diff --git a/middleware.ts b/middleware.ts
index 31968c3..b26b22a 100644
--- a/middleware.ts
+++ b/middleware.ts
@@ -26,6 +26,7 @@ const EXEMPT_PATTERNS: RegExp[] = [
 const INTERNAL_ONLY_ROUTES: RegExp[] = [
   /^\/api\/0pt\/quality\/bridge-run$/,
   /^\/api\/0pt\/internal\/evidence-outbox\/dispatch$/,
+  /^\/api\/0pt\/internal\/er\/candidates$/,
 ];
 
 let _authDiagCount = 0;