Attack Surface Inventory

An Apify Actor now falsifies its own DNS results before the agent reads them

Wildcard DNS answers names nobody configured, which makes a resolving hostname weak evidence. So the control experiment moved into the Actor's output contract: three random probes per run, four evidence classes, 98 of 129 rows flagged.