- line-exact, path-bound T-17-10 raw-HTML exceptions for the RichEditorField
read-only display and the inert template parse in lossy.ts
- dist-origin allow-list adds the never-requested literals
https://prosemirror.net and https://admin.invalid
- self-test plants: the display line in another file, a template parse
elsewhere, a foreign origin in the dist JS
- --spa also runs the Vitest browser suite, fail-closed
- check-phase17: browser-suite required names in the admin stage, Phase 10
hygiene in the docs stage, asserted by its self-test