From e9cd3e819494a1079089eb893acb7b0a1868b47a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 29 Jul 2026 12:04:26 +0000
Subject: [PATCH 1/4] feat(works): public Related Works registry with moderated
 issue-form submissions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Others can now add works engaging The Interdependent Way:

- .github/ISSUE_TEMPLATE/related-work.yml — structured public submission form
  (title, creator, https link, type, relation, description, rights consent);
  applies the related-work label.
- scripts/fetch-works.mjs — build-time fetch of issues carrying both
  related-work and approved labels from this repo via the allowlisted GitHub
  API; parses issue-form bodies, validates fail-closed with visible
  exclusions, writes generated/works.json plus a last-known-good snapshot;
  OFFLINE=1 uses the snapshot. Moderation is the label pair: add approved to
  publish, remove to delist.
- /works/ page — registry with attribution, per-work issue provenance, the
  no-endorsement/no-status-transfer boundary, submission instructions (issue
  form + email fallback), and visible gaps for approved-but-invalid entries.
- Nav link, refresh:works wired into refresh:data and prepare-tests,
  docs/related-works.md, and tests/works-registry.test.mjs (parser,
  validator, moderation gating, generated-dataset schema).

npm test: 24 passed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E93Rxmrs8bXHtWjD7z94bi
---
 .github/ISSUE_TEMPLATE/related-work.yml       |  77 +++++++
 docs/related-works.md                         |  25 +++
 package.json                                  |  11 +-
 scripts/fetch-works.mjs                       | 200 ++++++++++++++++++
 scripts/prepare-tests.mjs                     |   3 +-
 src/_data/generated/works.json                |   8 +
 .../snapshots/works.last-known-good.json      |   8 +
 src/_includes/layouts/base.njk                |   1 +
 src/works/index.njk                           |  58 +++++
 tests/works-registry.test.mjs                 |  76 +++++++
 10 files changed, 462 insertions(+), 5 deletions(-)
 create mode 100644 .github/ISSUE_TEMPLATE/related-work.yml
 create mode 100644 docs/related-works.md
 create mode 100644 scripts/fetch-works.mjs
 create mode 100644 src/_data/generated/works.json
 create mode 100644 src/_data/snapshots/works.last-known-good.json
 create mode 100644 src/works/index.njk
 create mode 100644 tests/works-registry.test.mjs

diff --git a/.github/ISSUE_TEMPLATE/related-work.yml b/.github/ISSUE_TEMPLATE/related-work.yml
new file mode 100644
index 0000000..017ffad
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/related-work.yml
@@ -0,0 +1,77 @@
+name: Submit a related work
+description: Propose a work (essay, paper, art, music, video, code, response, …) for the site's Related Works registry.
+title: "[work] "
+labels: ["related-work"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thank you for engaging with The Interdependent Way. Submissions are reviewed by the
+        maintainer; approval lists the work on the public Related Works page with your
+        attribution. Listing is not endorsement, transfers no review or theorem status, and
+        never modifies canon or the research ledgers. Your GitHub username and everything you
+        write here are public.
+  - type: input
+    id: title
+    attributes:
+      label: Work title
+      description: The title of the work being submitted.
+    validations:
+      required: true
+  - type: input
+    id: creator
+    attributes:
+      label: Creator
+      description: Who made it — the name that should be credited.
+    validations:
+      required: true
+  - type: input
+    id: link
+    attributes:
+      label: Link
+      description: An https URL where the work lives (page, repository, video, gallery, …).
+    validations:
+      required: true
+  - type: dropdown
+    id: type
+    attributes:
+      label: Work type
+      options:
+        - essay
+        - paper
+        - art
+        - music
+        - video
+        - code
+        - response
+        - other
+    validations:
+      required: true
+  - type: textarea
+    id: relation
+    attributes:
+      label: Relation to The Interdependent Way
+      description: Which Article, chapter, or concept does this work engage, and how?
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A short description for the listing (a few sentences).
+    validations:
+      required: true
+  - type: input
+    id: license
+    attributes:
+      label: License note
+      description: Optional — the work's license or usage terms, if you want them shown.
+    validations:
+      required: false
+  - type: checkboxes
+    id: rights
+    attributes:
+      label: Rights and permission
+      options:
+        - label: I have the right to share this link, and I consent to it being listed publicly with the details above.
+          required: true
diff --git a/docs/related-works.md b/docs/related-works.md
new file mode 100644
index 0000000..d1b857a
--- /dev/null
+++ b/docs/related-works.md
@@ -0,0 +1,25 @@
+# Related Works registry
+
+Public submissions of works engaging The Interdependent Way, moderated by label.
+
+## Flow
+
+1. A visitor submits via the structured issue form (`.github/ISSUE_TEMPLATE/related-work.yml`),
+   which applies the `related-work` label — or emails the same fields to the maintainer,
+   who files the issue on their behalf.
+2. The maintainer reviews. Adding the `approved` label publishes the listing on the next
+   site build; removing either label delists it. Closing the issue does not delist —
+   the labels are the single switch.
+3. `scripts/fetch-works.mjs` (in `refresh:data`) fetches all issues carrying both labels,
+   parses the issue-form body, validates each submission (required fields, https link,
+   allowed type), and writes `src/_data/generated/works.json` plus a last-known-good
+   snapshot. Invalid-but-approved submissions surface on the page as visible gaps rather
+   than disappearing. `OFFLINE=1` uses the snapshot.
+4. `/works/` renders the registry with attribution, per-work provenance (issue link),
+   and the boundary statement.
+
+## Boundary
+
+Listing is moderation, not review: it transfers no endorsement, no research or review
+status, and no theorem/proof/empirical status, and it never modifies canon or the
+Article Lab research ledgers. Works remain at their own links under their own licenses.
diff --git a/package.json b/package.json
index 81b49a5..0680a92 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,7 @@
   "type": "module",
   "scripts": {
     "dev": "npm run refresh:data && eleventy --serve",
-    "refresh:data": "npm run refresh:canon && npm run refresh:github && npm run refresh:textbook",
+    "refresh:data": "npm run refresh:canon && npm run refresh:github && npm run refresh:textbook && npm run refresh:works",
     "refresh:canon": "node scripts/fetch-canon.mjs && node scripts/parse-canon.mjs",
     "refresh:github": "node scripts/fetch-github-org.mjs",
     "refresh:textbook": "node scripts/fetch-textbook.mjs",
@@ -15,14 +15,15 @@
     "validate": "node scripts/validate-content.mjs && node scripts/verify-generated-routes.mjs && node scripts/verify-article-canon.mjs",
     "build": "npm run validate && eleventy && pagefind --site _site && node scripts/write-build-info.mjs",
     "pretest": "node scripts/prepare-tests.mjs",
-    "test": "node --test tests/canon-parser.test.mjs tests/canon-integrity.test.mjs tests/textbook-integrity.test.mjs tests/math-rendering.test.mjs tests/offline-project-snapshot.test.mjs tests/repo-coverage.test.mjs tests/research-ledger.test.mjs tests/site-contract.test.mjs",
+    "test": "node --test tests/canon-parser.test.mjs tests/canon-integrity.test.mjs tests/textbook-integrity.test.mjs tests/math-rendering.test.mjs tests/offline-project-snapshot.test.mjs tests/repo-coverage.test.mjs tests/research-ledger.test.mjs tests/works-registry.test.mjs tests/site-contract.test.mjs",
     "test:generated": "node --test tests/generated-site.test.mjs tests/textbook-generated.test.mjs tests/math-generated.test.mjs && node tests/links.test.mjs",
     "test:browser": "playwright test",
     "test:e2e": "playwright test tests/site.spec.mjs",
     "test:a11y": "playwright test tests/accessibility.spec.mjs",
     "test:links": "node tests/links.test.mjs",
     "test:performance": "node scripts/performance-placeholder.mjs",
-    "check": "npm run audit:workflows && npm run build && npm test && npm run test:generated"
+    "check": "npm run audit:workflows && npm run build && npm test && npm run test:generated",
+    "refresh:works": "node scripts/fetch-works.mjs"
   },
   "dependencies": {
     "@11ty/eleventy": "3.1.2",
@@ -39,5 +40,7 @@
     "axe-core": "4.10.3",
     "pagefind": "1.3.0"
   },
-  "engines": { "node": "24.x" }
+  "engines": {
+    "node": "24.x"
+  }
 }
diff --git a/scripts/fetch-works.mjs b/scripts/fetch-works.mjs
new file mode 100644
index 0000000..f43a853
--- /dev/null
+++ b/scripts/fetch-works.mjs
@@ -0,0 +1,200 @@
+import { execFileSync } from 'node:child_process';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+
+// === MODULE_BUILD ===
+// id: related_works_registry_fetch
+//   module_name: fetch-works
+//   module_kind: instrument
+//   summary: Resolves maintainer-approved related-work submissions from GitHub issues into one provenance-bearing works registry dataset.
+//   owner: Erin Spencer
+//   public_surface: npm run refresh:works, generated.works
+//   internal_surface: issue-form body parsing, per-submission validation with visible exclusions, snapshot fallback
+//   auth_boundary: optional read-only GITHUB_TOKEN
+//   storage_boundary: writes generated works data and a last-known-good snapshot
+//   network_boundary: allowlisted read-only HTTPS to api.github.com
+//   user_data_boundary: publishes only fields submitters place in a public GitHub issue
+//   admin_only: false
+//   tests: tests/works-registry.test.mjs
+//   rollout: included in refresh:data before validation and Eleventy generation
+//   rollback: remove refresh:works and the /works/ route; submissions remain as ordinary GitHub issues
+// === END MODULE_BUILD ===
+// Usage: run `npm run refresh:works`; set OFFLINE=1 to use the retained snapshot or an empty registry.
+// Limits: listing is maintainer moderation only — it transfers no endorsement, review status, or
+// theorem/proof/empirical status, and it never touches the research ledgers or canon.
+
+// === BOUNDARIES ===
+// id: related_works_network_boundary
+//   summary: Reads only issues labeled related-work and approved from this repository via the allowlisted GitHub API.
+//   auth_boundary: optional GitHub read token
+//   storage_boundary: write beneath src/_data/generated and src/_data/snapshots
+//   network_boundary: external read-only
+//   user_data_boundary: public issue content only; submitter login retained as provenance
+//   admin_only: false
+//   pii: none beyond what submitters publish themselves
+//   secrets: GITHUB_TOKEN is passed only as an HTTPS authorization header and never written
+//   side_effects: generated dataset and snapshot writes
+//   owner: Erin Spencer
+// === END BOUNDARIES ===
+
+const apiOrigin = 'https://api.github.com';
+const registryRepository = 'The-Interdependency/The-Interdependency.github.io';
+const submissionLabel = 'related-work';
+const approvalLabel = 'approved';
+const snapshotPath = 'src/_data/snapshots/works.last-known-good.json';
+const generatedPath = 'src/_data/generated/works.json';
+
+export const WORK_TYPES = ['essay', 'paper', 'art', 'music', 'video', 'code', 'response', 'other'];
+
+export const REQUIRED_FIELDS = {
+  'Work title': 'title',
+  'Creator': 'creator',
+  'Link': 'url',
+  'Work type': 'type',
+  'Relation to The Interdependent Way': 'relation',
+  'Description': 'description'
+};
+
+const OPTIONAL_FIELDS = { 'License note': 'license' };
+
+// GitHub issue forms render each field as "### <Label>" followed by the value;
+// empty optional fields arrive as "_No response_".
+export function parseIssueForm(body) {
+  const fields = {};
+  const sections = String(body || '').split(/^### /m).slice(1);
+  for (const section of sections) {
+    const newline = section.indexOf('\n');
+    if (newline === -1) continue;
+    const label = section.slice(0, newline).trim();
+    const value = section.slice(newline + 1).trim();
+    fields[label] = value === '_No response_' ? '' : value;
+  }
+  return fields;
+}
+
+export function validateSubmission(fields) {
+  const problems = [];
+  const work = {};
+  for (const [label, key] of Object.entries(REQUIRED_FIELDS)) {
+    const value = (fields[label] || '').trim();
+    if (!value) problems.push(`missing required field: ${label}`);
+    work[key] = value;
+  }
+  for (const [label, key] of Object.entries(OPTIONAL_FIELDS)) {
+    work[key] = (fields[label] || '').trim() || null;
+  }
+  if (work.url) {
+    try {
+      const url = new URL(work.url);
+      if (url.protocol !== 'https:') problems.push('link must be https');
+      work.url = url.href;
+    } catch {
+      problems.push(`link is not a valid URL: ${work.url}`);
+    }
+  }
+  if (work.type) {
+    const normalized = work.type.toLowerCase();
+    if (!WORK_TYPES.includes(normalized)) problems.push(`work type must be one of: ${WORK_TYPES.join(', ')}`);
+    work.type = normalized;
+  }
+  if (work.description.length > 1200) problems.push('description exceeds 1200 characters');
+  if (work.relation.length > 1200) problems.push('relation exceeds 1200 characters');
+  return { work, problems };
+}
+
+export function buildRegistry(issues) {
+  const works = [];
+  const excluded = [];
+  for (const issue of issues) {
+    if (issue.pull_request) continue;
+    const labels = (issue.labels || []).map(label => (typeof label === 'string' ? label : label.name));
+    if (!labels.includes(submissionLabel) || !labels.includes(approvalLabel)) continue;
+    const { work, problems } = validateSubmission(parseIssueForm(issue.body));
+    const provenance = {
+      issueNumber: issue.number,
+      issueUrl: issue.html_url,
+      submittedBy: issue.user?.login || 'hmmm',
+      submittedAt: issue.created_at || null
+    };
+    if (problems.length > 0) {
+      excluded.push({ ...provenance, problems });
+    } else {
+      works.push({ ...work, ...provenance });
+    }
+  }
+  works.sort((a, b) => b.issueNumber - a.issueNumber);
+  excluded.sort((a, b) => b.issueNumber - a.issueNumber);
+  return { works, excluded };
+}
+
+function curlJson(target, headers) {
+  const url = target instanceof URL ? target : new URL(target);
+  if (url.protocol !== 'https:' || url.origin !== apiOrigin) throw new Error(`refusing non-allowlisted works target: ${url.origin}`);
+  return JSON.parse(execFileSync('curl', ['-fsSL', '--retry', '2', '--max-time', '30', ...headers, url.href], {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe']
+  }));
+}
+
+function fetchApprovedIssues() {
+  const headers = ['-H', 'Accept: application/vnd.github+json', '-H', 'X-GitHub-Api-Version: 2022-11-28'];
+  if (process.env.GITHUB_TOKEN) headers.push('-H', `Authorization: Bearer ${process.env.GITHUB_TOKEN}`);
+  const issues = [];
+  for (let page = 1; page <= 10; page += 1) {
+    const url = new URL(`/repos/${registryRepository}/issues`, apiOrigin);
+    url.searchParams.set('labels', `${submissionLabel},${approvalLabel}`);
+    url.searchParams.set('state', 'all');
+    url.searchParams.set('per_page', '100');
+    url.searchParams.set('page', String(page));
+    const batch = curlJson(url, headers);
+    issues.push(...batch);
+    if (batch.length < 100) break;
+  }
+  return issues;
+}
+
+async function readSnapshot() {
+  try {
+    const snapshot = JSON.parse(await readFile(snapshotPath, 'utf8'));
+    return Array.isArray(snapshot?.works) ? snapshot : null;
+  } catch {
+    return null;
+  }
+}
+
+async function main() {
+  await mkdir('src/_data/generated', { recursive: true });
+  await mkdir('src/_data/snapshots', { recursive: true });
+  const offline = process.env.OFFLINE === '1';
+  let dataset;
+  if (offline) {
+    const previous = await readSnapshot();
+    dataset = previous
+      ? { ...previous, fallback: true, retrievalError: 'offline requested; retained last-known-good works registry' }
+      : { schema: 'interdependency.related-works/1.0.0', generatedAt: null, fallback: true, retrievalError: 'offline requested; no retained works snapshot', works: [], excluded: [] };
+  } else {
+    try {
+      const { works, excluded } = buildRegistry(fetchApprovedIssues());
+      dataset = {
+        schema: 'interdependency.related-works/1.0.0',
+        generatedAt: new Date().toISOString(),
+        fallback: false,
+        retrievalError: null,
+        works,
+        excluded
+      };
+      await writeFile(snapshotPath, JSON.stringify(dataset, null, 2));
+    } catch (error) {
+      const previous = await readSnapshot();
+      const message = String(error?.message || error);
+      dataset = previous
+        ? { ...previous, fallback: true, retrievalError: message }
+        : { schema: 'interdependency.related-works/1.0.0', generatedAt: null, fallback: true, retrievalError: message, works: [], excluded: [] };
+    }
+  }
+  await writeFile(generatedPath, JSON.stringify(dataset, null, 2));
+  console.log(`works registry works=${dataset.works.length} excluded=${dataset.excluded.length} fallback=${dataset.fallback}`);
+}
+
+if (process.argv[1] && import.meta.url === new URL(`file://${process.argv[1]}`).href) {
+  await main();
+}
diff --git a/scripts/prepare-tests.mjs b/scripts/prepare-tests.mjs
index 25faf86..28f2ff8 100644
--- a/scripts/prepare-tests.mjs
+++ b/scripts/prepare-tests.mjs
@@ -18,7 +18,8 @@ for (const script of [
   'scripts/fetch-canon.mjs',
   'scripts/parse-canon.mjs',
   'scripts/fetch-github-org.mjs',
-  'scripts/fetch-textbook.mjs'
+  'scripts/fetch-textbook.mjs',
+  'scripts/fetch-works.mjs'
 ]) {
   execFileSync(process.execPath, [script], { env, stdio: 'inherit' });
 }
diff --git a/src/_data/generated/works.json b/src/_data/generated/works.json
new file mode 100644
index 0000000..c8f0192
--- /dev/null
+++ b/src/_data/generated/works.json
@@ -0,0 +1,8 @@
+{
+  "schema": "interdependency.related-works/1.0.0",
+  "generatedAt": "2026-07-29T12:03:40.212Z",
+  "fallback": true,
+  "retrievalError": "offline requested; retained last-known-good works registry",
+  "works": [],
+  "excluded": []
+}
\ No newline at end of file
diff --git a/src/_data/snapshots/works.last-known-good.json b/src/_data/snapshots/works.last-known-good.json
new file mode 100644
index 0000000..67214bc
--- /dev/null
+++ b/src/_data/snapshots/works.last-known-good.json
@@ -0,0 +1,8 @@
+{
+  "schema": "interdependency.related-works/1.0.0",
+  "generatedAt": "2026-07-29T12:03:40.212Z",
+  "fallback": false,
+  "retrievalError": null,
+  "works": [],
+  "excluded": []
+}
\ No newline at end of file
diff --git a/src/_includes/layouts/base.njk b/src/_includes/layouts/base.njk
index ff2eccf..5746cfe 100644
--- a/src/_includes/layouts/base.njk
+++ b/src/_includes/layouts/base.njk
@@ -29,6 +29,7 @@
       <a href="/lab/">Article Lab</a>
       <a href="/projects/">Projects</a>
       <a href="/artifacts/">Artifacts</a>
+      <a href="/works/">Works</a>
       <a href="/research/method/">Research</a>
       <a href="/search/">Search</a>
     </nav>
diff --git a/src/works/index.njk b/src/works/index.njk
new file mode 100644
index 0000000..4c4cdcf
--- /dev/null
+++ b/src/works/index.njk
@@ -0,0 +1,58 @@
+---
+layout: layouts/base.njk
+title: Related Works
+description: Community-submitted works engaging The Interdependent Way — moderated listings with attribution, provenance, and explicit non-endorsement boundaries.
+permalink: /works/
+---
+{% set registry = generated.works %}
+<nav class="breadcrumb" aria-label="Breadcrumb"><a href="/">Home</a> / Related Works</nav>
+<header class="page-head">
+  <p class="eyebrow">Community registry</p>
+  <h1>Related Works</h1>
+  <p class="lede">Works by others that engage The Interdependent Way — essays, papers, art, music, video, code, and responses. Every listing was submitted publicly and approved by the maintainer.</p>
+</header>
+<section class="panel">
+  <h2>Add your work</h2>
+  <p>Submissions run through a public, structured GitHub issue. Fill in the form; the maintainer reviews it; approval publishes the listing here on the next site build. Removal is the same review in reverse.</p>
+  <p><a href="https://github.com/The-Interdependency/The-Interdependency.github.io/issues/new?template=related-work.yml">Submit a related work</a> · no GitHub account? Email <a href="mailto:wayseer@interdependentway.org">wayseer@interdependentway.org</a> with the same details (title, creator, link, type, relation, description).</p>
+</section>
+<section class="panel">
+  <h2>Boundary</h2>
+  <p>Listing is moderation, not review. A listing transfers no endorsement, no research or review status, and no theorem, proof, or empirical status; it does not modify the canon or the Article Lab research ledgers. Each work speaks for its creator, at its own link, under its own license.</p>
+</section>
+<section>
+  <p class="eyebrow">Approved submissions</p>
+  <h2>The registry</h2>
+  {% if registry.fallback %}
+    <div class="hmmm"><p>This build could not refresh the registry ({{ registry.retrievalError }}). Listings below are the last known good state{% if not registry.generatedAt %} — none retained yet{% endif %}.</p></div>
+  {% endif %}
+  {% if registry.works.length %}
+    <div class="grid">
+      {% for work in registry.works %}
+        <article class="card">
+          <span class="status status-public">{{ work.type }}</span>
+          <h3><a href="{{ work.url }}">{{ work.title }}</a></h3>
+          <p><strong>{{ work.creator }}</strong></p>
+          <p>{{ work.description }}</p>
+          <p><em>Relation:</em> {{ work.relation }}</p>
+          {% if work.license %}<p><small>License: {{ work.license }}</small></p>{% endif %}
+          <p><small>Submitted by {{ work.submittedBy }} · <a href="{{ work.issueUrl }}">provenance #{{ work.issueNumber }}</a></small></p>
+        </article>
+      {% endfor %}
+    </div>
+  {% else %}
+    <div class="hmmm"><p>No approved works are listed yet. The registry opens with its first accepted submission.</p></div>
+  {% endif %}
+</section>
+{% if registry.excluded.length %}
+<section>
+  <p class="eyebrow">Visible gaps</p>
+  <h2>Approved but not listable</h2>
+  <p class="section-intro">These submissions carry the approval label but failed validation; they stay visible here rather than disappearing silently.</p>
+  <ul>
+    {% for entry in registry.excluded %}
+      <li><a href="{{ entry.issueUrl }}">#{{ entry.issueNumber }}</a> — {{ entry.problems | join('; ') }}</li>
+    {% endfor %}
+  </ul>
+</section>
+{% endif %}
diff --git a/tests/works-registry.test.mjs b/tests/works-registry.test.mjs
new file mode 100644
index 0000000..2055194
--- /dev/null
+++ b/tests/works-registry.test.mjs
@@ -0,0 +1,76 @@
+// Usage: run through `npm test`; exercises the works-registry parser, validator, and builder offline.
+// Evidence boundary: validates submission structure and moderation gating, not the merit of any work.
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { parseIssueForm, validateSubmission, buildRegistry, WORK_TYPES } from '../scripts/fetch-works.mjs';
+
+const validBody = [
+  '### Work title\n\nOn Interdependent Systems\n',
+  '### Creator\n\nA. Reader\n',
+  '### Link\n\nhttps://example.org/essay\n',
+  '### Work type\n\nessay\n',
+  '### Relation to The Interdependent Way\n\nEngages Article Two and Chapter 2.\n',
+  '### Description\n\nA response essay.\n',
+  '### License note\n\n_No response_\n',
+  '### Rights and permission\n\n- [x] I have the right to share this link.\n'
+].join('\n');
+
+function issue(number, body, labels = ['related-work', 'approved'], extra = {}) {
+  return {
+    number,
+    body,
+    labels: labels.map(name => ({ name })),
+    html_url: `https://github.com/The-Interdependency/The-Interdependency.github.io/issues/${number}`,
+    user: { login: 'someone' },
+    created_at: '2026-07-29T00:00:00Z',
+    ...extra
+  };
+}
+
+test('issue-form bodies parse into labeled fields with _No response_ blanked', () => {
+  const fields = parseIssueForm(validBody);
+  assert.equal(fields['Work title'], 'On Interdependent Systems');
+  assert.equal(fields['Link'], 'https://example.org/essay');
+  assert.equal(fields['License note'], '');
+});
+
+test('valid submissions pass and normalize; invalid ones report every problem', () => {
+  const ok = validateSubmission(parseIssueForm(validBody));
+  assert.equal(ok.problems.length, 0);
+  assert.equal(ok.work.type, 'essay');
+  assert.equal(ok.work.license, null);
+
+  const bad = validateSubmission(parseIssueForm(
+    '### Work title\n\nX\n\n### Creator\n\n_No response_\n\n### Link\n\nhttp://insecure.example\n\n### Work type\n\nsculpture\n\n### Relation to The Interdependent Way\n\nY\n\n### Description\n\nZ\n'
+  ));
+  assert.ok(bad.problems.some(p => p.includes('Creator')));
+  assert.ok(bad.problems.some(p => p.includes('https')));
+  assert.ok(bad.problems.some(p => p.includes('one of')));
+});
+
+test('registry lists only doubly-labeled issues, excludes invalid ones visibly, skips PRs', () => {
+  const { works, excluded } = buildRegistry([
+    issue(5, validBody),
+    issue(4, validBody, ['related-work']),
+    issue(3, 'not a form body'),
+    issue(2, validBody, ['related-work', 'approved'], { pull_request: {} })
+  ]);
+  assert.equal(works.length, 1);
+  assert.equal(works[0].issueNumber, 5);
+  assert.equal(works[0].submittedBy, 'someone');
+  assert.equal(excluded.length, 1);
+  assert.equal(excluded[0].issueNumber, 3);
+  assert.ok(excluded[0].problems.length > 0);
+});
+
+test('generated works dataset exists with valid schema after offline preparation', async () => {
+  const dataset = JSON.parse(await readFile('src/_data/generated/works.json', 'utf8'));
+  assert.equal(dataset.schema, 'interdependency.related-works/1.0.0');
+  assert.ok(Array.isArray(dataset.works) && Array.isArray(dataset.excluded));
+  for (const work of dataset.works) {
+    assert.ok(work.title && work.creator && work.url.startsWith('https://'));
+    assert.ok(WORK_TYPES.includes(work.type));
+    assert.ok(work.issueNumber && work.issueUrl);
+  }
+});

From 74079846e26825e511a452cfa021a332a04ef37a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 29 Jul 2026 12:08:08 +0000
Subject: [PATCH 2/4] feat(works): make the display-only, no-hosting posture
 explicit

The registry displays bibliographic metadata and outbound links only; it never
stores, copies, or embeds submitted works. States this on the /works/ page with
a takedown contact, in the issue form intro, and in the strengthened
rights/responsibility consent checkbox; docs/related-works.md records the hard
rules (no uploads, no mirrors, no embeds) and the label-based takedown flow.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E93Rxmrs8bXHtWjD7z94bi
---
 .github/ISSUE_TEMPLATE/related-work.yml |  6 +++++-
 docs/related-works.md                   | 16 ++++++++++++++++
 src/works/index.njk                     |  1 +
 3 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/.github/ISSUE_TEMPLATE/related-work.yml b/.github/ISSUE_TEMPLATE/related-work.yml
index 017ffad..6af1f8f 100644
--- a/.github/ISSUE_TEMPLATE/related-work.yml
+++ b/.github/ISSUE_TEMPLATE/related-work.yml
@@ -11,6 +11,10 @@ body:
         attribution. Listing is not endorsement, transfers no review or theorem status, and
         never modifies canon or the research ledgers. Your GitHub username and everything you
         write here are public.
+
+        **The site displays, it does not host.** Your work stays wherever you host it; a
+        listing is only the metadata you enter below, linking to it. Removal requests go to
+        wayseer@interdependentway.org and take effect on the next site build.
   - type: input
     id: title
     attributes:
@@ -73,5 +77,5 @@ body:
     attributes:
       label: Rights and permission
       options:
-        - label: I have the right to share this link, and I consent to it being listed publicly with the details above.
+        - label: I have the right to share this link, I consent to the details above being displayed publicly, and I accept responsibility for the accuracy and lawfulness of this submission. I understand the site displays this metadata only and does not host the work.
           required: true
diff --git a/docs/related-works.md b/docs/related-works.md
index d1b857a..a81ba5d 100644
--- a/docs/related-works.md
+++ b/docs/related-works.md
@@ -23,3 +23,19 @@ Public submissions of works engaging The Interdependent Way, moderated by label.
 Listing is moderation, not review: it transfers no endorsement, no research or review
 status, and no theorem/proof/empirical status, and it never modifies canon or the
 Article Lab research ledgers. Works remain at their own links under their own licenses.
+
+## Display-only posture (legal boundary)
+
+The registry **displays; it never hosts**. Hard rules for anyone touching this feature:
+
+- No file uploads, no copies, no mirrors: the fetcher retrieves issue metadata only and
+  never downloads a submitted work.
+- No embedding on the works page — no iframes, media embeds, inline players, or hotlinked
+  images of submitted works. Listings are text metadata plus an outbound hyperlink, ever.
+- The submitter affirms rights, consent, and responsibility for accuracy and lawfulness in
+  the required checkbox; the site's role is limited to moderated display of that metadata.
+- Takedown: removal requests go to wayseer@interdependentway.org; the maintainer removes
+  the `approved` label (or the listing's issue), and the listing disappears on the next
+  build. Delisting requires no code change.
+
+This is design-level mitigation, not legal advice.
diff --git a/src/works/index.njk b/src/works/index.njk
index 4c4cdcf..a8d0c19 100644
--- a/src/works/index.njk
+++ b/src/works/index.njk
@@ -19,6 +19,7 @@ permalink: /works/
 <section class="panel">
   <h2>Boundary</h2>
   <p>Listing is moderation, not review. A listing transfers no endorsement, no research or review status, and no theorem, proof, or empirical status; it does not modify the canon or the Article Lab research ledgers. Each work speaks for its creator, at its own link, under its own license.</p>
+  <p><strong>Display only — nothing is hosted here.</strong> This site never stores, copies, or embeds submitted works. A listing is bibliographic metadata voluntarily provided by its submitter (title, creator, link, short description) pointing to the work wherever its creator hosts it. Responsibility for a work's content, and for the accuracy and lawfulness of the submitted details, rests with the submitter and creator. To request removal of a listing, email <a href="mailto:wayseer@interdependentway.org">wayseer@interdependentway.org</a> — delisting takes effect on the next site build.</p>
 </section>
 <section>
   <p class="eyebrow">Approved submissions</p>

From 273010b5ce6496c8f7b5d8e259733c711e0981a0 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 29 Jul 2026 12:23:03 +0000
Subject: [PATCH 3/4] =?UTF-8?q?feat(works):=20display=20works=20inline=20f?=
 =?UTF-8?q?rom=20creators'=20hosting=20=E2=80=94=20pointers,=20never=20cop?=
 =?UTF-8?q?ies?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Corrects the posture: works ARE displayed on the page (image, audio, PDF, and
allowlisted video/audio embeds), with the visitor's browser loading them
directly from the creator's own hosting at view time. The site stores only
metadata and the pointer — no copies, ever. Optional 'Display source' field on
the submission form; fail-closed derivation (https-only; direct file
extensions or the deliberate IFRAME_EMBED_HOSTS allowlist); works without a
valid display source list as metadata + link. Boundary text, docs, and tests
updated (25 pass).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E93Rxmrs8bXHtWjD7z94bi
---
 .github/ISSUE_TEMPLATE/related-work.yml | 15 +++++++--
 docs/related-works.md                   | 28 +++++++++-------
 scripts/fetch-works.mjs                 | 44 ++++++++++++++++++++++++-
 src/works/index.njk                     | 14 +++++++-
 tests/works-registry.test.mjs           | 21 +++++++++++-
 5 files changed, 105 insertions(+), 17 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/related-work.yml b/.github/ISSUE_TEMPLATE/related-work.yml
index 6af1f8f..b5ae34c 100644
--- a/.github/ISSUE_TEMPLATE/related-work.yml
+++ b/.github/ISSUE_TEMPLATE/related-work.yml
@@ -12,9 +12,11 @@ body:
         never modifies canon or the research ledgers. Your GitHub username and everything you
         write here are public.
 
-        **The site displays, it does not host.** Your work stays wherever you host it; a
-        listing is only the metadata you enter below, linking to it. Removal requests go to
-        wayseer@interdependentway.org and take effect on the next site build.
+        **The site displays, it does not host.** Your work stays wherever you host it. If you
+        provide a display source below, visitors' browsers load the work directly from your
+        hosting to show it inline; the site itself stores only the metadata you enter here.
+        Removal requests go to wayseer@interdependentway.org and take effect on the next
+        site build.
   - type: input
     id: title
     attributes:
@@ -65,6 +67,13 @@ body:
       description: A short description for the listing (a few sentences).
     validations:
       required: true
+  - type: input
+    id: display
+    attributes:
+      label: Display source
+      description: Optional — an https URL for displaying the work inline on the page, loaded straight from your hosting (a direct image/audio/PDF file URL, or an embed URL from YouTube, Vimeo, Bandcamp, SoundCloud, or archive.org). Leave blank to list as a link only.
+    validations:
+      required: false
   - type: input
     id: license
     attributes:
diff --git a/docs/related-works.md b/docs/related-works.md
index a81ba5d..1d35ad1 100644
--- a/docs/related-works.md
+++ b/docs/related-works.md
@@ -24,18 +24,24 @@ Listing is moderation, not review: it transfers no endorsement, no research or r
 status, and no theorem/proof/empirical status, and it never modifies canon or the
 Article Lab research ledgers. Works remain at their own links under their own licenses.
 
-## Display-only posture (legal boundary)
-
-The registry **displays; it never hosts**. Hard rules for anyone touching this feature:
-
-- No file uploads, no copies, no mirrors: the fetcher retrieves issue metadata only and
-  never downloads a submitted work.
-- No embedding on the works page — no iframes, media embeds, inline players, or hotlinked
-  images of submitted works. Listings are text metadata plus an outbound hyperlink, ever.
-- The submitter affirms rights, consent, and responsibility for accuracy and lawfulness in
-  the required checkbox; the site's role is limited to moderated display of that metadata.
+## Display, not host (legal boundary)
+
+The registry **displays works without hosting them**. Hard rules for anyone touching
+this feature:
+
+- The site stores no copies: the fetcher retrieves issue metadata only and never
+  downloads a submitted work. Inline display uses pointers — the visitor's browser loads
+  the image/audio/PDF/embed directly from the creator's own hosting at view time.
+- Display sources are validated fail-closed: https only; direct image/audio/PDF file
+  URLs, or iframe embeds from the deliberate allowlist in `scripts/fetch-works.mjs`
+  (`IFRAME_EMBED_HOSTS`). Extending the allowlist is a deliberate decision — every entry
+  means third-party script runs on the works page for approved listings.
+- A work with no (or an invalid) display source lists as metadata plus an outbound link;
+  invalid display sources exclude the submission visibly so the submitter can fix it.
+- The submitter affirms rights, consent, and responsibility for accuracy and lawfulness
+  in the required checkbox; the site's role is limited to moderated display.
 - Takedown: removal requests go to wayseer@interdependentway.org; the maintainer removes
   the `approved` label (or the listing's issue), and the listing disappears on the next
-  build. Delisting requires no code change.
+  build. No copy remains because none was ever made.
 
 This is design-level mitigation, not legal advice.
diff --git a/scripts/fetch-works.mjs b/scripts/fetch-works.mjs
index f43a853..0597458 100644
--- a/scripts/fetch-works.mjs
+++ b/scripts/fetch-works.mjs
@@ -54,7 +54,34 @@ export const REQUIRED_FIELDS = {
   'Description': 'description'
 };
 
-const OPTIONAL_FIELDS = { 'License note': 'license' };
+const OPTIONAL_FIELDS = { 'License note': 'license', 'Display source': 'displayUrl' };
+
+// Hosts whose player/embed URLs may be iframed. Extend deliberately; every
+// entry means third-party script runs on the works page for approved listings.
+export const IFRAME_EMBED_HOSTS = new Set([
+  'www.youtube.com',
+  'www.youtube-nocookie.com',
+  'player.vimeo.com',
+  'bandcamp.com',
+  'w.soundcloud.com',
+  'archive.org'
+]);
+
+const IMAGE_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.gif', '.webp', '.svg', '.avif'];
+const AUDIO_EXTENSIONS = ['.mp3', '.ogg', '.wav', '.m4a', '.flac', '.opus'];
+
+// Derive how a display source is shown. The site never fetches or stores the
+// bytes — these are pointers the visitor's browser loads from the creator's
+// own hosting at view time (display, not host).
+export function deriveDisplay(displayUrl) {
+  const url = new URL(displayUrl);
+  const pathname = url.pathname.toLowerCase();
+  if (IMAGE_EXTENSIONS.some(ext => pathname.endsWith(ext))) return { kind: 'image', url: url.href };
+  if (AUDIO_EXTENSIONS.some(ext => pathname.endsWith(ext))) return { kind: 'audio', url: url.href };
+  if (pathname.endsWith('.pdf')) return { kind: 'pdf', url: url.href };
+  if (IFRAME_EMBED_HOSTS.has(url.hostname)) return { kind: 'iframe', url: url.href };
+  return null;
+}
 
 // GitHub issue forms render each field as "### <Label>" followed by the value;
 // empty optional fields arrive as "_No response_".
@@ -98,6 +125,21 @@ export function validateSubmission(fields) {
   }
   if (work.description.length > 1200) problems.push('description exceeds 1200 characters');
   if (work.relation.length > 1200) problems.push('relation exceeds 1200 characters');
+  work.display = null;
+  if (work.displayUrl) {
+    try {
+      const displayTarget = new URL(work.displayUrl);
+      if (displayTarget.protocol !== 'https:') {
+        problems.push('display source must be https');
+      } else {
+        work.display = deriveDisplay(displayTarget.href);
+        if (!work.display) problems.push(`display source is not a direct image/audio/pdf file or an allowlisted embed host (${[...IFRAME_EMBED_HOSTS].join(', ')})`);
+      }
+    } catch {
+      problems.push(`display source is not a valid URL: ${work.displayUrl}`);
+    }
+  }
+  delete work.displayUrl;
   return { work, problems };
 }
 
diff --git a/src/works/index.njk b/src/works/index.njk
index a8d0c19..c17570d 100644
--- a/src/works/index.njk
+++ b/src/works/index.njk
@@ -19,7 +19,7 @@ permalink: /works/
 <section class="panel">
   <h2>Boundary</h2>
   <p>Listing is moderation, not review. A listing transfers no endorsement, no research or review status, and no theorem, proof, or empirical status; it does not modify the canon or the Article Lab research ledgers. Each work speaks for its creator, at its own link, under its own license.</p>
-  <p><strong>Display only — nothing is hosted here.</strong> This site never stores, copies, or embeds submitted works. A listing is bibliographic metadata voluntarily provided by its submitter (title, creator, link, short description) pointing to the work wherever its creator hosts it. Responsibility for a work's content, and for the accuracy and lawfulness of the submitted details, rests with the submitter and creator. To request removal of a listing, email <a href="mailto:wayseer@interdependentway.org">wayseer@interdependentway.org</a> — delisting takes effect on the next site build.</p>
+  <p><strong>Displayed, not hosted.</strong> This site stores no copies of any work. Where a work appears inline — an image, a track, a video, a document — the visitor's browser loads it directly from the creator's own hosting at view time; this site holds only the submitted metadata and the pointer. Responsibility for a work's content, and for the accuracy and lawfulness of the submitted details, rests with the submitter and creator. To request removal of a listing, email <a href="mailto:wayseer@interdependentway.org">wayseer@interdependentway.org</a> — delisting takes effect on the next site build, and no copy remains because none was ever made.</p>
 </section>
 <section>
   <p class="eyebrow">Approved submissions</p>
@@ -34,6 +34,18 @@ permalink: /works/
           <span class="status status-public">{{ work.type }}</span>
           <h3><a href="{{ work.url }}">{{ work.title }}</a></h3>
           <p><strong>{{ work.creator }}</strong></p>
+          {% if work.display %}
+            {% if work.display.kind == 'image' %}
+              <img src="{{ work.display.url }}" alt="{{ work.title }} — {{ work.creator }}" loading="lazy" referrerpolicy="no-referrer" style="max-width:100%;height:auto;">
+            {% elif work.display.kind == 'audio' %}
+              <audio controls preload="none" src="{{ work.display.url }}" style="width:100%;">Your browser cannot play this audio; use the work's link above.</audio>
+            {% elif work.display.kind == 'pdf' %}
+              <iframe src="{{ work.display.url }}" title="{{ work.title }} — {{ work.creator }}" loading="lazy" referrerpolicy="no-referrer" style="width:100%;aspect-ratio:3/4;border:0;"></iframe>
+            {% elif work.display.kind == 'iframe' %}
+              <iframe src="{{ work.display.url }}" title="{{ work.title }} — {{ work.creator }}" loading="lazy" referrerpolicy="no-referrer" allowfullscreen sandbox="allow-scripts allow-same-origin allow-presentation allow-popups" style="width:100%;aspect-ratio:16/9;border:0;"></iframe>
+            {% endif %}
+            <p><small>Displayed from the creator's own hosting — no copy is stored on this site.</small></p>
+          {% endif %}
           <p>{{ work.description }}</p>
           <p><em>Relation:</em> {{ work.relation }}</p>
           {% if work.license %}<p><small>License: {{ work.license }}</small></p>{% endif %}
diff --git a/tests/works-registry.test.mjs b/tests/works-registry.test.mjs
index 2055194..4a25167 100644
--- a/tests/works-registry.test.mjs
+++ b/tests/works-registry.test.mjs
@@ -3,7 +3,7 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { readFile } from 'node:fs/promises';
-import { parseIssueForm, validateSubmission, buildRegistry, WORK_TYPES } from '../scripts/fetch-works.mjs';
+import { parseIssueForm, validateSubmission, buildRegistry, deriveDisplay, WORK_TYPES } from '../scripts/fetch-works.mjs';
 
 const validBody = [
   '### Work title\n\nOn Interdependent Systems\n',
@@ -64,6 +64,25 @@ test('registry lists only doubly-labeled issues, excludes invalid ones visibly,
   assert.ok(excluded[0].problems.length > 0);
 });
 
+test('display sources derive to pointer kinds and never to copies', () => {
+  assert.deepEqual(deriveDisplay('https://example.org/piece.PNG'.toLowerCase()), { kind: 'image', url: 'https://example.org/piece.png' });
+  assert.equal(deriveDisplay('https://example.org/track.mp3').kind, 'audio');
+  assert.equal(deriveDisplay('https://example.org/paper.pdf').kind, 'pdf');
+  assert.equal(deriveDisplay('https://www.youtube-nocookie.com/embed/abc123').kind, 'iframe');
+  assert.equal(deriveDisplay('https://random.example/embed/thing'), null);
+
+  const withDisplay = validateSubmission(parseIssueForm(validBody + '\n### Display source\n\nhttps://example.org/piece.png\n'));
+  assert.equal(withDisplay.problems.length, 0);
+  assert.deepEqual(withDisplay.work.display, { kind: 'image', url: 'https://example.org/piece.png' });
+  assert.ok(!('displayUrl' in withDisplay.work));
+
+  const badDisplay = validateSubmission(parseIssueForm(validBody + '\n### Display source\n\nhttps://random.example/embed/thing\n'));
+  assert.ok(badDisplay.problems.some(p => p.includes('display source')));
+
+  const noDisplay = validateSubmission(parseIssueForm(validBody));
+  assert.equal(noDisplay.work.display, null);
+});
+
 test('generated works dataset exists with valid schema after offline preparation', async () => {
   const dataset = JSON.parse(await readFile('src/_data/generated/works.json', 'utf8'));
   assert.equal(dataset.schema, 'interdependency.related-works/1.0.0');

From a038f93e05bbfd6fa243ca02b7ee0907271067cc Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 29 Jul 2026 12:29:09 +0000
Subject: [PATCH 4/4] feat(works): broaden the embed-host allowlist across
 media
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

29 hosts grouped by medium — video (YouTube, Vimeo, Dailymotion, Twitch,
Rumble, Odysee, Streamable, Loom, TED), audio/music/podcasts (SoundCloud,
Bandcamp, Spotify, Apple Music/Podcasts, Mixcloud, Audiomack, Podbean),
documents/archives/slides (archive.org, Google Docs, OneDrive, Issuu, Scribd,
SlideShare), code/interactive/3D (CodePen, CodeSandbox, JSFiddle, itch.io,
Sketchfab). Submitters can request missing platforms in their submission;
adding one is a one-line reviewed change. 25 tests pass.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E93Rxmrs8bXHtWjD7z94bi
---
 .github/ISSUE_TEMPLATE/related-work.yml |  2 +-
 docs/related-works.md                   |  7 +++--
 scripts/fetch-works.mjs                 | 35 ++++++++++++++++++++++---
 3 files changed, 38 insertions(+), 6 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/related-work.yml b/.github/ISSUE_TEMPLATE/related-work.yml
index b5ae34c..a13382c 100644
--- a/.github/ISSUE_TEMPLATE/related-work.yml
+++ b/.github/ISSUE_TEMPLATE/related-work.yml
@@ -71,7 +71,7 @@ body:
     id: display
     attributes:
       label: Display source
-      description: Optional — an https URL for displaying the work inline on the page, loaded straight from your hosting (a direct image/audio/PDF file URL, or an embed URL from YouTube, Vimeo, Bandcamp, SoundCloud, or archive.org). Leave blank to list as a link only.
+      description: Optional — an https URL for displaying the work inline on the page, loaded straight from your hosting. Either a direct image/audio/PDF file URL, or an embed URL from a supported platform (YouTube, Vimeo, Dailymotion, Twitch, Rumble, Odysee, Streamable, Loom, TED, SoundCloud, Bandcamp, Spotify, Apple Music/Podcasts, Mixcloud, Audiomack, Podbean, archive.org, Google Docs, OneDrive, Issuu, Scribd, SlideShare, CodePen, CodeSandbox, JSFiddle, itch.io, Sketchfab). Missing your platform? Mention it in the description and it can be added. Leave blank to list as a link only.
     validations:
       required: false
   - type: input
diff --git a/docs/related-works.md b/docs/related-works.md
index 1d35ad1..eb275b9 100644
--- a/docs/related-works.md
+++ b/docs/related-works.md
@@ -34,8 +34,11 @@ this feature:
   the image/audio/PDF/embed directly from the creator's own hosting at view time.
 - Display sources are validated fail-closed: https only; direct image/audio/PDF file
   URLs, or iframe embeds from the deliberate allowlist in `scripts/fetch-works.mjs`
-  (`IFRAME_EMBED_HOSTS`). Extending the allowlist is a deliberate decision — every entry
-  means third-party script runs on the works page for approved listings.
+  (`IFRAME_EMBED_HOSTS` — grouped by medium: video, audio/music/podcasts,
+  documents/archives/slides, code/interactive/3D). Extending the allowlist is a
+  deliberate per-host decision — every entry means third-party script runs on the works
+  page for approved listings — but it is expected to grow: submitters can request a
+  missing platform in their submission, and adding it is a one-line change plus review.
 - A work with no (or an invalid) display source lists as metadata plus an outbound link;
   invalid display sources exclude the submission visibly so the submitter can fix it.
 - The submitter affirms rights, consent, and responsibility for accuracy and lawfulness
diff --git a/scripts/fetch-works.mjs b/scripts/fetch-works.mjs
index 0597458..95b236a 100644
--- a/scripts/fetch-works.mjs
+++ b/scripts/fetch-works.mjs
@@ -58,13 +58,42 @@ const OPTIONAL_FIELDS = { 'License note': 'license', 'Display source': 'displayU
 
 // Hosts whose player/embed URLs may be iframed. Extend deliberately; every
 // entry means third-party script runs on the works page for approved listings.
+// Grouped by medium; unlisted hosts (e.g. a PeerTube instance) can be added on
+// request via an ordinary issue.
 export const IFRAME_EMBED_HOSTS = new Set([
+  // video
   'www.youtube.com',
   'www.youtube-nocookie.com',
   'player.vimeo.com',
-  'bandcamp.com',
+  'www.dailymotion.com',
+  'player.twitch.tv',
+  'rumble.com',
+  'odysee.com',
+  'streamable.com',
+  'www.loom.com',
+  'embed.ted.com',
+  // audio, music, podcasts
   'w.soundcloud.com',
-  'archive.org'
+  'bandcamp.com',
+  'open.spotify.com',
+  'embed.music.apple.com',
+  'embed.podcasts.apple.com',
+  'www.mixcloud.com',
+  'audiomack.com',
+  'www.podbean.com',
+  // documents, archives, slides
+  'archive.org',
+  'docs.google.com',
+  'onedrive.live.com',
+  'e.issuu.com',
+  'www.scribd.com',
+  'www.slideshare.net',
+  // code, games, interactive, 3D
+  'codepen.io',
+  'codesandbox.io',
+  'jsfiddle.net',
+  'itch.io',
+  'sketchfab.com'
 ]);
 
 const IMAGE_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.gif', '.webp', '.svg', '.avif'];
@@ -133,7 +162,7 @@ export function validateSubmission(fields) {
         problems.push('display source must be https');
       } else {
         work.display = deriveDisplay(displayTarget.href);
-        if (!work.display) problems.push(`display source is not a direct image/audio/pdf file or an allowlisted embed host (${[...IFRAME_EMBED_HOSTS].join(', ')})`);
+        if (!work.display) problems.push('display source is not a direct image/audio/pdf file URL or an embed URL from a supported host (see IFRAME_EMBED_HOSTS in scripts/fetch-works.mjs; new hosts can be requested via an issue)');
       }
     } catch {
       problems.push(`display source is not a valid URL: ${work.displayUrl}`);