How evidence is produced, what each label means, and why some responses do not establish usable data.
Applied per endpoint, derived from the evidence trail.
A clear request-construction flow references the method/path/host; the literal is used by an identified request path.
Multiple mutually consistent references, but one construction step (e.g. exact path assembly) is unresolved.
A string, partial class reference or ambiguous symbol without a verified request flow.
Analysis establishes the string is not an HTTP API request or belongs to unrelated/third-party functionality.
Kept separate so a string is never mistaken for a live endpoint.
| Authority | Meaning |
|---|---|
| FOUND_IN_BINARY | Literal or structure observed directly in the shipped executable. |
| INFERRED_BY_CALLGRAPH | Derived from resolved references between functions. |
| HISTORICAL_DOC | Corroborated by an independent historical document. |
| HTTP_REACHABLE | Host/route answered an HTTP request. |
| AUTHORIZED_AUTH_REQUIRED | Access requires an authorized first-party credential flow. |
| PUBLIC_DATA_VERIFIED | Structured data returned without authorization and verified. |
Precise meanings. Definitions are served from the API.
| Status | Definition |
|---|---|
| not_tested | No probe attempted; no claim of reachability. |
| unknown | Probe attempted but the result could not be classified. |
| dns_failed | Hostname did not resolve. |
| tls_failed | TCP connected but TLS handshake failed. |
| host_reachable_endpoint_unverified | Host answered but the specific route was not confirmed. |
| http_route_reachable_no_data | Route returned an HTTP response that is not API data (HTML splash, login page, CDN error). |
| auth_required | Route returned 401 (or an auth challenge). Stopped at the barrier. |
| forbidden | Route returned 403. Stopped at the barrier. |
| rate_limited | Route returned 429. Stopped immediately. |
| retired_or_gone | Route returned 404/410 or the host no longer serves the path. |
| verified_public_data | Response is structured data (JSON/XML model) available without authorization. |
| verified_authorized_data | Structured data returned using an authorized, first-party credential flow. |
| blocked_by_policy | Probing refused by policy (not allowlisted, disabled, or budget exhausted). |
A response of 200 OK may be a marketing homepage, a login redirect, a CDN splash page or a generic HTML error. This atlas classifies such a result as http_route_reachable_no_data. Only a structured JSON/XML model response — with no authorization — is recorded as verified_public_data. Authorization barriers (401/403) and rate limits (429) stop the probe and are reported as such.
See the evidence page for hashes and provenance, and the API docs for the machine-readable surface.