Commit history for docs/sites-design.md
- Drop stale pull aliases from the repository's own alarm instead of a cron over every site scope5ab396f⌁taigrr committed
- Fold site usage per scope from its own alarm instead of a cron over every site scopeae0e5d4⌁taigrr committed
- Remove the security review and triage docs now that every finding is closed, keep operator contacts out of the repo (ABUSE_FORWARD_TO is a secret, ADMIN_EMAIL is unset), and drop the private go-live checklist16fdec6⌁taigrr committed
- Merge feat/remove-pages1823e11⌁taigrr committed
- Merge feat/sites-pr-runs580ed3e⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Harden hosting cost controls per review: GC re-checks before delete, aborts on unreadable manifests and takes a lease; custom domain grace covers pre-existing and ungranted domains, lapse/reconcile sweeps can't stall, quantity follows transfers and teardown, duplicate add-ons are cancelled, verified domains never expire; Pages follows the current repo owner; aliases are per-PR, reserved and dropped with their preview.9dc4854⌁taigrr committed
- Add hosting cost controls: same-day hard caps from counter flushes, metered Pages traffic with plan caps, resumable R2 object GC, SITES_ENABLED/PAGES_ENABLED kill switches with admin hosting suspension, and a global daily dynamic-site ceiling.1a38b42⌁taigrr committed
- Add pr-<N> preview aliases that follow a pull request's latest branch preview and drop on close, plus opt-in immutable <sha7> commit previews (last 5 per PR).110dfda⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
- Squash the 37 never-deployed migrations into one file per area, producing an identical schema.81f0fc8⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/sites5b019ed⌁taigrr committed
