So much frustration

To clarify: the app takes uploads from ERP systems and generates cycle counts for BYOD environments. Everything is live and working. I've had several people run live tests from their own homes on both phones and computers with no issues. The only thing failing it is WGU's security.

Yes, I submitted the link three ways: as a direct link, embedded in the paper, and in a separate text file.

Setup is HTTPS, hosted on AWS, with Duck DNS for the domain. I'm not sure what's tripping their check. If anyone has run into this or knows what WGU's security scan is actually flagging, I'd appreciate the input.

For what it's worth, HTTPS isn't optional here. The open-source barcode library I'm using requires a secure context for camera access, so I couldn't have skipped it.

Thanks in advance.