Internal linking completed
All 107 published service/location pages now have focused related-service panels. These contain 395 companion links, including 136 links to a matching city or area. 160 natural contextual links were added without changing the supplied sentences; 40 existing generic links were retargeted to matching local pages. Breadcrumbs now reflect category, service and location.
Suggestions explain why services may be relevant and that they require their own scope and quotation. Where no same-location page exists, the service guide is labelled with its real location; availability elsewhere is not invented. The previously outstanding 38 source chapters remain outstanding.
Mobile and laptop improvements
Responsive image variants let the browser choose smaller assets at smaller display sizes. Explicit image dimensions reserve layout space; the main image loads eagerly and supporting images load lazily. Five stylesheet requests and three script requests are consolidated into one stylesheet and one deferred script, with content fingerprints and integrity attributes. Service cards, phone actions, enquiry selection and reading layouts remain responsive.
Code-security review: scope and limits
The initial deployed-code scan examined 269 HTML files including migration redirects, the browser scripts and public policy files. It found no executable inline injections, unexpected third-party script loads, dangerous URL schemes or confirmed forced external redirects. The JavaScript navigation matches were the intentional email-preparation action, not a video or advertising redirect.
130 unique external reference URLs were checked for DNS, HTTP status and redirect behaviour. Eight requests were blocked with HTTP 403, including review-provider links, so their destination content was not verified. These results are not a guarantee that an external website is malware-free. No link was labelled infected merely because it blocked automation.
The npm dependency audit returned zero reported known vulnerabilities at the time of this release. This is not a complete malware clearance. The original WordPress host, database, accounts, DNS/CDN rules, scheduled jobs and reported YouTube redirect were not forensically examined.
Hardening
The review retains a restrictive Content Security Policy, adds explicit restrictions on script attributes, frames and workers, applies safe external-tab attributes, and uses integrity-protected local bundles. Build checks reject unexpected active content. Source packages exclude private workbench folders, credentials, fonts and raw WordPress executable files.
Still not a production launch
The enquiry form prepares an email and does not send through a website backend. Real email delivery, new Google testimonial imports, credentials and technical content approval, AutoSEO/Zoro publishing, the missing chapters and production indexing remain separate tasks. The existing company domain and DNS have not been changed. This review remains noindex.
Reports and sources
Read the scoped security results · Read the change manifest · Read the test results
The interlink design follows the supplied Spycon content pack and location-page guidance. Implementation references include Google's crawlable link guidance, Mozilla's CSP guide, and browser image-loading guidance.