{
 "id": "Qpre-05",
 "how_to_read": "This finding shows the fetch-indirection 'ladder' (readers, document viewers, nested proxy chains, base64 echo) was not invented on the DSE wiki: the whole repertoire predates it in urlquery (March-April), RubyGems gem metadata (May 8-11) and a public test wiki (May 17), and was redeployed on DSE within about four days. The derived table lists the first-seen time of each technique per channel (URLs stripped for safety). URLs and technique chains are elided throughout. urlquery gives curator prose only, so its dates are lower bounds; the DSE first-seen depends on a regex. Not independently verified.",
 "items": [
  {
   "source": "derived_table",
   "pointer": "$S/scripts/dossier/summaries/Qpre-05_technique_first_seen.json",
   "time_utc": "",
   "username": "",
   "signature": "",
   "raw_excerpt": "{\n \"source_file\": \"$S/derived/pre/technique_first_seen.csv (URL excerpts dropped for safety)\",\n \"first_seen_of_each_technique_across_channels\": [\n  {\n   \"technique\": \"indirection(reader/proxy)\",\n   \"source\": \"urlquery\",\n   \"first_seen\": \"2026-03-06T19:46:36Z\",\n   \"pointer\": \"first indirection class\"\n  },\n  {\n   \"technique\": \"custom_program\",\n   \"source\": \"urlquery\",\n   \"first_seen\": \"2026-03-06T19:52:27Z\",\n   \"pointer\": \"first custom_program class\"\n  },\n  {\n   \"technique\": \"temp_file_host\",\n   \"source\": \"urlquery\",\n   \"first_seen\": \"2026-03-11T11:42:28Z\",\n   \"pointer\": \"90c67908\"\n  },\n  {\n   \"technique\": \"echo_base64_httpbin\",\n   \"source\": \"urlquery\",\n   \"first_seen\": \"2026-03-11T12:05:59Z\",\n   \"pointer\": \"d6669745\"\n  },\n  {\n   \"technique\": \"hosted_object_proxy_document_write\",\n   \"source\": \"urlquery\",\n   \"first_seen\": \"2026-04-18T22:44:50Z\",\n   \"pointer\": \"025230b9\"\n  },\n  {\n   \"techniq",
   "note": "First-seen date of each technique class per channel (urlquery / rubygems / other_wikis / DSE). Shows the ladder existed off-DSE weeks earlier. Built from $S/derived/pre/technique_first_seen.csv with URL excerpts removed."
  },
  {
   "source": "derived_table",
   "pointer": "$S/scripts/dossier/summaries/Qpre-05_technique_first_seen.json",
   "time_utc": "",
   "username": "",
   "signature": "",
   "raw_excerpt": "…en\": \"2026-05-14T00:34:00Z\",\n   \"pointer\": \"02cb8c28\"\n  },\n  {\n   \"technique\": \"reader_other(md.succ/ctxr/web2md)\",\n   \"source\": \"other_wikis\",\n   \"first_seen\": \"2026-05-17T21:30:24Z\",\n   \"pointer\": \"publictestwiki~Sandbox@34\"\n  },\n  {\n   \"technique\": \"interwiki_fb_redirect\",\n   \"source\": \"other_wikis\",\n   \"first_seen\": \"2026-05-17T21:30:24Z\",\n   \"pointer\": \"publictestwiki~Sandbox@34\"\n  },\n  {\n   \"technique\": \"plain_api_l…",
   "note": "A public test wiki shows a multi-intermediary reader chain on May 17, a week before DSE's first plain link."
  },
  {
   "source": "wiki",
   "pointer": "dse~FederalDataReferenceXYZ@1",
   "time_utc": "2026-05-24T06:02:19Z",
   "username": "FederalUserTest",
   "signature": "",
   "raw_excerpt": "External links: [URL] and [URL] and [URL] and [URL]",
   "note": "DSE's own starting point on May 24 is just a plain link list; the more elaborate techniques appear over the following days."
  }
 ]
}