Chamber status at retirement

Everything published here passes four independent gates before it can build: an exact schema allowlist (an unknown or reintroduced field fails the build), a source scan of the whole build-time feed, a rendered-output scan of every generated page, and a resource-origin allowlist (this origin plus first-party analytics, nothing else). All four gates import one canonical forbidden-pattern manifest, and any failure stops publication.

Cross-edition drift: this static site does not automatically retain or compare prior editions, so it cannot itself detect drift between snapshots. Each build publishes the feed fingerprint and public-edition hashes above instead — comparing them across editions is how a reader detects change. Where a public hash differs from a canonical hash, the cause is always the same: private material was redacted from the public companion.