yaml document audit derived

{
  "input": {
    "body": {
      "yaml": "country: NO\nmode: 0644\nversion: 1.0\nenabled: on\ntitle: \"\"\nretries: 3\nretries: 5\noff: later\n"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "valid": false,
      "limits": {
        "maxFindings": 500,
        "maxYamlBytes": 262144,
        "maxDockerfileBytes": 131072,
        "maxDockerfileLines": 4000
      },
      "passed": false,
      "complete": true,
      "findings": [
        {
          "code": "SCALAR_IS_A_YAML_BOOLEAN",
          "line": 1,
          "detail": "\"NO\" is an unquoted YAML 1.1 boolean and reads as false, not as the text NO. Quoting it keeps it a string.",
          "location": "country"
        },
        {
          "code": "SCALAR_LEADING_ZERO_IS_OCTAL",
          "line": 2,
          "detail": "\"0644\" has a leading zero, which YAML 1.1 reads as octal 420 rather than the digits as written. File modes and zero-padded identifiers are the usual casualties.",
          "location": "mode"
        },
        {
          "code": "SCALAR_LOOKS_LIKE_A_VERSION",
          "line": 3,
          "detail": "\"1.0\" parses as the number 1. A two-part version is a float and a three-part one is a string, so appending a patch number changes the type. Quoting it keeps it text.",
          "location": "version"
        }
      ],
      "null_count": 0,
      "request_id": "example-request",
      "service_id": "yaml_document_audit",
      "assumptions": [
        "The findings are about what a YAML reader will do with this text, not about whether the data is correct. A duplicate key, an unquoted boolean word, a leading zero read as octal and a two-part version ...",
        "YAML 1.1 boolean words are reported because that is the set most readers still implement, and it is why a country code of NO becomes false.",
        "Anchors, aliases, merge keys and explicit tags are refused with the line rather than half parsed, because a confident wrong answer about a configuration file is worse than a refusal."
      ],
      "limitations": [
        "Parsing behaviour of the text supplied. Whether the resulting values are right for their consumer is outside this.",
        "valid is true only when the source parsed and nothing in it will surprise a reader."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "not_examined": [],
      "scalar_count": 7,
      "finding_count": 7,
      "document_count": 1,
      "service_version": "1.0.0",
      "findings_by_code": {
        "DUPLICATE_KEY": 1,
        "EMPTY_STRING_VALUE": 1,
        "KEY_IS_A_YAML_BOOLEAN": 1,
        "SCALAR_IS_A_YAML_BOOLEAN": 2,
        "SCALAR_LOOKS_LIKE_A_VERSION": 1,
        "SCALAR_LEADING_ZERO_IS_OCTAL": 1
      }
    }
  }
}