Provenance · trap streets
Found a Ref: elc- token?
Every quarantine notice Elcaro serves carries a unique canary ref, and the specimen kit stamps one per fetch. Paste a token to see which scan minted it — the verdict signature authenticates the JSON; this traces the relayed text.
What a hit means: the token was minted inside a genuine quarantine notice — the shown score, level, and techniques are the original verdict, and only the content's SHA-256 is on record (never the content).
What a miss means: forged, minted by another deployment, or older than the registry's memory. Worth flagging in your pipeline logs — but it proves nothing on its own. Trap streets trace copies, not ideas: an agent that paraphrases a notice drops the token.