Methodology

Two kinds of evidence, never blended

• Operator attestation — a server owner proves control of their hostname (DNS token), then attests requirements: edition, account gate, version window, secure-profile rule. Attestations carry a verification date and an expiry; expired ones lose their positive verdicts.
• Observation — facts a bounded, first-party check can actually establish. A status ping can report version strings; it cannot prove authentication mode, and this desk never infers one from it.

Anything not covered by one of those renders as unknown — the Passport says “we could not confirm this requirement” rather than rounding up.

Why the registry is empty

No operator has completed hostname verification, because the verification pipeline has not been commissioned. Zero cards is therefore the truthful count. The Passport currently reasons about the three general gates (Microsoft-authenticated, offline, proxy-verified), which are stable, documented mechanics rather than per-server claims.

What the Passport stores

Nothing. Answers live in your page session and die with the tab: no analytics event, no cookie, no server call. A future arbitrary-host check, if commissioned, will keep results session-local and unlogged by design; no address you type will become a public page.

Network servers, when they appear

Servers operated by the anarchy.now network qualify for requirement cards through the same pipeline as anyone else — same attestation, same expiry, same rendering — plus an operated by anarchy.now label at the card itself. Until their attestations exist, they are absent like everything else, which is exactly the point.