#CORS

Three Hand-Maintained CORS Lists, Four Missed Lessons

The minia2a team hit CORS hand-list pitfalls four times: browser Agents failed preflight on a missing header name while server health checks stayed green. They built a CORS census via code derivation and reverse assertions, plus a method to verify binary-source consistency.