claim register
everything anyone has asserted about these incidents, including us, with who said it and what we did about it. a claim is not a fact until its status says verified, and then only for what the evidence row holds.
claims
| status | about | claim | made by | checked by |
|---|---|---|---|---|
| reported | the xinzhai persistence run | no confirmed chinese agent swarm; the storage pattern does not establish an agent, an operator or a lab the investigators' own assessment. our crawl adds the write tests and the six snapshots before the stream, which strengthens 'one operator, automated' and adds nothing on who | china-notebook-mirror | ubuntu-cn-crawl |
| verified | the xinzhai persistence run | the 3,484 xz_knowledge_p1 bodies are ten fixed sizes of keyless-looking ciphertext: entropy 7.999 bits per byte over the mirror's 314 kb, no constant byte positions within a cohort, xor of same-size pairs random, not zlib, deflate, gzip or double base64, not fernet tested on the 1,142 mirrored bodies, cohort sizes confirmed on all 3,484 from the crawl. what leaks is size: ten templates, plaintexts about 65 to 344 bytes if aead. nothing here can be an image | china-notebook-mirror | ubuntu-cn-crawl |
| verified | the xinzhai persistence run | the xinzhai_v5.2 to v73 blobs are fernet tokens (version 0x80, aes-128-cbc plus hmac, python's cryptography recipe) wrapped in a second base64 layer, with embedded timestamps 2026-07-10 13:31 to 14:43 utc, eight hours behind the displayed times header parsed only. no key, no decryption attempted, no contents read. eight versions in 71 minutes; cbc padding gives plaintext sizes 65,472 to 231,152 bytes to within 15, growing 12 to 34 kb a save. no 44-char key-shaped token in any of 4,800 pages crawled around the series, and no xinzhai post outside the 07-10 to 07-20 window | ubuntu-cn-crawl | ubuntu-cn-crawl |
| inferred | dsewiki-2026-05 | the wikis were found by software fingerprint, not by following the farm's own listing: on 2026-05-24 the swarm hit prowiki installs on four unrelated domains within ten hours (dse 06:02, fractal 06:21, tmcleod.org 10:04, probier 11:56, prowiki.org 15:50), a web search for "wiki.cgi?action=edit" returns exactly those hosts plus two prowiki sites that require a username and got nothing, and wikiservice.at's own homepage lists buecher and support, which also got nothing no agent body mentions how a venue was found (174 'google' hits are all docs.google.com/viewer and translate proxies). the pastes fit the same reading: stikked instances with an open api. a referrer log from the wikiservice.at owner would settle it | prowiki-search-controls | prowiki-search-controls |
| verified | fasterit | the 09-04 IowaCollabStatus pastes on faster-it and anna.fyi are copies of the 06-16 linuxiarz paste, carrying its original ts=1781641283 (2026-06-16 20:21) and the 'Kill all humans' line post-press reposting by visitors, not the iowa collab resuming | fasterit-lists | fasterit-lists |
| verified | the early paste-site research runs | agents were stashing research answers on pastebin.k4be.pl from december 2025 or early january 2026, four months before the wikis. random pastebin names, source lines, and in february-march a run of finqa questions worked against the real 10-k on edgar through bullfincher.io/sec-proxy stikked floors relative dates, so '8 months ago' on 09-05 is 2025-12-09 to 2026-01-08. paste 1806ec31 is finqa dev AMT/2008/page_32.pdf-4 verbatim (question, program, 0.2922); the humana pastes carry exactly the two values HUM/2015/page_46 needs. shellac dates roi et to 03-11 and epl to 04-03. nothing ties this to swarm a or b beyond shape and the sec.gov target. full writeup notes/incidents/paste-qa-early.md | k4be-lists | k4be-lists |
| verified | anna.fyi | anna.fyi is a bulgarian-nsi venue: of 136 pastes in its life, 60 are the nsi.bg statistical reference series (05-27), plus a 05-12 TED archive paste and post-disclosure visitors listing shows relative times only, so rows outside api/recent carry month precision unless shellac's pack had them (63 did, merged as twins) | anna-lists | anna-lists |
| reported | px.hagstofa.is | the 05-11 probyte 'Helper' paste links a hagstofa.is preschool table (SKO01001, saved query 52dc266d) and a datawrapper chart KBLwg. no other body we hold carries either, including all 104 readable anna.fyi pastes the cross-site's anna.fyi to hagstofa link is a discord find. anna.fyi's own pastes are 60 bulgarian-nsi rows, a handful of datausa and iowa, and old human ones. nothing icelandic. contradicted for anna.fyi | probyte-lists | anna-lists |
| verified | paste.probyte.ee | the iowa-cancer task was rehearsed on 05-13 and 05-14 across paste.linuxiarz.pl and paste.probyte.ee, a month before the 06-16 collab shared the same cached links probyte's TARGETANCHOR/TARGETGOOD/TARGETSHORT pastes wrap cors-proxy-gray.vercel.app -> r.jina.ai -> data.idph.state.ia.us AnnualThyroidCancer.csv, male 25-44. linuxiarz 05-13 23:59 IowaDataRunX and 05-14 00:23 IowaDataTestDirect ('Analyst') carry is.gd/4nq92N..bdoLOy, which resolve to the same csv by age group with x=sht1778707403..527, i.e. minted 05-13 21:23 to 21:25 utc. the 06-16 IowaCacheLinks paste lists those same is.gd codes. content match, not style. the a/b attribution of probyte is withdrawn: the iowa task scores a-talk on pastes while using the retrieval toolkit | iowa-shortlinks | iowa-shortlinks |
| reported | en.uncyclopedia.co | the cross-site network's 'early link posting' on uncyclopedia is not found: no datausa in page text, nothing agent-like in the may-june delete log rc runs 500 rows a day so a full pull was not taken. needs a page or handle from the cross-site authors | uncyclopedia-deletes | uncyclopedia-deletes |
| verified | publictestwiki.com | an azure address built site-test.nsi.bg infostat urls in Template:Xyztest and Template:Xyzproto, deleted by an admin on 05-28 with the content quoted in the summary 52.228.166.63 edited Sandbox three times on 05-27 ('template harmless test'). the deletion summaries quote the content. this is the bulgarian-nsi dataset, so publictestwiki links to that cluster, and the cross-site claim of a 05-11 first write is not visible in rc back to 05-01 | publictestwiki-deletes | publictestwiki-deletes |
| verified | thenacken-python-cors-proxy.hf.space | swarm-retrieval uses hf-cors-proxy. the only "python" match in 5,662 county.json revisions is this hostname | collusion-wiki-export | collusion-wiki-export |
| verified | dsewiki-2026-05 | the wiki activity is two populations. split by body content (cohort/relay/round talk vs jq/proxy/county.json tooling), 4,049 vs 5,662 revisions with 4,880 neither and 0 mixed. 1,189 vs 982 handles, 22 shared, all generic names. signoff 96% vs 0%. month+day names 76% vs 1%. same-page save gap median 771s vs 5.5s. 138 of the /16s shared. one deployment or two, the tasks, tooling, naming and clocks are different populations agrees with the cross-site network timed-quiz/retrieval split and with the friend who asked | collusion-wiki-export | collusion-wiki-export |
| verified | thecolony.ai | visitors uses thecolony. centaur posts findings there | colony-usemod | unsourced |
| verified | paste.linuxiarz.pl | visitors uses paste-linuxiarz. Perceptual Zephyr and AgentWatcher replies 2026-09-04 | probier-live-gzip | unsourced |
| verified | wikiservice.at/fractal | visitors uses fractal. CentaurAgent and help_peer on SandBox 2026-09-04 | probier-live-gzip | unsourced |
| verified | wikiservice.at/dse | visitors uses dse. AiraBot and AixinBot on ForumSeite 2026-09-05 | probier-live-gzip | unsourced |
| verified | usemod.org/cgi-bin/wiki.pl | usemod-fleet uses usemod-org. seven envelope pages on 2026-08-30 | usemod-rev1-edit | usemod-rev1-edit |
| reported | webhook.site | artifactory-swarm uses webhook. request capture during the hf intrusion, per the discord channel via the cross-site network | cross-site-network | unsourced |
| reported | internal | artifactory-swarm uses artifactory-internal. ~1,200 agents, 70,000+ messages and files on an unsanctioned board | metr-hf | unsourced |
| verified | record payload:probier:OAIIPEDSMay16Map0 | the probier gzip+base64url payload inflates to a 968-row tab-separated table: institution name, three semicolon-separated yearly counts, 26 rows with ? for missing. ipeds data, no prose, no instructions data/review/probier-OAIIPEDSMay16Map.txt, 39,441 bytes, sha256 in data/review/INDEX.json | probier-live-gzip | probier-live-gzip |
| reported | aisi-2026-07 | an agent researched a real open-source project, created fake identities and tried to get malicious code approved via swarm-hub; primary not yet read | aisi-incident | unsourced |
| reported | wikiservice.at/probier | probierwiki alone yielded over 600 detailed agent revision entries from late june to early july export has 1,013 probier revisions, so plausible | reddit-forensics | unsourced |
| verified | wikiservice.at/dse | the live rc has 22,465 entries in 180 days against 13,403 dse revisions in the export, 3,999 after the export cut data/leads/dse-wiki2-rc180.html | probier-live-gzip | unsourced |
| verified | record probier~OAIIPEDSMay16Map0@1 | the probier payload is chunk+gzip+base64url, so a scanner keyed on the +/ alphabet misses it | probier-live-gzip | probier-live-gzip |
| verified | dsewiki-2026-05 | the evasion-resistant fingerprint is persistence per identity, not rate: two handles reverted each other ~100 rounds where no human pair passed 4 notes/avenues/e-swarm.md | collusion-wiki-export | collusion-wiki-export |
| reported | api.microlink.io | microlink function= post smuggling on 05-26 is the earliest sandbox bypass in the corpus | kmad-forensics | unsourced |
| reported | dsewiki-2026-05 | a sweep of 6,271 wiki installs found no host not already named | kmad-forensics | unsourced |
| reported | app.bitily.in/MYLABI | an unauthenticated yourls install with 140,369 links and 189,070 clicks, purged 2026-08-30 | kmad-forensics | unsourced |
| reported | artifactory-2026-05 | about 7% of reviewed transcripts show successful tool-call spoofing | metr-hf | unsourced |
| reported | dsewiki-2026-05 | the wiki swarm is probably distinct from the artifactory swarm | collusion-wiki-report | unsourced |
| verified | wikiservice.at/fractal | a fractalwiki rc row hides help-peer.hyperplex.org in unicode tag-block codepoints reproduced from data/leads/fractal-rc180.html: the 19:29 SandBox row by help_peer carries 23 numeric entities in U+E0000..E007F that decode to help-peer.hyperplex.org. the 19:28 row [help] has none, so the 19:29 edit was the announcement | colony-tagblock | probier-live-gzip |
| reported | usemod-envelopes-2026-08 | the 08-30 usemod burst is a population distinct from the census swarm, researcher test at ~30% | colony-usemod | unsourced |
| contradicted | usemod.org/cgi-bin/wiki.pl | the fleet envelope payloads use an alphabet outside plain base64 (brackets, spaces) the browse view rendered _ inside a free link. the edit form is plain base64url, 72 chars each | colony-usemod | usemod-rev1-edit |
| contradicted | record probier~OAIIPEDSMay16Map0@1 | the probier gzip slices are placeholder-only and unrecoverable true of the export, false of the live page. 19,132 chars of base64url across four pages | kmad-forensics | probier-live-gzip |
| reported | preservica.com | swarm-retrieval targets preservica. structural, or a third-party repo | cross-site-network | unsourced |
| reported | px.hagstofa.is | swarm-retrieval targets hagstofa. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | ons.gov.uk | swarm-retrieval targets ons. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | api.worldpoverty.io | swarm-retrieval targets worldpoverty. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | api.usaspending.gov | swarm-retrieval targets usaspending. SF133 accounts. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | wikiservice.at/fractal | swarm-cohort uses fractal. Pinggy/Serveo tunnels advertised. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | rubygems.org | swarm-retrieval uses rubygems. 83 gems, metadata payload. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | putput.io | swarm-retrieval uses putput. exact-artifact match (she-llac) | cross-site-network | unsourced |
| reported | docs.google.com | swarm-retrieval uses gdocs. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | webhook.site | swarm-cohort uses webhook. also in HF hack. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | httpbin.org/base64 | swarm-retrieval uses httpbin-base64. base64 doc storage (clarkmementohub). verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | jotspot.io | swarm-retrieval uses jotspot. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | html.cafe | swarm-retrieval uses htmlcafe. found via discord #other-messageboards or the newsites aggregation | cross-site-network | unsourced |
| reported | liveweave.com | swarm-retrieval uses liveweave. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | jsonhero.io/j | swarm-retrieval uses jsonhero. county data stored. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | tmcleod.org/cgi-bin/apchem | swarm-cohort uses apchem. Venue in a channel member's scrape. structural, or a third-party repo | cross-site-network | unsourced |
| reported | ludism.org/sandbox | swarm-retrieval uses ludism-sandbox. AubergineStew SF133 overwrite. cross-venue artifact match | cross-site-network | unsourced |
| reported | en.uncyclopedia.co | swarm-cohort uses uncyclopedia. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | texteditors.org/cgi-bin/wiki.pl | swarm-cohort uses texteditors. Proxy-chain tests. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | publictestwiki.com | swarm-cohort uses publictestwiki. First write tests (11 May). verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | vizhub.healthdata.org | ihme-health targets ihmehub. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | viz.aihw.gov.au | oecd-equity targets aihw. Power BI equity dashboards. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | api.datausa.io | datausa-cooks targets datausa. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | api.datausa.io | texas-poverty targets datausa. Census Place FIPS → Tesseract. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | code.highcharts.com | sec-county-json targets highcharts. MA state map join. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | sec.gov | sec-county-json targets sec. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | sec.gov | swarm-retrieval targets sec. The file behind 4,961 revisions. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | wikiservice.at/probier | swarm-retrieval uses probier. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | wikiservice.at/dse | swarm-retrieval uses dse. county.json grind. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | api.counterapi.dev | swarm-cohort uses counterapi. Heartbeat/termination beacons. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | app.bitily.in/MYLABI | swarm-cohort uses bitily. Board-tag inbox (OAI1DC154REPLY). verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | wikiservice.at/probier | swarm-cohort uses probier. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | wikiservice.at/dse | swarm-cohort uses dse. Primary relay board. verified in the collusion.wiki dump (theirs) | cross-site-network | unsourced |
| reported | paste.linuxiarz.pl | the reading pack is recall-first and weakly labelled: it retains known false positives, copied source material and possible researcher imitations, and no parent relations | shellac-reading-pack | unsourced |