docs(evidence): close out retired-host Agent Desk message review item against current main and live (#100)

docs/evidence/retired-hosts-appraisal-truth-closeout-2026-08-12.md

@@ -0,0 +1,87 @@
+# Retired-host Agent Desk message replaced by the Website Appraisal truth — closeout receipt
+
+Date: 2026-08-12
+Scope: the review item "[unreviewed-by-grok] Replace the retired-host Agent Desk
+message with the current Website Appraisal truth — both historical subdomains
+still tell visitors the retired self-serve product is current" (review
+2026-08-10, risk: amber, parity-risk). At scout time the observed
+`app.tinystudio.io` / `api.tinystudio.io` retirement bodies both said
+"TinyStudio.io now runs the self-serve Agent Desk from the main domain.", while
+the live apex, `/agent-desk`, `offer.md`, and `llms.txt` all identified The
+Website Appraisal as current and the Agent Desk as retired.
+
+The runtime fix for this item landed via PR #100 (`5ab84ea`, "fix(worker):
+point the retired app/api hosts at The Website Appraisal, not the Agent Desk"),
+merged to main on 2026-08-11 with two regression tests. This receipt verifies
+the item's acceptance criteria against the current origin/main head and the
+live retirement hosts. It is source plus behavior evidence; it does not claim
+anything about ranking, traffic, or search results.
+
+## What was measured
+
+The item's acceptance criteria (derived from the backlog entry): both
+historical-subdomain retirement bodies must tell visitors the current offer
+truth — they name The Website Appraisal (the free leak audit of high-ticket
+service homepages) and never point at the retired self-serve Agent Desk as the
+current product — and the fix must hold under the test suite on the current
+head.
+
+## Source checks on the current head (origin/main `ad9cee3`)
+
+1. `src/worker.js` `retiredAppResponse` (line 1249) and `retiredApiResponse`
+   (line 1285) carry the Website Appraisal truth and zero "Agent Desk"
+   mentions:
+   - app: `The old TinyStudio app has been retired. TinyStudio.io now runs The
+     Website Appraisal — the free leak audit of high-ticket service homepages,
+     reviewed by a person — and the human-reviewed desk that closes what the
+     audit finds.`
+   - api: `The old TinyStudio API has been retired. TinyStudio.io now runs The
+     Website Appraisal — the free leak audit of high-ticket service homepages —
+     and the human-reviewed desk that closes what the audit finds.`
+2. The stale literal "runs the self-serve Agent Desk from the main domain"
+   appears nowhere in the repository source; the only match is the historical
+   deploy receipt that records the pre-fix observation.
+3. `npm run check` passes ("TinyStudio.io checks passed.").
+4. `npm test` passes on this head: 92 tests, 0 failures, exit code 0. The two
+   regression tests PR #100 added pass — "retired app host frames the current
+   offer as The Website Appraisal, not the Agent Desk" and "retired API host
+   frames the current offer as The Website Appraisal, not the Agent Desk"
+   (worker suite tests 54 and 55) — asserting each 410 response names the
+   current offer and never points at the retired Agent Desk.
+
+## Live checks (2026-08-12)
+
+- `GET https://app.tinystudio.io/` → **HTTP 410**; body carries exactly one
+  "The Website Appraisal" and zero "Agent Desk" occurrences.
+- `GET https://api.tinystudio.io/` → **HTTP 410**; body carries exactly one
+  "The Website Appraisal" and zero "Agent Desk" occurrences.
+
+Both live bodies match the source strings on origin/main; the deployed worker
+carries the fix (PR #100 also covered by the ship-verify receipt
+`docs/evidence/retired-app-api-hosts-deploy-2026-08-11.md`).
+
+## Exact verification method (reproduce)
+
+1. `grep -n "Agent Desk" src/worker.js` — matches only the internal "engine
+   behind the free brief" comment and the system prompt, never the retirement
+   responses.
+2. `npm run check` and `npm test` on origin/main.
+3. `curl -s -w "%{http_code}" https://app.tinystudio.io/` and
+   `curl -s https://api.tinystudio.io/`; assert 410, one "The Website
+   Appraisal", zero "Agent Desk".
+
+## Limitation
+
+The regression tests merged in PR #100 are what prevent the stale Agent Desk
+framing from silently returning in the source; the live retirement responses
+are generated by the deployed worker code, so the live re-check above is the
+standing way to re-confirm the deployed state.
+
+## Closeout
+
+The review item "Replace the retired-host Agent Desk message with the current
+Website Appraisal truth — both historical subdomains still tell visitors the
+retired self-serve product is current" is closed: the runtime fix merged in PR
+#100 (`5ab84ea`) is in origin/main and live — both retired-host 410 bodies name
+The Website Appraisal and never the retired Agent Desk — and `npm run check`
+plus `npm test` (92 tests, 0 failures) pass on the current head.