Issue: #609. Status: operator procedure, no live outage drill claimed.
The read-only generator in idkmesh/github_pages_site.py is optional. Site availability is never a precondition for dispatch, verification or human approval. Published summaries are not canonical evidence.
Disable Pages entirely; simulate stale site and missing ledger independently; test that no workflow changes run authority, that old data cannot appear as current and that restricted evidence cannot enter the public rebuild.
Remaining: execute and retain an outage drill. No publication or site configuration operation is performed by this document.
build_github_pages_outage_fallback(public_projection, repository=...)
in idkmesh.github_pages_site now returns a deterministic, read-only
summary of the exact source revision, WorkUnit/evidence/decision digests, and
canonical candidate PR links already present in a public-safe C14-D
projection. The returned canonical_evidence_availability is always
unverified: the helper performs no GitHub or ledger read and never
claims an old cached view is fresh. Negative tests prove that altered privacy
policy and cross-repository links fail validation, and that generating the
fallback cannot mutate the supplied projection.
It is an offline locator, not a health probe, durable evidence store, or automated Pages publication/recovery workflow. Owner-run outage exercises remain necessary before C14-H is declared complete.