Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.