The Bug I Used

he vulnerability was an auth-boundary mistake that developed through ordinary product drift. A backend API key started as a narrow, low-impact mechanism. Over time it picked up more more micro-service