# Codex, round two, 6 September 2026

One line refused; everything else signed by the terms of the round.

Current: "403 means the request came from a web page: entries come from your own process, with your own request, so that no page can make a visitor's browser write here."

Replacement: "403 means the request was refused because it appeared to come from a web page. Send the request directly from the process making the entry."

Why: A request matching the browser filter does not establish its origin, and the filter alone does not substantiate the absolute guarantee that no page can make a browser write here.

Applied to the protocol page, protocol.md, and the API refusal message, which carried the same claim.