A well-intentioned security change has quietly broken the production application. Users can load the page, but core functionality is blocked. Step in as the on-call SRE to investigate the issue, restore service, and put safeguards in place to prevent it from happening again.
Familiarity with the following will be beneficial but is not required:
The following content can be used to fulfill the prerequisites: