{ "schemaVersion": "1.0.0", "generatedAt": "2026-08-14T05:20:51.429Z", "claimContract": "A result describes only what this exact build did in this exact test. It does not establish purpose, retention, training use, sale, safety, or behavior in another account, region, operating system, or scenario.", "method": { "platform": "macOS 26.2 arm64 (Darwin 25.2.0)", "network": "Existing operator VPN remained enabled. The lab does not claim a geographic cohort.", "capture": "Fresh HOME/tool config/workspace per run; one pinned mitmproxy 12.2.3 process and CA per run; minimal environment with fixed invalid canary key.", "redaction": "No credentials, header values, query strings, request bodies, response bodies, prompts, model output, file paths, or IP addresses are published.", "repeats": 3, "statusVocabulary": [ "observed", "not_observed", "opaque", "inconclusive", "not_tested" ], "captureWindowMs": 45000, "acquisition": "Exact official npm package plus platform-native optional binary; package lock and binary are hashed.", "requestDefinition": "HTTP request recorded when observed at the proxy; a null response status means the request began but no response completed before the process/window ended." }, "tool": { "id": "claude-code", "name": "Claude Code", "vendor": "Anthropic", "version": "2.1.232", "binarySha256": "7b39c1588df919d001dea3ffd5651adb682f2451b5a0e18d42d4233296b53cc7", "testedAt": "2026-08-14T04:32:29.141Z", "path": "/claude-code/telemetry", "feed": "/claude-code/telemetry/feed.xml", "status": "measured", "headline": "The documented opt-out removed every observed nonessential route in 3/3 fixed-window runs.", "summary": "Default runs contacted Anthropic API routes and a Datadog intake. With all four documented nonessential-traffic flags set, only Anthropic settings, policy-limit and failed message requests remained in the final three-run batch.", "scenario": "Exact official npm native binary, fresh profile and workspace, fixed prompt, deliberately invalid API key, fixed 45-second observation window. Authentication failed as designed; this measures startup and failed-request traffic, not successful coding work.", "configs": [ { "id": "default", "label": "Documented defaults", "repeats": 3, "requestCounts": [ 29, 29, 29 ], "destinations": [ { "host": "api.anthropic.com", "owner": "Anthropic", "classification": "first_party", "observedIn": 3, "paths": [ { "method": "GET", "path": "/api/:opaque", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/api/claude_cli/bootstrap", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/api/claude_code/organizations/metrics_enabled", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/api/claude_code/policy_limits", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/api/claude_code/settings", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/mcp-registry/v0/servers", "counts": [ 4, 4, 4 ], "status": "observed", "responseStatuses": [ [ 200 ], [ 200, null ], [ 200 ] ] }, { "method": "POST", "path": "/api/eval/:opaque", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 200 ], [ 200 ], [ 200 ] ] }, { "method": "POST", "path": "/api/event_logging/v2/batch", "counts": [ 4, 4, 4 ], "status": "observed", "responseStatuses": [ [ 200, null ], [ 200, null ], [ 200, null ] ] }, { "method": "POST", "path": "/v1/messages", "counts": [ 14, 14, 14 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] } ] }, { "host": "http-intake.logs.us5.datadoghq.com", "owner": "Datadog", "classification": "third_party", "observedIn": 3, "paths": [ { "method": "POST", "path": "/api/v2/logs", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 202 ], [ 202 ], [ 202 ] ] } ] } ] }, { "id": "documented-opt-out", "label": "Documented nonessential-traffic opt-out", "environment": [ "DISABLE_TELEMETRY=1", "DISABLE_ERROR_REPORTING=1", "DISABLE_BUG_COMMAND=1", "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1" ], "repeats": 3, "requestCounts": [ 9, 9, 9 ], "destinations": [ { "host": "api.anthropic.com", "owner": "Anthropic", "classification": "first_party", "observedIn": 3, "paths": [ { "method": "GET", "path": "/api/:opaque", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "GET", "path": "/api/claude_cli/bootstrap", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "GET", "path": "/api/claude_code/organizations/metrics_enabled", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "GET", "path": "/api/claude_code/policy_limits", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/api/claude_code/settings", "counts": [ 1, 1, 1 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] }, { "method": "GET", "path": "/mcp-registry/v0/servers", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "POST", "path": "/api/eval/:opaque", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "POST", "path": "/api/event_logging/v2/batch", "counts": [ 0, 0, 0 ], "status": "not_observed" }, { "method": "POST", "path": "/v1/messages", "counts": [ 7, 7, 7 ], "status": "observed", "responseStatuses": [ [ 401 ], [ 401 ], [ 401 ] ] } ] }, { "host": "http-intake.logs.us5.datadoghq.com", "owner": "Datadog", "classification": "third_party", "observedIn": 0, "paths": [ { "method": "POST", "path": "/api/v2/logs", "counts": [ 0, 0, 0 ], "status": "not_observed" } ] } ] } ], "evidence": { "harness": "scripts/capture-phone-home.mjs", "sanitizer": "scripts/mitm-sanitize.py", "harnessCommit": "570faf2dbfb76de94e48bfe72b3ff566561be91a", "harnessSha256": "e15404a103d7631bded68ed63fdf472289a288f0cb7ad015938713f0bd81acdc", "sanitizerSha256": "d3696012c3fecbf76a09bea086d87e9db714dc9a9aef8589c3eaa46bf6d5e487", "captureMetadataSha256": { "default": "90457ac53988f7028508ded521a5c3b1b9b605d66cbe0119a15eba7c9a6cc714", "documented-opt-out": "878b9172b0a46c4fe0478324975cb8bdabcac90e8ffb22e6025fce9a19664506" }, "rawCaptureSha256": [ "17e9574b61177cdff88515966dedaebd09fd3f6cf30cfe2cc1f0f615ba7b8cf4", "ac7db7715de83b4eaea5c05152d7eb1141afbf26f38483b940207fa523148ae3", "40057aa240aa943c802735ab0a80b102866ba90f21e7be477eed7099cdd78bec", "ceb8e72fcc1d8c623c3dd634a9a57b171e2a89f8413cea33a03cf47add089892", "1251b03f7384bf08e09333ef5a389e0ec0556109a7fa80a1d2dcd7da532d6722", "8d41c47bfba284f1bb3eb143be336a942bef5b804f85797fbc0d1979b7a1435a" ], "sanitizedManifestSha256": [ "9c10dffb8e935366d9bb3d669e4a59f8872d9c4c1802020500e35e8f4f54fd48", "46c84cd74bfbb84cb0935edb71ace6a6b3339dfb12884e94bc1d0c40b710c687", "0306fd5598456cd63423288237c2ac9da5ecd7f7bc1e74bb80597a8f24e93d5c", "a2c9892dba3e000ef8648503428e1a5cb81539a2212a4e27b1c19b030f101b29", "c03f611ef8c16aff759c68c30a1040469881286f5d182265e686a5cffe400713", "644e14c6213a436367df25c87506f5c01619cef5588ef3c4c6382a369431ca42" ], "publicSanitizedManifests": [ "/api/phone-home/runs/claude-code/2.1.232/default/1.json?sha256=9c10dffb8e935366d9bb3d669e4a59f8872d9c4c1802020500e35e8f4f54fd48", "/api/phone-home/runs/claude-code/2.1.232/default/2.json?sha256=46c84cd74bfbb84cb0935edb71ace6a6b3339dfb12884e94bc1d0c40b710c687", "/api/phone-home/runs/claude-code/2.1.232/default/3.json?sha256=0306fd5598456cd63423288237c2ac9da5ecd7f7bc1e74bb80597a8f24e93d5c", "/api/phone-home/runs/claude-code/2.1.232/documented-opt-out/1.json?sha256=a2c9892dba3e000ef8648503428e1a5cb81539a2212a4e27b1c19b030f101b29", "/api/phone-home/runs/claude-code/2.1.232/documented-opt-out/2.json?sha256=c03f611ef8c16aff759c68c30a1040469881286f5d182265e686a5cffe400713", "/api/phone-home/runs/claude-code/2.1.232/documented-opt-out/3.json?sha256=644e14c6213a436367df25c87506f5c01619cef5588ef3c4c6382a369431ca42" ] }, "limitations": [ "The API key was intentionally invalid, so no successful model response or tool call occurred.", "The final evidence uses macOS arm64, one network path behind the operator's existing VPN and a fixed 45-second window.", "Processes still running at 45 seconds were terminated by the harness; this is not a natural-exit measurement.", "Not observed means absent from these captures, not impossible in another cohort or later run.", "Request and response bodies are withheld; purpose, retention, training and privacy claims are out of scope." ], "manifest": "/evidence/claude-code-2.1.232.json", "protocolVersion": "2.0.0", "acquisition": { "package": "@anthropic-ai/claude-code", "method": "official npm package with platform-native optional dependency", "packageLockSha256": "96771dd548708f9561ed70d2abe437576c40328b59461c486749821534e4b96c", "reportedVersion": "2.1.232 (Claude Code)" }, "observation": { "captureWindowMs": 45000, "platform": "darwin-arm64", "osRelease": "25.2.0", "osVersion": "Darwin Kernel Version 25.2.0: Tue Nov 18 21:09:56 PST 2025; root:xnu-12377.61.12~1/RELEASE_ARM64_T6041" }, "history": [ { "version": "2.1.229", "testedAt": "2026-08-13T21:14:00Z", "manifest": "/api/phone-home/history/2026-08-13.json" } ] } }