Record verified Home preview deployment and browser checks
1 file changed,
+3
−0
implementation/overnight-2026-09-07.md+3 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index ab0e903..0c89fd8 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -684,3 +684,6 @@ Full review is retained there and posted to suite discussion 5. |
| - User requests continuously deployed stages and a notification after EVERY verified deployment, including what changed, exact URL, what to inspect, and whether preview or production. Do not announce a queued promotion as live. |
| - User Safari screenshot exposed form-action self blocking Home's POST redemption → credential root → configured directory redirect. Screenshot token is not copied or used. Root paused the UI-only deployment and implemented fix/signin-form-redirect9b77ec85ad23c87fa234bd7130b616179d96cd37 atop markup eb6e739. |
| - The fix adds only the validated configured directory origin via framework Options.CSP. Exact framework baseline comparison and full route sweep retain other restrictions; binary wiring guard permits only the reviewed setter. Chromium and WebKit synthetic TLS tests both reproduce old refusal, corrected success and unrelated permission refusal. Full local gate/race and actual CI passed. Fable design/code review running; ARM64 release artifact built at /tmp/oficina-home-form-redirect-release. No deployment yet. |
| + |
| +- DEPLOYED preview stage at07:38 Dublin: Home9b77ec85ad23c87fa234bd7130b616179d96cd37, including shared Estilo/Rastrillo0.23, attribute markup and Safari form-action redirect fix. Both paired canary API bodies AND headers match. Initial45s deploy watch failed on old processes; one supported overnight-home environment restart completed asynchronously. No production promotion. |
| +- Fable DESIGN/CODE APPROVE at /tmp/oficina-home-form-redirect-review/review.json. Full local/race and actual CI green. Actual live Chromium16 GET-only route/width/script cases passed with version, CSP, labels, spacing, no-overflow/no-error checks; root visually inspected320px scripts-off. Receipt /tmp/oficina-home-form-redirect-release/verified.json, browser/results.json. User notified with sign-in URL and fresh-attempt instruction; full authenticated completion remains unverified by root. |