1@README.md
2
3## Notes for agents
4
5**Every widening has a name and none is a string.** A policy cannot be written
6with `*` or a whole scheme; `allow_origin` returns an error. Do not add a
7method that takes raw policy text.
8
9**`'unsafe-eval'` is Datastar's, not the site's.** It is the one concession the
10framework makes for itself (`for_datastar`). Whether a build of Datastar exists
11that needs none is an open item in the brain's Aldebaran crate map.
12
13**The headers are lower-case names and plain strings** so each adapter converts
14them once (`http::HeaderName::from_static`, Worker headers).