drop cloud logging json or csv · cache miss flood · origin error spike · scanner ua · query bypass · runs locally
flags cache miss flood · origin 5xx spike · scanner ua · cache-bypass query params
heuristic screener · parses exports locally · not definitive proof