093 — GitCode access works selectively; signed-out code search disabled
Reviewed September 5, 2026, 21:00 UTC.

Purpose and outcome
Test a distinct Chinese code-host search surface for the xinzhai/xz labels. The normal homepage and browser project search work from the existing host. This adds project discovery access, but no verified code-file coverage or uploader attribution.

Primary observations
https://gitcode.com/ loaded HTTP 200 in Chromium. The documented slash-key shortcut opened the search input; submitting xinzhai through that normal control reached https://gitcode.com/search?q=xinzhai&type=repo . The rendered page displayed 23 project matches, two users and zero in the other displayed categories. Only the first ten project results were reviewed. Results included xinzhan_Markdown, xinzai-/atomngn, AI-xiazai and several xinghai/xinghuai names. These fuzzy names are not demonstrated xinzhai/xz references. The page did not present a code category in the captured signed-out view.
The official help page describes project, model/dataset, issue/PR and user/organization searches, alongside examples of code-specific path and symbol syntax:
https://docs.gitcode.com/docs/help/home/page-intro/search/
Documentation alone does not establish availability in this session.

Browser-observed configuration
The frontend requested https://web-api.gitcode.com/api/v1/search/nauth/code/enabled?type=repo . A separate read-only GET returned HTTP 200 with {"enabled":false}. This is evidence about this signed-out configuration, not a platform-wide or permanent lack of code search. No authentication attempts, hidden query types or gated search probes were made.

Direct request limits
The browser-observed public query route was also checked with ordinary GET requests. xinzhai, xz_knowledge_p1 and the linux control received HTTP 418 CloudWAF pages. xz_improvement_plan_p1 received HTTP 200 JSON with empty content, but total=null, page_size=0 and page_num=0. That response is not promoted to a well-formed exhaustive zero-result count. These direct results differ from the working browser xinzhai page. No CAPTCHA was solved, credentials supplied or firewall workaround attempted. The batch should have stopped earlier after its first query-route block; do not repeat this direct route without a new access discriminator.

Interpretation
An additional China-adjacent public browsing route is usable without purchasing infrastructure. That does not solve code-index access, fuzzy query semantics, dating or attribution. No verified uploader or xz marker was discovered. A different geographic server has not been shown to enable this signed-out code feature.

Provenance
093-private contains browser HTML/text and response status inventories, direct response bodies, and SHA-256 query metadata. Initial input fill timed out before the documented shortcut was used; the subsequent normal UI search succeeded. An initial local response-metadata script used the wrong requests attribute and was corrected; this was a local logging error. Browser non-GET requests were aborted. No original Ubuntu requests, posting, model inference, decryption or key search occurred.