CORS for the API.
The surface is an agent's own context store, bound to loopback and read by local tooling, so the browsers that reach it are local too. The allowed origins are therefore configuration rather than a compiled-in list: a deployment that fronts this with a real gateway names its origins, and one that does not allows none.