short-expiry terminal-verdict memory per (host, vendor_class, exit_class) with per-host singleflight
short-expiry terminal-verdict memory per (host, vendor_class, exit_class) with per-host singleflight bingoplus.com PH-exit residual: T4 cleared page rejected as semantic soft_block fleet-shared host×country outcome memory, per-host exploration singleflight, all-countries-denied negative cache, fleet prior fail fast on terminal vendor verdicts: skip redirect wait, nodriver and advanced browser; one gated alternative leg; coded unbilled failure (shadow-first) record exit country and a bounded body
New Features
11short-expiry terminal-verdict memory per (host, vendor_class, exit_class) with per-host singleflight
short-expiry terminal-verdict memory per (host, vendor_class, exit_class) with per-host singleflight
fleet-shared host×country outcome memory, per-host exploration singleflight, all-countries-denied negative cache, fleet prior
fleet-shared host×country outcome memory, per-host exploration singleflight, all-countries-denied negative cache, fleet prior
fail fast on terminal vendor verdicts: skip redirect wait, nodriver and advanced browser; one gated alternative leg; coded unbilled failure (shadow-first)
fail fast on terminal vendor verdicts: skip redirect wait, nodriver and advanced browser; one gated alternative leg; coded unbilled failure (shadow-first)
record exit country and a bounded body browser compatibility on every tier attempt; geo_restricted failure category
record exit country and a bounded body browser compatibility on every tier attempt; geo_restricted failure category
T3 egress-country exploration on geo_restricted (RC_EGRESS_COUNTRY, ≤2 extra T3 legs, cohort rollout)
T3 egress-country exploration on geo_restricted (RC_EGRESS_COUNTRY, ≤2 extra T3 legs, cohort rollout)
count T4-deferral queue time against the T4 deadline; fail before browser/proxy acquisition when no useful attempt fits
count T4-deferral queue time against the T4 deadline; fail before browser/proxy acquisition when no useful attempt fits
per-(vendor_class, verdict, engine, exit_class) outcome/cost cells and Wilson-LB alternative-leg gate (record-only)
per-(vendor_class, verdict, engine, exit_class) outcome/cost cells and Wilson-LB alternative-leg gate (record-only)
geo_restricted recovery subtype (HTTP 451, CF 1009, regional-restriction text, identity-invariance signature), shadow only
geo_restricted recovery subtype (HTTP 451, CF 1009, regional-restriction text, identity-invariance signature), shadow only
first-class vendor verdicts — parse/persist anti-bot system rt/t/view and map verdicts to recovery classes
first-class vendor verdicts — parse/persist anti-bot system rt/t/view and map verdicts to recovery classes
replace hand-picked TLD_COUNTRY_MAP with a complete ISO 3166 ccTLD table
replace hand-picked TLD_COUNTRY_MAP with a complete ISO 3166 ccTLD table
Milestone: Remote MCP Server with OAuth → staging
Milestone: Remote MCP Server with OAuth → staging
Bug Fixes
15bingoplus.com PH-exit residual: T4 cleared page rejected as semantic soft_block
bingoplus.com PH-exit residual: T4 cleared page rejected as semantic soft_block
do not book IP/ASN reputation from geo_restricted outcomes; add exit country to the routing arm and outcome key
do not book IP/ASN reputation from geo_restricted outcomes; add exit country to the routing arm and outcome key
identify the device signal anti-bot system rejects (exit vs payload vs persona) and bisect the skruvat.se 53/61→0/8 regression
identify the device signal anti-bot system rejects (exit vs payload vs persona) and bisect the skruvat.se 53/61→0/8 regression
route CF headed-promote probe through UnifiedDetector — non-CF pages must never take the headed slot
route CF headed-promote probe through UnifiedDetector — non-CF pages must never take the headed slot
keep the T3 stage outcome in tier_failures after a T4 deferral (tier4_pool_exhausted_requeued)
keep the T3 stage outcome in tier_failures after a T4 deferral (tier4_pool_exhausted_requeued)
engine selection by active challenge vendor, not passive CDN marker; enable anti-bot system T4 engine A/B
engine selection by active challenge vendor, not passive CDN marker; enable anti-bot system T4 engine A/B
ship log-monitor-internal tooling-keys.sh in the root cron runtime
ship log-monitor-internal tooling-keys.sh in the root cron runtime
upgrade certifi to 2026.10.19 and Pillow to 13.0.0 (Trivy CRITICAL/HIGH)
upgrade certifi to 2026.10.19 and Pillow to 13.0.0 (Trivy CRITICAL/HIGH)
close milestone 115 merge gaps found on deploy
close milestone 115 merge gaps found on deploy
reconcile guards with intended staging changes (deploy )
reconcile guards with intended staging changes (deploy )
omit CSP form-action on /oauth/consent so consent redirects reach the client
omit CSP form-action on /oauth/consent so consent redirects reach the client
oauth_tokens classified bounded but every refresh inserts a row and nothing ever purges expired/rotated/revoked tokens or grants (review finding — )
oauth_tokens classified bounded but every refresh inserts a row and nothing ever purges expired/rotated/revoked tokens or grants (review finding — )
mcp-remote forwards no end-user IP to the API so OFAC geo-block fails open and IP allowlist/attribution see the container IP (review finding — )
mcp-remote forwards no end-user IP to the API so OFAC geo-block fails open and IP allowlist/attribution see the container IP (review finding — )
Singleflight lock keyed by host only while verdict keyed by host+vendor+exit_class; followers on a different cell wait for the holder with no possible hit (review finding — )
Singleflight lock keyed by host only while verdict keyed by host+vendor+exit_class; followers on a different cell wait for the holder with no possible hit (review finding — )
correct OAuth2 guide step count, revocation timing and client registration
correct OAuth2 guide step count, revocation timing and client registration