KamoAI internal endpoints never leave the gateway

Shipped

September 24, 2026 at 6:28 PM UTC

Author

Kamo

Commit

9e7578e

Carves the seven KamoAI internal subtrees (master spec §7 item 13) out of the wildcard forwards, and with them the server-to-server endpoints that predate the program under the same prefixes: /api/security/internal/**, /api/email/internal/**, the city-scenery overrides rail and the public-chat agent-message drop. Audited first: no caller uses a public host for any of them, and seven days of Traefik access logs show no request to any.