These came up while documenting CPRMV 0.4.2, read at `main` `ace9dfa`. They are checked against the source and the live API on 10 October 2026. The outage itself, an image without `serve_api/methods/`, is fixed in !20. This issue covers what that change does not. ## 1. `/mcp` returns 404, a regression from 0.4.1 It returns 404 on `cprmv.open-regels.nl`, `cprmv.open-rules.eu` and `acc.cprmv.open-regels.nl`, including after the !20 redeploy. There are two causes in `serve_api/src/serve.py`: - **The MCP server is created before any route exists.** `FastMCP.from_fastapi(app=app, …)` and `combined_app` are built at :95-108, and the first route is registered at :125. Built locally, `combined_app.routes` has no `/rules` route, so the MCP server exposes no tools. - **The container does not serve `combined_app`.** The Dockerfile runs `fastapi run src/serve.py`, which serves the module's `app`. `/mcp` is mounted only on `combined_app`. **Ask:** - Build the FastMCP server after the routes are registered. - Serve the combined app (`fastapi run src/serve.py --app combined_app`, or mount the MCP app onto `app`). - Add a test that lists the MCP tools. ## 2. Ten of the thirteen tests are disabled, and nothing tests the image 0661a0d ("disable failing tests…") commented out the `def` lines of 10 tests in `serve_api/test/test_serve.py`: - `test_get_mapping` - `test_transform_jci_reference` - seven `test_detect_cprmv_serve_acknowledged_method_*` tests - `test_get_rules` pytest now collects three: `test_get_root` and two reference-detection tests. On 10 October all three passed on Python 3.14. Nothing exercises `/rules`, the method modules, MCP or the built image, which is how a `:latest` without `methods/` reached production. The SHACL checks in `rdf/0.4.2/test.sh` are not in CI either. `pyshacl` is not in `requirements-dev.txt`. **Ask:** - Re-create the `/rules` and method tests against the new plugin structure. - Add a CI step that runs the built image and calls `/rules/BWBR0015703` (and `/mcp`). - Consider running `rdf/0.4.2/test.sh` in CI. `test-cprmv-api` runs only on merge requests and `main`, so `develop` builds and pushes an image with no test job. ## 3. `serve_api/data/cprmvmethods.ttl` is stale It was last changed in bdf1938 (12 August). It still contains NRML, which 52ca891 removed from the methods, and it lacks the method nodes added since, such as `sttr` and `normenbrief`. `/methods` serves this file, so the live list does not match `rdf/0.4.2/methods/`. **Ask:** run `make methods` and commit the result. ## 4. CORS, for an API specification page in the IOU architecture documentation The IOU documentation site renders the OpenAPI document of the Linked Data Explorer and the RONL Business API live with Scalar. We would like to do the same for CPRMV. `serve.py` has no CORS middleware (the two mentions of CORS are docstrings), and a preflight returns `405`, so a browser on the docs site cannot read `/openapi.json`. **Ask:** allow `GET` (and `OPTIONS`) from these two origins: - `https://iou-architectuur.open-regels.nl` - `https://acc.iou-architectuur.open-regels.nl` Allowing them on `/openapi.json` alone is enough for the rendering. Allowing them on the API routes too would make Scalar's *Test Request* work against acceptance. A future build-provenance endpoint, as planned, would let the page name the build it shows. ## 5. Juriconnect: the sighting date fills the version index `serve_api/methods/juriconnect.py:50-53` maps `g` (`reference-mapping-valid-on`) to the date and `z` (`reference-mapping-seen-on`, the *zichtdatum*) to `id_parts['index']`. A reference with `g=2025-07-01&z=2025-07-01` therefore resolves to `BWBR…_2025-07-01_2025-07-01`, a date in the position of a version index, and the active test asserts exactly that. Is this intended? ## 6. Minor - **`cprmv:hasPart a dct:hasPart`** (`rdf/0.4.2/cprmv.ttl:95`) should probably be `rdfs:subPropertyOf dct:hasPart`. - **`requirements*.txt` headers** say they were generated with Python 3.12, while the Dockerfile and CI use 3.14. - **`full-package.json`** uses BSD `sed -i ''`, which GNU sed rejects. - **The FastAPI description** still speaks of "locally provided CPRMV RuleSets".