Verify production aliases
Post-release runbook — confirm app.aglyn.com and the *.aglyn.app wildcard point at the newest Ready deployment, and repair a stale alias with one command.
Firewall posture
Internal runbook — the expected Vercel WAF posture of every project, the PUT that silently deletes managed bot protection, and the safe PATCH that repairs it.