Release notes — written 2026-10-25 · source work 2026-10-25

Making the recovery programs readable downloads

A narrowly scoped hosting rule serves the published Python recovery files as plain source text instead of attempting to execute them as CGI programs. The Java playtest, cards and recovered media are unchanged.

What changed

• Actual HTTPS verification found that the host treated ten published .py recovery-source URLs as CGI programs and returned HTTP 500. A rule scoped only to this project's source directory now selects static-file handling and the text/plain content type for those files.
• After the rule was uploaded, an actual HTTPS request for source/work/disc-web-extract.py returned HTTP 200, text/plain and the exact expected source SHA-256. The remaining affected URLs are included in the owning chat's final independent HTTPS verification; this entry does not substitute a prepared local check for that public audit.
• This changes one content file, source/.htaccess. The server configuration is expected to remain protected from direct download. The unchanged Java 0.19 engine, eight reconstruction save-card slots, artwork, music, sound auditions, movies and preservation ZIP retain their prior bytes.
• The earlier first-release post and retrospective remain immutable. This same-milestone hosting correction receives a distinct content hash and release identity so the fix remains traceable.

Still unfinished

• The full original campaign and original PS1 memory-card format remain unfinished. Website cards store reconstruction checkpoints; volatile enemies, props and projectiles restart when loaded.
• The artwork's unresolved index-only previews, five unrendered SEQ scores, dry sound-bank auditions and lossy browser movie/audio derivatives retain the coverage limits documented in the first release. This hosting fix does not expand original gameplay or media synthesis.
• The hosting rule is intentionally limited to the published recovery-source directory. No Python program is executed by the website. Public deployment is verified through actual source responses and hashes; a protected configuration URL is not expected to be publicly readable.

Java milestone 0.19.0. Website cards save reconstruction checkpoints; original PS1 card compatibility is unfinished.

Engine SHA-256: c4aca6fd75c478b273412b7dcd7527bdc07cc0f57d44b65568937b0603a27631
Project content SHA-256: 502ad764047d7d8580210d2e51ea39a21dc6f445d62719032280ec7fd713b230