← The evidence ledger
Evidence row 73432
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://detect.halowerk.com/u/referrer-header-disclosure-matrix
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- b2f1c63f6eb81b56774ab1d44387d7108d2bb9eeef8d2e3f9aa91d7c5301bb45
- Leaf
- 0xf543262f815b97bd255669237b6094635ae2570c6cb1ee3cb37c248f6a6de6af
What was observed
{
"endpoints": [
[
"x402",
"https://detect.halowerk.com/u/referrer-header-disclosure-matrix"
]
],
"name": "detect.halowerk.com/u/referrer-header-disclosure-matrix",
"owner_address": "0x2880edfff13100677bf97a3cbdf3bc34771c4e5e",
"raw": {
"accepts": [
{
"amount": "3000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"eip712Domain": {
"chainId": 8453,
"name": "USD Coin",
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"version": "2"
},
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E",
"scheme": "exact"
}
],
"description": "Simulate the selected Referrer-Policy response-header token across fixed synthetic HTTPS same-origin, cross-origin and downgrade targets; return only no-referrer, origin and URL-eligibility counts.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"url": "https://example.org/"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"billable": true,
"findings": [
{
"confidence": 85,
"evidence": [
{
"page_indices": [],
"page_url": null,
"pattern": "referrer-header-disclosure-matrix_scoped_evidence",
"type": "raw_html"
}
],
"id": "referrer-header-disclosure-matrix",
"limits": [
"Only complete original RAM documents are examined. No additional fetch, execution, interaction, computed style, rendering or external state is asserted.",
"Only numeric and boolean aggregates are returned. All source text, identifiers, names, addresses, contact data, URLs, headers and digest values remain private.",
"Pure header-policy simulation using a fixed synthetic HTTPS source with a path and query. Matrix target rows are same-origin HTTPS, cross-origin HTTPS and HTTPS-to-HTTP downgrade. Columns are no referrer, origin-only and URL path/query eligible. These are eligibility classes, not transmitted bytes. No document URL is substituted into this simulation; all source and target URLs are synthetic. Policies follow the eight-token order documented in the output schema. Last recognized case-sensitive comma token wins; absent/unknown values select strict-origin-when-cross-origin. HTML meta, per-element overrides, redirects, origin trust exceptions, user preferences and actual browser requests are not asserted."
],
"module": "referrer-header-disclosure-matrix",
"module_cpu_ms": 1,
"state": "observed",
"value": {
"default_policy_documents": 0,
"documents": 1,
"ignored_header_tokens": 0,
"recognized_header_tokens": 1,
"recognized_token_policy_changes": 0,
"selected_policy_counts": [
0,
0,
1,
0,
0,
0,
0,
0
],
"synthetic_target_disclosure_counts": [
[
0,
0,
1
],
[
1,
0,
0
],
[
1,
0,
0
]
]
},
"warnings": []
}
],
"known_count": 1,
"scope": {
"at": "2026-10-16T00:00:00.000Z",
"contact_values_returned": false,
"pages": 1,
"rendered": false,
"requests": 0
},
"warnings": [
"Illustrative synthetic fixture only; not a customer or live-site assertion."
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"url": {
"format": "uri",
"maxLength": 2048,
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"billable": {
"type": "boolean"
},
"findings": {
"items": {
"additionalProperties": false,
"properties": {
"confidence": {
"maximum": 100,
"minimum": 0,
"type": "integer"
},
"evidence": {
"type": "array"
},
"id": {
"const": "referrer-header-disclosure-matrix"
},
"limits": {
"items": {
"type": "string"
},
"type": "array"
},
"module": {
"const": "referrer-header-disclosure-matrix"
},
"module_cpu_ms": {
"maximum": 250,
"minimum": 0,
"type": "number"
},
"state": {
"enum": [
"observed",
"not_observed",
"unknown"
]
},
"value": {
"anyOf": [
{
"type": "null"
},
{
"additionalProperties": false,
"properties": {
"default_policy_documents": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"documents": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"ignored_header_tokens": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"recognized_header_tokens": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"recognized_token_policy_changes": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"selected_policy_counts": {
"description": "Eight policy counts in order: no-referrer; no-referrer-when-downgrade; same-origin; origin; strict-origin; origin-when-cross-origin; strict-origin-when-cross-origin; unsafe-url.",
"items": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"maxItems": 8,
"minItems": 8,
"type": "array"
},
"synthetic_target_disclosure_counts": {
"description": "Rows: same-origin HTTPS, cross-origin HTTPS, HTTPS-to-HTTP downgrade. Columns: no referrer, origin-only, URL path/query eligible. Fixed synthetic source; no actual site request.",
"items": {
"items": {
"maximum": 1000000000,
"minimum": 0,
"type": "integer"
},
"maxItems": 3,
"minItems": 3,
"type": "array"
},
"maxItems": 3,
"minItems": 3,
"type": "array"
}
},
"required": [
"documents",
"default_policy_documents",
"recognized_header_tokens",
"ignored_header_tokens",
"recognized_token_policy_changes",
"selected_policy_counts",
"synthetic_target_disclosure_counts"
],
"type": "object"
}
]
},
"warnings": {
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"id",
"state",
"value",
"confidence",
"evidence",
"warnings",
"limits",
"module",
"module_cpu_ms"
],
"type": "object"
},
"maxItems": 1,
"minItems": 1,
"type": "array"
},
"known_count": {
"maximum": 1,
"minimum": 0,
"type": "integer"
},
"scope": {
"additionalProperties": false,
"properties": {
"at": {
"type": "string"
},
"contact_values_returned": {
"const": false
},
"pages": {
"maximum": 5,
"minimum": 0,
"type": "integer"
},
"rendered": {
"const": false
},
"requests": {
"maximum": 10,
"minimum": 0,
"type": "integer"
}
},
"required": [
"pages",
"requests",
"at",
"rendered",
"contact_values_returned"
],
"type": "object"
},
"warnings": {
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"findings",
"known_count",
"billable",
"warnings",
"scope"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-19T19:13:29.099Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-19T19:13:28.863Z"
},
"resource": "https://detect.halowerk.com/u/referrer-header-disclosure-matrix",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Simulate the selected Referrer-Policy response-header token across fixed synthetic HTTPS same-origin, cross-origin and downgrade targets; return only no-referrer, origin and URL-eligibility counts."
}What the leaf hashes
{"body":"b2f1c63f6eb81b56774ab1d44387d7108d2bb9eeef8d2e3f9aa91d7c5301bb45","id":73432,"kind":"listing","method":"baseline/1","observed_us":1793025487626027,"prev":null,"subject":"x402_bazaar:https://detect.halowerk.com/u/referrer-header-disclosure-matrix","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.