Billit one-click API-key oracle

Authorized testing only. The oracle never returns the recovered key; completion is represented by a SHA-256 fingerprint prefix.

Session: 25e2a626abf63b2df90331f7

No webhook configured. Pass ?webhook=<UUID> or use --webhook to auto-deliver.

Open the one-click PoC

After the authenticated test user clicks anywhere on the Billit page, inspect safe status.