Summary
Owner answer link. GET shows Answer: and a Confirm button and does not record the answer. POST records it. The first answer wins. A later POST is HTTP 200 and shows Already answered, and the stored answer does not change. Expired and canceled questions show a clear page. The page sends Content-Security-Policy frame-ancestors 'none', X-Frame-Options DENY, and Referrer-Policy same-origin. Origin null from a same-origin form post is accepted. A cross-site post is rejected. A stale page nonce shows the Confirm button again. An API key cannot submit the link. A quoted link that lands in an agent inbox burns the token.
Query
?token=Response
The OpenAPI document does not declare a JSON response schema for this call. The summary is the contract.Errors
The summary and the OpenAPI operation do not name an error code.
Idempotency
This route does not document Idempotency-Key or client_id.