A full verification cycle, which we call the canary, ran on November 4. This is not a smoke test. It is a complete cross check between what each mirror serves and the PGP signed address list posted to our keyring.
What the canary covers
The procedure covers three layers. First, we fetch the landing page from each of the three onion addresses and compare the HTML hash against the expected value from the signed manifest. Second, we hit four internal endpoints (login form, cart summary, seller profile, and static asset map) and verify the TLS fingerprints match. Third, we confirm the PGP signature on the address list itself is valid against our public key, fingerprint 7E0B 9668 ED36 0856 9184 FDCA 1B5F 02D5 C74C C809.
The result
On November 4, all three mirrors passed every layer. Mirror 01 returned clean hashes across all endpoints. Mirror 02 matched its address without drift. Mirror 03 showed no residual effects from the late October spike. The signed list published on the same day carries timestamps from this run.
What this means in practice: if you pull any of the three addresses in the next few weeks and the page loads, you are looking at the genuine market. No impersonation domain has slipped through. The escrow terms remain unchanged, Monero only, three percent commission, seven to fourteen days in custody.