Verification flow
- Open Dashboard -> Settings -> Domains.
- Add the exact hostname you plan to ship.
- Copy the TXT record shown in the dashboard.
- Publish the DNS record.
- Return to the dashboard and run verification.
Why this matters
- The worker rejects unknown origins at
/boot. - Verified domains prevent one tenant from reusing another tenant’s app id on an arbitrary site.
- Local development origins are still explicitly allowed in local mode so the test harness can boot.
Before launch
- Add every production hostname, including marketing-site preview hosts if the script will boot there.
- Verify the domain before copying the final install snippet.