It works — app.regencleo.ai

S3 (private, OAC) → CloudFront → Route 53 is wired up correctly.

Served from bucket app.regencleo.ai (ap-south-1) via distribution d1dm29azfvvpb6.cloudfront.net.

Marker: CLEO-APP-TEST-2026-09-17-T0658Z