- Shipped
- November 15, 2026 at 12:01 AM UTC
- Author
- Kamo
- Commit
- db5cc74
OTKValidationFilter resolved X-OTK with a plain GET and never deleted it, so a captured key replayed for its whole TTL. It is now resolved and spent in one atomic Redis GETDEL. No caller reuses an OTK against VOIPService: the kamo-internal BFF mints one per request, the tool plane and mobile use X-***-Token, and the gateway strips x-otk. **************** and **************** bypassed on GD (eligibility) alone; they now require an open god-mode window via **************** like every other gate here.