@@ -142,7 +142,7 @@ jobs:
           if [ "${{ matrix.backend }}" != "flask" ]; then
             pip install "dash[${{ matrix.backend }}]" httpx
             # The backend extra from PyPI, same floor as requirements.txt.
-            pip install "dash-improve-my-llms[${{ matrix.backend }}]>=2.3.4"
+            pip install "dash-improve-my-llms[${{ matrix.backend }}]>=2.7.1"
           fi
           pip install pytest pytest-cov
           # An explicit matrix pin overrides requirements.txt, to prove the
@@ -162,9 +162,11 @@ jobs:
 
           # 4.4 floor: 4.3.0's FastAPI backend 500s on every non-root URL.
           assert parts(dash.__version__)[:2] >= (4, 4), dash.__version__
-          # 2.3.4 is the network standard: below it `resolve_site_title` does
-          # not exist and this site's published identity degrades to app.title.
-          assert parts(pkg.__version__) >= (2, 3, 4), pkg.__version__
+          # 2.7.1 is this app's floor. 2.7.0 is what it cannot START without
+          # (configure_geo, the panel, per-vendor policy and the rate ceiling
+          # are all called unconditionally); 2.7.1 is the standards
+          # fast-follow the fleet floors on so the round happens once.
+          assert parts(pkg.__version__) >= (2, 7, 1), pkg.__version__
           # 21.x carried two request-smuggling CVEs (CVE-2024-6827,
           # CVE-2024-1135). markdown2dash's spurious <22 pin must not win.
           assert parts(gunicorn.__version__)[:2] >= (23, 0), gunicorn.__version__
@@ -234,7 +236,7 @@ jobs:
 
           v = version('dash-improve-my-llms')
           print('dash-improve-my-llms', v)
-          assert parts(v) >= (2, 3, 4), f'expected >=2.3.4 (resolve_site_title), image has {v}'
+          assert parts(v) >= (2, 7, 1), f'expected >=2.7.1 (geo guardrail, panel, vendor policy, discovery relations), image has {v}'
 
           # markdown2dash installs with --no-deps to dodge its gunicorn<22
           # pin; this assert is what proves the dodge kept working. 21.x
 
@@ -31,36 +31,25 @@
 
 
 def _ua_options():
-    """Real UA tokens grouped by class, from whichever API this build has.
+    """Real UA tokens grouped by class, straight from the vendor registry.
 
-    `vendors` is a 2.7.0 module and this repo still floors on 2.6.1 (see
-    run.py's LLMS_HAS_27 block), so the richer registry is used when it is
-    there and the 2.6.x token lists when it is not. This runs at LAYOUT time,
-    which is why it cannot simply assume the newer API: an ImportError here
-    takes down the whole app at boot, not just this showcase.
+    Runs at LAYOUT time, so it depends on `vendors` existing — which the
+    >=2.7.0 floor in requirements.txt guarantees. It carried a pre-2.7.0
+    fallback while that floor was still 2.6.1; the floor moved on
+    2026-08-23 and the fallback went with it.
     """
+    from dash_improve_my_llms.vendors import VENDORS
+
     groups = {"training": [], "search": [], "traditional": []}
-    try:
-        from dash_improve_my_llms.vendors import VENDORS
-
-        for vendor in VENDORS:
-            # Not every vendor publishes a robots token: `anthropic-legacy` is
-            # a UA-only identity (anthropic-ai, claude-web) with an empty
-            # robots_tokens tuple, so fall back to what the middleware
-            # matches on.
-            token = (vendor.robots_tokens or vendor.ua_tokens or (vendor.key,))[0]
-            groups.setdefault(vendor.cls, []).append(
-                {"value": f"{token}/1.0",
-                 "label": f"{vendor.display} — {vendor.operator}"}
-            )
-    except ImportError:  # pre-2.7.0: the flat token lists, no operator names
-        from dash_improve_my_llms import bot_detection
-
-        for cls, tokens in (("training", bot_detection.AI_TRAINING_BOTS),
-                            ("search", bot_detection.AI_SEARCH_BOTS),
-                            ("traditional", bot_detection.TRADITIONAL_BOTS)):
-            for token in tokens:
-                groups[cls].append({"value": f"{token}/1.0", "label": token})
+    for vendor in VENDORS:
+        # Not every vendor publishes a robots token: `anthropic-legacy` is a
+        # UA-only identity (anthropic-ai, claude-web) with an empty
+        # robots_tokens tuple, so fall back to what the middleware matches on.
+        token = (vendor.robots_tokens or vendor.ua_tokens or (vendor.key,))[0]
+        groups.setdefault(vendor.cls, []).append(
+            {"value": f"{token}/1.0",
+             "label": f"{vendor.display} — {vendor.operator}"}
+        )
 
     data = [{"group": "A human's browser",
              "items": [{"value": BROWSER_UA, "label": "Chrome 120 (a person)"}]}]
@@ -161,22 +150,20 @@ def _show(path, user_agent):
     is_bot = is_any_bot(user_agent)
     bot_class = get_bot_type(user_agent) if is_bot else "human"
 
-    # Same 2.6.1 degrade as _ua_options: without the registry there is no
-    # vendor identity and no per-vendor fold, so the class defaults stand in.
-    vendor, policy = None, "allow"
-    try:
-        from dash_improve_my_llms.bot_detection import get_bot_vendor
-        from dash_improve_my_llms.vendors import VENDORS, effective_policies
+    from dash_improve_my_llms.bot_detection import get_bot_vendor
+    from dash_improve_my_llms.vendors import VENDORS, effective_policies
 
-        vendor = next((v for v in VENDORS if v.key == get_bot_vendor(user_agent)), None)
-        if vendor is not None:
+    vendor = next((v for v in VENDORS if v.key == get_bot_vendor(user_agent)), None)
+    policy = "allow"
+    if vendor is not None:
+        try:
             policy = effective_policies(
                 getattr(dash.get_app(), "_robots_config", None)
             )[vendor.key]
-    except ImportError:
-        policy = "block" if bot_class == "training" else "allow"
-    except Exception:
-        policy = "allow"
+        except Exception:
+            # The fold reads a live config object; a showcase must degrade
+            # rather than break the page it is embedded in.
+            policy = "allow"
 
     verdict = _verdict_card(is_bot, vendor, bot_class, policy)
 
 
@@ -123,14 +123,13 @@ def _summary_cards(denied):
     import dash
     from dash_improve_my_llms import __version__ as pkg_version
 
-    try:
-        # `vendors` is 2.7.0; this repo still floors on 2.6.1 (run.py's
-        # LLMS_HAS_27 block), so the fold is optional and its absence shows
-        # as zero rather than an error toast.
-        from dash_improve_my_llms.vendors import effective_policies
+    from dash_improve_my_llms.vendors import effective_policies
 
+    try:
         policies = effective_policies(getattr(dash.get_app(), "_robots_config", None))
     except Exception:
+        # The fold reads a live config object; a public showcase degrades to
+        # zeroes rather than throwing an error toast at a reader.
         policies = {}
     blocked = sum(1 for value in policies.values() if value == "block")
     metered = sum(1 for value in policies.values() if value == "meter")
 
@@ -21,16 +21,9 @@
 
 
 def _vendor_rows():
-    """(key, display, operator, class) per vendor — [] before 2.7.0.
-
-    Runs at LAYOUT time, so an ImportError here would take down the app at
-    boot rather than degrading this one showcase. See run.py's LLMS_HAS_27
-    block: this repo still floors on 2.6.1 on purpose.
-    """
-    try:
-        from dash_improve_my_llms.vendors import VENDORS
-    except ImportError:
-        return []
+    """(key, display, operator, class) for every vendor in the registry."""
+    from dash_improve_my_llms.vendors import VENDORS
+
     return [(v.key, v.display, v.operator, v.cls) for v in VENDORS]
 
 
@@ -123,23 +116,18 @@ def _render(training, search, traditional, docs, delay, vendor, action):
     from dash_improve_my_llms.robots_generator import generate_robots_txt
 
     # THROWAWAY. Never assigned to the app — see this module's docstring.
-    kwargs = dict(
+    from dash_improve_my_llms.vendors import effective_policies
+
+    config = RobotsConfig(
         block_ai_training=bool(training),
         allow_ai_search=bool(search),
         allow_traditional=bool(traditional),
+        block_ai_training_docs=bool(docs),
         crawl_delay=int(delay) if delay else None,
+        vendor_policy={vendor: action} if vendor else None,
     )
-    try:
-        from dash_improve_my_llms.vendors import effective_policies
-
-        kwargs["block_ai_training_docs"] = bool(docs)
-        kwargs["vendor_policy"] = {vendor: action} if vendor else None
-    except ImportError:  # pre-2.7.0: neither keyword exists
-        effective_policies = None
-
-    config = RobotsConfig(**kwargs)
     robots = generate_robots_txt(sitemap_url=SITEMAP, base_url=BASE_URL, config=config)
-    policies = effective_policies(config) if effective_policies else {}
+    policies = effective_policies(config)
 
     robots_panel = dmc.Paper(
         dmc.Code(robots, block=True,
 
@@ -117,15 +117,32 @@ python-dotenv>=1.0.0
 # (the invented daily dates are gone — Google discards a sitemap of lies
 # wholesale), JSON-LD publisher.logo, and the llms.txt viewer banner
 # de-dup. Floor, not pin: the fleet upgrades through this line.
-# 2.6.1 floor: the universal prerender ships VISIBLE to non-JS consumers
-# (below it the block carries a literal `hidden` attribute and every
-# visibility-respecting reader sees only "Loading..." — the outside-audit
-# finding of 2026-08-22). run.py's boot floor and a test in
-# tests/test_pages.py encode the same number — grep it, don't move one.
-dash-improve-my-llms[flask]>=2.6.1
-# dash-improve-my-llms[fastapi]>=2.6.1   # Dash 4.4+ FastAPI backend
-# dash-improve-my-llms[quart]>=2.6.1     # Dash 4.4+ Quart backend
-# dash-improve-my-llms[all]>=2.6.1       # all three
+# 2.7.1 floor (2026-08-23). TWO releases matter here and the floor names the
+# later one deliberately — the fleet's floor round happens once.
+#
+# 2.7.0, the agent toll gate, is what this app CANNOT START without: it calls
+# `configure_geo`, `LLMSConfig(panel=)`, `RobotsConfig(vendor_policy=)` and
+# the rate ceiling unconditionally, so anything lower is an ImportError at
+# boot rather than a degraded feature. It also carries the two defects this
+# repo's own soak found and gated the tag on (BUGS-2.7.0.md #1 and #2): a
+# `deny_countries` callable returning a nested object used to 500 EVERY
+# request on EVERY surface, and a per-vendor block on a traditional crawler
+# was enforced but never published in robots.txt. Both are reachable from the
+# control board this site ships, which is why they were blocking.
+#
+# 2.7.1 is the standards fast-follow, published 36 minutes after 2.7.0 and
+# additive throughout: `rel="describedby"` discovery relations on both
+# document lanes plus HTTP `Link` headers, a `text/plain` Accept ramp for
+# retrieval stacks that reject `text/markdown`, and a `llms-source-digest`
+# that makes representation parity across the three lanes provable rather
+# than plausible.
+#
+# 2.6.1 remains the previous rung and its reason is still live: below it the
+# universal prerender ships VISIBLE to non-JS consumers.
+dash-improve-my-llms[flask]>=2.7.1
+# dash-improve-my-llms[fastapi]>=2.7.1   # Dash 4.4+ FastAPI backend
+# dash-improve-my-llms[quart]>=2.7.1     # Dash 4.4+ Quart backend
+# dash-improve-my-llms[all]>=2.7.1       # all three
 
 # Clerk authentication (dash-clerk-auth, vendored — not on PyPI).
 #
 
@@ -79,7 +79,7 @@ def _version(text: str) -> tuple:
 # `configure_seo` is deliberately imported AFTER this floor fires (see the
 # floors block) so a stale environment gets the floor's diagnosis instead of
 # a bare ImportError.
-LLMS_PKG_FLOOR = (2, 6, 1)
+LLMS_PKG_FLOOR = (2, 7, 1)
 
 # THE FORK POINT — claim this app's network identity before any
 # hub-facing module imports. Every module that names this app
@@ -174,6 +174,10 @@ def _dependency_floor(message: str, fatal: bool) -> None:
     _dependency_floor(
         f"dash-improve-my-llms {LLMS_PKG_VERSION} is below the "
         f"{'.'.join(str(n) for n in LLMS_PKG_FLOOR)} floor in requirements.txt. "
+        "Below 2.7.0 this app does not start at all: it calls configure_geo, "
+        "LLMSConfig(panel=), RobotsConfig(vendor_policy=) and the rate "
+        "ceiling unconditionally, and the control board writes through the "
+        "callable seams all four expose. "
         "Below 2.6.1 the universal prerender ships `hidden`, so every "
         "visibility-respecting consumer (text extractors, arguably crawler "
         "content-weighting) reads 'Loading...' instead of the page's prose. "
@@ -203,56 +207,18 @@ def configure_seo(**_kwargs) -> None:
             "package) — crawler identity tags and root icons not emitted."
         )
 
-# ----------------------------------------------------------------------------
-# The 2.7.0 surface: the geo guardrail, the operator panel, per-vendor policy
-# and the rate ceiling. Same post-floor pattern as configure_seo above, and
-# for a sharper reason: requirements.txt still floors at 2.6.1 ON PURPOSE
-# (2.7.0 is not on PyPI yet), so this app has to keep booting on the pinned
-# floor while the code is written against the newer one. Every 2.7.0 call
-# below is guarded by LLMS_HAS_27 rather than by a version comparison —
-# capability, not number, so a partial backport or a yanked release cannot
-# make the guard lie.
+# The 2.7.0 surface: the geo guardrail and the operator panel. Imported after
+# the floor check for the same reason configure_seo is — on a package below
+# the floor these names do not exist, and the floor's diagnosis above beats a
+# bare ImportError.
 #
-# WHEN 2.7.0 PUBLISHES: move the requirements.txt floor to >=2.7.0, raise
-# LLMS_PKG_FLOOR, and this whole block collapses to a plain import. Until
-# then the degrade is load-bearing and tests/test_runtime_imports.py keeps
-# it honest.
-try:
-    from dash_improve_my_llms import configure_geo, geo as _geo  # noqa: E402
-
-    LLMS_HAS_27 = True
-except ImportError:  # pragma: no cover — the pinned 2.6.1 floor
-    LLMS_HAS_27 = False
-    _geo = None
-
-    def configure_geo(**_kwargs) -> None:
-        print(
-            "[llms] WARNING: configure_geo unavailable (pre-2.7.0 package) — "
-            "the country guardrail is not wired. The control board's geo "
-            "section will say so rather than pretending to block."
-        )
-
-
-def _llms_config_27(**kwargs):
-    """`LLMSConfig` with the 2.7.0-only keywords, when they exist.
-
-    `panel=` and `rate_limit_per_minute=` are positional-or-keyword arguments
-    on 2.7.0 and simply absent on 2.6.1, where passing them is a TypeError at
-    boot rather than a degraded feature. Filtering against the real signature
-    keeps one call site for both.
-    """
-    import inspect
-
-    accepted = inspect.signature(LLMSConfig.__init__).parameters
-    unsupported = [k for k in kwargs if k not in accepted]
-    for key in unsupported:
-        kwargs.pop(key)
-    if unsupported:
-        print(
-            "[llms] WARNING: this dash-improve-my-llms build does not accept "
-            f"{', '.join(sorted(unsupported))} — feature(s) not wired."
-        )
-    return LLMSConfig(**kwargs)
+# This was a LLMS_HAS_27 capability block until 2026-08-23, carrying a degrade
+# path for every call site because requirements.txt still floored at >=2.6.1
+# while 2.7.0 was unpublished. 2.7.0 is on PyPI and the floor moved, so the
+# block collapsed to this import — which was its stated design promise, not a
+# convenience. A guard kept past the condition it guards is a guard nobody
+# can reason about.
+from dash_improve_my_llms import configure_geo, geo as _geo  # noqa: E402
 
 
 def _rate_ceiling():
@@ -421,7 +387,7 @@ def _rate_ceiling():
     allow_traditional=True,       # Allow Googlebot, Bingbot, etc.
     crawl_delay=10,
     disallowed_paths=[],
-    **({"vendor_policy": _policy_store.vendor_policy} if LLMS_HAS_27 else {}),
+    vendor_policy=_policy_store.vendor_policy,
 )
 
 # ============================================================================
@@ -755,13 +721,12 @@ async def track_visitor():
     policy_url=os.environ.get("GEO_POLICY_URL", ""),
 )
 
-if LLMS_HAS_27:
-    _geo_policy = _geo.effective_policy()
-    print(
-        f"[llms] geo guardrail: {len(_geo_policy['deny_countries'])} "
-        f"country(ies) denied via {_geo_policy['denylist_source']}, unknown="
-        f"{_geo_policy['unknown']} — store {_policy_store.path()}"
-    )
+_geo_policy = _geo.effective_policy()
+print(
+    f"[llms] geo guardrail: {len(_geo_policy['deny_countries'])} country(ies) "
+    f"denied via {_geo_policy['denylist_source']}, unknown="
+    f"{_geo_policy['unknown']} — store {_policy_store.path()}"
+)
 
 # Wire up the package: /llms.txt, /<page>/llms.txt, /robots.txt, /sitemap.xml,
 # bot-detection middleware, and (on Dash 4.3+) MCP resource registration.
@@ -771,7 +736,7 @@ async def track_visitor():
 # DIMLL_PANEL_TOKEN — so an operator can rotate or revoke it live. Register
 # it only when the token happens to be set at boot and that promise breaks:
 # turning the panel on would cost a redeploy, which is when nobody does it.
-add_llms_routes(app, _llms_config_27(
+add_llms_routes(app, LLMSConfig(
     warn_missing_llms_doc=True,
     panel=True,
     rate_limit_per_minute=_rate_ceiling(),
 
@@ -87,30 +87,6 @@
 STUB_MARKER = "This page contains interactive content that requires JavaScript"
 
 
-def dimll_has_27() -> bool:
-    """Whether the installed package carries the 2.7.0 surface.
-
-    A CAPABILITY probe, matching run.py's LLMS_HAS_27: requirements.txt
-    still floors at >=2.6.1 on purpose, so a clean `pip install -r
-    requirements.txt` resolves 2.6.1 and every 2.7.0-only test in this suite
-    has to SKIP rather than fail. A red suite on the pinned floor would train
-    everyone to ignore it.
-    """
-    try:
-        import dash_improve_my_llms.vendors  # noqa: F401
-
-        return True
-    except ImportError:
-        return False
-
-
-requires_dimll_27 = pytest.mark.skipif(
-    not dimll_has_27(),
-    reason="needs dash-improve-my-llms >= 2.7.0 (requirements.txt still "
-           "floors at >=2.6.1 until the tag ships)",
-)
-
-
 def backend() -> str:
     """Whichever backend the app will actually boot on.
 
 
@@ -17,11 +17,6 @@
 
 import pytest
 
-from conftest import requires_dimll_27
-
-# Every assertion in this module is about the 2.7.0 surface. On the
-# pinned 2.6.1 floor the whole file skips rather than fails.
-pytestmark = requires_dimll_27
 
 DENIED = "RU"