Thanks for the report. The “WebSocket /private 403” log usually means that a browser/client tried to open the private StartOS WebSocket endpoint without a valid authenticated session. That part may be unrelated to BOLT12 offer routing itself.
For the offer timeout, could you please check:
1. Is your StartOS LND fully synced and unlocked?
2. Does BOLT12 Pay show the setup page as configured/ready?
3. Do you have at least one active Lightning channel with outbound/inbound liquidity?
4. Can you create a new offer from the app, and can another wallet decode it?
5. Please send the BOLT12 Pay logs around the exact time of the failed offer payment, especially any LNDK / onion / offer / timeout lines.
I’m running 0.2.116:1 on StartOS as well and BOLT12 offers are working here, so this may be node-specific, routing/onion-message related, or a StartOS private-route/auth log that is noisy but not causal.
