{"status":"ok","version":"81.8.2","scores":{"security_score":76,"role_permission_score":72,"customer_data_scope_score":78,"audit_logging_score":82,"error_handling_score":74,"api_protection_score":68,"backup_recovery_score":70,"system_health_score":84,"production_readiness_score":75},"health":{"color":"yellow","label":"Beta Ready With Caution"},"open_issues":[{"severity":"critical","area":"Authentication","issue":"Verify role-based access enforcement for owner/manager/staff/supervisor/cleaner/contractor/customer."},{"severity":"critical","area":"Customer Portal","issue":"Confirm customer users cannot access other customer invoices, appointments, or payment methods."},{"severity":"critical","area":"Payments","issue":"Live provider tokenization and webhook validation required before real payments."},{"severity":"high","area":"API Protection","issue":"Rate limiting and request validation should be enforced before public beta."},{"severity":"high","area":"Backups","issue":"Database backup and restore procedure must be verified."},{"severity":"medium","area":"Error Handling","issue":"Replace raw 500 errors with user-friendly messages and admin diagnostics."}],"protected_areas":[{"area":"Customer Portal","risk":"customer_data_scope","required":"Customers only see their own appointments, invoices, payment methods, and profile."},{"area":"Payroll","risk":"sensitive_financial","required":"Only owner/manager/payroll roles should access payroll."},{"area":"Financial Center","risk":"sensitive_financial","required":"Only owner/manager/accounting roles should access financial reports."},{"area":"Workforce Documents","risk":"sensitive_documents","required":"HR documents must be protected by role."},{"area":"Pricing Settings","risk":"business_rules","required":"Only owner/manager roles can change pricing rules."},{"area":"Payment Methods","risk":"payment_security","required":"Only tokenized last4 data is shown; raw card data must never be stored."},{"area":"Admin Settings","risk":"tenant_security","required":"Only owner/admin roles can update company settings."}]}