mirror of
https://github.com/hanzo-apps/industries.git
synced 2026-11-02 21:21:46 +00:00
zeekay
49beb995f8
Security: - Fix OAuth CSRF bypass: require state match instead of accepting when no state saved - Remove query-param token fallback (tokens logged by CDN/analytics) - Move auth token from localStorage to sessionStorage (XSS mitigation) - Replace upstream model ID 'qwen3-32b' with branded 'zen' in chat widget - Change analytics person_profiles from 'always' to 'identified_only' (GDPR) - Replace deceptive auth page (collected + discarded credentials) with clean redirect Content: - Fix wrong Twitter handle (@hanaborobyai → @hanzoai) - Fix privacy policy contradiction (removed "train on your data" claim) - Remove internal Google Docs URLs from capabilities page - Replace unverified "$50M Series B" with verified Techstars '17 milestone - Replace 8 dead '#' news links with real product/resource links - Fix Navbar "58 papers" → "130+ papers" to match all other surfaces - Replace "Hanzo L1" (undefined product) with "Zen4 MoDE models" in hero - Fix AI slop: "harness the power" → "deploy in production", "state-of-the-art" → "production-grade", "cutting-edge" → "frontier" - Fix solutions page template filler descriptions - Fix stat inconsistencies: careers AI models 50+ → 45+, help credits $10 → $5 - Fix zen-guard params 1B → 4B (matching canonical spec) - Fix dead research sub-page links (/alignment, /safety → GitHub papers repos) - Fix capabilities dead links → real product pages UX: - Wire contact form to api.hanzo.ai/v1/contact with Cal.com fallback - Fix dead buttons on services page (Get Started → /contact, View Case Studies → /case-studies) - Fix security whitepaper button → "Request Security Documentation" linking to /contact - Fix help Live Chat button → hanzo.bot - Fix Cal.com URLs (cal.com/hanzo → cal.com/hanzo/30min) - Fix Cal.com template literal (${"dark"} → plain string) - Replace console.error on 404 with analytics event tracking