add read only live runtime drift probe

docs/quality/evidence/qa-live-runtime.json

@@ -1,19 +1,37 @@
 {
-  "date": "2026-09-06",
-  "url": "https://ihaleist.com",
+  "base": "https://ihaleist.com",
+  "readOnly": true,
+  "checkedAt": "2026-09-06T16:13:35.286Z",
   "checks": {
-    "apiHealth": {"status": 200, "body": {"ok": true}},
-    "apiReady": {"status": 404, "body": {"success": false, "error": "not found"}},
-    "securityHeadersObserved": {
-      "apiHealth": {
-        "access-control-allow-origin": "*",
+    "home": {
+      "status": 200,
+      "headers": {
         "x-content-type-options": null,
         "referrer-policy": null,
         "permissions-policy": null
       }
     },
-    "servedAsset": "/assets/index-BtYUXYcw.js"
+    "health": {
+      "status": 200,
+      "headers": {
+        "x-content-type-options": null,
+        "referrer-policy": null,
+        "permissions-policy": null
+      }
+    },
+    "ready": {
+      "status": 404,
+      "headers": {
+        "x-content-type-options": null,
+        "referrer-policy": null,
+        "permissions-policy": null
+      }
+    }
   },
-  "scope": "Read-only live probe; no login, mutation, payment, message, or tender submission performed.",
-  "interpretation": "Live deployment does not yet contain the local readiness endpoint or the local API security headers. Deployment remains pending."
+  "pass": false,
+  "missingHeaders": [
+    "x-content-type-options",
+    "referrer-policy",
+    "permissions-policy"
+  ]
 }