# Oracle regression sentinel — watch-tier list
# Format: URL [expect]   expect in {valid, invalid, null}
# Positive controls: well-known always-valid HTTPS origins
https://example.com valid
https://example.org valid
https://nano.org valid
https://en.wikipedia.org valid
https://httpbin.org valid
https://github.com valid
# The oracle's own origin (self-check)
https://getunstuck.space valid
# Negative controls: real hosts with deliberately broken chains
https://expired.badssl.com invalid
https://self-signed.badssl.com invalid
https://wrong.host.badssl.com invalid
# No-TLS-layer control: plain HTTP must produce a null verdict, not a false one
http://neverssl.com null