Issues

• Open question: distinct paths vs distinct targets — unify the query-string handling

  mnot/agent-census#127 · Filter by author mnot opened on Jul 10, 2026

• Harden impossible-referer thresholds against a second corpus (follow-up to #101)

  mnot/agent-census#111 · Filter by author mnot opened on Jul 4, 2026
  1

• Tracking: spoofed_browser redesign (#100) + its feeder signals (#103/#104/#108/#109)

  mnot/agent-census#110 · Filter by author mnot opened on Jul 3, 2026
  2

• Explore: page-cascade detection (referer-linked) as a positive browser signal

  mnot/agent-census#109 · Filter by author mnot opened on Jul 3, 2026

• Capture repeated-path polling (per-path repeats over time) as a metric + tag

  mnot/agent-census#108 · Filter by author mnot opened on Jul 3, 2026

• Explore: generalize impossible-referer to any always-301 resource (curate a redirect set from logs)

  mnot/agent-census#104 · Filter by author mnot opened on Jul 3, 2026

• Rethink the definition of spoofed_browser — decouple it from datacenter origin

  mnot/agent-census#100 · Filter by author mnot opened on Jul 3, 2026
  2

• Explore: sub-second asset-load burst timing (log-format backward-compat, Cloudflare semantics, protocol/connection)

  mnot/agent-census#99 · Filter by author mnot opened on Jul 3, 2026

• Explore: browser-consistency canaries (Sec-Fetch / Accept / client-hints / cache & cookie echo) for spoofed-browser detection

  mnot/agent-census#98 · Filter by author mnot opened on Jul 3, 2026

• vuln_scanner "fast cadence" false-positives on browsers: second-resolution timestamps + burst asset loading yield median 0.00s

  mnot/agent-census#97 · Filter by author mnot opened on Jul 3, 2026

• Explore: redirect-canary behavioral signals (www→apex 301) for bot detection

  deferred
  mnot/agent-census#96 · Filter by author mnot opened on Jul 3, 2026
  1

• Explore: local config overriding bundled data/ (esp. data/agents/)

  mnot/agent-census#88 · Filter by author mnot opened on Jul 2, 2026

• WBA: support an agent identified only by wba_operator (no ua_substring) — ChatGPT Agent

  mnot/agent-census#81 · Filter by author mnot opened on Jul 2, 2026

• WBA: warn when a key's declared kid diverges from its thumbprint

  mnot/agent-census#80 · Filter by author mnot opened on Jul 2, 2026

• WBA: bound the nonce-replay tracking (Bloom filter) for high-volume signed traffic

  mnot/agent-census#43 · Filter by author mnot opened on Jun 28, 2026

• WBA: verify all signed requests, not just a sparse sample

  mnot/agent-census#42 · Filter by author mnot opened on Jun 28, 2026

• WBA: populate the operator list from a registry (discovery mode)

  mnot/agent-census#41 · Filter by author mnot opened on Jun 28, 2026

• WBA: learn keyid → operator/directory during key fetch

  mnot/agent-census#40 · Filter by author mnot opened on Jun 28, 2026

• Persist distilled per-client state to avoid re-parsing logs

  enhancement
  mnot/agent-census#20 · Filter by author mnot opened on Jun 27, 2026

• Add a kind for user-directed URL tools (REDbot, SSL Labs, validators)

  mnot/agent-census#5 · Filter by author mnot opened on Jun 26, 2026
  1