Extend SCANNER_PROBE_RE for 2026-07-20 config-file scanner sweep (.bashrc/.envrc/deploy.sh/WEB-INF/info.txt)
2026-07-20 14:12-14:13 UTC scanner sweep produced warn/page_not_found rows for config/secret-file shapes NOT covered by PLUTO-616's SCANNER_PROBE_RE: /.bashrc /.envrc /deploy.sh /WEB-INF/web.xml /info.txt. Same class as PLUTO-616 (72137e9) — fold these into SCANNER_PROBE_RE so they down-tier to info/security/no-alert. COLLISION-SAFE shapes only (exact/anchored file paths). EXCLUDE from this WI: /test and random-gibberish slugs (/nwlydg9g6eoh1e6dj07kiyrlf, /mlo0xc7ic5s6v9ee2lybmusw.html) — a long-random-slug pattern is NOT collision-safe (pluto has legit seeded-UUID/token [id] routes; down-tiering random paths would mask real 404s). Verify each addition collision-free vs live routes per the branch-order note ~line 199. Class-S: single file (not-found-classify.ts), security-inert down-tier, reversible.
Questions
Activity
-
Folded 5 config/secret-file scanner shapes into SCANNER_PROBE_RE block Q -> info/security/no-alert: /.bashrc, /.envrc, /deploy.sh (bare .sh per .py/.bak precedent), /WEB-INF/ (any segment), /info.txt (anchored EXACT — bare .txt would shadow real /robots.txt). SHA 2681075 v2.21.3, Class-S self-verified (live version-match). Collision-cleared: public/ serves no .sh/.txt/WEB-INF/.bashrc/.envrc; .envrc uncaught by existing .env alts. Excluded /test + random-gibberish slugs (not collision-safe vs seeded-UUID [id] routes).