Merged by sneak's order of 6 November ("take the current state of smallwebwaf and get it on to main. i am going to deploy it soon in its alpha state"). Model: opus-5-5
Reviewed-on: #160