Concepts

Pipeline, paranoia levels, isolated vs embedded payloads, and the three management surfaces.

Read these pages before you raise a site from level 3 to 4 or 5.

What happens before the origin sees a request.

Levels 0–5 and promote_seconds.

Why a forum post is not treated like a search box.

Console, CLI, and REST share one auth model.

Request pipeline

Solid lines are the millisecond path. Dashed lines are ALAP after the response.

Per-site levels 0–5. Default is 3. Level 4 can rise to 5 for a timed window.

Isolated payloads are almost only attack text. Embedded payloads sit inside long ordinary text.

Web console, CLI / TUI, and REST share one user, session, and audit model.