The URL→request_id lookup only searched cached results, so outputs
fetched via Submit→Collect or request-id recovery had no provenance
(sidecars were written with null endpoint/request). Add an explicit
request_urls table populated on every successful fetch path; the lookup
checks it first and falls back to the result-JSON scan.
Verified against the live fal API: full 11-check smoke suite passes,
including the Save→Provenance-from-File round trip on a real CDN file.
Also confirmed live: /account/billing returns 403 for non-admin keys
(handled gracefully with a hint) and the cache/dedup/free-recovery
ledger semantics hold against real requests.
Gokay Aydogan
b5c71755c0