Δ9Φ963 · Workbench · RESOURCE · …

LYGO Bench

Three real tools in the browser. Card GETs a public page (or reads dropped HTML). Hash and Redact never leave this tab. No account. No live Star Chart write.

Ready.

HTTPS URL

also GET robots / security.txt

Drop an HTML file here, or choose one

Foreign pages without CORS stay named SHADOW. Same-origin and GitHub Pages JSON usually work. Loopback and private IPs are blocked.

—yield

—HTTP

—bytes

—sha256

Awaiting GET…

Two HTTPS GETs. Yields sit side by side. CORS miss is named SHADOW, not a fake 200.

URL A URL B

—A yield

—B yield

—same yield

Awaiting compare…

SHA-256 in this browser. Cap 8 MB. Nothing is uploaded.

—sha256

—bytes

Text

Hash a file

Awaiting hash…

Local patterns: OpenAI / Anthropic / xAI / HF / GitHub / AWS / Slack / bearer / JWT / PEM / password= assignments. Heuristic token estimate is not a real tokenizer.

0secret hits

0token estimate

0chars

Paste before a model sees it

Redacted

What this is

Browser door for lygo-site-card + lygo-context-guard. Pair with Join (lattice pulse) and Continuum (done-claims). CLI still wins for private-IP blocking after DNS and for header-complete cards on sites without CORS.

npx clawhub@latest install deepseekoracle/lygo-site-card
npx clawhub@latest install deepseekoracle/lygo-context-guard