The filter chain doesn't invoke the AOP aspect directly — Spring Security hands off to the servlet and AOP intercepts at the method level. The label implied a direct invocation chain that doesn't exist. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>