Live check against the gateway.
Responsible disclosure. Found a vulnerability? We want to hear it before anyone else does. Report privately via contact — we acknowledge promptly and will not pursue good-faith research.