// per-site profile
what detects you on bot.incolumitas.com
bot.incolumitas.com is defended by a detection vendor being profiled. below: the layers it enforces and the tool config the matrix predicts survives it.
enforced detection layers
not yet measured: enforced layers on bot.incolumitas.com
this entry is in the catalog but carries no scored capability yet. the matrix updates as the benchmark self-heals, so check back or see the capability matrix.
notes
KAN-256: repointed off #botScore. #botScore now wraps the BEHAVIORAL score (0=Bot, 1=Human, 'below 0.5 = bot'), which updates only from real mouse movement at 1.5/4/7/10/15s, our passive collector never moves a mouse, so it read '...'/~0, and the old rule (scoreLte 0.5) was BOTH inverted AND behavioral, so it false-passed every tool because the visit looked bot-like (ADR 0012 violation). Repointed to #new-tests: the passive fingerprint detection suite (window.new_results, puppeteerEvaluationScript / webdriverPresent / connectionRTT / refMatch / overrideTest / overflowTest / puppeteerExtraStealthUsed / inconsistent{Web,Service}WorkerNavigatorPropery), each 'OK' or 'FAIL', computed ON LOAD with no interaction. human = the suite actually rendered (carries the stable 'webdriverPresent' key) AND no test reads 'FAIL'. VERIFIED live 2026-07-21 in a real browser: an undetected browser scores every test 'OK'; the JSON absent/unpopulated lacks the key → conservative 'fail', never a false pass.
questions
- what detects you on bot.incolumitas.com?
- bot.incolumitas.com's detection vendor is being profiled.
- which config survives bot.incolumitas.com?
- no enforced layers are scored yet, so no prediction is available.