{"success":true,"trust":{"controls":[{"control":"API request signing + nonce replay protection","coverage":"Partner endpoints","evidence_url":"/developers/api-lifecycle-policy","owner":"platform"},{"control":"Public system status + incident feed","coverage":"All public uptime checks","evidence_url":"/status","owner":"ops"},{"control":"Tamper-evident critical export manifest","coverage":"Audit/status evidence bundles","evidence_url":"/api/public/critical-exports/manifest.json","owner":"security"},{"control":"Backup encryption + restore drill readiness","coverage":"Operational recovery controls","evidence_url":"/api/public/readiness/backup-encryption","owner":"ops"}],"incident_response_commitments":[{"commitment":"Critical incidents acknowledged immediately by on-call owner.","name":"Initial acknowledgement"},{"commitment":"Status page incidents include active/resolved timeline entries.","name":"Public status updates"},{"commitment":"Attach signed manifest/checksum evidence for critical exports.","name":"Post-incident evidence"}],"source_file":"/home/vets-coin/flask_api/config/trust_center_controls.json","test_commitments":[{"commitment":"Run endpoint smoke checks daily and on release preflight.","name":"Smoke test cadence"},{"commitment":"Validate generated specs/changelog before docs publish.","name":"OpenAPI contract checks"},{"commitment":"Execute restore drill job on scheduled cadence with evidence artifact.","name":"Backup restore drill"}],"updated_at_utc":"2026-03-10T22:15:00Z"},"trust_manifest_url":"/trust.json","trust_score_url":"/api/public/trust-score.json"}