Read the state before the score
Passed means the named observation met its rule during this test. Failed means a defined mismatch was observed. Check failed describes a collection error; unknown means the evidence was insufficient. Uncovered means no reliable implementation exists here.
A timeout, no WebRTC candidate or a familiar country is not proof of isolation. Missing evidence earns zero confirmed points; it is not proof of a defect.
Fixed weights and coverage
The denominator stays 100. We do not rescale covered items or estimate account risk. Location eligibility, browser metadata and official service health provide context without earning network points.
How the 100-point score works
Only verified evidence earns points. Missing, failed or uncovered evidence earns no confirmed points; covered weights are never expanded to manufacture a perfect score. A low score can reflect missing evidence, not a proven fault.
| Evidence group | Weight | What the points mean |
|---|---|---|
| Transport | 10 | Observable secure connection evidence. |
| Repeated HTTPS egress | 35 | Three same-family rounds with fixed reference and comparison targets. Repeated egress differences do not pass the fixed-exit rule. |
| Repeated WebRTC egress | 35 | Two STUN rounds compared with the same-family HTTPS baseline. Missing public candidates are not proof of safety. |
| Actual DNS path | 20 | Currently uncovered. These 20 points are not awarded. |