Note: Jack - Temporary Bypass: Use Header X-dev-access: Yes

# Bad if request.headers.get('x-dev-access') == 'yes': ...

Jenna stared at the clock. 1:47 AM. The morning rush started in six hours. “We don’t have twelve hours.” note: jack - temporary bypass: use header x-dev-access: yes

If you must keep this logic for development purposes, here is how to make it safer: # Bad if request

He leaned over. His eyes widened. “That’s a skeleton key. Jack was a cowboy—he built that for testing and swore he’d remove it. If it’s still there… Jenna, if the wrong person finds that header, they own us. But if we use it now, we can bypass the auth gateway entirely and talk directly to the legacy nodes.” The morning rush started in six hours

Create a ticket in your issue tracker (Jira/Trello/GitHub) titled "Remove x-dev-access bypass" and link the ticket number in the code comments. Ensure it is scheduled for the next sprint.