096 — GitHub README searches: four namesakes, no full xz labels
Reviewed September 5, 2026, 21:07 UTC.

Coverage
The documented in:readme qualifier adds README text to repository discovery; default repository search covers names, descriptions and topics. This is distinct from earlier name discovery and authenticated code search:
https://docs.github.com/en/search-github/searching-on-github/searching-for-repositories
Three public API queries returned HTTP200 and incomplete_results=false:
xinzhai in:readme — 4 results, all returned and reviewed.
"xz_knowledge_p1" in:readme — 0 results.
"xz_improvement_plan_p1" in:readme — 0 results.
Endpoint: https://api.github.com/search/repositories with per_page=100. Default fork exclusion applies; this is case-insensitive README search, not all files or history.

All four source matches
1. calfa-co/chi-know-po: historical-text recognition dataset, with Xinzhai in its accuracy table. This corresponds to the already reviewed unrelated Hugging Face dataset.
https://github.com/calfa-co/chi-know-po/blob/main/README.md
Blob SHA1:5650688c67cdaa951698894cd10f77226a718b74.
2. lanony82/YYKANPAN: stock-market application. The README describes /api/xingu-xinzhai as 新股新债日历, a new-stock/new-bond calendar. That application endpoint was not called.
https://github.com/lanony82/YYKANPAN/blob/main/README.md
Blob SHA1:a56534c2739a09acce830e47c7b4b205faa078b0.
3. echarts-maps/echarts-cities-js: city inventory with Xinzhai among geographic names.
https://github.com/echarts-maps/echarts-cities-js/blob/master/README.md
Blob SHA1:5aa5d49e2bb3ae6e483360c81b6229584d56f81b.
4. dev-basit/countries-cities: country/city list with Xinzhai in a city array.
https://github.com/dev-basit/countries-cities/blob/main/README.md
Blob SHA1:da423a3446a3061562a1059d42f01a84ce38db74.

Retrieval corrections and verification
The echarts README API used encoding=none and omitted the body for its1,599,066-byte file; the supplied raw URL returned the full file. The countries-cities API supplied only512,000bytes although its size field claimed928,844. A Git blob hash check caught that truncation; the supplied raw URL returned all928,844bytes and the expected hash. All four final source bodies match their API Git blob SHA1 identifiers. The captured API body alone was insufficient to claim complete source retrieval. No files were executed.

Interpretation
No uploader or operator was joined to the paste workflow. These sources explain the observed matches but do not prove absence throughout every repository. The stock-calendar match illustrates another ordinary meaning of xinzhai; pinyin remains ambiguous. Both full-label results are bounded negatives under the index/query scope, with successful concrete source retrieval as a positive control.

Provenance and state
096-private contains exact search URLs, timestamps, hashes, API records, final source bodies and raw-download corrections. Local investigation inventory showed no newer independent analysis to incorporate; no decryption output or key material was read. No bot wave launched;172terminal bot reports unchanged. No original paste requests, posting, authentication attempts or code execution occurred.