.agents/validate.sh is the commit gate: full E2E suite, container
security-header check, and repo-hygiene checks must all pass before a
phase is committed. AGENTS.md now documents the audit-driven
conventions (M-1 innerHTML/terminal input, M-2 simulated curl/wget,
M-4 security-header snippet, L-2 server_tokens) and the test-locked
featured-projects grid.
LLM-Generated: true
