{
  "surface": "api",
  "tool": {
    "name": "api-audit",
    "version": "0.1.0"
  },
  "timestamp": "2026-09-16T10:59:12.933Z",
  "baseUrl": "https://api.lughonline.com",
  "evidence": [
    {
      "endpoint": "GET /healthz",
      "method": "GET",
      "path": "/healthz",
      "samples": [
        115.27482900000018,
        113.887201,
        115.86679299999992,
        115.77521699999988,
        114.6439150000001,
        115.25987699999996,
        114.79965099999981,
        114.64952399999993,
        114.91116000000011,
        114.96519200000012,
        115.54884800000036,
        114.62095099999988,
        114.52997300000015,
        113.87930800000004,
        113.6016380000001,
        115.02776799999992,
        114.769585,
        114.97607800000014,
        114.66701000000012,
        114.7070819999999,
        115.09933499999988,
        114.97389800000019,
        115.5725510000002,
        115.8057630000003,
        116.21883900000012,
        115.62994100000014,
        115.96032800000012,
        115.83250399999997,
        115.6442390000002,
        116.58425199999965
      ],
      "ttfb": [
        114.92478900000015,
        113.56103700000017,
        115.6614219999999,
        115.33303799999976,
        114.41769299999987,
        115.1035009999996,
        114.59182699999974,
        114.48670799999991,
        114.67739600000004,
        114.7764360000001,
        115.38966700000037,
        114.43534,
        114.37822300000016,
        113.69525999999996,
        113.45262300000013,
        114.87844200000018,
        114.56511600000022,
        114.7835970000001,
        114.52405399999998,
        114.56301399999984,
        114.95100999999977,
        114.81506699999954,
        115.42811200000051,
        115.6509989999995,
        116.08174099999997,
        115.47483600000032,
        115.80704600000081,
        115.64743399999952,
        115.4919090000003,
        116.43575699999928
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 15
    },
    {
      "endpoint": "GET /api/admin/leads",
      "method": "GET",
      "path": "/api/admin/leads",
      "samples": [
        115.04243000000042,
        115.49935100000039,
        114.93371399999978,
        114.32476100000076,
        115.21001199999955,
        114.8695859999998,
        114.91935199999989,
        114.66208300000017,
        115.17310600000019,
        115.97047300000031,
        115.05920400000014,
        115.2816499999999,
        115.26521599999978,
        113.78021799999988,
        115.54446800000005,
        114.8336819999995,
        114.8718400000007,
        114.77454399999988,
        115.11092300000018,
        114.53792800000065,
        115.0349069999993,
        114.75609500000064,
        115.28445999999894,
        113.57376600000134,
        115.06191799999942,
        114.61396199999945,
        115.03964499999893,
        114.90099399999963,
        115.13797300000078,
        117.96794699999919
      ],
      "ttfb": [
        114.89349400000083,
        115.34997399999975,
        114.78227400000014,
        114.17963099999997,
        115.02365999999984,
        114.72247399999924,
        114.78061200000047,
        114.5135280000004,
        115.0329440000005,
        115.82698600000003,
        114.87365299999965,
        115.14381199999934,
        115.12056699999994,
        113.6422990000001,
        115.35748500000045,
        114.69182799999999,
        114.72060099999999,
        114.62620900000002,
        114.96021399999972,
        114.39590300000054,
        114.89613699999973,
        114.60827199999949,
        115.13350200000059,
        113.42786500000147,
        114.90843599999971,
        114.4263379999993,
        114.85313199999837,
        114.71821699999964,
        114.89388300000064,
        117.82448999999906
      ],
      "status": 401,
      "expectedStatus": 401,
      "bytes": 24
    },
    {
      "endpoint": "GET /api/call/availability",
      "method": "GET",
      "path": "/api/call/availability",
      "samples": [
        114.73490800000036,
        114.85621700000047,
        114.38336200000049,
        114.60630200000014,
        114.31472899999972,
        114.96326500000032,
        114.91133000000082,
        115.12442700000065,
        113.42917300000045,
        114.6857629999995,
        114.67268799999874,
        113.6869170000009,
        114.5020659999991,
        114.7815359999986,
        113.42677100000037,
        115.52236599999924,
        113.27354000000014,
        115.32109000000128,
        114.54616899999928,
        114.27412399999957,
        114.82796400000007,
        114.52676200000133,
        114.72679599999901,
        114.91974499999924,
        114.61063499999909,
        114.98356400000011,
        114.45952000000034,
        113.73177199999918,
        114.22834299999886,
        114.69823800000086
      ],
      "ttfb": [
        114.58582200000092,
        114.67585399999916,
        114.24800800000048,
        114.42627100000027,
        114.1786030000003,
        114.82700900000054,
        114.77125800000067,
        114.97593199999937,
        113.24682799999937,
        114.54695300000094,
        114.48565599999893,
        113.54813800000011,
        114.3650689999995,
        114.63474499999938,
        113.23684399999911,
        115.37778699999944,
        113.10580599999957,
        115.18034799999987,
        114.40650800000003,
        114.13676599999962,
        114.6769260000001,
        114.38520800000151,
        114.59126099999958,
        114.78428099999837,
        114.37739300000067,
        114.84105799999998,
        114.32056000000011,
        113.59393400000044,
        114.09631400000035,
        114.56136200000037
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 61
    },
    {
      "endpoint": "POST /api/audit/start",
      "method": "POST",
      "path": "/api/audit/start",
      "samples": [
        115.77037299999938,
        115.13204199999927,
        116.34973799999898,
        116.17150500000025,
        115.82344000000012,
        116.27407900000071,
        115.14306899999974,
        116.03823700000066,
        115.24962199999936,
        113.88685600000099,
        114.97878500000115,
        115.55607200000122,
        114.7190159999991,
        114.97164899999916,
        114.80734400000074,
        114.8320760000006,
        114.04727599999933,
        114.9517569999989,
        115.36897900000076,
        114.84388500000023,
        116.5310470000004,
        113.4893400000019,
        115.4845150000001,
        117.54650000000038,
        115.31656999999905,
        114.60537399999885,
        115.55852400000003,
        115.48855099999855,
        115.95107999999891,
        115.4593739999982
      ],
      "ttfb": [
        115.58965100000023,
        114.98376800000005,
        116.21582599999965,
        116.02371200000016,
        115.6873940000005,
        116.14043800000036,
        114.99943200000052,
        115.8982560000004,
        115.10773799999879,
        113.73873200000162,
        114.84044600000016,
        115.3813680000003,
        114.58621499999936,
        114.7891129999989,
        114.66539899999952,
        114.69546900000023,
        113.91031899999871,
        114.80073799999991,
        115.18913699999939,
        114.7027909999997,
        116.39765500000067,
        113.31720999999925,
        115.25230299999748,
        117.40703900000153,
        115.16643199999817,
        114.42063399999824,
        115.42311899999913,
        115.3597860000009,
        115.8044979999977,
        115.3304790000002
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 89
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "method": "POST",
      "path": "/api/audit/capture-email",
      "samples": [
        115.57028100000025,
        116.21176700000069,
        116.03237999999692,
        115.34811500000069,
        115.52670900000157,
        116.06501799999751,
        117.2248150000014,
        123.1552589999992,
        116.03914900000018,
        118.74596699999893,
        116.56642199999987,
        121.6437560000013,
        114.69423399999869,
        116.8248339999991,
        114.72729199999958,
        115.37364700000035,
        113.56876900000134,
        116.3161199999995,
        117.73156100000051,
        115.96737199999916,
        115.99612699999852,
        116.65955400000166,
        116.89387699999861,
        116.23158999999941,
        117.9736350000021,
        118.21741200000179,
        118.28873999999996,
        116.71034900000086,
        116.52069299999857,
        117.06132799999978
      ],
      "ttfb": [
        115.43648799999937,
        116.03050599999915,
        115.89607599999727,
        115.21548600000096,
        115.37999000000127,
        115.92377699999997,
        117.09144599999854,
        123.00866999999926,
        115.90843400000085,
        118.61078399999678,
        116.35547600000064,
        121.51887900000293,
        114.56600199999957,
        116.70245099999738,
        114.58991699999751,
        115.23322700000062,
        113.4387850000021,
        116.18603499999881,
        117.5926040000013,
        115.83457300000009,
        115.86918499999956,
        116.50015300000086,
        116.72526199999993,
        116.10696199999802,
        117.84665300000052,
        118.0969299999997,
        118.10472200000004,
        116.55624499999976,
        116.39374099999986,
        116.9387029999998
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 34
    },
    {
      "endpoint": "POST /api/call/book",
      "method": "POST",
      "path": "/api/call/book",
      "samples": [
        118.76367799999935,
        117.30540900000051,
        116.01200400000016,
        116.26648199999909,
        116.91279200000281,
        115.58579300000201,
        116.06185399999958,
        116.17040300000008,
        115.80994700000156,
        115.17683100000067,
        114.99484099999972,
        114.7594769999996,
        116.40292699999918,
        115.34254800000053,
        115.53140700000222,
        115.10751899999741,
        115.673146000001,
        113.677466000001,
        115.54671699999744,
        115.19050200000129,
        115.4225609999994,
        114.4749359999987,
        116.27337799999805,
        116.37138899999991,
        114.74750799999674,
        115.27329199999804,
        115.47523799999908,
        114.94877300000007,
        115.96601300000111,
        115.00393699999768
      ],
      "ttfb": [
        118.63690599999973,
        117.1678209999991,
        115.87957299999835,
        116.1351539999996,
        116.77984099999958,
        115.40078300000096,
        115.93142599999919,
        116.04189799999949,
        115.6806510000024,
        115.04671400000007,
        114.86599600000045,
        114.62624499999947,
        116.27038600000014,
        115.16861499999868,
        115.36688800000047,
        114.97343600000022,
        115.55566800000088,
        113.5485809999991,
        115.42279000000053,
        115.02379900000233,
        115.2965809999987,
        114.30812299999889,
        116.14935999999943,
        116.2474710000024,
        114.62430200000017,
        115.15603499999997,
        115.35041900000215,
        114.82954299999983,
        115.84511000000202,
        114.87918799999898
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 99
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "method": "POST",
      "path": "/api/reports/{reportId}/retry-platform/{platform}",
      "samples": [
        114.50438600000052,
        115.4055100000005,
        114.98287399999754,
        114.68995100000029,
        114.69686799999909,
        115.2056679999987,
        114.56750100000136,
        113.38920999999755,
        114.81149100000039,
        114.57409600000028,
        114.25923999999941,
        114.85949700000128,
        116.11007299999983,
        115.14520899999843,
        114.41174600000159,
        114.58871600000202,
        114.89489900000262,
        114.95145899999989,
        114.36668199999986,
        115.01216800000111,
        114.69758400000137,
        114.69602799999848,
        115.33330900000146,
        115.04098000000158,
        114.28422800000044,
        116.51987000000008,
        115.00534100000004,
        115.00823400000081,
        115.3241710000002,
        115.72186099999817
      ],
      "ttfb": [
        114.37782599999991,
        115.28567100000146,
        114.86399600000004,
        114.53234499999962,
        114.56942699999854,
        115.04280400000061,
        114.438137000001,
        113.17835399999967,
        114.68084600000293,
        114.44709599999987,
        114.13192899999922,
        114.7270380000009,
        115.9861779999992,
        115.01292099999773,
        114.28671899999972,
        114.45557700000063,
        114.76236100000096,
        114.76232499999969,
        114.24419900000066,
        114.8875709999993,
        114.48413400000209,
        114.53534699999727,
        115.2125580000029,
        114.92012900000191,
        114.16738299999997,
        116.39257799999905,
        114.84311600000001,
        114.84987499999988,
        115.2059420000005,
        115.5963210000009
      ],
      "status": 200,
      "expectedStatus": 200,
      "bytes": 55
    }
  ],
  "audits": [
    {
      "endpoint": "GET /healthz",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9351583947765376,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.661473738973267,
      "weight": 1,
      "advice": "GET /healthz: reduce p95 time to first byte (116ms) toward 50ms."
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /healthz: add Strict-Transport-Security."
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.936371065749746,
      "weight": 3
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6626638485356199,
      "weight": 1,
      "advice": "GET /api/admin/leads: reduce p95 time to first byte (116ms) toward 50ms."
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "error-envelope",
      "category": "contract",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /api/admin/leads: add Strict-Transport-Security."
    },
    {
      "endpoint": "GET /api/admin/leads",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9384246704623166,
      "weight": 3
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6645036211901899,
      "weight": 1,
      "advice": "GET /api/call/availability: reduce p95 time to first byte (115ms) toward 50ms."
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /api/call/availability: add Strict-Transport-Security."
    },
    {
      "endpoint": "GET /api/call/availability",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9338625286825158,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6602342485701935,
      "weight": 1,
      "advice": "POST /api/audit/start: reduce p95 time to first byte (116ms) toward 50ms."
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "cache-headers",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "payload-size",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "POST /api/audit/start: add Strict-Transport-Security."
    },
    {
      "endpoint": "POST /api/audit/start",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9195908916407115,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6469810351742455,
      "weight": 1,
      "advice": "POST /api/audit/capture-email: reduce p95 time to first byte (120ms) toward 50ms."
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "cache-headers",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "payload-size",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "POST /api/audit/capture-email: add Strict-Transport-Security."
    },
    {
      "endpoint": "POST /api/audit/capture-email",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9313365606386081,
      "weight": 3
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6578973843866027,
      "weight": 1,
      "advice": "POST /api/call/book: reduce p95 time to first byte (117ms) toward 50ms."
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "cache-headers",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "payload-size",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "POST /api/call/book: add Strict-Transport-Security."
    },
    {
      "endpoint": "POST /api/call/book",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.935784019152695,
      "weight": 3
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6619855631649301,
      "weight": 1,
      "advice": "POST /api/reports/{reportId}/retry-platform/{platform}: reduce p95 time to first byte (116ms) toward 50ms."
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "cache-headers",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "payload-size",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "expected-status",
      "category": "contract",
      "score": 1,
      "weight": 3
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "POST /api/reports/{reportId}/retry-platform/{platform}: add Strict-Transport-Security."
    },
    {
      "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    }
  ],
  "scores": {
    "overall": 91.17052299103274,
    "categories": {
      "performance": 86.4547279760873,
      "reliability": null,
      "efficiency": 100,
      "contract": 100,
      "security": 80,
      "seo": null,
      "accessibility": null
    },
    "endpoints": [
      {
        "endpoint": "GET /healthz",
        "p50": 115.00192300000003,
        "p95": 116.10250905000012,
        "p99": 116.47828222999979,
        "errorRate": 0,
        "bytes": 15,
        "score": 92.34776980224355
      },
      {
        "endpoint": "GET /api/admin/leads",
        "p50": 115.03727599999911,
        "p95": 115.77877075000019,
        "p99": 117.38867953999952,
        "errorRate": 0,
        "bytes": 24,
        "score": 92.90880721230937
      },
      {
        "endpoint": "GET /api/call/availability",
        "p50": 114.64166149999892,
        "p95": 115.232591650001,
        "p99": 115.46399595999983,
        "errorRate": 0,
        "bytes": 61,
        "score": 92.44279727834918
      },
      {
        "endpoint": "POST /api/audit/start",
        "p50": 115.3427744999999,
        "p95": 116.44945794999975,
        "p99": 117.25201863000038,
        "errorRate": 0,
        "bytes": 89,
        "score": 90.97236377928469
      },
      {
        "endpoint": "POST /api/audit/capture-email",
        "p50": 116.41840649999904,
        "p95": 120.33975095000022,
        "p99": 122.71692312999981,
        "errorRate": 0,
        "bytes": 34,
        "score": 90.48481487040331
      },
      {
        "endpoint": "POST /api/call/book",
        "p50": 115.53906199999983,
        "p95": 117.12873135000154,
        "p99": 118.34077998999969,
        "errorRate": 0,
        "bytes": 99,
        "score": 90.8861484026298
      },
      {
        "endpoint": "POST /api/reports/{reportId}/retry-platform/{platform}",
        "p50": 114.87719800000195,
        "p95": 115.93537759999909,
        "p99": 116.40102887,
        "errorRate": 0,
        "bytes": 55,
        "score": 91.03771844020014
      }
    ]
  }
}