abuse-controls demo stand

Active blocking; the verdict pipeline runs on every request. Same code as production. See repo for sources and decision records.

Counters

Blocklist (0 entries)

What to try

• Open / in this browser — should be 200 (browser fp is not in the blocklist)
• curl -k https://<this-host>/ — should be 403 (curl fp is seeded)
• Hit /__fp from any client to see its fp
• Hit /metrics for Prometheus-scrape format
• Compare wrk against / vs /baseline/ to measure the verdict pipeline overhead