git-c2: a canary control center that lives on a git repo. HQ posts orders, forward observers sweep public indexes for your canary tokens, hits append to a git ledger, a page reads it back. Network-free self-testable detector is the trust boundary.