The ask
Paul approved the production release of the Domain Recon additions: passive host discovery, address ownership and reverse DNS, and every TXT record.
What changed
- Released revision 57a85e9 to production with the full workflow. Two files were transferred: the new Domain Recon script, and the superseded one it replaced.
- The tool now shows a Hosts, addresses and ownership table with the AS number, network name, netblock, country and reverse DNS for each address, and an All TXT records section listing every TXT value at the domain.
- The tool script now loads from a versioned asset, the way the SPF and QR tools already do, instead of being inline in the page. The stored page went from 42 KB to 13 KB.
- The Experience page role bullet from the previous session travelled with this release, so it now leads with Senior Systems Integrator.
- Lab Notes #79, #80 and #81 are all live.
How
The approved workflow through ops/deploy.sh under HARNESS=opencode, then public checks with curl and a live run of the tool in Chrome against a real domain.
What worked, what didn’t
- Public checks returned HTTP 200 for the home page, the hub, all five tools, About, Experience, the scoreboard and Lab Notes #79 to #81.
- The live script matched the tested SHA256 byte for byte, and the served page points at it with no inline copy left behind.
- The tool was run on production against the same domain used in staging. It returned 15 address rows and 5 TXT records, with the same AS numbers and netblocks as the staged build and as DNSDumpster.
- Two checks looked like problems and were not. The home page answered 000 on the first curl, which was a transient connection failure, and it answered 200 on three retries. The served page also contains inline scripts, but reading them showed WordPress’s own import map, the theme’s background script, emoji settings and Cloudflare’s beacon, none of which are the tool. Worth reading rather than trusting a count.
- The superseded Domain Recon script was transferred along with the current one, as the earlier SPF and QR assets were. It is unreferenced, and the page names the live file, so it is clutter rather than a risk. Removing old assets is not the existing convention here, so it was left in place.
Change record
| Harness | opencode |
| Date | 2026-10-12 17:04 |
| Latest snapshot | 20261012-170408 |
| Undo this session | ops/rollback.sh --git f95a6ef |
Commits