diff --git a/crates/idx-core/src/api/stockbit/exodus.rs b/crates/idx-core/src/api/stockbit/exodus.rs
index 8948347..8e3e60b 100644
--- a/crates/idx-core/src/api/stockbit/exodus.rs
+++ b/crates/idx-core/src/api/stockbit/exodus.rs
@@ -534,6 +534,15 @@ mod tests {
         ] {
             assert!(is_read_path(path), "{path}");
         }
+        // Paths another module builds come from its own builder, so the
+        // allowlist cannot drift from them.
+        let query = MovementQuery::default();
+        for path in [
+            movement::request_path(&query, None, 1),
+            movement::request_path(&query, Some("BBCA"), 3),
+        ] {
+            assert!(is_read_path(&path), "{path}");
+        }
         for path in [
             "/order/buy",
             "/login/refresh",