D012
A Content-Security-Policy that blocks inline styles, or every script a page could switch its deferred sheets on with, in an app that inlines its CSS; as a warning, one that refuses only inline scripts.
Fix: site: { inlineCss: false } keeps plain links, or allow unsafe-inline in the directive that applies.
Status in kerf@0.1.0: reported by kerf check.
More: kerf docs design.