Before and after

FIXED

acme-saas.example/demo

All 4 verification checkpoints now pass. Restoring full query forwarding on the /demo → /demo/ 301 redirect resolved both _gcl_aw cookie creation and HubSpot gclid hidden field capture.

Checkpoint changes

Overall Audit Verdict · Fixed

BROKEN → VERIFIED

End-to-end Google Ads GCLID + UTM handoff verified across redirect, Cookiebot accept, and HubSpot DOM.

Hop 1: HTTP 3xx Redirect Preservation (accept) · Fixed

BROKEN → VERIFIED

301 redirect to /demo/ now preserves gclid=zst_test_91a4f7c2 alongside all utm_* parameters.

Hop 2: Cookiebot Consent Mode v2 Transition (accept) · Same

VERIFIED → VERIFIED

gcs=G111 observed and first-party _gcl_aw cookie written immediately after clicking Allow All.

Hop 3: HubSpot Hidden Field Handoff (accept) · Fixed

BROKEN → VERIFIED

input[name='gclid'] populated with exact synthetic token zst_test_91a4f7c2 without submitting form.

Compared runs

Before · aud_demo_8f3a9e21

After · aud_demo_c409b71e