Deployment Checklist

This checklist converts the infrastructure-risk report into a concrete post-deploy gate. Do not treat the site as ready until these checks pass from an external network.

1. DNS and registration

• Registrar shows the domain as active and locked against unauthorized transfer.
• Authoritative nameservers are correct.
• A and optional AAAA records resolve globally.
• www either redirects cleanly or resolves intentionally.
• CAA records match the certificate authority in use.
• DNSSEC is either configured correctly or intentionally deferred.

2. Transport and headers

• https://Runtime.MiRust.com/ returns HTTP 200 or the intended plain PHP front page.
• https://Runtime.MiRust.com/ redirects to HTTPS.
• The certificate chain is valid.
• No mixed content is loaded.
• Security headers are present on front-end responses.

3. plain PHP content

• The homepage is no longer “Hello world!” or “Sample Page.”
• The seeded pages exist and have clean permalinks.
• Top navigation groups fit on desktop and wrap on smaller screens.
• The footer contains Contact Mike Kappel.
• The contact page works without requiring external profile lookup.

4. Machine-readable routes

curl https://Runtime.MiRust.com/llms.txt
curl https://Runtime.MiRust.com/llms-full.txt
curl https://Runtime.MiRust.com/sitemap.xml
curl https://Runtime.MiRust.com/robots.txt
curl https://Runtime.MiRust.com/.uai/index.uai
curl https://Runtime.MiRust.com/.uai/docs-routing.uai
curl https://Runtime.MiRust.com/docs/index.md
curl https://Runtime.MiRust.com/docs/web-research/website-review-and-improvement-plan.md
curl https://Runtime.MiRust.com/.well-known/security.txt

5. Markdown negotiation

curl -H "Accept: text/markdown" https://Runtime.MiRust.com/project/
curl -H "Accept: text/markdown" https://Runtime.MiRust.com/site-infrastructure/
curl https://Runtime.MiRust.com/name-scope.md

Expected result: Markdown output with Content-Type: text/markdown; charset=utf-8 and Vary: Accept.

6. Dependency policy

• No Bootstrap, Tailwind, Popper, jQuery front-end dependency, CDN CSS, CDN JavaScript, page builder, or framework hydration path is present.
• Core content renders server-side as HTML.
• Theme JavaScript is only small behavior around native dialog, navigation details, filtering, and copy buttons.

7. Claim boundary

• Homepage and metadata say TinyRustLM is current.
• Broad GGUF import remains roadmap language.
• Trained assistant quality remains unclaimed until eval evidence exists.
• Every major technical claim links to a page, /docs file, or .uai route.