Controlled access

Review examples stay buyer-safe.

This route no longer exposes internal sample names, receipt fields, or verifier posture. Controlled-access material can be shared directly with qualified buyers.