Forest Infra

Detect material public DNS answer changes with a deterministic hash. TTL-only changes do not count and no arbitrary resolver or AXFR operation is exposed. Base mainnet USDC

Return only the public certificate validity window and remaining lifetime for TLS port 443. It does not scan ciphers, vulnerabilities or private hosts. Base mainnet USDC

Normalize the latest public GitHub Actions workflow/run state. Reads only; dispatch, rerun, cancellation, private repositories and customer OAuth are unsupported. Base mainnet USDC

Check whether a named branch exists in a public GitHub repository and return the branch current head commit SHA and URL without cloning. This is a read-only branch-state lookup; branch protection stays unknown when the public API does not expose it. Base mainnet USDC

Resolve a public GitHub ref to commit metadata without fetching a diff. Verification is reported as published by GitHub and is not independently re-signed by Forest. Base mainnet USDC

Check lightweight metadata for a path in a public GitHub repository at an optional ref. It does not clone or download large file contents. Base mainnet USDC

Inspect one public TLS endpoint and return certificate identity and validity-window facts. This is a bounded preflight, not a vulnerability scanner or security guarantee. Base mainnet USDC

Resolve one bounded public DNS record type into normalized answers. AXFR, resolver abuse and private-network probing are blocked; TTL and authority are null when unavailable. Base mainnet USDC

Resolve the current public GitHub repository state without cloning or customer OAuth. Archived, fork, branch and license fields reflect only public API facts; private repositories are unsupported. Base mainnet USDC

Detect material public certificate changes in fingerprint, issuer, SANs or validity window using a deterministic hash. Handshake timing noise is ignored. Base mainnet USDC

Cheaply detect material public repository state changes with a deterministic hash of existence, branch and archive state. Timestamps and unrelated metadata do not trigger a change. Base mainnet USDC

Check the current operational HTTP health of one public URL or API endpoint with a bounded GET or HEAD probe. Returns reachability, status code, redirects, content type and size basics; it does not scrape page content, run JavaScript or test private networks. Base mainnet USDC

Compare one public DNS record type across a fixed bounded set of independent public DNS-over-HTTPS resolvers. Answers, TTL ranges and resolver disagreement are normalized; this is not an authoritative or worldwide DNS view. Base mainnet USDC

Check whether a DNS change has reached the configured public resolvers. Compare public DoH answers with an optional expected answer set and return complete, partial, not_observed or unknown. Scope is a fixed bounded resolver set; Forest does not claim worldwide propagation. Base mainnet USDC

Compose bounded DNS propagation, TLS validity and HTTP health observations into one conservative deployment-readiness state. Optional DNS change evidence is included when a previous hash is supplied; this is not a deployment guarantee or worldwide propagation claim. Base mainnet USDC