A signed conformance audit of an x402 endpoint. Send {"url": "https://example.com/api/thing"}. scvd.store probes the door once, runs its published preflight battery (the same one its weekly census applies), and signs the whole readout: the verdict, every check, every advisory, dated. You get back one JSON object: the report, its evidence hash bound into a certificate, the public key, and a verify_url served forever, so a directory or a counterparty can check it without trusting whoever commissioned it. Not an endorsement, not an uptime claim: one request at one moment against published criteria.