antiRea
Meters dataset access per identity. Flags coordinated bot abuse.
antiRea is an evidence-led, server-side TypeScript toolkit that meters dataset access per identity and detects coordinated bot abuse - advisory signals, zero runtime dependencies, and nothing blocked by default. One identity can only ever receive a capped slice of your dataset, so bulk extraction stops being an export call and becomes an identity problem.
It combines per-identity record budgets, priced exports and session-chained cursors, RFC 9421 Web Bot Auth signature verification, canary traps, and a family of advisory coordinated-cohort signals - herd phase, herd tightness, room guard, seat occupancy, activity phase, vote brigading, room hopping and reconnect storms. Everything is advisory: antiRea measures and reports, the host application decides. Release 2.8.0 - 812 automated tests (810 passing, 2 skipped RSA-PSS vectors).
