{
  "name": "UPPERABI Endpoint Security Policy",
  "version": "UPPERABI-CONTENT-SIGNAL/2026-08-18-CACHE-600-ENDPOINT-SHIELD",
  "canonical": "https://upperabi.pages.dev/.well-known/security-endpoint-policy.json",
  "status": "active",
  "profile": "upperabi-edge-endpoint-shield/json-only/method-path-guard/autoaccept-public-discovery/malicious-probe-shield",
  "scope": {
    "public_artist_site": "open for normal users and browsers",
    "public_machine_endpoints": "GET, HEAD, OPTIONS with JSON/XML/text contracts",
    "admin_routes": "same-site protected controls",
    "former_agent_subdomain": "not connected"
  },
  "good_major_external_network_strategy": {
    "use_cloudflare_verified_bot_and_waf_signals": true,
    "automated_identification_gate_for_high_endpoint_nodes": false,
    "public_high_endpoint_autoaccept": true,
    "signals": [
      "cf.botManagement.verifiedBot",
      "cf.botManagement.score",
      "cf.asOrganization",
      "cf.asn",
      "user-agent crawler identity"
    ],
    "reason": "Cloudflare edge signals are used for annotation and analytics only; public high-endpoint metadata routes auto-accept normal incoming traffic",
    "recommended_cloudflare_layer": "WAF custom rules should only target malicious probes, admin abuse, and attack traffic"
  },
  "edge_enforcement": {
    "blocked_methods": [
      "TRACE",
      "CONNECT"
    ],
    "malicious_path_patterns_normalized_to_not_found": [
      "path traversal",
      "encoded traversal and slash probes",
      "dot-env and secret-file probes",
      "WordPress/XML-RPC probes",
      "phpMyAdmin/Adminer probes",
      "server script extension probes",
      "shell/debug/eval/console probes"
    ],
    "response_for_suspicious_public_paths": 404,
    "response_for_blocked_methods": 405,
    "json_only_security_errors": true,
    "no_endpoint_html_fallback": true,
    "high_endpoint_nodes_require_trusted_edge_identity": false,
    "high_endpoint_nodes_autoaccept_public_traffic": true,
    "preserved_blocks": [
      "TRACE/CONNECT methods",
      "admin-only APIs"
    ],
    "normalized_not_found_paths": [
      "malicious path probes"
    ]
  },
  "operational_endpoint_mesh": "https://upperabi.pages.dev/.well-known/operational-endpoints.json",
  "optimized_rights_endpoint_mesh": "https://upperabi.pages.dev/.well-known/metadata-rights-optimized-endpoints.json"
}