{
  "identity_nodes": [
    {
      "id": "ga4_client_id",
      "type": "cookie",
      "source": "GA4 JavaScript SDK via GTM generates client ID",
      "scope": "cross_session",
      "platforms_served": [
        "google-analytics-4",
        "google-ads"
      ],
      "evidence": "GA4 collect requests contain cid=826842155.1776757741 shared across both G-1FEEBQNV0D and G-26T311XVNT measurement IDs",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "ga4_session_id",
      "type": "cookie",
      "source": "GA4 JavaScript SDK generates session ID stored in _ga_* cookie",
      "scope": "session",
      "platforms_served": [
        "google-analytics-4"
      ],
      "evidence": "GA4 collect requests contain sid=1776757740 and sct=1 indicating first session",
      "persistence": "session_only",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "google_ads_auid",
      "type": "cookie",
      "source": "Google Ads tag generates advertising user ID",
      "scope": "cross_session",
      "platforms_served": [
        "google-ads"
      ],
      "evidence": "Google Ads conversion and remarketing requests contain auid=854434084.1776757741",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "posthog_device_id",
      "type": "cookie",
      "source": "PostHog JS SDK via first-party proxy at kilo.ai/ingest generates distinct_id",
      "scope": "cross_session",
      "platforms_served": [
        "posthog"
      ],
      "evidence": "PostHog flags request contains distinct_id 019daf03-9457-7098-b835-904f5dca0dd1 and $device_id with same value",
      "persistence": "days_30_plus",
      "consent_dependent": "unknown",
      "confidence": "high"
    },
    {
      "id": "posthog_first_party_proxy",
      "type": "server_side",
      "source": "PostHog proxied through kilo.ai/ingest first-party endpoint",
      "scope": "cross_session",
      "platforms_served": [
        "posthog"
      ],
      "evidence": "Requests to kilo.ai/ingest/array, kilo.ai/ingest/static, kilo.ai/ingest/flags, and kilo.ai/ingest/api/surveys confirm first-party proxying of PostHog",
      "persistence": "days_30_plus",
      "consent_dependent": "unknown",
      "confidence": "high"
    },
    {
      "id": "hubspot_visitor_id",
      "type": "cookie",
      "source": "HubSpot analytics tracking code generates visitor ID via hutk cookie",
      "scope": "cross_session",
      "platforms_served": [
        "hubspot"
      ],
      "evidence": "HubSpot __ptq.gif request contains vi=52322222e3542540944387be24bae8af and u=90335813.52322222e3542540944387be24bae8af...",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "hubspot_bfp",
      "type": "device_fingerprint",
      "source": "HubSpot browser fingerprint generated by analytics script",
      "scope": "cross_session",
      "platforms_served": [
        "hubspot"
      ],
      "evidence": "HubSpot __ptq.gif request contains bfp=7a9648632a467196643541f8f47ae6e7",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "medium"
    },
    {
      "id": "linkedin_insight_tag",
      "type": "cookie",
      "source": "LinkedIn Insight Tag loaded via GTM with partner ID 7288028",
      "scope": "cross_session",
      "platforms_served": [
        "linkedin"
      ],
      "evidence": "LinkedIn px.ads.linkedin.com/collect and attribution_trigger requests with pid=7288028 and conversionId=20244068",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "twitter_pl_id",
      "type": "cookie",
      "source": "Twitter/X UWT pixel generates persistent pixel-level ID",
      "scope": "cross_session",
      "platforms_served": [
        "twitter"
      ],
      "evidence": "Twitter adsct requests contain pl_id=8254468e-7c0a-4123-8b99-fcf272f61fbf shared across multiple event calls",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "bing_mid",
      "type": "cookie",
      "source": "Bing UET tag generates machine ID (mid) via bat.bing.com",
      "scope": "cross_session",
      "platforms_served": [
        "microsoft-ads"
      ],
      "evidence": "Bing actionp requests contain mid=dd68042f-6b9a-4216-bdbe-c18226410971 and vid=8ffcd9803d5611f1ad888dac95e895a8",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "reddit_uuid",
      "type": "cookie",
      "source": "Reddit pixel generates session-level UUID",
      "scope": "session",
      "platforms_served": [
        "reddit"
      ],
      "evidence": "Reddit alb.reddit.com/rp.gif request contains uuid=9a770c62-b13a-4eb1-a62a-0f52c2d1a266 with pixel ID a2_gws68xi53fgh",
      "persistence": "session_only",
      "consent_dependent": "yes",
      "confidence": "medium"
    },
    {
      "id": "meta_pixel_498148151146096",
      "type": "cookie",
      "source": "Meta Pixel loaded via GTM, fbevents.js with pixel ID 498148151146096",
      "scope": "cross_session",
      "platforms_served": [
        "meta"
      ],
      "evidence": "Facebook connect.facebook.net/signals/config/498148151146096 config request observed with domain=kilo.ai",
      "persistence": "days_30_plus",
      "consent_dependent": "yes",
      "confidence": "high"
    },
    {
      "id": "impact_tracking",
      "type": "other",
      "source": "Impact.com Universal Tracking Tag loaded from utt.impactcdn.com with squatch.js referral SDK",
      "scope": "cross_session",
      "platforms_served": [
        "impact"
      ],
      "evidence": "Script utt.impactcdn.com/A7138521-9724-4b8f-95f4-1db2fbae81141.js loads fast.ssqt.io/squatch-js@2 for referral tracking",
      "persistence": "unknown",
      "consent_dependent": "unknown",
      "confidence": "medium"
    },
    {
      "id": "sentry_session_id",
      "type": "other",
      "source": "Sentry SDK generates session IDs for error monitoring proxied through kilo.ai/monitoring",
      "scope": "session",
      "platforms_served": [
        "sentry"
      ],
      "evidence": "Sentry session posts contain sid=fadff45eb9a84846a978c4af64ba5d68 sent to kilo.ai/monitoring first-party endpoint",
      "persistence": "session_only",
      "consent_dependent": "no",
      "confidence": "high"
    }
  ],
  "breakpoints": [
    {
      "location": "No click ID persistence observed (gclid, fbclid, msclkid, ttclid not present in landing URL or stored cookies)",
      "impact": "attribution_loss",
      "affected_platforms": [
        "google-ads",
        "meta",
        "microsoft-ads",
        "twitter"
      ],
      "severity": "medium",
      "evidence": "Landing page URL https://kilo.ai/ has no click ID parameters and no _gcl_aw, _fbc, _fbp, or _uetsid cookie evidence in requests; Google Ads gcl_ctr=1~0~0~0 confirms no gclid cookie present"
    },
    {
      "location": "Cross-domain navigation from kilo.ai to app.kilo.ai (sign-in flow)",
      "impact": "attribution_loss",
      "affected_platforms": [
        "google-analytics-4",
        "google-ads",
        "posthog"
      ],
      "severity": "high",
      "evidence": "OPTIONS preflight request to app.kilo.ai/users/sign_in shows CORS cross-origin setup with no cross-domain linker parameter and no shared cookie domain observed"
    },
    {
      "location": "No enhanced conversions or user-provided data observed for any platform",
      "impact": "signal_degradation",
      "affected_platforms": [
        "google-ads",
        "meta",
        "linkedin"
      ],
      "severity": "high",
      "evidence": "Google Ads conversion request contains em=tv.1 indicating no email hash provided; Meta Pixel config loaded but no fbq('init', ..., {em:...}) user data observed; no hashed PII in any request"
    },
    {
      "location": "No consent management platform banner or consent gate observed",
      "impact": "signal_degradation",
      "affected_platforms": [
        "google-analytics-4",
        "google-ads",
        "meta",
        "linkedin",
        "microsoft-ads",
        "twitter",
        "reddit"
      ],
      "severity": "medium",
      "evidence": "HubSpot banner script js-na2.hs-banner.com loaded but gcs=G111 in GA4 requests indicates all consent granted by default with no user interaction; dma=1 suggests DMA applies but no consent dialog was triggered"
    },
    {
      "location": "No authenticated user ID or login event in dataLayer",
      "impact": "audience_fragmentation",
      "affected_platforms": [
        "google-analytics-4",
        "posthog",
        "hubspot"
      ],
      "severity": "medium",
      "evidence": "DataLayer contains only gtm.js, gtm.dom, gtm.load, and gtm.scrollDepth events; no user_id, login, or identify event observed despite sign-in link to app.kilo.ai"
    },
    {
      "location": "Google Ads conversion firing on every page view with value=0",
      "impact": "conversion_mismatch",
      "affected_platforms": [
        "google-ads"
      ],
      "severity": "medium",
      "evidence": "Conversion request to googleadservices.com contains label=NeCfCNuMwOkaEPa1n68_ with bttype=purchase and value=0 firing on homepage, indicating possible misconfigured page-level conversion"
    },
    {
      "location": "ct_cookie_present=false in Google Ads conversion requests",
      "impact": "attribution_loss",
      "affected_platforms": [
        "google-ads"
      ],
      "severity": "medium",
      "evidence": "Google Ads doubleclick conversion request explicitly includes ct_cookie_present=false indicating third-party cookie is unavailable for cross-site attribution"
    }
  ],
  "coverage": {
    "fully_stitched_estimate": "low_below_50",
    "primary_gaps": [
      "Cross-domain identity break between kilo.ai and app.kilo.ai where conversions likely occur",
      "No click ID cookies persisted (gclid, fbclid, msclkid) despite active paid campaigns",
      "No enhanced conversions or user-provided data matching configured on any platform",
      "No authenticated user ID passed to analytics or ad platforms",
      "Third-party cookies unavailable (ct_cookie_present=false) degrading Google Ads attribution"
    ],
    "consent_resilience": "weak",
    "cross_device_capability": "no"
  }
}