090 — Gitee client search: broad results are not exact hostname matches
Reviewed September 5, 2026, 20:37 UTC.

Finding
Gitee's working project search did not supply a verified xinzhai uploader. Both unquoted Ubuntu hostnames returned totals of at least200projects, with20rows requested. Quoting paste.ubuntu.org.cn returned exactly the same ordered20project IDs as the unquoted query. Quotation marks therefore did not establish a literal-hostname filter in this observed query.

Source review
The top result, https://gitee.com/stupid_kid/awesome-mac, was readable with a normal HTTP200 GET. Its rendered HTML text contains neither exact Ubuntu hostname. It is a software catalog mirror, not a demonstrated uploader. This does not prove the hostname occurs nowhere in the repository or was absent from an older indexed state. It does show that a search hit alone does not establish the desired reference.
The hostname result pages predominantly list software catalogs, command collections and assorted repositories. No matching xinzhai/xz names or upload mechanism was established from their returned project metadata. No remaining pages were enumerated: these broad results are not an exhaustive review of at least200projects.

Other queries
pastebin Fernet returned0 withrelation=eq.
pastebin 加密 returned18 withrelation=eq; all18metadata rows were returned. Descriptions concern website/resource lists and security notes, with some blank descriptions. None establishes the required record names, recurring workflow or encoding/chunking implementation. Full repository content was not audited. Generic references to encryption and paste sites can co-occur for many reasons.

Implication
089 established access, while090 tests usefulness and precision. Gitee project search is a discovery aid; its counts and quoted strings must not be promoted into verified code references. A candidate needs an actual matching source file or readable discussion. Successful transport does not imply exact search semantics or complete source-file coverage.

Provenance
Five public query GETs through the browser-observed project-search route, plus one project-page GET. No account, writes, code execution, scans, admin routes or original Ubuntu requests.090-gitee-client-search.py saves the four initial queries.090-private also preserves the quoted query, source page, complete returned JSON, statuses,timestamps and SHA-256 hashes. The ordered20ID equality was independently checked from the raw responses.
The project page is readable from the existing host, another route-level access observation. It does not resolve restricted raw-file or gist endpoints. No new infrastructure was purchased.