Skip to content

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression - #57902

Merged
SHL0MS merged 1 commit into
NousResearch:mainfrom
SHL0MS:feat/unbroker-blocked-tail
Jul 3, 2026
Merged

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression#57902
SHL0MS merged 1 commit into
NousResearch:mainfrom
SHL0MS:feat/unbroker-blocked-tail

Conversation

@SHL0MS

@SHL0MS SHL0MS commented Jul 3, 2026

Copy link
Copy Markdown
Collaborator

Follow-up to #57438 (merged). All changes are confined to optional-skills/security/unbroker/ and its test; no core, tool, or plugin changes.

Field learnings from a live blocked-sites removal pass, folded into the skill so future runs execute rather than re-derive mechanics.

Posture

  • Blind opt-out is now the default, not a fallback: submit an opt-out/deletion on every site with an accessible removal channel even without first confirming a listing. It discloses only the subject's own identifiers to the broker's own official channel, so least-disclosure still holds. Guided flows that match email + DOB + name and return "no results" are treated as a stronger not_found (the opt-out flow doubles as the search).
  • Blocked-form rule: when a form is automation-hostile (hard CAPTCHA, Cloudflare/DataDome, slide-to-verify slider), default to the broker's cited rights-request email rather than recording blocked.
  • CAPTCHA policy clarified: never defeat behavioral/token/slider challenges; it is acceptable to read a static distorted-text or plain-arithmetic CAPTCHA on the subject's own opt-out; stop if the whole submission is rejected after a correct answer (the site is fingerprinting the automation, not grading the answer).

Broker records

  • intelius.json: field-confirmed delete-wipes-suppression — a PeopleConnect deletion wipes the suppression and the subject re-lists across the whole affiliate cluster; if a "deletion request is Complete" email appears, re-run suppression and re-verify the Control step reads "suppressed". Guided-mode session persists; DOB is an <input type=date> (ISO YYYY-MM-DD).
  • new addresses.json (PeopleConnect/Intelius front-end, covered by the cluster suppression) and socialcatfish.json (cited rights-email lane + automation-hostile-form pitfalls).

Docs

  • new references/site-playbooks.md: per-site game-plan matrix (8 blocked-tail sites), the meta-search no-op skip-list (IDCrawl/Lullar/Yasni/WebMii/Namesdir/iTools/Skipease), and the InfoPay / PeopleConnect backend clusters. OSINT-list triage taxonomy added to methods.md.
  • state-machine.md: fixed doc drift and documented the transition gotchas (submitted -> not_found is illegal and resolves as awaiting_processing; blocked -> submitted goes via action_selected; operator_manual_check evidence note; --evidence & shell pitfall).

Tests

tests/skills/test_unbroker_skill.py: 97 passing (+1 cluster-coverage regression). ruff and check-windows-footguns.py --all clean.

…ct delete-wipes-suppression

from a live blocked-sites pass (no PII):
- posture shift: blind opt-out is the DEFAULT, not a fallback -- submit on every site with an
  accessible removal channel even without first confirming a listing (own identifiers to the broker's
  own official channel = still least-disclosure). guided flows double as the authoritative search.
- blocked-form rule: when a form is automation-hostile (hard captcha / cloudflare / datadome /
  slide-to-verify), default to the broker's CITED rights-email rather than recording blocked.
- captcha policy clarified: never defeat behavioral/token/slider challenges; ok to read a static
  distorted-text or plain-arithmetic captcha on the subject's own opt-out; stop if the whole
  submission is rejected after a correct answer (fingerprinting the automation, not grading it).
- intelius/peopleconnect: delete-wipes-suppression is field-confirmed -- a deletion-complete email
  means the suppression is gone and the subject re-lists cluster-wide; re-run suppression and verify
  the Control step reads "suppressed". guided-mode session persists; DOB is an <input type=date>.
- new records: addresses.json (intelius front-end, cluster-covered) and socialcatfish.json
  (cited rights-email lane + automation-hostile form).
- new references/site-playbooks.md: per-site game-plan matrix (8 blocked-tail sites), the meta-search
  no-op skip-list (idcrawl/lullar/yasni/webmii/namesdir/itools/skipease), and the infopay /
  peopleconnect backend clusters. OSINT-list triage taxonomy added to methods.md.
- state-machine.md: fixed doc drift + documented submitted->not_found illegal (resolves as
  awaiting_processing), blocked->submitted via action_selected, operator_manual_check, --evidence & pitfall.

tests: standalone 99, PR 97 (+1 cluster-coverage regression); ruff + windows-footguns clean.
@alt-glitch alt-glitch added type/feature New feature or request tool/skills Skills system (list, view, manage) P3 Low — cosmetic, nice to have labels Jul 3, 2026
@SHL0MS
SHL0MS merged commit bb76a05 into NousResearch:main Jul 3, 2026
31 checks passed
habarmc1223-sudo pushed a commit to habarmc1223-sudo/hermes-agent-fluxmem that referenced this pull request Jul 8, 2026
…ed-tail

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression
santhreal pushed a commit to santhreal/hermes-agent that referenced this pull request Jul 13, 2026
…ed-tail

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression
Gravezzz pushed a commit to Gravezzz/hermes-agent that referenced this pull request Jul 21, 2026
…ed-tail

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression
leewenjie pushed a commit to leewenjie/hermes-agent that referenced this pull request Aug 7, 2026
…ed-tail

skills(unbroker): blind opt-out default, email fallback, PeopleConnect delete-wipes-suppression
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P3 Low — cosmetic, nice to have tool/skills Skills system (list, view, manage) type/feature New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants