After v4.3.3, the exact root-level {key}.txt proof returned HTTP 200, but a full request carrying keyLocation still returned HTTP 403; a minimal homepage request with the same production key and no keyLocation returned HTTP 202. This release omits that field, while the automatic full run and idempotent rerun remain deployment checks.
What changed
01
Confirmed that the exact root-level https://aaa.win/{key}.txt proof returned HTTP 200 without exposing the production key.
02
Observed that a full request carrying keyLocation still returned HTTP 403, while a minimal homepage request using the same production key and omitting keyLocation returned HTTP 202.
03
Removed keyLocation from root-proof submissions to use the default root-directory verification mode; the production key is unchanged and remains server-only.
04
Treats HTTP 202 only as receipt for processing, not proof of crawling or indexing; an automatic full submission followed by an unchanged idempotent rerun remains a deployment gate, so this release does not claim that the full inventory succeeded.