10 Heretic investigations tagged Engineering. Each carries its experiment and a hashed reproduction archive.
An in-zone point exposed an invalid distance bound in Heretic. The derivation, five counterexamples and the correction are reproducible.
A local clearance-verifier experiment separates published-key removal, cached keys, early refresh and a failed JWKS fetch.
Nine signed-record cases show which address a challenge clearance binds to and which original facts survive escalation.
An opaque control separates ordinary alpha conversion from a deliberate one-byte canvas readback alteration.
Ten requests through the reference Worker show where clearance is checked, which requests reach the origin, and why an image header does not admit an export.
Eight controlled rustls handshakes show why a hybrid offer alone does not predict failure. The mixed ClientHello carries a separate classic key share.
A two-CPU quota left Chromium reporting fourteen processors. Restricting affinity changed the count to two. Nine sessions show why throughput needs its own measurement.
An IP-in-IP packet experiment compares forwarding with TCP termination on the same delayed link.
A cost and protocol comparison of SMS verification and network-informed mobile escalation, with executable pricing and measurement-commitment examples.
A packet experiment separates a terminating proxy’s TCP handshake from the browser’s application response, with a direct-client counterexample.
The public demo returns the verdict and its named findings.