Included
- Agreed public URL(s) / hosts monitored
- HTTPS reachability and status checks
- SSL expiry warning thresholds where configured
- DNS baseline compare vs onboard lock
- Optional keyword / redirect sanity checks
- Human-reviewed monthly report inside hour cap
- Light in-cap triage notes (observe / advise)