Coherence-aware StealthProfile priming + burn (ADR-0008)

[filipeforattini]

What to build

Persist a per-host StealthProfile (detected antibot Vendor, the SelfFingerprint/Profile that last passed, surviving cookies/session state, observed crawl-delay, the coherent proxy lease, challenge/ban history) and prime the SessionContext with the last known-good identity. Reuse/rotate follows the SessionState ladder: Clean/Warm reused, terminal Blocked burned (rotate + cold-start), Contaminated kept-but-derated and rotated only after K consecutive occurrences; a solved-challenge-then-200 does not burn. Rotation is rate-limited per host/IP so churn does not become a cluster signal. See ADR-0008.

Acceptance criteria

• A per-host StealthProfile is persisted and loaded to prime the session at build.
• Known-good identity is reused; a terminal Blocked burns it; Contaminated is derated and rotated after K.
• Rotation is rate-limited per host/IP.
• Tests cover reuse, burn-on-block, and derate-then-rotate.

Blocked by

• Concrete StateStorage + host-intel read-back (ADR-0008) #68