The enforced CSP blocked the Cloudflare beacon, so Web Analytics wasn't collecting anything on the live site. Add https://static.cloudflareinsights.com to script-src (loads beacon.min.js) and https://cloudflareinsights.com to connect-src (RUM data POST). Also documented that re-enabling the Preferred Sources pill will need https://news.google.com in the CSP. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>