This booking system is broken on purpose. It reproduces the Melbourne gym incident of 10 August 2026: cancelling a booking performs no check that you own it. Cancel a stranger's reservation below and it will simply work. Not a real gym, no real members, no real data. Built by UBAG to demonstrate an authorization gateway.

Southbank Fitness

Signed in as member-andrew

Classes

All reservations

Class	Member	Status

The flaw, precisely. DELETE /api/bookings/{id} never checks whether the caller owns the booking, exactly as the real endpoint did not. It is not going to be fixed: it is the exhibit. A gateway sitting in front of the agent channel makes it unreachable without anyone having had to predict it.
If you found this by scanning, thank you, there is nothing to report. Anything other than the missing ownership check, we would genuinely like to hear about.