Treat a real third-party endpoint as a new trust boundary
When a real third-party endpoint replaces a provisional integration, treat it as a new trust boundary. Model the exact wire contract, remove obsolete authentication and route assumptions, and strip undeclared response fields before data enters application state. This limits acci…