OAuth, not Global API Keys
Authorize configured scopes with state and PKCE. Encrypted tokens are never displayed back to users.
Cloudflare
Controlled Cloudflare deployment
Connect through OAuth, map a zone, deploy managed rules, and verify provider state.
Preflight and deploy
Check capabilities and limits before an explicit deployment action. Publishing a policy alone does not change Cloudflare.
Read-back verification
Compare remote configuration with the expected checksum and retain deployment history for diagnosis.