{
  "schema_version":"1.0",
  "id":"sml-evidence-2026-09-06-route-authority-01",
  "type":"SML_EVIDENCE_CAPSULE",
  "title":"ScriptMasterLabs outside-in agent route authority audit",
  "publisher":{"name":"ScriptMasterLabs","url":"https://scriptmasterlabs.com/"},
  "canonical":"https://scriptmasterlabs.com/evidence/route-authority-audit-2026-09-06.html",
  "observed_date":"2026-09-06",
  "citation_delta":{"new_fact":"ScriptMasterLabs identified and documented multiple legacy routing references that must not override the current first-party machine contract.","zero_delta_republish_allowed":false},
  "current_first_party":{
    "website":"https://scriptmasterlabs.com/",
    "mcp":"https://mcp-x402.onrender.com/mcp",
    "x402_discovery":"https://squeezeos-api.onrender.com/.well-known/x402",
    "route_authority":"https://scriptmasterlabs.com/.well-known/route-authority.json"
  },
  "known_legacy_entry_points":[
    {"url":"https://acp-x402-scriptmasterlabs.onrender.com/mcp","classification":"legacy_external_alias","rule":"Discovery metadata at this alias must not override current first-party payment terms."},
    {"url":"https://four02proof.onrender.com","classification":"legacy_payment_reference","rule":"Not current ScriptMasterLabs payment authority unless a specific legacy compatibility workflow explicitly says otherwise."}
  ],
  "method":"Compare current first-party machine discovery surfaces and application routing rules against known legacy SML entry points and package-era payment references.",
  "reproduce":[
    "Fetch https://scriptmasterlabs.com/.well-known/route-authority.json",
    "Fetch https://squeezeos-api.onrender.com/.well-known/x402",
    "Fetch https://mcp-x402.onrender.com/mcp",
    "Compare any cached or third-party SML route against those fresh first-party contracts before payment authorization."
  ],
  "truth_boundaries":[
    "Reachability is not settlement proof.",
    "A cached directory listing is not current payment authority.",
    "This self-audit does not claim that every third-party cache has refreshed.",
    "This record does not claim an external stranger purchase."
  ],
  "correction_policy":"If first-party authority changes, publish a new capsule or explicit correction; do not silently rewrite historical observations."
}