Empirically verified library choices (fonteditor-core, opentype.js, fontkit) against real fonts before committing to the scope, and root-caused a file-type/dfont MIME collision that would otherwise silently break uploads.