Publishing from central.

WordPress can emit REST URLs in index.php?rest_route=... form when pretty REST routes are not active. The harness must proxy that shape correctly or admin features fail with misleading 404s.
This post captures the early central-origin contract: Sentinel owns ingress, operators use standard WordPress admin, and integrations authenticate with dedicated application passwords.