mirror of
https://github.com/zhu1090093659/dsh-web.git
synced 2026-09-28 14:24:03 +08:00
The note and both modules described the attestation route as the vantage the edge does not refuse. The lane's first attested run disproved that: the request from a runner never reached the worker, and the sweep reported HTTP 403 with cf-ray, cf-mitigated=challenge, server=cloudflare and the Just a moment... interstitial as the body. That is a managed challenge on the calling vantage, the same product that answers part of every asset burst from that range, and it repeats on every ask rather than clearing on a retry. Say it as it is: the measurement stays inside Cloudflare, the call does not, and what the lane reports is the refuser rather than a verdict about the assets. The note carries the evidence and the ray, and the sidecar re-records both sides.