Most of this week was about making existing systems more trustworthy.
Across the repos, I fixed a few production integration paths that could lose their place after a failed click, tightened target binding and provider calls, and cleared a Go dependency advisory. On the game side, the asset pipeline now has an end-to-end equivalence check, and more travel logic has moved behind the world simulation boundary.
This site got the same treatment. Markdown URLs are restricted, raw HTML is sanitized, generated pages are parsed instead of checked with fragile regexes, content IDs are constrained to safe routes, and build-time template values are escaped. The regression tests now run cleanly on both Windows and Linux too.
Not a flashy week, but a good one: fewer ambiguous states, fewer unsafe edges, and stronger checks around the things that ship.