System Architecture & HealthZero Secret Exposure

System Diagnostics & API Probe

Real-time status probe to authoritative backend (https://api.wylio.in) and safety gate checks.

Frontend

Online

Next.js App Router

Demo Mode

Enabled

SafetyGate Active

API Backend

Probing...

https://api.wylio.in

Probe Latency

—

Last checked: Just now

Configured Environment Values

NEXT_PUBLIC_API_BASE_URLhttps://api.wylio.in

NEXT_PUBLIC_APP_URLhttps://demo.wylio.in

NEXT_PUBLIC_API_APPdemo

NEXT_PUBLIC_DEMO_MODEtrue

NEXT_PUBLIC_WORKSPACE_NAMEUrban Threads

Security & Secrets Audit

Database credentials (DATABASE_URL)✓ Protected — Omitted from client

Meta App Secrets & Webhooks✓ Protected — Omitted from client

WhatsApp Business API Access Tokens✓ Protected — Omitted from client

Payment Gateway Signing Keys✓ Protected — Omitted from client

JWT & Production Session Secrets✓ Protected — Omitted from client

Client Diagnostic Log Sanitizer✓ Active — Redacts authorization headers

DATA SOURCE ADAPTATION STRATEGY

100% GRACEFUL DEGRADATION

The demo frontend adheres to this resolution priority:

1. Safe Backend API (GET /v1/* with workspace headers)

2. Demo Simulation Fallback (Deterministic Urban Threads dataset via DemoFeatureService)

3. SafetyGate Protection (All POST/PUT/DELETE/Payment intercepted locally)

ℹ Backend is currently offline/CORS-restricted. All views are gracefully rendering Urban Threads deterministic simulation data with 'DEMO SIM' badges.