From 7c8d20c7b6dee7229f60040342846eeec9b90984 Mon Sep 17 00:00:00 2001 From: Rob Jacques <2531474+robbyrob42@users.noreply.github.com> Date: Thu, 3 Sep 2026 15:50:41 -0700 Subject: [PATCH] feat(forensics): attach the production route A route rather than a custom domain, matching sites/www. The DNS record that follows is a proxied placeholder pointing at RFC 5737 TEST-NET-1, so if the Worker is ever detached the hostname fails rather than serving whatever is at that address. The apex uses a real Netlify address because the apex has a rollback origin; this property has none. Deployed before the DNS record exists, deliberately. A proxied record with no route attached serves an error, and robots.txt is `Allow: /` -- whatever a crawler sees in that window is what it caches. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01J53xszP5CdZLXfhRJWsSyv --- sites/forensics/wrangler.jsonc | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/sites/forensics/wrangler.jsonc b/sites/forensics/wrangler.jsonc index e2e08e8..17142fd 100644 --- a/sites/forensics/wrangler.jsonc +++ b/sites/forensics/wrangler.jsonc @@ -1,4 +1,13 @@ { + // Production route, attached 2026-09-03. A route rather than a custom domain, + // matching sites/www: the DNS record is a proxied placeholder pointing at + // RFC 5737 TEST-NET-1, so nothing can be served if the Worker is ever + // detached. The apex record points at a real Netlify address because the + // apex has a rollback origin; this property has none, and a placeholder that + // fails loudly is better than one that silently serves someone else. + "routes": [ + { "pattern": "forensics.rootsystem.com/*", "zone_name": "rootsystem.com" } + ], // forensics.rootsystem.com — static assets plus the case-intake endpoint. // Shares the rootsystem-forms D1 database with sites/www; see // db/migrations/0001_init.sql for why one database with two tables.