Changed IndexNow verification to the official root-level {key}.txt convention after the first production notification returned HTTP 403; revalidation remains pending, while the website, sitemaps, and Bing sitemap processing are unaffected.
What changed
01
Recorded the first production notification as HTTP 403 without claiming that any URL was accepted, crawled, or indexed.
02
Changed public ownership proof to the exact root-level https://aaa.win/{key}.txt URL recommended by IndexNow; the former fixed internal proof path is no longer public.
03
Kept the real key server-only and excluded it from release notes, source code, and public diagnostics.
04
A new production notification still needs to be run and verified; normal website delivery, canonical sitemaps, and Bing's existing sitemap processing were not interrupted.