Skip to content

Reserved WebDecoy-Test User-Agent always reports a test detection - #20

Merged
cport1 merged 1 commit into
mainfrom
feat/test-trigger
Aug 18, 2026
Merged

Reserved WebDecoy-Test User-Agent always reports a test detection#20
cport1 merged 1 commit into
mainfrom
feat/test-trigger

Conversation

@cport1

@cport1 cport1 commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" http://localhost:3000/ now produces a guaranteed detection through the normal /api/v1/sdk/detect path:

  • Recognized before rules and before local-analysis thresholds, so the documented one-liner always reports and never trips the customer's rate-limit/filter rules
  • Works from localhost, before deploy
  • Blocking verdict: enforce-mode adapters answer 403; the default monitor mode serves the request and records it
  • Keyless installs still return a blocking verdict but say via error that nothing was reported
  • Ingest labels the row as a test and keeps it out of stats, billing, actor scoring, and enforcement

Exports isTestTriggerUserAgent, TEST_TRIGGER_UA_PREFIX, TEST_TRIGGER_USER_AGENT.

All 198 tests pass (6 new); turbo build clean across all 7 packages.

curl -A "WebDecoy-Test/1.0" http://localhost:3000/ now produces a
guaranteed detection through the normal /api/v1/sdk/detect path — before
rules, before local-analysis thresholds — so a fresh install can prove
itself from localhost. The verdict is blocking (enforce-mode adapters
return 403; the default monitor mode serves the request and records it).
Ingest recognizes the same prefix, labels the row as a test, and keeps
it out of stats, billing, and enforcement.

Exports: isTestTriggerUserAgent, TEST_TRIGGER_UA_PREFIX,
TEST_TRIGGER_USER_AGENT.
@cport1
cport1 merged commit e5b578e into main Aug 18, 2026
2 checks passed
@cport1
cport1 deleted the feat/test-trigger branch August 18, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant