{"version":"anygas-posture/1","at":"2026-08-27T14:03:41.856Z","lane":{"kind":"direct","detail":"you reached us directly: your network address is visible to the operator alongside this request","fix":"POST encapsulated requests to https://relay.nightferry.net/relay (GET /api/ohttp/keys; pq suite 0x50; one-size 16 KiB request, 8 KiB response)"},"transport":{"pq":"ml-kem-768+x25519 hybrid available","pqEnforced":true,"requestFloorBytes":16384,"responseFloorBytes":8192,"note":"every private-lane request and response is ONE size, so the relay cannot tell a message from a quote"},"relay":{"url":"https://relay.nightferry.net/relay","ok":true,"batchMs":null,"paused":false,"batching":"unknown"},"relays":[{"url":"https://relay.nightferry.net/relay","region":"IS/FlokiNET","operator":"anygas (same owner as gateway — independence pending)","independent":false,"ok":true,"batchMs":null,"paused":false}],"relayIndependent":false,"network":{"onion":"zmbnchdb5t5m6hhyd3utgt2zld3b632zskxihtildvqt7cossahj3yad.onion","autoTransport":"The AnyGas SDK / MCP / console pick the most private available transport automatically, in order: onion (Tor — no DNS, no IP) → OHTTP relay (IP split from content) → direct (IP visible, last resort). Nothing to configure.","encryptedDns":"The SDK resolves service hosts over DoH (DNS-over-HTTPS), so your resolver/ISP does not learn which host you contact. The onion path removes DNS lookups entirely.","clientAnonymity":"onion available: a Tor-capable client (or the SDK with a Tor transport) reaches us with automatic network-level anonymity — no IP, no DNS, no configuration"},"chain":null,"features":{"messagingV2":"live","messagingV1":"retired (writes 410)","plus":"live","nettingSet":"shadow (advisory only)","coverRowsPerDay":96,"privateSubmit":true,"anonymousQuota":"a Plus pass (x-anygas-pass header, or body.pass) raises your ceiling with NO identity — unlike an API key it cannot be linked across requests"},"stillPublic":["on-chain settlement: amounts and addresses on both chains","ERC-5564 stealth addresses are secp256k1 (not post-quantum); chain-bound linkage is chain-bound","direct-lane callers: IP + timing at the gateway (use the relay)","the relay operator (currently the SAME owner as the gateway): your IP + timing, and one owner still holds both halves — batching keeps this to a 1-in-N guess; an independent relay closes it"],"recommend":["switch to the private lane (stdio MCP does this by default: ANYGAS_LANE=private)","attach an association-set root so the receipt can prove clean provenance"]}