mirror of
https://github.com/iimp0ster/detection-chokepoints
synced 2026-08-09 12:41:00 +00:00
imposterandClaude Opus 4.8
2613361e54
Complete the living-document refresh on top of the Carson cradle rebuild: - daily/volume: +3 MHaggis days (Jul 14-16) via analyze_clickgrab; total_sites_crawled 26,969 -> 27,269, window now through 2026-07-16. - carson_landscape refreshed to 3,774 (gist, Jul 16). total_domains held at the Carson XLSX set (3,777) -- analyze preserves it distinct from the landscape count, no clobber. - clickfix_lure_keywords.yml regenerated from the updated MHaggis cache (IOK / URLScan page.body pivots; feeds IOK rules, not rendered on the trends page). Frozen by design, not refreshed (DECISIONS #011): payload_examples (rich generator gone, pre-Oct-2025 reports LFS-locked) and staging_domains (21 entries, all already ASN-enriched; new infra is manual curation, and enrich_staging_domains is local-only). Detection recs are all behavior/chokepoint-anchored and already cover the summer cradle reversal (the cradle-agnostic rule caught msiexec and the PowerShell comeback), so no new rule -- adding one would be false coverage. Verified: jekyll builds clean (exit 0, full build ~341s), clickgrab page renders with the refreshed data. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bx33CDbC3G8DQMQMARewof