Operational hardening

The admin route is intentionally non-indexed but still present for manual QA and deployment readiness checks.

Security headers

7/7

Strict transport, CSP, anti-clickjacking, and permissions restrictions.

Offline coverage

9 routes

No browser-generated offline error page should appear.

Audit readiness

Pass

Source contracts and browser checks are scripted.

SignalsHardened

Admin note queueReplay-safe