{"conservative_gate":{"behavior":"If a country has < 100 total probes across all tools, no tier labels are emitted. Raw rows are returned with an insufficient_coverage flag.","min_total_probes":100},"endpoints":{"info":"/v1/atlas/circumvention/info","per_country":"/v1/atlas/circumvention/{cc}","upstream_evasion_table":"/v1/atlas/evasion/{cc}"},"generated_at":"2026-05-21T19:33:56.913112+00:00","honest_caveats":["PROBE SUCCESS != REAL-USER SUCCESS. DPI vendors increasingly rate-limit real client traffic while letting OONI / Voidly synthetic measurement probes through. Success rates here are an UPPER BOUND on what a real user will see.","Recommendations can become stale within hours. Censorship adapts. If a try_first tool stops working, the next probe rotation (cron daily 06:00 UTC) will catch it but you will see it before we do.","'Try first' is NOT 'safe'. It means 'highest measured success rate, highest probe confidence.' Operational security (unique device, throwaway account, no SIM, no DNS leak, etc.) is the USER's responsibility — none of that is captured here.","Domain-fronted tools (Snowflake, Lantern, Psiphon) are SYSTEMATICALLY UNDER-ESTIMATED. Bootstrap-domain probes do not measure the rotating tunnel endpoints those tools actually use.","Self-hosted WireGuard / OpenVPN on a private IP is INVISIBLE to OONI probes and is not represented here. If you have one, trust it over any commercial recommendation.","Tor rows roll up vanilla / obfs4 / Snowflake / Meek transports. Per-transport granularity needs raw OONI nettests, out of scope for v1.","DO NOT share this recommendation as a forum-shareable card without the caveat block. The do_not_share_card_without_caveats flag in the response is on by design."],"informational_disclaimer":"This endpoint is INFORMATIONAL, not a safety guarantee. Probe success is an upper bound on real-user success. User assumes the risk of any tool selected from this ranking. Do not share as a forum-shareable card without the caveat block.","lookback_days":30,"methodology":"For each measured (country, tool) pair we compute rank_score = success_rate * sqrt(confidence) * recency_decay, then bucket into tiers: try_first (success >= 0.70 AND confidence >= 0.70), avoid (success < 0.10 AND confidence >= 0.70), fallback (success >= 0.30 OR confidence < 0.50). Tool-specific actionable notes are appended from a curated table. Conservative gate at 100 total probes per country.","n_countries_in_sidecar":34,"n_evasion_pairs_available":131,"n_tools_covered":9,"rank_formula":"rank_score = success_rate * sqrt(confidence) * recency_decay. recency_decay = max(0.5, 1.0 - (days_since_last_observed / 60.0)).","schema":"voidly-circumvention-recommendation/v1","tiers":{"avoid":{"description":"High-confidence measurements show <10% probe success. Very likely blocked. Listed for transparency — do not trust the bootstrap path.","label":"Avoid","max_success_rate":0.1,"min_confidence":0.7},"fallback":{"description":"Either partial measured success (30%+) OR not enough probes to be sure. Worth trying if the try_first tools fail — but expect lower reliability.","label":"Fallback","max_confidence_for_uncertain":0.5,"min_success_rate_lower":0.3},"try_first":{"description":"High measured success rate AND high probe confidence. Still informational only — DPI vendors increasingly block real clients while letting measurement probes pass, so success_rate is an upper bound.","label":"Try first","min_confidence":0.7,"min_success_rate":0.7}},"tool_actionable_notes":{"expressvpn":"Sparse OONI coverage means low-confidence in most countries. Treat as 'unknown' rather than 'broken' unless n_total_probes is large.","generic-vpn":"Aggregate over ProtonVPN, ExpressVPN, Mullvad, VPN Gate. Hides per-vendor variation. Look at the per-tool rows to see which specific vendor passes if any.","lantern":"Lantern bootstraps from getlantern.org but rotates endpoints aggressively after that. Bootstrap-domain block does not mean ongoing-connection block.","mullvad":"OONI coverage is sparse globally — many country rows are missing entirely. Treat as missing-data, not zero.","protonvpn":"Blocking protonvpn.com does NOT block all ProtonVPN tunnels. Individual WireGuard / OpenVPN endpoint IPs may stay reachable.","psiphon":"Psiphon ships a bundled server list — even if psiphon.ca is blocked, the app can usually bootstrap from cached entries.","snowflake":"Snowflake is domain-fronted via Cloudflare with a Microsoft Fastly fallback. Static-domain probes UNDERSTATE real-world reach. If the probe success looks bad but the network is non-GFW-grade, try it anyway.","tor":"Tor uses obfs4 by default. If obfs4 fails, switch to the Snowflake bridge from inside the Tor Browser settings. The OONI tor test does NOT differentiate transports, so this row is the aggregate.","vpngate":"VPN Gate is a public OpenVPN registry (University of Tsukuba). Volunteer-run servers rotate hourly; the single domain probe captures registry reach, not endpoint reachability."},"tools":[{"category":"anonymity-network","caveat":"OONI rolls all Tor transports into one signal. Real-world Snowflake / obfs4 success may differ; treat as upper bound.","match":{"signal_types":["tor-blocking"]},"public_source":"torproject.org; OONI `tor` test spec","tool_name":"Tor","tool_slug":"tor","what_it_is":"The Tor network — rolled-up OONI `tor` test result across the configured directory authorities and standard bridges. Does NOT differentiate obfs4 / Snowflake / Meek transports."},{"category":"pluggable-transport","caveat":"Domain rotation + WebRTC means static-domain probes are a weak proxy — actual Snowflake reach is usually higher.","match":{"domains":["snowflake.torproject.org","broker.torproject.org"],"fallback_signal_types":["tor-blocking"]},"public_source":"snowflake.torproject.org","tool_name":"Snowflake bridge","tool_slug":"snowflake","what_it_is":"Snowflake — WebRTC-based ephemeral Tor bridge. Domain-fronted via Cloudflare (or Microsoft Fastly fallback) so static-domain probes UNDERSTATE real-world success."},{"category":"p2p-circumvention","caveat":"Bootstrap-domain probe doesn't reflect ongoing connection success; Lantern rotates endpoints aggressively.","match":{"domains":["getlantern.org"]},"public_source":"getlantern.org","tool_name":"Lantern","tool_slug":"lantern","what_it_is":"Lantern — pluggable transport + P2P proxy network. Bootstrap reaches getlantern.org; after bootstrap, traffic uses domain-fronted endpoints we cannot enumerate."},{"category":"vpn-proxy","caveat":"Psiphon ships a bundled server list — even if psiphon.ca is blocked, the app can still bootstrap from cached entries.","match":{"domains":["psiphon.ca"]},"public_source":"psiphon.ca","tool_name":"Psiphon","tool_slug":"psiphon","what_it_is":"Psiphon — VPN + HTTP / SSH proxy hybrid. Bootstrap domain is psiphon.ca; subsequent tunnel endpoints rotate via the embedded server list."},{"category":"commercial-vpn","caveat":"Blocking protonvpn.com does NOT block all ProtonVPN tunnels; individual endpoint IPs may remain reachable.","match":{"domains":["protonvpn.com"]},"public_source":"protonvpn.com","tool_name":"ProtonVPN","tool_slug":"protonvpn","what_it_is":"ProtonVPN — Switzerland-based commercial VPN with public WireGuard + OpenVPN endpoints. protonvpn.com is the account / bootstrap surface."},{"category":"commercial-vpn","caveat":"Sparse OONI coverage — confidence is low in most countries.","match":{"domains":["expressvpn.com"]},"public_source":"expressvpn.com","tool_name":"ExpressVPN","tool_slug":"expressvpn","what_it_is":"ExpressVPN — BVI-based commercial VPN. Single bootstrap domain (expressvpn.com); endpoints rotate."},{"category":"commercial-vpn","caveat":"Currently sparse in OONI; treat as missing-data, not zero.","match":{"domains":["mullvad.net"]},"public_source":"mullvad.net","tool_name":"Mullvad","tool_slug":"mullvad","what_it_is":"Mullvad — Sweden-based commercial VPN, WireGuard-first. Anonymous account-number model."},{"category":"free-openvpn","caveat":"Volunteer-run servers rotate hourly; single domain probe captures registry reach, not endpoint reachability.","match":{"domains":["vpngate.net"]},"public_source":"vpngate.net","tool_name":"VPN Gate","tool_slug":"vpngate","what_it_is":"VPN Gate — public, volunteer-run OpenVPN server registry operated by University of Tsukuba (Japan). Bootstrap is vpngate.net (Caesar-cipher mirror list)."},{"category":"commercial-vpn-aggregate","caveat":"Aggregate hides per-vendor variation — a country may block ProtonVPN but pass Mullvad. Use per-tool rows for that.","match":{"domains":["protonvpn.com","expressvpn.com","mullvad.net","vpngate.net"]},"public_source":"aggregated","tool_name":"Generic commercial VPN bootstrap","tool_slug":"generic-vpn","what_it_is":"Union of the top public commercial-VPN bootstrap domains we have coverage for. Represents the broad commercial-VPN surface, not any single vendor."}],"version":"v1.0","_voidly_pay":{"claim_did":"https://voidly.ai/pay/claim","for_builders":"https://voidly.ai/pay/for-builders","marketplace":"https://api.voidly.ai/v1/pay/marketplace","live_demo":"https://huggingface.co/spaces/emperor-mew/voidly-pay","universal_proxy":{"url":"https://api.voidly.ai/v1/pay/proxy","example":"https://api.voidly.ai/v1/pay/proxy?u=<https-url>&to=did:voidly:<your-did>&price=0.01","page":"https://voidly.ai/pay/proxy","note":"Paywall any public HTTPS URL with one query param. No SDK install required."},"install":{"typescript":"npm install @voidly/pay","python":"pip install voidly-pay","langchain":"pip install voidly-pay-langchain","vercel_ai":"npm install @voidly/pay-vercel-ai","mcp":"npx @voidly/pay-mcp","cli":"npm install -g @voidly/pay-cli"},"note":"Voidly Pay is the open agent-to-agent payment rail. Claim a DID + 10 starter credits in 60s, or paywall any URL via the universal proxy with one query param."}}