---
extends: [[spectral:oas, recommended], [vacuum:owasp, all]]
rules:
  post-response-success: false
  oas3-missing-example: false
  owasp-no-additionalProperties: false
  description-duplication: false
  owasp-string-restricted: false
  # Allow public endpoints (security: []) without triggering warnings - intentional for /eula
  owasp-protection-global-safe: false