- A public site key such as
hrtc_live_0123456789abcdef01234567. Put it in browser code. It attributes a settled projection to the site, but it does not sign collection or authorize reads. - A secret verdict key such as
hrtc_sk_0123456789abcdef0123456789abcdef. Keep it on your server. It reads projected verdicts attributed to that site.
Collect in the browser
heretic() resolves rather than rejecting into the host page:Use immediate readiness
Successful ordinary collection returns a raw 32-character lowercase hexadecimal request ID after D1 acknowledges the tenant-visible projection. Your server can retrieve that ID immediately. Do not add a fixed polling delay.Missing, invalid, foreign, deleted, archived, pruned, and ZDR IDs share
404.Use structured fields
Collector reference
Review every public option, endpoint resolution, CSP behavior, and ZDR.
Tenant verdict endpoint
Review authentication, status codes, timing, and response limits.

