{"id":73432,"recorded_at":"2026-10-26T14:38:07.626078Z","observed_at":"2026-10-26T14:38:07.626027Z","subject_kind":"source_record","subject":"x402_bazaar:https://detect.halowerk.com/u/referrer-header-disclosure-matrix","kind":"listing","method":"baseline/1","body":{"endpoints":[["x402","https://detect.halowerk.com/u/referrer-header-disclosure-matrix"]],"name":"detect.halowerk.com/u/referrer-header-disclosure-matrix","owner_address":"0x2880edfff13100677bf97a3cbdf3bc34771c4e5e","raw":{"accepts":[{"amount":"3000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"assetTransferMethod":"eip3009","eip712Domain":{"chainId":8453,"name":"USD Coin","verifyingContract":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","version":"2"},"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E","scheme":"exact"}],"description":"Simulate the selected Referrer-Policy response-header token across fixed synthetic HTTPS same-origin, cross-origin and downgrade targets; return only no-referrer, origin and URL-eligibility counts.","extensions":{"bazaar":{"info":{"input":{"body":{"url":"https://example.org/"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"billable":true,"findings":[{"confidence":85,"evidence":[{"page_indices":[],"page_url":null,"pattern":"referrer-header-disclosure-matrix_scoped_evidence","type":"raw_html"}],"id":"referrer-header-disclosure-matrix","limits":["Only complete original RAM documents are examined. No additional fetch, execution, interaction, computed style, rendering or external state is asserted.","Only numeric and boolean aggregates are returned. All source text, identifiers, names, addresses, contact data, URLs, headers and digest values remain private.","Pure header-policy simulation using a fixed synthetic HTTPS source with a path and query. Matrix target rows are same-origin HTTPS, cross-origin HTTPS and HTTPS-to-HTTP downgrade. Columns are no referrer, origin-only and URL path/query eligible. These are eligibility classes, not transmitted bytes. No document URL is substituted into this simulation; all source and target URLs are synthetic. Policies follow the eight-token order documented in the output schema. Last recognized case-sensitive comma token wins; absent/unknown values select strict-origin-when-cross-origin. HTML meta, per-element overrides, redirects, origin trust exceptions, user preferences and actual browser requests are not asserted."],"module":"referrer-header-disclosure-matrix","module_cpu_ms":1,"state":"observed","value":{"default_policy_documents":0,"documents":1,"ignored_header_tokens":0,"recognized_header_tokens":1,"recognized_token_policy_changes":0,"selected_policy_counts":[0,0,1,0,0,0,0,0],"synthetic_target_disclosure_counts":[[0,0,1],[1,0,0],[1,0,0]]},"warnings":[]}],"known_count":1,"scope":{"at":"2026-10-16T00:00:00.000Z","contact_values_returned":false,"pages":1,"rendered":false,"requests":0},"warnings":["Illustrative synthetic fixture only; not a customer or live-site assertion."]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"url":{"format":"uri","maxLength":2048,"type":"string"}},"required":["url"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"additionalProperties":false,"properties":{"billable":{"type":"boolean"},"findings":{"items":{"additionalProperties":false,"properties":{"confidence":{"maximum":100,"minimum":0,"type":"integer"},"evidence":{"type":"array"},"id":{"const":"referrer-header-disclosure-matrix"},"limits":{"items":{"type":"string"},"type":"array"},"module":{"const":"referrer-header-disclosure-matrix"},"module_cpu_ms":{"maximum":250,"minimum":0,"type":"number"},"state":{"enum":["observed","not_observed","unknown"]},"value":{"anyOf":[{"type":"null"},{"additionalProperties":false,"properties":{"default_policy_documents":{"maximum":1000000000,"minimum":0,"type":"integer"},"documents":{"maximum":1000000000,"minimum":0,"type":"integer"},"ignored_header_tokens":{"maximum":1000000000,"minimum":0,"type":"integer"},"recognized_header_tokens":{"maximum":1000000000,"minimum":0,"type":"integer"},"recognized_token_policy_changes":{"maximum":1000000000,"minimum":0,"type":"integer"},"selected_policy_counts":{"description":"Eight policy counts in order: no-referrer; no-referrer-when-downgrade; same-origin; origin; strict-origin; origin-when-cross-origin; strict-origin-when-cross-origin; unsafe-url.","items":{"maximum":1000000000,"minimum":0,"type":"integer"},"maxItems":8,"minItems":8,"type":"array"},"synthetic_target_disclosure_counts":{"description":"Rows: same-origin HTTPS, cross-origin HTTPS, HTTPS-to-HTTP downgrade. Columns: no referrer, origin-only, URL path/query eligible. Fixed synthetic source; no actual site request.","items":{"items":{"maximum":1000000000,"minimum":0,"type":"integer"},"maxItems":3,"minItems":3,"type":"array"},"maxItems":3,"minItems":3,"type":"array"}},"required":["documents","default_policy_documents","recognized_header_tokens","ignored_header_tokens","recognized_token_policy_changes","selected_policy_counts","synthetic_target_disclosure_counts"],"type":"object"}]},"warnings":{"items":{"type":"string"},"type":"array"}},"required":["id","state","value","confidence","evidence","warnings","limits","module","module_cpu_ms"],"type":"object"},"maxItems":1,"minItems":1,"type":"array"},"known_count":{"maximum":1,"minimum":0,"type":"integer"},"scope":{"additionalProperties":false,"properties":{"at":{"type":"string"},"contact_values_returned":{"const":false},"pages":{"maximum":5,"minimum":0,"type":"integer"},"rendered":{"const":false},"requests":{"maximum":10,"minimum":0,"type":"integer"}},"required":["pages","requests","at","rendered","contact_values_returned"],"type":"object"},"warnings":{"items":{"type":"string"},"type":"array"}},"required":["findings","known_count","billable","warnings","scope"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-19T19:13:29.099Z","quality":{"l30DaysTotalCalls":2,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-19T19:13:28.863Z"},"resource":"https://detect.halowerk.com/u/referrer-header-disclosure-matrix","type":"http","x402Version":2},"source":"x402_bazaar","summary":"Simulate the selected Referrer-Policy response-header token across fixed synthetic HTTPS same-origin, cross-origin and downgrade targets; return only no-referrer, origin and URL-eligibility counts."},"body_sha256":"b2f1c63f6eb81b56774ab1d44387d7108d2bb9eeef8d2e3f9aa91d7c5301bb45","prev_id":null,"leaf":"0xf543262f815b97bd255669237b6094635ae2570c6cb1ee3cb37c248f6a6de6af","leaf_text":"{\"body\":\"b2f1c63f6eb81b56774ab1d44387d7108d2bb9eeef8d2e3f9aa91d7c5301bb45\",\"id\":73432,\"kind\":\"listing\",\"method\":\"baseline/1\",\"observed_us\":1793025487626027,\"prev\":null,\"subject\":\"x402_bazaar:https://detect.halowerk.com/u/referrer-header-disclosure-matrix\",\"subject_kind\":\"source_record\"}","day":null,"proof":[]}