What a callback establishes.
A per-fetch token ties a canary response to the document that issued it. We retain its placement, original transport and elapsed time. This establishes token reuse. User-agent labels, model self-reports and response timing are clues; they cannot authenticate a model, demonstrate autonomy or establish malicious intent.
Three separate streams.
- Demonstration
- Explicit
/demo/routes and tokens originating there. These stay out of unsolicited alerts. - Operator test
- Authenticated deployment tests and exact event IDs registered by the operator. Visitor claims to be testing have no authority.
- Unsolicited
- All other observed interactions. This label describes collection context, and implies no malicious intent.
A callback inherits its issuing token’s class, even when it arrives through the other transport. The test classification is never accepted from a query argument, user agent or self-report.
Hosted collection & privacy.
The hosted sensor records request time, path, method, bounded user agent, selected non-secret headers and transport. Valid callbacks can include bounded, voluntary model, framework and task labels; personal information, credentials and secrets must never be submitted. Raw query values and request bodies are discarded. Cookies, authorization and referrers are excluded.
Clearnet records can include the edge-observed client IP. Onion visitor IPs are unavailable. Records are private. This site exposes no visitor feed or public visitor statistics. Administrative access requires a bearer key. No third-party tracking scripts, fonts or analytics load in your browser.
Known limits.
A visitor can ignore, script or replay a canary. A quiet sensor provides no assurance that agents were absent. Our hosted storage buffers events and can lose unflushed records during a crash. No automatic retention deletion is configured; the operator must review and manage retained records.
The downloadable middleware has a smaller collection footprint: local SQLite, no IP collection, no hosted telemetry, and opt-in probe endpoints. It does not instrument arbitrary response bodies. Its limits and deployment guidance accompany the source.
Reproduce the mechanism.
Run a labelled demo, install the operator package, or retrieve the controlled specimen. Keep experiments separate from observations about unsolicited traffic.