Merge branch 'main' into feat/cctv-model-specs-refresh

docs/CURRENT-STATE.md

@@ -9,14 +9,10 @@ broader suffix variants. Follow-ups retain boundary provenance, and cancelled
 lookups preserve the previous analyst cohort and boundary source. Navigation
 search keeps a successful geocode, with no search or view-based region recovery.
 
-Docker Compose forwards `GEV_KEY_SETUP_TRUSTED_PEERS` and `GEV_ALLOWED_HOSTS`
-from the shell or project `.env` before `scripts/docker-start.mjs` runs; shell
-values take precedence. The launcher's `none` policy resolves to an empty trusted
-peer list and is assigned before importing Vite, preventing later dotenv loading
-from replacing it. Unset or blank values retain automatic gateway discovery.
-Startup logs distinguish an explicit `none` policy from a missing default route.
-This changes neither loopback-only port publishing nor the Provider Settings
-Host, Origin, proxy-header and sharing checks.
+Share links and structured views accept only own keys in their style registries.
+Inherited names such as `constructor` and `__proto__` fall back to the existing
+normal/null defaults without interrupting other restored fields. Programmatic
+visual-style calls ignore unknown or non-string values before mutating state.
 
 Shared distance checks use `src/geoDistance.js` with `{ lat, lon }` points and
 the IUGG mean spherical Earth radius, 6371.0088 km. `greatCircleKm` is