Demo endpoints

The Demo Endpoints group (documented at the end of this reference) contains a small set of public /demo/* endpoints that exist only to power the built-in demo Issue/Verify UI served at /dashboard. They are not part of the production API surface.

These endpoints are controlled by a single configuration flag, system.test_endpoints_enabled:

• When enabled, the /demo/* endpoints are publicly reachable without an admin session, and the demo UI at /dashboard is available to anonymous users.

• When disabled, every /demo/* endpoint returns 404 and the demo UI is hidden.

Each demo endpoint behaves identically to its protected counterpart and only exposes safe read/create actions. Access control for /demo/* is expected at the gateway. Only enable system.test_endpoints_enabled in trusted demo/interop environments.