close-out 2026-10-30: R-1344 and R-1346 closed, R-1228 switched (D35) and narrowed; R-1352, R-1353 filed; 01/03/05 [DESIGN], total-loss + publish-train runbooks, poster facts; instruction files: the site publishes to Cloudflare Pages

.claude/rules/website.md

@@ -6,8 +6,10 @@ paths: ["website/**"]
 
 ## Deploy
 
-The website **auto-deploys via git-sync from `main`** — just push, live in 1–2 min. No ArgoCD sync,
-no image build. Emergency edits: https://files.felhom.eu.
+**Since 2026-10-30 (D35 / R-1228) the public site is served by Cloudflare Pages** (project `felhom-site`): a push to
+`main` reaches the public site only after `sec run CF_PAGES_TOKEN -- scripts/publish-site-cloudflare.sh` (`--dry-run`
+first; it uploads `website/` from `main` and `/scripts/` from the installer tag). DooPlex's git-sync copy keeps tracking
+`main` as the way back (`documentation/audits/release-2026-10-30/p3-cloudflare/PLAN.md` §5). No image build.
 
 **Do NOT pin the website to the installer tag.** The sparse-checkout used to cover `/website/` and
 `/scripts/` in one sync; pinning that would turn every copy edit into a release. The installer's