iqon/MEMORY/WORK/20260520-legacy-iqon-selected-steps/PRD.md

---

task: Старый IQON: hardening mobile SEO contacts verify slug: 20260520-legacy-iqon-selected-steps effort: extended phase: package progress: 16/16 mode: interactive started: 2026-05-20T00:00:00+03:00 updated: 2026-05-20T00:00:00+03:00

Старый IQON: hardening mobile SEO contacts verify

Purpose: зафиксировать и выполнить выбранные шаги 2, 3, 4, 6, 8 для старого дизайна iqon.com без замены дизайна.

Context

Пользователь выбрал пункты 2, 3, 4, 6, 8: hardening старого WordPress, mobile fix, SEO cleanup, contacts, verification. Старый дизайн должен остаться на apex iqon.com; новый дизайн должен остаться на www.iqon.com.

Criteria

• ISC-1: Apex WordPress host split remains preserved.
• ISC-2: WWW static redesign route remains preserved.
• ISC-3: XML-RPC endpoint is blocked externally.
• ISC-4: REST public users endpoint is blocked externally.
• ISC-5: Readme and license disclosure endpoints are blocked.
• ISC-6: Security headers are emitted on apex pages.
• ISC-7: Viewport meta exists on legacy pages.
• ISC-8: Skip link exists for keyboard navigation.
• ISC-9: Legacy layout adapts below tablet widths.
• ISC-10: Forms and embeds fit mobile viewport.
• ISC-11: Home title and description are cleaned.
• ISC-12: Yoast site name is normalized to IQON.
• ISC-13: HTTP asset URLs are upgraded in output.
• ISC-14: Footer contact data uses current channels.
• ISC-15: Contact page removes obsolete office blocks.
• ISC-16: Live verification records apex and www status.

Decisions

• Preserve old visual identity and only patch behavior/content.
• Avoid deleting remote WordPress files.
• Upload only touched files after local edits.

Verification

• Run phase verification script against https://iqon.com.
• Check contact page text and obsolete channels.
• Check https://www.iqon.com/ still serves new design.