Record primary Worker cutover verification

docs/cutover-runbook.md

@@ -49,3 +49,25 @@ static assets to a distinct Worker.
 
 The cutover operator records the actual Worker version ID, rule ID, time, and
 verification results in the migration plan after acceptance.
+
+## Cutover record — 2026-09-02
+
+- Source commit: `d431e6a` (the approved candidate deployment itself is
+  version `7dafcabd`).
+- Pages custom-domain binding removed: `3031023.xyz` was detached from Pages;
+  the Pages project and its `3031023-xyz.pages.dev` rollback URL were retained.
+- Worker custom-domain binding added: `3031023.xyz` is attached only to
+  `3031023-xyz-www`.
+- Canonical redirect: a proxied `www` CNAME points to `3031023.xyz`; active
+  redirect rule `2a0783532f464384beda9a0344352861` issues a 301 to the matching
+  apex path and preserves query strings.
+- External verification: apex Home and Services return 200; `www` returns the
+  expected 301; the static 404 returns 404; production robots and sitemap are
+  reachable; and the Pages rollback URL returns 200.
+
+### Acceptance follow-up
+
+Cloudflare is appending its managed content-signals section to `robots.txt`.
+That section currently disallows several AI crawlers (including Google-Extended
+and GPTBot). This was an existing zone-level setting and was not changed during
+the cutover. Review it with the site's AI-search policy before final acceptance.