Railway CDN Caching Incident: When Opt-In Becomes Opt-Everyone-In

Deep dive into Railway's March 2026 CDN caching incident: how a configuration change leaked authenticated responses across users, what went wrong, and how to prevent it