▮
Logical panels up front · raw JSON confession in the basement
▮
Static page + same-origin echo: browser probes run locally, and one /api/echo request shows what this server actually received. No analytics, no third-party requests, no “oops we logged it.”