diff --git a/.agents/PLAN.md b/.agents/PLAN.md index b13619f..fb2b543 100644 --- a/.agents/PLAN.md +++ b/.agents/PLAN.md @@ -59,6 +59,7 @@ accounts (one admin + hand-out tokens is the model). | A18 | Docs push | Save-a-answer-as-doc: server-side draft (`doc_drafts`, long body never in a URL — unguessable `uuid4` token is the URL credential) pushed to a **generic git remote** (`BOR_DOCS_REPO`, URL or local path; no `gh`) on a dedicated branch, `--ff-only`, re-cut per push; **no PR tooling**; inert (hidden + 409) while the repo is unset | | A19 | Deploys & caching | HTML pages `Cache-Control: no-cache` (no etag/last-modified); `/assets/*` versioned (`?v=`) + `immutable, max-age=1y`; **the token is the deploy** (git `HEAD` short SHA; content-hash fallback) — a deploy is a commit the browser sees without a hard refresh | | A20 | Security headers | Every response: `Content-Security-Policy: default-src 'self'` (+ the theme's inline-`