{
  "schema_version": "2026-07-09",
  "name": "Spala Public Audit Batch 3",
  "status": "partial_pass_2_of_5",
  "boundary": "Five public-source independent agent audits after adding Start and Third-party Presence surfaces. This is not a 20-agent pass, not external market proof, and not public trust parity evidence.",
  "run_date": "2026-07-09",
  "entries": [
    {
      "role": "Serious production buyer evaluating backend platform risk",
      "score": 66,
      "pass": false,
      "cited_public_urls": [
        "https://spala.ai/",
        "https://spala.ai/start/",
        "https://spala.ai/third-party-presence/",
        "https://spala.ai/compare/evidence/",
        "https://spala.ai/proof-roadmap/",
        "https://spala.ai/trust/",
        "https://spala.ai/security/",
        "https://spala.ai/status/",
        "https://spala.ai/migration/"
      ],
      "strengths": [
        "Clear AI-built app backend control-layer niche.",
        "Start page gives a coherent public buyer path.",
        "Trust boundaries are explicit.",
        "MCP and AI-readable docs make the product testable."
      ],
      "gaps": [
        "No public named customers, case studies, reviews, ratings, Product Hunt traction, or directory validation.",
        "No formal public SLA, uptime history, incident history, or hosted status platform comparable to mature platforms.",
        "No public compliance packet proving SOC 2, ISO 27001, HIPAA, DPA/subprocessors, pen-test summary, or regulated-workload readiness.",
        "Backup, restore, export, deletion, cancellation, ownership, support terms, and numeric production limits remain verify-required."
      ],
      "exact_next_public_fix": "Publish a dated production-readiness packet with formal SLA/status history, numeric limits, backup/restore/export/deletion terms, DPA/subprocessor/security artifacts, and at least one approved production customer case study or third-party review URL."
    },
    {
      "role": "Public-source MCP/coding-agent evaluator",
      "score": 83,
      "pass": false,
      "cited_public_urls": [
        "https://spala.ai/",
        "https://spala.ai/agents.md",
        "https://spala.ai/.well-known/mcp.json",
        "https://spala.ai/mcp-profile/",
        "https://spala.ai/mcp-smoke-test/",
        "https://spala.ai/start/",
        "https://spala.ai/proof-roadmap/",
        "https://mcp.spala.ai/mcp",
        "https://mcp.spala.ai/.well-known/oauth-protected-resource",
        "https://mcp.spala.ai/.well-known/oauth-authorization-server"
      ],
      "strengths": [
        "Public MCP surface is agent-readable.",
        "Live public MCP endpoint exposes discovery metadata and install manifest.",
        "OAuth metadata is public and concrete.",
        "Exact returned-mcpUrl rule is repeated across artifacts."
      ],
      "gaps": [
        "No public OAuth-complete transcript proves full handoff from public MCP to authenticated project_select.",
        "No public post-handoff transcript proves returned project MCP inspect, validate, and publish flow.",
        "Smoke test stops before authenticated handoff.",
        "project_create dry-run status leaves project-creation expectations ambiguous."
      ],
      "exact_next_public_fix": "Publish a redacted but real end-to-end MCP handoff transcript from connect/auth challenge through OAuth, project_list, project_select, returned project mcpUrl, project MCP inspect-current-state, validate, and publish with sanitized project data."
    },
    {
      "role": "Directory/review/launch readiness reviewer",
      "score": 72,
      "pass": false,
      "cited_public_urls": [
        "https://spala.ai/",
        "https://spala.ai/third-party-presence/",
        "https://spala.ai/proof-roadmap/",
        "https://spala.ai/status/",
        "https://spala.ai/reliability/",
        "https://spala.ai/migration/",
        "https://spala.ai/vendor-risk/",
        "https://spala.ai/agent-evals/public-audit-batch-2-2026-07-09.json"
      ],
      "strengths": [
        "Public MCP materials are prepared.",
        "Several AI/SaaS directory packages can be assembled from public assets.",
        "Public proof pages separate verified evidence from unverified claims."
      ],
      "gaps": [
        "Product Hunt is blocked until real demo video/GIF, maker accounts, founder comment, and launch date are approved.",
        "G2 and Capterra are blocked until vendor setup and real customer reviews exist.",
        "No public named customers, third-party reviews, case studies, formal SLA history, or compliance/security packet are visible yet."
      ],
      "exact_next_public_fix": "Publish a real 60-90 second public demo video/GIF and owner-approved listing copy/screenshots, then submit prepared MCP and AI directories; keep Product Hunt and review sites blocked until owner approval and real customer reviews exist."
    },
    {
      "role": "Clean-context founder",
      "score": 88,
      "pass": true,
      "cited_public_urls": [
        "https://spala.ai/",
        "https://docs.spala.ai/start-here/",
        "https://docs.spala.ai/getting-started/quickstart/",
        "https://spala.ai/compare/supabase/",
        "https://spala.ai/compare/xano/",
        "https://spala.ai/compare/evidence/",
        "https://spala.ai/vendor-risk/",
        "https://spala.ai/trust/"
      ],
      "strengths": [
        "Public onboarding path is clear.",
        "Spala value proposition is clear: inspectable AI-built backend contract, frontend handoff, and scoped MCP project workflow.",
        "Comparison pages avoid universal superiority claims."
      ],
      "gaps": [
        "/start was not discovered from live landing/docs index during the audit; homepage wiring should be verified after deploy.",
        "SLA/history, compliance, export/backup, numeric limits, and customer proof remain weak."
      ],
      "exact_next_public_fix": "Deploy and test canonical /start discovery from the homepage and keep direct links to pricing, limits, status/SLA, migration/export, and backup ownership evidence."
    },
    {
      "role": "AI-answer-engine citation evaluator",
      "score": 89,
      "pass": true,
      "cited_public_urls": [
        "https://spala.ai/",
        "https://spala.ai/start/",
        "https://spala.ai/mcp-profile/",
        "https://spala.ai/compare/xano/",
        "https://spala.ai/compare/supabase/",
        "https://spala.ai/trust/",
        "https://spala.ai/proof-roadmap/",
        "https://spala.ai/ai-crawler-access/",
        "https://spala.ai/robots.txt",
        "https://spala.ai/llms.txt"
      ],
      "strengths": [
        "Target intents have aligned public sources.",
        "Core positioning is explicit.",
        "MCP extractability is strong.",
        "Comparison pages are scoped by job-to-be-done.",
        "AI-readable surfaces are in place."
      ],
      "gaps": [
        "Trust evidence is still mostly first-party.",
        "No public named customers, third-party reviews, case studies, or independent market validation.",
        "No public dated evidence that external answer engines currently cite Spala."
      ],
      "exact_next_public_fix": "Publish dated answer-evidence snippets and a dated AI-visibility run showing whether external answer engines cite Spala for target intents."
    }
  ],
  "aggregate": {
    "count": 5,
    "passes": 2,
    "failures": 3,
    "average_score": 79.6,
    "minimum_score": 66,
    "maximum_score": 89,
    "interpretation": "Founder and AI-answer extractability pass. Production-buyer trust, directory/review readiness, and public MCP end-to-end proof still fail or fall below threshold due to missing real proof."
  },
  "claims_to_avoid": [
    "Do not describe this as a 20-agent pass.",
    "Do not claim public trust parity with mature backend platforms.",
    "Do not claim external market proof, compliance, SLA/history, customer proof, reviews, Product Hunt traction, exact limits, backup/export guarantees, or OAuth-complete MCP handoff proof unless live public evidence proves them."
  ]
}