Complexity Score: 150

Description

Ensure that only the NestJS backend can call the Python AI layer.

Requirements

• Implement a middleware in FastAPI to verify HMAC signatures on all incoming requests.
• Use a shared secret key stored in environment variables.
• Reject requests with invalid or missing signatures with a 403 Forbidden.
• Add documentation on how to generate the signature in the NestJS backend.