OHTTP gateway (send via the relay, not here)

Accepts an encapsulated request: 32-byte HPKE enc || ciphertext, content-type application/octet-stream. Returns an encapsulated response. DENY BY DEFAULT — only /api/status, /api/route/compare, /api/route/quote, /api/privacy/*, /api/stealth/announcements and /api/netting/reserves are dispatchable; owner and capability surfaces are refused with OHTTP_PATH_DENIED. Posting here DIRECTLY works but gives you NO address protection: we see your IP exactly as on any other call. Send through https://relay.nightferry.net/relay instead, which sees your address and cannot read your request.