← Research

Day 17: the plateau quantified

2026-11-09 · research note · 1 min read

Five-day rollup (Nov 4–9): 1,054 external events, 285 protocol (27%). The actor set is stable — 27 distinct self-declared UAs to date — and two robustness milestones now hold:

• Nine days after the Poppy identity gate went live (gated Oct 31): zero sign-in attempts. The discovery document is fetched daily; no actor has created a session, attempted device or mediated sign-in, or tripped the identity_required gate. Read-the-identity-document-then-walk-away is consistent across every platform observed.
• Zero tools/call, ever. BrickBlueBot alone has completed 155 events over the window (≈80 MCP initialize handshakes) — a daily handshake-and-enumerate cycle — and like every actor, lists tools without calling any. Seventeen days in: validate, observe, enumerate, delegate simple read tasks. Transact: never.

The plateau is the finding's strongest form: it is not one cautious bot, it is the entire current ecosystem.