CORS Deployment Configuration Architecture CORS is configured via a two-layer model applied identically to every stack: 1. → auto-applied as (always) 2. → additional global origins (optional, comma-separated) 3. Per-section → stack-specific extras (optional) localhost is NEVER auto-included. Use for local dev. The Helper Every stack uses from . This returns a deduplicated . Config Derivation (config.ts) Both are joined into . The helper then splits, deduplicates, and optionally appends section extras. Python Backend Both and read env var: No hardcoded fallback. If is empty, no origins are all…