KOVA · local dev server
Static landing for the development server. The directory listing Python's http.server shows by default has been replaced by this page so source code, architecture docs, and the OpenAPI spec aren't enumerable.
Entry points
Security · local dev only
Bind to localhost. Start the server with python3 -m http.server 8765 --bind 127.0.0.1 so it's not exposed on your LAN. The default Python invocation binds 0.0.0.0, which makes the repo readable to anyone on the same Wi-Fi.
Even with this landing page in place, direct URLs like /.git/ or /kova-openapi.yaml are still served — the directory listing is just hidden. Never run this server on a public interface or in a shared environment.