Catalog session #687
urlsession 6.3.3 on macOS 26.5.2 — identity declared before the run, captured through the live edge.
| Verification | controlled |
|---|---|
| Runner | ci |
| Registered | 2026-09-01 01:04 |
| Captured | 2026-09-01 01:05 |
| Driver | capture-ci/d117e46 |
| Run | monthly-2026-09-01-104054 |
| Mode | prod |
| Runner | github-actions |
| Image | macos26/20260728.0273.1 |
| Matrix SHA-256 | 23f7c2d05d4f |
| Raw client version | 6.3.3 |
Captures (1)
The first capture is the registration page view; probe captures are the beacon hitting each configured origin with this session's correlation id — for browsers that is how one session records both the TCP and QUIC stacks.
2026-09-01 01:05 · page · quic (HTTP/3) · thumbprint.me
| TLS ClientHello (JA4) | q13d0311h3_55b375c5d22e_f2a83c8e78ae |
|---|---|
| HTTP request (JA4H) | ge30nn05enus_892e8e8cf56b_000000000000_000000000000 |
| QUIC transport params | q07_e80dd4933807 |
| User-Agent | swift-frontend (unknown version) CFNetwork/3860.600.21 Darwin/25.5.0 |
verbatim wire tuple (immutable evidence, includes raw variants)
{
"alpn": "h3",
"ja4": "q13d0311h3_55b375c5d22e_f2a83c8e78ae",
"ja4_o": "q13d0311h3_0ce35177f2fe_b2d0da0e8442",
"ja4_r": "q13d0311h3_1301,1302,1303_0005,000a,000d,0012,001b,002b,002d,0033,0039_0403,0804,0401,0503,0805,0805,0501,0806,0601,0201",
"ja4_ro": "q13d0311h3_1302,1303,1301_0000,000a,0010,0005,000d,0012,0033,002d,002b,0039,001b_0403,0804,0401,0503,0805,0805,0501,0806,0601,0201",
"ja4h": "ge30nn05enus_892e8e8cf56b_000000000000_000000000000",
"ja4h_r": "ge30nn05enus_accept,priority,user-agent,accept-language,accept-encoding__",
"quic_tp": "q07_e80dd4933807",
"quic_tp_r": "q07_0004,0005,0006,0007,0009,000e,000f",
"tls_cipher": "TLS_AES_256_GCM_SHA384",
"tls_version": "TLSv1.3",
"user_agent": "swift-frontend (unknown version) CFNetwork/3860.600.21 Darwin/25.5.0"
}