Review Proof

Live review proof is served by the merchant Worker at /review/speed-audit-proof. This page links reviewers to the Worker proof endpoint and summarizes data boundaries.

• The root Worker path serves the embedded app shell.
• OAuth callback and mandatory Shopify privacy webhooks are implemented.
• Invalid webhook HMAC returns 401.
• No order or customer data scopes are requested.
• No theme write scope is requested and no theme writes are performed.