(v)
| 721 | # still works. Scoped hard by exact path + method, fail-closed. |
| 722 | cyd_name = _valid_cyd_token() |
| 723 | if cyd_name: |
| 724 | cyd_ok = ( |
| 725 | (request.method == 'GET' and path == '/api/cyd/status') or |
| 726 | (request.method == 'GET' and path == '/api/cyd/wf') or |
| 727 | (request.method == 'POST' and path == '/api/cyd/ingest') or |
| 728 | (request.method == 'POST' and path == '/api/cyd/action') |
| 729 | ) |
| 730 | if cyd_ok: |
no outgoing calls
no test coverage detected