`5x/REPORT.md`

17 lines
# /5x REPORT — https://818butler.com/admin/wall (portfolio wall)

| Sweep | Passed | Caught | Fixed | Commit |
|-------|--------|--------|-------|--------|
| 1 | 6/7 | 3 (thumbnail 404s on developed views) | thumbnail request skipped when no screenshot exists | 5x-s1 |
| 2 | 7/7 | 0 | — | — |
| 3 | 7/7 | 0 | — | — |

**Result: CLEAN TWICE → stable.** Six-way: M1 HTTP ✓ · M2 render ✓ · M3 E2E ✓ · Chrome ✓ · Safari ✓ · Firefox ✓ · clickthrough 10/10 (sort ×4, type ×5, density). Root cause of sweep-1 defect: wall requested /thumbs/<domain>.jpg for the 5 sites lacking a screenshot → 404 console noise (visually handled by onerror, but real console errors). Fixed by having the server flag which domains have thumbnails so the client never requests a missing one.

## Contrarian gate (post-5x) — 3 holes the clickthrough couldn't reach, all fixed
The /3x clickthrough tests the selects but never the tile-click (goLive). Cody caught:
1. **Silent iframe failure** on XFO/frame-ancestors sites — clicking a blocked tile = blank box, no feedback. My first client-side "no-load = blocked" heuristic FAILED (Chromium fires load on blocked frames). Real fix: server probes frame headers (58 sites blocked), flags each; goLive opens blocked sites in a new tab instead of a doomed iframe. VERIFIED via playwright (claimmyaddress → new tab, 818butler → iframe).
2. **/thumbs unauthenticated** while wall is gated — now Basic-Auth gated (401→200 verified).
3. **Live iframes wiped on re-sort/filter** — LIVE set restores them on re-render (verified still-live after re-sort).
All committed; no pageerrors; regression sweep clean.