The header-stripping test sent a real internal address and an internal client name as forwarded headers. It now uses 203.0.113.44 (TEST-NET-3) and a neutral client name, and checks those values for leaks instead. The host setup guide pointed at the build directory of an old monorepo layout; it is service/ in this repository. Claude-Session: https://claude.ai/code/session_01GGe7kUhooMFuzY6GaDb2w9