test / test (push) Has been cancelled
Resolved open questions: fail-open+log for auth IP, add CSRF tokens, typed template structs, slog migration, rate limiter eviction policy (nearest-expiry, blocked buckets protected), guide URL as full path. Co-authored-by: Cursor <cursoragent@cursor.com>