Verify parity against immutable raw sidecars

#2

Production smoke showed Hugging Face injects a creator bootstrap into served HTML. This fix hashes exact source.html.txt sidecars, preserves rendered HTML for feature parity, and explicitly discloses the host transform.

Verification gate: 8/8 tests PASS on downloaded refs/pr/2; all seven raw sidecars match their pinned source SHA-256; rendered HTML remains separate and source Spaces remain untouched.

Merged after the production host-transform finding was reproduced and covered by a sidecar parity test.

betterwithage changed pull request status to merged

Sign up or log in to comment