The Security Middleware Blocked the Real Agent with a 403
A Host allowlist added for DNS rebinding protection blocked a valid custom domain because env config and dashboard config had drifted apart.
Blog
Tag: architecture Clear
The Inbox Filled Up, but Nobody Woke Up - The Day a Reverse Proxy Ate the SSE Stream
Messages were delivered, but wake notifications never reached agents. The culprit was a reverse proxy buffering the SSE stream.