Do not add taskflow validation that refuses "inconsistent" flag combinations. A consumer left enabled while its producer is disabled must fail loudly on the missing WRK table (the step probe) — that ...
See also: server-side-advanced.md for Part 1 (ExifTool, Go rune/byte mismatch, zip symlink traversal, path traversal bypasses, Flask/Werkzeug debug, XXE external DTD, WeasyPrint SSRF, MongoDB regex ...