Oh no! To debug, go to google app engine and look at the logs. Also trace the server generator code to see under what conditions we throw a 403. It should only throw iirc when it doesn’t belong to pantsbuild/pants or is from before the date we turned it on.
May want to temporarily work around the firewall by adding your IP to the whitelist in Google AE. Can also change default firewall to allow instead