rdmsm4x changelog — Amagansett Guide photo-feed release

Deployed and live-verified the exact approved Guide editorial photo-feed checkpoint while preserving the existing private Guide boundary, the expressly public read-only AK boundary, and every unrelated service/data surface.

Scope

• Host: rdmsm4x
• Canonical project root: /Users/richh/dev/sites/amagansett-app
• Isolated release worktree: /Users/richh/dev/_handoff/codex-out/amagansett-guide-photo-feed-20260827
• Branch: codex/amagansett-guide-photo-feed-20260827
• Deployed implementation commit: 6a77e8999690ae4dc24a508aeb92d39acfe2add1
• Documentation-only successor commit: ab8d0bbc0583bd6ffa0975163f5398708a9ad26d
• No other host, checkout, worktree, database, DNS record, Access policy, Zaraz tool, provider, credential, or hostname was changed.

Files and durable records changed

• /Users/richh/dev/_handoff/codex-out/amagansett-guide-photo-feed-20260827/ISSUES.md
• /Users/richh/dev/_handoff/codex-out/amagansett-guide-photo-feed-20260827/SESSION-STATE.md
• /Users/richh/dev/_handoff/codex-out/amagansett-guide-photo-feed-20260827/docs/GUIDE-PHOTO-FEED-DESIGN-CHECKPOINT-20260827.md
• /Users/richh/dev/_handoff/codex-out/amagansett-guide-photo-feed-20260827/docs/GUIDE-PHOTO-FEED-LAUNCH-RECEIPT-20260828.md
• /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md
• /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-amagansett-guide-photo-feed-20260827.json
• /Users/richh/dev/LLM/Claude/changelogs/rdmsm4x-changelog-20260828-0104-amagansett-guide-photo-feed-release.md

Release

The Guide edge was deployed from the exact approved source checkpoint. Authenticated live acceptance then showed that production directory HTML is returned through the Guide edge's existing PLATFORM_API service binding to amagansett-api, while the first deployment had updated only the Guide-owned assets. A source comparison proved that the API Worker difference from its prior deployed source was limited to the three-line Guide row renderer/class and truthful accessible-label change in worker/src/platform-fragments.ts. The exact renderer was therefore deployed as the narrowly coupled second half of the approved checkpoint.

• Guide edge active version: bd977346-37b3-4950-bec0-7ea79901d41b
• Guide edge rollback version: 34219429-4e5d-4012-9742-dd5f2d03f410
• API/share active version: 6325c595-36a3-4f65-b3d8-d5c9aeb43b5b
• API/share rollback version: 40298fad-b50b-413c-b60d-05eba11ef90c
• AK remained: 73fa71a6-b9a0-469c-9f5c-01e2add85deb
• Forst remained: ca93086e-effe-4a52-9cb5-dfefa09b92e6
• Preview remained: 046ea2b6-c6e2-4f1d-b453-aff9a1d4e1d1

Representative commands run from the isolated release worktree:

• CI=1 npm run verify
• zsh tests/integration/guide-wrangler-local-contract.zsh
• npx wrangler deploy --dry-run --strict --config deploy/guide.wrangler.jsonc
• npx wrangler deploy --dry-run --strict --config wrangler.jsonc
• npx wrangler deploy --config deploy/guide.wrangler.jsonc --message "Guide approved editorial crop checkpoint 6a77e89"
• npx wrangler deploy --config wrangler.jsonc --message "Guide editorial row fragment only from 6a77e89"
• Wrangler deployment status/history queries for Guide, API/share, AK, Forst, and Preview
• Authenticated in-app-browser DOM, computed-style, interaction, URL/title, and console checks
• Cookie-free HTTP probes for Guide, Forst, Preview, API, AK, and an invalid Share capability
• Remote D1 migration-list check

Verification evidence

• 26 Vitest files and 182 tests passed.
• Strict TypeScript, all four production builds, platform Worker dry run, Preview real-Wrangler contract, Guide real-Wrangler contract, and both strict Worker dry runs passed.
• 30 Playwright desktop/mobile/accessibility scenarios passed, including the 390-by-844 Guide contract.
• Authenticated live Guide rendered 816 venue rows, 816 approved editorial treatments, three farm-card treatments, truthful pending-photography labels, the approved hashed asset, no console warning/error, and no desktop horizontal overflow.
• Restaurant filtering synchronized total, rows, and markers from 816 to 438 and restored them to 816.
• Cookie-free Guide, Forst, Preview, and API probes redirected to Cloudflare Access.
• AK remained HTTP 200 as expressly public read-only; the $4.0M-$4.5M regression returned 37 cards.
• An invalid Share capability remained HTTP 404.
• Remote D1 reported no pending migration.
• The approved source and built asset both had SHA-256 62444c44bb25368c579ebf2e7beed818a4ae74c3968d5c99b620646a1a223be5.
• In-app-browser screenshot capture failed by both available methods, so no screenshot is claimed; acceptance rests on live DOM/style/interaction/console, Worker status, HTTP probes, and the local Playwright gate.

Safety and content boundary

The release uses deterministic crops from the already-approved Guide concept asset as a disclosed editorial fallback. Accessible labels state that venue photography is pending. No third-party venue image was scraped, copied, cached, hotlinked, or represented as a venue photo. eat.amagansett.app was not created or redirected. Actual venue photography remains blocked on explicit provenance and remote-display permission evidence.

Undo

Roll back both coupled Workers together: restore API/share to 40298fad-b50b-413c-b60d-05eba11ef90c, restore Guide edge to 34219429-4e5d-4012-9742-dd5f2d03f410, then repeat authenticated Guide rendering, anonymous Access-denial, AK public-read, invalid-share, and price-filter regression probes. Do not alter D1, DNS, Access, Pages, queues, schedules, or secrets for this rollback.

Outstanding owner actions

None for this approved checkpoint. A future actual venue-photo enrichment lane requires explicit source, attribution, observation/reachability, and remote-display permission evidence before implementation or release.