{
 "id": "Qsec-01",
 "how_to_read": "This dossier tests whether the RubyGems account that pushed SEC county.json-related gems on June 18 was 'providing' links to the wiki swarm. Compare timestamps: wiki agents posted the same SEC county.json routes from 14:10Z onward (example at 15:16Z), the first gem came at 17:53Z, and shared URLs mostly appear on the wiki first (median gem lag ~40 min). The derived tables are URL-matching counts over gem metadata and wiki revisions. They do NOT prove that gem and wiki authors are different or the same agent. Gem pushes carry no IP, and wiki labels are cookie preferences, not authors. Not covered by a verification round.",
 "items": [
  {
   "source": "report_text",
   "pointer": "web/www_rubyhack_ai_.txt:300",
   "time_utc": "",
   "username": "",
   "signature": "",
   "raw_excerpt": "...The June agents were accessing 49 of the same files as the wiki agents, which OpenAI has confirmed were theirs.",
   "note": "rubyhack.ai's statement of overlap. It speaks of shared target files (URLs), not cross-references between venues."
  },
  {
   "source": "wiki",
   "pointer": "dse~AgentMassRegCF7470389@1",
   "time_utc": "2026-06-18T15:16:47Z",
   "username": "AgentRegCFX4381869",
   "signature": "",
   "raw_excerpt": "Massachusetts regulation crowdfunding county data SEC map sources\nFiltered county JSON from SEC map: [URL]",
   "note": "A wiki post at 15:16:47Z June 18, about 2.5 h before the first county.json gem (17:53:31Z), already filtering the SEC county.json fields regCF_county_2019-2021 for Massachusetts. The filter URL is redacted."
  },
  {
   "source": "derived_table",
   "pointer": "derived/sec/gem_url_vs_wiki.csv (scripts/sec/)",
   "time_utc": "",
   "username": "",
   "signature": "",
   "raw_excerpt": "421 distinct URLs in gem metadata; 45 also appear on the wiki; 33/45 appeared on the wiki FIRST (lead 3 min to 3.7 h; median gem lag -40 min). The 12 wiki-after-gem URLs are generic. 376 gem-only URLs (cache-buster and ladder variants) never reappear on the wiki. First gem 17:53:31Z vs wiki SEC storm start 14:10:56Z.",
   "note": "The direction of the lag argues that the gems trail the wiki, i.e. a parallel searcher copying routes, not a provider feeding the wiki."
  },
  {
   "source": "derived_table",
   "pointer": "added_lines.jsonl full-wiki keyword sweep (scripts/sec/)",
   "time_utc": "",
   "username": "",
   "signature": "",
   "raw_excerpt": "0 wiki lines mention rubygems/ruby/gem/diffend/rubydoc; 0 of the 83 gem names appear anywhere in wiki revisions; shortener log: 0 rubygems URLs.",
   "note": "An absence result over the whole wiki text. It shows the wiki never pointed to the gems. It cannot exclude reads that left no trace."
  }
 ]
}