Over 150 million people read Lao, Thai, Khmer and Burmese, scripts that stack marks above and below letters. We scanned 144 live sites (government, banks, telecoms, news): 51% visibly break the script, 45% never ship a font for their own language, 49% declare the wrong lang. GlyphSweep is an agent that audits, fixes and proves the fix. The rule: the model proposes, measurements decide, a human releases. 1. Deterministic detectors in a sandboxed Chromium measure clipped marks, missing fonts, wrong lang and bad line breaks; a "bare phone" render read back by OCR turns tofu boxes into a number. 2. Vultr Serverless Inference (qwen3.8-27b) plans which pages to audit, confirms on screenshots what a reader sees, and writes a CSS patch. 3. The model's patch competes with a deterministic one, each proven in a fresh sandbox. The best measured result wins, and stays locked until a human approves it. Real site: laocoffee.org/lao/ OCR error 94% -> 7%, score 50 -> 74 (74 is the CSS ceiling; the rest needs the site owner, and we say so). Blast Radius Zero: every stage is a new gVisor runsc container (read-only, non-root, cap_drop ALL, memory/PID/time limits), destroyed and verified gone. Its only exit is a per-job allowlist proxy; metadata and private IPs are refused; zero secrets inside. A hostile demo shop tries credential theft, exfiltration and prompt injection: all blocked and flagged. One-click red team: 43/43 attacks contained, including fork bomb, memory bomb and proxy bypass, judged from proxy logs and Docker state. Ships as a GitHub Action that fails the build when a page is not script-ready, with live badges. Buyers: SE Asian banks, telcos, e-commerce, localization agencies, government portals. Pricing: $49 per site per month; agencies $299 for 10 sites.
Category tags: