← Operations Web Function

Monitor Web Fleet Skill

CANDIDATE DELEGATE EXISTING CANONICAL · Operations Web Function 0.1.0. Run credential-free, read-only website and fleet observations using declared coverage, known controls, critical paths, crawler identity comparisons, impossible-path canaries, drift checks, locks, source hashes, and immutable receipts. Use for uptime checks, fleet sweeps, cloaking or spam detection, scheduled monitoring, post-deploy observation, or when deciding whether a website is OK, degraded, down, blocked, unreachable, suspect, or infected.

Canonical owner: blitzmetrics-skills:security-audit · Task registration: NOT_A_BOUNDED_TASK

Broader definitive hub · Exact Task Library page: NOT_A_BOUNDED_TASK

Download the complete plugin · Source skill SHA-256: 7d79eed8fe6c4cb7e06eb29e7b30ab178be49f2ecf2151e8658f20fb12da542a

Candidate source: dennisyu/blitzmetrics-skills · commit: PENDING_MERGE · path: skills/monitor-web-fleet/SKILL.md

This is a Web Function probe-and-receipt adapter for the canonical security-audit method, not a second security verdict owner. Observe before diagnosing. This interface never repairs, publishes, logs in, changes a baseline, or treats an external pass as proof of internal cleanliness.

Run order

1. Load a freshness-checked projection from $inventory-web-properties and assert parsed = declared.
2. Acquire a single-run lease and calculate the schedule-window idempotency key.
3. Prove the instrument with a known-good URL and a deliberately nonexistent path. Abort without a target verdict when controls fail.
4. Probe every selected target's declared critical paths with real status codes.
5. Compare a normal browser identity with a real crawler identity.
6. Request an impossible-path canary that must remain absent. A 200 is a trigger to inspect, not automatically a compromise verdict unless the payload or differential supports it.
7. Separate DNS, TLS, connection, edge/WAF block, HTTP error, soft redirect, content drift, and hostile signal classes.
8. Compare external resources only to a human-approved known-good baseline. Captured current state remains CANDIDATE_NOT_APPROVED.
9. Retry transient read-only failures from a bounded independent vantage. Do not call the target down because the observer timed out.
10. Write an immutable receipt with property and control coverage, classifications, source hashes, unknowns, and next events.

Verdict discipline

• OK: required external checks in this job's scope passed.
• DEGRADED: the target is reachable but a critical path, latency threshold, redirect, or expected behavior failed.
• DOWN: positive external evidence of a production failure, such as a repeatable 5xx.
• SUSPECT: a crawler split, canary interception, injection marker, or drift needs preservation and triage.
• INFECTED: multiple supporting signals establish hostile behavior; preserve evidence immediately.
• BLOCKED: the observer was denied; target health stays UNKNOWN.
• UNREACHABLE: no response was established; re-probe and separate DNS/TLS/network causes.

PASS_EXTERNAL means only the declared external checks passed. It cannot be shortened to “the site is clean.”

Portable tool

From the plugin root, run:

python3 scripts/web_function_monitor.py --self-test
python3 scripts/web_function_monitor.py --config examples/sites.example.json --output-dir receipts/monitor

The shipped monitor is a minimal public reference adapter. Production must bind one current, tested engine to the canonical security-audit method and the same probe/receipt interface rather than running a competing verdict system. The separately referenced fleet-uptime-monitor remains an unresolved dependency until one merged source is identified. Route findings to $triage-web-incidents and suspected compromise to $preserve-web-incident.

This is a generated candidate implementation page, not automatically a definitive article or accepted Task Library task. It delegates to the named canonical owner until reviewed registration and merge receipts exist.