drop api gateway access corpus · detect key burst + 429/403 patterns · runs locally
drop api gateway access corpus · local only
heuristic screener · vendor schema varies · not definitive proof