Release verified product-audit improvements

[trac3r00]

Goal

Deploy the verified SimpleTool product-audit implementation through the repository release policy.

Release stack

• 01: test(safari): propagate smoke harness launch failures (b15e277)
• 02: refactor(routes): retire token counter and pipe (5aa335c)
• 03: refactor(content): remove generic tool and home padding (11badf2)
• 04: feat(i18n): complete catalog parity and runtime localization (dd31356)
• 05: fix(caffeinate): harden native wake-lock lifecycle (bc7e486)
• 06: fix(ssh): emit interoperable Ed25519 OpenSSH keys (2091ca6)
• 07: test(generators): restore diagram and SVG workflows (02161b8)
• 08: fix(json): preserve numeric lexemes when formatting (6e568d4)
• 09: fix(content): make guidance and policy factual (fe81d8b)
• 10: fix(a11y): improve keyboard and mobile task access (1876c44)
• 11: fix(routes): canonicalize aliases and constrain compatibility (e5c9957)

Verification already completed locally

Every commit passed its own exact-tree build and unit suite. Final tree:801unit tests,293Playwright E2E tests(with retriesdisabled),48tools atdesktop/mobile(96workflows),40contentpagechecks,13routechecks,10localenavigations,Safari48toolsmoke,andnativewake-lockchecks inChromium/Firefox/WebKit.

Release constraints

Merge one logical PR at a time after latest-SHA Build/Unit/E2E CI, a complete review and an approving review. Wait at least15minutes between deploy-affecting merges; verify each production deploy before continuing. Do not bypass branch protection.

Known pre-existing issue

Exploratory exact-color conversion #336699 -> #326699 predates this stack; the color runtime is byte-identical to the base. It remains documented and is not fixed by this release. No claim of AdSense account verification or approval is made.

Publication status

The eleven exact release heads have all passed GitHub CI (Build, Unit Tests, and E2E). Production has not changed: source remains 10a9e4893efc822fb4cbd5489898491e47b9b9bd; last successful deployment run is https://github.com/trac3r00/simpletool-app/actions/runs/34316132545 and Worker rollback version is 6a26d85b-ba0d-41ee-aa12-2134daaa55a7.

• 01: test(safari): propagate smoke harness launch failures #970 — green exact-head CI
• 02: refactor(routes): retire token counter and pipe #971 — green exact-head CI
• 03: refactor(content): remove generic tool and home padding #972 — green exact-head CI
• 04: feat(i18n): complete catalog parity and runtime localization #973 — green exact-head CI
• 05: fix(caffeinate): harden native wake-lock lifecycle #974 — green exact-head CI
• 06: fix(ssh): emit interoperable Ed25519 OpenSSH keys #975 — green exact-head CI
• 07: test(generators): restore diagram and SVG workflows #976 — green exact-head CI
• 08: fix(json): preserve numeric lexemes when formatting #977 — green exact-head CI
• 09: fix(content): make guidance and policy factual #978 — green exact-head CI
• 10: fix(a11y): improve keyboard and mobile task access #979 — green exact-head CI
• 11: fix(routes): canonicalize aliases and constrain compatibility #980 — green exact-head CI

PR #970 is blocked on an approving review from a collaborator other than the author. Subsequent PRs are stacked and must be retargeted to main only after their dependencies merge. No admin override or direct deployment has occurred. The local release gate requested an explicit independent diff-review artifact; that review is in progress. Automated review comments remain available for assessment and are not assumed resolved.

[trac3r00]

Release hold: independent review findings

All eleven exact release heads passed CI, but the independent code review requests changes. Root reproduced the three blocking findings against candidate e5c99575be2bdad4286bce4c300fea6cf3f77b17:

• fix(caffeinate): harden native wake-lock lifecycle #974: after a native wake-lock recovery request rejects, the page honestly shows the failure but offers Deactivate with no scheduled recovery; retry requires two clicks.
• fix(a11y): improve keyboard and mobile task access #979: modifier-K moves focus from shortcut help into global search while shortcut help remains open; Escape does not restore its focus containment. Reproduced in WebKit with a native help-button click and a bubbling KeyboardEvent.
• fix(content): make guidance and policy factual #978: getLegalSections("security", "en") replaces the authored security-reporting guidance with generic response copy.

No fixes, new commits, main merges, or deployments have been made. The specified candidate remains unchanged. Revising it requires the user's decision followed by new exact-SHA tests and review; passing CI alone does not waive these findings. The required GitHub approving review was requested from bob01933 on #970.

Local evidence: /tmp/simpletool-deploy-20260912/code-review.md and /tmp/simpletool-deploy-20260912/blocker-reproduction/.