The route is visible, but the public inbox is still gated
The secure-drop foundation is in place, but public intake remains paused until source-handling policy, metadata stripping, and review workflow hardening are stronger. The form stays visible so the submission structure is clear before it goes fully live.