{
  "schemaVersion": 1,
  "type": "resource",
  "id": "saaspo",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "blocked",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "Public primary descriptions were found, but two fresh browser visits were blocked by a verification page. No catalog runtime pass is claimed.",
    "reportUrl": "/design-evaluations/resource-saaspo.json",
    "identity": {
      "target": "https://saaspo.com/",
      "version": "Unversioned public page observed 2026-10-19",
      "integrity": "SHA-256 24afddbca9d503df8ef33a9030f23e7b45782d22ca938a6691dbd0b8391356b5 of one initial HTML response (6094 bytes). This does not fingerprint the entire application or its dependencies."
    },
    "environment": [
      "Windows; Chrome 155.0.8059.82 headless via Playwright, fresh isolated contexts with a 1365 × 900 viewport.",
      "Reduced motion requested. GET/HEAD requests allowed; other methods and WebSocket connections blocked.",
      "No owner browser profile, account, credentials, purchase, upload, private fixture or service write."
    ],
    "tests": [
      {
        "name": "Public endpoint",
        "mode": "http",
        "method": "Open saaspo.com in two fresh browser contexts.",
        "result": "blocked",
        "observation": "Both checks returned HTTP 403 and a Cloudflare verification page."
      },
      {
        "name": "Primary-source discovery",
        "mode": "source-review",
        "method": "Review search-indexed pages on the publisher's domain.",
        "result": "pass",
        "observation": "The indexed primary text describes landing-page and section-reference browsing; it does not establish live availability."
      },
      {
        "name": "Catalog interaction",
        "mode": "browser",
        "method": "Use live filters or open a reference entry.",
        "result": "blocked",
        "observation": "The catalog UI was unavailable behind the verification response; no bypass was attempted."
      }
    ],
    "security": {
      "scope": "Passive observation of the public verification response and search-indexed primary descriptions.",
      "findings": [
        {
          "level": "info",
          "basis": "observed",
          "title": "Verification boundary respected",
          "detail": "The response was an access-verification page. Challenge POST requests were blocked by the test guard, and the check did not attempt to solve or bypass it."
        },
        {
          "level": "caution",
          "basis": "observed",
          "title": "Headers belong to the challenge",
          "detail": "Observed CSP, frame and content-type protections describe the verification response; they cannot be generalized to the catalog application."
        }
      ],
      "limits": [
        "Passive public-page observations and the stated bounded sample only; no exploitation, authenticated authorization, backend, retention or comprehensive dependency audit.",
        "Request blocking changes application behavior; no secure/safe certification is implied."
      ]
    },
    "practicalCaveats": [
      "Treat this as a documented resource with an unresolved live-access check.",
      "Verify current reference contents and reuse terms through normal access before relying on them."
    ],
    "limits": [
      "No live catalog, filtering, asset download, account or paid workflow could be tested.",
      "The GET/HEAD-only guard can affect verification behavior; the block is specific to this test environment."
    ],
    "sources": [
      {
        "label": "Publisher catalog; browser verification blocked",
        "url": "https://saaspo.com/"
      },
      {
        "label": "Publisher sections; indexed primary description",
        "url": "https://saaspo.com/sections"
      }
    ]
  }
}