The old public probe let one request trigger six server-side fetches to an arbitrary host. That was not a safe public primitive, so it is retired. Run the bounded Surface checker from an external client.
In a checkout with the locked @agenttool/xenia-surface@0.1.0-rc.1 development dependency already installed:
./node_modules/.bin/xenia-surface-check https://example.com/ --json
This command makes bounded public GET requests only if you choose to run it. Opening this page does not run it. A result covers only the declared profile and expires; it is not a whole-service badge.
Read the pinned profile hereMachine-readable retirement response — not tested, zero outbound requests.