locale text safety audit derived

{
  "input": {
    "body": {
      "locales": [
        {
          "base": true,
          "locale": "en",
          "messages": {
            "ok": "Save",
            "note": "Plain text only",
            "label": "Amount"
          }
        },
        {
          "locale": "he",
          "messages": {
            "ok": "שמור‮",
            "note": "טקסט <b>מודגש</b>",
            "label": "סכום​ "
          }
        },
        {
          "locale": "vi",
          "messages": {
            "ok": "Lùu",
            "note": "Chỉ văn bản",
            "label": "Số tiền"
          }
        }
      ],
      "allow_html": true
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "safe": false,
      "limits": {
        "maxKeys": 50000,
        "maxLocales": 60,
        "maxFindings": 500,
        "maxFileBytes": 2097152,
        "maxValueLength": 32768
      },
      "passed": false,
      "locales": [
        {
          "locale": "en",
          "markup": 0,
          "messages": 3,
          "zero_width": 0,
          "bidi_controls": 0
        },
        {
          "locale": "he",
          "markup": 1,
          "messages": 3,
          "zero_width": 1,
          "bidi_controls": 1
        },
        {
          "locale": "vi",
          "markup": 0,
          "messages": 3,
          "zero_width": 0,
          "bidi_controls": 0
        }
      ],
      "complete": true,
      "findings": [
        {
          "key": "ok",
          "code": "BIDI_CONTROL_CHARACTER",
          "detail": "he ok contains U+202E. A bidirectional control is invisible in every editor and reorders everything after it, including text nobody touched.",
          "locale": "he"
        },
        {
          "key": "label",
          "code": "ZERO_WIDTH_CHARACTER",
          "detail": "he label contains U+200B, which is invisible and still counts toward a length limit and breaks an exact-match comparison.",
          "locale": "he"
        },
        {
          "key": "label",
          "code": "SURROUNDING_WHITESPACE",
          "detail": "he label begins or ends with whitespace, which is usually a concatenation that should be in the template rather than in the message.",
          "locale": "he"
        }
      ],
      "request_id": "example-request",
      "service_id": "locale_text_safety_audit",
      "assumptions": [
        "An invisible character is reported by its code point rather than reproduced, so the finding is actionable without the response carrying the character that caused it.",
        "Markup appearing only in a translation is reported separately from markup everywhere, because the call site was written for whatever the base string contains.",
        "Text is checked for NFC form, since the same text typed two ways compares unequal and sorts unpredictably, and nothing visible distinguishes them."
      ],
      "base_locale": "en",
      "limitations": [
        "Character-level properties of the files supplied. This is not a security assessment: whether markup in a message is exploitable depends entirely on the call site, which is not visible here.",
        "safe is true only when nothing above applied across every message scanned."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "locale_count": 3,
      "not_examined": [],
      "finding_count": 5,
      "html_permitted": true,
      "service_version": "1.0.0",
      "findings_by_code": {
        "TEXT_NOT_NORMALISED": 1,
        "ZERO_WIDTH_CHARACTER": 1,
        "BIDI_CONTROL_CHARACTER": 1,
        "SURROUNDING_WHITESPACE": 1,
        "MARKUP_ONLY_IN_TRANSLATION": 1
      },
      "scanned_message_count": 9
    }
  }
}