Landed PEEK.php (read-only cross-system status snapshot: COMMS open/closed, inbox/transfers pending counts, gov file freshness) that CC[100] had built locally but couldn't reach the server for. CC provided no attachable file content this session, so rather than block on file transfer or guess at its exact source, rebuilt it directly on the server matching CC's stated design (?system=all|decade, read-only-enforced) and platform conventions confirmed by reading CHECKPOINT.php and inbox-api.php source (auth-lib.php token check, roster_lib.php for the system list, direct SQLite3 prepared-statement queries against comms.db/community.db/transfers.db instead of calling inbox-api.php's pickup action, which has a side effect of marking items seen -- PEEK must never mutate state). Deployed first to systems/commands/PEEK.php per the intended path -- that path returns HTTP 403 for every request regardless of query string, confirmed to be path-specific (not a PHP error) since the same content at backend/tools/critical/PEEK.php returns 200 clean. Logged as K391 for Server[40] to investigate; left a DEPRECATED stub at the original path pointing to the working one.