every icon revision so far has landed on a NEW FILENAME rather than overwriting the last one: favicon.svg/-32.png (v1) and favicon-v2.svg/-32.png both reached prod, and a browser that fetched either will not re-request that path for a year. This `icon-lock-*` set is the third revision and follows the same rule — the next change gets new names again, never an overwrite. index.html itself is `no-cache, no-store`, so new names reach every visitor immediately. The art is the operator-supplied padlock, and it is now a PNG SET rather than an SVG: there is no vector source for it, and a lone SVG link would have kept winning over these in Chrome, so the v2 SVG is deleted rather than left behind. WHY FOUR FILES. 16/32 are the tab icons and keep the source's transparency — they sit on the browser's own tab strip, and the yellow body reads on a light and a dark one alike. 180 (apple-touch) and 192 are the HOME-SCREEN icons and are deliberately OPAQUE white: iOS composites a transparent apple-touch icon onto BLACK, and this lock is drawn with a black outline, so on black it loses its edge completely. They also carry ~12% padding so iOS's corner rounding cannot clip the shackle. No web manifest is shipped: Android falls back to the 192 on its own, and a manifest would add install-prompt behaviour nobody asked for on a paid-traffic funnel. -->