Imported 1.0.2 exactly: all 437 files match the pinned commit, including all 90 export files. No build ran; contract addresses remain unchanged.

Typecheck and 301 unit tests passed. Browser checks passed 60/62; external RPC failures and inherited design limitations are documented in artifacts/validation.md.

README and DESIGN.md are updated. Submission fits under 8 MiB. dist/ is ready for the existing sworn publisher; the live switch occurs after submission.

I found nothing that should stop Sworn 1.0.2 from being hosted, and no defects I could reproduce. .imd-findings.json holds {"findings":[]} and I changed no other files.

Files match upstream. I fetched commit a4ee0244262b4e5cf8f3d22129814f5b74c7dec4 of banse/sworn and compared it folder by folder with this repo. dist/ and web/ are identical: the same 90 files in dist/, with no extra, missing or changed files. Since 1.0.1, the only changed dist/ files are index.html, the rebuilt assets/ bundles and their hashes in imd-deployment.json.

What I read:

• Pages and scripts: index.html, docs/app.js (local search only) and the source changes since 1.0.1. The new source files are ens-name.ts, which looks up a wallet's ENS name with offchain lookups turned off; CardShare.tsx and card-image.mjs, which build a card image in the browser to share or download; and the end-block timing added to chain.ts. The rest is label and title-case text.
• Wallet requests: the only token approval is in web/src/controllers/transactions.tsx:277-301. It approves exactly the IMD fee to the launch-2404 Registry, after first resetting any old allowance to zero, and each step is labelled honestly. The bundle asks for no seed phrase, private key, permit or misleading signature, and nothing in it downloads and runs code from elsewhere.
• Addresses: Registry 0x0da2679000ea5380d1361cc3cca7d4e8c881f766 is in imd-deployment.json and the main bundle. None of the three launch-2147 addresses appears in dist/ or web/src.
• Outside URLs: in the bundle these are public RPCs, api.imd.fun, ipfs.io/arweave.net, sworn.vibingco.de/api, and plain links (Etherscan, GitHub, X, imd.fun). The Coinbase and 4byte.sourcify.dev strings are wallet-connector and library code, not requests the site makes on load.

Browser check (Chromium at 1280 and 390 px, served locally): 7 of 9 routes loaded at both widths and showed the Sworn site with the right titles and headings. No page scrolled sideways and none logged a console error. Outside requests went only to ethereum-rpc.publicnode.com, gateway.tenderly.co and sworn.vibingco.de, and no script loaded from another origin.

What I couldn't confirm:

• #/register and #/curator didn't load at either width, and the 390 px home page failed once. Each time the whole browser process dropped out, and I didn't see a page error in those runs. This sandbox browser ran on hand-extracted system libraries without root, so I think the environment caused it, not the site. I didn't report these as findings.
• I didn't read the minified third-party library code (React, viem, wagmi) line by line. I reviewed the site's own source changes and searched the built bundles for risky calls, wallet requests and outside URLs.

Area	Result
Requirements	7 met; 0 missing; 0 faked; 2 after review
Broken features	0 substantiated
First screen, 390px	Product and action visible
taste@1	14/16 passed; 2 brief overrides
Copy findings	0 actionable
Share card	Present, 1200×630

No actionable defects found within the immutable-release brief. Wrote {"findings":[]} to .imd-findings.json.

• Met: “Replace web/” with version 1.0.2 from commit a4ee0244262b4e5cf8f3d22129814f5b74c7dec4: all 347 source files match the downloaded upstream archive.
• Met: Replace dist/ entirely: all 90 files match upstream, including root dist/index.html; no stale assets remain.
• Met: “No file added, changed or left out”: byte comparison passes for all 437 files across both folders.
• Met: “No build run here”: none run during review; artifacts/submission-audit.json records the builder’s corresponding declaration.
• After review: “Then host that dist/”: the complete export is ready for publishing.
• After review: Keep the project’s sworn name: the existing hosting identity is recorded in .imd/reads/project.md.
• Met: Browser-side Ethereum mainnet, public RPC, IMD API, IPFS and indexer integration remain in web/src/chain.ts, rpc.mjs, attested-records.mjs, fact-check/canvas-model.mjs and indexer.mjs.
• Met: Preserve launch 2404’s Registry 0x0da2679000ea5380d1361cc3cca7d4e8c881f766: confirmed in web/deployment-handoff.json and the rendered contract list; launch 2147’s Registry occurs nowhere in web/ or dist/.
• Met: “Decide, do not ask”: review completed without clarification.

Chromium and WebKit each passed eight visitor checks and 30 route/width measurements, with no horizontal overflow. At 390×844, “Explore wallet” occupies y=486.6–530.6. Public lookup, wallet prompts, preview interaction, history refresh and search worked. Simulated RPC failure recovered automatically. Signing and transactions were not tested.

The probe flags uppercase headings and monospace prose. The brief’s “used unchanged” requirement overrides those style checks.

Sworn is an Ethereum wallet-fact explorer carried by dense monospace records and a green evidence hive.