case_id: "js-express-guarded:004"
entries:
  http:
    - id: "POST /api/admin/exec"
      route: "/api/admin/exec"
      method: "POST"
      handler: "createServer.exec"
      description: "Admin exec blocked unless ALLOW_EXEC=true"