j99dZddlmZddlZddlZddlZddlZddlZdZdZ dZ dZ dZ d Z d Zd%dZd&dZd&dZd&dZd&dZd&dZdZd'dZd'dZdZdZd(d)d Zd*d"Zd(d*d#Zed$krejedSdS)+u A README that promises to beat everything is refused. This is the check. The circumvention claim itself is OPEN: the owner decided on 2026-08-08 that naming a protection vendor and saying the product gets past it is allowed, after measuring that those searches are winnable. What is not allowed is a claim no measurement can support, and the shape of that claim is mechanical: a word that quantifies EVERYTHING, next to a word of getting past something, next to a word naming a protection, in one sentence. "It passes every bot detection test" is that sentence, and it was live on a public README on 2026-09-22. python -m invisible_core.claims # 1 if a refused claim is found python -m invisible_core.claims --selftest # the known-bad corpus ⛔ IT LIVES HERE BECAUSE THE CHECK THAT FOUND IT COULD ONLY RUN BY HAND. It was a script in a private workbench that walks the account over the GitHub API, so it ran when somebody remembered, and never on the pull request that introduced a sentence. A gate that runs after the text is public is an audit, not a gate. So the LOGIC is here, once, and each repository runs it on every change, the same arrangement as `invisible_core.english`. WHAT IS PER REPOSITORY is which files are read, declared under `[tool.invisible.claims] files = [...]` in `pyproject.toml`, defaulting to `README.md`. A declared file that does not exist is REFUSED: a perimeter that names nothing looks like a clean pass and checks nothing. ⛔ AND THE DEFAULT IS THE README ON PURPOSE, MEASURED 2026-09-23. The rule is a conjunction of three words in a sentence, and it was calibrated on READMEs: one true positive and zero false ones across the three repositories. Run over every tracked Markdown file of the same three it flags 92 sentences, and nearly all of them are NEGATIONS - "this project does not sell a bypass for any vendor" - or questions in a FAQ. A gate that cries wolf is a gate somebody switches off, so the perimeter is where the rule is exact, and the README is also the page PyPI shows, which is where a promise is read the most. THREE SCANS, AND ONLY TWO REFUSE: * unsupportable - an absolute, a circumvention word and a protection word in one sentence. REFUSED on grounds of truth, not of policy. * fraud - account-creation terms. REFUSED: there is no automation reading of "sms activation" or "bulk accounts", and that half was never opened. * claims - a circumvention word next to a protection word. REPORTED, never refused, so the 2026-08-08 decision stays visible in every run instead of disappearing from the tooling. KNOWN LIMITS, said out loud because a gate whose limits are unstated gets trusted too far. A negation still fires: "does not bypass any WAF" is refused, which is why docs are outside the default perimeter. An absolute BOUNDED by a number - "passed all five detection suites" - is checkable and is refused anyway; the remedy is to write the figure instead of the quantifier, which is better copy regardless. And it reads English only. ) annotationsN) bypassevadeevasiondefeatbeatcracksolvesolver undetected undetectablepass) captcha recaptchahcaptchaz bot detectionz bot-detectionzanti-botantibotzbot mitigationwaf detection fingerprint)everyanyallalwaysz100% guaranteed)zsms-activationzsms activationzaccount creationzaccount-creationz bulk accountszmulti-accounting)sesingedz(?z_inflected..os 3 3 3vTF] 3 3 3ec*h|]}dd|zS)Nr%r&s r)r*z_inflected..qs&AAA$ss)f$AAAr+)rrT)keyreversez(?:|c3>K|]}tj|VdSN)reescape)r'fs r) z_inflected..ss*::QBIaLL::::::r+)) _SUFFIXESendswithsortedlenjoin)r formsordereds` r) _inflectedr@is 4 3 3 3 3 3 3E }}SB AAAA=AAAAUT222G 388::'::::: :S @@r+textlistc fd|DS)zThe words of `words` present in `text`: whole-word, case-insensitive, and INFLECTION-AWARE. The one place that knows a word has other forms.cg|]A}tjtt|ztztj?|BSr%)r4search _EDGE_BEFOREr@ _EDGE_AFTER IGNORECASE)r'wrAs r) zhas..ysR / / /!y 1 5 Cr}.. /A / / /r+r%)rAwordss` r)hasrLvs- / / / /u / / //r+ctjdd|tj}tjdd|}tjdd|}tjdd|}dtjd |DS) aPMarkdown as sentences, without code, HTML or link targets. By SENTENCE and not by field: pairing words across a whole README would flag everything. Code blocks and inline code go (a command naming a vendor is not a claim), HTML goes (a title `div` gave three findings), and a link keeps its text and loses its URL. z ```.*?``` )flagsz`[^`]*`z<[^>]+>z\[([^\]]*)\]\([^)]*\)z\1cg|]>}|tjdd|?S)z\s+rN)stripr4sub)r'rs r)rJzsentences..sU G G GAGGII GBF63 " " ( ( * * G G Gr+z(?<=[.!?])\s+|\n\n+)r4rRSsplit)rAts r) sentencesrV~s |S$bd333A z3""A z3""A '22A G GX4a88 G G GGr+c g}t|D]o}t|tt|tt|t}}}|r,|r*|r(||ddd|d|d|p|S)avThe sentences that promise to beat everything. REFUSED. The conjunction is of THREE for a measurement, not for caution: the absolute with the protection word alone gives 1 true and 4 false positives on the three READMEs ("Every session gets a distinct fingerprint" is a fact about our own behaviour). With the circumvention word too: 1, and none false. Nxz promises to beat everything: next to z and )rVrL CIRCUMVENTION PROTECTION ABSOLUTESappend)rAoutrcpas r)scan_unsupportablerbs C t__--a''Q ););SI=N=Na1  - -q - JJDSD'''111aaa, - - - Jr+c@dt|tDS)z&Account-creation fraud terms. REFUSED.cg|]}d|zS)z0%r describes account-creation fraud, not testingr%)r'rUs r)rJzscan_fraud..s- , , , ? B , , ,r+)rL STANDALONE)rAs r) scan_fraudrfs- , ,z** , , ,,r+cg}t|D]U}t|tt|t}}|r'|r%||ddd|d|V|S)zA circumvention word next to a protection word, per sentence. REPORTED, NOT REFUSED: open since 2026-08-08 by owner decision.Nd: rY)rVrLrZr[r])rAr^rr_r`s r) scan_claimsrjs{ C t__>>1m$$c!Z&8&81  > > JJagggqqq!!< = = = Jr+)z README.mdroot pathlib.Pathtuplecddl}tj|dz }|stS|d5}||}dddn #1swxYwY|dididi}t|dtS) zThe files `[tool.invisible.claims]` declares, or the README. An absent declaration means the default perimeter, never an empty one. rNzpyproject.tomlrbtool invisibleclaimsfiles) tomllibpathlibPathis_file DEFAULT_FILESopenloadgetrm)rkrtpathfhdatasections r) files_forrs NNN <   0 0D <<>> 4 B||B               hhvr""&&{B77;;HbIIG Wm44 5 55s A..A25A2cggg}}}|D]tj|z }|s|C|dd}|fdt |t|zDz }|fdt|Dz }|||fS)z(refused, reported, missing) for `files` under `root`. Each finding is (path, sentence). A file that does not exist goes to `missing` and is a refusal of its own: it would otherwise read as clean. zutf-8replacecg|]}|fSr%r%r'r6names r)rJzjudge..sSSS!T1ISSSr+cg|]}|fSr%r%rs r)rJzjudge..s:::1dAY:::r+) rurvrwr] read_bytesdecoderbrfrj)rkrsrefusedreportedmissingr|rArs @r)judgers "$RwXG;;|D!!D(||~~  NN4   '';;SSSS'9$'?'?*TBRBR'RSSSS:::: D(9(9:::: Hg %%r+))z(the sentence that was live on 2026-09-22z4Open source, and it passes every bot detection test.)za plural protection wordzIt solves all captchas.)z%a verb form of the circumvention wordzBypassing any WAF, guaranteed.)z upper casezEVADES EVERY FINGERPRINT CHECK.)zthe hyphenated protection wordz&Always undetected by anti-bot systems.)z#inside a link, which keeps its textz+[Beats every captcha](https://example.com).)z fraud wordingz,An sms-activation service for bulk accounts.))z>>).83u:::D&* 7 7 7A |<18>>++<;<< < <(( ) ) 1 1 3 33r+intcd}tdtD]O\}}tt|pt |}td|rdndd||| z }Ptdt D]N\}}tt|pt |}td|rdnd d|||z }Ot d std |d z }td  t}t|t|\}}}|s|r4tdt|t|fz|d z }ntdn)#t$r}td|zYd}~nd}~wwxYwttd|sdnd|zz|rd ndS)Nrz&--- mutations that MUST be refused ---z killedSURVIVEDriz&--- cases that must NOT be refused ---zFALSE POSITIVEsilentrz4 SURVIVED: an open claim is no longer even reportedz--- the real repository ---z %d missing, %d refusedz silentz not verifiable (%s)z selftest: %szALL GOODz %d PROBLEMS) print KNOWN_BADboolrbrf MUST_NOT_FIRErjrrrr<r) badrrAhitrkr _reportedrfailures r)selftestrs% C 2333 d%d++?z$/?/?@@ ;HH;;TTBCCC 3w 2333# d%d++?z$/?/?@@ A,,AA44HIII s  > ? ? DEEE q '((( 1zz&+D)D//&B&B#G  g  ,G c'll/KK L L L 1HCC *    111 %/000000001 GGG .cJJJ}s7J KLLL?11sA6E88 FFFctjtd}|dd|dd||}|jrt S|jr+tj |j n t}t|}t||\}}}|rFtd t||d |fztd d S|r[td t|z|D]\}} td|d| ttdd S|D]\}} td|d| td|t|d |fzdS)Nr) descriptionz--rootz>the repository to judge (default: the one you are standing in))helpz --selftest store_true)actionz3REFUSED: %d declared file(s) do not exist in %s: %sz, zmA perimeter that names nothing reads as a clean pass. Fix [tool.invisible.claims] files, or remove the entry.rz=REFUSED: %d sentence(s) promise what no measurement supports:z rizA circumvention claim is open since 2026-08-08. An ABSOLUTE beside it is not a stronger claim, it is one nothing can support. Name what was measured instead: a figure is checkable, 'every' is not.z/reported, not refused (open since 2026-08-08): z'claims: clean (%s: %d file(s) read: %s))argparseArgumentParser__doc__ splitlines add_argument parse_argsrrkrurvrrrrrr<r=) argvr`rarkrsrrrrfindings r)mainr2s0G,>,>,@,@,CDDDANN8#KNLLLNN< N555 TAzzz-.V C7<   ' ' ) ) )D dOOE!&tU!3!3GXw CWtTYYw%7%789 : : : D E E Eq  MG    $ 1 1MD' Eww/ 0 0 0 0  R S S Sq!!! g ww  ! ! ! ! 3 3u::tyy// 0 1222 1r+__main__)r r!r"r!)rAr!r"rB)rkrlr"rmr3)rrr"rl)r"r)r __future__rrrur4rsysrZr[r\rer9rFrGr@rLrVrbrfrjrxrrrrrrr__name__exitr%r+r)rs22f#"""""      D   ) "   A A A A//// G G G G ",,,,   6 6 6 6 &&&&(  & 0 4 4 4 4 4!!!!H# # # # # L z CHTTVVr+