/verify accepts POST

This is an API, not a page. Opening it in a browser sends GET, and the server replies 404 — correctly: there is no artifact to check in the request.

Live example in a browser:
/demo — a form where you can check your own artifact

From a terminal:

curl -X POST __BASE__/verify \
  -H 'Content-Type: application/json' \
  -d '{"artifact":{"findings":["a finding"]},"source":"demo"}'