PREFLIGHT URL Routing for AI Agents

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  scripts/benchmark.js, line 35

  await fs.rm(temp,{recursive:true,force:true});

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  scripts/live-smoke.js, line 9

  const r=await fetch(url,{...options,headers});const text=await r.text();let body;try{body=JSON.parse(text)}catch{body={raw:text}}

  src/evidence-dashboard.js, line 1

  async function load(){try{const r=await fetch('/v1/activity'),p=await r.json(),h=p.hea

  src/net.js, line 26

  let response;try{response=await fetch(current,{method,headers,redirect:'manual',signal:controller.signal});}finally{clearTimeout(timer)}

  Show more

  src/server.js, line 23

  pshot();let once=null;try{const r=await fetch(ONCE_ACTIVITY_URL,{headers:{'user-agent'

  src/server.js, line 24

  async function load(){try{const r=await fetch('/v1/activity/all'),x=await r.json(),p=x

  docs/AGENT-INTEGRATIONS.md, line 25

  const route = await fetch(`${base}/v1/check?url=${encodeURIComponent(url)}`).then(r => r.json());

• Secrets

  Note

  reads an environment variable.

  SECRETS_ENV_READ

  scripts/live-smoke.js, line 3

  const feedbackKey=process.env.PREFLIGHT_FEEDBACK_KEY||'';

  src/activity.js, line 71

  w Map();this.callerSecret=callerSecret||process.env.PREFLIGHT_CALLER_HMAC_SECRET||null;if(this.persistent)this.load();if

  src/activity.js, line 79

  structural shape only',hmacSecretSource:process.env.PREFLIGHT_CALLER_HMAC_SECRET?'environment':'private local data file'

  Show more

  src/server.js, line 26

  export function createServer({cacheStore=cache,probe=probeUrl,feedbackStore=feedback,feedbackKey=process.env.PREFLIGHT_FEEDBACK_KEY||'',activityStore=activity}={}){

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Concern

  contains a minified payload.

  OBFUSCATION_MINIFIED_PAYLOAD

  src/activity.js, line 38

  function directoryAttribution(req){const explicit=sourceTag(req)||safeLabel(req.headers['x-preflight-directory']);if(explicit){const canonical=SOURCE_ALIASES.get(explicit.toLowerCa

  src/activity.js, line 48

  function scoreEvidence(e,discoveryAt,validatorReason){if(!e.external||e.botMonitor)return {score:0,level:'validator-like'};if(e.useClass==='demo')return {score:0,level:'validator-l

  src/activity.js, line 66

  function conversionMilestones(worldAll){const seen=new Set(),found=[];for(const e of worldAll){if(e.classification!=='CREDIBLE_REAL_USE'||seen.has(e.caller))continue;seen.add(e.cal

  Show more

  src/activity.js, line 67

  function callerCohorts(events,firstSeen){const by=new Map();for(const e of events){if(!e.external)continue;let c=by.get(e.caller);if(!c){c={caller:e.caller,firstSeen:e.at,lastSeen:

  src/activity.js, line 71

  constructor({dataDir=null,callerSecret=null}={}){this.dataDir=dataDir??defaultDataDir();this.file=path.join(this.dataDir,'activity.json');this.realFile=path.join(this.dataDir,'real

  src/activity.js, line 73

  load(){if(!this.persistent)return;try{const d=JSON.parse(fs.readFileSync(this.file,'utf8'));this.events=Array.isArray(d.events)?d.events.slice(0,MAX_EVENTS):[];this.firstSeen=new M

  src/activity.js, line 74

  reconstructLedger(){const known=new Set(this.realLedger.map(e=>e.id));let changed=false;for(const e of this.events){const n=normalize(e,this.discoverySeen,this.discoveryAttribution

  src/activity.js, line 77

  callerIdentity(req,now){const explicit=explicitClientId(req);const ua=String(req.headers['user-agent']||'');if(explicit)return {caller:hmac(this.callerSecret,`client:${explicit.kin

• Licence

  Note

  no licence file found.

  LICENCE_MISSING

  No file path was stored.

  no licence file found.

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit c5ce1cd86dab. can delete files. can reach a host that is not written as a fixed address. reads an environment variable. contains a minified payload. no licence file found.

Date and source

Date checked: 18 Oct 2026

Read how this letter is chosen