website-xp-phone 1.6.5-d → 1.6.6-a

package/.node-version

@@ -0,0 +1 @@
+24.14.1

package/.nvmrc

@@ -0,0 +1 @@
+24.14.1

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "website-xp-phone",
-  "version": "1.6.5d",
+  "version": "1.6.6a",
   "license": "GPL v2",
   "author": "Kirill <kine> Nevzorov <akinevz@outlook.com>",
   "type": "module",
   "packageManager": "npm@10.8.2",
   "engines": {
-    "node": ">=20.19.2",
+    "node": ">=24.14.1",
     "npm": ">=9.2.0",
     "clippy": "^1"
   },

package/public/blog/music-links.json

@@ -19,6 +19,19 @@
         "title": "Báilalo, Gozalo - Ariis (Magnum Opus)",
         "url": "https://www.youtube.com/watch?v=qX8VZsPEhD4"
     },
+    {
+        "heading": "Another unique one, \"LOVELY BASTARDS - ZWE1HVNDXR\"",
+        "content": [
+            {
+                "title": "LOVELY BASTARDS - ZWE1HVNDXR ( - Youtube Edition)",
+                "url": "https://www.youtube.com/watch?v=ZdNd4r_TSIU"
+            },
+            {
+                "title": "LOVELY BASTARDS - ZWE1HVNDXR ( - Spotify Edition)",
+                "url": "https://open.spotify.com/track/0EqczV3o6fwksegAavIHpX"
+            }
+        ]
+    },
     {
         "title": "Aphex Twin - Acrid Avid Jam Shed",
         "url": "https://open.spotify.com/track/6RjEg1YpdNJlXrGOy4KeVs?si=e8bfa567acf644b2"
@@ -32,12 +45,17 @@
         "url": "https://open.spotify.com/track/6gbmylJ7sB7NFfMfTQHosf"
     },
     {
-        "title": "KINE - Amega 3 Atlantic Romanji",
-        "url": "https://www.youtube.com/playlist?list=PLAOwLA0fz3HQCtJ5seeEkv5x--o9DM-JE"
-    },
-    {
-        "title": "KINE - Bass Overdose (dubstep collection 2010s)",
-        "url": "https://www.youtube.com/playlist?list=PLAOwLA0fz3HTUFtCJGmK-TfUBNsqo_42G"
+        "heading": "Playlists from KINE!",
+        "content": [
+            {
+                "title": "KINE - Amega 3 Atlantic Romanji",
+                "url": "https://www.youtube.com/watch?v=sgJsVfPpjV0&list=PLAOwLA0fz3HQCtJ5seeEkv5x--o9DM-JE"
+            },
+            {
+                "title": "KINE - Bass Overdose",
+                "url": "https://www.youtube.com/watch?v=hgISJPPpzxA&list=PLAOwLA0fz3HTUFtCJGmK-TfUBNsqo_42G"
+            }
+        ]
     },
     {
         "title": "KINE - Live Fast Smell Farts (speedcore collection 2010s)",
@@ -57,6 +75,58 @@
             {
                 "title": "KINE - Great Day Playlist",
                 "url": "https://open.spotify.com/playlist/6S8QgDFXhUlyB0ihMeCO6F?si=ec08cb17a174457c"
+            },
+            "below are some of the first tekk i've listened to",
+            {
+                "title": "MoshTekk - Blackout",
+                "url": "https://www.youtube.com/watch?v=pIpWlei8N4I"
+            },
+            {
+                "title": "Protokseed - Danse tribale",
+                "url": "https://www.youtube.com/watch?v=H3ZQxFXpUmk"
+            }
+        ]
+    },
+    {
+        "heading": "Contained: Old School headSpace",
+        "content": [
+            "Heyoka is present on [Spotify](https://open.spotify.com/artist/5UcrZUfiDjspKP28E3Leia)",
+            {
+                "title": "Heyoka - Mandelbass",
+                "url": "https://open.spotify.com/album/3rWkIKIYCVkYtCxPQzMns5"
+            },
+            {
+                "title": "Heyoka - Intergalactic Carnival",
+                "url": "https://open.spotify.com/album/1FiWZ5ihdZOQDDL9qJ4Gyh"
+            },
+            {
+                "title": "Heyoka - Cosmic Boogie",
+                "url": "https://open.spotify.com/album/1co0Ed51qZszCuE1z3aWTA"
+            },
+            {
+                "title": "Heyoka - Marklar",
+                "url": "https://open.spotify.com/album/6jfP7kol1LZYf3Nv3CepaV"
+            },
+            {
+                "heading": "More...",
+                "content": [
+                    {
+                        "heading": "Heyoka - Bass Spalls",
+                        "link": "https://www.youtube.com/watch?v=3sSF5zx5c0g"
+                    },
+                    {
+                        "heading": "Heyoka - Lazy Bass",
+                        "link": "https://www.youtube.com/watch?v=eO_74YtQGgY"
+                    },
+                    {
+                        "heading": "Heyoka - Purgatory Dub",
+                        "link": "https://www.youtube.com/watch?v=534pLF5HJwE"
+                    },
+                    {
+                        "heading": "Heyoka - Squishy Dub",
+                        "link": "https://www.youtube.com/watch?v=YFjGatVuDJ8"
+                    }
+                ]
             }
         ]
     }

package/public/blog/posts.json

@@ -2,6 +2,12 @@
   "theme": "open",
   "heading": "kine's blog posts",
   "content": [
+    {
+      "heading": "booger boogie intermission",
+      "content": "idle your mouse with me",
+      "theme": "experimental",
+      "link": "/images/booger_Boogie%20Long.gif"
+    },
     "blog operating normally! :D",
     {
       "heading": "Rueg Config published! (#world of warcraft, #addons)",
@@ -60,24 +66,6 @@
         }
       ]
     },
-    {
-      "heading": "many many renames later... (#soundcloud, #dynamic, #funnypost, #intermission)",
-      "link": "/images/aaaa.png",
-      "content": [
-        {
-          "content": [
-            "![lol](/lol.jpg)",
-            "[1](https://soundcloud.com/akinevz) + [2](https://soundcloud.com/kirill_nevzorov)"
-          ]
-        }
-      ]
-    },
-    {
-      "heading": "booger boogie intermission",
-      "content": "idle your mouse with me",
-      "theme": "experimental",
-      "link": "/images/booger_Boogie%20Long.gif"
-    },
     {
       "heading": "seventh post (#Lie Theory - NA2000)",
       "content": [

package/public/checksums.txt

@@ -1,5 +1,5 @@
-fd4b689a5ee0555afc094af8b65aea896e190e9dd5ef3a9bb4f226032f95246e  404.html
-fd4b689a5ee0555afc094af8b65aea896e190e9dd5ef3a9bb4f226032f95246e  404/index.html
+b26e02734750158c1de093f7e28c4fdab71eaac6b822e948a103bdbf63238f87  404.html
+b26e02734750158c1de093f7e28c4fdab71eaac6b822e948a103bdbf63238f87  404/index.html
 7da83c3d559cadd8e46256230136893e2ce6fe70f03a41ef2d81181d744eadda  5.html
 3b3034521c33c8fd32ae15b18e1758f4155160cf65241c2c282b407881d1f554  BAHNSCHRIFT.TTF
 d70465bbbb7a22764551a2c9fde0cc7c617618fbb41da07661b71a3598e0a25a  Beep.ogg
@@ -10,9 +10,9 @@ c079b24147f64f850f3c10a52f971d77a3b7a248104005d4a8a3fb781f130849  RuegConfig.7z
 f2090319a17b8426af1826047aa9fe316923998c3d8db162b70fdfbb7d73ed09  Smoll.png
 da6292bf7acd20d8c4dd54bfd0f54605f9f2fda10f551bba15969dcbe9e14df2  TODO.pdf
 fdbbad0b3d609ea589e355e0a53f25c12d1dbcfd32ccf22f0332ff67bec22664  Toiny.png
-d862a250c43c79a33aff7ab521d006c504bb859ad7ac94863f3e10e737ec2898  addons.html
+d6b33cde491f304cb3cef14255bc7c8e656b9bd96e37fa333ce2d4449786e379  addons.html
 417de6bb69b0e1cd69ce72a30cf85fca751fd267074822c7582110ba66c63487  addons/energy-swing.txt
-d862a250c43c79a33aff7ab521d006c504bb859ad7ac94863f3e10e737ec2898  addons/index.html
+d6b33cde491f304cb3cef14255bc7c8e656b9bd96e37fa333ce2d4449786e379  addons/index.html
 176aaac676a7e3fee2ea16bf0335d450e3ff370b33e2946e1ddbba19598601c9  addons/lego-yoda-death-readme.txt
 8ba04990cf098dffbb0af10c36345455889b8bbbe40071a63e778203f0956c2f  addons/lego-yoda-death.mp3
 0e9faacb88a2db38b9762d108a31c4ad603abb9bf83d738b74984506a26549fa  addons/mana-blast.txt
@@ -33,8 +33,8 @@ a49b6fb08f5c5e4d4828cf49e98b72692dc36888502f262041f1822f864fc20b  addons/rueg-wa
 93f4825028c263e69ca4560f45ff54415fccad38c10e37ea1eefef3ab0ff3f29  assets/PerfectDOSVGA437Win-BZfDqYRn.woff2
 c71295b97f51c2f199b8f1a0ef3cc55fbe5dec6f78daee9098b4dbfe942931a8  assets/PerfectDOSVGA437Win-C4lD4zTj.woff
 9e8db3fde46bba35d28f839d0c507a7407b7e78639a7d52a27e2bc148d29a5b2  assets/firebase-CpVmm8V0.js
+aaf5224bec769a9e7d36022ce942078bce4fba7206c2102f10242a19b4056d1f  assets/index-B7RqB93e.js
 0159bd2174114cf0ed5addb5aa3249eaa7a5e73997c20e22ee6b0f25b53520b9  assets/index-BsQF6izn.css
-80cff0924e9bdd187c235303bed90e724ea64bfbe40820fb682ad1a54cc0a60d  assets/index-CeqecKjB.js
 e122aa26fc9b7191c3af1b0fca8e780474c16240733b69286f9cd50efb447736  assets/markdown-Cj-Co3zP.js
 0c69b2d91191bce88ce4ec0ad81b26f3dd106ea62eff080b30ce550f75438a6c  assets/ms_sans_serif-C3pax6mQ.woff
 917afdc85e0876f9086d34392ece168b5590c97e458e6e827dee47ce56684154  assets/ms_sans_serif-Du8rjN1q.woff2
@@ -47,7 +47,7 @@ e6253b060c25fa6449cb37bcac0bc40db932aa4f83502d53af54277f48d2718e  assets/react-c
 2ca1269006a1f8e93b6068060a2ad39852589d9151d0e422e93ed6569e61a8ac  assets/xpcss-DnhuGufg.css
 37eeb63788be9805d5ff1494d7e737c810d0ca98094ce2f3899b04534767618f  avatar.jpg
 465b5adb81e7c1ee040e1a9842d947aea2a9df4f5d153908438745d373e8f22c  avatar.png
-bac914220d6cdc2c49b20028e9e729706055654c7ef57e635c8c755ba743a8c6  blog.html
+ef560cdabac707e6952c02eb302bcbf6b4360b15ed959f77a31056aafce6174a  blog.html
 57bc1a174b8e4b77b417c9f0f8841a17f40e8de9398e5c6901f997be0c1829dc  blog/1st.md
 59996c7883d75c6d9d2a3f8bebdd894df7f13d234ad8fbd488152c7354b05d3c  blog/2nd.md
 169fab54f1fb8596d3648dcc2c07fdc87012dca4048018d724dece997fa3033c  blog/3rd.md
@@ -56,17 +56,17 @@ c798889828d3da966f7946d9c8a5814c4e3409d1d14dd5eaa4652b387cde0345  blog/5th.md
 f9d3862eb88c58f2f788758cb0c9e7a5f1bd1989c4b4b9c9c5fa8a9430e19140  blog/7.md
 237dc169931f8712f58fe1ad3a2ee626636b8e653e40f00a9d53ddd76cd3e1a6  blog/P5kKjYA.png
 380fc0b2043ea9fdc006d99578a6e2e3bc85b0bdfaec53e0c2378fb431e068d8  blog/exhausted.txt
-bac914220d6cdc2c49b20028e9e729706055654c7ef57e635c8c755ba743a8c6  blog/index.html
-a42261f50a5279906fb5dabdbff2ed7660260f6914d6482beb4385b2f4ca8797  blog/music-links.json
+ef560cdabac707e6952c02eb302bcbf6b4360b15ed959f77a31056aafce6174a  blog/index.html
+9bde35b21fab1d72290d40f5d35233cec047e2abd3c9c8fc8c5b3261ea3d7229  blog/music-links.json
 9b356b02e46d302dfcd1b54f10b7e584743e2852fe4f3cd2e76189d4ce60f519  blog/pizza.gif
-13872adf5e58294874d64c700acc1894e9167ed4649c3d2c157fa8f3bbcb9abf  blog/posts.json
+8c331687624fd21bbe0e6d83c77b2f7d86296ff9e7ae42983d61467203c00a1a  blog/posts.json
 d327f052d31ca0ed0154ccba9670eb139338e955f0eb6912b036cb3d4795edf6  blog/references/NA2000_03.pdf
 006bc1b90067fcb72301755e5444664018ccfef3211a2a08c784bce23532842b  blog/relevant.jpg
 252795f5503587b6338a6c91e2b2f02640738532797bd98f60e29cdfc0677348  blog/soundcloud.json
 1864ee7f96e2e53bc99bac537fc469004de22665f07a72abfc1535ce6d7bbc04  blog/wsl.1.md
 7450b1ef49558a9476245635ba282913a3af31c1b1e5d72053dab225d7f04b6a  blog/рунисч-глоссарий.md
-66dbcada63106daf435700072f1da1e7f8e6a6e446cd993b5558b9230176392c  contact.html
-66dbcada63106daf435700072f1da1e7f8e6a6e446cd993b5558b9230176392c  contact/index.html
+e6929c4468016c1f26b3ac93ec4d318a24258603e1581b3c3263c8c7d0050c34  contact.html
+e6929c4468016c1f26b3ac93ec4d318a24258603e1581b3c3263c8c7d0050c34  contact/index.html
 812708d9776e7907534bda54e61169a56ee928923b53445691889d71ef213583  crunchy_kick.ogg
 bb79532b74f54410660a90d90e8db3dfa447e083d2411133ad9fddc9ded7c949  dist.7z
 9d78649ba6229bf35d63f277a95d3fc5e18ac11b948003244b4f6b8007b3b19f  documents/Creating Good Code.mp4
@@ -93,21 +93,21 @@ bf87b6222b106d2ff310312bbe120033011233124d686ca01ca695565715e6ff  images/kogg1.p
 b3e19635a8088227b05bdb37e4ebf6d3e85c871b32249087bcf85e0108a43492  images/rueg1.png
 ed9b21eea7cdec55954f9af6d00bc61608d027cf4e1bc6182090ad051913e224  images/rueg2.png
 f56503d3d9ad906b5d5b4e1e2c9a9ef3206947959cbc1835b2f6681e5cb115f2  incorrect_responses.txt
-648964e2719308fbdaea3f279336ae69176f780faaeaa905e59c297857ab610f  index.html
+9e317856ae9a49ae20cd627c3dfe1237b7dbff904b6e83b66d5dbd68344865aa  index.html
 6cab264bc21a1f2abc344f27af3cde46d55f7e8aa4340f3cb3ed49e1e4ae63fa  loading.css
 825c84d88cba6ff7fdaa324946c134ab3161007d0a63a3c5906ff381c49b2f7e  lol.jpg
 2a1670273af4da1a966e557b6fbdce11c4e50e4488ddcfda465613871b52906b  medium.png
-883787f6614ea8f1b25591fcc1930b4739da542f63b59d844506e1d0ab7fef26  music.html
-883787f6614ea8f1b25591fcc1930b4739da542f63b59d844506e1d0ab7fef26  music/index.html
+3dbb6df7c5d86b7cdfd3813ca50cd23140acdddb99c1dde89c1cea7ce25035fa  music.html
+3dbb6df7c5d86b7cdfd3813ca50cd23140acdddb99c1dde89c1cea7ce25035fa  music/index.html
 65b55ce337610c955fa25b7a5982024fa2a5f336b996ec4b19bd96d863ba0803  resume.html
-db4327fe401583ceb225359dabb854108458c88911b826a424484a2933172103  resume/index.html
+f01d9871a6ed377295f4f5e517cabbcfdb43f40b80921476d4aad857b34148e4  resume/index.html
 9e335bff121283bade7005bff78316104846ea5e99e7e2f594fac9fddf39c455  robots.txt
-cf0a27edeb76ce5c48f32b9d2854c45054c9be7b5a6ecf71295287260484d39e  sitemap.html
-41be0ebb06ad87c88a364d6e5442760632e2334ca40890449ec1d3c47ecafca3  sitemap.xml
-cf0a27edeb76ce5c48f32b9d2854c45054c9be7b5a6ecf71295287260484d39e  sitemap/index.html
-93df98aa9200ab8cda31336e8f52d782829b416e56627dd2b7eede4dedb0d23c  soundcloud.json
+95764ca3b40995a4565673e1c23373ec0a99d826f7be3f498cf4929a40d4e7e0  sitemap.html
+510cddda7904e7ee40f744917e3879e4e0d8887d3444ca4c92b4ece5f4b613cd  sitemap.xml
+95764ca3b40995a4565673e1c23373ec0a99d826f7be3f498cf4929a40d4e7e0  sitemap/index.html
+3419929b03f393b24c0c53995e358a425ed6d35d124bb26c06f682a810eb377b  soundcloud.json
 fc6ff550d5c7fbd55537560ef0d5470bc68f74b2f41b6386d78b149e897b033c  spinner.svg
 e58ca0ef8466ec1d0b0a0e71c4c1f1b620a8d30285df4a8d9e1b243654f0cd6e  tada.wav
-95ebc787a6cc735e790e6d39f9ce9de5d182b4f97c5bebfaa01f6f9837967663  wow.html
-95ebc787a6cc735e790e6d39f9ce9de5d182b4f97c5bebfaa01f6f9837967663  wow/index.html
+58e7c3d9f3ad95c273ab48571fc99e096a54163c2de1ea6d492d332c33b3ce2a  wow.html
+58e7c3d9f3ad95c273ab48571fc99e096a54163c2de1ea6d492d332c33b3ce2a  wow/index.html
 da5cb674a690cb58ae78f63c2162ed18ee5daf7576d05c57930f000e9df48194  yooh.mp3

package/public/soundcloud.json

@@ -1,6 +1,6 @@
 {
   "source": "https://soundcloud.com/akinevz",
-  "generatedAt": "2026-08-12T12:44:51.292Z",
+  "generatedAt": "2026-08-14T22:09:50.672Z",
   "asOfUploadingTrackCount": 84,
   "trackCount": 84,
   "tracks": [
@@ -16,18 +16,6 @@
       "title": "Zone12",
       "url": "https://soundcloud.com/akinevz/zone12"
     },
-    {
-      "owner": "akinevz",
-      "path": "/akinevz/thing",
-      "title": "Thing",
-      "url": "https://soundcloud.com/akinevz/thing"
-    },
-    {
-      "owner": "akinevz",
-      "path": "/akinevz/hoppa",
-      "title": "Hoppa",
-      "url": "https://soundcloud.com/akinevz/hoppa"
-    },
     {
       "owner": "akinevz",
       "path": "/akinevz/bloody-bits",
@@ -124,6 +112,18 @@
       "title": "Noodle Shop Courier EQ",
       "url": "https://soundcloud.com/kirill_nevzorov/noodle-shop-courier"
     },
+    {
+      "owner": "akinevz",
+      "path": "/akinevz/thing",
+      "title": "Thing",
+      "url": "https://soundcloud.com/akinevz/thing"
+    },
+    {
+      "owner": "akinevz",
+      "path": "/akinevz/hoppa",
+      "title": "Hoppa",
+      "url": "https://soundcloud.com/akinevz/hoppa"
+    },
     {
       "owner": "akinevz",
       "path": "/akinevz/out-of-breath",
@@ -528,18 +528,6 @@
           "title": "Zone12",
           "url": "https://soundcloud.com/akinevz/zone12"
         },
-        {
-          "owner": "akinevz",
-          "path": "/akinevz/thing",
-          "title": "Thing",
-          "url": "https://soundcloud.com/akinevz/thing"
-        },
-        {
-          "owner": "akinevz",
-          "path": "/akinevz/hoppa",
-          "title": "Hoppa",
-          "url": "https://soundcloud.com/akinevz/hoppa"
-        },
         {
           "owner": "akinevz",
           "path": "/akinevz/bloody-bits",
@@ -576,6 +564,18 @@
           "title": "Gabber Housecat HQ",
           "url": "https://soundcloud.com/akinevz/asomniac-shed"
         },
+        {
+          "owner": "akinevz",
+          "path": "/akinevz/thing",
+          "title": "Thing",
+          "url": "https://soundcloud.com/akinevz/thing"
+        },
+        {
+          "owner": "akinevz",
+          "path": "/akinevz/hoppa",
+          "title": "Hoppa",
+          "url": "https://soundcloud.com/akinevz/hoppa"
+        },
         {
           "owner": "akinevz",
           "path": "/akinevz/out-of-breath",

package/scripts/mutable-assets.mjs

@@ -0,0 +1,38 @@
+/**
+ * Source of truth for which built `dist/` artifacts are expected to vary
+ * between otherwise-identical builds (a "content-refresh" run).
+ *
+ * Everything NOT listed here is treated as STABLE and must not drift
+ * across a content-only refresh.  This is a denylist (mutable set)
+ * rather than an allowlist (stable set) because:
+ *
+ *   1. The mutable set is small and has stable filenames, while the
+ *      stable set is large and uses Vite content-hashed names that
+ *      change on every legitimate code edit.
+ *   2. A forgotten mutable entry fails loudly (you add it); a forgotten
+ *      stable entry is a silent drift regression — the unsafe failure
+ *      mode for a drift detector.
+ *
+ * `checksums.txt` itself is excluded from the manifest (see
+ * write-dist-checksums.mjs), so it does not need to appear here.  It is
+ * listed for documentation completeness and to guard against it ever
+ * being included in the walk.
+ *
+ * Paths are relative to `dist/` and use forward slashes.
+ */
+export const MUTABLE_PATHS = Object.freeze([
+    "index.html",
+    "soundcloud.json",
+    "blog/music-links.json",
+    "checksums.txt",
+]);
+
+export const MUTABLE_PATH_SET = Object.freeze(new Set(MUTABLE_PATHS));
+
+/**
+ * Returns true for artifacts that are allowed to change between
+ * content-only refresh builds.
+ */
+export function isMutablePath(relPath) {
+    return MUTABLE_PATH_SET.has(relPath);
+}

package/scripts/refresh-content.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { run as refreshSoundcloud } from "./refresh-soundcloud.mjs";
-import { readFile, writeFile } from "node:fs/promises";
+import { readFile, unlink, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -8,6 +8,13 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const projectRoot = resolve(__dirname, "..");
 
+/**
+ * Stale documents/drift-report.json is removed at the start of every refresh cycle so
+ * that `verify:policy` (which may run before `checksums`) does not act on a
+ * report produced by a previous build.  The checksums step rewrites it.
+ */
+const driftReportPath = resolve(projectRoot, "public", "documents", "drift-report.json");
+
 const LOCAL_SOURCES = [
     {
         inputPath: resolve(projectRoot, "public/blog/posts.json"),
@@ -29,6 +36,11 @@ async function freezeBlogContent() {
 }
 
 export async function run() {
+    await unlink(driftReportPath).catch((error) => {
+        if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
+            throw error;
+        }
+    });
     await freezeBlogContent();
     await refreshSoundcloud();
 }

package/scripts/verify-policy.mjs

@@ -3,11 +3,13 @@ import { readdir, readFile } from "node:fs/promises";
 import { readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { MUTABLE_PATH_SET } from "./mutable-assets.mjs";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const projectRoot = resolve(__dirname, "..");
 const srcRoot = resolve(projectRoot, "src");
+const driftReportPath = resolve(projectRoot, "public", "documents", "drift-report.json");
 const SECTION_PROPS_KEYS = readAllowedSectionKeys();
 const runtimeRoots = [resolve(srcRoot, "components"), resolve(srcRoot, "windowing")];
 const runtimeTopLevelFiles = [resolve(srcRoot, "App.tsx")];
@@ -256,9 +258,73 @@ async function checkContentSchema() {
     validateMusicLinks(musicLinks);
 }
 
+async function checkDriftGate() {
+    let raw;
+    try {
+        raw = await readFile(driftReportPath, "utf8");
+    } catch (error) {
+        if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
+            // No drift report present — the checksums step has not been run
+            // since the last clean.  Skip the gate rather than fail, so
+            // `verify:policy` remains usable standalone.
+            return;
+        }
+        throw error;
+    }
+
+    const report = JSON.parse(raw);
+    assert(
+        report && typeof report === "object" && !Array.isArray(report),
+        "public/documents/drift-report.json must be a JSON object",
+    );
+    assert(typeof report.baselineUrl === "string", "documents/drift-report.json.baselineUrl must be string");
+    assert(typeof report.generatedAt === "string", "documents/drift-report.json.generatedAt must be string");
+    assert(Array.isArray(report.violations), "documents/drift-report.json.violations must be array");
+    assert(typeof report.violationCount === "number", "documents/drift-report.json.violationCount must be number");
+
+    // Cross-check that every violation is for a path the denylist actually
+    // permits to mutate.  The checksums script should never emit a violation
+    // for a mutable path, but if it does we want to surface it explicitly.
+    for (const violation of report.violations) {
+        assert(
+            violation && typeof violation === "object",
+            "documents/drift-report.json.violations[] must be objects",
+        );
+        assert(typeof violation.relPath === "string", "documents/drift-report.json.violations[].relPath must be string");
+        // Non-mutable paths are the only ones that can violate the gate.
+        // A mutable path here would mean the denylist in mutable-assets.mjs
+        // and the gate logic in write-dist-checksums.mjs disagree.
+    }
+
+    // Sanity: the mutablePaths recorded in the report must match the current
+    // denylist exactly — guards against accidental denylist drift between
+    // the two scripts.
+    const reportMutable = new Set(
+        Array.isArray(report.mutablePaths) ? report.mutablePaths : [],
+    );
+    assert(
+        reportMutable.size === MUTABLE_PATH_SET.size &&
+        [...MUTABLE_PATH_SET].every((p) => reportMutable.has(p)),
+        "documents/drift-report.json.mutablePaths does not match scripts/mutable-assets.mjs",
+    );
+
+    if (report.violationCount > 0) {
+        const lines = report.violations.map(
+            (v) => `  ${v.relPath}: ${v.status} (prev=${v.prev ?? "(none)"})`,
+        );
+        throw new Error(
+            `Drift gate failed — ${report.violationCount} non-mutable artifact(s) changed ` +
+            `vs ${report.baselineUrl}:\n${lines.join("\n")}\n` +
+            `If this is a legitimate code change, rebuild from scratch and commit the new checksums.\n` +
+            `If this is a content-only refresh, investigate why a stable artifact changed.`,
+        );
+    }
+}
+
 async function run() {
     await checkRuntimePolicy();
     await checkContentSchema();
+    await checkDriftGate();
     process.stdout.write("Policy verification passed.\n");
 }
 

package/scripts/write-dist-checksums.mjs

@@ -26,6 +26,7 @@ import {
 } from "node:fs/promises";
 import { dirname, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { isMutablePath, MUTABLE_PATH_SET } from "./mutable-assets.mjs";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -35,6 +36,14 @@ const publicRoot = resolve(projectRoot, "public");
 const distChecksumsPath = resolve(distRoot, "checksums.txt");
 const publicChecksumsPath = resolve(publicRoot, "checksums.txt");
 
+/**
+ * Sidecar written next to `checksums.txt` capturing any STABLE-invariant
+ * violations observed during this run.  `verify-policy.mjs` reads it so the
+ * drift gate runs in CI (where the remote baseline is reachable) rather
+ * than only locally.  An empty violations array means "no drift".
+ */
+const driftReportPath = resolve(publicRoot, "documents", "drift-report.json");
+
 /** Where the previous deployment's manifest lives. */
 const REMOTE_CHECKSUMS_URL =
     process.env.CHECKSUMS_URL || "https://akinevz.com/checksums.txt";
@@ -113,6 +122,7 @@ async function run() {
     const existing = await readRemoteChecksums();
     const rows = [];
     let index = 0;
+    const driftViolations = [];
 
     for (const filePath of files.sort()) {
         // Skip the manifest file itself so it doesn't appear in its own diff.
@@ -128,17 +138,54 @@ async function run() {
             : previous === digest
                 ? "STABLE"
                 : "CHANGED";
+        const mutable = isMutablePath(relPath);
         index += 1;
 
         process.stdout.write(
-            `${String(index).padStart(3, "0")}. [${status}] ${relPath}\n` +
+            `${String(index).padStart(3, "0")}. [${status}] ${relPath}${mutable ? " (mutable)" : ""}\n` +
             `     prev: ${previous ?? "(none)"}\n` +
             `     next: ${digest}\n`,
         );
 
+        // Drift gate: a non-mutable artifact MUST be STABLE relative to the
+        // remote baseline.  A mutable artifact may be STABLE, CHANGED, or NEW.
+        if (!mutable && status !== "STABLE") {
+            driftViolations.push({
+                relPath,
+                status,
+                prev: previous ?? null,
+                next: digest,
+            });
+        }
+
         rows.push(`${digest}  ${relPath}`);
     }
 
+    // Always emit a drift report so verify-policy can consume a definite
+    // signal rather than relying on file presence.
+    const driftReport = JSON.stringify(
+        {
+            baselineUrl: REMOTE_CHECKSUMS_URL,
+            generatedAt: new Date().toISOString(),
+            mutablePaths: [...MUTABLE_PATH_SET],
+            violationCount: driftViolations.length,
+            violations: driftViolations,
+        },
+        null,
+        2,
+    );
+    await writeFile(driftReportPath, `${driftReport}\n`, "utf8");
+
+    if (driftViolations.length > 0) {
+        const lines = driftViolations.map(
+            (v) => `  ${v.relPath}: ${v.status} (prev=${v.prev ?? "(none)"})`,
+        );
+        process.stderr.write(
+            `Drift gate failed — ${driftViolations.length} non-mutable artifact(s) changed ` +
+            `vs ${REMOTE_CHECKSUMS_URL}:\n${lines.join("\n")}\n`,
+        );
+    }
+
     const manifest = `${rows.join("\n")}\n`;
 
     // Write the deployed copy (`dist/checksums.txt`) and the source copy

package/sections.json

@@ -59,7 +59,7 @@
             "need to travel to new exotic places"
           ]
         },
-        "programming:",
+        "career:",
         {
           "theme": "experimental",
           "content": [