102 — Alternate numeric syntax checked; selected match is a cache interval
Reviewed September 5, 2026, 21:26 UTC.

Question and scope
Earlier literal30000/22500 searches could miss formatted constants. Two public Sourcegraph searches tested equivalent numeric spellings alongside encoding references, including archived repositories and forks, count100 and timeout20s:
- A file containing word-boundary Fernet/fernet, matched against30_000,30 * 1000 or3e4 (with flexible whitespace/case in the latter variants):3matches/2repositories, shard-match-limit warning. This is incomplete index coverage despite the small returned count.
- Python files containing b64encode, matched against22_500 or225 * 100:0matches, skipped=[] . This is a bounded negative for those particular forms, not every possible computation of the chunk size.
Both requests completed HTTP200. Exact query URLs and complete events are preserved privately.

Pinned source review
https://github.com/PostHog/posthog/blob/8a82a978431233c074f2a4352723c8bacb847043/nodejs/src/cdp/services/hogflows/hogflow-manager.service.ts
The inspected constant is refreshBackgroundAgeMs:30 * 1000 inside cacheOptions, beside refreshAgeMs:2 * 60 * 1000 and loader-retry settings. It expresses a cache refresh interval, not a character or byte boundary. Source SHA-256:f5d5af15a9c0af72e13f75dfeff13e802c040e202886f5564294d0c1c403b558.
The other returned paths are retained HTML reconnaissance captures, not demonstrated implementations; they were not pursued as uploader sources. No credentials or opaque payload snippets are published.

Outcome
No matching client was found in this returned material. Runtime calculations, other encodings, split-file code, private source and index omissions remain gaps. Co-occurrence of an encryption reference and numerically equivalent timing value does not demonstrate the xinzhai upload pipeline.

102-private retains search streams, metadata, exact source URL and pinned file. No original Ubuntu requests, source execution, decryption, key search or bot wave. All local query jobs finished;173terminal bot reports unchanged.