Remapped-keyboard target typed correctly with zero exploration — the mapping was decoded, not discovered

bh.arena_keymap_no_exploration  ·  convicts

behaviorallayer
automationcategory

What it catches

Kitsune arena BROKEN/REMAPPED-KEYBOARD gate (arena/keymap.go) — an original input-integrity tell, not a wild-captcha clone. The keys silently produce OTHER characters (a bijection over the key set); the client must discover the hidden mapping by probing and type the target. TWO SERVER-OBSERVED prongs: (1) ZERO EXPLORATION — the client's key trace has NO backspaces. A human discovering a HIDDEN remap must press keys, see the wrong character, and correct (backspace), so any human solve has corrections; a bot that READS the remap from the client payload types the decoded key sequence directly with zero backspaces. (2) TOO FAST — a solve faster than keymapFloorMs (len(target)*600ms), a conservative lower bound on discover-by-probing + type. Either prong -> anomaly:typed_without_exploration; the detector relay (/arena/keymap/verify) joins it to ks_sid so a PASS is CONVICTED on coherence (the arena thesis: the solve-BEHAVIOUR discriminates, not the puzzle). FP-SAFE BY CONSTRUCTION: a hidden remap is undiscoverable without probing and probing produces corrections -> a zero-backspace correct solve means the client knew the mapping in advance (precision 1.0 is load-bearing); the floor sits well under human discover+type time. GROUNDED LIVE 2026-07-09 BOTH DIRECTIONS: an automation that reads the remap and types the decoded keys instantly (backspaces 0) convicts; a human that probes a wrong key, backspaces, types correctly, and spends the discover+type time (solve_ms 3401 > 2400ms floor, backspaces 1) is silent. Convicting (w0.85). See docs/research-radar.md (novel-arena-gates loop).

Signals it reads

behavioral.arena_keymap_no_exploration

How it fires

present

Bypassed by 10

Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.

← all detections