{
  "dataset": {
    "id": "TP-RCS-20260718",
    "name": "TrueProxies Browser IP Leak Route Case Series — 2026-07-18",
    "version": "2026.07.18",
    "observationDate": "2026-07-18",
    "publishedDate": "2026-07-18",
    "sampleSize": 4,
    "scope": "One user-reported browser route sequence. This is a case series, not a population benchmark.",
    "browser": "not recorded",
    "operatingSystem": "not recorded",
    "license": "https://creativecommons.org/licenses/by/4.0/",
    "attribution": "TrueProxies Browser IP Leak Route Case Series, July 18, 2026",
    "privacy": "Public IPs, DNS resolver addresses, cities, coordinates, ISPs, organizations, and ASNs were removed."
  },
  "dataDictionary": {
    "caseId": "Stable anonymized row identifier; it does not encode a network identifier.",
    "routeUnderTest": "User-reported routing layer enabled for the observation.",
    "warpState": "Whether Cloudflare WARP was reported on or off.",
    "browserProxyState": "Whether a browser-scoped proxy was reported on or off.",
    "visibleHttpFamilies": "Address families successfully observed through family-specific HTTP endpoints.",
    "webRtcStatus": "Qualified status produced from completed WebRTC evidence.",
    "dnsStatus": "Qualified status produced from authoritative DNS callback evidence.",
    "overallStatus": "Most severe qualified status across the recorded channels.",
    "qualifiedConclusion": "Narrow interpretation that preserves ambiguity and unavailable evidence."
  },
  "observations": [
    {
      "caseId": "TP-RCS-20260718-01",
      "routeUnderTest": "Direct connection",
      "warpState": "off",
      "browserProxyState": "off",
      "browser": "not recorded",
      "operatingSystem": "not recorded",
      "visibleHttpFamilies": "IPv4 only",
      "webRtcStatus": "No Indicator",
      "webRtcEvidence": "Completed WebRTC gathering exposed no unexpected public route in this run.",
      "dnsStatus": "Review",
      "dnsEvidence": "Two public resolver observations were geolocated outside the visible-route country; this remained ambiguous because public DNS and anycast can create legitimate mismatches.",
      "overallStatus": "Inconclusive",
      "qualifiedConclusion": "Useful as a user-asserted direct baseline; the DNS geography difference was not treated as proof of a leak."
    },
    {
      "caseId": "TP-RCS-20260718-02",
      "routeUnderTest": "Cloudflare WARP",
      "warpState": "on",
      "browserProxyState": "off",
      "browser": "not recorded",
      "operatingSystem": "not recorded",
      "visibleHttpFamilies": "IPv4 and IPv6",
      "webRtcStatus": "Review",
      "webRtcEvidence": "WebRTC exposed a different public IPv6 address from the same named network provider as the HTTP-visible route. Without a direct-baseline match or verified different network, this remained Review.",
      "dnsStatus": "No Indicator",
      "dnsEvidence": "The detected resolver location was consistent with the WARP-visible route in this sample.",
      "overallStatus": "Inconclusive",
      "qualifiedConclusion": "The alternate WebRTC address required review, but the available same-provider evidence did not verify a route leak."
    },
    {
      "caseId": "TP-RCS-20260718-03",
      "routeUnderTest": "Browser proxy layered over WARP",
      "warpState": "on",
      "browserProxyState": "on",
      "browser": "not recorded",
      "operatingSystem": "not recorded",
      "visibleHttpFamilies": "IPv6 only",
      "webRtcStatus": "Leak",
      "webRtcEvidence": "The browser proxy changed the HTTP-visible route, while WebRTC exposed the WARP public IPv4 and IPv6 paths outside that proxy route.",
      "dnsStatus": "Unavailable",
      "dnsEvidence": "No authoritative resolver evidence was returned, so the DNS channel was not cleared or failed.",
      "overallStatus": "Leak",
      "qualifiedConclusion": "The browser proxy changed the HTTP-visible route but did not isolate WebRTC from the underlying WARP route."
    },
    {
      "caseId": "TP-RCS-20260718-04",
      "routeUnderTest": "Browser proxy without WARP",
      "warpState": "off",
      "browserProxyState": "on",
      "browser": "not recorded",
      "operatingSystem": "not recorded",
      "visibleHttpFamilies": "IPv6 only",
      "webRtcStatus": "Leak",
      "webRtcEvidence": "The browser proxy changed the HTTP-visible route, while WebRTC exposed the direct public IPv4 baseline outside that route.",
      "dnsStatus": "Unavailable",
      "dnsEvidence": "No authoritative resolver evidence was returned, so the DNS channel remained unknown.",
      "overallStatus": "Leak",
      "qualifiedConclusion": "Removing WARP changed which underlying route WebRTC exposed but did not make the browser proxy a full-device isolation boundary."
    }
  ]
}