[SEO/Domain] Route punk.ceo to Punk Rock AI with working HTTPS

[WalksWithASwagger]

Repository: WalksWithASwagger/cmvan-keynote
Labels: type:infra, area:deploy, phase:5, needs-human
Linear: Bc-ai / Punk Rock AI Release Day Roadmap / pending

---

Route punk.ceo to Punk Rock AI with working HTTPS

Context

Live verification on 2026-07-18 found two current failures:

• https://punk.ceo/ fails during the TLS handshake.
• http://punk.ceo/ returns a Porkbun parked page instead of Punk Rock AI.

The repository already identifies https://www.punkrockai.com/ as the canonical public site. docs/PROJECT-ROADMAP.md and docs/SESSION-HANDOFF.md still mark punk.ceo routing as undecided, and no existing GitHub issue owns this exact domain repair.

The accepted outcome is a single permanent HTTPS redirect from punk.ceo to the canonical Punk Rock AI host, with paths and query strings preserved. Registrar, DNS, TLS, and Vercel project/domain changes are external human-gated writes. Agents may gather evidence and prepare the exact handoff, but must stop before changing any account.

Acceptance Criteria

• Complete a names-only dependency audit covering current A/AAAA/CNAME/ALIAS/MX/TXT and certificate-related records, email use, OAuth callbacks, assets, QR codes, campaigns, backlinks, analytics references, and public citations.
• Record the proposed provider action, rollback steps, expected DNS/TLS propagation, and exact target https://www.punkrockai.com/ for human approval before any external write.
• Confirm that no live email, authentication, API, asset, or campaign dependency would be broken by the redirect.
• Obtain explicit human approval for the exact Porkbun, DNS, or Vercel action before performing it.
• After approved execution, all four entry hosts use one permanent redirect hop to the canonical site: http://punk.ceo, https://punk.ceo, http://www.punk.ceo, and https://www.punk.ceo.
• The first response is a permanent 301; the second and final response is the canonical Punk Rock AI 200, with no parking page, TLS failure, loop, intermediate host, or additional redirect hop.
• Paths and query strings are preserved, including /talk?utm_source=punk-ceo resolving to https://www.punkrockai.com/talk?utm_source=punk-ceo.
• The redirect does not change Punk Rock AI's canonical URL, robots behavior, sitemap, analytics, JSON-LD, or existing route behavior.
• Update docs/PROJECT-ROADMAP.md, docs/SESSION-HANDOFF.md, and the relevant Vercel-first deployment guidance with the verified live routing and rollback procedure.
• Post live HTTP/TLS evidence and the chosen implementation record on this issue before closure.

Tests/Evals

• Run the repository eval and index-hygiene suites after any documentation or deployment-contract change.
• Verify all four host/protocol combinations without relying on browser cache.
• Verify one representative nested path plus its query string.
• Re-run canonical homepage, robots, sitemap, and JSON-LD checks against www.punkrockai.com to prove the alias did not alter the canonical site.

Verification

npm run eval
npm run test:index-hygiene
git diff --check

curl -sSIL --max-redirs 2 http://punk.ceo/
curl -sSIL --max-redirs 2 https://punk.ceo/
curl -sSIL --max-redirs 2 http://www.punk.ceo/
curl -sSIL --max-redirs 2 https://www.punk.ceo/
curl -sSL --max-redirs 2 -o /dev/null -w '%{http_code} %{url_effective}\n' 'https://punk.ceo/talk?utm_source=punk-ceo'

Expected final path probe:

200 https://www.punkrockai.com/talk?utm_source=punk-ceo

Also confirm that each four-host header trace contains exactly one redirect response before the final 200.

Agent Instructions

• This issue carries needs-human and must never receive agent:ready while an external account write remains.
• Agents may run public read-only DNS, TLS, HTTP, repository, backlink, and reference checks and may prepare a reviewable command/rollback handoff.
• Stop before any Porkbun login, registrar forwarding change, DNS record change, certificate change, vercel domains command, Vercel project-domain change, or other provider mutation.
• Do not expose account screenshots, credentials, token-bearing DNS records, billing data, or private analytics details in the repository or issue.
• Once a human records approval and completes or explicitly authorizes the external action, limit repository work to the routing documentation and verification evidence required here.
• Keep PR fix(seo): correct Both Hands Full entity link #177 and issue [SEO/GEO] Add Punk Rock AI canonical, entity schema, and llms.txt #159 in their existing SEO/entity lane; do not fold that work into this domain issue.

Out of Scope

• Changing Punk Rock AI content, visual design, canonical host, analytics, schema, robots, or sitemap policy.
• Migrating the main site away from its current Vercel project or changing the Cloudflare fallback architecture.
• Deciding or configuring plump.co.
• Work on PR fix(seo): correct Both Hands Full entity link #177, issue [SEO/GEO] Add Punk Rock AI canonical, entity schema, and llms.txt #159, merchandise, release-day submissions, or unrelated redirects.
• Any registrar, DNS, Vercel, certificate, or production write without explicit human approval.