== D6 / R-138 2026-10-09T06:58:26Z: the hub's own check (GET /zones?per_page=50, exactly one zone and it IS the customer's domain), run READ-ONLY against every STORED token; nothing saved. Tokens never printed.
Tester-2       domain=sajatfelhom.hu               zones=1 ['sajatfelhom.hu'] -> PASS
demo-felhom    domain=demo-felhom.eu               zones=1 ['demo-felhom.eu'] -> PASS
demo-hp        domain=enkisfelhom.hu               zones=1 ['enkisfelhom.hu'] -> PASS
tester-1       domain=enkicsifelhom.hu             zones=1 ['enkicsifelhom.hu'] -> PASS
negative control: a made-up token -> HTTP 403 -> would be COULD NOT CHECK / refused (the check can fail)
hub DB copies (they hold the tokens) deleted from the scratchpad 2026-10-09T06:58:37Z
