{
  "schema_version": "2026-07-10",
  "name": "Spala Post-Hardening Fresh-Agent Retest",
  "status": "start_pricing_improved_mcp_stable_project_auth_proof_still_pending",
  "generated_at": "2026-07-10",
  "purpose": "Record a fresh-context retest after deploying the start/pricing and MCP bootstrap hardening.",
  "boundary": "This is a two-scope retest, not a broad 20-agent pass, not Search Console proof, not production trust parity, and not OAuth-complete project MCP proof.",
  "summary": {
    "agents_completed": 2,
    "average_score": 8,
    "scores": {
      "onboarding_start_pay_create_after_hardening": 8,
      "mcp_handoff_after_hardening": 8
    },
    "improved_from_previous": {
      "onboarding_start_pay_create": {
        "before": 6,
        "after": 8
      },
      "mcp_handoff": {
        "before": 8,
        "after": 8
      }
    }
  },
  "findings": [
    {
      "scope": "onboarding_start_pay_create_after_hardening",
      "score": 8,
      "result": "Agent understood Spala, dashboard signup, project creation, pricing tiers, and service-led pricing clarification.",
      "remaining_gaps": [
        "Exact checkout flow for the current account remains account/owner-specific.",
        "Accepted payment methods, billing currency, taxes, renewal, cancellation, refund, upgrade/downgrade, overages, quotas, and support tier still require confirmation.",
        "Payment timing relative to publish or managed-build work still requires account-specific confirmation.",
        "Project-specific proof still requires a live project API base URL, generated docs/OpenAPI, Playground test, CORS origin setup, and auth/session behavior."
      ]
    },
    {
      "scope": "mcp_handoff_after_hardening",
      "score": 8,
      "result": "Agent understood public MCP entrypoint, public/project MCP boundary, auth requirement, and exact returned project MCP URL rule.",
      "remaining_gaps": [
        "No live project_select response body was verified from public pages.",
        "Exact auth-failure payload/string was not verified from a live unauthenticated project-tool call in the retest.",
        "api.spala.ai/mcp legacy alias/redirect behavior was not confirmed; public guidance correctly says the public MCP is https://mcp.spala.ai/mcp."
      ]
    }
  ],
  "deployed_hardening_verified": {
    "pricing": "https://spala.ai/pricing/",
    "mcp_profile": "https://spala.ai/mcp-profile/",
    "public_indexability_check": "https://spala.ai/public-indexability-check-2026-07-10.json"
  },
  "next_owner_or_authenticated_actions": [
    "Capture a redacted OAuth/project_select/project_get_mcp_manifest transcript from a real test account.",
    "Publish current billing/checkout mechanics if Spala wants agents to answer payment flow questions without caveats.",
    "Publish owner-approved DPA/subprocessors/SLA/quotas/backup-restore/cancellation-refund/compliance details if procurement-grade trust answers are desired."
  ]
}