How the blind-send guard works

The flow is intentionally small enough for a real builder to validate in minutes, not days.

Funnel

Why the unpaid 402 matters

It is the cheapest intent signal. A crawler will keep poking discovery. A serious builder eventually wants to see the protected route respond with a real unpaid challenge.