chore: bring the repo under Prettier 3.9.6; archive the corpus spec (#55)

* chore(format): bring the repo under the locked Prettier 3.9.6

323 files drifted, mostly markdown table padding and line rewraps; CI
never ran format:check. Generated files (Astro types, the audit map)
are ignored so the generator and the formatter stop disagreeing. The
line-pinned @ts-expect-error in review-sweep.test.ts moves next to the
module specifier the rewrap separated it from.

Claude-Session: https://claude.ai/code/session_01RT21vyEPL6uSMWwUTytw6p

* docs: archive the live-corpus spec, remove docs/superpowers

Same as #49: the spec moves to docs/architecture/history, the execution
plan goes.

Claude-Session: https://claude.ai/code/session_01RT21vyEPL6uSMWwUTytw6p

Author: k2kirov

.changeset/architecture-hardening-debt-fixes.md

@@ -3,6 +3,7 @@
 ---
 
 Hardened CSS selector escaping in parser and operability audits, eliminated false positives/negatives in WAF bot wall detector, and added true offline safety for corpus tests:
+
 - Exported and applied `escapeAttrValue` to prevent Cheerio syntax crashes when HTML attributes (such as form element IDs, `aria-controls`, `aria-describedby`, and `aria-labelledby`) contain quotes or backslashes.
 - Fixed 3 WAF classifier defects: prevented `attack-challenge-mode` prose from falsely tripping Kasada, prevented normal PerimeterX telemetry scripts on 200 OK pages from falsely tripping PerimeterX blocks, and added Akamai HTTP 200 soft-block detection for reference-numbered error pages.
 - Corrected corpus fixture kinds for `vercel-com-wall-200` (`page`), `walmart-com-wall-200` (`page`), and `tirerack-com-soft-block-200` (`wall`).

.changeset/hardening-phase-11-text-bearing-wall-contract.md

@@ -3,5 +3,6 @@
 ---
 
 Added `text-bearing-wall` to hostile-state contract suite:
+
 - Extended `NOTHING_OBTAINED` with a text-bearing HTTP 200 bot wall containing full site template navigation and branding (>50 words, >200 characters).
 - Proved that `planAudits` properly enforces the evidence gate across all 215 audits when faced with a text-rich interstitial bot wall, guaranteeing `notApplicable` verdicts rather than false findings.

.changeset/hardening-phase-12-root-file-wall-gating.md

@@ -3,6 +3,7 @@
 ---
 
 Scoped all root-file audits to require `unblocked-fetches`:
+
 - Updated `ORIGIN_ONLY_REQUIRES` in `scripts/lib/requires-analysis.mjs` to require `unblocked-fetches`, removing the blanket category drop in `access-crawl-control`.
 - Updated all 65 root-file and crawler-token audits across `access-crawl-control`, `agent-interfaces`, `machine-discovery`, and `operability-safety` to declare `unblocked-fetches`.
 - Guarantees that when a site is blocked by a bot wall or WAF at HTTP 200, all root-file audits gracefully decline with `notApplicable` rather than emitting false failure or warning verdicts.

.changeset/hardening-phase-13-corpus-analysis-script-and-ci.md

@@ -3,6 +3,7 @@
 ---
 
 Moved corpus analysis script from test suite to `scripts/analyze-corpus.ts`:
+
 - Migrated `packages/core/src/tests/analyze-corpus.test.ts` to `scripts/analyze-corpus.ts`.
 - Eliminates CI `ENOENT` failure caused by the test attempting to write an analysis report to a local workstation artifact path.
 - Removes 75 seconds of redundant corpus re-execution from vitest test runs while preserving on-demand corpus diagnostic reporting via `pnpm exec tsx scripts/analyze-corpus.ts`.

.changeset/hardening-phase-15-lint-hygiene.md

@@ -4,6 +4,7 @@
 ---
 
 Code hygiene and linter zero-warning hardening:
+
 - Configured `.oxlintrc.json` with ignore pattern for `.astro` templates (which are compiled and verified by `astro check`).
 - Resolved all unsafe optional chaining operations, redundant fallbacks in object spreads, and regex character escapes across core audits and test suites.
 - Removed unused imports and eliminated all compiler warnings in `content.config.ts`.

.changeset/hardening-phase-17-a11y-corpus-conformance.md

@@ -3,6 +3,7 @@
 ---
 
 Resolve architecture debt item 1: accessibility audits on real-page corpus:
+
 - Added dedicated conformance test suite `packages/core/src/tests/a11y-corpus.test.ts`.
 - Exercises all 17 `A11yBackedAudit`s over representative real-world HTML documents across public sector, public health, forum, storefront, and SPA shell pages in ~3.2 s.
 - Proves schema compliance, node target findings on failures, and valid transitions between pass, fail, warn, and na states on real DOMs without inflating the 120 s runtime cap of `real-page-corpus.test.ts`.

.changeset/hardening-phase-20-audit-sources-dedup.md

@@ -3,6 +3,7 @@
 ---
 
 Refactor audit source extraction to eliminate code duplication across contract tests and CI scripts:
+
 - Exported canonical `auditSourceFiles` and `declaredIds` helpers from `packages/core/src/tests/audit-sources.ts`.
 - Migrated `scripts/lib/requires-analysis.mjs` and `scripts/check-requires.mjs` to fully-typed TypeScript (`.ts`) consuming `audit-sources.ts`.
 - Eliminated 15 lines of duplicated filesystem traversal and regex extraction code.

.changeset/hardening-phase-21-corpus-evidence-gate.md

@@ -3,6 +3,7 @@
 ---
 
 Add corpus evidence gate test suite (`packages/core/src/tests/corpus-evidence-gate.test.ts`):
+
 - Exercises `buildScanEvidence()` and `planAudits()` over all 41 real-page fixtures in the corpus.
 - Proves real bot walls are classified as unjudgeable and run zero page-fed audits.
 - Proves real JavaScript shells gate `rendered-body` and skip text-reading audits.

.changeset/hardening-phase-8-scripts-and-wall-gating.md

@@ -3,6 +3,7 @@
 ---
 
 Hardened script typechecking, bot wall evidence gating, and API deprecation:
+
 - Added `tsconfig.scripts.json` and integrated script typechecking into root `pnpm typecheck`.
 - Corrected evidence requirements for `access-crawl-control/sensitive-paths` and `access-crawl-control/rsl-licensing-terms-conformance` to require `unblocked-fetches`, preventing false scored `fail` verdicts when a scan is blocked by a bot wall.
 - Marked `MAX_CONCURRENT_REQUESTS` in `constants.ts` as `@deprecated`.

.prettierignore

@@ -0,0 +1,4 @@
+# Generated by Astro at build time; not source.
+packages/website/.astro/
+docs/evidence/audit-map.json
+docs/evidence/audit-map.md