nsaspy/starintel-auto-research
1
0
Fork 0
Code Issues 59 Pull requests 3 Projects Releases Packages Wiki Activity Actions

CAPTCHA: make OSINT domain servers opportunistically use captcha.solve #172

New issue
Open
opened 2026-08-29 10:28:06 +00:00 by nsaspy · 0 comments
nsaspy commented 2026-08-29 10:28:06 +00:00
Owner
Copy link

Goal

Adopt the approved CAPTCHA Domain Server across OSINT domain servers and actors that can encounter web challenges.

The integration is optional at runtime. A caller should use captcha.solve when the domain server is registered, healthy, authorized, and supports the exact challenge. The CAPTCHA service must not become a hard startup dependency.

Init-file policy

Whether a caller automatically invokes captcha.solve is controlled by the normal StarIntel init/config file through the CAPTCHA domain-server configuration.

Callers must honor at least:

  • global CAPTCHA domain enabled/disabled state
  • automatic solving enabled/disabled state
  • challenge-family allow/deny policy
  • provider/external-service policy
  • configured deadline and attempt ceilings
  • operator fallback policy

Callers must not embed provider preferences or private-solver knowledge. They delegate policy resolution to CaptchaDomainServer.

Initial caller families

Apply the pattern where relevant to:

  • Identity Domain Server account/profile enumeration
  • browser-backed public-profile collection
  • web search / scraping capabilities
  • Infrastructure Domain Server web-facing discovery
  • document/source acquisition flows
  • future OSINT domain servers with authorized browser/network collection

Do not add a provider-specific dependency to these callers.

Required caller behavior

  • detect or receive a typed challenge observation
  • preserve source request/session state
  • discover captcha.solve through the capability/domain-server registry
  • honor init-file auto-solve and challenge-family policy
  • check health and exact capability compatibility
  • submit only bounded challenge data plus opaque refs
  • await within the caller deadline
  • apply the result in the required source context
  • separately verify downstream acceptance
  • resume the original actor/workflow
  • preserve provenance across detection -> solve attempt -> application -> acceptance -> resumed collection

Domain server unavailable or disabled

If the CAPTCHA Domain Server is disabled by init, missing, unhealthy, unauthorized, or has no matching solver:

  • do not crash actor startup
  • do not busy-loop
  • do not blindly retry
  • do not convert the challenged page into notFound
  • return a typed blockedByChallenge, unsupportedChallenge, or partial result as appropriate
  • let the surrounding StarLang plan decide whether to continue, defer, or surface the block

StarLang requirements

Prefer expressing this as reusable StarLang continuation/orchestration semantics rather than duplicating Common Lisp control flow in every actor.

Required primitives include:

  • optional capability dependencies
  • init/config schema access
  • capability discovery
  • typed blocked/partial outcomes
  • deadline-aware request/reply
  • resumable continuation
  • cross-domain invocation
  • opaque session/artifact/result refs
  • provenance linkage

If StarLang lacks one, open/implement the StarLang gap before introducing an ad-hoc Python controller.

Private solver boundary

Callers know only the public captcha.solve contract. They must not know whether the selected implementation is NoneCap, NopeCHA, 2Captcha, another public adapter, or the private in-house solver.

The private in-house solver remains non-OSS.

Design authority: roam/design/star-server/STAR-CAPTCHA-002-domain-server-repository-boundary.org.

## Goal Adopt the approved CAPTCHA Domain Server across OSINT domain servers and actors that can encounter web challenges. The integration is **optional at runtime**. A caller should use `captcha.solve` when the domain server is registered, healthy, authorized, and supports the exact challenge. The CAPTCHA service must not become a hard startup dependency. ## Init-file policy Whether a caller automatically invokes `captcha.solve` is controlled by the normal StarIntel init/config file through the CAPTCHA domain-server configuration. Callers must honor at least: - global CAPTCHA domain enabled/disabled state - automatic solving enabled/disabled state - challenge-family allow/deny policy - provider/external-service policy - configured deadline and attempt ceilings - operator fallback policy Callers must not embed provider preferences or private-solver knowledge. They delegate policy resolution to `CaptchaDomainServer`. ## Initial caller families Apply the pattern where relevant to: - Identity Domain Server account/profile enumeration - browser-backed public-profile collection - web search / scraping capabilities - Infrastructure Domain Server web-facing discovery - document/source acquisition flows - future OSINT domain servers with authorized browser/network collection Do not add a provider-specific dependency to these callers. ## Required caller behavior - [ ] detect or receive a typed challenge observation - [ ] preserve source request/session state - [ ] discover `captcha.solve` through the capability/domain-server registry - [ ] honor init-file auto-solve and challenge-family policy - [ ] check health and exact capability compatibility - [ ] submit only bounded challenge data plus opaque refs - [ ] await within the caller deadline - [ ] apply the result in the required source context - [ ] separately verify downstream acceptance - [ ] resume the original actor/workflow - [ ] preserve provenance across detection -> solve attempt -> application -> acceptance -> resumed collection ## Domain server unavailable or disabled If the CAPTCHA Domain Server is disabled by init, missing, unhealthy, unauthorized, or has no matching solver: - do not crash actor startup - do not busy-loop - do not blindly retry - do not convert the challenged page into `notFound` - return a typed `blockedByChallenge`, `unsupportedChallenge`, or `partial` result as appropriate - let the surrounding StarLang plan decide whether to continue, defer, or surface the block ## StarLang requirements Prefer expressing this as reusable StarLang continuation/orchestration semantics rather than duplicating Common Lisp control flow in every actor. Required primitives include: - optional capability dependencies - init/config schema access - capability discovery - typed blocked/partial outcomes - deadline-aware request/reply - resumable continuation - cross-domain invocation - opaque session/artifact/result refs - provenance linkage If StarLang lacks one, open/implement the StarLang gap before introducing an ad-hoc Python controller. ## Private solver boundary Callers know only the public `captcha.solve` contract. They must not know whether the selected implementation is NoneCap, NopeCHA, 2Captcha, another public adapter, or the private in-house solver. The private in-house solver remains non-OSS. Design authority: `roam/design/star-server/STAR-CAPTCHA-002-domain-server-repository-boundary.org`.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
research/ardr-219-operation-ontology
research/star-bbpd-runtime-modernization
fix/star-server-042-dispatcher-id
migration/retire-starintel-workers
docs/approved-protocols-2026-08-29
governance/quasar-006-008-approvals-2026-08-29
fix/canonical-document-id-integrity
tmp/unused
fix/adard-research-approval-namespace
chore/migrate-research-approval-20260827
feat/research-approval-migration
research/star-server-strict-json-boundary
feat/research-pending-dashboard
agent/quasar-lisp-actor-discovery-adard-2026-08-27
rage/server-059-target-create-v1
agent/amend-star-lang-004-rfc3986
rage/144-bixby-oauth-provider-adadr
rage/130-reconcile-star-server-040-approval
adar/approve-star-server-041
adar/rfc3986-star-uri-rework
adar/star-protocol-authority-routing-fediwatch
adar/meta-mcp-approve-no-crawl
adar/starintel-mcp-authoritative-interface
adar/meta-mcp-search-plane
rage/130-starrouter-zmq-api-overhaul
research/operator-approvals-zmq-router-refresh
template/rage-research
research/http-contract-client-codegen
research/gserver-client-library-admin-boundary
agent/star-lang-logic-foundations
agent/star-lang-logic-foundation-designs
agent/star-lang-logic-foundation-designs-copy
agent/split-expert-backends
agent/split-expert-backends-ready
design/star-lang-prolog-expert-system
agent/approve-star-lang-009
agent/starlang-logic-api-spec
agent/allow-future-starlang-self-hosting
agent/star-lang-lisp-native-pragmas-v2
agent/star-lang-lisp-native-pragmas
agent/starlang-backend-selection-research
agent/star-lang-backend-selector-directive
agent/star-lang-verification-experiment-research
agent/fix-proof-pages-metadata
agent/starintel-proof-verification-design
cleanup/remove-starlang-prototype-ci
agent/star-uri-auth-research
star-lang-runtime-policy-review
agent/star-lang-logic-expert-research
agent/star-final-package-boundaries
agent/star-resolver-ports
agent/star-service-uri
agent/star-discord-python-approval
agent/starintel-discord-operations-interface
agent/fix-canonical-approval-state
agent/record-quasar-star-server-approvals
agent/live-graph-search-filter
research/deepen-evidence-graph-010-016
agent/starintel-v09-prolog-expert-system-research
agent/graph-deploy-cache-bust
agent/redesign-graph-workspace
agent/quasar-runtime-capability-boundary
agent/titanic-lmdb-rabbitmq-v1-correction
agent/background-report-source-research
agent/split-evidence-aware-research-topics
research/evidence-aware-intelligence-graph-seeds
agent/thunder-audio-geolocation-seed
fix/pages-document-dates-rss
agent/beam-lfe-large-scale-ingest-research
research/self-sourced-captcha-actors
agent/restore-synthwave-default
agent/generalize-captcha-subsystem-v2
agent/generalize-captcha-subsystem
agent/captcha-rabbitmq-transport-decision
agent/titanic-protocol-autoresearch
agent/black-gold-sitegen-polish
research/split-quasar-004-decisions
agent/adar-dashboard-ux
research/adar-auto-dig-dashboard-ux
agent/quasar-canonical-alignment
agent/pr79-workflow-trigger-cleanup
agent/pr79-workflow-trigger
agent/repository-captcha-audit
agent/audit-runner-base
agent/repair-pages-publication
agent/issues-29-30-32-lease-stack
agent/issue-30-kv-lease-store-design
agent/capability-first-cleanup
archive/pr40-capability-first-pre-rebase
auto-research/starintel-ontology-foundations-72
agent/issue-70-project-implementation-slots
design/ohio-government-data-catalog
agent/add-starintel-discord-footer
design/franklin-county-starlang-actors
docs/live-crawler-architecture
agent/render-uml-theme-selector
agent/starlang-macro-research
agent/implement-child-identity-firewall
agent/child-abuse-adult-offender-research
agent/severe-harm-scope-gate
agent/fars-name-resolution-research
catalog/government-data-jurisdiction-todos
research/us-government-data-acquisition
design/government-data-acquisition-actors
agent/seed-ai-bans-dataset
agent/starlang-comparison-design-implementation-pass
research/deep-research-execution-adapters
agent/add-google-site-verification
agent/issue-41-closed-star-loader-a4c7
agent/star-loader-url-import-star-cl-port
agent/quasar-clog-prototype-design
agent/quasar-dashboard-research
agent/quasar-worldmonitor-dashboard-research
research/quasar-product-architecture
agent/star-lang-dispatch-idempotency-identity-v1
agent/star-lang-bbp-runtime-journal-v1
agent/star-lang-bbp-run-idempotency-v1
agent/star-lang-bbp-runtime-config-v1
agent/star-lang-bbp-remote-domain-v1
agent/star-lang-cl-gserver-runtime-facade-v1
agent/star-lang-transport-port-v1
research/quasar-investigation-workspace
agent/star-lang-deterministic-dispatcher-v1
agent/star-lang-message-lifecycle-v1
agent/star-lang-canonical-json-bindings
agent/star-lang-core-surface-wire-v1
agent/star-lang-normalized-ir-cl-gserver
agent/star-lang-common-lisp-core
agent/star-lang-spec-libraries-domain-servers
agent/starintel-operational-skills
agent/star-lang-common-lisp-baseline
agent/star-lang-language-research
agent/add-probabilistic-logic-engine-study
agent/adaptive-research-dag
research/collection-actors-002
research/osint-feature-landscape-001
feature/kindle-epub-export
feature/graph-sidebar-friction
fix/pages-first-deploy
fix/pages-runtime-and-deploy-verification
agent/seed-star-server-000-domain-gservers
crazy-ideas
agent/emacs-research-workflow
No results found.
Labels
Clear labels   
bug
Something isn't working

  
design

   
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
research

   
wontfix
This will not be worked on

No labels
bug
design
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
research
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nsaspy/starintel-auto-research#172
No description provided.