Changelog

Built an autonomous pricing-verification pipeline (scripts/verify-pricing-auto.mjs + data/pricing-sources.json) that probes each registrar's primary pricing source, classifies it (reachable / anti-bot 403 / JS-rendered), and reports what can be verified without a human reading prices off a browser. Used it to expand verified-from-primary-source coverage from 1 registrar to 2: re-verified Porkbun against porkbun.com/products/domains (corrected .org renewal/transfer to $11.84 with a $7.98 first-year sale, and fixed the stale .org row in tld-pricing.csv the previous pass missed) and newly verified Dynadot against its per-TLD pages (dynadot.com/domain/<tld>), which bypass the JS-only combined price list that was the original blocker. Dynadot's recorded prices had all drifted, e.g. .com is now $10.88 (was $8.99/$11.99) and .ai $85.60 with a $171.20 transfer. Confirmed Cloudflare Registrar's at-cost model from Cloudflare's developer docs (per-TLD amount = registry wholesale fee, so it is model_confirmed rather than re-listed). Recorded per-registrar provenance in a new pricing_verification object (status, method, primary/per-TLD sources, what blocked an automated read) and added a source_url column to tld-pricing.csv so every row is traceable. Namecheap, GoDaddy and Spaceship return HTTP 403 to a plain fetch and Squarespace renders prices client-side; those four stay verified=false with the blocker documented, pending a JS-rendering crawl. The data validator now enforces this provenance.

Launched the Agent Readiness Index (methodology v0.1): a transparent 0–100 score for how ready each registrar is for AI agents, across 10 weighted criteria (API coverage, authentication & delegation, agent safety, developer experience, agent-interface readiness, pricing transparency, DNS & infrastructure, privacy & compliance, support quality, trust signals). Every sub-score is tied to a cited public source and the overall recomputes from the sub-scores and published weights. As of this date: Cloudflare Registrar 78.7, Porkbun 63.2, GoDaddy 60.4, Namecheap 58.5, Dynadot 56.7, Spaceship 54.9, Squarespace Domains 27.8. Added the companion answer page /best-domain-registrars-for-ai-agents/ and published /data/agent-readiness.json. Headline finding: no registrar yet ships agent-native safety controls for domain operations; GoDaddy is the only registrar with an official (read-only) MCP server.

Replaced placeholder registrar logos with real brand marks (Simple Icons, CC0) wrapped in each registrar's brand color. Added 10 verified Porkbun ccTLD pricing rows (.us, .uk, .co.uk, .ca, .de, .in, .co.in, .nl, .au, .com.au) sourced from porkbun.com/products/domains. Country pages now show a per-ccTLD breakdown with eligibility rules, registry coverage, local registrar lists, and verified-pricing tables. Switched 'Best for country-code domains' from Namecheap to Porkbun based on verified coverage and pricing.

Production hardening: CSP and security headers, consent-gated analytics, programmatic favicon and manifest, per-page Open Graph images for registrar reviews, /privacy/ and /changelog/ pages, branded 404, and security.txt.

Verified Porkbun pricing against the registrar's published pricing page (.com, .net, .org, .io, .ai, .co). Updated Cloudflare Registrar facts to remove the outdated 'transfer-only' claim. Added a `verified` boolean per registrar; Porkbun is the only verified entry as of this date.

Expanded country pages with verifiable registry facts (registry operator, policy authority, nexus rules, DNSSEC, IDN) sourced from each ccTLD's official registry page. Expanded TLD pages with registry operator and IANA root references.

Migrated `next lint` to standalone ESLint, added `validate:data` script, added GitHub Actions check workflow (lint + typecheck + validate + build).

Initial MVP foundation: 63 SSG routes across registrar reviews, country guides, TLD pages, comparisons, pricing tracker, methodology, data downloads, llms.txt, llms-full.txt, sitemap.xml, robots.txt. All key content server-rendered.