Score crawl inputs by SSRF-prone field names and register ping-back canaries for operator paste confirmation.
POST /api/v1/recon/scan probes fleet ports from the server host, crawls owned HTTP targets, maps findings to spread lanes, and records optional oath ledger rows.