API Audit — REST / GraphQL / RPC Security Review Perform a systematic security audit of API endpoints against the OWASP API Security Top 10 (2023). Distinct from — that's category-driven over a whole codebase, this is surface-driven over the API contract. Use for the codebase as a whole. Use this when you need a focused pass over every endpoint with API-specific bypass patterns. They cross-reference each other where categories overlap. Cross-references: - — the codebase-wide, category-driven audit; shares this release's verification, coverage, severity and findings machinery - "Combined white…