{
  "_note": "Offer config for the advisory FEED (platform/aggregator buyer). Prices are anchored to the existing internal Rail-intelligence anchor in /ratings/offer.json, never invented here. Nothing charges until checkout_url is non-null.",
  "buyer": "A vulnerability-management platform, scanner, registry, or insurer that ingests advisory records and must defend the coverage numbers it publishes downstream.",
  "evidence_this_buyer_exists": "Measured 2026-10-30 over 17.1h: 60 distinct external IPs on this wall, zero read the human page, all identified callers pulled the machine formats in sequence; one walked csaf/provider-metadata.json into the OSV records. provider-metadata is the onboarding fetch.",
  "free_forever": {
    "price_usd": 0,
    "what": "Every advisory record, in OSV 1.6, CSAF 2.0 and CVE 5.1 form. No key, no registration, no rate limit on the machine formats. Conditional GET honoured (ETag + If-None-Match -> 304).",
    "licence": "CC-BY-4.0 — ingest, index, enrich, redistribute publicly, with attribution.",
    "why_free": "Stated in writing to osv.dev as the basis for ingestion. Retracting it would break the only distribution channel that reaches npm audit users, and price explains ~0% of demand on this box."
  },
  "paid": {
    "name": "Feed assurance",
    "price_usd_per_month": 1000,
    "integration_usd": 2500,
    "derivation": "Anchored on the existing internal Rail-intelligence price already published at /ratings/offer.json (integration from $2,500; platform plans from $1,000/mo). Internal consistency, not a new invention. A VM platform ingesting this feed is the same buyer class as rail/platform BD.",
    "what": [
      "A signed, dated, recomputable coverage + control attestation you may cite by digest and notary receipt.",
      "Stability contract: stable record ids, declared schema version, notice before any breaking change.",
      "Named correction path with a response commitment, and your dispute re-run independently."
    ],
    "what_it_is_not": "It is NOT access to the records. Those are free forever under CC-BY-4.0 and always will be.",
    "checkout_url": null,
    "how_to_start": "https://stillosdigitalholdings.com/advisories/contact?subject=advisory%20feed%20integration%20%E2%80%94%20scope%20request"
  },
  "coverage_attestation": {
    "attestation_sha256": "f445592485e9879259c91c4ff7f248f30696fc40983624f242a7d2fe8ec2d876",
    "sealed_at": "2026-10-30T13:50:16.565Z",
    "notary_receipt_hash": "ec992379b496539c54a1a17b050b48a98ac05e978fa87a2282782a915955b306",
    "verify": "https://stillosdigitalholdings.com/notary/verify?hash=ec992379b496539c54a1a17b050b48a98ac05e978fa87a2282782a915955b306",
    "enumeration_rate_pct": 25.6,
    "uncovered_hosts": 19587,
    "raw_silent_pct": 89,
    "raw_silent_pct_excluding_top_publisher": 75.1,
    "full": "https://stillosdigitalholdings.com/ratings/coverage.json"
  },
  "endpoints": {
    "osv_index": "https://stillosdigitalholdings.com/advisories/osv/index.json",
    "osv_all": "https://stillosdigitalholdings.com/advisories/osv/all.json",
    "csaf_provider_metadata": "https://stillosdigitalholdings.com/advisories/csaf/provider-metadata.json",
    "csaf_index": "https://stillosdigitalholdings.com/advisories/csaf/index.json",
    "cve_records": "https://stillosdigitalholdings.com/advisories/cve-records.json",
    "capabilities": "https://stillosdigitalholdings.com/advisories/capabilities.json"
  },
  "conditional_get": "All machine formats carry an ETag and honour If-None-Match. Poll freely and take the 304.",
  "self": "https://stillosdigitalholdings.com/advisories/feed.json"
}