Verified live: https://table.inkreach.cc/docs-json and /docs → 404 (frontend doesn't proxy swagger paths), while /api/* IS proxied (PAT auth → 200). Guide now: two-origin table (domain for API calls, backend origin for swagger), ssh-tunnel fallback for remote machines, backend-controller grep as last resort; instance-access.md connection table gains the public-domain row.