milestone 19: hygiene sweep - dead ecs surface, single-source constants, tls classification, frontend state hazards, docker smoke network fix

src/web/static.zig

@@ -434,6 +434,19 @@ test "the embedded dist has an index and consistent gzip siblings" {
             // The gzip member header: build-time compression, not an accident.
             try testing.expectEqual(@as(u8, 0x1f), file.bytes[0]);
             try testing.expectEqual(@as(u8, 0x8b), file.bytes[1]);
+
+            // A sibling is served under its base file's identity, so equal
+            // content is the only thing that makes the substitution honest.
+            var input: std.Io.Reader = .fixed(file.bytes);
+            const window = try testing.allocator.alloc(u8, std.compress.flate.max_window_len);
+            defer testing.allocator.free(window);
+            var decompress: std.compress.flate.Decompress = .init(&input, .gzip, window);
+            const plain = try decompress.reader.allocRemaining(
+                testing.allocator,
+                .limited(max_disk_asset_bytes),
+            );
+            defer testing.allocator.free(plain);
+            try testing.expectEqualSlices(u8, base.bytes, plain);
         }
     }
 }