Scan at scaleSites with an invalid TDM reservation (TDMRep)
Sites with an invalid TDM reservation (TDMRep)
A site-wide report: one row per host, over the access rows the crawl emitted.
What this report returns
TDMRep (W3C) is a machine-readable text-and-data-mining opt-out served at /.well-known/tdmrep.json; if it can't be parsed, TDM agents may treat the site as having no reservation at all.
A row appears here when any of these is wrong, worst first:
- Malformed DocumentThe file isn't a JSON array of rules as the spec requires, so no reservation is readable.Fix Serve an array, e.g.
[{"location": "/", "tdm-reservation": 1}]. - Invalid Reservation
"tdm-reservation"isn't the number 0 or 1 (a quoted"1", another number, or a missing value is a protocol error), so the opt-out can't be interpreted.Fix Set the bare number 1 (reserved) or 0 (not reserved), unquoted. - Missing LocationA rule omits its required
"location"pattern, so agents can't tell which URLs the reservation covers.Fix Add a location to every rule ("/"covers the whole site). - Invalid PolicyA
"tdm-policy"is present but isn't an absolute http(s) URL, so an agent can't fetch the licensing policy it points to. The spec allows any URL; this is a readiness bar.Fix Use the policy page's full URL, e.g.https://example.com/tdm-policy. - Insecure PolicyA rule's tdm-policy links a plain http:// URL, so the licence terms an agent is asked to honour can be altered on the way. A Lumar bar: TDMRep allows any URL.Fix Serve the policy over https and link
"tdm-policy": "https://example.com/tdm-policy.json".
Security checks are provisional; precision has not yet been measured. A clean row is not a security assessment.
The columns it shows
Every defect this technology can carry is a column in the grid, worst first, so nothing is hidden behind a filter you have to know to apply.
- Host
host - TDMRep Valid
tdmRepValid - TDMRep Conformance Issue Detected
tdmRepConformanceIssueDetected - TDMRep Security Risk Detected
tdmRepSecurityRiskDetected - TDMRep Findings
tdmRepFindings - TDMRep Rule Count
tdmRepRuleCount - TDMRep Invalid Policy Samples
tdmRepInvalidPolicySamples - TDMRep Malformed Document
tdmRepMalformedDocument - TDMRep Invalid Reservation
tdmRepInvalidReservation - TDMRep Missing Location
tdmRepMissingLocation - TDMRep Invalid Policy
tdmRepInvalidPolicy - TDMRep Insecure Policy
tdmRepInsecurePolicy - Ruleset Version
rulesetVersion - Security Check Status
securityCheckStatus - Related Security Frameworks
securityFrameworkReferences
About TDMRep
The W3C text and data mining reservation, used mainly by publishers.
Read how TDMRep is checked, including the specification it is validated against and a worked correct and broken example.
Running it
This report comes with Agentic Readiness in Lumar and appears on every crawl of any project that has it turned on. See the whole set, or check a single URL with the scanner on this site, which runs the same code with no account.