Clearance UUID rate-limit test

This tester verifies that a Precursor rewrite changes the encrypted cf_clearance cookie without changing the Advanced Rate Limiting identity inside it.

Run the test

  1. Wait for Precursor to issue clearance.
  2. Send one request through a rule limited to one request per minute.
  3. Trigger a Precursor navigation evaluation and wait for the cookie to be rewritten.
  4. Send the same request again. A stable clearance UUID produces HTTP 429.
Ready.

Use this if the first probe is already limited. It clears only this hostname's cf_clearance and the tester marker.

Privacy

The page receives only booleans indicating whether clearance exists and whether the encrypted cookie changed. The Worker never returns or logs the cookie, its UUID, or a cookie fingerprint.