[grade=A] feat(legal): DC-056 ToS + Privacy pages with deploy + regression guard

Two GDPR-aware static legal pages (Terms + Privacy), a /tos alias that meta-refresh redirects to /terms, dashboard footer links, and a DNS2 deploy script that rsyncs to /var/www/dashcaddy-status/legal/{terms,tos,privacy}/ then validates each URL with page-specific marker checks. Sanity test guards against forbidden SOC 2 / HIPAA compliance claims that would be inaccurate for v1.0 launch. Regex covers SOC[ -]?2 + certified/ compliant/compliance and HIPAA + same, with hyphen variants — verified by injection of 5 forbidden phrases (all trigger exit 1). Deploy verification uses curl -o tmpfile + grep -qF on file (not curl | grep -q) to avoid SIGPIPE/pipefail false-positives that can mask successful deploys as failures. Routes: status.sami/legal/{terms,tos,privacy} Aspirational legal.dashcaddy.net subdomain deferred to v1.x — needs DNS, Caddy vhost, LE cert infra. Single canonical host covers launch. Co-graded: Codex A urn:ump:khq6a3lwjwdkhd2hqwtds5pppzb7s2ft3t73sj5cz2hwgmb44owq
2026-07-31 01:07:46 -07:00
parent be798a9bc2
commit a2ab1f85eb
8 changed files with 120 additions and 3 deletions
@@ -0,0 +1 @@
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="refresh" content="0;url=/legal/terms"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="canonical" href="/legal/terms"><title>Terms of Service | DashCaddy</title></head><body><p>DashCaddy Legal: Continue to the <a href="/legal/terms">Terms of Service</a>.</p></body></html>
				`@@ -0,0 +1 @@`
				`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="refresh" content="0;url=/legal/terms"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="canonical" href="/legal/terms"><title>Terms of Service \| DashCaddy</title></head><body><p>DashCaddy Legal: Continue to the <a href="/legal/terms">Terms of Service</a>.</p></body></html>`