DLP coach is running

Point a Gateway HTTP policy at this Worker and it will show users what sensitive data was caught, mask it, and re-submit the redacted request.

• /preview — see the interstitial with sample data (mask style: partial · full · token)
• /intercept — target for the Gateway policy (accepts the original POST body + cf_* policy context)
• /api/health