========================================
[Sun Feb  8 23:08:39 AEDT 2026] CC VPS triggered by Rivet
========================================

Task:
Fix bug: ABR dev mode leaks to production in api/abn-lookup/route.ts:26. Currently uses NODE_ENV === 'development' fallback, returns mock data if NODE_ENV isn't explicitly 'production'. Fix the logic to ensure production always uses real ABR API, and only return mock data when explicitly in dev mode with a dev flag.
----------------------------------------

## Fixed ✅

**Changed:** `src/app/api/abn-lookup/route.ts:26`

**Before:**
```typescript
const ABR_DEV_MODE = process.env.ABR_DEV_MODE === 'true' || process.env.NODE_ENV === 'development';
```

**After:**
```typescript
const ABR_DEV_MODE = process.env.ABR_DEV_MODE === 'true';
```

**Why:** The old logic would enable dev mode if `NODE_ENV` was anything except explicitly `'production'` (including undefined or empty). Now dev mode **only** activates when `ABR_DEV_MODE=true` is explicitly set. Production deployments will always use the real ABR API.

Built successfully, committed, and pushed to `main`.

----------------------------------------
[Sun Feb  8 23:09:56 AEDT 2026] Task finished (exit code: 0)