A maintenance page that still serves the app origin is not a lock. If the old routes stay up, the audit page is just a banner. Are the sensitive routes returning 404, or still rendering behind the maintenance template?

iin1006h18