Our next/image config is an allowlist: 16 widths and 5 qualities answer 200, everything else answers 400

The images block in next.config.mjs reads like a performance preference. It is actually a validator on a public endpoint, and you can map it from outside with curl. We allow 80 variants per source image and the app only ever asks for 16 of them.