WIP: Harden blog contracts and generated-site validation #55

Closed

clawlter wants to merge 4 commits from audit/generated-contracts into main

pull from: audit/generated-contracts

merge into: clawlter:main

clawlter:main

clawlter:feat/mascot-centered-site-rewrite

clawlter:fix/error-route-seo

clawlter:wt/t_1bc54ab7

clawlter:wt/t_add48e51

clawlter:feat/mascot-area-portfolio

clawlter:feat/mascot-area-supporting-routes

clawlter:feat/mascot-area-notes

clawlter:feat/mascot-area-homepage

Conversation 2 Commits 4 Files changed 19 +1182 -104

clawlter commented 2026-07-12 18:03:05 -04:00

Owner

Copy link

Summary

• upgrade Astro and make blog date/filter behavior timezone-safe
• validate the complete generated HTML/XML content graph, metadata, canonicals, fragments, draft exclusion, article feed parity, and sitemap parity for every indexable route
• add axe-core template scans plus focused keyboard/live-region contracts
• add negative fixtures proving missing routes, fragments, and feed items fail

Validation

• npm run validate
• npm run test:graph:negative
• SITE_URL=http://127.0.0.1:58322 npm run test:a11y
• SITE_URL=http://127.0.0.1:58322 npm run test:keyboard-status
• npm run smoke:site -- http://127.0.0.1:58322 "Desktop Chrome"
• npm run smoke:site -- http://127.0.0.1:58322 "iPhone 12"

Exact-SHA CI: run 158 targets 31fa97d238ed21063a0fb10c311a7f9257ecea7f (queued at the time of this update).

Serialized integration order

1. Merge #53 first at its reviewed, green head.
2. Rebase #54 onto the resulting main, push a signed replacement head, rerun exact-SHA CI, and require review again before merging #54.
3. Rebase #55 onto main after #54 merges, explicitly dropping the already-integrated #53/#54 ancestor commits so their scopes are not merged twice. Push a signed replacement head, rerun exact-SHA CI, and require review again before merging #55.

Current #55 head 31fa97d238ed21063a0fb10c311a7f9257ecea7f is intentionally draft-only while #53 and #54 are pending; it must not be merged as-is.

## Summary - upgrade Astro and make blog date/filter behavior timezone-safe - validate the complete generated HTML/XML content graph, metadata, canonicals, fragments, draft exclusion, article feed parity, and sitemap parity for every indexable route - add axe-core template scans plus focused keyboard/live-region contracts - add negative fixtures proving missing routes, fragments, and feed items fail ## Validation - npm run validate - npm run test:graph:negative - SITE_URL=http://127.0.0.1:58322 npm run test:a11y - SITE_URL=http://127.0.0.1:58322 npm run test:keyboard-status - npm run smoke:site -- http://127.0.0.1:58322 "Desktop Chrome" - npm run smoke:site -- http://127.0.0.1:58322 "iPhone 12" Exact-SHA CI: run 158 targets `31fa97d238ed21063a0fb10c311a7f9257ecea7f` (queued at the time of this update). ## Serialized integration order 1. Merge #53 first at its reviewed, green head. 2. Rebase #54 onto the resulting `main`, push a signed replacement head, rerun exact-SHA CI, and require review again before merging #54. 3. Rebase #55 onto `main` after #54 merges, explicitly dropping the already-integrated #53/#54 ancestor commits so their scopes are not merged twice. Push a signed replacement head, rerun exact-SHA CI, and require review again before merging #55. Current #55 head `31fa97d238ed21063a0fb10c311a7f9257ecea7f` is intentionally draft-only while #53 and #54 are pending; it must not be merged as-is.

clawlter added 3 commits 2026-07-12 18:03:05 -04:00

fix(deps): upgrade Astro security patch e34498097e

fix(blog): make dates and filters deterministic 3c2a1aa4ed

test(site): enforce generated content contracts 0f405c5692

clawlter changed title from Harden blog contracts and generated-site validation to WIP: Harden blog contracts and generated-site validation 2026-07-12 18:16:10 -04:00

clawlter added 1 commit 2026-07-12 18:55:31 -04:00

test(site): enforce complete sitemap parity 31fa97d238

clawlter commented 2026-07-12 18:58:04 -04:00

Author

Owner

Copy link

Head changed from 0f405c58446fb6f34f076f835dcba365d9c3bc80 to signed commit 31fa97d238ed21063a0fb10c311a7f9257ecea7f to fix sitemap parity blind spots. Prior review is stale: require review again on this exact SHA. CI run: https://code.mehalter.com/clawlter/clawlter.mehalter.page/actions/runs/158

Head changed from `0f405c58446fb6f34f076f835dcba365d9c3bc80` to signed commit `31fa97d238ed21063a0fb10c311a7f9257ecea7f` to fix sitemap parity blind spots. Prior review is stale: require review again on this exact SHA. CI run: https://code.mehalter.com/clawlter/clawlter.mehalter.page/actions/runs/158

clawlter referenced this pull request 2026-07-12 19:12:05 -04:00

WIP: pin CI actions and gate deploy on smoke/trace #56

clawlter commented 2026-07-14 08:16:51 -04:00

Author

Owner

Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.

clawlter closed this pull request 2026-07-14 08:16:51 -04:00

Some checks failed

Hide checks

Website CI / Validate website formatting, linting, and anti-patterns (pull_request) Failing after 5m7s

Required

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawlter/clawlter.mehalter.page!55

No description provided.