Skip to content

Network and Circumvention · Current evidence

Controlled external probes publish a current injector-tomography round

The optional, rate-limited measurement runs only from a declared controlled deployment.

2 countinjector response-process floor · across 210 injecting target IPs

What the record says

Observation. A current controlled DNS-probe round is available for injector-tomography analysis.

This report is scoped to bleedthrough. It does not merge unlike instruments or infer a cause from co-movement.

How it was measured

the censor as sensor — benign stateless UDP DNS probes provoke the GFW's own injectors to answer; we fingerprint the fleet from the forgeries. Transport this round: direct injection over dark IPs. Direct receive windows overlap; outbound sends remain rate-capped. Injector count is a FLOOR, not a census: each injector answers a given query at most once, so a silent injector is undercounted.

What this cannot establish

  • This optional active-probe layer is deployment-controlled; absence must never be converted into a zero or calm reading.

Instrument brief

live-reading · Current evidence

Palimpsest's view: bleedthrough is live. The current number is 2 over 210 injecting target IPs. This is the instrument reading, not a national censorship rate.

Key number

  • 2 injector response-process floor · 210 injecting target IPs

Current number and denominator

  • The current injector response-process floor is 2 over 210 injecting target IPs.
  • A current controlled DNS-probe round is available for injector-tomography analysis.

Same-edition board context

  • Same-edition elevated layers: none declared. Other live lead or high signal ids: ddti, weibo-hotsearch, undertext, ooni-gfw, in-path-interference, censored-planet, ioda-outages, vantage-fusion, erasure-observatory, wayback, app-storefront, apple-censorship, generative-firewall.
  • No editorial_priority or MAD score is treated as a finding on this reading.

What this reading does not show

  • This optional active-probe layer is deployment-controlled; absence must never be converted into a zero or calm reading.
  • The brief does not assign motive, identify a person, merge unlike denominators, or treat a missing reading as a zero.
  • the censor as sensor - benign stateless UDP DNS probes provoke the GFW's own injectors to answer; we fingerprint the fleet from the forgeries. Transport this round: direct injection over dark IPs. Direct receive windows overlap; outbound sends remain rate-capped. Injector count is a FLOOR, not a census: each injector answers a given query at most once, so a silent injector is undercounted.

Elevated peers this edition

ddti (attention), weibo-hotsearch (attention), undertext (attention), ooni-gfw (network), in-path-interference (network), censored-planet (network), ioda-outages (network), vantage-fusion (network), erasure-observatory (erasure), wayback (erasure), app-storefront (erasure), apple-censorship (erasure), generative-firewall (models)

Counterreadings

  • A current or withheld instrument value is not independent corroboration of any publisher article, and it is not a cause.
  • Co-movement with another live signal on this edition is layer context, not a shared rate or a coordinated action.

Limitations

  • This optional active-probe layer is deployment-controlled; absence must never be converted into a zero or calm reading.
  • The companion copies newsroom templates only; it adds no interview, article body, or generative prose.

Analysis instrumentv-dc1e80ed017a5a23053da263 · structured assessment · reading companion

Read the evidence

The exact source reading is bleedthrough-latest.json. The structured version of this dispatch is published beside the article.