[E30-S03-T01] oEmbed resolution, snapshot cache, click-to-load #313

New Issue

2026-08-27T08:05:18Z

kpcto commented

2026-08-27 08:05:18 +00:00

Parent story: [E30-S03] oEmbed resolution, snapshot cache, click-to-load island (#118)

Intent

Implement oEmbed resolution, local snapshot caching and click-to-load iframes.

Acceptance criteria

Resolve providers by exact host and fetch oEmbed through the hardened fetch service
Sanitise responses to an allowlisted iframe and re-host thumbnails locally
Render live iframes click-to-load so no third-party request precedes reader interaction

Explicitly out of scope

The hardened fetch service is covered by E30-S01
CSP frame-src generation is covered by E30-S04

Test plan

Save content with an allowlisted embed and assert a local thumbnail plus a click-to-load iframe

Rollback note

Delete cached snapshots and re-resolve

Owning stream

platform

Risk quadrant

agent-full

> Parent story: [E30-S03] oEmbed resolution, snapshot cache, click-to-load island (#118) ## Intent Implement oEmbed resolution, local snapshot caching and click-to-load iframes. ## Acceptance criteria - Resolve providers by exact host and fetch oEmbed through the hardened fetch service - Sanitise responses to an allowlisted iframe and re-host thumbnails locally - Render live iframes click-to-load so no third-party request precedes reader interaction ## Explicitly out of scope - The hardened fetch service is covered by E30-S01 - CSP `frame-src` generation is covered by E30-S04 ## Test plan - Save content with an allowlisted embed and assert a local thumbnail plus a click-to-load iframe ## Rollback note - Delete cached snapshots and re-resolve ### Owning stream platform ### Risk quadrant agent-full

kpcto added this to the Sprint M milestone 2026-08-27 08:05:18 +00:00

kpcto added the

labels 2026-08-27 08:05:18 +00:00

Sign in to join this conversation.