GA4 inject: 2026-08-20 re-verification — 6 live-verified, NEEDS_INJECT=0, parked-IPs stale (now Kamatera, still no vhost/cert → HOLD unchanged)

5985c6988b1095f5b38ae905c2e4534298339be4 · 2026-08-20 16:01:07 -0700 · Steve Abrams

Files touched

M cache/_ga4_inject_GROUND_TRUTH.md

Diff

commit 5985c6988b1095f5b38ae905c2e4534298339be4
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Aug 20 16:01:07 2026 -0700

    GA4 inject: 2026-08-20 re-verification — 6 live-verified, NEEDS_INJECT=0, parked-IPs stale (now Kamatera, still no vhost/cert → HOLD unchanged)
---
 cache/_ga4_inject_GROUND_TRUTH.md | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/cache/_ga4_inject_GROUND_TRUTH.md b/cache/_ga4_inject_GROUND_TRUTH.md
index 5992ac0..cb74faf 100644
--- a/cache/_ga4_inject_GROUND_TRUTH.md
+++ b/cache/_ga4_inject_GROUND_TRUTH.md
@@ -47,3 +47,28 @@ dsgntv.com — DNS/connection error at probe time (retry later).
 **Bottom line:** the property-creation batch over-provisioned — 18 properties are premature.
 No further *injection* is correct until each domain has a real, self-served page. This
 matches the DTD panel's read that the remaining portfolio work is gated, not quick.
+
+---
+## 2026-08-20 re-verification (claude-run-10636, TK-10636)
+Re-probed the whole set with fresh evidence:
+- **6 deployed-live sites STILL serving correct GA4 (curl-verified live):**
+  designersalesreps.com·G-J4BCJ7GZYR, fabricfriday.com·G-Z3SRYFXLZR,
+  patterndesignlab.com·G-FJJKTKH0VE, wallpaperdictionary.com·G-FL92MQYWRD,
+  wallpaperhistory.com·G-KHPFEJ27QS, wallpaperwednesday.com·G-76E6K13TNG. ✅
+- **3 EJS local server.js already carry canonical existing IDs** (no stale drift):
+  commercialdesignreps·G-PRJ51PTW5G, designerrepresentatives·G-MVZFTCQY3X,
+  designtradelive·G-E8R8V9RDXN. ✅ (the "prep-work" recommended 08-20 06:22 was already satisfied)
+- **Detector NEEDS_INJECT = 0.** ✅
+- **STALE-IP CORRECTION:** the 12 "parked" ondemand/stub domains now resolve to
+  Kamatera (45.61.58.125) via 8.8.8.8 — NOT the AWS/GoDaddy IPs (3.33.x/15.197.x) the
+  detector buckets still record. BUT they are STILL NOT injectable: Kamatera has no
+  vhost/cert for them — port 80 returns a bare `301→https://<domain>/` into a
+  non-existent HTTPS server block (TLS verify_result=1, handshake fails on 443);
+  dsgntv.com is additionally ISP-intercepted (charter cujo block page). Making any of
+  these injectable requires a GATED site-build + nginx vhost + Let's-Encrypt cert +
+  DNS-content step — exactly the HOLD Steve ruled 2026-08-19. Verdict unchanged; only
+  the stored IPs were stale.
+
+**Net: all non-gated GA4-injection work on TK-10636 is complete + verified.** The residual
+is the separate "build a real landing then repoint" workstream (all-dw-agent scope), NOT
+GA4 injection, and stays HOLD-for-Steve.

← c73d255 auto-data-snapshot: 2026-08-18T21:58:08 (1 data files) — etl · back to Ga Allsites · portfolio GA4: stage 17 domains (DNS+certs+backends+nginx co 79e1017 →