QA sweep / vision judge / adversary / receipts

Point it at
a web app.
Seal the door.

A browser agent sweeps the target inside a throwaway Docker container on a Vultr VM. It holds no keys, it can only reach the target, and the container is destroyed the moment it finishes. You get screenshots, signals, and a receipt for every call it made.

Load target into the bay01
Public runs can hit the planted targets. Any other URL needs the operator key.

Run log

RunTargetStatusTokensStarted
run_mw1ckoou070b9393http://shop.blastdoor.local/done9,2132026-11-03 23:57 UTC
ctn_mw1cji4cfe2410b6http://hostile.blastdoor.local/done02026-11-03 23:56 UTC
ctn_mw1cfcrk3123a735http://hostile.blastdoor.local/done4,3162026-11-03 23:53 UTC
run_mw1bucwnade2f67bhttp://shop.blastdoor.local/done35,4762026-11-03 23:36 UTC
run_mw1bmwbo82045601http://shop.blastdoor.local/done46,2662026-11-03 23:30 UTC
run_mw1b5sf476fc22dahttp://shop.blastdoor.local/done12,9772026-11-03 23:17 UTC
run_mw1a2yk20d855d7chttp://shop.blastdoor.local/done13,7862026-11-03 22:47 UTC