Source: third full-project audit (2026-07-25). Severity: HIGH. Category: half-fix regression (ADR-0117 package C explicitly named "bare version mentions" as a sibling path, docs/current/VERSION_PLAN.md:100).
Evidence
www/app/routes/changelog.tsx:69 — "The currently published package line is 0.41.0-alpha.10."; :84-87 — alpha.11 called "the audit-remediation release candidate".www/app/routes/roadmap.tsx:400,416 — "alpha.10 is the published package line", contradicting the same page's release rail at :336 (correctly marks v0.41.0-alpha.18).www/app/routes/guide/getting-started.tsx:34 (en) / :66 (zh) — renders "The current published package line is v0.41.0-alpha.18. The five-package convergence is published in alpha.10" — self-contradicting in one sentence, both locales.- Gate blind spot:
tools/check-www-current-truth.ts:13-20 retired-version regex requires a v prefix; bare 0.41.0-alpha.10 and short alpha.10 forms pass (verified by replicating the regex in deno eval). --artifacts mode exempts the whole changelog page (:109-113).
- A single source exists:
www/app/data/version.ts (OPENELEMENT_VERSION); these pages do not consume it.
Impact
The public site tells users alpha.10/alpha.11 is the current line while alpha.18 is published; the gate gives false "www truth is mechanically enforced" confidence.
Suggested fix
Render version mentions from OPENELEMENT_VERSION; drop the mandatory v prefix in the regex and cover short forms; narrow the changelog exemption to historical body content only.
Source: third full-project audit (2026-07-25). Severity: HIGH. Category: half-fix regression (ADR-0117 package C explicitly named "bare version mentions" as a sibling path,
docs/current/VERSION_PLAN.md:100).Evidence
www/app/routes/changelog.tsx:69— "The currently published package line is0.41.0-alpha.10.";:84-87— alpha.11 called "the audit-remediation release candidate".www/app/routes/roadmap.tsx:400,416— "alpha.10 is the published package line", contradicting the same page's release rail at:336(correctly marks v0.41.0-alpha.18).www/app/routes/guide/getting-started.tsx:34(en) /:66(zh) — renders "The current published package line is v0.41.0-alpha.18. The five-package convergence is published in alpha.10" — self-contradicting in one sentence, both locales.tools/check-www-current-truth.ts:13-20retired-version regex requires avprefix; bare0.41.0-alpha.10and shortalpha.10forms pass (verified by replicating the regex indeno eval).--artifactsmode exempts the whole changelog page (:109-113).www/app/data/version.ts(OPENELEMENT_VERSION); these pages do not consume it.Impact
The public site tells users alpha.10/alpha.11 is the current line while alpha.18 is published; the gate gives false "www truth is mechanically enforced" confidence.
Suggested fix
Render version mentions from
OPENELEMENT_VERSION; drop the mandatoryvprefix in the regex and cover short forms; narrow the changelog exemption to historical body content only.