INC-05 · Origin lock · 2026-08-29T18:53:21Z

Public identity hosts, measured. DNS is not minted here.

This page is a static RECORD of a public probe. It does not change Cloudflare, Hugging Face, or GitHub Pages. Interactive runtime stays at https://a-11-oy.com/. Factory theatres stay at /factory/. Never a furniture-shop canonical.

Read machine record Open product apex Named theatres SNAPSHOT Named frontiers RECORD

Operational boundary: GitHub Pages served this HTML. That proves reachability of this path only. Cloudflare API is UNAVAILABLE from the observer. Do not stamp LIVE. Do not grey-cloud the apex. A Grok working copy is not a fourth public origin.

Product apex200

Cloudflare orange-cloud in front of Space SZLHOLDINGS/a11oy.

www404

Same CF A records. Redirect Rule 301 www → apex still required.

HF domainPENDING

szlholdings-a11oy.hf.space READY. a-11-oy.com PENDING.

Proof DNSPAGES

a11oy.net A records are GitHub Pages, not Cloudflare.

Hosts

What a visitor hits. What it actually is.

x-szl-wire-d LIVE is a provenance hop, not domain LIVE. Signer on /healthz is ABSENT.

Host	Front	Status	Class	Bound
a-11-oy.com	Cloudflare	200	MEASURED	Product origin reachable. HF custom domain is a separate PENDING row.
www.a-11-oy.com	Cloudflare	404	MEASURED	UNAVAILABLE until Cloudflare 301 www → apex. Do not add a second HF custom domain.
a11oy.net	GitHub Pages	200	MEASURED	Separate failure domain. Do not 301 onto the product.
forbidden storefront	Other	200	MEASURED	Not ours. Never canonical.

Operator

What still requires the zone.

This RECORD cannot mint DNS. Product source cannot mint DNS.

Cloudflare Redirect Rule: www.a-11-oy.com 301 to https://a-11-oy.com/. Same zone.
Keep orange-cloud on the product apex. Do not grey-cloud to satisfy Hugging Face PENDING.
Optional later: _huggingface.a-11-oy.com TXT without dropping that proxy.
Optional: orange-cloud a11oy.net only if Cloudflare should sit in front of Pages. Live DNS is Pages today.