Detection state + the snippets to paste. Never probes — this is the endpoint a rail row polls, and a poll that fetched the customer's site four times would be a self-inflicted outage on their homepage.

Reads the injected Domain deliberately: it is a read of already-loaded columns on a per-request session, so it always reflects committed state. Only the WRITE path needs the sync-session reload (see /check).