What we shipped, when, and why.

op-confirm-tide — end-to-end operational confirmation + GH branch protection

Closes out the 10-tide thread. No behavioural changes to the worker — this tide is the audit + seal.

• Smoke harness: 79 PASS · 0 FAIL local (10 check groups, 80+ assertions).
• Route sweep: 26/26 routes returning their expected codes (24 × 200, 1 × 404 on bogus path, 1 × 404 on bogus 64-hex verifier hash).
• OG cards: all 7 SVG cards 200 and referenced by their owning page.
• Chain-viewer subject: populated on a fresh seal via POST /api/seal?segment=farm. This is the regression that hit twice before; not present this pass.
• Crons: hourly showcase refresh + 5-minute watchdog both firing on schedule. KV state intact.
• D1: pilot_intakes + security_reports tables present in sealed-pilot-intakes with their indexes.
• GH branch protection: required status checks (typecheck + smoke + brand-grep), linear history, no force-push, no deletion. Single-developer workflow — no required reviewers, founder can bypass.
• Smoke prober UA: stable sealed-smoke/1.0 User-Agent so a one-line Cloudflare WAF rule can allowlist the CI prober.
• sh.E waterseal: WATERSEAL_SEALED_LOCAL_SITE_OPERATIONAL directive on the swarm chain — verify on-chain →. Dual-signed (Ed25519 5D579BC4…FE1EE7 + ML-DSA-87 00A1B445…06C3), anchored on Base L2, chain_link_ok:true, prev_seal_hash points at the enterprise-tide waterseal.
• Known limitation: branch protection on main is not yet enforced — gh api returns HTTP 403 — Upgrade to GitHub Pro or make this repository public to enable this feature. The ci.yml workflow (3 jobs, all green on d297ca2) and the local npm run smoke harness remain the canonical green/red signals.

logo-tide — EpochCore parent mark, subtle attribution

• Brand mark asset: public/brand/epochcore-mark.svg (200×200 viewBox, ~3 KB) — teal isometric cube with maze interior and 12 radiating PCB traces.
• Footer injection: small footer-mark on every public page so the EpochCore parent attribution reads as a quiet mark, not a wordmark.
• /trust eyebrow + /press brand-asset: mark embedded in the trust eyebrow and the press brand-assets section.
• README: mark added to the upper right corner.
• Waterseal: deferred to the next ship-tide encompassing logo + any other changes — i.e. the op-confirm-tide waterseal above.

enterprise-tide — worker split + folder structure + sh.E waterseal + GH push

Industrializes the repo for the QuantumSwarms org.

• Worker split: src/worker.ts went from 1,254 lines → 829, with src/utils.ts (shared helpers) and src/verifier.ts (the 280-line receipt-render block) extracted as proper modules.
• Chain-viewer subject re-applied: the round-4 modification got overwritten by a parallel deploy; smoke harness caught it, re-applied.
• Enterprise scaffolding: README, LICENSE, CHANGELOG.md, SECURITY.md, CONTRIBUTING.md, CODEOWNERS, .editorconfig, .github/dependabot.yml, .github/workflows/ci.yml.
• docs/: BUSINESS.md and AUTOMATION.md moved into docs/ (root README is the front door).
• sh.E waterseal: WATERSEAL_SEALED_LOCAL_SITE_ENTERPRISE directive issued — verify on-chain →. Dual-signed (Ed25519 + ML-DSA-87), chain_link_ok:true, anchored on Base L2.
• GH push: repo lives at QuantumSwarms/sealed-local-site (private).

auto-tide — smoke harness + production watchdog + AUTOMATION.md

• npm run smoke: 10 check groups × ~80 assertions, zero deps, Node 18+.
• npm run ship: typecheck + deploy + smoke in one command.
• Watchdog cron: */5 * * * * pings 7 probes; Resend alert on failure; 30-min dedupe via KV.
• AUTOMATION.md: runbook + audit-pipeline design.
• Caught regressions: smoke on first run flagged residual IBM product-name mentions on home + /pricing + /press — all paraphrased to "the enterprise agent fleet on IBM Marketplace" in the same commit.

cohere-tide — 6-round optimization pass + BUSINESS.md

• OG preview cards: 7 SVG cards (home / pricing / security / compare / demo / trust / sample-fsma) wired to each page's og:image + twitter:image. No more favicon-as-share-preview.
• Apple-touch-icon: added to all 17 public pages (was on 5).
• Worker.ts section banners: 9 numbered sections; in-place organization for the ~1,100-line worker.
• Performance: preconnect + dns-prefetch on home; Cache-Control on /api/showcase-url and /api/pilot-progress.
• IA consolidation: /press fact-sheet trimmed to point at /trust + /security.
• Asset cleanup: deleted /_showcase.json + scripts/mint-showcase-seal.mjs (both superseded by cron + /api endpoint).
• BUSINESS.md: 1,200-word business overview committed to the repo (use cases by segment, buyer personas, acquisition motion, breakeven math, competitive moat, risks).

resilience-tide — cron-pinned showcase + real 404 + hardened error pages

• C1 trust-killer fix: Cloudflare hourly cron + on-demand fallback re-mints the showcase URL when it rolls out of the FIFO. KV namespace sealed-site-state. Showcase verifier link never goes 404 again.
• C2 silent-404 fix: SPA-fallback off (was serving / for any unknown route); new /404.html with 6 "where to go" cards.
• Verifier "not found" hardening: raw envelope on error path trimmed to {ok:false, found:false}; OG title fixed.
• Pilot bar: KV-backed via /api/pilot-progress; representative-but-NDA-safe facts per slot; date-stamped.
• "Proofs you can click" table on home: single signpost across demo / verifier / sample-fsma / security.
• Polish: 12px shape-variant seg-chip dots (circle/square/diamond) for color-blind accessibility; home eyebrow caps dropped; KPI band reconciled with /pricing ($99–$1,499/mo); demo-toggle active pill in segment color; pricing tabs scroll-spy on first paint.
• L items: auto-fit pilot grid, apple-touch-icon SVG, data-event analytics queue, /security key-id copy buttons + keys.json, FERPA/HIPAA scope-out, "Request a free 60-day pilot" CTA rename.

completion-tide — /status + /trust + /changelog + /press + /compare + share buttons + status dot

• /status: live liveness page (JS-based parallel checks every 30s on /healthz of marketing, verifier, seal-broker).
• /trust: procurement-ready 9-card index linking to /security, /privacy, /terms, /status, /security/report, security.txt, /changelog, /compare, /press.
• /changelog: commit-by-commit ship log.
• /press: press kit with boilerplate, fact sheet, exec bio, brand assets.
• /compare: Sealed vs Toast / Square / Stripe / VC matrix.
• Status dot: the green dot in the nav now pulls /healthz live and routes to /status on click.
• Share buttons on /v: Copy URL · Email this proof · Share to X · LinkedIn.

hardest-mode-tide — verifier rewrite + /security overhaul + IBM Think readiness

Closes 25 of 35 round-4 audit findings.

• Verifier: sealed-payload panel surfaces the actual subject; "✓ verified" (not "present") across all signatures; "Verify this independently (don't trust this page)" expandable with curl + Python + BaseScan steps; per-receipt timing.
• /security overhaul: plain-English rewrite (directive → sealed event, FIFO → queue); SLA section; continuity & liability section; forward CTAs ("Request SOC 2 bridge letter", "Schedule a 30-min review").
• New routes: /demo (canonical with segment toggle), /privacy, /terms, /security/report (structured intake form), /.well-known/security.txt, /security/pgp.txt.
• Pricing: TCO calculator (live sliders → tier + effective rate + annual + breakeven), Common Questions adds data-ownership and liability items.
• Pilot social proof: "Onboarding the first 5 Charlotte SMBs" 3-of-5 progress bar (replaces NDA×7 silhouettes).
• Cross-worker: chain-viewer /v1/verify now returns directive.subject (truncated 200 chars).
• SEO + legal: Organization + FAQPage JSON-LD, sitemap.xml, robots.txt with Disallow rules, noindex on /v/, /sample-fsma-trust-pack, /security/report.
• Hardening: honeypot + Cloudflare Turnstile gate (no-op until keys provided), Calendly flag, RESEND_DOMAIN_VERIFIED flag.

trust-tide — verifier UI lives on the Sealed domain

Closes the round-3 trust-killer.

• /v/<hash> now server-renders a full receipt page on seal.epochpay.today with per-receipt OG tags. No more raw-JSON-on-foreign-domain dump.
• FSMA mock button opens a real sample trust pack (Bistro Charlotte fixture) with Print/Save-as-PDF.
• Hero illustrations on /farm (produce label + "scanned by customer ✓") and /shop (Visa dispute response card with highlighted verifier URL).
• Sticky pricing tabs with IntersectionObserver active-state highlighting.
• Pilot logos strip + replace-form success state on pilot intake.

polish-tide — conversion-readiness pass

• Hero overhaul: shorter H1 + sub-headline, 5→2 primary CTAs, segment chips, "See a real sealed receipt →" link (hydrated from a canonical showcase seal).
• Pricing: H1 numbers-first, sticky tabs, event glossary, enterprise inline form (replaces mailto).
• Polish: jargon hidden behind "Technical details" disclosure, segment-color demo buttons, "/security" link added to every footer.

elegant-tide — initial Sealed marketing site

• Brand unified to "Sealed". Visual receipt with QR + verify button replaces JSON dump.
• /pricing comparison page (Farms · Restaurants · Shops · Enterprise).
• Inline pilot form (D1 + Resend founder-notify pattern).
• Chain integration: every demo seal lands in the chain index with found:true.