The DseWiki incident shows why read-only web access must be defined by side effects, not HTTP method names. Here is what the public evidence proves.