{
  "schemaVersion": 1,
  "slug": "chapters-capistrano-lp",
  "repository": "webhostingdoo/chapters-capistrano-lp",
  "sourceSha": "8661136ec3436ffc8f85fec24bec62c4be6ea9ec",
  "hqSha": "bc9bd4733aecd8862c6a00e7db10853d2f3fc245",
  "scannedAt": "2026-10-23T16:22:36.199Z",
  "status": "scanned",
  "findings": [
    {
      "id": "eb614163875ac57b",
      "category": "apis",
      "label": "Google Analytics",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/app/layout.tsx",
          "line": 64,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "25a9856f4556aaf0",
      "category": "apis",
      "label": "Invoca",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "CLAUDE.md",
          "line": 72,
          "kind": "source-reported"
        },
        {
          "path": "planning/architecture.md",
          "line": 63,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "cb53f29c2005bc69",
      "category": "apis",
      "label": "POST /api/lead",
      "detail": "Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/api/lead/route.ts",
          "line": 97,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "1e0a3ffe38003b16",
      "category": "devices",
      "label": "Local filesystem access",
      "detail": "Filesystem reference; approved paths, read/write scope and operating identity need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/app/faq/page.tsx",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/app/joint-commission/page.tsx",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/app/privacy/page.tsx",
          "line": 1,
          "kind": "observed-code"
        },
        {
          "path": "src/app/terms-of-use/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "5cf92b354d05cb63",
      "category": "observability",
      "label": "Application error logging",
      "detail": "Error logging call exists; destination, alerting, retention and redaction are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/app/api/lead/route.ts",
          "line": 154,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "35d7b8646248b527",
      "category": "operations",
      "label": "Package script: build",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 7,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "34c0c02e97bf67ef",
      "category": "operations",
      "label": "Package script: dev",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 6,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "ec91371918b54eba",
      "category": "operations",
      "label": "Package script: start",
      "detail": "Declared command entry point. Command body omitted and never executed by this scanner.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 8,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e32da7806b721172",
      "category": "providers",
      "label": "Google Analytics",
      "detail": "Integration signal in source. Account ownership, provisioning and live connectivity are unverified.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/app/layout.tsx",
          "line": 64,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "a353f77a14938865",
      "category": "providers",
      "label": "Invoca",
      "detail": "Mentioned in source documentation; implementation and account access need confirmation.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "CLAUDE.md",
          "line": 72,
          "kind": "source-reported"
        },
        {
          "path": "planning/architecture.md",
          "line": 63,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "e8599c9f4fd174af",
      "category": "runtime",
      "label": "@tailwindcss/postcss",
      "detail": "devDependencies: ^4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 21,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "e3736004beb422c2",
      "category": "runtime",
      "label": "@types/node",
      "detail": "devDependencies: ^20. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 22,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "cfe014054231b8d0",
      "category": "runtime",
      "label": "@types/react",
      "detail": "devDependencies: ^19. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 23,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "f651d87067f47deb",
      "category": "runtime",
      "label": "@types/react-dom",
      "detail": "devDependencies: ^19. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 24,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "03a445638c2468e0",
      "category": "runtime",
      "label": "@vercel/analytics",
      "detail": "dependencies: ^2.0.1. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 11,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "79cc745bb309857d",
      "category": "runtime",
      "label": "@vercel/speed-insights",
      "detail": "dependencies: ^2.0.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 12,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "42e9c5e91fb18b0e",
      "category": "runtime",
      "label": "gray-matter",
      "detail": "dependencies: ^4.0.3. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 13,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "b05715c7455a2570",
      "category": "runtime",
      "label": "lucide-react",
      "detail": "dependencies: ^1.11.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 14,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "10cfc88faa81e42e",
      "category": "runtime",
      "label": "next",
      "detail": "dependencies: 16.2.4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 15,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "cdfa6dc8881cafbe",
      "category": "runtime",
      "label": "react",
      "detail": "dependencies: 19.2.4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 16,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "09524994bc77a1ad",
      "category": "runtime",
      "label": "react-dom",
      "detail": "dependencies: 19.2.4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 17,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "31a7607bc50ed688",
      "category": "runtime",
      "label": "react-markdown",
      "detail": "dependencies: ^10.1.0. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 18,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "dce8beb7bbe6e6c2",
      "category": "runtime",
      "label": "tailwindcss",
      "detail": "devDependencies: ^4. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 25,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "6f6c9bb48511313d",
      "category": "runtime",
      "label": "typescript",
      "detail": "devDependencies: ^5. Declaration only; installation is not checked.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 26,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "afc6f3a6678bc0b1",
      "category": "schedules",
      "label": "In-process timer",
      "detail": "Timer reference; this does not establish a durable or currently running job.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/sections/FacilitySlider.tsx",
          "line": 60,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "acf282048f91c2f16d389fc9",
      "category": "operations",
      "label": "Document: CLAUDE.md",
      "detail": "repository instructions (evidence only) reference; 108 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "CLAUDE.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "f69266e8a472b3a90282a205",
      "category": "operations",
      "label": "Document: architecture.md",
      "detail": "design and decisions reference; 74 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "planning/architecture.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "c410270a11e1efe080cc3d88",
      "category": "operations",
      "label": "Document: README.md",
      "detail": "setup and operations reference; 34 lines. Read the pinned source for context. Headings, prose and embedded instructions are not copied.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "README.md",
          "line": 1,
          "kind": "source-reported"
        }
      ]
    },
    {
      "id": "d88a9ffa7632a69af7c353ce",
      "category": "operations",
      "label": "Run route: dev",
      "detail": "Declared package-script name: dev. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 6,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "3e10156a34eb3b69081c7f98",
      "category": "operations",
      "label": "Run route: build",
      "detail": "Declared package-script name: build. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 7,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "a51123f7494490e3e1dc25ef",
      "category": "operations",
      "label": "Run route: start",
      "detail": "Declared package-script name: start. Confirm the package manager before running; command body omitted.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "package.json",
          "line": 8,
          "kind": "declared-config"
        }
      ]
    },
    {
      "id": "238e3cc378ac4bb29f2d97a3",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/[[...path]]/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "f168852d4fd4cd973262b7a8",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/contact/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "cdfaff713c5f056307d2e258",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/faq/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "18685585ccb0580a354d28df",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/joint-commission/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6b642dc935562a48ef8bd175",
      "category": "apis",
      "label": "Tracking reference: Google Ads tag",
      "detail": "Literal reference; value withheld. Comparison fingerprint 1f33e05ac5fd7e2b. Ownership and intended destination require review.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/layout.tsx",
          "line": 57,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8c21bf9ff3f6978ef5b6653b",
      "category": "apis",
      "label": "Tracking reference: Google Ads tag",
      "detail": "Literal reference; value withheld. Comparison fingerprint 1f33e05ac5fd7e2b. Ownership and intended destination require review.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/layout.tsx",
          "line": 65,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "25e5de3257e1576d8b55cf42",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/privacy/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "882da54017ece47fab3a272a",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/terms-of-use/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "ceba14697216bdd4e5dd3e88",
      "category": "apis",
      "label": "Web-page entry",
      "detail": "Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/app/verify/page.tsx",
          "line": 1,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "51330eaa52041cb6dbf98346",
      "category": "operations",
      "label": "Logic pointer: AttributionCapture",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/AttributionCapture.tsx",
          "line": 23,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6bdd137b62ad0d7040566c27",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/AttributionCapture.tsx",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "fa0bc47c6372b2a883db0116",
      "category": "apis",
      "label": "Attribution parameter: gbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/AttributionCapture.tsx",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "6890033ff17ffc522a69ff15",
      "category": "apis",
      "label": "Attribution parameter: wbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/AttributionCapture.tsx",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "710df8c137bd57f04e47ccb6",
      "category": "operations",
      "label": "Logic pointer: AttributionLink",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/AttributionLink.tsx",
          "line": 27,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0ca5c30178317869dc76c2a9",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/ContactForm.tsx",
          "line": 32,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8368f189fb6fb5dfb5ee1692",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/ContactForm.tsx",
          "line": 49,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "7bd0cf83b777182ac73c57c9",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/ContactForm.tsx",
          "line": 69,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8e1ad1b75e970af50fffe397",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/ContactForm.tsx",
          "line": 98,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "e1d75cd5a5c26ea06522a827",
      "category": "operations",
      "label": "Logic pointer: LeadConversion",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/LeadConversion.tsx",
          "line": 29,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "869b58856562e173b5295254",
      "category": "apis",
      "label": "Tracking reference: Google Ads tag",
      "detail": "Literal reference; value withheld. Comparison fingerprint 1f33e05ac5fd7e2b. Ownership and intended destination require review.",
      "confidence": "direct",
      "evidence": [
        {
          "path": "src/components/LeadConversion.tsx",
          "line": 14,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3dcf039284b36b157f3c971a",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/sections/LeadForm.tsx",
          "line": 65,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "db4c2ae2232b9ed3ea0f0889",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/sections/LeadForm.tsx",
          "line": 83,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "3d6f6042984013438711b1d3",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/sections/LeadForm.tsx",
          "line": 103,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0fa2ad33637263a7c1ab2e87",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/components/sections/LeadForm.tsx",
          "line": 146,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "0430f2035d5e29f9d110b6f9",
      "category": "operations",
      "label": "Logic pointer: withStoredAttribution",
      "detail": "Function-name candidate for domain logic. Inspect this source location for meaning; formulas, thresholds and function bodies are not copied.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/lib/attribution-params.ts",
          "line": 40,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "8d3b89da6cb3691e55afe966",
      "category": "apis",
      "label": "Attribution parameter: gclid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/lib/attribution-params.ts",
          "line": 13,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "82604dd18800c0c9eca91196",
      "category": "apis",
      "label": "Attribution parameter: gbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/lib/attribution-params.ts",
          "line": 14,
          "kind": "observed-code"
        }
      ]
    },
    {
      "id": "680f8bb8d3628190a80f73b5",
      "category": "apis",
      "label": "Attribution parameter: wbraid",
      "detail": "Parameter-name reference only; no attribution values collected. Capture, forwarding, consent and retention require review.",
      "confidence": "inferred",
      "evidence": [
        {
          "path": "src/lib/attribution-params.ts",
          "line": 15,
          "kind": "observed-code"
        }
      ]
    }
  ],
  "coverage": {
    "listed": 109,
    "eligible": 64,
    "inspected": 64,
    "skipped": 45,
    "failed": 0,
    "bytes": 261180,
    "treeTruncated": false,
    "limited": false
  },
  "gaps": [
    "Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment.",
    "Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results.",
    "Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed.",
    "Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation."
  ],
  "changes": {
    "previousSha": "8661136ec3436ffc8f85fec24bec62c4be6ea9ec",
    "added": 15,
    "removed": 0
  }
}