About / research method

A passive research instrument.

This independently operated site studies interactions with public services that may reflect unauthorized automated activity. A request or a detection signature alone does not establish the identity or intent of its author.

What is captured

The instrument captures application-level requests, subject to documented limits, and stores hash-linked records. See the monitoring notice. Public pages contain generic or fictional material; submitted content is never returned to visitors. The service does not fetch visitor-supplied URLs or run submitted code.

Fictional seed provenance

A small number of operator-authored check-ins are visibly labeled fictional, excluded from the sitemap, and recorded in a source manifest. Their exact text is excluded from attribution. They test navigation and interaction only; visitor submissions are never published into them.

Verification

Events form separate chains for each sensor process lifetime. The aggregator verifies hashes and continuity, and signs ordered batches with Ed25519. Signatures establish record integrity; they do not independently establish when a request occurred or who caused it. Affected teams can compare the UTC window, domain, and response identifiers with their own egress records.

Event-signing public key

-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEApNQNKJqFgtjB1VRMtADZveVyqBO5cv6HeD5xO6Vw5Bg=
-----END PUBLIC KEY-----

Synthetic sample evidence · Security contact

Contact & correspondence

renfert@karsey.dev

PGP fingerprint: DB7FD90569D7FB087E07C77EB5990B2ECF8484F3

-----BEGIN PGP PUBLIC KEY BLOCK-----

xjMEapwbQBYJKwYBBAHaRw8BAQdA62zrJJ/5bJ8n7Vefm+HVzyJfU+PxfWVq
dd7XQ3O5d0bNQ0thcnNleSBSZW5mZXJ0IChBbHNvOiBrYXJzZXlyZW5mZXJ0
QGdtYWlsLmNvbSkgPHJlbmZlcnRAa2Fyc2V5LmRldj7CwBkEExYKAIsFgmqc
G0AFiQeEzgADCwkHCRC1mQsuz4SE80UUAAAAAAAcACBzYWx0QG5vdGF0aW9u
cy5vcGVucGdwanMub3JnhV2B0IO4xO9g1Qgz1bVVD92HOi8YDstZiVbvGTap
N6gFFQoIDgwEFgACAQIZAQKbAwIeARYhBNt/2QVp1/sIfgfHfrWZCy7PhITz
AABXogD/ZeaUdJCxRlpI31QkDtRBrWgJbXzcftRt6RpE4N49mEkA/2DLeTFK
WqDU6yHALeSzo+lPl47IRpjkSSpcBcSvld4KzjgEapwbQBIKKwYBBAGXVQEF
AQEHQIYnwy/FNHuaA+DNa2uWW1oIFHMiGvM6S1LR/MAi5JVEAwEIB8LABAQY
FgoAdgWCapwbQAWJB4TOAAkQtZkLLs+EhPNFFAAAAAAAHAAgc2FsdEBub3Rh
dGlvbnMub3BlbnBncGpzLm9yZ2ObUUUoFv18qIt+1smLdMF+0oz6ZbNmqsLS
GZPAasyKApsMFiEE23/ZBWnX+wh+B8d+tZkLLs+EhPMAAOoWAP98eUkGKkbX
QRr4vjCcsJXI9UV/SUSEq0qBJj7Y+3xmfwD/bURNDg9H7kRherXIk8QZ41KO
32NmPhhgzQWLqjoBFQk=
=VgY4
-----END PGP PUBLIC KEY BLOCK-----

Handling

Raw evidence is encrypted on the aggregator and before object-storage upload. Analysis runs locally. Reports require human review and recipient authentication. Encrypted object-storage copies are protected from deletion for at least 45 days. Local records currently have no automatic deletion schedule. Records may be preserved longer for investigation or a preservation hold. Contact the operator about handling or removal; locked copies cannot be deleted before their retention expires.