9091ade8d4cdfa0040b85050093e30776702a26cd0ddeb8"
            ],
            "excerpt": "2001:918:ffcb::c1f6:3050",
            "first_seen_at": "2026-09-20T19:36:39+00:00",
            "last_seen_at": "2026-09-20T19:36:39+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}