Middleware Error Symptom Index for Pre-Render Security Gates

Developers often search raw errors such as middleware timeout, 403 loop, or pre-render bypass when protected routes fail.

A good docs page maps these symptoms to implementation patterns without revealing private detection logic.

Middleware should define what happens when a trust API times out or a provider is unreachable.

For low-risk pages, fail open. For sensitive pages, fail to a challenge flow.

Public docs should expose stable contracts: request fields, decisions, scores, and broad reason categories.

Exact internal checks should remain private so attackers cannot tune around them.