{"service":"Vanagon Dictionary","canonicalBaseUrl":"https://dictionary.ja1.io","publicSafeAccessEnabledByDefault":true,"platphormApiKeyProtectedActionPolicy":"Submissions, votes, removal requests, definition edits, moderation, import, admin, audit logs, reports, registry mutation, and destructive actions require PLATPHORM_API_KEY.","acceptedAuthenticationHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"w3cTracePropagationPolicy":"W3C trace context and PlatPhorm trace headers are accepted and propagated for platform operations without secrets in trace state or baggage.","ja4DigestSafeHandlingPolicy":"Raw fingerprint values are not published in public dictionary artifacts.","cloudflareMetadataPolicy":"Safe Cloudflare metadata may be captured for trace-linked observability. Raw IPs, cookies, auth headers, tokens, and raw JA4 digest values are not public artifacts.","privateDataRedactionPolicy":"Pending/rejected moderation data, private author metadata, audit logs, provider credentials, OAuth tokens, API keys, cookies, and raw request bodies are redacted from public logs and discovery files.","openapiMcpLlmsDiscoveryPolicy":"OpenAPI, llms files, MCP manifest, and read-only MCP/API discovery are public-safe and should describe real Dictionary capabilities only.","featureSwitchPolicy":{"api":"DICTIONARY_FEATURE_API; disabled REST routes return 503 while health and API docs remain available.","mcp":"DICTIONARY_FEATURE_MCP; disabled MCP routes return an explicit 503/JSON-RPC feature-disabled response.","cloudflareBackend":"DICTIONARY_FEATURE_CLOUDFLARE_BACKEND; disabled Cloudflare Worker data routes and frontend proxy calls return 503 while Worker health remains available.","semantics":"Unset values default to enabled. Feature switches disable service access; they do not change authorization or corpus records."},"sitemapNoDeadLinkPolicy":"Sitemaps include only public-safe routes generated from canonical route/content state and exclude known test junk, private routes, mutation routes, and dead URLs.","rssFeedPolicy":"RSS and Atom feeds include approved public terms and definitions only; pending, rejected, private moderation data, secrets, and raw request metadata are excluded.","faqBreadcrumbJsonLdPolicy":"Public routed pages should include canonical metadata, breadcrumbs where appropriate, and JSON-LD for FAQ, website, dictionary, and term surfaces.","modelScaffoldingPolicy":"Server-only model assistance is provider-neutral, trace-linked, validation-gated, and degraded when no model provider is configured. Model suggestions are not approved definitions.","agentAccessPolicy":"allow_public for read-only dictionary, discovery, API docs, OpenAPI, llms, RSS, sitemap, and MCP introspection; protected_required for moderation/admin/import/sync/reporting.","rateLimitPolicy":"Public clients should keep reads bounded. Protected writes require PLATPHORM_API_KEY and may be throttled.","abuseSpamPolicy":"Submissions, votes, and removal requests require PLATPHORM_API_KEY. Spam, abusive automation, credential probing, and protected action attempts may be blocked.","requiredTrustLine":"Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Cloudflare metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.","securityContact":"https://dictionary.ja1.io/.well-known/security.txt","updatedAt":"2026-10-26T00:00:00.000Z","version":"2026-10-26.dictionary.protected-contributions"}