Technical forensic specification explaining how BotRefund analyzes browser environments and network invariants to distinguish novel retail browsers from server-side automation.
Human neuromuscular motor coordination produces continuous chaotic micro-tremors, non-zero curvature jerk, and variable velocity arcs. Interaction is governed by cognitive reading pauses (80ms–150ms per keystroke; 2,000ms–8,000ms form dwell times) and natural visual scanning.
Headless test harnesses (Playwright, Puppeteer, Selenium, Rebrowser) control browsers via the Chrome DevTools Protocol (CDP). This attaches debugger listeners, forces Blink AXObjectCacheImpl instantiation, injects __pwInitScripts globals, or proxies native prototypes.
Keystroke Dwell & Flight Time Covariance Anomaly (Akamai BMP kev): Biometric keystroke analysis revealed synthetic timing distributions (zero dwell duration keydown===keyup, or flight time variance < 8ms²). Genuine human typing across QWERTY keyboards exhibits natural mechanical flight time variations governed by physical finger travel distance between keys; robotic typing delays (e.g. Playwright page.type delay: 100ms) yield unnaturally uniform, invariant intervals.
Ad Platform Fraud Classification: Under Google Ads Invalid Traffic guidelines (Automated Click Activity) and Meta Advertising Integrity standards, sessions exhibiting Keystroke Flight/Dwell Anomaly violate fundamental consumer hardware invariants. They fail deterministic silicon rasterization, protocol compliance, or neuromuscular biometrics.
Why This Proves Non-Human Origin: Genuine consumer browsers on retail operating systems execute this API natively with verified hardware backing. Server software (headless cloud containers, unpatched automation harnesses, and proxy tunnels) cannot replicate this execution environment without incurring prohibitive server hardware costs.
Evidence Dossier Invariants: Each disputed click in our export packet matches an immutable server-side timestamp, landing URL, GCLID/fbclid, and observed IP address with zero client-side tamperability.
Human Baseline & Exception Scenario: High-speed stenographers or automated password autofill (autofill dispatches non-flight single burst). Neutralized by human verification factors.
BotRefund operates a multi-vector ensemble model. This signal adds objective forensic weight to the session dossier but never acts in isolation. Positive verdicts require corroboration across network routing, hardware silicon, and cursor kinematics to guarantee 99% precision.
This signal registers an objective, mathematically verifiable anomaly on the session ledger.
BotRefund correlates L4 packet timing, GPU silicon, and cursor jerk before finalizing risk.
Compiled directly into Google Ads and Meta refund packets with verified click IDs and server logs.