Release article / project log
v0.3.2Shipped
Production Verification & Release Blog Patch
This patch adds repeatable production checks, an explicitly confirmed optional success canary, clearer report outcomes and expiry evidence, and linkable bilingual release articles. It does not change the Level 2 shipping status.
What changed
- ✓Added a read-only production route/header verifier plus explicitly confirmed SSRF, unauthorized-report, and Level 2 fail-closed checks.
- ✓Added an optional paid success canary that reads credentials only from private environment variables and never prints or serializes them.
- ✓Added evidence-derived report outcome language and an explicit report-expiry timestamp.
- ✓Added build-time generated bilingual release articles with safe runtime fallback, canonical alternates, language-preserving navigation, and sitemap entries.
Verification evidence
- ●40 automated tests plus TypeScript, ESLint, Next.js, and OpenNext builds
- ●Read-only production route, version, and security-header verification
- ●Production SSRF rejection, three-sample 401 report, secret exclusion, and Level 2 missing-reference gate
- ●English, Chinese, desktop, mobile, release-article, and sitemap rendering
Next target
Run the optional private 200-response canary with a valid provider credential, then add Turnstile and platform rate limiting in v0.3.3.
Release boundary
This article records shipped work and explicit limitations. Experimental results are not promoted by a patch release.