Audit a Content-Security-Policy for missing defaults and unsafe script directives. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates production reliability. Returns bounded machine-readable JSON for $0.002 USDC via x402 on Base or Solana. Execution is deterministic, first-party, local-only, stateless, and does not call an upstream provider; structured validation failures are not billed.