- Shipped
- 19 ஆகஸ்ட், 2026 அன்று 1:51 AM UTC
- Author
- Kamo
- Commit
- 4140d72
A reachability probe that returned "SecurityRoleController test endpoint is working" to anybody. Nothing calls it — no reference in any service or in kamo-internal — and SecurityService is permitAll() with APIService relaying /api/security/** unauthenticated, so it was an internet-reachable endpoint whose only purpose was to confirm the service answers. Deleting beats guarding it: a test stub that needs a permission is still a test stub in production. Baseline 365 to 364.