Use when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
