Weighing in on the cloudflare unwrapgate against my better judgement. I wouldn’t have written unwrap there. But it’s an error loading config on app boot so odds are that even returning the error “like you should” is just exiting with a nonzero status with extra steps. You could recover by failing open but that could have easily masked the problem, not great for a WAF. So basically my take is unwrap is a red herring. The real issue is the bad config deploy and the seeming lack of a canary deploy or rollback to known good config. Standard ops stuff basically 🤷‍♀️