Set Outside Expectations (daily re-check)
set_expectationsRecord and monitor a domain's expected DNS, TLS, HTTP, and email settings, then report any that fail re-checks.
Instructions
Record what a domain should show from outside and check it now — HSTS or another header present, DMARC enforcing, an issue key no longer reported, an HTTP or TLS grade at or above a level, a certificate with enough days left, a DNS record present, absent or containing a value, HTTPS answering. DechoNet reads the domain fresh (not from cache) with its public dns / ssl / http / email tools, from its own servers and the Seoul observation point, and then re-checks the set every day. Each result is pass, fail or unknown; unknown (a tool or part of it did not answer) is never a pass. Without an API key the set is anonymous: no alerts, kept 30 days after its last check, reachable by id and status page. With an API key (Authorization: Bearer dn_…) the set belongs to that key's account, and a set that held and stops holding is reported in the account's daily mail. Not read-only (it stores the set); public checks only, so any domain is accepted. Typical use: after changing DNS, TLS, headers or mail settings, to state the intended result and be told if it is ever reverted. Returns the set id, status page, per-check results with where to fix what does not hold (for the platform the site runs on), and signed observation receipts.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Optional short name for the set (shown on its page and in the mail) | |
| domain | Yes | Domain the checks are about (e.g. 'example.com'); scheme and path are stripped | |
| expect | Yes | Checks, 1-20 |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | Expectation set id (stored sets) | |
| url | No | Status page of the set: last results and recent checks | |
| owner | No | 'account' (alerts by the API key account's daily mail) or 'anonymous' (no alerts) | |
| state | Yes | 'pass' (every check holds) | 'fail' (at least one does not) | 'unknown' (some could not be read — not a pass) | |
| domain | Yes | ||
| stored | Yes | Whether DechoNet keeps re-checking this set daily | |
| results | Yes | ||
| receipts | No | Signed observation receipts behind this result, one per lookup: when, from where and under which rules version DechoNet observed it. Each url shows the record and checks its Ed25519 signature. | |
| checkedAt | No | ||
| expiresAt | No | Anonymous sets: removed after this unless checked again |