Backend PR 466 and admin PR 14 add daily aggregate counters independent of resettable scan quotas. The SUPER_ADMIN scan counter page lists all accounts with search/pagination, available nickname and email, UUID, creation, last authenticated access, last scan response and cumulative observed attempts split by outcome.

Outcomes distinguish recognized, uncertain, unmatched, technical error, refused, invalid and unclassified responses. Counts survive quota resets. No passwords, tokens, images, IPs, scanned card IDs or private holdings are included. Last access is token activity, not an email login event.

No historical failures are fabricated. Collection is opt-in after backend migration 0039 with SCAN_STATISTICS_ENABLED=1; admin migration 006 follows. Offline attempts, disconnected responses, unknown identities and early proxy refusals are not attributable. Writes are best effort, not billing records. Multiple comparator HTTP requests count separately. Aggregate data follows user retention and cascades away on physical account erasure.

Local validation: 1,120 API tests, 550 ingest tests, TypeScript/checkjs, 23 admin tests and desktop/mobile browser checks passed. Backend and admin PRs were merged into staging after all CI checks passed, including PostgreSQL integration, live API E2E and Docker image/API smoke. Deployed and enabled on 2026-10-12 after a verified full database backup and migrations 0039/006. Only the API and console were recreated. PostgreSQL totals and quota-reset independence passed using synthetic writes rolled back afterward. API health/readiness and private console HTTPS passed. No real customer account was modified for verification.