docs: top-graded selector fingerprinted — strip-after-rank boundary proven in prod
The anonymous live order (Brionna Jones edge 29.4 ahead of Rhyne Howard edge 42.9) is only explicable by server-side p_win ranking (.90 vs .745, both takeable) while the payload carries no paid fields — the free caller got the paid RANKING without the paid SIGNAL, on live data. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QJs13VsyiSKYQP6rj3NNmc
This commit is contained in:
@@ -389,6 +389,11 @@ dashboard every viewer receives the free-tier payload — correct order, no paid
|
||||
default (forwarding auth into a shared cache is how paid payloads leak); per-tier delivery through the
|
||||
proxy needs a tier-keyed cache and is NOT done here.
|
||||
|
||||
**Verified:** 311 suites / 3882 tests green (18 new, leak test on POPULATED p_win), web build exit 0,
|
||||
and induced on real prod snapshot data — MLB 8 / WNBA 10 props, 0 paid-field leaks, render-contract
|
||||
safe. Dashboard visual is auth-gated → tagged for the Chrome audit, not faked.
|
||||
**Verified:** 311 suites / 3882 tests green (18 new, leak test on POPULATED p_win), web build exit 0.
|
||||
**Post-deploy fingerprint (`72a14dc`) — the boundary proven in production:** 404→200 captured across the
|
||||
deploy boundary; the anonymous live order is *1. Brionna Jones (edge 29.4) · 2. Rhyne Howard (edge 42.9)*
|
||||
— an edge-only sort would lead with Howard (and the local induction over the stripped snapshot did), so
|
||||
**server-side p_win ordered it** (Brionna .90 @−106 > Howard .745 @−120) while the payload carries
|
||||
**PAID FIELDS: NONE**. A bogus bearer token also yields no paid fields (fail-closed proven in prod).
|
||||
The board's proxy path now returns 10 props, so TOP GRADES **renders** instead of falling back to empty.
|
||||
The rendered board is client-side → tagged for the Chrome audit, not faked.
|
||||
|
||||
Reference in New Issue
Block a user