Outside-in agent route authority audit

New fact

ScriptMasterLabs identified and documented multiple legacy routing references that must not override the current first-party machine contract. This is a routing-authority finding, not a claim of traffic, ranking, revenue or external settlement.

Current first-party references

Public MCP: https://mcp-x402.onrender.com/mcp
x402 discovery: https://squeezeos-api.onrender.com/.well-known/x402
Route authority: https://scriptmasterlabs.com/.well-known/route-authority.json

Known legacy entry points

https://acp-x402-scriptmasterlabs.onrender.com/mcp — legacy external alias. Cached metadata there must not override fresh first-party payment terms.

https://four02proof.onrender.com — legacy payment reference. It is not current SML payment authority unless an explicitly identified legacy compatibility workflow says otherwise.

Reproduce

1. Fetch the SML route-authority document.
2. Fetch the live SqueezeOS x402 discovery contract.
3. Fetch the current public MCP gateway.
4. Compare any cached or third-party SML listing against those fresh first-party contracts before authorizing payment.

Truth boundaries

Reachability is not settlement proof. A cached directory listing is not current payment authority. This self-audit does not claim every third-party cache has refreshed. It does not claim a stranger purchase.