API call visualiser
Simulate missing acceptance cookie (UI only)
POST /api/stock
Interpretation: 2xx = allowed, 403 = blocked, others depend on backend (S3 will 404).