{
  "schema_version": "2026-07-10",
  "name": "Spala Fresh-Agent Visibility Foundation Audit",
  "status": "mixed_progress_followup_start_pricing_and_mcp_bootstrap_hardening_deployed",
  "generated_at": "2026-07-10",
  "purpose": "Record fresh-context agent understanding after the visibility foundation, indexability, screenshot, Lighthouse, directory, and MCP server-card batches.",
  "boundary": "This is a three-scope fresh-context audit, not a 20-agent broad pass, not customer proof, not Search Console proof, not production trust parity, and not OAuth-complete project MCP proof.",
  "summary": {
    "agents_completed": 3,
    "agents_errored": 1,
    "average_score": 6.67,
    "scores": {
      "onboarding_start_pay_create": 6,
      "mcp_handoff": 8,
      "competitor_trust_pricing": 6
    },
    "passes": 1,
    "needs_hardening": 2
  },
  "findings": [
    {
      "scope": "onboarding_start_pay_create",
      "score": 6,
      "result": "Product category and user fit are understandable, but the start/register/pay/create path is scattered and pricing wording can look inconsistent.",
      "agent_understood": [
        "Spala is a hosted backend builder/control layer for AI-built apps.",
        "Users can create/sign in at dashboard.spala.ai, create/open a project, use Lite Mode/Copilot, test in Playground, and publish.",
        "Production users should verify API base URL, generated docs, published state, CORS, secrets, auth/security, and project configuration."
      ],
      "gaps": [
        "Pricing path is not cleanly explained as self-serve versus service-led.",
        "Signup-to-pay path is not explicit.",
        "Draft versus published API/runtime is documented but easy to miss.",
        "Production readiness is spread across docs instead of one checklist."
      ]
    },
    {
      "scope": "mcp_handoff",
      "score": 8,
      "result": "Public MCP versus project MCP boundary is clear enough. Agents understand to start at mcp.spala.ai/mcp, authenticate, call project_list/project_select, and switch to the exact returned project MCP URL.",
      "agent_understood": [
        "Public MCP is for discovery, docs/templates/addons, OAuth metadata, and project handoff.",
        "Project MCP is scoped to one selected project and performs inspect/validate/apply/publish work.",
        "api.spala.ai/mcp is not the public MCP endpoint.",
        "Project selection and project changes are non-executable without owner/user auth."
      ],
      "gaps": [
        "Auth handoff lacks a concrete client-visible OAuth transcript or fallback behavior.",
        "project_list/project_select returned payload shape is not shown in one canonical guide.",
        "Boundary is clear but spread across multiple pages."
      ]
    },
    {
      "scope": "competitor_trust_pricing",
      "score": 6,
      "result": "Comparison pages are useful and conservative, but pricing/security/limits/export evidence is not enough for a strong production recommendation.",
      "agent_understood": [
        "Compare pages are framed as job-fit guidance, not blanket superiority claims.",
        "Pages advise verification of pricing, security, compliance, and data terms before production.",
        "Spala is positioned as an alternative for AI-built-app backend handoff, not a drop-in replacement for every competitor."
      ],
      "gaps": [
        "Pricing lacks a fully explicit public plan table, unit metric, overage policy, cancellation/refund terms.",
        "Security lacks public SOC 2/ISO/HIPAA/GDPR proof, DPA, subprocessors, incident response, and SLA details.",
        "Limits lack numeric quotas for projects, rate limits, payload size, storage, sessions, files, realtime, MCP scope, and support.",
        "Export/deletion lacks proof of full data export, source export, backup/restore guarantees, deletion timing, cancellation terms, and migration help."
      ]
    }
  ],
  "next_fixes": [
    "Add one clear start/register/pay/create checklist to pricing/start pages. Deployed to https://spala.ai/pricing/ after this audit.",
    "Clarify that pricing is service-led today: free review, Starter Launch from $990/year, managed build custom, final scope confirmed before purchase. Deployed to https://spala.ai/pricing/ after this audit.",
    "Add a canonical MCP bootstrap section with project_list/project_select payload examples and unauthenticated fallback behavior. Deployed to https://spala.ai/mcp-profile/ after this audit.",
    "Keep trust/security/limits/export claims conservative unless owners provide actual terms, DPA, subprocessors, SLA, quotas, backup/restore, and cancellation policy."
  ],
  "followup_deploy": {
    "status": "deployed",
    "pricing_page": "https://spala.ai/pricing/",
    "mcp_profile": "https://spala.ai/mcp-profile/",
    "remaining_unresolved": [
      "Procurement-grade trust proof still requires owner-provided DPA, subprocessors, SLA, numeric quotas, backup/restore, cancellation/refund policy, and compliance evidence.",
      "A fresh retest after the follow-up deploy is still needed before claiming higher scores."
    ]
  },
  "related_evidence": {
    "visibility_foundation_report": "https://spala.ai/visibility-foundation-report-2026-07-10/",
    "public_indexability_check": "https://spala.ai/public-indexability-check-2026-07-10.json",
    "lighthouse_visibility_audit": "https://spala.ai/lighthouse-visibility-2026-07-10.json",
    "mcp_server_card": "https://mcp.spala.ai/.well-known/mcp/server-card.json"
  }
}