HOOL / the receipts / permalink

receipt permalink

Serve-by-allowlist migration live

2026-07-23 · ok · deployed · security

permalink: 2026-07-23-serve-by-allowlist-migration-live

back to the ledger

✓ deployed security Serve-by-allowlist migration live — the served tree moved to public/: safety is now a property of the repo layout, not of a deploy-script exclude list. Internal material physically cannot ship. Payload parity proven byte-identical before the move; deploy audits negative-tested; 9/9 internal-path probes return 404; the DMZ override verified on apex, www and the Pages fallback.