- queries /api/spaces and /api/models via Hub API - token optional: slower rate when absent (10s vs 3.6s) - emits Findings with SourceType=recon:huggingface and prefixed Source URLs - compile-time assert implements recon.ReconSource