What the ecosystem actually runs — and what it asks for

Opt-in, anonymized signal from people who ran ax-ray on their own machines. We record which servers are configured, which checks fire, and which permissions they request — never a value, path, secret, or machine id. A server’s presence shows from the first report; aggregated profiles unlock at 5 contributors (k-anonymity).