Launch the unified Zensical documentation and Hayate brand

[yhay81]

Goal

Create a single public home for the growing Hayate family and deploy it with Cloudflare Workers Static Assets.

Delivered

• Rename the repository to hayatepy/docs
• Build the site with Zensical 0.0.51
• Add a Hayate mark and favicon
• Publish onboarding, runtime selection, ecosystem, deployment, and evidence pages
• Add generated ecosystem data with immutable source evidence
• Add strict build, accessibility/link validation, dependency audit, and workflow audit
• Generate CSP hashes and Cloudflare _headers during the build
• Deploy with Workers Static Assets
• Verify desktop/mobile layout and production headers
• Replace the GitHub organization identicon with the new Hayate mark
• Make the unified site the organization profile entrypoint (hayatepy/.github#26)
• Attach the canonical hayatepy.dev Custom Domain and update public organization/repository links (hayatepy/.github#27)
• Redirect HTTP to HTTPS with a dedicated HTTP-only Worker route
• Check public PyPI versions and exact quickstart pins daily without scheduled deploys
• Add a narrowly scoped CLOUDFLARE_API_TOKEN repository secret for unattended CI deploys

Production

• Site: https://hayatepy.dev/
• Workers.dev fallback: https://hayate-docs.yusuke8h.workers.dev/
• Source: https://github.com/hayatepy/docs
• Current documentation commit: bf69d8fc102a6b551678a214fd9ab35f338ef260
• Static site Worker: hayate-docs
• HTTP redirect Worker: hayate-docs-http-redirect

[yhay81]

2026-07-30 release-path refresh is live.

• docs PR docs: publish TypeScript client release path #6 merged to main as 010903a0c8b916e0c1691030b71cd43441e681e2
• main build, external-link validation, dependency audit, and workflow audit: https://github.com/hayatepy/docs/actions/runs/30489785740
• manual production deployment from the validated source completed because CI still lacks CLOUDFLARE_API_TOKEN
• static site Worker version: 9eae157e-e7bc-4023-bb96-064d05c92e7e
• redirect Worker version: 9df51dff-6f05-4026-b919-e11a0aaa36a2
• production verification confirms create-hayate 0.13.0, hayate-openapi 0.8.1, the 112/112 aggregate evidence hash, security headers, and HTTP→HTTPS redirect

The unchecked narrowly scoped CI secret remains the only item here, so this issue intentionally stays open.

[yhay81]

2026-07-30 public-release evidence refresh is live.

• docs PR ci: detect public release drift #7 merged to main as 3e2a379c6f4207e1748b82e7929cb7622cb11dde
• main build, live PyPI freshness validation, external-link validation, dependency audit, and workflow audit: https://github.com/hayatepy/docs/actions/runs/30494821212
• community compatibility ledger: docs: sync released ecosystem evidence .github#33
• golden-app generator provenance: Sync golden provenance to create-hayate 0.13.1 golden-app#31
• manual production deployment completed from the exact merged tree because CI still lacks CLOUDFLARE_API_TOKEN
• static site Worker version: 5c516bcf-dd8f-494c-ab7d-4027090880f4
• production verification confirms create-hayate 0.13.1, hayate-auth 0.10.3, their immutable source commits, strict security headers, and the updated quickstart

The remaining unchecked CI secret is still an external credential gate, so this issue intentionally stays open.

[yhay81]

2026-07-30 design-partner funnel update is live.

• organization intake PR #34 merged as 2439aae27db39aa582376929a134c42abec8571f
• organization main Documentation CI: https://github.com/hayatepy/.github/actions/runs/30497348113
• the public issue form now includes all nine current first-party packages, including hayate-admin and hayate-htmx, with a regression contract for package completeness and the existing independence/privacy confirmations
• docs PR docs: surface the design-partner program #8 merged as c034e2428e827dd56ce5b8d08d5c69edb9da5afc
• docs main build, live-link validation, dependency audit, and workflow audit: https://github.com/hayatepy/docs/actions/runs/30497385972
• manual production deployment used the exact merge commit because CI still lacks CLOUDFLARE_API_TOKEN
• static site Worker version: a8aab54d-e88f-4281-9131-28029154744c
• redirect Worker version: e16e7b4b-080a-43fe-94c1-845df9b84f2e
• production verification confirms the direct application link, new versioned stylesheet, strict security headers, and HTTP→HTTPS redirect

The unchecked narrowly scoped CI secret remains the only item in this issue, so it intentionally stays open.

[yhay81]

2026-07-30 release-evidence and transport-security refresh is live.

• canonical compatibility PR docs: publish hayate-auth 0.10.4 evidence .github#35 merged as
  1496dc87b780ff81470518df468a18bd6783ebce; main CI:
  https://github.com/hayatepy/.github/actions/runs/30498987588
• docs PR docs: publish hayate-auth 0.10.4 #9 merged as 0cc32b5870fb8e927cfc54cb56f8503fe1cf1226,
  advancing the public family map to hayate-auth 0.10.4 and its exact
  release/CI/security evidence
• HSTS issue Add HSTS to production documentation responses #10 / PR security: add HSTS to documentation assets #11 merged as
  a18f4c0193106222972cdc5f41dca0f728155fe3; main CI:
  https://github.com/hayatepy/docs/actions/runs/30499384900
• exact merged source was deployed manually because CI still lacks
  CLOUDFLARE_API_TOKEN
• static site Worker version: 8c4a6b86-7380-4ca0-8b9d-d55ae4f1c70c
• redirect Worker version: a0934668-7339-4ce5-b218-cff4e0b50bb4
• production and Workers.dev both return one-year HSTS with subdomains,
  CSP/COOP/CORP, permissions/referrer policies, nosniff, and frame denial;
  HTTP still redirects to HTTPS

The unchecked narrowly scoped CI secret remains the only item in this issue,
so it intentionally stays open.

[yhay81]

Current-evidence prose drift is now also fail-closed.

• issue Reject stale release prose in compatibility evidence #12 / PR docs: reject stale compatibility prose #13 merged as
  bf69d8fc102a6b551678a214fd9ab35f338ef260
• main validation:
  https://github.com/hayatepy/docs/actions/runs/30499727672
• production compatibility copy now matches create-hayate 0.13.1, canonical
  compatibility commit 1496dc8..., the successful 112/112 matrix run and
  aggregate hash, and the current golden-app run
• static site Worker version: df69358d-be61-4fde-b659-78c8d58f7b76
• redirect Worker version: 057867b9-650e-4bbc-9099-d804fa3b22d8
• production HSTS and HTTP redirect remain verified

The account-side CI deployment secret remains the only unchecked item.

[yhay81]

2026-07-30 deployment-identity evidence refresh

• docs PR docs: publish deployment identity evidence #18 merged as 2e0f7f45072c52df65f6b3bb875d71bf54292c8a
• main build, live PyPI freshness, external-link validation, dependency audit, and workflow audit: https://github.com/hayatepy/docs/actions/runs/30511753946
• canonical compatibility snapshot: 74327adddc10cad0f3f802a4bfd29ef484572907
• public create-hayate 0.14.0 wheel passed 112/112 compositions; aggregate SHA-256: d980477da29e494182080adcd79b864ab533a1dcfbc8035b401f75f7dfa97e43
• exact merged docs tree was deployed manually because CI still lacks CLOUDFLARE_API_TOKEN
• static site Worker version: cedebff3-cb10-4598-ab14-16f90cce04f6
• HTTP redirect Worker version: 7068fbd2-9bde-442c-ba14-0123127225b6
• production and Workers.dev content hashes match the locally validated merge artifact; HSTS/CSP/COOP/CORP, permissions/referrer policies, nosniff/frame denial, and HTTP→HTTPS remain verified
• 1280px browser layout has no horizontal overflow; header bottom and hero top both resolve to 95px, so the previous white gap is absent

The narrowly scoped CI secret remains the only unchecked item, so this issue intentionally stays open.