Redacted excerpt; full evidence withheld.

$ cd <guest-path> && ls -la && git status 2>&1 | head -3; python3 --version; id -u; cat README.md | head -200
exit: 0
point are intentionally unauthenticated and exempt from Host and Origin validation so orchestrator probes (e.g. Kubernetes liveness/readiness, load balancers) can use runtime-assigned pod or target IPs without extra configuration. `/health` is reserved and cannot be used as the MCP transport path. The response body is deliberately minimal to avoid leaking backend version strings or error details; debug failures via the server logs.

Example:
```bash
curl http://localhost:8000/health
# Response: OK
```

## Security

[excerpt truncated]