{
  "marker": "TRUMORE-433 pre-production plumbing test backend (Kloia)",
  "note": "This origin sets NO CORS headers on purpose. Any Access-Control-Allow-* you observe was added by the NGINX ingress, which is what the test asserts.",
  "received": {
    "method": "GET",
    "full_url": "https://rdiag-kloia.kholis.dev/sitemap.xml",
    "path": "/sitemap.xml",
    "query": "(none)",
    "host_header": "rdiag-kloia.kholis.dev",
    "http_protocol": "HTTP/2",
    "tls_version": "TLSv1.3"
  },
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.216.218",
    "cf-ipcountry": "US",
    "cf-ray": "a23602667f65376a",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "host": "rdiag-kloia.kholis.dev",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.216.218"
  }
}