AILeash · operator console

Keyed routes

The endpoints a browser cannot reach on its own. Your key stays in this tab and is never stored.

Held in memory for this tab only. Close it and the key is gone — nothing is written to the device.

01Baseline POST /x/fingerprint/self

Runs the 28-vector battery through your own engine. Every probe is measured against this. Run it first — if it answers, the module can see your live scorer.

02Probe a target POST /x/fingerprint/probe

Fires the same battery at somebody else's scoring endpoint and compares the two sets of numbers. One request per vector with a gap between them.

03Seal the codebase POST /x/codebase/seal

Hashes every file, commits one manifest root, seals it with your declaration. Dated evidence of what you held and when.

04Seal a published page POST /x/publish/seal

Fetches a live page and seals the exact bytes served. Pins what the world could see on a given date, which is not the same as what was in the repo.

05Past probes GET /x/fingerprint/history

Every comparison you have run, with its verdict and receipt.

06Every command GET /x/spec

Walks every module on the router and reports what each one exposes, and which routes need a key. If you have forgotten what exists, this is the answer.

07Grant authority POST /x/continuity/issue

A root grant. It must be issued by a human, it must state a purpose, and it must expire. Whoever is named as accepting the risk is the person an incident lands on.

08Delegate it onward POST /x/continuity/issue

A child can narrow, never widen. Try raising the amount above the parent's and watch it refuse. A child that can delegate again must name its own risk acceptor.

09Exercise authority POST /x/continuity/exercise

The whole chain is re-derived at this moment, not trusted from when it was issued. Ask for more than the lineage allows and it names the grant and the invariant that broke.

10Plan a reconciliation POST /x/reconcile/plan

Seals which records will be tested before any data is fetched. Once this runs you cannot choose a kinder sample, and an abandoned plan stays visible forever.

11Submit the comparison POST /x/reconcile/submit

The values from your own live system, against the sample that was already sealed. Fill these honestly - a mismatch is sealed as permanently as a match, and that is the only reason any of it means anything.