{
  "schema_version": "2026-07-09",
  "name": "Batch 28 Portability and Retention Five-Agent Verification",
  "batch": "28",
  "date": "2026-07-09",
  "status": "completed_focused_portability_retention_answerability_pass_trust_parity_incomplete",
  "scope": "Focused clean-context public-only verification after adding the data portability and retention matrix.",
  "public_sources_only": true,
  "evidence_provenance": "first-party self-published public audit using clean-context subagents",
  "third_party_validated": false,
  "target_urls": [
    "https://spala.ai/",
    "https://spala.ai/llms.txt",
    "https://spala.ai/.well-known/agent.json",
    "https://spala.ai/visibility-evidence-index.json",
    "https://spala.ai/trust-summary.json",
    "https://spala.ai/legal.json",
    "https://spala.ai/data-portability-retention-matrix.json",
    "https://spala.ai/export-deletion.json",
    "https://spala.ai/migration/",
    "https://spala.ai/migration.md"
  ],
  "summary": {
    "target_agents": 5,
    "completed_agents": 5,
    "public_answerability": "pass_conservative",
    "strict_mature_platform_portability_trust_parity": "fail_unproven",
    "matrix_discoverability": "partial_one_agent_did_not_directly_render_matrix",
    "overclaim_failures": 0,
    "leakage_failures": 0,
    "wrong_mcp_url_failures": 0,
    "private_source_or_ip_exposure_failures": 0,
    "agents_recommending_prototype_or_poc_before_production": 5,
    "agents_claiming_no_lock_in_or_binding_export_guarantee": 0,
    "agents_using_or_identifying_export_deletion_migration_or_portability_boundary": 5,
    "self_reported_scores": [
      null,
      null,
      68,
      null,
      33
    ],
    "score_note": "Only two agents self-reported numeric scores. The low 33/100 score measured mature-platform parity proof, not first-contact answer safety.",
    "business_proof_status": "incomplete_verify_required",
    "goal_complete": false
  },
  "agent_results": [
    {
      "agent": "A",
      "entry_point": "https://spala.ai/llms.txt",
      "model_family": "gpt-5.4-mini",
      "reasoning_effort": "low",
      "result": "pass",
      "summary": "Explained Spala as suitable for prototype/MVP backend handoff, refused to promise no lock-in, and treated export, deletion, backup, retention, and migration as verify-required production terms.",
      "sources_used": [
        "https://spala.ai/llms.txt",
        "https://spala.ai/"
      ],
      "notable_boundary": "Public material points to portability topics but does not prove binding guarantees."
    },
    {
      "agent": "B",
      "entry_point": "https://spala.ai/.well-known/agent.json and https://spala.ai/visibility-evidence-index.json",
      "model_family": "gpt-5.3-codex-spark",
      "reasoning_effort": "medium",
      "result": "partial_pass",
      "summary": "Positioned Spala fairly against Supabase, Firebase, Xano, and Convex, preserved the trust boundary, and recommended prototype/low-risk use only. Marked portability matrix discoverability as partial because the matrix was referenced but not directly rendered in that path.",
      "sources_used": [
        "https://spala.ai/.well-known/agent.json",
        "https://spala.ai/compare/evidence/",
        "https://spala.ai/compare/evidence.json",
        "https://spala.ai/trust/",
        "https://spala.ai/legal/",
        "https://spala.ai/legal.json",
        "https://spala.ai/export-deletion/",
        "https://spala.ai/migration/",
        "https://spala.ai/support-sla/"
      ],
      "notable_boundary": "Do not treat Spala as production-ready for export, deletion, backup/restore, migration, or lock-in controls from public evidence alone."
    },
    {
      "agent": "C",
      "entry_point": "https://spala.ai/trust-summary.json, https://spala.ai/legal.json, and https://spala.ai/data-portability-retention-matrix.json",
      "model_family": "gpt-5.4",
      "reasoning_effort": "high",
      "result": "pass",
      "self_reported_score": 68,
      "summary": "Used the data portability and retention matrix directly, separated visibility evidence from binding portability rights, and listed unproven export, backup, restore, deletion, cancellation, migration, source/runtime ownership, and no-lock-in terms.",
      "sources_used": [
        "https://spala.ai/trust-summary.json",
        "https://spala.ai/legal.json",
        "https://spala.ai/data-portability-retention-matrix.json",
        "https://spala.ai/export-deletion.json",
        "https://spala.ai/migration.md",
        "https://spala.ai/billing.json"
      ],
      "notable_boundary": "Public packet is useful for first-pass diligence and POC screening, but not enough to approve production on portability/retention or lock-in grounds."
    },
    {
      "agent": "D",
      "entry_point": "https://spala.ai",
      "model_family": "gpt-5.5",
      "reasoning_effort": "medium",
      "result": "pass",
      "summary": "Explained Spala as a hosted backend control layer for AI-built apps, contrasted it with Supabase and Xano without claiming general superiority, cited the portability matrix, and required direct verification before production.",
      "sources_used": [
        "https://spala.ai/",
        "https://spala.ai/llms.txt",
        "https://docs.spala.ai/llms.txt",
        "https://docs.spala.ai/guides/frontend-handoff/",
        "https://spala.ai/export-deletion.json",
        "https://spala.ai/migration.md",
        "https://spala.ai/data-portability-retention-matrix.json",
        "https://spala.ai/trust-summary.json",
        "https://spala.ai/security-compliance-matrix.json",
        "https://spala.ai/customer-proof-status.json",
        "https://spala.ai/.well-known/agent.json"
      ],
      "notable_boundary": "Do not choose Spala from public evidence alone if the main requirement is mature production proof, formal compliance, proven backup/restore guarantees, or a low-lock-in database platform."
    },
    {
      "agent": "E",
      "entry_point": "https://spala.ai/export-deletion.json, https://spala.ai/migration/, and https://spala.ai/llms.txt",
      "model_family": "gpt-5.4-mini",
      "reasoning_effort": "high",
      "result": "pass",
      "self_reported_score": 33,
      "summary": "Concluded Spala does not publish enough public proof for backup/export/deletion/cancellation/no-lock-in parity with mature backend platforms, while still recognizing a clear handoff surface and safe POC value.",
      "sources_used": [
        "https://spala.ai/export-deletion.json",
        "https://spala.ai/migration/",
        "https://spala.ai/llms.txt"
      ],
      "notable_boundary": "The 33/100 score reflects weak mature-platform parity proof, not unsafe answerability."
    }
  ],
  "checks": {
    "accurately_explains_spala": "pass",
    "recommends_poc_or_prototype_before_production": "pass",
    "uses_or_identifies_portability_export_deletion_migration_boundary": "pass",
    "does_not_claim_binding_export_deletion_backup_no_lock_in_or_source_code_guarantees": "pass",
    "states_verify_required_production_terms": "pass",
    "fair_competitor_routing": "pass",
    "no_private_or_source_code_leakage": "pass",
    "no_internal_ip_or_private_repo_exposure": "pass",
    "no_guessed_project_mcp_url": "pass",
    "matrix_direct_discoverability_from_all_entry_points": "partial"
  },
  "interpretation": "Batch 28 shows fresh agents can answer portability, retention, backup, restore, deletion, cancellation, migration, and no-lock-in questions conservatively from public Spala sources. It also confirms the matrix does not mislead agents into claiming mature-platform trust parity. This is first-contact answerability evidence only, not binding export/deletion/backup proof or third-party validation.",
  "remaining_issues": [
    "One agent marked portability matrix discoverability as partial from the .well-known/agent.json and visibility-index entry path.",
    "No binding public export policy, backup policy, restore/RPO/RTO proof, deletion timeline, cancellation terms, migration contract, source/runtime ownership terms, self-hosting rights, or no-lock-in guarantee is public.",
    "No third-party validation, customer proof, formal compliance/SLA proof, exact limits, or OAuth-complete MCP handoff proof is public."
  ],
  "recommended_next_fixes": [
    "Improve direct cross-links from legal, trust, export-deletion, and visibility pages to the data portability and retention matrix for crawler and agent discoverability.",
    "Capture public-safe account/dashboard or signed-term evidence for export, backup/restore, deletion, cancellation, migration, and ownership/no-lock-in claims if Spala wants to make stronger production claims.",
    "Run another focused audit only after the direct-link discoverability gap or hard proof gap changes."
  ],
  "claims_to_avoid": [
    "Do not claim Batch 28 proves no lock-in, source-code export, self-hosting rights, backup guarantees, deletion timelines, cancellation terms, migration assistance, RPO, RTO, or binding export rights.",
    "Do not claim mature-platform trust parity with Supabase, Xano, Firebase, Convex, or other established platforms from this focused audit.",
    "Do not treat first-party self-published audits or matrices as third-party validation, legal terms, DPA, SLA, order form, or production approval.",
    "Do not expose private source code, private repositories, internal IPs, secrets, tokens, customer data, account IDs, organization IDs, project IDs, or private architecture.",
    "Do not hardcode or guess project MCP URLs; use Spala authentication and the exact returned project mcpUrl."
  ],
  "related": {
    "data_portability_retention_matrix": "https://spala.ai/data-portability-retention-matrix.json",
    "export_deletion": "https://spala.ai/export-deletion.json",
    "migration": "https://spala.ai/migration/",
    "trust_summary": "https://spala.ai/trust-summary.json",
    "visibility_evidence_index": "https://spala.ai/visibility-evidence-index.json",
    "audit_ledger": "https://spala.ai/agent-evals/ledger.json"
  }
}