Frisk your HTTP routes for UNGATED MUTATING endpoints before you ship. Triggers automatically when you are about to report a coding task done and your diff added or changed a route handler (or on /gatefrisk). An endpoint that writes, deletes, pays, trades, or triggers a job with no auth check is an open switch on the public internet — a crawler's GET can flip it. gatefrisk enumerates the changed routes, classifies each one mutating vs read-only, checks the mutating ones for a gate, and refuses to say "done" while a mutating route ships open.
2026-07-07