Skip to content

flux — HTTP

Status: Informative · evaluation proof
UHBS: v4.2.2 · Class: Web-API · Protocol: http
Target id: flux-http · Evaluated: 2026-07-29

Run UHQS Grade δ_C Artifacts
Quick 50.91 D 0.5625 SCORECARD.txt · report.json
Full 50.91 D 0.5625 SCORECARD.txt · report.json

Full run — module breakdown (analyst view)

Module Score Weight Status Notes
Module A 100.0 0.25 PASSED fsm=100 nego=100 timing=100
Module B 82.5 0.20 PASSED survived binary blast
Module C 100.0 0.20 PASSED telemetry_dir missing — set TPS/inventory telemetry_dir for C1 schema gates
Module D 75.0 100 GATE PASSED (UHBS_AIRGAP_ATTESTED=1 (operator attestation; not a substitute for shell probes on SSH decoys
Module E 100.0 0.15 PASSED service alive after load (connect 0.2ms
Module F 70.0 0.20 PASSED POSIX coverage 0% (0/104

Full scorecard (verbatim)

====================================================================================
                  UNIVERSAL HONEYPOT BENCHMARK SCORECARD v4.2.2
====================================================================================
Target System         : flux-http
System Profile Class  : Web-API
Protocols             : http
Evaluation Date       : 2026-07-29
Evaluation Type       : Full-Spectrum (Static Audit + Dynamic Sandbox)
Environment           : Isolated Sandbox
MCP Surface Depth     : unknown
------------------------------------------------------------------------------------
EVALUATION MODULE                     SCORE (0-100)    WEIGHT    STATUS
------------------------------------------------------------------------------------
Module A: Protocol Fidelity         : 100.0/100       0.25     PASSED (fsm=100 nego=100 timing=100)
Module B: Behavioral Realism        :  82.5/100       0.20     PASSED (survived binary blast)
Module C: Telemetry Quality         : 100.0/100       0.20     PASSED (telemetry_dir missing — set TPS/inventory telemetry_dir for C1 schema gates)
Module D: Safety & Containment (C)  :  75.0/100       GATE     PASSED (UHBS_AIRGAP_ATTESTED=1 (operator attestation; not a substitute for shell probes on SSH decoys))
Module E: Scalability & Latency     : 100.0/100       0.15     PASSED (service alive after load (connect 0.2ms))
Module F: Static Code Audit         :  70.0/100       0.20     PASSED (POSIX coverage 0% (0/104))
------------------------------------------------------------------------------------
SAFETY GATE MULTIPLIER                : δ_C = 0.5625 (C = 75.0 < 95 — exponential penalty)
FINAL COMPOSITE SCORE (UHQS 4.2.2)      : 50.91 / 100
OVERALL EVALUATION GRADE              : GRADE D (Needs Remediation)
====================================================================================

CTI & blue-team reading

This page is the protocol-level proof hub for flux on http. Prefer the full run over quick for operational decisions. Numbers without the verbatim SCORECARD (or report.json) are not trustworthy citations.

  • CTI: Breadth of modern scanner paths; JSONL logging when telemetry path is wired.
  • Blue team: Lab disables Tracebit canary minting and tarpit saturation defaults; read upstream safety disclaimer before any Internet exposure.
  • Replication: commands live in the product tutorial; environment limits in the methodology.

Guides

Named products appear only under conformance as evaluation proof — not UHBS requirements or endorsements.