# v23 — build, check, integrate

Date:2026-10-27. Production: https://curbi.io/build/ . Pinned deploy:https://5020d7f5.curbi-landing.pages.dev . Rollback:https://e93d872d.curbi-landing.pages.dev . Existing Cloudflare project; no new paid service.

- Six browser-local synthetic policy challenges; initial4/6 → completed6/6. Invalid JSON reports no run. Mobile390px and desktop1280px inspected without horizontal overflow.
- Public MIT source-only starter ZIP: runner, two policies, six cases, README, LICENSE. No account/key/model needed. License applies only to these examples, not private engine or data. No rewards or earnings program promised.
- Signin/register now route to existing workspace or account-free tools. Existing workspace email/password+Google button observed; authenticated login not tested. Unified GitHub/SSO/passkeys are not connected.
- Discovery advertises the starter and entry limitations. Header CTAs preserved.

Validation:73website tests; Worker74corpus+4raw+2doc examples;725internal links; byte-identical134-file build. Live starter sent only included synthetic cases and reproduced4/6→6/6; JSON/archive bytes match; HTML main content matches (Cloudflare transforms footer email protection). Browser challenge and console checked. These tests do not certify semantic truth or customer delivery.

engineering MCP independent reproduction:15original tests and2CTO boundary attacks, sequentially. New guard mutation for oversized output is caught. RealSDK search→fetch→check→scripted revise→recheck transcript. Dependency audit after exactZod4.6.7 upgrade:0known advisories at run. Localonly; no hosted endpoint, plugin listing, actual model skill A/B, production signing or send permission. New review changes await engineering review.

engineering attestation pin6676535657cd35772550ffc8b1e50ad33b9057d7:46tests including3priorCTOattacks reproduced. Production issuer remains held pending trusted identity/ledger/provider integration.

Build: python3 v17/build.py . Website checks recorded in TESTS-v23.txt, contract/review-WORKER-SCORECARD.json, LINKS-v23.json, BUILD-v23.json and LIVE-v23.json. UI proof:v23-live.png (local artifact).