Hello from the Red Team test blog

This is a throwaway post for validating the reverse-proxy custom-domain connector across every scenario in the runbook.

Why this exists

It proves that client.com/blog serves real content through a scoped proxy, that canonical and JSON-LD URLs rebase to the custom domain, and that the catch-all guard refuses unsafe configs.