S2 — Streaming ~10 MB HTML rewrite

Origin streams a ~10 MiB HTML report. This host injects one approved script, strips standard HTML comments, and streams progressively without buffering the full body.

	Direct origin	Rewrite Worker
Hosts	s2-origin…/	s2…/
Comments	Many `<!-- … -->` including split-chunk	Standard comment events removed
Script	none injected	One `<script id="rs-s2-injected">` at first `<head>`

Browser verification

Run a read-only check in this browser. The result explains the response evidence; use the command-line section below for deeper inspection.

Not run yet.

1. Browser verification

Rewrite Worker

Rewrite Worker report / Slow stream ?slow=1 /absent-head /fragment /reset (error path)

Direct origin

Direct origin report Direct origin slow

Open capability / (large download). View source: exactly one id="rs-s2-injected"; no  / .
On /absent-head injected script lands on <body>; on /fragment at document end.
Headers: no stale Content-Length, no origin Content-Encoding, Cache-Control: private, no-store.

2. Command-line verification (copy and run)

# Size ~10 MiB on both sides
curl -s https://s2-origin.thecompany-lab.com/ | wc -c
curl -s https://s2.thecompany-lab.com/ | wc -c

# Comments stripped on capability
curl -s https://s2-origin.thecompany-lab.com/ | grep -c '