Billit one-click API-key oracle

Authorized testing only. The oracle never returns the recovered key; completion is represented by a SHA-256 fingerprint prefix.

Session: 9afa2d78987adbc1d24b2223

No webhook configured. Pass ?webhook=<UUID> or use --webhook to auto-deliver.

Open the one-click PoC

After the authenticated test user clicks anywhere on the Billit page, inspect safe status.