The TODO comments were in the page source
Astro emits HTML comments into the built page. Six notes reading No verified source yet shipped in the prior art page, and two about advisors on the company page.
Astro templates look like HTML, and an HTML comment in one is an HTML comment in the output. The prior art page had six, each a TODO with “No verified source yet” after a claim: rad-hard processors, dual-string avionics, SIFT and FTMP, lockstep pairs, N-version programming, Kani. The company page had two. Advisors, add only after each one agrees. Partners, name a third party only after it accepts. The flight page had a visible “(TODO)” in its text, and credited ESA with a FlatSat test that TU Graz ran.
All of it was in the HTML anyone can view. None of it was false, which is the problem. A note saying a source is not verified is a true statement the page was never meant to make.
The comments are gone, and the credit is TU Graz’s. A note to the author belongs in the repository, not in the response.