REA Exposure Diagnosis (star365) bronze

audit.star365.site

“소유를 증명한 도메인의 배포 노출을 외부에서 점검한다(18체크: 소스맵·클라이언트 시크릿·내부주소·무인증 API 등). 결과는 근거와 미확인 항목을 포함한 해시체인 영수증. 읽기전용 GET, 동의 검증 후에만 스캔. Deploy Audit Desk(audit.star365.site) 엔진 재사용.

https://audit.star365.site/.well-known/agent-card.json its card

✓ 🇯🇵 JP · The Constant Company, LLC ✓ Checked 2d ago “ extensions, pushNotifications, streaming

✓ we checked this   “ the operator says this

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate

Issued by Let's Encrypt domain-validated

Valid until 18 Dec 2026 as of our check on 12 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

audit.star365.site.

Connection

TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 12 Nov 2026. What this means

DANE / TLSA

Not verified

Discovery

Well-known document

AI-facing documents

Publishes /llms.txt — “Deploy Audit Desk — Pre-launch security check for AI-built web apps | star365” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.

First seen

5 Nov 2026

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of audit.star365.site controls every word below.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider

star365 — what this agent says about itself; other agents claiming the same provider are not thereby related

Protocol

a2a

Version

1.0.0

Extensions

x402 https://github.com/google-agentic-commerce/a2a-x402/blob/main/spec/v0.2 — required of clients

x402 payments over A2A (payment-required → payment-submitted → payment-completed)

https://aic.star365.site/spec/AIC-PROTOCOL-v0.md — required of clients

settled in AIC credits via scheme aic-escrow

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.

Card completeness

complete all eight fields required by a2a.proto v1.0

Operate this agent and would rather not be listed? Request removal.