API attack playbooks¶

Two chains run end to end here. One works a REST surface from first contact to a documented finding. The other goes after the logic rather than the parameters, racing checks and skipping steps until the workflow produces an outcome nobody designed.