araharah-executor 2489cca8ec fix(07-06): the /help doc pointer is a documented static-text class — privacy audit green again ...

- source-side runtime-hosts gate gains DOC_POINTER_STATIC_TEXT_HOSTS (the
  MapLibre-attribution precedent): the published repo origin may appear
  ONLY as a bare URL literal in bot copy (D-08/D-09), never fetched
- class is NARROW and pinned by SA6: a fetch( target naming the same
  host is still a violation
- Rule 1 (found by SA6's RED): the fetch( handler's declaration
  heuristic misclassified any quoted absolute URL as a TS declaration —
  quoted strings are targets; they now reach the host check
- docs/PRIVACY-AUDIT.md: adjudication documented + dated re-run addendum
- deferred-items.md #1 closed: npm run privacy-audit exits 0 again
  (PRIVACY AUDIT CLEAN — 5 gate(s) passed, 0 violations; suite 13/13)

2026-10-25 05:18:47 +08:00

..

lib

fix(07-06): the /help doc pointer is a documented static-text class — privacy audit green again

2026-10-25 05:18:47 +08:00

test

test(07-06): RED — SA6 doc-pointer static-text class vector (URL literals only; fetch targets to the same host still fail)

2026-10-25 05:15:57 +08:00

budget-audit.mjs

feat(07-04): the budget-audit CLI + the root npm script — orchestration, free-tier comparison table, 0/1/2 exit codes

2026-10-25 05:05:04 +08:00

privacy-audit.mjs

feat(07-03): the privacy-audit CLI + root npm script — orchestration, evidence report, 0/1/2 exit codes

2026-10-25 04:39:07 +08:00