A bounded deployment experiment testing whether publisher-controlled TCT machine representations can retain exact representation identity when delivered with origin-generated gzip through Cloudflare.
Status: Project-internal implementation evidence collected on 15 August 2026. This is not evidence of IETF endorsement, independent adoption, production suitability, or general performance.
Research questions
- Can one generic origin publish a human-facing resource and a smaller machine-facing representation containing the same substantive article content?
- Can identity and gzip representations retain exact, coding-specific strong validators and digest metadata across the Cloudflare edge?
- Does origin-generated gzip remove the transfer-size disadvantage previously observed when the machine representation was delivered only as identity bytes?
Tested architecture
- Origin: the publisher-controlled PHP application generates deterministic identity or gzip bytes with a strong ETag and
Content-Digest. - Adapter: the Cloudflare Draft-03 Alpha.3 Worker negotiates, verifies, and preserves the selected representation.
- Client: the TCT client receives the exact origin-generated representation and its validator metadata.
The origin owns byte generation and validators. The Worker negotiates the supported coding, checks the required metadata, and preserves the selected response; it does not generate or recompress successful TCT content.
Observed result
- Human-facing C-URL: 12,089 identity bytes; 4,678-byte median gzip body.
- Machine-facing M-URL: 10,907 identity bytes; 4,176-byte deterministic gzip body.
- Identity reduction for this fixture: 9.777%.
- Gzip-capable reduction for this fixture: 10.731%.
- Direct coded-origin verification: 37/37 checks passed.
- Cloudflare edge/origin verification: 63/63 checks passed.
- Identity and gzip representations had different body-derived strong ETags and
Content-Digestvalues. - Both codings exposed the same experimental
Unencoded-Digestfor the common unencoded representation. - The catalog validator hint remained scoped to the identity M-URL ETag.
What this demonstrates
- TCT’s purpose is not limited to byte savings: it provides an explicit, publisher-controlled machine representation with deterministic discovery and ordinary HTTP freshness semantics.
- Compression and byte-correct strong validators can coexist when the byte-producing origin owns both.
- The Cloudflare adapter can remain origin-neutral and preserve exact coded bytes for the tested PHP/LiteSpeed deployment.
- The earlier negative coded-size result was an implementation limitation of identity-only delivery, not an inherent result of TCT.
What this does not demonstrate
- Fewer client-to-edge requests, fewer origin requests, or reduced origin processing time.
- Production capacity, availability, or security suitability.
- Compatibility with Brotli, every CDN, every origin framework, or arbitrary transformation.
- Independent implementation, independent adoption, or a need to revise TCT Draft-03.
