Auth Modes Index

The index of authentication modes this deployment accepts, declared SEPARATELY from payment: a valid X-Payment-Auth proves a payment, never an account or an authorization grant.

A mode that is disabled is listed as disabled rather than omitted — omitting it would be honest about the effect and misleading about the surface. For wallet_session the response carries the closed list of path prefixes a session may NOT cross, generated from the same constants the auth chokepoint enforces.