https://shipreadyai.dev/learn/findings/o1-mixed-content-ok

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Every file on the page loads over https

Nothing on the page is pulled over a plain connection.

## Why AI-built apps get this

An AI builder gives you HTTPS on the hosted address and stops there. The moment you point your own domain at it, the redirect, the certificate and every hard-coded http:// in a copied snippet become yours. Nothing in the build warns you, because from the inside everything still works.

## Evidence line

GET http://example.com returned 301 to https://example.com, certificate valid to 2026-12-01

## The fix

Nothing to change here.

## Prompt

Keep all asset references on https.