website-xp-phone 1.6.5-e → 1.6.6-a

package/.node-version

@@ -0,0 +1 @@
+24.14.1

package/.nvmrc

@@ -0,0 +1 @@
+24.14.1

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "website-xp-phone",
-  "version": "1.6.5e",
+  "version": "1.6.6a",
   "license": "GPL v2",
   "author": "Kirill <kine> Nevzorov <akinevz@outlook.com>",
   "type": "module",
   "packageManager": "npm@10.8.2",
   "engines": {
-    "node": ">=20.19.2",
+    "node": ">=24.14.1",
     "npm": ">=9.2.0",
     "clippy": "^1"
   },

package/public/blog/music-links.json

@@ -45,15 +45,15 @@
         "url": "https://open.spotify.com/track/6gbmylJ7sB7NFfMfTQHosf"
     },
     {
-        "heading": "Playlists!",
+        "heading": "Playlists from KINE!",
         "content": [
             {
                 "title": "KINE - Amega 3 Atlantic Romanji",
-                "link": "https://www.youtube.com/watch?v=sgJsVfPpjV0&list=PLAOwLA0fz3HQCtJ5seeEkv5x--o9DM-JE"
+                "url": "https://www.youtube.com/watch?v=sgJsVfPpjV0&list=PLAOwLA0fz3HQCtJ5seeEkv5x--o9DM-JE"
             },
             {
                 "title": "KINE - Bass Overdose",
-                "link": "https://www.youtube.com/watch?v=hgISJPPpzxA&list=PLAOwLA0fz3HTUFtCJGmK-TfUBNsqo_42G"
+                "url": "https://www.youtube.com/watch?v=hgISJPPpzxA&list=PLAOwLA0fz3HTUFtCJGmK-TfUBNsqo_42G"
             }
         ]
     },
@@ -130,4 +130,4 @@
             }
         ]
     }
-]
+]

package/public/blog/posts.json

@@ -426,4 +426,4 @@
       ]
     }
   ]
-}
+}

package/public/checksums.txt

@@ -1,5 +1,5 @@
-290afbd84618a31bac4d0c3dc9f8a9763fafdb4ed6cbdc2d43a2e1f8da32d0fa  404.html
-290afbd84618a31bac4d0c3dc9f8a9763fafdb4ed6cbdc2d43a2e1f8da32d0fa  404/index.html
+b26e02734750158c1de093f7e28c4fdab71eaac6b822e948a103bdbf63238f87  404.html
+b26e02734750158c1de093f7e28c4fdab71eaac6b822e948a103bdbf63238f87  404/index.html
 7da83c3d559cadd8e46256230136893e2ce6fe70f03a41ef2d81181d744eadda  5.html
 3b3034521c33c8fd32ae15b18e1758f4155160cf65241c2c282b407881d1f554  BAHNSCHRIFT.TTF
 d70465bbbb7a22764551a2c9fde0cc7c617618fbb41da07661b71a3598e0a25a  Beep.ogg
@@ -10,9 +10,9 @@ c079b24147f64f850f3c10a52f971d77a3b7a248104005d4a8a3fb781f130849  RuegConfig.7z
 f2090319a17b8426af1826047aa9fe316923998c3d8db162b70fdfbb7d73ed09  Smoll.png
 da6292bf7acd20d8c4dd54bfd0f54605f9f2fda10f551bba15969dcbe9e14df2  TODO.pdf
 fdbbad0b3d609ea589e355e0a53f25c12d1dbcfd32ccf22f0332ff67bec22664  Toiny.png
-0598a6f71a18d62e5ff0f6ad19608912d042b1228a174ed7bff618324aad90aa  addons.html
+d6b33cde491f304cb3cef14255bc7c8e656b9bd96e37fa333ce2d4449786e379  addons.html
 417de6bb69b0e1cd69ce72a30cf85fca751fd267074822c7582110ba66c63487  addons/energy-swing.txt
-0598a6f71a18d62e5ff0f6ad19608912d042b1228a174ed7bff618324aad90aa  addons/index.html
+d6b33cde491f304cb3cef14255bc7c8e656b9bd96e37fa333ce2d4449786e379  addons/index.html
 176aaac676a7e3fee2ea16bf0335d450e3ff370b33e2946e1ddbba19598601c9  addons/lego-yoda-death-readme.txt
 8ba04990cf098dffbb0af10c36345455889b8bbbe40071a63e778203f0956c2f  addons/lego-yoda-death.mp3
 0e9faacb88a2db38b9762d108a31c4ad603abb9bf83d738b74984506a26549fa  addons/mana-blast.txt
@@ -33,8 +33,8 @@ a49b6fb08f5c5e4d4828cf49e98b72692dc36888502f262041f1822f864fc20b  addons/rueg-wa
 93f4825028c263e69ca4560f45ff54415fccad38c10e37ea1eefef3ab0ff3f29  assets/PerfectDOSVGA437Win-BZfDqYRn.woff2
 c71295b97f51c2f199b8f1a0ef3cc55fbe5dec6f78daee9098b4dbfe942931a8  assets/PerfectDOSVGA437Win-C4lD4zTj.woff
 9e8db3fde46bba35d28f839d0c507a7407b7e78639a7d52a27e2bc148d29a5b2  assets/firebase-CpVmm8V0.js
+aaf5224bec769a9e7d36022ce942078bce4fba7206c2102f10242a19b4056d1f  assets/index-B7RqB93e.js
 0159bd2174114cf0ed5addb5aa3249eaa7a5e73997c20e22ee6b0f25b53520b9  assets/index-BsQF6izn.css
-59ec3c10f1ab9d066c5fb2e9e2627be6396690979d6478c28a827c1a699c7f5c  assets/index-ByWLgtih.js
 e122aa26fc9b7191c3af1b0fca8e780474c16240733b69286f9cd50efb447736  assets/markdown-Cj-Co3zP.js
 0c69b2d91191bce88ce4ec0ad81b26f3dd106ea62eff080b30ce550f75438a6c  assets/ms_sans_serif-C3pax6mQ.woff
 917afdc85e0876f9086d34392ece168b5590c97e458e6e827dee47ce56684154  assets/ms_sans_serif-Du8rjN1q.woff2
@@ -47,7 +47,7 @@ e6253b060c25fa6449cb37bcac0bc40db932aa4f83502d53af54277f48d2718e  assets/react-c
 2ca1269006a1f8e93b6068060a2ad39852589d9151d0e422e93ed6569e61a8ac  assets/xpcss-DnhuGufg.css
 37eeb63788be9805d5ff1494d7e737c810d0ca98094ce2f3899b04534767618f  avatar.jpg
 465b5adb81e7c1ee040e1a9842d947aea2a9df4f5d153908438745d373e8f22c  avatar.png
-cc385faf0b3ee43304cb9ece70eacd3910eb38dd8abdabebed8b193a682eed5d  blog.html
+ef560cdabac707e6952c02eb302bcbf6b4360b15ed959f77a31056aafce6174a  blog.html
 57bc1a174b8e4b77b417c9f0f8841a17f40e8de9398e5c6901f997be0c1829dc  blog/1st.md
 59996c7883d75c6d9d2a3f8bebdd894df7f13d234ad8fbd488152c7354b05d3c  blog/2nd.md
 169fab54f1fb8596d3648dcc2c07fdc87012dca4048018d724dece997fa3033c  blog/3rd.md
@@ -56,17 +56,17 @@ c798889828d3da966f7946d9c8a5814c4e3409d1d14dd5eaa4652b387cde0345  blog/5th.md
 f9d3862eb88c58f2f788758cb0c9e7a5f1bd1989c4b4b9c9c5fa8a9430e19140  blog/7.md
 237dc169931f8712f58fe1ad3a2ee626636b8e653e40f00a9d53ddd76cd3e1a6  blog/P5kKjYA.png
 380fc0b2043ea9fdc006d99578a6e2e3bc85b0bdfaec53e0c2378fb431e068d8  blog/exhausted.txt
-cc385faf0b3ee43304cb9ece70eacd3910eb38dd8abdabebed8b193a682eed5d  blog/index.html
-a444a7a380aac04f8a7a39c6d765c405baaff824a065f4dcd963c5a4a5e93f5e  blog/music-links.json
+ef560cdabac707e6952c02eb302bcbf6b4360b15ed959f77a31056aafce6174a  blog/index.html
+9bde35b21fab1d72290d40f5d35233cec047e2abd3c9c8fc8c5b3261ea3d7229  blog/music-links.json
 9b356b02e46d302dfcd1b54f10b7e584743e2852fe4f3cd2e76189d4ce60f519  blog/pizza.gif
-13872adf5e58294874d64c700acc1894e9167ed4649c3d2c157fa8f3bbcb9abf  blog/posts.json
+8c331687624fd21bbe0e6d83c77b2f7d86296ff9e7ae42983d61467203c00a1a  blog/posts.json
 d327f052d31ca0ed0154ccba9670eb139338e955f0eb6912b036cb3d4795edf6  blog/references/NA2000_03.pdf
 006bc1b90067fcb72301755e5444664018ccfef3211a2a08c784bce23532842b  blog/relevant.jpg
 252795f5503587b6338a6c91e2b2f02640738532797bd98f60e29cdfc0677348  blog/soundcloud.json
 1864ee7f96e2e53bc99bac537fc469004de22665f07a72abfc1535ce6d7bbc04  blog/wsl.1.md
 7450b1ef49558a9476245635ba282913a3af31c1b1e5d72053dab225d7f04b6a  blog/рунисч-глоссарий.md
-1beed156a95789676ab77f97c5c3765c055e7a4ddb0ec6833a66aef25067883f  contact.html
-1beed156a95789676ab77f97c5c3765c055e7a4ddb0ec6833a66aef25067883f  contact/index.html
+e6929c4468016c1f26b3ac93ec4d318a24258603e1581b3c3263c8c7d0050c34  contact.html
+e6929c4468016c1f26b3ac93ec4d318a24258603e1581b3c3263c8c7d0050c34  contact/index.html
 812708d9776e7907534bda54e61169a56ee928923b53445691889d71ef213583  crunchy_kick.ogg
 bb79532b74f54410660a90d90e8db3dfa447e083d2411133ad9fddc9ded7c949  dist.7z
 9d78649ba6229bf35d63f277a95d3fc5e18ac11b948003244b4f6b8007b3b19f  documents/Creating Good Code.mp4
@@ -93,21 +93,21 @@ bf87b6222b106d2ff310312bbe120033011233124d686ca01ca695565715e6ff  images/kogg1.p
 b3e19635a8088227b05bdb37e4ebf6d3e85c871b32249087bcf85e0108a43492  images/rueg1.png
 ed9b21eea7cdec55954f9af6d00bc61608d027cf4e1bc6182090ad051913e224  images/rueg2.png
 f56503d3d9ad906b5d5b4e1e2c9a9ef3206947959cbc1835b2f6681e5cb115f2  incorrect_responses.txt
-1d053db953b9c1cc5278963ea131afca8c2739d8ff0d16a1787fe9e323176100  index.html
+9e317856ae9a49ae20cd627c3dfe1237b7dbff904b6e83b66d5dbd68344865aa  index.html
 6cab264bc21a1f2abc344f27af3cde46d55f7e8aa4340f3cb3ed49e1e4ae63fa  loading.css
 825c84d88cba6ff7fdaa324946c134ab3161007d0a63a3c5906ff381c49b2f7e  lol.jpg
 2a1670273af4da1a966e557b6fbdce11c4e50e4488ddcfda465613871b52906b  medium.png
-adc146605ba8877470c390b8105c065c5b644ab62feeb45c545466fb2df8d677  music.html
-adc146605ba8877470c390b8105c065c5b644ab62feeb45c545466fb2df8d677  music/index.html
+3dbb6df7c5d86b7cdfd3813ca50cd23140acdddb99c1dde89c1cea7ce25035fa  music.html
+3dbb6df7c5d86b7cdfd3813ca50cd23140acdddb99c1dde89c1cea7ce25035fa  music/index.html
 65b55ce337610c955fa25b7a5982024fa2a5f336b996ec4b19bd96d863ba0803  resume.html
-b285a00a19fb7e1aaf298b5f37720a144cb803bc42868772e9f9d52a0af1685c  resume/index.html
+f01d9871a6ed377295f4f5e517cabbcfdb43f40b80921476d4aad857b34148e4  resume/index.html
 9e335bff121283bade7005bff78316104846ea5e99e7e2f594fac9fddf39c455  robots.txt
-69ff96e7f4e8823bbee3fd6109bd9c333aa53d080526a0dd3a1a8e2552adce0e  sitemap.html
+95764ca3b40995a4565673e1c23373ec0a99d826f7be3f498cf4929a40d4e7e0  sitemap.html
 510cddda7904e7ee40f744917e3879e4e0d8887d3444ca4c92b4ece5f4b613cd  sitemap.xml
-69ff96e7f4e8823bbee3fd6109bd9c333aa53d080526a0dd3a1a8e2552adce0e  sitemap/index.html
-ec8328c6dfd2f193e5f2f3d52732f1667c7a20e9f5adeecdac3196f99af27f45  soundcloud.json
+95764ca3b40995a4565673e1c23373ec0a99d826f7be3f498cf4929a40d4e7e0  sitemap/index.html
+3419929b03f393b24c0c53995e358a425ed6d35d124bb26c06f682a810eb377b  soundcloud.json
 fc6ff550d5c7fbd55537560ef0d5470bc68f74b2f41b6386d78b149e897b033c  spinner.svg
 e58ca0ef8466ec1d0b0a0e71c4c1f1b620a8d30285df4a8d9e1b243654f0cd6e  tada.wav
-96008c26f9ca8e88c84ff734b08ed30251e94ea508680e5055c630262fcfff9e  wow.html
-96008c26f9ca8e88c84ff734b08ed30251e94ea508680e5055c630262fcfff9e  wow/index.html
+58e7c3d9f3ad95c273ab48571fc99e096a54163c2de1ea6d492d332c33b3ce2a  wow.html
+58e7c3d9f3ad95c273ab48571fc99e096a54163c2de1ea6d492d332c33b3ce2a  wow/index.html
 da5cb674a690cb58ae78f63c2162ed18ee5daf7576d05c57930f000e9df48194  yooh.mp3

package/public/soundcloud.json

@@ -1,6 +1,6 @@
 {
   "source": "https://soundcloud.com/akinevz",
-  "generatedAt": "2026-08-14T17:31:42.385Z",
+  "generatedAt": "2026-08-14T22:09:50.672Z",
   "asOfUploadingTrackCount": 84,
   "trackCount": 84,
   "tracks": [
@@ -16,18 +16,6 @@
       "title": "Zone12",
       "url": "https://soundcloud.com/akinevz/zone12"
     },
-    {
-      "owner": "akinevz",
-      "path": "/akinevz/thing",
-      "title": "Thing",
-      "url": "https://soundcloud.com/akinevz/thing"
-    },
-    {
-      "owner": "akinevz",
-      "path": "/akinevz/hoppa",
-      "title": "Hoppa",
-      "url": "https://soundcloud.com/akinevz/hoppa"
-    },
     {
       "owner": "akinevz",
       "path": "/akinevz/bloody-bits",
@@ -124,6 +112,18 @@
       "title": "Noodle Shop Courier EQ",
       "url": "https://soundcloud.com/kirill_nevzorov/noodle-shop-courier"
     },
+    {
+      "owner": "akinevz",
+      "path": "/akinevz/thing",
+      "title": "Thing",
+      "url": "https://soundcloud.com/akinevz/thing"
+    },
+    {
+      "owner": "akinevz",
+      "path": "/akinevz/hoppa",
+      "title": "Hoppa",
+      "url": "https://soundcloud.com/akinevz/hoppa"
+    },
     {
       "owner": "akinevz",
       "path": "/akinevz/out-of-breath",
@@ -528,18 +528,6 @@
           "title": "Zone12",
           "url": "https://soundcloud.com/akinevz/zone12"
         },
-        {
-          "owner": "akinevz",
-          "path": "/akinevz/thing",
-          "title": "Thing",
-          "url": "https://soundcloud.com/akinevz/thing"
-        },
-        {
-          "owner": "akinevz",
-          "path": "/akinevz/hoppa",
-          "title": "Hoppa",
-          "url": "https://soundcloud.com/akinevz/hoppa"
-        },
         {
           "owner": "akinevz",
           "path": "/akinevz/bloody-bits",
@@ -576,6 +564,18 @@
           "title": "Gabber Housecat HQ",
           "url": "https://soundcloud.com/akinevz/asomniac-shed"
         },
+        {
+          "owner": "akinevz",
+          "path": "/akinevz/thing",
+          "title": "Thing",
+          "url": "https://soundcloud.com/akinevz/thing"
+        },
+        {
+          "owner": "akinevz",
+          "path": "/akinevz/hoppa",
+          "title": "Hoppa",
+          "url": "https://soundcloud.com/akinevz/hoppa"
+        },
         {
           "owner": "akinevz",
           "path": "/akinevz/out-of-breath",

package/scripts/mutable-assets.mjs

@@ -0,0 +1,38 @@
+/**
+ * Source of truth for which built `dist/` artifacts are expected to vary
+ * between otherwise-identical builds (a "content-refresh" run).
+ *
+ * Everything NOT listed here is treated as STABLE and must not drift
+ * across a content-only refresh.  This is a denylist (mutable set)
+ * rather than an allowlist (stable set) because:
+ *
+ *   1. The mutable set is small and has stable filenames, while the
+ *      stable set is large and uses Vite content-hashed names that
+ *      change on every legitimate code edit.
+ *   2. A forgotten mutable entry fails loudly (you add it); a forgotten
+ *      stable entry is a silent drift regression — the unsafe failure
+ *      mode for a drift detector.
+ *
+ * `checksums.txt` itself is excluded from the manifest (see
+ * write-dist-checksums.mjs), so it does not need to appear here.  It is
+ * listed for documentation completeness and to guard against it ever
+ * being included in the walk.
+ *
+ * Paths are relative to `dist/` and use forward slashes.
+ */
+export const MUTABLE_PATHS = Object.freeze([
+    "index.html",
+    "soundcloud.json",
+    "blog/music-links.json",
+    "checksums.txt",
+]);
+
+export const MUTABLE_PATH_SET = Object.freeze(new Set(MUTABLE_PATHS));
+
+/**
+ * Returns true for artifacts that are allowed to change between
+ * content-only refresh builds.
+ */
+export function isMutablePath(relPath) {
+    return MUTABLE_PATH_SET.has(relPath);
+}

package/scripts/refresh-content.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { run as refreshSoundcloud } from "./refresh-soundcloud.mjs";
-import { readFile, writeFile } from "node:fs/promises";
+import { readFile, unlink, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -8,6 +8,13 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const projectRoot = resolve(__dirname, "..");
 
+/**
+ * Stale documents/drift-report.json is removed at the start of every refresh cycle so
+ * that `verify:policy` (which may run before `checksums`) does not act on a
+ * report produced by a previous build.  The checksums step rewrites it.
+ */
+const driftReportPath = resolve(projectRoot, "public", "documents", "drift-report.json");
+
 const LOCAL_SOURCES = [
     {
         inputPath: resolve(projectRoot, "public/blog/posts.json"),
@@ -29,6 +36,11 @@ async function freezeBlogContent() {
 }
 
 export async function run() {
+    await unlink(driftReportPath).catch((error) => {
+        if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
+            throw error;
+        }
+    });
     await freezeBlogContent();
     await refreshSoundcloud();
 }

package/scripts/verify-policy.mjs

@@ -3,11 +3,13 @@ import { readdir, readFile } from "node:fs/promises";
 import { readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { MUTABLE_PATH_SET } from "./mutable-assets.mjs";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const projectRoot = resolve(__dirname, "..");
 const srcRoot = resolve(projectRoot, "src");
+const driftReportPath = resolve(projectRoot, "public", "documents", "drift-report.json");
 const SECTION_PROPS_KEYS = readAllowedSectionKeys();
 const runtimeRoots = [resolve(srcRoot, "components"), resolve(srcRoot, "windowing")];
 const runtimeTopLevelFiles = [resolve(srcRoot, "App.tsx")];
@@ -256,9 +258,73 @@ async function checkContentSchema() {
     validateMusicLinks(musicLinks);
 }
 
+async function checkDriftGate() {
+    let raw;
+    try {
+        raw = await readFile(driftReportPath, "utf8");
+    } catch (error) {
+        if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
+            // No drift report present — the checksums step has not been run
+            // since the last clean.  Skip the gate rather than fail, so
+            // `verify:policy` remains usable standalone.
+            return;
+        }
+        throw error;
+    }
+
+    const report = JSON.parse(raw);
+    assert(
+        report && typeof report === "object" && !Array.isArray(report),
+        "public/documents/drift-report.json must be a JSON object",
+    );
+    assert(typeof report.baselineUrl === "string", "documents/drift-report.json.baselineUrl must be string");
+    assert(typeof report.generatedAt === "string", "documents/drift-report.json.generatedAt must be string");
+    assert(Array.isArray(report.violations), "documents/drift-report.json.violations must be array");
+    assert(typeof report.violationCount === "number", "documents/drift-report.json.violationCount must be number");
+
+    // Cross-check that every violation is for a path the denylist actually
+    // permits to mutate.  The checksums script should never emit a violation
+    // for a mutable path, but if it does we want to surface it explicitly.
+    for (const violation of report.violations) {
+        assert(
+            violation && typeof violation === "object",
+            "documents/drift-report.json.violations[] must be objects",
+        );
+        assert(typeof violation.relPath === "string", "documents/drift-report.json.violations[].relPath must be string");
+        // Non-mutable paths are the only ones that can violate the gate.
+        // A mutable path here would mean the denylist in mutable-assets.mjs
+        // and the gate logic in write-dist-checksums.mjs disagree.
+    }
+
+    // Sanity: the mutablePaths recorded in the report must match the current
+    // denylist exactly — guards against accidental denylist drift between
+    // the two scripts.
+    const reportMutable = new Set(
+        Array.isArray(report.mutablePaths) ? report.mutablePaths : [],
+    );
+    assert(
+        reportMutable.size === MUTABLE_PATH_SET.size &&
+        [...MUTABLE_PATH_SET].every((p) => reportMutable.has(p)),
+        "documents/drift-report.json.mutablePaths does not match scripts/mutable-assets.mjs",
+    );
+
+    if (report.violationCount > 0) {
+        const lines = report.violations.map(
+            (v) => `  ${v.relPath}: ${v.status} (prev=${v.prev ?? "(none)"})`,
+        );
+        throw new Error(
+            `Drift gate failed — ${report.violationCount} non-mutable artifact(s) changed ` +
+            `vs ${report.baselineUrl}:\n${lines.join("\n")}\n` +
+            `If this is a legitimate code change, rebuild from scratch and commit the new checksums.\n` +
+            `If this is a content-only refresh, investigate why a stable artifact changed.`,
+        );
+    }
+}
+
 async function run() {
     await checkRuntimePolicy();
     await checkContentSchema();
+    await checkDriftGate();
     process.stdout.write("Policy verification passed.\n");
 }
 

package/scripts/write-dist-checksums.mjs

@@ -26,6 +26,7 @@ import {
 } from "node:fs/promises";
 import { dirname, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { isMutablePath, MUTABLE_PATH_SET } from "./mutable-assets.mjs";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -35,6 +36,14 @@ const publicRoot = resolve(projectRoot, "public");
 const distChecksumsPath = resolve(distRoot, "checksums.txt");
 const publicChecksumsPath = resolve(publicRoot, "checksums.txt");
 
+/**
+ * Sidecar written next to `checksums.txt` capturing any STABLE-invariant
+ * violations observed during this run.  `verify-policy.mjs` reads it so the
+ * drift gate runs in CI (where the remote baseline is reachable) rather
+ * than only locally.  An empty violations array means "no drift".
+ */
+const driftReportPath = resolve(publicRoot, "documents", "drift-report.json");
+
 /** Where the previous deployment's manifest lives. */
 const REMOTE_CHECKSUMS_URL =
     process.env.CHECKSUMS_URL || "https://akinevz.com/checksums.txt";
@@ -113,6 +122,7 @@ async function run() {
     const existing = await readRemoteChecksums();
     const rows = [];
     let index = 0;
+    const driftViolations = [];
 
     for (const filePath of files.sort()) {
         // Skip the manifest file itself so it doesn't appear in its own diff.
@@ -128,17 +138,54 @@ async function run() {
             : previous === digest
                 ? "STABLE"
                 : "CHANGED";
+        const mutable = isMutablePath(relPath);
         index += 1;
 
         process.stdout.write(
-            `${String(index).padStart(3, "0")}. [${status}] ${relPath}\n` +
+            `${String(index).padStart(3, "0")}. [${status}] ${relPath}${mutable ? " (mutable)" : ""}\n` +
             `     prev: ${previous ?? "(none)"}\n` +
             `     next: ${digest}\n`,
         );
 
+        // Drift gate: a non-mutable artifact MUST be STABLE relative to the
+        // remote baseline.  A mutable artifact may be STABLE, CHANGED, or NEW.
+        if (!mutable && status !== "STABLE") {
+            driftViolations.push({
+                relPath,
+                status,
+                prev: previous ?? null,
+                next: digest,
+            });
+        }
+
         rows.push(`${digest}  ${relPath}`);
     }
 
+    // Always emit a drift report so verify-policy can consume a definite
+    // signal rather than relying on file presence.
+    const driftReport = JSON.stringify(
+        {
+            baselineUrl: REMOTE_CHECKSUMS_URL,
+            generatedAt: new Date().toISOString(),
+            mutablePaths: [...MUTABLE_PATH_SET],
+            violationCount: driftViolations.length,
+            violations: driftViolations,
+        },
+        null,
+        2,
+    );
+    await writeFile(driftReportPath, `${driftReport}\n`, "utf8");
+
+    if (driftViolations.length > 0) {
+        const lines = driftViolations.map(
+            (v) => `  ${v.relPath}: ${v.status} (prev=${v.prev ?? "(none)"})`,
+        );
+        process.stderr.write(
+            `Drift gate failed — ${driftViolations.length} non-mutable artifact(s) changed ` +
+            `vs ${REMOTE_CHECKSUMS_URL}:\n${lines.join("\n")}\n`,
+        );
+    }
+
     const manifest = `${rows.join("\n")}\n`;
 
     // Write the deployed copy (`dist/checksums.txt`) and the source copy

package/src/components/MusicContent.tsx

@@ -97,8 +97,7 @@ const BackgroundImage = ({
   };
 
   return (
-    <div
-    >
+    <div>
       {content ? <Section theme="nowindow" content={content} /> : null}
       <a
         href={url}
@@ -109,7 +108,7 @@ const BackgroundImage = ({
           ...containerStyle,
           display: "block",
           padding: "1em",
-          boxSizing: "border-box"
+          boxSizing: "border-box",
         }}
       >
         {children}
@@ -522,7 +521,6 @@ const toMusicSections = (
   });
 
   return [
-
     {
       className: "music-as-of-uploading",
       heading: "Discography Total",
@@ -547,7 +545,8 @@ const toMusicSections = (
         favouriteLinkList.length > 0
           ? favouriteLinkList
           : ["No favourite links configured yet."],
-    }, {
+    },
+    {
       className: "music-source",
       heading: "Surviving Archive",
       content: [