Skip to content

docs(evidence): close out social share image finding d87d715be3d0 against current main and live - #76

Merged
nish3451 merged 1 commit into
mainfrom
docs/evidence/social-share-image-2026-08-11
Aug 10, 2026
Merged

docs(evidence): close out social share image finding d87d715be3d0 against current main and live#76
nish3451 merged 1 commit into
mainfrom
docs/evidence/social-share-image-2026-08-11

Conversation

@nish3451

Copy link
Copy Markdown
Collaborator

What

The dogfood audit run 20260808T074205Z-msk2fl3n found "Social share image
incomplete on home" (finding d87d715be3d0): the home page served zero
og:/twitter: tags. The fix (PR #31, merged) added the complete share set to
all five public pages, regenerated og-image.png for the current offer, and
added the check-site.mjs social-tag guard — but unlike every sibling finding
from the same audit run, this one never received its closeout evidence doc.

This PR writes that closeout: a live-deployment measurement of the deployed
site (headless Chromium, all five pages), plus source checks on the current
head.

Evidence (2026-08-11)

  • All five live pages: HTTP 200 + CSP header, all 12 share tags exactly once
    in <head> and once in the full document, og:description == meta
    description, zero console/page errors.
  • https://tinystudio.io/og-image.png: 200, image/png, valid 1200x630 PNG,
    byte-identical to the committed file (SHA-256
    93109e72af34c2476f2ddd5a7104352e30c13536677e8c6aa7f80be96b3b08df); pixel
    sample matches the current cream/ink/brass palette (current-offer card, not
    the retired Agent Desk artwork).
  • npm run check and full npm test pass on current main (ce02df9):
    headings 6/6, sitemap 7/7, worker 53/53, UI 16/16, contract 8/8.
  • Deployment-lag note recorded for the tracker: live lags main by exactly
    f9f0b0f + 1cc7a4e; the live audit page still serves the .html og:url form
    that main already corrected — neither commit touches the home page, which
    is the finding's scope and is already correct on both main and live.

Files

  • docs/evidence/social-share-image-2026-08-11.md (new, 221 lines)

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nish3451 has reached the 50-credit limit for trial accounts. To continue receiving code reviews, upgrade your plan.

@coderabbitai

coderabbitai Bot commented Aug 10, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@nish3451, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 7 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a34e1908-7baa-4d8a-9154-3a8d6249db3e

📥 Commits

Reviewing files that changed from the base of the PR and between ce02df9 and 0cac9dd.

📒 Files selected for processing (1)
  • docs/evidence/social-share-image-2026-08-11.md

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0cac9dd03a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +204 to +208
current main, and the live deployment now serves the complete Open Graph +
Twitter Card set — each tag exactly once, in `<head>`, bound to the page's own
metadata, pointing at a reachable 1200x630 current-offer `og-image.png` that
is byte-identical to the committed file — on the home page and on all four
sibling public pages.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Do not claim all five live URLs match their metadata

Under the deployment state this receipt records, the live /audit page does not satisfy this all-five-pages conclusion: the note at lines 210–216 says its og:url is still https://tinystudio.io/audit.html, while the browser lands on /audit and the current guard expects that clean URL. The closeout should either report that live mismatch in the results and limit the successful conclusion to the homepage, or wait until the pending deployment before claiming every sibling page has a share set bound to its own address.

Useful? React with 👍 / 👎.

Comment on lines +191 to +193
pages are the static files verbatim through the Worker's ASSETS binding
(`src/worker.js`), so the source guard and the served bytes cannot drift
unless the Worker's asset serving itself changes. The measurement does not

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve deployment drift in the stated limitation

The source guard only validates the checked-out files; the ASSETS binding can serve an older or otherwise different deployed artifact without src/worker.js changing. This receipt demonstrates that exact case in lines 210–216, where live /audit differs from current main because deployment is lagging, so saying source and served bytes cannot drift incorrectly turns a CI source check into a deployment guarantee. Keep stale/failed deployments and CDN versions as explicit reasons that the live browser check remains necessary.

Useful? React with 👍 / 👎.

@nish3451
nish3451 merged commit 6a914b6 into main Aug 10, 2026
3 checks passed
nish3451 added a commit that referenced this pull request Aug 13, 2026
…current main and live (#168)

Judges the lane-1 item for dogfood finding d87d715be3d0 ("Social share image
incomplete on home", audit 20260808T074205Z-msk2fl3n). The finding was fixed
by PR #31 (eae1d87), verified live by PR #76, and engine-rerun-confirmed by
PR #122; this receipt re-verifies on the current head (5209ec7) and the live
deployment that the twelve-tag share set, the CI guard, and the reachable
1200x630 og-image.png all still hold. Nothing further to change; item closes
with a reason.

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant