Backlog item §F · F1 — mirrored from docs/roadmap/improvements-backlog.md.
What the audit found
— the site is live at
https://headless-web-pi.vercel.app (set as the repo homepage) via Vercel's
GitHub integration, but nothing in the tree records that: no vercel.json,
no deploy docs, no preview-URL comment on PRs, and the temporary
*-pi.vercel.app hostname suggests no custom domain. Make the deployment
reproducible and reviewable — check in the project config, document the
hosting in AGENTS.md, and decide on a domain. Keep the existing headers/CSP
in next.config.ts; consider a nonce so unsafe-inline can be dropped.
Milestone: Phase 5 — Website and docs
Before changing behaviour here, read docs/roadmap/what-is-excellent.md — the contracts listed there must survive the fix — and AGENTS.md for build, test, and review conventions.
Definition of done: the change ships with the test named above (or an equivalent), CI is green, and the corresponding line in the backlog file is checked off in the same PR.
What the audit found
— the site is live at
https://headless-web-pi.vercel.app(set as the repo homepage) via Vercel'sGitHub integration, but nothing in the tree records that: no
vercel.json,no deploy docs, no preview-URL comment on PRs, and the temporary
*-pi.vercel.apphostname suggests no custom domain. Make the deploymentreproducible and reviewable — check in the project config, document the
hosting in
AGENTS.md, and decide on a domain. Keep the existing headers/CSPin
next.config.ts; consider a nonce sounsafe-inlinecan be dropped.Milestone: Phase 5 — Website and docs
Before changing behaviour here, read
docs/roadmap/what-is-excellent.md— the contracts listed there must survive the fix — andAGENTS.mdfor build, test, and review conventions.Definition of done: the change ships with the test named above (or an equivalent), CI is green, and the corresponding line in the backlog file is checked off in the same PR.