EXTENSIONS

Breach-claim ledger and verification state machine on DuckDB. Files claims with asserted levels (L0 rumor → L5 published), attaches sha256-attributed evidence, reconciles asserted dump profiles against observed inventories, records public statements, tracks onion watch-state diffs, and emits verification reports. Persistence layer of the breach-verification bench.

Tor onion-service observability model: bootstrap a persistent Tor daemon, probe onion endpoints, capture sha256-attributed evidence snapshots, crawl dump-inventory listings (filebrowser HTML or enumeration JSON) with PII-bearing filename masking. Network layer of the breach-verification bench.