rdmsm4x - changelog - bounded critical CSS catalog - codex - FEAT2026092718 - xsite - 20260927 0651 EDT

Started 2026-09-27 06:34:16 EDT. Implementation/verification on rdmsm4x only, delegated worker codex/xsitecrit; shepherd xsite/xsite0926 retains claim and integration authority. Final finish time, commit and receipts: HANDBACK.md.

Added fix.critical-css to the shared catalog and ApplyPipeline. It uses a bounded static home/index critical superset, original full-sheet preload/onload and noscript fallback, preserved cascade order and rebased CSS URLs. Defer notes point at the critical CSS fix. Source sheet hashes bind approval; index/dependencies are checked before backup and before writing. SSH/cPanel back up and write only index.html, verify provider and served structure, restore regressions/partial writes and append audit evidence.

Files: Sources/XsiteKit/Connections/{CriticalCSS,ApplyPipeline,FixCatalog,HTMLFixes}.swift; Sources/xsite-app/ContentView.swift (catalog site context only); Tests/XsiteKitTests/CriticalCSSTests.swift; ISSUES.md; STATUS.md; SESSION-STATE.md; docs/{ROADMAP,CRITICAL-CSS}.md. Handoff PLAN.md was written before code; proof, changelog and HANDBACK are retained outside the repository.

Validation: swift test --disable-sandbox; XSITE_SWIFTPM_DISABLE_SANDBOX=1 XSITE_SIGN_IDENTITY=- ./build.sh. Tests cover 19 added cases, source drift negative control (rc1 with three failed assertions), CSS comment regression (rc1 before fix), served fixture checks, SSH/cPanel exact rollback, CSP/unsafe/bounds refusals. Final counts/build receipts are in proof/ and HANDBACK.md. No real site/provider write, credential value read, GUI prompt, main merge or release occurred. Ad-hoc build is disposable validation output, not stable signing/notarization.

Backup and undo: source changes are committed on feat/critical-css-20260927; no main merge. Revert the feature commit to undo source integration. Fixture writes and .bak files remain in isolated temporary directories. Future real-site application uses the normal audit rollback; original stylesheet files are never changed. Build output remains ignored in this isolated worktree.

Limitations: static root/index HTML only, same-origin simple .css links, four sheets, 128 KiB/source, 16 KiB inline aggregate. Unsupported syntax/CSP/dynamic mappings fail closed. Other pages and third-party CSS untouched. Visual parity/LCP/CLS and live acceptance remain unverified and belong to Sites. Existing phase1.3 host-session acceptance remains pending.

Notes publication and canonical archive copy: PENDING. launchctl managername returned Background; no-prompt overnight directive applies. The canonical ~/dev/LLM/Claude/changelogs archive is outside this session's writable roots. This authorized handoff copy is durable; shepherd can file it into llmlog and the canonical archive from its authorized session. No approval requested or permission bypass attempted.