overview / findings / the public site was a Vercel login wall
site/ had been linked to a second Vercel project named after its own directory, while the custom domain belongs to the rabadon project. aliasing a domain onto another project's deployment leaves deployment protection in force, so every visitor got the login screen and 200 only ever came back from rabadon.vercel.app, which was still serving 207 refusals and 42.0us. relinked to the rabadon project; the domain answers 200 with the generated page.
| field | value |
|---|---|
| repository | rabadon |
| file | site/.vercel/project.json |
| status | fixed |
| found | 2026-08-02 |
A finding without a command that demonstrates it is an opinion, and site/build.py drops it. This one is also listed on the catches page.