diff --git a/api/blade-api.php b/api/blade-api.php
index 489ba8ec4..4be01ff1c 100644
--- a/api/blade-api.php
+++ b/api/blade-api.php
@@ -1,6 +1,36 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 header("Content-Type: application/json");
-$KEY = "BLADE2026";
+$KEY = weval_secret('BLADE_KEY','BLADE2026');
 $TASKS_DIR = "/var/www/html/api/blade-tasks";
 $HEARTBEAT = "/var/www/html/api/blade-tasks/heartbeat.json";
 
diff --git a/api/blade-brain.php b/api/blade-brain.php
index 367f23476..ab55d3cde 100644
--- a/api/blade-brain.php
+++ b/api/blade-brain.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 header("Content-Type: application/json");
 $msg = $_REQUEST["msg"] ?? "";
 if (!$msg) { echo json_encode(["error"=>"no msg"]); exit; }
diff --git a/api/blade-mattermost.php b/api/blade-mattermost.php
index 7cf67f75e..966afa907 100644
--- a/api/blade-mattermost.php
+++ b/api/blade-mattermost.php
@@ -1,9 +1,26 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 // WEVAL Blade — Mattermost Incoming Webhook Handler
 // Trigger: /blade [command] in Mattermost
 header("Content-Type: application/json");
 $BLADE_API = "https://weval-consulting.com/api/blade-api.php";
-$BLADE_KEY = "BLADE2026";
+$BLADE_KEY = weval_secret('BLADE_KEY','BLADE2026');
 
 $input = json_decode(file_get_contents("php://input"), true);
 $text = $input["text"] ?? "";
diff --git a/api/blade-tasks/task_20260329_193909_2bf619.json b/api/blade-tasks/task_20260329_193909_2bf619.json
new file mode 100644
index 000000000..418c24141
--- /dev/null
+++ b/api/blade-tasks/task_20260329_193909_2bf619.json
@@ -0,0 +1,14 @@
+{
+    "id": "task_20260329_193909_2bf619",
+    "type": "powershell",
+    "cmd": "Get-ChildItem C:\\Users\\Yace\\Desktop\\CLAUDE -Recurse | Measure-Object",
+    "label": "Count CLAUDE files",
+    "priority": 5,
+    "status": "pending",
+    "created": "2026-03-29T19:39:09+00:00",
+    "started": null,
+    "completed": null,
+    "result": null,
+    "error": null,
+    "source": "opus"
+}
\ No newline at end of file
diff --git a/api/blade-tasks/task_20260329_193909_a1934f.json b/api/blade-tasks/task_20260329_193909_a1934f.json
new file mode 100644
index 000000000..151232361
--- /dev/null
+++ b/api/blade-tasks/task_20260329_193909_a1934f.json
@@ -0,0 +1,14 @@
+{
+    "id": "task_20260329_193909_a1934f",
+    "type": "open_url",
+    "cmd": "https:\/\/weval-consulting.com\/wevia",
+    "label": "Open WEVIA",
+    "priority": 5,
+    "status": "pending",
+    "created": "2026-03-29T19:39:09+00:00",
+    "started": null,
+    "completed": null,
+    "result": null,
+    "error": null,
+    "source": "opus"
+}
\ No newline at end of file
diff --git a/api/blade-tasks/task_20260329_193909_a5a50a.json b/api/blade-tasks/task_20260329_193909_a5a50a.json
new file mode 100644
index 000000000..dfe3b6cb6
--- /dev/null
+++ b/api/blade-tasks/task_20260329_193909_a5a50a.json
@@ -0,0 +1,14 @@
+{
+    "id": "task_20260329_193909_a5a50a",
+    "type": "notify",
+    "cmd": "Audit complet 114\/114 PASS",
+    "label": "Audit done",
+    "priority": 5,
+    "status": "pending",
+    "created": "2026-03-29T19:39:09+00:00",
+    "started": null,
+    "completed": null,
+    "result": null,
+    "error": null,
+    "source": "opus"
+}
\ No newline at end of file
diff --git a/api/blade-tasks/task_20260329_193909_d46097.json b/api/blade-tasks/task_20260329_193909_d46097.json
new file mode 100644
index 000000000..614fcff66
--- /dev/null
+++ b/api/blade-tasks/task_20260329_193909_d46097.json
@@ -0,0 +1,14 @@
+{
+    "id": "task_20260329_193909_d46097",
+    "type": "open_url",
+    "cmd": "https:\/\/weval-consulting.com\/blade-ai.html",
+    "label": "Open Blade AI",
+    "priority": 5,
+    "status": "pending",
+    "created": "2026-03-29T19:39:09+00:00",
+    "started": null,
+    "completed": null,
+    "result": null,
+    "error": null,
+    "source": "opus"
+}
\ No newline at end of file
diff --git a/api/blade-telegram.php b/api/blade-telegram.php
index ce6aa9af9..5d79574bf 100644
--- a/api/blade-telegram.php
+++ b/api/blade-telegram.php
@@ -1,4 +1,21 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 // WEVAL Blade — Telegram Bot Fallback
 // Webhook: https://weval-consulting.com/api/blade-telegram.php
 // Setup: curl "https://api.telegram.org/bot8544624912/setWebhook?url=https://weval-consulting.com/api/blade-telegram.php"
@@ -6,7 +23,7 @@ header("Content-Type: application/json");
 $TG_TOKEN = "8544624912";
 $TG_CHAT  = "7605775322";
 $BLADE_API = "https://weval-consulting.com/api/blade-api.php";
-$BLADE_KEY = "BLADE2026";
+$BLADE_KEY = weval_secret('BLADE_KEY','BLADE2026');
 
 $input = json_decode(file_get_contents("php://input"), true);
 $msg = $input["message"]["text"] ?? "";
diff --git a/api/crm-api.php b/api/crm-api.php
index 90633f450..77079bc42 100644
--- a/api/crm-api.php
+++ b/api/crm-api.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 require_once __DIR__ . '/_secrets.php';
 header('Content-Type: application/json');
 header('Access-Control-Allow-Origin: *');
diff --git a/api/droid.php b/api/droid.php
index b9b8d2050..f08bfd03e 100644
--- a/api/droid.php
+++ b/api/droid.php
@@ -1,4 +1,34 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 // === WEDROID CAPABILITIES (CrowdSec threat intel + enhanced audit) ===
 function crowdsec_check_ip($ip) {
     $out = @shell_exec("sudo cscli decisions list -i $ip -o json 2>/dev/null");
@@ -33,7 +63,7 @@ if(!$cf_ok && !$priv_ok && $ip !== "127.0.0.1") {
 }
 
 $k=$_POST["k"]??$_GET["k"]??"";
-if($k!="DROID2026"&&$k!="WEVADS2026")die(json_encode(["error"=>"no"]));
+if($k!=weval_secret('DROID_KEY','DROID2026')&&$k!=weval_secret('CX_KEY','WEVADS2026'))die(json_encode(["error"=>"no"]));
 
 // Command logging
 $c_raw = $_POST["c"]??"";
diff --git a/api/ecosystem-health.php b/api/ecosystem-health.php
index 8cd08a8c9..52d607f0c 100644
--- a/api/ecosystem-health.php
+++ b/api/ecosystem-health.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 header("Content-Type: application/json");
 header("Access-Control-Allow-Origin: *");
 $c = [];
diff --git a/api/ethica-api.php b/api/ethica-api.php
index 4cc1a3fd0..27aaa4b04 100644
--- a/api/ethica-api.php
+++ b/api/ethica-api.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 require_once __DIR__ . '/_secrets.php';
 header("Content-Type: application/json");
 header("Access-Control-Allow-Origin: *");
diff --git a/api/ethica-pilot-send.php b/api/ethica-pilot-send.php
index a08807049..88f1395e9 100644
--- a/api/ethica-pilot-send.php
+++ b/api/ethica-pilot-send.php
@@ -1,4 +1,21 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 header("Content-Type: application/json");
 $mode = isset($_GET["mode"]) ? $_GET["mode"] : "dry-run";
 
diff --git a/api/nonreg-api.php b/api/nonreg-api.php
index 6995774bb..1703e9f3e 100644
--- a/api/nonreg-api.php
+++ b/api/nonreg-api.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 header("Content-Type: application/json");
 header("Access-Control-Allow-Origin: *");
 $cat = isset($_GET["cat"]) ? $_GET["cat"] : "all";
diff --git a/api/nonreg-latest.json b/api/nonreg-latest.json
index 934941b6d..f3761f7af 100644
--- a/api/nonreg-latest.json
+++ b/api/nonreg-latest.json
@@ -1 +1 @@
-{"ts": "20260329_215434", "version": "3.2", "score": 100, "pass": 114, "fail": 0, "total": 114, "elapsed": 30.1, "categories": {"S204": {"pass": 9, "fail": 0}, "S95-WV": {"pass": 12, "fail": 0}, "S95-ARS": {"pass": 17, "fail": 0}, "S95-iR": {"pass": 1, "fail": 0}, "INFRA": {"pass": 5, "fail": 0}, "API": {"pass": 27, "fail": 0}, "SEC": {"pass": 4, "fail": 0}, "S95-BK": {"pass": 6, "fail": 0}, "C2-API": {"pass": 4, "fail": 0}, "C2-SPA": {"pass": 1, "fail": 0}, "C2-WV": {"pass": 3, "fail": 0}, "SSO": {"pass": 8, "fail": 0}, "DATA": {"pass": 5, "fail": 0}, "CRONS": {"pass": 2, "fail": 0}, "BLADE": {"pass": 7, "fail": 0}, "LIFE": {"pass": 3, "fail": 0}}, "failures": []}
\ No newline at end of file
+{"ts": "20260329_215511", "version": "3.2", "score": 100, "pass": 114, "fail": 0, "total": 114, "elapsed": 28.2, "categories": {"S204": {"pass": 9, "fail": 0}, "S95-WV": {"pass": 12, "fail": 0}, "S95-ARS": {"pass": 17, "fail": 0}, "S95-iR": {"pass": 1, "fail": 0}, "INFRA": {"pass": 5, "fail": 0}, "API": {"pass": 27, "fail": 0}, "SEC": {"pass": 4, "fail": 0}, "S95-BK": {"pass": 6, "fail": 0}, "C2-API": {"pass": 4, "fail": 0}, "C2-SPA": {"pass": 1, "fail": 0}, "C2-WV": {"pass": 3, "fail": 0}, "SSO": {"pass": 8, "fail": 0}, "DATA": {"pass": 5, "fail": 0}, "CRONS": {"pass": 2, "fail": 0}, "BLADE": {"pass": 7, "fail": 0}, "LIFE": {"pass": 3, "fail": 0}}, "failures": []}
\ No newline at end of file
diff --git a/api/nonreg-opus.php b/api/nonreg-opus.php
index fdba99c4a..d3d951da0 100644
--- a/api/nonreg-opus.php
+++ b/api/nonreg-opus.php
@@ -1,10 +1,27 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 // NONREG_AUTH: IP whitelist + token
 $allowed = ["41.143.","41.250.","41.251.","196.206.","196.207.","105.159.","127.0.0.1","88.198.","95.216.","204.168.","185.177.72."];
 $ip = $_SERVER["REMOTE_ADDR"] ?? "";
 $ok = (php_sapi_name()==="cli");
 foreach($allowed as $a) if(strpos($ip, $a) === 0) { $ok = true; break; }
-if(!$ok && ($_GET["k"] ?? "") !== "WEVADS2026") { http_response_code(403); die("Access denied"); }
+if(!$ok && ($_GET["k"] ?? "") !== weval_secret('CX_KEY','WEVADS2026')) { http_response_code(403); die("Access denied"); }
 
 // NONREG OPUS — 95+ Tests IA + Audit + Products + Secu
 // Deploy: /var/www/html/api/nonreg-opus.php
diff --git a/api/nonreg-report.html b/api/nonreg-report.html
index 8a2750507..0ca0b60cb 100644
--- a/api/nonreg-report.html
+++ b/api/nonreg-report.html
@@ -1 +1 @@
-<!DOCTYPE html><html><head><meta charset=UTF-8><title>NR 20260329_215434</title><style>*{margin:0;padding:0}body{font-family:system-ui;background:#0f172a;color:#e2e8f0;padding:20px}h1{color:#22c55e}table{width:100%;border-collapse:collapse;margin:12px 0}th{background:#1e293b;padding:6px 8px;text-align:left;font-size:11px}td{padding:5px 8px;border-bottom:1px solid #1e293b;font-size:12px}.p{color:#22c55e}.f{color:#ef4444}.sc{font-size:2.5em;font-weight:700;text-align:center;color:#22c55e}</style></head><body><h1>WEVAL NonReg v3.2 — 20260329_215434</h1><div class=sc>100%</div><p style=text-align:center>114/114 PASS | 0 FAIL | 30.1s | 10 couches | 4 machines</p><table><tr><th>Test</th><th>Couche</th><th>St</th><th>Detail</th></tr><tr><td>Home</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 24KB</td></tr><tr><td>WEVIA</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 147KB</td></tr><tr><td>Manager</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Radar</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 58KB</td></tr><tr><td>ToolsHub</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Monitor</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Huawei</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 41KB</td></tr><tr><td>DeerFlow</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 2KB</td></tr><tr><td>CRM-Hub</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Dash</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Apps</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-IA</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Proc</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Widget</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Sent</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Ctrl</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Brain</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-O365</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Deliv</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Warm</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Send</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-ghost-ne</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-brain-se</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-campaign</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-growth-e</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 18KB</td></tr><tr><td>A-deal-tra</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-cloud-ma</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-cf-manag</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-dashboar</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-send-con</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-harvest-</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-command-</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-dns-mana</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-ceo-dash</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-reputati</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-newslett</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-tracking</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-self-hea</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>iResp-Root</td><td style=color:#a78bfa;font-size:11px>S95-iR</td><td class=p>PASS</td><td>200</td></tr><tr><td>Ethica</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 4KB</td></tr><tr><td>Consent</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 9KB</td></tr><tr><td>Twenty</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>n8n</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>401 0KB</td></tr><tr><td>MM</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>401 0KB</td></tr><tr><td>WEVIA</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 58B</td></tr><tr><td>Manifest</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 2860B</td></tr><tr><td>Health</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 401B</td></tr><tr><td>AEGIS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 424B</td></tr><tr><td>AE-Sc</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 98B</td></tr><tr><td>AE-Pol</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 244B</td></tr><tr><td>SS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 269B</td></tr><tr><td>SS-S</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 313B</td></tr><tr><td>SS-R</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 137B</td></tr><tr><td>AIOS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 255B</td></tr><tr><td>AI-Ag</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 348B</td></tr><tr><td>AI-K</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 281B</td></tr><tr><td>OClaw</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 391B</td></tr><tr><td>Prom</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 72B</td></tr><tr><td>SMem</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 196B</td></tr><tr><td>Mstr</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 211B</td></tr><tr><td>Dify</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 479B</td></tr><tr><td>Evo</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 143B</td></tr><tr><td>APcs</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 125B</td></tr><tr><td>Goose</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 177B</td></tr><tr><td>BrUse</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 24B</td></tr><tr><td>EthP</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 78B</td></tr><tr><td>Rtr</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 189B</td></tr><tr><td>NR-JSON</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 673B</td></tr><tr><td>CRM</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 25B</td></tr><tr><td>LvMet</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 85B</td></tr><tr><td>MonDsh</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 1520B</td></tr><tr><td>IP-WV</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>IP-WA</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>IP-CRM</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>Nuclei</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>0 finds</td></tr><tr><td>KumoMTA</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>active</td></tr><tr><td>PMTA</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>1 procs</td></tr><tr><td>EthDB</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>130600 ct</td></tr><tr><td>SendDB</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>3094652 ct</td></tr><tr><td>S95-Dsk</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>76%</td></tr><tr><td>Docker</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>active</td></tr><tr><td>WhatsApp</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>JSON 132B</td></tr><tr><td>WA-Hook</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>403</td></tr><tr><td>SpamScore</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>200</td></tr><tr><td>WEVADS-IA</td><td style=color:#a78bfa;font-size:11px>C2-SPA</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Blacklist</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WorldDash</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Seeds</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>NR-API</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>JSON 673B</td></tr><tr><td>SSO-blade-cent</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-blade-ai.h</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-claude-mon</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-crons-moni</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-monitoring</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-openclaw.h</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-crm.html</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-world-map-</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>B2B-Leads</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>354 leads</td></tr><tr><td>LinkedIn</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>669 profiles</td></tr><tr><td>Ethica-DZ</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>91985 HCPs</td></tr><tr><td>Ethica-MA</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>19407 HCPs</td></tr><tr><td>Ethica-TN</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>17329 HCPs</td></tr><tr><td>Ethica-Crons</td><td style=color:#a78bfa;font-size:11px>CRONS</td><td class=p>PASS</td><td>11 cron entries</td></tr><tr><td>Ethica-Scripts</td><td style=color:#a78bfa;font-size:11px>CRONS</td><td class=p>PASS</td><td>15 scripts</td></tr><tr><td>Blade-API</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>JSON 105B</td></tr><tr><td>Blade-Brain</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>18B</td></tr><tr><td>Blade-AI</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200</td></tr><tr><td>Blade-Ctr</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200</td></tr><tr><td>Sentinel-PS1</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200 12KB</td></tr><tr><td>Life-API</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>50B</td></tr><tr><td>Life-App</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Life-HTML</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>200 22KB</td></tr><tr><td>Blade-TG</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>11B</td></tr><tr><td>Blade-MM</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>108B</td></tr></table></body></html>
\ No newline at end of file
+<!DOCTYPE html><html><head><meta charset=UTF-8><title>NR 20260329_215511</title><style>*{margin:0;padding:0}body{font-family:system-ui;background:#0f172a;color:#e2e8f0;padding:20px}h1{color:#22c55e}table{width:100%;border-collapse:collapse;margin:12px 0}th{background:#1e293b;padding:6px 8px;text-align:left;font-size:11px}td{padding:5px 8px;border-bottom:1px solid #1e293b;font-size:12px}.p{color:#22c55e}.f{color:#ef4444}.sc{font-size:2.5em;font-weight:700;text-align:center;color:#22c55e}</style></head><body><h1>WEVAL NonReg v3.2 — 20260329_215511</h1><div class=sc>100%</div><p style=text-align:center>114/114 PASS | 0 FAIL | 28.2s | 10 couches | 4 machines</p><table><tr><th>Test</th><th>Couche</th><th>St</th><th>Detail</th></tr><tr><td>Home</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 24KB</td></tr><tr><td>WEVIA</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 147KB</td></tr><tr><td>Manager</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Radar</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 58KB</td></tr><tr><td>ToolsHub</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Monitor</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Huawei</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 41KB</td></tr><tr><td>DeerFlow</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 2KB</td></tr><tr><td>CRM-Hub</td><td style=color:#a78bfa;font-size:11px>S204</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Dash</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Apps</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-IA</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Proc</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Widget</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Sent</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Ctrl</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Brain</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-O365</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Deliv</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Warm</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WV-Send</td><td style=color:#a78bfa;font-size:11px>S95-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-ghost-ne</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-brain-se</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-campaign</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-growth-e</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 18KB</td></tr><tr><td>A-deal-tra</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-cloud-ma</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-cf-manag</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-dashboar</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-send-con</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-harvest-</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-command-</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-dns-mana</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-ceo-dash</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-reputati</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-newslett</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-tracking</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>A-self-hea</td><td style=color:#a78bfa;font-size:11px>S95-ARS</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>iResp-Root</td><td style=color:#a78bfa;font-size:11px>S95-iR</td><td class=p>PASS</td><td>200</td></tr><tr><td>Ethica</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 4KB</td></tr><tr><td>Consent</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 9KB</td></tr><tr><td>Twenty</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>n8n</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>401 0KB</td></tr><tr><td>MM</td><td style=color:#a78bfa;font-size:11px>INFRA</td><td class=p>PASS</td><td>401 0KB</td></tr><tr><td>WEVIA</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 58B</td></tr><tr><td>Manifest</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 2860B</td></tr><tr><td>Health</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 401B</td></tr><tr><td>AEGIS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 424B</td></tr><tr><td>AE-Sc</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 98B</td></tr><tr><td>AE-Pol</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 244B</td></tr><tr><td>SS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 269B</td></tr><tr><td>SS-S</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 313B</td></tr><tr><td>SS-R</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 137B</td></tr><tr><td>AIOS</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 252B</td></tr><tr><td>AI-Ag</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 348B</td></tr><tr><td>AI-K</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 281B</td></tr><tr><td>OClaw</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 391B</td></tr><tr><td>Prom</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 72B</td></tr><tr><td>SMem</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 196B</td></tr><tr><td>Mstr</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 211B</td></tr><tr><td>Dify</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 479B</td></tr><tr><td>Evo</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 143B</td></tr><tr><td>APcs</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 125B</td></tr><tr><td>Goose</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 177B</td></tr><tr><td>BrUse</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 24B</td></tr><tr><td>EthP</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 78B</td></tr><tr><td>Rtr</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 189B</td></tr><tr><td>NR-JSON</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 673B</td></tr><tr><td>CRM</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 25B</td></tr><tr><td>LvMet</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 85B</td></tr><tr><td>MonDsh</td><td style=color:#a78bfa;font-size:11px>API</td><td class=p>PASS</td><td>JSON 1519B</td></tr><tr><td>IP-WV</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>IP-WA</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>IP-CRM</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>Clean</td></tr><tr><td>Nuclei</td><td style=color:#a78bfa;font-size:11px>SEC</td><td class=p>PASS</td><td>0 finds</td></tr><tr><td>KumoMTA</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>active</td></tr><tr><td>PMTA</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>1 procs</td></tr><tr><td>EthDB</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>130600 ct</td></tr><tr><td>SendDB</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>3094652 ct</td></tr><tr><td>S95-Dsk</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>76%</td></tr><tr><td>Docker</td><td style=color:#a78bfa;font-size:11px>S95-BK</td><td class=p>PASS</td><td>active</td></tr><tr><td>WhatsApp</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>JSON 132B</td></tr><tr><td>WA-Hook</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>403</td></tr><tr><td>SpamScore</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>200</td></tr><tr><td>WEVADS-IA</td><td style=color:#a78bfa;font-size:11px>C2-SPA</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Blacklist</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>WorldDash</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Seeds</td><td style=color:#a78bfa;font-size:11px>C2-WV</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>NR-API</td><td style=color:#a78bfa;font-size:11px>C2-API</td><td class=p>PASS</td><td>JSON 673B</td></tr><tr><td>SSO-blade-cent</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-blade-ai.h</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-claude-mon</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-crons-moni</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-monitoring</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-openclaw.h</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-crm.html</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>SSO-world-map-</td><td style=color:#a78bfa;font-size:11px>SSO</td><td class=p>PASS</td><td>302</td></tr><tr><td>B2B-Leads</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>354 leads</td></tr><tr><td>LinkedIn</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>669 profiles</td></tr><tr><td>Ethica-DZ</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>91985 HCPs</td></tr><tr><td>Ethica-MA</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>19407 HCPs</td></tr><tr><td>Ethica-TN</td><td style=color:#a78bfa;font-size:11px>DATA</td><td class=p>PASS</td><td>17329 HCPs</td></tr><tr><td>Ethica-Crons</td><td style=color:#a78bfa;font-size:11px>CRONS</td><td class=p>PASS</td><td>11 cron entries</td></tr><tr><td>Ethica-Scripts</td><td style=color:#a78bfa;font-size:11px>CRONS</td><td class=p>PASS</td><td>15 scripts</td></tr><tr><td>Blade-API</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>JSON 105B</td></tr><tr><td>Blade-Brain</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>18B</td></tr><tr><td>Blade-AI</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200</td></tr><tr><td>Blade-Ctr</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200</td></tr><tr><td>Sentinel-PS1</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>200 12KB</td></tr><tr><td>Life-API</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>50B</td></tr><tr><td>Life-App</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>200 3KB</td></tr><tr><td>Life-HTML</td><td style=color:#a78bfa;font-size:11px>LIFE</td><td class=p>PASS</td><td>200 22KB</td></tr><tr><td>Blade-TG</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>11B</td></tr><tr><td>Blade-MM</td><td style=color:#a78bfa;font-size:11px>BLADE</td><td class=p>PASS</td><td>108B</td></tr></table></body></html>
\ No newline at end of file
diff --git a/api/nonreg-runner.php b/api/nonreg-runner.php
index 36e962f67..62e46afe1 100644
--- a/api/nonreg-runner.php
+++ b/api/nonreg-runner.php
@@ -1,8 +1,25 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 ignore_user_abort(true);
 set_time_limit(300);
 ob_start();
-$_GET["k"]="WEVADS2026";
+$_GET["k"]=weval_secret('CX_KEY','WEVADS2026');
 $_SERVER["REMOTE_ADDR"]="127.0.0.1";
 include "/var/www/html/api/nonreg-opus.php";
 $out = ob_get_clean();
diff --git a/api/searxng-proxy.php b/api/searxng-proxy.php
index ca4998c9b..00b76ed63 100644
--- a/api/searxng-proxy.php
+++ b/api/searxng-proxy.php
@@ -1,4 +1,18 @@
 <?php
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 // SearXNG proxy for internal use (S95 → S204)
 header('Content-Type: application/json');
 $key = $_GET['k'] ?? '';
diff --git a/api/ultimate-quality.php b/api/ultimate-quality.php
index 243e68429..277355372 100644
--- a/api/ultimate-quality.php
+++ b/api/ultimate-quality.php
@@ -1,6 +1,23 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 // Ultimate Quality API — text/plain output
-if(php_sapi_name()!=='cli'){$ip=$_SERVER['REMOTE_ADDR']??'';$ok=false;foreach(['41.143.','41.250.','41.251.','196.206.','196.207.','105.159.','127.0.0.','204.168.','10.1.0.','185.177.72.'] as $a)if(strpos($ip,$a)===0){$ok=true;break;}if(!$ok&&($_GET['k']??'')!=='WEVADS2026'){http_response_code(403);die('Access denied');}}
+if(php_sapi_name()!=='cli'){$ip=$_SERVER['REMOTE_ADDR']??'';$ok=false;foreach(['41.143.','41.250.','41.251.','196.206.','196.207.','105.159.','127.0.0.','204.168.','10.1.0.','185.177.72.'] as $a)if(strpos($ip,$a)===0){$ok=true;break;}if(!$ok&&($_GET['k']??'')!==weval_secret('CX_KEY','WEVADS2026')){http_response_code(403);die('Access denied');}}
 header('Content-Type: application/json');
 $P=$F=$W=0;$R=[];
 function t($n,$ok,$d=''){global $P,$F,$W,$R;if($ok===true){$P++;$R[]=['s'=>'pass','n'=>$n,'d'=>$d];}elseif($ok==='warn'){$W++;$R[]=['s'=>'warn','n'=>$n,'d'=>$d];}else{$F++;$R[]=['s'=>'fail','n'=>$n,'d'=>$d];}}
diff --git a/api/wedroid-chain-executor.php b/api/wedroid-chain-executor.php
index 70f042635..698e887b9 100644
--- a/api/wedroid-chain-executor.php
+++ b/api/wedroid-chain-executor.php
@@ -1,4 +1,21 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 /**
  * WEDROID Chain-of-Thought Executor v1.0
  * Multi-step autonomous reasoning + execution
diff --git a/api/wedroid-scheduler.php b/api/wedroid-scheduler.php
index 83f13741e..d6f116013 100644
--- a/api/wedroid-scheduler.php
+++ b/api/wedroid-scheduler.php
@@ -1,4 +1,21 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 require_once('/opt/wevads/config/credentials.php');
 /**
  * WEDROID Scheduler v1.0
diff --git a/api/wedroid-v4.php b/api/wedroid-v4.php
index cfc017199..4365a900e 100644
--- a/api/wedroid-v4.php
+++ b/api/wedroid-v4.php
@@ -1,7 +1,24 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 header("Content-Type: application/json");
 header("Access-Control-Allow-Origin: *");
-$KEY="DROID2026";
+$KEY=weval_secret('DROID_KEY','DROID2026');
 if(($_POST["k"]??$_GET["k"]??"")!==$KEY){echo json_encode(["error"=>"Unauthorized"]);exit;}
 $action=$_POST["action"]??$_GET["action"]??"chat";
 $message=$_POST["message"]??"";
diff --git a/api/wevia-db-stats.php b/api/wevia-db-stats.php
index 09a2eaa95..f923a3399 100644
--- a/api/wevia-db-stats.php
+++ b/api/wevia-db-stats.php
@@ -1,9 +1,26 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 header('Content-Type: application/json');
 header('Access-Control-Allow-Origin: *');
 
 try {
-    $pdo = new PDO('pgsql:host=localhost;dbname=adx_system', 'admin', 'admin123');
+    $pdo = new PDO('pgsql:host=localhost;dbname=adx_system', 'admin', weval_secret('DB_PASS','admin123'));
     $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
     
     $action = $_GET['q'] ?? 'summary';
diff --git a/api/whatsapp-api.php b/api/whatsapp-api.php
index 584c1c57b..1ad75e2cb 100644
--- a/api/whatsapp-api.php
+++ b/api/whatsapp-api.php
@@ -1,4 +1,34 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
+// === INPUT SANITIZATION ===
+function weval_input($key, $type='string', $method='GET') {
+    $src = $method === 'POST' ? INPUT_POST : INPUT_GET;
+    $val = filter_input($src, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+    if ($val === null || $val === false) {
+        $val = ($method === 'POST') ? ($_POST[$key] ?? '') : ($_GET[$key] ?? '');
+        $val = htmlspecialchars(strip_tags(trim($val)), ENT_QUOTES, 'UTF-8');
+    }
+    if ($type === 'int') return intval($val);
+    if ($type === 'email') return filter_var($val, FILTER_SANITIZE_EMAIL);
+    return $val;
+}
+
 header('Content-Type: application/json');
 $cfg = json_decode(file_get_contents('/opt/wevads/vault/whatsapp-config.json'), true);
 $action = $_GET['action'] ?? 'status';
@@ -74,7 +104,7 @@ if ($action === 'templates') {
 
 if ($action === 'history') {
     try {
-        $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', 'admin123');
+        $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', weval_secret('DB_PASS','admin123'));
         $rows = $db->query("SELECT * FROM admin.whatsapp_messages ORDER BY created_at DESC LIMIT 50")->fetchAll(PDO::FETCH_ASSOC);
         echo json_encode(['ok' => true, 'messages' => $rows]);
     } catch (Exception $e) { echo json_encode(['ok' => false, 'error' => $e->getMessage()]); }
diff --git a/api/whatsapp-webhook.php b/api/whatsapp-webhook.php
index 2ef38e71d..677fdbe0f 100644
--- a/api/whatsapp-webhook.php
+++ b/api/whatsapp-webhook.php
@@ -1,4 +1,21 @@
 <?php
+
+// === WEVAL SECRETS LOADER ===
+$_WEVAL_SECRETS = [];
+if (file_exists('/etc/weval/secrets.env')) {
+    foreach (file('/etc/weval/secrets.env', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
+        if (strpos($line, '#') === 0) continue;
+        if (strpos($line, '=') !== false) {
+            list($k, $v) = explode('=', $line, 2);
+            $_WEVAL_SECRETS[trim($k)] = trim($v);
+        }
+    }
+}
+function weval_secret($key, $default='') {
+    global $_WEVAL_SECRETS;
+    return $_WEVAL_SECRETS[$key] ?? getenv($key) ?: $default;
+}
+
 // WhatsApp Webhook - receives messages and status updates
 $verify_token = 'WEVADS_WA_VERIFY_2026';
 
@@ -38,7 +55,7 @@ if (isset($data['entry'][0]['changes'][0]['value']['messages'])) {
         
         // Store in DB
         try {
-            $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', 'admin123');
+            $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', weval_secret('DB_PASS','admin123'));
             $db->exec("CREATE TABLE IF NOT EXISTS admin.whatsapp_messages (
                 id SERIAL PRIMARY KEY, direction VARCHAR(4), phone VARCHAR(20),
                 message TEXT, msg_type VARCHAR(20), wa_id VARCHAR(50),
@@ -58,7 +75,7 @@ if (isset($data['entry'][0]['changes'][0]['value']['statuses'])) {
     $statuses = $data['entry'][0]['changes'][0]['value']['statuses'];
     foreach ($statuses as $st) {
         try {
-            $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', 'admin123');
+            $db = new PDO('pgsql:host=127.0.0.1;dbname=adx_system', 'admin', weval_secret('DB_PASS','admin123'));
             $db->prepare("UPDATE admin.whatsapp_messages SET status=? WHERE wa_id=?")->execute([$st['status'], $st['id']]);
         } catch (Exception $e) {}
     }