# item 5, 2026-10-01T19:24:09Z: the family login and the box dashboard (felhom.enkisfelhom.hu)
  anna's family cookie sent to the dashboard (a browser would not even send it — host-only): 302 -> ['location: /login']
  ... to the dashboard API: 401 '{"ok":false,"error":"authentication required"}'
  anna's family password at the dashboard login: 200, session cookie none, says wrong password: True
# item 6, cost: the same request (GET /api/v1/healthcheck) through the gated name and an ungated name, 60 each, alternating
  status gated 200 / ungated 200; pairs kept 60
  median gated 14.6 ms, ungated 14.2 ms -> the gate adds 0.4 ms (p90 16.4 vs 16.2)
  gate's answerer STOPPED: gm-spike/ (with anna's cookie) -> 500 ''
  gate's answerer STOPPED: gm-spike/api/v1/books (with anna's cookie) -> 500 ''
  gate's answerer STOPPED: mt-spike/ (with anna's cookie) -> 500 ''
  gate's answerer STOPPED: gm-spike/__family/login (with anna's cookie) -> 502 'Bad Gateway'
  gate STOPPED: the e-reader exception /api/v1/opds -> 401 (not behind the gate)
  gate back: anna -> 200
