audit: updated grasp01 line refs to reflect purgatory insertion

7 files changed, 143 insertions, 143 deletions

diff --git a/grasp-audit/src/result.rs b/grasp-audit/src/result.rs
index f296633..4e0e1b1 100644
--- a/grasp-audit/src/result.rs
+++ b/grasp-audit/src/result.rs
@@ -327,15 +327,15 @@ mod tests {
     #[test]
     fn test_parse_spec_lines_single() {
         assert_eq!(parse_spec_lines("GRASP-01:nostr-relay:7"), vec![7]);
-        assert_eq!(parse_spec_lines("GRASP-01:git-http:28"), vec![28]);
+        assert_eq!(parse_spec_lines("GRASP-01:git-http:34"), vec![34]);
     }
 
     #[test]
     fn test_parse_spec_lines_range() {
         assert_eq!(parse_spec_lines("GRASP-01:nostr-relay:7-9"), vec![7, 8, 9]);
         assert_eq!(
-            parse_spec_lines("GRASP-01:cors:44-47"),
-            vec![44, 45, 46, 47]
+            parse_spec_lines("GRASP-01:cors:50-53"),
+            vec![50, 51, 52, 53]
         );
     }
 
diff --git a/grasp-audit/src/specs/grasp01/cors.rs b/grasp-audit/src/specs/grasp01/cors.rs
index 409f2d3..f8b5f3b 100644
--- a/grasp-audit/src/specs/grasp01/cors.rs
+++ b/grasp-audit/src/specs/grasp01/cors.rs
@@ -44,7 +44,7 @@ impl CorsTests {
     pub async fn test_cors_allow_origin(_client: &AuditClient, relay_domain: &str) -> TestResult {
         TestResult::new(
             "cors_allow_origin",
-            "GRASP-01:git-http:cors:44",
+            "GRASP-01:git-http:cors:50",
             "Access-Control-Allow-Origin: * on all responses",
         )
         .run(|| {
@@ -90,7 +90,7 @@ impl CorsTests {
     pub async fn test_cors_allow_methods(_client: &AuditClient, relay_domain: &str) -> TestResult {
         TestResult::new(
             "cors_allow_methods",
-            "GRASP-01:git-http:cors:45",
+            "GRASP-01:git-http:cors:51",
             "Access-Control-Allow-Methods: GET, POST on all responses",
         )
         .run(|| {
@@ -134,7 +134,7 @@ impl CorsTests {
     pub async fn test_cors_allow_headers(_client: &AuditClient, relay_domain: &str) -> TestResult {
         TestResult::new(
             "cors_allow_headers",
-            "GRASP-01:git-http:cors:46",
+            "GRASP-01:git-http:cors:52",
             "Access-Control-Allow-Headers: Content-Type on all responses",
         )
         .run(|| {
@@ -181,7 +181,7 @@ impl CorsTests {
     ) -> TestResult {
         TestResult::new(
             "cors_options_preflight",
-            "GRASP-01:git-http:cors:47",
+            "GRASP-01:git-http:cors:53",
             "OPTIONS requests return 204 No Content",
         )
         .run(|| {
diff --git a/grasp-audit/src/specs/grasp01/git_clone.rs b/grasp-audit/src/specs/grasp01/git_clone.rs
index 3d81964..e162558 100644
--- a/grasp-audit/src/specs/grasp01/git_clone.rs
+++ b/grasp-audit/src/specs/grasp01/git_clone.rs
@@ -53,7 +53,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Repository must be cloneable via Git HTTP backend",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -86,7 +86,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Repository must be cloneable via Git HTTP backend",
                 )
                 .fail(format!("Failed to convert pubkey to npub: {}", e))
@@ -121,7 +121,7 @@ impl GitCloneTests {
                 cleanup();
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Repository must be cloneable via Git HTTP backend",
                 )
                 .fail(format!("Failed to execute git clone: {}", e));
@@ -133,7 +133,7 @@ impl GitCloneTests {
             let stderr = String::from_utf8_lossy(&output.stderr);
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Repository must be cloneable via Git HTTP backend",
             )
             .fail(format!("Git clone failed: {}", stderr));
@@ -144,7 +144,7 @@ impl GitCloneTests {
             cleanup();
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Repository must be cloneable via Git HTTP backend",
             )
             .fail("Cloned repository missing .git directory");
@@ -153,7 +153,7 @@ impl GitCloneTests {
         cleanup();
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:28",
+            "GRASP-01:git-http:34",
             "Repository must be cloneable via Git HTTP backend",
         )
         .pass()
@@ -175,7 +175,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Clone URL must follow correct format",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -203,7 +203,7 @@ impl GitCloneTests {
         if !valid_url.contains(&npub) {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Clone URL must follow correct format",
             )
             .fail("URL missing npub");
@@ -212,7 +212,7 @@ impl GitCloneTests {
         if !valid_url.contains(&format!("{}.git", repo_id)) {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Clone URL must follow correct format",
             )
             .fail("URL missing repository identifier");
@@ -241,7 +241,7 @@ impl GitCloneTests {
         if output.status.success() {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Clone URL must follow correct format",
             )
             .fail("Invalid URL was accepted (should have been rejected)");
@@ -249,7 +249,7 @@ impl GitCloneTests {
 
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:28",
+            "GRASP-01:git-http:34",
             "Clone URL must follow correct format",
         )
         .pass()
@@ -278,7 +278,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:36",
+                    "GRASP-01:git-http:42",
                     "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -299,7 +299,7 @@ impl GitCloneTests {
             None => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:36",
+                    "GRASP-01:git-http:42",
                     "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
                 )
                 .fail("Repository announcement missing d tag")
@@ -311,7 +311,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:36",
+                    "GRASP-01:git-http:42",
                     "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
                 )
                 .fail(format!("Failed to convert pubkey to npub: {}", e))
@@ -331,7 +331,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:36",
+                    "GRASP-01:git-http:42",
                     "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
                 )
                 .fail(format!("HTTP request failed: {}", e))
@@ -341,7 +341,7 @@ impl GitCloneTests {
         if !response.status().is_success() {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:36",
+                "GRASP-01:git-http:42",
                 "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
             )
             .fail(format!(
@@ -356,7 +356,7 @@ impl GitCloneTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:36",
+                    "GRASP-01:git-http:42",
                     "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
                 )
                 .fail(format!("Failed to read response body: {}", e))
@@ -370,7 +370,7 @@ impl GitCloneTests {
         if !has_allow_reachable {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:36",
+                "GRASP-01:git-http:42",
                 "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
             )
             .fail("Missing capability: allow-reachable-sha1-in-want");
@@ -379,7 +379,7 @@ impl GitCloneTests {
         if !has_allow_tip {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:36",
+                "GRASP-01:git-http:42",
                 "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
             )
             .fail("Missing capability: allow-tip-sha1-in-want");
@@ -387,7 +387,7 @@ impl GitCloneTests {
 
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:36",
+            "GRASP-01:git-http:42",
             "MUST include allow-reachable-sha1-in-want and allow-tip-sha1-in-want in advertisement",
         )
         .pass()
diff --git a/grasp-audit/src/specs/grasp01/nip11_document.rs b/grasp-audit/src/specs/grasp01/nip11_document.rs
index f4ca7b4..19ceace 100644
--- a/grasp-audit/src/specs/grasp01/nip11_document.rs
+++ b/grasp-audit/src/specs/grasp01/nip11_document.rs
@@ -37,7 +37,7 @@ impl Nip11DocumentTests {
     pub async fn test_nip11_document_exists(client: &AuditClient) -> TestResult {
         TestResult::new(
             "nip11_document_exists",
-            "GRASP-01:nostr-relay:20",
+            "GRASP-01:nostr-relay:26",
             "Serve NIP-11 relay information document",
         )
         .run(|| async {
@@ -96,7 +96,7 @@ impl Nip11DocumentTests {
     pub async fn test_nip11_supported_grasps_field(client: &AuditClient) -> TestResult {
         TestResult::new(
             "nip11_supported_grasps_field",
-            "GRASP-01:nostr-relay:22",
+            "GRASP-01:nostr-relay:28",
             "NIP-11 document includes supported_grasps field with GRASP-01",
         )
         .run(|| async {
@@ -172,7 +172,7 @@ impl Nip11DocumentTests {
     pub async fn test_nip11_repo_acceptance_criteria_field(client: &AuditClient) -> TestResult {
         TestResult::new(
             "nip11_repo_acceptance_criteria_field",
-            "GRASP-01:nostr-relay:23",
+            "GRASP-01:nostr-relay:29",
             "NIP-11 document includes repo_acceptance_criteria field",
         )
         .run(|| async {
@@ -227,7 +227,7 @@ impl Nip11DocumentTests {
     pub async fn test_nip11_curation_field(client: &AuditClient) -> TestResult {
         TestResult::new(
             "nip11_curation_field",
-            "GRASP-01:nostr-relay:24",
+            "GRASP-01:nostr-relay:30",
             "NIP-11 curation field present if curated, absent otherwise",
         )
         .run(|| async {
diff --git a/grasp-audit/src/specs/grasp01/push_authorization.rs b/grasp-audit/src/specs/grasp01/push_authorization.rs
index 25738d1..4f21e70 100644
--- a/grasp-audit/src/specs/grasp01/push_authorization.rs
+++ b/grasp-audit/src/specs/grasp01/push_authorization.rs
@@ -409,7 +409,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected without state event",
                 )
                 .fail(format!("Failed to create repo: {}", e))
@@ -433,7 +433,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected without state event",
                 )
                 .fail(&e)
@@ -447,7 +447,7 @@ impl PushAuthorizationTests {
             cleanup();
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push rejected without state event",
             )
             .fail(&e);
@@ -460,19 +460,19 @@ impl PushAuthorizationTests {
         match push_result {
             Ok(false) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push rejected without state event",
             )
             .pass(),
             Ok(true) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push rejected without state event",
             )
             .fail("Push accepted but should be rejected"),
             Err(e) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push rejected without state event",
             )
             .fail(&e),
@@ -504,13 +504,13 @@ impl PushAuthorizationTests {
         match ctx.get_fixture(FixtureKind::OwnerStateDataPushed).await {
             Ok(_state_event) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized with matching state",
             )
             .pass(),
             Err(e) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized with matching state",
             )
             .fail(format!("{}", e)),
@@ -552,7 +552,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail(format!("Failed to create RepoState fixture: {}", e));
@@ -572,7 +572,7 @@ impl PushAuthorizationTests {
             None => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail("Missing repo_id in state event");
@@ -584,7 +584,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail(format!("Failed to convert pubkey to bech32: {}", e));
@@ -600,7 +600,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail(format!("Failed to clone repo: {}", e));
@@ -623,7 +623,7 @@ impl PushAuthorizationTests {
                 cleanup();
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail(format!("Failed to create/checkout main branch: {}", e));
@@ -632,7 +632,7 @@ impl PushAuthorizationTests {
                 cleanup();
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Push rejected when commit not in state event",
                 )
                 .fail(format!(
@@ -649,7 +649,7 @@ impl PushAuthorizationTests {
             cleanup();
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push rejected when commit not in state event",
             )
             .fail(format!("Failed to create wrong commit: {}", e));
@@ -663,10 +663,10 @@ impl PushAuthorizationTests {
         cleanup();
 
         match push_result {
-            Ok(false) => TestResult::new(test_name, "GRASP-01:git-http:30", "Push rejected when commit not in state event").pass(),
-            Ok(true) => TestResult::new(test_name, "GRASP-01:git-http:30", "Push rejected when commit not in state event")
+            Ok(false) => TestResult::new(test_name, "GRASP-01:git-http:36", "Push rejected when commit not in state event").pass(),
+            Ok(true) => TestResult::new(test_name, "GRASP-01:git-http:36", "Push rejected when commit not in state event")
                 .fail("Push accepted but should be rejected. The pushed commit is not in the state event."),
-            Err(e) => TestResult::new(test_name, "GRASP-01:git-http:30", "Push rejected when commit not in state event").fail(&e),
+            Err(e) => TestResult::new(test_name, "GRASP-01:git-http:36", "Push rejected when commit not in state event").fail(&e),
         }
     }
 
@@ -701,13 +701,13 @@ impl PushAuthorizationTests {
         {
             Ok(_maintainer_state_event) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized by maintainer state event only (no announcement)",
             )
             .pass(),
             Err(e) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized by maintainer state event only (no announcement)",
             )
             .fail(format!("{}", e)),
@@ -744,13 +744,13 @@ impl PushAuthorizationTests {
         {
             Ok(_recursive_maintainer_state_event) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized by recursive maintainer state event",
             )
             .pass(),
             Err(e) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Push authorized by recursive maintainer state event",
             )
             .fail(format!("{}", e)),
@@ -794,7 +794,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail(format!("Failed to get OwnerStateDataPushed fixture: {}", e));
@@ -812,7 +812,7 @@ impl PushAuthorizationTests {
             None => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail("Missing repo_id in state event");
@@ -824,7 +824,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail(format!("Failed to convert pubkey to bech32: {}", e));
@@ -839,7 +839,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail(format!("Failed to clone repo: {}", e));
@@ -861,7 +861,7 @@ impl PushAuthorizationTests {
                 cleanup();
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail(format!("Failed to create commit: {}", e));
@@ -887,7 +887,7 @@ impl PushAuthorizationTests {
                 cleanup();
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:30",
+                    "GRASP-01:git-http:36",
                     "Non-maintainer state events ignored",
                 )
                 .fail(format!("Failed to build rogue state event: {}", e));
@@ -899,7 +899,7 @@ impl PushAuthorizationTests {
             cleanup();
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:30",
+                "GRASP-01:git-http:36",
                 "Non-maintainer state events ignored",
             )
             .fail(format!("Failed to send rogue state event: {}", e));
@@ -916,8 +916,8 @@ impl PushAuthorizationTests {
         cleanup();
 
         match push_result {
-            Ok(false) => TestResult::new(test_name, "GRASP-01:git-http:30", "Non-maintainer state events ignored").pass(),
-            Ok(true) => TestResult::new(test_name, "GRASP-01:git-http:30", "Non-maintainer state events ignored")
+            Ok(false) => TestResult::new(test_name, "GRASP-01:git-http:36", "Non-maintainer state events ignored").pass(),
+            Ok(true) => TestResult::new(test_name, "GRASP-01:git-http:36", "Non-maintainer state events ignored")
                 .fail(format!(
                     "Push accepted but should be rejected. A non-maintainer (pubkey: {}) published \
                     a state event announcing commit {}, but the push was accepted. The relay should \
@@ -926,7 +926,7 @@ impl PushAuthorizationTests {
                     new_commit,
                     client.public_key()
                 )),
-            Err(e) => TestResult::new(test_name, "GRASP-01:git-http:30", "Non-maintainer state events ignored").fail(&e),
+            Err(e) => TestResult::new(test_name, "GRASP-01:git-http:36", "Non-maintainer state events ignored").fail(&e),
         }
     }
 
@@ -957,7 +957,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:34",
+                    "GRASP-01:git-http:40",
                     "Push to refs/nostr/<invalid-event-id> rejected",
                 )
                 .fail(format!("Failed to create repo: {}", e));
@@ -983,7 +983,7 @@ impl PushAuthorizationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:34",
+                    "GRASP-01:git-http:40",
                     "Push to refs/nostr/<invalid-event-id> rejected",
                 )
                 .fail(&e);
@@ -998,7 +998,7 @@ impl PushAuthorizationTests {
             cleanup();
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:34",
+                "GRASP-01:git-http:40",
                 "Push to refs/nostr/<invalid-event-id> rejected",
             )
             .fail(&e);
@@ -1017,13 +1017,13 @@ impl PushAuthorizationTests {
         match push_result {
             Ok(false) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:34",
+                "GRASP-01:git-http:40",
                 "Push to refs/nostr/<invalid-event-id> rejected",
             )
             .pass(),
             Ok(true) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:34",
+                "GRASP-01:git-http:40",
                 "Push to refs/nostr/<invalid-event-id> rejected",
             )
             .fail(format!(
@@ -1034,7 +1034,7 @@ impl PushAuthorizationTests {
             )),
             Err(e) => TestResult::new(
                 test_name,
-                "GRASP-01:git-http:34",
+                "GRASP-01:git-http:40",
                 "Push to refs/nostr/<invalid-event-id> rejected",
             )
             .fail(format!("Push error: {}", e)),
@@ -1068,9 +1068,9 @@ impl PushAuthorizationTests {
             .get_fixture(FixtureKind::PRWrongCommitPushedBeforeEvent)
             .await
         {
-            Ok(_pr_event) => TestResult::new(test_name, "GRASP-01:git-http:34", desc).pass(),
+            Ok(_pr_event) => TestResult::new(test_name, "GRASP-01:git-http:40", desc).pass(),
             Err(e) => {
-                TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(format!("{}", e))
+                TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(format!("{}", e))
             }
         }
     }
@@ -1097,7 +1097,7 @@ impl PushAuthorizationTests {
         {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1108,7 +1108,7 @@ impl PushAuthorizationTests {
         let repo = match ctx.get_fixture(FixtureKind::ValidRepo).await {
             Ok(r) => r,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1124,7 +1124,7 @@ impl PushAuthorizationTests {
         let owner_npub = match repo.pubkey.to_bech32() {
             Ok(n) => n,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("Failed to get owner npub: {}", e));
             }
         };
@@ -1133,7 +1133,7 @@ impl PushAuthorizationTests {
         let clone_path = match clone_repo(relay_domain, &owner_npub, &repo_id) {
             Ok(p) => p,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
@@ -1143,7 +1143,7 @@ impl PushAuthorizationTests {
             Ok(exists) => exists,
             Err(e) => {
                 let _ = fs::remove_dir_all(&clone_path);
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
@@ -1151,13 +1151,13 @@ impl PushAuthorizationTests {
 
         // Ref should be deleted since the pushed commit doesn't match the PR event's `c` tag
         if refs_exist {
-            TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(format!(
+            TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(format!(
                 "Expected refs/nostr/{} to be deleted when PR event published with non-matching commit, \
                  but the ref still exists. The relay should delete refs that don't match the event's `c` tag.",
                 pr_event_id
             ))
         } else {
-            TestResult::new(test_name, "GRASP-01:git-http:34", desc).pass()
+            TestResult::new(test_name, "GRASP-01:git-http:40", desc).pass()
         }
     }
 
@@ -1183,7 +1183,7 @@ impl PushAuthorizationTests {
         {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1194,7 +1194,7 @@ impl PushAuthorizationTests {
         let repo = match ctx.get_fixture(FixtureKind::ValidRepo).await {
             Ok(r) => r,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1210,7 +1210,7 @@ impl PushAuthorizationTests {
         let owner_npub = match repo.pubkey.to_bech32() {
             Ok(n) => n,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("Failed to get owner npub: {}", e));
             }
         };
@@ -1219,7 +1219,7 @@ impl PushAuthorizationTests {
         let clone_path = match clone_repo(relay_domain, &owner_npub, &repo_id) {
             Ok(p) => p,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
@@ -1227,7 +1227,7 @@ impl PushAuthorizationTests {
         if let Err(e) = create_deterministic_commit_with_variant(&clone_path, CommitVariant::Owner)
         {
             let _ = fs::remove_dir_all(&clone_path);
-            return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+            return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
         }
 
         // Try to push with wrong commit (should be rejected since PR event exists)
@@ -1235,7 +1235,7 @@ impl PushAuthorizationTests {
             Ok(success) => success,
             Err(e) => {
                 let _ = fs::remove_dir_all(&clone_path);
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
@@ -1243,11 +1243,11 @@ impl PushAuthorizationTests {
 
         // Should REJECT - PR event exists with different commit hash
         if push_succeeded {
-            return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+            return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                 .fail("Push accepted (expected rejection due to commit hash mismatch)");
         }
 
-        TestResult::new(test_name, "GRASP-01:git-http:34", desc).pass()
+        TestResult::new(test_name, "GRASP-01:git-http:40", desc).pass()
     }
 
     /// Test 4: Push correct commit to refs/nostr/<pr-event-id> AFTER PR event exists
@@ -1272,7 +1272,7 @@ impl PushAuthorizationTests {
         {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1283,7 +1283,7 @@ impl PushAuthorizationTests {
         let repo = match ctx.get_fixture(FixtureKind::ValidRepo).await {
             Ok(r) => r,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("{}", e));
             }
         };
@@ -1299,7 +1299,7 @@ impl PushAuthorizationTests {
         let owner_npub = match repo.pubkey.to_bech32() {
             Ok(n) => n,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                     .fail(format!("Failed to get owner npub: {}", e));
             }
         };
@@ -1308,14 +1308,14 @@ impl PushAuthorizationTests {
         let clone_path = match clone_repo(relay_domain, &owner_npub, &repo_id) {
             Ok(p) => p,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
         // Create the CORRECT PR test commit (the one expected by PR event)
         if let Err(e) = reset_to_correct_pr_commit(&clone_path) {
             let _ = fs::remove_dir_all(&clone_path);
-            return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+            return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
         }
 
         // Push correct commit (should succeed)
@@ -1323,7 +1323,7 @@ impl PushAuthorizationTests {
             Ok(success) => success,
             Err(e) => {
                 let _ = fs::remove_dir_all(&clone_path);
-                return TestResult::new(test_name, "GRASP-01:git-http:34", desc).fail(&e);
+                return TestResult::new(test_name, "GRASP-01:git-http:40", desc).fail(&e);
             }
         };
 
@@ -1331,11 +1331,11 @@ impl PushAuthorizationTests {
 
         // Should ACCEPT - commit matches PR event's c tag
         if !push_succeeded {
-            return TestResult::new(test_name, "GRASP-01:git-http:34", desc)
+            return TestResult::new(test_name, "GRASP-01:git-http:40", desc)
                 .fail("Push rejected (expected acceptance since commit matches PR event)");
         }
 
-        TestResult::new(test_name, "GRASP-01:git-http:34", desc).pass()
+        TestResult::new(test_name, "GRASP-01:git-http:40", desc).pass()
     }
 
     /// Test that HEAD is set after a state event is published with an existing commit
@@ -1372,7 +1372,7 @@ impl PushAuthorizationTests {
         {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc).fail(format!(
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc).fail(format!(
                     "Failed to create HeadSetToDevelopBranch fixture: {}",
                     e
                 ));
@@ -1385,7 +1385,7 @@ impl PushAuthorizationTests {
         let valid_repo = match ctx.get_fixture(FixtureKind::ValidRepo).await {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to get ValidRepo fixture: {}", e));
             }
         };
@@ -1398,7 +1398,7 @@ impl PushAuthorizationTests {
         {
             Some(id) => id.to_string(),
             None => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail("Missing repo_id in ValidRepo");
             }
         };
@@ -1406,7 +1406,7 @@ impl PushAuthorizationTests {
         let npub = match valid_repo.pubkey.to_bech32() {
             Ok(n) => n,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to convert pubkey to bech32: {}", e));
             }
         };
@@ -1418,16 +1418,16 @@ impl PushAuthorizationTests {
             match get_default_branch_from_info_refs(relay_domain, &npub, &repo_id).await {
                 Ok(branch) => branch,
                 Err(e) => {
-                    return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                    return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                         .fail(format!("Failed to get default branch: {}", e));
                 }
             };
 
         // Verify HEAD points to refs/heads/develop
         if default_branch == "refs/heads/develop" {
-            TestResult::new(test_name, "GRASP-01:git-http:32", desc).pass()
+            TestResult::new(test_name, "GRASP-01:git-http:38", desc).pass()
         } else {
-            TestResult::new(test_name, "GRASP-01:git-http:32", desc).fail(format!(
+            TestResult::new(test_name, "GRASP-01:git-http:38", desc).fail(format!(
                 "Expected HEAD to point to 'refs/heads/develop' but got '{}'. \
                 GRASP-01 requires: 'MUST set repository HEAD per repository state announcement \
                 as soon as the git data related to that branch has been received.'",
@@ -1476,7 +1476,7 @@ impl PushAuthorizationTests {
         let _develop_state = match ctx.get_fixture(FixtureKind::HeadSetToDevelopBranch).await {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc).fail(format!(
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc).fail(format!(
                     "Failed to create HeadSetToDevelopBranch fixture: {}",
                     e
                 ));
@@ -1489,7 +1489,7 @@ impl PushAuthorizationTests {
         let valid_repo = match ctx.get_fixture(FixtureKind::ValidRepo).await {
             Ok(e) => e,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to get ValidRepo fixture: {}", e));
             }
         };
@@ -1502,7 +1502,7 @@ impl PushAuthorizationTests {
         {
             Some(id) => id.to_string(),
             None => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail("Missing repo_id in ValidRepo");
             }
         };
@@ -1510,7 +1510,7 @@ impl PushAuthorizationTests {
         let npub = match valid_repo.pubkey.to_bech32() {
             Ok(n) => n,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to convert pubkey to bech32: {}", e));
             }
         };
@@ -1521,7 +1521,7 @@ impl PushAuthorizationTests {
         let clone_path = match clone_repo(relay_domain, &npub, &repo_id) {
             Ok(path) => path,
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to clone repo: {}", e));
             }
         };
@@ -1536,7 +1536,7 @@ impl PushAuthorizationTests {
 
         if let Err(e) = output {
             let _ = fs::remove_dir_all(&clone_path);
-            return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+            return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                 .fail(format!("Failed to create develop1 branch: {}", e));
         }
 
@@ -1545,7 +1545,7 @@ impl PushAuthorizationTests {
             Ok(hash) => hash,
             Err(e) => {
                 let _ = fs::remove_dir_all(&clone_path);
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to create commit: {}", e));
             }
         };
@@ -1570,7 +1570,7 @@ impl PushAuthorizationTests {
             Ok(e) => e,
             Err(e) => {
                 let _ = fs::remove_dir_all(&clone_path);
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to build state event: {}", e));
             }
         };
@@ -1578,7 +1578,7 @@ impl PushAuthorizationTests {
         // Send the state event (commit doesn't exist on relay yet)
         if let Err(e) = client.send_event(state_event).await {
             let _ = fs::remove_dir_all(&clone_path);
-            return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+            return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                 .fail(format!("Failed to send state event: {}", e));
         }
 
@@ -1591,11 +1591,11 @@ impl PushAuthorizationTests {
         match push_result {
             Ok(true) => { /* Push succeeded, continue to verify */ }
             Ok(false) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail("Push to refs/heads/develop1 was rejected");
             }
             Err(e) => {
-                return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                     .fail(format!("Failed to push develop1 branch: {}", e));
             }
         }
@@ -1608,16 +1608,16 @@ impl PushAuthorizationTests {
             match get_default_branch_from_info_refs(relay_domain, &npub, &repo_id).await {
                 Ok(branch) => branch,
                 Err(e) => {
-                    return TestResult::new(test_name, "GRASP-01:git-http:32", desc)
+                    return TestResult::new(test_name, "GRASP-01:git-http:38", desc)
                         .fail(format!("Failed to get default branch: {}", e));
                 }
             };
 
         // Verify HEAD points to refs/heads/develop1
         if default_branch == "refs/heads/develop1" {
-            TestResult::new(test_name, "GRASP-01:git-http:32", desc).pass()
+            TestResult::new(test_name, "GRASP-01:git-http:38", desc).pass()
         } else {
-            TestResult::new(test_name, "GRASP-01:git-http:32", desc).fail(format!(
+            TestResult::new(test_name, "GRASP-01:git-http:38", desc).fail(format!(
                 "Expected HEAD to point to 'refs/heads/develop1' but got '{}'. \
                 GRASP-01 requires: 'MUST set repository HEAD per repository state announcement \
                 as soon as the git data related to that branch has been received.'",
diff --git a/grasp-audit/src/specs/grasp01/repository_creation.rs b/grasp-audit/src/specs/grasp01/repository_creation.rs
index a99b0d2..2eddb97 100644
--- a/grasp-audit/src/specs/grasp01/repository_creation.rs
+++ b/grasp-audit/src/specs/grasp01/repository_creation.rs
@@ -55,7 +55,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Bare repository must be created and accessible via Smart HTTP when announcement is accepted",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -76,7 +76,7 @@ impl RepositoryCreationTests {
             None => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Bare repository must be created and accessible via Smart HTTP when announcement is accepted",
                 )
                 .fail("Repository announcement missing d tag")
@@ -88,7 +88,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:28",
+                    "GRASP-01:git-http:34",
                     "Bare repository must be created and accessible via Smart HTTP when announcement is accepted",
                 )
                 .fail(format!("Failed to convert pubkey to npub: {}", e))
@@ -99,7 +99,7 @@ impl RepositoryCreationTests {
         if let Err(e) = check_repo_accessible_via_http(relay_domain, &npub, &repo_id).await {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:28",
+                "GRASP-01:git-http:34",
                 "Bare repository must be created and accessible via Smart HTTP when announcement is accepted",
             )
             .fail(format!("Repository not accessible via HTTP: {}", e));
@@ -107,7 +107,7 @@ impl RepositoryCreationTests {
 
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:28",
+            "GRASP-01:git-http:34",
             "Bare repository must be created and accessible via Smart HTTP when announcement is accepted",
         )
         .pass()
@@ -135,7 +135,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:38",
+                    "GRASP-01:git-http:44",
                     "Relay SHOULD serve a webpage for existing repositories",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -156,7 +156,7 @@ impl RepositoryCreationTests {
             None => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:38",
+                    "GRASP-01:git-http:44",
                     "Relay SHOULD serve a webpage for existing repositories",
                 )
                 .fail("Repository announcement missing d tag")
@@ -168,7 +168,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:38",
+                    "GRASP-01:git-http:44",
                     "Relay SHOULD serve a webpage for existing repositories",
                 )
                 .fail(format!("Failed to convert pubkey to npub: {}", e))
@@ -179,7 +179,7 @@ impl RepositoryCreationTests {
         if let Err(e) = check_webpage_served(relay_domain, &npub, &repo_id).await {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:38",
+                "GRASP-01:git-http:44",
                 "Relay SHOULD serve a webpage for existing repositories",
             )
             .fail(format!("Webpage not served: {}", e));
@@ -187,7 +187,7 @@ impl RepositoryCreationTests {
 
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:38",
+            "GRASP-01:git-http:44",
             "Relay SHOULD serve a webpage for existing repositories",
         )
         .pass()
@@ -214,7 +214,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:38",
+                    "GRASP-01:git-http:44",
                     "Relay SHOULD return 404 for repositories it doesn't host",
                 )
                 .fail(format!("Failed to create repo fixture: {}", e))
@@ -226,7 +226,7 @@ impl RepositoryCreationTests {
             Err(e) => {
                 return TestResult::new(
                     test_name,
-                    "GRASP-01:git-http:38",
+                    "GRASP-01:git-http:44",
                     "Relay SHOULD return 404 for repositories it doesn't host",
                 )
                 .fail(format!("Failed to convert pubkey to npub: {}", e))
@@ -239,7 +239,7 @@ impl RepositoryCreationTests {
         if let Err(e) = check_404_for_nonexistent_repo(relay_domain, &npub, fake_repo_id).await {
             return TestResult::new(
                 test_name,
-                "GRASP-01:git-http:38",
+                "GRASP-01:git-http:44",
                 "Relay SHOULD return 404 for repositories it doesn't host",
             )
             .fail(format!("Expected 404, got: {}", e));
@@ -247,7 +247,7 @@ impl RepositoryCreationTests {
 
         TestResult::new(
             test_name,
-            "GRASP-01:git-http:38",
+            "GRASP-01:git-http:44",
             "Relay SHOULD return 404 for repositories it doesn't host",
         )
         .pass()
diff --git a/grasp-audit/src/specs/grasp01/spec_requirements.rs b/grasp-audit/src/specs/grasp01/spec_requirements.rs
index 9a833d8..71b2d69 100644
--- a/grasp-audit/src/specs/grasp01/spec_requirements.rs
+++ b/grasp-audit/src/specs/grasp01/spec_requirements.rs
@@ -71,87 +71,87 @@ pub const GRASP_01_REQUIREMENTS: &[SpecRequirement] = &[
         level: RequirementLevel::May,
     },
     SpecRequirement {
-        line: 20,
+        line: 26,
         section: "Nostr Relay",
         text: "MUST serve a NIP-11 document",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 22,
+        line: 28,
         section: "Nostr Relay",
         text: "MUST list each supported GRASP under `supported_grasps` in format `GRASP-XX` eg `GRASP-01` as a string array",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 23,
+        line: 29,
         section: "Nostr Relay",
         text: "MUST list repository acceptance criteria under `repo_acceptance_criteria` as a human readable string",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 24,
+        line: 30,
         section: "Nostr Relay",
         text: "MUST list brief summary of curation policy under `curation` if events are curated beyond generic SPAM prevention; otherwise `curation` MUST be omitted",
         level: RequirementLevel::Must,
     },
     // Git Smart HTTP Service section
     SpecRequirement {
-        line: 28,
+        line: 34,
         section: "Git Smart HTTP Service",
         text: "MUST serve a git repository via an unauthenticated git smart http service at `/<npub>/<identifier>.git` for each accepted git repository announcement.",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 30,
+        line: 36,
         section: "Git Smart HTTP Service",
         text: "MUST accept pushes via this service that match the latest repo state announcement on the relay, respecting the recursive maintainer set.",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 32,
+        line: 38,
         section: "Git Smart HTTP Service",
         text: "MUST set repository HEAD per repo state announcement as soon as the git data related to that branch has been received.",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 34,
+        line: 40,
         section: "Git Smart HTTP Service",
         text: "MUST accept pushes via this service to `refs/nostr/<event-id>` but SHOULD reject if event exists on relay listing a different tip and MAY reject based on criteria such as size, SPAM prevention, etc. SHOULD delete and MAY garbage collect these refs if no corresponding git PR event or git PR update event, with a `c` tag that matches the ref tip, is accepted by relay within 20 minutes.",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 36,
+        line: 42,
         section: "Git Smart HTTP Service",
         text: "MUST include `allow-reachable-sha1-in-want` and `allow-tip-sha1-in-want` in advertisement and serve available oids.",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 38,
+        line: 44,
         section: "Git Smart HTTP Service",
         text: "SHOULD serve a webpage at the same endpoint linking to git nostr client(s) to browse the repository and a 404 page for repositories it doesn't host.",
         level: RequirementLevel::Should,
     },
     // CORS Support section
     SpecRequirement {
-        line: 44,
+        line: 50,
         section: "CORS Support",
         text: "Set `Access-Control-Allow-Origin: *` on ALL responses",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 45,
+        line: 51,
         section: "CORS Support",
         text: "Set `Access-Control-Allow-Methods: GET, POST` on ALL responses",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 46,
+        line: 52,
         section: "CORS Support",
         text: "Set `Access-Control-Allow-Headers: Content-Type` on ALL responses",
         level: RequirementLevel::Must,
     },
     SpecRequirement {
-        line: 47,
+        line: 53,
         section: "CORS Support",
         text: "Respond to OPTIONS requests with 204 No Content",
         level: RequirementLevel::Must,