[Bridge-Node-7]

Summary

• build the Pages artifact from the immutable site/ source using the current GitHub Pages base_url
• keep the current deployment byte-identical when the public address is unchanged
• allow only canonical and Open Graph self-URL changes for a different deployment address
• verify current-origin identity and a synthetic portable origin in the required CI path

Boundaries

• no public hostname change
• no application-behavior change
• no Decision Receipt or Decision Context contract-ID change
• no historical token-contract provenance change
• existing native verify remains the required branch-protection gate

Release suitability

This is deployment portability only. Production publication remains gated by the existing Pages workflow and live browser verification.