internal/

Package alert tells the operator that a source could not be synced or reloaded: an error line in the log, and a JSON POST to a webhook when one is configured.

Package corpus reads the labelled evaluation corpus of testdata/corpus: scam.csv, inputs an authority blacklisted, and legit.csv, inputs of verified legitimate entities.

Package httpapi serves the public HTTP API, following its contract (api/openapi.yaml): the server and its timeouts, the probes, and the middleware every request goes through (request identifier, access log, panic recovery, security headers).

Package contracttest checks HTTP exchanges against the public contract, api/openapi.yaml.

Package hosting reads the reference list of shared platforms that host their users' pages under a path of their own domain, shipped with the binary (platforms.csv, documented in docs/sources.md).

Package official reads the reference list of official domains often imitated, shipped with the binary (domains.csv, documented in docs/sources.md).

Package bodacc reads the notices the BODACC (DILA, Licence Ouverte; docs/sources.md) published about a company, by SIREN only: collective procedures, radiations, conciliations and professional recoveries.

Package live builds the registries a check consults online: RDAP, SIRENE and BODACC, each through an HTTP client allowed its own hosts only.

Package rdap reads the registration date of a domain from the RDAP server of its registry (RFC 9082, RFC 9083), found through the IANA bootstrap file (RFC 9224), never through a third-party aggregator (docs/sources.md).

Package replay records the answers of the registries and plays them back, so that the evaluation corpus is scored without the network.

Package sirene reads a company's name, creation date and head office state from the API Recherche d'entreprises (DINUM, INSEE data, Licence Ouverte 2.0; docs/sources.md), by SIREN only.

Package signaldoc writes the table of docs/signals.md from the signal catalog, so that the public list cannot drift from the rules.

Package acpr holds the connector of the blacklist the Autorité de contrôle prudentiel et de résolution and the AMF publish through Assurance Banque Épargne Info Service (docs/sources.md).

Package amf holds the connectors of the lists the Autorité des marchés financiers publishes daily on data.gouv.fr under the Licence Ouverte 2.0 (docs/sources.md): the blacklist, and the white lists of digital asset service providers (PSAN) and of offers in goods (biens divers).

Package arcep holds the connector of the national numbering plan the Autorité de régulation des communications électroniques, des postes et de la distribution de la presse publishes under the Licence Ouverte (docs/sources.md): the ranges of phone numbers it has assigned (MAJNUM), joined with the name and SIREN of the operator each range is assigned to (identifiants_CE).

Package catalog lists the sources Arnakoff syncs, how often, and the hosts they reach: the one list the sync and API processes are built from.

Package listing turns the entries of the published lists into the keys their snapshot rows are looked up by: a site's normalised host and path, an address, an E.164 phone number or a SIREN, normalised by the domain value objects.

Package store keeps the last valid snapshot of each source on disk, shared by the sync and API processes and kept across restarts.

Package postgres keeps the records of the API keys in PostgreSQL (ADR 0004), through jackc/pgx: their keyed digests, never the keys.

Package turnstile checks a Cloudflare Turnstile token with the siteverify API, as documented at https://developers.cloudflare.com/turnstile/get-started/server-side-validation/: a form POST of the widget's secret key and the token, answered by a JSON object.

Package signal holds the signal rules: pure functions from domain values to signals, with the French wording of each in one place (docs/signals.md).

Package cache keeps registry answers in memory for a while, so a burst of checks on the same identifier calls an upstream once (ADR 0002).

Package clock gives the commands the system time, pauses and jitter that the use cases take as ports, so the use cases stay testable.

Package config reads the configuration of every command from environment variables into one typed Config, validated as a whole at startup so a command stops before doing anything with a value it cannot use (ADR 0002).

Package csvfile reads the semicolon- or comma-separated files upstream sources publish, record by record, after checking their header.

Package defaults fills the zero fields of a configuration struct with their default value, so every Config in platform follows the same rule: zero means default, negative is invalid.

Package httpclient is the only way out to the network: every source and registry fetches through a Client (ADR 0002).

Package httpclienttest builds httpclient.Client values for tests against an httptest TLS server.

Package logging builds the structured logger every command writes with: log/slog lines in JSON, personal data masked, the request identifier of the context added (ADR 0002).

Package loggingtest builds redacting loggers for tests, writing to a buffer the test reads back.

Package ratelimit limits the requests of each client with a token bucket per key, in memory and bounded: an idle bucket is forgotten, and the number of buckets is capped.

Package startup is what every command does before its own work: load the typed configuration, build the redacting logger from it and make that logger the log/slog default, so no line written by the command or a library bypasses the masking of personal data (ADR 0002).

Package throttle keeps the registry clients away from an upstream that asked to wait with a Retry-After header (RFC 9110, section 10.2.3), so a check fails fast instead of calling it again too soon.