diff --git a/web/app/[locale]/layout.tsx b/web/app/[locale]/layout.tsx
index 3a69af7b1a..eb48af1013 100644
--- a/web/app/[locale]/layout.tsx
+++ b/web/app/[locale]/layout.tsx
@@ -1,14 +1,16 @@
 import type { Metadata } from "next";
 import localFont from "next/font/local";
+import { notFound } from "next/navigation";
 import { Nav } from "@/components/nav";
 import { Footer } from "@/components/footer";
 import { UsageCounting } from "@/components/usage-counting";
 import { BUILD_FACTS } from "@/lib/facts";
-import { localeDirection, locales, type Locale } from "@/lib/i18n/config";
+import { isValidLocale, localeDirection, locales } from "@/lib/i18n/config";
 import { getChrome, getHome } from "@/lib/i18n/dictionaries";
 import { serializeJsonLd } from "@/lib/json-ld";
 import { buildPageMetadata } from "@/lib/page-meta";
 import { buildSiteJsonLd } from "@/lib/site-schema";
+import { metadata as notFoundMetadata } from "./not-found";
 import "../globals.css";
 
 // Shannon Sans is the one face, as in the GPUI app (`set_theme`). The pinned
@@ -57,6 +59,10 @@ export function generateStaticParams() {
 
 export async function generateMetadata({ params }: { params: Promise<{ locale: string }> }): Promise<Metadata> {
   const { locale } = await params;
+  // The layout answers not-found for this; without the guard the home page's
+  // title, canonical, and hreflang stream into that 404 (`/wp-login.php`).
+  // Throwing here instead leaves the page with no title at all.
+  if (!isValidLocale(locale)) return notFoundMetadata;
   const home = getHome(locale);
   return buildPageMetadata({
     path: "/",
@@ -74,6 +80,10 @@ export default async function LocaleLayout({
   params: Promise<{ locale: string }>;
 }) {
   const { locale } = await params;
+  // Middleware leaves dotted paths alone, so `/wp-login.php` reaches this
+  // segment with that "locale". Without this it rendered the home page with
+  // HTTP 200 and `<html lang="wp-login.php">`.
+  if (!isValidLocale(locale)) notFound();
   const chrome = getChrome(locale);
   // RTL locales (e.g. ar) set the document direction from the canonical
   // registry so the browser handles bidirectional layout from the root.
@@ -106,9 +116,9 @@ export default async function LocaleLayout({
         <a href="#main-content" className="skip-link">
           {chrome.skipToContent}
         </a>
-        <Nav locale={locale as Locale} />
+        <Nav locale={locale} />
         <main id="main-content">{children}</main>
-        <Footer locale={locale as Locale} />
+        <Footer locale={locale} />
         {/* Aggregate usage counting, on by default — see lib/telemetry. The
             choice lives on the privacy page; every opt-out stays off. */}
         <UsageCounting appVersion={BUILD_FACTS.version ?? "0.0.0"} />
diff --git a/web/app/api/product-telemetry/route.ts b/web/app/api/product-telemetry/route.ts
index 4e525097c2..bf4d875f25 100644
--- a/web/app/api/product-telemetry/route.ts
+++ b/web/app/api/product-telemetry/route.ts
@@ -19,7 +19,11 @@ import { MAX_ENVELOPE_BYTES, validateEnvelope } from "@/lib/telemetry/product-us
  * holds it.
  */
 
-export const runtime = "edge";
+// No `runtime = "edge"`: @opennextjs/cloudflare does not support the edge
+// runtime. Its `migrate` command says to remove the declaration, and its
+// server bundle replaces Next's edge runtime with an empty shim. How the
+// deployed route behaved while it was declared has not been checked. The
+// default runtime already has fetch, Request, and TextDecoder.
 
 export const CANONICAL_INGEST_URL = "https://telemetry.codewhale.net/v1/telemetry";
 const FORWARD_TIMEOUT_MS = 1500;
diff --git a/web/app/not-found.tsx b/web/app/not-found.tsx
new file mode 100644
index 0000000000..70b295ae40
--- /dev/null
+++ b/web/app/not-found.tsx
@@ -0,0 +1,23 @@
+import { defaultLocale } from "@/lib/i18n/config";
+import { NotFoundRoute } from "@/components/route-state";
+import LocaleLayout from "./[locale]/layout";
+
+export { metadata } from "./[locale]/not-found";
+
+/**
+ * Root not-found boundary. `[locale]/layout.tsx` calls `notFound()` for a first
+ * segment that is not a locale (`/wp-login.php`); a layout's own not-found
+ * boundary cannot catch what the layout throws, so the error lands here. The
+ * root layout renders no document, so this wraps the not-found state in the
+ * default locale's shell — nav, footer, and dictionary copy, like
+ * `/en/nonexistent` — instead of the framework's bare page.
+ */
+export default function RootNotFound() {
+  return (
+    <LocaleLayout params={Promise.resolve({ locale: defaultLocale })}>
+      <div className="route-state">
+        <NotFoundRoute />
+      </div>
+    </LocaleLayout>
+  );
+}
diff --git a/web/lib/content/usage-counting.ts b/web/lib/content/usage-counting.ts
index b4de62a7b4..6252557768 100644
--- a/web/lib/content/usage-counting.ts
+++ b/web/lib/content/usage-counting.ts
@@ -14,8 +14,8 @@ export const USAGE_COUNTING_COPY = {
   footerLink: { en: "Usage data", zh: "使用数据" },
   heading: { en: "Usage counting on this site", zh: "本站的使用统计" },
   summary: {
-    en: "This site counts page views, documentation views, install-command copies, and downloads as plain totals. Counting is on by default. Only those totals leave your browser — no page addresses, referrers, account, or content — sent to Codewhale's own endpoint, which may pass them to PostHog. A random install id, unrelated to you, rotates every 90 days.",
-    zh: "本站会把页面浏览、文档浏览、安装命令复制和下载次数作为纯总数统计，默认开启。离开浏览器的只有这些总数——没有页面地址、来源、账户或内容——发送到 Codewhale 自己的端点，该端点可能把总数交给 PostHog 处理。与你无关的随机安装 id 每 90 天轮换一次。",
+    en: "This site counts page views, documentation views, install-command copies, sign-in and sign-up link clicks, and error pages shown as plain totals. Counting is on by default. Only those totals leave your browser — no page addresses, referrers, account, or content — sent to Codewhale's own endpoint, which may pass them to PostHog. A random install id, unrelated to you, rotates every 90 days.",
+    zh: "本站会把页面浏览、文档浏览、安装命令复制、登录和注册链接点击以及错误页面显示次数作为纯总数统计，默认开启。离开浏览器的只有这些总数——没有页面地址、来源、账户或内容——发送到 Codewhale 自己的端点，该端点可能把总数交给 PostHog 处理。与你无关的随机安装 id 每 90 天轮换一次。",
   },
   choice: {
     en: "Turning it off is kept in this browser and clears any queued counts and the install id. Nothing here records that you accepted anything.",
diff --git a/web/lib/facts-drift.test.ts b/web/lib/facts-drift.test.ts
index 7d4edb5b12..a6cfc96095 100644
--- a/web/lib/facts-drift.test.ts
+++ b/web/lib/facts-drift.test.ts
@@ -1,5 +1,7 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { deriveFactsFromRemote } from "./facts-drift";
+import { PROVIDER_LABEL_MAP } from "../scripts/facts-lib.mjs";
+import { isRepoFacts } from "./facts";
+import { deriveFactsFromRemote, PROVIDER_LABELS, runFactsDrift } from "./facts-drift";
 
 const REVISION = "b".repeat(40);
 
@@ -7,7 +9,14 @@ function response(body: string, status = 200): Response {
   return new Response(body, { status });
 }
 
-function installGitHubFixture(toolCountSource: string | null): void {
+const VALID_GENERATED_FACTS =
+  'export const FACTS: RepoFacts = {"toolCount":73,"models":[]};';
+
+function installGitHubFixture(
+  toolCountSource: string | null,
+  releaseHtmlUrl = "https://github.com/Hmbown/CodeWhale/releases/tag/v0.9.0",
+  sourceOverrides: Record<string, string> = {},
+): void {
   vi.stubGlobal(
     "fetch",
     vi.fn(async (input: string | URL | Request) => {
@@ -25,7 +34,7 @@ function installGitHubFixture(toolCountSource: string | null): void {
           JSON.stringify({
             tag_name: "v0.9.0",
             published_at: "2026-07-16T20:05:39Z",
-            html_url: "https://github.com/Hmbown/CodeWhale/releases/tag/v0.9.0",
+            html_url: releaseHtmlUrl,
           }),
         );
       }
@@ -43,6 +52,7 @@ function installGitHubFixture(toolCountSource: string | null): void {
         `,
         "npm/codewhale/package.json": JSON.stringify({ engines: { node: ">=18" } }),
         LICENSE: "MIT License\n",
+        ...sourceOverrides,
       };
       if (rawPath === "web/lib/facts.generated.ts") {
         return toolCountSource === null ? response("not found", 404) : response(toolCountSource);
@@ -105,4 +115,72 @@ describe("deriveFactsFromRemote", () => {
 
     await expect(deriveFactsFromRemote()).resolves.toBeNull();
   });
+
+  it("stores a canonical release URL when GitHub answers with the repo's other casing", async () => {
+    installGitHubFixture(
+      VALID_GENERATED_FACTS,
+      "https://github.com/Hmbown/Codewhale/releases/tag/v0.9.0",
+    );
+
+    const facts = await deriveFactsFromRemote();
+
+    expect(facts?.latestPublishedRelease?.url).toBe(
+      "https://github.com/Hmbown/CodeWhale/releases/tag/v0.9.0",
+    );
+    expect(isRepoFacts(facts)).toBe(true);
+  });
+});
+
+describe("runFactsDrift", () => {
+  it("writes a KV snapshot that getFacts() accepts", async () => {
+    installGitHubFixture(
+      VALID_GENERATED_FACTS,
+      "https://github.com/Hmbown/Codewhale/releases/tag/v0.9.0",
+    );
+    const store = new Map<string, string>();
+    const kv = {
+      get: async (key: string) => store.get(key) ?? null,
+      put: async (key: string, value: string) => {
+        store.set(key, value);
+      },
+    };
+
+    const result = await runFactsDrift({ CURATED_KV: kv });
+
+    expect(result.ok).toBe(true);
+    expect(isRepoFacts(JSON.parse(store.get("facts:current") ?? "null"))).toBe(true);
+  });
+
+  // The scheduled handler discards the result, so the log line is the only
+  // signal that the cron stopped refreshing KV.
+  it("warns and writes nothing when the derived facts fail validation", async () => {
+    installGitHubFixture(VALID_GENERATED_FACTS, undefined, {
+      // A non-string engines.node survives derivation but fails isRepoFacts.
+      "npm/codewhale/package.json": JSON.stringify({ engines: { node: 18 } }),
+    });
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    const store = new Map<string, string>();
+    const kv = {
+      get: async (key: string) => store.get(key) ?? null,
+      put: async (key: string, value: string) => {
+        store.set(key, value);
+      },
+    };
+
+    const result = await runFactsDrift({ CURATED_KV: kv });
+
+    expect(result).toEqual({ ok: false, reason: "remote facts failed validation" });
+    expect(store.size).toBe(0);
+    expect(warn).toHaveBeenCalledWith(
+      expect.stringContaining("[facts-drift] remote facts failed validation"),
+    );
+    warn.mockRestore();
+  });
+});
+
+describe("PROVIDER_LABELS", () => {
+  it("matches the build-time PROVIDER_LABEL_MAP, so cron snapshots keep every provider", () => {
+    expect(Object.keys(PROVIDER_LABEL_MAP).length).toBeGreaterThan(0);
+    expect(PROVIDER_LABELS).toEqual(PROVIDER_LABEL_MAP);
+  });
 });
diff --git a/web/lib/facts-drift.ts b/web/lib/facts-drift.ts
index 5bdb2610b8..162f2fe88f 100644
--- a/web/lib/facts-drift.ts
+++ b/web/lib/facts-drift.ts
@@ -19,8 +19,10 @@ import type {
   ModelFact,
 } from "./facts.generated";
 import { FACTS as BUILD_FACTS } from "./facts.generated";
+import { isRepoFacts } from "./facts";
 
 const RAW_ROOT = "https://raw.githubusercontent.com/Hmbown/CodeWhale";
+const RELEASE_TAG_ROOT = "https://github.com/Hmbown/CodeWhale/releases/tag";
 const KV_KEY = "facts:current";
 const LOG_KEY = "facts:drift-log";
 
@@ -96,65 +98,72 @@ function deriveCrates(cargo: string): string[] {
   return [...block[1].matchAll(/"crates\/([^"]+)"/g)].map((m) => m[1]).sort();
 }
 
+// Match what the published CLI binary's `--provider` flag accepts
+// (ProviderArg in crates/cli/src/lib.rs). DeepseekCN exists in the
+// legacy tui ApiProvider enum but is not wired through ProviderKind,
+// so the binary rejects it — keep it out of the docs. Issue #1104.
+//
+// Must equal PROVIDER_LABEL_MAP in web/scripts/facts-lib.mjs; a variant missing
+// here is dropped from the cron-written KV snapshot while the build facts keep
+// it (facts-drift.test.ts compares the two).
+export const PROVIDER_LABELS: Readonly<Record<string, ProviderFact>> = {
+  Deepseek: { id: "deepseek", label: "DeepSeek", env: "DEEPSEEK_API_KEY" },
+  DeepseekAnthropic: { id: "deepseek-anthropic", label: "DeepSeek Anthropic", env: "DEEPSEEK_API_KEY / ANTHROPIC_API_KEY" },
+  NvidiaNim: { id: "nvidia-nim", label: "NVIDIA NIM", env: "NVIDIA_API_KEY / NVIDIA_NIM_API_KEY" },
+  Openai: { id: "openai", label: "OpenAI-compatible", env: "OPENAI_API_KEY" },
+  Atlascloud: { id: "atlascloud", label: "AtlasCloud", env: "ATLASCLOUD_API_KEY" },
+  WanjieArk: { id: "wanjie-ark", label: "Wanjie Ark", env: "WANJIE_ARK_API_KEY / WANJIE_API_KEY / WANJIE_MAAS_API_KEY" },
+  Volcengine: { id: "volcengine", label: "Volcengine Ark", env: "VOLCENGINE_API_KEY / VOLCENGINE_ARK_API_KEY / ARK_API_KEY" },
+  Openrouter: { id: "openrouter", label: "OpenRouter", env: "OPENROUTER_API_KEY" },
+  Orcarouter: { id: "orcarouter", label: "OrcaRouter", env: "ORCAROUTER_API_KEY" },
+  XiaomiMimo: { id: "xiaomi-mimo", label: "Xiaomi MiMo", env: "XIAOMI_MIMO_TOKEN_PLAN_API_KEY / MIMO_TOKEN_PLAN_API_KEY / XIAOMI_MIMO_API_KEY / XIAOMI_API_KEY / MIMO_API_KEY" },
+  Novita: { id: "novita", label: "Novita AI", env: "NOVITA_API_KEY" },
+  Fireworks: { id: "fireworks", label: "Fireworks AI", env: "FIREWORKS_API_KEY" },
+  Siliconflow: { id: "siliconflow", label: "SiliconFlow", env: "SILICONFLOW_API_KEY" },
+  SiliconflowCn: { id: "siliconflow-CN", label: "SiliconFlow CN", env: "SILICONFLOW_API_KEY" },
+  Arcee: { id: "arcee", label: "Arcee AI", env: "ARCEE_API_KEY" },
+  Moonshot: { id: "moonshot", label: "Moonshot/Kimi", env: "MOONSHOT_API_KEY / KIMI_API_KEY" },
+  Sglang: { id: "sglang", label: "SGLang", env: "SGLANG_API_KEY" },
+  Vllm: { id: "vllm", label: "vLLM", env: "VLLM_API_KEY" },
+  Ollama: { id: "ollama", label: "Ollama", env: "OLLAMA_API_KEY" },
+  OllamaCloud: { id: "ollama-cloud", label: "Ollama Cloud", env: "OLLAMA_CLOUD_API_KEY / OLLAMA_API_KEY" },
+  Huggingface: { id: "huggingface", label: "Hugging Face", env: "HUGGINGFACE_API_KEY / HF_TOKEN" },
+  Modelscope: { id: "modelscope", label: "ModelScope", env: "MODELSCOPE_API_KEY" },
+  Deepinfra: { id: "deepinfra", label: "DeepInfra", env: "DEEPINFRA_API_KEY / DEEPINFRA_TOKEN" },
+  Together: { id: "together", label: "Together AI", env: "TOGETHER_API_KEY" },
+  Qianfan: { id: "qianfan", label: "Baidu Qianfan", env: "QIANFAN_API_KEY / BAIDU_QIANFAN_API_KEY" },
+  OpenaiCodex: { id: "openai-codex", label: "OpenAI Codex", env: "ChatGPT OAuth via `codewhale auth chatgpt`; optional consented Codex CLI credentials (OPENAI_CODEX_ACCESS_TOKEN / CODEX_ACCESS_TOKEN override)" },
+  OpencodeGo: { id: "opencode-go", label: "OpenCode Go", env: "OPENCODE_GO_API_KEY" },
+  OpencodeZen: { id: "opencode-zen", label: "OpenCode Zen", env: "OPENCODE_ZEN_API_KEY / OPENCODE_API_KEY" },
+  Anthropic: { id: "anthropic", label: "Anthropic", env: "ANTHROPIC_API_KEY" },
+  Zai: { id: "zai", label: "Z.ai", env: "ZAI_API_KEY / Z_AI_API_KEY" },
+  Stepfun: { id: "stepfun", label: "StepFun", env: "STEPFUN_API_KEY / STEP_API_KEY" },
+  Minimax: { id: "minimax", label: "MiniMax", env: "MINIMAX_API_KEY" },
+  MinimaxAnthropic: { id: "minimax-anthropic", label: "MiniMax (Anthropic-compatible)", env: "MINIMAX_API_KEY" },
+  Openmodel: { id: "openmodel", label: "OpenModel", env: "OPENMODEL_API_KEY" },
+  Sakana: { id: "sakana", label: "Sakana AI", env: "FUGU_API_KEY / SAKANA_API_KEY" },
+  LongCat: { id: "longcat", label: "Meituan LongCat", env: "LONGCAT_API_KEY" },
+  Meta: { id: "meta", label: "Meta Model API", env: "META_MODEL_API_KEY / MODEL_API_KEY" },
+  Telecomjs: { id: "telecomjs", label: "TelecomJS TokenHub", env: "TELECOMJS_API_KEY" },
+  Xai: { id: "xai", label: "xAI", env: "XAI_API_KEY" },
+  Mistral: { id: "mistral", label: "Mistral AI", env: "MISTRAL_API_KEY" },
+  Google: { id: "google", label: "Google Gemini", env: "GOOGLE_API_KEY / GEMINI_API_KEY" },
+  Edenai: { id: "edenai", label: "Eden AI", env: "EDENAI_API_KEY" },
+  Concentrate: { id: "concentrate", label: "Concentrate", env: "CONCENTRATE_API_KEY" },
+  Codewhale: { id: "codewhale", label: "Codewhale", env: "CODEWHALE_API_KEY" },
+  ModelstudioTokenPlan: { id: "modelstudio-token-plan", label: "Model Studio Token Plan", env: "MODELSTUDIO_API_KEY" },
+  ModelstudioTokenPlanAnthropic: { id: "modelstudio-token-plan-anthropic", label: "Model Studio Token Plan (Anthropic-compatible)", env: "MODELSTUDIO_API_KEY" },
+  ModelstudioCodingPlan: { id: "modelstudio-coding-plan", label: "Model Studio Coding Plan", env: "MODELSTUDIO_API_KEY" },
+  ModelstudioCodingPlanAnthropic: { id: "modelstudio-coding-plan-anthropic", label: "Model Studio Coding Plan (Anthropic-compatible)", env: "MODELSTUDIO_API_KEY" },
+  Zenmux: { id: "zenmux", label: "ZenMux", env: "ZENMUX_API_KEY" },
+  Csdn: { id: "csdn", label: "CSDN 星图 (Starmap)", env: "CSDN_API_KEY" },
+};
+
 function deriveProvidersFromConfig(cfg: string): ProviderFact[] {
   const enumBlock = cfg.match(/pub enum ApiProvider \{([\s\S]*?)\}/);
   if (!enumBlock) return [];
   const variants = [...enumBlock[1].matchAll(/^\s*(\w+)\s*,\s*$/gm)].map((m) => m[1]);
-  // Match what the published CLI binary's `--provider` flag accepts
-  // (ProviderArg in crates/cli/src/lib.rs). DeepseekCN exists in the
-  // legacy tui ApiProvider enum but is not wired through ProviderKind,
-  // so the binary rejects it — keep it out of the docs. Issue #1104.
-  const labelMap: Record<string, ProviderFact> = {
-    Deepseek: { id: "deepseek", label: "DeepSeek", env: "DEEPSEEK_API_KEY" },
-    DeepseekAnthropic: { id: "deepseek-anthropic", label: "DeepSeek Anthropic", env: "DEEPSEEK_API_KEY / ANTHROPIC_API_KEY" },
-    NvidiaNim: { id: "nvidia-nim", label: "NVIDIA NIM", env: "NVIDIA_API_KEY / NVIDIA_NIM_API_KEY" },
-    Openai: { id: "openai", label: "OpenAI-compatible", env: "OPENAI_API_KEY" },
-    Atlascloud: { id: "atlascloud", label: "AtlasCloud", env: "ATLASCLOUD_API_KEY" },
-    WanjieArk: { id: "wanjie-ark", label: "Wanjie Ark", env: "WANJIE_ARK_API_KEY / WANJIE_API_KEY / WANJIE_MAAS_API_KEY" },
-    Volcengine: { id: "volcengine", label: "Volcengine Ark", env: "VOLCENGINE_API_KEY / VOLCENGINE_ARK_API_KEY / ARK_API_KEY" },
-    Openrouter: { id: "openrouter", label: "OpenRouter", env: "OPENROUTER_API_KEY" },
-    Orcarouter: { id: "orcarouter", label: "OrcaRouter", env: "ORCAROUTER_API_KEY" },
-    XiaomiMimo: { id: "xiaomi-mimo", label: "Xiaomi MiMo", env: "XIAOMI_MIMO_TOKEN_PLAN_API_KEY / MIMO_TOKEN_PLAN_API_KEY / XIAOMI_MIMO_API_KEY / XIAOMI_API_KEY / MIMO_API_KEY" },
-    Novita: { id: "novita", label: "Novita AI", env: "NOVITA_API_KEY" },
-    Fireworks: { id: "fireworks", label: "Fireworks AI", env: "FIREWORKS_API_KEY" },
-    Siliconflow: { id: "siliconflow", label: "SiliconFlow", env: "SILICONFLOW_API_KEY" },
-    SiliconflowCn: { id: "siliconflow-CN", label: "SiliconFlow CN", env: "SILICONFLOW_API_KEY" },
-    Arcee: { id: "arcee", label: "Arcee AI", env: "ARCEE_API_KEY" },
-    Moonshot: { id: "moonshot", label: "Moonshot/Kimi", env: "MOONSHOT_API_KEY / KIMI_API_KEY" },
-    Sglang: { id: "sglang", label: "SGLang", env: "SGLANG_API_KEY" },
-    Vllm: { id: "vllm", label: "vLLM", env: "VLLM_API_KEY" },
-    Ollama: { id: "ollama", label: "Ollama", env: "OLLAMA_API_KEY" },
-    OllamaCloud: { id: "ollama-cloud", label: "Ollama Cloud", env: "OLLAMA_CLOUD_API_KEY / OLLAMA_API_KEY" },
-    Huggingface: { id: "huggingface", label: "Hugging Face", env: "HUGGINGFACE_API_KEY / HF_TOKEN" },
-    Deepinfra: { id: "deepinfra", label: "DeepInfra", env: "DEEPINFRA_API_KEY / DEEPINFRA_TOKEN" },
-    Together: { id: "together", label: "Together AI", env: "TOGETHER_API_KEY" },
-    Qianfan: { id: "qianfan", label: "Baidu Qianfan", env: "QIANFAN_API_KEY / BAIDU_QIANFAN_API_KEY" },
-    OpenaiCodex: { id: "openai-codex", label: "OpenAI Codex", env: "ChatGPT OAuth via `codewhale auth chatgpt`; optional consented Codex CLI credentials (OPENAI_CODEX_ACCESS_TOKEN / CODEX_ACCESS_TOKEN override)" },
-    OpencodeGo: { id: "opencode-go", label: "OpenCode Go", env: "OPENCODE_GO_API_KEY" },
-    OpencodeZen: { id: "opencode-zen", label: "OpenCode Zen", env: "OPENCODE_ZEN_API_KEY / OPENCODE_API_KEY" },
-    Anthropic: { id: "anthropic", label: "Anthropic", env: "ANTHROPIC_API_KEY" },
-    Zai: { id: "zai", label: "Z.ai", env: "ZAI_API_KEY / Z_AI_API_KEY" },
-    Stepfun: { id: "stepfun", label: "StepFun", env: "STEPFUN_API_KEY / STEP_API_KEY" },
-    Minimax: { id: "minimax", label: "MiniMax", env: "MINIMAX_API_KEY" },
-    MinimaxAnthropic: { id: "minimax-anthropic", label: "MiniMax (Anthropic-compatible)", env: "MINIMAX_API_KEY" },
-    Openmodel: { id: "openmodel", label: "OpenModel", env: "OPENMODEL_API_KEY" },
-    Sakana: { id: "sakana", label: "Sakana AI", env: "FUGU_API_KEY / SAKANA_API_KEY" },
-    LongCat: { id: "longcat", label: "Meituan LongCat", env: "LONGCAT_API_KEY" },
-    Meta: { id: "meta", label: "Meta Model API", env: "META_MODEL_API_KEY / MODEL_API_KEY" },
-    Telecomjs: { id: "telecomjs", label: "TelecomJS TokenHub", env: "TELECOMJS_API_KEY" },
-    Xai: { id: "xai", label: "xAI", env: "XAI_API_KEY" },
-    Mistral: { id: "mistral", label: "Mistral AI", env: "MISTRAL_API_KEY" },
-    Google: { id: "google", label: "Google Gemini", env: "GOOGLE_API_KEY / GEMINI_API_KEY" },
-    Edenai: { id: "edenai", label: "Eden AI", env: "EDENAI_API_KEY" },
-    Concentrate: { id: "concentrate", label: "Concentrate", env: "CONCENTRATE_API_KEY" },
-    Codewhale: { id: "codewhale", label: "Codewhale", env: "CODEWHALE_API_KEY" },
-    ModelstudioTokenPlan: { id: "modelstudio-token-plan", label: "Model Studio Token Plan", env: "MODELSTUDIO_API_KEY" },
-    ModelstudioTokenPlanAnthropic: { id: "modelstudio-token-plan-anthropic", label: "Model Studio Token Plan (Anthropic-compatible)", env: "MODELSTUDIO_API_KEY" },
-    ModelstudioCodingPlan: { id: "modelstudio-coding-plan", label: "Model Studio Coding Plan", env: "MODELSTUDIO_API_KEY" },
-    ModelstudioCodingPlanAnthropic: { id: "modelstudio-coding-plan-anthropic", label: "Model Studio Coding Plan (Anthropic-compatible)", env: "MODELSTUDIO_API_KEY" },
-    Zenmux: { id: "zenmux", label: "ZenMux", env: "ZENMUX_API_KEY" },
-    Csdn: { id: "csdn", label: "CSDN 星图 (Starmap)", env: "CSDN_API_KEY" },
-  };
+  const labelMap = PROVIDER_LABELS;
   // Log loudly on unmapped variants so a new provider can never be silently
   // dropped from the drift-derived facts again. DeepseekCN (#1104), the
   // dynamic Custom meta-provider (#1519, user-defined endpoints), and
@@ -165,7 +174,7 @@ function deriveProvidersFromConfig(cfg: string): ProviderFact[] {
   if (unmapped.length > 0) {
     console.warn(
       `[facts-drift] ApiProvider variants missing from labelMap: ${unmapped.join(", ")}. ` +
-        "Add them to labelMap here AND PROVIDER_LABEL_MAP in web/scripts/facts-lib.mjs (or to EXCLUDED if intentionally hidden).",
+        "Add them to PROVIDER_LABELS here AND PROVIDER_LABEL_MAP in web/scripts/facts-lib.mjs (or to EXCLUDED if intentionally hidden).",
     );
   }
   return variants
@@ -204,14 +213,12 @@ async function fetchLatestPublishedRelease(
     const j = (await r.json()) as {
       tag_name?: string;
       published_at?: string;
-      html_url?: string;
     };
     if (
       !j.tag_name ||
       !/^v\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(j.tag_name) ||
       !j.published_at ||
-      !Number.isFinite(Date.parse(j.published_at)) ||
-      !j.html_url
+      !Number.isFinite(Date.parse(j.published_at))
     ) {
       return null;
     }
@@ -219,7 +226,10 @@ async function fetchLatestPublishedRelease(
       tag: j.tag_name,
       version: j.tag_name.slice(1),
       publishedAt: j.published_at,
-      url: j.html_url,
+      // Built from the tag, not `html_url`: GitHub answers with the repo's
+      // canonical casing (`Hmbown/Codewhale`), which the exact-URL check in
+      // isRepoFacts rejects, invalidating the whole KV snapshot.
+      url: `${RELEASE_TAG_ROOT}/${j.tag_name}`,
     };
   } catch {
     return null;
@@ -380,6 +390,19 @@ export async function runFactsDrift(env: { CURATED_KV?: KVNamespace; GITHUB_TOKE
 
   const remote = await deriveFactsFromRemote(env.GITHUB_TOKEN);
   if (!remote) return { ok: false, reason: "remote derivation failed" };
+  // getFacts() discards a snapshot isRepoFacts rejects, so never store one.
+  // The scheduled handler drops this result, so say it here: otherwise the
+  // cron stops refreshing KV with no signal at all.
+  const { sourceRevision, sourceCommittedAt, version } = remote;
+  if (!isRepoFacts(remote)) {
+    const reason = "remote facts failed validation";
+    console.warn(
+      `[facts-drift] ${reason}; KV snapshot not refreshed ` +
+        `(sourceRevision=${String(sourceRevision)}, ` +
+        `sourceCommittedAt=${String(sourceCommittedAt)}, version=${String(version)})`,
+    );
+    return { ok: false, reason };
+  }
 
   const cachedRaw = await env.CURATED_KV.get(KV_KEY);
   let cached: RepoFacts = BUILD_FACTS;
diff --git a/web/lib/legal-copy.ts b/web/lib/legal-copy.ts
index c445b3b35e..8fcb92249c 100644
--- a/web/lib/legal-copy.ts
+++ b/web/lib/legal-copy.ts
@@ -48,7 +48,7 @@ export const PRIVACY_SECTIONS = [
   },
   {
     title: "Anonymous usage counting",
-    body: "Codewhale counts anonymous product usage by default. On this website that means plain totals of page views, documentation views, install-command copies, and downloads, sent with a random install identifier that rotates every 90 days to Codewhale’s own endpoint; Codewhale may pass those totals to PostHog as a processor. No page addresses, referrers, account, or content are included. In the Codewhale runtime and app the same rule covers aggregate version, platform, session, feature, and error counts, which never include conversations, code, prompts, files, repository or branch names, model content, or credentials. You can turn counting off at any time: for this browser on this page, in the app under Settings, or in the runtime with `codewhale config set telemetry false` or CODEWHALE_TELEMETRY=0. An opt-out is kept and never silently reversed, and presenting this notice does not record any acceptance on your behalf.",
+    body: "Codewhale counts anonymous product usage by default. On this website that means plain totals of page views, documentation views, install-command copies, sign-in and sign-up link clicks, and error pages shown, sent with a random install identifier that rotates every 90 days to Codewhale’s own endpoint; Codewhale may pass those totals to PostHog as a processor. No page addresses, referrers, account, or content are included. In the Codewhale runtime and app the same rule covers aggregate version, platform, session, feature, and error counts, which never include conversations, code, prompts, files, repository or branch names, model content, or credentials. You can turn counting off at any time: for this browser on this page, in the app under Settings, or in the runtime with `codewhale config set telemetry false` or CODEWHALE_TELEMETRY=0. An opt-out is kept and never silently reversed, and presenting this notice does not record any acceptance on your behalf.",
   },
   {
     title: "Model providers and repositories",
diff --git a/web/lib/locale-layout.test.ts b/web/lib/locale-layout.test.ts
new file mode 100644
index 0000000000..3b04ec9855
--- /dev/null
+++ b/web/lib/locale-layout.test.ts
@@ -0,0 +1,42 @@
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock("next/font/local", () => ({ default: () => ({ variable: "font" }) }));
+
+const { default: LocaleLayout, generateMetadata } = await import("@/app/[locale]/layout");
+const { default: RootNotFound } = await import("@/app/not-found");
+
+function render(locale: string) {
+  return LocaleLayout({ children: null, params: Promise.resolve({ locale }) });
+}
+
+describe("locale layout", () => {
+  // Middleware skips dotted paths, so `/wp-login.php` reaches `[locale]`.
+  it("answers not-found for a segment that is not a locale", async () => {
+    await expect(render("wp-login.php")).rejects.toMatchObject({
+      digest: expect.stringContaining("404"),
+    });
+  });
+
+  // The layout cannot catch its own notFound(), so the root boundary answers.
+  // Without app/not-found.tsx that was the framework's bare page, with no
+  // document shell, nav, or footer.
+  it("answers that not-found inside the default locale's shell", async () => {
+    const element = RootNotFound();
+    expect(element.type).toBe(LocaleLayout);
+    const document = await LocaleLayout(element.props);
+    expect(document.type).toBe("html");
+    expect(document.props.lang).toBe("en");
+  });
+
+  // Otherwise the home page's title, canonical, and hreflang stream into it.
+  it("gives that not-found the not-found metadata, not the home page's", async () => {
+    const metadata = await generateMetadata({ params: Promise.resolve({ locale: "wp-login.php" }) });
+    expect(metadata.title).toBe("Not found · Codewhale");
+    expect(metadata.alternates).toEqual({});
+  });
+
+  it("renders a real locale", async () => {
+    const element = await render("en");
+    expect(element.props.lang).toBe("en");
+  });
+});
diff --git a/web/lib/product-telemetry-route.test.ts b/web/lib/product-telemetry-route.test.ts
new file mode 100644
index 0000000000..a35908c3a0
--- /dev/null
+++ b/web/lib/product-telemetry-route.test.ts
@@ -0,0 +1,65 @@
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { handleProductTelemetry } from "@/app/api/product-telemetry/route";
+
+const APP_DIR = fileURLToPath(new URL("../app", import.meta.url));
+
+function sourceFiles(dir: string): string[] {
+  return readdirSync(dir, { withFileTypes: true }).flatMap((entry) => {
+    const path = join(dir, entry.name);
+    if (entry.isDirectory()) return sourceFiles(path);
+    return /\.(m?[jt]sx?)$/.test(entry.name) ? [path] : [];
+  });
+}
+
+// `export const runtime = "edge"`, `runtime: 'experimental-edge'`, and so on.
+// Route segment config only takes effect in app/ files, so that is the scan.
+const EDGE_RUNTIME =
+  /(?:\bexport\s+const\s+runtime\s*=|\bruntime\s*:)\s*["'](?:experimental-)?edge["']/;
+
+describe("/api/product-telemetry", () => {
+  it("recognizes edge and experimental-edge declarations", () => {
+    for (const source of [
+      'export const runtime = "edge";',
+      "export const runtime = 'experimental-edge';",
+      'export const config = { runtime: "edge" };',
+    ]) {
+      expect(EDGE_RUNTIME.test(source), source).toBe(true);
+    }
+    expect(EDGE_RUNTIME.test('export const runtime = "nodejs";')).toBe(false);
+  });
+
+  // @opennextjs/cloudflare does not support the edge runtime (its migrate
+  // command says to remove the declaration). This is a source guard; it does
+  // not exercise the adapter or the deployed worker.
+  it("no app route or page opts into the edge runtime", () => {
+    const edge = sourceFiles(APP_DIR).filter((file) =>
+      EDGE_RUNTIME.test(readFileSync(file, "utf8")),
+    );
+    expect(edge).toEqual([]);
+  });
+
+  it("answers an empty POST without a server error", async () => {
+    const post = () =>
+      new Request("https://codewhale.net/api/product-telemetry", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: "{}",
+      });
+
+    const disabled = await handleProductTelemetry(post(), { ingestUrl: null });
+    expect(disabled.status).toBe(200);
+    expect(await disabled.json()).toEqual({ accepted: false, reason: "disabled" });
+
+    const enabled = await handleProductTelemetry(post(), {
+      ingestUrl: "https://telemetry.codewhale.net/v1/telemetry",
+      forward: async () => {
+        throw new Error("an invalid envelope must not be forwarded");
+      },
+    });
+    expect(enabled.status).toBe(422);
+    expect(await enabled.json()).toEqual({ accepted: false, reason: "schema" });
+  });
+});
diff --git a/web/lib/usage-counting-copy.test.ts b/web/lib/usage-counting-copy.test.ts
new file mode 100644
index 0000000000..89e4b7a053
--- /dev/null
+++ b/web/lib/usage-counting-copy.test.ts
@@ -0,0 +1,65 @@
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { USAGE_COUNTING_COPY } from "./content/usage-counting";
+import { PRIVACY_SECTIONS } from "./legal-copy";
+import { PRODUCT_COUNTER_FIELDS, type ProductCounter } from "./telemetry/product-usage";
+
+// How the public copy names each counter the website can send.
+const WEBSITE_COUNTER_WORDING: Partial<Record<ProductCounter, { en: string; zh: string }>> = {
+  page_view: { en: "page views", zh: "页面浏览" },
+  docs_view: { en: "documentation views", zh: "文档浏览" },
+  install_copy: { en: "install-command copies", zh: "安装命令复制" },
+  download: { en: "downloads", zh: "下载" },
+  login: { en: "sign-in", zh: "登录" },
+  signup: { en: "sign-up", zh: "注册" },
+  error_shown: { en: "error pages shown", zh: "错误页面" },
+};
+
+function sources(dir: string): string[] {
+  return readdirSync(dir, { withFileTypes: true }).flatMap((entry) => {
+    const path = join(dir, entry.name);
+    if (entry.isDirectory()) return sources(path);
+    return /\.tsx?$/.test(entry.name) && !/\.test\.tsx?$/.test(entry.name) ? [path] : [];
+  });
+}
+
+/** Counters the website records: route views plus every call site and marker. */
+function recordedCounters(): Set<string> {
+  const recorded = new Set<string>(["page_view", "docs_view"]);
+  for (const dir of ["../app", "../components"]) {
+    for (const file of sources(fileURLToPath(new URL(dir, import.meta.url)))) {
+      const text = readFileSync(file, "utf8");
+      for (const m of text.matchAll(/recordUsage\("(\w+)"\)|data-usage="(\w+)"/g)) {
+        recorded.add(m[1] ?? m[2]);
+      }
+      for (const m of text.matchAll(/data-usage=\{[^}]*\}/g)) {
+        for (const q of m[0].matchAll(/"(\w+)"/g)) recorded.add(q[1]);
+      }
+    }
+  }
+  return recorded;
+}
+
+describe("usage-counting copy", () => {
+  const recorded = recordedCounters();
+  const privacy = PRIVACY_SECTIONS.find((s) => s.title === "Anonymous usage counting")?.body ?? "";
+
+  it("only names website counters the copy knows how to describe", () => {
+    for (const counter of recorded) {
+      expect(PRODUCT_COUNTER_FIELDS as readonly string[]).toContain(counter);
+      expect(WEBSITE_COUNTER_WORDING).toHaveProperty(counter);
+    }
+  });
+
+  it.each(Object.entries(WEBSITE_COUNTER_WORDING))(
+    "names %s exactly when the site records it",
+    (counter, wording) => {
+      const sent = recorded.has(counter);
+      expect(USAGE_COUNTING_COPY.summary.en.includes(wording.en)).toBe(sent);
+      expect(USAGE_COUNTING_COPY.summary.zh.includes(wording.zh)).toBe(sent);
+      expect(privacy.includes(wording.en)).toBe(sent);
+    },
+  );
+});
diff --git a/web/scripts/facts-lib.d.mts b/web/scripts/facts-lib.d.mts
new file mode 100644
index 0000000000..f013b4652a
--- /dev/null
+++ b/web/scripts/facts-lib.d.mts
@@ -0,0 +1,2 @@
+import type { ProviderFact } from "../lib/facts.generated";
+export const PROVIDER_LABEL_MAP: Readonly<Record<string, ProviderFact>>;
diff --git a/web/scripts/facts-lib.mjs b/web/scripts/facts-lib.mjs
index 9bbb7c362d..ae1a2f8c19 100644
--- a/web/scripts/facts-lib.mjs
+++ b/web/scripts/facts-lib.mjs
@@ -57,15 +57,15 @@ export function deriveSandboxBackendsFromSource(source) {
 
 /**
  * Provider label map — the single source of truth for provider → website
- * display mapping. MUST be kept in sync with the copy in
- * web/lib/facts-drift.ts (for the runtime Cloudflare cron path).
+ * display mapping. MUST equal PROVIDER_LABELS in web/lib/facts-drift.ts (the
+ * runtime Cloudflare cron path); lib/facts-drift.test.ts fails when they differ.
  *
  * Excluded variants: DeepseekCN (not wired through shared ProviderKind,
  * #1104), Custom (dynamic meta-provider, #1519), and Antigravity
  * (a non-runnable legacy config tombstone, permanently excluded from public
  * provider facts).
  */
-const PROVIDER_LABEL_MAP = {
+export const PROVIDER_LABEL_MAP = {
   Deepseek: { id: "deepseek", label: "DeepSeek", env: "DEEPSEEK_API_KEY" },
   DeepseekAnthropic: { id: "deepseek-anthropic", label: "DeepSeek Anthropic", env: "DEEPSEEK_API_KEY / ANTHROPIC_API_KEY" },
   NvidiaNim: { id: "nvidia-nim", label: "NVIDIA NIM", env: "NVIDIA_API_KEY / NVIDIA_NIM_API_KEY" },