docs: record the verified public launch

CHANGELOG.md

@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## Unreleased
 
+### Fixed
+
+- Build the validated Pages deployment artifact explicitly before upload and
+  confine Pages write permission to the deployment job after activation.
+- Make the wide mobile architecture illustration keyboard-focusable and add an
+  explicit swipe and arrow-key affordance without introducing page overflow.
+
 ## 0.2.0-rc.4 - 2026-08-09
 
 ### Added

docs/GITHUB_PAGES.md

@@ -2,9 +2,18 @@
 
 ## Current status
 
-The Telosieve website source is complete under `site/`, builds locally into
-`target/pages/`, and is authorized to deploy from reviewed `master` through
-`.github/workflows/pages.yml` after the repository becomes public.
+The Telosieve website is live at <https://kabudu.github.io/telosieve/> and
+deploys from reviewed `master` through `.github/workflows/pages.yml`. GitHub
+Pages is configured with the workflow publishing source and enforced HTTPS.
+
+The launch deployment was verified from source commit
+`08df159a6ddbcdf4e3784d01a84dd90c6beb5125`: Pages run `31324873576` and
+portable CI run `31324873617` both passed. Live inspection at 1440 by 1000 and
+390 by 844 CSS pixels found no broken images or page-level horizontal overflow;
+the intentionally wide mobile architecture region exposes a visible scroll
+affordance, keyboard focus, and its full claim-boundary description. The page,
+stylesheet, manifest, symbol, architecture illustration, favicon, and social
+card each returned HTTP 200.
 
 The website contains no telemetry, cookies, remote fonts, client-side scripts,
 third-party runtime assets, forms, credentials, private handoff material, or
@@ -28,7 +37,8 @@ deployment serves the validated files without Jekyll transformation.
 
 ## Deployment controls
 
-The public-launch pull request and explicit owner instruction satisfy the prior activation gate. Deployment must:
+The public-launch pull request and explicit owner instruction satisfied the
+activation gate. Future deployment must:
 
 1. confirm the repository is ready for public website exposure and rerun the
    final public-history and prohibited-content audits;

docs/IMPLEMENTATION_PLAN.md

@@ -1148,7 +1148,7 @@ Evidence: [BRAND_IDENTITY](BRAND_IDENTITY.md), `assets/brand/archive/3.0.0/`,
 - [x] Document that live GitHub Pages activation remains gated because even
   branch-based publishing uses a hosted deployment workflow and private-source
   Pages may be publicly accessible.
-- [ ] Activate and verify the live Pages URL only after an authorizing pull
+- [x] Activate and verify the live Pages URL only after an authorizing pull
   request supplies explicit hosted-workflow approval and the required release,
   permissions, supply-chain, privacy, and public-content review.
 
@@ -1167,12 +1167,12 @@ Evidence: [GitHub Pages Website](GITHUB_PAGES.md), `site/`,
   confined to the release environment.
 - [x] Add public README badges, plain-language repository metadata, topic tags,
   workflow validation, and updated release and Pages procedures.
-- [ ] Make the repository public and verify visibility, About metadata, topics,
+- [x] Make the repository public and verify visibility, About metadata, topics,
   default branch, licence, remote head, and complete public history.
-- [ ] Verify hosted CI and Pages deployment from the merged reviewed head.
-- [ ] Publish and verify `telosieve 0.2.0-rc.4` on crates.io and docs.rs plus the
+- [x] Verify hosted CI and Pages deployment from the merged reviewed head.
+- [x] Publish and verify `telosieve 0.2.0-rc.4` on crates.io and docs.rs plus the
   matching prerelease GitHub Release and checksummed Linux binary.
-- [ ] Inspect the live Pages site at desktop and mobile widths, verify links and
+- [x] Inspect the live Pages site at desktop and mobile widths, verify links and
   metadata, and fix every material visual or accessibility finding.
 
 Evidence: [Public Opening Decision](PUBLIC_OPENING_DECISION.md),

scripts/validate-pages-site.py

@@ -154,7 +154,7 @@ def main() -> int:
         if phrase not in readme:
             errors.append(f"README comprehension surface missing: {phrase}")
     policy = (ROOT / "docs/GITHUB_PAGES.md").read_text(encoding="utf-8")
-    for phrase in ("authorized to deploy", "reviewed `master`", "commit-pinned", "no repository secrets"):
+    for phrase in ("website is live", "reviewed `master`", "commit-pinned", "no repository secrets"):
         if phrase not in policy:
             errors.append(f"Pages policy boundary missing: {phrase}")