[ ] Each entry in KNOWN from test/scaffold-webspec.test.ts is fixed in src/apps/scaffold.ts (not by loosening src/release/webspec.ts) and taken off the list. The pull names each fix with its specification.website section.
[ ] Nothing is added to the scaffold's generated test suite that boots the root server.ts or asserts on its pages: a deploy runs that suite, and test/preview-spec.test.ts replaces server.ts.
[ ] bun test test/scaffold-webspec.test.ts test/preview-spec.test.ts and the scaffold's own tests pass.
Files: src/apps/scaffold.ts, test/scaffold-webspec.test.ts.
Risk: the scaffold is 6000 lines; change only what a finding names. If a gap can only close at the edge (HSTS), keep it listed with that reason.
The fix half of #3011.
Done looks like:
KNOWNfromtest/scaffold-webspec.test.tsis fixed insrc/apps/scaffold.ts(not by looseningsrc/release/webspec.ts) and taken off the list. The pull names each fix with its specification.website section.server.tsor asserts on its pages: a deploy runs that suite, andtest/preview-spec.test.tsreplacesserver.ts.bun test test/scaffold-webspec.test.ts test/preview-spec.test.tsand the scaffold's own tests pass.Files: src/apps/scaffold.ts, test/scaffold-webspec.test.ts. Risk: the scaffold is 6000 lines; change only what a finding names. If a gap can only close at the edge (HSTS), keep it listed with that reason.