/how · Praetor

How Praetor audits this hub

Praetor’s public story here is a CLI audit of the live hub: from a local Praetor checkout, run npm run audit against https://www.fuzzywigg.ai/. Verified 2026-08-16 at 15 pass / 0 warn / 0 fail. The source lives in a private repo — strangers get 404 if you invent a GitHub door. There is no public Worker URL.

Pipeline verified 2026-08-16

Pipeline

Checkout Praetor privately, then npm run audit -- https://www.fuzzywigg.ai/. The CLI reads the live response headers this hub already ships. Constitution JSON (security / tokens / meta-manifest) is the source of those header values — not a hosted Praetor service. PipelineHandler.handle() is a stub that returns OK; do not un-stub it for this page.

CLI audits the live URL. Constitution-backed headers already on the hub. Stub handler is not a hosted Worker (verified 2026-08-16).

Allowed captures

Two honest captures only — a crop of the live hub (the URL the CLI audits) and a text summary of the 15 / 0 / 0 result. No fake Praetor dashboard, no Worker console, no Geryon.

Cropped www.fuzzywigg.ai home: Andrew Pappas — fuzzywigg hero and constellation map — the live URL Praetor CLI audits. — Live hub crop only — what npm run audit targets at https://www.fuzzywigg.ai/. Not a Praetor UI.

Text capture of Praetor CLI public audit summary: 15 pass / 0 warn / 0 fail for npm run audit against www.fuzzywigg.ai, verified 2026-08-16. — Honest 15 / 0 / 0 summary capture (verified 2026-08-16). CSP documents Next unsafe-inline; HSTS is Vercel max-age=63072000. No dashboard invented.

Host and cache

Public surface for this HOW: CLI audit of https://www.fuzzywigg.ai/ from a private Praetor checkout — npm run audit -- https://www.fuzzywigg.ai/.
Verified 2026-08-16: 15 pass / 0 warn / 0 fail.
CSP on the hub documents the Next.js unsafe-inline delta (script-src / style-src). HSTS is Vercel strict-transport-security max-age=63072000 — not a constitution preload flag.
Constitution JSON (security / tokens / meta-manifest) is the source of the header values the hub already ships (e.g. vercel.json CSP and related security headers).
PipelineHandler.handle() is a stub that returns OK. Do not un-stub. There is no public Worker URL — do not invent one.
Private repo fuzzywigg/praetor — prose only; never list github.com/fuzzywigg/praetor in links[].

What is live vs static

Source	Live or static	Card
Praetor CLI (npm run audit)	Local run against live URL	Public audit path
www.fuzzywigg.ai response headers	Live (Vercel + vercel.json)	What the CLI checks
Constitution JSON (security / tokens / meta-manifest)	Source of header values hub ships	Policy source
PipelineHandler.handle()	Stub returns OK — not deployed publicly	No public Worker URL

Public links

Audit target (www)
Live hub URL the CLI audits
HOW · this hub is built
Next 16 static export pipeline on Vercel
/now pulse
Dated constellation facts on the same hub
Doors directory
Public site list — not a Praetor console

Not copied onto this hub page

No github.com/fuzzywigg/praetor in links[] — private repo; stranger 404.
No public Worker URL invented.
No PipelineHandler un-stub / hosted worker story.
No fake Praetor dashboard or console UI.
No Geryon.
No Skylight / Workwife / Ads / stolen X.
No claimed constitution preload HSTS — live HSTS is Vercel max-age=63072000.

Index: /how. Also listed on /sites and noted on /now.