diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index fc063f9..53e2f25 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -23,7 +23,7 @@
     {
       "name": "voyage",
       "source": "./plugins/voyage",
-      "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline with specialized agent swarms, external research triangulation, adversarial review, post-hoc independent review with Handover 6 feedback loop, multi-session resumption, session decomposition, and headless execution. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs): operator clicks any line, writes their own notes, copies a structured prompt, pastes back into Claude — Claude revises the .md."
+      "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline with specialized agent swarms, external research triangulation, adversarial review, post-hoc independent review with Handover 6 feedback loop, multi-session resumption, session decomposition, and headless execution. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs, modelled on claude-code-100x): pencil-toggle annotation mode, select text or click any element, pick intent (Fiks/Endre/Spørsmål), comment, Copy Prompt, paste back, Claude revises the .md."
     },
     {
       "name": "linkedin-thought-leadership",
@@ -54,6 +54,11 @@
       "name": "human-friendly-style",
       "source": "./plugins/human-friendly-style",
       "description": "Shared Claude Code output style for the ktg-plugin-marketplace. Plain-language tone — explains what and why, hides paths/JSON/stack traces by default, matches the user's language."
+    },
+    {
+      "name": "claude-design",
+      "source": "./plugins/claude-design",
+      "description": "End-to-end facilitator for prompting Claude Design (claude.ai/design) — idea to copy-paste-ready prompt with iteration coaching, citing Anthropic primary sources."
     }
   ]
 }
diff --git a/CLAUDE.md b/CLAUDE.md
index 03c17c0..af11fc2 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -10,13 +10,13 @@ plugins/
   config-audit/          v3.1.0  — Configuration intelligence (health, opportunities, auto-fix, whats-active)
   graceful-handoff/      v2.1.0  — Auto-trigger handoff via Stop hook (skill + JSON pipeline + 4-step model-aware context resolution)
   linkedin-thought-leadership/  v1.2.0  — LinkedIn content pipeline + analytics
-  llm-security/          v6.0.0  — Security scanning, auditing, threat modeling
-  ms-ai-architect/       v1.13.1 — Microsoft AI architecture (Cosmo Skyberg persona) + manual KB-refresh slash command
+  llm-security/          v7.7.2  — Security scanning, auditing, threat modeling. HTML report output for all 18 skill commands (render-report CLI + canonical ESM module mirrored bit-identical into the playground). v7.7.2 translated the remaining Norwegian surface text in the playground UI, the canonical renderer, the agent prompts, and the README/CLAUDE.md state sections to English. v7.7.1 stripped the playground to the catalog as the only routable surface.
+  ms-ai-architect/       v1.15.0 — Microsoft AI architecture (Cosmo Skyberg persona) + manual KB-refresh slash command + v3 project-view (sidebar med 17 artifacts + main + import-modal overlay, v2-surface fjernet i v1.15.0)
   okr/                   v1.0.0  — OKR guidance for Norwegian public sector
-  voyage/                v5.0.2  — Brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline (six-command universal pipeline + multi-session resumption + --gates autonomy chain). /trekbrief, /trekplan, and /trekreview each end by running scripts/annotate.mjs against the just-written .md and printing the file:// link to a self-contained operator-annotation HTML: operator clicks lines, writes their own notes (no Claude-generated suggestions in the loop), notes persist in localStorage, Copy Prompt button gathers them all, paste back, Claude revises .md. v5.0.0 removed the v4.2/v4.3 bespoke playground + /trekrevise + Handover 8; v5.0.1 pointed at /playground document-critique (Claude-leads, wrong direction); v5.0.2 ships annotate.mjs (operator-leads, the actual ask).
+  voyage/                v5.0.3  — Brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline (six-command universal pipeline + multi-session resumption + --gates autonomy chain). /trekbrief, /trekplan, and /trekreview each end by running scripts/annotate.mjs against the just-written .md and printing the file:// link to a self-contained operator-annotation HTML modelled on claude-code-100x/build-site.js: pencil-toggle annotation mode, select text or click any element, choose intent (Fiks/Endre/Spørsmål), comment, sidebar groups by section with delete + Copy Prompt, localStorage persistence per artifact path. v5.0.0 removed the v4.2/v4.3 bespoke playground + /trekrevise + Handover 8; v5.0.1 pointed at /playground document-critique (wrong direction); v5.0.2 was operator-led but too thin; v5.0.3 matches the reference the operator pointed at from day one.
 
 shared/
-  playground-design-system/  v0.1  — Aksel/Digdir-aligned CSS design system + JSON schemas + self-hosted Inter/JetBrains Mono/Source Serif 4 fonts (Tier 1+2+3 wave 1+wave 2 = 20 Tier 3 components total). Consumed by ms-ai-architect, okr, llm-security, voyage, config-audit
+  playground-design-system/  v0.6.0 — Aksel/Digdir-aligned CSS design system + JSON schemas + self-hosted Inter/JetBrains Mono/Source Serif 4 fonts. Tier 1 base + Tier 2 + Tier 3 wave 1+2 (20 components) + Tier 4 project-view-arketype (v0.6.0 — sidebar + main + import-modal overlay). Consumed by ms-ai-architect, okr, llm-security, voyage, config-audit.
   playground-examples/             — Reference scenarios (ROS-Lier, OKR-Bærum, security-Direktorat) + showcase landing + 12 isolated Tier 3 wave 2 component demos under components/
 ```
 
@@ -53,3 +53,20 @@ Disse trackes IKKE i git. Oppdater ved sesjonsslutt.
 3. Les REMEMBER.md og TODO.md for sesjonsstatus
 4. Jobb innenfor scope
 5. Oppdater REMEMBER.md ved avslutning
+
+## Communication patterns
+
+### Linking to local files
+
+When pointing to local files in responses, always use markdown link syntax with a descriptive name:
+
+- Use `[Human-friendly name](file:///absolute/path)` — never bare `file:///...` URLs or autolinks `<file://...>`.
+- Always use absolute paths. Never `~/` or relative paths.
+- For multiple files, render as a bullet list of named markdown links.
+
+Why: bare `file://` URLs only render the first as clickable across multiple lines. Named markdown links make each entry independently clickable and look cleaner.
+
+Example:
+
+- [Brief](file:///Users/ktg/.../brief.html)
+- [Research summary](file:///Users/ktg/.../research/summary.md)
diff --git a/README.md b/README.md
index 3c1b6a2..0f4df4e 100644
--- a/README.md
+++ b/README.md
@@ -26,7 +26,7 @@ Then open Claude Code and type `/plugin` to browse and install plugins from the
 
 ## Plugins
 
-### [LLM Security](plugins/llm-security/) `v7.6.1`
+### [LLM Security](plugins/llm-security/) `v7.7.2`
 
 Security scanning, auditing, and threat modeling for agentic AI projects.
 
@@ -36,9 +36,12 @@ Built on OWASP LLM Top 10 (2025), OWASP Agentic AI Top 10, and the AI Agent Trap
 - **Deterministic scanning** — 23 Node.js scanners (10 orchestrated + 13 standalone) for byte-level analysis: Shannon entropy, Unicode codepoints, typosquatting detection, taint flow, DNS resolution, git forensics, AI-BOM, attack simulation, IDE extension prescan (VS Code + JetBrains — URL fetch from Marketplace / OpenVSX / direct VSIX / JetBrains Marketplace, hardened ZIP extractor for zip-slip / symlinks / bombs, plus OS sandbox via `sandbox-exec` / `bwrap` so the kernel enforces FS confinement), MCP cumulative-drift baseline reset (E14 — sticky baseline catches slow-burn rug-pulls). Bash-normalize T1-T6 for obfuscation-resistant denylists
 - **Advisory analysis** — 20 commands that scan, audit, and model threats with structured reports, letter grades, and actionable remediation
 - **Enterprise governance** — Compliance mapping (EU AI Act, NIST AI RMF, ISO 42001), SARIF 2.1.0 output, structured audit trail, policy-as-code, standalone CLI
-- **v7.6.1 playground visuell-patch (2026-05-06)** — Seks bugs fanget av maintainer ved manuell verifisering i nettleser etter v7.6.0-release. Alle skyldtes mismatch mellom DS-klasser og hvordan playground-rendrere brukte dem (eller manglende DS-implementasjoner av klasser playground-rendrere antok eksisterte): `renderFindingsBlock` brukte `.findings` outer-class (DS' 2-kolonners list+detail-grid) → erstattet med `<section class="report-meta">` + korrekt `findings__list`-mønster; `.report-table` manglet helt i DS men brukes i 7+ rendrere → lokal CSS-implementasjon; `renderPreDeploy` traffic-lights brukte fast 28×28 px `.sm-card__grade` for "PASS"/"PASS-WITH-NOTES"/"FAIL" → bredde-tilpasset status-pill; threat-model matrix-bobler ikke klikkbare → `<button>` med `data-threat-id` + click-handler som scroller til Trusler-tabellen; radar-labels overlappet → SVG 280→380, R 105→125, dynamisk `text-anchor`; `recommendation-card__body` tekstoverflyt → `overflow-wrap: anywhere`. 4/4 fix-spesifikke + 18/18 regresjons-tester passerer. Ingen scanner- eller hook-atferdsendringer
-- **v7.6.0 playground Tier 3-referanse-case (2026-05-06)** — Playgroundet er hevet til en visuelt og strukturelt fullført referanse for `shared/playground-design-system/` Tier 3-supplementet. 8 nye DS-komponenter integrert i de 18 rapport-rendererne: `tfa-flow` + `tfa-leg` + `tfa-arrow` (lethal trifecta-kjede med `<button>`-elementer + ARIA), `mat-ladder` + `mat-step` (5-trinns modenhets-stige), `suppressed-group` (narrative-audit), `codepoint-reveal` + `cp-tag/cp-zw/cp-bidi` (Unicode-steganografi), `top-risks` + `top-risk[data-severity]` (rangert top-funn-listing), utvidet `recommendation-card[data-severity]` på `clean`/`harden`/`audit`/`posture`/`pre-deploy`/`plugin-audit`, `risk-meter` (band-visualisering 0-100 på 5 archetypes), `card--severity-{level}` modifier på findings-cards. Wave 1 (Sesjon 2): `badge--scope-security` (identitets-chip), `verdict-pill-lg` (DS Tier 3-pill på alle 18 rapport-typer), `form-progress` + `fp-step` (onboarding-wizard). Slettet ~30 duplikat-CSS-deklarasjoner (DS vinner cascade). 5 nye DS-helpers + `mapSeverityToCardLevel` + `parseNarrativeAudit`. A11Y-rapport oppdatert. Filendring totalt 10209 → 10677 linjer over 5 sesjoner. Ingen scanner- eller hook-behavior-changes — purely additive surface
-- **v7.5.0 playground (2026-05-05)** — Single-file SPA at `plugins/llm-security/playground/llm-security-playground.html` (~10 200 lines) for onboarding, demoer og workshop-bruk uten Claude Code-installasjon. Parsere + renderere for alle 18 produces_report-kommandoer, 18 markdown test-fixtures som kontrakt-anker, komplett demo-prosjekt med alle 18 rapporter ferdig parsed, vendor-synket design-system, 9 Playwright-genererte screenshots. 11 nye `window`-globaler eksponert for testing/automasjon (`__store`, `__navigate`, `__loadDemoState`, `__PARSERS`, `__RENDERERS` …). Bug-fix: `normalizeVerdictText` håndterer GO-WITH-CONDITIONS uten å kollapse til ALLOW. Ingen scanner- eller hook-behavior-changes — purely additive surface
+- **v7.7.2 language consistency pass (2026-05-19)** — Norwegian had crept into surface text across v7.5-v7.7. Per the `~/.claude/CLAUDE.md` convention (English for code and documentation, Norwegian for dialog only), this release translates the HTML Report-step in all 18 skill commands, the canonical CLI renderer `scripts/lib/report-renderers.mjs`, the playground UI strings, the skill-scanner and mcp-scanner agent prompts, the marketplace + plugin README/CLAUDE.md state sections, and six table cells in `docs/scanner-reference.md`. Demo-state fixture content for the `dft-komplett-demo` project (intentional Norwegian persona) and regex alternations that match Norwegian-language report markdown (`/^high\|^høy/`, `/resolution\|løsning/`) were preserved. No scanner, hook, or behavior changes — purely surface text
+- **v7.7.1 playground UX strip (2026-05-18)** — Operator feedback immediately after v7.7.0: the catalog became the only routable surface in the playground (the onboarding/home/project render functions remain in source but are not routable). Topbar simplified to a `Catalog` button + state/theme actions. Breadcrumb org-name replaced with a neutral `llm-security`. The onboarding concept (per-command context injection) is documented as a v7.8.0 candidate in ROADMAP. No scanner or hook behavior changes
+- **v7.7.0 HTML report for all 18 skill commands (2026-05-18)** — Every `/security <cmd>` that produces a report now prints a clickable `file://` link to a self-contained HTML version. Delivered across five sessions: (1) playground catalog list-view + builder-pane with a copy button; (2) playground project-surface cleanup (stub-screen + topbar split); (3) the 18 inline parsers + renderers moved to a canonical ESM module `scripts/lib/report-renderers.mjs` (the playground keeps a bit-identical inline copy since ESM `import` does not work from `file://`); (4) new zero-dep CLI `scripts/render-report.mjs` — stdin/file/stdout mode, kebab→camel commandId routing, inlines 6 DS stylesheets, ~140 KB self-contained HTML with system-font fallback, absolute `file://` paths for Ghostty cmd-click; (5) all 18 skills wired (4 in session 4 + 14 in session 5). No scanner or hook behavior changes — purely additive
+- **v7.6.1 playground visual patch (2026-05-06)** — Six bugs caught by the maintainer during manual browser verification after the v7.6.0 release. All were mismatches between DS classes and how playground renderers used them (or missing DS implementations the renderers assumed existed): `renderFindingsBlock` used the `.findings` outer class (the DS 2-column list+detail grid) → replaced with `<section class="report-meta">` + the correct `findings__list` pattern; `.report-table` was missing entirely from the DS but used in 7+ renderers → local CSS implementation; `renderPreDeploy` traffic-lights used the fixed 28×28 px `.sm-card__grade` for "PASS"/"PASS-WITH-NOTES"/"FAIL" → width-adapting status pill; threat-model matrix bubbles were not clickable → `<button>` with `data-threat-id` + click handler that scrolls to the Threats table; radar labels overlapped → SVG 280→380, R 105→125, dynamic `text-anchor`; `recommendation-card__body` text overflow → `overflow-wrap: anywhere`. 4/4 fix-specific + 18/18 regression tests passing. No scanner or hook behavior changes
+- **v7.6.0 playground Tier 3 reference case (2026-05-06)** — The playground was raised to a visually and structurally complete reference for the `shared/playground-design-system/` Tier 3 supplement. 8 new DS components integrated into the 18 report renderers: `tfa-flow` + `tfa-leg` + `tfa-arrow` (lethal trifecta chain with `<button>` elements + ARIA), `mat-ladder` + `mat-step` (5-step maturity ladder), `suppressed-group` (narrative audit), `codepoint-reveal` + `cp-tag/cp-zw/cp-bidi` (Unicode steganography), `top-risks` + `top-risk[data-severity]` (ranked top-findings listing), extended `recommendation-card[data-severity]` on `clean`/`harden`/`audit`/`posture`/`pre-deploy`/`plugin-audit`, `risk-meter` (0-100 band visualization across 5 archetypes), `card--severity-{level}` modifier on findings cards. Wave 1 (Session 2): `badge--scope-security` (identity chip), `verdict-pill-lg` (DS Tier 3 pill across all 18 report types), `form-progress` + `fp-step` (onboarding wizard). Removed ~30 duplicate CSS declarations (DS wins the cascade). 5 new DS helpers + `mapSeverityToCardLevel` + `parseNarrativeAudit`. A11Y report updated. File size 10209 → 10677 lines across 5 sessions. No scanner or hook behavior changes — purely additive surface
+- **v7.5.0 playground (2026-05-05)** — Single-file SPA at `plugins/llm-security/playground/llm-security-playground.html` (~10 200 lines) for onboarding, demos and workshop use without a Claude Code installation. Parsers + renderers for all 18 produces_report commands, 18 markdown test fixtures as contract anchors, a complete demo project with all 18 reports parsed in advance, vendor-synced design-system, 9 Playwright-generated screenshots. 11 new `window` globals exposed for testing/automation (`__store`, `__navigate`, `__loadDemoState`, `__PARSERS`, `__RENDERERS` …). Bug-fix: `normalizeVerdictText` handles GO-WITH-CONDITIONS without collapsing to ALLOW. No scanner or hook behavior changes — purely additive surface
 - **v7.4.0 examples + e2e suite (2026-05-05)** — 9 runnable demonstration walkthroughs under `examples/` (lethal-trifecta, mcp-rug-pull, supply-chain-attack, poisoned-claude-md, bash-evasion-gallery, prompt-injection-showcase, malicious-skill-demo, toxic-agent-demo, pre-compact-poisoning) plus three new test suites under `tests/e2e/` (attack-chain, multi-session, scan-pipeline) that prove the framework works as a coordinated system. +45 tests (1777 → 1822), no scanner or hook behavior changes — purely additive surface
 - **v8.0.0 env-var deprecation runway (D3, v7.3.0)** — Hook configuration has historically been split between process env-vars and the team-distributable `.llm-security/policy.json` file. Until v7.3.0 the two surfaces could disagree silently. The new `getPolicyValueWithEnvWarn()` helper in `scanners/lib/policy-loader.mjs` now emits a one-time-per-process stderr line whenever both surfaces are explicitly set:
   - Affected pairs: `LLM_SECURITY_INJECTION_MODE`↔`injection.mode`, `LLM_SECURITY_TRIFECTA_MODE`↔`trifecta.mode`, `LLM_SECURITY_ESCALATION_WINDOW`↔`trifecta.escalation_window` (new key in `DEFAULT_POLICY`), `LLM_SECURITY_AUDIT_LOG`↔`audit.log_path`
@@ -77,11 +80,15 @@ Key commands: `/config-audit posture`, `/config-audit feature-gap`, `/config-aud
 
 ---
 
-### [Voyage](plugins/voyage/) `v5.0.2`
+### [Voyage](plugins/voyage/) `v5.1.1`
 
-Deep requirements gathering, research, implementation planning, self-verifying execution, independent post-hoc review, and zero-friction multi-session resumption — with specialized agent swarms, adversarial review, and failure recovery. Six-command (brief, research, plan, execute, review, continue) universal pipeline. `/trekbrief`, `/trekplan`, and `/trekreview` render their artifact to a self-contained HTML view and print the `file://` link; annotation is delegated to the official `/playground` plugin.
+Deep requirements gathering, research, implementation planning, self-verifying execution, independent post-hoc review, and zero-friction multi-session resumption — with specialized agent swarms, adversarial review, and failure recovery. Six-command (brief, research, plan, execute, review, continue) universal pipeline + adaptive-depth per-phase effort dialog. `/trekbrief`, `/trekplan`, and `/trekreview` render their artifact to a self-contained HTML view and print the `file://` link.
 
-v5.0.2 finally lands the annotation UX that v5.0.0 and v5.0.1 each missed: at the end of `/trekbrief`, `/trekplan`, and `/trekreview`, voyage now runs `scripts/annotate.mjs` against the just-written `.md` and prints a `file://<abs path>` link to a self-contained operator-annotation HTML. The operator opens it, **clicks any line of the document, writes their own note**, watches a sidebar of every note (editable, deletable, persisted in browser `localStorage`), and clicks "Copy Prompt" to get one structured prompt with every note. They paste it back into Claude, Claude revises the `.md`. **The operator drives every annotation** — no Claude-generated suggestions in the loop. v5.0.1 (now superseded) had pointed at `/playground document-critique`, but that template pre-generates Claude's suggestions and asks the operator to approve/reject them — the wrong direction. v5.0.0 (breaking, kept) removed the v4.2/v4.3 bespoke playground SPA, `/trekrevise`, Handover 8, the supporting `lib/` modules, the Playwright e2e suite, and the `@playwright/test` / `@axe-core/playwright` devDeps. `scripts/annotate.mjs` is ~430 lines of self-contained `.mjs` (zero npm deps, zero external network, deterministic output) and replaces all of that with the *concept* the bespoke playground was reaching for but never achieved. See `plugins/voyage/CHANGELOG.md` § v5.0.0 + § v5.0.1 + § v5.0.2.
+v5.1.1 is a 13-step remediation patch closing 11 of 12 findings from the v5.1.0 review (the SC8 dogfood gate is operator-manual, scheduled for after-execute). Load-bearing bug fixes: YAML-number bypass in `brief-validator` so the gate fires for both quoted and unquoted `brief_version` (#8 + #11). Wiring: a new `lib/profiles/phase-signal-resolver.mjs` helper is invoked from `/trekplan`/`/trekresearch`/`/trekreview`/`/trekexecute` Phase 1, the resolved JSON is captured as `phase_signal_result`, and the `brief-validator --soft` gate is required uniformly across all 4 downstream commands (#9 + #12). Test refactor: runtime SC1 walk for trekbrief + per-tier resolver-output + missing-signals falsification per downstream command + dedicated profile-resolver non-interference test (#1 #2 #3 #4 #6 #7 #10). Documentation: Decision B high-effort behavior locked per command (gemini-bridge pass for `/trekplan`, full swarm + always-on `contrarian-researcher` for `/trekresearch`, skip Pass 3 + coordinator normalization for `/trekreview`, `gates_mode: closed` for `/trekexecute`) + brief Non-Goal/SC1 amendments + REMEMBER dogfood scaffolding. v5.1.1 is additive — no breaking changes against v5.1.0. See `plugins/voyage/CHANGELOG.md` § v5.1.1.
+
+v5.1.0 adds Phase 3.5 to `/trekbrief`: 4 tier-coupled `AskUserQuestion` calls commit an effort level (`low | standard | high`) and an optional `model` (`sonnet | opus`) per downstream phase (`research`, `plan`, `execute`, `review`). The choices land in `brief.md` as `phase_signals:` (or `phase_signals_partial: true` on force-stop). `brief_version: 2.1` activates a validator-side sequencing gate (`BRIEF_V51_MISSING_SIGNALS`) so downstream commands halt with a friendly hint when signals are missing. Composition rule per downstream command: brief signal wins per-phase, profile fills gaps. `effort == low` activates each command's existing `--quick`-equivalent code-path (`/trekexecute` low-effort = `--gates open` + sequential-only). Additive — no breaking changes; pre-2.1 briefs still validate. See `plugins/voyage/CHANGELOG.md` § v5.1.0.
+
+v5.0.3 lands the annotation UX modelled on `~/repos/claude-code-100x/claude-code-100x/build-site.js`: pencil-toggle annotation mode, **select text or click any element to anchor**, choose intent (**Fiks** / **Endre** / **Spørsmål**), write a comment, save. The sidebar groups annotations by section with intent badges; Copy Prompt assembles them into a structured markdown the operator pastes back into Claude. State persists in `localStorage` per artifact path. v5.0.2 was operator-led but too thin (line-click + freeform note, no intent categories). v5.0.1 had pointed at `/playground document-critique` (Claude-leads — wrong direction). v5.0.0 (breaking, kept) removed the v4.2/v4.3 bespoke playground SPA, `/trekrevise`, Handover 8, the supporting `lib/` modules, the Playwright e2e suite, and the `@playwright/test` / `@axe-core/playwright` devDeps. v5.0.3's `scripts/annotate.mjs` is one self-contained zero-dependency Node script. **The operator drives every annotation** — Claude never pre-generates suggestions in this flow. See `plugins/voyage/CHANGELOG.md` § v5.0.0 → § v5.0.3.
 
 v4.0.0 (breaking) renamed the plugin from `ultraplan-local` to **Voyage** and all commands from `/ultra*-local` to `/trek*` to remove name collision with Anthropic's `/ultraplan` and `/ultrareview` features. See `plugins/voyage/TRADEMARKS.md` and `plugins/voyage/CHANGELOG.md`.
 
@@ -168,7 +175,7 @@ Key command: `/graceful-handoff [topic-slug] [--no-commit] [--no-push] [--dry-ru
 
 ---
 
-### [MS AI Architect — Azure AI and Microsoft Foundry](plugins/ms-ai-architect/) `v1.14.0` `🇳🇴 Norwegian`
+### [MS AI Architect — Azure AI and Microsoft Foundry](plugins/ms-ai-architect/) `v1.15.0` `🇳🇴 Norwegian`
 
 Microsoft AI solution architecture guidance for Norwegian public sector and enterprise.
 
@@ -183,11 +190,11 @@ Key commands: `/architect`, `/architect:ros`, `/architect:security`, `/architect
 
 12 specialized agents · 25 commands · 5 skills (387 reference docs) · 2 hooks · manual sitemap-driven KB refresh
 
-**One-click demo (v1.14.0, 2026-05-08):** "Last inn demo-data"-knappen på onboarding bootstrapper en ferdig "Acme Kommune" med demo-prosjektet "Acme: Kunde-chatbot" og alle 17 rapport-typer pre-importert som `raw_markdown` (konsistente navn på tvers av alle fixtures). Visualisering rehydreres automatisk på project-surface mount. 24 retina-screenshots committed under `playground/screenshots/v1.14.0/` (12 surfaces × 2 tema), så forkere ser pluginen uten å kjøre noe. Standalone Playwright-runner under `tests/screenshot/` (egen `package.json`).
+**One-click demo (v1.15.0, 2026-05-16):** "Last inn demo-data"-knappen på onboarding bootstrapper en ferdig "Acme Kommune" med demo-prosjektet "Acme: Kunde-chatbot" og alle 17 rapport-typer pre-importert. v2→v3 migrasjon auto-parser `raw_markdown` til `project.artifacts[cid]` så project-view viser aggregert verdict (BLOKKERT), key stats (17/17 artifacts), top-risks-liste, og navigerbart artifact-sidebar i én navigasjon. 24 retina-screenshots committed under `playground/screenshots/v1.15.0/` (12 surfaces × 2 tema), så forkere ser pluginen uten å kjøre noe. Standalone Playwright-runner under `tests/screenshot/` (egen `package.json`).
 
-**Playground (v3, v1.14.0 — root-cause refaktor, 2026-05-08):** Multi-surface decision-builder + report viewer. The single-file HTML app lives at `playground/ms-ai-architect-playground.html` (~3870+ lines). v1.14.0 leverer DS-konvensjon-adopsjon på 14 renderere over 6 sesjoner: B-DS-1/2/3 fikset i shared/ DS v0.4.0 (kanban-card word-break, expansion title-block, matrix-bubble cursor); 3 risk-renderere til DS-summary-grid + ros-layout; 6 compliance/govern-renderere bytter `.report-meta`-wrapper mot DS-konvensjon; renderMigrate + renderPoc til expansion-list per fase; 5b-fixes i renderCost/renderCompare/renderUtredning. Lokal `<style>`-blokk: 191 → 122 effektive linjer (~36% reduksjon siden v1.13.1).
+**Playground (v3, v1.15.0 — project-view integration, 2026-05-16):** Multi-surface decision-builder + report viewer. The single-file HTML app lives at `playground/ms-ai-architect-playground.html` (~3870+ lines). v1.15.0 erstatter v2 project-surface (screen-tabs + category-tabs + per-command paste-cards) med v3 `renderProjectView` (sidebar med 17 artifacts gruppert i 4 kategorier + main-area med per-artifact view eller overview + import-modal som DS-overlay). V2-surface helt fjernet (`renderProjectSurface`, `renderCommandSubCard`, `rehydratePasteImports`, 5 v2-CSS-klasser). 2 fingerprint-gap lukket (requirements + license headers). `migrateDataVersion` utvidet med `parserFor` slik at demo-state og persisted localStorage auto-parses. Ship-QA: `components-tier4-project-view.css` lagt til i `<link>`-kjeden (var ikke loaded → modal-overlay og two-column layout virket ikke). 386 E2E PASS, 0 FAIL, 2 WARN.
 
-- **4 surfaces:** Onboarding (4 strukturerte / 14 fritekst, prefill alle command-skjemaer) → Home (project list + 3 entry tracks) → Catalog (24 commands grouped in 5 expansion categories with search) → Project (per-project tabs, command-form prefill, paste-back report import + visualization)
+- **4 surfaces:** Onboarding (4 strukturerte / 14 fritekst, prefill alle command-skjemaer) → Home (project list + 3 entry tracks) → Catalog (24 commands grouped in 5 expansion categories with search) → **Project v3** (sidebar med 17 artifacts + søk + main-area med per-artifact view eller aggregate overview + import-modal overlay)
 - **Persistence:** IndexedDB primary + localStorage fallback, schema-versioned (`STATE_KEY = 'ms-ai-architect-state-v1'`) with eager migrations pipeline. v1.10.0 adds idempotent `dataVersion v1→v2` migration that backfills `verdict` + `keyStats` on existing reports.
 - **17 inline report renderers (felles grunnskjelett)** — all wrap output through `renderPageShell()` with eyebrow + h1 + optional verdict-pill + optional key-stats-grid + archetype body (pyramid, 5×5/6×5/7×5 matrix, radar, kanban, mat-ladder, scenario-cards, screen-tabs, residual-pair, top-risks, recommendation-card, suppressed-panel, critique-card, read-more, traffic-light).
 - **Foundation helpers** — `renderPageShell`, `renderVerdictPill`, `renderKeyStatsGrid`, `inferVerdict`, `inferKeyStats`, `KEY_STATS_CONFIG`.
@@ -262,6 +269,24 @@ Activate with `/config` → **Output style** → **Human-Friendly**.
 
 ---
 
+### [Claude Design](plugins/claude-design/) `v0.1.0`
+
+End-to-end facilitator for prompting Claude Design (`claude.ai/design` — Anthropic's Labs research preview launched 2026-04-17, Opus 4.7 pinned). Walks the operator from raw idea through intent-preset selection, audience and destination clarification, DESIGN.md anchor, five-layer prompt drafting, copy-paste delivery, iteration coaching, and ship-readiness handoff. Output is the prompt; the artifact gets built in Claude Design.
+
+The plugin is the **pre-design and during-design** complement to Anthropic's official `knowledge-work-plugins/design` (`https://claude.com/plugins/design`). This plugin covers idea → prompt → iterate; Anthropic's plugin covers critique → accessibility → handoff. Zero command overlap by design — `tests/validate-plugin.sh` assertion (h) enforces the forbidden-command-name list mechanically.
+
+- **Eight-phase facilitation flow** — disambiguate surface → name intent preset → audience + destination → DESIGN.md anchor → five-layer prompt draft → copy-paste delivery → iteration coaching (Tweak / Comment / Chat cascade) → ship-readiness check
+- **Five foundation references + eight per-preset references** with evidence-grade labels (`Anthropic-documented + community-validated`, `Community-only`, `Experimental` for `frontier-design`)
+- **Authoritative-claims discipline** — every reference file carries ≥1 Anthropic-domain URL citation (`anthropic.com`, `claude.com`, `support.claude.com`, `platform.claude.com`, `github.com/anthropics`); `.coverage.md` is the canonical registry
+- **`.coverage.md`** at plugin root enumerates the 8 intent presets with evidence-grade labels and the 13 authoritative-claims files; SC2 and SC3 read from it directly
+- **5 test scripts + `verify.sh` roll-up** — plugin structure validation, SC1 dogfood-log format, SC2 per-preset coverage, SC3 citation discipline, skill description quality
+
+1 skill (`claude-design-facilitator`) · 13 reference files · 5 tests · 0 commands · 0 agents · 0 hooks
+
+→ [Full documentation](plugins/claude-design/README.md)
+
+---
+
 ## Shared infrastructure
 
 ### [Playground Design System](shared/playground-design-system/) `v0.1`
diff --git a/plugins/ai-psychosis/CLAUDE.md b/plugins/ai-psychosis/CLAUDE.md
index 33dc967..13a250e 100644
--- a/plugins/ai-psychosis/CLAUDE.md
+++ b/plugins/ai-psychosis/CLAUDE.md
@@ -31,11 +31,11 @@ Legacy bash scripts were removed in v1.0 (available in git history).
 ## Data storage
 
 ```
-${CLAUDE_PLUGIN_DATA}/
+$CLAUDE_PLUGIN_DATA/
 ├── sessions.jsonl       Compact JSONL, one record per session
 ├── events.jsonl         {ts, session_id, tool_name} per tool call
 └── state/
-    └── {session_id}.json    Live state during active session
+    └── <session_id>.json    Live state during active session
 ```
 
 State files are created at SessionStart and deleted at SessionEnd.
diff --git a/plugins/claude-design/.claude-plugin/plugin.json b/plugins/claude-design/.claude-plugin/plugin.json
new file mode 100644
index 0000000..302db2f
--- /dev/null
+++ b/plugins/claude-design/.claude-plugin/plugin.json
@@ -0,0 +1,18 @@
+{
+  "name": "claude-design",
+  "version": "0.1.0",
+  "description": "End-to-end facilitator for prompting Claude Design (claude.ai/design) — idea to copy-paste-ready prompt with iteration coaching, citing Anthropic primary sources.",
+  "author": {
+    "name": "Kjell Tore Guttormsen"
+  },
+  "auto_discover": true,
+  "license": "MIT",
+  "repository": "https://git.fromaitochitta.com/open/ktg-plugin-marketplace",
+  "keywords": [
+    "claude-design",
+    "claude-ai",
+    "prompt-engineering",
+    "artifacts",
+    "design"
+  ]
+}
diff --git a/plugins/claude-design/.coverage.md b/plugins/claude-design/.coverage.md
new file mode 100644
index 0000000..3428415
--- /dev/null
+++ b/plugins/claude-design/.coverage.md
@@ -0,0 +1,90 @@
+# claude-design coverage manifest
+
+**Captured-on date:** 2026-05-17 | **Source:** `https://anthropic.com/news/claude-design-anthropic-labs` (intent-preset enumeration)
+
+This file is the canonical input for SC2 verification (`tests/test-sc2-artifact-coverage.sh`) and the SC3 Authoritative-claims registry (`tests/test-sc3-citations.sh`). Both tests read this file directly — keep it in sync with the references tree.
+
+Anthropic's launch enumeration names eight intent presets; this plugin ships one reference file per preset with explicit evidence-grade labelling. The evidence-grade levels are:
+
+- **Anthropic-documented + community-validated** — Anthropic publishes verbatim prompt patterns and community practitioners have independently validated them
+- **Community-only** — Anthropic names the preset but publishes no per-preset prompt patterns; the patterns come from community practitioners with attribution
+- **Experimental** — neither Anthropic nor community practitioners have published verifiable prompt patterns; the preset is engaged speculatively
+
+The evidence-grade labels are load-bearing for SC2 and SC3. Per-preset reference files restate the grade inline on line 4.
+
+---
+
+## Intent preset coverage
+
+| Preset | Reference file | Evidence grade | Anthropic anchor URL |
+| --- | --- | --- | --- |
+| designs | skills/claude-design-facilitator/references/presets/designs.md | Evidence grade: Anthropic-documented + community-validated | https://anthropic.com/news/claude-design-anthropic-labs |
+| prototypes | skills/claude-design-facilitator/references/presets/prototypes.md | Evidence grade: Anthropic-documented + community-validated | https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux |
+| slides | skills/claude-design-facilitator/references/presets/slides.md | Evidence grade: Anthropic-documented + community-validated | https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks |
+| one-pagers | skills/claude-design-facilitator/references/presets/one-pagers.md | Evidence grade: Community-only | https://anthropic.com/news/claude-design-anthropic-labs |
+| wireframes-mockups | skills/claude-design-facilitator/references/presets/wireframes-mockups.md | Evidence grade: Community-only | https://anthropic.com/news/claude-design-anthropic-labs |
+| pitch-decks | skills/claude-design-facilitator/references/presets/pitch-decks.md | Evidence grade: Community-only | https://anthropic.com/news/claude-design-anthropic-labs |
+| marketing-collateral | skills/claude-design-facilitator/references/presets/marketing-collateral.md | Evidence grade: Community-only | https://anthropic.com/news/claude-design-anthropic-labs |
+| frontier-design | skills/claude-design-facilitator/references/presets/frontier-design.md | Evidence grade: Experimental — no validated practitioner pattern | https://anthropic.com/news/claude-design-anthropic-labs |
+
+The preset names in column 1 (`designs`, `prototypes`, `slides`, `one-pagers`, `wireframes-mockups`, `pitch-decks`, `marketing-collateral`, `frontier-design`) are the canonical names used by `tests/test-sc2-artifact-coverage.sh`. The test extracts column 1 via awk and runs grep against the plugin's content tree to verify each preset has at least one supporting file.
+
+---
+
+## Authoritative-claims files
+
+The following files contain authoritative claims (Anthropic-published material, primary sources, or community-converged patterns with attribution). Each must carry at least one Anthropic-domain URL citation. `tests/test-sc3-citations.sh` reads this bullet list, parses paths via awk on `^- `, then runs the citation grep against each file.
+
+- skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md
+- skills/claude-design-facilitator/references/01-prompt-fundamentals.md
+- skills/claude-design-facilitator/references/02-design-md.md
+- skills/claude-design-facilitator/references/03-iteration-and-session.md
+- skills/claude-design-facilitator/references/04-handoff-and-scope.md
+- skills/claude-design-facilitator/references/presets/designs.md
+- skills/claude-design-facilitator/references/presets/prototypes.md
+- skills/claude-design-facilitator/references/presets/slides.md
+- skills/claude-design-facilitator/references/presets/one-pagers.md
+- skills/claude-design-facilitator/references/presets/wireframes-mockups.md
+- skills/claude-design-facilitator/references/presets/pitch-decks.md
+- skills/claude-design-facilitator/references/presets/marketing-collateral.md
+- skills/claude-design-facilitator/references/presets/frontier-design.md
+
+Total: 13 authoritative-claims files (5 foundation references + 8 per-preset references).
+
+The bullet-list format is load-bearing — `tests/test-sc3-citations.sh` parses lines starting with `- ` (dash + space). Do not switch to a table or numbered list without updating the test.
+
+---
+
+## Re-research triggers
+
+This manifest refreshes when any of these events occurs:
+
+- **Anthropic publishes per-preset guidance for a Community-only preset** (one-pagers, wireframes-mockups, pitch-decks, marketing-collateral) — upgrade the affected row's evidence grade and add the new Anthropic anchor URL
+- **Anthropic publishes per-preset guidance for the Experimental preset** (frontier-design) — upgrade to Community-only or Anthropic-documented depending on coverage depth
+- **A new intent preset is added to Anthropic's launch-post enumeration** (`https://anthropic.com/news/claude-design-anthropic-labs`) — add a new row, write a new preset reference file
+- **An existing intent preset is removed from the enumeration** — remove the row, deprecate the reference file in `CHANGELOG.md`
+- **A first verified frontier-design practitioner artifact ships publicly** with prompt + output + reproduction steps — upgrade the frontier-design row from Experimental to Community-only, update `presets/frontier-design.md`
+- **Anthropic support article URL slugs change while keeping numeric IDs stable** — re-pin URLs in column 4 (Anthropic anchor URL); the numeric IDs in `support.claude.com/en/articles/<numeric-id>-<slug>` are the stable anchor
+- **Labs → GA URL rename for `claude.ai/design`** — re-pin the launch-post URL once the `-anthropic-labs` slug is dropped (note: the launch URL `https://anthropic.com/news/claude-design-anthropic-labs` may or may not 301-redirect after the rename)
+
+When any trigger fires, run `bash plugins/claude-design/verify.sh --strict` after the manifest update to confirm SC2 and SC3 still pass.
+
+---
+
+## Related sources (for context, not for SC checks)
+
+Anthropic primary sources that ground this manifest but are not themselves authoritative-claims files (because they are external URLs, not plugin files):
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — GLCA framework
+- `https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design` — design-system setup
+- `https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` — PowerPoint-mode conventions
+- `https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux` — prototypes tutorial
+- `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` — slides tutorial
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading framing
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Design-Thinking Framework, AI-slop avoid-list
+- `https://claude.com/blog/improving-frontend-design-through-skills` — default-avoidance blog post
+- `https://claude.com/plugins/design` — Anthropic's official knowledge-work-plugins/design plugin (downstream tool)
+- `https://github.com/anthropics/knowledge-work-plugins` — source for Anthropic's downstream plugin
+
+Anthropic URL canonicalisation: every `support.claude.com` reference uses the `https://support.claude.com/en/articles/<numeric-id>-<slug>` form. Numeric IDs are stable across slug rewrites; slug-only URLs are not.
diff --git a/plugins/claude-design/CHANGELOG.md b/plugins/claude-design/CHANGELOG.md
new file mode 100644
index 0000000..dd152de
--- /dev/null
+++ b/plugins/claude-design/CHANGELOG.md
@@ -0,0 +1,37 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] — 2026-05-17
+
+### Added
+- `claude-design-facilitator` skill with eight-phase facilitation flow (disambiguate → intent preset → audience + destination → DESIGN.md anchor → five-layer prompt draft → copy-paste delivery → iteration coaching → ship-readiness handoff) and 12 natural-language trigger phrases registered in `.triggers.txt`.
+- Five foundation references under `skills/claude-design-facilitator/references/`: `00-what-claude-design-is-and-isnt.md` (surface disambiguation), `01-prompt-fundamentals.md` (five-layer prompt stack: GLCA + start-simple + concrete-alternative-spec + propose-options + AI-slop avoid-list + four design dimensions + four grading criteria), `02-design-md.md` (DESIGN.md 9-section canonical structure + brand-to-DESIGN.md extractor), `03-iteration-and-session.md` (Tweak / Comment / Chat cascade, session economics, recovery prompt library), `04-handoff-and-scope.md` (one-way Design → Code handoff + scope fence vs Anthropic's `knowledge-work-plugins/design`).
+- Eight per-preset references under `skills/claude-design-facilitator/references/presets/` with evidence-grade labels: `designs.md`, `prototypes.md`, `slides.md` (Anthropic-documented + community-validated); `one-pagers.md`, `wireframes-mockups.md`, `pitch-decks.md`, `marketing-collateral.md` (Community-only); `frontier-design.md` (Experimental — no validated practitioner pattern as of 2026-05-16).
+- `.coverage.md` at plugin root — preset enumeration table with evidence-grade labels (8 rows) + `Authoritative-claims files` bullet-list registry (13 paths). Canonical input for SC2 and SC3 verification.
+- Five verification scripts under `tests/`: `validate-plugin.sh` (structural integrity + forbidden-command-name scope fence + operator-private-context grep + Norwegian-leakage advisory), `test-skill-triggers.sh` (description quality + trigger phrase coverage), `test-sc2-artifact-coverage.sh` (per-preset coverage from `.coverage.md`), `test-sc3-citations.sh` (Anthropic-domain citation discipline), `test-sc1-dogfood-log.sh` (operator dogfood log format-check in `REMEMBER.md`).
+- `verify.sh` top-level roll-up with `--strict` (SC1 missing-block becomes FAIL) and `--quick` (skip skill-triggers test) flags.
+- `LICENSE` (MIT) and `GOVERNANCE.md` (marketplace fork-and-own blurb).
+- Marketplace registration in root `.claude-plugin/marketplace.json`.
+
+### Documentation
+- Plugin `README.md` rewritten from scaffold placeholder to full v0.1 surface description with `Scope and complementarity` section (placed before installation per brief), `What this plugin is NOT` (Non-Goals), eight-phase facilitation flow table, skill surface table, reference content map, per-preset coverage table, verification section, AI-generated disclosure, fork-and-own MIT licensing.
+- Plugin `CLAUDE.md` translated to English (operator override of marketplace's Norwegian-dialogue default per v0.1 brief constraint); added `Scope fence` section explicitly forbidding command-name collisions with Anthropic's `knowledge-work-plugins/design` (`/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, `/handoff`); `Authoring rules` section codifies English-everywhere, no operator-private context, evidence-grade label discipline, URL canonicalisation on `support.claude.com/en/articles/<numeric-id>-<slug>`; `Communication patterns` block preserved verbatim.
+- Root marketplace `README.md` updated with `### [Claude Design](plugins/claude-design/) \`v0.1.0\`` entry under the `## Plugins` section, positioned after the Human-Friendly Style entry per existing convention. Entry documents the complementary lifecycle coverage vs `knowledge-work-plugins/design`.
+
+### Notes
+- **Scope:** claude-design facilitates the pre-design and during-design lifecycle for `claude.ai/design` (Anthropic Labs research preview, Opus 4.7 pinned, eight intent presets). For post-design — critique, accessibility audit, UX copy review, design-system audit, engineering handoff — install Anthropic's official plugin via `claude plugins add knowledge-work-plugins/design`. Zero command overlap, complementary by design.
+- **No browser automation.** This plugin produces prompts; the artifact gets built inside `claude.ai/design`. The operator copies and pastes manually.
+- **No artifact code generation.** This plugin is a prompt-builder, not an artifact generator. Claude Design is the generator.
+- **No artifact storage or versioning.** Claude Design has no version-tree primitive and this plugin does not invent one. The verbal save-pattern documented in `references/03-iteration-and-session.md` is the closest substitute.
+- **English everywhere in shipped content.** Operator override of the marketplace's default Norwegian-dialogue convention. `tests/validate-plugin.sh` assertion (j) emits WARN on Norwegian diacritics in shipped content; review case-by-case.
+- **Evidence-grade discipline.** Every per-preset reference file carries an inline `Evidence grade:` label on line 4 with one of three values: `Anthropic-documented + community-validated`, `Community-only`, `Experimental`. `.coverage.md` is the canonical registry.
+- **Re-research triggers** documented in `.coverage.md` — fire on Anthropic publishing per-preset guidance for Community-only presets, on new intent presets added to the launch enumeration, on the first verified `frontier-design` practitioner artifact shipping publicly, on Labs → GA URL rename for `claude.ai/design`, on Anthropic's `knowledge-work-plugins/design` adding or removing slash-commands.
+
+## [0.1.0-pre] — 2026-05-15
+
+### Added
+- Initial scaffold (README, CLAUDE.md, ROADMAP, TODO, plugin.json placeholder).
diff --git a/plugins/claude-design/CLAUDE.md b/plugins/claude-design/CLAUDE.md
new file mode 100644
index 0000000..6015dad
--- /dev/null
+++ b/plugins/claude-design/CLAUDE.md
@@ -0,0 +1,88 @@
+# claude-design
+
+## Context
+
+This plugin is an expert on **Claude Design** (`claude.ai/design`) — Anthropic's Labs research preview for generating interactive design artifacts from a prompt. It walks the operator through the full lifecycle: idea → intent-preset selection → audience and destination → DESIGN.md anchor → five-layer prompt drafting → copy-paste delivery → iteration coaching → ship-readiness handoff. It does not generate artifact code itself and it does not drive the browser; it produces the prompt that the operator pastes into Claude Design.
+
+## Status
+
+`v0.1.0`. Surface:
+
+- One skill: `claude-design-facilitator` (auto-fire + explicit `/claude-design-facilitator` slash command)
+- Five foundation references under `skills/claude-design-facilitator/references/`
+- Eight per-preset references under `skills/claude-design-facilitator/references/presets/`
+- Five test scripts under `tests/` plus a `verify.sh` roll-up
+- A `.coverage.md` preset manifest at the plugin root (canonical input for SC2 and the SC3 Authoritative-claims registry)
+- `LICENSE` (MIT), `GOVERNANCE.md` (marketplace fork-and-own blurb), `README.md`, `CHANGELOG.md`
+
+No commands, no agents, no hooks, no MCP servers at v0.1. The single skill is the entire user-facing surface.
+
+## Marketplace context
+
+This plugin lives inside `ktg-plugin-marketplace`. No separate git repository, no separate Forgejo remote. All commits go to the marketplace repository at `https://git.fromaitochitta.com/open/ktg-plugin-marketplace`.
+
+Marketplace conventions inherited from the root `CLAUDE.md`:
+
+- Conventional Commits — `type(scope): description`; scope is `claude-design`
+- Hooks in Node.js (`.mjs`), never bash (this plugin ships no hooks at v0.1)
+- Zero npm dependencies in hooks and scripts
+- Docs-triple updated in the same commit on every feature change: plugin `README.md` + plugin `CLAUDE.md` + root `README.md`
+
+## Architecture (v0.1)
+
+- **`skills/claude-design-facilitator/SKILL.md`** is the auto-fire entry point AND the explicit `/claude-design-facilitator` invocation surface. The skill body documents the eight-phase facilitation flow.
+- **`skills/claude-design-facilitator/.triggers.txt`** lists the natural-language phrases the skill auto-fires on. `tests/test-skill-triggers.sh` validates every phrase appears in the SKILL.md description.
+- **`skills/claude-design-facilitator/references/`** is the knowledge base. Five foundation references (00–04) plus eight per-preset references under `references/presets/`. Every authoritative claim cites an Anthropic primary source inline.
+- **`.coverage.md`** at the plugin root is the SC2 manifest (preset enumeration with evidence-grade labels) and the SC3 Authoritative-claims registry (bullet list of files that must carry Anthropic-domain citations).
+- **`tests/`** + **`verify.sh`** enforce the brief Success Criteria: SC1 dogfood-log format, SC2 per-preset coverage, SC3 citation discipline, plus skill description quality and plugin structural integrity.
+
+The skill body never offers to generate artifact code, automate the browser, or store artifact history (per [Non-Goals in README](README.md)). It produces prompts.
+
+## Scope fence
+
+This plugin covers **pre-design and during-design** for `claude.ai/design`: idea → prompt → preview → iterate → ship-readiness.
+
+**Post-design** — critique, accessibility audit, UX copy review, research synthesis, design-system audit, engineering handoff — is out of scope and lives in Anthropic's official `knowledge-work-plugins/design` (`https://claude.com/plugins/design`). This plugin must never duplicate the commands `/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, `/handoff` — with or without a `claude-design:` namespace prefix. `tests/validate-plugin.sh` assertion (h) enforces this scope fence mechanically.
+
+The lifecycle-stage coverage map and the operational handoff between the two plugins are documented in `skills/claude-design-facilitator/references/04-handoff-and-scope.md`.
+
+## Authoring rules
+
+Every contribution to this plugin must respect these rules:
+
+- **Language: English everywhere.** Plugin file content — `README.md`, `CLAUDE.md` (this file), `CHANGELOG.md`, `SKILL.md`, all `references/*.md`, all `tests/*.sh` output messages, every code comment — is English. This is the operator override of the marketplace's default Norwegian-dialogue policy; documented in the v0.1 brief. The `tests/validate-plugin.sh` assertion (j) emits a WARN on Norwegian diacritics in shipped content; review case-by-case (citation slugs occasionally legitimately carry diacritics, but the default is zero hits).
+- **No operator-private context in shipped content.** No personal-name or organization-affiliation tokens, no copy-paste from local session-state and handoff files. `tests/validate-plugin.sh` assertion (i) enforces this with a recursive grep on the specific patterns it bans; the grep excludes the local files themselves.
+- **Evidence-grade label discipline.** Every per-preset reference file carries an inline `Evidence grade:` label on line 4. The three grades are `Anthropic-documented + community-validated`, `Community-only`, and `Experimental`. `.coverage.md` is the canonical registry. SC2 and SC3 read from `.coverage.md` directly — keep it in sync.
+- **URL canonicalisation.** All `support.claude.com` references use the form `https://support.claude.com/en/articles/<numeric-id>-<slug>`. Numeric IDs are stable across slug rewrites; slug-only URLs are not. `https://anthropic.com/news/...` and `https://claude.com/blog/...` follow whatever slug Anthropic publishes.
+- **No NIH of Anthropic surfaces.** The plugin recommends Anthropic's `knowledge-work-plugins/design` as the downstream tool; it does not duplicate that plugin's functionality.
+
+## Workflow
+
+The Voyage pipeline produces v0.1 and every subsequent feature change:
+
+1. **Brief** closes scope and scope boundaries
+2. **Research** gathers external sources — Anthropic primary material (news posts, support articles, blog posts, open-source skills, tutorials, plugins), plus community practitioners with attribution
+3. **Plan** specifies file-by-file what gets built
+4. **Execute** delivers the code and content
+5. **Review** is the release gate (`/trekreview`)
+
+Voyage policy: Opus across all sub-agents and orchestrator phases (per `feedback_voyage_opus_always`).
+
+For incremental content updates that do not warrant a full Voyage iteration (e.g., refreshing a single per-preset reference when Anthropic publishes new guidance), the docs-triple rule still applies: plugin `README.md` + plugin `CLAUDE.md` (this file) + root `README.md` updated in the same commit as the content change.
+
+## Communication patterns
+
+### Linking to local files
+
+When pointing to local files in responses, always use markdown link syntax with a descriptive name:
+
+- Use `[Human-friendly name](file:///absolute/path)` — never bare `file:///...` URLs or autolinks `<file://...>`.
+- Always use absolute paths. Never `~/` or relative paths.
+- For multiple files, render as a bullet list of named markdown links.
+
+Why: bare `file://` URLs only render the first as clickable across multiple lines. Named markdown links make each entry independently clickable and look cleaner.
+
+Example:
+
+- [Brief](file:///Users/ktg/.../brief.html)
+- [Research summary](file:///Users/ktg/.../research/summary.md)
diff --git a/plugins/claude-design/GOVERNANCE.md b/plugins/claude-design/GOVERNANCE.md
new file mode 100644
index 0000000..69dc709
--- /dev/null
+++ b/plugins/claude-design/GOVERNANCE.md
@@ -0,0 +1,118 @@
+# Governance
+
+How this marketplace is maintained, what you can expect from upstream, and how it's meant to be used.
+
+## TL;DR
+
+- Solo-maintained, AI-assisted development, MIT licensed.
+- **Fork-and-own is the default model.** Upstream is a starting point, not a vendor.
+- Issues welcome as signals. Pull requests are not accepted — see [Why no PRs](#pull-requests--no).
+- No SLA. Best-effort bug fixes and security advisories. Breaking changes happen and are noted in each plugin's CHANGELOG.
+
+---
+
+## Can I trust this?
+
+Be honest with yourself about what you're adopting:
+
+- **One maintainer.** If I get hit by a bus, the bus wins. The repos stay up under MIT, but no one owes you a fix.
+- **AI-generated code with human review.** Every plugin is built through dialog-driven development with Claude Code. I read, test, and judge the output before it ships, but I'm not auditing every line the way a security firm would. Treat it accordingly.
+- **No commercial interests.** I'm not selling a SaaS, not steering you toward a paid tier, not collecting telemetry. The plugins run locally in your Claude Code installation.
+- **MIT licensed.** Fork it, modify it, ship it under your own name.
+
+If you work somewhere that needs vendor accountability, support contracts, or signed assurances — **this isn't that.** Use it as a reference implementation, fork it into your own organization, and own the result.
+
+---
+
+## How this is meant to be used
+
+### Fork-and-own
+
+The intended workflow:
+
+1. **Fork** the marketplace (or a single plugin) into your own organization or namespace.
+2. **Tailor** it to your context — terminology, integrations, whatever doesn't fit out of the box.
+3. **Maintain it yourself.** Treat your fork as the canonical version for your team.
+4. **Watch upstream selectively.** Cherry-pick changes that help, ignore changes that don't. There's no obligation to stay in sync.
+
+For `claude-design` specifically, the most likely fork is a content adaptation — different intent-preset coverage (e.g., dropping `frontier-design` if your team never uses it), an organization-specific DESIGN.md template, a different evidence-grade discipline, or per-preset prompt patterns tuned to your team's design system. The plugin is a content surface plus a single skill. Forking it is straightforward.
+
+### What to change first when you fork
+
+- **Identity** — rename the plugin, replace authorship, update README.
+- **Reference content** — the `references/` tree reflects what Anthropic published and the community converged on as of 2026-05-17. Adjust to your team's house style and design system.
+- **Frontmatter** — `name` and `description` show up in `/config`. Pick names that won't collide with other forks installed on the same machine.
+
+### Staying current with upstream
+
+If you want to pull in upstream changes later:
+
+- **Cherry-pick, don't merge.** Each plugin moves independently.
+- **Read the CHANGELOG first.**
+- **Keep your customizations distinct.** A renamed skill (`my-org-design-facilitator`) merges more cleanly than edits to `claude-design-facilitator`.
+
+---
+
+## What upstream provides
+
+| | What I do | What I don't |
+|---|---|---|
+| **Bug fixes** | Best-effort when I notice or get a clear report | No SLA, no triage commitment |
+| **Security issues** | Investigate within reasonable time, document in CHANGELOG | No CVE process, no embargo coordination |
+| **New features** | When they fit my own usage | Not on request |
+| **Breaking changes** | Documented in CHANGELOG | They happen — version pin if you need stability |
+| **Compatibility** | Tracked against current Claude Code releases | No long-term support branches |
+
+If any of this is a dealbreaker — fork now, version-pin, and stop reading upstream.
+
+---
+
+## How to contribute
+
+### Issues — yes, please
+
+Issues are the most valuable thing you can send me:
+
+- **Bug reports** with reproduction steps. Even a screenshot helps.
+- **Use-case feedback.** "I tried to use this in my organization and X didn't fit" is genuinely useful, even if I can't fix it for you.
+- **Content suggestions.** If a reference file in `claude-design` produces guidance that doesn't match what you observe in `claude.ai/design` today, tell me what you saw. Concrete examples beat abstract complaints.
+
+### Pull requests — no
+
+This is deliberate, not laziness:
+
+- **Solo review is a bottleneck.** Honest PR review takes me longer than rewriting from scratch. The math doesn't work.
+- **Forks are where the value is.** The fork-and-own model means upstream consolidation isn't the point. Your organization's adaptations belong in your fork, not mine.
+- **AI-generated code complicates provenance.** Every line here is produced through dialog with Claude Code, with me as the judge. Mixing in PRs from contributors with different processes and licensing assumptions creates a mess I'd rather not untangle.
+
+If you've built something useful on top of a fork, **publish it under your own name and link back.** I'll happily list notable forks here once they exist.
+
+### Notable forks
+
+*(To be populated as forks emerge. If you've forked this plugin for production use, open an issue and I'll add a link.)*
+
+---
+
+## Relationship between plugins
+
+These plugins are **independent**. Install one without the others, fork one without the others. They share conventions (slash command naming, hook patterns, AI-generated disclosure, and the shared `human-friendly-style` output style) but no runtime dependencies.
+
+`claude-design` is a content surface with a single skill — it works without any other plugin installed. It recommends Anthropic's official `knowledge-work-plugins/design` as the downstream tool for post-design critique, accessibility audit, and engineering handoff, but does not depend on it being present.
+
+The marketplace is a **catalog**, not a suite. Don't fork the whole repo unless you actually want to maintain everything.
+
+---
+
+## Versioning and stability
+
+- **Semantic versioning per plugin.** Each plugin has its own `CHANGELOG.md` and version number.
+- **Breaking changes happen.** I bump the major version when they do, but I don't run an LTS branch.
+- **Pin your version.** If stability matters more than features, install a specific version and stay there until you choose to upgrade.
+
+For `claude-design` specifically: changes to skill trigger behavior or per-preset reference content schema are minor or major bumps. Pure documentation or per-preset content refresh from Anthropic source updates are patch. The skill surface itself is meant to be stable across patch releases.
+
+---
+
+## License
+
+MIT for all plugins in this marketplace. See [LICENSE](LICENSE) in this plugin and each other plugin's `LICENSE` file.
diff --git a/plugins/claude-design/LICENSE b/plugins/claude-design/LICENSE
new file mode 100644
index 0000000..1105208
--- /dev/null
+++ b/plugins/claude-design/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Kjell Tore Guttormsen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/plugins/claude-design/README.md b/plugins/claude-design/README.md
new file mode 100644
index 0000000..2473f93
--- /dev/null
+++ b/plugins/claude-design/README.md
@@ -0,0 +1,298 @@
+# Claude Design Facilitator
+
+> End-to-end facilitator for prompting Claude Design (`claude.ai/design`). Walks the operator from raw idea through intent-preset selection, audience and destination clarification, DESIGN.md anchor, five-layer prompt drafting, copy-paste delivery, iteration coaching, and ship-readiness handoff. Cites Anthropic primary sources inline. Recommends Anthropic's official `knowledge-work-plugins/design` as the downstream post-design tool.
+
+> **Solo-maintained, fork-and-own.** This plugin is a starting point, not a vendor product. Issues are welcome as signals; pull requests are not accepted. See [GOVERNANCE.md](GOVERNANCE.md) for the full model and what upstream provides.
+
+*AI-generated: all content produced by Claude Code through dialog-driven development. [Full disclosure →](../../README.md#ai-generated-code-disclosure)*
+
+![Version](https://img.shields.io/badge/version-0.1.0-blue)
+![Platform](https://img.shields.io/badge/platform-Claude_Code_Plugin-purple)
+![Skill](https://img.shields.io/badge/skills-1-green)
+![References](https://img.shields.io/badge/references-13-green)
+![Hooks](https://img.shields.io/badge/hooks-0-lightgrey)
+![Commands](https://img.shields.io/badge/commands-0-lightgrey)
+![License](https://img.shields.io/badge/license-MIT-lightgrey)
+
+A Claude Code plugin that ships one skill (`claude-design-facilitator`) plus a reference tree for prompting Anthropic's `claude.ai/design` workspace. The skill auto-fires on natural-language triggers, walks the operator through an eight-phase facilitation flow, and produces a copy-paste-ready prompt grounded in Anthropic's verbatim Goal / Layout / Content / Audience framework and the four published per-preset prompt patterns. Output is the prompt — the artifact gets built in Claude Design.
+
+---
+
+## Why this exists
+
+Claude Design has a strong gravitational pull toward convergent middle-ground output. A one-line prompt like *"make me a slide deck for Q1 results"* reliably produces what Anthropic's own cookbook for [prompting frontend aesthetics](https://platform.claude.com/cookbook/coding-prompting-for-frontend-aesthetics) names as the failure mode: Inter or Roboto typography, white-to-purple gradients, evenly-spaced cards, cramped layouts that read as AI-generated. The convergence is not random — it is what the model defaults to when prompts are underspecified.
+
+The fix is in the prompt itself, not in the artifact. Anthropic publishes a five-layer prompt scaffold across three primary sources — the Goal / Layout / Content / Audience framework in the [Claude Design launch post](https://anthropic.com/news/claude-design-anthropic-labs) and [Get started article](https://support.claude.com/en/articles/14604416-get-started-with-claude-design), the DESIGN.md anchor in the [design system article](https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design), and the AI-slop avoid-list plus cultural-reference anchoring in the [aesthetics cookbook](https://platform.claude.com/cookbook/coding-prompting-for-frontend-aesthetics). Assembling a prompt that actually uses all five layers, with the right per-preset pattern, in the right order, takes deliberate scaffolding most operators do not do unprompted.
+
+This plugin does the scaffolding interactively. The `claude-design-facilitator` skill walks the operator through eight phases, surfaces the questions that produce a workable Goal / Layout / Content / Audience answer, anchors on DESIGN.md if one exists or extracts one if not, composes the five layers in the right order, and outputs a copy-paste prompt the operator pastes into `claude.ai/design`. The artifact gets built in Claude Design; this plugin produces the prompt.
+
+The output is honest about what it is. Every authoritative claim cites an Anthropic primary source inline. Community patterns are labelled and attributed. The `frontier-design` preset is flagged Experimental rather than dressed up as canonical. The plugin recommends Anthropic's official [`knowledge-work-plugins/design`](https://claude.com/plugins/design) for everything that happens after the artifact is generated — there is zero command overlap by design.
+
+---
+
+## Scope and complementarity
+
+This plugin covers the **pre-design and during-design lifecycle** for `claude.ai/design`: idea → intent-preset selection → prompt engineering → copy-paste delivery → iteration coaching → ship-readiness check.
+
+For **post-design** work — critique, accessibility audit, UX copy review, research synthesis, design-system audit, engineering handoff guidance — install Anthropic's official plugin:
+
+```
+claude plugins add knowledge-work-plugins/design
+```
+
+Anthropic's plugin operates on existing artifacts (Figma URLs, screenshots, copy snippets) and ships six slash-commands: `/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, `/handoff`. There is zero command overlap with this plugin and complementary lifecycle coverage — the two plugins are designed to be installed together. See [skills/claude-design-facilitator/references/04-handoff-and-scope.md](skills/claude-design-facilitator/references/04-handoff-and-scope.md) for the full coverage map.
+
+---
+
+## What this plugin is NOT
+
+By design, this plugin does not:
+
+- **Drive the browser.** No automation of `claude.ai/design` itself; you copy and paste the prompts the skill produces.
+- **Generate the artifact code.** Claude Design is the artifact generator. This plugin produces prompts that go into Claude Design.
+- **Store artifact history or version artifacts.** Claude Design has no version-tree primitive and this plugin does not invent one.
+- **Cover adjacent Anthropic surfaces.** Classic Artifacts at `claude.ai`, Live Artifacts in Claude Cowork, custom visuals embedded in a chat reply are out of scope — see [skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md](skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md) for the disambiguation reference.
+- **Duplicate Anthropic's `knowledge-work-plugins/design` plugin.** No `/critique`, no `/accessibility`, no `/ux-copy`, no `/research-synthesis`, no `/design-system`, no `/handoff`. The post-design lane belongs to Anthropic's plugin.
+
+`tests/validate-plugin.sh` enforces the forbidden-command-name list mechanically.
+
+---
+
+## Installation
+
+Add the marketplace once, then install the plugin:
+
+```bash
+claude plugins marketplace add ktg-plugin-marketplace https://git.fromaitochitta.com/open/ktg-plugin-marketplace
+```
+
+In Claude Code:
+
+```
+/plugin install claude-design@ktg-plugin-marketplace
+```
+
+Or enable directly in `~/.claude/settings.json`:
+
+```json
+{
+  "enabledPlugins": {
+    "claude-design@ktg-plugin-marketplace": true
+  }
+}
+```
+
+The skill auto-discovers; no further configuration needed.
+
+---
+
+## What you can do with it
+
+The skill `claude-design-facilitator` walks the operator through eight phases. The phases are scoping + grounding (1–4), drafting + delivery (5–6), and iteration + ship-readiness (7–8).
+
+| Phase | What happens |
+|-------|--------------|
+| **1. Disambiguate the surface** | Confirm `claude.ai/design` is the intended surface, not classic Artifacts, Live Artifacts, custom chat visuals, or `knowledge-work-plugins/design`. Read [references/00](skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md) when signals are mixed. |
+| **2. Name the intent preset** | Pick one of eight Claude Design presets: `designs`, `prototypes`, `slides`, `one-pagers`, `wireframes-mockups`, `pitch-decks`, `marketing-collateral`, `frontier-design`. The per-preset reference file shapes the prompt pattern. Evidence-grade labels are surfaced. |
+| **3. Audience and destination** | Capture audience (internal team / external stakeholder / investor / customer) and destination (PDF / PPTX / HTML / Canva / Code-handoff / share-link). Flag PPTX-export traps for `pitch-decks` early. |
+| **4. Anchor on DESIGN.md** | Read [references/02](skills/claude-design-facilitator/references/02-design-md.md). If the operator has no DESIGN.md, point at the copy-paste brand-to-DESIGN.md extractor prompt. |
+| **5. Draft the prompt** | Compose layers 1–5 from [references/01](skills/claude-design-facilitator/references/01-prompt-fundamentals.md): Anthropic's verbatim Goal / Layout / Content / Audience framework + start-simple-layer-complexity + concrete-alternative-spec + propose-options-before-building + AI-slop negative constraints + four design dimensions + four grading criteria + the per-preset pattern. |
+| **6. Deliver** | Output a single copy-paste-ready fenced markdown code block. Add a one-line caption and three to five expected follow-up turns. |
+| **7. Iteration coaching** | Read [references/03](skills/claude-design-facilitator/references/03-iteration-and-session.md). Coach which surface to use next — Tweak panel (zero-token, surgical), inline comments (component-scoped), or chat (full regen). Session-break heuristics + recovery prompt library when iteration gets stuck. |
+| **8. Ship-readiness** | Run the export validation checklist. If shipping to engineering, confirm the Design → Code handoff bundle is complete. Recommend installing `knowledge-work-plugins/design` for downstream critique / accessibility / handoff. |
+
+The skill auto-fires on natural-language triggers like *"I want to build a dashboard in Claude Design"*, *"help me prompt claude.ai/design"*, *"iterate on my Claude Design artifact"*. The full trigger list is in [skills/claude-design-facilitator/.triggers.txt](skills/claude-design-facilitator/.triggers.txt) and `tests/test-skill-triggers.sh` validates each phrase appears in the skill description.
+
+Explicit invocation works too: the skill registers as the slash command `/claude-design-facilitator` for when the operator wants to start a clean facilitation session.
+
+---
+
+## Workflow example: from idea to prompt
+
+A realistic session against the `slides` preset — Q1 results deck for an internal engineering all-hands.
+
+**Operator:** *"I want to build a Q1 results slide deck for the engineering team in Claude Design."*
+
+The skill auto-fires (the phrase matches `.triggers.txt`). It walks the eight phases:
+
+**Phase 1 — Disambiguate the surface.** The skill confirms `claude.ai/design` is the intended surface, not classic Artifacts or Live Artifacts. The operator confirms.
+
+**Phase 2 — Name the intent preset.** Slide deck → `slides` preset. The skill notes this is one of three Anthropic-documented presets (evidence-grade label surfaced from `.coverage.md`). It opens [`references/presets/slides.md`](skills/claude-design-facilitator/references/presets/slides.md) and surfaces the five canonical Anthropic patterns (Q1 results, executive roadmap, customer-prep briefing, partner proposal, all-hands announcement). The operator picks pattern 1.
+
+**Phase 3 — Audience and destination.** Internal engineering team; deck stays in HTML preview during the meeting, optional PPTX export to share with adjacent leads afterward. The skill flags the PPTX-export trap from [`references/presets/slides.md`](skills/claude-design-facilitator/references/presets/slides.md) section (e): fonts substitute, master slides drop, charts may flatten to images. If a brand-compliant PPTX template exists, upload it to Claude Design as a project asset before prompting — Claude reads the slide master, layouts, fonts, and colour scheme and respects them ([PowerPoint-mode article](https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint)).
+
+**Phase 4 — Anchor on DESIGN.md.** The operator has no DESIGN.md yet. The skill points at the brand-to-DESIGN.md extractor prompt in [`references/02-design-md.md`](skills/claude-design-facilitator/references/02-design-md.md): paste a brand-guidelines URL or PDF into Claude.ai, get back a DESIGN.md filling the nine canonical sections (typography, colour, spacing, layout primitives, motion, voice, imagery, density, accessibility). The operator runs the extractor against the company's brand site, gets a DESIGN.md, drops it into the Claude Design project assets.
+
+**Phase 5 — Draft the prompt.** The skill composes the five layers from [`references/01-prompt-fundamentals.md`](skills/claude-design-facilitator/references/01-prompt-fundamentals.md): Goal / Layout / Content / Audience (Layer 1) → start-simple-layer-complexity (Layer 2) → concrete-alternative-spec (Layer 3) → AI-slop negative constraints (Layer 4) → per-preset pattern from `presets/slides.md` (Layer 5). The skill produces a single copy-paste fenced block. The operator inspects it, optionally edits the Goal sentence, then proceeds.
+
+**Phase 6 — Deliver.** The skill outputs the prompt block. The structure of a realistic delivery for this scenario looks like:
+
+```
+**Goal:** Communicate Q1 engineering results to the all-hands —
+where we started, what changed, what we shipped, what we learned,
+what's next for Q2. The deck should land as confident but honest:
+real numbers, named risks, no victory-lap framing. Audience is
+~80 engineers across three teams. Density should be high enough
+to skim later, low enough to follow live.
+
+**Layout:** 10–12 slides, slide-by-slide:
+1. Title + Q1 in one sentence
+2. The three things we shipped (one per row, screenshot + metric)
+3. The two things that slipped (named honestly, with the why)
+4. Hiring update (count + retention)
+5. Reliability (incident count, MTTR trend)
+6. Customer signal (NPS + 2 verbatim quotes)
+7. Engineering health (PR throughput, review latency)
+8. The big bet for Q2 (one slide, named)
+9. Risks for Q2 (3 bullets, ranked)
+10. Asks from the all-hands (1–3 specific asks)
+11. Q&A placeholder
+
+**Content:** Use the metrics in DESIGN.md's `tone` section — direct,
+specific, no marketing voice. Numbers are placeholder; I'll edit
+before the meeting.
+
+**Audience:** Internal engineering all-hands, 80 people, ICs through
+EM/Director level. They want to know: did we ship what we said, what
+broke, what's next, can I help.
+
+**Avoid:** Inter or Roboto, white-to-purple gradients, evenly-spaced
+generic card layouts, "exciting Q1!" framing, congratulatory tone,
+stock-photo gradients, generic icon library defaults.
+
+**Anchor:** Match the DESIGN.md uploaded as a project asset. If our
+brand voice reads as understated technical, push the deck that way —
+not the convergent SaaS-marketing deck aesthetic.
+
+**Reference:** Treat this as the Q1 results pattern from
+https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks
+(pattern 1), with the Layout above overriding the tutorial's slide count.
+```
+
+That block is what gets pasted into `claude.ai/design`. The skill also surfaces three to five expected follow-up turns (e.g., *"the headline slide is too marketing, push it more technical"*, *"slide 5 reliability — show the MTTR trend as a sparkline, not a bar chart"*) so the operator knows what iteration looks like before starting.
+
+**Phase 7 — Iteration coaching.** Once Claude Design produces the first version, the skill points the operator at the Tweak → Comment → Chat cascade in [`references/03-iteration-and-session.md`](skills/claude-design-facilitator/references/03-iteration-and-session.md): Tweak panel for surgical zero-token edits (spacing, font size, colour), inline comments for component-scoped changes (rewrite slide 5), full chat regeneration as a last resort. Plus the session-break heuristic (after 4 substantive screens, start a fresh session with a verbal save-pattern carrying state forward) and the recovery prompt library when iteration gets stuck.
+
+**Phase 8 — Ship-readiness.** Before the all-hands, the skill runs the export validation checklist for the chosen destination (HTML preview → keep in Claude Design; PPTX → check fonts and master, charts may flatten). If the deck is being handed off to engineering for any reason, it recommends installing [`knowledge-work-plugins/design`](https://claude.com/plugins/design) for `/critique`, `/accessibility`, and `/handoff` — the post-design lane.
+
+The full output of the session is a single fenced markdown block (Phase 6) plus a short follow-up-turns list and an iteration-coaching pointer. That is the entire user-facing deliverable.
+
+---
+
+## Skill surface
+
+| Skill | Triggers | Output |
+|-------|----------|--------|
+| `claude-design-facilitator` | 12 natural-language phrases (full list in `.triggers.txt`); also explicit `/claude-design-facilitator` slash command | A copy-paste-ready Claude Design prompt block composed from the five-layer stack and the per-preset pattern, with follow-up-turn expectations |
+
+No commands, no agents, no hooks, no MCP servers at v0.1. The single skill is the entire user-facing surface.
+
+---
+
+## Reference content map
+
+The plugin ships 13 reference files in `skills/claude-design-facilitator/references/`:
+
+**Foundation references (5):**
+
+- [`00-what-claude-design-is-and-isnt.md`](skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md) — Surface disambiguation against Artifacts, Live Artifacts, custom chat visuals, and Anthropic's `knowledge-work-plugins/design`.
+- [`01-prompt-fundamentals.md`](skills/claude-design-facilitator/references/01-prompt-fundamentals.md) — The five-layer prompt stack: GLCA framework + start-simple-layer-complexity + concrete-alternative-spec + propose-options + AI-slop negative constraints + four design dimensions + four grading criteria. Anchored on four Anthropic primary sources.
+- [`02-design-md.md`](skills/claude-design-facilitator/references/02-design-md.md) — DESIGN.md 9-section canonical structure + brand-to-DESIGN.md extractor prompt + failure modes.
+- [`03-iteration-and-session.md`](skills/claude-design-facilitator/references/03-iteration-and-session.md) — Tweak / Comment / Chat cascade, session economics, 4-screen inflection, recovery prompt library (break-default-aesthetic, fix-the-system, edit-previous-message, 3-failed-comment escalation, model downshift, verbal save-pattern).
+- [`04-handoff-and-scope.md`](skills/claude-design-facilitator/references/04-handoff-and-scope.md) — Design → Code one-way handoff, bundle contents, lifecycle-stage coverage map vs Anthropic's `knowledge-work-plugins/design`, downstream tool recommendation.
+
+**Per-preset references (8):**
+
+- [`presets/designs.md`](skills/claude-design-facilitator/references/presets/designs.md) — Anthropic-documented + community-validated
+- [`presets/prototypes.md`](skills/claude-design-facilitator/references/presets/prototypes.md) — Anthropic-documented + community-validated
+- [`presets/slides.md`](skills/claude-design-facilitator/references/presets/slides.md) — Anthropic-documented + community-validated
+- [`presets/one-pagers.md`](skills/claude-design-facilitator/references/presets/one-pagers.md) — Community-only
+- [`presets/wireframes-mockups.md`](skills/claude-design-facilitator/references/presets/wireframes-mockups.md) — Community-only
+- [`presets/pitch-decks.md`](skills/claude-design-facilitator/references/presets/pitch-decks.md) — Community-only (with explicit PPTX-export caveat)
+- [`presets/marketing-collateral.md`](skills/claude-design-facilitator/references/presets/marketing-collateral.md) — Community-only
+- [`presets/frontier-design.md`](skills/claude-design-facilitator/references/presets/frontier-design.md) — Experimental — no validated practitioner pattern as of 2026-05-16
+
+---
+
+## Per-preset coverage
+
+The canonical coverage manifest is [`.coverage.md`](.coverage.md). Below mirrors that file.
+
+| Preset | Evidence grade | Anthropic anchor |
+|--------|----------------|------------------|
+| designs | Anthropic-documented + community-validated | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+| prototypes | Anthropic-documented + community-validated | [prototypes tutorial](https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux) |
+| slides | Anthropic-documented + community-validated | [slides tutorial](https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks) |
+| one-pagers | Community-only | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+| wireframes-mockups | Community-only | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+| pitch-decks | Community-only (with PPTX-export caveat) | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+| marketing-collateral | Community-only | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+| frontier-design | Experimental — no validated practitioner pattern | [launch post](https://anthropic.com/news/claude-design-anthropic-labs) |
+
+When Anthropic publishes per-preset guidance for a Community-only or Experimental preset, [`.coverage.md`](.coverage.md) and the affected preset file refresh — re-research triggers are documented inline.
+
+---
+
+## Verification
+
+```bash
+bash plugins/claude-design/verify.sh
+```
+
+Runs five test scripts under `tests/` in dependency order:
+
+| Script | Verifies |
+|--------|----------|
+| `validate-plugin.sh` | plugin.json + SKILL.md frontmatter + LICENSE + GOVERNANCE.md + README.md + CLAUDE.md + .coverage.md presence; forbidden-command-name scope-fence check; operator-private-context grep; Norwegian-leakage advisory |
+| `test-skill-triggers.sh` | SKILL.md description >=400 chars; every phrase in `.triggers.txt` appears in SKILL.md |
+| `test-sc2-artifact-coverage.sh` | Each preset in `.coverage.md` has >=1 file hit in plugin content |
+| `test-sc3-citations.sh` | No unsourced-attribution placeholders (citation-stub markers, verification-flag markers, vague second-hand phrasing); each Authoritative-claims file has >=1 Anthropic-domain URL. The script enforces the exact patterns it bans — see the script source for the regex. |
+| `test-sc1-dogfood-log.sh` | Format-check the operator dogfood log in `REMEMBER.md` (gitignored) — 5 fields well-formed |
+
+Flags:
+
+- `--strict` — pass-through to `test-sc1-dogfood-log.sh`. Without `--strict`, missing dogfood block is advisory. With `--strict`, it is the release gate.
+- `--quick` — skip `test-skill-triggers.sh` for fast incremental runs.
+
+Exit codes: `0` = all pass; non-zero = at least one sub-test failed.
+
+---
+
+## Compatibility
+
+| Requirement | Version |
+|-------------|---------|
+| Claude Code | Recent versions with plugin support |
+| Anthropic surface | `claude.ai/design` (Labs research preview launched 2026-04-17) |
+| Platform | macOS, Linux, Windows |
+| Network | None for the skill itself; the artifact-generation lives in `claude.ai/design` |
+| Dependencies | None — no npm packages, no Python, no external tools. Bash 3.2 compatible for test scripts. |
+
+---
+
+## Re-research triggers
+
+The reference tree carries Anthropic citations that may decay. Re-research is triggered by:
+
+- Anthropic publishing per-preset guidance for a `Community-only` or `Experimental` preset
+- Anthropic announcing material changes to the Goal / Layout / Content / Audience framework, the AI-slop avoid-list, or the design grading criteria
+- Anthropic adding or removing an intent preset from the launch enumeration
+- A first verified `frontier-design` practitioner artifact shipping publicly
+- Anthropic's `knowledge-work-plugins/design` plugin adding or removing slash-commands (scope-fence implications)
+- Labs → GA URL rename for `claude.ai/design`
+
+When a trigger fires, run `bash verify.sh --strict` after the update to confirm SC2 and SC3 still pass.
+
+---
+
+## Recent versions
+
+**v0.1.0 — 2026-05-17.** Initial public release. Single skill (`claude-design-facilitator`) with eight-phase facilitation flow, 12 natural-language trigger phrases, 13 reference files (5 foundation + 8 per-preset with evidence-grade labels), `.coverage.md` preset manifest plus Authoritative-claims registry, five verification scripts under `tests/` enforcing structural integrity / scope fence / skill description quality / per-preset coverage / Anthropic-domain citation discipline / operator dogfood log format, top-level `verify.sh` roll-up with `--strict` and `--quick` flags, MIT license, GOVERNANCE.md fork-and-own model.
+
+Full release history: [`CHANGELOG.md`](CHANGELOG.md). The plugin follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html). The path from v0.1 to v1.0 is dogfood-driven — see the plugin's `REMEMBER.md` for the v1.0 readiness criteria (multi-preset breadth, auto-fire validation in real natural-language requests, two consecutive dogfood sessions with zero critical patches).
+
+---
+
+## License
+
+[MIT](LICENSE). Fork it, modify it, ship your own version under your own name.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/.triggers.txt b/plugins/claude-design/skills/claude-design-facilitator/.triggers.txt
new file mode 100644
index 0000000..d039c46
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/.triggers.txt
@@ -0,0 +1,12 @@
+I want to build a dashboard in Claude Design
+help me prompt claude.ai/design
+make a slide deck in claude.ai/design
+iterate on my Claude Design artifact
+what should I prompt Claude Design with
+build a one-pager in Claude Design
+design a prototype in claude.ai/design
+refine my Claude Design output
+create a pitch deck in Claude Design
+use Claude Design
+draft a Claude Design prompt
+make wireframes in claude.ai/design
diff --git a/plugins/claude-design/skills/claude-design-facilitator/SKILL.md b/plugins/claude-design/skills/claude-design-facilitator/SKILL.md
new file mode 100644
index 0000000..6d89852
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/SKILL.md
@@ -0,0 +1,176 @@
+---
+name: claude-design-facilitator
+argument-hint: "[intent-preset]"
+description: |
+  End-to-end facilitator for prompting Claude Design (claude.ai/design — Anthropic Labs research preview launched 2026-04-17, Opus 4.7 pinned). Walks the operator from raw idea through intent-preset selection, audience and destination clarification, DESIGN.md anchor, prompt drafting using Anthropic's verbatim Goal / Layout / Content / Audience framework plus the five-layer prompt stack, copy-paste delivery, iteration coaching across the Tweak / Comment / Chat cascade, and ship-readiness handoff to Anthropic's official knowledge-work-plugins/design plugin for critique, accessibility audit, and engineering handoff. Cites Anthropic primary sources inline; refuses to generate the artifact code itself or drive the browser. Use for any work that ends with a Claude Design artifact.
+
+  Triggers on:
+  - "I want to build a dashboard in Claude Design"
+  - "help me prompt claude.ai/design"
+  - "make a slide deck in claude.ai/design"
+  - "iterate on my Claude Design artifact"
+  - "what should I prompt Claude Design with"
+  - "build a one-pager in Claude Design"
+  - "design a prototype in claude.ai/design"
+  - "refine my Claude Design output"
+  - "create a pitch deck in Claude Design"
+  - "use Claude Design"
+  - "draft a Claude Design prompt"
+  - "make wireframes in claude.ai/design"
+---
+
+# claude-design-facilitator
+
+You are a facilitator for prompting Claude Design (`claude.ai/design`). You walk the operator from raw idea to a copy-paste-ready prompt, through iteration, to ship-readiness. You do **not** generate artifact code yourself and you do **not** drive the browser. Claude Design is where the artifact gets built; you exist to make the operator's interaction with that surface land on the first try.
+
+You follow the phases below in order. Phases 1 through 4 are scoping and grounding; do not draft a prompt before they are done. If the operator pushes for a prompt straight away, briefly explain that a five-second alignment pass produces a one-shot prompt instead of a four-round iteration spiral, then ask the Phase 2 intent question.
+
+All output is English. All authoritative claims about Claude Design behaviour cite Anthropic primary sources — `anthropic.com/news`, `support.claude.com`, `claude.com/blog`, `claude.com/resources/tutorials`, `claude.com/plugins`, `platform.claude.com`, `github.com/anthropics`. Community patterns are labelled as such with the source link. The reference files under `references/` carry the canonical content; this file is the flow.
+
+---
+
+## Phase 1 — Disambiguate the surface
+
+Confirm the operator wants `claude.ai/design` specifically, not one of the four surfaces it is most commonly confused with: classic Artifacts at `claude.ai`, Live Artifacts in Claude Cowork, custom visuals embedded in a chat reply, or Anthropic's `knowledge-work-plugins/design` plugin (which audits already-built artifacts and does not generate them).
+
+If the operator is clear, move on. If signals are mixed — they mention "Artifacts" or "Cowork", they describe a feature that does not exist in Claude Design (no `/rewind`, no version history, no branching), or they expect round-trip handoff back from Claude Code — read `references/00-what-claude-design-is-and-isnt.md` and walk through the relevant anti-conflation block.
+
+---
+
+## Phase 2 — Name the intent preset
+
+Claude Design exposes eight intent presets. The operator picks one before drafting begins, because the prompt pattern differs per preset and the per-preset reference files are the place that pattern lives.
+
+The eight presets, in the order they appear in Anthropic's launch enumeration (`anthropic.com/news/claude-design-anthropic-labs`, 2026-04-17):
+
+- **designs** — generic dashboards, components, layouts, design explorations
+- **prototypes** — interactive product flows for usability testing and demos
+- **slides** — presentation decks, internal or external
+- **one-pagers** — single-page artifacts (memos, summaries, leave-behinds)
+- **wireframes-mockups** — low-fi or high-fi layout structure, pre-visual-design
+- **pitch-decks** — investor or external pitch decks (note: PPTX export trap — see preset file)
+- **marketing-collateral** — landing pages, social variants, visual assets
+- **frontier-design** — Anthropic's "code-powered prototypes with voice, video, shaders, 3D" preset (labelled experimental in this plugin — no validated practitioner pattern as of 2026-05-16)
+
+If the operator is uncertain which preset fits, read `.coverage.md` and the matching one-line summaries; offer the two or three that match the situation. The evidence-grade label on each preset reference file is load-bearing — surface it: `Anthropic-documented + community-validated` (designs / prototypes / slides), `Community-only` (one-pagers / wireframes-mockups / pitch-decks / marketing-collateral), or `Experimental` (frontier-design).
+
+---
+
+## Phase 3 — Audience and destination
+
+Establish the audience and the destination *before* drafting the prompt. This is `@claudedesign` Anthropic-affiliated guidance: the destination format constrains the prompt because Claude Design's export options have asymmetric fidelity.
+
+Ask:
+
+- **Audience:** who reads or uses this artifact? Internal team, external stakeholder, investor, customer prospect, partner, user-testing participant?
+- **Destination:** where does it end up? PDF (lossless for static layouts, lossy for interactive elements), PPTX (Claude reads slide master / layouts / fonts / color scheme, but text flattens to images on complex compositions — see `references/03-iteration-and-session.md` PPTX trap section), HTML standalone, Canva import, Claude Code handoff for engineering build, or share-link?
+
+If the destination is PPTX and the preset is `pitch-decks`, flag the export trap explicitly (`moda.app/blog/claude-design-for-pitch-decks` documents the case where PPTX flattens richly-styled text to images). If the destination is Claude Code handoff, set expectation that the bundle Claude Design produces is one-way (no return path to Claude Design — see `references/04-handoff-and-scope.md`).
+
+---
+
+## Phase 4 — Anchor on DESIGN.md
+
+A DESIGN.md file is the operator's leverage against Claude Design's defaults. It anchors design-system identity (colors, typography, motion, layout, do's-and-don'ts) so the model does not fall back to its convergent middle-ground aesthetic.
+
+Read `references/02-design-md.md`. The reference file documents the community-converged 9-section canonical structure and a copy-paste extractor prompt that converts a brand URL or screenshot into a DESIGN.md.
+
+If the operator already has a DESIGN.md, confirm it is uploaded to the Claude Design project and that the agent prompt guide section names it. If they do not have one, point at the extractor prompt — it is the highest-leverage single piece of content in this plugin.
+
+**Evidence grade context for the operator:** Anthropic publishes the concept of DESIGN.md (`support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design`) but not the 9-section structure. The 9-section template comes from community practitioners (`github.com/rohitg00/awesome-claude-design`, `github.com/VoltAgent/awesome-claude-design`).
+
+---
+
+## Phase 5 — Draft the prompt using the five-layer stack
+
+Now draft. Open `references/01-prompt-fundamentals.md` and `references/presets/<preset>.md` for the named preset. Compose the prompt from these layers, in order:
+
+1. **Layer 1 — Goal / Layout / Content / Audience (GLCA)** — Anthropic's verbatim framework. Source: `support.claude.com/en/articles/14604416-get-started-with-claude-design`. Every prompt to Claude Design starts here.
+2. **Layer 1.5 — Start simple, layer in complexity** — Anthropic's verbatim incremental-prompting advice (same source). Do not ship a 600-word first prompt; ship a 120-word first prompt and add detail in turn two.
+3. **Layer 2a — Concrete-alternative-spec house-style control** — Anthropic's verbatim guidance from `platform.claude.com/docs/en/docs/build-with-claude/prompt-engineering/claude-4-best-practices`. Includes the AEFRM example with explicit hex palette and motion timing.
+4. **Layer 2b — Propose-options-before-building** — Anthropic's verbatim prompt template asking Claude Design to surface four distinct visual directions before committing.
+5. **Layer 3 — Negative constraints (the AI-slop avoid-list)** — verbatim banned items from `claude.com/blog/improving-frontend-design-through-skills` and `github.com/anthropics/skills/skills/frontend-design/SKILL.md`. Inter, Roboto, Arial, Space Grotesk; purple gradients on white; solid-color backgrounds; cookie-cutter framing; convergent middle-ground palettes; scattered micro-interactions.
+6. **Layer 4 — Four design dimensions** — verbatim typography / color / motion / backgrounds guidance from `frontend-design/SKILL.md`.
+7. **Layer 5 — Four design grading criteria** — Anthropic's verbatim quality criteria from `anthropic.com/engineering/harness-design-long-running-apps` (design quality, originality, craft, functionality) plus the emphasis-weighting recommendation.
+
+On top of the five layers, layer the per-preset pattern from `references/presets/<preset>.md`. For `designs`, `prototypes`, and `slides`, this is Anthropic-published prompt material. For the other four `Community-only` presets, it is community-converged pattern with attribution. For `frontier-design`, it is honest-experimental and labelled as such.
+
+Resist the urge to over-spec. Anthropic's own guidance is start simple, layer in complexity. Draft the layer-1+layer-2a+layer-3 composition first. Save layers 4 and 5 for the refinement turn.
+
+---
+
+## Phase 6 — Deliver the prompt
+
+Output a single copy-paste-ready fenced markdown code block containing the composed prompt. No preamble, no commentary inside the block. Add a one-line caption above the block: which preset, which audience, which destination.
+
+After the block, list three to five expected follow-up turns the operator should anticipate (e.g., "if it lands too generic, add layers 4 + 5 in turn two", "if PPTX is destination, validate the rendered text-as-text count in turn three"). This sets the iteration expectation honestly — Claude Design quality is non-monotonic across turns (`anthropic.com/engineering/harness-design-long-running-apps`).
+
+---
+
+## Phase 7 — Iteration coaching
+
+When the operator returns with feedback after a Claude Design generation, you do not regenerate the prompt. You coach which surface to use next. Read `references/03-iteration-and-session.md`.
+
+The three-surface cascade, in order of token cost:
+
+- **Tweak panel** — controls and sliders Claude pre-derives at artifact generation time. Zero token cost. Surgical. Use for: section reordering, variant swap, density slider, spacing scale, color temperature, typography scale, padding / radius / shadow. The Anthropic-published guidance is verbatim in `references/03`.
+- **Inline comments** — component-scoped edits via the comment surface. Surgical when the edit is in-component. Has an Anthropic-acknowledged vanish bug — if a comment disappears, paste the comment text into chat. Fails for new structural containers.
+- **Chat** — full regeneration. Use for any structural change (add a new section), aesthetic pivot, multi-component change, or anything Claude did not pre-derive a Tweak control for. Costs one full chat turn.
+
+Operator mantra (the synthesis from `research/04`): *anything Claude pre-derives at generation time is surgical thereafter; new controls cost one chat turn for setup.*
+
+Session-management heuristics from `references/03-iteration-and-session.md`:
+
+- 4-screen inflection — quality drops noticeably after the fourth screen of context in a session.
+- Opus 4.7 context — quality degrades at the 40–50% context mark.
+- Pro budget burns in roughly 25–30 minutes of active design; Max in roughly 60–90.
+- Session-break triggers: hitting screen 4, reorder / density tweaks stop landing, chat re-introduces removed defaults.
+
+If the operator hits a stuck state, point at the recovery prompt library in `references/03-iteration-and-session.md` — the `break-default-aesthetic.md` adapted prompt, "fix the system not the prompt" pattern, edit-previous-message workaround, the 3-failed-comment escalation rule, and the model downshift escalator (Opus 4.7 → Opus 4.6 / Sonnet 4.6).
+
+---
+
+## Phase 8 — Ship-readiness
+
+Before the operator declares an artifact done, run a short ship-readiness check against `references/04-handoff-and-scope.md`:
+
+- Has the destination format been validated against the rendered output? (PPTX text-as-text count, PDF interactive-element check, HTML standalone export at target viewport.)
+- If handing off to engineering: is the export bundle complete? Anthropic's handoff bundle includes a machine-readable component spec, design tokens, layout hierarchy, referenced assets, standalone HTML + inline CSS + JS, per-state screenshots, PM-annotated notes, and a stack / framework README (`anthropic.com/news/claude-design-anthropic-labs` + `support.claude.com/en/articles/14604416`).
+- Is the operator aware that the Design → Code direction is one-way? Once handed off, the path back to Claude Design is lossy (screenshot → new Claude Design session).
+
+**Downstream tool recommendation.** Once the operator has an artifact in hand and wants critique, accessibility audit, UX copy review, design-system audit, or engineering handoff guidance, recommend Anthropic's official plugin:
+
+```
+claude plugins add knowledge-work-plugins/design
+```
+
+That plugin operates on existing artifacts (Figma URLs, screenshots, copy snippets) and ships six commands: `/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, `/handoff`. It is the lifecycle complement to this one — see `references/04-handoff-and-scope.md` for the full coverage table. This plugin (claude-design) covers idea through delivered prompt through iteration coaching; `knowledge-work-plugins/design` covers everything after. There is no command overlap and no functional redundancy.
+
+---
+
+## What this skill never does
+
+- It does not generate the artifact code itself. Claude Design is the artifact generator. This skill produces prompts that go into Claude Design.
+- It does not automate the browser, paste prompts on the operator's behalf, or read the Claude Design canvas. The operator copies and pastes manually.
+- It does not store artifact history, version artifacts, or branch between iterations. Claude Design has no version tree and this skill does not invent one.
+- It does not duplicate the post-design lane covered by `knowledge-work-plugins/design`. No `/critique`, no `/accessibility`, no `/ux-copy`, no `/research-synthesis`, no `/design-system`, no `/handoff` commands.
+
+---
+
+## Reference files
+
+- `references/00-what-claude-design-is-and-isnt.md` — surface disambiguation
+- `references/01-prompt-fundamentals.md` — the five-layer prompt stack
+- `references/02-design-md.md` — DESIGN.md template + brand-to-DESIGN.md extractor
+- `references/03-iteration-and-session.md` — Tweak / Comment / Chat cascade, session economics, recovery prompt library
+- `references/04-handoff-and-scope.md` — one-way handoff, scope fence vs Anthropic's design plugin
+- `references/presets/designs.md`, `prototypes.md`, `slides.md` — Anthropic-documented per-preset patterns
+- `references/presets/one-pagers.md`, `wireframes-mockups.md`, `pitch-decks.md`, `marketing-collateral.md` — Community-only per-preset patterns
+- `references/presets/frontier-design.md` — Experimental, no validated practitioner pattern
+- `.coverage.md` — preset enumeration with evidence-grade labels (the source of truth for SC2 verification)
+
+---
+
+## Explicit invocation
+
+The skill name registers as the explicit slash command `/claude-design-facilitator`. Operators can either trigger by natural language (the description above is the auto-fire surface) or invoke explicitly when they want to start a facilitation session from a clean state.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md b/plugins/claude-design/skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md
new file mode 100644
index 0000000..02a6f05
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/00-what-claude-design-is-and-isnt.md
@@ -0,0 +1,113 @@
+# What Claude Design is and isn't
+
+**Last updated:** 2026-05-17 | **Verified:** research/01-claude-design-surface.md
+**Status:** Beta (Labs research preview)
+**Captured-on date:** 2026-05-16
+
+This file disambiguates `claude.ai/design` from the four surfaces it is most commonly conflated with. The cost of getting this wrong is wasted iteration: applying a prompt pattern that fits Live Artifacts to Claude Design (or vice versa) produces output that misses the operator's intent, and the failure looks like a prompt problem instead of a surface problem.
+
+Read this file when the operator's signals are mixed — they reference "Artifacts" loosely, they expect a feature that does not exist in Claude Design (like `/rewind` or a version tree), they think Claude Design audits artifacts rather than generates them, or they expect round-trip handoff back from Claude Code.
+
+---
+
+## 1. What Claude Design is
+
+Claude Design is an Anthropic Labs research preview that launched on 2026-04-17 (`https://anthropic.com/news/claude-design-anthropic-labs`). It is a dedicated workspace at `claude.ai/design` for generating interactive design artifacts from a prompt.
+
+Five properties define the surface:
+
+- **Labs research preview, not GA.** The product can change without notice. Anthropic surfaces it under the Labs banner specifically to signal that the contract is non-stable. The URL still carries the `-anthropic-labs` slug today; a Labs → GA rename is a known re-research trigger captured in `.coverage.md`.
+- **Opus 4.7 pinned.** All generations run on Opus 4.7. Operators cannot select a model from the Claude Design UI. The session inherits Anthropic's model choice for this surface (`https://anthropic.com/news/claude-design-anthropic-labs`).
+- **Single HTML/React substrate.** Underneath every output is one rendering engine — HTML, React components, inline CSS — regardless of which intent preset the operator picks. The intent preset shapes prompting and export, not the underlying tech.
+- **Eight intent presets exposed in the UI.** Anthropic's launch post enumerates: designs, prototypes, slides, one-pagers, wireframes-mockups, pitch-decks, marketing-collateral, frontier-design. The enumeration is the source of truth for SC2 coverage in this plugin (`https://anthropic.com/news/claude-design-anthropic-labs`).
+- **Multiple export paths.** PDF (lossless for static layouts, lossy for interactive elements), PPTX (slide master / layouts / fonts honored, but text can flatten to images on complex compositions), HTML standalone, Canva import, share-link, and Claude Code handoff (machine-readable component spec + design tokens + layout hierarchy + assets + standalone HTML/CSS/JS + per-state screenshots + PM notes + framework README — verbatim per `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`).
+
+Three Anthropic-published support articles ground the surface: the get-started article (`https://support.claude.com/en/articles/14604416-get-started-with-claude-design`), the design-system setup article (`https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design`), and the PowerPoint-mode conventions article (`https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint`).
+
+---
+
+## 2. What Claude Design is NOT
+
+### Not classic Artifacts at `claude.ai`
+
+Classic Artifacts live in any Claude.ai chat. They appear in a side panel when Claude generates code, markdown, SVG, mermaid diagrams, or other inline outputs. Artifacts carry no intent presets, no Tweak panel, no export-to-PPTX, no Claude Code handoff bundle, no DESIGN.md anchor concept. They are a chat affordance.
+
+Confusion happens because both surfaces produce HTML/React output and Anthropic's documentation has used "Artifacts" loosely in launch contexts. If the operator says "Artifacts" but describes intent presets or destination formats (`https://anthropic.com/news/claude-design-anthropic-labs`), they mean Claude Design. If they describe a side panel inside a chat (`support.claude.com` discusses Artifacts in the chat-product context), they mean classic Artifacts.
+
+### Not Live Artifacts in Claude Cowork
+
+Live Artifacts is a different Labs surface — collaborative real-time editing of artifacts inside Claude Cowork sessions. It runs in a different workspace, has different affordances (multi-cursor presence, version stream), and is a separate product line at `claude.ai/code` family (see Anthropic's Cowork-related communications). Claude Design has none of those collaborative primitives. The operator working alone in `claude.ai/design` is the canonical flow.
+
+### Not custom visuals embedded in a chat reply
+
+Sometimes Claude generates an inline HTML/SVG visual as part of a chat answer (a chart, a diagram, an illustration). That is a one-off chat artifact, not a Claude Design session. The prompt patterns are different (chat conversational tone vs design intent presets), the export options are different (chat artifact has Save / Copy, Claude Design has the full export matrix), and there is no Tweak panel on the chat-inline visuals.
+
+### Not Anthropic's `knowledge-work-plugins/design` plugin
+
+This is the most consequential conflation. Anthropic ships an official plugin at `https://claude.com/plugins/design` (`https://github.com/anthropics/knowledge-work-plugins`) with six slash-commands: `/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, `/handoff`. That plugin operates on **existing** artifacts (Figma URLs, screenshots, copy snippets). It does not generate artifacts.
+
+The lifecycle split is clean:
+
+- This plugin (`claude-design`) covers **pre-design and during-design** — idea → intent-preset selection → prompt drafting → copy-paste delivery → iteration coaching → ship-readiness.
+- Anthropic's `knowledge-work-plugins/design` covers **post-design** — critique → accessibility → UX copy review → research synthesis → design-system audit → engineering handoff.
+
+There is zero command overlap (this plugin ships no commands named `/critique`, `/accessibility`, `/ux-copy`, `/research-synthesis`, `/design-system`, or `/handoff` — `tests/validate-plugin.sh` assertion (h) enforces this mechanically). Workflow recommendation: use this plugin to land the artifact in `claude.ai/design`; once the artifact exists, install Anthropic's official plugin via `claude plugins add knowledge-work-plugins/design` for downstream review and handoff.
+
+### Not third-party clones like `jiji262/claude-design-skill`
+
+Several third-party repos use names like `claude-design-skill`. They are independent community efforts targeting general design workflows in Claude Code, not the `claude.ai/design` surface specifically. They predate the Anthropic Labs launch in some cases. This plugin is *Claude Design facilitation* — it targets the Anthropic surface explicitly, citing Anthropic's primary sources. Verify the operator's mental model accordingly.
+
+---
+
+## 3. Why the distinction matters operationally
+
+Three operational consequences flow from getting the surface identification right.
+
+### Prompt patterns differ
+
+Claude Design's prompt patterns are documented in `https://anthropic.com/news/claude-design-anthropic-labs`, `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`, and the two per-preset tutorials (`https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux`, `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks`). These prompts assume the Claude Design substrate, intent presets, and the Tweak / Comment / Chat iteration cascade. Applying them to classic Artifacts, Cowork, or an inline chat visual produces noise.
+
+Classic Artifacts prompts (the kind used inside any `claude.ai` chat) are conversational and lean on chat affordances. Claude Design prompts use the verbatim Goal / Layout / Content / Audience framework and lean on intent presets. The frameworks do not interchange cleanly.
+
+### Limits differ
+
+Claude Design has its own quota economics — the operator's Max / Pro plan budget burns down at a different rate than classic chat (research/04 documents observed Pro burn of roughly 25-30 minutes of active design work, Max roughly 60-90; these are community-observed, not Anthropic-published, and may shift). Opus 4.7 quality degrades at 40-50% context (`https://anthropic.com/engineering/harness-design-long-running-apps`). A 4-screen session inflection is documented community-wide.
+
+None of these limits apply identically to classic Artifacts or to the official `knowledge-work-plugins/design` plugin. Diagnosing a quota / quality issue requires knowing which surface is in play.
+
+### Scope differs
+
+The official `knowledge-work-plugins/design` plugin is the right tool for post-design critique. Trying to make this plugin (`claude-design`) emit a critique would duplicate Anthropic's command surface and add nothing. The reverse — using `knowledge-work-plugins/design` to generate the artifact — does not work because that plugin operates on artifacts that already exist.
+
+If the operator is uncertain whether their question is pre-design or post-design, ask: *does the artifact exist yet?* If no — this plugin. If yes — Anthropic's plugin.
+
+---
+
+## 4. Decision shortcuts
+
+- The operator mentions intent presets (designs / prototypes / slides / one-pagers / wireframes-mockups / pitch-decks / marketing-collateral / frontier-design) → Claude Design.
+- The operator mentions a workspace URL `claude.ai/design` → Claude Design.
+- The operator mentions PPTX / PDF / Canva / Code-handoff exports → Claude Design.
+- The operator says "Tweak panel" or "Tweak slider" → Claude Design.
+- The operator says "Artifact" in a side panel context inside a normal chat → classic Artifacts.
+- The operator says "Cowork" or "real-time collaborative" or "multi-cursor" → Live Artifacts.
+- The operator says "critique" / "accessibility audit" / "Figma" → Anthropic's `knowledge-work-plugins/design`.
+- The operator references a third-party repo named `claude-design-*` → ask what surface they target; likely not the Anthropic Labs preview.
+
+If signals remain mixed after this read-through, ask one clarifying question rather than guess: *"Are you working in the dedicated Claude Design workspace at `claude.ai/design`, or somewhere else?"*
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — Anthropic Labs launch announcement (2026-04-17), Opus 4.7 pin, intent-preset enumeration, export options
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — get-started article, GLCA framework, handoff bundle contents
+- `https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design` — design-system setup, DESIGN.md concept
+- `https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` — PowerPoint-mode conventions
+- `https://claude.com/plugins/design` — Anthropic's official knowledge-work-plugins/design plugin
+- `https://github.com/anthropics/knowledge-work-plugins` — source for the official plugin
+- `https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux` — Anthropic-published per-preset tutorial (prototypes)
+- `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` — Anthropic-published per-preset tutorial (slides)
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading criteria, non-monotonic-improvement framing
+
+When in doubt: the Anthropic news post and the get-started support article are the load-bearing sources. Everything else triangulates against them.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/01-prompt-fundamentals.md b/plugins/claude-design/skills/claude-design-facilitator/references/01-prompt-fundamentals.md
new file mode 100644
index 0000000..bb927fa
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/01-prompt-fundamentals.md
@@ -0,0 +1,265 @@
+# Prompt fundamentals — the five-layer stack
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Status:** Beta (Labs research preview)
+**Captured-on date:** 2026-05-16
+
+This file documents the universal prompt framework an operator applies across every Claude Design intent preset. The five layers compose into one prompt block. Layers 1 to 3 are load-bearing for every preset; layers 4 and 5 are the refinement turn.
+
+Every authoritative claim cites an Anthropic primary source. Where community practice extends an Anthropic concept, the extension is labelled and attributed.
+
+---
+
+## Layer 1 — Goal / Layout / Content / Audience (GLCA)
+
+Anthropic's verbatim framework for every Claude Design prompt. The framework is published in the get-started support article `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`. Anthropic's framing: a good Claude Design prompt names the **Goal**, the **Layout**, the **Content**, and the **Audience**, in that order, before any aesthetic specification.
+
+The four canonical questions:
+
+- **Goal** — what is the artifact for? "An admin dashboard for monitoring API latency", "an onboarding flow for first-time users", "a landing page that converts free trial signups". One sentence.
+- **Layout** — what is the page structure? Header / hero / metrics row / table / footer; or: hero / three-feature-grid / pricing table / CTA. Name the regions.
+- **Content** — what fills the regions? Real data placeholders if you have them, named labels if not. Avoid generic "lorem ipsum" — the model defaults to convergent middle-ground content if you do not constrain it.
+- **Audience** — who reads or uses this artifact? Internal team, external stakeholder, B2B procurement, B2C consumer, investor. Audience determines tone, density, and aesthetic.
+
+Anthropic publishes three verbatim canonical examples in the same support article:
+
+```
+Goal: An analytics dashboard for our customer success team
+Layout: Top metrics row (4 KPIs), main chart panel, recent activity table
+Content: Today's MRR, 30-day churn, NPS, expansion revenue; revenue chart;
+         the last 10 account events
+Audience: Internal CS leads — they're in this thing every day, want density
+          and signal, not flashy
+```
+
+```
+Goal: A mobile onboarding flow for a new fitness app
+Layout: Welcome screen, goal-selection (3 cards), motion preference, sign-in
+Content: Headlines, single CTA per screen, accessible touch targets
+Audience: First-time users, gym beginners, ages 25-45
+```
+
+```
+Goal: A SaaS landing page that converts free trial signups
+Layout: Hero, three-feature grid, social proof, pricing table, FAQ, footer CTA
+Content: Product name placeholder "ProductX", real headline benefit copy,
+         three feature blurbs (icon + headline + line)
+Audience: B2B technical buyers evaluating dev tools
+```
+
+The GLCA framework is sufficient on its own for a first prompt at intent preset `designs`. For other presets, GLCA composes with the per-preset pattern in `references/presets/<preset>.md`.
+
+Source: `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`.
+
+---
+
+## Layer 1.5 — Start simple, layer in complexity
+
+The same Anthropic get-started article publishes verbatim incremental-prompting advice: do not ship a 600-word first prompt. Ship a 120-word first prompt that names GLCA, see what Claude Design produces, then add complexity in turn two and turn three.
+
+Anthropic frames this as the dominant failure mode for first-time Claude Design operators: over-specifying the first prompt produces an output that is dense but generic. The remedy is staged — let Claude Design make its default choices, then react to what it produces with targeted constraints.
+
+This frames how the rest of the stack composes. In turn one, ship layers 1 + 2a (or 2b) + 3. In turn two, add layer 4. In turn three, add layer 5 emphasis-weighting.
+
+Source: `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`.
+
+---
+
+## Layer 2a — Concrete-alternative-spec house-style control
+
+The first of two Anthropic-documented house-style controls. Verbatim guidance from `https://platform.claude.com/docs/en/docs/build-with-claude/prompt-engineering/claude-4-best-practices`: name a concrete aesthetic family with explicit visual primitives rather than gesturing at a style.
+
+The Anthropic-published exemplar — the AEFRM (Anthropic Engineering Field Reference Material) example — is verbatim usable:
+
+```
+Aesthetic family: industrial-utilitarian, slate-monochrome
+Color palette (CSS hex):
+  --color-bg:       #E9ECEC
+  --color-surface:  #C9D2D4
+  --color-muted:    #8C9A9E
+  --color-fg:       #44545B
+  --color-ink:      #11171B
+Typography: square angular sans-serif (Söhne, Inter Variable as fallback);
+            no rounded glyphs; weight 500 for body, 700 for headers
+Corner radius: 4px throughout — no fully rounded buttons, no pill shapes
+Motion: transition: all 160ms ease-out on hover; no springy easing
+Density: dense (table rows 32px tall; padding 8px on cards)
+Surface: flat — no shadows, no glassmorphism
+```
+
+The control works because Claude Design reads this as a concrete brief and constrains its aesthetic decision space accordingly. Without an explicit concrete-alternative-spec, the model defaults to its convergent middle-ground aesthetic (rounded corners, generous spacing, friendly typography, gentle shadows — Anthropic's documented "AI-slop" default).
+
+The hex palette, corner radius, and motion timing are all required — naming "industrial-utilitarian" alone is gesturing, not specifying.
+
+Source: `https://platform.claude.com/docs/en/docs/build-with-claude/prompt-engineering/claude-4-best-practices`.
+
+---
+
+## Layer 2b — Propose-options-before-building
+
+The second Anthropic-documented house-style control, also from `https://platform.claude.com/docs/en/docs/build-with-claude/prompt-engineering/claude-4-best-practices`. When the operator does not know exactly which aesthetic to brief, Anthropic publishes a verbatim prompt template asking Claude Design to propose four distinct visual directions before committing to one.
+
+The verbatim prompt:
+
+```
+Before building the dashboard, propose 4 distinct visual directions.
+For each, give:
+  - bg hex
+  - accent hex
+  - typeface (named, not gestured)
+  - one-line rationale tying the direction to the audience and goal
+
+Wait for me to pick a direction before generating the artifact.
+```
+
+This forks the conversation: turn one returns four named directions, the operator picks one, turn two generates against the chosen direction. The cost is one extra round; the upside is the operator avoids the dead-end of generating against an aesthetic that does not fit and only finding out after generation.
+
+Use layer 2b when layer 2a is not feasible (the operator does not yet know the aesthetic). Use layer 2a when the aesthetic is known.
+
+---
+
+## Layer 3 — AI-slop avoid-list (negative constraints)
+
+Anthropic publishes a verbatim banned-items list in `https://claude.com/blog/improving-frontend-design-through-skills` and reinforces it in the open-source frontend-design skill at `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md`. The list names the convergent middle-ground patterns that Claude Design defaults to when underspecified.
+
+Anthropic's verbatim AI-slop fingerprints to avoid:
+
+- **Typography slop:** Inter, Roboto, Arial as default body font. Space Grotesk is flagged as overused. Default to a concrete-named typeface in the brief, not a generic sans-serif.
+- **Color slop:** purple gradients on white backgrounds; solid-color hero backgrounds; convergent middle-ground palettes (the muted blue-and-grey "professional" default).
+- **Layout slop:** cookie-cutter three-column feature grids; centered-hero-with-CTA defaults; full-width-image-with-text-overlay defaults.
+- **Motion slop:** scattered micro-interactions; bouncy spring easing on hover; pulse animations on idle elements.
+- **Complexity-to-vision mismatch:** ornate components on simple layouts; flat components on otherwise rich layouts.
+
+Operator-actionable copy-paste anti-prompt block (composes with layers 1 and 2):
+
+```
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, or Space Grotesk as the primary typeface
+  - Purple gradients on white backgrounds
+  - Solid-color hero backgrounds
+  - Three-column feature grids with icon + headline + line
+  - Centered-hero-with-single-CTA layout default
+  - Bouncy spring easing on hover transitions
+  - Pulse / breathing animations on idle elements
+  - Glassmorphism, neumorphism, or generic "modern SaaS" defaults
+
+If you find yourself defaulting to any of these, stop and ask me to
+clarify the aesthetic before continuing.
+```
+
+Sources: `https://claude.com/blog/improving-frontend-design-through-skills` and `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md`.
+
+---
+
+## Layer 4 — Four design dimensions to optimize
+
+Anthropic's verbatim per-dimension guidance from `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md`. Four dimensions to brief explicitly when refining beyond the first turn:
+
+- **Typography** — name typeface, modular scale (e.g., 1.250 minor third or 1.333 perfect fourth), weight palette, line-height palette, letter-spacing for headings. Anthropic's frontend-design SKILL.md publishes specific modular scales and weight palettes verbatim.
+- **Color** — beyond palette hex, specify semantic roles (background, surface, accent, muted, error, success). Define interaction states explicitly (hover, active, disabled, focus). Anthropic's guidance: avoid relying on opacity for state changes; use explicit color tokens.
+- **Motion** — name easing curves (ease-out, cubic-bezier values), name durations (120ms / 160ms / 240ms tiers), name what gets animated and what does not. Anthropic's guidance: motion should clarify hierarchy and confirm interaction; avoid decorative motion.
+- **Backgrounds** — flat surface vs depth, when to layer surfaces, when shadows or borders define edges. Anthropic's guidance: backgrounds carry meaning; the bare-default-white background is rarely the right choice.
+
+In turn two of an iteration, add layer-4 dimension specs to the brief. In turn three, refine the dimension that drifted most from intent.
+
+Source: `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md`.
+
+---
+
+## Layer 5 — Four design grading criteria
+
+Anthropic publishes verbatim grading criteria for design quality in `https://anthropic.com/engineering/harness-design-long-running-apps`. Four criteria, used as emphasis weights:
+
+- **Design quality** — does the artifact look intentional, not defaulted? Is the aesthetic coherent across regions?
+- **Originality** — does the artifact avoid the convergent middle-ground? Does it surprise without being weird?
+- **Craft** — does the artifact feel detailed and considered at every level — typography, spacing, alignment, hierarchy, color?
+- **Functionality** — does the artifact work for its goal and audience? Would it survive a usability test or a stakeholder review?
+
+Anthropic's emphasis-weighting recommendation: in the prompt, weight which criterion matters most for *this* artifact. A dashboard for internal use weights functionality and craft highest. A pitch deck for an external investor weights design quality and originality highest. A wireframe for early exploration weights functionality highest with craft and originality deprioritized.
+
+Operator-actionable layer-5 block:
+
+```
+Grading criteria for this artifact, in priority order:
+  1. {craft|design quality|originality|functionality} — weight 0.4
+  2. {one of the others} — weight 0.3
+  3. {one of the others} — weight 0.2
+  4. {the remaining one} — weight 0.1
+
+Optimize against this ordering. If the artifact has to trade off,
+trade off the lowest-weighted criterion first.
+```
+
+The non-monotonic-improvement caveat applies — Anthropic notes that quality across iterations is not strictly increasing. If turn three is worse than turn two on a critical criterion, the recovery move is documented in `references/03-iteration-and-session.md` ("pivot to an entirely different aesthetic if the approach wasn't working").
+
+Source: `https://anthropic.com/engineering/harness-design-long-running-apps`.
+
+---
+
+## How the layers compose into one prompt
+
+A worked example for the `designs` intent preset, dashboard, three turns:
+
+### Turn 1 — layers 1 + 2a + 3 (the first prompt)
+
+```
+Goal: An admin dashboard for monitoring API latency by route, by region,
+      and by P50/P95/P99
+Layout: Header with environment switcher; top metrics row (4 KPIs:
+        global P95, error rate, throughput, active requests); main chart
+        (time series, P50/P95/P99 lines); routes table with sortable
+        latency columns; alerts sidebar
+Content: KPI placeholders are real metric names; chart uses synthetic
+         24-hour data; table has 12 routes with realistic paths
+         (/api/v1/users, /api/v1/orders, etc.)
+Audience: Platform engineers, on-call rotation, ages 25-45,
+          comfortable with dense interfaces
+
+Aesthetic family: industrial-utilitarian, slate-monochrome
+Color palette (CSS hex):
+  --color-bg:       #E9ECEC
+  --color-surface:  #C9D2D4
+  --color-muted:    #8C9A9E
+  --color-fg:       #44545B
+  --color-ink:      #11171B
+Typography: square angular sans-serif (Söhne, Inter Variable fallback);
+            no rounded glyphs
+Corner radius: 4px throughout
+Motion: transition: all 160ms ease-out
+Density: dense (32px table rows, 8px card padding)
+Surface: flat — no shadows
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, or Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Pulse animations on idle elements
+  - Glassmorphism, neumorphism, generic "modern SaaS" defaults
+```
+
+### Turn 2 — add layer 4 dimensions
+
+Operator reacts to turn-1 output by adding typography modular scale, semantic color roles, motion easing, and surface-depth rules.
+
+### Turn 3 — add layer 5 weighting
+
+Operator specifies that craft and functionality are the two highest-weighted criteria for this dashboard; design quality is third; originality lowest.
+
+### Turn 4+ — Tweak panel takes over
+
+Most subsequent refinements happen in the Tweak panel (per-artifact Claude-generated controls; zero-token surgical edits) — see `references/03-iteration-and-session.md` for the surface cascade.
+
+---
+
+## Source map
+
+The five layers anchor on four Anthropic primary sources plus one open-source skill:
+
+| Layer | Anthropic source |
+|-------|------------------|
+| 1, 1.5 | `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` |
+| 2a, 2b | `https://platform.claude.com/docs/en/docs/build-with-claude/prompt-engineering/claude-4-best-practices` |
+| 3 | `https://claude.com/blog/improving-frontend-design-through-skills` + `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` |
+| 4 | `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` |
+| 5 | `https://anthropic.com/engineering/harness-design-long-running-apps` |
+
+Re-research trigger: any of the four URLs returning 404 or shifting content materially; Anthropic publishing a sixth layer or revising any of the five. Captured-on date 2026-05-16 — the layer-1 framework has been stable since the launch announcement.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/02-design-md.md b/plugins/claude-design/skills/claude-design-facilitator/references/02-design-md.md
new file mode 100644
index 0000000..5ae3830
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/02-design-md.md
@@ -0,0 +1,333 @@
+# DESIGN.md — template and extractor
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Status:** Beta (Labs research preview)
+**Captured-on date:** 2026-05-16
+
+**Evidence grade:** Community-converged — Anthropic publishes the *concept* of a design-system document anchored to a Claude Design project (`https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design`), but does not publish the 9-section canonical structure. The 9-section template comes from community practitioners (`https://github.com/rohitg00/awesome-claude-design`, `https://github.com/VoltAgent/awesome-claude-design`). Use accordingly: the concept is Anthropic-authoritative; the structure is community-converged.
+
+---
+
+## 1. Why DESIGN.md
+
+A DESIGN.md file uploaded to a Claude Design project anchors design-system identity for every artifact generated in that project. Without an anchor, Claude Design defaults to its convergent middle-ground aesthetic (rounded corners, generous spacing, friendly typography, gentle shadows — the AI-slop pattern documented at `https://claude.com/blog/improving-frontend-design-through-skills`). With an anchor, the model reads the file at generation time and constrains its aesthetic, component, and motion decisions to match.
+
+Anthropic publishes the concept of design-system anchors in `https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design`. The article describes asset uploads, brand kits, and the principle that artifacts in a Claude Design project inherit the project's design language. What Anthropic does *not* publish is a recommended structure for the design-language file itself.
+
+The community converged on a 9-section structure — documented across multiple awesome-claude-design repos, Substack posts, and practitioner blogs — that maps cleanly onto how Claude Design reads design context. The sections below are that converged structure.
+
+---
+
+## 2. The 9-section canonical structure
+
+Each section names a decision Claude Design will otherwise default. The order is the order Claude Design appears to read most reliably (heaviest design-decision sections first).
+
+### Section 1 — Visual Theme & Atmosphere
+
+A one-paragraph description of the aesthetic family. Use named visual references the model can anchor to: "industrial-utilitarian like a Bloomberg terminal", "warm-editorial like The New York Times opinion section", "minimal-monochrome like Linear's UI".
+
+Worked example:
+
+```markdown
+# Visual Theme & Atmosphere
+
+Industrial-utilitarian. Slate-monochrome palette, square-cut typography,
+flat surfaces. Reference: a modern data-tool UI (Linear, Datadog,
+Bloomberg) — dense, intentional, no flourish. The product should look
+like it was built for engineers by engineers.
+```
+
+### Section 2 — Color Palette & Roles
+
+CSS-variable form with explicit hex values and semantic roles. Avoid relying on opacity for state changes — name each state explicitly.
+
+Worked example:
+
+```markdown
+# Color Palette & Roles
+
+:root {
+  --color-bg:        #E9ECEC;
+  --color-surface:   #C9D2D4;
+  --color-muted:     #8C9A9E;
+  --color-fg:        #44545B;
+  --color-ink:       #11171B;
+
+  --color-accent:    #4A6FA5;
+  --color-accent-hover:  #3D5C8A;
+  --color-accent-active: #2F4A70;
+
+  --color-error:     #B23A48;
+  --color-warning:   #C89B3F;
+  --color-success:   #4F7A4F;
+}
+
+Semantic roles:
+- bg     — page background
+- surface — card / panel background
+- muted  — secondary text, borders
+- fg     — primary text
+- ink    — emphasis / heading text
+```
+
+### Section 3 — Typography Rules
+
+Named typeface, modular scale, weight palette, line-height palette. Modular scales the community converged on are 1.250 (minor third) for dense interfaces and 1.333 (perfect fourth) for marketing pages.
+
+Worked example:
+
+```markdown
+# Typography Rules
+
+Primary typeface: Söhne (concrete-named, not "modern sans-serif").
+Fallback: Inter Variable.
+Display typeface: same as primary (no separate display face).
+
+Modular scale: 1.250 (minor third).
+  --text-xs:  0.64rem;
+  --text-sm:  0.8rem;
+  --text-base: 1rem;
+  --text-lg:  1.25rem;
+  --text-xl:  1.563rem;
+  --text-2xl: 1.953rem;
+
+Weight palette: 500 body, 600 emphasized, 700 headings.
+Line height: 1.4 body, 1.2 headings.
+
+If the typeface is not available, substitute Inter Variable — never
+default to Inter, Roboto, Arial, or Space Grotesk
+(per https://claude.com/blog/improving-frontend-design-through-skills
+AI-slop avoid-list).
+```
+
+### Section 4 — Component Stylings
+
+Per-component rules for the components Claude Design generates. Cover buttons, inputs, cards, tables, navigation. Specify radius, padding, border treatment, hover/active/disabled state explicitly.
+
+Worked example:
+
+```markdown
+# Component Stylings
+
+Buttons:
+  - radius: 4px (no pill shapes)
+  - padding: 8px 16px
+  - primary: bg accent, fg surface
+  - secondary: border 1px muted, bg transparent
+  - hover: bg accent-hover
+  - active: bg accent-active
+  - disabled: opacity 0.4, no pointer events
+
+Inputs:
+  - radius: 4px
+  - padding: 8px 12px
+  - border: 1px solid muted
+  - focus: border accent + 2px outset ring at accent + 20% alpha
+
+Cards:
+  - radius: 4px
+  - padding: 16px
+  - bg surface
+  - no shadow — borders define edges if needed
+
+Tables:
+  - row height: 32px (dense)
+  - cell padding: 8px
+  - alternating row: bg + 4% darken
+  - hover row: bg + 8% darken
+```
+
+### Section 5 — Layout Principles
+
+Grid system, spacing scale, breakpoint widths. Name the grid columns and the gap value.
+
+Worked example:
+
+```markdown
+# Layout Principles
+
+Grid: 12-column on screens >= 1024px, 8-column on screens 768-1023px,
+4-column on screens < 768px.
+Gap: 16px (--space-md).
+
+Spacing scale:
+  --space-xs: 4px
+  --space-sm: 8px
+  --space-md: 16px
+  --space-lg: 24px
+  --space-xl: 32px
+  --space-2xl: 48px
+
+Page max-width: 1440px centered.
+Container padding: 24px on screens >= 768px, 16px below.
+```
+
+### Section 6 — Depth & Elevation
+
+Surface depth rules. Most designs benefit from a clear flat-vs-layered decision rather than a mixed palette.
+
+Worked example:
+
+```markdown
+# Depth & Elevation
+
+Flat. No box-shadows by default. Borders define component edges.
+Z-stack:
+  z-0: page surface
+  z-10: navigation
+  z-20: dropdown / popover
+  z-30: modal backdrop
+  z-40: modal content
+  z-50: toast / notification
+
+Modal: bg surface, 1px border ink, no shadow.
+Popover: bg surface, 1px border muted, no shadow.
+```
+
+### Section 7 — Do's and Don'ts
+
+Explicit constraint list. This is where layer-3 (AI-slop avoid-list) gets project-specific.
+
+Worked example:
+
+```markdown
+# Do's and Don'ts
+
+Do:
+  - Use accent color sparingly (CTA + active state only)
+  - Use ink for headings, fg for body, muted for secondary
+  - Use 4px corner radius consistently
+  - Use 160ms ease-out for all hover transitions
+
+Don't:
+  - Use purple gradients on white backgrounds
+  - Use solid-color hero backgrounds
+  - Use Inter / Roboto / Arial / Space Grotesk as primary typeface
+  - Use bouncy spring easing
+  - Use pulse / breathing animations on idle elements
+  - Use glassmorphism or neumorphism
+  - Use shadows except where the depth-and-elevation section explicitly permits
+```
+
+### Section 8 — Responsive Behavior
+
+Breakpoint behavior. Anthropic does not publish responsive rules; this is the section where a project encodes its responsive philosophy.
+
+Worked example:
+
+```markdown
+# Responsive Behavior
+
+Mobile-first reasoning, but built desktop-first (target audience is
+desktop). Below 768px:
+  - Navigation collapses to single icon-button row
+  - Tables become card stacks (one card per row)
+  - 12-column grid becomes 4-column
+  - Container padding drops from 24px to 16px
+  - Font sizes scale down by 0.9x
+
+Touch targets: minimum 44px height (regardless of viewport).
+```
+
+### Section 9 — Agent Prompt Guide
+
+A short block telling Claude Design how to use this DESIGN.md. This section is the bridge between the file and the prompt — it names the file by section and reminds the model that the constraints are load-bearing.
+
+Worked example:
+
+```markdown
+# Agent Prompt Guide
+
+When generating an artifact in this project, read every section of this
+DESIGN.md before producing output. Treat color palette, typography rules,
+component stylings, and layout principles as constraints — not
+suggestions. If a generation would violate a constraint, stop and ask
+which constraint to relax.
+
+Cite specific section names when justifying design decisions in
+explanatory text (e.g., "I chose 4px corners per Section 4 Component
+Stylings").
+```
+
+---
+
+## 3. Brand-to-DESIGN.md extractor prompt
+
+A copy-paste-ready prompt the operator pastes into `claude.ai` (the chat product) or Claude.com to convert a brand URL, screenshot, or marketing asset into a DESIGN.md. The pattern comes from `https://github.com/rohitg00/awesome-claude-design/blob/main/prompts/brand-to-design-md.md` (adapted with attribution to the awesome-claude-design community template).
+
+```
+You will produce a DESIGN.md file by analyzing the brand reference
+materials I provide. Output structure: 9 sections, in this order,
+with the exact heading names:
+
+  1. Visual Theme & Atmosphere
+  2. Color Palette & Roles
+  3. Typography Rules
+  4. Component Stylings
+  5. Layout Principles
+  6. Depth & Elevation
+  7. Do's and Don'ts
+  8. Responsive Behavior
+  9. Agent Prompt Guide
+
+Rules:
+- Use CSS-variable form (--color-name: #HEX) for color palette
+- Use modular scale form (--text-xs / --text-sm / ...) for typography
+- Use named typefaces ONLY — if you cannot identify the typeface from
+  the brand materials with high confidence, write "unknown — operator
+  to fill in" rather than guessing. Do not hallucinate a typeface name.
+- For each component (button, input, card, table, navigation), name
+  radius, padding, border treatment, and hover / active / disabled states
+- Cite the source brand material at the top (e.g., "Extracted from
+  brand kit at <URL> on 2026-05-17")
+
+Brand reference materials:
+[paste URL, screenshot, or brand kit description here]
+```
+
+The anti-hallucination clause ("if you cannot identify... write unknown") is load-bearing — the failure mode without it is plausible-but-wrong typography names that the operator does not catch until they brief Claude Design and the output drifts.
+
+Source for this extractor: community pattern at `https://github.com/rohitg00/awesome-claude-design/blob/main/prompts/brand-to-design-md.md`, adapted.
+
+---
+
+## 4. DESIGN.md failure modes
+
+Four failure modes the operator should know before adopting DESIGN.md as a workflow primitive.
+
+### Vision-token cost penalty
+
+If the DESIGN.md is uploaded as an image (screenshot of a brand page) rather than as text, Claude Design pays a vision-token cost on every generation. Practitioner walkthroughs (Xinran Ma's documented experience in `research/03`) report meaningful quota burn from image-based DESIGN.md anchors. Use text-form DESIGN.md whenever possible.
+
+### Per-user quota not pooled
+
+Anthropic does not pool Claude Design quota across team members. A team using a shared DESIGN.md will not share quota burn — each member pays separately. Plan project workflow accordingly (research/04 documents community-observed Pro burn of roughly 25-30 minutes; Max roughly 60-90).
+
+### Long-session degradation
+
+DESIGN.md adherence appears to degrade in the back third of a long session. Opus 4.7 quality drops at the 40-50% context mark (`https://anthropic.com/engineering/harness-design-long-running-apps`); DESIGN.md is part of context, so its enforcement weakens accordingly. Session-break heuristics in `references/03-iteration-and-session.md` apply.
+
+### Post-export drift
+
+When an artifact is exported (PPTX, PDF, Code-handoff), the DESIGN.md does not travel with it. Downstream editing tools — PowerPoint, Adobe, Code IDEs — apply their own defaults. Validate the rendered output against DESIGN.md after export.
+
+---
+
+## 5. DESIGN.md sanity-check pattern
+
+A community-converged test for DESIGN.md adherence: generate three artifacts in the same Claude Design project using deliberately different intent presets (designs, slides, one-pagers) and confirm that all three respect the DESIGN.md color palette, typography, and component-styling rules. If one preset drifts more than the others, the DESIGN.md needs sharpening on the section the drifting preset emphasized.
+
+The community attribution for this pattern comes from a `theadpharm` Substack walkthrough (cited in `research/03`). It is a smoke test, not a guarantee — but it catches the common case where DESIGN.md is too general to constrain the model.
+
+---
+
+## Sources
+
+- `https://support.claude.com/en/articles/14604397-set-up-your-design-system-in-claude-design` — Anthropic's design-system setup concept
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Anthropic's AI-slop avoid-list and four design dimensions
+- `https://claude.com/blog/improving-frontend-design-through-skills` — Anthropic blog on default-avoidance
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — context-degradation framing
+- `https://github.com/rohitg00/awesome-claude-design` — community awesome-list, brand-to-DESIGN.md extractor source
+- `https://github.com/VoltAgent/awesome-claude-design` — community awesome-list, alternate 9-section structure references
+
+Re-research trigger: Anthropic publishing an official DESIGN.md structure; either community awesome-list reaching consensus on a different section ordering; new failure mode surfaced in practitioner posts.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/03-iteration-and-session.md b/plugins/claude-design/skills/claude-design-facilitator/references/03-iteration-and-session.md
new file mode 100644
index 0000000..114bbee
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/03-iteration-and-session.md
@@ -0,0 +1,256 @@
+# Iteration and session — Tweak / Comment / Chat cascade and recovery
+
+**Last updated:** 2026-05-17 | **Verified:** research/04-iteration-mechanics-recovery.md
+**Status:** Beta (Labs research preview)
+**Captured-on date:** 2026-05-16
+
+This file documents three things in order of operational urgency: which iteration surface to use when, when to break a session, and how to recover when iteration stops landing. The cost asymmetry between Tweak / Comment / Chat is the single largest leverage point in a Claude Design workflow.
+
+---
+
+## 1. The three-surface cascade
+
+Claude Design exposes three edit surfaces with asymmetric token costs and asymmetric scope:
+
+| Surface | Token cost | Scope | When to use |
+|---------|-----------|-------|-------------|
+| Tweak panel | Zero | Surgical, per-control | Anything Claude pre-derived at generation time |
+| Inline comment | Zero on success | Component-scoped, in-component | Targeted in-component text or visual change |
+| Chat | One full turn | Whole artifact | Structural change, aesthetic pivot, new section |
+
+### Tweak panel
+
+The Tweak panel is the per-artifact set of controls and sliders Claude pre-derives during generation. Each artifact comes with its own Tweak surface — section reordering, variant swap, density slider, spacing scale, color temperature, typography scale, padding / radius / shadow. The controls are surgical and zero-token: applying them does not consume a chat turn or budget time. They are also lossy-free — the artifact does not regenerate; the controls operate on the existing render.
+
+Tweak panel coverage is per-artifact. If Claude did not pre-derive a control for a dimension, that dimension is not Tweak-editable. The first move is always to check the Tweak panel: most dimensions an operator wants to refine after the first generation are already there.
+
+Operator-actionable mantra (the synthesis from `research/04`):
+
+> Anything Claude pre-derives at generation time is surgical thereafter; new controls cost one chat turn for setup.
+
+### Inline comments
+
+The comment surface lets the operator click anywhere on the rendered artifact and attach a directive — "make this section narrower", "use a darker shade for this header", "remove this icon". Comments are surgical when the change is in-component (text edit, color tweak, sizing within an existing container) and they cost zero tokens on success.
+
+Two failure modes the operator should know:
+
+1. **Vanish bug** — comments sometimes disappear after submission with no edit applied. Anthropic has acknowledged this (community-cited; the workaround is to paste the comment text directly into chat as a follow-up turn).
+2. **Structural-container failure** — comments cannot add a new structural container (a new section, a new column, a new modal). The model interprets the directive but produces no change, or makes an irrelevant change. For new containers, escalate to chat.
+
+### Chat
+
+Chat is the full-regeneration surface. Any structural change, aesthetic pivot, multi-component change, or new section requires a chat turn. The artifact regenerates against the new prompt; previous Tweak panel and comment state may not survive intact.
+
+Chat costs one full turn — count it against the session budget. Use the layer-1-through-5 framework (`references/01-prompt-fundamentals.md`) for the chat prompt rather than free-form natural language.
+
+### Per-operation surgical-vs-regen catalogue
+
+A practical lookup for which surface fits which operation (synthesized from `research/04`):
+
+| Operation | Surface | Notes |
+|-----------|---------|-------|
+| Section reordering | Tweak | Pre-derived if Claude includes a section-order control |
+| Variant swap (component variant A → B) | Tweak | If Claude generated multiple variants |
+| Density slider (compact / cozy / comfortable) | Tweak | Common Tweak control |
+| Spacing scale (--space-* token shift) | Tweak | Common Tweak control |
+| Color temperature (warmer / cooler) | Tweak | If Claude derives this dimension |
+| Typography scale (modular scale shift) | Tweak | If Claude derives this dimension |
+| Padding / radius / shadow per component | Tweak | Common Tweak controls |
+| Text edit in existing component | Comment | Surgical, in-component |
+| Color tweak in existing component | Comment | Surgical, in-component |
+| Add a new section | Chat | Structural — Tweak / Comment cannot do this |
+| Aesthetic pivot (industrial → editorial) | Chat | Full regen — name the new aesthetic |
+| Multi-component change (revise hero + CTA + footer together) | Chat | Full regen — too broad for Comment |
+| New interaction state (hover / disabled / active) | Chat | Structural — requires regeneration |
+
+---
+
+## 2. Anthropic-published surgical/structural split
+
+Anthropic's verbatim framing in `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`: the Claude Design canvas distinguishes between *surgical edits* (per-element changes that do not regenerate the artifact) and *structural edits* (new components, new layouts, aesthetic pivots that require regeneration). The Tweak panel and inline comments are surgical surfaces; chat is the structural surface.
+
+The operator's job is to identify which kind of edit a given change is *before* picking the surface. A surgical change attempted via chat regenerates the whole artifact and burns a turn; a structural change attempted via comment fails silently and wastes time. Misclassification is the dominant inefficiency in a long Claude Design session.
+
+Source: `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`.
+
+---
+
+## 3. Anthropic-engineering refine-vs-pivot rule
+
+Anthropic publishes a verbatim refine-vs-pivot guideline in `https://anthropic.com/engineering/harness-design-long-running-apps`:
+
+> Pivot to an entirely different aesthetic if the approach wasn't working — iteration within a bad direction compounds the failure.
+
+The companion warning, also verbatim from the same source: design quality is **non-monotonic** across iterations. Turn 4 can be worse than turn 3 on a critical criterion. The framing matters because the operator's intuition pushes toward continued refinement; the discipline is to recognize a stuck state and pivot.
+
+Operational signal that a pivot is needed (community-converged from `research/04`):
+
+- Three consecutive comments have failed to land
+- The aesthetic is drifting back to the AI-slop default on each regeneration
+- The operator finds themselves explaining what they *don't* want more than what they *do* want
+- The artifact is converging on a different audience than the brief
+
+Pivot move: rewrite the layer-2 aesthetic-family specification entirely, then ship a fresh chat turn against the new family. Do not try to incrementally edit out of a stuck state.
+
+Source: `https://anthropic.com/engineering/harness-design-long-running-apps`.
+
+---
+
+## 4. Session-management heuristics
+
+Four heuristics — one Anthropic-published, three community-converged — govern when to break a session.
+
+### 4-screen inflection (community-converged)
+
+Practitioners across multiple posts in `research/04` document a quality inflection around the fourth screen of context in a Claude Design session. Before screen four, edits land cleanly; after, comments start vanishing, aesthetic defaults creep back, and Tweak controls feel less precise. The exact mechanism is unclear (context-window pressure on Opus 4.7 + cumulative DESIGN.md re-reads + cumulative artifact history), but the pattern is consistent.
+
+Practitioner mantra: **at screen four, save what you have and start a new session.**
+
+### Opus 4.7 context degradation (Anthropic-published)
+
+`https://anthropic.com/engineering/harness-design-long-running-apps` publishes the verbatim observation: Opus 4.7 quality degrades noticeably at the 40-50% context-window mark. Claude Design sessions accumulate context faster than chat sessions (each generation includes the artifact in context for subsequent turns); the 40-50% mark arrives sooner.
+
+### Quota burn (community-observed)
+
+Practitioner walkthroughs cited in `research/04` report quota burn rates as of 2026-04-28 per MindStudio's documented walkthrough — these are community observations, not Anthropic-published limits and may shift:
+
+- **Pro plan:** ~25-30 minutes of active design before quota becomes the binding constraint
+- **Max plan:** ~60-90 minutes of active design before quota becomes the binding constraint
+
+These numbers assume continuous active design (chat turns, regenerations, image-form DESIGN.md anchors). Tweak panel and comment surface usage does not burn quota.
+
+Captured-on date: 2026-04-28 per `research/04`. Not an Anthropic-published limit.
+
+### Session-break triggers (community-converged)
+
+Three signals that a session has reached its productive end:
+
+- Reorder / density Tweak controls stop landing (the model is not respecting the surgical surface)
+- Chat re-introduces previously-removed defaults (the model is losing the negative constraints)
+- The operator finds themselves repeating the same constraint in three consecutive turns
+
+When two of three trigger together, break the session.
+
+---
+
+## 5. Context-reset prompt
+
+When the operator needs to break a session but does not want to lose what worked, the verbatim community pattern from MindStudio (2026-04-28, cited in `research/04`):
+
+```
+Before we continue, summarize the design system and component decisions
+we've made in this session as a structured markdown document I can use
+as a fresh starting context. Include:
+  - the aesthetic family we converged on
+  - color palette in CSS-variable form
+  - typography decisions (typeface, modular scale, weights)
+  - component patterns we settled on
+  - decisions we made and then reversed (so I don't reintroduce them)
+  - anything we tried that did not work
+```
+
+Paste the produced markdown into a new Claude Design session as the opening context, alongside the original DESIGN.md. The new session starts with the cumulative decisions but a fresh context window.
+
+Captured-on date: 2026-04-28.
+
+---
+
+## 6. Recovery prompt library
+
+Five recovery moves, listed in escalating cost order.
+
+### 6.1 — Break the default aesthetic
+
+The highest-leverage single content asset in this plugin. Adapted with attribution from `https://github.com/rohitg00/awesome-claude-design/blob/main/prompts/break-default-aesthetic.md`. Use when the artifact has drifted toward AI-slop defaults despite negative constraints in the brief.
+
+```
+The current direction has converged on a generic default. I want a
+distinct visual direction. Constraints:
+
+1. Pick ONE aesthetic family and commit to it. Name a concrete reference
+   (an existing product, an editorial source, a design movement). No
+   "modern SaaS", no "clean", no "minimal" as the named family — those
+   are defaults, not directions.
+
+2. Do not produce any of:
+   - Inter, Roboto, Arial, Space Grotesk as primary typeface
+   - Purple gradients on white backgrounds
+   - Three-column feature grids with icon + headline + line
+   - Centered-hero-with-single-CTA layout default
+   - Glassmorphism, neumorphism, generic "modern" defaults
+
+3. Before generating: list four candidate directions matching the goal
+   and audience. For each:
+   - Aesthetic family (with concrete reference)
+   - Color palette in hex
+   - Typeface (named)
+   - One-line rationale tying it to goal + audience
+   Wait for me to pick one. Do NOT default to "the most common modern
+   approach."
+
+4. The aesthetic should surprise without being weird. If you're tempted
+   to write "professional" or "balanced" or "approachable", stop.
+   Those words signal default-mode reasoning.
+```
+
+### 6.2 — Fix the system, not the prompt
+
+Community pattern: when iteration is stuck, the prompt is rarely the problem. The DESIGN.md is. Reopen the DESIGN.md, audit the section the artifact is drifting on (typography, color, components), tighten that section, re-upload, then re-generate.
+
+The instinct is to add more constraints to the chat prompt. The discipline is to fix the upstream anchor.
+
+### 6.3 — Edit previous message rather than send a new one
+
+Community-documented workaround for context-bloat: when the previous prompt almost worked but missed one detail, edit the previous message rather than send a new turn. Claude Design re-generates from the edited message without adding to context. This is in `research/04` as a low-cost recovery move for the case where a single-word change would have fixed the output.
+
+### 6.4 — 3-failed-comment escalation rule
+
+If three consecutive inline comments fail to land, stop commenting and escalate to chat. The comment surface is signaling that the model is not in a state to respect surgical edits — either the artifact has drifted too far from the brief, the context window is pressured, or the change is actually structural and was misclassified.
+
+Escalation move: paste the failed comment text directly into a chat turn, prefaced with "the inline comment surface is not landing on this; please apply this change via regeneration".
+
+### 6.5 — Model downshift escalator
+
+When Opus 4.7 generations are non-monotonic in quality and Tweak / Comment / chat moves all stop landing, the recovery move is to start a fresh session at a different model. The downshift sequence community-converged on (per `research/04`):
+
+- Opus 4.7 → Opus 4.6 (same family, less context-pressure-sensitive)
+- Opus 4.6 → Sonnet 4.6 (faster, less context-sensitive, sometimes better at constraint-following on tight briefs)
+
+Claude Design pins to Opus 4.7. The downshift happens by moving the work to a different Anthropic surface (Claude.com chat with a model picker) for the constraint-tightening turn, then bringing the result back to Claude Design as a new session anchor.
+
+### 6.6 — Verbal save-pattern
+
+When the operator wants to preserve what works but try a different direction without losing the current state, the community pattern is to **verbally save** in chat:
+
+```
+Save what we have. The current direction is good but I want to explore
+a completely different aesthetic for comparison. Acknowledge this save,
+then start fresh on a new direction without referencing the saved state.
+We may come back to it.
+```
+
+The "save" is verbal — Claude Design has no version-tree primitive — but it signals to the model that the previous direction is preserved in the operator's mental model and the next turn is exploratory.
+
+---
+
+## 7. What Claude Design lacks
+
+Four primitives that exist in adjacent Anthropic surfaces but not in Claude Design today. The plugin must never promise these:
+
+- **No `/rewind`** — Anthropic Code has a `/rewind` primitive that reverts to a prior conversational state. Claude Design does not.
+- **No version history** — there is no Tweak-history, no Comment-history, no chat-thread-fork primitive. The verbal save-pattern (Section 6.6) is the closest substitute.
+- **No two-way handoff** — once an artifact is exported to Claude Code, there is no path back into Claude Design. Re-import requires a screenshot → new Claude Design session (lossy). See `references/04-handoff-and-scope.md`.
+- **No branching** — Claude Design cannot fork a session into parallel directions and compare. The verbal save-pattern is the only branching primitive.
+
+When the operator asks for any of these, name the constraint and offer the closest substitute (verbal save-pattern, multi-session-with-context-reset-prompt, manual screenshot archive).
+
+---
+
+## Sources
+
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — surgical / structural edit split, intent presets
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — refine-vs-pivot rule, non-monotonic improvement, 40-50% context degradation, design grading criteria
+- `https://github.com/rohitg00/awesome-claude-design` — community recovery prompts, break-default-aesthetic source
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list applied during recovery
+
+Re-research trigger: Anthropic publishing version-history or branching primitives; community 4-screen inflection no longer reproducing; quota mechanics shifting (Pro / Max minute counts have a 2026-04-28 captured-on date and are community-observed, not Anthropic-published).
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/04-handoff-and-scope.md b/plugins/claude-design/skills/claude-design-facilitator/references/04-handoff-and-scope.md
new file mode 100644
index 0000000..ffea483
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/04-handoff-and-scope.md
@@ -0,0 +1,157 @@
+# Handoff and scope fence
+
+**Last updated:** 2026-05-17 | **Verified:** research/04-iteration-mechanics-recovery.md + research/05-anthropic-design-plugin-scope.md
+**Status:** Beta (Labs research preview)
+**Captured-on date:** 2026-05-16
+
+This file documents two things: how Claude Design hands artifacts off to downstream tools (Claude Code, PowerPoint, PDF, Canva), and how this plugin (`claude-design`) fits next to Anthropic's official `knowledge-work-plugins/design`. The scope fence is load-bearing — getting it wrong duplicates Anthropic's command surface and adds nothing.
+
+---
+
+## 1. Handoff bundle contents
+
+When the operator chooses Claude Code handoff as the destination, Claude Design produces a bundle containing — verbatim per `https://anthropic.com/news/claude-design-anthropic-labs` and `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`:
+
+- **Machine-readable component spec** — a JSON-shaped description of the components in the artifact, with names, props, and variants
+- **Design tokens** — colors, typography, spacing, radii in token form (CSS variables or JSON tokens)
+- **Layout hierarchy** — the page / screen structure as a tree
+- **Referenced assets** — images, icons, fonts referenced in the artifact, bundled
+- **Standalone HTML + inline CSS + JS** — a self-contained render that runs without Claude Design
+- **Per-state screenshots** — visual snapshots of each interaction state (default, hover, active, disabled, focused)
+- **PM-annotated notes** — annotations Claude Design surfaces about design decisions, edge cases, and trade-offs
+- **Stack / framework README** — a guide to which framework conventions the artifact assumes (e.g., React + Tailwind, or vanilla HTML)
+
+The bundle is generated once on export. It does not regenerate when the operator iterates the artifact further inside Claude Design — the operator must re-export to pick up changes.
+
+Sources: `https://anthropic.com/news/claude-design-anthropic-labs` and `https://support.claude.com/en/articles/14604416-get-started-with-claude-design`.
+
+---
+
+## 2. Direction is one-way
+
+The Design → Code handoff direction is one-way. Once the bundle is exported and the operator starts iterating in Claude Code (or any code editor), there is no return path to Claude Design. The component spec, design tokens, and standalone HTML continue to live in the code repository; Claude Design has no concept of "re-ingest from code".
+
+If the operator wants to visit the visual surface again after engineering iteration, the only path is:
+
+1. Screenshot the current Claude Code render
+2. Open a new Claude Design session
+3. Paste the screenshot as the starting visual reference
+4. Brief Claude Design from scratch using layer-1-through-5 framework
+
+This is lossy: the design tokens, component spec, and PM notes from the original bundle do not travel into the new Claude Design session. The new session inherits only what the screenshot communicates.
+
+Operational consequences:
+
+- **Finalize visual decisions inside Claude Design before exporting.** The Tweak panel and inline comments are free; chat turns inside Claude Design are budget-priced; engineering iteration in code is budget-free but the visual round-trip is one-way. Order accordingly.
+- **Export once, intentionally.** Bundling everything in a single export (per Section 6 below) costs one chat turn; bundling screen-by-screen costs N turns and consumes budget faster.
+- **Plan for asymmetric revisit.** When the engineering implementation diverges from the design intent and the operator wants a designer review, schedule that revisit as a fresh Claude Design session, not as an extension of the original session.
+
+Practitioner consensus on this point is documented at `https://claudefa.st/blog/guide/mechanics/claude-design-handoff` (community source). Anthropic frames the same one-way property implicitly in the get-started article — the handoff is described as an export, not a connection.
+
+---
+
+## 3. Workflow recommendation
+
+The recommended flow for any Claude Design artifact destined for engineering implementation:
+
+1. **Iterate visually in Claude Design until the artifact is shippable.** Use Tweak panel and inline comments first; chat turns for structural and aesthetic changes.
+2. **Validate the destination format before exporting.** If destination is PPTX, verify the text-as-text count (see Section 6 token cost trap). If destination is HTML standalone, render it in the target browser at the target viewport. If destination is PDF, check the interactive-element handling.
+3. **Export the full bundle once.** Bundle all screens in one export, not per-screen. The token cost trap (Section 6) compounds with per-screen exports.
+4. **Iterate engineering inside Claude Code or the code editor.** Use Claude Code's `/edit` and chat surfaces. Pull the design tokens from the bundle into the repository's styling layer.
+5. **For post-design design-quality work — critique, accessibility audit, UX copy review, design-system audit, engineering handoff guidance — install Anthropic's official plugin (Section 4 below).**
+6. **If a visual revisit becomes necessary later, accept the one-way cost.** Open a new Claude Design session against a screenshot; do not try to re-extend the original session.
+
+This is the flow per Section 4's scope-fence reasoning: this plugin covers the upstream lifecycle; Anthropic's covers downstream.
+
+---
+
+## 4. Scope fence vs Anthropic's `knowledge-work-plugins/design`
+
+Anthropic ships an official Claude Code plugin at `https://claude.com/plugins/design` (source: `https://github.com/anthropics/knowledge-work-plugins`). It is skill-driven, Apache 2.0 licensed (MIT-equivalent), and ships six slash-commands operating on **existing** artifacts (Figma URLs, screenshots, copy snippets).
+
+The lifecycle-stage coverage map:
+
+| Lifecycle stage | This plugin (claude-design) | Anthropic's plugin (knowledge-work-plugins/design) |
+|-----------------|------------------------------|----------------------------------------------------|
+| Idea ingestion | ✓ Disambiguate surface, intent preset, audience | — |
+| Intent-preset selection | ✓ Eight presets, evidence-grade labelled | — |
+| Prompt engineering | ✓ Five-layer stack + per-preset patterns | — |
+| Copy-paste delivery | ✓ Composed prompt block | — |
+| Iteration coaching | ✓ Tweak / Comment / Chat cascade, session economics | — |
+| Ship-readiness | ✓ Operator-attested + recommend downstream tool | — |
+| Critique | — | ✓ `/critique` |
+| Accessibility audit | — | ✓ `/accessibility` |
+| UX copy review | — | ✓ `/ux-copy` |
+| Research synthesis | — | ✓ `/research-synthesis` |
+| Design-system audit | — | ✓ `/design-system` |
+| Engineering handoff | — | ✓ `/handoff` |
+
+There is no functional overlap. This plugin produces prompts that go into Claude Design; Anthropic's plugin operates on artifacts that already exist. The split is clean by design — both plugins document the other as the lifecycle complement.
+
+**Forbidden command-name list.** This plugin must NOT ship slash-commands with any of these names (with or without a `claude-design:` namespace prefix):
+
+- `/critique`
+- `/accessibility`
+- `/ux-copy`
+- `/research-synthesis`
+- `/design-system`
+- `/handoff`
+
+`tests/validate-plugin.sh` assertion (h) enforces this mechanically. The rationale is collision-avoidance — if both plugins are installed and both ship `/critique`, command resolution becomes ambiguous and one or the other silently fails. The cleaner solution is: this plugin does not own those commands.
+
+---
+
+## 5. Recommended downstream tool
+
+When the operator finishes the Claude Design lifecycle (artifact exists, exported, ready for review), surface the downstream tool installation as the next step:
+
+```
+claude plugins add knowledge-work-plugins/design
+```
+
+In a new Claude Code session with that plugin installed:
+
+- Run `/critique <path-or-URL>` to get a design critique
+- Run `/accessibility <path-or-URL>` for a WCAG audit
+- Run `/ux-copy <path-or-URL>` for copy review
+- Run `/research-synthesis` if the operator has user-research notes to synthesize
+- Run `/design-system <path-or-URL>` for design-system consistency check
+- Run `/handoff <path-or-URL>` for engineering-handoff guidance
+
+Sources: `https://claude.com/plugins/design` and `https://github.com/anthropics/knowledge-work-plugins`.
+
+The plugin is Apache 2.0, free, and maintained by Anthropic. There is no commercial trade-off; it is the canonical downstream tool.
+
+---
+
+## 6. Token cost trap — bundle all screens in one export
+
+Practitioner-documented failure mode: exporting screen-by-screen instead of bundling all screens in one export. The community-cited reference is `token-budget-claude-design.md` (cited in `research/04` as one of the highest-leverage cost-management items).
+
+The mechanism: each export turn passes the current artifact state through Opus 4.7 to produce the bundle. For an N-screen artifact, N separate exports run N separate bundle generations and burn N chat turns. Bundling all N screens in a single export runs one bundle generation against the cumulative state and burns one chat turn.
+
+The bundling prompt pattern:
+
+```
+Generate the full export bundle covering all N screens of this artifact:
+[screen 1: name], [screen 2: name], ... [screen N: name].
+Include for each screen: HTML standalone, design tokens, component spec,
+per-state screenshots, PM notes. Bundle as a single download.
+```
+
+Multi-screen artifacts (prototypes, slide decks, multi-page landing pages) benefit most from this discipline. Single-screen artifacts (a single dashboard, a single one-pager) are not affected because there is only one bundle to generate.
+
+If the operator has already paid the per-screen cost and noticed mid-flight, the recovery is to abandon partial exports and run one final bundling export against the cumulative artifact state.
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — Anthropic Labs launch, bundle contents
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — get-started, handoff bundle contents
+- `https://claude.com/plugins/design` — Anthropic's official knowledge-work-plugins/design plugin
+- `https://github.com/anthropics/knowledge-work-plugins` — source for the official plugin
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading framing
+- `https://claudefa.st/blog/guide/mechanics/claude-design-handoff` — community operational consensus on one-way direction
+
+Re-research trigger: Anthropic announcing a two-way handoff primitive; `knowledge-work-plugins/design` adding or removing slash-commands; bundle contents changing materially; this plugin and Anthropic's plugin overlap emerging.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/designs.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/designs.md
new file mode 100644
index 0000000..c4d2b6b
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/designs.md
@@ -0,0 +1,183 @@
+# Preset: designs
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Evidence grade:** Anthropic-documented + community-validated
+**Captured-on date:** 2026-05-16
+
+The `designs` intent preset is Claude Design's generic generation mode. It covers dashboards, components, layouts, and design explorations that do not fit into one of the more specialised presets (prototypes, slides, one-pagers, etc.). It is the preset operators reach for when the goal is "produce a high-quality visual artifact" rather than a destination-shaped artifact.
+
+This file documents the `designs` preset across six dimensions: what it is, when to use it, Anthropic's published prompt patterns, community uplift, critical caveats, and one end-to-end worked prompt.
+
+---
+
+## (a) What this preset is
+
+Anthropic's launch post (`https://anthropic.com/news/claude-design-anthropic-labs`) describes `designs` as the default-mode preset — the substrate every other preset effectively inherits from, with destination shaping layered on top. Output is HTML + React + inline CSS, viewable in the Claude Design canvas, exportable to PDF / HTML standalone / Code-handoff.
+
+Two Anthropic primary sources ground this preset:
+
+- The Anthropic-engineering blog `https://anthropic.com/engineering/harness-design-long-running-apps` publishes the four design grading criteria (design quality, originality, craft, functionality) that the `designs` preset is optimised against.
+- The frontend-design open-source skill at `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` documents Anthropic's verbatim Design-Thinking Framework — **Purpose**, **Tone**, **Constraints**, **Differentiation** — and the verbatim AI-slop avoid-list.
+
+The frontend-design skill is the closest thing Anthropic publishes to a `designs`-preset system prompt. Read it whenever the operator wants to understand what Claude Design is internally optimising for.
+
+---
+
+## (b) When to use it
+
+Pick `designs` when the goal is generic, exploratory, or composite. The decision matrix:
+
+| Operator goal | Preset |
+|---------------|--------|
+| Generic dashboard, component library exploration, design system playground | **designs** |
+| Interactive product flow for usability testing | prototypes |
+| Presentation for stakeholders | slides |
+| Single-page memo or leave-behind | one-pagers |
+| Low-fi structural layout for early review | wireframes-mockups |
+| Investor / external pitch | pitch-decks |
+| Landing page, social variant, marketing asset | marketing-collateral |
+| Code-powered prototype with voice / video / shaders / 3D | frontier-design (experimental — see preset file) |
+
+If the operator is uncertain between `designs` and `prototypes`, the distinguishing question is: **is this for usability testing?** Yes → prototypes. No → designs.
+
+If uncertain between `designs` and `marketing-collateral`, the distinguishing question is: **is this destined for a marketing surface (landing page, social, ad)?** Yes → marketing-collateral. No → designs.
+
+---
+
+## (c) Anthropic-published prompt patterns
+
+### The Design-Thinking Framework (verbatim from frontend-design/SKILL.md)
+
+Anthropic's `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` publishes the verbatim four-part framework Claude Design uses when reasoning about a design:
+
+- **Purpose** — what is the artifact for? Match every aesthetic decision to the purpose.
+- **Tone** — what emotional register fits the audience and the purpose? Energetic, calm, authoritative, playful, terse?
+- **Constraints** — what cannot be changed? Brand colors, typeface restrictions, layout rules, accessibility minimums.
+- **Differentiation** — what makes this artifact distinct from the convergent middle-ground default? Name the differentiation explicitly.
+
+Use this framework as a pre-brief check before composing a layer-1-through-5 prompt (see `../01-prompt-fundamentals.md`). If any of the four parts is fuzzy, sharpen it before drafting.
+
+### Verbatim AI-slop avoid-list
+
+Anthropic's frontend-design skill + the blog post `https://claude.com/blog/improving-frontend-design-through-skills` publish the verbatim banned-items list used in layer 3 of the prompt stack. See `../01-prompt-fundamentals.md` Section "Layer 3" for the full list. The `designs` preset inherits this list — it is not optional.
+
+### Anthropic's verbatim canonical examples
+
+The Anthropic get-started article `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` publishes three verbatim canonical examples (dashboard, mobile onboarding, landing page) demonstrating the Goal / Layout / Content / Audience framework. Read them as the reference shape for a first prompt against `designs`. Reproduced in full in `../01-prompt-fundamentals.md` Section "Layer 1".
+
+---
+
+## (d) Community uplift
+
+Three community-converged patterns extend Anthropic's published material for the `designs` preset.
+
+### Real-data injection over lorem ipsum
+
+Victor Dibia's documented pattern (`research/03`): substitute realistic placeholder content rather than lorem ipsum. The model defaults to convergent middle-ground content when content is unspecified; named placeholders ("Today's MRR: $48,200", "Last 24h error rate: 0.12%") anchor the model to real-shaped output.
+
+For dashboards specifically: use realistic metric values, realistic timestamps, realistic user names. The visual difference between a chart with `$3,200` / `$4,500` / `$2,800` and a chart with `$XXX` / `$YYY` / `$ZZZ` is large — Claude Design will infer typography spacing and component sizing from the named values.
+
+### Explicit modular scale and weight palette
+
+Community pattern (research/03): name the typographic modular scale and weight palette in the brief rather than letting the model default. The `1.250` (minor third) scale fits dense informational artifacts; the `1.333` (perfect fourth) scale fits marketing pages. Weight palettes converge on `500 body / 600 emphasized / 700 headings`.
+
+### Specify the negative aesthetic family
+
+Beyond layer-3 negative constraints (which name specific banned items), community practice (research/03) is to name an entire negative aesthetic family — "not modern SaaS", "not playful illustrated", "not corporate professional" — to push the model out of its default neighbourhood. The model interprets aesthetic-family naming as a strong signal even in the negative.
+
+---
+
+## (e) Critical caveats
+
+Three caveats specific to the `designs` preset.
+
+### Default-aesthetic drift on iteration
+
+The `designs` preset is most susceptible to default-aesthetic drift because it has no destination-shaped constraint pulling it toward a specific genre. Watch for drift back to AI-slop defaults across iterations — the `references/03-iteration-and-session.md` "break-default-aesthetic" recovery prompt is targeted at exactly this drift.
+
+### Non-monotonic improvement across iterations
+
+`https://anthropic.com/engineering/harness-design-long-running-apps` documents that quality across iterations is not strictly increasing. Turn 4 can be worse than turn 3 on design quality, originality, or craft. The recovery move (pivot, not refine) is in `../03-iteration-and-session.md`.
+
+### Component spec coherence
+
+For dashboards and component libraries specifically, the export bundle's machine-readable component spec is load-bearing for engineering handoff. Ensure the artifact has coherent component definitions (named, with consistent variants) before exporting — otherwise the component spec will be partial and the engineering implementation will diverge.
+
+---
+
+## (f) One end-to-end worked prompt — layers 1 + 2a + 3 composed
+
+Goal: an admin dashboard for an analytics product, audience is data engineers.
+
+```
+Goal: An admin dashboard for monitoring data-pipeline freshness across
+      120 tables, sorted by last-successful-load timestamp
+Layout: Header with environment switcher + global time-window selector;
+        top metrics row (4 KPIs: tables behind SLA, tables current,
+        tables stale, tables errored); main panel with stacked area
+        chart showing freshness over the last 24 hours; sortable table
+        below with 120 rows; alerts sidebar
+Content: Realistic table names (orders, customers, inventory,
+         user_events, sessions, etc.); realistic timestamps (last
+         successful load within the last 6 hours for most, some at
+         12 hours, some at 48 hours); realistic error rates (0.01% to
+         3.2%)
+Audience: Data engineers, on-call rotation, ages 25-50, comfortable
+          with dense interfaces, need to scan and triage quickly
+
+Aesthetic family: industrial-utilitarian, slate-monochrome
+Color palette (CSS hex):
+  --color-bg:       #E9ECEC
+  --color-surface:  #C9D2D4
+  --color-muted:    #8C9A9E
+  --color-fg:       #44545B
+  --color-ink:      #11171B
+  --color-accent:   #4A6FA5
+  --color-error:    #B23A48
+  --color-warning:  #C89B3F
+Typography: square angular sans-serif (Söhne preferred, Inter Variable
+            fallback); no rounded glyphs; modular scale 1.250
+Corner radius: 4px throughout — no pill shapes
+Motion: transition: all 160ms ease-out
+Density: dense (32px table rows, 8px card padding)
+Surface: flat — no shadows, borders define edges
+
+Design-Thinking Framework:
+  Purpose: enable on-call triage in under 60 seconds per incident
+  Tone: terse, signal-dense, no decorative copy
+  Constraints: 32px row height minimum (accessibility), accent reserved
+               for actionable items only
+  Differentiation: this is a data-engineer tool, not a marketing
+                   dashboard — no card-style metric tiles, no playful
+                   illustrations, no progress-ring widgets
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, or Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Card-style KPI tiles with shadows and rounded corners
+  - Centered-hero with single CTA
+  - Bouncy spring easing on hover
+  - Pulse animations on idle elements
+  - Glassmorphism, neumorphism, generic "modern SaaS" defaults
+
+If you find yourself defaulting to any of these, stop and ask me to
+clarify the aesthetic before continuing.
+```
+
+Expected follow-up turns:
+
+1. Turn 2: add layer 4 (typography modular scale specifics, semantic color roles, motion easing curves)
+2. Turn 3: add layer 5 (grading criteria weighting — craft and functionality at 0.4 and 0.3, design quality 0.2, originality 0.1)
+3. Turn 4+: Tweak panel takes over for surgical edits
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration, launch post
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — GLCA framework, three canonical examples
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading criteria, non-monotonic improvement
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Design-Thinking Framework, AI-slop avoid-list
+- `https://claude.com/blog/improving-frontend-design-through-skills` — default-avoidance blog post
+
+Re-research trigger: Anthropic updating the Design-Thinking Framework; new canonical examples added to get-started article; AI-slop avoid-list materially extended.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/frontier-design.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/frontier-design.md
new file mode 100644
index 0000000..2bc3ceb
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/frontier-design.md
@@ -0,0 +1,149 @@
+# Preset: frontier-design
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+
+Evidence grade: Experimental — no validated practitioner pattern as of 2026-05-16. Frontier design is currently marketing language for "elaborate variants of the other presets," not a distinguishable generation mode practitioners can reliably invoke today.
+
+This file documents what Anthropic publishes about the `frontier-design` preset, what practitioners have shipped (nothing verified), what adjacent material exists, and the single experimental pattern the plugin offers — clearly labelled as unverified speculation. The honest position the plugin takes is in Section (e).
+
+---
+
+## (a) What Anthropic says
+
+Anthropic's launch post `https://anthropic.com/news/claude-design-anthropic-labs` describes `frontier-design` in a single sentence (verbatim):
+
+> code-powered prototypes with voice, video, shaders, 3D and built-in AI
+
+This is the entirety of Anthropic's per-preset documentation as of the 2026-05-16 captured-on date. There is no dedicated tutorial, no support article, no canonical prompt set, no Anthropic-published example artifact.
+
+The launch sentence implies the preset targets:
+
+- Code-powered prototypes (not static designs) — implying interactive elements at minimum
+- Voice (audio playback, speech recognition, voice UI)
+- Video (embedded video playback, possibly video-driven UI)
+- Shaders (WebGL, custom GLSL shaders, GPU-driven visual effects)
+- 3D (WebGL 3D scenes, possibly Three.js or similar)
+- Built-in AI (LLM-driven interactions inside the artifact)
+
+Anthropic's framing suggests `frontier-design` is the preset for showpiece artifacts demonstrating Claude Design's outer-edge capabilities — not a workhorse preset like `designs`, `prototypes`, or `slides`.
+
+---
+
+## (b) What practitioners have shipped
+
+Verifiable practitioner outputs as of 2026-05-16: **NONE that we could verify.**
+
+The most explicit acknowledgment of this gap comes from `https://llmx.tech/blog/claude-design-hands-on-review-2026` (cited in `research/03`):
+
+> ...no frontier design assessment provided. The hands-on review covers designs, prototypes, slides, and one-pagers. Frontier design is named in the preset list but received zero hands-on evaluation, because no practitioner artifact has been published demonstrating what the preset produces in practice.
+
+Across the community sources surveyed in `research/03` (Substack walkthroughs, awesome-claude-design lists, Twitter / X threads, MindStudio walkthroughs, sagnikbhattacharya, victordibia, theadpharm, claudefa.st, etc.), no practitioner has published a verifiable frontier-design artifact with prompt, output, and reproduction steps. The preset is named, occasionally referenced, but not demonstrated.
+
+This may change. The preset is new (April 2026 launch); practitioner adoption lags. The `.coverage.md` re-research trigger explicitly flags "first verified frontier-design practitioner artifact ships publicly" as a refresh trigger for this file.
+
+---
+
+## (c) Adjacent material
+
+While no `frontier-design`-specific Anthropic or practitioner material exists, two adjacent sources cover the underlying capabilities Anthropic names.
+
+### Motion and spatial composition — `frontend-design/SKILL.md`
+
+`https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` publishes Anthropic's guidance on motion (easing curves, timing tiers, what to animate and what not to) and spatial composition (typography hierarchy, surface depth, layered backgrounds). These are the building blocks the `frontier-design` preset would extend with voice / video / shaders / 3D, but the building blocks themselves are general-purpose.
+
+### Animated and 3D websites — MindStudio walkthrough
+
+MindStudio's 2026-04-28 walkthrough (cited in `research/03`) covers prompting Claude for animated and 3D websites — but the walkthrough is set in adjacent Anthropic surfaces (Claude.com chat with an HTML artifact), not in `claude.ai/design` with the `frontier-design` preset specifically. The walkthrough is useful for the prompt-engineering pattern (naming GLSL fragment shader constraints, polygon-count budgets, voice-prompt structuring) but is not a frontier-design-preset artifact.
+
+---
+
+## (d) Single experimental pattern (unverified speculation)
+
+One experimental pattern, clearly labelled as unverified, that an operator could try if they want to engage with the preset despite the gap.
+
+The pattern comes from Google's Gemini deep-research output (cited in `research/03`) and carries low confidence. It is a constraint-language pattern for shader and physics elements, adapted from broader frontend-design practice:
+
+```
+[layers 1 through 5 of the standard prompt stack from
+ ../01-prompt-fundamentals.md]
+
+Frontier capabilities to engage:
+
+  Shaders:
+    - One custom GLSL fragment shader applied to the hero region
+    - Shader pattern: [name the visual character — e.g.,
+      "subtle gradient flow with imperceptible noise" or
+      "iridescent surface reacting to cursor position"]
+    - Frame budget: 60fps target on Apple M1 / equivalent
+    - No fullscreen shader-bombs (battery / heat / accessibility)
+
+  3D:
+    - One 3D element in the hero region, scene-bounded (no fullscreen)
+    - Polygon count budget: <50,000 triangles
+    - Lighting: 2-3 light sources max
+    - Camera: fixed or single-axis orbit; no free-camera
+
+  Voice:
+    - [if voice UI relevant] one voice-driven interaction, with
+      visible text-transcript fallback
+    - Speech-recognition language and accent assumptions named
+      explicitly
+
+  Video:
+    - [if video element relevant] embedded video with explicit
+      autoplay/no-autoplay decision; explicit captions decision
+
+  Built-in AI:
+    - [if applicable] one LLM-driven interaction in the artifact
+    - Explicit fallback for when the LLM call fails
+
+Test in target browsers (Chrome, Safari, Firefox) at the target device
+class (M1 / M2 desktop, mid-range mobile). Expect aesthetic drift
+across runs; non-monotonic improvement applies amplified for frontier
+capabilities.
+```
+
+Confidence rating on this pattern: **low**. It is a reasoned extrapolation from frontend-design principles, not a tested frontier-design prompt. If you try it, document what works and what does not — there is a community gap to fill.
+
+---
+
+## (e) The plugin's honest position
+
+The plugin's stance on `frontier-design`:
+
+If you want to attempt frontier design, treat it as a high-fidelity prototype (`prototypes` preset) with extra constraint language for shaders, polygons, voice, video, and built-in AI. Expect aesthetic drift on first generations. Verify that your output works in target browsers before committing chat-turn budget to refinement. Expect that the model's prior on what "frontier design" means may differ from yours — over-specify everything that matters.
+
+Do not assume `frontier-design` produces a categorically different artifact from `prototypes` + extra capability constraints. The launch sentence is suggestive; the practitioner evidence is absent. The preset is marketing language for elaborate prototype variants until proven otherwise.
+
+When the operator names `frontier-design` specifically:
+
+1. Read this file with them
+2. Confirm they have understood the practitioner-evidence gap
+3. Offer the experimental pattern in Section (d) as a starting point, clearly labelled as unverified
+4. Treat the resulting artifact as exploratory — surface what worked and what did not, contribute back to the community gap
+5. Plan for amplified non-monotonic-improvement (`../03-iteration-and-session.md`) — frontier capabilities compound the standard non-monotonic risk
+
+---
+
+## (f) Re-research trigger
+
+This file refreshes when any of the following happens:
+
+- Anthropic publishes a dedicated tutorial, support article, or canonical prompt set for `frontier-design`
+- A verified practitioner artifact appears publicly with prompt + output + reproduction steps
+- The launch-post one-sentence description changes materially
+- A community pattern reaches enough adoption to be cited (not speculation) — the `awesome-claude-design` lists and adjacent practitioner blogs are the primary surfaces to watch
+
+When any of these triggers, update Section (b) to reflect verified material, replace Section (d) with the verified pattern, and re-grade the evidence label from "Experimental" to "Community-only" or "Anthropic-documented + community-validated" as appropriate.
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — Anthropic's verbatim one-sentence description (the entirety of Anthropic-published material on this preset)
+- `https://llmx.tech/blog/claude-design-hands-on-review-2026` — community practitioner explicitly noting the frontier-design evaluation gap
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — adjacent material on motion and spatial composition
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — non-monotonic-improvement framing (amplified here)
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list (composed for frontier prompts)
+
+Re-research trigger: see Section (f). The preset is the most volatile in this plugin's coverage; expect this file to refresh first when Anthropic ships material or practitioners publish artifacts.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/marketing-collateral.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/marketing-collateral.md
new file mode 100644
index 0000000..8e9c6b7
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/marketing-collateral.md
@@ -0,0 +1,218 @@
+# Preset: marketing-collateral
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+Evidence grade: Community-only — Anthropic publishes no per-preset prompt patterns for this preset as of 2026-05-16.
+
+Anthropic names `marketing-collateral` in the launch enumeration at `https://anthropic.com/news/claude-design-anthropic-labs` but publishes no dedicated tutorial. The patterns below come from community practitioners; treat them as field-tested but not Anthropic-authoritative. Anthropic's frontend-design open-source skill at `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` is the closest adjacent Anthropic source — it covers landing-page and marketing-site design philosophy without per-preset prompts.
+
+---
+
+## (a) What this preset is
+
+Anthropic launch post one-sentence description: `marketing-collateral` covers landing pages, social variants, banner ads, email creative, and other visual assets in the marketing surface area. Output is typically HTML for landing pages, image-shaped for social and ads.
+
+Distinguishing properties:
+
+- Conversion-oriented — the artifact has a measurable goal (signups, clicks, opens)
+- Multi-format — a single campaign typically needs landing page + social variants + email + ad creative
+- Brand-anchored — marketing collateral lives or dies on brand fidelity; a DESIGN.md is essentially mandatory
+- Variant-heavy — A/B testing assumes multiple variants of the same creative
+
+---
+
+## (b) Why Anthropic published no per-preset guidance
+
+The launch enumeration treats marketing-collateral as a destination shape rather than a distinct generation mode. The frontend-design open-source skill (`https://github.com/anthropics/skills/skills/frontend-design/SKILL.md`) is the closest thing Anthropic publishes — it covers the design-philosophy layer (Purpose / Tone / Constraints / Differentiation) but not marketing-specific prompt patterns.
+
+Community practitioners have built patterns around landing-page composition, social-variant fan-out, and competitor-screenshot extraction (Section c).
+
+---
+
+## (c) Community patterns
+
+### chatprd.ai landing-page workflow
+
+Community pattern from `https://chatprd.ai` (cited in `research/03`): a four-stage landing-page production flow optimised for Claude Design:
+
+1. **Brief stage** — define the audience, the value prop, the one CTA, the proof points. Output: text document, not in Claude Design yet.
+2. **Outline stage** — translate the brief into a section-by-section landing-page outline. Hero, problem, solution, features (3-grid or 4-grid), proof (logos / quotes / numbers), pricing or single-CTA, FAQ, footer. Output: text outline.
+3. **Visual stage** — brief Claude Design from the outline using layers 1-5. First turn produces the landing page; iteration tightens.
+4. **Variant stage** — once the master landing page works, generate variants for A/B testing (different hero, different proof-point ordering, different CTA framing) using the variant-fan-out pattern below.
+
+The four-stage workflow separates copy decisions from visual decisions, which lets the operator iterate each independently. The community-documented failure mode is briefing visual + copy together in one prompt — the model conflates the two and produces a generic landing page.
+
+### Sagnik Bhattacharya variant-fan-out for social
+
+Community pattern from `https://sagnikbhattacharya.com/blog/claude-design` (cited in `research/03`): for social-format collateral (Instagram square, LinkedIn rectangle, Twitter / X aspect), generate N variants in parallel rather than sequentially. The brief pattern:
+
+```
+Generate 6 variants of the [campaign] creative, sized for [format
+spec]. Across the 6:
+  - Vary the headline framing (problem-led, solution-led,
+    proof-led)
+  - Vary the visual hierarchy (text-dominant, image-dominant,
+    balanced)
+  - Vary the color emphasis (accent-dominant, monochrome,
+    high-contrast)
+  - Keep the value prop, audience, and CTA identical across all 6
+
+Output as 6 distinct artifacts I can A/B test.
+```
+
+The pattern produces a campaign-set in one chat turn rather than six iterations.
+
+### Competitor-screenshot visual-reference extraction
+
+Community pattern (cited in `research/03`): when the operator has a competitor's marketing page that visually achieves what they want, screenshot it and brief Claude Design with the screenshot as a visual reference, paired with an explicit "do not copy; extract the visual-language principles" instruction:
+
+```
+The attached screenshot shows [competitor]'s landing page. Do NOT
+copy the structure, the copy, or the layout. DO extract the
+visual-language principles:
+  - typography character (named family + scale + weights)
+  - color temperature and palette structure
+  - visual density (how much whitespace, how many elements per fold)
+  - motion language (if visible from the screenshot or apparent from
+    the brand)
+  - overall aesthetic family (named with concrete reference)
+
+Apply those principles to our landing page, which has a fundamentally
+different structure, copy, and CTA flow. Output our landing page
+respecting the extracted visual language but original in structure.
+```
+
+The pattern is high-leverage when the operator has a clear visual reference but cannot articulate it in DESIGN.md form. The risk: too-literal copying produces a derivative-feeling artifact. Brief the "extract, do not copy" constraint explicitly.
+
+### Slop-fingerprints warning amplified
+
+Marketing collateral is the surface where AI-slop fingerprints are most punishing. The teal gradient + serif headline + blinking status dot + container-on-container + glassmorphism pattern is recognisable across many AI-generated landing pages. Audiences pattern-match on it and discount the artifact. Layer 3 negative constraints apply with extra weight:
+
+```
+Negative constraints — do not produce any of:
+  - Teal-to-blue or teal-to-green gradients
+  - Serif headline on sans-serif body (unless explicitly briefed for
+    editorial direction)
+  - Blinking / pulsing status indicators ("Live", "New", "Updated")
+  - Container-on-container layouts (card-inside-card)
+  - Glassmorphism or neumorphism on any element
+  - Generic "modern SaaS landing page" template defaults
+  - Stock-photo abstract gradient hero imagery
+```
+
+---
+
+## (d) Critical caveats
+
+### Brand fidelity is the dominant failure mode
+
+Marketing collateral without a tight DESIGN.md anchor produces generic output. The brand DESIGN.md is essentially mandatory — see `../02-design-md.md` for the extractor pattern when the operator does not already have one. Validate brand fidelity at every iteration: typeface, color palette, voice (tone of copy), visual density. Brand drift on marketing collateral is more visible to the audience than brand drift on internal artifacts.
+
+### A/B testing requires more than aesthetic variation
+
+The variant-fan-out pattern produces aesthetic variations. For meaningful A/B testing, the variants should test specific hypotheses (does problem-led headline outperform solution-led? does image-dominant outperform text-dominant?) rather than test generic aesthetic variation. Brief the hypotheses explicitly.
+
+### Export-to-image for social formats
+
+Social-format collateral typically exports as PNG or JPG (Claude Design produces HTML; the operator screenshots at the target dimensions). The export is lossy for hover states, interactive elements, and motion. Brief the static state explicitly when the destination is image:
+
+```
+The destination for this creative is a static PNG/JPG export. Generate
+the static state only. No hover states, no interaction logic, no motion.
+```
+
+---
+
+## (e) One worked prompt — layers 1 + 3 composed, four-stage landing-page flow
+
+Goal: a landing page for a developer-tools SaaS product, audience is senior engineers evaluating dev tools.
+
+```
+Goal: A landing page for "ObserveAPI", a developer-tools SaaS product
+      for API observability. The goal: convert senior-engineer
+      visitors to free-trial signups.
+Layout: Hero (above-fold), problem (one paragraph + 3 pain points
+        as labelled rows), solution (one paragraph + product
+        screenshot), features (3-grid), proof (3 customer logos +
+        one quote + one named metric), pricing (single tier + free
+        trial CTA), FAQ (4 questions), footer (links + secondary
+        CTA)
+Content: Real product positioning, real customer logos (placeholder
+         names but realistic shapes), real metric numbers, real
+         FAQ content. No lorem ipsum.
+Audience: Senior engineers, ages 30-50, evaluating dev tools,
+          allergic to marketing fluff, allergic to AI-generated
+          landing page fingerprints, will scroll fast and bounce
+          fast unless the headline lands
+
+Stage 1 (brief): Audience = senior engineers, value prop = "the
+                 first API observability tool that doesn't require
+                 you to instrument anything", CTA = "Start free
+                 trial", proof points = 3 customer logos + one
+                 quote + one metric
+Stage 2 (outline): use the layout above
+Stage 3 (visual): use the brief below
+Stage 4 (variants): defer to next session
+
+Aesthetic family: developer-confident — like Linear's marketing site
+                  meets the editorial confidence of The New York Times
+                  opinion section. No flourish, every claim earns its
+                  place, headline is a claim not a tagline.
+Color palette (CSS hex):
+  --color-bg:       #FAFAF8
+  --color-surface:  #FFFFFF
+  --color-muted:    #6B6B6B
+  --color-fg:       #2A2A2A
+  --color-ink:      #0A0A0A
+  --color-accent:   #2D6356
+Typography: Söhne (preferred — concrete-named) or Inter Variable;
+            modular scale 1.333; weight palette 400 body / 600
+            emphasized / 700 hero headline
+Corner radius: 4px on buttons and cards; full-bleed hero
+Motion: transition: all 160ms ease-out on hover; no auto-play motion
+        anywhere
+Density: comfortable above the fold (5 elements max), denser below
+         the fold (features grid, proof, FAQ)
+Surface: flat — single subtle border or single subtle shadow on
+         cards, never both
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, Space Grotesk as primary typeface
+  - Teal-to-blue or teal-to-green gradients
+  - Serif headline on sans-serif body
+  - Blinking / pulsing status indicators
+  - Container-on-container layouts
+  - Glassmorphism, neumorphism
+  - Generic "modern SaaS landing page" defaults
+  - Stock-photo abstract gradient hero imagery
+  - Three-column feature grid with icon + headline + line (default
+    fingerprint)
+  - Centered-hero with single CTA (default fingerprint)
+
+If you find yourself defaulting to any of these, stop and ask me to
+clarify before continuing.
+
+Brand DESIGN.md: ObserveAPI brand kit attached as project asset.
+                 Reference it at every section.
+```
+
+Expected follow-up turns:
+
+1. Turn 1: outline review (Stage 2)
+2. Turn 2: visual generation (Stage 3) at the brief above
+3. Turn 3: layer-4 dimension refinement (typography modular scale, semantic color roles, motion easing)
+4. Turn 4: layer-5 grading-criteria weighting (functionality 0.4, craft 0.3, design quality 0.2, originality 0.1 — landing pages weight functionality high)
+5. Turn 5+: Tweak panel for spacing and density adjustments
+6. Variant fan-out (Stage 4) in next session, against the approved master
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Anthropic's frontend-design skill (closest adjacent Anthropic source; Design-Thinking Framework, AI-slop avoid-list, four design dimensions)
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list (amplified for marketing collateral)
+- `https://chatprd.ai` — community four-stage landing-page workflow
+- `https://sagnikbhattacharya.com/blog/claude-design` — community variant-fan-out pattern for social formats
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading criteria (composed for marketing collateral)
+
+Re-research trigger: Anthropic publishing a marketing-collateral tutorial; community four-stage workflow drifting; new slop-fingerprint patterns emerging in the AI-generated landing-page corpus; competitor-screenshot extraction patterns evolving.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/one-pagers.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/one-pagers.md
new file mode 100644
index 0000000..c0c83db
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/one-pagers.md
@@ -0,0 +1,168 @@
+# Preset: one-pagers
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+Evidence grade: Community-only — Anthropic publishes no per-preset prompt patterns for this preset as of 2026-05-16.
+
+Anthropic names `one-pagers` in the launch enumeration at `https://anthropic.com/news/claude-design-anthropic-labs` but does not publish a dedicated tutorial, support article, or canonical prompt set for it. The patterns below come from community practitioners — Substack walkthroughs, blog posts, newsletter pieces — with full attribution. Treat them as field-tested but not Anthropic-authoritative.
+
+---
+
+## (a) What this preset is
+
+Anthropic launch post one-sentence description: a one-pager is a single-screen artifact for memos, summaries, leave-behinds, executive briefs, or single-page deliverables. The destination is typically PDF or print.
+
+Distinguishing properties:
+
+- Single page — no multi-screen navigation, no scrolling sections that imply continuation
+- High information density compared to a slide
+- Self-contained narrative — reader does not need surrounding context
+- Often delivered as a leave-behind after a meeting or as a one-shot brief
+
+---
+
+## (b) Why Anthropic published no per-preset guidance
+
+The launch enumeration treats one-pagers as a destination shape rather than a generation mode requiring distinct prompt patterns. The Goal / Layout / Content / Audience framework (`../01-prompt-fundamentals.md` Layer 1) and the five-layer stack apply directly — Layout becomes single-page structure, Content becomes the dense information payload, Audience tightens the tone.
+
+Community practitioners have converged on patterns that constrain the one-pager preset more tightly than the generic stack does (Sections c and d).
+
+---
+
+## (c) Community patterns
+
+### Word-count cap per block
+
+Community pattern from `https://sagnikbhattacharya.com/blog/claude-design` (cited in `research/03`): cap the word count per layout block in the brief. The mechanism — Claude Design defaults to verbose prose when block content is unspecified, and one-pagers fail when any block runs long. The convergent caps from community practice:
+
+- Title block: 8 words max
+- Subtitle: 15 words max
+- Body paragraph: 60 words max
+- Bullet item: 12 words max
+- Callout box: 25 words max
+
+Brief the caps explicitly in the prompt — the model otherwise produces blocks 2-3x longer than the operator wants.
+
+### Above-the-fold density limit
+
+Community pattern from `https://newsletter.victordibia.com` (cited in `research/03`): cap the number of distinct elements visible in the top half of the one-pager. Convergent limits:
+
+- Maximum 5 distinct visual elements above the fold (counting title, subtitle, one body block, one visual, one callout = 5)
+- Maximum 3 colour roles visible above the fold (typically: ink for title, fg for body, accent for one emphasis)
+- Maximum 2 typographic weights above the fold (typically 700 title, 500 body)
+
+The brief encodes these as explicit constraints:
+
+```
+Above the fold (top half of the page), no more than 5 distinct visual
+elements, no more than 3 color roles, no more than 2 typographic
+weights. Density below the fold can scale up.
+```
+
+### Real-data injection over lorem ipsum
+
+Same pattern as `designs.md` and `prototypes.md`: use realistic placeholder content. For one-pagers specifically, this matters more — a one-pager is typically read once and discarded; if the content reads as placeholder, it loses the reader.
+
+---
+
+## (d) Critical caveats
+
+### Density-versus-readability trade-off
+
+One-pagers are constrained by physical reading mechanics — the operator can pack a lot into one page, but each element added reduces the reader's attention to every other element. The brief should weight density-vs-readability explicitly:
+
+```
+Optimise for the reader's ability to extract the takeaway in 30 seconds
+of scanning. If a block requires more than 30 seconds of focused reading
+to extract the takeaway, it does not belong on this one-pager.
+```
+
+### Export to PDF preserves layout; export to other formats may not
+
+PDF is the canonical one-pager export. HTML standalone works. PPTX is awkward for one-pagers (PPTX assumes deck format, not single-page format). Code-handoff is rare for one-pagers but works.
+
+### Anthropic AI-slop avoid-list still applies
+
+Layer 3 negative constraints (`../01-prompt-fundamentals.md`) apply with full force on one-pagers — the dense information context does not exempt the artifact from the avoid-list. Inter, Roboto, Arial, purple gradients on white, generic-modern defaults all degrade the one-pager.
+
+---
+
+## (e) One worked prompt — layers 1 + 3 composed (Layer 2a is preset-optional)
+
+Goal: an executive one-pager summarizing a project's Q1 status, audience is VP of Engineering.
+
+```
+Goal: A single-page executive summary of the platform team's Q1 2026
+      delivery, reliability, and Q2 themes. Designed to be scanned in
+      30 seconds and absorbed in 3 minutes.
+Layout: Single-page A4 portrait. Top quarter: title + headline takeaway
+        + 3 KPI numbers in a row. Middle half: 3 short body paragraphs
+        (one per: delivery, reliability, Q2 themes). Bottom quarter:
+        callout box with the one explicit ask + signature/contact block.
+Content: Real KPI numbers (% completion, MTTR minutes, uptime %); real
+         body content (no lorem ipsum); explicit ask is one sentence;
+         contact block names the person + email
+Audience: VP of Engineering, scanning between meetings, needs the
+          takeaway and one ask, will dive into details only if the
+          takeaway warrants it
+
+Word-count caps (community pattern from
+https://sagnikbhattacharya.com/blog/claude-design):
+  - Title block: 8 words max
+  - Subtitle / headline takeaway: 15 words max
+  - Body paragraph: 60 words max
+  - Bullet item: 12 words max
+  - Callout box: 25 words max
+
+Above-the-fold density limit (community pattern from
+https://newsletter.victordibia.com):
+  - Maximum 5 distinct visual elements above the fold
+  - Maximum 3 color roles visible above the fold
+  - Maximum 2 typographic weights above the fold
+
+Aesthetic family: editorial-confident — terse, signal-dense, no flourish
+Color palette (CSS hex):
+  --color-bg:       #FAFAF8
+  --color-surface:  #FFFFFF
+  --color-muted:    #6B6B6B
+  --color-fg:       #2A2A2A
+  --color-ink:      #0A0A0A
+  --color-accent:   #3D5C8A
+Typography: Söhne or Inter Variable; modular scale 1.250; weight palette
+            500 body / 700 headings
+Corner radius: 4px on the callout box only; rest is flat
+Motion: none (one-pager is static)
+Density: dense (8mm margins, 4mm gutters)
+Surface: flat — no shadows
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, or Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Card-style metric tiles with shadows
+  - Centered-title-and-subtitle generic header
+  - Pulse / breathing animations (this is a static one-pager)
+  - Generic "executive summary template" defaults
+
+Optimise for the reader's ability to extract the takeaway in 30 seconds
+of scanning. If a block requires more than 30 seconds of focused reading
+to extract the takeaway, it does not belong on this one-pager.
+```
+
+Expected follow-up turns:
+
+1. Turn 2: tighten word counts if any block ran over cap
+2. Turn 3: refine callout-box positioning if it competes with the headline takeaway
+3. Turn 4+: Tweak panel for spacing scale and density adjustments
+4. Export to PDF; visual-audit at 100% zoom and at print size
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration, one-sentence description
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — GLCA framework (composed in this preset)
+- `https://sagnikbhattacharya.com/blog/claude-design` — community pattern for word-count caps per block
+- `https://newsletter.victordibia.com` — community pattern for above-the-fold density limits
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list (composed)
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Design-Thinking Framework reference
+
+Re-research trigger: Anthropic publishing a dedicated tutorial for one-pagers; community word-count caps drifting; new one-pager-specific community pattern emerging.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/pitch-decks.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/pitch-decks.md
new file mode 100644
index 0000000..f33a6d0
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/pitch-decks.md
@@ -0,0 +1,198 @@
+# Preset: pitch-decks
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Evidence grade:** Community-only — Anthropic publishes no per-preset prompt patterns for this preset as of 2026-05-16.
+
+Evidence grade: Community-only — Anthropic publishes no per-preset prompt patterns for this preset as of 2026-05-16.
+
+Anthropic names `pitch-decks` in the launch enumeration at `https://anthropic.com/news/claude-design-anthropic-labs` but publishes no dedicated tutorial. **Critical caveat upfront:** community practitioner `https://moda.app/blog/claude-design-for-pitch-decks` documents an explicit recommendation against using Claude Design for external/investor pitch decks when PPTX is the required delivery format — see Section (d).
+
+---
+
+## (a) What this preset is
+
+Anthropic launch post one-sentence description: `pitch-decks` covers investor pitches, external partner proposals, and any high-stakes presentation format that needs to look polished. The preset distinguishes itself from the more general `slides` preset by audience — external rather than internal — and by typical destination — PPTX or PDF rather than HTML.
+
+The distinguishing question vs `slides`: **is the audience an external investor or external partner where the deck represents the company's positioning?** Yes → `pitch-decks`. Internal audience → `slides`.
+
+---
+
+## (b) Why Anthropic published no per-preset guidance
+
+Anthropic likely treats pitch-decks as a high-stakes specialisation of `slides` rather than a fundamentally distinct generation mode. The `slides` tutorial at `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` covers the prompt patterns; the `pitch-decks` preset inherits those patterns and adds the audience-stakes layer.
+
+Community practitioners have converged on patterns specific to pitch-deck production (Section c). The most important community contribution, however, is the PPTX-export caveat (Section d) — the failure mode is severe enough that the default recommendation diverges from `slides`.
+
+---
+
+## (c) Community patterns
+
+### Sagnik Bhattacharya's 10-slide template
+
+Community pattern from `https://sagnikbhattacharya.com/blog/claude-design` (cited in `research/03`): the convergent 10-slide pitch-deck template for B2B SaaS pitches:
+
+1. Title — company name, one-line positioning, tagline
+2. Problem — who has it, what it costs them, how acute
+3. Solution — what we built, one-sentence value prop
+4. Market — TAM / SAM / SOM (sized realistically)
+5. Product — 2-3 screenshots or visual demos
+6. Business model — how we charge, ACV ranges, GTM motion
+7. Traction — revenue, growth rate, named customers
+8. Team — founders + key hires, why this team for this problem
+9. Competition — competitive map (4-quadrant or named comparisons)
+10. Ask — funding round size, use of funds, timeline
+
+The template is community-converged, not Anthropic-published. It composes with Anthropic's `slides` tutorial patterns from `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks`.
+
+### MindStudio per-slide micro-prompts
+
+Community pattern from MindStudio (cited in `research/03`): rather than briefing the full pitch deck in one prompt, micro-prompt each slide individually. The pattern produces tighter per-slide narrative because each slide gets dedicated attention.
+
+The micro-prompt pattern (per slide):
+
+```
+Generate slide N of the pitch deck. This slide does one job:
+[the slide's job — e.g., "convince the audience that the problem is
+acute by quantifying customer cost"].
+
+Visual elements: [specific to this slide — e.g., "one large number
+showing annual cost, two supporting smaller numbers, one explanatory
+sentence"].
+
+Constraints from DESIGN.md: [reference the project's DESIGN.md].
+
+Do not include filler — every element on this slide must support the
+one job.
+```
+
+Walk through slides 1-10 sequentially.
+
+### Outline-first scaffolding (composed from `slides.md`)
+
+The outline-first pattern from `slides.md` Section (d) applies: brief the deck as an outline first (turn 1), then expand to full slides (turn 2-N).
+
+---
+
+## (d) Critical caveats
+
+### PPTX export trap — explicit recommendation against external pitch decks
+
+Community-documented at `https://moda.app/blog/claude-design-for-pitch-decks` (cited in `research/03`) and `https://claudedesign.substack.com`: when an HTML-rendered pitch deck is exported to PPTX, richly-styled text can flatten to images. PowerPoint loses the editability — the text becomes a rasterised picture.
+
+For internal slide decks (audience tolerates some export friction), the operator can mitigate by keeping typography simple. For external pitch decks (audience expects polish, may want to add their own annotations or edit the deck), this failure mode is severe enough that the community recommendation is:
+
+> Do not use Claude Design for external/investor pitch decks where PPTX export is the required delivery format. Use HTML standalone or PDF if Claude Design is required; otherwise produce the deck in PowerPoint or Keynote directly.
+
+This plugin surfaces the recommendation but does not refuse to operate. The operator may have a reason to proceed (HTML acceptable, PDF acceptable, the PPTX text-as-text survival is verified to be acceptable for their specific styling). When proceeding, validate PPTX export early — generate slide 1 fully, export to PPTX, verify text-as-text survival, then commit to the deck.
+
+### Audience-stakes asymmetry
+
+A pitch deck for a $50M Series C carries different stakes than a pitch deck for a $500K seed extension. The operator's tolerance for export imperfection scales with the dollar amount on the line. Default conservatively — when in doubt about whether the export will survive, treat the deck as high-stakes.
+
+### Slop-fingerprints warning amplified
+
+Layer 3 negative constraints apply with extra weight on pitch decks. Investors see many decks; AI-slop fingerprints (purple gradients, generic three-column structure, Inter typography, centered-hero defaults, glassmorphism, neumorphism) signal that the deck is templated and the team did not invest care. The brief should over-specify the negative constraints.
+
+---
+
+## (e) One worked prompt — layers 1 + 3 composed, slide-by-slide micro-prompt pattern
+
+Goal: a 10-slide investor pitch deck for a B2B SaaS observability product, audience is Series A investors.
+
+```
+PRECONDITION: Before generating any slide, render slide 1 fully and
+export to PPTX. Verify text-as-text survival. If text flattens to
+images, switch destination to HTML standalone or PDF and notify me
+before continuing.
+
+Goal: A 10-slide Series A pitch deck for a B2B SaaS observability
+      product
+Layout (outline — per Sagnik Bhattacharya's 10-slide template at
+        https://sagnikbhattacharya.com/blog/claude-design):
+  1. Title
+  2. Problem
+  3. Solution
+  4. Market (TAM / SAM / SOM)
+  5. Product (2-3 visual demos)
+  6. Business model
+  7. Traction (revenue, growth, named customers)
+  8. Team
+  9. Competition
+ 10. Ask
+Content: Real numbers, real customer names, real founder names, real
+         competitive references. No lorem ipsum, no placeholder logos.
+Audience: Series A investors at top-tier funds, ages 35-55, see 50+
+          decks per quarter, allergic to template fingerprints
+
+Aesthetic family: editorial-confident — like Andreessen Horowitz pitch
+                  decks meets Linear's design language. Authoritative,
+                  no flourish, every visual element earns its place.
+Color palette (CSS hex):
+  --color-bg:       #FAFAF8
+  --color-surface:  #FFFFFF
+  --color-muted:    #6B6B6B
+  --color-fg:       #2A2A2A
+  --color-ink:      #0A0A0A
+  --color-accent:   #1A3552
+Typography: Söhne (preferred — concrete-named) or Inter Variable;
+            modular scale 1.333; weight palette 400 body / 600
+            emphasized / 700 slide titles
+Corner radius: 0 (full-bleed slides), 4px on any inline container
+Motion: none on static slides; ease-out 240ms on slide transitions
+Density: comfortable — one job per slide, generous spacing
+Surface: flat — full-bleed, no shadows
+
+Slide composition rules:
+  - Each slide does one job
+  - Slide titles are claims, not topics ("$2.4B addressable market"
+    not "Market")
+  - Body text is 2 lines max per slide
+  - One number, chart, or visual element per slide max
+  - Speaker notes carry depth; slides carry the takeaway
+
+Per-slide micro-prompt pattern (MindStudio, cited in research/03):
+  Generate slide N. Its one job: [name the job].
+  Visual elements: [specific to slide].
+  No filler — every element supports the one job.
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Three-column feature grid as a default slide structure
+  - Centered-title-and-subtitle on every slide
+  - Glassmorphism, neumorphism, gradient hero backgrounds
+  - Pulse / breathing animations or fly-in transitions
+  - Generic "investor pitch deck template" defaults
+  - Stock-photo placeholder imagery
+
+If you find yourself defaulting to any AI-slop pattern (per
+https://claude.com/blog/improving-frontend-design-through-skills),
+stop and ask me to clarify before continuing.
+
+Slop-fingerprints warning is amplified — investors recognise template
+patterns. Over-specify the aesthetic to push the deck out of default
+neighbourhood.
+```
+
+Expected follow-up turns:
+
+1. Turn 1 (precondition): slide 1 + PPTX export validation. If text flattens, switch destination.
+2. Turn 2: 10-slide outline approval
+3. Turn 3-12: per-slide micro-prompt for each slide
+4. Turn 13: full-deck render, cross-slide consistency check
+5. Turn 14: Tweak panel for spacing and density adjustments
+6. Export and visual-audit at full deck level
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration
+- `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` — Anthropic's slides tutorial (composed for pitch-decks)
+- `https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` — PowerPoint-mode conventions (relevant for PPTX export)
+- `https://moda.app/blog/claude-design-for-pitch-decks` — community-documented PPTX export caveat (load-bearing)
+- `https://claudedesign.substack.com` — community pattern reinforcing PPTX export caveat
+- `https://sagnikbhattacharya.com/blog/claude-design` — community 10-slide pitch-deck template
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list (amplified for pitch decks)
+
+Re-research trigger: Anthropic publishing a pitch-decks-specific tutorial; PPTX export behaviour changing (text-as-text survival improving or worsening); community 10-slide template drifting; new investor-deck pattern emerging.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/prototypes.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/prototypes.md
new file mode 100644
index 0000000..6433bf2
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/prototypes.md
@@ -0,0 +1,225 @@
+# Preset: prototypes
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Evidence grade:** Anthropic-documented + community-validated
+**Captured-on date:** 2026-05-16
+
+The `prototypes` intent preset generates interactive product flows for usability testing, design review, and stakeholder demos. Output is multi-screen HTML with working state transitions, clickable navigation, and per-state visual treatments. The preset is documented by Anthropic in a dedicated tutorial.
+
+---
+
+## (a) What this preset is
+
+Anthropic frames `prototypes` (launch post `https://anthropic.com/news/claude-design-anthropic-labs`) as the preset for product flows that need to behave like a real product, not just look like one. The distinguishing property vs `designs`: interaction state. Prototypes have hover states, active states, click-through transitions, multi-screen navigation, and per-state visual treatments.
+
+The dedicated tutorial is `https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux`. It is the load-bearing source for this preset.
+
+Output is HTML + React + inline CSS + JS (the JS makes the interactions work). Exportable to Code-handoff (engineering takes the working interaction logic forward) or HTML standalone (runs in a browser without Claude Design).
+
+---
+
+## (b) When to use it
+
+Pick `prototypes` when the goal is interactive validation. The decision matrix:
+
+| Operator goal | Preset |
+|---------------|--------|
+| Feature flow for usability testing (5-user study) | **prototypes** |
+| Internal tool demo for stakeholder review | **prototypes** |
+| A-B comparison of two design directions in working form | **prototypes** |
+| Onboarding flow walkthrough for new hire training | **prototypes** |
+| Static design exploration (no interaction needed) | designs |
+| Slide deck for a meeting | slides |
+
+If the operator describes the artifact in terms of "user clicks here, then sees this", they want `prototypes`. If they describe it in terms of "screen with these regions", they may want `designs`.
+
+---
+
+## (c) Anthropic-published prompt patterns
+
+The Anthropic tutorial `https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux` publishes nine canonical prompt patterns across four families:
+
+### Family 1 — Feature prototyping (4 verbatim canonical prompts)
+
+For new feature flows where the operator needs to test interaction logic. The patterns cover: a sign-in / sign-up multi-step flow; a checkout / payment flow with form validation states; a settings / preferences flow with toggles and selects; a search / filter flow with result-state transitions. Each prompt names entry point, success path, error states, and edge cases.
+
+Refer to the tutorial for the verbatim prompt text — Anthropic publishes the exact wording, and this plugin cites it by URL rather than copying it (per the brief's source-quality rule and the Apache-2.0/MIT compatibility note in `../04-handoff-and-scope.md`).
+
+### Family 2 — Design review and A-B comparison (2 verbatim canonical prompts)
+
+For prototyping when the goal is to compare two design directions side-by-side or in turn. The verbatim Anthropic comparison-prompt pattern:
+
+```
+Show me three different layouts for [feature]. For each:
+  - Visual direction (named, with concrete reference)
+  - Interaction model (where the user starts, where they end up)
+  - One-line rationale tying it to the audience and goal
+
+Once I pick one, generate the full interactive flow.
+```
+
+Use this for A-B-C exploration before committing to a direction. The pattern composes with layer 2b (propose-options-before-building) from `../01-prompt-fundamentals.md`.
+
+### Family 3 — User-flow scaffolding (1 verbatim canonical prompt)
+
+For mapping a multi-screen user journey. The pattern names the entry context, the screens in sequence, the decisions at each screen, and the success path vs the error paths. The output is a clickable multi-screen prototype with the navigation logic baked in.
+
+### Family 4 — Internal tools (2 verbatim canonical prompts)
+
+For internal-tooling prototypes — admin panels, content-moderation queues, customer-support consoles. The pattern emphasises dense interfaces, keyboard-driven navigation, and minimal aesthetic flourish. The patterns differ from external-product prototypes in tone and density.
+
+### Component-naming clarity, decision documentation, edge-case flagging
+
+The tutorial also publishes three transversal recommendations Anthropic asks operators to apply across all four families:
+
+- **Component-naming clarity** — name components in the brief so the generated artifact's component spec is engineering-handoff-ready (research/03 D2). Generic names like "Button1" produce generic component specs.
+- **Decision documentation** — ask Claude Design to document its design decisions inline (the PM-annotated notes feature) so the engineering handoff carries rationale, not just visuals.
+- **Edge-case flagging** — explicitly request that Claude Design flag interaction edge cases (empty state, loading state, error state, offline state, permission-denied state). The model defaults to happy-path-only without this directive.
+
+---
+
+## (d) Community uplift
+
+Three community-converged patterns extend Anthropic's published material for `prototypes`.
+
+### Request every state upfront
+
+Community pattern (`research/03`): explicitly request every interaction state in the first prompt rather than discovering missing states across iterations. The verbatim community phrasing:
+
+```
+For every interactive element in this prototype, generate:
+  - default state
+  - hover state
+  - active / pressed state
+  - focused state (keyboard navigation)
+  - disabled state
+  - loading state (if the element triggers async work)
+  - error state (if the element can fail)
+
+Render every state visibly somewhere in the prototype — either inline
+or in a dedicated state-catalogue page.
+```
+
+This catches the failure mode where the operator does not notice a missing state until a usability test surfaces it.
+
+### Real-data injection over lorem ipsum
+
+Same pattern as the `designs` preset, more important here: prototypes used in usability testing fail when the content is obviously fake. Test participants react to lorem ipsum and stop engaging with the flow. Use realistic content even when the prototype is throwaway.
+
+### Explicit motion timing and easing
+
+MindStudio community walkthrough (cited in `research/03`): name the easing curve and the duration explicitly for prototypes that include any motion. Default motion is the largest source of "feels like AI" in a prototype. The community-converged baselines for product prototypes:
+
+- Hover transitions: `transition: all 160ms ease-out`
+- Modal / drawer enter: `cubic-bezier(0.16, 1, 0.3, 1) 240ms`
+- Modal / drawer exit: `cubic-bezier(0.7, 0, 0.84, 0) 180ms`
+- Page transitions: `ease-out 280ms`
+
+---
+
+## (e) Critical caveats
+
+Three caveats specific to `prototypes`.
+
+### Interactive state count compounds context
+
+A prototype with 10 components × 7 states each = 70 distinct visual treatments in one artifact. Each treatment consumes context. Claude Design quality drops faster on prototypes than on `designs` for the same number of screens. Session-break heuristics (`../03-iteration-and-session.md`) apply with extra weight.
+
+### Test in target browsers before stakeholder review
+
+The standalone HTML export runs the prototype's JavaScript locally. Edge-case JavaScript (touch handlers, IntersectionObserver, ResizeObserver) does not always work the same across browsers. Test in Chrome + Safari + Firefox before sharing with stakeholders. If you target mobile usability testing, test on actual mobile devices, not just a browser DevTools mobile-emulation viewport.
+
+### Multi-screen exports — bundle in one export
+
+The token-cost trap in `../04-handoff-and-scope.md` Section 6 applies most strongly to multi-screen prototypes. Bundle all screens in one export turn; do not export screen-by-screen.
+
+---
+
+## (f) One end-to-end worked prompt — layers 1 + 2a + 3 composed
+
+Goal: a multi-step onboarding flow for a new SaaS analytics product, audience is small-business operators.
+
+```
+Goal: An interactive 5-step onboarding flow for new users of a SaaS
+      product. The flow: welcome → data-source connection → metric
+      selection → notification preferences → first-dashboard generation
+Layout: Single-column centered, fixed step indicator at top, primary
+        CTA at bottom of each step, secondary "back" link to top-left
+Content: Real product-facing copy (no lorem ipsum); step indicator
+         labels match the 5 steps verbatim; each step has a one-line
+         description below the step name; CTAs use action-verb naming
+         ("Connect your data", "Select your metrics", etc.)
+Audience: First-time users of a SaaS product, B2B small-business
+          operators, ages 30-55, comfortable with software but not
+          power-users
+
+Aesthetic family: warm-confident — like Linear's onboarding, like
+                  Notion's first-run, like Vercel's CLI prompts.
+                  Approachable but tight; never playful.
+Color palette (CSS hex):
+  --color-bg:       #FAFAF8
+  --color-surface:  #FFFFFF
+  --color-muted:    #6B6B6B
+  --color-fg:       #2A2A2A
+  --color-ink:      #0A0A0A
+  --color-accent:   #2D6356
+  --color-accent-hover: #1F4A41
+  --color-success:  #2D6356
+  --color-warning:  #C89B3F
+  --color-error:    #B23A48
+Typography: Söhne (preferred) or Inter Variable; modular scale 1.250;
+            weight palette 400 body / 500 emphasized / 600 headings
+Corner radius: 6px on cards, 4px on buttons and inputs
+Motion: transition: all 160ms ease-out on hover; cubic-bezier(0.16, 1,
+        0.3, 1) 240ms on step transitions
+Density: comfortable (44px touch targets, 16px card padding)
+Surface: subtle depth — 1px border + very subtle shadow on cards
+
+Interaction states (render every one for every interactive element):
+  default, hover, active, focused, disabled, loading, error
+
+Multi-screen requirements:
+  - Step 1: welcome — value prop in 2 sentences + Get Started CTA
+  - Step 2: data-source connection — list of 6 integrations with
+            connect buttons, hover states show "Connect" tooltip
+  - Step 3: metric selection — multi-select chip interface with 12
+            metric options, selection persists across step navigation
+  - Step 4: notification preferences — three toggle rows, with help-text
+            below each toggle
+  - Step 5: first-dashboard generation — loading state for 4-6 seconds,
+            then success state with "View Dashboard" CTA
+
+Edge cases to flag:
+  - Step 2 connection failure (network error visible)
+  - Step 3 zero metrics selected (CTA disabled, help-text appears)
+  - Step 5 generation timeout (recovery CTA appears)
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, or Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Centered-hero with single CTA (this is sequenced flow, not landing
+    page)
+  - Bouncy spring easing on hover
+  - Pulse animations on idle elements
+  - Generic "modern SaaS onboarding" template defaults
+```
+
+Expected follow-up turns:
+
+1. Turn 2: refine motion easing if step transitions feel sluggish or jumpy
+2. Turn 3: add layer 5 grading criteria (functionality 0.5, craft 0.3, design quality 0.2, originality 0)
+3. Turn 4+: Tweak panel for density and color-temperature adjustments
+4. Usability test surfaces missing states → iterate states via comments
+5. Export bundle for engineering handoff once stakeholders sign off
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration
+- `https://claude.com/resources/tutorials/using-claude-design-for-prototypes-and-ux` — verbatim canonical prompts (4 families, 9 prompts) + component-naming clarity + decision documentation + edge-case flagging recommendations
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — GLCA framework
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading criteria
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Design-Thinking Framework, AI-slop avoid-list
+
+Re-research trigger: Anthropic updating the prototypes tutorial; new canonical prompt family added; component-naming-clarity / decision-documentation / edge-case-flagging recommendations materially revised.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/slides.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/slides.md
new file mode 100644
index 0000000..5cb6c0b
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/slides.md
@@ -0,0 +1,237 @@
+# Preset: slides
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+**Evidence grade:** Anthropic-documented + community-validated
+**Captured-on date:** 2026-05-16
+
+The `slides` intent preset generates presentation decks — internal stakeholder updates, executive roadmaps, customer briefings, partner proposals, all-hands meetings. Output is HTML deck with per-slide layouts, optionally exportable to PPTX (with caveats — see Section e).
+
+---
+
+## (a) What this preset is
+
+Anthropic launch post (`https://anthropic.com/news/claude-design-anthropic-labs`) names `slides` as a destination-shaped preset: the artifact assumes the slide-deck format, not the dashboard / one-pager / prototype format. Output renders in the Claude Design canvas as a slide-by-slide thumbnail strip plus the active slide in full view.
+
+Two Anthropic primary sources ground this preset:
+
+- The dedicated tutorial `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` publishes five verbatim canonical prompts (Section c) and the slide-deck composition framework.
+- The PowerPoint-mode article `https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` publishes the PPTX export conventions and the template-respecting guidance: Claude reads the slide master, layouts, fonts, and color scheme of an uploaded PPTX template and produces output that respects them.
+
+The two sources compose: the tutorial covers the prompt patterns, the PowerPoint-mode article covers the export discipline.
+
+---
+
+## (b) When to use it
+
+Pick `slides` when the destination is a presentation surface. The decision matrix:
+
+| Operator goal | Preset |
+|---------------|--------|
+| Internal team update / project review | **slides** |
+| Customer-prep briefing for a sales call | **slides** |
+| Executive roadmap or quarterly business review (Q1/Q2/Q3/Q4 results) | **slides** |
+| Partner proposal / co-development pitch | **slides** |
+| All-hands or company-wide announcement | **slides** |
+| External investor pitch deck | **pitch-decks** (separate preset — see preset file for the PPTX trap) |
+| Single-page memo / one-pager | one-pagers |
+
+The distinguishing question vs `pitch-decks`: **is the audience internal or external?** Internal → `slides`. External investor → `pitch-decks` (with explicit caveat about PPTX export, see `pitch-decks.md`).
+
+---
+
+## (c) Anthropic-published prompt patterns
+
+The Anthropic tutorial `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` publishes five verbatim canonical prompts:
+
+### Pattern 1 — Q1 results deck
+
+For quarterly business review decks (Q1 / Q2 / Q3 / Q4 results). Pattern names the metrics in priority order, the audience seniority level, the narrative arc (where we started, what changed, where we are, what's next), and the supporting visualisations (charts, tables, callout numbers).
+
+### Pattern 2 — Executive roadmap
+
+For multi-quarter roadmap decks. Pattern names the roadmap horizon (quarters or half-years), the workstreams (3-7 named tracks), the major milestones per workstream, the dependencies between workstreams, and the assumptions / risks per quarter.
+
+### Pattern 3 — Customer-prep briefing
+
+For sales-call preparation decks. Pattern names the customer (company + named contacts), the meeting goal, the customer's known priorities, the value-prop alignment, the proof points (case studies, metrics), and the asks / next steps.
+
+### Pattern 4 — Partner proposal
+
+For co-development or partnership proposals. Pattern names the proposed scope, the resourcing model, the timeline, the success metrics, the IP / licensing model, and the open questions.
+
+### Pattern 5 — All-hands announcement
+
+For company-wide updates. Pattern names the announcement (one sentence), the why-now context, the impact on employees, the timeline, and the resources / Q&A links.
+
+Refer to the tutorial URL for the verbatim prompt text. This plugin cites by URL rather than reproducing Anthropic's exact wording (per the brief's source-quality rule and the Apache-2.0/MIT compatibility note in `../04-handoff-and-scope.md`).
+
+### Template-respecting guidance (verbatim from PowerPoint-mode article)
+
+`https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` publishes the verbatim guidance about uploading an existing PPTX template:
+
+> Claude reads the slide master, layouts, fonts, and color scheme of an uploaded PowerPoint template and produces output that respects them.
+
+Practical implication: if the operator has an existing brand-compliant PPTX template, upload it as a Claude Design project asset before prompting. The generated deck will respect the template's typography, color palette, and layout conventions. Without an uploaded template, the model defaults to its convergent middle-ground deck aesthetic.
+
+---
+
+## (d) Community uplift
+
+Three community-converged patterns extend Anthropic's material for `slides`.
+
+### Outline-first narrative scaffolding
+
+Community pattern (`research/03`): brief the deck as an outline first (turn 1: produce the slide-by-slide outline as a markdown bullet list), then expand to full slides (turn 2: generate the deck from the approved outline). This forks the conversation but produces tighter narrative arcs than briefing the full deck in one turn.
+
+The outline-first pattern composes with Anthropic's GLCA framework (`../01-prompt-fundamentals.md` Layer 1) — Goal becomes the deck's takeaway, Layout becomes the outline, Content becomes the per-slide bullets, Audience becomes the seniority + context match.
+
+### Single-job-per-slide constraint
+
+Community pattern (research/03): each slide should communicate exactly one idea. Slides with two or more ideas leak comprehension. Brief the constraint explicitly:
+
+```
+Each slide does one job. If a slide is trying to communicate two ideas,
+split it into two slides. The takeaway from each slide should be
+nameable in one sentence.
+```
+
+### Audience translation matrix
+
+Community pattern (research/03): brief the audience translation explicitly when the deck spans seniority levels. For example, a roadmap deck shared with both engineering leads and executive sponsors needs to translate technical decisions into business outcomes for the exec audience without losing fidelity for the engineering audience. The pattern:
+
+```
+For each slide, write two versions of the takeaway:
+  - The technical-detail version (for the engineering audience)
+  - The business-outcome version (for the executive audience)
+
+Use the business-outcome version on the slide and the technical-detail
+version in the speaker notes.
+```
+
+---
+
+## (e) Critical caveats
+
+Three caveats specific to `slides`.
+
+### HTML → PPTX export is lossy for richly-styled text
+
+Community-documented at `https://moda.app/blog/claude-design-for-pitch-decks` (cited in research/03) and `https://claudedesign.substack.com`: when the operator exports an HTML-rendered slide deck to PPTX, richly-styled text (custom typography, mixed weights, inline color variations) can flatten to images. PowerPoint loses the editability — the text becomes a rasterised picture.
+
+The mitigation:
+
+- If the destination is final PPTX delivery, validate the rendered PPTX text-as-text count before assuming editability survived
+- If text-as-text is critical (legal review, copy-edit-after-the-fact), keep the typographic styling simple in the brief — single typeface, two weights, no inline color variation, no inline highlighting
+- For the `pitch-decks` preset specifically, this caveat is severe enough that the recommendation is "do not use Claude Design for external pitch decks where PPTX is required" — see `pitch-decks.md`
+
+### Don't trust the canvas as ground truth if destination is PPTX
+
+The Claude Design canvas renders the deck in HTML. The PPTX export converts to PowerPoint format. Some aesthetic decisions that look correct in the canvas do not survive the export:
+
+- Custom backgrounds with gradients can rasterize
+- Inline icons positioned via CSS can shift
+- Multi-column slide layouts can collapse
+- Speaker-notes-equivalent annotations may not round-trip
+
+Validate by opening the exported PPTX in PowerPoint before stakeholder delivery, especially for high-stakes decks.
+
+### Quota burn on long decks
+
+Multi-slide decks (10+ slides) compound context faster than single-page artifacts. The 4-screen inflection in `../03-iteration-and-session.md` applies — long decks reach the inflection within 2-3 chat turns. Plan to break the deck into outline → first 5 slides → next 5 slides if the deck is large, using the context-reset prompt between sessions.
+
+---
+
+## (f) One end-to-end worked prompt — layers 1 + 2a + 3 composed
+
+Goal: a 12-slide internal-team Q1 results deck, audience is engineering leadership + cross-functional partners.
+
+```
+Goal: A 12-slide Q1 2026 results deck covering platform-team delivery,
+      reliability metrics, headcount and hiring, top 3 themes for Q2,
+      and one slide on a major incident retrospective
+Layout (outline):
+  1. Title — "Platform team Q1 2026 results"
+  2. TL;DR — three bullet takeaways
+  3. Delivery — features shipped, % of roadmap completed
+  4. Reliability — uptime, MTTR, incident count
+  5. Latency — p95/p99 trend
+  6. Hiring — headcount delta, key hires, open roles
+  7. Top theme 1 for Q2 — name + one-sentence framing
+  8. Top theme 2 for Q2 — name + one-sentence framing
+  9. Top theme 3 for Q2 — name + one-sentence framing
+ 10. Incident retrospective — what happened, what we learned
+ 11. Asks — explicit asks of leadership and partners
+ 12. Q&A / Discussion prompt
+Content: Real numbers throughout — actual % completion, real MTTR
+         minutes, real headcount, real names for hires (or named
+         placeholders); each slide's takeaway nameable in one sentence
+Audience: VP of Engineering, peer Eng-leadership, partner-team PMs,
+          partner-team Eng-leads — mixed seniority, mixed technical
+          depth, ages 30-55
+
+Aesthetic family: editorial-confident — like The New York Times opinion
+                  section meets Linear's design language. Clean,
+                  authoritative, no flourish. Each slide reads like a
+                  well-edited paragraph.
+Color palette (CSS hex):
+  --color-bg:       #FAFAF8
+  --color-surface:  #FFFFFF
+  --color-muted:    #6B6B6B
+  --color-fg:       #2A2A2A
+  --color-ink:      #0A0A0A
+  --color-accent:   #3D5C8A
+  --color-success:  #2D6356
+  --color-warning:  #C89B3F
+  --color-error:    #B23A48
+Typography: Söhne or Inter Variable; modular scale 1.333 (perfect
+            fourth — slides scale up); weight palette 400 body / 600
+            emphasized / 700 slide titles
+Corner radius: 4px on any card-like containers; slides themselves
+               have no corner radius (full-bleed)
+Motion: none on static slides; ease-out 240ms on slide transitions
+Density: comfortable — generous spacing, one job per slide
+Surface: flat — full-bleed slides, no shadows, single subtle accent
+         line under slide title
+
+Slide composition rules:
+  - Each slide does one job
+  - Slide titles are claims, not topics ("We shipped 87% of roadmap"
+    not "Roadmap delivery")
+  - Body text is 2-3 lines max per slide
+  - One number, chart, or visual element per slide max
+  - Speaker notes carry the depth; slides carry the takeaway
+
+Negative constraints — do not produce any of:
+  - Inter, Roboto, Arial, Space Grotesk as primary typeface
+  - Purple gradients on white backgrounds
+  - Three-bullet-and-image generic slide template
+  - Pulse animations or fly-in transitions
+  - Generic "corporate deck" template defaults (centered title-and-
+    subtitle on every slide)
+  - Multi-column slides with more than two ideas per slide
+
+If the destination is PPTX, ensure text-heavy slides keep text as text
+(not rasterized). Keep typography simple to maximise text-as-text
+survival in export.
+```
+
+Expected follow-up turns:
+
+1. Turn 2: outline-first review — confirm the 12-slide structure, adjust ordering, swap titles if needed
+2. Turn 3: add audience translation per slide (speaker notes vs slide takeaway)
+3. Turn 4: render full deck against the approved outline
+4. Turn 5+: Tweak panel for typography scale and spacing; comments for slide-by-slide refinements
+5. Export validation: open PPTX in PowerPoint and audit text-as-text vs rasterized
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration
+- `https://claude.com/resources/tutorials/using-claude-design-for-presentations-and-slide-decks` — verbatim canonical prompts (5 patterns), slide-deck composition framework
+- `https://support.claude.com/en/articles/13521390-use-claude-for-powerpoint` — PowerPoint-mode conventions, template-respecting guidance
+- `https://support.claude.com/en/articles/14604416-get-started-with-claude-design` — GLCA framework
+- `https://moda.app/blog/claude-design-for-pitch-decks` — community-documented PPTX export caveat (cited)
+- `https://anthropic.com/engineering/harness-design-long-running-apps` — design grading criteria
+
+Re-research trigger: Anthropic updating the slides tutorial; new canonical pattern added; PowerPoint-mode conventions revised; PPTX export behaviour changing materially.
diff --git a/plugins/claude-design/skills/claude-design-facilitator/references/presets/wireframes-mockups.md b/plugins/claude-design/skills/claude-design-facilitator/references/presets/wireframes-mockups.md
new file mode 100644
index 0000000..7eb4db4
--- /dev/null
+++ b/plugins/claude-design/skills/claude-design-facilitator/references/presets/wireframes-mockups.md
@@ -0,0 +1,163 @@
+# Preset: wireframes-mockups
+
+**Last updated:** 2026-05-17 | **Verified:** research/03-prompt-patterns-intent-presets.md
+Evidence grade: Community-only — Anthropic publishes no per-preset prompt patterns for this preset as of 2026-05-16.
+
+Anthropic names `wireframes-mockups` in the launch enumeration at `https://anthropic.com/news/claude-design-anthropic-labs` but publishes no dedicated tutorial, support article, or canonical prompt set for it. The patterns below come from community practitioners; treat them as field-tested but not Anthropic-authoritative.
+
+---
+
+## (a) What this preset is
+
+Anthropic launch post one-sentence description: `wireframes-mockups` covers the spectrum from low-fidelity layout sketches (boxes, labels, structure-only) to high-fidelity mockups (visual design applied, but not interactive). The output is structural — the goal is to communicate layout, not aesthetic and not interaction.
+
+Distinguishing properties:
+
+- Static (not interactive) — wireframes and mockups do not have working state transitions; for interaction logic, use `prototypes`
+- Low-fi or high-fi — the preset spans both ends; the operator picks via prompt
+- Pre-visual-design — wireframes are often deliverables before the visual designer commits to a direction
+- Iteration-cheap — wireframes are intended to be iterated quickly, so the prompt patterns lean on N-variations-first generation
+
+---
+
+## (b) Why Anthropic published no per-preset guidance
+
+Wireframes occupy a niche between `designs` (visual exploration) and `prototypes` (interaction validation). Anthropic appears to treat the preset as a destination shape rather than a distinct generation mode. The Goal / Layout / Content / Audience framework (`../01-prompt-fundamentals.md` Layer 1) applies — Layout is the dominant concern, Content becomes structural labels, Audience determines fidelity level.
+
+Community practitioners have converged on the patterns below (Section c).
+
+---
+
+## (c) Community patterns
+
+### N-variations-first
+
+Community pattern from `https://designwithai.substack.com` (cited in `research/03`): wireframes are most useful when generated in N variations and compared. Brief the model to produce N distinct layout variations in the first turn, then pick one to refine.
+
+Convergent N values from community practice: 3 or 4 variations is the sweet spot. More than 4 dilutes the operator's attention; fewer than 3 does not surface meaningful alternatives.
+
+The brief pattern:
+
+```
+Generate 4 distinct wireframe variations for [feature/page]. For each:
+  - One sentence describing the structural direction
+  - The wireframe itself (boxes, labels, no visual design)
+
+After I pick one, refine that variation into a mockup with visual
+design applied.
+```
+
+This composes with Layer 2b (propose-options-before-building) from `../01-prompt-fundamentals.md`.
+
+### Wireframe vs High-Fidelity sub-preset selection
+
+Community pattern from `https://computingforgeeks.com` (cited in `research/03`): the preset spans low-fi to high-fi, but the model behaves differently across the spectrum. Brief the fidelity level explicitly:
+
+```
+Fidelity: low-fi
+  - boxes with labels, no typography weights other than 500
+  - one color (greyscale) — bg, surface, muted, fg
+  - no images, no icons — represent visual elements as labelled boxes
+  - 8pt grid visible if helpful
+
+OR
+
+Fidelity: high-fi
+  - actual typography, full color palette, real icons, real images
+  - production-ready visual treatment
+  - no interaction logic (this is wireframes preset, not prototypes)
+```
+
+Pick one explicitly. The default-mode failure is the model producing a mid-fidelity output that satisfies neither the low-fi structural goal nor the high-fi visual-validation goal.
+
+### The Aakashg / Nielsen "low-fi-is-deprecated" debate (flagged as unsettled)
+
+A community debate documented across Aakash Gupta's and Jakob Nielsen's posts in 2024-2025 (cited in `research/03`) argues that AI-generated high-fi mockups have made low-fi wireframes operationally obsolete — the marginal cost of generating a high-fi mockup is now low enough that there is no reason to start with low-fi. The counter-argument: low-fi wireframes still serve a communication function (forcing reviewers to focus on structure, not aesthetic) that high-fi mockups undermine.
+
+This plugin treats the debate as **unsettled**. The brief should pick the fidelity level deliberately, with the choice tied to the audience and the review purpose, not to a default assumption that one fidelity dominates. Flag the debate when the operator's choice seems unconsidered.
+
+---
+
+## (d) Critical caveats
+
+### Aesthetic drift if starting in high-fi
+
+When starting in high-fidelity mode, the model imports its convergent middle-ground aesthetic defaults more aggressively (because the visual decisions are within scope). Layer-3 negative constraints (`../01-prompt-fundamentals.md`) apply with extra weight on high-fi mockups.
+
+### Iteration economy — wireframes burn turns
+
+Each variation requested in the N-variations-first pattern costs a fraction of a turn (the model generates all N in one chat round). But subsequent refinement of the chosen variation often requires multiple turns (typography decisions, color palette, component-level styling). Budget accordingly — a wireframe-to-mockup flow can consume 4-6 turns for a single page.
+
+### Wireframe ≠ prototype
+
+If the operator describes user interactions ("the user clicks here, then sees this"), they want `prototypes`, not `wireframes-mockups`. Wireframes capture structure; prototypes capture behaviour. Misclassification leads to wasted turns regenerating an artifact in the wrong preset.
+
+---
+
+## (e) One worked prompt — layers 1 + 3 composed, N-variations-first pattern
+
+Goal: 4 wireframe variations for a customer-onboarding page, audience is product team for review.
+
+```
+Goal: 4 distinct wireframe variations for the first page of a customer
+      onboarding flow. The page introduces the product, captures
+      essential information, and routes the customer to one of three
+      paths (self-serve, sales-assisted, partner-handoff).
+Layout: Single page, viewport ~1440x900. Each variation lays out the
+        same content differently.
+Content: Real placeholder content — actual headlines, actual button
+         labels, actual form field labels. No lorem ipsum.
+Audience: Internal product team (PM, design lead, eng lead) reviewing
+          structure choices before committing to a direction
+
+Fidelity: low-fi (community pattern from
+          https://computingforgeeks.com — fidelity affects iteration
+          path)
+  - boxes with labels, no typography weights other than 500
+  - greyscale only (bg, surface, muted, fg)
+  - no images, no icons — labelled boxes
+  - 8pt grid visible
+
+N-variations-first (community pattern from
+https://designwithai.substack.com):
+
+Generate 4 distinct wireframe variations. For each variation:
+  - One-sentence description of the structural direction (e.g.,
+    "Top-down narrative — story first, paths second")
+  - The wireframe itself
+  - One-line rationale tying the structure to the audience and goal
+
+The 4 variations should be meaningfully distinct from each other —
+not minor tweaks of one base layout.
+
+After I pick one, generate a fifth output: a refined mockup of the
+chosen variation, transitioning fidelity from low-fi to medium-fi.
+
+Negative constraints (Anthropic AI-slop avoid-list):
+  - Inter, Roboto, Arial, Space Grotesk as primary typeface (the
+    fidelity-low constraint covers most of this, but flag explicitly)
+  - Purple gradients (low-fi means greyscale anyway)
+  - Three-column feature grid as the default structural pattern
+  - Centered-hero with single CTA as the default
+  - Cookie-cutter framing
+```
+
+Expected follow-up turns:
+
+1. Turn 1: 4 wireframe variations generated
+2. Turn 2: operator picks variation, refined low-fi mockup generated
+3. Turn 3: aesthetic family applied (full layer-2a brief), medium-fi mockup
+4. Turn 4: layer-4 dimensions applied (typography modular scale, color palette, component stylings)
+5. Turn 5+: Tweak panel for spacing and density adjustments
+
+---
+
+## Sources
+
+- `https://anthropic.com/news/claude-design-anthropic-labs` — preset enumeration, one-sentence description
+- `https://designwithai.substack.com` — community pattern: N-variations-first
+- `https://computingforgeeks.com` — community pattern: explicit Wireframe-vs-High-Fidelity fidelity selection
+- `https://claude.com/blog/improving-frontend-design-through-skills` — AI-slop avoid-list (composed for high-fi mode)
+- `https://github.com/anthropics/skills/skills/frontend-design/SKILL.md` — Design-Thinking Framework reference
+
+Re-research trigger: Anthropic publishing a dedicated wireframes-mockups tutorial; the Aakashg/Nielsen low-fi-is-deprecated debate reaching practitioner consensus; new sub-fidelity tier surfacing in community practice.
diff --git a/plugins/claude-design/tests/test-sc1-dogfood-log.sh b/plugins/claude-design/tests/test-sc1-dogfood-log.sh
new file mode 100755
index 0000000..885db80
--- /dev/null
+++ b/plugins/claude-design/tests/test-sc1-dogfood-log.sh
@@ -0,0 +1,203 @@
+#!/usr/bin/env bash
+# test-sc1-dogfood-log.sh — Verifies SC1 (operator-attested dogfood log) in REMEMBER.md
+#
+# Usage:
+#   bash tests/test-sc1-dogfood-log.sh           # missing block = WARN, exit 0
+#   bash tests/test-sc1-dogfood-log.sh --strict  # missing block = FAIL, exit 1
+#
+# Expects in REMEMBER.md (plugin root, gitignored):
+#   - A fenced section with heading `## Dogfood log — v0.1 slides run`
+#   - Five mechanically-checkable fields inside the section:
+#       artifact_type: <preset-name from .coverage.md>
+#       refine_rounds: <integer>
+#       final_prompt:
+#         ```
+#         <non-empty prompt content>
+#         ```
+#       shipped: yes  (or `shipped: equivalent`)
+#       comparison_to_unaided: <one sentence ending with .>
+#
+# REMEMBER.md is gitignored — this evidence is local-only. The script
+# validates format only; the outcome judgement is operator-attested.
+
+set -euo pipefail
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+PASS=0
+FAIL=0
+WARN=0
+
+pass() { printf "${GREEN}  ✓ %s${NC}\n" "$1"; PASS=$((PASS + 1)); }
+fail() { printf "${RED}  ✗ %s${NC}\n" "$1"; FAIL=$((FAIL + 1)); }
+warn() { printf "${YELLOW}  ⚠ %s${NC}\n" "$1"; WARN=$((WARN + 1)); }
+
+STRICT=false
+for arg in "$@"; do
+  case "$arg" in
+    --strict) STRICT=true ;;
+  esac
+done
+
+echo "=== test-sc1-dogfood-log ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo "Strict mode: $STRICT"
+echo ""
+
+REMEMBER_FILE="$PLUGIN_ROOT/REMEMBER.md"
+COVERAGE_FILE="$PLUGIN_ROOT/.coverage.md"
+
+# -------------------------------------------------------
+# Locate REMEMBER.md
+# -------------------------------------------------------
+if [ ! -f "$REMEMBER_FILE" ]; then
+  if $STRICT; then
+    fail "REMEMBER.md missing (strict mode — required)"
+    echo ""
+    echo "=== Summary ==="
+    printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+    exit 1
+  else
+    warn "REMEMBER.md missing (advisory until operator dogfood step)"
+    echo ""
+    echo "=== Summary ==="
+    printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+    exit 0
+  fi
+fi
+
+# -------------------------------------------------------
+# Extract fenced block between dogfood heading and next H2 (or EOF)
+# -------------------------------------------------------
+BLOCK="$(awk '
+  /^## Dogfood log — v0\.1 slides run$/ { capture = 1; next }
+  capture && /^## / { exit }
+  capture { print }
+' "$REMEMBER_FILE")"
+
+if [ -z "$BLOCK" ]; then
+  if $STRICT; then
+    fail "REMEMBER.md missing dogfood block '## Dogfood log — v0.1 slides run' (strict mode — required)"
+    echo ""
+    echo "=== Summary ==="
+    printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+    exit 1
+  else
+    warn "REMEMBER.md missing dogfood block (advisory until operator dogfood step)"
+    echo ""
+    echo "=== Summary ==="
+    printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+    exit 0
+  fi
+fi
+
+pass "found '## Dogfood log — v0.1 slides run' block"
+
+# -------------------------------------------------------
+# Field 1: artifact_type — must match a preset name from .coverage.md
+# -------------------------------------------------------
+ARTIFACT_TYPE="$(printf '%s\n' "$BLOCK" | awk -F': *' '/^artifact_type:/ { print $2; exit }' | tr -d '[:space:]')"
+
+if [ -z "$ARTIFACT_TYPE" ]; then
+  fail "artifact_type: field missing or empty"
+else
+  # extract preset names from .coverage.md table column 1
+  if [ -f "$COVERAGE_FILE" ]; then
+    PRESETS="$(awk -F'|' '
+      /^\| [a-z]/ { gsub(/^ +| +$/, "", $2); print $2 }
+    ' "$COVERAGE_FILE")"
+
+    FOUND=false
+    while IFS= read -r preset; do
+      [ -z "$preset" ] && continue
+      if [ "$preset" = "$ARTIFACT_TYPE" ]; then
+        FOUND=true
+        break
+      fi
+    done < <(printf '%s\n' "$PRESETS")
+
+    if $FOUND; then
+      pass "artifact_type='$ARTIFACT_TYPE' matches a preset in .coverage.md"
+    else
+      fail "artifact_type='$ARTIFACT_TYPE' does not match any preset in .coverage.md"
+    fi
+  else
+    fail ".coverage.md missing — cannot validate artifact_type"
+  fi
+fi
+
+# -------------------------------------------------------
+# Field 2: refine_rounds — integer
+# -------------------------------------------------------
+REFINE_ROUNDS_LINE="$(printf '%s\n' "$BLOCK" | grep -E '^refine_rounds:[[:space:]]*[0-9]+[[:space:]]*$' || true)"
+if [ -n "$REFINE_ROUNDS_LINE" ]; then
+  pass "refine_rounds: matches integer regex"
+else
+  fail "refine_rounds: missing or not an integer"
+fi
+
+# -------------------------------------------------------
+# Field 3: final_prompt: followed by non-empty fenced code block
+# -------------------------------------------------------
+HAS_FINAL_PROMPT="$(printf '%s\n' "$BLOCK" | grep -c '^final_prompt:' || true)"
+if [ "$HAS_FINAL_PROMPT" -ge 1 ]; then
+  # check that a fenced code block (```) appears after final_prompt:
+  FENCE_AFTER="$(awk '
+    /^final_prompt:/ { found = 1; next }
+    found && /^```/ { fence_open = !fence_open; if (fence_open) { in_fence = 1 } else { exit } }
+    found && in_fence && fence_open && /./ { content_lines++ }
+    END { print content_lines + 0 }
+  ' <<<"$BLOCK")"
+  if [ -z "$FENCE_AFTER" ]; then FENCE_AFTER=0; fi
+  if [ "$FENCE_AFTER" -ge 1 ]; then
+    pass "final_prompt: followed by non-empty fenced code block ($FENCE_AFTER content line(s))"
+  else
+    fail "final_prompt: not followed by a non-empty fenced code block"
+  fi
+else
+  fail "final_prompt: field missing"
+fi
+
+# -------------------------------------------------------
+# Field 4: shipped — yes or equivalent
+# -------------------------------------------------------
+SHIPPED_LINE="$(printf '%s\n' "$BLOCK" | grep -E '^shipped:[[:space:]]*(yes|equivalent)[[:space:]]*$' || true)"
+if [ -n "$SHIPPED_LINE" ]; then
+  pass "shipped: matches 'yes' or 'equivalent'"
+else
+  fail "shipped: missing or not 'yes'/'equivalent'"
+fi
+
+# -------------------------------------------------------
+# Field 5: comparison_to_unaided — non-empty sentence >=10 chars ending with .
+# -------------------------------------------------------
+COMP_LINE="$(printf '%s\n' "$BLOCK" | awk -F': *' '/^comparison_to_unaided:/ { for (i=2;i<=NF;i++) printf "%s%s", $i, (i<NF?": ":""); print ""; exit }')"
+COMP_TRIMMED="$(printf '%s' "$COMP_LINE" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')"
+COMP_LEN="${#COMP_TRIMMED}"
+
+if [ -z "$COMP_TRIMMED" ]; then
+  fail "comparison_to_unaided: field missing or empty"
+elif [ "$COMP_LEN" -lt 10 ]; then
+  fail "comparison_to_unaided: too short ($COMP_LEN chars; need >=10)"
+elif [ "${COMP_TRIMMED: -1}" != "." ]; then
+  fail "comparison_to_unaided: does not end with '.'"
+else
+  pass "comparison_to_unaided: non-empty, $COMP_LEN chars, ends with '.'"
+fi
+
+# -------------------------------------------------------
+# Summary
+# -------------------------------------------------------
+echo ""
+echo "=== Summary ==="
+printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
diff --git a/plugins/claude-design/tests/test-sc2-artifact-coverage.sh b/plugins/claude-design/tests/test-sc2-artifact-coverage.sh
new file mode 100755
index 0000000..f249247
--- /dev/null
+++ b/plugins/claude-design/tests/test-sc2-artifact-coverage.sh
@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+# test-sc2-artifact-coverage.sh — Verifies SC2 (per-preset coverage)
+#
+# Reads .coverage.md, extracts preset names from the table column 1,
+# for each preset runs:
+#   grep -rli "<preset>" plugins/claude-design/ --include='*.md' \
+#     --exclude-dir='.claude' --exclude-dir='tests'
+# and asserts ≥1 file hit.
+#
+# The preset list is NOT hardcoded — auto-adapts when .coverage.md changes.
+#
+# Usage: bash tests/test-sc2-artifact-coverage.sh
+# Exit codes: 0 = all presets covered; 1 = at least one preset uncovered
+
+set -euo pipefail
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+PASS=0
+FAIL=0
+WARN=0
+
+pass() { printf "${GREEN}  ✓ %s${NC}\n" "$1"; PASS=$((PASS + 1)); }
+fail() { printf "${RED}  ✗ %s${NC}\n" "$1"; FAIL=$((FAIL + 1)); }
+warn() { printf "${YELLOW}  ⚠ %s${NC}\n" "$1"; WARN=$((WARN + 1)); }
+
+COVERAGE_FILE="$PLUGIN_ROOT/.coverage.md"
+
+echo "=== test-sc2-artifact-coverage ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo ".coverage.md: $COVERAGE_FILE"
+echo ""
+
+if [ ! -f "$COVERAGE_FILE" ]; then
+  fail ".coverage.md missing — cannot verify SC2"
+  echo ""
+  echo "=== Summary ==="
+  printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+  exit 1
+fi
+
+# -------------------------------------------------------
+# Extract preset names from .coverage.md table column 1
+# -------------------------------------------------------
+# Table rows look like:
+#   | designs | skills/.../presets/designs.md | Evidence grade: ... | https://... |
+# Skip header (| Preset | ...) and separator (| --- | ...).
+PRESETS="$(awk -F'|' '
+  /^\| / && NR > 1 {
+    name = $2
+    gsub(/^ +| +$/, "", name)
+    if (name != "Preset" && name !~ /^-+$/ && name != "") {
+      print name
+    }
+  }
+' "$COVERAGE_FILE")"
+
+if [ -z "$PRESETS" ]; then
+  fail "no preset names extracted from .coverage.md"
+  echo ""
+  echo "=== Summary ==="
+  printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+  exit 1
+fi
+
+# -------------------------------------------------------
+# For each preset, grep for at least one file hit in plugin content
+# -------------------------------------------------------
+while IFS= read -r preset; do
+  [ -z "$preset" ] && continue
+
+  HITS="$(grep -rli "$preset" "$PLUGIN_ROOT" \
+    --include='*.md' \
+    --exclude-dir='.claude' \
+    --exclude-dir='tests' \
+    2>/dev/null || true)"
+
+  HIT_COUNT="$(printf '%s\n' "$HITS" | grep -c '.' || true)"
+  if [ -z "$HIT_COUNT" ]; then HIT_COUNT=0; fi
+
+  if [ "$HIT_COUNT" -ge 1 ]; then
+    pass "preset '$preset' covered by $HIT_COUNT file(s)"
+  else
+    fail "preset '$preset' has zero file hits in plugin content"
+  fi
+done < <(printf '%s\n' "$PRESETS")
+
+echo ""
+echo "=== Summary ==="
+printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
diff --git a/plugins/claude-design/tests/test-sc3-citations.sh b/plugins/claude-design/tests/test-sc3-citations.sh
new file mode 100755
index 0000000..f08f2fd
--- /dev/null
+++ b/plugins/claude-design/tests/test-sc3-citations.sh
@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+# test-sc3-citations.sh — Verifies SC3 (Anthropic-domain citation discipline)
+#
+# Two checks:
+#   Negative — grep -rnE '\[CITE\]|\[verify\]|\baccording to\b' against
+#              shipped content. Zero hits expected.
+#   Positive — read .coverage.md "Authoritative-claims" bullet list
+#              (awk on '^- ' prefix), then for each file ensure ≥1
+#              Anthropic-domain URL citation is present.
+#
+# Excludes .claude/projects/** and tests/ from greps.
+#
+# Anthropic-domain URL regex (positive):
+#   https?://(docs\.anthropic\.com|anthropic\.com|github\.com/anthropics
+#            |claude\.com|support\.claude\.com|platform\.claude\.com)
+#
+# Usage: bash tests/test-sc3-citations.sh
+# Exit codes: 0 = pass; 1 = at least one FAIL
+
+set -euo pipefail
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+PASS=0
+FAIL=0
+WARN=0
+
+pass() { printf "${GREEN}  ✓ %s${NC}\n" "$1"; PASS=$((PASS + 1)); }
+fail() { printf "${RED}  ✗ %s${NC}\n" "$1"; FAIL=$((FAIL + 1)); }
+warn() { printf "${YELLOW}  ⚠ %s${NC}\n" "$1"; WARN=$((WARN + 1)); }
+
+COVERAGE_FILE="$PLUGIN_ROOT/.coverage.md"
+
+echo "=== test-sc3-citations ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo ""
+
+# -------------------------------------------------------
+# Negative grep: \[CITE\], \[verify\], \baccording to\b
+# -------------------------------------------------------
+echo "--- negative grep: forbidden placeholders ---"
+
+NEG_HITS="$(grep -rnE '\[CITE\]|\[verify\]|\baccording to\b' \
+  "$PLUGIN_ROOT" \
+  --include='*.md' \
+  --exclude-dir='.claude' \
+  --exclude-dir='tests' \
+  2>/dev/null || true)"
+
+if [ -z "$NEG_HITS" ]; then
+  pass "no forbidden placeholders ([CITE], [verify], 'according to') in shipped content"
+else
+  while IFS= read -r hit; do
+    fail "forbidden placeholder in shipped content: $hit"
+  done < <(printf '%s\n' "$NEG_HITS")
+fi
+echo ""
+
+# -------------------------------------------------------
+# Positive grep: Authoritative-claims files have Anthropic-domain URLs
+# -------------------------------------------------------
+echo "--- positive grep: Authoritative-claims citation coverage ---"
+
+if [ ! -f "$COVERAGE_FILE" ]; then
+  fail ".coverage.md missing — cannot read Authoritative-claims registry"
+  echo ""
+  echo "=== Summary ==="
+  printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+  exit 1
+fi
+
+# Extract bullet-list paths under the "Authoritative-claims" section
+AUTH_FILES="$(awk '
+  /^## Authoritative-claims files/ { capture = 1; next }
+  capture && /^## / { exit }
+  capture && /^- / {
+    sub(/^- /, "", $0)
+    print $0
+  }
+' "$COVERAGE_FILE")"
+
+if [ -z "$AUTH_FILES" ]; then
+  fail "no Authoritative-claims files extracted from .coverage.md"
+  echo ""
+  echo "=== Summary ==="
+  printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+  exit 1
+fi
+
+ANTHROPIC_REGEX='https?://(docs\.anthropic\.com|anthropic\.com|github\.com/anthropics|claude\.com|support\.claude\.com|platform\.claude\.com)'
+
+while IFS= read -r relpath; do
+  [ -z "$relpath" ] && continue
+  fpath="$PLUGIN_ROOT/$relpath"
+
+  if [ ! -f "$fpath" ]; then
+    fail "Authoritative-claims file missing: $relpath"
+    continue
+  fi
+
+  HIT_COUNT="$(grep -cE "$ANTHROPIC_REGEX" "$fpath" || true)"
+  if [ -z "$HIT_COUNT" ]; then HIT_COUNT=0; fi
+
+  if [ "$HIT_COUNT" -ge 1 ]; then
+    pass "$relpath: $HIT_COUNT Anthropic-domain URL citation(s)"
+  else
+    fail "$relpath: zero Anthropic-domain URL citations (anthropic.com expected)"
+  fi
+done < <(printf '%s\n' "$AUTH_FILES")
+
+echo ""
+echo "=== Summary ==="
+printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
diff --git a/plugins/claude-design/tests/test-skill-triggers.sh b/plugins/claude-design/tests/test-skill-triggers.sh
new file mode 100755
index 0000000..a82b7f0
--- /dev/null
+++ b/plugins/claude-design/tests/test-skill-triggers.sh
@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+# test-skill-triggers.sh — Verifies skill description quality
+#
+# Honest limit: this only verifies strings are present in SKILL.md description.
+# It cannot prove Claude Code's orchestrator fires the skill on those prompts.
+# Runtime auto-fire validation is the operator's dogfood step (SC1).
+#
+# Checks:
+#   - SKILL.md frontmatter has 'description:' field
+#   - description block (from `description: |` to the closing `---`) is >=400 chars
+#   - if .triggers.txt exists, every phrase in it appears in SKILL.md description
+#
+# Usage: bash tests/test-skill-triggers.sh
+# Exit codes: 0 = pass; 1 = at least one FAIL
+
+set -euo pipefail
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+PASS=0
+FAIL=0
+WARN=0
+
+pass() { printf "${GREEN}  ✓ %s${NC}\n" "$1"; PASS=$((PASS + 1)); }
+fail() { printf "${RED}  ✗ %s${NC}\n" "$1"; FAIL=$((FAIL + 1)); }
+warn() { printf "${YELLOW}  ⚠ %s${NC}\n" "$1"; WARN=$((WARN + 1)); }
+
+echo "=== test-skill-triggers ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo ""
+
+# -------------------------------------------------------
+# Iterate over every SKILL.md
+# -------------------------------------------------------
+SKILL_COUNT=0
+for skill_file in "$PLUGIN_ROOT"/skills/*/SKILL.md; do
+  [ -f "$skill_file" ] || continue
+  SKILL_COUNT=$((SKILL_COUNT + 1))
+
+  skill_dir="$(dirname "$skill_file")"
+  skill_name="$(basename "$skill_dir")"
+
+  echo "--- $skill_name ---"
+
+  # ------------------------
+  # Frontmatter check
+  # ------------------------
+  first_line="$(head -n 1 "$skill_file")"
+  if [ "$first_line" != "---" ]; then
+    fail "$skill_name/SKILL.md: missing frontmatter delimiter on line 1"
+    echo ""
+    continue
+  fi
+
+  # ------------------------
+  # Description >=400 chars (Triggers on: enumeration counts)
+  # ------------------------
+  desc_block_chars="$(awk '/^description: \|/,/^---$/' "$skill_file" | wc -c | tr -d '[:space:]')"
+  if [ -z "$desc_block_chars" ]; then desc_block_chars=0; fi
+
+  if [ "$desc_block_chars" -ge 400 ]; then
+    pass "$skill_name: description block is $desc_block_chars chars (>=400)"
+  else
+    fail "$skill_name: description block is $desc_block_chars chars (<400 required)"
+  fi
+
+  # ------------------------
+  # Trigger-phrase coverage (.triggers.txt)
+  # ------------------------
+  triggers_file="$skill_dir/.triggers.txt"
+
+  if [ ! -f "$triggers_file" ]; then
+    warn "$skill_name: .triggers.txt missing (advisory — operator may want one)"
+    echo ""
+    continue
+  fi
+
+  trigger_count="$(grep -cE '.' "$triggers_file" || true)"
+  if [ -z "$trigger_count" ] || [ "$trigger_count" -lt 8 ]; then
+    fail "$skill_name/.triggers.txt: only $trigger_count phrase(s) (>=8 required)"
+  else
+    pass "$skill_name/.triggers.txt: $trigger_count phrase(s)"
+  fi
+
+  # check each phrase appears in SKILL.md description block
+  MISSING=0
+  while IFS= read -r phrase; do
+    [ -z "$phrase" ] && continue
+    if ! grep -qF "$phrase" "$skill_file"; then
+      fail "$skill_name: trigger phrase missing from SKILL.md description: '$phrase'"
+      MISSING=$((MISSING + 1))
+    fi
+  done < "$triggers_file"
+
+  if [ "$MISSING" -eq 0 ]; then
+    pass "$skill_name: all $trigger_count trigger phrase(s) appear in SKILL.md"
+  fi
+
+  echo ""
+done
+
+if [ "$SKILL_COUNT" -eq 0 ]; then
+  fail "no SKILL.md found under skills/*/"
+fi
+
+# -------------------------------------------------------
+# Summary
+# -------------------------------------------------------
+echo "=== Summary ==="
+printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
+
+# Triggers on: documented in each skill's .triggers.txt sibling file.
diff --git a/plugins/claude-design/tests/validate-plugin.sh b/plugins/claude-design/tests/validate-plugin.sh
new file mode 100755
index 0000000..1cac718
--- /dev/null
+++ b/plugins/claude-design/tests/validate-plugin.sh
@@ -0,0 +1,265 @@
+#!/usr/bin/env bash
+# validate-plugin.sh — Foundation plugin structure validator for claude-design
+# Usage: bash tests/validate-plugin.sh
+# Exit codes: 0 = all checks pass; 1 = at least one FAIL
+#
+# Forked from plugins/ms-ai-architect/tests/validate-plugin.sh:
+#   keep:    helpers (pass/fail/warn), counters, PLUGIN_ROOT, JSON-validity check,
+#            README/CLAUDE.md existence checks
+#   strip:   agent frontmatter loop, commands frontmatter loop, KB-staleness checks,
+#            architect:* command-name assertions, references-count assertions
+#   add:     SKILL.md frontmatter + description-length, LICENSE content, GOVERNANCE
+#            existence, .coverage.md existence, forbidden-command-name regex (h),
+#            operator-private-context grep (i), Norwegian-leakage grep (j)
+
+set -euo pipefail
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+PASS=0
+FAIL=0
+WARN=0
+
+pass() { printf "${GREEN}  ✓ %s${NC}\n" "$1"; PASS=$((PASS + 1)); }
+fail() { printf "${RED}  ✗ %s${NC}\n" "$1"; FAIL=$((FAIL + 1)); }
+warn() { printf "${YELLOW}  ⚠ %s${NC}\n" "$1"; WARN=$((WARN + 1)); }
+
+echo "=== claude-design Plugin Validation ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo ""
+
+# -------------------------------------------------------
+# Check (a): plugin.json valid + required fields
+# -------------------------------------------------------
+echo "--- (a) plugin.json structure ---"
+
+PLUGIN_JSON="$PLUGIN_ROOT/.claude-plugin/plugin.json"
+
+if [ ! -f "$PLUGIN_JSON" ]; then
+  fail ".claude-plugin/plugin.json missing"
+else
+  if node -e "JSON.parse(require('fs').readFileSync('$PLUGIN_JSON'))" 2>/dev/null; then
+    pass ".claude-plugin/plugin.json is valid JSON"
+  else
+    fail ".claude-plugin/plugin.json is invalid JSON"
+  fi
+
+  for field in name version description; do
+    if node -e "const p = JSON.parse(require('fs').readFileSync('$PLUGIN_JSON')); if (typeof p['$field'] !== 'string' || p['$field'] === '') process.exit(1)" 2>/dev/null; then
+      pass "plugin.json has '$field'"
+    else
+      fail "plugin.json missing or empty '$field'"
+    fi
+  done
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (b): at least one SKILL.md under skills/*/
+# -------------------------------------------------------
+echo "--- (b) SKILL.md presence ---"
+
+SKILL_COUNT=0
+for skill_file in "$PLUGIN_ROOT"/skills/*/SKILL.md; do
+  [ -f "$skill_file" ] || continue
+  SKILL_COUNT=$((SKILL_COUNT + 1))
+done
+
+if [ "$SKILL_COUNT" -ge 1 ]; then
+  pass "found $SKILL_COUNT SKILL.md file(s) under skills/*/"
+else
+  fail "no SKILL.md found under skills/*/"
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (c): SKILL.md frontmatter has name+description, description >=400 chars
+# -------------------------------------------------------
+echo "--- (c) SKILL.md frontmatter quality ---"
+
+for skill_file in "$PLUGIN_ROOT"/skills/*/SKILL.md; do
+  [ -f "$skill_file" ] || continue
+  basename_skill="$(basename "$(dirname "$skill_file")")/SKILL.md"
+
+  first_line="$(head -n 1 "$skill_file")"
+  if [ "$first_line" != "---" ]; then
+    fail "$basename_skill: missing frontmatter delimiter on line 1"
+    continue
+  fi
+
+  frontmatter="$(awk 'NR==1{next} /^---$/{exit} {print}' "$skill_file")"
+
+  if echo "$frontmatter" | grep -qE '^name:'; then
+    pass "$basename_skill: has 'name:'"
+  else
+    fail "$basename_skill: missing 'name:'"
+  fi
+
+  if echo "$frontmatter" | grep -qE '^description:'; then
+    pass "$basename_skill: has 'description:'"
+  else
+    fail "$basename_skill: missing 'description:'"
+  fi
+
+  desc_len="$(awk '/^description: \|/,/^---$/' "$skill_file" | wc -c | tr -d '[:space:]')"
+  if [ -z "$desc_len" ]; then desc_len=0; fi
+  if [ "$desc_len" -ge 400 ]; then
+    pass "$basename_skill: description block is $desc_len chars (>=400)"
+  else
+    fail "$basename_skill: description block is $desc_len chars (<400)"
+  fi
+done
+echo ""
+
+# -------------------------------------------------------
+# Check (d): LICENSE exists, non-empty, contains "MIT License"
+# -------------------------------------------------------
+echo "--- (d) LICENSE ---"
+
+LICENSE_FILE="$PLUGIN_ROOT/LICENSE"
+
+if [ ! -f "$LICENSE_FILE" ]; then
+  fail "LICENSE missing"
+elif [ ! -s "$LICENSE_FILE" ]; then
+  fail "LICENSE is empty"
+elif ! grep -q "MIT License" "$LICENSE_FILE"; then
+  fail "LICENSE does not contain 'MIT License'"
+else
+  pass "LICENSE exists, non-empty, MIT License"
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (e): GOVERNANCE.md exists, non-empty
+# -------------------------------------------------------
+echo "--- (e) GOVERNANCE.md ---"
+
+GOVERNANCE_FILE="$PLUGIN_ROOT/GOVERNANCE.md"
+
+if [ ! -f "$GOVERNANCE_FILE" ]; then
+  fail "GOVERNANCE.md missing"
+elif [ ! -s "$GOVERNANCE_FILE" ]; then
+  fail "GOVERNANCE.md is empty"
+else
+  pass "GOVERNANCE.md exists, non-empty"
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (f): README.md + CLAUDE.md exist, non-empty
+# -------------------------------------------------------
+echo "--- (f) README.md and CLAUDE.md ---"
+
+for f in README.md CLAUDE.md; do
+  fpath="$PLUGIN_ROOT/$f"
+  if [ ! -f "$fpath" ]; then
+    fail "$f missing"
+  elif [ ! -s "$fpath" ]; then
+    fail "$f is empty"
+  else
+    pass "$f exists, non-empty"
+  fi
+done
+echo ""
+
+# -------------------------------------------------------
+# Check (g): .coverage.md exists at plugin root
+# -------------------------------------------------------
+echo "--- (g) .coverage.md ---"
+
+COVERAGE_FILE="$PLUGIN_ROOT/.coverage.md"
+
+if [ ! -f "$COVERAGE_FILE" ]; then
+  fail ".coverage.md missing"
+elif [ ! -s "$COVERAGE_FILE" ]; then
+  fail ".coverage.md is empty"
+else
+  pass ".coverage.md exists, non-empty"
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (h): forbidden command-name regex (scope fence vs
+#            Anthropic's knowledge-work-plugins/design)
+# -------------------------------------------------------
+echo "--- (h) forbidden command-name regex ---"
+
+FORBIDDEN_REGEX='^name:[[:space:]]*(claude-design:)?(critique|accessibility|ux-copy|research-synthesis|design-system|handoff)[[:space:]]*$'
+
+H_HIT=0
+
+for cmd_file in "$PLUGIN_ROOT"/commands/*.md "$PLUGIN_ROOT"/skills/*/SKILL.md; do
+  [ -f "$cmd_file" ] || continue
+  if grep -qE "$FORBIDDEN_REGEX" "$cmd_file"; then
+    fail "command-name collision with Anthropic's official knowledge-work-plugins/design plugin: $cmd_file"
+    H_HIT=$((H_HIT + 1))
+  fi
+done
+
+if [ "$H_HIT" -eq 0 ]; then
+  pass "no forbidden command-name collisions"
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (i): operator-private-context grep
+# -------------------------------------------------------
+echo "--- (i) operator-private-context grep ---"
+
+I_HITS="$(grep -rnE '(kjell|vegvesen|NEXT-SESSION-PROMPT|REMEMBER\.md content from)' \
+  "$PLUGIN_ROOT" \
+  --include='*.md' \
+  --exclude-dir='.claude' \
+  --exclude-dir='tests' \
+  --exclude='REMEMBER.md' \
+  --exclude='TODO.md' \
+  --exclude='NEXT-SESSION-PROMPT.local.md' \
+  2>/dev/null || true)"
+
+if [ -z "$I_HITS" ]; then
+  pass "no operator-private context leaks in shipped content"
+else
+  while IFS= read -r hit; do
+    fail "operator-private context leak in shipped content (brief NFR): $hit"
+  done < <(printf '%s\n' "$I_HITS")
+fi
+echo ""
+
+# -------------------------------------------------------
+# Check (j): Norwegian-leakage grep (WARN, not FAIL)
+# -------------------------------------------------------
+echo "--- (j) Norwegian-leakage grep ---"
+
+J_HITS="$(grep -rnE '[æøåÆØÅ]' \
+  "$PLUGIN_ROOT" \
+  --include='*.md' \
+  --exclude-dir='.claude' \
+  --exclude='REMEMBER.md' \
+  --exclude='TODO.md' \
+  --exclude='NEXT-SESSION-PROMPT.local.md' \
+  2>/dev/null || true)"
+
+if [ -z "$J_HITS" ]; then
+  pass "no Norwegian diacritics in shipped content"
+else
+  while IFS= read -r hit; do
+    warn "Norwegian diacritic in shipped content (review case-by-case): $hit"
+  done < <(printf '%s\n' "$J_HITS")
+fi
+echo ""
+
+# -------------------------------------------------------
+# Summary
+# -------------------------------------------------------
+echo "=== Summary ==="
+printf "Pass: %d  Fail: %d  Warn: %d\n" "$PASS" "$FAIL" "$WARN"
+
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
diff --git a/plugins/claude-design/verify.sh b/plugins/claude-design/verify.sh
new file mode 100755
index 0000000..8b543bc
--- /dev/null
+++ b/plugins/claude-design/verify.sh
@@ -0,0 +1,152 @@
+#!/usr/bin/env bash
+# verify.sh — Top-level roll-up for claude-design plugin verification
+#
+# Runs the 5 test scripts in dependency order:
+#   1. tests/validate-plugin.sh           (foundation plugin structure)
+#   2. tests/test-skill-triggers.sh       (skill description + trigger phrases)
+#   3. tests/test-sc2-artifact-coverage.sh (SC2 — every preset has ≥1 file)
+#   4. tests/test-sc3-citations.sh        (SC3 — citation discipline)
+#   5. tests/test-sc1-dogfood-log.sh      (SC1 — operator dogfood log format)
+#
+# Flags:
+#   --strict   pass --strict to test-sc1-dogfood-log.sh (missing block = FAIL)
+#   --quick    skip tests/test-skill-triggers.sh (fast incremental runs)
+#
+# Exit codes: 0 = all sub-tests pass; non-zero = at least one sub-test failed
+#
+# Bash 3.2 compatible. Modelled on plugins/voyage/verify.sh helper style.
+
+set -u
+LC_ALL=en_US.UTF-8
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")" && pwd)"
+
+# Flag parsing
+STRICT=false
+QUICK=false
+for arg in "$@"; do
+  case "$arg" in
+    --strict) STRICT=true ;;
+    --quick)  QUICK=true ;;
+    -h|--help)
+      echo "Usage: $0 [--strict] [--quick]"
+      echo "  --strict   Pass --strict to test-sc1-dogfood-log.sh"
+      echo "  --quick    Skip tests/test-skill-triggers.sh"
+      exit 0
+      ;;
+    *)
+      echo "Unknown flag: $arg" >&2
+      echo "Usage: $0 [--strict] [--quick]" >&2
+      exit 2
+      ;;
+  esac
+done
+
+TOTAL_PASS=0
+TOTAL_FAIL=0
+TOTAL_WARN=0
+FAILED_SCRIPTS=""
+
+run_script() {
+  local script_name="$1"
+  shift
+  local script_path="$PLUGIN_ROOT/tests/$script_name"
+
+  if [ ! -f "$script_path" ]; then
+    printf "${RED}[MISSING]${NC} %s\n" "$script_name"
+    TOTAL_FAIL=$((TOTAL_FAIL + 1))
+    FAILED_SCRIPTS="$FAILED_SCRIPTS $script_name"
+    return 1
+  fi
+
+  printf "${BOLD}### %s${NC}\n" "$script_name"
+
+  local output exit_code
+  output="$(bash "$script_path" "$@" 2>&1)"
+  exit_code=$?
+
+  printf '%s\n' "$output"
+
+  # Parse the script's own Summary line: "Pass: N  Fail: N  Warn: N"
+  local summary
+  summary="$(printf '%s\n' "$output" | grep -E '^Pass: [0-9]+  Fail: [0-9]+  Warn: [0-9]+$' | tail -n 1)"
+
+  if [ -n "$summary" ]; then
+    local p f w
+    p="$(printf '%s' "$summary" | awk '{print $2}')"
+    f="$(printf '%s' "$summary" | awk '{print $4}')"
+    w="$(printf '%s' "$summary" | awk '{print $6}')"
+    TOTAL_PASS=$((TOTAL_PASS + p))
+    TOTAL_FAIL=$((TOTAL_FAIL + f))
+    TOTAL_WARN=$((TOTAL_WARN + w))
+  fi
+
+  if [ "$exit_code" -ne 0 ]; then
+    FAILED_SCRIPTS="$FAILED_SCRIPTS $script_name"
+  fi
+
+  printf "\n"
+  return "$exit_code"
+}
+
+echo "=== claude-design verify.sh ==="
+echo "Plugin root: $PLUGIN_ROOT"
+echo "Strict mode: $STRICT   Quick mode: $QUICK"
+echo ""
+
+# -------------------------------------------------------
+# 1. validate-plugin.sh
+# -------------------------------------------------------
+run_script "validate-plugin.sh" || true
+
+# -------------------------------------------------------
+# 2. test-skill-triggers.sh (skipped in --quick mode)
+# -------------------------------------------------------
+if $QUICK; then
+  printf "${YELLOW}### test-skill-triggers.sh${NC} (skipped — --quick)\n\n"
+else
+  run_script "test-skill-triggers.sh" || true
+fi
+
+# -------------------------------------------------------
+# 3. test-sc2-artifact-coverage.sh
+# -------------------------------------------------------
+run_script "test-sc2-artifact-coverage.sh" || true
+
+# -------------------------------------------------------
+# 4. test-sc3-citations.sh
+# -------------------------------------------------------
+run_script "test-sc3-citations.sh" || true
+
+# -------------------------------------------------------
+# 5. test-sc1-dogfood-log.sh (strict if --strict)
+# -------------------------------------------------------
+if $STRICT; then
+  run_script "test-sc1-dogfood-log.sh" --strict || true
+else
+  run_script "test-sc1-dogfood-log.sh" || true
+fi
+
+# -------------------------------------------------------
+# Aggregate summary
+# -------------------------------------------------------
+echo "================================================="
+echo "=== claude-design verify.sh — aggregate summary"
+echo "================================================="
+printf "${GREEN}Pass:${NC} %d   ${RED}Fail:${NC} %d   ${YELLOW}Warn:${NC} %d\n" \
+  "$TOTAL_PASS" "$TOTAL_FAIL" "$TOTAL_WARN"
+
+if [ -n "$FAILED_SCRIPTS" ]; then
+  printf "${RED}Failed scripts:${NC}%s\n" "$FAILED_SCRIPTS"
+fi
+
+if [ "$TOTAL_FAIL" -gt 0 ]; then
+  exit 1
+fi
+exit 0
diff --git a/plugins/config-audit/CLAUDE.md b/plugins/config-audit/CLAUDE.md
index 7435d4c..392c292 100644
--- a/plugins/config-audit/CLAUDE.md
+++ b/plugins/config-audit/CLAUDE.md
@@ -50,79 +50,6 @@ Analyzes and optimizes Claude Code configuration across three pillars:
 | verifier-agent | Verify results | sonnet | purple | Read, Glob, Grep |
 | feature-gap-agent | Context-aware feature recommendations | opus | green | Read, Glob, Grep, Write |
 
-## Deterministic Scanners
-
-Node.js scanners (zero external dependencies), run via `node scanners/scan-orchestrator.mjs <path>`.
-Posture CLI: `node scanners/posture.mjs <path> [--json] [--global] [--full-machine] [--output-file path]`.
-Scanner CLI: `node scanners/scan-orchestrator.mjs <path> [--global] [--full-machine] [--no-suppress]`.
-
-| Scanner | Prefix | Detects |
-|---------|--------|---------|
-| `claude-md-linter.mjs` | CML | Structure, length, sections, @imports, duplicates, TODOs |
-| `settings-validator.mjs` | SET | Schema, unknown/deprecated keys, type mismatches, permissions |
-| `hook-validator.mjs` | HKV | Format, script existence, event validity, timeouts |
-| `rules-validator.mjs` | RUL | Glob matching, orphan rules, deprecated fields, unscoped rules |
-| `mcp-config-validator.mjs` | MCP | Server types, trust levels, env vars, unknown fields |
-| `import-resolver.mjs` | IMP | Broken @imports, circular refs, deep chains, tilde paths |
-| `conflict-detector.mjs` | CNF | Settings conflicts, permission contradictions, hook duplicates |
-| `feature-gap-scanner.mjs` | GAP | 25 feature checks across 4 tiers — shown as opportunities, not grades |
-| `token-hotspots.mjs` | TOK | Cache-breaking volatile content, redundant tool permissions, deep import chains, oversized cascade, bloated SKILL.md descriptions, MCP tool-schema budget (Opus 4.7 patterns) |
-| `cache-prefix-scanner.mjs` | CPS | Volatile content in lines 31–150 of CLAUDE.md cascade (beyond Pattern A's top-30 window) |
-| `disabled-in-schema-scanner.mjs` | DIS | Tools listed in BOTH `permissions.deny` AND `permissions.allow` — deny wins, allow entries are dead config |
-| `collision-scanner.mjs` | COL | Cross-plugin skill name collisions (low); user-vs-plugin overlaps (medium); `details.namespaces` payload |
-
-### Scanner Lib (`scanners/lib/`)
-
-| Module | Purpose |
-|--------|---------|
-| `severity.mjs` | Severity constants, risk scoring, verdict logic, `WEIGHTS` named export (v5 F3) |
-| `output.mjs` | Finding objects (CA-XXX-NNN format), scanner results, envelope, optional `details` payload (v5 N6) |
-| `file-discovery.mjs` | Config file discovery: single-path, multi-path (`discoverConfigFilesMulti`), full-machine (`discoverFullMachinePaths`) |
-| `yaml-parser.mjs` | Frontmatter parsing, JSON parsing, @import/section extraction |
-| `string-utils.mjs` | Line counting, truncation, similarity, key extraction |
-| `scoring.mjs` | Severity-weighted `scoreByArea` (v5 F3), health scorecard, dedup-by-area (v5 N3), `scoringVersion: 'v5'` |
-| `backup.mjs` | Backup creation, manifest parsing, checksum verification |
-| `diff-engine.mjs` | Drift diffing: diffEnvelopes(), formatDiffReport() |
-| `baseline.mjs` | Baseline save/load/list/delete for drift detection |
-| `report-generator.mjs` | Unified markdown reports: posture, drift, plugin health |
-| `suppression.mjs` | .config-audit-ignore parsing, finding suppression, audit trail |
-| `active-config-reader.mjs` | Read-only inventory: readActiveConfig(), detectGitRoot(), walkClaudeMdCascade(), readClaudeJsonProjectSlice() (longest-prefix match), enumeratePlugins(), enumerateSkills(), readActiveHooks(), readActiveMcpServers() (with cache → package.json tool-count fallback), estimateTokens() (v5: `'mcp'` kind = 500 + toolCount × 200) |
-| `tokenizer-api.mjs` | Anthropic `count_tokens` wrapper for `--accurate-tokens` (v5 N5); 5s AbortController timeout, exponential 429 backoff, key masking |
-| `humanizer.mjs` | Plain-language output translator (v5.1.0): `humanizeFinding`, `humanizeFindings`, `humanizeEnvelope`, `computeRelevanceContext`. Pure functions; never mutate inputs. Adds `userImpactCategory`, `userActionLanguage`, `relevanceContext` fields and replaces title/description/recommendation when a translation exists. Bypassed by `--raw` and `--json` paths. |
-| `humanizer-data.mjs` | TRANSLATIONS table for 13 scanner prefixes (CML/SET/HKV/RUL/MCP/IMP/CNF/COL/TOK/CPS/DIS/GAP/PLH). Three-step lookup: exact title → regex pattern → `_default` → fall through to original |
-
-### Action Engines (`scanners/`)
-
-| Module | Purpose |
-|--------|---------|
-| `fix-engine.mjs` | planFixes(), applyFixes(), verifyFixes() — 9 fix types |
-| `rollback-engine.mjs` | listBackups(), restoreBackup(), deleteBackup() |
-| `fix-cli.mjs` | CLI: `node fix-cli.mjs <path> [--apply] [--json] [--global]` |
-| `drift-cli.mjs` | CLI: `node drift-cli.mjs <path> [--save] [--baseline name] [--json]` |
-| `whats-active.mjs` | CLI: `node whats-active.mjs <path> [--json] [--verbose] [--suggest-disables]` — read-only active-config inventory |
-| `token-hotspots-cli.mjs` | CLI: `node token-hotspots-cli.mjs <path> [--json] [--global] [--output-file path] [--accurate-tokens] [--with-telemetry-recipe]` — Opus-4.7 token hotspots ranking with optional API calibration |
-| `manifest.mjs` | CLI: `node manifest.mjs <path> [--json]` — ranked system-prompt token-source table (v5 N2) |
-
-### Standalone Scanner
-
-| Module | Prefix | Purpose |
-|--------|--------|---------|
-| `plugin-health-scanner.mjs` | PLH | Plugin structure, frontmatter, cross-plugin conflicts (runs independently) |
-| `self-audit.mjs` | — | Runs all scanners + plugin health on this plugin itself |
-
-## Knowledge Base (`knowledge/`)
-
-| File | Content |
-|------|---------|
-| `claude-code-capabilities.md` | Feature register: 18 config surfaces, Anthropic guidance, relevance table |
-| `configuration-best-practices.md` | Per-layer best practices (v5: Opus 4.7 cache-stability guidance replaces Sonnet-era 200-line rule) |
-| `anti-patterns.md` | Common mistakes mapped to scanner IDs |
-| `hook-events-reference.md` | All 26 hook events with details |
-| `feature-evolution.md` | Feature timeline for staleness detection |
-| `gap-closure-templates.md` | Config-specific templates for closing gaps |
-| `opus-4.7-patterns.md` | Token-cost dynamics for Opus 4.7 era — patterns powering the TOK scanner |
-| `cache-telemetry-recipe.md` | Manual `jq` recipe for verifying prompt-cache hit rate from session transcripts (v5 M7) |
-
 ## Hooks
 
 | Event | Script | Purpose |
@@ -132,56 +59,20 @@ Scanner CLI: `node scanners/scan-orchestrator.mjs <path> [--global] [--full-mach
 | SessionStart | `session-start.mjs` | Checks for active (unfinished) sessions |
 | Stop | `stop-session-reminder.mjs` | Reminds about current session phase |
 
-## Plain-Language Output (v5.1.0)
+## Reference docs (read on demand)
 
-Default output of all 18 commands routes through `humanizeEnvelope` from `lib/humanizer.mjs`. Findings are decorated with three additive fields and may have title/description/recommendation replaced when a translation exists.
+- **Scanner inventory, lib modules, action engines, knowledge base:** `docs/scanner-internals.md`
+- **Plain-language output (v5.1.0), humanizer vocabularies, output modes:** `docs/humanizer.md`
 
-### Output modes
+## Plain-Language Output (v5.1.0) — summary
 
-| Flag | Behavior |
-|------|----------|
-| (default, no flag) | Plain-language: humanizer applied, findings group by user-impact, titles lead with prose. Self-audit terminal render also humanized. |
-| `--raw` | Byte-stable v5.0.0 verbatim — humanizer bypassed, technical IDs and severity-only labels. For tooling that scrapes stderr from v5.0.0. |
-| `--json` | Unchanged from v5.0.0 — humanizer bypassed, byte-stable JSON envelope. Always preferred for programmatic consumption over `--raw`. |
-| `--output-file <path>` | Writes raw v5.0.0-shape JSON (humanizer bypassed). Posture-specific. |
+Default output of all 18 commands routes through `humanizeEnvelope` from `lib/humanizer.mjs`. Findings get three decorated fields:
 
-`--raw` is threaded through every CLI: `posture.mjs`, `scan-orchestrator.mjs`, `token-hotspots-cli.mjs`, `manifest.mjs`, `whats-active.mjs`, `fix-cli.mjs`, `drift-cli.mjs`, `self-audit.mjs`.
+- `userImpactCategory` — Configuration mistake / Conflict / Wasted tokens / Dead config / Missed opportunity
+- `userActionLanguage` — Fix this now / Fix soon / Fix when convenient / Optional cleanup / FYI (derived from severity)
+- `relevanceContext` — `affects-everyone` (default) / `affects-this-machine-only` (`*.local.*` files) / `test-fixture-no-impact`
 
-### Vocabularies
-
-User-impact category (added to each finding as `userImpactCategory`, derived from scanner prefix):
-
-| Label | Scanners |
-|-------|----------|
-| Configuration mistake | CML, SET, HKV, RUL, MCP, IMP, PLH |
-| Conflict | CNF, COL |
-| Wasted tokens | TOK, CPS |
-| Dead config | DIS |
-| Missed opportunity | GAP |
-
-Action language (added to each finding as `userActionLanguage`, derived from severity):
-
-| Severity | Phrase |
-|----------|--------|
-| critical | Fix this now |
-| high | Fix soon |
-| medium | Fix when convenient |
-| low | Optional cleanup |
-| info | FYI |
-
-Relevance context (added to each finding as `relevanceContext`, computed from finding's file path):
-
-| Value | When |
-|-------|------|
-| `test-fixture-no-impact` | Path contains `/tests/fixtures/` or `/test/fixtures/` |
-| `affects-this-machine-only` | Basename matches `*.local.*` (e.g., `settings.local.json`) |
-| `affects-everyone` | Default — assumed shared/committed config |
-
-### Wave 5 lessons
-
-- Posture's stderr scorecard is rendered prose-side and is not part of the JSON envelope; `humanized.areas[].titleHumanized` referenced by command templates lives only in the prose render.
-- Posture's `--output-file` writes raw v5.0.0-shape JSON because `posture.mjs` does not call `humanizeEnvelope`. If session-files should later be humanized, posture needs its own humanize pass — out of v5.1.0 scope.
-- The default-output snapshot at `tests/snapshots/default-output/posture.json` is frozen — change requires `UPDATE_SNAPSHOT=1` plus intent confirmation.
+`--raw` bypasses the humanizer for byte-stable v5.0.0 output. `--json` is also byte-stable. Full detail and Wave 5 lessons: `docs/humanizer.md`.
 
 ## Suppressions
 
diff --git a/plugins/config-audit/docs/humanizer.md b/plugins/config-audit/docs/humanizer.md
new file mode 100644
index 0000000..bacb165
--- /dev/null
+++ b/plugins/config-audit/docs/humanizer.md
@@ -0,0 +1,52 @@
+# Config-Audit — Plain-language output (v5.1.0)
+
+Imported from `CLAUDE.md` via pointer.
+
+Default output of all 18 commands routes through `humanizeEnvelope` from `lib/humanizer.mjs`. Findings are decorated with three additive fields and may have title/description/recommendation replaced when a translation exists.
+
+## Output modes
+
+| Flag | Behavior |
+|------|----------|
+| (default, no flag) | Plain-language: humanizer applied, findings group by user-impact, titles lead with prose. Self-audit terminal render also humanized. |
+| `--raw` | Byte-stable v5.0.0 verbatim — humanizer bypassed, technical IDs and severity-only labels. For tooling that scrapes stderr from v5.0.0. |
+| `--json` | Unchanged from v5.0.0 — humanizer bypassed, byte-stable JSON envelope. Always preferred for programmatic consumption over `--raw`. |
+| `--output-file <path>` | Writes raw v5.0.0-shape JSON (humanizer bypassed). Posture-specific. |
+
+`--raw` is threaded through every CLI: `posture.mjs`, `scan-orchestrator.mjs`, `token-hotspots-cli.mjs`, `manifest.mjs`, `whats-active.mjs`, `fix-cli.mjs`, `drift-cli.mjs`, `self-audit.mjs`.
+
+## Vocabularies
+
+User-impact category (added to each finding as `userImpactCategory`, derived from scanner prefix):
+
+| Label | Scanners |
+|-------|----------|
+| Configuration mistake | CML, SET, HKV, RUL, MCP, IMP, PLH |
+| Conflict | CNF, COL |
+| Wasted tokens | TOK, CPS |
+| Dead config | DIS |
+| Missed opportunity | GAP |
+
+Action language (added to each finding as `userActionLanguage`, derived from severity):
+
+| Severity | Phrase |
+|----------|--------|
+| critical | Fix this now |
+| high | Fix soon |
+| medium | Fix when convenient |
+| low | Optional cleanup |
+| info | FYI |
+
+Relevance context (added to each finding as `relevanceContext`, computed from finding's file path):
+
+| Value | When |
+|-------|------|
+| `test-fixture-no-impact` | Path contains `/tests/fixtures/` or `/test/fixtures/` |
+| `affects-this-machine-only` | Basename matches `*.local.*` (e.g., `settings.local.json`) |
+| `affects-everyone` | Default — assumed shared/committed config |
+
+## Wave 5 lessons
+
+- Posture's stderr scorecard is rendered prose-side and is not part of the JSON envelope; `humanized.areas[].titleHumanized` referenced by command templates lives only in the prose render.
+- Posture's `--output-file` writes raw v5.0.0-shape JSON because `posture.mjs` does not call `humanizeEnvelope`. If session-files should later be humanized, posture needs its own humanize pass — out of v5.1.0 scope.
+- The default-output snapshot at `tests/snapshots/default-output/posture.json` is frozen — change requires `UPDATE_SNAPSHOT=1` plus intent confirmation.
diff --git a/plugins/config-audit/docs/scanner-internals.md b/plugins/config-audit/docs/scanner-internals.md
new file mode 100644
index 0000000..414823f
--- /dev/null
+++ b/plugins/config-audit/docs/scanner-internals.md
@@ -0,0 +1,76 @@
+# Config-Audit — Scanner internals
+
+Detailed scanner inventory, lib modules, action engines, knowledge base. Imported from `CLAUDE.md` via pointer.
+
+## Deterministic Scanners
+
+Node.js scanners (zero external dependencies), run via `node scanners/scan-orchestrator.mjs <path>`.
+Posture CLI: `node scanners/posture.mjs <path> [--json] [--global] [--full-machine] [--output-file path]`.
+Scanner CLI: `node scanners/scan-orchestrator.mjs <path> [--global] [--full-machine] [--no-suppress]`.
+
+| Scanner | Prefix | Detects |
+|---------|--------|---------|
+| `claude-md-linter.mjs` | CML | Structure, length, sections, @imports, duplicates, TODOs |
+| `settings-validator.mjs` | SET | Schema, unknown/deprecated keys, type mismatches, permissions |
+| `hook-validator.mjs` | HKV | Format, script existence, event validity, timeouts |
+| `rules-validator.mjs` | RUL | Glob matching, orphan rules, deprecated fields, unscoped rules |
+| `mcp-config-validator.mjs` | MCP | Server types, trust levels, env vars, unknown fields |
+| `import-resolver.mjs` | IMP | Broken @imports, circular refs, deep chains, tilde paths |
+| `conflict-detector.mjs` | CNF | Settings conflicts, permission contradictions, hook duplicates |
+| `feature-gap-scanner.mjs` | GAP | 25 feature checks across 4 tiers — shown as opportunities, not grades |
+| `token-hotspots.mjs` | TOK | Cache-breaking volatile content, redundant tool permissions, deep import chains, oversized cascade, bloated SKILL.md descriptions, MCP tool-schema budget (Opus 4.7 patterns) |
+| `cache-prefix-scanner.mjs` | CPS | Volatile content in lines 31–150 of CLAUDE.md cascade (beyond Pattern A's top-30 window) |
+| `disabled-in-schema-scanner.mjs` | DIS | Tools listed in BOTH `permissions.deny` AND `permissions.allow` — deny wins, allow entries are dead config |
+| `collision-scanner.mjs` | COL | Cross-plugin skill name collisions (low); user-vs-plugin overlaps (medium); `details.namespaces` payload |
+
+## Scanner Lib (`scanners/lib/`)
+
+| Module | Purpose |
+|--------|---------|
+| `severity.mjs` | Severity constants, risk scoring, verdict logic, `WEIGHTS` named export (v5 F3) |
+| `output.mjs` | Finding objects (CA-XXX-NNN format), scanner results, envelope, optional `details` payload (v5 N6) |
+| `file-discovery.mjs` | Config file discovery: single-path, multi-path (`discoverConfigFilesMulti`), full-machine (`discoverFullMachinePaths`) |
+| `yaml-parser.mjs` | Frontmatter parsing, JSON parsing, @import/section extraction |
+| `string-utils.mjs` | Line counting, truncation, similarity, key extraction |
+| `scoring.mjs` | Severity-weighted `scoreByArea` (v5 F3), health scorecard, dedup-by-area (v5 N3), `scoringVersion: 'v5'` |
+| `backup.mjs` | Backup creation, manifest parsing, checksum verification |
+| `diff-engine.mjs` | Drift diffing: diffEnvelopes(), formatDiffReport() |
+| `baseline.mjs` | Baseline save/load/list/delete for drift detection |
+| `report-generator.mjs` | Unified markdown reports: posture, drift, plugin health |
+| `suppression.mjs` | .config-audit-ignore parsing, finding suppression, audit trail |
+| `active-config-reader.mjs` | Read-only inventory: readActiveConfig(), detectGitRoot(), walkClaudeMdCascade(), readClaudeJsonProjectSlice() (longest-prefix match), enumeratePlugins(), enumerateSkills(), readActiveHooks(), readActiveMcpServers() (with cache → package.json tool-count fallback), estimateTokens() (v5: `'mcp'` kind = 500 + toolCount × 200) |
+| `tokenizer-api.mjs` | Anthropic `count_tokens` wrapper for `--accurate-tokens` (v5 N5); 5s AbortController timeout, exponential 429 backoff, key masking |
+| `humanizer.mjs` | Plain-language output translator (v5.1.0): `humanizeFinding`, `humanizeFindings`, `humanizeEnvelope`, `computeRelevanceContext`. Pure functions; never mutate inputs. Adds `userImpactCategory`, `userActionLanguage`, `relevanceContext` fields and replaces title/description/recommendation when a translation exists. Bypassed by `--raw` and `--json` paths. |
+| `humanizer-data.mjs` | TRANSLATIONS table for 13 scanner prefixes (CML/SET/HKV/RUL/MCP/IMP/CNF/COL/TOK/CPS/DIS/GAP/PLH). Three-step lookup: exact title → regex pattern → `_default` → fall through to original |
+
+## Action Engines (`scanners/`)
+
+| Module | Purpose |
+|--------|---------|
+| `fix-engine.mjs` | planFixes(), applyFixes(), verifyFixes() — 9 fix types |
+| `rollback-engine.mjs` | listBackups(), restoreBackup(), deleteBackup() |
+| `fix-cli.mjs` | CLI: `node fix-cli.mjs <path> [--apply] [--json] [--global]` |
+| `drift-cli.mjs` | CLI: `node drift-cli.mjs <path> [--save] [--baseline name] [--json]` |
+| `whats-active.mjs` | CLI: `node whats-active.mjs <path> [--json] [--verbose] [--suggest-disables]` — read-only active-config inventory |
+| `token-hotspots-cli.mjs` | CLI: `node token-hotspots-cli.mjs <path> [--json] [--global] [--output-file path] [--accurate-tokens] [--with-telemetry-recipe]` — Opus-4.7 token hotspots ranking with optional API calibration |
+| `manifest.mjs` | CLI: `node manifest.mjs <path> [--json]` — ranked system-prompt token-source table (v5 N2) |
+
+## Standalone Scanner
+
+| Module | Prefix | Purpose |
+|--------|--------|---------|
+| `plugin-health-scanner.mjs` | PLH | Plugin structure, frontmatter, cross-plugin conflicts (runs independently) |
+| `self-audit.mjs` | — | Runs all scanners + plugin health on this plugin itself |
+
+## Knowledge Base (`knowledge/`)
+
+| File | Content |
+|------|---------|
+| `claude-code-capabilities.md` | Feature register: 18 config surfaces, Anthropic guidance, relevance table |
+| `configuration-best-practices.md` | Per-layer best practices (v5: Opus 4.7 cache-stability guidance replaces Sonnet-era 200-line rule) |
+| `anti-patterns.md` | Common mistakes mapped to scanner IDs |
+| `hook-events-reference.md` | All 26 hook events with details |
+| `feature-evolution.md` | Feature timeline for staleness detection |
+| `gap-closure-templates.md` | Config-specific templates for closing gaps |
+| `opus-4.7-patterns.md` | Token-cost dynamics for Opus 4.7 era — patterns powering the TOK scanner |
+| `cache-telemetry-recipe.md` | Manual `jq` recipe for verifying prompt-cache hit rate from session transcripts (v5 M7) |
diff --git a/plugins/llm-security/.claude-plugin/plugin.json b/plugins/llm-security/.claude-plugin/plugin.json
index 0dfb850..3ab8d30 100644
--- a/plugins/llm-security/.claude-plugin/plugin.json
+++ b/plugins/llm-security/.claude-plugin/plugin.json
@@ -1,5 +1,5 @@
 {
   "name": "llm-security",
   "description": "Security scanning, auditing, and threat modeling for Claude Code projects. Detects secrets, validates MCP servers, assesses security posture, and generates threat models aligned with OWASP LLM Top 10.",
-  "version": "7.6.1"
+  "version": "7.7.2"
 }
diff --git a/plugins/llm-security/CHANGELOG.md b/plugins/llm-security/CHANGELOG.md
index 4a4099c..248f98f 100644
--- a/plugins/llm-security/CHANGELOG.md
+++ b/plugins/llm-security/CHANGELOG.md
@@ -6,6 +6,191 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [7.7.2] - 2026-05-19
+
+Language consistency pass. Norwegian had crept into surface text across
+v7.5-v7.7. Per the `~/.claude/CLAUDE.md` convention (English for code and
+documentation, Norwegian for dialog only), surface text was translated to
+English. No scanner, hook, or behavior changes — purely surface text.
+
+### Changed
+
+- **18 skill commands `commands/*.md`** — the "HTML Report"-step appended
+  by each `/security <cmd>` flow now reads
+  `> **HTML report:** [Open in browser](file:///abs/path.html)` (previously
+  Norwegian).
+- **CLI canonical module `scripts/lib/report-renderers.mjs`** — translated
+  KEY_STATS_CONFIG labels (`TOTALT` → `TOTAL`, `KRITISK` → `CRITICAL`,
+  `HØY` → `HIGH`, `FUNN` → `FINDINGS`, `PROSJEKTER` → `PROJECTS`,
+  `MASKINKLASSE` → `MACHINE GRADE`, `SVAKEST` → `WEAKEST`,
+  `NÅ-GRADE` → `CURRENT GRADE`, `AKSJONER` → `ACTIONS`, `MODUS` → `MODE`),
+  the 5-step maturity ladder descriptions, the suppressed-group desc,
+  4 table-header sets, the 6 renderer `lede` defaults (plugin-audit,
+  mcp-audit, harden, diff, watch, clean), the action tier labels
+  (Umiddelbar/Høy prioritet/Medium prioritet → Immediate/High priority/
+  Medium priority), the clean buckets, and the dry-run/apply text. JS
+  comments translated for consistency. Preserved the regex alternations
+  `/^high|^høy/` and `/resolution|løsning/i` — they intentionally match
+  Norwegian-language report markdown.
+- **Playground `playground/llm-security-playground.html`** — the same
+  display strings as the canonical module (kept bit-identical), plus
+  playground-specific UI text: catalog row labels, search placeholder,
+  breadcrumb aria-label, theme-toggle labels, primary nav aria-label,
+  builder-modal hints, "no projects yet" guide-panel, delete-project
+  confirmation, alert/copy-confirm strings, and the field-from-tag
+  "felles" pill (now "shared"). The hardcoded `Plugin v7.7.1` in
+  `renderHome` bumped to `Plugin v7.7.2`, and `prosjekter`/`kommandoer`
+  there became `projects`/`commands`. Demo-state fixture content for the
+  `dft-komplett-demo` project (intentional Norwegian persona) and regex
+  tokens were preserved.
+- **Agent prompts `agents/skill-scanner-agent.md` +
+  `agents/mcp-scanner-agent.md`** — translated the `Generaliseringsgrense`
+  and `Parallell Read-strategi` sections (identical content in both files)
+  to `Generalization boundary` and `Parallel Read strategy`.
+- **`README.md`** — translated the Recent versions table rows for v7.5.0
+  → v7.7.1 and the playground architecture prose (L495-553). Version
+  badge bumped to 7.7.2.
+- **`CLAUDE.md`** — translated the v7.7.1 highlights paragraph and added a
+  new v7.7.2 highlights paragraph. Header and "release notes" sentinel
+  bumped to v7.7.2.
+- **Marketplace root `../../README.md`** — translated the v7.5.0 → v7.7.1
+  llm-security bullet entries (lines 39-43). Version label in the
+  header bumped to v7.7.2. The voyage and ms-ai-architect entries on
+  lines 90-91 / 192-197 were not touched (strict plugin scope).
+- **Marketplace root `../../CLAUDE.md`** — translated the llm-security
+  catalog entry on line 13 and bumped its version to v7.7.2.
+- **`docs/scanner-reference.md`** — translated the six runnable-examples
+  table cells (L114-122) and the surrounding paragraph.
+- **`docs/version-history.md`** — added a v7.7.2 entry describing this
+  pass. The v7.5.0 → v7.7.1 narrative sections retain the Norwegian they
+  were written in (deferred per operator decision).
+- **`package.json` + `.claude-plugin/plugin.json`** — version 7.7.1 →
+  7.7.2.
+
+### Preserved (intentional Norwegian)
+
+- Demo-state `dft-komplett-demo` JSON `description`, `system_description`,
+  and parsed-data `"label": "HØY"` / `"label": "NÅ-GRADE"` entries —
+  intentional Norwegian persona for the public-sector reference scenario.
+- Regex alternations `/^high|^høy/` and `/resolution|løsning/i` in both
+  the canonical renderer and the playground inline copy — they let
+  reports written in Norwegian still parse and route correctly.
+- `knowledge/norwegian-context.md` and other knowledge files — out of
+  scope.
+- The v7.5.0 → v7.7.1 entries in CHANGELOG.md and `docs/version-history.md`
+  remain in the language they were written in; rewriting historical
+  release notes was deferred.
+- `REMEMBER.md`, `TODO.md`, `ROADMAP.md`, `*.local.md`, commit messages,
+  test fixtures, and the `playground/A11Y-RAPPORT.md` artifact.
+
+## [7.7.1] - 2026-05-18
+
+Playground UX-strip etter v7.7.0-operatør-feedback. Hjem-overflaten ledet
+med prosjekter (Re-onboard / Nytt prosjekt / Command-katalog) — katalog
+var tredje kort, sekundært bak prosjekt-tracks. Operatør ba om å fjerne
+onboarding + prosjekter og beholde katalog ("Vi legger til funksjonalitet
+senere"). Ingen scanner- eller hook-atferdsendringer.
+
+### Changed
+
+- **Playground routing — katalog som eneste levende overflate.**
+  `renderActive()` tvinger alltid `activeSurface` til `'catalog'`.
+  `renderOnboardingSurface`/`renderHomeSurface`/`renderProjectSurface`-
+  funksjonene er bevart i kildekoden, men ikke rutbare før
+  funksjonalitet legges til igjen. Init-default endret fra `'home'`
+  til `'catalog'`, også for migrerte states fra IndexedDB.
+- **Playground topbar — Hjem + Re-onboard-knappene fjernet.**
+  Bare `Katalog`-knappen beholdt i primær navigasjon, sammen med
+  Eksporter/Importer + tema-toggle. Project-state forblir i IndexedDB
+  men ingen UI-vei dit.
+- **Playground topbar breadcrumb — orgName erstattet med
+  `llm-security`.** Etter at onboarding ble fjernet fra routing var
+  `shared.organization.name` (demo-state) fortsatt synlig i toppen
+  ("Direktoratet for digital tjenesteutvikling · Katalog"). Erstattet
+  med statisk `llm-security · Katalog` som nøytralt scope-anker.
+
+### Fixed
+
+- **Hardkodet versjons-streng i `renderHome`.** v7.7.0-versjonsbumpen
+  fanget ikke `'Plugin v7.6.1'` på linje 6933 i
+  `llm-security-playground.html` (template-string-litteral, ikke
+  matching regex-mønster). Bumpet til v7.7.1.
+
+### Notes
+
+- v7.7.1 bumpet kun versjons-strenger i 7 filer (`package.json`,
+  `.claude-plugin/plugin.json`, plugin `README.md` badge + Recent
+  versions-tabell, plugin `CLAUDE.md` header + state-seksjon,
+  `docs/version-history.md`, `playground/llm-security-playground.html`,
+  rot `README.md` plugin-entry, rot `CLAUDE.md` plugin-katalog).
+- Onboarding-konseptet er nå dokumentert som v7.8.0-kandidat
+  (per-kommando kontekst-injeksjon) i ROADMAP.md.
+
+## [7.7.0] - 2026-05-18
+
+HTML-rapport for alle 18 skill-kommandoer som produserer rapport.
+Hver `/security <cmd>` printer nå en klikkbar `file://`-lenke til en
+self-contained HTML-versjon. Levert over fem sesjoner (UX-arbeid +
+renderer-extract + CLI + skill-wiring + release). Ingen scanner-
+eller hook-atferdsendringer — purely additive surface.
+
+### Added
+
+- **Playground katalog list-view + builder-pane** (sesjon 1, `0dc7ff4`).
+  Katalog-overflaten fikk list-view (grid-toggle) + builder-pane med
+  copy-knapp på alle 18 rapporter, så onboarding-flytene blir bredere
+  og dypere uten å forlate playground-modusen.
+- **Playground prosjekt-surface opprydding** (sesjon 2, `86d6ecd`).
+  Stub-screen-håndtering (rapport ikke ferdig parsed → tydelig
+  placeholder i stedet for tom panel), topbar-splitt (navigasjons-
+  trinn vs. eksport-handlinger), generell DS-justering for prosjekt-
+  overflate.
+- **`scripts/lib/report-renderers.mjs`** (sesjon 3, `fa5fb48`).
+  De 18 inline parserne + 18 inline rendererne i playground-HTML-fila
+  flyttet til canonical ESM-modul. Ren overflate: `import { PARSERS,
+  RENDERERS } from './lib/report-renderers.mjs'`. Playground beholder
+  bit-identisk inline-kopi (ESM `import` fungerer ikke fra `file://`
+  uten Chrome/Firefox-flags). Canonical kilde + playground inline = to
+  overflater, samme atferd.
+- **`scripts/render-report.mjs` CLI** (sesjon 4, `db80854`).
+  Zero-dep Node-CLI som tar `commandId` + `--in`/`--out`-flags og
+  konverterer markdown-rapporter til self-contained HTML.
+  Stdin/file/stdout-modus, kebab→camel commandId-routing (alle 18
+  PARSERS fungerer automatisk uten hardkoding). Output inliner 6
+  DS-stylesheets (`tokens`, `base`, `components`, `tier2`, `tier3`,
+  `tier3-supplement`) + lokal `.report-table`-CSS. ~140 KB
+  self-contained HTML; fonter ikke inlined (ville blåst opp 7x til
+  ~1 MB), `tokens.css` har `-apple-system, BlinkMacSystemFont,
+  system-ui` som fallback. Absolutte `file://`-paths i stdout for
+  Ghostty cmd-click. Default output `reports/<command>-<YYYYMMDD-
+  HHmmss>.html` relativt til CWD.
+- **HTML-rapport for alle 18 skill-kommandoer** (sesjon 4-5).
+  Sesjon 4 wired 4 skills (`scan`, `audit`, `posture`, `deep-scan`).
+  Sesjon 5 wired de 14 resterende (`plugin-audit`, `mcp-audit`,
+  `mcp-inspect`, `ide-scan`, `supply-check`, `dashboard`, `pre-deploy`,
+  `diff`, `watch`, `registry`, `clean`, `harden`, `threat-model`,
+  `red-team`). Hver skill-fil har en avsluttende "HTML Report"-step
+  som instruerer Claude å (1) compute temp md-path, (2) Write hele
+  markdown-rapporten verbatim, (3) kjøre CLI, (4) appende
+  `> **HTML-rapport:** [Åpne i nettleser](file:///abs/sti.html)`
+  til respons.
+
+### Changed
+
+- Playground beholder inline-kopi av parserne og rendererne for å
+  forbli single-file `file://`-distribuerbar — ESM `import` fungerer
+  ikke fra `file://`-URLs uten Chrome/Firefox-flags. Canonical kilden
+  i `scripts/lib/report-renderers.mjs` og playground inline-kopien er
+  bit-identisk per release.
+
+### Notes
+
+- Pre-existing `pre-compact-scan`-perf-flake (1000 ms terskel under
+  last) gjenstår — defer til v7.7.x patch.
+- Sync-test mellom `scripts/lib/report-renderers.mjs` og playground
+  inline-kopi planlagt som v7.7.x patch (krever scope-utvidelse til
+  `tests/`).
+
 ## [7.6.1] - 2026-05-06
 
 Playground v7.6.0 visuell-patch. Seks bugs fanget under maintainer-
diff --git a/plugins/llm-security/CLAUDE.md b/plugins/llm-security/CLAUDE.md
index 9b152de..892a2c3 100644
--- a/plugins/llm-security/CLAUDE.md
+++ b/plugins/llm-security/CLAUDE.md
@@ -1,168 +1,14 @@
-# LLM Security Plugin (v7.6.1)
+# LLM Security Plugin (v7.7.2)
 
-Security scanning, auditing, and threat modeling for Claude Code projects. 5 frameworks: OWASP LLM Top 10, Agentic AI Top 10 (ASI), Skills Top 10 (AST), MCP Top 10, AI Agent Traps (DeepMind). 1822+ unit, integration, and end-to-end tests (`tests/e2e/` covers the multi-hook attack chain, multi-session state simulation, and the full scan-orchestrator pipeline); mutation-testing coverage not published.
+Security scanning, auditing, and threat modeling for Claude Code projects. 5 frameworks: OWASP LLM Top 10, Agentic AI Top 10 (ASI), Skills Top 10 (AST), MCP Top 10, AI Agent Traps (DeepMind). 1820+ unit, integration, and end-to-end tests (`tests/e2e/` covers the multi-hook attack chain, multi-session state simulation, and the full scan-orchestrator pipeline); mutation-testing coverage not published.
 
-**v7.0.0 — Severity-dominated risk scoring (v2 model, BREAKING).** Three changes target the false-positive cascade on real codebases (hyperframes.com gave `BLOCK / Extreme / 100`, ~70% noise):
+Release notes for v7.0.0 → v7.7.2: see `docs/version-history.md` — read on demand.
 
-1. **Risk-score v2 formula** (`scanners/lib/severity.mjs`) — severity-dominated, log-scaled within tier. Replaces v1 sum-and-cap that collapsed every non-trivial scan to 100/Extreme. Tiers: critical → 70–95, high only → 40–65, medium only → 15–35, low only → 1–11. Verdict cutoffs realigned to new bands (BLOCK ≥65, WARNING ≥15). `info` findings are observability-only — counted in OWASP aggregates but contribute zero to risk_score, verdict, and riskBand (B3, v7.2.0 — was undocumented pre-7.2.0). See `severity.mjs` JSDoc for full contract.
-2. **Rule-based entropy scanner with file-extension skip, 8 line-level suppression rules, and configurable policy** — extensions skipped (`.glsl/.frag/.vert/.shader/.wgsl/.css/.scss/.sass/.less/.svg/.min.*/.map`); line-suppression rules (GLSL keywords, CSS-in-JS, inline SVG, ffmpeg `filter_complex`, User-Agent strings, SQL DDL, `throw new Error(\`...\`)`, markdown image URLs). Configurable via `.llm-security/policy.json` `entropy` section (thresholds, `suppress_extensions`, `suppress_line_patterns`, `suppress_paths`). Envelope `calibration` block reports skip counters + effective thresholds + policy source.
-3. **DEP typosquat allowlist expansion** — 22 npm + 5 PyPI entries for short-name tools that tripped Levenshtein detection on every modern codebase (`knip`, `oxlint`, `tsx`, `nx`, `rimraf`, `uv`, `ruff`, etc.).
+**v7.7.2 highlights** — Language consistency pass. Norwegian had crept into the playground UI strings, the canonical CLI renderer (`scripts/lib/report-renderers.mjs`), the HTML Report-step appended by all 18 skill commands, two agent prompts, and the marketplace + plugin README/CLAUDE.md state sections. Per the `~/.claude/CLAUDE.md` convention (English for code and documentation, Norwegian for dialog only), surface text was translated to English. Demo-state fixture content for the `dft-komplett-demo` project (intentional Norwegian persona) and regex alternations that match Norwegian-language report markdown (`/^high|^høy/`, `/resolution|løsning/`) were preserved. No scanner, hook, or behavior changes.
 
-See `docs/security-hardening-guide.md` §6 for the calibration story.
+**v7.7.1 highlights** — Playground UX strip after operator feedback: the catalog is now the only routable surface (the onboarding/home/project render functions remain in source but are not routable until the feature is restored). The topbar breadcrumb no longer reads the demo-state org name; it shows a neutral `llm-security · Catalog`. The hardcoded version string in `renderHome` was synced. No scanner or hook behavior changes.
 
-**v7.1.1 — Scan-rapport narrative coherence (patch).** Three coordinated
-edits address the whiplash symptom that survived v7.0.0 (numbers fixed,
-narrative still walked findings back as "false positive" in prose):
-(a) `agents/skill-scanner-agent.md` Step 2.5 mandates context-first
-severity assignment — every signal has exactly one disposition (suppressed
-OR reported), no per-finding walk-back; (b) `templates/unified-report.md`
-gains a `### Narrative Audit` block in Executive Summary surfacing
-`summary.narrative_audit.suppressed_findings.{count, by_category}` from
-the agent's trailing JSON; (c) both files updated from stale v1
-risk-formula constants to the v2 model that has been authoritative in
-`severity.mjs` since v7.0.0. Counter is distinct from the existing
-top-level `output.suppressed` (`.llm-security-ignore` rule integer).
-Out-of-scope but flagged: `commands/scan.md:113-114` retains the v1
-formula; resolution deferred to Batch B.
-
-**v7.3.0 — MCP cumulative-drift baseline (in progress, Wave C of Batch C).**
-Closes E14 from `docs/critical-review-2026-04-20.md`. The
-`mcp-description-cache.mjs` schema gains a sticky `baseline` slot per
-tool plus a 10-event rolling `history` array (FIFO). Cumulative drift =
-`levenshtein(current, baseline) / max(|current|, |baseline|)`; when the
-ratio crosses `mcp.cumulative_drift_threshold` (default 0.25),
-`post-mcp-verify.mjs` emits a separate MEDIUM `mcp-cumulative-drift`
-advisory. The existing per-update >10% drift signal is unchanged — both
-fire independently. Slow-burn rug-pulls that keep each update under the
-per-update threshold but cumulatively diverge from baseline are now
-caught. Baseline survives the 7-day TTL purge so detection persists
-across the full window. New `/security mcp-baseline-reset` slash command
-(plus `scanners/mcp-baseline-reset.mjs` CLI: `--list`, `--target <tool>`,
-or no-args clear-all) lets the user acknowledge a legitimate MCP server
-upgrade — clearing the baseline causes the next call to seed a fresh
-one from the incoming description; description, firstSeen, lastSeen, and
-history are preserved for audit. `LLM_SECURITY_MCP_CACHE_FILE` env var
-overrides the cache path for end-to-end testing without polluting the
-user's real `~/.cache/llm-security/mcp-descriptions.json`.
-
-**v7.3.0 — Env-var deprecation warnings (D3 of Batch C, Wave D).**
-Closes 8.7 from `.claude/projects/2026-04-29-batch-c-scope-finalize/plan.md`.
-`scanners/lib/policy-loader.mjs` exports a new helper
-`getPolicyValueWithEnvWarn(section, key, envVarName, defaultValue)` —
-env still wins per Preferences (existing behaviour), but when both the
-env-var AND the `policy.json` key are explicitly set, the helper emits a
-single per-process stderr line: `[llm-security] Deprecation: env-var
-${ENVVAR} will be removed in v8.0.0; policy.json key ${section}.${key}
-also set — env wins for now. Suppress with LLM_SECURITY_DEPRECATION_QUIET=1.`
-Module-scoped `Set` dedupes per env-var name across call-sites. Four
-overlapping vars are wired through the helper:
-`LLM_SECURITY_INJECTION_MODE` ↔ `injection.mode` (in
-`pre-prompt-inject-scan.mjs`), `LLM_SECURITY_TRIFECTA_MODE` ↔
-`trifecta.mode` and `LLM_SECURITY_ESCALATION_WINDOW` ↔
-`trifecta.escalation_window` (in `post-session-guard.mjs`),
-`LLM_SECURITY_AUDIT_LOG` ↔ `audit.log_path` (in
-`scanners/lib/audit-trail.mjs`). `DEFAULT_POLICY` gains
-`trifecta.escalation_window: 5` to close the gap noted in the plan
-revisions table (M10). Env-only vars without policy.json equivalents
-(`LLM_SECURITY_UPDATE_CHECK`, `LLM_SECURITY_PRECOMPACT_MODE`,
-`LLM_SECURITY_PRECOMPACT_MAX_BYTES`, `LLM_SECURITY_IDE_ROOTS`,
-`LLM_SECURITY_MCP_CACHE_FILE`) are unchanged — they emit no
-deprecation signal because there is nothing to deprecate yet.
-
-**v7.5.0 — Playground (additive surface, no scanner/hook behavior changes).**
-Single-file SPA at `playground/llm-security-playground.html` (~10 200 lines)
-for onboarding, demo og workshop-bruk uten Claude Code-installasjon. Parser
-+ renderer for alle 18 `produces_report=true`-kommandoer i `CATALOG`. State
-i IndexedDB primær (`llm-security-playground-v1`) med localStorage-fallback,
-sirkelfri Proxy + EventTarget store, microtask-batchet render. Theme-bootstrap
-med FOUC-prevention. 4 overflater: onboarding (5 grupper) → home (3 tracks)
-→ catalog (20 kommandoer) ⇄ project (rapporter / oversikt / kontekst /
-eksport). Demo-state har tre prosjekter inline; `dft-komplett-demo` har alle
-18 rapporter ferdig parsed for klikk-gjennom. Vendor-synket design-system
-under `playground/vendor/playground-design-system/` (sjekksum-låst via
-`MANIFEST.json`, redigeres aldri direkte). Test-fixtures under
-`playground/test-fixtures/` (én markdown-fil per kommando) er kontrakt-anker
-for parser-utvikling. Skjermdumper i `playground/screenshots/v7.5.0/`.
-Eksponerte vinduer-globaler for testing/automasjon: `__store`, `__navigate`,
-`__loadDemoState`, `__scheduleRender`, `__PARSERS`, `__RENDERERS`, `__CATALOG`,
-`__inferVerdict`, `__inferKeyStats`, `__renderPageShell`, `__handlePasteImport`.
-Inkluderer fix av `normalizeVerdictText` regex-rekkefølge: GO-WITH-CONDITIONS
-sjekkes før GO så betinget verdict ikke kollapser til ALLOW.
-
-**v7.6.0 — Playground Tier 3-referanse-case (additive surface, no
-scanner/hook behavior changes).** Playgroundet er nå en visuelt og
-strukturelt fullført referanse-implementasjon for
-`shared/playground-design-system/` Tier 3-supplementet. 8 nye Tier 3-
-komponenter integrert i de 18 rapport-rendererne: `tfa-flow` + `tfa-leg`
-+ `tfa-arrow` (lethal trifecta-kjede med `<button>`-elementer + ARIA-
-group/aria-label) i `renderScan` + `renderDeepScan`; `mat-ladder` +
-`mat-step` (5-trinns modenhets-stige med terskler 0/25/50/75/95% PASS)
-i `renderPosture`; `suppressed-group` (narrative-audit fra
-`summary.narrative_audit.suppressed_findings`) i `renderScan` +
-`renderDeepScan`; `codepoint-reveal` + `cp-tag`/`cp-zw`/`cp-bidi`
-(Unicode-steganografi side-ved-side reveal med U+200B-D|FEFF|2060|180E
-→ `cp-zw`, U+202A-E|2066-9 → `cp-bidi`-detection) i `renderMcpInspect`;
-`top-risks` + `top-risk[data-severity]` (rangert top-funn-listing,
-semantisk `<ol>`, ekskluderer info-funn) i `renderScan`/`renderDeepScan`/
-`renderPluginAudit`/`renderPosture`/`renderAudit`; utvidet
-`recommendation-card[data-severity]` (severity-tinted advisory) på alle
-inline-bruk + nye per-bucket advisory-cards i `renderClean` + intro
-snapshot + diff-rows i `renderHarden` (action-mapping CREATE→positive /
-APPEND→medium / MERGE→low / SKIP→low); `risk-meter` (band-visualisering
-0-100 med Low/Medium/High/Critical/Extreme bands) på 5 archetypes
-(scan, deep-scan, plugin-audit, audit, red-team); `card--severity-{level}`
-modifier på `findings__item`-cards. Wave 1 (Sesjon 2) la til
-`badge--scope-security` (identitets-chip), `verdict-pill-lg` med
-`__verdict`+`__sub` (erstatter custom verdict-pill på alle 18 rapport-
-typer), og DS Tier 3 `form-progress` + `fp-step` i onboarding-wizard.
-Wave 0 (Sesjon 1) slettet ~30 duplikat-CSS-deklarasjoner fra `<style>`-
-blokken (DS vinner cascade) og harmoniserte page-shell på alle 4
-overflater. 5 nye DS-helpers: `renderToxicFlow`, `renderMatLadder`,
-`renderSuppressedGroup`, `renderCodepointReveal`, `renderTopRisks`.
-2 nye normaliserings-helpers: `mapSeverityToCardLevel(input)` (severity
-+ action-types til DS-konvensjoner) og `parseNarrativeAudit(md)`. 12
-skjermdumper planlagt i `playground/screenshots/v7.6.0/`. A11Y-rapport
-oppdatert (`playground/A11Y-RAPPORT.md`) — WCAG 2.1 AA bekreftet,
-severity-soft fargepar verifisert, semantiske elementer (`<ol>`,
-`<button>`, `<section>`) erstatter generic `<div>`. Filendring totalt
-over 5 sesjoner: 10209 → 10677 linjer. Kjent begrensning: `parsed.findings`
-er tom for `deep-scan`/`audit` demo-fixturer (parser-begrensning,
-ikke fikset i v7.6.0 — sporet for v7.6.x patch).
-
-**v7.6.1 — Playground visuell-patch (no scanner/hook behavior changes).**
-Seks bugs fanget av maintainer ved manuell verifisering i nettleser
-etter v7.6.0-release. Alle skyldtes mismatch mellom DS-klasser og
-hvordan playground-rendrere brukte dem (eller manglende DS-
-implementasjoner av klasser playground-rendrere antok eksisterte).
-(1) `renderFindingsBlock` brukte `.findings` outer-class som DS har som
-2-kolonners grid (`grid-template-columns: 360px 1fr`) for list+detail-
-panel-layout — playground brukte den uten detail-panel, headeren havnet
-i venstre 360px-kolonne, items i 1fr. Erstattet med
-`<section class="report-meta">` + `<h4>` + korrekt `findings__list >
-findings__group > findings__group-header + findings__items`-mønster.
-(2) `.report-table` manglet helt i DS men brukes i 7+ rendrere (OWASP-
-kategorier, Supply chain, Scanner Risk Matrix, Plugin-meta, Permission-
-matrise, Live-meter, Siste runs, Godkjenninger, Mitigation roadmap) —
-lagt lokal CSS-implementasjon i playground-HTML `<style>`-blokk
-(border-collapse, zebra-hover, header-styling). (3) `renderPreDeploy`
-traffic-lights brukte `.sm-card__grade` som er fast 28×28 px (designet
-for én A-F-bokstav) — kuttet "PASS" til "AS" og "PASS-WITH-NOTES" til
-"PASS-WITH-..." i alle traffic-light-cards. Erstattet med bredde-
-tilpasset status-pill via inline styling (severity-soft + on tokens).
-(4) Threat-model matrix-bobler ikke klikkbare — `<span>` uten event-
-handler. Erstattet med `<button type="button" data-threat-id>` +
-`aria-label`. Click-handler scroller til tilsvarende rad i Trusler-
-tabellen og fremhever den i 1.6 sek. (5) Radar-labels overlappet ved 6+
-akser — alle brukte `text-anchor="middle"` med samme offset. Økt SVG-
-størrelse fra 280×280 til 380×380, radius fra 105 til 125, bytter
-`text-anchor` fra `middle` til `start`/`end` basert på horisontal-
-posisjon (`Math.cos(ang)` > 0.2 / < -0.2 / mellom). (6)
-`recommendation-card__body` tekstoverflyt på lange single-line tekster
-(vilkår, owner-tags, dato) — lagt `overflow-wrap: anywhere; word-break:
-break-word` i lokal `<style>`-blokk. 4/4 fix-spesifikke smoke-tester
-passerer + 18/18 renderere produserer fortsatt komplett HTML mot
-`dft-komplett-demo` (regresjons-test). Filendring 10677 → 10753 linjer
-(+76 netto).
+**v7.7.0 highlights** — All 18 report-producing skill commands now emit a clickable `file://` link to a self-contained HTML version of their markdown report. The new `scripts/render-report.mjs` CLI converts any of the 18 report types via a canonical `scripts/lib/report-renderers.mjs` (18 parsers + 18 renderers, bit-identical to the playground). HTML wraps the Tier 1/2/3 design system inline; no external assets, system fonts only (~140 KB per report). Playground also got list-view, copy-button, and project-surface cleanup.
 
 ## Commands
 
@@ -176,7 +22,7 @@ passerer + 18/18 renderere produserer fortsatt komplett HTML mot
 | `/security mcp-audit [--live]` | MCP server config audit (add `--live` for runtime inspection) |
 | `/security mcp-inspect` | Live MCP server inspection — connect via JSON-RPC 2.0, scan tool descriptions |
 | `/security mcp-baseline-reset` | Reset MCP description baseline cache (E14, v7.3.0) — after legitimate MCP server upgrade |
-| `/security ide-scan [target\|url]` | Scan installed VS Code + JetBrains extensions/plugins — OR fetch a remote VSIX from Marketplace, OpenVSX, or direct URL (v6.4.0), OR a JetBrains plugin from `plugins.jetbrains.com` (v6.6.0). 7 VS Code checks + 7 JetBrains-specific checks (theme-with-code, broad activation, Premain-Class instrumentation, native binaries, depends-chain, typosquat, shaded jars). Hardened ZIP extractor (zip-slip, symlink, bomb, ratio caps — no fuzz-testing results published to date). Orchestrates reused scanners (UNI/ENT/NET/TNT/MEM/SCR) per extension. Offline by default, `--online` opt-in |
+| `/security ide-scan [target\|url]` | Scan installed VS Code + JetBrains extensions/plugins, or fetch a remote VSIX/JetBrains plugin via URL. Details: `docs/scanner-reference.md` |
 | `/security posture` | Quick scorecard (13 categories) |
 | `/security threat-model` | Interactive STRIDE/MAESTRO session |
 | `/security diff [path]` | Compare scan against baseline — shows new/resolved/unchanged/moved |
@@ -186,7 +32,7 @@ passerer + 18/18 renderere produserer fortsatt komplett HTML mot
 | `/security clean [path]` | Scan + remediate (auto/semi-auto/manual) |
 | `/security dashboard` | Cross-project security dashboard — machine-wide posture overview |
 | `/security harden [path]` | Generate Grade A config — settings.json, CLAUDE.md, .gitignore |
-| `/security red-team [--category] [--adaptive]` | Attack simulation — 64 scenarios across 12 categories against plugin hooks. `--adaptive` for mutation-based evasion testing |
+| `/security red-team [--category] [--adaptive]` | Attack simulation — 64 scenarios across 12 categories against plugin hooks |
 | `/security pre-deploy` | Pre-deployment checklist |
 
 ## Agents
@@ -206,185 +52,47 @@ passerer + 18/18 renderere produserer fortsatt komplett HTML mot
 |--------|-------|---------|---------|
 | `pre-prompt-inject-scan.mjs` | UserPromptSubmit | — | Block prompt injection, warn on manipulation (incl. oversight evasion, HTML obfuscation, MEDIUM advisory for leetspeak/homoglyphs/zero-width/multi-lang). Unicode Tag steganography detection. Mode: `LLM_SECURITY_INJECTION_MODE=block\|warn\|off` |
 | `pre-edit-secrets.mjs` | PreToolUse | `Edit\|Write` | Block credentials in files |
-| `pre-bash-destructive.mjs` | PreToolUse | `Bash` | Block rm -rf, curl\|sh, fork bombs, eval. Bash evasion normalization (T1-T6 via `bash-normalize.mjs`: empty quotes, ${} expansion, backslash splitting, IFS, ANSI-C hex) — defense-in-depth mot T1-T6; Claude Code 2.1.98+ dekker harness-nivå |
+| `pre-bash-destructive.mjs` | PreToolUse | `Bash` | Block rm -rf, curl\|sh, fork bombs, eval. Bash evasion normalization (T1-T6 via `bash-normalize.mjs`) — defense-in-depth |
 | `pre-install-supply-chain.mjs` | PreToolUse | `Bash` | Block compromised packages across ALL ecosystems. Bash evasion normalization before gate matching |
 | `pre-write-pathguard.mjs` | PreToolUse | `Write` | Block writes to .env, .ssh/, .aws/, credentials, settings |
-| `post-mcp-verify.mjs` | PostToolUse | — (all) | Injection scan on ALL tool output (incl. MEDIUM patterns, HITL traps, sub-agent spawn, NL indirection, cognitive load, hybrid P2SQL/recursive/XSS). HTML content trap detection. Bash-specific: secrets/URLs/size. MCP: per-update description drift (MCP05) AND cumulative drift vs sticky baseline (E14, v7.3.0) — slow-burn rug-pulls that stay under the per-update threshold but diverge >=25% from baseline emit MEDIUM `mcp-cumulative-drift` advisory. Per-tool volume tracking |
-| `post-session-guard.mjs` | PostToolUse | — (all) | Runtime trifecta detection (Rule of Two). Sliding window (20 calls) + 100-call long-horizon. MCP-concentrated trifecta (same server = elevated severity). Sensitive path + exfil detection. Slow-burn trifecta (legs >50 calls apart = MEDIUM). Behavioral drift detection (Jensen-Shannon divergence). CaMeL-inspired data flow tagging (SHA-256 provenance tracking, output→input linking). Mode: `LLM_SECURITY_TRIFECTA_MODE=block\|warn\|off` (default: warn). Cumulative data volume tracking (100KB/500KB/1MB thresholds). Sub-agent delegation tracking (Task/Agent tools): escalation-after-input advisory when delegation occurs within `LLM_SECURITY_ESCALATION_WINDOW` calls (default 5) of untrusted input (DeepMind Agent Traps kat. 4); secondary 20-call MEDIUM advisory catches slow-burn variants outside the primary window (E17, v7.2.0) |
+| `post-mcp-verify.mjs` | PostToolUse | — (all) | Injection scan on ALL tool output. MCP per-update drift + cumulative drift vs sticky baseline (E14, v7.3.0). Per-tool volume tracking |
+| `post-session-guard.mjs` | PostToolUse | — (all) | Runtime trifecta detection (Rule of Two). Sliding window + long-horizon. Behavioral drift (Jensen-Shannon). Mode: `LLM_SECURITY_TRIFECTA_MODE=block\|warn\|off` (default: warn) |
 | `update-check.mjs` | UserPromptSubmit | — | Checks for newer versions (max 1x/24h, cached). Disable: `LLM_SECURITY_UPDATE_CHECK=off` |
-| `pre-compact-scan.mjs` | PreCompact | — | Scan transcript for injection patterns + credentials before context compaction; prevents poisoned content from surviving in compact form. Reads at most last 512 KB for <500ms latency. Mode: `LLM_SECURITY_PRECOMPACT_MODE=block\|warn\|off` (default: warn). Cap: `LLM_SECURITY_PRECOMPACT_MAX_BYTES` |
+| `pre-compact-scan.mjs` | PreCompact | — | Scan transcript for injection + credentials before context compaction. Reads at most last 512 KB. Mode: `LLM_SECURITY_PRECOMPACT_MODE=block\|warn\|off` (default: warn) |
 
 > `pre-install-supply-chain.mjs` covers 7 package managers: npm/yarn/pnpm, pip/pip3/uv, brew, docker, go, cargo, gem. Per-ecosystem blocklists, age gate (<72h), npm audit (critical=block, high=warn), PyPI API inspection, Levenshtein typosquat detection, Docker image verification.
 
+Scanner internals, CLI surface, CI/CD templates, knowledge files, and runnable examples: see `docs/scanner-reference.md`.
+
+Defense philosophy (v5.0), Opus 4.7 alignment, known limitations: see `docs/defense-philosophy.md`.
+
 ## Remote Repo Support
 
 `scan` and `plugin-audit` accept GitHub URLs directly. The command clones to a temp dir via `scanners/lib/git-clone.mjs`, scans locally, then cleans up. Use `--branch <name>` for non-default branches.
 
-**Clone sandboxing (v5.1):** `git clone` executes code via `.gitattributes` filter/smudge drivers — this is a known attack vector. Two layers of defense:
+**Clone sandboxing (v5.1):** Two layers of defense against `git clone` filter/smudge driver attacks:
 1. **Git config flags (all platforms):** `core.hooksPath=/dev/null`, `core.symlinks=false`, `core.fsmonitor=false`, all LFS filter drivers disabled, `protocol.file.allow=never`, `transfer.fsckObjects=true`. Environment: `GIT_CONFIG_NOSYSTEM=1`, `GIT_CONFIG_GLOBAL=/dev/null`, `GIT_ATTR_NOSYSTEM=1`, `GIT_TERMINAL_PROMPT=0`.
-2. **OS sandbox:** macOS `sandbox-exec` or Linux `bubblewrap` (bwrap) restricts file writes to only the specific temp directory. Even if a filter driver bypasses git config, it cannot write outside the clone dir. Fallback on Windows or when neither sandbox is available: git config flags only, WARN logged.
+2. **OS sandbox:** macOS `sandbox-exec` or Linux `bubblewrap` (bwrap) restricts file writes to only the specific temp directory. Fallback on Windows: git config flags only.
 
-Platform matrix: macOS (`sandbox-exec`) — always works. Linux (`bwrap`) — works on Fedora/Arch, may fail on Ubuntu 24.04+ without admin AppArmor config. Windows — no OS sandbox, git config flags only.
+Platform matrix: macOS (`sandbox-exec`) — always works. Linux (`bwrap`) — Fedora/Arch fine, may fail on Ubuntu 24.04+ without admin AppArmor config. Windows — no OS sandbox.
 
 Post-clone: size check (100MB max), cleanup guarantee (temp dir + evidence file always removed, even on error).
 
 **Prompt injection defense:** Remote scans use `scanners/content-extractor.mjs` to pre-extract structured evidence and strip injection patterns BEFORE LLM agents see the content. Agents analyze a JSON evidence package, never raw files from untrusted repos.
 
-## Scanners
-
-**Orchestrated (10):** Run via `node scanners/scan-orchestrator.mjs <target> [--fail-on <severity>] [--compact] [--output-file <path>] [--baseline] [--save-baseline]`.
-`--fail-on <critical|high|medium|low>`: exit 1 if findings at/above severity, exit 0 otherwise. `--compact`: one-liner per finding format. Both configurable via `policy.json` `ci` section.
-With `--output-file`: full JSON to file, compact aggregate to stdout. `--baseline` diffs against stored baseline. `--save-baseline` saves results for future diffs. Baselines stored in `reports/baselines/<target-hash>.json`.
-
-10 scanners: unicode, entropy, permission, dep-audit, taint, git-forensics, network, memory-poisoning, supply-chain-recheck, toxic-flow.
-Lib: `mcp-description-cache.mjs` — caches MCP tool descriptions in `~/.cache/llm-security/mcp-descriptions.json`, detects per-update drift via Levenshtein (>10% = alert), 7-day TTL. v7.3.0 (E14) adds a sticky baseline slot per tool plus a 10-event rolling history; cumulative drift = `levenshtein(current, baseline) / max(|current|,|baseline|)`. When ratio ≥ `mcp.cumulative_drift_threshold` (default 0.25), emits `mcp-cumulative-drift` advisory through `post-mcp-verify.mjs`. Baseline survives TTL purge so slow-burn drift is preserved across the 7-day window. `clearBaseline(tool?)` exposed for the `/security mcp-baseline-reset` command. `LLM_SECURITY_MCP_CACHE_FILE` env var overrides the cache path for testing.
-Supply-chain-recheck (SCR) re-audits installed dependencies from lockfiles (package-lock.json, yarn.lock, requirements.txt, Pipfile.lock) against blocklists, OSV.dev batch API, and typosquat detection. Offline fallback available. Shared data module: `scanners/lib/supply-chain-data.mjs`.
-Memory-poisoning (MEM) detects cognitive state poisoning in CLAUDE.md, memory files, and .claude/rules — injection patterns, shell commands, credential paths, permission expansion, suspicious URLs, encoded payloads.
-Toxic-flow (TFA) is a post-processing correlator that runs LAST — detects "lethal trifecta" (untrusted input + sensitive data access + exfiltration sink) by correlating output from prior scanners.
-Utility: `node scanners/lib/fs-utils.mjs <backup|restore|cleanup|tmppath> [args]`.
-
-Lib: `sarif-formatter.mjs` — converts scan output to OASIS SARIF 2.1.0 format. Used by `--format sarif` flag.
-Lib: `audit-trail.mjs` — writes structured JSONL audit events (ISO 8601, OWASP tags, SIEM-ready). Env: `LLM_SECURITY_AUDIT_*`.
-Lib: `policy-loader.mjs` — reads `.llm-security/policy.json` for distributable hook configuration. Includes `ci` section (`failOn`, `compact`) for CI/CD defaults. Defaults match hardcoded values.
-
-**Standalone (8):** `posture-scanner.mjs` — deterministic posture assessment, 16 categories (incl. EU AI Act, NIST AI RMF, ISO 42001), <50ms. NOT in scan-orchestrator (meta-level, not code-level).
-Run: `node scanners/posture-scanner.mjs [path]` → JSON stdout. Scanner prefix: PST. Used by `/security posture` and `/security audit`.
-`mcp-live-inspect.mjs` — NOT in scan-orchestrator. MCP servers are running processes, not files.
-Run: `node scanners/mcp-live-inspect.mjs [target] [--timeout 10000] [--skip-global]`
-Scanner prefix: MCI. OWASP: MCP03, MCP06, MCP09. Invoked by `mcp-inspect` and `mcp-audit --live`.
-`watch-cron.mjs` — standalone cron wrapper. Reads `reports/watch/config.json`, scans all targets, writes `reports/watch/latest.json`. Run: `node scanners/watch-cron.mjs [--config <path>]`
-`reference-config-generator.mjs` — generates Grade A reference config based on posture gaps. Detects project type (plugin/monorepo/standalone). Templates in `templates/reference-config/`. Run: `node scanners/reference-config-generator.mjs [path] [--apply]`
-`dashboard-aggregator.mjs` — cross-project security dashboard. Discovers Claude Code projects under ~/ (depth 3) and ~/.claude/plugins/, runs posture-scanner on each, aggregates to machine-grade (weakest link). Cache in `~/.cache/llm-security/dashboard-latest.json` (24h staleness). Run: `node scanners/dashboard-aggregator.mjs [--no-cache] [--max-depth N]`
-
-`attack-simulator.mjs` — red-team harness. Data-driven: 64 scenarios in 12 categories from `knowledge/attack-scenarios.json`. Payloads constructed at runtime (fragment assembly to avoid triggering hooks on source). Uses `runHook()` from test helper. Adaptive mode (`--adaptive`): 5 mutation rounds per passing scenario (homoglyph, encoding, zero-width, case alternation, synonym). Mutation rules in `knowledge/attack-mutations.json`. Benchmark mode (`--benchmark`): outputs structured pass/fail metrics. Run: `node scanners/attack-simulator.mjs [--category <name>] [--json] [--verbose] [--adaptive] [--benchmark]`
-`ai-bom-generator.mjs` — AI Bill of Materials generator. Discovers AI components (models, MCP servers, plugins, knowledge, hooks) and outputs CycloneDX 1.6 JSON. Scanner prefix: BOM. Run: `node scanners/ai-bom-generator.mjs <target> [--output-file <path>]`
-`ide-extension-scanner.mjs` — scans installed VS Code (and forks: Cursor, Windsurf, VSCodium, code-server, Insiders, Remote-SSH) extensions and JetBrains IDE plugins (IntelliJ IDEA, PyCharm, GoLand, WebStorm, RubyMine, PhpStorm, CLion, DataGrip, RustRover, Rider, Aqua, Writerside, Android Studio). Fleet + Toolbox excluded. OS-aware discovery via `lib/ide-extension-discovery.mjs` (`~/.vscode/extensions/` + `~/Library/Application Support/JetBrains/<IDE><version>/plugins/` on macOS, `%APPDATA%\JetBrains\...` on Windows, `~/.config/JetBrains/...` on Linux). Parses VS Code `package.json` via `lib/ide-extension-parser.mjs` and JetBrains `META-INF/plugin.xml` + `META-INF/MANIFEST.MF` (with nested-jar extraction) via `lib/ide-extension-parser-jb.mjs`. 7 VS Code checks: blocklist match, theme-with-code, sideload (vsix), broad activation (`*` / `onStartupFinished`), typosquat (Levenshtein ≤2 vs top-100), extension-pack expansion, dangerous `vscode:uninstall` hooks. 7 JetBrains checks: theme-with-code, broad activation (`application-components`), `Premain-Class` instrumentation (HIGH — javaagent retransform), native binaries (`.so`/`.dylib`/`.dll`/`.jnilib`), long `<depends>` chains, typosquat vs top JetBrains plugins, shaded-jar advisory. Both branches orchestrate reused scanners (UNI/ENT/NET/TNT/MEM/SCR) per extension with bounded concurrency (default 4). Scanner prefix: IDE. OWASP: LLM01, LLM02, LLM03, LLM06, ASI02, ASI04. Offline by default, `--online` opt-in for Marketplace/OSV.dev lookups. Knowledge: `knowledge/top-vscode-extensions.json`, `knowledge/top-jetbrains-plugins.json`, `knowledge/ide-extension-threat-patterns.md`, `knowledge/marketplace-api-notes.md`, `knowledge/jetbrains-marketplace-api-notes.md`.
-
-**v6.4.0 — URL support.** Targets can be Marketplace, OpenVSX, or direct `.vsix` URLs. Pipeline: `lib/vsix-fetch.mjs` (HTTPS-only fetch with 50MB cap, 30s timeout, SHA-256, manual redirect host whitelist) → `lib/zip-extract.mjs` (zero-dep ZIP parser, rejects zip-slip/symlink/absolute/drive-letter/encrypted/ZIP64, caps: 10 000 entries, 500MB uncomp, 100x ratio, depth 20) → existing scan pipeline against extracted `extension/` subdir → temp dir always cleaned in `try/finally`. Envelope.meta.source = `{ type: "url", kind, url, finalUrl, sha256, size, publisher?, name?, version? }`.
-
-**v6.5.0 — OS sandbox.** Fetch + extract for URL targets now spawns `lib/vsix-fetch-worker.mjs` in a sub-process wrapped by `sandbox-exec` (macOS) or `bwrap` (Linux) — same primitives reused from `git-clone.mjs`. Helper: `lib/vsix-sandbox.mjs` exports `buildSandboxProfile`, `buildBwrapArgs`, `buildSandboxedWorker`, `runVsixWorker`. Worker IPC: argv `--url <url> --tmpdir <dir>` → single JSON line on stdout (`{ok, sha256, size, finalUrl, source, extRoot}` or `{ok:false, error, code?}`). Defense-in-depth — if the in-process ZIP parser ever has a bypass, the kernel still refuses writes outside `<tmpdir>`. `scan(target, { useSandbox })` defaults to `true`; tests pass `false` since `globalThis.fetch` mocks do not cross process boundaries. Windows fallback: in-process with `meta.warnings` advisory. Envelope `meta.source.sandbox`: `'sandbox-exec' | 'bwrap' | 'none' | 'in-process'`.
-
-**v6.6.0 — JetBrains Marketplace URL fetch + JetBrains branch.** URL targets can also be `https://plugins.jetbrains.com/plugin/<numericId>-<slug>` (metadata-resolved → xmlId download) or `https://plugins.jetbrains.com/plugin/download?pluginId=<xmlId>&version=<v>` (direct). `lib/vsix-fetch.mjs` gains `detectUrlType` JetBrains kinds, `fetchJetBrainsPlugin`, host allowlist `plugins.jetbrains.com`. `buildSandboxedWorker(dirs, workerPath)` now accepts a custom worker path — `lib/jetbrains-fetch-worker.mjs` reuses the same IPC contract. Envelope `meta.source.kind` can be `'jetbrains-marketplace' | 'jetbrains-download'`. Installed-plugin scan runs JB-specific checks (see scanner bullet above) and shares the UNI/ENT/NET/TNT/MEM/SCR orchestration. `.kt`, `.groovy`, `.scala` added to `taint-tracer` code extensions.
-
-Run: `node scanners/ide-extension-scanner.mjs [target|url] [--vscode-only] [--intellij-only] [--include-builtin] [--online] [--format json|compact] [--fail-on <sev>] [--output-file <path>]`. Invoked by `/security ide-scan`.
-
-## Token Budget (ENFORCED)
-
-All commands total ~600 lines. All commands use registered subagent types.
-
-- Commands are short dispatchers (~30-60 lines) — no inline report templates or format specs
-- All agents use registered `subagent_type` — agent instructions are system prompt, never file reads
-- Max 1-2 knowledge files per agent invocation (threat-patterns + secrets-patterns)
-- OWASP files are NEVER passed by commands — agents reference them from their own system prompt
-- Agents run sequentially to avoid burst rate limits
-- `pre-install-supply-chain.mjs` queries OSV.dev for CVEs on every package install
-
-## CLI
-
-`bin/llm-security.mjs` — standalone CLI entry point. Works without Claude Code via `npx llm-security` or `node bin/llm-security.mjs`.
-Subcommands: `scan`, `deep-scan`, `posture`, `audit-bom`, `benchmark`. Dispatches to scanner scripts via `child_process.spawn`.
-`package.json` `bin` field: `"llm-security": "./bin/llm-security.mjs"`. `files` whitelist: only `bin/` + `scanners/` published to npm.
-
-## CI/CD Integration
-
-Pipeline templates in `ci/`: `github-action.yml`, `azure-pipelines.yml`, `gitlab-ci.yml`. Documentation: `docs/ci-cd-guide.md`.
-All templates use `--fail-on high --format sarif --output-file results.sarif` with SARIF upload per platform.
-Standalone CLI makes zero network calls in default mode. Schrems II compatible in default offline mode. Optional OSV.dev enrichment (`supply-chain-recheck --online`) transmits package identifiers to a Google-operated API and is a separate compliance consideration.
-
-## Knowledge Files (20)
-
-| File | Content |
-|------|---------|
-| `skill-threat-patterns.md` | 7 threat categories for skill/command scanning |
-| `mcp-threat-patterns.md` | 9 MCP threat categories (MCP01-MCP10) |
-| `secrets-patterns.md` | Regex patterns for 10+ secret types |
-| `owasp-llm-top10.md` | OWASP LLM Top 10 (2025) with Claude Code mappings |
-| `owasp-agentic-top10.md` | OWASP Agentic AI Top 10 (ASI01-ASI10) |
-| `owasp-skills-top10.md` | OWASP Skills Top 10 (AST01-AST10) — skill-specific threats |
-| `mitigation-matrix.md` | Threat-to-control mappings |
-| `top-packages.json` | Known package lists for supply chain checks |
-| `skill-registry.json` | Seed data for skill signature registry |
-| `prompt-injection-research-2025-2026.md` | 7 research papers (2025-2026) with implications for hook defenses |
-| `deepmind-agent-traps.md` | DeepMind AI Agent Traps — 6 categories, 43 techniques, coverage matrix |
-| `attack-scenarios.json` | 64 red-team scenarios across 12 categories for attack simulation |
-| `attack-mutations.json` | Synonym tables and mutation rules for adaptive red-team testing |
-| `compliance-mapping.md` | EU AI Act, NIST AI RMF, ISO 42001, MITRE ATLAS mappings to plugin capabilities |
-| `norwegian-context.md` | Norwegian regulatory landscape — Datatilsynet, NSM, Digitaliseringsdirektoratet |
-| `ide-extension-threat-patterns.md` | 10 IDE-extension detection categories (VS Code + JetBrains) with 2024-2026 case studies |
-| `top-vscode-extensions.json` | Top ~100 VS Code Marketplace extension IDs (typosquat seed) + blocklist entries |
-| `top-jetbrains-plugins.json` | Top JetBrains plugin IDs (typosquat seed) + blocklist entries (v6.6.0) |
-| `marketplace-api-notes.md` | VS Code Marketplace + OpenVSX API endpoints used by `lib/vsix-fetch.mjs` (v6.4.0) |
-| `jetbrains-marketplace-api-notes.md` | JetBrains Marketplace API endpoints used by `fetchJetBrainsPlugin` (v6.6.0) |
-
-## Reports
-
-Scan reports are stored in `reports/` as `.docx` (for sharing) with `.md` source.
-
-## Examples (runnable demonstrations)
-
-Self-contained, deterministic threat-fixture mappes under `examples/`.
-Each mappe har `README.md`, fixture/script/transcript, `run-*.{sh,mjs}`,
-og `expected-findings.md`. Demonstrasjoner — ikke unit-tester.
-
-| Mappe | Demonstrerer | Hooks/scanners | Sentinel |
-|-------|--------------|----------------|----------|
-| `malicious-skill-demo/` | Skill scanner end-to-end (UNI/ENT/PRM/DEP/TNT/NET + 7 LLM-kategorier) | `scan-orchestrator` + agents | BLOCK 100/100 |
-| `prompt-injection-showcase/` | 61 payloads × 19 kategorier mot `pre-prompt-inject-scan`, `post-mcp-verify`, `pre-bash-destructive` | runtime hooks | per-kategori expected outcome |
-| `lethal-trifecta-walkthrough/` | Rule-of-Two advisory på leg 3 (WebFetch → Read .env → Bash curl POST) + suppression | `post-session-guard` | advisory på stage 3 |
-| `mcp-rug-pull/` | Cumulative drift-advisory (E14, v7.3.0) — 7 stadier under per-update-terskel, kumulativt over 25% baseline | `post-mcp-verify` + `mcp-description-cache.mjs` | advisory på stage 7 |
-| `supply-chain-attack/` | PreToolUse-blokk på kompromittert pakke + scope-hop advisory + dep-auditor typosquats + postinstall curl-pipe | `pre-install-supply-chain` + `dep-auditor` + `supply-chain-data` | 6+ funn, 2 advisories, 1 BLOCK |
-| `poisoned-claude-md/` | 6 detektorer (injection / shell / URL / credential paths / permission expansion / encoded payloads) inkl. E15 agent-fil-overflate | `memory-poisoning-scanner` | ≥18 funn fordelt på 2 filer |
-| `bash-evasion-gallery/` | T1-T9 disguised destructive commands → normalisert + blokkert (defense-in-depth over Claude Code 2.1.98+) | `pre-bash-destructive` + `bash-normalize` | 10 BLOCK eksitkoder |
-| `toxic-agent-demo/` | Single-component lethal trifecta — agent med [Bash, Read, WebFetch] uten hook-guards = CRITICAL TFA-finding | `toxic-flow-analyzer` (TFA) | 1 CRITICAL `Lethal trifecta:` |
-| `pre-compact-poisoning/` | PreCompact-hook fanger injection + AWS-shaped credential i syntetisk transcript på tvers av off/warn/block-modus | `pre-compact-scan` | 9 pass: block exit 2 + reason; warn systemMessage; off skip; benign passes |
-
-State-isolering: alle eksempler som muterer global state bruker run-script
-PID (post-session-guard via `${ppid}.jsonl`) eller env-overrides
-(`LLM_SECURITY_MCP_CACHE_FILE` for MCP-cache). Brukerens reelle
-`/tmp/llm-security-session-*.jsonl` og `~/.cache/llm-security/` røres aldri.
-
 ## Distribution
 
-This plugin lives in the `ktg-plugin-marketplace` monorepo at
-`https://git.fromaitochitta.com/open/ktg-plugin-marketplace` under
-`plugins/llm-security/`. It is not published as a standalone repo —
-users install it via the Claude Code marketplace mechanism:
+This plugin lives in the `ktg-plugin-marketplace` monorepo at `https://git.fromaitochitta.com/open/ktg-plugin-marketplace` under `plugins/llm-security/`. It is not published as a standalone repo — users install it via the Claude Code marketplace mechanism:
 
 ```bash
 claude plugin marketplace add https://git.fromaitochitta.com/open/ktg-plugin-marketplace.git
 ```
 
-Issues, bug reports, and security disclosures all route to the
-marketplace repo.
+Issues, bug reports, and security disclosures all route to the marketplace repo.
 
 ## State
 
-No persistent state except `post-session-guard.mjs` which maintains a per-session JSONL file in `/tmp/llm-security-session-${ppid}.jsonl` (auto-cleaned after 24h), `post-mcp-verify.mjs` which tracks per-MCP-tool volume in `/tmp/llm-security-mcp-volume-${ppid}.json`, `mcp-description-cache.mjs` which caches MCP tool descriptions in `~/.cache/llm-security/mcp-descriptions.json` (7-day TTL), `update-check.mjs` which caches version info in `~/.cache/llm-security/update-check.json` (24h TTL), `dashboard-aggregator.mjs` which caches dashboard results in `~/.cache/llm-security/dashboard-latest.json` (24h staleness), `reports/baselines/*.json` for scan diff baselines, `reports/watch/latest.json` for cron scan results (overwritten on each run), and `reports/skill-registry.json` for the skill signature registry (grows as skills are scanned). All scan outputs fresh per invocation.
-
-## Defense Philosophy (v5.0)
-
-Prompt injection is **structurally unsolvable** with current architectures (joint paper, 14 researchers, 95-100% ASR against all 12 tested defenses). v5.0 does not claim to "prevent" injection. Instead, it implements **defense-in-depth**:
-
-- **Broader detection** — MEDIUM advisory for obfuscation signals (leetspeak, homoglyphs, zero-width, multi-language), Unicode Tag steganography, bash expansion evasion
-- **Increased attack cost** — Rule of Two detection (configurable block/warn/off for lethal trifecta; default `warn`, blocks on high-confidence trifectas in opt-in `block` mode; distributed trifectas across MCP servers are detected but not blocked by default), bash normalization before gate matching
-- **Longer monitoring windows** — 100-call long-horizon alongside 20-call sliding window, slow-burn trifecta detection, behavioral drift via Jensen-Shannon divergence
-- **Architectural constraints** — opportunistic byte-matching of truncated output fingerprints (first 200 bytes, SHA-256/16-hex tag; not semantic lineage; trivially bypassed by mutation or summarisation of tool output), sub-agent delegation tracking, HITL trap detection. Inspired by CaMeL (DeepMind, 2025), but this is a lightweight byte-fingerprint, not semantic capability tracking
-- **Honest documentation** — Known Limitations section acknowledges what deterministic hooks cannot detect
-
-**Bash evasion layers (T1-T6):** `bash-normalize.mjs` collapses six known obfuscation techniques before gate matching as a defense-in-depth layer. T1 empty quotes (`rm''-rf`), T2 `${}` parameter expansion, T3 backslash continuation, T4 tab/whitespace splitting, T5 `${IFS}` word-splitting, T6 ANSI-C hex quoting (`$'\x72\x6d'`). These layers complement — not replace — Claude Code 2.1.98+ harness-level protections. Full reference: `docs/security-hardening-guide.md`.
-
-**Opus 4.7 system card alignment:**
-
-- System card §5.2.1 (agentic safety evaluations) documents that multi-layer defenses outperform single-layer defenses against adaptive attacks. This plugin's posture (prompt-scan + pathguard + trifecta-guard + pre-compact-scan operating in depth) matches that guidance.
-- System card §6.3.1.1 (instruction following and hierarchy) documents that Opus 4.7 interprets agent instructions more literally. Stacked imperatives (e.g., "MUST NOT do X") are therefore less useful than tool-level enforcement via `tools:` frontmatter. Agent files in this plugin have been updated accordingly.
-- See `docs/security-hardening-guide.md` §5 for the full mapping.
-
-**What v5.0 cannot do:**
-- Prevent adaptive attacks from motivated human red-teamers (100% ASR per joint paper)
-- Fix CLAUDE.md loading before hooks (platform limitation)
-- Detect novel NL indirection without ML
-- Prevent long-horizon attacks without detectable patterns
-- Provide formal worst-case guarantees
+Per-session JSONL in `/tmp/llm-security-session-${ppid}.jsonl` (auto-cleaned 24h). MCP description cache in `~/.cache/llm-security/mcp-descriptions.json` (7-day TTL). Update-check + dashboard caches in `~/.cache/llm-security/` (24h). Scan baselines under `reports/baselines/*.json`. Watch results in `reports/watch/latest.json`. Skill registry in `reports/skill-registry.json` (grows). All scan outputs fresh per invocation.
 
 ## Security Boundaries
 
diff --git a/plugins/llm-security/README.md b/plugins/llm-security/README.md
index ac8597b..657ff30 100644
--- a/plugins/llm-security/README.md
+++ b/plugins/llm-security/README.md
@@ -6,7 +6,7 @@
 
 *AI-generated: all code produced by Claude Code through dialog-driven development. [Full disclosure →](../../README.md#ai-generated-code-disclosure)*
 
-![Version](https://img.shields.io/badge/version-7.6.1-blue)
+![Version](https://img.shields.io/badge/version-7.7.2-blue)
 ![Platform](https://img.shields.io/badge/platform-Claude_Code_Plugin-purple)
 ![Commands](https://img.shields.io/badge/commands-20-orange)
 ![Agents](https://img.shields.io/badge/agents-6-orange)
@@ -492,16 +492,16 @@ a browser (Chrome/Firefox/Safari over `file://`) — no build step, no
 network calls, no npm install. Theme-bootstrap with FOUC-prevention; state
 persisted in IndexedDB primary + localStorage fallback.
 
-**v7.6.0 Tier 3-referanse-case:** Playgroundet er nå en visuelt og
-strukturelt fullført referanse for `shared/playground-design-system/`
-Tier 3-supplementet. 8 nye DS-komponenter integrert i de 18 rapport-
-rendererne: `tfa-flow` (lethal trifecta-kjede), `mat-ladder` (modenhets-
-stige), `suppressed-group` (narrative-audit), `codepoint-reveal` (Unicode-
-steganografi), `top-risks` (rangert top-funn), `recommendation-card[data-
-severity]` (severity-tinted advisory), `risk-meter` (band-visualisering
-0-100), `card--severity-{level}` (severity-color findings-cards). Pluss
-`badge--scope-security`, `verdict-pill-lg` og `form-progress`+`fp-step`
-fra wave 1.
+**v7.6.0 Tier 3 reference case:** The playground is now a visually and
+structurally complete reference for the `shared/playground-design-system/`
+Tier 3 supplement. 8 new DS components integrated into the 18 report
+renderers: `tfa-flow` (lethal trifecta chain), `mat-ladder` (maturity
+ladder), `suppressed-group` (narrative audit), `codepoint-reveal` (Unicode
+steganography), `top-risks` (ranked top findings), `recommendation-card
+[data-severity]` (severity-tinted advisory), `risk-meter` (band
+visualization 0-100), `card--severity-{level}` (severity-color findings
+cards). Plus `badge--scope-security`, `verdict-pill-lg`, and
+`form-progress`+`fp-step` from wave 1.
 
 **Layout:**
 
@@ -509,48 +509,50 @@ fra wave 1.
 playground/
 ├── llm-security-playground.html     ← single-file SPA (~10 700 lines)
 ├── vendor/
-│   └── playground-design-system/    ← synket fra shared/, sjekksum-låst
-├── test-fixtures/                   ← markdown-fixtures (én per kommando)
-├── screenshots/v7.5.0/              ← Playwright-genererte demobilder (12)
-├── screenshots/v7.6.0/              ← v7.6.0 demobilder (12, manuelt generert)
-└── A11Y-RAPPORT.md                  ← WCAG 2.1 AA verifisering + Tier 3 ARIA
+│   └── playground-design-system/    ← synced from shared/, checksum-locked
+├── test-fixtures/                   ← markdown fixtures (one per command)
+├── screenshots/v7.5.0/              ← Playwright-generated demo images (12)
+├── screenshots/v7.6.0/              ← v7.6.0 demo images (12, hand-generated)
+└── A11Y-RAPPORT.md                  ← WCAG 2.1 AA verification + Tier 3 ARIA
 ```
 
-**Hva playgroundet dekker:**
+**What the playground covers:**
 
-- **Onboarding (5 grupper):** organisasjon, scope, profil, plattform,
-  compliance. Verdier persisteres som `shared`-state og prefylles automatisk
-  i alle command-skjemaer.
-- **Home:** prosjekt-grid, fleet-tracks for posture/scan/red-team. «Last
-  inn demo-data»-knappen aktiverer 3 prosjekter inkludert `dft-komplett-demo`
-  med alle 18 rapporter ferdig parsed.
-- **Catalog:** alle 20 kommandoer gruppert i 5 kategorier. Søk filtrerer
-  cards, og «Åpne skjema»-knapp bygger ferdig pipeline-streng for klipp-og-
-  lim til terminalen.
-- **Project surface:** 4 skjermer (Oversikt / Rapporter / Kontekst /
-  Eksport). Rapporter-tabben har category-tabs (discover / posture /
-  findings-ops / hardening / adversarial / mcp-ops) og lim-inn-import for
-  hver rapport-kommando.
+- **Onboarding (5 groups):** organization, scope, profile, platform,
+  compliance. Values persist as `shared` state and prefill every command
+  form automatically.
+- **Home:** project grid, fleet tracks for posture/scan/red-team. The
+  "Load demo data" button activates 3 projects, including
+  `dft-komplett-demo` with all 18 reports parsed in advance.
+- **Catalog:** all 20 commands grouped into 5 categories. Search filters
+  cards, and the "Open form" button builds a ready-to-paste pipeline
+  string for the terminal.
+- **Project surface:** 4 screens (Overview / Reports / Context / Export).
+  The Reports tab has category tabs (discover / posture / findings-ops /
+  hardening / adversarial / mcp-ops) and paste-import for every report
+  command.
 
-**Parser/renderer-arkitektur:** Hver `produces_report=true`-kommando i
-`CATALOG` har en parser (markdown → struktur) og en renderer (struktur
-→ DS-komponenter). 18 archetypes støttes: `findings`, `findings-grade`,
-`risk-score-meter`, `posture-cards`, `dashboard-fleet`, `red-team-results`,
-`diff-report`, `kanban-buckets`, `matrix-risk`. Parser-kontrakten er
-`{ ok: true, data: {...} } | { ok: false, errors: [...] }`. Test-fixtures
-under `playground/test-fixtures/` er kontrakt-anker — én markdown-fil per
-kommando som speiler `templates/unified-report.md`-formatet.
+**Parser/renderer architecture:** Every `produces_report=true` command in
+`CATALOG` has a parser (markdown → structure) and a renderer (structure
+→ DS components). 18 archetypes are supported: `findings`,
+`findings-grade`, `risk-score-meter`, `posture-cards`, `dashboard-fleet`,
+`red-team-results`, `diff-report`, `kanban-buckets`, `matrix-risk`. The
+parser contract is `{ ok: true, data: {...} } | { ok: false, errors:
+[...] }`. The test fixtures under `playground/test-fixtures/` are the
+contract anchor — one markdown file per command, mirroring the
+`templates/unified-report.md` format.
 
-**Eksponerte testing/automasjons-globaler:** `__store`, `__navigate`,
+**Exposed testing/automation globals:** `__store`, `__navigate`,
 `__loadDemoState`, `__scheduleRender`, `__PARSERS`, `__RENDERERS`,
 `__CATALOG`, `__inferVerdict`, `__inferKeyStats`, `__renderPageShell`,
-`__handlePasteImport`. Aktiverer Playwright-styrt navigasjon og
-programmatisk parser/renderer-test mot fixture-katalogen.
+`__handlePasteImport`. They enable Playwright-driven navigation and
+programmatic parser/renderer tests against the fixture catalog.
 
-**Begrensninger:** SPA er en lim-inn-overflate — den kjører ingen scannere
-selv. Output må komme fra Claude Code (`/security scan ...`), CLI
-(`node scanners/...`) eller stub-fixtures. Demo-state inneholder kun de
-3 inline-prosjektene; nye prosjekter er per-bruker og lagres lokalt.
+**Limitations:** The SPA is a paste-in surface — it does not run any
+scanners itself. Output must come from Claude Code (`/security scan
+...`), the CLI (`node scanners/...`), or stub fixtures. Demo state only
+contains the 3 inline projects; new projects are per-user and stored
+locally.
 
 ---
 
@@ -626,9 +628,12 @@ demonstrations — each with `README.md`, fixture, run script, and
 
 | Version | Date | Highlights |
 |---------|------|------------|
-| **7.6.1** | 2026-05-06 | **Playground v7.6.0 visuell-patch.** Seks bugs fanget under maintainer-verifisering i nettleser. Alle skyldtes mismatch mellom DS-klasser og rendrer-bruk (eller manglende DS-implementasjoner playground antok eksisterte). (1) `renderFindingsBlock` brukte `.findings` outer som er DS' 2-kolonners list+detail-grid → erstattet med `<section class="report-meta">` + korrekt `findings__list > findings__group`-mønster. (2) `.report-table` manglet helt i DS men brukes i 7+ rendrere → lokal CSS-implementasjon i playground-HTML. (3) `renderPreDeploy` traffic-lights brukte `.sm-card__grade` (28×28 px for én A-F-bokstav) for "PASS"/"PASS-WITH-NOTES"/"FAIL" → erstattet med bredde-tilpasset status-pill. (4) Threat-model matrix-bobler ikke klikkbare → `<button>` med `data-threat-id` + click-handler som scroller til Trusler-tabellen. (5) Radar-labels overlappet ved 6+ akser → SVG 280→380, R 105→125, dynamisk `text-anchor` (start/end/middle) basert på horisontal-posisjon. (6) `recommendation-card__body` overflow på lange tekster → `overflow-wrap: anywhere`. 4/4 fix-spesifikke smoke-tester + 18/18 renderer-regresjon passerer. Ingen scanner- eller hook-atferdsendringer — purely additive surface. |
-| **7.6.0** | 2026-05-06 | **Playground Tier 3-referanse-case.** Playground (`playground/llm-security-playground.html`) hevet til visuelt og strukturelt fullført referanse for `shared/playground-design-system/` Tier 3-supplementet. 8 nye DS-komponenter integrert i de 18 rapport-rendererne: `tfa-flow` + `tfa-leg` + `tfa-arrow` (lethal trifecta-kjede med `<button>`-elementer + ARIA), `mat-ladder` + `mat-step` (5-trinns modenhets-stige med terskler 0/25/50/75/95% PASS), `suppressed-group` (narrative-audit fra `summary.narrative_audit.suppressed_findings`), `codepoint-reveal` + `cp-tag`/`cp-zw`/`cp-bidi` (Unicode-steganografi side-ved-side), `top-risks` + `top-risk[data-severity]` (rangert top-funn-listing, semantisk `<ol>`), `recommendation-card[data-severity]` (severity-tinted advisory på `clean`/`harden`/`audit`/`posture`/`pre-deploy`/`plugin-audit`), `risk-meter` (band-visualisering 0-100 på 5 archetypes), `card--severity-{level}` (severity-color modifier på findings-cards). Wave 1: `badge--scope-security` (identitets-chip), `verdict-pill-lg` (DS Tier 3-pill), `form-progress` + `fp-step` (onboarding-wizard). Slettet ~30 duplikat-CSS-deklarasjoner (DS vinner cascade). 5 nye DS-helpers + `mapSeverityToCardLevel` + `parseNarrativeAudit`. Filendring 10209 → 10677 linjer. Levert over 5 sesjoner, atomic commits. A11Y-rapport oppdatert. Ingen scanner- eller hook-behavior-changes — purely additive surface. |
-| **7.5.0** | 2026-05-05 | **Playground.** Single-file SPA at `playground/llm-security-playground.html` (~10 200 lines) for onboarding, demoer og workshop-bruk uten Claude Code-installasjon. Parsere + renderere for alle 18 `produces_report=true`-kommandoer (Fase 2: 10 høy-prio + Fase 3: 8 gjenstående: mcp-inspect, supply-check, pre-deploy, diff, watch, registry, clean, threat-model). 18 markdown test-fixtures under `playground/test-fixtures/` som kontrakt-anker. Komplett demo-prosjekt `dft-komplett-demo` har alle 18 rapporter ferdig parsed inline. Vendor-synket design-system under `playground/vendor/` (sjekksum-låst). 9 Playwright-genererte screenshots i `playground/screenshots/v7.5.0/`. 11 nye `window`-globaler for testing/automasjon. 2 nye `KEY_STATS_CONFIG`-archetypes (`kanban-buckets`, `matrix-risk`). Bug-fix: `normalizeVerdictText` regex-rekkefølge oppdatert så GO-WITH-CONDITIONS / CONDITIONAL / BETINGET ikke lenger kollapser til ALLOW. Ingen scanner- eller hook-behavior-changes — purely additive surface. |
+| **7.7.2** | 2026-05-19 | **Language consistency pass.** Norwegian had crept into surface text across v7.5-v7.7. Per the `~/.claude/CLAUDE.md` convention (English for code and documentation, Norwegian for dialog only), this release translates: the HTML Report-step appended by all 18 skill commands, the canonical CLI renderer `scripts/lib/report-renderers.mjs` (display strings + JS comments), the playground UI strings, the `skill-scanner-agent` and `mcp-scanner-agent` system prompts, the Recent versions table and playground architecture prose in this README, the v7.7.x highlights in `CLAUDE.md`, and the llm-security entries in the marketplace root `README.md` + `CLAUDE.md`, plus six table cells in `docs/scanner-reference.md`. Demo-state fixture content for the `dft-komplett-demo` project (intentional Norwegian persona) and regex alternations that match Norwegian-language report markdown (`/^high\|^høy/`, `/resolution\|løsning/`) were preserved. No scanner, hook, or behavior changes — purely surface text. |
+| **7.7.1** | 2026-05-18 | **Playground UX strip.** Operator feedback immediately after v7.7.0: the home surface led with three project tracks (Re-onboard / New project / Command catalog) even though the catalog was the important entry point. Minimum strip delivered as three atomic commits (`b732eee` + `2a6f73f` + `81b7beb`): (1) the router always forces `activeSurface = 'catalog'` (the onboarding/home/project render functions are preserved in source but no longer routable); (2) the topbar `Home` and `Re-onboard` buttons removed, `Catalog` retained; (3) the breadcrumb org-name (`shared.organization.name` from demo state) replaced with a static `llm-security` neutral scope anchor. Fix: the hardcoded `'Plugin v7.6.1'` on line 6933 of `renderHome` (template literal not caught by the v7.7.0 grep) was synced. The onboarding concept is documented as a v7.8.0 candidate (per-command context injection) in `ROADMAP.md`. No scanner or hook behavior changes. |
+| **7.7.0** | 2026-05-18 | **HTML report for all 18 skill commands.** Every `/security <cmd>` that produces a report now prints a clickable `file://` link to a self-contained HTML version. Delivered across 5 sessions. (1) Playground catalog list-view + builder-pane with a copy button. (2) Playground project-surface cleanup (stub-screen handling, topbar split). (3) The 18 inline parsers + renderers in the playground HTML were moved to a canonical ESM module `scripts/lib/report-renderers.mjs` (the playground keeps a bit-identical inline copy since ESM `import` does not work from `file://`). (4) New zero-dep CLI `scripts/render-report.mjs` — stdin/file/stdout mode, kebab→camel commandId routing, inlines 6 DS stylesheets + a local `.report-table` CSS, ~140 KB self-contained HTML, system-font fallback, absolute `file://` paths for Ghostty cmd-click. (5) All 18 skills wired (4 in session 4: scan/audit/posture/deep-scan; 14 in session 5: plugin-audit/mcp-audit/mcp-inspect/ide-scan/supply-check/dashboard/pre-deploy/diff/watch/registry/clean/harden/threat-model/red-team). Output: `reports/<command>-<YYYYMMDD-HHmmss>.html` relative to CWD. No scanner or hook behavior changes — purely additive. |
+| **7.6.1** | 2026-05-06 | **Playground v7.6.0 visual patch.** Six bugs caught during maintainer verification in the browser. All were mismatches between DS classes and renderer usage (or missing DS implementations the playground assumed existed). (1) `renderFindingsBlock` used the `.findings` outer class, which is the DS 2-column list+detail grid → replaced with `<section class="report-meta">` + the correct `findings__list > findings__group` pattern. (2) `.report-table` was missing entirely from the DS but used in 7+ renderers → local CSS implementation in the playground HTML. (3) `renderPreDeploy` traffic-lights used `.sm-card__grade` (28×28 px for one A-F letter) for "PASS"/"PASS-WITH-NOTES"/"FAIL" → replaced with a width-adapting status pill. (4) Threat-model matrix bubbles were not clickable → `<button>` with `data-threat-id` + click handler that scrolls to the Threats table. (5) Radar labels overlapped at 6+ axes → SVG 280→380, R 105→125, dynamic `text-anchor` (start/end/middle) based on horizontal position. (6) `recommendation-card__body` overflow on long text → `overflow-wrap: anywhere`. 4/4 fix-specific smoke tests + 18/18 renderer regression passing. No scanner or hook behavior changes — purely additive surface. |
+| **7.6.0** | 2026-05-06 | **Playground Tier 3 reference case.** The playground (`playground/llm-security-playground.html`) raised to a visually and structurally complete reference for the `shared/playground-design-system/` Tier 3 supplement. 8 new DS components integrated into the 18 report renderers: `tfa-flow` + `tfa-leg` + `tfa-arrow` (lethal trifecta chain with `<button>` elements + ARIA), `mat-ladder` + `mat-step` (5-step maturity ladder with thresholds 0/25/50/75/95% PASS), `suppressed-group` (narrative audit from `summary.narrative_audit.suppressed_findings`), `codepoint-reveal` + `cp-tag`/`cp-zw`/`cp-bidi` (Unicode steganography side-by-side), `top-risks` + `top-risk[data-severity]` (ranked top-findings listing, semantic `<ol>`), `recommendation-card[data-severity]` (severity-tinted advisory on `clean`/`harden`/`audit`/`posture`/`pre-deploy`/`plugin-audit`), `risk-meter` (0-100 band visualization across 5 archetypes), `card--severity-{level}` (severity-color modifier on findings cards). Wave 1: `badge--scope-security` (identity chip), `verdict-pill-lg` (DS Tier 3 pill), `form-progress` + `fp-step` (onboarding wizard). Removed ~30 duplicate CSS declarations (DS wins the cascade). 5 new DS helpers + `mapSeverityToCardLevel` + `parseNarrativeAudit`. File size 10209 → 10677 lines. Delivered across 5 sessions, atomic commits. A11Y report updated. No scanner or hook behavior changes — purely additive surface. |
+| **7.5.0** | 2026-05-05 | **Playground.** Single-file SPA at `playground/llm-security-playground.html` (~10 200 lines) for onboarding, demos and workshop use without a Claude Code installation. Parsers + renderers for all 18 `produces_report=true` commands (Phase 2: 10 high-priority + Phase 3: 8 remaining: mcp-inspect, supply-check, pre-deploy, diff, watch, registry, clean, threat-model). 18 markdown test fixtures under `playground/test-fixtures/` as contract anchors. The complete demo project `dft-komplett-demo` has all 18 reports parsed inline. Vendor-synced design-system under `playground/vendor/` (checksum-locked). 9 Playwright-generated screenshots under `playground/screenshots/v7.5.0/`. 11 new `window` globals for testing/automation. 2 new `KEY_STATS_CONFIG` archetypes (`kanban-buckets`, `matrix-risk`). Bug-fix: `normalizeVerdictText` regex order updated so GO-WITH-CONDITIONS / CONDITIONAL / BETINGET no longer collapse to ALLOW. No scanner or hook behavior changes — purely additive surface. |
 | **7.4.0** | 2026-05-05 | **Examples + e2e suite.** Seven runnable demonstration walkthroughs under `examples/` (`prompt-injection-showcase`, `lethal-trifecta-walkthrough`, `mcp-rug-pull`, `supply-chain-attack`, `poisoned-claude-md`, `bash-evasion-gallery`, `toxic-agent-demo`, `pre-compact-poisoning`) — each with `README.md`, runtime-isolated fixture, single-command run-script, and `expected-findings.md` testable contract. Three new `tests/e2e/` suites (attack-chain 17 tests + multi-session 9 tests + scan-pipeline 19 tests = +45 tests, total 1822) prove the framework works as a coordinated system, not just isolated units. No scanner or hook behavior changes — purely additive surface. Scanner `VERSION` constants synced across `dashboard-aggregator.mjs`, `posture-scanner.mjs`, `ide-extension-scanner.mjs`. |
 | **7.3.1** | 2026-05-01 | **Stabilization patch.** Project repositioned as solo, stabilization-only, with explicit "fork & own" stance for enterprise features. New public docs: `CONTRIBUTING.md` (fork-and-own model), README "Project scope" section (out-of-scope table with commercial alternatives), updated `SECURITY.md` (v7.3.x supported, v7.0–v7.2 best-effort, < v7.0 EOL). Coherence: `package.json` files whitelist + `bugs` URL + repo URL fix; scanner `VERSION` constants synced across `dashboard-aggregator.mjs`, `posture-scanner.mjs`, `ide-extension-scanner.mjs`. Test ceiling raised on flaky pre-compact-scan timing test (500 ms → 1000 ms; design target unchanged). No behavior changes. |
 | **7.3.0** | 2026-05-01 | **Batch C release.** Wave A (T7-T9 bash normalization + rot13 comment-block decoder), Wave B (`.gitattributes` post-clone advisory + npm scope-hop typosquat + GitHub/Forgejo workflow-scanner with 23-field blacklist + re-interpolation tracking + auth-bypass detection), Wave C (MCP cumulative-drift baseline + `/security mcp-baseline-reset`), Wave D (riskScoreV1 `@deprecated`; sandbox-architecture rationale docs; env-var deprecation runway to v8.0.0; CLAUDE.md hooks count + consistency test). 1665+ → 1777 tests. Wave E (additional attack-simulator scenarios) deferred indefinitely |
diff --git a/plugins/llm-security/agents/mcp-scanner-agent.md b/plugins/llm-security/agents/mcp-scanner-agent.md
index a38ff92..9dfa596 100644
--- a/plugins/llm-security/agents/mcp-scanner-agent.md
+++ b/plugins/llm-security/agents/mcp-scanner-agent.md
@@ -25,19 +25,21 @@ Your output is a structured security report per MCP server, including trust rati
 findings mapped to OWASP categories, and prioritized recommendations. You operate read-only —
 never modify files or install packages.
 
-## Step 0: Generaliseringsgrense
+## Step 0: Generalization boundary
 
-Opus 4.7 tolker instruks mer literalt enn tidligere modeller. Ikke ekstrapolér fra en
-enkelt observasjon til et bredere mønster uten eksplisitt evidens. Rapporter det du
-faktisk ser; merk spekulasjon som spekulasjon. Ved tvil: inkludér filsti og linjenummer
-som evidens, ikke en generalisering.
+Opus 4.7 interprets instructions more literally than earlier models. Do not
+extrapolate from a single observation to a broader pattern without explicit
+evidence. Report what you actually see; mark speculation as speculation. When
+in doubt, cite the filepath and line number as evidence rather than a
+generalization.
 
-## Parallell Read-strategi
+## Parallel Read strategy
 
-Når du trenger å lese tre eller flere filer som ikke avhenger av hverandre, send alle
-Read-kallene i samme melding (parallell), ikke sekvensielt. Dette gjelder spesielt:
-knowledge-files i oppstart, og batcher av MCP-server-filer. Sekvensiell Read er
-akseptabelt når én fils innhold avgjør hvilken neste skal leses.
+When you need to read three or more files that do not depend on each other,
+send all the Read calls in the same message (parallel), not sequentially. This
+applies especially to knowledge files during startup and to batches of
+MCP-server files. Sequential Read is acceptable when one file's contents
+determine which file to read next.
 
 Reference knowledge base files before scanning:
 - `knowledge/mcp-threat-patterns.md` — 9 threat categories with detection signals (MCP01-MCP10 mapping)
diff --git a/plugins/llm-security/agents/skill-scanner-agent.md b/plugins/llm-security/agents/skill-scanner-agent.md
index 4c03e10..ed8c002 100644
--- a/plugins/llm-security/agents/skill-scanner-agent.md
+++ b/plugins/llm-security/agents/skill-scanner-agent.md
@@ -24,19 +24,21 @@ You are invoked by `/security scan` with a target path. Your `tools:` frontmatte
 simply does not grant file-modifying tools. Your output is a written security report
 — findings, severities, OWASP references, evidence excerpts, and remediation guidance.
 
-## Step 0: Generaliseringsgrense
+## Step 0: Generalization boundary
 
-Opus 4.7 tolker instruks mer literalt enn tidligere modeller. Ikke ekstrapolér fra
-en enkelt observasjon til et bredere mønster uten eksplisitt evidens. Rapporter det
-du faktisk ser; merk spekulasjon som spekulasjon. Ved tvil: inkludér filsti og
-linjenummer som evidens, ikke en generalisering.
+Opus 4.7 interprets instructions more literally than earlier models. Do not
+extrapolate from a single observation to a broader pattern without explicit
+evidence. Report what you actually see; mark speculation as speculation. When
+in doubt, cite the filepath and line number as evidence rather than a
+generalization.
 
-## Parallell Read-strategi
+## Parallel Read strategy
 
-Når du trenger å lese tre eller flere filer som ikke avhenger av hverandre, send
-alle Read-kallene i samme melding (parallell), ikke sekvensielt. Dette gjelder
-spesielt: knowledge-files i oppstart, og batcher av skannede filer. Sekvensiell
-Read er akseptabelt når én fils innhold avgjør hvilken neste skal leses.
+When you need to read three or more files that do not depend on each other,
+send all the Read calls in the same message (parallel), not sequentially. This
+applies especially to knowledge files during startup and to batches of scanned
+files. Sequential Read is acceptable when one file's contents determine which
+file to read next.
 
 You have access to five knowledge base files that ground all your analysis:
 - `knowledge/skill-threat-patterns.md` — 7 threat categories with documented attack variants
diff --git a/plugins/llm-security/commands/audit.md b/plugins/llm-security/commands/audit.md
index 0904c5e..49d1e50 100644
--- a/plugins/llm-security/commands/audit.md
+++ b/plugins/llm-security/commands/audit.md
@@ -48,3 +48,23 @@ Recalculate `risk_score = riskScore(counts)` (severity-dominated v2 model — se
 Output: Risk Dashboard, Executive Summary, 10 Category Sections (use scanner evidence + agent narrative), Summary Table, Action Items (IMMEDIATE → HIGH → MEDIUM).
 
 Close with top 2-3 action items. If grade C or lower: suggest `/security threat-model`.
+
+## Step 6: HTML Report
+
+After producing the markdown audit report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-audit-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (Risk Dashboard + Executive Summary + Category Sections + Summary Table + Action Items) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs audit --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/audit-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown audit above is the primary deliverable.
diff --git a/plugins/llm-security/commands/clean.md b/plugins/llm-security/commands/clean.md
index 85fa2d5..d7bc499 100644
--- a/plugins/llm-security/commands/clean.md
+++ b/plugins/llm-security/commands/clean.md
@@ -59,3 +59,23 @@ Validate modified files (JSON parse, frontmatter, `node --check`). Restore from
 
 Output: Pre/post comparison, all fix summaries, remaining manual findings, rollback instructions.
 - Dry-run: show "DRY-RUN" mode, list proposed changes without applying.
+
+## Step 8: HTML Report
+
+After producing the markdown clean report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-clean-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (pre/post comparison + applied/skipped/failed fix summaries + remaining manual findings + backup/rollback path) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs clean --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/clean-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/dashboard.md b/plugins/llm-security/commands/dashboard.md
index 19c582f..9997b2d 100644
--- a/plugins/llm-security/commands/dashboard.md
+++ b/plugins/llm-security/commands/dashboard.md
@@ -59,3 +59,23 @@ Sort the project table by grade (F first, A last), then by risk score descending
 - If machine grade is C: "Some projects need attention. Run `/security posture` in the worst-graded project."
 - If machine grade is D/F: "Significant exposure. Run `/security audit` in projects graded D/F."
 - If from_cache: "Results cached. Run `/security dashboard --fresh` for a live scan."
+
+## Step 4: HTML Report
+
+After producing the markdown dashboard above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-dashboard-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown dashboard you just produced** (header table with Machine Grade + Project Overview table + Errors + Recommendations) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs dashboard --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/dashboard-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown dashboard above is the primary deliverable.
diff --git a/plugins/llm-security/commands/deep-scan.md b/plugins/llm-security/commands/deep-scan.md
index b13aa27..d2ed7a2 100644
--- a/plugins/llm-security/commands/deep-scan.md
+++ b/plugins/llm-security/commands/deep-scan.md
@@ -40,3 +40,23 @@ Spawn `subagent_type: "llm-security:deep-scan-synthesizer-agent"`, `model: "sonn
 > Produce complete report with actionable insights. Don't pad.
 
 Output the synthesizer's report. If it fails, show banner + CRITICAL/HIGH findings from JSON.
+
+## Step 5: HTML Report
+
+After producing the markdown deep-scan report (banner + synthesizer output or fallback):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-deepscan-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (banner + synthesizer narrative + scanner sections + findings) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs deep-scan --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/deep-scan-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/diff.md b/plugins/llm-security/commands/diff.md
index fff55d1..642db49 100644
--- a/plugins/llm-security/commands/diff.md
+++ b/plugins/llm-security/commands/diff.md
@@ -96,3 +96,23 @@ Omit Unchanged findings from the output — they add noise. Mention count in sum
 - If resolved > new: "**Improving:** more findings resolved than introduced."
 - If new > 0 and resolved == 0: "**Regression:** X new findings, none resolved."
 - If new == 0 and resolved == 0: "**Stable:** no changes since baseline."
+
+## Step 5: HTML Report
+
+After producing the markdown diff report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-diff-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (banner with baseline+current timestamps + Summary table + New + Resolved + Moved sections + Advisory) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs diff --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/diff-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/harden.md b/plugins/llm-security/commands/harden.md
index 0d441c2..f976954 100644
--- a/plugins/llm-security/commands/harden.md
+++ b/plugins/llm-security/commands/harden.md
@@ -70,3 +70,23 @@ If Grade A not achieved, explain remaining gaps (likely hook-related, which requ
 
 - Grade A: "Configuration hardened. All posture checks pass."
 - Below A: "Configuration improved. Remaining gaps require [hooks/manual setup]. Run `/security posture` for details."
+
+## Step 6: HTML Report
+
+After producing the markdown harden report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-harden-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (Security Harden header + project metadata + Recommendations + Apply summary + post-apply grade + closing) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs harden --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/harden-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/ide-scan.md b/plugins/llm-security/commands/ide-scan.md
index 4794892..d38c43d 100644
--- a/plugins/llm-security/commands/ide-scan.md
+++ b/plugins/llm-security/commands/ide-scan.md
@@ -104,3 +104,23 @@ If the user has many sideloaded (`source=vsix`) extensions: suggest re-installin
 - First run with no `--online` is fully offline.
 - Pass a single extracted extension directory to scan just one extension.
 - JetBrains plugins are additionally checked for `Premain-Class` javaagents, `application-components` lifecycle hooks, native binaries (`.so`/`.dylib`/`.dll`/`.jnilib`), long `<depends>` chains, typosquats vs top JetBrains plugins, and shaded-jar advisories (see `knowledge/ide-extension-threat-patterns.md`).
+
+## Step 4: HTML Report
+
+After producing the markdown IDE-scan report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-ide-scan-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (scanner header table + counts + Per-Extension Results table + Top Findings + Warnings + Recommendations + Notes) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs ide-scan --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/ide-scan-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/mcp-audit.md b/plugins/llm-security/commands/mcp-audit.md
index db65ab6..1574db3 100644
--- a/plugins/llm-security/commands/mcp-audit.md
+++ b/plugins/llm-security/commands/mcp-audit.md
@@ -45,3 +45,23 @@ Parse JSON output. Append a **Live Inspection Results** section:
 - Tool shadowing across servers
 
 **Cross-reference escalation:** If a server was rated "Untrusted" or "Dangerous" in Step 2 AND has live injection findings → escalate to CRITICAL priority in the final report and highlight as "Confirmed active threat (static + live)".
+
+## Step 5: HTML Report
+
+After producing the markdown MCP audit report (Step 3 + optional Step 4 Live Inspection):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-mcp-audit-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (MCP Landscape Summary + per-server analysis + Live Inspection Results section if `--live` + Keep/Review/Remove groupings + overall risk) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs mcp-audit --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/mcp-audit-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/mcp-inspect.md b/plugins/llm-security/commands/mcp-inspect.md
index 2a5d6b9..747a8a5 100644
--- a/plugins/llm-security/commands/mcp-inspect.md
+++ b/plugins/llm-security/commands/mcp-inspect.md
@@ -52,3 +52,23 @@ If zero findings: "No injection, shadowing, or drift detected across N servers."
 ## Step 4: Combined Use
 
 Mention: "For combined static + live analysis, use `/security mcp-audit --live`."
+
+## Step 5: HTML Report
+
+After producing the markdown live-inspection report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-mcp-inspect-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (Live Inspection banner + Server Details table + Findings table + Advisory) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs mcp-inspect --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/mcp-inspect-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/plugin-audit.md b/plugins/llm-security/commands/plugin-audit.md
index 3ebf597..e24d688 100644
--- a/plugins/llm-security/commands/plugin-audit.md
+++ b/plugins/llm-security/commands/plugin-audit.md
@@ -72,3 +72,23 @@ If `clone_path != null`:
 
 If `evidence_file != null`:
   Run: `node <plugin-root>/scanners/lib/fs-utils.mjs cleanup "<evidence_file>"`
+
+## Step 7: HTML Report
+
+After producing the markdown plugin-audit report (Step 5) and any cleanup (Step 6):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-plugin-audit-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (plugin metadata + component inventory + permission matrix + hook analysis + security findings + trust verdict) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs plugin-audit --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/plugin-audit-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/posture.md b/plugins/llm-security/commands/posture.md
index d313dc5..2557190 100644
--- a/plugins/llm-security/commands/posture.md
+++ b/plugins/llm-security/commands/posture.md
@@ -58,3 +58,23 @@ Present the results as a scorecard:
 - Grade A/B: "Posture solid. Re-run after major changes."
 - Grade C: "Run `/security audit` for detailed findings."
 - Grade D/F: "Significant exposure. Run `/security audit` before production use."
+
+## Step 4: HTML Report
+
+After producing the markdown scorecard above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-posture-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown scorecard you just produced** (header + Category Scorecard table + Top Findings + Quick Wins + closing) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs posture --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/posture-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown scorecard above is the primary deliverable.
diff --git a/plugins/llm-security/commands/pre-deploy.md b/plugins/llm-security/commands/pre-deploy.md
index db585d4..08858f6 100644
--- a/plugins/llm-security/commands/pre-deploy.md
+++ b/plugins/llm-security/commands/pre-deploy.md
@@ -99,3 +99,23 @@ Map the pass count to a risk band and verdict:
 | 0-3/10 | Extreme | Critical risk — deployment blocked until fundamental controls are in place. |
 
 State the verdict and risk band clearly at the end of the report.
+
+## HTML Report
+
+After producing the markdown pre-deploy checklist + verdict above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-pre-deploy-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (10-row checklist table + Manual Verification + Recommendations + Verdict + risk band) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs pre-deploy --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/pre-deploy-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown checklist above is the primary deliverable.
diff --git a/plugins/llm-security/commands/red-team.md b/plugins/llm-security/commands/red-team.md
index 99d3527..136c355 100644
--- a/plugins/llm-security/commands/red-team.md
+++ b/plugins/llm-security/commands/red-team.md
@@ -93,3 +93,23 @@ In adaptive mode, also explain:
 - No network calls, no file modifications, no LLM invocations
 - Safe to run repeatedly — all state is cleaned up after each run
 - Adaptive mode bypasses are **expected** — they document evasion resistance limits
+
+## HTML Report
+
+After producing the markdown red-team narrative report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-red-team-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (per-category narrative + scenario pass/fail + defense score + adaptive-mode bypasses if `--adaptive`) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs red-team --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/red-team-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/registry.md b/plugins/llm-security/commands/registry.md
index 8e63470..4e435c9 100644
--- a/plugins/llm-security/commands/registry.md
+++ b/plugins/llm-security/commands/registry.md
@@ -119,3 +119,23 @@ Display results table:
 ```
 
 If no matches: "No entries matching '<pattern>'."
+
+## Step 3: HTML Report
+
+After producing the markdown registry output above (stats / scan-result / search-result, whichever sub-command ran):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-registry-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown output you just produced** (Skill Signature Registry header + metric table + Recent Entries, OR Registry Hit banner, OR Registry Search results) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs registry --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/registry-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown output above is the primary deliverable.
diff --git a/plugins/llm-security/commands/scan.md b/plugins/llm-security/commands/scan.md
index e30b0ed..09754ea 100644
--- a/plugins/llm-security/commands/scan.md
+++ b/plugins/llm-security/commands/scan.md
@@ -155,3 +155,23 @@ If `clone_path != null`:
 
 If `evidence_file != null`:
   Run: `node <plugin-root>/scanners/lib/fs-utils.mjs cleanup "<evidence_file>"`
+
+## Step 8: HTML Report
+
+After producing the markdown report (Step 5) and any cleanup (Step 7):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-scan-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (banner + all findings sections + any Deep Scan section) to that temp path. Do not summarize — write it verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs scan --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/scan-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout (one line).
+4. Append this to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/supply-check.md b/plugins/llm-security/commands/supply-check.md
index cc13411..bb78cde 100644
--- a/plugins/llm-security/commands/supply-check.md
+++ b/plugins/llm-security/commands/supply-check.md
@@ -45,3 +45,23 @@ For each finding, show:
 - Recommendation
 
 Group by severity (CRITICAL first). If zero findings: "No supply chain issues detected in N lockfile(s)."
+
+## Step 5: HTML Report
+
+After producing the markdown supply-check report above:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-supply-check-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown report you just produced** (banner + lockfile coverage + all findings grouped by severity) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs supply-check --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/supply-check-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown report above is the primary deliverable.
diff --git a/plugins/llm-security/commands/threat-model.md b/plugins/llm-security/commands/threat-model.md
index 31a7621..9604144 100644
--- a/plugins/llm-security/commands/threat-model.md
+++ b/plugins/llm-security/commands/threat-model.md
@@ -25,3 +25,23 @@ Spawn `subagent_type: "llm-security:threat-modeler-agent"`, `model: "opus"`:
 - To save: ask user if they want it written to `threat-model.md`
 - To verify mitigations: `/security posture`
 - For production readiness: `/security pre-deploy`
+
+## HTML Report
+
+After the threat-modeler agent has produced the complete threat-model markdown document:
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-threat-model-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire threat-model markdown you just produced** (Architecture Discovery + Component Mapping + STRIDE × MAESTRO threat matrix + Risk Assessment + Mitigation Mapping) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs threat-model --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/threat-model-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown threat-model document above is the primary deliverable.
diff --git a/plugins/llm-security/commands/watch.md b/plugins/llm-security/commands/watch.md
index 1b8d1de..6daf008 100644
--- a/plugins/llm-security/commands/watch.md
+++ b/plugins/llm-security/commands/watch.md
@@ -56,3 +56,23 @@ To run as a system cron job instead:
 
 To stop watching: Escape or Ctrl+C
 ```
+
+## Step 5: HTML Report
+
+After producing the markdown watch banner above (before starting the loop):
+
+1. Compute a temp markdown path:
+   ```bash
+   node -p "require('path').join(require('os').tmpdir(), 'sec-watch-' + Date.now() + '.md')"
+   ```
+2. Use the Write tool to save the **entire markdown banner you just produced** (Security Watch header + baseline timestamp + findings counts + interval + advisory) to that temp path. Verbatim.
+3. Run the renderer:
+   ```bash
+   node <plugin-root>/scripts/render-report.mjs watch --in "<temp-md-path>"
+   ```
+   The CLI writes `reports/watch-<YYYYMMDD-HHmmss>.html` relative to CWD and prints `file:///abs/path.html` on stdout.
+4. Append to your response (markdown link, no bare URL):
+
+   > **HTML report:** [Open in browser](file:///abs/path.html)
+
+If the CLI exits non-zero, mention the error but do not block — the markdown banner above is the primary deliverable.
diff --git a/plugins/llm-security/docs/defense-philosophy.md b/plugins/llm-security/docs/defense-philosophy.md
new file mode 100644
index 0000000..29ca395
--- /dev/null
+++ b/plugins/llm-security/docs/defense-philosophy.md
@@ -0,0 +1,27 @@
+# LLM Security — Defense philosophy (v5.0)
+
+Imported from `CLAUDE.md` via `@docs/defense-philosophy.md`.
+
+Prompt injection is **structurally unsolvable** with current architectures (joint paper, 14 researchers, 95-100% ASR against all 12 tested defenses). v5.0 does not claim to "prevent" injection. Instead, it implements **defense-in-depth**:
+
+- **Broader detection** — MEDIUM advisory for obfuscation signals (leetspeak, homoglyphs, zero-width, multi-language), Unicode Tag steganography, bash expansion evasion
+- **Increased attack cost** — Rule of Two detection (configurable block/warn/off for lethal trifecta; default `warn`, blocks on high-confidence trifectas in opt-in `block` mode; distributed trifectas across MCP servers are detected but not blocked by default), bash normalization before gate matching
+- **Longer monitoring windows** — 100-call long-horizon alongside 20-call sliding window, slow-burn trifecta detection, behavioral drift via Jensen-Shannon divergence
+- **Architectural constraints** — opportunistic byte-matching of truncated output fingerprints (first 200 bytes, SHA-256/16-hex tag; not semantic lineage; trivially bypassed by mutation or summarisation of tool output), sub-agent delegation tracking, HITL trap detection. Inspired by CaMeL (DeepMind, 2025), but this is a lightweight byte-fingerprint, not semantic capability tracking
+- **Honest documentation** — Known Limitations section acknowledges what deterministic hooks cannot detect
+
+**Bash evasion layers (T1-T6):** `bash-normalize.mjs` collapses six known obfuscation techniques before gate matching as a defense-in-depth layer. T1 empty quotes (`rm''-rf`), T2 `${}` parameter expansion, T3 backslash continuation, T4 tab/whitespace splitting, T5 `${IFS}` word-splitting, T6 ANSI-C hex quoting (`$'\x72\x6d'`). These layers complement — not replace — Claude Code 2.1.98+ harness-level protections. Full reference: `docs/security-hardening-guide.md`.
+
+**Opus 4.7 system card alignment:**
+
+- System card §5.2.1 (agentic safety evaluations) documents that multi-layer defenses outperform single-layer defenses against adaptive attacks. This plugin's posture (prompt-scan + pathguard + trifecta-guard + pre-compact-scan operating in depth) matches that guidance.
+- System card §6.3.1.1 (instruction following and hierarchy) documents that Opus 4.7 interprets agent instructions more literally. Stacked imperatives (e.g., "MUST NOT do X") are therefore less useful than tool-level enforcement via `tools:` frontmatter. Agent files in this plugin have been updated accordingly.
+- See `docs/security-hardening-guide.md` §5 for the full mapping.
+
+**What v5.0 cannot do:**
+
+- Prevent adaptive attacks from motivated human red-teamers (100% ASR per joint paper)
+- Fix CLAUDE.md loading before hooks (platform limitation)
+- Detect novel NL indirection without ML
+- Prevent long-horizon attacks without detectable patterns
+- Provide formal worst-case guarantees
diff --git a/plugins/llm-security/docs/scanner-reference.md b/plugins/llm-security/docs/scanner-reference.md
new file mode 100644
index 0000000..3714cb7
--- /dev/null
+++ b/plugins/llm-security/docs/scanner-reference.md
@@ -0,0 +1,122 @@
+# LLM Security — Scanner reference
+
+Detailed scanner, CLI, CI/CD, knowledge-file and example documentation. Imported from `CLAUDE.md` via `@docs/scanner-reference.md`.
+
+## Scanners
+
+**Orchestrated (10):** Run via `node scanners/scan-orchestrator.mjs <target> [--fail-on <severity>] [--compact] [--output-file <path>] [--baseline] [--save-baseline]`.
+`--fail-on <critical|high|medium|low>`: exit 1 if findings at/above severity, exit 0 otherwise. `--compact`: one-liner per finding format. Both configurable via `policy.json` `ci` section.
+With `--output-file`: full JSON to file, compact aggregate to stdout. `--baseline` diffs against stored baseline. `--save-baseline` saves results for future diffs. Baselines stored in `reports/baselines/<target-hash>.json`.
+
+10 scanners: unicode, entropy, permission, dep-audit, taint, git-forensics, network, memory-poisoning, supply-chain-recheck, toxic-flow.
+
+Lib: `mcp-description-cache.mjs` — caches MCP tool descriptions in `~/.cache/llm-security/mcp-descriptions.json`, detects per-update drift via Levenshtein (>10% = alert), 7-day TTL. v7.3.0 (E14) adds a sticky baseline slot per tool plus a 10-event rolling history; cumulative drift = `levenshtein(current, baseline) / max(|current|,|baseline|)`. When ratio ≥ `mcp.cumulative_drift_threshold` (default 0.25), emits `mcp-cumulative-drift` advisory through `post-mcp-verify.mjs`. Baseline survives TTL purge so slow-burn drift is preserved across the 7-day window. `clearBaseline(tool?)` exposed for the `/security mcp-baseline-reset` command. `LLM_SECURITY_MCP_CACHE_FILE` env var overrides the cache path for testing.
+
+Supply-chain-recheck (SCR) re-audits installed dependencies from lockfiles (package-lock.json, yarn.lock, requirements.txt, Pipfile.lock) against blocklists, OSV.dev batch API, and typosquat detection. Offline fallback available. Shared data module: `scanners/lib/supply-chain-data.mjs`.
+
+Memory-poisoning (MEM) detects cognitive state poisoning in CLAUDE.md, memory files, and .claude/rules — injection patterns, shell commands, credential paths, permission expansion, suspicious URLs, encoded payloads.
+
+Toxic-flow (TFA) is a post-processing correlator that runs LAST — detects "lethal trifecta" (untrusted input + sensitive data access + exfiltration sink) by correlating output from prior scanners.
+
+Utility: `node scanners/lib/fs-utils.mjs <backup|restore|cleanup|tmppath> [args]`.
+
+Lib: `sarif-formatter.mjs` — converts scan output to OASIS SARIF 2.1.0 format. Used by `--format sarif` flag.
+Lib: `audit-trail.mjs` — writes structured JSONL audit events (ISO 8601, OWASP tags, SIEM-ready). Env: `LLM_SECURITY_AUDIT_*`.
+Lib: `policy-loader.mjs` — reads `.llm-security/policy.json` for distributable hook configuration. Includes `ci` section (`failOn`, `compact`) for CI/CD defaults. Defaults match hardcoded values.
+
+**Standalone (8):** `posture-scanner.mjs` — deterministic posture assessment, 16 categories (incl. EU AI Act, NIST AI RMF, ISO 42001), <50ms. NOT in scan-orchestrator (meta-level, not code-level).
+Run: `node scanners/posture-scanner.mjs [path]` → JSON stdout. Scanner prefix: PST. Used by `/security posture` and `/security audit`.
+
+`mcp-live-inspect.mjs` — NOT in scan-orchestrator. MCP servers are running processes, not files.
+Run: `node scanners/mcp-live-inspect.mjs [target] [--timeout 10000] [--skip-global]`
+Scanner prefix: MCI. OWASP: MCP03, MCP06, MCP09. Invoked by `mcp-inspect` and `mcp-audit --live`.
+
+`watch-cron.mjs` — standalone cron wrapper. Reads `reports/watch/config.json`, scans all targets, writes `reports/watch/latest.json`. Run: `node scanners/watch-cron.mjs [--config <path>]`
+
+`reference-config-generator.mjs` — generates Grade A reference config based on posture gaps. Detects project type (plugin/monorepo/standalone). Templates in `templates/reference-config/`. Run: `node scanners/reference-config-generator.mjs [path] [--apply]`
+
+`dashboard-aggregator.mjs` — cross-project security dashboard. Discovers Claude Code projects under ~/ (depth 3) and ~/.claude/plugins/, runs posture-scanner on each, aggregates to machine-grade (weakest link). Cache in `~/.cache/llm-security/dashboard-latest.json` (24h staleness). Run: `node scanners/dashboard-aggregator.mjs [--no-cache] [--max-depth N]`
+
+`attack-simulator.mjs` — red-team harness. Data-driven: 64 scenarios in 12 categories from `knowledge/attack-scenarios.json`. Payloads constructed at runtime (fragment assembly to avoid triggering hooks on source). Uses `runHook()` from test helper. Adaptive mode (`--adaptive`): 5 mutation rounds per passing scenario (homoglyph, encoding, zero-width, case alternation, synonym). Mutation rules in `knowledge/attack-mutations.json`. Benchmark mode (`--benchmark`): outputs structured pass/fail metrics. Run: `node scanners/attack-simulator.mjs [--category <name>] [--json] [--verbose] [--adaptive] [--benchmark]`
+
+`ai-bom-generator.mjs` — AI Bill of Materials generator. Discovers AI components (models, MCP servers, plugins, knowledge, hooks) and outputs CycloneDX 1.6 JSON. Scanner prefix: BOM. Run: `node scanners/ai-bom-generator.mjs <target> [--output-file <path>]`
+
+`ide-extension-scanner.mjs` — scans installed VS Code (and forks: Cursor, Windsurf, VSCodium, code-server, Insiders, Remote-SSH) extensions and JetBrains IDE plugins (IntelliJ IDEA, PyCharm, GoLand, WebStorm, RubyMine, PhpStorm, CLion, DataGrip, RustRover, Rider, Aqua, Writerside, Android Studio). Fleet + Toolbox excluded. OS-aware discovery via `lib/ide-extension-discovery.mjs` (`~/.vscode/extensions/` + `~/Library/Application Support/JetBrains/<IDE><version>/plugins/` on macOS, `%APPDATA%\JetBrains\...` on Windows, `~/.config/JetBrains/...` on Linux). Parses VS Code `package.json` via `lib/ide-extension-parser.mjs` and JetBrains `META-INF/plugin.xml` + `META-INF/MANIFEST.MF` (with nested-jar extraction) via `lib/ide-extension-parser-jb.mjs`. 7 VS Code checks: blocklist match, theme-with-code, sideload (vsix), broad activation (`*` / `onStartupFinished`), typosquat (Levenshtein ≤2 vs top-100), extension-pack expansion, dangerous `vscode:uninstall` hooks. 7 JetBrains checks: theme-with-code, broad activation (`application-components`), `Premain-Class` instrumentation (HIGH — javaagent retransform), native binaries (`.so`/`.dylib`/`.dll`/`.jnilib`), long `<depends>` chains, typosquat vs top JetBrains plugins, shaded-jar advisory. Both branches orchestrate reused scanners (UNI/ENT/NET/TNT/MEM/SCR) per extension with bounded concurrency (default 4). Scanner prefix: IDE. OWASP: LLM01, LLM02, LLM03, LLM06, ASI02, ASI04. Offline by default, `--online` opt-in for Marketplace/OSV.dev lookups. Knowledge: `knowledge/top-vscode-extensions.json`, `knowledge/top-jetbrains-plugins.json`, `knowledge/ide-extension-threat-patterns.md`, `knowledge/marketplace-api-notes.md`, `knowledge/jetbrains-marketplace-api-notes.md`.
+
+**v6.4.0 — URL support.** Targets can be Marketplace, OpenVSX, or direct `.vsix` URLs. Pipeline: `lib/vsix-fetch.mjs` (HTTPS-only fetch with 50MB cap, 30s timeout, SHA-256, manual redirect host whitelist) → `lib/zip-extract.mjs` (zero-dep ZIP parser, rejects zip-slip/symlink/absolute/drive-letter/encrypted/ZIP64, caps: 10 000 entries, 500MB uncomp, 100x ratio, depth 20) → existing scan pipeline against extracted `extension/` subdir → temp dir always cleaned in `try/finally`. Envelope.meta.source = `{ type: "url", kind, url, finalUrl, sha256, size, publisher?, name?, version? }`.
+
+**v6.5.0 — OS sandbox.** Fetch + extract for URL targets now spawns `lib/vsix-fetch-worker.mjs` in a sub-process wrapped by `sandbox-exec` (macOS) or `bwrap` (Linux) — same primitives reused from `git-clone.mjs`. Helper: `lib/vsix-sandbox.mjs` exports `buildSandboxProfile`, `buildBwrapArgs`, `buildSandboxedWorker`, `runVsixWorker`. Worker IPC: argv `--url <url> --tmpdir <dir>` → single JSON line on stdout (`{ok, sha256, size, finalUrl, source, extRoot}` or `{ok:false, error, code?}`). Defense-in-depth — if the in-process ZIP parser ever has a bypass, the kernel still refuses writes outside `<tmpdir>`. `scan(target, { useSandbox })` defaults to `true`; tests pass `false` since `globalThis.fetch` mocks do not cross process boundaries. Windows fallback: in-process with `meta.warnings` advisory. Envelope `meta.source.sandbox`: `'sandbox-exec' | 'bwrap' | 'none' | 'in-process'`.
+
+**v6.6.0 — JetBrains Marketplace URL fetch + JetBrains branch.** URL targets can also be `https://plugins.jetbrains.com/plugin/<numericId>-<slug>` (metadata-resolved → xmlId download) or `https://plugins.jetbrains.com/plugin/download?pluginId=<xmlId>&version=<v>` (direct). `lib/vsix-fetch.mjs` gains `detectUrlType` JetBrains kinds, `fetchJetBrainsPlugin`, host allowlist `plugins.jetbrains.com`. `buildSandboxedWorker(dirs, workerPath)` now accepts a custom worker path — `lib/jetbrains-fetch-worker.mjs` reuses the same IPC contract. Envelope `meta.source.kind` can be `'jetbrains-marketplace' | 'jetbrains-download'`. Installed-plugin scan runs JB-specific checks (see scanner bullet above) and shares the UNI/ENT/NET/TNT/MEM/SCR orchestration. `.kt`, `.groovy`, `.scala` added to `taint-tracer` code extensions.
+
+Run: `node scanners/ide-extension-scanner.mjs [target|url] [--vscode-only] [--intellij-only] [--include-builtin] [--online] [--format json|compact] [--fail-on <sev>] [--output-file <path>]`. Invoked by `/security ide-scan`.
+
+## Token Budget (ENFORCED)
+
+All commands total ~600 lines. All commands use registered subagent types.
+
+- Commands are short dispatchers (~30-60 lines) — no inline report templates or format specs
+- All agents use registered `subagent_type` — agent instructions are system prompt, never file reads
+- Max 1-2 knowledge files per agent invocation (threat-patterns + secrets-patterns)
+- OWASP files are NEVER passed by commands — agents reference them from their own system prompt
+- Agents run sequentially to avoid burst rate limits
+- `pre-install-supply-chain.mjs` queries OSV.dev for CVEs on every package install
+
+## CLI
+
+`bin/llm-security.mjs` — standalone CLI entry point. Works without Claude Code via `npx llm-security` or `node bin/llm-security.mjs`.
+Subcommands: `scan`, `deep-scan`, `posture`, `audit-bom`, `benchmark`. Dispatches to scanner scripts via `child_process.spawn`.
+`package.json` `bin` field: `"llm-security": "./bin/llm-security.mjs"`. `files` whitelist: only `bin/` + `scanners/` published to npm.
+
+## CI/CD Integration
+
+Pipeline templates in `ci/`: `github-action.yml`, `azure-pipelines.yml`, `gitlab-ci.yml`. Documentation: `docs/ci-cd-guide.md`.
+All templates use `--fail-on high --format sarif --output-file results.sarif` with SARIF upload per platform.
+Standalone CLI makes zero network calls in default mode. Schrems II compatible in default offline mode. Optional OSV.dev enrichment (`supply-chain-recheck --online`) transmits package identifiers to a Google-operated API and is a separate compliance consideration.
+
+## Knowledge Files (20)
+
+| File | Content |
+|------|---------|
+| `skill-threat-patterns.md` | 7 threat categories for skill/command scanning |
+| `mcp-threat-patterns.md` | 9 MCP threat categories (MCP01-MCP10) |
+| `secrets-patterns.md` | Regex patterns for 10+ secret types |
+| `owasp-llm-top10.md` | OWASP LLM Top 10 (2025) with Claude Code mappings |
+| `owasp-agentic-top10.md` | OWASP Agentic AI Top 10 (ASI01-ASI10) |
+| `owasp-skills-top10.md` | OWASP Skills Top 10 (AST01-AST10) — skill-specific threats |
+| `mitigation-matrix.md` | Threat-to-control mappings |
+| `top-packages.json` | Known package lists for supply chain checks |
+| `skill-registry.json` | Seed data for skill signature registry |
+| `prompt-injection-research-2025-2026.md` | 7 research papers (2025-2026) with implications for hook defenses |
+| `deepmind-agent-traps.md` | DeepMind AI Agent Traps — 6 categories, 43 techniques, coverage matrix |
+| `attack-scenarios.json` | 64 red-team scenarios across 12 categories for attack simulation |
+| `attack-mutations.json` | Synonym tables and mutation rules for adaptive red-team testing |
+| `compliance-mapping.md` | EU AI Act, NIST AI RMF, ISO 42001, MITRE ATLAS mappings to plugin capabilities |
+| `norwegian-context.md` | Norwegian regulatory landscape — Datatilsynet, NSM, Digitaliseringsdirektoratet |
+| `ide-extension-threat-patterns.md` | 10 IDE-extension detection categories (VS Code + JetBrains) with 2024-2026 case studies |
+| `top-vscode-extensions.json` | Top ~100 VS Code Marketplace extension IDs (typosquat seed) + blocklist entries |
+| `top-jetbrains-plugins.json` | Top JetBrains plugin IDs (typosquat seed) + blocklist entries (v6.6.0) |
+| `marketplace-api-notes.md` | VS Code Marketplace + OpenVSX API endpoints used by `lib/vsix-fetch.mjs` (v6.4.0) |
+| `jetbrains-marketplace-api-notes.md` | JetBrains Marketplace API endpoints used by `fetchJetBrainsPlugin` (v6.6.0) |
+
+## Reports
+
+Scan reports are stored in `reports/` as `.docx` (for sharing) with `.md` source.
+
+## Examples (runnable demonstrations)
+
+Self-contained, deterministic threat fixtures live under `examples/`. Each directory has a `README.md`, fixture/script/transcript, `run-*.{sh,mjs}`, and `expected-findings.md`. They are demonstrations — not unit tests.
+
+| Directory | Demonstrates | Hooks/scanners | Sentinel |
+|-------|--------------|----------------|----------|
+| `malicious-skill-demo/` | Skill scanner end-to-end (UNI/ENT/PRM/DEP/TNT/NET + 7 LLM categories) | `scan-orchestrator` + agents | BLOCK 100/100 |
+| `prompt-injection-showcase/` | 61 payloads × 19 categories against `pre-prompt-inject-scan`, `post-mcp-verify`, `pre-bash-destructive` | runtime hooks | per-category expected outcome |
+| `lethal-trifecta-walkthrough/` | Rule-of-Two advisory on leg 3 (WebFetch → Read .env → Bash curl POST) + suppression | `post-session-guard` | advisory at stage 3 |
+| `mcp-rug-pull/` | Cumulative drift advisory (E14, v7.3.0) — 7 stages below the per-update threshold, cumulatively over a 25% baseline shift | `post-mcp-verify` + `mcp-description-cache.mjs` | advisory at stage 7 |
+| `supply-chain-attack/` | PreToolUse block on a compromised package + scope-hop advisory + dep-auditor typosquats + postinstall curl-pipe | `pre-install-supply-chain` + `dep-auditor` + `supply-chain-data` | 6+ findings, 2 advisories, 1 BLOCK |
+| `poisoned-claude-md/` | 6 detectors (injection / shell / URL / credential paths / permission expansion / encoded payloads) including the E15 agent-file surface | `memory-poisoning-scanner` | ≥18 findings split across 2 files |
+| `bash-evasion-gallery/` | T1-T9 disguised destructive commands → normalized + blocked (defense-in-depth over Claude Code 2.1.98+) | `pre-bash-destructive` + `bash-normalize` | 10 BLOCK exit codes |
+| `toxic-agent-demo/` | Single-component lethal trifecta — an agent with [Bash, Read, WebFetch] and no hook guards = CRITICAL TFA finding | `toxic-flow-analyzer` (TFA) | 1 CRITICAL `Lethal trifecta:` |
+| `pre-compact-poisoning/` | The PreCompact hook catches injection + an AWS-shaped credential in a synthetic transcript across off/warn/block modes | `pre-compact-scan` | 9 cases: block exit 2 + reason; warn systemMessage; off skip; benign passes |
+
+State isolation: every example that mutates global state uses the run-script PID (post-session-guard via `${ppid}.jsonl`) or env overrides (`LLM_SECURITY_MCP_CACHE_FILE` for the MCP cache). The user's real `/tmp/llm-security-session-*.jsonl` and `~/.cache/llm-security/` are never touched.
diff --git a/plugins/llm-security/docs/version-history.md b/plugins/llm-security/docs/version-history.md
new file mode 100644
index 0000000..364e6ad
--- /dev/null
+++ b/plugins/llm-security/docs/version-history.md
@@ -0,0 +1,116 @@
+# LLM Security — Version history
+
+Per-release notes for v7.0.0 onward. Imported from `CLAUDE.md` via `@docs/version-history.md`.
+
+## v7.7.2 — Language consistency pass
+
+Norwegian had crept into surface text across v7.5–v7.7. Per the
+`~/.claude/CLAUDE.md` convention (English for code and documentation,
+Norwegian for dialog only), this release translates: the HTML Report-step in
+all 18 skill commands, the canonical CLI renderer
+`scripts/lib/report-renderers.mjs` (display strings + JS comments), the
+playground UI strings, the `skill-scanner-agent` and `mcp-scanner-agent`
+system prompts, the playground architecture prose + Recent versions table in
+the plugin `README.md`, the v7.7.x highlights in the plugin `CLAUDE.md`, the
+llm-security entries in the marketplace root `README.md` + `CLAUDE.md`, and
+six table cells in `docs/scanner-reference.md`. Demo-state fixture content
+for the `dft-komplett-demo` project (intentional Norwegian persona) and
+regex alternations that match Norwegian-language report markdown
+(`/^high|^høy/`, `/resolution|løsning/`) were preserved. CHANGELOG and this
+version-history file were deferred per operator decision — they remain in
+the language they were written in. No scanner, hook, or behavior changes —
+purely surface text.
+
+## v7.0.0 — Severity-dominated risk scoring (v2 model, BREAKING)
+
+Three changes target the false-positive cascade on real codebases (hyperframes.com gave `BLOCK / Extreme / 100`, ~70% noise):
+
+1. **Risk-score v2 formula** (`scanners/lib/severity.mjs`) — severity-dominated, log-scaled within tier. Replaces v1 sum-and-cap that collapsed every non-trivial scan to 100/Extreme. Tiers: critical → 70–95, high only → 40–65, medium only → 15–35, low only → 1–11. Verdict cutoffs realigned to new bands (BLOCK ≥65, WARNING ≥15). `info` findings are observability-only — counted in OWASP aggregates but contribute zero to risk_score, verdict, and riskBand (B3, v7.2.0 — was undocumented pre-7.2.0). See `severity.mjs` JSDoc for full contract.
+2. **Rule-based entropy scanner with file-extension skip, 8 line-level suppression rules, and configurable policy** — extensions skipped (`.glsl/.frag/.vert/.shader/.wgsl/.css/.scss/.sass/.less/.svg/.min.*/.map`); line-suppression rules (GLSL keywords, CSS-in-JS, inline SVG, ffmpeg `filter_complex`, User-Agent strings, SQL DDL, `throw new Error(\`...\`)`, markdown image URLs). Configurable via `.llm-security/policy.json` `entropy` section (thresholds, `suppress_extensions`, `suppress_line_patterns`, `suppress_paths`). Envelope `calibration` block reports skip counters + effective thresholds + policy source.
+3. **DEP typosquat allowlist expansion** — 22 npm + 5 PyPI entries for short-name tools that tripped Levenshtein detection on every modern codebase (`knip`, `oxlint`, `tsx`, `nx`, `rimraf`, `uv`, `ruff`, etc.).
+
+See `docs/security-hardening-guide.md` §6 for the calibration story.
+
+## v7.1.1 — Scan-rapport narrative coherence (patch)
+
+Three coordinated edits address the whiplash symptom that survived v7.0.0 (numbers fixed, narrative still walked findings back as "false positive" in prose):
+(a) `agents/skill-scanner-agent.md` Step 2.5 mandates context-first severity assignment — every signal has exactly one disposition (suppressed OR reported), no per-finding walk-back; (b) `templates/unified-report.md` gains a `### Narrative Audit` block in Executive Summary surfacing `summary.narrative_audit.suppressed_findings.{count, by_category}` from the agent's trailing JSON; (c) both files updated from stale v1 risk-formula constants to the v2 model that has been authoritative in `severity.mjs` since v7.0.0. Counter is distinct from the existing top-level `output.suppressed` (`.llm-security-ignore` rule integer). Out-of-scope but flagged: `commands/scan.md:113-114` retains the v1 formula; resolution deferred to Batch B.
+
+## v7.3.0 — MCP cumulative-drift baseline (Wave C of Batch C)
+
+Closes E14 from `docs/critical-review-2026-04-20.md`. The `mcp-description-cache.mjs` schema gains a sticky `baseline` slot per tool plus a 10-event rolling `history` array (FIFO). Cumulative drift = `levenshtein(current, baseline) / max(|current|, |baseline|)`; when the ratio crosses `mcp.cumulative_drift_threshold` (default 0.25), `post-mcp-verify.mjs` emits a separate MEDIUM `mcp-cumulative-drift` advisory. The existing per-update >10% drift signal is unchanged — both fire independently. Slow-burn rug-pulls that keep each update under the per-update threshold but cumulatively diverge from baseline are now caught. Baseline survives the 7-day TTL purge so detection persists across the full window. New `/security mcp-baseline-reset` slash command (plus `scanners/mcp-baseline-reset.mjs` CLI: `--list`, `--target <tool>`, or no-args clear-all) lets the user acknowledge a legitimate MCP server upgrade — clearing the baseline causes the next call to seed a fresh one from the incoming description; description, firstSeen, lastSeen, and history are preserved for audit. `LLM_SECURITY_MCP_CACHE_FILE` env var overrides the cache path for end-to-end testing without polluting the user's real `~/.cache/llm-security/mcp-descriptions.json`.
+
+## v7.3.0 — Env-var deprecation warnings (D3 of Batch C, Wave D)
+
+Closes 8.7 from `.claude/projects/2026-04-29-batch-c-scope-finalize/plan.md`. `scanners/lib/policy-loader.mjs` exports a new helper `getPolicyValueWithEnvWarn(section, key, envVarName, defaultValue)` — env still wins per Preferences (existing behaviour), but when both the env-var AND the `policy.json` key are explicitly set, the helper emits a single per-process stderr line: `[llm-security] Deprecation: env-var ${ENVVAR} will be removed in v8.0.0; policy.json key ${section}.${key} also set — env wins for now. Suppress with LLM_SECURITY_DEPRECATION_QUIET=1.` Module-scoped `Set` dedupes per env-var name across call-sites. Four overlapping vars are wired through the helper: `LLM_SECURITY_INJECTION_MODE` ↔ `injection.mode` (in `pre-prompt-inject-scan.mjs`), `LLM_SECURITY_TRIFECTA_MODE` ↔ `trifecta.mode` and `LLM_SECURITY_ESCALATION_WINDOW` ↔ `trifecta.escalation_window` (in `post-session-guard.mjs`), `LLM_SECURITY_AUDIT_LOG` ↔ `audit.log_path` (in `scanners/lib/audit-trail.mjs`). `DEFAULT_POLICY` gains `trifecta.escalation_window: 5` to close the gap noted in the plan revisions table (M10). Env-only vars without policy.json equivalents (`LLM_SECURITY_UPDATE_CHECK`, `LLM_SECURITY_PRECOMPACT_MODE`, `LLM_SECURITY_PRECOMPACT_MAX_BYTES`, `LLM_SECURITY_IDE_ROOTS`, `LLM_SECURITY_MCP_CACHE_FILE`) are unchanged — they emit no deprecation signal because there is nothing to deprecate yet.
+
+## v7.5.0 — Playground (additive surface, no scanner/hook behavior changes)
+
+Single-file SPA at `playground/llm-security-playground.html` (~10 200 lines) for onboarding, demo og workshop-bruk uten Claude Code-installasjon. Parser + renderer for alle 18 `produces_report=true`-kommandoer i `CATALOG`. State i IndexedDB primær (`llm-security-playground-v1`) med localStorage-fallback, sirkelfri Proxy + EventTarget store, microtask-batchet render. Theme-bootstrap med FOUC-prevention. 4 overflater: onboarding (5 grupper) → home (3 tracks) → catalog (20 kommandoer) ⇄ project (rapporter / oversikt / kontekst / eksport). Demo-state har tre prosjekter inline; `dft-komplett-demo` har alle 18 rapporter ferdig parsed for klikk-gjennom. Vendor-synket design-system under `playground/vendor/playground-design-system/` (sjekksum-låst via `MANIFEST.json`, redigeres aldri direkte). Test-fixtures under `playground/test-fixtures/` (én markdown-fil per kommando) er kontrakt-anker for parser-utvikling. Skjermdumper i `playground/screenshots/v7.5.0/`. Eksponerte vinduer-globaler for testing/automasjon: `__store`, `__navigate`, `__loadDemoState`, `__scheduleRender`, `__PARSERS`, `__RENDERERS`, `__CATALOG`, `__inferVerdict`, `__inferKeyStats`, `__renderPageShell`, `__handlePasteImport`. Inkluderer fix av `normalizeVerdictText` regex-rekkefølge: GO-WITH-CONDITIONS sjekkes før GO så betinget verdict ikke kollapser til ALLOW.
+
+## v7.6.0 — Playground Tier 3-referanse-case (additive surface, no scanner/hook behavior changes)
+
+Playgroundet er nå en visuelt og strukturelt fullført referanse-implementasjon for `shared/playground-design-system/` Tier 3-supplementet. 8 nye Tier 3-komponenter integrert i de 18 rapport-rendererne: `tfa-flow` + `tfa-leg` + `tfa-arrow` (lethal trifecta-kjede med `<button>`-elementer + ARIA-group/aria-label) i `renderScan` + `renderDeepScan`; `mat-ladder` + `mat-step` (5-trinns modenhets-stige med terskler 0/25/50/75/95% PASS) i `renderPosture`; `suppressed-group` (narrative-audit fra `summary.narrative_audit.suppressed_findings`) i `renderScan` + `renderDeepScan`; `codepoint-reveal` + `cp-tag`/`cp-zw`/`cp-bidi` (Unicode-steganografi side-ved-side reveal med U+200B-D|FEFF|2060|180E → `cp-zw`, U+202A-E|2066-9 → `cp-bidi`-detection) i `renderMcpInspect`; `top-risks` + `top-risk[data-severity]` (rangert top-funn-listing, semantisk `<ol>`, ekskluderer info-funn) i `renderScan`/`renderDeepScan`/`renderPluginAudit`/`renderPosture`/`renderAudit`; utvidet `recommendation-card[data-severity]` (severity-tinted advisory) på alle inline-bruk + nye per-bucket advisory-cards i `renderClean` + intro snapshot + diff-rows i `renderHarden` (action-mapping CREATE→positive / APPEND→medium / MERGE→low / SKIP→low); `risk-meter` (band-visualisering 0-100 med Low/Medium/High/Critical/Extreme bands) på 5 archetypes (scan, deep-scan, plugin-audit, audit, red-team); `card--severity-{level}` modifier på `findings__item`-cards. Wave 1 (Sesjon 2) la til `badge--scope-security` (identitets-chip), `verdict-pill-lg` med `__verdict`+`__sub` (erstatter custom verdict-pill på alle 18 rapport-typer), og DS Tier 3 `form-progress` + `fp-step` i onboarding-wizard. Wave 0 (Sesjon 1) slettet ~30 duplikat-CSS-deklarasjoner fra `<style>`-blokken (DS vinner cascade) og harmoniserte page-shell på alle 4 overflater. 5 nye DS-helpers: `renderToxicFlow`, `renderMatLadder`, `renderSuppressedGroup`, `renderCodepointReveal`, `renderTopRisks`. 2 nye normaliserings-helpers: `mapSeverityToCardLevel(input)` (severity + action-types til DS-konvensjoner) og `parseNarrativeAudit(md)`. 12 skjermdumper planlagt i `playground/screenshots/v7.6.0/`. A11Y-rapport oppdatert (`playground/A11Y-RAPPORT.md`) — WCAG 2.1 AA bekreftet, severity-soft fargepar verifisert, semantiske elementer (`<ol>`, `<button>`, `<section>`) erstatter generic `<div>`. Filendring totalt over 5 sesjoner: 10209 → 10677 linjer. Kjent begrensning: `parsed.findings` er tom for `deep-scan`/`audit` demo-fixturer (parser-begrensning, ikke fikset i v7.6.0 — sporet for v7.6.x patch).
+
+## v7.6.1 — Playground visuell-patch (no scanner/hook behavior changes)
+
+Seks bugs fanget av maintainer ved manuell verifisering i nettleser etter v7.6.0-release. Alle skyldtes mismatch mellom DS-klasser og hvordan playground-rendrere brukte dem (eller manglende DS-implementasjoner av klasser playground-rendrere antok eksisterte).
+
+(1) `renderFindingsBlock` brukte `.findings` outer-class som DS har som 2-kolonners grid (`grid-template-columns: 360px 1fr`) for list+detail-panel-layout — playground brukte den uten detail-panel, headeren havnet i venstre 360px-kolonne, items i 1fr. Erstattet med `<section class="report-meta">` + `<h4>` + korrekt `findings__list > findings__group > findings__group-header + findings__items`-mønster.
+(2) `.report-table` manglet helt i DS men brukes i 7+ rendrere (OWASP-kategorier, Supply chain, Scanner Risk Matrix, Plugin-meta, Permission-matrise, Live-meter, Siste runs, Godkjenninger, Mitigation roadmap) — lagt lokal CSS-implementasjon i playground-HTML `<style>`-blokk (border-collapse, zebra-hover, header-styling).
+(3) `renderPreDeploy` traffic-lights brukte `.sm-card__grade` som er fast 28×28 px (designet for én A-F-bokstav) — kuttet "PASS" til "AS" og "PASS-WITH-NOTES" til "PASS-WITH-..." i alle traffic-light-cards. Erstattet med bredde-tilpasset status-pill via inline styling (severity-soft + on tokens).
+(4) Threat-model matrix-bobler ikke klikkbare — `<span>` uten event-handler. Erstattet med `<button type="button" data-threat-id>` + `aria-label`. Click-handler scroller til tilsvarende rad i Trusler-tabellen og fremhever den i 1.6 sek.
+(5) Radar-labels overlappet ved 6+ akser — alle brukte `text-anchor="middle"` med samme offset. Økt SVG-størrelse fra 280×280 til 380×380, radius fra 105 til 125, bytter `text-anchor` fra `middle` til `start`/`end` basert på horisontal-posisjon (`Math.cos(ang)` > 0.2 / < -0.2 / mellom).
+(6) `recommendation-card__body` tekstoverflyt på lange single-line tekster (vilkår, owner-tags, dato) — lagt `overflow-wrap: anywhere; word-break: break-word` i lokal `<style>`-blokk.
+
+4/4 fix-spesifikke smoke-tester passerer + 18/18 renderere produserer fortsatt komplett HTML mot `dft-komplett-demo` (regresjons-test). Filendring 10677 → 10753 linjer (+76 netto).
+
+## v7.7.0 — HTML-rapport for alle 18 skill-kommandoer
+
+Alle 18 `/security`-kommandoer som produserer rapport får nå en klikkbar `file://`-lenke til en self-contained HTML-versjon. Levert over 5 sesjoner (UX-arbeid + extract + CLI + wiring). Ingen scanner- eller hook-atferdsendringer — purely additive.
+
+**Sesjon 1 (`0dc7ff4`) — Playground katalog list-view + builder-pane.** Katalog-overflaten fikk list-view (grid-toggle) + builder-pane med copy-knapp på alle 18 rapporter, så onboarding-flytene blir bredere/dypere uten å forlate playground-modusen.
+
+**Sesjon 2 (`86d6ecd`) — Playground prosjekt-surface opprydding.** Stub-screen-håndtering (rapport ikke ferdig parsed → tydelig placeholder i stedet for tom panel), topbar-splitt (navigasjons-trinn vs. eksport-handlinger), generell DS-justering for projekt-overflate.
+
+**Sesjon 3 (`fa5fb48`) — `scripts/lib/report-renderers.mjs` extract.** De 18 inline parserne + 18 inline rendererne i playground-HTML-fila flyttet til canonical ESM-modul (`scripts/lib/report-renderers.mjs`) med ren `import { PARSERS, RENDERERS } from './...'`-overflate. Playground beholder en inline-kopi (bit-identisk) fordi ESM `import` ikke fungerer fra `file://` uten Chrome/Firefox-flags. Canonical kilden + playground inline = to overflater, samme atferd.
+
+**Sesjon 4 (`db80854`) — `scripts/render-report.mjs` CLI + 4 skills wired.** Ny zero-dep Node-CLI tar `commandId` + `--in`/`--out` (stdin/file/stdout-modus), bruker kebab→camel-konvertering så alle 18 commandIds fungerer automatisk. Output er self-contained HTML (~140 KB): inlines 6 DS-stylesheets (`tokens`, `base`, `components`, `tier2`, `tier3`, `tier3-supplement`) + lokal `.report-table`-implementasjon. Fonter ikke inlined (ville blåst opp HTML 7x til ~1 MB) — `tokens.css` har `-apple-system, BlinkMacSystemFont, system-ui` som fallback. Absolutte `file://`-paths i stdout for Ghostty cmd-click. Default output `reports/<command>-<YYYYMMDD-HHmmss>.html` relativt til CWD. 4 skills wired: `scan`, `audit`, `posture`, `deep-scan`.
+
+**Sesjon 5 — 14 resterende skills wired + release.** `plugin-audit`, `mcp-audit`, `mcp-inspect`, `ide-scan`, `supply-check`, `dashboard`, `pre-deploy`, `diff`, `watch`, `registry`, `clean`, `harden`, `threat-model`, `red-team` — alle har nå en avsluttende "HTML Report"-step i sin skill-fil som instruerer Claude å (1) compute temp md-path, (2) Write hele markdown-rapporten verbatim, (3) kjøre CLI, (4) appende `> **HTML-rapport:** [Åpne i nettleser](file:///abs/sti.html)` til respons. v7.7.0 release (versjonsbump på tvers av `package.json`, `.claude-plugin/plugin.json`, README badge + state, CLAUDE.md header + state-seksjon, marketplace-rot-README).
+
+Pre-existing `pre-compact-scan`-perf-flake (1000ms terskel under last) gjenstår — defer til v7.7.x patch.
+
+## v7.7.1 — Playground UX-strip (no scanner/hook behavior changes)
+
+Operatør-feedback umiddelbart etter v7.7.0-release: hjem-overflaten viste
+fortsatt tre prosjekt-tracks (Re-onboard / Nytt prosjekt / Command-katalog)
+selv om katalog-funksjonen var det operatøren ønsket å fremheve. Minimum-
+strip levert som tre atomic commits (`b732eee` + `2a6f73f` + `81b7beb`):
+
+(1) `renderActive()`-router tvinger alltid `activeSurface` til `'catalog'`.
+Onboarding/home/project-render-funksjonene + state-strukturen er bevart
+i kildekoden, men ikke rutbare før funksjonalitet legges til igjen.
+Init-default endret fra `'home'` til `'catalog'`. Konsekvens: playgrounden
+lander direkte i Command-katalog (alle 20 kommandoer i list-view med
+builder-pane + copy-knapp fra sesjon 1).
+
+(2) Topbar `Hjem` og `Re-onboard`-knapper fjernet fra primær navigasjon.
+`Katalog`-knappen + Eksporter/Importer/tema-toggle beholdt. Project-state
+forblir i IndexedDB men ingen UI-vei dit.
+
+(3) Topbar breadcrumb erstattet `shared.organization.name` (demo-state-
+orgnavn) med statisk `llm-security` som nøytralt scope-anker. Crumb-
+parameter (f.eks. `Katalog`) beholdt som suffix.
+
+Fix: hardkodet versjons-streng `'Plugin v7.6.1'` på linje 6933 i
+`renderHome` (template-string-litteral som v7.7.0-grep-en ikke fanget)
+synket til v7.7.1.
+
+Versjonsbump i 9 filer (`package.json`, `.claude-plugin/plugin.json`,
+plugin `README.md` badge + Recent versions-tabell, plugin `CLAUDE.md`
+header + state-seksjon, `docs/version-history.md`,
+`playground/llm-security-playground.html`, rot `README.md` plugin-entry,
+rot `CLAUDE.md` plugin-katalog, `CHANGELOG.md` `[7.7.1]`-seksjon).
+Onboarding-konseptet dokumentert som v7.8.0-kandidat (per-kommando
+kontekst-injeksjon) i `ROADMAP.md`.
diff --git a/plugins/llm-security/package.json b/plugins/llm-security/package.json
index 143827d..d04ebee 100644
--- a/plugins/llm-security/package.json
+++ b/plugins/llm-security/package.json
@@ -1,6 +1,6 @@
 {
   "name": "llm-security",
-  "version": "7.6.1",
+  "version": "7.7.2",
   "description": "Security scanning, auditing, and threat modeling for Claude Code projects",
   "type": "module",
   "bin": {
diff --git a/plugins/llm-security/playground/llm-security-playground.html b/plugins/llm-security/playground/llm-security-playground.html
index 584473f..9fc6662 100644
--- a/plugins/llm-security/playground/llm-security-playground.html
+++ b/plugins/llm-security/playground/llm-security-playground.html
@@ -7,20 +7,20 @@
 
   <!-- playground-design-system v0.1 (vendored) -->
 
-  <!-- Theme bootstrap. Må kjøre før stylesheets parses for å unngå
-       flash-of-wrong-theme (FOUC). Prioritet:
-         1) lagret valg (localStorage 'llm-security-theme')
-         2) OS-preferanse via matchMedia('(prefers-color-scheme: dark)')
-         3) HTML-attributtets default ('dark')
-       Setter både data-theme + colorScheme for native form-controls/scrollbars.
-       Wrappes i try/catch — file:// + privatmodus kan blokkere localStorage. -->
+  <!-- Theme bootstrap. Must run before stylesheets parse to avoid a
+       flash-of-wrong-theme (FOUC). Priority order:
+         1) saved choice (localStorage 'llm-security-theme')
+         2) OS preference via matchMedia('(prefers-color-scheme: dark)')
+         3) the HTML attribute default ('dark')
+       Sets both data-theme + colorScheme for native form controls and scrollbars.
+       Wrapped in try/catch — file:// + private mode can block localStorage. -->
   <script>
     (function () {
       var theme = null;
       try {
         var saved = localStorage.getItem('llm-security-theme');
         if (saved === 'light' || saved === 'dark') theme = saved;
-      } catch (e) { /* localStorage utilgjengelig */ }
+      } catch (e) { /* localStorage unavailable */ }
       if (!theme && window.matchMedia) {
         theme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
       }
@@ -30,9 +30,9 @@
     })();
   </script>
 
-  <!-- Vendored design-system. Kilden er shared/playground-design-system/ — synces via
-       scripts/sync-design-system.mjs ved marketplace-rot. Aldri rediger filer under
-       playground/vendor/ direkte; endringer går i shared/ + re-sync. -->
+  <!-- Vendored design-system. The source is shared/playground-design-system/ — synced via
+       scripts/sync-design-system.mjs at the marketplace root. Never edit files under
+       playground/vendor/ directly; changes go in shared/ + re-sync. -->
   <link rel="stylesheet" href="vendor/playground-design-system/fonts.css">
   <link rel="stylesheet" href="vendor/playground-design-system/tokens.css">
   <link rel="stylesheet" href="vendor/playground-design-system/base.css">
@@ -43,19 +43,19 @@
   <link rel="stylesheet" href="vendor/playground-design-system/print.css" media="print">
 
   <style>
-    /* Playground-spesifikk layout. Alt komponent-CSS som har en DS-pendant er
-       fjernet i v7.6.0 fase 1-4 — DS Tier 3-supplement vinner cascade. Her bor
-       kun side-spesifikk layout-grid (sidebar+main, modals), playground-only
-       komponenter (.tracks, .field-from-tag), og bevisste overskrivinger som
-       DS ikke dekker (.expansion__body markup, .multi-select fieldset-ramme,
-       .checkbox-row accent-color). Fase 3 (sesjon 2): playground-ens lokale
-       verdict-pill-blokk er fjernet — DS dekker via Tier 2 (block/warning/allow)
-       + Tier 3 supplement (severity-bands). Fase 4: form-progress steg er
-       erstattet av DS fp-step-mønster. */
+    /* Playground-specific layout. Every component CSS rule with a DS equivalent was
+       removed in v7.6.0 phases 1-4 — the DS Tier 3 supplement wins the cascade. What
+       remains here is page-specific layout grid (sidebar+main, modals), playground-only
+       components (.tracks, .field-from-tag), and deliberate overrides the DS does not
+       cover (.expansion__body markup, the .multi-select fieldset border, the
+       .checkbox-row accent-color). Phase 3 (session 2): the playground's local
+       verdict-pill block was removed — the DS covers it via Tier 2 (block/warning/allow)
+       + the Tier 3 supplement (severity bands). Phase 4: the form-progress steps were
+       replaced by the DS fp-step pattern. */
     main#app { min-height: 100vh; padding: 0; }
     [hidden] { display: none !important; }
 
-    /* Onboarding-layout: sidebar + main */
+    /* Onboarding layout: sidebar + main */
     .onboarding-layout { display: grid; grid-template-columns: 280px 1fr; gap: var(--space-6); align-items: start; }
     @media (max-width: 880px) { .onboarding-layout { grid-template-columns: 1fr; } .form-progress { position: static; width: auto; } }
     .onboarding-groups { display: flex; flex-direction: column; gap: var(--space-3); margin-bottom: var(--space-6); }
@@ -78,11 +78,60 @@
     .command-cards { display: flex; flex-direction: column; gap: var(--space-4); }
     .sub-zone { border-top: 1px solid var(--color-border-subtle); padding-top: var(--space-3); }
     .sub-zone__heading { font-size: var(--font-size-xs); font-weight: var(--font-weight-semibold); text-transform: uppercase; letter-spacing: 0.06em; color: var(--color-text-tertiary); margin: 0 0 var(--space-2); }
+
+    /* Collapsible command sub-cards (Rapporter-tab) */
+    .command-subcard { padding: 0; overflow: hidden; }
+    .command-subcard .card__head--toggle {
+      display: flex;
+      align-items: flex-start;
+      justify-content: space-between;
+      gap: var(--space-3);
+      width: 100%;
+      margin: 0;
+      padding: var(--space-4) var(--space-5);
+      background: transparent;
+      border: 0;
+      cursor: pointer;
+      text-align: left;
+      font-family: inherit;
+      color: inherit;
+    }
+    .command-subcard .card__head--toggle:hover { background: var(--color-bg-soft); }
+    .command-subcard .card__head--toggle:focus-visible { outline: 2px solid var(--color-primary-500); outline-offset: -2px; }
+    .command-subcard .card__head-text { flex: 1; min-width: 0; }
+    .command-subcard .card__head-meta { display: flex; flex-direction: column; gap: 6px; align-items: flex-end; flex-shrink: 0; }
+    .command-subcard .subcard-chev {
+      display: inline-block;
+      font-size: 0.875rem;
+      color: var(--color-text-tertiary);
+      transform: rotate(-90deg);
+      transition: transform 0.15s ease;
+      align-self: center;
+      flex-shrink: 0;
+      width: 1em;
+      text-align: center;
+    }
+    .command-subcard .card__head--toggle[aria-expanded="true"] .subcard-chev { transform: rotate(0deg); }
+    .command-subcard .subcard-body {
+      padding: 0 var(--space-5) var(--space-5);
+      display: flex;
+      flex-direction: column;
+      gap: var(--space-3);
+    }
+
+    /* App header — split nav groups */
+    .app-header__nav-group { display: flex; align-items: center; gap: var(--space-2); }
+    .app-header__nav-sep {
+      width: 1px;
+      align-self: stretch;
+      background: var(--color-border-subtle);
+      margin: 0 var(--space-2);
+    }
     .paste-import-row { display: flex; flex-direction: column; gap: var(--space-2); }
     .paste-import-row__actions { display: flex; gap: var(--space-2); align-items: center; }
     .form-zone-placeholder { padding: var(--space-3); background: var(--color-bg-soft); border-radius: var(--radius-sm); font-size: var(--font-size-sm); color: var(--color-text-tertiary); font-style: italic; }
     .report-slot { min-height: 24px; }
-    .report-slot:empty::before { content: "Ingen importert rapport ennå."; font-size: var(--font-size-sm); color: var(--color-text-tertiary); font-style: italic; }
+    .report-slot:empty::before { content: "No imported report yet."; font-size: var(--font-size-sm); color: var(--color-text-tertiary); font-style: italic; }
 
     /* Project header chips */
     .project-header__chip { display: inline-flex; align-items: center; gap: 6px; padding: 2px 8px; border-radius: var(--radius-sm); background: var(--color-bg-soft); color: var(--color-text-secondary); font-size: var(--font-size-xs); font-family: var(--font-family-mono); }
@@ -112,7 +161,7 @@
     .visually-hidden { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; border: 0; }
 
     /* Catalog */
-    .catalog-search { width: 100%; max-width: 480px; margin-bottom: var(--space-5); }
+    .catalog-search { width: 100%; max-width: 480px; margin-bottom: 0; }
     .catalog-cards-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(320px, 1fr)); gap: var(--space-3); margin-top: var(--space-3); }
     .catalog-tool-notice { padding: 8px 12px; background: var(--color-bg-soft); border-left: 3px solid var(--color-state-info, var(--color-primary-300)); font-size: var(--font-size-xs); color: var(--color-text-secondary); border-radius: var(--radius-sm); }
     /* Expansion-body: playground-markup mangler .expansion__body-inner-wrapping
@@ -121,6 +170,42 @@
     .expansion__body { padding: 0 var(--space-4) var(--space-4); border-top: 1px solid var(--color-border-subtle); }
     .expansion[aria-expanded="false"] .expansion__body { display: none; }
 
+    /* Catalog v7.6.2: filter-chips + list-view + builder-pane */
+    .catalog-filter-chips { display: flex; flex-wrap: wrap; gap: var(--space-2); margin: 0; }
+    .catalog-chip { font-family: inherit; font-size: var(--font-size-xs); font-weight: var(--font-weight-medium); padding: 6px 12px; border-radius: var(--radius-pill); border: 1px solid var(--color-border-moderate); background: var(--color-surface); color: var(--color-text-secondary); cursor: pointer; transition: background 120ms ease, border-color 120ms ease, color 120ms ease; display: inline-flex; align-items: center; gap: 6px; }
+    .catalog-chip:hover { border-color: var(--color-border-strong); color: var(--color-text-primary); }
+    .catalog-chip:focus-visible { outline: 2px solid var(--color-scope-security, var(--color-primary-500)); outline-offset: 2px; }
+    .catalog-chip--active { background: var(--color-scope-security, var(--color-primary-500)); border-color: var(--color-scope-security, var(--color-primary-500)); color: var(--color-text-on-primary, #fff); }
+    .catalog-chip--active:hover { color: var(--color-text-on-primary, #fff); }
+    .catalog-chip__count { font-size: 10px; opacity: 0.85; padding: 1px 6px; border-radius: var(--radius-pill); background: rgba(0,0,0,0.08); }
+    .catalog-chip--active .catalog-chip__count { background: rgba(255,255,255,0.18); }
+
+    .catalog-list { display: flex; flex-direction: column; gap: 1px; background: var(--color-border-subtle); border: 1px solid var(--color-border-subtle); border-radius: var(--radius-md); overflow: hidden; }
+    .catalog-row { display: flex; align-items: stretch; gap: var(--space-4); padding: var(--space-3) var(--space-4); background: var(--color-surface); border: 0; text-align: left; font-family: inherit; cursor: pointer; transition: background 120ms ease; width: 100%; }
+    .catalog-row:hover { background: var(--color-bg-soft); }
+    .catalog-row:focus-visible { outline: 2px solid var(--color-scope-security, var(--color-primary-500)); outline-offset: -2px; }
+    .catalog-row__main { display: flex; flex-direction: column; gap: 4px; flex: 1; min-width: 0; }
+    .catalog-row__head { display: flex; flex-wrap: wrap; align-items: baseline; gap: var(--space-2); }
+    .catalog-row__id { font-family: var(--font-family-mono); font-size: var(--font-size-sm); font-weight: var(--font-weight-semibold); color: var(--color-text-primary); }
+    .catalog-row__label { font-size: var(--font-size-sm); color: var(--color-text-secondary); }
+    .catalog-row__desc { font-size: var(--font-size-xs); color: var(--color-text-tertiary); line-height: var(--line-height-snug); }
+    .catalog-row__hint { font-family: var(--font-family-mono); font-size: 11px; color: var(--color-text-tertiary); background: var(--color-bg-soft); padding: 1px 6px; border-radius: var(--radius-sm); }
+    .catalog-row__meta { display: flex; flex-direction: column; align-items: flex-end; gap: 4px; flex-shrink: 0; font-size: var(--font-size-xs); }
+    .catalog-row__category { font-size: 10px; text-transform: uppercase; letter-spacing: 0.06em; color: var(--color-text-tertiary); font-weight: var(--font-weight-semibold); }
+    .catalog-row__fields { color: var(--color-text-tertiary); }
+    .catalog-empty { padding: var(--space-5); text-align: center; color: var(--color-text-tertiary); border: 1px dashed var(--color-border-subtle); border-radius: var(--radius-md); }
+
+    /* Builder-pane: bigger modal, layout-tuned for live-preview workflow */
+    .builder-modal { max-width: 880px; }
+    .builder-modal__lede { color: var(--color-text-secondary); margin: 0; font-size: var(--font-size-sm); }
+    .builder-modal .form-preview { background: var(--color-bg-soft); border: 1px solid var(--color-border-subtle); }
+    .builder-modal__hint { font-size: var(--font-size-xs); color: var(--color-text-tertiary); margin: 0; }
+
+    @media (max-width: 720px) {
+      .catalog-row { flex-direction: column; gap: var(--space-2); }
+      .catalog-row__meta { flex-direction: row; align-items: center; }
+    }
+
     /* Modal (playground-only — DS har ikke modal-pattern enda) */
     .modal-backdrop { position: fixed; inset: 0; background: rgba(0,0,0,0.5); display: flex; align-items: center; justify-content: center; z-index: 100; padding: var(--space-5); }
     .modal { background: var(--color-surface); border-radius: var(--radius-md); max-width: 720px; width: 100%; max-height: 90vh; overflow: auto; padding: var(--space-5); display: flex; flex-direction: column; gap: var(--space-4); }
@@ -151,13 +236,14 @@
     .report-table tbody tr:hover { background: var(--color-bg-soft); }
     .report-table code { font-family: var(--font-family-mono); font-size: 12px; background: var(--color-surface-sunken); padding: 1px 6px; border-radius: var(--radius-sm); }
 
-    /* v7.6.1 fix: recommendation-card body kan inneholde lange single-line
-       tekster (vilkår, owner-tags, dato). Tving word-wrap så grid-celle
-       (auto + 1fr) ikke skubber innhold utenfor viewport. */
+    /* v7.6.1 fix: recommendation-card body can contain long single-line
+       text (conditions, owner-tags, dates). Force word-wrap so the grid
+       cell (auto + 1fr) does not push content off-viewport. */
     .recommendation-card__body { overflow-wrap: anywhere; word-break: break-word; }
 
-    /* v7.6.1 fix: matrix-bobler skal være klikkbare. DS har hover på cellene,
-       men bobler er <span> uten cursor. Gjør bubble til cursor:pointer + focus. */
+    /* v7.6.1 fix: matrix bubbles need to be clickable. The DS has hover on the
+       cells, but the bubbles are <span> with no cursor. Make the bubble
+       cursor:pointer + focus. */
     .matrix__bubble { cursor: pointer; transition: transform var(--duration-fast) var(--ease-default); }
     .matrix__bubble:hover { transform: scale(1.15); }
     .matrix__bubble:focus-visible { outline: 2px solid var(--color-primary-500); outline-offset: 2px; }
@@ -176,10 +262,10 @@
   <!-- Modal-portal — vises kun ved aktiv modal -->
   <div id="modal-root"></div>
 
-  <!-- Inlined demo-state for "Last inn demo-data"-knapp.
-       Mirror av shared/playground-examples/security-direktorat.html-scenario.
-       I Fase 2/3 utvides denne med fulle parsed-rapporter; her i Fase 1 er
-       reports{} tom på begge prosjekter. -->
+  <!-- Inlined demo-state for the "Load demo data" button.
+       Mirror of the shared/playground-examples/security-direktorat.html scenario.
+       In Phase 2/3 this is extended with fully parsed reports; here in Phase 1
+       reports{} is empty on both projects. -->
   <script type="application/json" id="demo-state-v1">
 {
   "schemaVersion": 1,
@@ -5440,12 +5526,13 @@
   </script>
 
   <!--
-    Klassisk script (ikke type="module") av to grunner:
-      1. External <script type="module" src="..."> feiler på file:// i Chrome+Firefox.
-      2. Single-file deployment per brief Constraints — ingen build-step.
-    Fase 1 leverer skjelett: state, persistens, surface-router, onboarding/home/catalog/project-stub.
-    Fase 2 utvider PARSERS + RENDERERS for 10 høy-prio kommandoer.
-    Fase 3 utvider med resterende 10 + screenshots + 3-doc-update.
+    Classic script (not type="module") for two reasons:
+      1. External <script type="module" src="..."> fails on file:// in Chrome+Firefox.
+      2. Single-file deployment per the brief Constraints — no build step.
+    Phase 1 delivers the skeleton: state, persistence, surface router, and the
+    onboarding/home/catalog/project stub.
+    Phase 2 extends PARSERS + RENDERERS to 10 high-priority commands.
+    Phase 3 adds the remaining 10 + screenshots + the 3-doc update.
   -->
   <script>
   (function () {
@@ -5557,7 +5644,7 @@
     }
 
     // ============================================================
-    // PERSISTENCE — IDB primær, localStorage fallback
+    // PERSISTENCE — IDB primary, localStorage fallback
     // ============================================================
     function openDB(name, version) {
       return new Promise(function (resolve, reject) {
@@ -5661,7 +5748,7 @@
           try {
             const payload = JSON.stringify(state);
             if (payload.length > 4.5 * 1024 * 1024) {
-              console.warn('[llm-security playground] State nærmer seg localStorage 5 MiB cap.');
+              console.warn('[llm-security playground] State is approaching the localStorage 5 MiB cap.');
             }
             localStorage.setItem(STATE_KEY, payload);
             return Promise.resolve();
@@ -5694,10 +5781,10 @@
       window.__store = store;
       window.__persistence = persistence;
 
-      // Initial-surface heuristikk
-      const orgName = store.state.shared && store.state.shared.organization && store.state.shared.organization.name;
-      if (!orgName) store.state.activeSurface = 'onboarding';
-      else if (!store.state.activeSurface) store.state.activeSurface = 'home';
+      // v7.7.1: first visit + every subsequent visit lands on catalog.
+      // The home/onboarding/project surfaces remain in source but are not
+      // routable until the feature is restored.
+      store.state.activeSurface = 'catalog';
       scheduleRender();
     }
 
@@ -5754,7 +5841,7 @@
       // Erstatt hele state-tre. Trigger persist via subscribe.
       Object.keys(store.raw).forEach(function (k) { delete store.raw[k]; });
       Object.keys(migrated).forEach(function (k) { store.raw[k] = migrated[k]; });
-      // Rebuild store på import (proxy-cache er skjelett-bundet til gammel raw)
+      // Rebuild the store on import (the proxy cache is skeleton-bound to the old raw)
       store = createStore(store.raw, sharedBus);
       window.__store = store;
       scheduleRender();
@@ -5850,7 +5937,7 @@
     ];
 
     // CATALOG: alle 20 commands. produces_report=true → har parser+renderer
-    // (implementeres i Fase 2/3). Verktøy-commands har null parser/renderer.
+    // (implemented in Phase 2/3). Tool commands have null parser/renderer.
     const CATALOG = {
       version: '1.0',
       generated_for_schema: SCHEMA_VERSION,
@@ -5868,7 +5955,7 @@
           id: 'scan',
           category: 'discover',
           label: 'Skanning',
-          description: 'Skann skills/MCP/directories/GitHub repos. Detekterer secrets, injection, supply-chain-risiko, OWASP LLM-mønstre.',
+          description: 'Scan skills/MCP/directories/GitHub repos. Detects secrets, injection, supply-chain risk, and OWASP LLM patterns.',
           argument_hint: '[path|url] [--deep]',
           calls_agent: 'scan-orchestrator + skill-scanner-agent + mcp-scanner-agent',
           produces_report: true,
@@ -5930,7 +6017,7 @@
           report_root_class: 'findings',
           renderer: 'renderMcpAudit',
           input_fields: [
-            { id: 'live_inspection', label: 'Live-inspeksjon (JSON-RPC mot kjørende servere)', type: 'boolean', from: 'local' },
+            { id: 'live_inspection', label: 'Live inspection (JSON-RPC against running servers)', type: 'boolean', from: 'local' },
             { id: 'config_paths', label: 'Config-stier (én per linje)', type: 'textarea', from: 'local' }
           ]
         },
@@ -5938,7 +6025,7 @@
           id: 'mcp-inspect',
           category: 'discover',
           label: 'MCP live-inspect',
-          description: 'Koble til kjørende MCP-servere og skann tool-deskripsjoner for injection/shadowing/drift.',
+          description: 'Connect to running MCP servers and scan tool descriptions for injection/shadowing/drift.',
           argument_hint: '[server-url eller name]',
           calls_agent: '(deterministisk scanner)',
           produces_report: true,
@@ -5993,7 +6080,7 @@
           id: 'posture',
           category: 'posture',
           label: 'Posture-quick',
-          description: 'Rask scorecard på 13/16 kategorier. Inkluderer EU AI Act, NIST AI RMF, ISO 42001 hvis valgt.',
+          description: 'Quick scorecard across 13/16 categories. Includes EU AI Act, NIST AI RMF, and ISO 42001 when selected.',
           argument_hint: '[path]',
           calls_agent: 'posture-scanner.mjs (deterministisk)',
           produces_report: true,
@@ -6037,7 +6124,7 @@
           renderer: 'renderDashboard',
           input_fields: [
             { id: 'no_cache', label: 'Forbi cache (full re-scan)', type: 'boolean', from: 'local' },
-            { id: 'max_depth', label: 'Maks søke-dybde', type: 'number', from: 'local' }
+            { id: 'max_depth', label: 'Max search depth', type: 'number', from: 'local' }
           ]
         },
         {
@@ -6054,8 +6141,8 @@
           input_fields: [
             SHARED.organisation_name,
             SHARED.frameworks,
-            { id: 'production_environment', label: 'Produksjonsmiljø', type: 'select', from: 'local', options: ['Cloud (Azure)', 'Cloud (AWS)', 'Cloud (GCP)', 'On-prem', 'Hybrid', 'Air-gapped'] },
-            { id: 'data_classification', label: 'Dataklassifisering', type: 'select', from: 'local', options: ['Åpen', 'Intern', 'Fortrolig', 'Strengt fortrolig'] }
+            { id: 'production_environment', label: 'Production environment', type: 'select', from: 'local', options: ['Cloud (Azure)', 'Cloud (AWS)', 'Cloud (GCP)', 'On-prem', 'Hybrid', 'Air-gapped'] },
+            { id: 'data_classification', label: 'Data classification', type: 'select', from: 'local', options: ['Open', 'Internal', 'Confidential', 'Strictly confidential'] }
           ]
         },
 
@@ -6064,7 +6151,7 @@
           id: 'diff',
           category: 'findings-ops',
           label: 'Diff mot baseline',
-          description: 'Sammenlign scan-resultat mot lagret baseline — viser nye, løste, uendrede og flyttede funn.',
+          description: 'Compare scan results against the stored baseline — shows new, resolved, unchanged, and moved findings.',
           argument_hint: '[path]',
           calls_agent: '(deterministisk scanner)',
           produces_report: true,
@@ -6081,7 +6168,7 @@
           id: 'watch',
           category: 'findings-ops',
           label: 'Watch (kontinuerlig)',
-          description: 'Kontinuerlig monitorering — kjør diff på rekursivt intervall via /loop.',
+          description: 'Continuous monitoring — runs diff on a recurring interval via /loop.',
           argument_hint: '[path] [--interval 6h]',
           calls_agent: 'watch-cron.mjs',
           produces_report: true,
@@ -6098,7 +6185,7 @@
           id: 'registry',
           category: 'findings-ops',
           label: 'Skill-registry',
-          description: 'Skill signature registry — vis stats, skann og registrer skills, søk kjente fingerprints.',
+          description: 'Skill signature registry — show stats, scan and register skills, search known fingerprints.',
           argument_hint: '[scan|search]',
           calls_agent: '(deterministisk scanner)',
           produces_report: true,
@@ -6107,7 +6194,7 @@
           renderer: 'renderRegistry',
           input_fields: [
             { id: 'mode', label: 'Modus', type: 'select', from: 'local', options: ['stats', 'scan', 'search'] },
-            { id: 'query', label: 'Søkestreng (kun search)', type: 'text', from: 'local' },
+            { id: 'query', label: 'Search string (search only)', type: 'text', from: 'local' },
             { id: 'target', label: 'Target path (kun scan)', type: 'text', from: 'local' }
           ]
         },
@@ -6174,7 +6261,7 @@
           id: 'red-team',
           category: 'adversarial',
           label: 'Red-team simulasjon',
-          description: '64 attack-scenarier på tvers av 12 kategorier mot plugin hooks. --adaptive for mutasjon-basert evasion.',
+          description: '64 attack scenarios across 12 categories against plugin hooks. --adaptive for mutation-based evasion.',
           argument_hint: '[--category <name>] [--adaptive]',
           calls_agent: 'attack-simulator.mjs (data-drevet)',
           produces_report: true,
@@ -6196,7 +6283,7 @@
           label: 'MCP-baseline-reset',
           description: 'Reset MCP description baseline cache. Etter legitim MCP-server-oppgradering.',
           argument_hint: '[--target <tool>] [--list]',
-          calls_agent: '(deterministisk verktøy)',
+          calls_agent: '(deterministic tool)',
           produces_report: false,
           report_archetype: null,
           report_root_class: null,
@@ -6210,7 +6297,7 @@
           id: 'security',
           category: 'mcp-ops',
           label: 'Security-router',
-          description: 'Router-kommando — viser tilgjengelige sub-commands. Verktøy for navigasjon, ingen rapport.',
+          description: 'Router command — lists available sub-commands. Tool for navigation, produces no report.',
           argument_hint: '',
           calls_agent: '(router)',
           produces_report: false,
@@ -6299,9 +6386,9 @@
       const fromAttr = field.from === 'shared' ? 'shared' : 'local';
       const dataAttrs = 'data-cf-field="' + escapeAttr(field.id) + '" data-cf-from="' + fromAttr + '" data-cf-type="' + escapeAttr(field.type) + '"';
       const fromTag = field.from === 'shared'
-        ? '<span class="field-from-tag" title="Forhåndsutfylt fra onboarding (state.shared.' + escapeAttr(field.shared_path || '') + ')">felles</span>'
+        ? '<span class="field-from-tag" title="Prefilled from onboarding (state.shared.' + escapeAttr(field.shared_path || '') + ')">shared</span>'
         : '';
-      const requiredMark = field.required ? '<span class="required-mark" aria-label="påkrevd">*</span>' : '';
+      const requiredMark = field.required ? '<span class="required-mark" aria-label="required">*</span>' : '';
       const labelHtml = '<label for="' + domId + '" class="field-label">' + escapeHtml(field.label) + requiredMark + fromTag + '</label>';
       let inputHtml = '';
       if (field.type === 'text') {
@@ -6371,7 +6458,7 @@
           '<div class="command-form__fields">' + fieldRows + '</div>' +
           '<div class="command-form__actions">' +
             '<button type="button" class="btn btn--primary btn--sm" data-action="copy-command" data-command="' + escapeAttr(cmd.id) + '">Kopier kommando</button>' +
-            '<button type="button" class="btn btn--secondary btn--sm" data-action="preview-command" data-command="' + escapeAttr(cmd.id) + '">Forhåndsvis</button>' +
+            '<button type="button" class="btn btn--secondary btn--sm" data-action="preview-command" data-command="' + escapeAttr(cmd.id) + '">Preview</button>' +
             '<span class="command-form__hint">' + fieldCount + ' felt' + (fieldCount === 1 ? '' : 'er') + ' (' + sharedCount + ' fra shared).</span>' +
             '<span class="command-form__copy-confirm" data-copy-confirm hidden></span>' +
           '</div>' +
@@ -6459,12 +6546,14 @@
 
     function renderActive() {
       if (!store) return;
-      const active = store.state.activeSurface || 'home';
-      showSurface(active);
-      if (active === 'onboarding') renderOnboardingSurface();
-      else if (active === 'home') renderHomeSurface();
-      else if (active === 'project') renderProjectSurface();
-      else if (active === 'catalog') renderCatalogSurface();
+      // v7.7.1: catalog is the only routable surface. Onboarding/home/project
+      // are preserved in source, but the router always forces catalog until
+      // the feature is restored.
+      if (store.state.activeSurface !== 'catalog') {
+        store.state.activeSurface = 'catalog';
+      }
+      showSurface('catalog');
+      renderCatalogSurface();
     }
 
     function navigate(surface) {
@@ -6480,14 +6569,15 @@
     // TOPBAR (felles for home/catalog/project)
     // ============================================================
     function renderTopbar(crumb) {
-      const orgName = (store.state.shared.organization && store.state.shared.organization.name) || '';
-      const breadcrumbInner = (orgName ? escapeHtml(orgName) : '') + (orgName && crumb ? ' · ' : '') + (crumb || '');
-      const breadcrumbHtml = breadcrumbInner
-        ? '<nav class="app-header__breadcrumb" aria-label="Brødsmuler">' + breadcrumbInner + '</nav>'
-        : '';
+      // v7.7.1: onboarding is gone, so the orgName from shared.organization
+      // er ikke lenger meningsfullt i breadcrumb. Bruker statisk
+      // "llm-security" som scope-anker pluss valgfri crumb.
+      const breadcrumbInner = 'llm-security' + (crumb ? ' · ' + crumb : '');
+      const breadcrumbHtml =
+        '<nav class="app-header__breadcrumb" aria-label="Breadcrumb">' + breadcrumbInner + '</nav>';
       const currentTheme = document.documentElement.getAttribute('data-theme') === 'light' ? 'light' : 'dark';
-      const themeLabel = currentTheme === 'light' ? 'Lys' : 'Mørk';
-      const themeNext = currentTheme === 'light' ? 'mørk' : 'lys';
+      const themeLabel = currentTheme === 'light' ? 'Light' : 'Dark';
+      const themeNext = currentTheme === 'light' ? 'dark' : 'light';
       return (
         '<header class="app-header">' +
           '<div class="app-header__brand">' +
@@ -6497,15 +6587,18 @@
           breadcrumbHtml +
           '<div class="app-header__spacer"></div>' +
           '<div class="app-header__actions" role="group" aria-label="Hovednavigasjon">' +
-            '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-home">Hjem</button>' +
-            '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-catalog">Katalog</button>' +
-            '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-onboarding">Re-onboard</button>' +
-            '<button type="button" class="btn btn--secondary btn--sm" data-action="export-state" aria-label="Eksporter state til JSON">Eksporter</button>' +
-            '<button type="button" class="btn btn--secondary btn--sm" data-action="import-state" aria-label="Importer state fra JSON">Importer</button>' +
-            '<input type="file" accept="application/json,.json" data-import-input hidden>' +
-            '<button type="button" class="theme-toggle" data-action="toggle-theme" aria-label="Bytt til ' + themeNext + ' modus">' +
-              '<span data-theme-label>' + themeLabel + '</span>' +
-            '</button>' +
+            '<div class="app-header__nav-group" role="group" aria-label="Primary navigation">' +
+              '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-catalog">Katalog</button>' +
+            '</div>' +
+            '<span class="app-header__nav-sep" aria-hidden="true"></span>' +
+            '<div class="app-header__nav-group" role="group" aria-label="State og tema">' +
+              '<button type="button" class="btn btn--secondary btn--sm" data-action="export-state" aria-label="Eksporter state til JSON">Eksporter</button>' +
+              '<button type="button" class="btn btn--secondary btn--sm" data-action="import-state" aria-label="Importer state fra JSON">Importer</button>' +
+              '<input type="file" accept="application/json,.json" data-import-input hidden>' +
+              '<button type="button" class="theme-toggle" data-action="toggle-theme" aria-label="Switch to ' + themeNext + ' mode">' +
+                '<span data-theme-label>' + themeLabel + '</span>' +
+              '</button>' +
+            '</div>' +
           '</div>' +
         '</header>'
       );
@@ -6554,7 +6647,7 @@
           { id: 'platform.ide_list', label: 'IDE-er i bruk', type: 'multiSelect', options: IDE_OPTIONS },
           { id: 'platform.mcp_count', label: 'Antall MCP-servere konfigurert', type: 'number' },
           { id: 'platform.ci_system', label: 'CI/CD-system', type: 'select', options: CI_OPTIONS },
-          { id: 'platform.runtime_envs', label: 'Runtime-miljøer', type: 'multiSelect', options: RUNTIME_OPTIONS }
+          { id: 'platform.runtime_envs', label: 'Runtime environments', type: 'multiSelect', options: RUNTIME_OPTIONS }
         ]
       },
       {
@@ -6608,7 +6701,7 @@
      *   3. Profile-group fp-step
      *   4. Platform-group fp-step
      *   5. Compliance-group fp-step
-     * Plus form-progress__steps wrapper-container per DS-mønster.
+     * Plus the form-progress__steps wrapper container per the DS pattern.
      */
     function renderOnboardingProgress() {
       const completedCount = ONBOARDING_GROUPS.filter(isOnboardingGroupComplete).length;
@@ -6670,7 +6763,7 @@
       const headerHtml = renderPageShell({
         eyebrow: (isReturning ? 'RE-ONBOARDING' : 'ONBOARDING') + ' · ' + allCompleteCount + ' av ' + ONBOARDING_GROUPS.length + ' grupper komplette',
         title: isReturning ? 'Oppdater fellesfeltene' : 'Velkommen — la oss sette opp llm-security for ' + (orgName || 'din virksomhet'),
-        lede: 'Disse 5 gruppene er felles state. De forhåndsutfyller alle command-skjemaer for nye prosjekter, så du slipper å re-skrive samme info.',
+        lede: 'These 5 groups are shared state. They prefill every command form for new projects, so you do not have to re-enter the same info.',
         meta: ['Gruppe ' + (ONBOARDING_GROUPS.findIndex(function (g) { return g.id === group.id; }) + 1) + ' av ' + ONBOARDING_GROUPS.length, group.title || group.id]
       }, '');
 
@@ -6678,7 +6771,7 @@
         '<div class="onboarding-actions">' +
           (isFirst ? '' : '<button type="button" class="btn btn--ghost" data-action="onboarding-prev">← Forrige</button>') +
           (isLast
-            ? '<button type="button" class="btn btn--primary" data-action="onboarding-finish">Ferdig — gå til hjem</button>'
+            ? '<button type="button" class="btn btn--primary" data-action="onboarding-finish">Done — go to home</button>'
             : '<button type="button" class="btn btn--primary" data-action="onboarding-next">Neste →</button>'
           ) +
           '<span class="onboarding-help">Tipset: alle felter kan endres senere via Re-onboard.</span>' +
@@ -6767,8 +6860,8 @@
           '<button type="button" class="tracks__card" data-action="goto-onboarding">' +
             '<span class="tracks__card-icon" aria-hidden="true">⚙︎</span>' +
             '<h3 class="tracks__card-title">Re-onboard</h3>' +
-            '<p class="tracks__card-desc">Oppdater fellesfeltene som forhåndsutfyller alle command-skjemaer.</p>' +
-            '<span class="tracks__card-meta"><span>Felles state</span><span class="tracks__card-cta">Åpne →</span></span>' +
+            '<p class="tracks__card-desc">Update the shared fields that prefill every command form.</p>' +
+            '<span class="tracks__card-meta"><span>Shared state</span><span class="tracks__card-cta">Open →</span></span>' +
           '</button>' +
           '<button type="button" class="tracks__card" data-action="new-project">' +
             '<span class="tracks__card-icon" aria-hidden="true">＋</span>' +
@@ -6779,7 +6872,7 @@
           '<button type="button" class="tracks__card" data-action="goto-catalog">' +
             '<span class="tracks__card-icon" aria-hidden="true">◇</span>' +
             '<h3 class="tracks__card-title">Command-katalog</h3>' +
-            '<p class="tracks__card-desc">Bla i alle ' + CATALOG.commands.length + ' commands gruppert på kategori. Generer pipeline-strenger uten et prosjekt.</p>' +
+            '<p class="tracks__card-desc">Browse all ' + CATALOG.commands.length + ' commands grouped by category. Generate pipeline strings without a project.</p>' +
             '<span class="tracks__card-meta"><span>' + CATALOG.commands.length + ' commands</span><span class="tracks__card-cta">Bla →</span></span>' +
           '</button>' +
         '</div>'
@@ -6791,10 +6884,10 @@
             '<div class="guide-panel guide-panel--info">' +
               '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
               '<div class="guide-panel__body">' +
-                '<h3 class="guide-panel__title">Du har ingen prosjekter ennå</h3>' +
-                '<p class="guide-panel__text">Opprett ditt første prosjekt for å starte sikkerhetsskanning og auditing. Eller last inn demo-data for å se hvordan det ser ut.</p>' +
+                '<h3 class="guide-panel__title">You have no projects yet</h3>' +
+                '<p class="guide-panel__text">Create your first project to start security scanning and auditing. Or load demo data to see how it looks.</p>' +
                 '<div class="guide-panel__action" style="display:flex; gap: var(--space-2); flex-wrap: wrap;">' +
-                  '<button type="button" class="btn btn--primary" data-action="new-project">Opprett første prosjekt</button>' +
+                  '<button type="button" class="btn btn--primary" data-action="new-project">Create first project</button>' +
                   '<button type="button" class="btn btn--secondary" data-action="load-demo">Last inn demo-data</button>' +
                 '</div>' +
               '</div>' +
@@ -6836,14 +6929,14 @@
         eyebrow: 'HJEM',
         title: 'Hei, ' + (orgName || 'venn'),
         lede: orgName
-          ? 'Velg arbeidsspor eller utforsk eksisterende prosjekter. Felles state er aktiv og forhåndsutfyller skjemaer.'
-          : 'Single-file sikkerhetsskanning + auditing for Claude Code-prosjekter. Start med onboarding for å aktivere felles state.',
+          ? 'Pick a work track or browse existing projects. Shared state is active and prefills forms.'
+          : 'Single-file security scanning + auditing for Claude Code projects. Start with onboarding to activate shared state.',
         verdict: 'n-a',
         hero: true,
         meta: [
-          'Plugin v7.6.1',
-          projects.length + ' prosjekt' + (projects.length === 1 ? '' : 'er'),
-          CATALOG.commands.length + ' kommandoer'
+          'Plugin v7.7.2',
+          projects.length + ' project' + (projects.length === 1 ? '' : 's'),
+          CATALOG.commands.length + ' commands'
         ],
         keyStats: [
           { label: 'PROSJEKTER', value: projects.length },
@@ -6875,6 +6968,7 @@
     // CATALOG SURFACE
     // ============================================================
     let catalogSearchQuery = '';
+    let catalogFilter = 'all'; // 'all' | 'report' | 'tool' | <category-id>
 
     function catalogMatches(cmd, q) {
       if (!q) return true;
@@ -6882,83 +6976,104 @@
       return hay.indexOf(q) >= 0;
     }
 
-    function renderCatalogCardHtml(cmd) {
+    function categoryLabelById(id) {
+      const c = (CATALOG.categories || []).find(function (x) { return x.id === id; });
+      return c ? c.label : id;
+    }
+
+    function filteredCatalogCommands() {
+      const q = catalogSearchQuery.toLowerCase().trim();
+      return (CATALOG.commands || []).filter(function (c) {
+        if (!catalogMatches(c, q)) return false;
+        if (catalogFilter === 'all') return true;
+        if (catalogFilter === 'report') return !!c.produces_report;
+        if (catalogFilter === 'tool') return !c.produces_report;
+        return c.category === catalogFilter;
+      });
+    }
+
+    function renderCatalogRowHtml(cmd) {
       const isVerktoy = !cmd.produces_report;
-      const pill = isVerktoy ? '<span class="card__pill">Verktøy</span>' : '<span class="card__pill">Rapport</span>';
-      const hintHtml = cmd.argument_hint ? '<span class="card__hint">' + escapeHtml(cmd.argument_hint) + '</span>' : '';
-      const verktoyNotice = isVerktoy ? '<div class="catalog-tool-notice">Verktøy — ingen rapport-import. Skjema bygger pipeline-streng som kjøres i terminalen.</div>' : '';
+      const pill = isVerktoy ? '<span class="card__pill">Tool</span>' : '<span class="card__pill">Report</span>';
+      const hintHtml = cmd.argument_hint ? ' <code class="catalog-row__hint">' + escapeHtml(cmd.argument_hint) + '</code>' : '';
+      const fieldCount = (cmd.input_fields || []).length;
+      const fieldLabel = fieldCount + ' felt' + (fieldCount === 1 ? '' : 'er');
       return (
-        '<article class="card" data-command-card data-command-id="' + escapeAttr(cmd.id) + '">' +
-          '<div class="card__head">' +
-            '<div>' +
-              '<h3 class="card__title">' + escapeHtml(cmd.label) + '</h3>' +
-              '<p class="card__desc">' + escapeHtml(cmd.description) + '</p>' +
+        '<button type="button" class="catalog-row" data-action="catalog-open-form" data-command="' + escapeAttr(cmd.id) + '" aria-label="Open builder for ' + escapeAttr(cmd.label) + '">' +
+          '<span class="catalog-row__main">' +
+            '<span class="catalog-row__head">' +
+              '<span class="catalog-row__id">/security:' + escapeHtml(cmd.id) + '</span>' +
+              '<span class="catalog-row__label">' + escapeHtml(cmd.label) + '</span>' +
               hintHtml +
-            '</div>' +
-            '<div style="display:flex; flex-direction:column; gap:6px; align-items:flex-end;">' +
-              '<span class="badge badge--scope-security">llm-security</span>' +
-              pill +
-            '</div>' +
-          '</div>' +
-          verktoyNotice +
-          '<div class="card__actions">' +
-            '<button type="button" class="btn btn--primary btn--sm" data-action="catalog-open-form" data-command="' + escapeAttr(cmd.id) + '">Åpne skjema</button>' +
-            '<span style="font-size: var(--font-size-xs); color: var(--color-text-tertiary);">' + (cmd.input_fields || []).length + ' felter</span>' +
-          '</div>' +
-        '</article>'
+            '</span>' +
+            '<span class="catalog-row__desc">' + escapeHtml(cmd.description) + '</span>' +
+          '</span>' +
+          '<span class="catalog-row__meta">' +
+            '<span class="catalog-row__category">' + escapeHtml(categoryLabelById(cmd.category)) + '</span>' +
+            pill +
+            '<span class="catalog-row__fields">' + fieldLabel + '</span>' +
+          '</span>' +
+        '</button>'
       );
     }
 
-    function renderCatalogGroupsHtml() {
-      const q = catalogSearchQuery.toLowerCase().trim();
-      return CATALOG.categories.map(function (cat) {
-        const cmds = CATALOG.commands.filter(function (c) { return c.category === cat.id && catalogMatches(c, q); });
-        if (cmds.length === 0 && q) return ''; // skjul tomme grupper ved aktiv søk
-        const isOpen = q !== '' || cat.id === 'discover'; // discover åpen som default
-        const cardsHtml = cmds.length > 0
-          ? '<div class="catalog-cards-grid">' + cmds.map(renderCatalogCardHtml).join('') + '</div>'
-          : '<p style="color: var(--color-text-tertiary); margin: var(--space-3) 0;">Ingen kommandoer i denne kategorien.</p>';
+    function renderCatalogChipsHtml() {
+      const total = (CATALOG.commands || []).length;
+      const reportCount = (CATALOG.commands || []).filter(function (c) { return c.produces_report; }).length;
+      const toolCount = total - reportCount;
+      const baseChips = [
+        { id: 'all',    label: 'Alle',                  count: total },
+        { id: 'report', label: 'Rapport-produserende',  count: reportCount },
+        { id: 'tool',   label: 'Tools',                 count: toolCount }
+      ];
+      const categoryChips = (CATALOG.categories || []).map(function (cat) {
+        return { id: cat.id, label: cat.label, count: cat.count };
+      });
+      return baseChips.concat(categoryChips).map(function (chip) {
+        const active = catalogFilter === chip.id;
         return (
-          '<div class="expansion" aria-expanded="' + (isOpen ? 'true' : 'false') + '">' +
-            '<button type="button" class="expansion__head" data-action="catalog-toggle-group" data-group="' + escapeAttr(cat.id) + '">' +
-              '<span class="expansion__title">' +
-                '<span class="expansion__title-main">' + escapeHtml(cat.label) + '</span>' +
-                '<span class="expansion__title-sub">' + cmds.length + ' av ' + cat.count + ' kommandoer' + (q ? ' (filtrert)' : '') + '</span>' +
-              '</span>' +
-              '<span class="expansion__chev" aria-hidden="true">▾</span>' +
-            '</button>' +
-            '<div class="expansion__body">' + cardsHtml + '</div>' +
-          '</div>'
+          '<button type="button" class="catalog-chip' + (active ? ' catalog-chip--active' : '') + '" data-action="catalog-filter" data-filter="' + escapeAttr(chip.id) + '" aria-pressed="' + (active ? 'true' : 'false') + '">' +
+            escapeHtml(chip.label) + ' <span class="catalog-chip__count">' + chip.count + '</span>' +
+          '</button>'
         );
       }).join('');
     }
 
+    function renderCatalogListBodyHtml() {
+      const cmds = filteredCatalogCommands();
+      if (cmds.length === 0) {
+        return '<div class="catalog-empty">No matches. Try a different search or filter.</div>';
+      }
+      return '<div class="catalog-list">' + cmds.map(renderCatalogRowHtml).join('') + '</div>';
+    }
+
     function renderCatalogSurface() {
       const root = getSurfaceEl('catalog');
       if (!root) return;
-      const total = CATALOG.commands.length;
-      const reportCount = CATALOG.commands.filter(function (c) { return c.produces_report; }).length;
+      const total = (CATALOG.commands || []).length;
+      const reportCount = (CATALOG.commands || []).filter(function (c) { return c.produces_report; }).length;
       const toolCount = total - reportCount;
 
       const catalogShell = renderPageShell({
         eyebrow: 'KATALOG',
         title: 'Command-katalog',
-        lede: 'Alle ' + total + ' kommandoer gruppert på kategori. Bygg pipeline-strenger uten et aktivt prosjekt.',
+        lede: 'All ' + total + ' commands. Search, filter, click a row to build the command string.',
         verdict: 'n-a',
         meta: [
           total + ' kommandoer',
           reportCount + ' rapport-produserende',
-          toolCount + ' verktøy'
+          toolCount + ' tools'
         ],
         keyStats: [
           { label: 'TOTALT', value: total },
           { label: 'RAPPORT-KOMMANDOER', value: reportCount },
-          { label: 'VERKTØY', value: toolCount }
+          { label: 'TOOLS', value: toolCount }
         ]
       },
         '<div class="stack-lg">' +
-          '<input type="search" class="input catalog-search" placeholder="Søk i kommandoer (id, label, beskrivelse, argument-hint) …" data-catalog-search value="' + escapeAttr(catalogSearchQuery) + '" aria-label="Søk i kommando-katalogen">' +
-          '<div data-catalog-groups>' + renderCatalogGroupsHtml() + '</div>' +
+          '<input type="search" class="input catalog-search" placeholder="Search commands (id, label, description, argument hint) …" data-catalog-search value="' + escapeAttr(catalogSearchQuery) + '" aria-label="Search the command catalog">' +
+          '<div class="catalog-filter-chips" role="group" aria-label="Filtre">' + renderCatalogChipsHtml() + '</div>' +
+          '<div data-catalog-list>' + renderCatalogListBodyHtml() + '</div>' +
         '</div>'
       );
 
@@ -6966,24 +7081,25 @@
         renderTopbar('Katalog') +
         '<div class="app-shell">' + catalogShell + '</div>'
       );
-
-      // Bevarer fokus i søkefeltet under re-render
-      const searchEl = root.querySelector('[data-catalog-search]');
-      if (searchEl && document.activeElement !== searchEl && catalogSearchQuery) {
-        // Ikke stjel fokus med mindre brukeren akkurat skrev — håndteres i action handler
-      }
     }
 
     // ============================================================
     // PROJECT SURFACE (stub i Fase 1 — full report-render i Fase 2/3)
     // ============================================================
     let currentProjectTab = 'discover';
-    let currentProjectScreen = 'rapporter';
+
+    // Tracks which sub-cards are expanded — key: projectId + '::' + cmdId.
+    // Persists across re-renders so paste-import etc. doesn't collapse them.
+    const expandedSubcards = new Set();
+
+    function subcardKey(projectId, cmdId) { return projectId + '::' + cmdId; }
 
     function renderCommandSubCard(cmd, projectId) {
       const project = findProject(projectId);
       const report = project && project.reports && project.reports[cmd.id];
       const hasReport = !!(report && report.parsed);
+      const isExpanded = expandedSubcards.has(subcardKey(projectId, cmd.id));
+      const bodyId = 'subcard-body-' + cmd.id.replace(/[^a-zA-Z0-9_-]/g, '_');
 
       const formZone = (
         '<div class="sub-zone">' +
@@ -7018,29 +7134,32 @@
       } else {
         reportZone = (
           '<div class="sub-zone">' +
-            '<div class="catalog-tool-notice">Verktøy — denne kommandoen produserer ikke en rapport. Skjemaet bygger en pipeline-streng som kjøres i terminalen.</div>' +
+            '<div class="catalog-tool-notice">Tool — this command does not produce a report. The form builds a pipeline string to run in the terminal.</div>' +
           '</div>'
         );
       }
 
       return (
-        '<article class="card" data-command-subcard data-command-id="' + escapeAttr(cmd.id) + '">' +
-          '<div class="card__head">' +
-            '<div>' +
+        '<article class="card command-subcard" data-command-subcard data-command-id="' + escapeAttr(cmd.id) + '">' +
+          '<button type="button" class="card__head card__head--toggle" data-action="toggle-subcard" data-command="' + escapeAttr(cmd.id) + '" data-project-id="' + escapeAttr(projectId) + '" aria-expanded="' + (isExpanded ? 'true' : 'false') + '" aria-controls="' + escapeAttr(bodyId) + '">' +
+            '<div class="card__head-text">' +
               '<h3 class="card__title">' + escapeHtml(cmd.label) + '</h3>' +
               '<p class="card__desc">' + escapeHtml(cmd.description) + '</p>' +
             '</div>' +
-            '<div style="display:flex; flex-direction:column; gap:6px; align-items:flex-end;">' +
+            '<div class="card__head-meta">' +
               '<span class="badge badge--scope-security">llm-security</span>' +
               (cmd.produces_report
                 ? '<span class="card__pill">' + (hasReport ? '✓ Rapport' : 'Rapport') + '</span>'
-                : '<span class="card__pill">Verktøy</span>'
+                : '<span class="card__pill">Tool</span>'
               ) +
             '</div>' +
+            '<span class="subcard-chev" aria-hidden="true">▾</span>' +
+          '</button>' +
+          '<div class="subcard-body" id="' + escapeAttr(bodyId) + '"' + (isExpanded ? '' : ' hidden') + '>' +
+            formZone +
+            pasteZone +
+            reportZone +
           '</div>' +
-          formZone +
-          pasteZone +
-          reportZone +
         '</article>'
       );
     }
@@ -7061,17 +7180,6 @@
         '</div>'
       );
 
-      const SCREENS = [
-        { id: 'oversikt',  label: 'Oversikt' },
-        { id: 'rapporter', label: 'Rapporter' },
-        { id: 'kontekst',  label: 'Kontekst' },
-        { id: 'eksport',   label: 'Eksport' }
-      ];
-      const screenTabsHtml = '<nav class="tab-list" role="tablist" aria-label="Prosjekt-skjermer">' + SCREENS.map(function (s) {
-        const isActive = currentProjectScreen === s.id;
-        return '<button type="button" class="tab" role="tab" aria-current="' + (isActive ? 'true' : 'false') + '" data-action="project-screen" data-screen="' + escapeAttr(s.id) + '">' + escapeHtml(s.label) + '</button>';
-      }).join('') + '</nav>';
-
       const tabsHtml = '<div class="project-tabs" role="tablist">' + CATALOG.categories.map(function (cat) {
         const isActive = currentProjectTab === cat.id;
         return '<button type="button" class="project-tab" role="tab"' + (isActive ? ' aria-current="true"' : '') + ' data-action="project-tab" data-tab="' + escapeAttr(cat.id) + '">' + escapeHtml(cat.label) + '<span class="project-tab__count">' + cat.count + '</span></button>';
@@ -7083,53 +7191,6 @@
         return '<div class="command-cards" role="tabpanel" data-tab-panel="' + escapeAttr(cat.id) + '"' + (isActive ? '' : ' hidden') + '>' + cards + '</div>';
       }).join('');
 
-      const scenarioChipsList = (project.scenarios || []).map(function (sid) {
-        const s = SCENARIOS.find(function (x) { return x.id === sid; });
-        return '<li>' + escapeHtml(s ? s.name : sid) + '</li>';
-      }).join('');
-
-      const oversiktHtml = (
-        '<div class="tab-panel" data-screen-id="oversikt"' + (currentProjectScreen === 'oversikt' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Oversikt</h3>' +
-              '<p class="guide-panel__text">Opprettet ' + escapeHtml((project.createdAt || '').slice(0, 10)) + '. ' + reportFilled + ' av ' + reportTotal + ' rapporter generert.</p>' +
-              '<p class="guide-panel__text" style="margin-top: var(--space-2);">Target: <code>' + escapeHtml(project.target_path || '—') + '</code> (<em>' + escapeHtml(project.target_type || 'codebase') + '</em>)</p>' +
-              (scenarioChipsList ? '<p class="guide-panel__text" style="margin-top: var(--space-2);"><strong>Scenarioer:</strong></p><ul style="margin: 0; padding-left: var(--space-4); color: var(--color-text-secondary);">' + scenarioChipsList + '</ul>' : '') +
-              '<p class="guide-panel__text" style="margin-top: var(--space-3);"><em>Fase 2-3: aggregert verdict-pille, top-funn på tvers av rapporter, og recommended-next-actions vises her.</em></p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const rapporterHtml = '<div class="tab-panel" data-screen-id="rapporter"' + (currentProjectScreen === 'rapporter' ? '' : ' hidden') + '>' + tabsHtml + panelsHtml + '</div>';
-
-      const kontekstHtml = (
-        '<div class="tab-panel" data-screen-id="kontekst"' + (currentProjectScreen === 'kontekst' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Kontekst</h3>' +
-              '<p class="guide-panel__text">Fellesfeltene fra onboarding gjenbrukes automatisk i alle command-skjemaer. Bruk <button type="button" class="btn btn--ghost btn--sm" data-action="goto-onboarding" style="display:inline;">Re-onboard</button> for å oppdatere.</p>' +
-              '<p class="guide-panel__text" style="margin-top: var(--space-2);"><em>Fase 2-3: snapshot av de 5 fellesgruppene og hvilke felt som prefilles per kommando vises her.</em></p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const eksportHtml = (
-        '<div class="tab-panel" data-screen-id="eksport"' + (currentProjectScreen === 'eksport' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Eksport</h3>' +
-              '<p class="guide-panel__text">Bruk <strong>Eksporter</strong> i toppmenyen for hele state. Per-prosjekt PDF/Markdown-eksport kommer i Fase 3.</p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
       const projectShell = renderPageShell({
         eyebrow: 'PROSJEKT · ' + escapeHtml((project.target_type || 'codebase').toUpperCase()),
         title: project.name,
@@ -7146,7 +7207,7 @@
           { label: 'TARGET', value: (project.target_type || 'codebase') }
         ]
       },
-        '<div class="stack-lg">' + actionBar + screenTabsHtml + oversiktHtml + rapporterHtml + kontekstHtml + eksportHtml + '</div>'
+        '<div class="stack-lg">' + actionBar + tabsHtml + panelsHtml + '</div>'
       );
 
       root.innerHTML = renderTopbar('Prosjekt: ' + escapeHtml(project.name)) +
@@ -7227,7 +7288,7 @@
     }
 
     /**
-     * Render page-shell — DS Tier 3 page__header-klyngen brukt på alle 4 overflater:
+     * Render the page-shell — the DS Tier 3 page__header cluster used on all 4 surfaces:
      *   - onboarding: page__eyebrow="ONBOARDING · n av 5 grupper komplette"
      *   - home: page__eyebrow="HJEM" (m/ hero-modifier for editorial type-hierarki)
      *   - catalog: page__eyebrow="KATALOG"
@@ -7350,16 +7411,16 @@
         const crit = fs.filter(function (f) { return /crit|kritisk/i.test(f.severity || ''); }).length;
         const high = fs.filter(function (f) { return /^high|^høy/i.test(f.severity || ''); }).length;
         return [
-          { label: 'TOTALT', value: fs.length },
-          { label: 'KRITISK', value: crit, modifier: crit > 0 ? 'critical' : null },
-          { label: 'HØY', value: high, modifier: high > 0 ? 'high' : null }
+          { label: 'TOTAL', value: fs.length },
+          { label: 'CRITICAL', value: crit, modifier: crit > 0 ? 'critical' : null },
+          { label: 'HIGH', value: high, modifier: high > 0 ? 'high' : null }
         ];
       },
       'findings-grade': function (d) {
         const out = [];
         if (d.grade) out.push({ label: 'GRADE', value: String(d.grade).toUpperCase(), modifier: /a|b/i.test(d.grade) ? 'low' : (/c|d/i.test(d.grade) ? 'medium' : 'critical') });
         if (d.score != null) out.push({ label: 'SCORE', value: d.score });
-        if (d.findings) out.push({ label: 'FUNN', value: d.findings.length });
+        if (d.findings) out.push({ label: 'FINDINGS', value: d.findings.length });
         return out;
       },
       'risk-score-meter': function (d) {
@@ -7373,16 +7434,16 @@
       },
       'red-team-results': function (d) {
         return [
-          { label: 'TOTALT', value: d.total || 0 },
+          { label: 'TOTAL', value: d.total || 0 },
           { label: 'PASS', value: d.pass_count || 0, modifier: 'low' },
           { label: 'FAIL', value: d.fail_count || 0, modifier: (d.fail_count > 0 ? 'critical' : null) }
         ];
       },
       'dashboard-fleet': function (d) {
         return [
-          { label: 'PROSJEKTER', value: (d.projects || []).length },
-          { label: 'MASKINKLASSE', value: String(d.machine_grade || 'n/a').toUpperCase() },
-          { label: 'SVAKEST', value: d.weakest_link || '–' }
+          { label: 'PROJECTS', value: (d.projects || []).length },
+          { label: 'MACHINE GRADE', value: String(d.machine_grade || 'n/a').toUpperCase() },
+          { label: 'WEAKEST', value: d.weakest_link || '–' }
         ];
       },
       'posture-cards': function (d) {
@@ -7399,8 +7460,8 @@
         const newCount = (d['new'] || []).length;
         const unchangedCount = (d.unchanged || []).length;
         return [
-          { label: 'NÅ-GRADE', value: String(d.current_grade || '?').toUpperCase() },
-          { label: 'AKSJONER', value: newCount, modifier: newCount > 0 ? 'medium' : 'low' },
+          { label: 'CURRENT GRADE', value: String(d.current_grade || '?').toUpperCase() },
+          { label: 'ACTIONS', value: newCount, modifier: newCount > 0 ? 'medium' : 'low' },
           { label: 'SKIPPED', value: unchangedCount }
         ];
       },
@@ -7420,9 +7481,9 @@
         const maxScore = cells.length ? Math.max.apply(null, cells.map(function (c) { return Number(c.score) || 0; })) : 0;
         const sev = maxScore >= 16 ? 'critical' : maxScore >= 9 ? 'high' : maxScore >= 4 ? 'medium' : 'low';
         return [
-          { label: 'TRUSLER', value: threats.length },
-          { label: 'MAKS SCORE', value: maxScore || '–', modifier: sev },
-          { label: 'CELLER', value: cells.length }
+          { label: 'THREATS', value: threats.length },
+          { label: 'MAX SCORE', value: maxScore || '–', modifier: sev },
+          { label: 'CELLS', value: cells.length }
         ];
       }
     };
@@ -7479,7 +7540,7 @@
 
     // ============================================================
     // PARSER HELPERS (markdown → struktur)
-    // Fase 2: kopiert mønster fra ms-ai-architect-playground.html linjer 2469-2545.
+    // Phase 2: pattern copied from ms-ai-architect-playground.html lines 2469-2545.
     // ============================================================
     function parseTableRow(line) {
       const inner = line.replace(/^\|/, '').replace(/\|$/, '');
@@ -7628,7 +7689,7 @@
       return m ? m[1] : null;
     }
 
-    // Hjelper: parse Risk Dashboard-tabellen (fellesmønster)
+    // Helper: parse the Risk Dashboard table (shared pattern)
     function parseRiskDashboard(md) {
       const out = {};
       const score = extractField(md, 'Risk Score');
@@ -7679,7 +7740,7 @@
       });
       if (!findingsSection) return findings;
       const body = findingsSection.body;
-      // Splitt på ### -headere
+      // Split on ### headers
       const subRe = /^###\s+(.+)$/gm;
       const matches = [];
       let m;
@@ -7735,7 +7796,7 @@
     }
 
     // ============================================================
-    // 10 PARSERS — én per høy-prio kommando.
+    // 10 PARSERS — one per high-priority command.
     // Returner { ok: true, data: { ...domain-specific } } eller
     //          { ok: false, errors: [{ section, reason }] }
     // ============================================================
@@ -8238,7 +8299,7 @@
           });
         }
       }
-      // Weakest link = første prosjekt sortert worst-first (allerede sortert i fixture)
+      // Weakest link = first project, sorted worst-first (already sorted in the fixture)
       const weakest = projects.length ? projects[0].name : '';
       return { ok: true, data: Object.assign({}, dash, {
         machine_grade: machine_grade,
@@ -8386,8 +8447,8 @@
     });
 
     // ============================================================
-    // FASE 3: 8 PARSERS — én per gjenstående produces_report-kommando.
-    // Mønstre gjenbrukes fra Fase 2 (parseRiskDashboard + parseFindingsTables
+    // PHASE 3: 8 PARSERS — one per remaining produces_report command.
+    // Patterns are reused from Phase 2 (parseRiskDashboard + parseFindingsTables
     // + safeOk). Matrix-risk-parsing er kopiert fra ms-ai-architect.
     // ============================================================
 
@@ -8772,7 +8833,7 @@
 
     // ============================================================
     // PARSERS + RENDERERS — routing-objekter
-    // Fase 2 hadde 10 høy-prio parsere/renderere.
+    // Phase 2 had 10 high-priority parsers/renderers.
     // Fase 3 utvider med 8 til (mcp-inspect, supply-check, pre-deploy,
     // diff, watch, registry, clean, threat-model). Total 18 = alle
     // produces_report=true-kommandoer i CATALOG.
@@ -8809,7 +8870,7 @@
       return '<div class="guide-panel guide-panel--info">' +
         '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
         '<div class="guide-panel__body">' +
-          '<p class="guide-panel__text">' + escapeHtml(message || 'Ingen data å vise.') + '</p>' +
+          '<p class="guide-panel__text">' + escapeHtml(message || 'No data to display.') + '</p>' +
         '</div>' +
       '</div>';
     }
@@ -8822,7 +8883,7 @@
       });
       const items = sorted.map(function (f) {
         const sev = String(f.severity || 'info').toLowerCase();
-        // DS Tier 3 (v7.6.0 fase 5h): card--severity-{level} modifier på outer
+        // DS Tier 3 (v7.6.0 phase 5h): card--severity-{level} modifier on the outer
         // .findings__item gir severity-tinted left-border. Beholdes ved siden av
         // den eksisterende .findings__item-severity-dot for ARIA + visuell
         // redundans (border-farge + dot-fyll signaliserer samme severity).
@@ -8844,8 +8905,8 @@
         );
       }).join('');
       // DS .findings outer-class er et 2-kolonners grid (360px list + 1fr detail-panel) —
-      // playgroundet bruker bare list-delen, så vi wrapper i .findings__list (uten outer
-      // .findings) for å unngå at headeren ender i venstre 360px-kolonne. v7.6.1 fix.
+      // the playground uses only the list part, so we wrap in .findings__list (no outer
+      // .findings) to avoid the header landing in the left 360px column. v7.6.1 fix.
       return (
         '<section class="report-meta">' +
           '<h4>' + escapeHtml(label || 'Funn') + '</h4>' +
@@ -8879,7 +8940,7 @@
 
     /**
      * Map severity-string til DS-tier3 recommendation-card data-severity.
-     * Aksepterer både severity-konvensjoner (critical/high/medium/low/info)
+     * Accepts both severity conventions (critical/high/medium/low/info)
      * og action-types (CREATE/APPEND/MERGE/SKIP/NONE).
      */
     function mapSeverityToCardLevel(input) {
@@ -8948,9 +9009,9 @@
     function renderRadarSvg(axes) {
       // axes: [{ name, score (0-5) }]
       if (!axes || axes.length < 3) return '';
-      // v7.6.1 fix: øk SVG-bredden fra 280 til 380 og r fra 105 til 125 for å gi
-      // labels mer plass. Bruk text-anchor basert på horisontal-posisjon for å
-      // unngå at bottom-labels overlapper hverandre ved 6+ akser.
+      // v7.6.1 fix: widen the SVG from 280 to 380 and r from 105 to 125 to give
+      // labels more room. Use text-anchor based on horizontal position to keep
+      // bottom labels from overlapping each other at 6+ axes.
       const size = 380, cx = size / 2, cy = size / 2, r = 125;
       const n = axes.length;
       const axisRows = axes.map(function (a) {
@@ -8961,7 +9022,7 @@
         const ang = angle(i);
         const lx = cx + Math.cos(ang) * (r + 28);
         const ly = cy + Math.sin(ang) * (r + 28);
-        // Velg text-anchor basert på posisjon: ankerene til venstre/høyre snur.
+        // Pick text-anchor based on position: left/right anchors flip.
         const dx = Math.cos(ang);
         const anchor = Math.abs(dx) < 0.2 ? 'middle' : (dx > 0 ? 'start' : 'end');
         return '<text class="radar__label" x="' + lx.toFixed(1) + '" y="' + ly.toFixed(1) + '" text-anchor="' + anchor + '" dominant-baseline="middle">' + escapeHtml(a.name) + '</text>';
@@ -8999,7 +9060,7 @@
 
     /**
      * Render tfa-flow + tfa-leg + tfa-arrow for et lethal trifecta-funn.
-     * Brukes på scan + deep-scan-rapporter når findings inneholder
+     * Used on scan + deep-scan reports when findings contain
      * en trifecta-pattern (f.eks. SCN-002 "Lethal trifecta: [Bash, Read, WebFetch]").
      * Synthesiserer 3-leddet kjede: untrusted-input → sensitive-access → exfil-sink.
      */
@@ -9030,7 +9091,7 @@
       }
       const legs = [
         { label: 'Untrusted input', name: tools[0], source: fileLine, mit: 'unmitigated', mitText: 'Ingen pre-prompt-inject-scan eller post-mcp-verify guard' },
-        { label: 'Sensitive access', name: tools[1], source: '.env / credentials / git-history', mit: 'unmitigated', mitText: 'Ingen pre-write-pathguard på sti' },
+        { label: 'Sensitive access', name: tools[1], source: '.env / credentials / git-history', mit: 'unmitigated', mitText: 'No pre-write-pathguard on path' },
         { label: 'Exfil sink', name: tools[2], source: 'curl / fetch til ekstern host', mit: 'unmitigated', mitText: 'Ingen post-session-guard trifecta-deteksjon' }
       ];
       const legHtml = function (leg) {
@@ -9069,13 +9130,13 @@
         ? Number(postureApplicable)
         : categories.filter(function (c) { return c.status !== 'N-A' && c.status !== 'N/A'; }).length;
       const pct = total > 0 ? Math.round((passCount / total) * 100) : 0;
-      // 5 modenhetstrinn — terskler basert på % PASS
+      // 5 maturity steps — thresholds based on % PASS
       const steps = [
-        { num: 1, name: 'Initial', threshold: 0,  desc: 'Bare bones — ingen hooks eller minimal posture.' },
-        { num: 2, name: 'Aware', threshold: 25, desc: 'Posture-skanning aktiv, kjenner risikoene.' },
-        { num: 3, name: 'Defensive', threshold: 50, desc: 'Hooks engasjert på kritiske flater (PreToolUse, UserPromptSubmit).' },
-        { num: 4, name: 'Mature', threshold: 75, desc: 'De fleste 16 kategoriene dekket; trifecta-deteksjon på.' },
-        { num: 5, name: 'Optimized', threshold: 95, desc: 'Full coverage; A-grade på posture; aktiv overvåking.' }
+        { num: 1, name: 'Initial', threshold: 0,  desc: 'Bare bones — no hooks or minimal posture.' },
+        { num: 2, name: 'Aware', threshold: 25, desc: 'Posture scanning is active and the risks are known.' },
+        { num: 3, name: 'Defensive', threshold: 50, desc: 'Hooks engaged on critical surfaces (PreToolUse, UserPromptSubmit).' },
+        { num: 4, name: 'Mature', threshold: 75, desc: 'Most of the 16 categories covered; trifecta detection on.' },
+        { num: 5, name: 'Optimized', threshold: 95, desc: 'Full coverage; A-grade on posture; active monitoring.' }
       ];
       const currentIdx = steps.reduce(function (acc, s, i) {
         return pct >= s.threshold ? i : acc;
@@ -9085,7 +9146,7 @@
         const icon = state === 'completed' ? '✓' : String(s.num);
         const pillCls = state === 'current' ? ' mat-step__pill mat-step__pill--current' :
                         state === 'completed' ? ' mat-step__pill mat-step__pill--complete' : '';
-        const pillText = state === 'current' ? 'Du er her' : state === 'completed' ? 'Oppnådd' : '';
+        const pillText = state === 'current' ? 'You are here' : state === 'completed' ? 'Reached' : '';
         const pill = pillText ? '<span class="' + pillCls.trim() + '">' + escapeHtml(pillText) + '</span>' : '';
         const progress = state === 'current' ? (
           '<div class="mat-step__progress">' +
@@ -9107,7 +9168,7 @@
       return (
         '<section class="report-meta">' +
           '<h4>Modenhetsstige — posture-progresjon</h4>' +
-          '<p style="font-size: var(--font-size-sm); opacity: 0.78; margin: 0 0 var(--space-3);">Posture-score på ' + passCount + ' av ' + total + ' kategorier (' + pct + '%) plasserer dette prosjektet på trinn ' + (currentIdx + 1) + ' av 5.</p>' +
+          '<p style="font-size: var(--font-size-sm); opacity: 0.78; margin: 0 0 var(--space-3);">A posture score of ' + passCount + ' of ' + total + ' categories (' + pct + '%) places this project at step ' + (currentIdx + 1) + ' of 5.</p>' +
           '<div class="mat-ladder" role="list" aria-label="Posture-modenhet over 5 trinn">' + stepHtml + '</div>' +
         '</section>'
       );
@@ -9168,7 +9229,7 @@
       return (
         '<section class="report-meta">' +
           '<h4>Narrative audit — supprimerte signaler</h4>' +
-          '<p class="suppressed-group__desc">' + totalCount + ' signaler ble supprimert pre-rapport (v7.1.1 narrative_audit). Disse er ikke false-positives walked-back i prosa, men auto-suppress før klassifisering.</p>' +
+          '<p class="suppressed-group__desc">' + totalCount + ' signals were suppressed pre-report (v7.1.1 narrative_audit). These are not false-positives walked back in prose — they were auto-suppressed before classification.</p>' +
           groupsHtml +
         '</section>'
       );
@@ -9176,7 +9237,7 @@
 
     /**
      * Render codepoint-reveal + cp-tag for Unicode-steganografi (UNI-funn).
-     * Brukes på mcp-inspect-rapporter — bytter plain table mot side-by-side
+     * Used on mcp-inspect reports — swaps a plain table for a side-by-side
      * "synlig vs. decoded codepoint"-visning per tool.
      */
     function renderCodepointReveal(codepoints) {
@@ -9194,7 +9255,7 @@
         const sev = /high/i.test(risk) ? 'critical' : /medium/i.test(risk) ? 'medium' : 'low';
         const isClean = /clean|—|^-$/i.test(c.codepoints || '') || risk === '—' || risk === '-';
         const cps = String(c.codepoints || '');
-        // Highlight U+XXXX-mønstre
+        // Highlight U+XXXX patterns
         const highlighted = cps.replace(/U\+[0-9A-Fa-f]{4,6}/g, function (m) {
           return '<span class="' + tagFor(m) + '">' + m + '</span>';
         });
@@ -9237,7 +9298,7 @@
 
     /**
      * Render top-risks + top-risk for rangert top-funn-listing.
-     * Tar de N (default 5) høyeste alvorlighetsnivåene fra findings og
+     * Takes the N (default 5) highest-severity findings and
      * viser dem som ordnet liste. Bruker `.top-risks` / `.top-risk` med
      * `data-severity` for severity-tinted left-border per DS Tier 3-supplement.
      * Returnerer tom streng hvis ingen findings (eller kun info-funn).
@@ -9284,7 +9345,7 @@
     }
 
     // ============================================================
-    // 10 RENDERERS — én per høy-prio kommando.
+    // 10 RENDERERS — one per high-priority command.
     // ============================================================
 
     function renderScan(data, slot) {
@@ -9386,7 +9447,7 @@
       ) : '';
       const permHtml = (data.permissions && data.permissions.length) ? (
         '<section class="report-meta"><h4>Permission-matrise</h4>' +
-          '<table class="report-table"><thead><tr><th>Verktøy</th><th>Krevet av</th><th>Begrunnet</th></tr></thead><tbody>' +
+          '<table class="report-table"><thead><tr><th>Tool</th><th>Required by</th><th>Justified</th></tr></thead><tbody>' +
           data.permissions.map(function (p) {
             const isYes = /^yes|^ja/i.test(p.justified);
             const isNo = /^no$|^nei/i.test(p.justified);
@@ -9416,7 +9477,7 @@
       slot.innerHTML = renderPageShell({
         eyebrow: 'PLUGIN-AUDIT',
         title: data.title || 'Plugin trust-vurdering',
-        lede: data.lede || 'Trust-verdikt basert på maintainer, lisens, permissions og MCP-deskripsjoner.',
+        lede: data.lede || 'Trust verdict based on maintainer, license, permissions, and MCP descriptions.',
         verdict: data.verdict || inferVerdict(data, 'risk-score-meter'),
         keyStats: data.keyStats || inferKeyStats(data, 'risk-score-meter')
       }, body);
@@ -9481,7 +9542,7 @@
       slot.innerHTML = renderPageShell({
         eyebrow: 'MCP-AUDIT',
         title: data.title || 'MCP-konfig audit',
-        lede: data.lede || 'Permissions, trust og deskripsjon-drift på tvers av installerte MCP-servere.',
+        lede: data.lede || 'Permissions, trust, and description drift across installed MCP servers.',
         verdict: data.verdict || inferVerdict(data, 'findings'),
         keyStats: data.keyStats || inferKeyStats(data, 'findings')
       }, body);
@@ -9588,7 +9649,7 @@
           '<ol class="recommendation-card__body">' + items.map(function (a) { return '<li>' + escapeHtml(a) + '</li>'; }).join('') + '</ol>' +
         '</section>';
       };
-      const actionHtml = tierHtml('immediate', 'Umiddelbar', 'critical') + tierHtml('high', 'Høy prioritet', 'high') + tierHtml('medium', 'Medium prioritet', 'medium');
+      const actionHtml = tierHtml('immediate', 'Immediate', 'critical') + tierHtml('high', 'High priority', 'high') + tierHtml('medium', 'Medium priority', 'medium');
       const meterHtml = (data.risk_score != null) ? renderRiskMeter(data.risk_score, data.riskBand) : '';
       const topRisksHtml = renderTopRisks(data.findings || [], 5);
       const findingsHtml = renderFindingsBlock(data.findings || [], 'Funn');
@@ -9700,12 +9761,12 @@
       slot.innerHTML = renderPageShell({
         eyebrow: 'HARDEN',
         title: data.title || 'Grade A reference config',
-        lede: data.lede || 'Diff-forhåndsvisning av settings.json, CLAUDE.md og .gitignore-endringer.',
+        lede: data.lede || 'Diff preview of settings.json, CLAUDE.md, and .gitignore changes.',
         verdict: data.verdict || inferVerdict(data, 'diff-report'),
         keyStats: data.keyStats || [
-          { label: 'NÅ-GRADE', value: String(data.current_grade || '?') },
-          { label: 'AKSJONER', value: data.actionable + '/' + data.total },
-          { label: 'MODUS', value: data.mode || 'dry-run' }
+          { label: 'CURRENT GRADE', value: String(data.current_grade || '?') },
+          { label: 'ACTIONS', value: data.actionable + '/' + data.total },
+          { label: 'MODE', value: data.mode || 'dry-run' }
         ]
       }, body);
     }
@@ -9760,7 +9821,7 @@
     RENDERERS.renderRedTeam = renderRedTeam;
 
     // ============================================================
-    // FASE 3: 8 RENDERERS — én per gjenstående kommando.
+    // PHASE 3: 8 RENDERERS — one per remaining command.
     // ============================================================
 
     function renderMcpInspect(data, slot) {
@@ -9799,7 +9860,7 @@
     RENDERERS.renderMcpInspect = renderMcpInspect;
 
     function renderSupplyCheck(data, slot) {
-      // Ecosystem-cards (small-multiples-mønster)
+      // Ecosystem cards (small-multiples pattern)
       const ecos = (data.ecosystems || []).filter(function (e) { return Number(e.packages) > 0 || Number(e.osv_hits) > 0 || Number(e.typosquats) > 0; });
       const ecoCards = ecos.length ? '<div class="small-multiples">' + ecos.map(function (e) {
         const issues = (Number(e.osv_hits) || 0) + (Number(e.typosquats) || 0);
@@ -9837,7 +9898,7 @@
         if (u === 'FAIL' || u === 'BLOCK' || u === 'NO-GO') return 'critical';
         return 'info';
       };
-      // v7.6.1 fix: sm-card__grade er fast 28×28 px (designet for én A-F-bokstav), så
+      // v7.6.1 fix: sm-card__grade is fixed at 28×28 px (designed for one A-F letter), so
       // "PASS"/"PASS-WITH-NOTES"/"FAIL" ble kuttet til "AS"/"PASS-WITH-..."/"FA". Bytt
       // til en bredde-tilpasset status-pill via inline styling (ingen DS-klasse-endring).
       const cards = lights.map(function (l) {
@@ -9862,7 +9923,7 @@
       const lightsHtml = cards ? '<section class="report-meta"><h4>Traffic-light kategorier</h4><div class="small-multiples">' + cards + '</div></section>' : '';
       const condHtml = (data.conditions && data.conditions.length) ? (
         '<section class="recommendation-card" data-severity="high">' +
-          '<span class="recommendation-card__label">Vilkår å løse</span>' +
+          '<span class="recommendation-card__label">Conditions to resolve</span>' +
           '<ol class="recommendation-card__body">' + data.conditions.map(function (c) { return '<li>' + escapeHtml(c) + '</li>'; }).join('') + '</ol>' +
         '</section>'
       ) : '';
@@ -9905,7 +9966,7 @@
             '</div>' +
             '<div class="pair-before-after__arrow" aria-hidden="true"></div>' +
             '<div class="pair-before-after__cell">' +
-              '<span class="pair-before-after__cell-label">NÅ</span>' +
+              '<span class="pair-before-after__cell-label">NOW</span>' +
               '<span class="pair-before-after__cell-value">' + gradeBadge(data.current_grade) + '</span>' +
             '</div>' +
           '</div>' +
@@ -9938,7 +9999,7 @@
                '</section>';
       };
       const newHtml = sectionFor('Nye funn', newItems, 'new');
-      const resHtml = sectionFor('Løste funn', resolvedItems, 'resolved');
+      const resHtml = sectionFor('Resolved findings', resolvedItems, 'resolved');
       const unchHtml = sectionFor('Uendret', unchangedItems, 'unchanged');
       const movHtml = (movedItems.length) ? sectionFor('Flyttet', movedItems.map(function (m) {
         return { id: m.id, severity: 'info', description: m.from + ' → ' + m.to };
@@ -9948,7 +10009,7 @@
       slot.innerHTML = renderPageShell({
         eyebrow: 'DIFF',
         title: data.title || 'Scan diff mot baseline',
-        lede: data.lede || 'Sammenligner nåværende scan mot lagret baseline.',
+        lede: data.lede || 'Compares the current scan against the stored baseline.',
         verdict: data.verdict || inferVerdict(data, 'diff-report'),
         keyStats: data.keyStats || inferKeyStats(data, 'diff-report')
       }, body);
@@ -9994,7 +10055,7 @@
       slot.innerHTML = renderPageShell({
         eyebrow: 'WATCH',
         title: data.title || 'Continuous monitoring',
-        lede: data.lede || 'Kjører diff på rekursivt intervall via /loop. Notify ved nye funn.',
+        lede: data.lede || 'Runs diff on a recurring interval via /loop. Notifies on new findings.',
         verdict: data.verdict || inferVerdict(data, 'findings'),
         keyStats: data.keyStats || inferKeyStats(data, 'findings')
       }, body);
@@ -10026,7 +10087,7 @@
       }).join('');
       const sigHtml = sigRows ? (
         '<section class="report-meta"><h4>Signaturer</h4>' +
-          '<table class="report-table"><thead><tr><th>Skill</th><th>Kilde</th><th>Fingerprint</th><th>Status</th><th>Første sett</th></tr></thead><tbody>' + sigRows + '</tbody></table>' +
+          '<table class="report-table"><thead><tr><th>Skill</th><th>Source</th><th>Fingerprint</th><th>Status</th><th>First seen</th></tr></thead><tbody>' + sigRows + '</tbody></table>' +
         '</section>'
       ) : '';
       const fs = (data.findings || []).map(function (f) {
@@ -10071,11 +10132,11 @@
         cardFor('suppressed', 'Undertrykt', 'info') +
       '</div>';
       // Advisory recommendation-cards per bucket — DS Tier 3 data-severity (v7.6.0 fase 5f).
-      // Hver bucket med items > 0 får én recommendation-card med severity-tinted border + label.
+      // Every bucket with items > 0 gets one recommendation-card with a severity-tinted border + label.
       const bucketAdvisoryDefs = [
         { key: 'auto', label: 'Auto-fixable', sev: 'positive', desc: 'Plugin kan fikse disse uten ekstra bekreftelse — deterministiske, lavrisiko-handlinger.' },
-        { key: 'semi-auto', label: 'Semi-auto — krever bekreftelse', sev: 'medium', desc: 'Foreslåtte tiltak vises som diff. Bruker bekrefter per finding før endring anvendes.' },
-        { key: 'manual', label: 'Manual remediation', sev: 'high', desc: 'Krever menneskelig vurdering — kontekst, scope eller side-effekter er ikke deterministisk avgjørbare.' },
+        { key: 'semi-auto', label: 'Semi-auto — requires confirmation', sev: 'medium', desc: 'Proposed changes are shown as a diff. The user confirms per finding before the change is applied.' },
+        { key: 'manual', label: 'Manual remediation', sev: 'high', desc: 'Requires human judgement — context, scope, or side-effects are not deterministically decidable.' },
         { key: 'suppressed', label: 'Undertrykt', sev: 'low', desc: 'Allowlist-treff via .llm-security-ignore — ingen handling.' }
       ];
       const advisoryHtml = bucketAdvisoryDefs.map(function (b) {
@@ -10094,14 +10155,14 @@
       const intro = data.mode ? (
         '<section class="recommendation-card" data-severity="' + (isDry ? 'low' : 'medium') + '">' +
           '<span class="recommendation-card__label">Modus · ' + escapeHtml(data.mode) + '</span>' +
-          '<p class="recommendation-card__body">' + (isDry ? 'Dry-run: ingen filer endres. Forhåndsvis tiltak før <code>--apply</code>.' : 'Fixes anvendes med automatisk backup i <code>.llm-security-backup/</code>.') + '</p>' +
+          '<p class="recommendation-card__body">' + (isDry ? 'Dry-run: no files are modified. Preview the actions before <code>--apply</code>.' : 'Fixes are applied with an automatic backup in <code>.llm-security-backup/</code>.') + '</p>' +
         '</section>'
       ) : '';
       const body = intro + advisoryHtml + kanbanHtml + findingsHtml + recHtml;
       slot.innerHTML = renderPageShell({
         eyebrow: 'CLEAN',
         title: data.title || 'Remediation-kanban',
-        lede: data.lede || 'Funn fordelt på Auto / Semi-auto / Manual / Undertrykt.',
+        lede: data.lede || 'Findings split across Auto / Semi-auto / Manual / Suppressed.',
         verdict: data.verdict || inferVerdict(data, 'kanban-buckets'),
         keyStats: data.keyStats || inferKeyStats(data, 'kanban-buckets')
       }, body);
@@ -10126,7 +10187,7 @@
         for (let prob = 1; prob <= probSize; prob++) {
           const score = prob * cons;
           const items = byPC[prob + '_' + cons] || [];
-          // v7.6.1 fix: bobler er nå <button> så de er klikkbare og fokuserbare.
+          // v7.6.1 fix: bubbles are now <button> so they are clickable and focusable.
           // data-threat-id lar event-handler senere mappe til detalj-modal.
           const bubblesHtml = items.length
             ? '<div class="matrix__cell-bubbles">' +
@@ -10209,25 +10270,25 @@
       if (!project) return { ok: false, error: 'Mistet aktivt prosjekt' };
       const cmd = (CATALOG.commands || []).find(function (c) { return c.id === commandId; });
       if (!cmd) return { ok: false, error: 'Ukjent command: ' + commandId };
-      if (!cmd.produces_report) return { ok: false, error: 'Verktøy-kommandoer produserer ikke rapport' };
+      if (!cmd.produces_report) return { ok: false, error: 'Tool commands do not produce a report' };
 
       const parser = PARSERS[commandId];
       if (typeof parser !== 'function') {
-        // Fase 1: parsers ikke implementert ennå. Vis placeholder.
+        // Phase 1: parsers not yet implemented. Show placeholder.
         const slot = document.querySelector('[data-report-slot="' + CSS.escape(commandId) + '"]');
         if (slot) {
           slot.innerHTML = (
             '<div class="guide-panel guide-panel--info">' +
               '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
               '<div class="guide-panel__body">' +
-                '<h3 class="guide-panel__title">Parser ikke implementert ennå</h3>' +
+                '<h3 class="guide-panel__title">Parser not implemented yet</h3>' +
                 '<p class="guide-panel__text">Kommandoen <code>' + escapeHtml(commandId) + '</code> har ikke parser/renderer i Fase 1. Implementeres i Fase 2 eller 3 (se ARCHITECTURE.local.md, §4 «Kommando-katalog»).</p>' +
-                '<p class="guide-panel__text" style="margin-top: var(--space-2);">Mottok ' + markdown.length + ' tegn input. Lagret som rå markdown i prosjektets <code>reports.' + escapeHtml(commandId) + '.raw_markdown</code>.</p>' +
+                '<p class="guide-panel__text" style="margin-top: var(--space-2);">Received ' + markdown.length + ' characters of input. Stored as raw markdown in the project at <code>reports.' + escapeHtml(commandId) + '.raw_markdown</code>.</p>' +
               '</div>' +
             '</div>'
           );
         }
-        // Lagre rå markdown (uten parsing) — gir noe state å eksportere
+        // Store the raw markdown (without parsing) — gives some state to export
         if (!project.reports) project.reports = {};
         project.reports[commandId] = {
           input: (project.reports[commandId] && project.reports[commandId].input) || {},
@@ -10238,7 +10299,7 @@
         return { ok: false, deferred: true };
       }
 
-      // Parser finnes — kjør (Fase 2/3)
+      // Parser exists — run it (Phase 2/3)
       const result = parser(markdown);
       if (!result || result.ok === false) {
         const slot = document.querySelector('[data-report-slot="' + CSS.escape(commandId) + '"]');
@@ -10395,7 +10456,7 @@
             '<h2 id="dp-title" class="modal__title">Slett prosjekt?</h2>' +
             '<button type="button" class="modal__close" data-action="close-modal" aria-label="Lukk">×</button>' +
           '</div>' +
-          '<p>Du sletter prosjektet <strong>' + escapeHtml(project.name) + '</strong>. Alle rapporter i prosjektet går tapt. Operasjonen kan ikke angres.</p>' +
+          '<p>You are deleting the project <strong>' + escapeHtml(project.name) + '</strong>. All reports in the project will be lost. The operation cannot be undone.</p>' +
           '<div style="display:flex; gap: var(--space-2);">' +
             '<button type="button" class="btn btn--primary" data-action="dp-confirm" data-project-id="' + escapeAttr(project.id) + '" style="background: var(--color-severity-critical); border-color: var(--color-severity-critical);">Ja, slett</button>' +
             '<button type="button" class="btn btn--ghost" data-action="close-modal">Avbryt</button>' +
@@ -10406,13 +10467,20 @@
 
     function renderCatalogFormModal(cmd) {
       const formHtml = renderCommandForm(cmd.id, { scope: 'cat' });
+      const sharedCount = (cmd.input_fields || []).filter(function (f) { return f.from === 'shared'; }).length;
+      const sharedHint = sharedCount > 0
+        ? '<p class="builder-modal__hint">Fields marked <span class="field-from-tag" style="cursor:default;">shared</span> are prefilled from onboarding (' + sharedCount + ' of ' + (cmd.input_fields || []).length + '). Changes here do not affect onboarding state.</p>'
+        : '<p class="builder-modal__hint">Fyll ut argumenter — pipeline-strengen oppdateres mens du skriver.</p>';
       return (
-        '<div class="modal" role="dialog" aria-labelledby="cf-title">' +
+        '<div class="modal builder-modal" role="dialog" aria-labelledby="cf-title" data-builder-pane>' +
           '<div class="modal__head">' +
-            '<h2 id="cf-title" class="modal__title">' + escapeHtml(cmd.label) + '</h2>' +
+            '<div>' +
+              '<h2 id="cf-title" class="modal__title">' + escapeHtml(cmd.label) + ' <span style="font-family: var(--font-family-mono); font-size: var(--font-size-md); color: var(--color-text-tertiary); font-weight: var(--font-weight-regular);">/security:' + escapeHtml(cmd.id) + '</span></h2>' +
+            '</div>' +
             '<button type="button" class="modal__close" data-action="close-modal" aria-label="Lukk">×</button>' +
           '</div>' +
-          '<p style="color: var(--color-text-secondary); margin: 0;">' + escapeHtml(cmd.description) + '</p>' +
+          '<p class="builder-modal__lede">' + escapeHtml(cmd.description) + '</p>' +
+          sharedHint +
           formHtml +
         '</div>'
       );
@@ -10426,7 +10494,7 @@
         if (!bubble) return;
         const threatId = bubble.getAttribute('data-threat-id');
         if (!threatId) return;
-        // Finn raden i Trusler-tabellen (TM-XXX i første kolonne)
+        // Find the row in the Threats table (TM-XXX in the first column)
         const tables = document.querySelectorAll('table.report-table');
         for (let t = 0; t < tables.length; t++) {
           const rows = tables[t].querySelectorAll('tbody tr');
@@ -10514,22 +10582,37 @@
         }
 
         // Project tabs
-        if (action === 'project-screen') {
-          currentProjectScreen = target.dataset.screen;
-          scheduleRender();
-          return;
-        }
         if (action === 'project-tab') {
           currentProjectTab = target.dataset.tab;
           scheduleRender();
           return;
         }
 
+        // Sub-card toggle (Rapporter-tab) — direct DOM manipulation to preserve form-field state
+        if (action === 'toggle-subcard') {
+          const cmdId = target.dataset.command;
+          const projectId = target.dataset.projectId;
+          const article = target.closest('[data-command-subcard]');
+          const body = article ? article.querySelector('.subcard-body') : null;
+          if (!body) return;
+          const key = projectId + '::' + cmdId;
+          const willExpand = body.hasAttribute('hidden');
+          if (willExpand) {
+            expandedSubcards.add(key);
+            body.removeAttribute('hidden');
+            target.setAttribute('aria-expanded', 'true');
+          } else {
+            expandedSubcards.delete(key);
+            body.setAttribute('hidden', '');
+            target.setAttribute('aria-expanded', 'false');
+          }
+          return;
+        }
+
         // Project lifecycle
         if (action === 'open-project') {
           const pid = target.dataset.projectId;
           store.state.activeProjectId = pid;
-          currentProjectScreen = 'rapporter';
           currentProjectTab = 'discover';
           navigate('project');
           return;
@@ -10558,7 +10641,7 @@
         if (action === 'np-create') {
           const modal = target.closest('.modal');
           const name = modal.querySelector('#np-name').value.trim();
-          if (!name) { alert('Prosjektnavn er påkrevd.'); return; }
+          if (!name) { alert('Project name is required.'); return; }
           const targetType = modal.querySelector('#np-target-type').value;
           const targetPath = modal.querySelector('#np-target-path').value.trim();
           const description = modal.querySelector('#np-description').value.trim();
@@ -10575,7 +10658,6 @@
           };
           store.state.projects.push(project);
           store.state.activeProjectId = project.id;
-          currentProjectScreen = 'rapporter';
           currentProjectTab = 'discover';
           closeModal();
           navigate('project');
@@ -10589,18 +10671,36 @@
         }
 
         // Catalog
-        if (action === 'catalog-toggle-group') {
-          const grp = target.dataset.group;
-          const exp = target.closest('.expansion');
-          if (exp) {
-            const open = exp.getAttribute('aria-expanded') === 'true';
-            exp.setAttribute('aria-expanded', open ? 'false' : 'true');
+        if (action === 'catalog-filter') {
+          const f = target.dataset.filter || 'all';
+          if (catalogFilter === f) return;
+          catalogFilter = f;
+          // Re-render in-place: chips (active state) + list body
+          const root = getSurfaceEl('catalog');
+          if (root) {
+            const chipsEl = root.querySelector('.catalog-filter-chips');
+            if (chipsEl) chipsEl.innerHTML = renderCatalogChipsHtml();
+            const listEl = root.querySelector('[data-catalog-list]');
+            if (listEl) listEl.innerHTML = renderCatalogListBodyHtml();
           }
           return;
         }
         if (action === 'catalog-open-form') {
           const cmd = (CATALOG.commands || []).find(function (c) { return c.id === cmdId; });
-          if (cmd) openModal(renderCatalogFormModal(cmd));
+          if (!cmd) return;
+          openModal(renderCatalogFormModal(cmd));
+          // Initial live-preview: vis pipeline-streng med shared-prefill
+          const formEl = document.querySelector('[data-builder-pane] form.command-form[data-command-form="' + CSS.escape(cmd.id) + '"]');
+          if (formEl) {
+            const data = readCommandFormValues(formEl);
+            const str = buildCommand(cmd.id, data);
+            showCommandPreview(formEl, str);
+            // Auto-focus the first input for keyboard flow
+            const firstInput = formEl.querySelector('input:not([type="hidden"]), select, textarea');
+            if (firstInput) {
+              try { firstInput.focus(); } catch (e) { /* ignore */ }
+            }
+          }
           return;
         }
 
@@ -10612,7 +10712,7 @@
           const cid = formEl.dataset.commandForm;
           const str = buildCommand(cid, data);
           showCommandPreview(formEl, str);
-          // Lagre input på prosjekt-skjemaer (scope=p)
+          // Save input on project forms (scope=p)
           if (formEl.dataset.commandFormScope === 'p') {
             const project = findProject(store.state.activeProjectId);
             if (project) {
@@ -10630,7 +10730,7 @@
           const cid = formEl.dataset.commandForm;
           const str = buildCommand(cid, data);
           copyCommandToClipboard(str).then(function (ok) {
-            flashCopyConfirm(formEl, ok ? 'Kopiert til utklippstavle.' : 'Kopiering feilet — bruk forhåndsvisning.');
+            flashCopyConfirm(formEl, ok ? 'Copied to clipboard.' : 'Copy failed — use preview.');
             showCommandPreview(formEl, str);
           });
           if (formEl.dataset.commandFormScope === 'p') {
@@ -10677,14 +10777,24 @@
         if (ev.key === 'Escape') closeModal();
       });
 
-      // Catalog search
+      // Catalog search + live builder-pane preview
       document.addEventListener('input', function (ev) {
         if (ev.target && ev.target.matches && ev.target.matches('[data-catalog-search]')) {
           catalogSearchQuery = ev.target.value;
-          const groupsEl = document.querySelector('[data-catalog-groups]');
-          if (groupsEl) groupsEl.innerHTML = renderCatalogGroupsHtml();
+          const listEl = document.querySelector('[data-catalog-list]');
+          if (listEl) listEl.innerHTML = renderCatalogListBodyHtml();
           return;
         }
+        // Live preview inside builder-pane (catalog modal)
+        if (ev.target && ev.target.matches && ev.target.matches('[data-builder-pane] [data-cf-field]')) {
+          const formEl = ev.target.closest('form.command-form');
+          if (formEl) {
+            const data = readCommandFormValues(formEl);
+            const str = buildCommand(formEl.dataset.commandForm, data);
+            showCommandPreview(formEl, str);
+          }
+          // Fall through to onboarding handling below in case selector overlaps
+        }
         // Onboarding fields persist on input (debounced via throttledWriter)
         if (ev.target && ev.target.matches && ev.target.matches('[data-onboarding-field]')) {
           const path = ev.target.dataset.cfField;
@@ -10716,6 +10826,15 @@
             scheduleRender();
           }
         }
+        // Builder-pane: select/checkbox change → live preview
+        if (ev.target && ev.target.matches && ev.target.matches('[data-builder-pane] [data-cf-field]')) {
+          const formEl = ev.target.closest('form.command-form');
+          if (formEl) {
+            const data = readCommandFormValues(formEl);
+            const str = buildCommand(formEl.dataset.commandForm, data);
+            showCommandPreview(formEl, str);
+          }
+        }
       });
 
       // Import file picker
@@ -10726,7 +10845,7 @@
           importState(f).catch(function (err) {
             alert('Import feilet: ' + err.message);
           });
-          ev.target.value = ''; // reset input så samme fil kan velges igjen
+          ev.target.value = ''; // reset input so the same file can be picked again
         }
       });
     }
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/CHANGELOG.md b/plugins/llm-security/playground/vendor/playground-design-system/CHANGELOG.md
index 8ae80b3..3d489a7 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/CHANGELOG.md
+++ b/plugins/llm-security/playground/vendor/playground-design-system/CHANGELOG.md
@@ -1,5 +1,88 @@
 # playground-design-system — CHANGELOG
 
+## 0.6.0 — 2026-05-15
+
+### Added — Project-view archetype (Tier 4)
+
+Generic "project as artifact-collection" archetype for plugins where a project owns 0-N read-only report artifacts grouped by category. Default view is an aggregated dashboard; clicking a sidebar item swaps the main panel to the per-artifact render. Edit-mode is paste-import only (no inline editor).
+
+- **New file `components-tier4-project-view.css`** — 11 sections covering:
+  - `.project-view` + `.project-view__layout` (grid: nav 280px + main 1fr, responsive collapse at 1280 / 960px)
+  - `.project-view__header` (CSS Grid with eyebrow/title/lede/verdict/key-stats/actions areas)
+  - `.verdict-pill` (small pill variant — companion to existing `.verdict-pill-lg` in tier2)
+  - `.project-view__nav` + `.project-view__nav-search` (sticky sidebar with search)
+  - `.artifact-list` + `__group` / `__group-label` / `__group-count` / `__group-items` / `__item` / `__item-marker` / `__item-body` / `__item-name` / `__item-meta` (grouped, severity-coded sidebar)
+  - `.artifact-status[data-severity]` (mini-pill: positive | medium | critical)
+  - `.project-view__main` (main column container)
+  - `.project-overview` + `__intro` / `__verdict-grid` / `__verdict-tile[data-severity]` / `__section` / `__top-risks` / `__next-actions` / `__missing-reports` (aggregated dashboard)
+  - `.project-view__artifact` + `__artifact-header` / `__artifact-title` / `__artifact-meta` / `__artifact-actions` / `__artifact-body` (single-rapport viewer wrapper)
+  - `.empty-artifact-prompt` + `__icon` / `__title` / `__text` / `__actions` (empty-state)
+  - `.import-modal` + `__backdrop` / `__panel` / `__head` / `__title` / `__close` / `__form` / `__detect` / `__preview` / `__preview-label` / `__footer` (overlay modal for paste-import)
+
+- **6 new tokens in `tokens.css`:**
+  - `--project-view-nav-width: 280px` — sidebar width at full layout
+  - `--project-view-collapse-bp: 960px` — doc-only token referenced by responsive breakpoints
+  - `--artifact-list-item-pad-y: var(--space-2)` — sidebar row vertical padding
+  - `--artifact-list-item-pad-x: var(--space-3)` — sidebar row horizontal padding
+  - `--artifact-marker-size: 14px` — sidebar status marker diameter
+  - `--artifact-marker-border: 1.5px` — sidebar status marker border thickness
+
+### Påvirkning
+
+Endringen er **additiv**: ny komponent-fil + 6 nye tokens, ingen eksisterende selectors eller verdier endres. Plugin-konsumenter (`ms-ai-architect`, `llm-security`, `okr`, `config-audit`, `voyage`) får silent drift mot ny source-commit, men kan re-sync på eget tempo. Bare `ms-ai-architect` og `llm-security` re-syncer i samme commit som denne DS-bumpen (forberedelse til koordinert v1.15.0 / v7.7.0-release etter ~8 sesjoner med JS-implementasjon).
+
+Førsteadoptere: `ms-ai-architect` v1.15.0 (17 artefakter, 5 kategorier) + `llm-security` v7.7.0 (≥18 artefakter, 6 kategorier). State-driven visibility håndteres i plugin-JS, ikke i denne CSS-en — kun aktiv state rendres per pass.
+
+### Plugins som må laste den nye filen
+
+Etter `<link>` til `components-tier3-supplement.css`, legg til:
+
+```html
+<link rel="stylesheet" href="vendor/playground-design-system/components-tier4-project-view.css">
+```
+
+### For å adoptere v0.6.0
+
+```bash
+node scripts/sync-design-system.mjs <plugin-name>
+# --force hvis drift detected
+```
+
+## 0.5.0 — 2026-05-10
+
+### Added
+- **voyage scope tokens (B-DS-4):** `--color-scope-voyage` (aqua-blue `#1B5FB8`), `--color-scope-voyage-soft` (`#E5EFFA`), `--color-scope-voyage-strong` (`#143E78`) appended to scope-color group in `tokens.css`. Matches the existing `--color-scope-{architect,okr,security,ultraplan,config}` family so voyage-playground can use the canonical badge convention.
+- **`.badge--scope-voyage`** in `base.css`: white-on-aqua-blue badge variant matching the existing scope-badge family.
+
+### Påvirkning
+
+Endringen er **additiv**: legger TIL voyage-scope-tokens og en ny badge-modifier. Ingen eksisterende selectors eller token-verdier endres. Plugin-konsumenter (llm-security, ms-ai-architect, okr, config-audit) får stale vendor-state mot ny source-commit, men det er silent drift — re-sync skjer på eget tempo neste playground-touch. Bare `voyage` re-syncer i denne commit-en.
+
+Førsteadopter: `voyage` v4.3.0 (multi-sesjons-løp 2026-05-10, sesjon 1 = Wave 0+1 Foundation).
+
+## 0.4.0 — 2026-05-08
+
+### Bug fixes
+- **`.kanban-card__name`** (components-tier3-supplement.css): bytt `word-break: break-all` til `word-break: break-word` + `overflow-wrap: anywhere`. `break-all` knekker midt i ord ("Tekn isk dokumen tasjon"); ny verdi respekterer ordskjøt og brytter kun lange tokens (B-DS-1).
+- **`.expansion__title-main`, `.expansion__title-sub`** (components-tier3-supplement.css): legg til `display: block`. Begge er `<span>`-elementer som flyter inline by default, noe som gir "dokumentertKilde: Art. 9" på samme linje. `display: block` sikrer vertikal stacking (B-DS-2).
+- **`.matrix__bubble`** (components.css): legg til `cursor: pointer`, `transition`, `:hover { transform: scale(1.15) }` og `:focus-visible { outline + offset }`. Antar at consumer rendrer bobler som `<button>` for click-handlers — gir visuell + keyboard-fokus-feedback (B-DS-3).
+
+### Påvirkning
+
+Bugfixene er **backward-compatible** — alle eksisterende selectors og verdier som er endret, var bugfixes. Plugin-konsumenter som har lokal-overrides for disse mønstrene bør re-syncer og slette overridene:
+
+- **ms-ai-architect:** re-sync i samme commit, sletter linje 191-193 (matrix-bubble), 208-211 (expansion-title), 213-216 (kanban-card-name) i `playground/ms-ai-architect-playground.html`.
+- **llm-security, voyage, okr, config-audit:** re-sync på eget tempo (ikke breaking — gammel vendored DS fungerer fortsatt med eksisterende lokal-overrides).
+
+### For å adoptere v0.4
+
+```bash
+node scripts/sync-design-system.mjs <plugin-name>
+# --force hvis drift detected
+```
+
+Førsteadopter: `ms-ai-architect` v1.14.0 (planlagt 2026-05-08, multi-sesjons-løp som starter med DS-bump i sesjon 2).
+
 ## 0.3.0 — 2026-05-04
 
 ### Added — Playground/report-page foundation primitives (sections 13-25 in tier3-supplement)
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/MANIFEST.json b/plugins/llm-security/playground/vendor/playground-design-system/MANIFEST.json
index 14b52cc..04f9c87 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/MANIFEST.json
+++ b/plugins/llm-security/playground/vendor/playground-design-system/MANIFEST.json
@@ -2,17 +2,18 @@
   "generated_by": "scripts/sync-design-system.mjs",
   "do_not_edit": true,
   "source": "shared/playground-design-system/",
-  "source_commit": "487f7ae746aeb1c0f19bb0f4b8d0ffcf0a59a677",
-  "sync_date": "2026-05-05T16:33:38.829Z",
-  "file_count": 26,
+  "source_commit": "c1b7bad3899c5cfe9ff90663003609b018aa79a0",
+  "sync_date": "2026-05-15T14:11:15.296Z",
+  "file_count": 27,
   "files": {
-    "CHANGELOG.md": "e293a911701e0ae8e95f8d30e2b583d1c578d0c2af4fd2abfbee3a7d65d5f7ba",
+    "CHANGELOG.md": "b5018b46cd0830334109e915d23b5554c060412c2b7e132f97f2933e5dd5d79c",
     "README.md": "83de0e29b207c979b7b2a3327b7a4ec0c2e1b4d3705ee2677f26c28c3a3ee643",
-    "base.css": "604fe6839e2ed304bc0ba112a4e045f208b4b3f084f449a1abdb94ce0a1e5263",
+    "base.css": "df0db874473412eb771b7355b589f7478042987756898f0921584286bd5ba70a",
     "components-tier2.css": "c2cb7e9d76d6af28d50db654030413777feb2f2f2b93213e598de8b686b14523",
-    "components-tier3-supplement.css": "b78664275948f05b9cb4e577921695bd39d15b34c671809d8c8465cac4e1739b",
+    "components-tier3-supplement.css": "51fab10377d80029d6552613069d46fd14ce66af77fe6705b1c6bdf5c9e6481e",
     "components-tier3.css": "c391ea387298ce864bc35078e7e044b2cdd4187e3130456347d91876599ff4b1",
-    "components.css": "f76b22ba9fd64c2e806b4467536174347105f3e5ccca8a6349a919287d864b86",
+    "components-tier4-project-view.css": "f8f784df70044ecc9bdc862a327b1ee58b201d056581316808a9b60632c5a993",
+    "components.css": "56fa7392b8b20b567a46f72a8fe9e0205d78ce475eae6b22fc3f50b39b235545",
     "fonts.css": "e3c3df581c6e4d66e25c555f125c745f6512a33038401089d2519a94ea63ee3d",
     "fonts/Inter-Bold.woff2": "220976705fbec109f43c5cfdceca639e99ace7e51f3eb67292b105d3575eb39b",
     "fonts/Inter-Medium.woff2": "8458f8afa67b5691c1fcbe51607a2dafb53a9839e48131c608a186b65415d96d",
@@ -31,6 +32,6 @@
     "schemas/finding.schema.json": "0b24797373650582bac232d31a4dd9260593375a0d17259e18f1141a20de8d0c",
     "schemas/okr-set.schema.json": "aa27347fb232a956ec9dcee1775115710e2715a665c8d729ac50b90c6884de26",
     "schemas/ros-threat.schema.json": "e16497c1a6b79d6e78149d6cf1c28ac9df1e93234627a0c546814fb24d6c96d9",
-    "tokens.css": "1499bc2eea0178e35935413c79a10bbee7d49fdfa91bd33eeba3bb9e9acab809"
+    "tokens.css": "63dca13f8341937169fc8e84d3f37ae0c714901fa006c865ea377bd448f87644"
   }
 }
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/base.css b/plugins/llm-security/playground/vendor/playground-design-system/base.css
index abeb790..27f3920 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/base.css
+++ b/plugins/llm-security/playground/vendor/playground-design-system/base.css
@@ -146,6 +146,7 @@ button { font-family: inherit; }
 .badge--scope-security  { background: var(--color-scope-security);  color: #fff; border-color: transparent; }
 .badge--scope-ultraplan { background: var(--color-scope-ultraplan); color: #fff; border-color: transparent; }
 .badge--scope-config    { background: var(--color-scope-config);    color: #fff; border-color: transparent; }
+.badge--scope-voyage    { background: var(--color-scope-voyage);    color: #fff; border-color: transparent; }
 
 /* ---------- Cards / surfaces ---------- */
 .card {
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/components-tier3-supplement.css b/plugins/llm-security/playground/vendor/playground-design-system/components-tier3-supplement.css
index 2ee9560..2de7218 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/components-tier3-supplement.css
+++ b/plugins/llm-security/playground/vendor/playground-design-system/components-tier3-supplement.css
@@ -280,7 +280,7 @@
 .kanban-card[data-verdict="trusted"] { border-left: 4px solid var(--color-state-success); }
 .kanban-card[data-verdict="unknown"] { border-left: 4px solid var(--color-state-warning); }
 
-.kanban-card__name { font-family: var(--font-family-mono); font-size: 13px; color: var(--color-text-primary); word-break: break-all; }
+.kanban-card__name { font-family: var(--font-family-mono); font-size: 13px; color: var(--color-text-primary); word-break: break-word; overflow-wrap: anywhere; }
 .kanban-card__meta { font-size: 11px; color: var(--color-text-tertiary); }
 .kanban-card__reason { font-size: 12px; color: var(--color-text-secondary); }
 
@@ -696,8 +696,8 @@
 .expansion__head:hover { background: var(--color-bg-soft); }
 .expansion__head:focus-visible { outline: none; box-shadow: var(--shadow-focus); }
 .expansion__title { flex: 1; }
-.expansion__title-main { font-size: var(--font-size-md); color: var(--color-text-primary); font-weight: var(--font-weight-medium); }
-.expansion__title-sub  { font-size: var(--font-size-sm); color: var(--color-text-secondary); margin-top: 2px; }
+.expansion__title-main { display: block; font-size: var(--font-size-md); color: var(--color-text-primary); font-weight: var(--font-weight-medium); }
+.expansion__title-sub  { display: block; font-size: var(--font-size-sm); color: var(--color-text-secondary); margin-top: 2px; }
 .expansion__chev {
   color: var(--color-text-tertiary);
   transition: transform var(--duration-normal) var(--ease-default);
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/components-tier4-project-view.css b/plugins/llm-security/playground/vendor/playground-design-system/components-tier4-project-view.css
new file mode 100644
index 0000000..5f97c20
--- /dev/null
+++ b/plugins/llm-security/playground/vendor/playground-design-system/components-tier4-project-view.css
@@ -0,0 +1,666 @@
+/* Code generated by sync-design-system.mjs; DO NOT EDIT. */
+/* =============================================================================
+   Playground Design System — components-tier4-project-view.css
+   v0.6.0 — Tier 4 project-view archetype
+   ============================================================================
+
+   Generic "project as artifact-collection" archetype. Default-view is an
+   aggregated overview dashboard; clicking a sidebar item swaps main to a
+   per-artifact render. Tracks 0-N read-only artifacts; edit-mode is paste-
+   import only (markdown from terminal → parser → store).
+
+   First adopters: ms-ai-architect v1.15.0 (17 artifacts, 5 categories) +
+   llm-security v7.7.0 (≥18 artifacts, 6 categories). Each plugin injects a
+   PROJECT_VIEW_CONFIG object that maps commands → renderers, categories,
+   verdict-aggregators, missing-report heuristics.
+
+   The CSS in this file is plugin-agnostic. Plugin-specific shape (category
+   names, artifact ordering, custom severity-mappings) lives in JS config.
+
+   State-driven visibility is NOT handled here — production playgrounds emit
+   only the active state (overview | artifact | empty | import) per render
+   pass. The mockup uses body[data-state="..."] for prototyping; production
+   renders one branch at a time.
+   ============================================================================= */
+
+
+/* === 1. Project-view top-level layout ===================================== */
+
+.project-view {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-view__layout {
+  display: grid;
+  grid-template-columns: var(--project-view-nav-width) 1fr;
+  gap: var(--space-6);
+  align-items: start;
+}
+
+@media (max-width: 1279px) {
+  .project-view__layout { grid-template-columns: 240px 1fr; }
+}
+
+@media (max-width: 959px) {
+  .project-view__layout { grid-template-columns: 1fr; }
+}
+
+
+/* === 2. Project-view header =============================================== */
+
+.project-view__header {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5) var(--space-6);
+  display: grid;
+  grid-template-columns: 1fr auto;
+  grid-template-areas:
+    "title    verdict"
+    "title    keystats"
+    "actions  actions";
+  gap: var(--space-4) var(--space-6);
+  align-items: start;
+}
+
+.project-view__title-block { grid-area: title; }
+.project-view__verdict     { grid-area: verdict; justify-self: end; }
+.project-view__key-stats   { grid-area: keystats; justify-self: end; }
+.project-view__actions     { grid-area: actions; display: flex; gap: var(--space-2); justify-content: flex-end; }
+
+.project-view__eyebrow {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__title {
+  font-size: var(--font-size-2xl);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-primary);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__lede {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 60ch;
+}
+
+.project-view__key-stats {
+  display: flex;
+  gap: var(--space-5);
+}
+
+.project-view__key-stat-label {
+  font-size: 10px;
+  text-transform: uppercase;
+  color: var(--color-text-tertiary);
+  letter-spacing: 0.06em;
+}
+
+.project-view__key-stat-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+  font-variant-numeric: tabular-nums;
+}
+
+
+/* === 3. Verdict-pill (small) ==============================================
+   Companion to .verdict-pill-lg (Tier 2). Inline-flex pill used in project
+   header + sidebar status badges. The larger -lg variant lives in
+   components-tier2.css; both share the same severity-band semantics. */
+
+.verdict-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: var(--space-1);
+  padding: 4px 12px;
+  border-radius: 999px;
+  font-weight: var(--font-weight-semibold);
+  font-size: var(--font-size-sm);
+}
+
+.verdict-pill--positive    { background: var(--color-state-success);   color: #fff; }
+.verdict-pill--medium      { background: var(--color-severity-medium); color: var(--color-severity-medium-on); }
+.verdict-pill--critical    { background: var(--color-severity-critical); color: #fff; }
+.verdict-pill--in-progress {
+  background: var(--color-bg-soft);
+  color: var(--color-text-secondary);
+  border: 1px dashed var(--color-border-moderate);
+}
+
+
+/* === 4. Sidebar nav ======================================================= */
+
+.project-view__nav {
+  position: sticky;
+  top: var(--space-6);
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-3);
+}
+
+.project-view__nav-search input {
+  width: 100%;
+  box-sizing: border-box;
+  padding: 6px 10px;
+  font-size: var(--font-size-sm);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+}
+
+
+/* === 5. Artifact-list ===================================================== */
+
+.artifact-list {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+  margin: 0;
+  padding: 0;
+  list-style: none;
+}
+
+.artifact-list__group {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.artifact-list__group-label {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  padding: 0 var(--space-2);
+}
+
+.artifact-list__group-count {
+  background: var(--color-bg-soft);
+  color: var(--color-text-tertiary);
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  padding: 1px 6px;
+  border-radius: 999px;
+}
+
+.artifact-list__group-items {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+
+.artifact-list__item {
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--artifact-list-item-pad-y) var(--artifact-list-item-pad-x);
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  background: transparent;
+  border: 1px solid transparent;
+  transition: background 120ms ease, border-color 120ms ease;
+}
+
+.artifact-list__item:hover { background: var(--color-bg-soft); }
+
+.artifact-list__item[data-state="active"] {
+  background: var(--color-bg-soft);
+  border-color: var(--color-primary-500);
+  box-shadow: inset 3px 0 0 var(--color-primary-500);
+  padding-left: calc(var(--artifact-list-item-pad-x) - 3px);
+}
+
+.artifact-list__item-marker {
+  width: var(--artifact-marker-size);
+  height: var(--artifact-marker-size);
+  border-radius: 50%;
+  border: var(--artifact-marker-border) solid var(--color-border-moderate);
+  background: transparent;
+  flex-shrink: 0;
+}
+
+.artifact-list__item[data-state="filled"][data-severity="positive"] .artifact-list__item-marker {
+  background: var(--color-state-success);
+  border-color: var(--color-state-success);
+}
+.artifact-list__item[data-state="filled"][data-severity="medium"] .artifact-list__item-marker {
+  background: var(--color-severity-medium);
+  border-color: var(--color-severity-medium);
+}
+.artifact-list__item[data-state="filled"][data-severity="critical"] .artifact-list__item-marker {
+  background: var(--color-severity-critical);
+  border-color: var(--color-severity-critical);
+}
+
+.artifact-list__item-body { min-width: 0; }
+
+.artifact-list__item-name {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-medium);
+  color: var(--color-text-primary);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.artifact-list__item[data-state="empty"] .artifact-list__item-name {
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-regular);
+}
+
+.artifact-list__item-meta {
+  font-size: 11px;
+  color: var(--color-text-tertiary);
+}
+
+
+/* === 6. Artifact-status (mini pill in sidebar) =========================== */
+
+.artifact-status {
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  font-weight: var(--font-weight-semibold);
+  padding: 1px 5px;
+  border-radius: var(--radius-sm);
+  letter-spacing: 0.04em;
+}
+
+.artifact-status[data-severity="positive"] { background: var(--color-severity-low-soft);      color: var(--color-severity-low-on); }
+.artifact-status[data-severity="medium"]   { background: var(--color-severity-medium-soft);   color: var(--color-severity-medium-on); }
+.artifact-status[data-severity="critical"] { background: var(--color-severity-critical-soft); color: var(--color-severity-critical-on); }
+
+
+/* === 7. Project-view main panel ========================================== */
+
+.project-view__main {
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 8. Project-overview (default dashboard) ============================= */
+
+.project-overview {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-overview__intro {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__intro h2 {
+  font-size: var(--font-size-lg);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-overview__intro p {
+  color: var(--color-text-secondary);
+  margin: 0;
+}
+
+.project-overview__verdict-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: var(--space-3);
+}
+
+.project-overview__verdict-tile {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-left: 4px solid var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.project-overview__verdict-tile[data-severity="positive"] { border-left-color: var(--color-state-success); }
+.project-overview__verdict-tile[data-severity="medium"]   { border-left-color: var(--color-severity-medium); }
+.project-overview__verdict-tile[data-severity="critical"] { border-left-color: var(--color-severity-critical); }
+.project-overview__verdict-tile[data-severity="empty"]    { border-left-style: dashed; }
+
+.project-overview__verdict-tile-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-meta {
+  font-size: var(--font-size-xs);
+  color: var(--color-text-secondary);
+}
+
+.project-overview__section h3 {
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-3) 0;
+}
+
+.project-overview__top-risks,
+.project-overview__next-actions {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__top-risks ol,
+.project-overview__next-actions ol {
+  list-style: none;
+  counter-reset: rank;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__top-risks li,
+.project-overview__next-actions li {
+  counter-increment: rank;
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-bg-soft);
+}
+
+.project-overview__top-risks li::before,
+.project-overview__next-actions li::before {
+  content: counter(rank);
+  font-family: var(--font-family-mono);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-tertiary);
+  font-size: var(--font-size-sm);
+  min-width: 20px;
+}
+
+.project-overview__missing-reports {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__missing-reports ul {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__missing-reports li {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg-soft);
+  border-radius: var(--radius-sm);
+  border-left: 3px dashed var(--color-border-moderate);
+}
+
+
+/* === 9. Artifact-view (one report rendered) ============================== */
+
+.project-view__artifact {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-6);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+.project-view__artifact-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: start;
+  gap: var(--space-4);
+  padding-bottom: var(--space-4);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.project-view__artifact-title {
+  font-size: var(--font-size-xl);
+  margin: 0 0 var(--space-1) 0;
+}
+
+.project-view__artifact-meta {
+  font-size: var(--font-size-sm);
+  color: var(--color-text-tertiary);
+  margin: 0;
+}
+
+.project-view__artifact-actions {
+  display: flex;
+  gap: var(--space-2);
+  flex-shrink: 0;
+}
+
+.project-view__artifact-body {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 10. Empty-artifact-prompt (no report imported yet) ================== */
+
+.empty-artifact-prompt {
+  background: var(--color-surface);
+  border: 2px dashed var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-8);
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: var(--space-3);
+  text-align: center;
+}
+
+.empty-artifact-prompt__icon {
+  font-size: 48px;
+  opacity: 0.5;
+}
+
+.empty-artifact-prompt__title {
+  font-size: var(--font-size-lg);
+  margin: 0;
+}
+
+.empty-artifact-prompt__text {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 50ch;
+}
+
+.empty-artifact-prompt__actions {
+  display: flex;
+  gap: var(--space-2);
+  margin-top: var(--space-2);
+}
+
+
+/* === 11. Import-modal (overlay) ========================================== */
+
+.import-modal {
+  position: fixed;
+  inset: 0;
+  z-index: 200;
+  display: none;
+}
+
+.import-modal[data-open="true"] {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.import-modal__backdrop {
+  position: absolute;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+}
+
+.import-modal__panel {
+  position: relative;
+  width: min(720px, 92vw);
+  max-height: 90vh;
+  overflow: auto;
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-strong);
+  border-radius: var(--radius-md);
+  box-shadow: var(--shadow-lg);
+  display: flex;
+  flex-direction: column;
+}
+
+.import-modal__head {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-4) var(--space-5);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.import-modal__title {
+  margin: 0;
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.import-modal__close {
+  background: transparent;
+  border: none;
+  cursor: pointer;
+  padding: 4px 10px;
+  color: var(--color-text-tertiary);
+  font-size: 20px;
+  line-height: 1;
+  border-radius: var(--radius-sm);
+}
+
+.import-modal__close:hover {
+  background: var(--color-bg-soft);
+  color: var(--color-text-primary);
+}
+
+.import-modal__form {
+  padding: var(--space-5);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+}
+
+.import-modal__form .field {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.import-modal__form label {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-semibold);
+  color: var(--color-text-secondary);
+}
+
+.import-modal__form select,
+.import-modal__form textarea {
+  width: 100%;
+  box-sizing: border-box;
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+  font-family: var(--font-family-mono);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__form textarea {
+  resize: vertical;
+  min-height: 180px;
+}
+
+.import-modal__detect {
+  display: flex;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-severity-low-soft);
+  color: var(--color-severity-low-on);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__preview {
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-sm);
+  padding: var(--space-3);
+  background: var(--color-bg);
+  max-height: 200px;
+  overflow: auto;
+}
+
+.import-modal__preview-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  margin-bottom: var(--space-2);
+}
+
+.import-modal__footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: var(--space-2);
+  padding: var(--space-3) var(--space-5);
+  border-top: 1px solid var(--color-border-subtle);
+  background: var(--color-bg-soft);
+}
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/components.css b/plugins/llm-security/playground/vendor/playground-design-system/components.css
index fb5ea58..2125e77 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/components.css
+++ b/plugins/llm-security/playground/vendor/playground-design-system/components.css
@@ -191,6 +191,15 @@
   color: var(--color-bg);
   border: none;
 }
+/* B-DS-3 (v0.4.0): bobler rendres som <button> i renderMatrixHtml — gi
+   visuell + keyboard-fokus-feedback. Antar at consumer bruker
+   <button class="matrix__bubble">, ellers bare-virkning ufarlig på <span>. */
+.matrix__bubble {
+  cursor: pointer;
+  transition: transform var(--duration-fast) var(--ease-default);
+}
+.matrix__bubble:hover { transform: scale(1.15); }
+.matrix__bubble:focus-visible { outline: 2px solid var(--color-primary-500); outline-offset: 2px; }
 [data-theme="dark"] .matrix__bubble { background: rgba(0,0,0,0.45); color: var(--color-text-primary); border-color: rgba(255,255,255,0.15); }
 
 .matrix__x-label {
diff --git a/plugins/llm-security/playground/vendor/playground-design-system/tokens.css b/plugins/llm-security/playground/vendor/playground-design-system/tokens.css
index 6712666..65ec45a 100644
--- a/plugins/llm-security/playground/vendor/playground-design-system/tokens.css
+++ b/plugins/llm-security/playground/vendor/playground-design-system/tokens.css
@@ -102,6 +102,9 @@
   --color-scope-security:  #A40E26;     /* llm-security — crimson */
   --color-scope-ultraplan: #4338CA;     /* ultraplan-local — indigo */
   --color-scope-config:    #3F5963;     /* config-audit — slate */
+  --color-scope-voyage:        #1B5FB8; /* voyage — aqua-blue */
+  --color-scope-voyage-soft:   #E5EFFA; /* voyage — light tint */
+  --color-scope-voyage-strong: #143E78; /* voyage — dark strong */
 
   /* ---------- Spacing -------------------------------------------------- */
   --space-1: 4px;
@@ -140,6 +143,14 @@
   --container-default: 1080px;
   --container-wide: 1280px;
   --sidebar-width: 280px;
+
+  /* ---------- Project-view (Tier 4 — v0.6.0) --------------------------- */
+  --project-view-nav-width: 280px;
+  --project-view-collapse-bp: 960px;        /* doc-only — referenced by media queries */
+  --artifact-list-item-pad-y: var(--space-2);
+  --artifact-list-item-pad-x: var(--space-3);
+  --artifact-marker-size: 14px;
+  --artifact-marker-border: 1.5px;
 }
 
 :root { color-scheme: light; }
diff --git a/plugins/llm-security/scripts/lib/report-renderers.mjs b/plugins/llm-security/scripts/lib/report-renderers.mjs
new file mode 100644
index 0000000..27bacc1
--- /dev/null
+++ b/plugins/llm-security/scripts/lib/report-renderers.mjs
@@ -0,0 +1,3042 @@
+/*
+ * report-renderers.mjs — llm-security playground rapport-renderere + parsers.
+ *
+ * CANONICAL SOURCE. The same code lives INLINE in
+ * playground/llm-security-playground.html as a duplicated copy. The two
+ * MUST stay in sync. file:// + ESM `import` is blocked in Chrome and
+ * Firefox without flags, so the playground retains an inline copy to
+ * remain a single-file file:// distribution. This module is the canonical
+ * source for the upcoming session 4 CLI (scripts/render-report.mjs).
+ *
+ * 45 exported functions + PARSERS routing-map + RENDERERS routing-map +
+ * KEY_STATS_CONFIG. See the export-block at the bottom of this file.
+ *
+ * Renderer API: render*(data, slot) — mutates slot.innerHTML and returns
+ * undefined. For Node CLI use, pass slot = { innerHTML: '' } and read
+ * slot.innerHTML after the call. This matches the playground exactly
+ * (bit-identical output by construction; identical code lives in both).
+ */
+
+
+// ============================================================
+// ESCAPE HELPERS
+// ============================================================
+function escapeHtml(str) {
+  if (str == null) return '';
+  return String(str)
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+function escapeAttr(str) { return escapeHtml(str); }
+
+// ============================================================
+// PAGE-SHELL HELPERS (DS Tier 3)
+// ============================================================
+function renderVerdictPill(verdict, sub) {
+  const v = String(verdict || 'n-a').toLowerCase();
+  const labels = {
+    'go': 'GO',
+    'go-with-conditions': 'BETINGET',
+    'block': 'BLOKKERT',
+    'approved': 'GODKJENT',
+    'failed': 'UNDERKJENT',
+    'allow': 'TILLATT',
+    'warning': 'ADVARSEL',
+    'n-a': 'IKKE VURDERT'
+  };
+  const dsVerdict = (
+    v === 'failed' ? 'block' :
+    v === 'go-with-conditions' ? 'warning' :
+    v === 'go' || v === 'approved' ? 'allow' :
+    v
+  );
+  const subHtml = sub
+    ? '<span class="verdict-pill-lg__sub">' + escapeHtml(String(sub)) + '</span>'
+    : '';
+  return (
+    '<div class="verdict-pill-lg" data-verdict="' + escapeAttr(dsVerdict) + '">' +
+      '<span class="verdict-pill-lg__verdict">' + escapeHtml(labels[v] || v.toUpperCase()) + '</span>' +
+      subHtml +
+    '</div>'
+  );
+}
+
+function renderKeyStatsGrid(stats) {
+  if (!stats || !stats.length) return '';
+  const items = stats.map(function (s) {
+    const cls = 'key-stat' + (s.modifier ? ' key-stat--' + escapeAttr(s.modifier) : '');
+    const hint = s.hint ? '<span class="key-stat__hint">' + escapeHtml(s.hint) + '</span>' : '';
+    return '<div class="' + cls + '">' +
+             '<span class="key-stat__label">' + escapeHtml(s.label || '') + '</span>' +
+             '<span class="key-stat__value">' + escapeHtml(String(s.value)) + '</span>' +
+             hint +
+           '</div>';
+  }).join('');
+  return '<div class="key-stats">' + items + '</div>';
+}
+
+/**
+ * Render the page-shell — the DS Tier 3 page__header cluster used on all 4 surfaces:
+ *   - onboarding: page__eyebrow="ONBOARDING · n av 5 grupper komplette"
+ *   - home: page__eyebrow="HJEM" (m/ hero-modifier for editorial type-hierarki)
+ *   - catalog: page__eyebrow="KATALOG"
+ *   - project: page__eyebrow="PROSJEKT · <TARGET>"
+ * Pluss alle 18 rapport-renderere (eyebrow per archetype).
+ * Verdict-rendering via renderVerdictPill — produserer DS verdict-pill-lg.
+ * opts: { eyebrow, title, lede, meta:[], verdict, verdictSub, hero, keyStats }
+ */
+function renderPageShell(opts, bodyHtml) {
+  opts = opts || {};
+  const eyebrow = opts.eyebrow ? '<span class="page__eyebrow">' + escapeHtml(opts.eyebrow) + '</span>' : '';
+  const title = '<h1 class="page__title">' + escapeHtml(opts.title || '') + '</h1>';
+  const lede = opts.lede ? '<p class="page__lede">' + escapeHtml(opts.lede) + '</p>' : '';
+  const meta = (opts.meta && opts.meta.length)
+    ? '<div class="page__meta">' + opts.meta.map(function (m) { return '<span>' + escapeHtml(m) + '</span>'; }).join('') + '</div>'
+    : '';
+  const verdict = (opts.verdict && opts.verdict !== 'n-a') ? renderVerdictPill(opts.verdict, opts.verdictSub) : '';
+  const aside = verdict ? '<div class="page__header-aside">' + verdict + '</div>' : '';
+  const stats = renderKeyStatsGrid(opts.keyStats);
+  const heroClass = opts.hero ? ' page__header--hero' : '';
+  return (
+    '<header class="page__header' + heroClass + '">' +
+      '<div class="page__header-main">' + eyebrow + title + lede + meta + '</div>' +
+      aside +
+    '</header>' +
+    stats +
+    (bodyHtml || '')
+  );
+}
+
+// ============================================================
+// INFER VERDICT + KEY-STATS PER ARCHETYPE
+// ============================================================
+function normalizeVerdict(v) {
+  const s = String(v || '').toLowerCase().trim();
+  const map = {
+    'block': 'block', 'blokk': 'block', 'blokkert': 'block', 'failed': 'failed', 'underkjent': 'failed',
+    'warning': 'warning', 'advarsel': 'warning',
+    'go-with-conditions': 'go-with-conditions', 'betinget': 'go-with-conditions', 'conditional': 'go-with-conditions',
+    'go': 'go', 'tillatt': 'allow', 'allow': 'allow', 'approved': 'approved', 'godkjent': 'approved',
+    'n-a': 'n-a', 'na': 'n-a', 'ikke-vurdert': 'n-a'
+  };
+  return map[s] || s || 'n-a';
+}
+
+function inferVerdict(data, archetype) {
+  if (!data) return 'n-a';
+  if (data.verdict) return normalizeVerdict(data.verdict);
+  switch (archetype) {
+    case 'findings': {
+      const fs = data.findings || [];
+      if (!fs.length) return 'allow';
+      const crit = fs.some(function (f) { return /crit|kritisk/i.test(f.severity || ''); });
+      return crit ? 'block' : 'warning';
+    }
+    case 'findings-grade': {
+      const g = String(data.grade || '').toUpperCase();
+      if (g === 'A' || g === 'B') return 'allow';
+      if (g === 'C' || g === 'D') return 'warning';
+      if (g === 'F') return 'block';
+      return 'n-a';
+    }
+    case 'posture-cards': {
+      const g = String(data.grade || '').toUpperCase();
+      if (g === 'A' || g === 'B') return 'allow';
+      if (g === 'C' || g === 'D') return 'warning';
+      if (g === 'F') return 'block';
+      return 'n-a';
+    }
+    case 'risk-score-meter': {
+      const score = Number(data.risk_score);
+      if (isNaN(score)) return 'n-a';
+      if (score >= 65) return 'block';
+      if (score >= 15) return 'warning';
+      return 'allow';
+    }
+    case 'dashboard-fleet': {
+      const g = String(data.machine_grade || '').toUpperCase();
+      if (g === 'A' || g === 'B') return 'allow';
+      if (g === 'C' || g === 'D') return 'warning';
+      if (g === 'F') return 'block';
+      return 'n-a';
+    }
+    case 'red-team-results': {
+      const fail = Number(data.fail_count) || 0;
+      if (fail > 5) return 'block';
+      if (fail > 0) return 'warning';
+      return 'allow';
+    }
+    case 'diff-report': {
+      const newCount = (data['new'] || []).length;
+      if (newCount > 0) return 'warning';
+      return 'allow';
+    }
+    case 'kanban-buckets': {
+      const remove = (data.remove || []).length;
+      if (remove > 0) return 'warning';
+      return 'allow';
+    }
+    case 'matrix-risk': {
+      const threats = data.threats || data.findings || [];
+      const hasCritical = threats.some(function (t) { return /crit|kritisk/i.test(t.severity || ''); });
+      if (hasCritical) return 'block';
+      if (threats.length) return 'warning';
+      return 'n-a';
+    }
+    default:
+      return 'n-a';
+  }
+}
+
+const KEY_STATS_CONFIG = {
+  'findings': function (d) {
+    const fs = d.findings || [];
+    const crit = fs.filter(function (f) { return /crit|kritisk/i.test(f.severity || ''); }).length;
+    const high = fs.filter(function (f) { return /^high|^høy/i.test(f.severity || ''); }).length;
+    return [
+      { label: 'TOTAL', value: fs.length },
+      { label: 'CRITICAL', value: crit, modifier: crit > 0 ? 'critical' : null },
+      { label: 'HIGH', value: high, modifier: high > 0 ? 'high' : null }
+    ];
+  },
+  'findings-grade': function (d) {
+    const out = [];
+    if (d.grade) out.push({ label: 'GRADE', value: String(d.grade).toUpperCase(), modifier: /a|b/i.test(d.grade) ? 'low' : (/c|d/i.test(d.grade) ? 'medium' : 'critical') });
+    if (d.score != null) out.push({ label: 'SCORE', value: d.score });
+    if (d.findings) out.push({ label: 'FINDINGS', value: d.findings.length });
+    return out;
+  },
+  'risk-score-meter': function (d) {
+    const out = [];
+    if (d.risk_score != null) {
+      const mod = d.risk_score >= 65 ? 'critical' : (d.risk_score >= 15 ? 'medium' : 'low');
+      out.push({ label: 'RISK SCORE', value: d.risk_score, modifier: mod });
+    }
+    if (d.riskBand) out.push({ label: 'BAND', value: d.riskBand });
+    return out;
+  },
+  'red-team-results': function (d) {
+    return [
+      { label: 'TOTAL', value: d.total || 0 },
+      { label: 'PASS', value: d.pass_count || 0, modifier: 'low' },
+      { label: 'FAIL', value: d.fail_count || 0, modifier: (d.fail_count > 0 ? 'critical' : null) }
+    ];
+  },
+  'dashboard-fleet': function (d) {
+    return [
+      { label: 'PROJECTS', value: (d.projects || []).length },
+      { label: 'MACHINE GRADE', value: String(d.machine_grade || 'n/a').toUpperCase() },
+      { label: 'WEAKEST', value: d.weakest_link || '–' }
+    ];
+  },
+  'posture-cards': function (d) {
+    const cats = d.categories || [];
+    const pass = cats.filter(function (c) { return c.status === 'PASS'; }).length;
+    const fail = cats.filter(function (c) { return c.status === 'FAIL'; }).length;
+    return [
+      { label: 'GRADE', value: String(d.grade || '?').toUpperCase(), modifier: /a|b/i.test(d.grade) ? 'low' : (/c|d/i.test(d.grade) ? 'medium' : 'critical') },
+      { label: 'PASS', value: pass, modifier: 'low' },
+      { label: 'FAIL', value: fail, modifier: fail > 0 ? 'critical' : 'low' }
+    ];
+  },
+  'diff-report': function (d) {
+    const newCount = (d['new'] || []).length;
+    const unchangedCount = (d.unchanged || []).length;
+    return [
+      { label: 'CURRENT GRADE', value: String(d.current_grade || '?').toUpperCase() },
+      { label: 'ACTIONS', value: newCount, modifier: newCount > 0 ? 'medium' : 'low' },
+      { label: 'SKIPPED', value: unchangedCount }
+    ];
+  },
+  'kanban-buckets': function (d) {
+    const auto = (d.buckets && d.buckets.auto) || d.auto || [];
+    const semi = (d.buckets && (d.buckets['semi-auto'] || d.buckets.semi_auto)) || d['semi-auto'] || d.semi_auto || [];
+    const manual = (d.buckets && d.buckets.manual) || d.manual || [];
+    return [
+      { label: 'AUTO', value: auto.length, modifier: 'low' },
+      { label: 'SEMI-AUTO', value: semi.length, modifier: semi.length ? 'medium' : 'low' },
+      { label: 'MANUAL', value: manual.length, modifier: manual.length ? 'high' : 'low' }
+    ];
+  },
+  'matrix-risk': function (d) {
+    const threats = d.threats || d.findings || [];
+    const cells = d.matrix_cells || [];
+    const maxScore = cells.length ? Math.max.apply(null, cells.map(function (c) { return Number(c.score) || 0; })) : 0;
+    const sev = maxScore >= 16 ? 'critical' : maxScore >= 9 ? 'high' : maxScore >= 4 ? 'medium' : 'low';
+    return [
+      { label: 'TRUSLER', value: threats.length },
+      { label: 'MAKS SCORE', value: maxScore || '–', modifier: sev },
+      { label: 'CELLER', value: cells.length }
+    ];
+  }
+};
+
+function inferKeyStats(data, archetype) {
+  if (!data) return [];
+  if (Array.isArray(data.keyStats)) return data.keyStats;
+  const fn = KEY_STATS_CONFIG[archetype];
+  if (typeof fn !== 'function') return [];
+  try {
+    const out = fn(data);
+    return Array.isArray(out) ? out : [];
+  } catch (e) { return []; }
+}
+
+// ============================================================
+// PARSER HELPERS (markdown → struktur)
+// ============================================================
+function parseTableRow(line) {
+  const inner = line.replace(/^\|/, '').replace(/\|$/, '');
+  return inner.split('|').map(function (c) { return c.trim(); });
+}
+
+function parseTable(md, anchorRegex) {
+  if (typeof md !== 'string') return null;
+  let body = md;
+  if (anchorRegex) {
+    const m = anchorRegex.exec(md);
+    if (!m) return null;
+    body = md.slice(m.index + m[0].length);
+  }
+  const lines = body.split(/\r?\n/);
+  for (let i = 0; i < lines.length - 1; i++) {
+    const line = lines[i].trim();
+    const next = (lines[i + 1] || '').trim();
+    if (line.indexOf('|') === 0 && /^\|[\s\-:|]+\|$/.test(next)) {
+      const headers = parseTableRow(line);
+      const rows = [];
+      for (let j = i + 2; j < lines.length; j++) {
+        const rowLine = lines[j].trim();
+        if (rowLine.indexOf('|') !== 0) break;
+        const cells = parseTableRow(rowLine);
+        if (cells.length === 0) break;
+        const row = {};
+        for (let k = 0; k < headers.length; k++) {
+          row[headers[k]] = (cells[k] || '').trim();
+        }
+        rows.push(row);
+      }
+      return { headers: headers, rows: rows };
+    }
+  }
+  return null;
+}
+
+function parseAllTables(md, anchorRegex) {
+  // Returnerer alle tabeller etter (valgfri) anchor til neste H2
+  // Brukt av parsers som har flere severity-tabeller (### Critical, ### High osv).
+  if (typeof md !== 'string') return [];
+  let body = md;
+  if (anchorRegex) {
+    const m = anchorRegex.exec(md);
+    if (!m) return [];
+    body = md.slice(m.index + m[0].length);
+  }
+  const out = [];
+  const lines = body.split(/\r?\n/);
+  let i = 0;
+  while (i < lines.length - 1) {
+    const line = lines[i].trim();
+    const next = (lines[i + 1] || '').trim();
+    if (line.indexOf('|') === 0 && /^\|[\s\-:|]+\|$/.test(next)) {
+      const headers = parseTableRow(line);
+      const rows = [];
+      let j = i + 2;
+      for (; j < lines.length; j++) {
+        const rowLine = lines[j].trim();
+        if (rowLine.indexOf('|') !== 0) break;
+        const cells = parseTableRow(rowLine);
+        if (cells.length === 0) break;
+        const row = {};
+        for (let k = 0; k < headers.length; k++) {
+          row[headers[k]] = (cells[k] || '').trim();
+        }
+        rows.push(row);
+      }
+      out.push({ headers: headers, rows: rows });
+      i = j;
+    } else {
+      i++;
+    }
+  }
+  return out;
+}
+
+function parseSections(md) {
+  if (typeof md !== 'string') return [];
+  const sections = [];
+  const lines = md.split(/\r?\n/);
+  let current = null;
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const m = /^##\s+(.+)$/.exec(line);
+    if (m && line.charAt(2) === ' ') {
+      if (current) sections.push(current);
+      current = { heading: m[1].trim(), body: '' };
+    } else if (current) {
+      current.body += (current.body ? '\n' : '') + line;
+    }
+  }
+  if (current) sections.push(current);
+  return sections.map(function (s) {
+    return { heading: s.heading, body: s.body.trim() };
+  });
+}
+
+function extractField(md, label) {
+  if (typeof md !== 'string') return null;
+  const escaped = label.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  // Markdown-tabellrader: | **Label** | value | OR | Label | value |
+  const tblRe = new RegExp('^\\s*\\|\\s*\\**\\s*' + escaped + '\\s*\\**\\s*\\|\\s*([^|]+?)\\s*\\|', 'mi');
+  const tbl = tblRe.exec(md);
+  if (tbl) return tbl[1].trim();
+  // **Label:** value  OR  Label: value
+  const re = new RegExp('^\\s*\\**\\s*' + escaped + '\\**\\s*:\\s*(.+)$', 'mi');
+  const m = re.exec(md);
+  return m ? m[1].trim() : null;
+}
+
+function intOrZero(s) {
+  if (s == null) return 0;
+  if (typeof s !== 'string') s = String(s);
+  const v = parseInt(s.replace(/[^\d-]/g, ''), 10);
+  return isNaN(v) ? 0 : v;
+}
+
+function emptyInput(md) {
+  return !md || typeof md !== 'string' || !md.trim();
+}
+
+function normalizeSeverity(s) {
+  const v = String(s || '').toLowerCase().trim();
+  if (/crit|kritisk/.test(v)) return 'critical';
+  if (/^high|^høy/.test(v)) return 'high';
+  if (/medium|moderat/.test(v)) return 'medium';
+  if (/^low|^lav/.test(v)) return 'low';
+  if (/^info|^observ/.test(v)) return 'info';
+  return v || 'info';
+}
+
+function normalizeVerdictText(s) {
+  const v = String(s || '').toUpperCase().trim();
+  if (/BLOCK|BLOKK|UNDERKJENT|FAIL/.test(v)) return 'block';
+  if (/GO[-\s]WITH[-\s]CONDITIONS|CONDITIONAL|BETINGET/.test(v)) return 'go-with-conditions';
+  if (/WARNING|ADVARSEL/.test(v)) return 'warning';
+  if (/ALLOW|TILLATT|GO|PASS|GODKJENT/.test(v)) return 'allow';
+  if (/N\/?A|IKKE/.test(v)) return 'n-a';
+  return '';
+}
+
+function gradeFromText(s) {
+  const m = /\b([A-F])\b/.exec(String(s || '').toUpperCase());
+  return m ? m[1] : null;
+}
+
+// Helper: parse the Risk Dashboard table (shared pattern)
+function parseRiskDashboard(md) {
+  const out = {};
+  const score = extractField(md, 'Risk Score');
+  if (score) {
+    const m = /(\d+)\s*\/\s*100/.exec(score);
+    if (m) out.risk_score = parseInt(m[1], 10);
+    else out.risk_score = intOrZero(score);
+  }
+  const band = extractField(md, 'Risk Band');
+  if (band) out.riskBand = band;
+  const grade = extractField(md, 'Grade');
+  if (grade) out.grade = gradeFromText(grade);
+  const verdict = extractField(md, 'Verdict');
+  if (verdict) {
+    const norm = normalizeVerdictText(verdict);
+    if (norm) out.verdict = norm;
+  }
+  const rationale = extractField(md, 'Verdict rationale');
+  if (rationale) out.verdict_rationale = rationale;
+  // Severity counts-tabell (Severity | Count) — etter Risk Dashboard-headeren
+  const sevTbl = parseTable(md, /\|\s*Severity\s*\|\s*Count/i);
+  if (sevTbl && sevTbl.rows.length) {
+    const counts = { critical: 0, high: 0, medium: 0, low: 0, info: 0, total: 0 };
+    sevTbl.rows.forEach(function (row) {
+      const label = String(row[sevTbl.headers[0]] || '').toLowerCase().replace(/[*\s]/g, '');
+      const n = intOrZero(row[sevTbl.headers[1]] || '0');
+      if (/^critical|^kritisk/.test(label)) counts.critical = n;
+      else if (/^high|^høy/.test(label)) counts.high = n;
+      else if (/^medium/.test(label)) counts.medium = n;
+      else if (/^low|^lav/.test(label)) counts.low = n;
+      else if (/^info/.test(label)) counts.info = n;
+      else if (/^total/.test(label)) counts.total = n;
+    });
+    if (!counts.total) {
+      counts.total = counts.critical + counts.high + counts.medium + counts.low + counts.info;
+    }
+    out.severity_counts = counts;
+  }
+  return out;
+}
+
+// Hjelper: parse alle findings-tabeller (### Critical / High / Medium / Low / Info)
+function parseFindingsTables(md) {
+  const findings = [];
+  // Match alle ### <Severity>-headere innenfor ## Findings
+  const findingsSection = parseSections(md).find(function (s) {
+    return /^findings$/i.test(s.heading) || /^funn$/i.test(s.heading);
+  });
+  if (!findingsSection) return findings;
+  const body = findingsSection.body;
+  // Split on ### headers
+  const subRe = /^###\s+(.+)$/gm;
+  const matches = [];
+  let m;
+  while ((m = subRe.exec(body)) !== null) {
+    matches.push({ severity: m[1].trim(), index: m.index });
+  }
+  for (let i = 0; i < matches.length; i++) {
+    const start = matches[i].index;
+    const end = i + 1 < matches.length ? matches[i + 1].index : body.length;
+    const chunk = body.slice(start, end);
+    const tbl = parseTable(chunk);
+    if (!tbl || !tbl.rows.length) continue;
+    const sev = matches[i].severity.split(/[\s/,]/)[0]; // "Low / Info" → "Low"
+    tbl.rows.forEach(function (row) {
+      const idKey = tbl.headers[0];
+      const catKey = tbl.headers.find(function (h) { return /category|kategori/i.test(h); });
+      const fileKey = tbl.headers.find(function (h) { return /file|fil/i.test(h); });
+      const lineKey = tbl.headers.find(function (h) { return /^line$|linje/i.test(h); });
+      const descKey = tbl.headers.find(function (h) { return /description|beskriv/i.test(h); });
+      const owaspKey = tbl.headers.find(function (h) { return /owasp/i.test(h); });
+      findings.push({
+        id: row[idKey] || '',
+        severity: normalizeSeverity(sev),
+        category: catKey ? row[catKey] : '',
+        file: fileKey ? row[fileKey] : '',
+        line: lineKey ? row[lineKey] : '',
+        description: descKey ? row[descKey] : '',
+        owasp: owaspKey ? row[owaspKey] : ''
+      });
+    });
+  }
+  return findings;
+}
+
+function parseRecommendations(md) {
+  const sec = parseSections(md).find(function (s) { return /^recommendations$|^anbefalinger$/i.test(s.heading); });
+  if (!sec) return [];
+  const out = [];
+  const lines = sec.body.split(/\r?\n/);
+  lines.forEach(function (line) {
+    const m = /^\s*(?:\d+\.|[-*])\s+(.+)$/.exec(line);
+    if (m) out.push(m[1].replace(/^\*\*[^*]+\*\*[:]?\s*/, '').trim());
+  });
+  return out;
+}
+
+function safeOk(parser) {
+  return function (md) {
+    if (emptyInput(md)) return { ok: false, errors: [{ section: 'input', reason: 'Tom input' }] };
+    try { return parser(md); }
+    catch (e) { return { ok: false, errors: [{ section: 'parser', reason: String(e && e.message || e) }] }; }
+  };
+}
+
+// ============================================================
+// parseNarrativeAudit — v7.1.1 Narrative Audit-blokk
+// ============================================================
+/**
+ * Parse v7.1.1 Narrative Audit-blokk: "**Suppressed signals:** N (reason1: count examples, ...)"
+ * Returnerer { count, by_category: {reason: count, ...}, examples: {reason: text, ...} } eller null.
+ */
+function parseNarrativeAudit(md) {
+  const m = String(md || '').match(/Suppressed signals:\s*\*?\*?\s*(\d+)\s*(?:\(([^)]+)\))?/i);
+  if (!m) return null;
+  const count = Number(m[1]) || 0;
+  const by_category = {};
+  const examples = {};
+  if (m[2]) {
+    m[2].split(',').forEach(function (part) {
+      const seg = part.trim();
+      const colonIdx = seg.indexOf(':');
+      if (colonIdx < 0) {
+        by_category[seg] = (by_category[seg] || 0) + 1;
+        return;
+      }
+      const reason = seg.slice(0, colonIdx).trim();
+      const rest = seg.slice(colonIdx + 1).trim();
+      const cm = rest.match(/^(\d+)\s+(.*)$/);
+      if (cm) {
+        by_category[reason] = (by_category[reason] || 0) + (Number(cm[1]) || 1);
+        examples[reason] = cm[2].trim();
+      } else {
+        by_category[reason] = (by_category[reason] || 0) + 1;
+        examples[reason] = rest;
+      }
+    });
+  }
+  return { count: count, by_category: by_category, examples: examples };
+}
+
+// ============================================================
+// 10 PARSERS — one per high-priority command.
+// Returner { ok: true, data: { ...domain-specific } } eller
+//          { ok: false, errors: [{ section, reason }] }
+// ============================================================
+const parseScan = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const findings = parseFindingsTables(md);
+  const owaspTbl = parseTable(md, /##\s+OWASP\s+Categorization/i);
+  const owasp = owaspTbl ? owaspTbl.rows.map(function (row) {
+    return {
+      category: row[owaspTbl.headers[0]] || '',
+      findings: intOrZero(row[owaspTbl.headers[1]] || '0'),
+      max_severity: normalizeSeverity(row[owaspTbl.headers[2]] || ''),
+      scanners: row[owaspTbl.headers[3]] || ''
+    };
+  }) : [];
+  const supplyTbl = parseTable(md, /##\s+Supply\s+Chain\s+Assessment/i);
+  const supply_chain = supplyTbl ? supplyTbl.rows.map(function (row) {
+    return {
+      component: row[supplyTbl.headers[0]] || '',
+      type: row[supplyTbl.headers[1]] || '',
+      source: row[supplyTbl.headers[2]] || '',
+      trust: row[supplyTbl.headers[3]] || '',
+      notes: row[supplyTbl.headers[4]] || ''
+    };
+  }) : [];
+  const exec = parseSections(md).find(function (s) { return /^executive\s+summary/i.test(s.heading); });
+  const suppressed = parseNarrativeAudit(md);
+  return { ok: true, data: Object.assign({}, dash, {
+    findings: findings,
+    owasp: owasp,
+    supply_chain: supply_chain,
+    executive_summary: exec ? exec.body.split(/\n##/)[0].trim() : '',
+    narrative_audit: suppressed ? { suppressed_findings: suppressed } : undefined,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseDeepScan = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Per-scanner-blokker: ### N. Name (TAG) — Status / Files / Findings / Time
+  const scannerBlocks = [];
+  const scannerRe = /^###\s+\d+\.\s+(.+?)\s+\(([A-Z]{2,4})\)\s*$([\s\S]*?)(?=^###\s+\d+\.|^##\s+|\Z)/gm;
+  let m;
+  while ((m = scannerRe.exec(md)) !== null) {
+    const name = m[1].trim();
+    const tag = m[2].trim();
+    const body = m[3] || '';
+    const statusMatch = /\*\*Status:\*\*\s*([^|]+?)\s*\|/i.exec(body);
+    const filesMatch = /\*\*Files:\*\*\s*([^|]+?)\s*\|/i.exec(body);
+    const findingsMatch = /\*\*Findings:\*\*\s*(\d+)/i.exec(body);
+    const timeMatch = /\*\*Time:\*\*\s*(\d+)/i.exec(body);
+    const detailLines = body.split(/\r?\n/).filter(function (l) {
+      return l.trim() && !/^\*\*Status:\*\*/i.test(l.trim());
+    });
+    scannerBlocks.push({
+      tag: tag,
+      name: name,
+      status: statusMatch ? statusMatch[1].trim() : '',
+      files: filesMatch ? filesMatch[1].trim() : '',
+      findings: findingsMatch ? parseInt(findingsMatch[1], 10) : 0,
+      duration_ms: timeMatch ? parseInt(timeMatch[1], 10) : 0,
+      details: detailLines.join(' ').trim()
+    });
+  }
+  // Scanner Risk Matrix
+  const matrixTbl = parseTable(md, /##\s+Scanner\s+Risk\s+Matrix/i);
+  const scanner_matrix = matrixTbl ? matrixTbl.rows
+    .filter(function (row) { return !/^\s*\*\*total/i.test(row[matrixTbl.headers[0]] || ''); })
+    .map(function (row) {
+      return {
+        scanner: row[matrixTbl.headers[0]] || '',
+        critical: intOrZero(row[matrixTbl.headers[1]] || '0'),
+        high: intOrZero(row[matrixTbl.headers[2]] || '0'),
+        medium: intOrZero(row[matrixTbl.headers[3]] || '0'),
+        low: intOrZero(row[matrixTbl.headers[4]] || '0'),
+        info: intOrZero(row[matrixTbl.headers[5]] || '0')
+      };
+    }) : [];
+  const exec = parseSections(md).find(function (s) { return /^executive\s+summary/i.test(s.heading); });
+  const suppressed = parseNarrativeAudit(md);
+  return { ok: true, data: Object.assign({}, dash, {
+    scanners: scannerBlocks,
+    scanner_matrix: scanner_matrix,
+    score: dash.risk_score,
+    findings: parseFindingsTables(md),
+    executive_summary: exec ? exec.body.split(/\n##/)[0].trim() : '',
+    narrative_audit: suppressed ? { suppressed_findings: suppressed } : undefined,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parsePluginAudit = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Plugin Metadata-tabell
+  const metaTbl = parseTable(md, /##\s+Plugin\s+Metadata/i);
+  const plugin_metadata = {};
+  if (metaTbl) {
+    metaTbl.rows.forEach(function (row) {
+      const k = String(row[metaTbl.headers[0]] || '').replace(/\*+/g, '').trim().toLowerCase().replace(/\s+/g, '_');
+      plugin_metadata[k] = row[metaTbl.headers[1]] || '';
+    });
+  }
+  // Component Inventory
+  const compTbl = parseTable(md, /##\s+Component\s+Inventory/i);
+  const components = compTbl ? compTbl.rows.map(function (row) {
+    return {
+      component: row[compTbl.headers[0]] || '',
+      count: intOrZero(row[compTbl.headers[1]] || '0'),
+      notes: row[compTbl.headers[2]] || ''
+    };
+  }) : [];
+  // Permission Matrix
+  const permTbl = parseTable(md, /##\s+Permission\s+Matrix/i);
+  const permissions = permTbl ? permTbl.rows.map(function (row) {
+    return {
+      tool: row[permTbl.headers[0]] || '',
+      required_by: row[permTbl.headers[1]] || '',
+      justified: row[permTbl.headers[2]] || ''
+    };
+  }) : [];
+  // Trust Verdict-seksjon
+  const sections = parseSections(md);
+  const trustSec = sections.find(function (s) { return /trust\s+verdict/i.test(s.heading); });
+  let trust_verdict_text = '';
+  let trust_verdict_value = '';
+  if (trustSec) {
+    trust_verdict_text = trustSec.body;
+    const vmatch = /\*\*Verdict:\*\*\s*([A-Z\-]+)/i.exec(trustSec.body);
+    if (vmatch) trust_verdict_value = normalizeVerdictText(vmatch[1]);
+  }
+  return { ok: true, data: Object.assign({}, dash, {
+    plugin_metadata: plugin_metadata,
+    components: components,
+    permissions: permissions,
+    trust_verdict_text: trust_verdict_text,
+    trust_verdict: trust_verdict_value || dash.verdict || '',
+    findings: parseFindingsTables(md),
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseMcpAudit = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // MCP Landscape-tabell
+  const landTbl = parseTable(md, /##\s+MCP\s+Landscape/i);
+  const mcp_servers = landTbl ? landTbl.rows.map(function (row) {
+    return {
+      server: row[landTbl.headers[0]] || '',
+      type: row[landTbl.headers[1]] || '',
+      trust: row[landTbl.headers[2]] || '',
+      tools: intOrZero(row[landTbl.headers[3]] || '0'),
+      active: /^yes|^aktiv|^ja/i.test(String(row[landTbl.headers[4]] || ''))
+    };
+  }) : [];
+  // Per-Server-Analysis er fritekst-seksjoner med ### server-name
+  const sections = parseSections(md);
+  const perServerSec = sections.find(function (s) { return /per-server\s+analysis/i.test(s.heading); });
+  const per_server = [];
+  if (perServerSec) {
+    const subRe = /^###\s+(.+)$/gm;
+    const body = perServerSec.body;
+    const heads = [];
+    let m2;
+    while ((m2 = subRe.exec(body)) !== null) heads.push({ name: m2[1].trim(), index: m2.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      per_server.push({
+        name: heads[i].name.replace(/\s*\([^)]+\)\s*$/, ''),
+        note: heads[i].name.match(/\(([^)]+)\)/) ? heads[i].name.match(/\(([^)]+)\)/)[1] : '',
+        body: body.slice(start, end).replace(/^###[^\n]+\n+/, '').trim()
+      });
+    }
+  }
+  // Keep / Review / Remove buckets
+  const krrTbl = parseTable(md, /##\s+Keep\s*\/\s*Review\s*\/\s*Remove/i);
+  const buckets = { keep: [], review: [], remove: [] };
+  if (krrTbl) {
+    krrTbl.rows.forEach(function (row) {
+      const decision = String(row[krrTbl.headers[0]] || '').toLowerCase().trim();
+      const item = {
+        server: row[krrTbl.headers[1]] || '',
+        reason: row[krrTbl.headers[2]] || ''
+      };
+      if (/^keep/.test(decision)) buckets.keep.push(item);
+      else if (/^review/.test(decision)) buckets.review.push(item);
+      else if (/^remove/.test(decision)) buckets.remove.push(item);
+    });
+  }
+  // Findings: tabeller under ## Findings
+  const findings = [];
+  const findingsSec = sections.find(function (s) { return /^findings$/i.test(s.heading); });
+  if (findingsSec) {
+    const subRe = /^###\s+(.+)$/gm;
+    const body = findingsSec.body;
+    const heads = [];
+    let m3;
+    while ((m3 = subRe.exec(body)) !== null) heads.push({ severity: m3[1].trim(), index: m3.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const tbl = parseTable(chunk);
+      if (!tbl || !tbl.rows.length) continue;
+      const sev = heads[i].severity.split(/[\s/,]/)[0];
+      tbl.rows.forEach(function (row) {
+        const idKey = tbl.headers[0];
+        const serverKey = tbl.headers.find(function (h) { return /server/i.test(h); });
+        const descKey = tbl.headers.find(function (h) { return /description|beskriv/i.test(h); });
+        const owaspKey = tbl.headers.find(function (h) { return /owasp/i.test(h); });
+        findings.push({
+          id: row[idKey] || '',
+          severity: normalizeSeverity(sev),
+          server: serverKey ? row[serverKey] : '',
+          description: descKey ? row[descKey] : '',
+          owasp: owaspKey ? row[owaspKey] : ''
+        });
+      });
+    }
+  }
+  return { ok: true, data: Object.assign({}, dash, {
+    mcp_servers: mcp_servers,
+    per_server: per_server,
+    buckets: buckets,
+    findings: findings,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseIdeScan = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Scan Coverage-tabell
+  const covTbl = parseTable(md, /##\s+Scan\s+Coverage/i);
+  const coverage = covTbl ? covTbl.rows
+    .filter(function (row) { return !/^\s*\*\*total/i.test(row[covTbl.headers[0]] || ''); })
+    .map(function (row) {
+      return {
+        ide: row[covTbl.headers[0]] || '',
+        extensions: intOrZero(row[covTbl.headers[1]] || '0'),
+        findings: intOrZero(row[covTbl.headers[2]] || '0')
+      };
+    }) : [];
+  // Findings: under ### Critical/High/Medium/Low/Info — extension+IDE-spesifikk
+  const findings = [];
+  const sections = parseSections(md);
+  const findingsSec = sections.find(function (s) { return /^findings$/i.test(s.heading); });
+  if (findingsSec) {
+    const body = findingsSec.body;
+    const subRe = /^###\s+(.+)$/gm;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) heads.push({ severity: m[1].trim(), index: m.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const tbl = parseTable(chunk);
+      if (!tbl || !tbl.rows.length) continue;
+      const sev = heads[i].severity.split(/[\s/,]/)[0];
+      tbl.rows.forEach(function (row) {
+        const idKey = tbl.headers[0];
+        const extKey = tbl.headers.find(function (h) { return /extension/i.test(h); });
+        const ideKey = tbl.headers.find(function (h) { return /^ide$/i.test(h); });
+        const descKey = tbl.headers.find(function (h) { return /description|beskriv/i.test(h); });
+        const owaspKey = tbl.headers.find(function (h) { return /owasp/i.test(h); });
+        findings.push({
+          id: row[idKey] || '',
+          severity: normalizeSeverity(sev),
+          extension: extKey ? row[extKey] : '',
+          ide: ideKey ? row[ideKey] : '',
+          description: descKey ? row[descKey] : '',
+          owasp: owaspKey ? row[owaspKey] : ''
+        });
+      });
+    }
+  }
+  return { ok: true, data: Object.assign({}, dash, {
+    coverage: coverage,
+    findings: findings,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parsePosture = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Overall Score-seksjon: "**N / M categories covered (Grade X)**"
+  const overallSec = parseSections(md).find(function (s) { return /^overall\s+score/i.test(s.heading); });
+  let posture_score = null;
+  let posture_applicable = null;
+  if (overallSec) {
+    const m = /\*\*\s*(\d+)\s*\/\s*(\d+)\s+categories/i.exec(overallSec.body);
+    if (m) {
+      posture_score = parseInt(m[1], 10);
+      posture_applicable = parseInt(m[2], 10);
+    }
+  }
+  // Category Scorecard-tabell
+  const catTbl = parseTable(md, /##\s+Category\s+Scorecard/i);
+  const categories = catTbl ? catTbl.rows.map(function (row) {
+    const status = String(row[catTbl.headers.find(function (h) { return /status/i.test(h); }) || catTbl.headers[2]] || '').toUpperCase().trim();
+    return {
+      num: intOrZero(row[catTbl.headers[0]] || '0'),
+      name: row[catTbl.headers[1]] || '',
+      status: status,
+      findings: intOrZero(row[catTbl.headers[3]] || '0')
+    };
+  }) : [];
+  // Top findings under ## Top Findings (med ### severity-grupper)
+  const findings = [];
+  const sections = parseSections(md);
+  const topSec = sections.find(function (s) { return /^top\s+findings/i.test(s.heading); });
+  if (topSec) {
+    const body = topSec.body;
+    const subRe = /^###\s+(.+)$/gm;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) heads.push({ severity: m[1].trim(), index: m.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const tbl = parseTable(chunk);
+      if (!tbl || !tbl.rows.length) continue;
+      tbl.rows.forEach(function (row) {
+        findings.push({
+          id: row[tbl.headers[0]] || '',
+          severity: normalizeSeverity(heads[i].severity),
+          category: row[tbl.headers[1]] || '',
+          file: row[tbl.headers[2]] || '',
+          description: row[tbl.headers[3]] || ''
+        });
+      });
+    }
+  }
+  // Quick Wins
+  const quickSec = sections.find(function (s) { return /^quick\s+wins/i.test(s.heading); });
+  const quick_wins = quickSec ? quickSec.body.split(/\r?\n/).map(function (l) {
+    const m = /^\s*\d+\.\s+(.+)$/.exec(l);
+    return m ? m[1].replace(/^\*\*[^*]+\*\*\s*[—-]?\s*/, '').trim() : null;
+  }).filter(Boolean) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    score: posture_score != null ? posture_score : dash.risk_score,
+    posture_score: posture_score,
+    posture_applicable: posture_applicable,
+    categories: categories,
+    findings: findings,
+    quick_wins: quick_wins,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseAudit = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Radar Axes-tabell
+  const radarTbl = parseTable(md, /##\s+Radar\s+Axes/i);
+  const radar_axes = radarTbl ? radarTbl.rows.map(function (row) {
+    return {
+      name: row[radarTbl.headers[0]] || '',
+      score: intOrZero(row[radarTbl.headers[1]] || '0')
+    };
+  }) : [];
+  // Category Assessment: ### Category N — Name + status-tabell
+  const sections = parseSections(md);
+  const catAssessSec = sections.find(function (s) { return /^category\s+assessment/i.test(s.heading); });
+  const categories = [];
+  if (catAssessSec) {
+    const body = catAssessSec.body;
+    const subRe = /^###\s+Category\s+(\d+)\s+[—-]\s+(.+)$/gm;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) {
+      heads.push({ num: parseInt(m[1], 10), name: m[2].trim(), index: m.index });
+    }
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const statusMatch = /\|\s*Status\s*\|\s*([A-Z\-]+)\s*\|/i.exec(chunk);
+      categories.push({
+        num: heads[i].num,
+        name: heads[i].name,
+        status: statusMatch ? statusMatch[1].trim().toUpperCase() : ''
+      });
+    }
+  }
+  // Risk Matrix (L×I)
+  const riskTbl = parseTable(md, /##\s+Risk\s+Matrix/i);
+  const risk_matrix = riskTbl ? riskTbl.rows.map(function (row) {
+    return {
+      category: row[riskTbl.headers[0]] || '',
+      likelihood: intOrZero(row[riskTbl.headers[1]] || '0'),
+      impact: intOrZero(row[riskTbl.headers[2]] || '0'),
+      score: intOrZero(row[riskTbl.headers[3]] || '0')
+    };
+  }) : [];
+  // Action Plan: ### IMMEDIATE / HIGH / MEDIUM
+  const actionSec = sections.find(function (s) { return /^action\s+plan/i.test(s.heading); });
+  const action_plan = { immediate: [], high: [], medium: [] };
+  if (actionSec) {
+    const body = actionSec.body;
+    const subRe = /^###\s+(IMMEDIATE|HIGH|MEDIUM)/gmi;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) heads.push({ tier: m[1].toLowerCase(), index: m.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      chunk.split(/\r?\n/).forEach(function (line) {
+        const mm = /^\s*\d+\.\s+(.+)$/.exec(line);
+        if (mm) action_plan[heads[i].tier].push(mm[1].trim());
+      });
+    }
+  }
+  const exec = sections.find(function (s) { return /^executive\s+summary/i.test(s.heading); });
+  return { ok: true, data: Object.assign({}, dash, {
+    score: dash.risk_score,
+    radar_axes: radar_axes,
+    categories: categories,
+    risk_matrix: risk_matrix,
+    action_plan: action_plan,
+    findings: parseFindingsTables(md),
+    executive_summary: exec ? exec.body.trim() : ''
+  }) };
+});
+
+const parseDashboard = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Header-Risk Dashboard-tabell har egne felter
+  const machine_grade = gradeFromText(extractField(md, 'Machine Grade') || '');
+  const projects_scanned = intOrZero(extractField(md, 'Projects Scanned') || '0');
+  const total_findings = intOrZero(extractField(md, 'Total Findings') || '0');
+  const cache = extractField(md, 'Cache') || '';
+  // Project Overview-tabell
+  const projTbl = parseTable(md, /##\s+Project\s+Overview/i);
+  const projects = projTbl ? projTbl.rows.map(function (row) {
+    return {
+      name: row[projTbl.headers[0]] || '',
+      grade: gradeFromText(row[projTbl.headers[1]] || ''),
+      risk: intOrZero(row[projTbl.headers[2]] || '0'),
+      worst_category: row[projTbl.headers[3]] || '',
+      findings: intOrZero(row[projTbl.headers[4]] || '0')
+    };
+  }) : [];
+  // Trend-tabell
+  const trendTbl = parseTable(md, /##\s+Trend/i);
+  const trends = trendTbl ? trendTbl.rows.map(function (row) {
+    return {
+      name: row[trendTbl.headers[0]] || '',
+      trend: String(row[trendTbl.headers[1]] || '').toLowerCase().trim(),
+      d_risk: row[trendTbl.headers[2]] || '',
+      d_findings: row[trendTbl.headers[3]] || ''
+    };
+  }) : [];
+  // Errors-seksjon
+  const errSec = parseSections(md).find(function (s) { return /^errors/i.test(s.heading); });
+  let errors = [];
+  if (errSec) {
+    const errTbl = parseTable(errSec.body);
+    if (errTbl) {
+      errors = errTbl.rows.map(function (row) {
+        return {
+          project: row[errTbl.headers[0]] || '',
+          error: row[errTbl.headers[errTbl.headers.length - 1]] || ''
+        };
+      });
+    }
+  }
+  // Weakest link = first project, sorted worst-first (already sorted in the fixture)
+  const weakest = projects.length ? projects[0].name : '';
+  return { ok: true, data: Object.assign({}, dash, {
+    machine_grade: machine_grade,
+    projects_scanned: projects_scanned,
+    total_findings: total_findings,
+    cache: cache,
+    projects: projects,
+    trends: trends,
+    errors: errors,
+    weakest_link: weakest,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseHarden = safeOk(function (md) {
+  const current_grade = gradeFromText(extractField(md, 'Current Grade') || '');
+  const project_type = extractField(md, 'Project Type') || '';
+  const recRaw = extractField(md, 'Recommendations') || '';
+  let actionable = 0, total = 0;
+  const recMatch = /(\d+)\s*\/\s*(\d+)/.exec(recRaw);
+  if (recMatch) { actionable = parseInt(recMatch[1], 10); total = parseInt(recMatch[2], 10); }
+  const mode = extractField(md, 'Mode') || 'dry-run';
+  // Recommendations: ### N. Category — File med Action / Content preview
+  const sections = parseSections(md);
+  const recSec = sections.find(function (s) { return /^recommendations$/i.test(s.heading); });
+  const recommendations = [];
+  if (recSec) {
+    const body = recSec.body;
+    const subRe = /^###\s+(\d+)\.\s+(.+?)\s+[—-]\s+(.+)$/gm;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) {
+      heads.push({ num: parseInt(m[1], 10), category: m[2].trim(), file: m[3].trim(), index: m.index });
+    }
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const actionMatch = /-\s+\*\*Action:\*\*\s*(.+)$/im.exec(chunk);
+      const contentMatch = /-\s+\*\*Content preview:\*\*\s*([\s\S]*?)(?=\n-\s+\*\*|\n###|\n##|$)/i.exec(chunk);
+      recommendations.push({
+        num: heads[i].num,
+        category: heads[i].category,
+        file: heads[i].file,
+        action: actionMatch ? actionMatch[1].trim() : '',
+        content_preview: contentMatch ? contentMatch[1].trim() : ''
+      });
+    }
+  }
+  // Diff Summary-tabell
+  const diffTbl = parseTable(md, /##\s+Diff\s+Summary/i);
+  const diff_summary = diffTbl ? diffTbl.rows
+    .filter(function (row) { return !/^\s*\*\*total/i.test(row[diffTbl.headers[0]] || ''); })
+    .map(function (row) {
+      return {
+        file: row[diffTbl.headers[0]] || '',
+        action: row[diffTbl.headers[1]] || '',
+        lines: row[diffTbl.headers[2]] || ''
+      };
+    }) : [];
+  // Map til diff-archetype: new = create, resolved = (none), unchanged = skipped
+  const newItems = recommendations.filter(function (r) { return /create|append|merge/i.test(r.action); });
+  const skippedItems = recommendations.filter(function (r) { return /none|skip/i.test(r.action); });
+  return { ok: true, data: {
+    current_grade: current_grade,
+    project_type: project_type,
+    actionable: actionable,
+    total: total,
+    mode: mode,
+    recommendations: recommendations,
+    diff_summary: diff_summary,
+    'new': newItems,
+    unchanged: skippedItems,
+    resolved: [],
+    moved: []
+  } };
+});
+
+const parseRedTeam = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const defenseRaw = extractField(md, 'Defense Score') || '';
+  const defense_score = intOrZero(defenseRaw);
+  const total = intOrZero(extractField(md, 'Total Scenarios') || '0');
+  const pass_count = intOrZero(extractField(md, 'Pass') || '0');
+  const fail_count = intOrZero(extractField(md, 'Fail') || '0');
+  const adaptive = /^on/i.test(String(extractField(md, 'Adaptive Mode') || ''));
+  // Per-Category Breakdown-tabell
+  const catTbl = parseTable(md, /##\s+Per-Category\s+Breakdown/i);
+  const categories = catTbl ? catTbl.rows.map(function (row) {
+    return {
+      category: row[catTbl.headers[0]] || '',
+      pass: intOrZero(row[catTbl.headers[1]] || '0'),
+      fail: intOrZero(row[catTbl.headers[2]] || '0'),
+      coverage: row[catTbl.headers[3]] || ''
+    };
+  }) : [];
+  // Failed Scenarios med severity-grupper
+  const sections = parseSections(md);
+  const failSec = sections.find(function (s) { return /failed\s+scenarios/i.test(s.heading); });
+  const scenarios = [];
+  if (failSec) {
+    const body = failSec.body;
+    const subRe = /^###\s+(.+)$/gm;
+    const heads = [];
+    let m;
+    while ((m = subRe.exec(body)) !== null) heads.push({ severity: m[1].trim(), index: m.index });
+    for (let i = 0; i < heads.length; i++) {
+      const start = heads[i].index;
+      const end = i + 1 < heads.length ? heads[i + 1].index : body.length;
+      const chunk = body.slice(start, end);
+      const tbl = parseTable(chunk);
+      if (!tbl || !tbl.rows.length) continue;
+      tbl.rows.forEach(function (row) {
+        scenarios.push({
+          id: row[tbl.headers[0]] || '',
+          severity: normalizeSeverity(heads[i].severity),
+          category: row[tbl.headers[1]] || '',
+          payload_class: row[tbl.headers[2]] || '',
+          reason: row[tbl.headers[3]] || ''
+        });
+      });
+    }
+  }
+  // Test History
+  const histTbl = parseTable(md, /##\s+Test\s+History/i);
+  const history = histTbl ? histTbl.rows.map(function (row) {
+    return {
+      run: row[histTbl.headers[0]] || '',
+      date: row[histTbl.headers[1]] || '',
+      defense_score: intOrZero(row[histTbl.headers[2]] || '0'),
+      delta: row[histTbl.headers[3]] || ''
+    };
+  }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    defense_score: defense_score,
+    total: total,
+    pass_count: pass_count,
+    fail_count: fail_count,
+    adaptive: adaptive,
+    categories: categories,
+    scenarios: scenarios,
+    history: history,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+// ============================================================
+// PHASE 3: 8 PARSERS — one per remaining produces_report command.
+// Patterns are reused from Phase 2 (parseRiskDashboard + parseFindingsTables
+// + safeOk). Matrix-risk-parsing er kopiert fra ms-ai-architect.
+// ============================================================
+const parseMcpInspect = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const invTbl = parseTable(md, /##\s+Server\s+Inventory/i);
+  const server_inventory = invTbl ? invTbl.rows.map(function (row) {
+    return {
+      server: row[invTbl.headers[0]] || '',
+      transport: row[invTbl.headers[1]] || '',
+      tools: intOrZero(row[invTbl.headers[2]] || '0'),
+      status: row[invTbl.headers[3]] || '',
+      connected: /^yes|^ja/i.test(String(row[invTbl.headers[4]] || ''))
+    };
+  }) : [];
+  const cpTbl = parseTable(md, /##\s+Codepoint\s+Reveal/i);
+  const codepoints = cpTbl ? cpTbl.rows.map(function (row) {
+    return {
+      server: row[cpTbl.headers[0]] || '',
+      tool: row[cpTbl.headers[1]] || '',
+      codepoints: row[cpTbl.headers[2]] || '',
+      risk: row[cpTbl.headers[3]] || ''
+    };
+  }) : [];
+  // Findings: merge default finding-shape med server-spesifikk meta
+  const findingsRaw = parseFindingsTables(md);
+  const findings = findingsRaw.map(function (f) {
+    // Severity-tabellene bruker «Server» som kolonne → category=Server, file=tom
+    return Object.assign({}, f, {
+      server: f.category || f.file || '',
+      file: f.file || ''
+    });
+  });
+  return { ok: true, data: Object.assign({}, dash, {
+    server_inventory: server_inventory,
+    codepoints: codepoints,
+    findings: findings,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseSupplyCheck = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const ecoTbl = parseTable(md, /##\s+Ecosystem\s+Coverage/i);
+  const ecosystems = ecoTbl ? ecoTbl.rows
+    .filter(function (row) { return !/^\s*\*\*total/i.test(row[ecoTbl.headers[0]] || ''); })
+    .map(function (row) {
+      return {
+        ecosystem: row[ecoTbl.headers[0]] || '',
+        lockfile: row[ecoTbl.headers[1]] || '',
+        packages: intOrZero(row[ecoTbl.headers[2]] || '0'),
+        osv_hits: intOrZero(row[ecoTbl.headers[3]] || '0'),
+        typosquats: intOrZero(row[ecoTbl.headers[4]] || '0')
+      };
+    }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    ecosystems: ecosystems,
+    findings: parseFindingsTables(md),
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parsePreDeploy = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const lightTbl = parseTable(md, /##\s+Traffic\s+Light\s+Categories/i);
+  const traffic_lights = lightTbl ? lightTbl.rows.map(function (row) {
+    const status = String(row[lightTbl.headers[1]] || '').toUpperCase().trim();
+    return {
+      category: row[lightTbl.headers[0]] || '',
+      status: status,
+      notes: row[lightTbl.headers[2]] || ''
+    };
+  }) : [];
+  const condSec = parseSections(md).find(function (s) { return /^conditions/i.test(s.heading); });
+  const conditions = condSec ? condSec.body.split(/\r?\n/).map(function (l) {
+    const m = /^\s*\d+\.\s+(.+)$/.exec(l);
+    return m ? m[1].replace(/^\*\*[^*]+\*\*\s*[—:-]?\s*/, '').trim() : null;
+  }).filter(Boolean) : [];
+  const apprTbl = parseTable(md, /##\s+Approvals/i);
+  const approvals = apprTbl ? apprTbl.rows.map(function (row) {
+    return {
+      role: row[apprTbl.headers[0]] || '',
+      approver: row[apprTbl.headers[1]] || '',
+      date: row[apprTbl.headers[2]] || '',
+      notes: row[apprTbl.headers[3]] || ''
+    };
+  }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    traffic_lights: traffic_lights,
+    conditions: conditions,
+    approvals: approvals,
+    findings: parseFindingsTables(md),
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseDiff = safeOk(function (md) {
+  // NB: diff har egen severity-tabell (New/Resolved/Unchanged) — bruker
+  // ikke parseRiskDashboard sin Count-kolonne.
+  const dash = parseRiskDashboard(md);
+  const current_grade = gradeFromText(extractField(md, 'Current Grade') || dash.grade || '');
+  const baseline_grade = gradeFromText(extractField(md, 'Baseline Grade') || '');
+  const baseline_date = extractField(md, 'Baseline') || '';
+  // Per-severity matrix (Severity | New | Resolved | Unchanged)
+  const sevTbl = parseTable(md, /\|\s*Severity\s*\|\s*New\s*\|\s*Resolved/i);
+  const severity_matrix = { critical: {}, high: {}, medium: {}, low: {}, info: {} };
+  if (sevTbl) {
+    sevTbl.rows.forEach(function (row) {
+      const label = String(row[sevTbl.headers[0]] || '').toLowerCase().replace(/[*\s]/g, '');
+      const key = /^crit/.test(label) ? 'critical' :
+                  /^high/.test(label) ? 'high' :
+                  /^medium/.test(label) ? 'medium' :
+                  /^low/.test(label) ? 'low' :
+                  /^info/.test(label) ? 'info' : null;
+      if (!key) return;
+      severity_matrix[key] = {
+        'new': intOrZero(row[sevTbl.headers[1]] || '0'),
+        resolved: intOrZero(row[sevTbl.headers[2]] || '0'),
+        unchanged: intOrZero(row[sevTbl.headers[3]] || '0')
+      };
+    });
+  }
+  // Per-bucket finding-tabeller
+  const newTbl = parseTable(md, /##\s+New\s*\(?\d*\)?/i);
+  const newItems = newTbl ? newTbl.rows.map(function (row) {
+    const idKey = newTbl.headers[0];
+    const sevKey = newTbl.headers.find(function (h) { return /severity/i.test(h); });
+    const catKey = newTbl.headers.find(function (h) { return /category|kategori/i.test(h); });
+    const fileKey = newTbl.headers.find(function (h) { return /file|fil/i.test(h); });
+    const descKey = newTbl.headers.find(function (h) { return /description|beskriv/i.test(h); });
+    const owaspKey = newTbl.headers.find(function (h) { return /owasp/i.test(h); });
+    return {
+      id: row[idKey] || '',
+      severity: normalizeSeverity(sevKey ? row[sevKey] : ''),
+      category: catKey ? row[catKey] : '',
+      file: fileKey ? row[fileKey] : '',
+      description: descKey ? row[descKey] : '',
+      owasp: owaspKey ? row[owaspKey] : ''
+    };
+  }) : [];
+  const resolvedTbl = parseTable(md, /##\s+Resolved\s*\(?\d*\)?/i);
+  const resolvedItems = resolvedTbl ? resolvedTbl.rows.map(function (row) {
+    const idKey = resolvedTbl.headers[0];
+    const sevKey = resolvedTbl.headers.find(function (h) { return /severity/i.test(h); });
+    const catKey = resolvedTbl.headers.find(function (h) { return /category|kategori/i.test(h); });
+    const fileKey = resolvedTbl.headers.find(function (h) { return /file|fil/i.test(h); });
+    const resKey = resolvedTbl.headers.find(function (h) { return /resolution|løsning/i.test(h); });
+    return {
+      id: row[idKey] || '',
+      severity: normalizeSeverity(sevKey ? row[sevKey] : ''),
+      category: catKey ? row[catKey] : '',
+      file: fileKey ? row[fileKey] : '',
+      resolution: resKey ? row[resKey] : ''
+    };
+  }) : [];
+  const unchangedTbl = parseTable(md, /##\s+Unchanged\s*\(?\d*\)?/i);
+  const unchangedItems = unchangedTbl ? unchangedTbl.rows.map(function (row) {
+    const idKey = unchangedTbl.headers[0];
+    const sevKey = unchangedTbl.headers.find(function (h) { return /severity/i.test(h); });
+    const catKey = unchangedTbl.headers.find(function (h) { return /category|kategori/i.test(h); });
+    const fileKey = unchangedTbl.headers.find(function (h) { return /file|fil/i.test(h); });
+    const noteKey = unchangedTbl.headers.find(function (h) { return /notes|note|merknad/i.test(h); });
+    return {
+      id: row[idKey] || '',
+      severity: normalizeSeverity(sevKey ? row[sevKey] : ''),
+      category: catKey ? row[catKey] : '',
+      file: fileKey ? row[fileKey] : '',
+      notes: noteKey ? row[noteKey] : ''
+    };
+  }) : [];
+  const movedTbl = parseTable(md, /##\s+Moved\s*\(?\d*\)?/i);
+  const movedItems = movedTbl ? movedTbl.rows.map(function (row) {
+    return {
+      id: row[movedTbl.headers[0]] || '',
+      from: row[movedTbl.headers[1]] || '',
+      to: row[movedTbl.headers[2]] || ''
+    };
+  }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    current_grade: current_grade,
+    baseline_grade: baseline_grade,
+    baseline_date: baseline_date,
+    severity_matrix: severity_matrix,
+    'new': newItems,
+    resolved: resolvedItems,
+    unchanged: unchangedItems,
+    moved: movedItems,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseWatch = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const meterTbl = parseTable(md, /##\s+Live\s+Meter/i);
+  const live_meter = {};
+  if (meterTbl) {
+    meterTbl.rows.forEach(function (row) {
+      const k = String(row[meterTbl.headers[0]] || '').replace(/\*+/g, '').trim().toLowerCase().replace(/\s+/g, '_');
+      live_meter[k] = row[meterTbl.headers[1]] || '';
+    });
+  }
+  const histTbl = parseTable(md, /##\s+Recent\s+History/i);
+  const history = histTbl ? histTbl.rows.map(function (row) {
+    return {
+      run: row[histTbl.headers[0]] || '',
+      time: row[histTbl.headers[1]] || '',
+      grade: gradeFromText(row[histTbl.headers[2]] || ''),
+      risk_score: intOrZero(row[histTbl.headers[3]] || '0'),
+      delta: row[histTbl.headers[4]] || ''
+    };
+  }) : [];
+  const notTbl = parseTable(md, /##\s+Notify\s+Events/i);
+  const notify_events = notTbl ? notTbl.rows.map(function (row) {
+    return {
+      time: row[notTbl.headers[0]] || '',
+      event: row[notTbl.headers[1]] || '',
+      channel: row[notTbl.headers[2]] || '',
+      status: row[notTbl.headers[3]] || ''
+    };
+  }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    live_meter: live_meter,
+    history: history,
+    notify_events: notify_events,
+    findings: parseFindingsTables(md),
+    recommendations: parseRecommendations(md),
+    interval: extractField(md, 'Interval') || '',
+    last_run: extractField(md, 'Last Run') || ''
+  }) };
+});
+
+const parseRegistry = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const statsTbl = parseTable(md, /##\s+Registry\s+Stats/i);
+  const stats = {};
+  if (statsTbl) {
+    statsTbl.rows.forEach(function (row) {
+      const k = String(row[statsTbl.headers[0]] || '').replace(/\*+/g, '').trim().toLowerCase().replace(/\s+/g, '_');
+      stats[k] = row[statsTbl.headers[1]] || '';
+    });
+  }
+  const sigTbl = parseTable(md, /##\s+Signature\s+Table/i);
+  const signatures = sigTbl ? sigTbl.rows.map(function (row) {
+    return {
+      skill: row[sigTbl.headers[0]] || '',
+      source: row[sigTbl.headers[1]] || '',
+      fingerprint: row[sigTbl.headers[2]] || '',
+      status: String(row[sigTbl.headers[3]] || '').toUpperCase().trim(),
+      first_seen: row[sigTbl.headers[4]] || ''
+    };
+  }) : [];
+  // Findings — bruk renderFindingsBlock men med skill+file som meta
+  const findingsRaw = parseFindingsTables(md);
+  const findings = findingsRaw.map(function (f) {
+    // Tabell-header: «Skill» som 3. kolonne maps til category i parseFindingsTables
+    return Object.assign({}, f, {
+      skill: f.category || '',
+      file: f.file || ''
+    });
+  });
+  return { ok: true, data: Object.assign({}, dash, {
+    stats: stats,
+    signatures: signatures,
+    findings: findings,
+    recommendations: parseRecommendations(md)
+  }) };
+});
+
+const parseClean = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  const sumTbl = parseTable(md, /##\s+Remediation\s+Summary/i);
+  const summary = {};
+  if (sumTbl) {
+    sumTbl.rows
+      .filter(function (row) { return !/^\s*\*\*total/i.test(row[sumTbl.headers[0]] || ''); })
+      .forEach(function (row) {
+        const k = String(row[sumTbl.headers[0]] || '').replace(/\*+/g, '').trim().toLowerCase().replace(/[\s-]/g, '_');
+        summary[k] = {
+          count: intOrZero(row[sumTbl.headers[1]] || '0'),
+          action: row[sumTbl.headers[2]] || ''
+        };
+      });
+  }
+  // Per-bucket-tabeller (Auto / Semi-auto / Manual / Suppressed)
+  const bucketParse = function (heading) {
+    const tbl = parseTable(md, new RegExp('##\\s+' + heading + '\\s*$', 'mi'));
+    if (!tbl || !tbl.rows.length) return [];
+    return tbl.rows.map(function (row) {
+      const idKey = tbl.headers[0];
+      const actKey = tbl.headers[1];
+      const descKey = tbl.headers[2];
+      return {
+        id: row[idKey] || '',
+        action: row[actKey] || '',
+        description: row[descKey] || ''
+      };
+    });
+  };
+  const buckets = {
+    auto: bucketParse('Auto'),
+    'semi-auto': bucketParse('Semi-auto'),
+    manual: bucketParse('Manual'),
+    suppressed: bucketParse('Suppressed')
+  };
+  return { ok: true, data: Object.assign({}, dash, {
+    summary: summary,
+    buckets: buckets,
+    findings: parseFindingsTables(md),
+    recommendations: parseRecommendations(md),
+    mode: extractField(md, 'Mode') || ''
+  }) };
+});
+
+const parseThreatModel = safeOk(function (md) {
+  const dash = parseRiskDashboard(md);
+  // Risikomatrise: Trussel | Sannsynlighet | Konsekvens | Score
+  const matrixTbl = parseTable(md, /##\s+Risikomatrise/i);
+  const matrix_cells = matrixTbl ? matrixTbl.rows.map(function (row) {
+    const labelKey = matrixTbl.headers[0];
+    const sannKey = matrixTbl.headers.find(function (h) { return /sannsynlig/i.test(h); }) || matrixTbl.headers[1];
+    const konsKey = matrixTbl.headers.find(function (h) { return /konsekvens/i.test(h); }) || matrixTbl.headers[2];
+    const scoreKey = matrixTbl.headers.find(function (h) { return /score/i.test(h); }) || matrixTbl.headers[3];
+    return {
+      label: row[labelKey] || '',
+      prob: intOrZero(row[sannKey] || '0'),
+      cons: intOrZero(row[konsKey] || '0'),
+      score: intOrZero(row[scoreKey] || '0')
+    };
+  }) : [];
+  // Trusler: ID | Beskrivelse | Severity | Mitigation
+  const threatsTbl = parseTable(md, /##\s+Trusler/i);
+  const threats = threatsTbl ? threatsTbl.rows.map(function (row) {
+    const idKey = threatsTbl.headers[0];
+    const descKey = threatsTbl.headers.find(function (h) { return /beskrivelse|description/i.test(h); }) || threatsTbl.headers[1];
+    const sevKey = threatsTbl.headers.find(function (h) { return /severity|alvorlighet/i.test(h); });
+    const mitKey = threatsTbl.headers.find(function (h) { return /tiltak|mitigation/i.test(h); });
+    return {
+      id: row[idKey] || '',
+      description: row[descKey] || '',
+      severity: normalizeSeverity(sevKey ? row[sevKey] : ''),
+      mitigation: mitKey ? row[mitKey] : ''
+    };
+  }) : [];
+  // STRIDE / MAESTRO Coverage
+  const strideTbl = parseTable(md, /##\s+STRIDE\s+Coverage/i);
+  const stride = strideTbl ? strideTbl.rows.map(function (row) {
+    return {
+      category: row[strideTbl.headers[0]] || '',
+      count: intOrZero(row[strideTbl.headers[1]] || '0'),
+      notes: row[strideTbl.headers[2]] || ''
+    };
+  }) : [];
+  const maestroTbl = parseTable(md, /##\s+MAESTRO\s+Coverage/i);
+  const maestro = maestroTbl ? maestroTbl.rows.map(function (row) {
+    return {
+      layer: row[maestroTbl.headers[0]] || '',
+      count: intOrZero(row[maestroTbl.headers[1]] || '0'),
+      notes: row[maestroTbl.headers[2]] || ''
+    };
+  }) : [];
+  // Mitigation Roadmap
+  const roadTbl = parseTable(md, /##\s+Mitigation\s+Roadmap/i);
+  const roadmap = roadTbl ? roadTbl.rows.map(function (row) {
+    return {
+      priority: row[roadTbl.headers[0]] || '',
+      threat_id: row[roadTbl.headers[1]] || '',
+      mitigation: row[roadTbl.headers[2]] || '',
+      owner: row[roadTbl.headers[3]] || '',
+      eta: row[roadTbl.headers[4]] || ''
+    };
+  }) : [];
+  return { ok: true, data: Object.assign({}, dash, {
+    matrix_cells: matrix_cells,
+    threats: threats,
+    stride: stride,
+    maestro: maestro,
+    roadmap: roadmap,
+    recommendations: parseRecommendations(md),
+    framework: extractField(md, 'Framework') || ''
+  }) };
+});
+
+// ============================================================
+// PARSERS routing-map (commandId → parser). 18 produces_report=true.
+// ============================================================
+const PARSERS = {
+  'scan': parseScan,
+  'deep-scan': parseDeepScan,
+  'plugin-audit': parsePluginAudit,
+  'mcp-audit': parseMcpAudit,
+  'mcp-inspect': parseMcpInspect,
+  'ide-scan': parseIdeScan,
+  'supply-check': parseSupplyCheck,
+  'posture': parsePosture,
+  'audit': parseAudit,
+  'dashboard': parseDashboard,
+  'pre-deploy': parsePreDeploy,
+  'diff': parseDiff,
+  'watch': parseWatch,
+  'registry': parseRegistry,
+  'clean': parseClean,
+  'harden': parseHarden,
+  'threat-model': parseThreatModel,
+  'red-team': parseRedTeam
+};
+
+// ============================================================
+// RENDERERS routing-map — populated inline after each renderer-fn.
+// ============================================================
+const RENDERERS = {};
+
+// ============================================================
+// RENDERER HELPERS
+// ============================================================
+function renderEmptyState(message) {
+  return '<div class="guide-panel guide-panel--info">' +
+    '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
+    '<div class="guide-panel__body">' +
+      '<p class="guide-panel__text">' + escapeHtml(message || 'No data to display.') + '</p>' +
+    '</div>' +
+  '</div>';
+}
+
+function renderFindingsBlock(findings, label) {
+  if (!findings || !findings.length) return '';
+  const sevOrder = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+  const sorted = findings.slice().sort(function (a, b) {
+    return (sevOrder[a.severity] || 9) - (sevOrder[b.severity] || 9);
+  });
+  const items = sorted.map(function (f) {
+    const sev = String(f.severity || 'info').toLowerCase();
+    // DS Tier 3 (v7.6.0 phase 5h): card--severity-{level} modifier on the outer
+    // .findings__item gir severity-tinted left-border. Beholdes ved siden av
+    // den eksisterende .findings__item-severity-dot for ARIA + visuell
+    // redundans (border-farge + dot-fyll signaliserer samme severity).
+    const sevClass = 'card--severity-' + (sev === 'info' ? 'info' : sev);
+    const meta = [
+      f.file ? f.file + (f.line ? ':' + f.line : '') : '',
+      f.category || '',
+      f.owasp || ''
+    ].filter(Boolean).join(' · ');
+    return (
+      '<div class="findings__item ' + sevClass + '" data-severity="' + escapeAttr(sev) + '">' +
+        '<div class="findings__item-severity-dot" data-severity="' + escapeAttr(sev) + '"></div>' +
+        '<div>' +
+          '<div class="findings__item-id">' + escapeHtml(f.id || '—') + '</div>' +
+          '<div class="findings__item-title">' + escapeHtml(f.description || f.title || '') + '</div>' +
+          (meta ? '<div class="findings__item-meta">' + escapeHtml(meta) + '</div>' : '') +
+        '</div>' +
+      '</div>'
+    );
+  }).join('');
+  // DS .findings outer-class er et 2-kolonners grid (360px list + 1fr detail-panel) —
+  // the playground uses only the list part, so we wrap in .findings__list (no outer
+  // .findings) to avoid the header landing in the left 360px column. v7.6.1 fix.
+  return (
+    '<section class="report-meta">' +
+      '<h4>' + escapeHtml(label || 'Funn') + '</h4>' +
+      '<div class="findings__list" style="max-height: none;">' +
+        '<div class="findings__group">' +
+          '<div class="findings__group-header">' + escapeHtml(label || 'Funn') + ' (' + findings.length + ')</div>' +
+          '<div class="findings__items">' + items + '</div>' +
+        '</div>' +
+      '</div>' +
+    '</section>'
+  );
+}
+
+/**
+ * Render recommendation-card med ordnet liste av anbefalinger.
+ * Tredje argument (severity) styrer DS-tier3 `data-severity`-attributtet:
+ * 'critical' / 'high' / 'medium' / 'low' / 'positive'. Default 'low'
+ * (info-tonet). Mapping: severity → border-left-farge + label-bakgrunn.
+ */
+function renderRecommendationsList(recs, label, severity) {
+  if (!recs || !recs.length) return '';
+  const sev = severity || 'low';
+  const items = recs.map(function (r) { return '<li>' + escapeHtml(r) + '</li>'; }).join('');
+  return (
+    '<section class="recommendation-card" data-severity="' + escapeAttr(sev) + '">' +
+      '<span class="recommendation-card__label">' + escapeHtml(label || 'Anbefalinger') + '</span>' +
+      '<ol class="recommendation-card__body">' + items + '</ol>' +
+    '</section>'
+  );
+}
+
+/**
+ * Map severity-string til DS-tier3 recommendation-card data-severity.
+ * Accepts both severity conventions (critical/high/medium/low/info)
+ * og action-types (CREATE/APPEND/MERGE/SKIP/NONE).
+ */
+function mapSeverityToCardLevel(input) {
+  const s = String(input || '').toLowerCase().trim();
+  if (!s) return 'low';
+  if (s === 'critical' || s === 'crit') return 'critical';
+  if (s === 'high') return 'high';
+  if (s === 'medium' || s === 'med') return 'medium';
+  if (s === 'low') return 'low';
+  if (s === 'info') return 'low';
+  if (s === 'positive' || s === 'success' || s === 'ok' || s === 'pass') return 'positive';
+  // Action-types fra renderHarden
+  if (s === 'create') return 'positive';
+  if (s === 'append') return 'medium';
+  if (s === 'merge') return 'low';
+  if (s === 'skip' || s === 'none') return 'low';
+  return 'low';
+}
+
+function renderRiskMeter(score, band) {
+  const s = Math.max(0, Math.min(100, Number(score) || 0));
+  const bands = [
+    { label: 'Low', from: 0, to: 14 },
+    { label: 'Medium', from: 15, to: 39 },
+    { label: 'High', from: 40, to: 64 },
+    { label: 'Critical', from: 65, to: 84 },
+    { label: 'Extreme', from: 85, to: 100 }
+  ];
+  const labels = bands.map(function (b) {
+    const w = (b.to - b.from + 1);
+    return '<span class="risk-meter__band-label" data-band="' + escapeAttr(b.label.toLowerCase()) + '" style="flex: ' + w + '; text-align: center; min-width: 0;">' + escapeHtml(b.label) + '</span>';
+  }).join('');
+  return (
+    '<div class="risk-meter">' +
+      '<div class="risk-meter__readout"><span class="risk-meter__score">' + s + '</span><span> / 100 · ' + escapeHtml(band || '') + '</span></div>' +
+      '<div class="risk-meter__track"><div class="risk-meter__pointer" style="left: ' + s + '%"></div></div>' +
+      '<div class="risk-meter__bands">' + labels + '</div>' +
+      '<div class="risk-meter__scale"><span>0</span><span>50</span><span>100</span></div>' +
+    '</div>'
+  );
+}
+
+function renderSmallMultiples(items) {
+  // items: [{ name, score, max, grade?, status? }]
+  if (!items || !items.length) return '';
+  const cards = items.map(function (it) {
+    const score = Number(it.score) || 0;
+    const max = Number(it.max) || 5;
+    const pct = Math.max(0, Math.min(100, (score / max) * 100));
+    const grade = it.grade || '';
+    const gradeAttr = grade ? ' data-grade="' + escapeAttr(grade) + '"' : '';
+    return (
+      '<div class="sm-card">' +
+        '<div class="sm-card__header">' +
+          '<span class="sm-card__name">' + escapeHtml(it.name || '') + '</span>' +
+          (grade ? '<span class="sm-card__grade"' + gradeAttr + '>' + escapeHtml(grade) + '</span>' : '') +
+        '</div>' +
+        '<div class="sm-card__bar"><div class="sm-card__bar-fill" style="width: ' + pct.toFixed(0) + '%"></div></div>' +
+        '<span class="sm-card__status">' + escapeHtml(it.status || (score + ' / ' + max)) + '</span>' +
+      '</div>'
+    );
+  }).join('');
+  return '<div class="small-multiples">' + cards + '</div>';
+}
+
+function renderRadarSvg(axes) {
+  // axes: [{ name, score (0-5) }]
+  if (!axes || axes.length < 3) return '';
+  // v7.6.1 fix: widen the SVG from 280 to 380 and r from 105 to 125 to give
+  // labels more room. Use text-anchor based on horizontal position to keep
+  // bottom labels from overlapping each other at 6+ axes.
+  const size = 380, cx = size / 2, cy = size / 2, r = 125;
+  const n = axes.length;
+  const axisRows = axes.map(function (a) {
+    return '<div class="radar__score-row"><span>' + escapeHtml(a.name) + '</span><strong>' + escapeHtml(String(a.score || 0)) + '/5</strong></div>';
+  }).join('');
+  const angle = function (i) { return -Math.PI / 2 + (i * 2 * Math.PI / n); };
+  const labelHtml = axes.map(function (a, i) {
+    const ang = angle(i);
+    const lx = cx + Math.cos(ang) * (r + 28);
+    const ly = cy + Math.sin(ang) * (r + 28);
+    // Pick text-anchor based on position: left/right anchors flip.
+    const dx = Math.cos(ang);
+    const anchor = Math.abs(dx) < 0.2 ? 'middle' : (dx > 0 ? 'start' : 'end');
+    return '<text class="radar__label" x="' + lx.toFixed(1) + '" y="' + ly.toFixed(1) + '" text-anchor="' + anchor + '" dominant-baseline="middle">' + escapeHtml(a.name) + '</text>';
+  }).join('');
+  const grids = [1, 2, 3, 4, 5].map(function (k) {
+    const rk = (r * k) / 5;
+    const pts = axes.map(function (a, i) {
+      const ang = angle(i);
+      return (cx + Math.cos(ang) * rk).toFixed(1) + ',' + (cy + Math.sin(ang) * rk).toFixed(1);
+    }).join(' ');
+    return '<polygon class="radar__grid-line" points="' + pts + '" fill="none" stroke-opacity="' + (0.15 + k * 0.05) + '"/>';
+  }).join('');
+  const pts = axes.map(function (a, i) {
+    const ang = angle(i);
+    const sc = Math.max(0, Math.min(5, Number(a.score) || 0));
+    const rs = (r * sc) / 5;
+    return (cx + Math.cos(ang) * rs).toFixed(1) + ',' + (cy + Math.sin(ang) * rs).toFixed(1);
+  }).join(' ');
+  return (
+    '<div class="radar">' +
+      '<div class="radar__chart">' +
+        '<svg class="radar__svg" viewBox="0 0 ' + size + ' ' + size + '" width="100%" height="' + size + '">' +
+          grids + labelHtml +
+          '<polygon class="radar__series" points="' + pts + '" fill-opacity="0.25" stroke-width="2"/>' +
+        '</svg>' +
+      '</div>' +
+      '<div class="radar__scores">' + axisRows + '</div>' +
+    '</div>'
+  );
+}
+
+// ============================================================
+// TIER 3 SPESIALKOMPONENTER — DS-helpers (v7.6.0 fase 5a-d).
+// ============================================================
+
+/**
+ * Render tfa-flow + tfa-leg + tfa-arrow for et lethal trifecta-funn.
+ * Used on scan + deep-scan reports when findings contain
+ * en trifecta-pattern (f.eks. SCN-002 "Lethal trifecta: [Bash, Read, WebFetch]").
+ * Synthesiserer 3-leddet kjede: untrusted-input → sensitive-access → exfil-sink.
+ */
+function renderToxicFlow(findings) {
+  if (!findings || !findings.length) return '';
+  const trifectaFinding = findings.find(function (f) {
+    const desc = String(f.description || '');
+    const cat = String(f.category || '');
+    const owasp = String(f.owasp || '');
+    return /trifecta/i.test(desc) || /trifecta/i.test(cat) ||
+           /excessive\s*agency/i.test(cat) ||
+           /ASI01/i.test(owasp);
+  });
+  if (!trifectaFinding) return '';
+  const sev = String(trifectaFinding.severity || 'critical').toLowerCase();
+  const verdictMap = { critical: 'BLOCK', high: 'BLOCK', medium: 'WARN', low: 'ALLOW' };
+  const verdict = verdictMap[sev] || 'BLOCK';
+  const fileLine = trifectaFinding.file
+    ? trifectaFinding.file + (trifectaFinding.line ? ':' + trifectaFinding.line : '')
+    : 'agent definition';
+  // Default trifecta-bensin: WebFetch + Read + Bash. Override hvis description nevner andre.
+  const desc = String(trifectaFinding.description || '');
+  const m = desc.match(/\[([^\]]+)\]/);
+  let tools = ['WebFetch', 'Read', 'Bash'];
+  if (m) {
+    const parsed = m[1].split(',').map(function (s) { return s.trim(); }).filter(Boolean);
+    if (parsed.length === 3) tools = parsed;
+  }
+  const legs = [
+    { label: 'Untrusted input', name: tools[0], source: fileLine, mit: 'unmitigated', mitText: 'Ingen pre-prompt-inject-scan eller post-mcp-verify guard' },
+    { label: 'Sensitive access', name: tools[1], source: '.env / credentials / git-history', mit: 'unmitigated', mitText: 'No pre-write-pathguard on path' },
+    { label: 'Exfil sink', name: tools[2], source: 'curl / fetch til ekstern host', mit: 'unmitigated', mitText: 'Ingen post-session-guard trifecta-deteksjon' }
+  ];
+  const legHtml = function (leg) {
+    return (
+      '<button class="tfa-leg" type="button" data-severity="' + escapeAttr(sev) + '" aria-label="' + escapeAttr(leg.label + ': ' + leg.name) + '">' +
+        '<span class="tfa-leg__label">' + escapeHtml(leg.label) + '</span>' +
+        '<span class="tfa-leg__name">' + escapeHtml(leg.name) + '</span>' +
+        '<span class="tfa-leg__source">' + escapeHtml(leg.source) + '</span>' +
+        '<span class="tfa-leg__status" data-mit="' + escapeAttr(leg.mit) + '">' + escapeHtml(leg.mitText) + '</span>' +
+      '</button>'
+    );
+  };
+  const arrowHtml = '<div class="tfa-arrow" data-severity="' + escapeAttr(sev) + '" aria-hidden="true"><div class="tfa-arrow__line"></div></div>';
+  return (
+    '<section class="report-meta">' +
+      '<h4>Toxic flow — Lethal trifecta-kjede</h4>' +
+      '<p style="font-size: var(--font-size-sm); opacity: 0.78; margin: 0 0 var(--space-3);">Den fulle 3-leddete kjeden som overskrider Rule of Two. Hver leg er umitigert — ingen hook bryter kjeden.</p>' +
+      '<div class="tfa-flow" role="group" aria-label="Lethal trifecta-kjede">' +
+        '<div class="tfa-flow__verdict" data-verdict="' + escapeAttr(verdict) + '">' + escapeHtml(verdict) + '</div>' +
+        legHtml(legs[0]) + arrowHtml + legHtml(legs[1]) + arrowHtml + legHtml(legs[2]) +
+      '</div>' +
+    '</section>'
+  );
+}
+
+/**
+ * Render mat-ladder + mat-step for posture-modenhet.
+ * Mapper antall PASS-kategorier til 5 modenhetstrinn (Initial → Optimized).
+ */
+function renderMatLadder(categories, postureScore, postureApplicable) {
+  if (!categories || !categories.length) return '';
+  const passCount = postureScore != null
+    ? Number(postureScore)
+    : categories.filter(function (c) { return c.status === 'PASS'; }).length;
+  const total = postureApplicable != null
+    ? Number(postureApplicable)
+    : categories.filter(function (c) { return c.status !== 'N-A' && c.status !== 'N/A'; }).length;
+  const pct = total > 0 ? Math.round((passCount / total) * 100) : 0;
+  // 5 maturity steps — thresholds based on % PASS
+  const steps = [
+    { num: 1, name: 'Initial', threshold: 0,  desc: 'Bare bones — no hooks or minimal posture.' },
+    { num: 2, name: 'Aware', threshold: 25, desc: 'Posture scanning is active and the risks are known.' },
+    { num: 3, name: 'Defensive', threshold: 50, desc: 'Hooks engaged on critical surfaces (PreToolUse, UserPromptSubmit).' },
+    { num: 4, name: 'Mature', threshold: 75, desc: 'Most of the 16 categories covered; trifecta detection on.' },
+    { num: 5, name: 'Optimized', threshold: 95, desc: 'Full coverage; A-grade on posture; active monitoring.' }
+  ];
+  const currentIdx = steps.reduce(function (acc, s, i) {
+    return pct >= s.threshold ? i : acc;
+  }, 0);
+  const stepHtml = steps.map(function (s, i) {
+    const state = i < currentIdx ? 'completed' : i === currentIdx ? 'current' : 'future';
+    const icon = state === 'completed' ? '✓' : String(s.num);
+    const pillCls = state === 'current' ? ' mat-step__pill mat-step__pill--current' :
+                    state === 'completed' ? ' mat-step__pill mat-step__pill--complete' : '';
+    const pillText = state === 'current' ? 'You are here' : state === 'completed' ? 'Reached' : '';
+    const pill = pillText ? '<span class="' + pillCls.trim() + '">' + escapeHtml(pillText) + '</span>' : '';
+    const progress = state === 'current' ? (
+      '<div class="mat-step__progress">' +
+        '<div class="mat-step__progress-bar"><div class="mat-step__progress-fill" style="width: ' + pct + '%"></div></div>' +
+        '<span>' + passCount + ' / ' + total + ' kategorier</span>' +
+      '</div>'
+    ) : '';
+    return (
+      '<div class="mat-step" data-state="' + escapeAttr(state) + '">' +
+        '<div class="mat-step__icon" aria-hidden="true">' + escapeHtml(icon) + '</div>' +
+        '<div>' +
+          '<div class="mat-step__name">' + escapeHtml(s.name) + pill + '</div>' +
+          '<div class="mat-step__desc">' + escapeHtml(s.desc) + '</div>' +
+          progress +
+        '</div>' +
+      '</div>'
+    );
+  }).join('');
+  return (
+    '<section class="report-meta">' +
+      '<h4>Modenhetsstige — posture-progresjon</h4>' +
+      '<p style="font-size: var(--font-size-sm); opacity: 0.78; margin: 0 0 var(--space-3);">A posture score of ' + passCount + ' of ' + total + ' categories (' + pct + '%) places this project at step ' + (currentIdx + 1) + ' of 5.</p>' +
+      '<div class="mat-ladder" role="list" aria-label="Posture-modenhet over 5 trinn">' + stepHtml + '</div>' +
+    '</section>'
+  );
+}
+
+/**
+ * Render suppressed-group fra v7.1.1 narrative-audit.
+ * Parser executive_summary-tekst for "Suppressed signals: N (reason1: count examples, ...)"
+ * eller bruker data.narrative_audit.suppressed_findings hvis strukturert.
+ */
+function renderSuppressedGroup(data) {
+  if (!data) return '';
+  const audit = data.narrative_audit || {};
+  const sf = audit.suppressed_findings || {};
+  let groups = [];
+  let totalCount = 0;
+  if (sf.by_category && typeof sf.by_category === 'object') {
+    totalCount = Number(sf.count || 0);
+    groups = Object.keys(sf.by_category).map(function (k) {
+      return { reason: k, count: Number(sf.by_category[k]) || 0, example: '' };
+    });
+  } else {
+    // Fall back: parse fra executive_summary
+    const summary = String(data.executive_summary || '');
+    const m = summary.match(/Suppressed signals:\s*\*?\*?\s*(\d+)\s*\(([^)]+)\)/i);
+    if (!m) return '';
+    totalCount = Number(m[1]) || 0;
+    groups = m[2].split(',').map(function (part) {
+      const seg = part.trim();
+      const colonIdx = seg.indexOf(':');
+      if (colonIdx < 0) return { reason: seg, count: 1, example: '' };
+      const reason = seg.slice(0, colonIdx).trim();
+      const rest = seg.slice(colonIdx + 1).trim();
+      const cm = rest.match(/^(\d+)\s+(.*)$/);
+      if (cm) {
+        return { reason: reason, count: Number(cm[1]) || 1, example: cm[2].trim() };
+      }
+      return { reason: reason, count: 1, example: rest };
+    });
+  }
+  if (!groups.length) return '';
+  const groupsHtml = groups.map(function (g) {
+    const example = g.example ? (
+      '<div class="suppressed-group__examples">' +
+        '<span class="suppressed-group__example">' + escapeHtml(g.example) + '</span>' +
+      '</div>'
+    ) : '';
+    return (
+      '<div class="suppressed-group">' +
+        '<div class="suppressed-group__head">' +
+          '<span class="suppressed-group__reason">' + escapeHtml(g.reason) + '</span>' +
+          '<span class="suppressed-group__count">' + g.count + ' ' + (g.count === 1 ? 'forekomst' : 'forekomster') + '</span>' +
+        '</div>' +
+        example +
+      '</div>'
+    );
+  }).join('');
+  return (
+    '<section class="report-meta">' +
+      '<h4>Narrative audit — supprimerte signaler</h4>' +
+      '<p class="suppressed-group__desc">' + totalCount + ' signals were suppressed pre-report (v7.1.1 narrative_audit). These are not false-positives walked back in prose — they were auto-suppressed before classification.</p>' +
+      groupsHtml +
+    '</section>'
+  );
+}
+
+/**
+ * Render codepoint-reveal + cp-tag for Unicode-steganografi (UNI-funn).
+ * Used on mcp-inspect reports — swaps a plain table for a side-by-side
+ * "synlig vs. decoded codepoint"-visning per tool.
+ */
+function renderCodepointReveal(codepoints) {
+  if (!codepoints || !codepoints.length) return '';
+  const tagFor = function (code) {
+    // U+200B/200C/200D/FEFF = zero-width
+    if (/U\+(200[B-D]|FEFF|2060|180E)/i.test(code)) return 'cp-zw';
+    // U+202E/202D/2066-2069 = bidi/RTL
+    if (/U\+(202[ADE]|206[6-9])/i.test(code)) return 'cp-bidi';
+    // Other = generic cp-tag (warning class)
+    return 'cp-tag';
+  };
+  const blocks = codepoints.map(function (c) {
+    const risk = String(c.risk || '').trim();
+    const sev = /high/i.test(risk) ? 'critical' : /medium/i.test(risk) ? 'medium' : 'low';
+    const isClean = /clean|—|^-$/i.test(c.codepoints || '') || risk === '—' || risk === '-';
+    const cps = String(c.codepoints || '');
+    // Highlight U+XXXX patterns
+    const highlighted = cps.replace(/U\+[0-9A-Fa-f]{4,6}/g, function (m) {
+      return '<span class="' + tagFor(m) + '">' + m + '</span>';
+    });
+    const headRisk = isClean
+      ? '<span style="font-size: 11px; color: var(--color-state-success);">Ren — ingen non-ASCII</span>'
+      : '<span style="font-size: 11px; font-weight: var(--font-weight-semibold); color: var(--color-severity-' + sev + ');">' + escapeHtml(risk) + ' risk</span>';
+    const visibleCol = isClean
+      ? '<div class="codepoint-reveal__source">' + escapeHtml(c.tool || '—') + '</div>'
+      : '<div class="codepoint-reveal__source">' + escapeHtml(c.tool || '—') + ' <span style="opacity: 0.6;">(rendert visuelt)</span></div>';
+    const decodedCol = isClean
+      ? '<div class="codepoint-reveal__decoded">(ingen suspekte codepoints)</div>'
+      : '<div class="codepoint-reveal__decoded">' + highlighted + '</div>';
+    return (
+      '<div class="codepoint-reveal">' +
+        '<div class="codepoint-reveal__head">' +
+          '<strong>' + escapeHtml(c.server || '—') + ' · <code>' + escapeHtml(c.tool || '—') + '</code></strong>' +
+          headRisk +
+        '</div>' +
+        '<div class="codepoint-reveal__body">' +
+          '<div class="codepoint-reveal__col">' +
+            '<span class="codepoint-reveal__col-label">Synlig (rendret tekst)</span>' +
+            visibleCol +
+          '</div>' +
+          '<div class="codepoint-reveal__col">' +
+            '<span class="codepoint-reveal__col-label">Decoded (codepoints)</span>' +
+            decodedCol +
+          '</div>' +
+        '</div>' +
+      '</div>'
+    );
+  }).join('');
+  return (
+    '<section class="report-meta">' +
+      '<h4>Codepoint-reveal — Unicode-steganografi</h4>' +
+      '<p style="font-size: var(--font-size-sm); opacity: 0.78; margin: 0 0 var(--space-3);">Tools med non-ASCII codepoints i deskripsjoner — zero-width / homoglyph / bidi-override. Side-ved-side: synlig form vs. dekoded codepoints.</p>' +
+      '<div style="display: flex; flex-direction: column; gap: var(--space-3);">' + blocks + '</div>' +
+    '</section>'
+  );
+}
+
+/**
+ * Render top-risks + top-risk for rangert top-funn-listing.
+ * Takes the N (default 5) highest-severity findings and
+ * viser dem som ordnet liste. Bruker `.top-risks` / `.top-risk` med
+ * `data-severity` for severity-tinted left-border per DS Tier 3-supplement.
+ * Returnerer tom streng hvis ingen findings (eller kun info-funn).
+ */
+function renderTopRisks(findings, n) {
+  if (!findings || !findings.length) return '';
+  const sevOrder = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+  const max = typeof n === 'number' && n > 0 ? n : 5;
+  // Filtrer ut info-only — top-risks viser reelle risker, ikke observability-noise
+  const filtered = findings.filter(function (f) {
+    return (f.severity || 'info').toLowerCase() !== 'info';
+  });
+  if (!filtered.length) return '';
+  const sorted = filtered.slice().sort(function (a, b) {
+    return (sevOrder[a.severity] || 9) - (sevOrder[b.severity] || 9);
+  });
+  const top = sorted.slice(0, max);
+  const items = top.map(function (f, idx) {
+    const sev = String(f.severity || 'info').toLowerCase();
+    const sevLabel = sev.toUpperCase();
+    const meta = [
+      f.file ? f.file + (f.line ? ':' + f.line : '') : '',
+      f.id || '',
+      f.owasp || ''
+    ].filter(Boolean).join(' · ');
+    const title = f.description || f.title || '—';
+    return (
+      '<li class="top-risk" data-severity="' + escapeAttr(sev) + '">' +
+        '<div class="top-risk__rank">' + (idx + 1) + '</div>' +
+        '<div class="top-risk__desc">' +
+          '<div>' + escapeHtml(title) + '</div>' +
+          (meta ? '<div style="font-family: var(--font-family-mono); font-size: 11px; color: var(--color-text-tertiary); margin-top: 2px;">' + escapeHtml(meta) + '</div>' : '') +
+        '</div>' +
+        '<span class="top-risk__score" data-severity="' + escapeAttr(sev) + '">' + escapeHtml(sevLabel) + '</span>' +
+      '</li>'
+    );
+  }).join('');
+  return (
+    '<section class="report-meta">' +
+      '<h4 class="top-risks__heading">Top ' + top.length + ' risks</h4>' +
+      '<ol class="top-risks">' + items + '</ol>' +
+    '</section>'
+  );
+}
+
+// ============================================================
+// 10 RENDERERS — one per high-priority command.
+// ============================================================
+function renderScan(data, slot) {
+  const meterHtml = renderRiskMeter(data.risk_score, data.riskBand);
+  const suppressedHtml = renderSuppressedGroup(data);
+  const toxicHtml = renderToxicFlow(data.findings || []);
+  const owaspHtml = (data.owasp && data.owasp.length) ? (
+    '<section class="report-meta"><h4>OWASP-kategorier</h4>' +
+      '<table class="report-table"><thead><tr><th>Kategori</th><th>Funn</th><th>Maks severity</th><th>Skannere</th></tr></thead><tbody>' +
+      data.owasp.map(function (o) {
+        return '<tr><td>' + escapeHtml(o.category) + '</td><td>' + o.findings + '</td><td>' + escapeHtml(o.max_severity) + '</td><td>' + escapeHtml(o.scanners) + '</td></tr>';
+      }).join('') +
+      '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const supplyHtml = (data.supply_chain && data.supply_chain.length) ? (
+    '<section class="report-meta"><h4>Supply chain</h4>' +
+      '<table class="report-table"><thead><tr><th>Komponent</th><th>Type</th><th>Kilde</th><th>Trust</th><th>Notater</th></tr></thead><tbody>' +
+      data.supply_chain.map(function (s) {
+        return '<tr><td>' + escapeHtml(s.component) + '</td><td>' + escapeHtml(s.type) + '</td><td>' + escapeHtml(s.source) + '</td><td>' + escapeHtml(s.trust) + '</td><td>' + escapeHtml(s.notes) + '</td></tr>';
+      }).join('') +
+      '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const topRisksHtml = renderTopRisks(data.findings || [], 5);
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = meterHtml + suppressedHtml + toxicHtml + topRisksHtml + owaspHtml + supplyHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'SKANNING',
+    title: data.title || 'Security Scan',
+    lede: data.lede || (data.executive_summary ? data.executive_summary.split('\n')[0].slice(0, 220) : 'Skann av skills, MCP-konfig, kataloger eller GitHub-URL.'),
+    verdict: data.verdict || inferVerdict(data, 'risk-score-meter'),
+    keyStats: data.keyStats || inferKeyStats(data, 'risk-score-meter')
+  }, body);
+}
+RENDERERS.renderScan = renderScan;
+
+function renderDeepScan(data, slot) {
+  // Per-scanner small-multiples
+  const sm = (data.scanners || []).map(function (s) {
+    const okStatus = /ok/i.test(s.status || '') ? 'ok' : (s.status || 'unknown');
+    const grade = (s.findings === 0) ? 'A' : (s.findings <= 3) ? 'B' : (s.findings <= 8) ? 'C' : (s.findings <= 15) ? 'D' : 'F';
+    return {
+      name: s.tag + ' · ' + s.name,
+      score: Math.max(0, 5 - Math.min(5, Math.floor((s.findings || 0) / 3))),
+      max: 5,
+      grade: grade,
+      status: s.findings + ' funn · ' + (s.duration_ms || 0) + 'ms · ' + okStatus
+    };
+  });
+  const smHtml = renderSmallMultiples(sm);
+  // Scanner Risk Matrix-tabell
+  const matrixRows = (data.scanner_matrix || []).map(function (r) {
+    return '<tr><td>' + escapeHtml(r.scanner) + '</td>' +
+      '<td>' + r.critical + '</td>' +
+      '<td>' + r.high + '</td>' +
+      '<td>' + r.medium + '</td>' +
+      '<td>' + r.low + '</td>' +
+      '<td>' + r.info + '</td></tr>';
+  }).join('');
+  const matrixHtml = matrixRows ? (
+    '<section class="report-meta"><h4>Scanner Risk Matrix</h4>' +
+      '<table class="report-table"><thead><tr><th>Scanner</th><th>CRIT</th><th>HIGH</th><th>MED</th><th>LOW</th><th>INFO</th></tr></thead><tbody>' +
+      matrixRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const meterHtml = (data.risk_score != null) ? renderRiskMeter(data.risk_score, data.riskBand) : '';
+  const topRisksHtml = renderTopRisks(data.findings || [], 5);
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Findings (utvalg)');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const suppressedHtml = renderSuppressedGroup(data);
+  const toxicHtml = renderToxicFlow(data.findings || []);
+  const body = meterHtml + suppressedHtml + toxicHtml + smHtml + matrixHtml + topRisksHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'DEEP-SCAN',
+    title: data.title || 'Deterministisk deep-scan',
+    lede: data.lede || '10 deterministiske Node.js-scannere, ingen LLM-invokasjon.',
+    verdict: data.verdict || inferVerdict(data, 'findings-grade'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings-grade')
+  }, body);
+}
+RENDERERS.renderDeepScan = renderDeepScan;
+
+function renderPluginAudit(data, slot) {
+  const meta = data.plugin_metadata || {};
+  const metaRows = Object.keys(meta).map(function (k) {
+    return '<tr><td>' + escapeHtml(k.replace(/_/g, ' ')) + '</td><td>' + escapeHtml(meta[k]) + '</td></tr>';
+  }).join('');
+  const metaHtml = metaRows ? '<section class="report-meta"><h4>Plugin-metadata</h4><table class="report-table"><tbody>' + metaRows + '</tbody></table></section>' : '';
+  const compHtml = (data.components && data.components.length) ? (
+    '<section class="report-meta"><h4>Komponenter</h4>' +
+      '<table class="report-table"><thead><tr><th>Komponent</th><th>Antall</th><th>Notater</th></tr></thead><tbody>' +
+      data.components.map(function (c) {
+        return '<tr><td>' + escapeHtml(c.component) + '</td><td>' + c.count + '</td><td>' + escapeHtml(c.notes) + '</td></tr>';
+      }).join('') +
+      '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const permHtml = (data.permissions && data.permissions.length) ? (
+    '<section class="report-meta"><h4>Permission-matrise</h4>' +
+      '<table class="report-table"><thead><tr><th>Tool</th><th>Required by</th><th>Justified</th></tr></thead><tbody>' +
+      data.permissions.map(function (p) {
+        const isYes = /^yes|^ja/i.test(p.justified);
+        const isNo = /^no$|^nei/i.test(p.justified);
+        const cls = isYes ? 'low' : (isNo ? 'critical' : 'medium');
+        return '<tr><td>' + escapeHtml(p.tool) + '</td><td>' + escapeHtml(p.required_by) + '</td><td><span class="key-stat__value" style="color: var(--color-' + cls + ')">' + escapeHtml(p.justified) + '</span></td></tr>';
+      }).join('') +
+      '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const trustSev = (function () {
+    const t = String(data.trust_verdict_text || '').toLowerCase();
+    if (/block|fail|critical|do\s*not\s*install/i.test(t)) return 'critical';
+    if (/warn|caution|review|conditional/i.test(t)) return 'high';
+    if (/allow|trust|verified|pass/i.test(t)) return 'positive';
+    return 'medium';
+  })();
+  const trustHtml = data.trust_verdict_text ? (
+    '<section class="recommendation-card" data-severity="' + escapeAttr(trustSev) + '">' +
+      '<span class="recommendation-card__label">Trust-verdict</span>' +
+      '<p class="recommendation-card__body">' + escapeHtml(data.trust_verdict_text).replace(/\n/g, '<br>') + '</p>' +
+    '</section>'
+  ) : '';
+  const topRisksHtml = renderTopRisks(data.findings || [], 5);
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = renderRiskMeter(data.risk_score, data.riskBand) + metaHtml + compHtml + permHtml + trustHtml + topRisksHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'PLUGIN-AUDIT',
+    title: data.title || 'Plugin trust-vurdering',
+    lede: data.lede || 'Trust verdict based on maintainer, license, permissions, and MCP descriptions.',
+    verdict: data.verdict || inferVerdict(data, 'risk-score-meter'),
+    keyStats: data.keyStats || inferKeyStats(data, 'risk-score-meter')
+  }, body);
+}
+RENDERERS.renderPluginAudit = renderPluginAudit;
+
+function renderMcpAudit(data, slot) {
+  const landRows = (data.mcp_servers || []).map(function (s) {
+    return '<tr>' +
+      '<td>' + escapeHtml(s.server) + '</td>' +
+      '<td>' + escapeHtml(s.type) + '</td>' +
+      '<td>' + escapeHtml(s.trust) + '</td>' +
+      '<td>' + s.tools + '</td>' +
+      '<td>' + (s.active ? '<span class="key-stat__value" style="color: var(--color-low)">aktiv</span>' : '<span class="key-stat__value" style="color: var(--color-medium)">dormant</span>') + '</td>' +
+    '</tr>';
+  }).join('');
+  const landHtml = landRows ? (
+    '<section class="report-meta"><h4>MCP-landskap</h4>' +
+      '<table class="report-table"><thead><tr><th>Server</th><th>Type</th><th>Trust</th><th>Tools</th><th>Status</th></tr></thead><tbody>' + landRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  // Per-server som critique-cards
+  const psHtml = (data.per_server && data.per_server.length) ? (
+    '<div class="critique-cards">' + data.per_server.map(function (p) {
+      const sev = /(verdict:.*BLOCK|verdict:.*FAIL|critical)/i.test(p.body) ? 'critical' :
+                  /(verdict:.*WARNING|warn|medium|drift)/i.test(p.body) ? 'medium' :
+                  'low';
+      const lines = p.body.split(/\r?\n/).slice(0, 6).join(' ');
+      return '<div class="critique-card" data-severity="' + escapeAttr(sev) + '">' +
+        '<div class="critique-card__header">' +
+          '<div class="critique-card__title">' + escapeHtml(p.name) + '</div>' +
+          (p.note ? '<div class="critique-card__meta"><span class="critique-card__id">' + escapeHtml(p.note) + '</span></div>' : '') +
+        '</div>' +
+        '<div class="critique-card__recommendation">' + escapeHtml(lines.slice(0, 360)) + (lines.length > 360 ? '…' : '') + '</div>' +
+      '</div>';
+    }).join('') + '</div>'
+  ) : '';
+  // Keep / Review / Remove kanban
+  const buckets = data.buckets || { keep: [], review: [], remove: [] };
+  const cardFor = function (bucket, label) {
+    const items = buckets[bucket] || [];
+    const cards = items.length ? items.map(function (it) {
+      return '<div class="kanban-card">' +
+        '<div class="kanban-card__name">' + escapeHtml(it.server) + '</div>' +
+        (it.reason ? '<div class="kanban-card__meta">' + escapeHtml(it.reason) + '</div>' : '') +
+      '</div>';
+    }).join('') : '<div class="kanban-col__empty">Ingen</div>';
+    return '<div class="kanban-col" data-bucket="' + escapeAttr(bucket) + '">' +
+      '<div class="kanban-col__head">' +
+        '<span class="kanban-col__title">' + escapeHtml(label) + '</span>' +
+        '<span class="kanban-col__count">' + items.length + '</span>' +
+      '</div>' + cards + '</div>';
+  };
+  const kanbanHtml = '<div class="kanban-board">' +
+    cardFor('keep', 'Keep') +
+    cardFor('review', 'Review') +
+    cardFor('remove', 'Remove') +
+  '</div>';
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'MCP-funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = landHtml + psHtml + kanbanHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'MCP-AUDIT',
+    title: data.title || 'MCP-konfig audit',
+    lede: data.lede || 'Permissions, trust, and description drift across installed MCP servers.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderMcpAudit = renderMcpAudit;
+
+function renderIdeScan(data, slot) {
+  const covRows = (data.coverage || []).map(function (c) {
+    return '<tr><td>' + escapeHtml(c.ide) + '</td><td>' + c.extensions + '</td><td>' + c.findings + '</td></tr>';
+  }).join('');
+  const covHtml = covRows ? (
+    '<section class="report-meta"><h4>Scan-dekning</h4>' +
+      '<table class="report-table"><thead><tr><th>IDE</th><th>Extensions</th><th>Funn</th></tr></thead><tbody>' + covRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  // Findings — bruk renderFindingsBlock men med extension+ide som meta
+  const fs = (data.findings || []).map(function (f) {
+    return Object.assign({}, f, {
+      file: f.extension || f.file || '',
+      category: f.ide || ''
+    });
+  });
+  const findingsHtml = renderFindingsBlock(fs, 'IDE-extension funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = covHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'IDE-SCAN',
+    title: data.title || 'IDE-extension scan',
+    lede: data.lede || 'VS Code + JetBrains supply-chain-sjekk, blocklist + typosquat + obfuskering.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderIdeScan = renderIdeScan;
+
+function renderPosture(data, slot) {
+  // Small-multiples per kategori
+  const items = (data.categories || []).filter(function (c) {
+    return c.status !== 'N-A' && c.status !== 'N/A';
+  }).map(function (c) {
+    const score = c.status === 'PASS' ? 5 : c.status === 'PARTIAL' ? 3 : c.status === 'FAIL' ? 1 : 0;
+    const grade = c.status === 'PASS' ? 'A' : c.status === 'PARTIAL' ? 'C' : c.status === 'FAIL' ? 'F' : '';
+    return {
+      name: c.num + '. ' + c.name,
+      score: score,
+      max: 5,
+      grade: grade,
+      status: c.status + (c.findings ? ' · ' + c.findings + ' funn' : '')
+    };
+  });
+  const smHtml = renderSmallMultiples(items);
+  const ladderHtml = renderMatLadder(data.categories || [], data.posture_score, data.posture_applicable);
+  // Quick wins
+  const quickHtml = (data.quick_wins && data.quick_wins.length) ? (
+    '<section class="recommendation-card" data-severity="positive">' +
+      '<span class="recommendation-card__label">Quick wins</span>' +
+      '<ol class="recommendation-card__body">' +
+        data.quick_wins.map(function (w) { return '<li>' + escapeHtml(w) + '</li>'; }).join('') +
+      '</ol>' +
+    '</section>'
+  ) : '';
+  const topRisksHtml = renderTopRisks(data.findings || [], 5);
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Top findings');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const overall = data.posture_score != null ? (
+    '<section class="report-meta"><h4>Overall score</h4><p><strong>' + data.posture_score + ' / ' + (data.posture_applicable || '?') + ' kategorier dekket</strong> — Grade ' + escapeHtml(data.grade || '?') + '.</p></section>'
+  ) : '';
+  const body = overall + ladderHtml + smHtml + quickHtml + topRisksHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'POSTURE',
+    title: data.title || 'Security posture',
+    lede: data.lede || 'Rask scorecard, deterministisk scanner, <2s.',
+    verdict: data.verdict || inferVerdict(data, 'posture-cards'),
+    keyStats: data.keyStats || inferKeyStats(data, 'posture-cards')
+  }, body);
+}
+RENDERERS.renderPosture = renderPosture;
+
+function renderAudit(data, slot) {
+  const radarHtml = renderRadarSvg(data.radar_axes || []);
+  // Category Assessment som expansion-kort
+  const catHtml = (data.categories && data.categories.length) ? (
+    '<section class="report-meta"><h4>Kategori-vurdering</h4>' +
+      '<div class="findings__items">' + data.categories.map(function (c) {
+        const sev = c.status === 'FAIL' ? 'critical' : c.status === 'PARTIAL' ? 'medium' : c.status === 'PASS' ? 'low' : 'info';
+        const sevClass = 'card--severity-' + sev;
+        return '<div class="findings__item ' + sevClass + '" data-severity="' + escapeAttr(sev) + '">' +
+          '<div class="findings__item-severity-dot" data-severity="' + escapeAttr(sev) + '"></div>' +
+          '<div>' +
+            '<div class="findings__item-id">Kat. ' + c.num + '</div>' +
+            '<div class="findings__item-title">' + escapeHtml(c.name) + '</div>' +
+            '<div class="findings__item-meta">Status: <strong>' + escapeHtml(c.status || '—') + '</strong></div>' +
+          '</div>' +
+        '</div>';
+      }).join('') + '</div>' +
+    '</section>'
+  ) : '';
+  // Action Plan tre-tier
+  const tierHtml = function (tier, label, sev) {
+    const items = (data.action_plan && data.action_plan[tier]) || [];
+    if (!items.length) return '';
+    return '<section class="recommendation-card" data-severity="' + escapeAttr(sev) + '">' +
+      '<span class="recommendation-card__label">' + escapeHtml(label) + '</span>' +
+      '<ol class="recommendation-card__body">' + items.map(function (a) { return '<li>' + escapeHtml(a) + '</li>'; }).join('') + '</ol>' +
+    '</section>';
+  };
+  const actionHtml = tierHtml('immediate', 'Immediate', 'critical') + tierHtml('high', 'High priority', 'high') + tierHtml('medium', 'Medium priority', 'medium');
+  const meterHtml = (data.risk_score != null) ? renderRiskMeter(data.risk_score, data.riskBand) : '';
+  const topRisksHtml = renderTopRisks(data.findings || [], 5);
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Funn');
+  const body = meterHtml + radarHtml + catHtml + actionHtml + topRisksHtml + findingsHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'AUDIT',
+    title: data.title || 'Full security audit',
+    lede: data.lede || 'OWASP LLM Top 10-vurdering, A-F grading, action plan.',
+    verdict: data.verdict || inferVerdict(data, 'findings-grade'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings-grade')
+  }, body);
+}
+RENDERERS.renderAudit = renderAudit;
+
+function renderDashboard(data, slot) {
+  // Fleet-grid med fleet-tile per prosjekt
+  const projects = data.projects || [];
+  const sevForGrade = function (g) {
+    const u = String(g || '').toUpperCase();
+    if (u === 'A') return 'low';
+    if (u === 'B') return 'low';
+    if (u === 'C') return 'medium';
+    if (u === 'D') return 'high';
+    if (u === 'F') return 'critical';
+    return 'info';
+  };
+  const tiles = projects.length ? projects.map(function (p) {
+    const trend = (data.trends || []).find(function (t) { return t.name === p.name; });
+    const trendCls = trend ? ('fleet-tile__trend--' + trend.trend) : 'fleet-tile__trend--stable';
+    const fillPct = Math.max(0, Math.min(100, p.risk));
+    return (
+      '<div class="fleet-tile" data-severity="' + escapeAttr(sevForGrade(p.grade)) + '">' +
+        '<div class="fleet-tile__row">' +
+          '<span class="fleet-tile__name" title="' + escapeAttr(p.name) + '">' + escapeHtml(p.name) + '</span>' +
+          '<span class="fleet-tile__grade" data-grade="' + escapeAttr(p.grade || '') + '">' + escapeHtml(p.grade || '?') + '</span>' +
+        '</div>' +
+        '<div class="fleet-tile__meter"><div class="fleet-tile__meter-fill" style="width: ' + fillPct + '%"></div></div>' +
+        '<div class="fleet-tile__meta">' +
+          '<span>Risk ' + p.risk + ' · ' + p.findings + ' funn</span>' +
+          (trend ? '<span class="' + trendCls + '">' + escapeHtml(trend.d_risk) + '</span>' : '') +
+        '</div>' +
+        (p.worst_category ? '<div class="fleet-tile__meta"><span class="fleet-tile__chip">Verst: ' + escapeHtml(p.worst_category) + '</span></div>' : '') +
+      '</div>'
+    );
+  }).join('') : '';
+  const gridHtml = tiles ? '<div class="fleet-grid">' + tiles + '</div>' : renderEmptyState('Ingen prosjekter funnet.');
+  // Errors
+  const errorsHtml = (data.errors && data.errors.length) ? (
+    '<section class="report-meta"><h4>Errors</h4>' +
+      '<table class="report-table"><thead><tr><th>Prosjekt</th><th>Feil</th></tr></thead><tbody>' +
+      data.errors.map(function (e) { return '<tr><td>' + escapeHtml(e.project) + '</td><td>' + escapeHtml(e.error) + '</td></tr>'; }).join('') +
+      '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = gridHtml + errorsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'DASHBOARD',
+    title: data.title || 'Cross-project dashboard',
+    lede: data.lede || 'Maskin-grade = svakeste lenke. Aggregert posture-skann per prosjekt.',
+    verdict: data.verdict || inferVerdict(data, 'dashboard-fleet'),
+    keyStats: data.keyStats || inferKeyStats(data, 'dashboard-fleet')
+  }, body);
+}
+RENDERERS.renderDashboard = renderDashboard;
+
+function renderHarden(data, slot) {
+  const recs = data.recommendations || [];
+  // Diff-blokker per recommendation — DS Tier 3 recommendation-card med data-severity (v7.6.0 fase 5f).
+  // CREATE → positive (ny grade A-fil), APPEND → medium (eksisterende fil utvides),
+  // MERGE → low (allerede satt, kun normalisering), SKIP → low (ingen handling).
+  const diffHtml = recs.map(function (r, idx) {
+    const isCreate = /create/i.test(r.action);
+    const isAppend = /append/i.test(r.action);
+    const isMerge = /merge/i.test(r.action);
+    const isNone = /none|skip/i.test(r.action);
+    const actionLabel = isCreate ? 'CREATE' : isAppend ? 'APPEND' : isMerge ? 'MERGE' : 'SKIP';
+    const sev = mapSeverityToCardLevel(actionLabel);
+    return (
+      '<section class="recommendation-card" data-severity="' + escapeAttr(sev) + '">' +
+        '<span class="recommendation-card__label">' + actionLabel + ' · ' + escapeHtml(String(r.num)) + '. ' + escapeHtml(r.category) + '</span>' +
+        '<div class="recommendation-card__body">' +
+          '<div><code>' + escapeHtml(r.file) + '</code></div>' +
+          (r.content_preview ? '<pre style="margin: var(--space-2) 0; font-size: var(--font-size-sm); white-space: pre-wrap; opacity: ' + (isNone ? '0.6' : '0.9') + '">' + escapeHtml(r.content_preview).slice(0, 600) + (r.content_preview.length > 600 ? '…' : '') + '</pre>' : '') +
+        '</div>' +
+      '</section>'
+    );
+  }).join('');
+  // Diff summary footer
+  const summaryRows = (data.diff_summary || []).map(function (d) {
+    return '<div class="diff__summary-item"><span>' + escapeHtml(d.file) + '</span><span class="diff__summary-count">' + escapeHtml(d.action) + ' · ' + escapeHtml(d.lines) + '</span></div>';
+  }).join('');
+  const summaryHtml = summaryRows ? '<div class="diff__summary">' + summaryRows + '</div>' : '';
+  const introSev = (function () {
+    const g = String(data.current_grade || '?').toUpperCase();
+    if (g === 'F' || g === 'D') return 'critical';
+    if (g === 'C') return 'high';
+    if (g === 'B') return 'medium';
+    if (g === 'A') return 'positive';
+    return 'medium';
+  })();
+  const intro = (
+    '<section class="recommendation-card" data-severity="' + escapeAttr(introSev) + '">' +
+      '<span class="recommendation-card__label">Snapshot · grade ' + escapeHtml(data.current_grade || '?') + '</span>' +
+      '<p class="recommendation-card__body">Prosjekt-type: <strong>' + escapeHtml(data.project_type || '?') + '</strong> · ' + data.actionable + '/' + data.total + ' anbefalinger · Modus: <em>' + escapeHtml(data.mode || 'dry-run') + '</em></p>' +
+    '</section>'
+  );
+  const body = intro + (diffHtml || renderEmptyState('Ingen anbefalinger.')) + summaryHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'HARDEN',
+    title: data.title || 'Grade A reference config',
+    lede: data.lede || 'Diff preview of settings.json, CLAUDE.md, and .gitignore changes.',
+    verdict: data.verdict || inferVerdict(data, 'diff-report'),
+    keyStats: data.keyStats || [
+      { label: 'CURRENT GRADE', value: String(data.current_grade || '?') },
+      { label: 'ACTIONS', value: data.actionable + '/' + data.total },
+      { label: 'MODE', value: data.mode || 'dry-run' }
+    ]
+  }, body);
+}
+RENDERERS.renderHarden = renderHarden;
+
+function renderRedTeam(data, slot) {
+  const meterHtml = renderRiskMeter(100 - (data.defense_score || 0), data.riskBand);
+  // Per-category small-multiples
+  const cats = (data.categories || []).map(function (c) {
+    const total = (c.pass || 0) + (c.fail || 0);
+    const score = total ? Math.round((c.pass / total) * 5) : 0;
+    const grade = total === 0 ? '?' : c.fail === 0 ? 'A' : c.fail <= 1 ? 'B' : c.fail <= 3 ? 'C' : 'D';
+    return {
+      name: c.category,
+      score: score,
+      max: 5,
+      grade: grade,
+      status: c.pass + ' pass · ' + c.fail + ' fail'
+    };
+  });
+  const smHtml = renderSmallMultiples(cats);
+  // Failed scenarios som findings
+  const scnFindings = (data.scenarios || []).map(function (s) {
+    return {
+      id: s.id,
+      severity: s.severity,
+      category: s.category,
+      description: s.payload_class + ' — ' + s.reason,
+      owasp: ''
+    };
+  });
+  const findingsHtml = renderFindingsBlock(scnFindings, 'Failed scenarios');
+  // History
+  const historyRows = (data.history || []).map(function (h) {
+    return '<tr><td>' + escapeHtml(h.run) + '</td><td>' + escapeHtml(h.date) + '</td><td>' + h.defense_score + '%</td><td>' + escapeHtml(h.delta) + '</td></tr>';
+  }).join('');
+  const historyHtml = historyRows ? (
+    '<section class="report-meta"><h4>Defense score-historikk</h4>' +
+      '<table class="report-table"><thead><tr><th>Run</th><th>Dato</th><th>Score</th><th>Δ</th></tr></thead><tbody>' + historyRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = meterHtml + smHtml + findingsHtml + historyHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'RED-TEAM',
+    title: data.title || 'Attack-simulasjon',
+    lede: data.lede || (data.adaptive ? 'Adaptive mode aktiv (mutation-based evasion).' : 'Statisk mode — 64 deterministiske scenarios.'),
+    verdict: data.verdict || inferVerdict(data, 'red-team-results'),
+    keyStats: data.keyStats || inferKeyStats(data, 'red-team-results')
+  }, body);
+}
+RENDERERS.renderRedTeam = renderRedTeam;
+
+// ============================================================
+// PHASE 3: 8 RENDERERS — one per remaining command.
+// ============================================================
+function renderMcpInspect(data, slot) {
+  const invRows = (data.server_inventory || []).map(function (s) {
+    return '<tr>' +
+      '<td>' + escapeHtml(s.server) + '</td>' +
+      '<td>' + escapeHtml(s.transport) + '</td>' +
+      '<td>' + s.tools + '</td>' +
+      '<td>' + escapeHtml(s.status) + '</td>' +
+      '<td>' + (s.connected ? '<span class="key-stat__value" style="color: var(--color-low)">ja</span>' : '<span class="key-stat__value" style="color: var(--color-medium)">nei</span>') + '</td>' +
+    '</tr>';
+  }).join('');
+  const invHtml = invRows ? (
+    '<section class="report-meta"><h4>Server-inventar</h4>' +
+      '<table class="report-table"><thead><tr><th>Server</th><th>Transport</th><th>Tools</th><th>Status</th><th>Connected</th></tr></thead><tbody>' + invRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const cpHtml = renderCodepointReveal(data.codepoints || []);
+  const fs = (data.findings || []).map(function (f) {
+    return Object.assign({}, f, {
+      file: f.server || f.file || '',
+      category: f.category || ''
+    });
+  });
+  const findingsHtml = renderFindingsBlock(fs, 'MCP-inspect funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = invHtml + cpHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'MCP-INSPECT',
+    title: data.title || 'MCP live-inspect',
+    lede: data.lede || 'Runtime tool-deskripsjoner — drift, tool shadowing, codepoint reveal.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderMcpInspect = renderMcpInspect;
+
+function renderSupplyCheck(data, slot) {
+  // Ecosystem cards (small-multiples pattern)
+  const ecos = (data.ecosystems || []).filter(function (e) { return Number(e.packages) > 0 || Number(e.osv_hits) > 0 || Number(e.typosquats) > 0; });
+  const ecoCards = ecos.length ? '<div class="small-multiples">' + ecos.map(function (e) {
+    const issues = (Number(e.osv_hits) || 0) + (Number(e.typosquats) || 0);
+    const grade = issues === 0 ? 'A' : issues <= 1 ? 'B' : issues <= 3 ? 'C' : issues <= 6 ? 'D' : 'F';
+    const score = Math.max(0, 5 - Math.min(5, issues));
+    const fillPct = (score / 5) * 100;
+    return '<div class="sm-card">' +
+             '<div class="sm-card__header">' +
+               '<span class="sm-card__name">' + escapeHtml(e.ecosystem) + '</span>' +
+               '<span class="sm-card__grade" data-grade="' + escapeAttr(grade) + '">' + escapeHtml(grade) + '</span>' +
+             '</div>' +
+             '<div class="sm-card__bar"><div class="sm-card__bar-fill" style="width: ' + fillPct.toFixed(0) + '%"></div></div>' +
+             '<span class="sm-card__status">' + e.packages + ' pakker · ' + e.osv_hits + ' OSV · ' + e.typosquats + ' typosquats</span>' +
+           '</div>';
+  }).join('') + '</div>' : '';
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Supply-chain funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = ecoCards + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'SUPPLY-CHECK',
+    title: data.title || 'Supply-chain recheck',
+    lede: data.lede || 'Re-audit lockfiler mot blocklists, OSV.dev og typosquat-deteksjon.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderSupplyCheck = renderSupplyCheck;
+
+function renderPreDeploy(data, slot) {
+  const lights = data.traffic_lights || [];
+  const sevForStatus = function (s) {
+    const u = String(s || '').toUpperCase();
+    if (u === 'PASS' || u === 'GO') return 'low';
+    if (u === 'PASS-WITH-NOTES' || u === 'WARNING' || u === 'PARTIAL') return 'medium';
+    if (u === 'FAIL' || u === 'BLOCK' || u === 'NO-GO') return 'critical';
+    return 'info';
+  };
+  // v7.6.1 fix: sm-card__grade is fixed at 28×28 px (designed for one A-F letter), so
+  // "PASS"/"PASS-WITH-NOTES"/"FAIL" ble kuttet til "AS"/"PASS-WITH-..."/"FA". Bytt
+  // til en bredde-tilpasset status-pill via inline styling (ingen DS-klasse-endring).
+  const cards = lights.map(function (l) {
+    const sev = sevForStatus(l.status);
+    const pillBg = sev === 'low' ? 'var(--color-severity-low-soft)'
+                 : sev === 'medium' ? 'var(--color-severity-medium-soft)'
+                 : sev === 'critical' ? 'var(--color-severity-critical-soft)'
+                 : 'var(--color-bg-soft)';
+    const pillFg = sev === 'low' ? 'var(--color-severity-low-on)'
+                 : sev === 'medium' ? 'var(--color-severity-medium-on)'
+                 : sev === 'critical' ? 'var(--color-severity-critical-on)'
+                 : 'var(--color-text-secondary)';
+    const statusPill = '<span style="font-family: var(--font-family-mono); font-size: 11px; font-weight: var(--font-weight-bold); letter-spacing: 0.04em; padding: 3px 8px; border-radius: var(--radius-sm); background: ' + pillBg + '; color: ' + pillFg + '; white-space: nowrap;">' + escapeHtml(l.status) + '</span>';
+    return '<div class="sm-card" data-severity="' + escapeAttr(sev) + '" style="border-left: 3px solid var(--color-severity-' + (sev === 'low' ? 'low' : sev === 'medium' ? 'medium' : sev === 'critical' ? 'critical' : 'low') + '); padding-left: var(--space-3);">' +
+             '<div class="sm-card__header">' +
+               '<span class="sm-card__name">' + escapeHtml(l.category) + '</span>' +
+               statusPill +
+             '</div>' +
+             (l.notes ? '<span class="sm-card__status">' + escapeHtml(l.notes) + '</span>' : '') +
+           '</div>';
+  }).join('');
+  const lightsHtml = cards ? '<section class="report-meta"><h4>Traffic-light kategorier</h4><div class="small-multiples">' + cards + '</div></section>' : '';
+  const condHtml = (data.conditions && data.conditions.length) ? (
+    '<section class="recommendation-card" data-severity="high">' +
+      '<span class="recommendation-card__label">Conditions to resolve</span>' +
+      '<ol class="recommendation-card__body">' + data.conditions.map(function (c) { return '<li>' + escapeHtml(c) + '</li>'; }).join('') + '</ol>' +
+    '</section>'
+  ) : '';
+  const apprRows = (data.approvals || []).map(function (a) {
+    const isPending = /pending|—/i.test(a.approver) || !a.approver.trim();
+    return '<tr><td>' + escapeHtml(a.role) + '</td><td>' + (isPending ? '<em>(venter)</em>' : escapeHtml(a.approver)) + '</td><td>' + escapeHtml(a.date || '—') + '</td><td>' + escapeHtml(a.notes) + '</td></tr>';
+  }).join('');
+  const apprHtml = apprRows ? (
+    '<section class="report-meta"><h4>Godkjenninger</h4>' +
+      '<table class="report-table"><thead><tr><th>Rolle</th><th>Godkjenner</th><th>Dato</th><th>Notater</th></tr></thead><tbody>' + apprRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Pre-deploy funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = lightsHtml + condHtml + apprHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'PRE-DEPLOY',
+    title: data.title || 'Pre-deploy security checklist',
+    lede: data.lede || 'Enterprise-gate + production readiness — 13 kategorier.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderPreDeploy = renderPreDeploy;
+
+function renderDiff(data, slot) {
+  const newItems = data['new'] || [];
+  const resolvedItems = data.resolved || [];
+  const unchangedItems = data.unchanged || [];
+  const movedItems = data.moved || [];
+  const gradeBadge = function (g) {
+    return g ? '<span class="sm-card__grade" data-grade="' + escapeAttr(g) + '">' + escapeHtml(g) + '</span>' : '<span class="sm-card__grade" data-grade="?">?</span>';
+  };
+  const headerHtml = (
+    '<section class="report-meta"><h4>Grade-bevegelse</h4>' +
+      '<div class="pair-before-after">' +
+        '<div class="pair-before-after__cell">' +
+          '<span class="pair-before-after__cell-label">BASELINE ' + escapeHtml(data.baseline_date || '') + '</span>' +
+          '<span class="pair-before-after__cell-value">' + gradeBadge(data.baseline_grade) + '</span>' +
+        '</div>' +
+        '<div class="pair-before-after__arrow" aria-hidden="true"></div>' +
+        '<div class="pair-before-after__cell">' +
+          '<span class="pair-before-after__cell-label">NOW</span>' +
+          '<span class="pair-before-after__cell-value">' + gradeBadge(data.current_grade) + '</span>' +
+        '</div>' +
+      '</div>' +
+    '</section>'
+  );
+  const renderRowItem = function (it, action) {
+    const sev = it.severity || 'info';
+    const sevClass = 'card--severity-' + sev;
+    const meta = [it.category, it.file, it.resolution, it.notes].filter(Boolean).join(' · ');
+    const cellClass = action === 'new' ? 'diff__cell--added' :
+                      action === 'resolved' ? 'diff__cell--unchanged' :
+                      'diff__cell--unchanged';
+    return '<div class="diff__row">' +
+             '<div class="diff__cell ' + cellClass + '">' +
+               '<div class="findings__item ' + sevClass + '" data-severity="' + escapeAttr(sev) + '">' +
+                 '<div class="findings__item-severity-dot" data-severity="' + escapeAttr(sev) + '"></div>' +
+                 '<div>' +
+                   '<div class="findings__item-id">' + escapeHtml(it.id || '—') + '</div>' +
+                   '<div class="findings__item-title">' + escapeHtml(it.description || it.resolution || it.notes || '') + '</div>' +
+                   (meta ? '<div class="findings__item-meta">' + escapeHtml(meta) + '</div>' : '') +
+                 '</div>' +
+               '</div>' +
+             '</div>' +
+           '</div>';
+  };
+  const sectionFor = function (label, items, action) {
+    if (!items.length) return '';
+    return '<section class="report-meta"><h4>' + escapeHtml(label) + ' (' + items.length + ')</h4>' +
+             '<div class="diff">' + items.map(function (it) { return renderRowItem(it, action); }).join('') + '</div>' +
+           '</section>';
+  };
+  const newHtml = sectionFor('Nye funn', newItems, 'new');
+  const resHtml = sectionFor('Resolved findings', resolvedItems, 'resolved');
+  const unchHtml = sectionFor('Uendret', unchangedItems, 'unchanged');
+  const movHtml = (movedItems.length) ? sectionFor('Flyttet', movedItems.map(function (m) {
+    return { id: m.id, severity: 'info', description: m.from + ' → ' + m.to };
+  }), 'moved') : '';
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = headerHtml + newHtml + resHtml + unchHtml + movHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'DIFF',
+    title: data.title || 'Scan diff mot baseline',
+    lede: data.lede || 'Compares the current scan against the stored baseline.',
+    verdict: data.verdict || inferVerdict(data, 'diff-report'),
+    keyStats: data.keyStats || inferKeyStats(data, 'diff-report')
+  }, body);
+}
+RENDERERS.renderDiff = renderDiff;
+
+function renderWatch(data, slot) {
+  const meter = data.live_meter || {};
+  const meterRows = Object.keys(meter).map(function (k) {
+    return '<tr><td>' + escapeHtml(k.replace(/_/g, ' ')) + '</td><td>' + escapeHtml(meter[k]) + '</td></tr>';
+  }).join('');
+  const meterHtml = meterRows ? (
+    '<section class="report-meta"><h4>Live-meter</h4>' +
+      '<table class="report-table"><tbody>' + meterRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const histRows = (data.history || []).map(function (h) {
+    const isCurrent = /^current/i.test(h.run);
+    return '<tr' + (isCurrent ? ' style="font-weight: 600;"' : '') + '>' +
+      '<td>' + escapeHtml(h.run) + '</td>' +
+      '<td>' + escapeHtml(h.time) + '</td>' +
+      '<td><span class="sm-card__grade" data-grade="' + escapeAttr(h.grade || '?') + '">' + escapeHtml(h.grade || '?') + '</span></td>' +
+      '<td>' + h.risk_score + '</td>' +
+      '<td>' + escapeHtml(h.delta || '—') + '</td>' +
+    '</tr>';
+  }).join('');
+  const histHtml = histRows ? (
+    '<section class="report-meta"><h4>Siste runs</h4>' +
+      '<table class="report-table"><thead><tr><th>Run</th><th>Tid</th><th>Grade</th><th>Risk</th><th>Δ</th></tr></thead><tbody>' + histRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Funn (siste run)');
+  const notRows = (data.notify_events || []).map(function (n) {
+    return '<tr><td>' + escapeHtml(n.time) + '</td><td>' + escapeHtml(n.event) + '</td><td>' + escapeHtml(n.channel) + '</td><td>' + escapeHtml(n.status) + '</td></tr>';
+  }).join('');
+  const notHtml = notRows ? (
+    '<section class="report-meta"><h4>Notify-eventer</h4>' +
+      '<table class="report-table"><thead><tr><th>Tid</th><th>Event</th><th>Channel</th><th>Status</th></tr></thead><tbody>' + notRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = meterHtml + histHtml + findingsHtml + notHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'WATCH',
+    title: data.title || 'Continuous monitoring',
+    lede: data.lede || 'Runs diff on a recurring interval via /loop. Notifies on new findings.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderWatch = renderWatch;
+
+function renderRegistry(data, slot) {
+  const stats = data.stats || {};
+  const statsRows = Object.keys(stats).map(function (k) {
+    return '<tr><td>' + escapeHtml(k.replace(/_/g, ' ')) + '</td><td>' + escapeHtml(stats[k]) + '</td></tr>';
+  }).join('');
+  const statsHtml = statsRows ? (
+    '<section class="report-meta"><h4>Registry-stats</h4>' +
+      '<table class="report-table"><tbody>' + statsRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const sigRows = (data.signatures || []).map(function (s) {
+    const isBad = /known-?bad|malicious/i.test(s.status);
+    const isDrift = /drift/i.test(s.status);
+    const isUnknown = /unknown/i.test(s.status);
+    const sev = isBad ? 'critical' : isDrift ? 'medium' : isUnknown ? 'low' : 'info';
+    return '<tr>' +
+      '<td>' + escapeHtml(s.skill) + '</td>' +
+      '<td>' + escapeHtml(s.source) + '</td>' +
+      '<td><code>' + escapeHtml(s.fingerprint) + '</code></td>' +
+      '<td><span class="key-stat__value" style="color: var(--color-' + sev + ')">' + escapeHtml(s.status) + '</span></td>' +
+      '<td>' + escapeHtml(s.first_seen) + '</td>' +
+    '</tr>';
+  }).join('');
+  const sigHtml = sigRows ? (
+    '<section class="report-meta"><h4>Signaturer</h4>' +
+      '<table class="report-table"><thead><tr><th>Skill</th><th>Source</th><th>Fingerprint</th><th>Status</th><th>First seen</th></tr></thead><tbody>' + sigRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const fs = (data.findings || []).map(function (f) {
+    return Object.assign({}, f, {
+      file: f.skill || f.file || '',
+      category: f.category || ''
+    });
+  });
+  const findingsHtml = renderFindingsBlock(fs, 'Registry-funn');
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = statsHtml + sigHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'REGISTRY',
+    title: data.title || 'Skill-signature registry',
+    lede: data.lede || 'Lokal fingerprint-database — kjente goder og kjente onde signaturer.',
+    verdict: data.verdict || inferVerdict(data, 'findings'),
+    keyStats: data.keyStats || inferKeyStats(data, 'findings')
+  }, body);
+}
+RENDERERS.renderRegistry = renderRegistry;
+
+function renderClean(data, slot) {
+  const buckets = data.buckets || { auto: [], 'semi-auto': [], manual: [], suppressed: [] };
+  const cardFor = function (bucket, label, sev) {
+    const items = buckets[bucket] || [];
+    const cards = items.length ? items.map(function (it) {
+      return '<div class="kanban-card" data-severity="' + escapeAttr(sev) + '">' +
+        '<div class="kanban-card__name">' + escapeHtml(it.id || '—') + ' — ' + escapeHtml(it.action || '') + '</div>' +
+        (it.description ? '<div class="kanban-card__meta">' + escapeHtml(it.description) + '</div>' : '') +
+      '</div>';
+    }).join('') : '<div class="kanban-col__empty">Ingen</div>';
+    return '<div class="kanban-col" data-bucket="' + escapeAttr(bucket) + '">' +
+      '<div class="kanban-col__head">' +
+        '<span class="kanban-col__title">' + escapeHtml(label) + '</span>' +
+        '<span class="kanban-col__count">' + items.length + '</span>' +
+      '</div>' + cards + '</div>';
+  };
+  const kanbanHtml = '<div class="kanban-board" style="grid-template-columns: repeat(4, 1fr);">' +
+    cardFor('auto', 'Auto', 'low') +
+    cardFor('semi-auto', 'Semi-auto', 'medium') +
+    cardFor('manual', 'Manual', 'high') +
+    cardFor('suppressed', 'Undertrykt', 'info') +
+  '</div>';
+  // Advisory recommendation-cards per bucket — DS Tier 3 data-severity (v7.6.0 fase 5f).
+  // Every bucket with items > 0 gets one recommendation-card with a severity-tinted border + label.
+  const bucketAdvisoryDefs = [
+    { key: 'auto', label: 'Auto-fixable', sev: 'positive', desc: 'Plugin kan fikse disse uten ekstra bekreftelse — deterministiske, lavrisiko-handlinger.' },
+    { key: 'semi-auto', label: 'Semi-auto — requires confirmation', sev: 'medium', desc: 'Proposed changes are shown as a diff. The user confirms per finding before the change is applied.' },
+    { key: 'manual', label: 'Manual remediation', sev: 'high', desc: 'Requires human judgement — context, scope, or side-effects are not deterministically decidable.' },
+    { key: 'suppressed', label: 'Undertrykt', sev: 'low', desc: 'Allowlist-treff via .llm-security-ignore — ingen handling.' }
+  ];
+  const advisoryHtml = bucketAdvisoryDefs.map(function (b) {
+    const items = buckets[b.key] || [];
+    if (!items.length) return '';
+    return (
+      '<section class="recommendation-card" data-severity="' + escapeAttr(b.sev) + '">' +
+        '<span class="recommendation-card__label">' + escapeHtml(b.label) + ' · ' + items.length + '</span>' +
+        '<p class="recommendation-card__body">' + escapeHtml(b.desc) + '</p>' +
+      '</section>'
+    );
+  }).join('');
+  const findingsHtml = renderFindingsBlock(data.findings || [], 'Tilknyttede funn');
+  const recHtml = renderRecommendationsList(data.recommendations || [], 'Anbefalinger', 'medium');
+  const isDry = ((data.mode || '').toLowerCase() === 'dry-run');
+  const intro = data.mode ? (
+    '<section class="recommendation-card" data-severity="' + (isDry ? 'low' : 'medium') + '">' +
+      '<span class="recommendation-card__label">Modus · ' + escapeHtml(data.mode) + '</span>' +
+      '<p class="recommendation-card__body">' + (isDry ? 'Dry-run: no files are modified. Preview the actions before <code>--apply</code>.' : 'Fixes are applied with an automatic backup in <code>.llm-security-backup/</code>.') + '</p>' +
+    '</section>'
+  ) : '';
+  const body = intro + advisoryHtml + kanbanHtml + findingsHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'CLEAN',
+    title: data.title || 'Remediation-kanban',
+    lede: data.lede || 'Findings split across Auto / Semi-auto / Manual / Suppressed.',
+    verdict: data.verdict || inferVerdict(data, 'kanban-buckets'),
+    keyStats: data.keyStats || inferKeyStats(data, 'kanban-buckets')
+  }, body);
+}
+RENDERERS.renderClean = renderClean;
+
+function renderThreatModel(data, slot) {
+  // Matrix-rendering — 5×5
+  const cells = data.matrix_cells || [];
+  const byPC = {};
+  cells.forEach(function (c) {
+    const k = c.prob + '_' + c.cons;
+    if (!byPC[k]) byPC[k] = [];
+    byPC[k].push(c);
+  });
+  const probSize = 5;
+  const consMax = 5;
+  let matrixHtml = '<div class="matrix"><div class="matrix__y-label">Konsekvens</div><div class="matrix__main">';
+  matrixHtml += '<div class="matrix__grid" style="grid-template-rows: repeat(' + consMax + ', 1fr) 32px;">';
+  for (let cons = consMax; cons >= 1; cons--) {
+    matrixHtml += '<div class="matrix__y-tick">' + cons + '</div>';
+    for (let prob = 1; prob <= probSize; prob++) {
+      const score = prob * cons;
+      const items = byPC[prob + '_' + cons] || [];
+      // v7.6.1 fix: bubbles are now <button> so they are clickable and focusable.
+      // data-threat-id lar event-handler senere mappe til detalj-modal.
+      const bubblesHtml = items.length
+        ? '<div class="matrix__cell-bubbles">' +
+            items.slice(0, 3).map(function (it, i) {
+              return '<button type="button" class="matrix__bubble" data-threat-id="' + escapeAttr(it.id || it.label || '') + '" title="' + escapeAttr(it.label || '') + '" aria-label="Trussel: ' + escapeAttr(it.label || it.id || '') + '">' + (i + 1) + '</button>';
+            }).join('') +
+            (items.length > 3 ? '<button type="button" class="matrix__bubble matrix__bubble--count" aria-label="' + (items.length - 3) + ' flere trusler">+' + (items.length - 3) + '</button>' : '') +
+          '</div>'
+        : '';
+      matrixHtml += '<div class="matrix__cell" data-score="' + score + '">' +
+                      '<span class="matrix__cell-score">' + score + '</span>' + bubblesHtml +
+                    '</div>';
+    }
+  }
+  matrixHtml += '<div class="matrix__corner"></div>';
+  for (let prob = 1; prob <= probSize; prob++) {
+    matrixHtml += '<div class="matrix__x-tick">' + prob + '</div>';
+  }
+  matrixHtml += '</div><div class="matrix__x-label">Sannsynlighet</div></div></div>';
+  // Threats table
+  const threatsRows = (data.threats || []).map(function (t) {
+    return '<tr>' +
+      '<td>' + escapeHtml(t.id) + '</td>' +
+      '<td>' + escapeHtml(t.description) + '</td>' +
+      '<td><span class="findings__item-severity-dot" data-severity="' + escapeAttr(t.severity || 'info') + '" style="display: inline-block; vertical-align: middle;"></span> ' + escapeHtml(t.severity) + '</td>' +
+      '<td>' + escapeHtml(t.mitigation) + '</td>' +
+    '</tr>';
+  }).join('');
+  const threatsHtml = threatsRows ? (
+    '<section class="report-meta"><h4>Trusler</h4>' +
+      '<table class="report-table"><thead><tr><th>ID</th><th>Beskrivelse</th><th>Severity</th><th>Tiltak</th></tr></thead><tbody>' + threatsRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  // STRIDE / MAESTRO coverage as side-by-side bar lists
+  const coverageBlock = function (rows, label) {
+    if (!rows || !rows.length) return '';
+    const max = Math.max.apply(null, rows.map(function (r) { return Number(r.count) || 0; })) || 1;
+    const items = rows.map(function (r) {
+      const pct = ((Number(r.count) || 0) / max) * 100;
+      const labelKey = r.category || r.layer || '';
+      return '<div class="sm-card">' +
+               '<div class="sm-card__header">' +
+                 '<span class="sm-card__name">' + escapeHtml(labelKey) + '</span>' +
+                 '<span class="sm-card__grade" data-grade="' + (r.count === 0 ? '?' : r.count <= 1 ? 'A' : r.count <= 3 ? 'B' : 'C') + '">' + r.count + '</span>' +
+               '</div>' +
+               '<div class="sm-card__bar"><div class="sm-card__bar-fill" style="width: ' + pct.toFixed(0) + '%"></div></div>' +
+               (r.notes ? '<span class="sm-card__status">' + escapeHtml(r.notes) + '</span>' : '') +
+             '</div>';
+    }).join('');
+    return '<section class="report-meta"><h4>' + escapeHtml(label) + '</h4><div class="small-multiples">' + items + '</div></section>';
+  };
+  const strideHtml = coverageBlock(data.stride, 'STRIDE-dekning');
+  const maestroHtml = coverageBlock(data.maestro, 'MAESTRO-dekning');
+  // Roadmap
+  const roadRows = (data.roadmap || []).map(function (r) {
+    return '<tr><td>' + escapeHtml(r.priority) + '</td><td>' + escapeHtml(r.threat_id) + '</td><td>' + escapeHtml(r.mitigation) + '</td><td>' + escapeHtml(r.owner) + '</td><td>' + escapeHtml(r.eta) + '</td></tr>';
+  }).join('');
+  const roadHtml = roadRows ? (
+    '<section class="report-meta"><h4>Mitigation roadmap</h4>' +
+      '<table class="report-table"><thead><tr><th>Prioritet</th><th>Trussel</th><th>Tiltak</th><th>Eier</th><th>ETA</th></tr></thead><tbody>' + roadRows + '</tbody></table>' +
+    '</section>'
+  ) : '';
+  const recHtml = renderRecommendationsList(data.recommendations || []);
+  const body = matrixHtml + threatsHtml + strideHtml + maestroHtml + roadHtml + recHtml;
+  slot.innerHTML = renderPageShell({
+    eyebrow: 'THREAT-MODEL',
+    title: data.title || 'Threat model · STRIDE + MAESTRO',
+    lede: data.lede || 'Trusselmodellering med risikomatrise og mitigation-roadmap.',
+    verdict: data.verdict || inferVerdict(data, 'matrix-risk'),
+    keyStats: data.keyStats || inferKeyStats(data, 'matrix-risk')
+  }, body);
+}
+RENDERERS.renderThreatModel = renderThreatModel;
+
+// ============================================================
+// EXPORTS — single block; functions remain top-level declarations
+// for parity with the inline playground copy.
+// ============================================================
+export {
+  // escape
+  escapeHtml, escapeAttr,
+  // verdict + key-stats inference
+  normalizeVerdict, inferVerdict, KEY_STATS_CONFIG, inferKeyStats,
+  // page-shell helpers
+  renderVerdictPill, renderKeyStatsGrid, renderPageShell,
+  // parser helpers
+  parseTableRow, parseTable, parseAllTables, parseSections,
+  extractField, intOrZero, emptyInput, normalizeSeverity,
+  normalizeVerdictText, gradeFromText,
+  parseRiskDashboard, parseFindingsTables, parseRecommendations,
+  safeOk, parseNarrativeAudit,
+  // 18 parsers
+  parseScan, parseDeepScan, parsePluginAudit, parseMcpAudit,
+  parseMcpInspect, parseIdeScan, parseSupplyCheck, parsePosture,
+  parseAudit, parseDashboard, parsePreDeploy, parseDiff, parseWatch,
+  parseRegistry, parseClean, parseHarden, parseThreatModel, parseRedTeam,
+  // routing maps
+  PARSERS, RENDERERS,
+  // renderer helpers
+  renderEmptyState, renderFindingsBlock, renderRecommendationsList,
+  mapSeverityToCardLevel, renderRiskMeter, renderSmallMultiples,
+  renderRadarSvg, renderToxicFlow, renderMatLadder, renderSuppressedGroup,
+  renderCodepointReveal, renderTopRisks,
+  // 18 renderers
+  renderScan, renderDeepScan, renderPluginAudit, renderMcpAudit,
+  renderIdeScan, renderPosture, renderAudit, renderDashboard,
+  renderHarden, renderRedTeam, renderMcpInspect, renderSupplyCheck,
+  renderPreDeploy, renderDiff, renderWatch, renderRegistry,
+  renderClean, renderThreatModel
+};
diff --git a/plugins/llm-security/scripts/render-report.mjs b/plugins/llm-security/scripts/render-report.mjs
new file mode 100644
index 0000000..8912533
--- /dev/null
+++ b/plugins/llm-security/scripts/render-report.mjs
@@ -0,0 +1,192 @@
+#!/usr/bin/env node
+/*
+ * render-report.mjs — convert llm-security markdown reports into self-contained
+ * HTML files. Zero npm deps. Reads markdown from stdin or a file, parses via
+ * PARSERS, renders via RENDERERS, wraps the output in a standalone HTML doc
+ * with inlined Playground Design System CSS.
+ *
+ * Usage:
+ *   node render-report.mjs <commandId> --in <md-file>             (file → reports/<command>-<ts>.html)
+ *   node render-report.mjs <commandId> --in <md-file> --out <html>
+ *   node render-report.mjs <commandId> --in -                     (stdin → reports/<command>-<ts>.html)
+ *   node render-report.mjs <commandId> --in <md> --out -          (file → stdout)
+ *   node render-report.mjs <commandId> --in - --out -             (stdin → stdout)
+ *
+ * Exit codes:
+ *   0 success · 1 parser error or empty input · 2 renderer threw · 3 file I/O failed
+ *
+ * Standalone HTML wraps in <main class="page"> so DS Tier 3 page-shell styling
+ * matches the playground render exactly. Output uses absolute file:// URLs to
+ * stdout (Ghostty cmd-click requires absolute paths).
+ */
+
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
+import { resolve, dirname, isAbsolute, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { PARSERS, RENDERERS } from './lib/report-renderers.mjs';
+
+const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url));
+const PLUGIN_ROOT = resolve(SCRIPT_DIR, '..');
+const VENDOR_CSS_DIR = join(PLUGIN_ROOT, 'playground', 'vendor', 'playground-design-system');
+
+// DS stylesheets to inline. Skip fonts.css — tokens.css has system-ui
+// fallbacks (-apple-system, BlinkMacSystemFont, system-ui, sans-serif),
+// so reports stay self-contained without bundling ~940 KB of woff2.
+const CSS_FILES = [
+  'tokens.css',
+  'base.css',
+  'components.css',
+  'components-tier2.css',
+  'components-tier3.css',
+  'components-tier3-supplement.css'
+];
+
+// .report-table is a playground-local DS supplement (DS doesn't ship it). Same
+// styling lives in playground inline <style> block. Keep in sync with playground
+// llm-security-playground.html (search for "v7.6.1 fix: .report-table").
+const REPORT_TABLE_CSS = `
+.report-table { width: 100%; border-collapse: collapse; margin: var(--space-3) 0; font-size: var(--font-size-sm); }
+.report-table th { text-align: left; padding: 8px 12px; border-bottom: 2px solid var(--color-border-moderate); background: var(--color-bg-soft); font-weight: var(--font-weight-semibold); color: var(--color-text-secondary); text-transform: uppercase; font-size: 11px; letter-spacing: 0.04em; }
+.report-table td { padding: 8px 12px; border-bottom: 1px solid var(--color-border-subtle); vertical-align: top; color: var(--color-text-primary); }
+.report-table tr:last-child td { border-bottom: none; }
+.report-table tbody tr:hover { background: var(--color-bg-soft); }
+.report-table code { font-family: var(--font-family-mono); font-size: 12px; background: var(--color-surface-sunken); padding: 1px 6px; border-radius: var(--radius-sm); }
+.recommendation-card__body { overflow-wrap: anywhere; word-break: break-word; }
+main.page { max-width: 1100px; margin: 0 auto; padding: var(--space-6) var(--space-5); }
+@media (max-width: 720px) { main.page { padding: var(--space-4) var(--space-3); } }
+`;
+
+function parseArgs(argv) {
+  const args = { commandId: null, in: null, out: null };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--in') args.in = argv[++i];
+    else if (a === '--out') args.out = argv[++i];
+    else if (!a.startsWith('--') && !args.commandId) args.commandId = a;
+  }
+  return args;
+}
+
+function commandToRendererName(commandId) {
+  return 'render' + commandId.split('-').map(s => s[0].toUpperCase() + s.slice(1)).join('');
+}
+
+function readStdinSync() {
+  try {
+    return readFileSync(0, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+function timestamp() {
+  const d = new Date();
+  const pad = n => String(n).padStart(2, '0');
+  return `${d.getFullYear()}${pad(d.getMonth() + 1)}${pad(d.getDate())}-${pad(d.getHours())}${pad(d.getMinutes())}${pad(d.getSeconds())}`;
+}
+
+function loadDsCss() {
+  return CSS_FILES.map(name => {
+    const path = join(VENDOR_CSS_DIR, name);
+    if (!existsSync(path)) return `/* missing: ${name} */`;
+    return `/* === ${name} === */\n` + readFileSync(path, 'utf8');
+  }).join('\n');
+}
+
+function wrapHtml(commandId, bodyHtml, dsCss) {
+  return `<!DOCTYPE html>
+<html lang="nb" data-theme="dark">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>llm-security · ${commandId}</title>
+<script>
+(function(){var t=null;try{var s=localStorage.getItem('llm-security-theme');if(s==='light'||s==='dark')t=s;}catch(e){}if(!t&&window.matchMedia)t=window.matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light';if(!t)t=document.documentElement.getAttribute('data-theme')||'dark';document.documentElement.setAttribute('data-theme',t);document.documentElement.style.colorScheme=t;})();
+</script>
+<style>
+${dsCss}
+${REPORT_TABLE_CSS}
+</style>
+</head>
+<body>
+<main class="page">
+${bodyHtml}
+</main>
+</body>
+</html>
+`;
+}
+
+function fail(code, msg) {
+  process.stderr.write(`render-report: ${msg}\n`);
+  process.exit(code);
+}
+
+function main() {
+  const args = parseArgs(process.argv.slice(2));
+  if (!args.commandId) fail(1, 'missing <commandId> (e.g. scan, audit, posture, deep-scan)');
+  if (!args.in) fail(1, 'missing --in <path|->');
+
+  const parser = PARSERS[args.commandId];
+  if (!parser) fail(1, `unknown commandId "${args.commandId}". Valid: ${Object.keys(PARSERS).join(', ')}`);
+
+  const rendererName = commandToRendererName(args.commandId);
+  const renderer = RENDERERS[rendererName];
+  if (typeof renderer !== 'function') fail(1, `no renderer found for "${args.commandId}" (looked up ${rendererName})`);
+
+  let md;
+  try {
+    md = args.in === '-' ? readStdinSync() : readFileSync(resolve(args.in), 'utf8');
+  } catch (e) {
+    fail(1, `cannot read input: ${e.message}`);
+  }
+  if (!md || !md.trim()) fail(1, 'input markdown is empty');
+
+  let data;
+  try {
+    data = parser(md);
+  } catch (e) {
+    fail(1, `parser threw: ${e.message}`);
+  }
+  if (!data || typeof data !== 'object') fail(1, 'parser returned non-object');
+
+  const slot = { innerHTML: '' };
+  try {
+    renderer(data, slot);
+  } catch (e) {
+    fail(2, `renderer threw: ${e.message}`);
+  }
+  if (!slot.innerHTML) fail(2, 'renderer produced empty HTML');
+
+  const dsCss = loadDsCss();
+  const html = wrapHtml(args.commandId, slot.innerHTML, dsCss);
+
+  if (args.out === '-') {
+    process.stdout.write(html);
+    return;
+  }
+
+  let outPath;
+  if (args.out) {
+    outPath = isAbsolute(args.out) ? args.out : resolve(args.out);
+  } else {
+    const reportsDir = resolve('reports');
+    try {
+      mkdirSync(reportsDir, { recursive: true });
+    } catch (e) {
+      fail(3, `cannot create reports dir: ${e.message}`);
+    }
+    outPath = join(reportsDir, `${args.commandId}-${timestamp()}.html`);
+  }
+
+  try {
+    mkdirSync(dirname(outPath), { recursive: true });
+    writeFileSync(outPath, html, 'utf8');
+  } catch (e) {
+    fail(3, `cannot write ${outPath}: ${e.message}`);
+  }
+
+  process.stdout.write(`file://${outPath}\n`);
+}
+
+main();
diff --git a/plugins/ms-ai-architect/.claude-plugin/plugin.json b/plugins/ms-ai-architect/.claude-plugin/plugin.json
index 1f6ffb3..b28039a 100644
--- a/plugins/ms-ai-architect/.claude-plugin/plugin.json
+++ b/plugins/ms-ai-architect/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "ms-ai-architect",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "description": "Microsoft AI Solution Architect - structured architecture guidance for the full Microsoft AI stack",
   "author": {
     "name": "Kjell Tore Guttormsen"
diff --git a/plugins/ms-ai-architect/.gitignore b/plugins/ms-ai-architect/.gitignore
index cea12c5..b66d25a 100644
--- a/plugins/ms-ai-architect/.gitignore
+++ b/plugins/ms-ai-architect/.gitignore
@@ -1,4 +1,6 @@
 *.local.md
+*.local.html
+*.local.json
 .mcp.json
 .DS_Store
 .claude/
diff --git a/plugins/ms-ai-architect/CHANGELOG.md b/plugins/ms-ai-architect/CHANGELOG.md
index 0c3902d..9a7a19d 100644
--- a/plugins/ms-ai-architect/CHANGELOG.md
+++ b/plugins/ms-ai-architect/CHANGELOG.md
@@ -5,6 +5,67 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.15.0] - 2026-05-16
+
+### Changed — playground v3 project-view integration
+
+V2 project-surface (screen-tabs + category-tabs + per-command paste-cards) erstattet av v3 project-view (sidebar + main + import-modal). Sluttproduktet av 5 sesjoner: V2-PROJECT-VIEW-SPEC, JS-foundation, renderProjectView/renderProjectArtifact/renderArtifactNav, testing (97 nye assertions), og nå integration + ship.
+
+#### Sesjon 5: integration + ship
+
+- `renderActive()` ruter `project`-surface til ny `renderProjectSurfaceV3()` som wrapper renderProjectView + topbar + app-shell.
+- `renderProjectSurface` (152 linjer), `renderCommandSubCard` (87 linjer), `rehydratePasteImports` (15 linjer) slettet.
+- `currentProjectScreen` modul-var slettet; `currentProjectTab` beholdt som zombie for `ACTIONS['project-tab']`/`ACTIONS['parse']`/`handlePasteImport` (test-back-compat).
+- `ACTIONS['project-screen']` slettet.
+- 5 v2-CSS-klasser slettet: `.project-tabs`, `.project-tab`, `.project-tab__count`, `.sub-zone`, `.paste-import-row`, `.project-header__*`, `.command-cards`.
+
+#### Fingerprint-gap lukket
+
+- `requirements.headers`: utvidet til `/^\s*#\s*(EU\s*AI\s*Act\s*[—-]\s*Krav|AI\s*Act-?krav|Krav per|Requirements)/im` (matcher "EU AI Act — Krav for høyrisiko provider+deployer").
+- `license.headers`: utvidet til `/^\s*#\s*(Lisens(kart|kapabilitets|-kapabilitets)?(legging|matrise)?|License\s*Mapping)/im` (matcher "Lisens-kapabilitetsmatrise").
+- `KNOWN_GAP_FIXTURES = {}` i `tests/test-playground-fingerprints.sh` (var `{ requirements: true, license: true }`).
+
+#### Migrasjon utvidet (v2→v3) med parserFor
+
+- `migrateDataVersion(state, archetypeFor, parserFor)` tredje arg lagt til.
+- Hvis `reports[cid].parsed` mangler men `raw_markdown` finnes, kjøres `parserFor(cid)` automatisk.
+- `defaultParserFor(cmdId)` resolverer `PARSERS[archetypeFor(cmdId)]`.
+- Tre callsites oppdatert: cold-load, import-state, load-demo.
+
+#### Browser-fixes funnet via dogfood
+
+- `components-tier4-project-view.css` lagt til i `<link>`-chain (filen var vendored, men ikke loaded → modal-overlay og two-column layout virket ikke).
+- `renderImportModal` setter `data-open="true"` på `.import-modal`-div (DS-kontrakt: `display: flex` aktiveres kun ved `[data-open="true"]`).
+
+#### Tester
+
+- `bash tests/run-e2e.sh --playground` → **386 PASS**, 0 FAIL, 2 WARN (pre-eksisterende: `.cmd-pipeline` reservert; multiselect form-felt).
+  - v3-static: 219 PASS (var 202 — la til 17 nye renderer-routing-asserts)
+  - parsers: 70 PASS
+  - migrations: 16 PASS
+  - fingerprints: 32 PASS (var 30, 2 WARN → 32, 0 WARN)
+  - project-view: 30 PASS
+  - actions: 19 PASS
+- `bash tests/validate-plugin.sh` → 219 PASS.
+
+#### Screenshots regenerert til v1.15.0/
+
+24 PNG-er (12 surfaces × 2 tema, retina, fullPage der applicable). Nye surfaces: project-overview, project-artifact-{classify, security, ros, cost, summary}, project-import-modal (viewport-only), project-search.
+
+#### Demo-flyt verifisert i nettleser
+
+- "Last inn demo-data" → 17 artifacts loaded + migrasjonen v2→v3 fyller `parsed`/`verdict`/`keyStats`.
+- Sidebar viser alle 17 grupperte commands med severity-badges.
+- Aggregate verdict (BLOKKERT) + key stats (17/17, 5/5, 2026-05-04) i header.
+- Importer/Re-importer-modal åpner som overlay med backdrop.
+- Per-artifact navigasjon (klikk i sidebar) → mounter riktig renderer i main-area.
+
+### Notes on 1.15.0
+
+- Sesjon 5 fullført i én pass — token-budsjettet (~80-100k) holdt.
+- v2-mockup.local.html + V2-PROJECT-VIEW-SPEC.local.md beholdt inntil sesjon 8 ship (per scope grenser).
+- Pre-eksisterende kosmetiske issues (duplisert artifact-title, "Manglende rapporter"-heading-feil) ikke fikset — utenfor scope for sesjon 5 (integration), planlagt v1.16.0.
+
 ## [1.14.0] - 2026-05-08
 
 ### Changed — playground root-cause refaktor (6 sesjoner)
diff --git a/plugins/ms-ai-architect/CLAUDE.md b/plugins/ms-ai-architect/CLAUDE.md
index c9b5562..a0b7da0 100644
--- a/plugins/ms-ai-architect/CLAUDE.md
+++ b/plugins/ms-ai-architect/CLAUDE.md
@@ -96,173 +96,6 @@ Agenter leser navngitte kjernefiler, ikke hele kataloger:
 
 Se `references/architecture/recommended-mcp-servers.md` for detaljer.
 
-## Utvikling
-
-### Legge til ny kunnskapsbase
-1. Opprett `.md`-fil i riktig undermappe under den relevante skillens `references/`-mappe (f.eks. `skills/ms-ai-engineering/references/`)
-2. Følg format fra eksisterende filer (header, dato, seksjoner, "For Cosmo"-seksjon)
-3. Oppdater relevant SKILL.md med referanse
-
-### Legge til ny kommando
-1. Opprett `commands/navn.md` med frontmatter (`description`, `argument-hint`)
-2. Følg mønster fra eksisterende kommandoer
-3. Oppdater `commands/help.md` med ny kommando
-4. Oppdater denne CLAUDE.md
-
-### Legge til ny agent
-1. Opprett `agents/navn-agent.md` med frontmatter (`name`, `description`, `model`, `color`, `tools`)
-2. Inkluder tydelig "triggers on" i description
-3. Oppdater denne CLAUDE.md
-
-### Testing
-
-#### Statisk validering
-```bash
-# Kjør plugin-validering (frontmatter, encoding, KB-referanser)
-bash tests/validate-plugin.sh
-```
-
-#### KB-ferskhet (sitemap-basert, manuell drift)
-
-**Apply-fasen kjøres via slash-kommandoen** (krever aktiv Claude Code-sesjon, holder oss innenfor Anthropic Consumer Terms § 3):
-
-```text
-/architect:kb-update                          # default: critical + high
-/architect:kb-update --priorities critical    # bare critical
-/architect:kb-update --skip-discover          # hopp over new-URL discovery
-/architect:kb-update --dry-run                # rapport uten apply
-```
-
-**Endringsrapport-fasen kan kjøres som rent Node-script (ingen LLM-kostnad):**
-
-```bash
-# Poll sitemaps → endringsrapport (ingen filendringer)
-node scripts/kb-update/run-weekly-update.mjs --force
-
-# Med discovery av nye relevante sider
-node scripts/kb-update/run-weekly-update.mjs --force --discover
-
-# Vis rapport på nytt etter polling
-node scripts/kb-update/report-changes.mjs
-
-# Bygg/oppdater URL-registry fra referansefiler
-node scripts/kb-update/build-registry.mjs [--merge]
-```
-
-Systemet sammenligner Microsoft Learn sitemap-`<lastmod>` med filenes `Last updated:` header, og genererer en prioritert endringsrapport (critical/high/medium/low).
-
-**Match rate:** ~69% av 1342 URLer matche mot sitemaps. ~31% (mest `azure/ai-foundry/openai/`-stier) finnes ikke i sitemaps pga. Microsofts URL-restrukturering.
-
-**Schedulering:** Pluginen schedulerer ingenting. Bruker som vil ha periodisk varsling kan sette opp egen cron / launchd / systemd / GitHub Actions som kjører `node scripts/kb-update/run-weekly-update.mjs --force --discover` (rapport-fasen, ikke apply). Apply-fasen er bevisst manuell — den krever LLM-resonnering på diff og kjører fra en åpen Claude Code-sesjon.
-
-Legacy (deprecated):
-```bash
-bash scripts/kb-staleness-check.sh  # mtime-basert, upålitelig etter git clone
-```
-
-#### E2E-regresjonstester
-```bash
-# Kjør alle E2E-suiter
-bash tests/run-e2e.sh
-
-# Kjør enkeltsuiter
-bash tests/run-e2e.sh --security
-bash tests/run-e2e.sh --cost
-bash tests/run-e2e.sh --summary
-bash tests/run-e2e.sh --ai-act
-```
-
-Fixture-basert validering av agent-output (sikkerhet, kostnad, sammendrag). Tester struktur, encoding, og domene-spesifikke krav uten å invokere Claude.
-
-#### Manuell test
-```bash
-# Test at plugin registreres
-cd <plugin-root>
-claude --plugin ./plugins/ms-ai-architect
-
-# Kjør hovedcommand
-/architect
-
-# Vis alle kommandoer
-/architect:help
-```
-
-## Playground (v3 / v1.14.0)
-
-Interaktiv decision-builder + rapport-viewer for Microsoft AI-beslutninger. Erstatter v2 5-stegs-pipelinen med en multi-surface-app som persisterer state og visualiserer importerte rapporter inline. Spec: v3-arkitektur dokumentert under `.claude/projects/2026-05-03-playground-v3-architecture/`. v1.10.0-utvidelser dokumentert under `.claude/projects/2026-05-03-ms-ai-architect-v1-10-playground/`. v1.11.0 leverer design-system 100%-adoption (PARALLEL-CSS-migrasjon til DS-konvensjon, inline `<style>`-trim 37%, severity-coded card borders, app-header-restruktur, `.stack-lg` body spacing, AI Act-pyramide bredde-fix). v1.13.0/.1 patchet 10+ symptomatiske visuelle bugs. v1.14.0 leverer root-cause refaktor over 6 sesjoner: B-DS-1/2/3 fikset i shared/ DS v0.4.0 (kanban-card word-break, expansion title-block, matrix-bubble cursor); 3 risk-renderere (renderDpia/Security/Ros) til DS-summary-grid + ros-layout; 6 compliance/govern-renderere bytter lokal `.report-meta`-wrapper mot DS-konvensjon; renderMigrate + renderPoc til expansion-list per fase (slett `.phase-detail`-CSS); 5b-fixes: renderCost p50/p90-objekter ekstrahert via `.monthly` (var "[object Object]"), renderCompare distinctive-token-matching erstatter firstWord-heuristikk, renderUtredning droppet misvisende `role="tab"`. Lokal `<style>`-blokk: 191 → 122 effektive linjer (~36% reduksjon). Alle 17 renderere PASS visuell QA.
-
-- **Fil:** `playground/ms-ai-architect-playground.html` (~3870+ linjer, single-file v3-arkitektur)
-- **4 surfaces:** Onboarding (18 felles felt — 4 strukturerte / 14 fritekst etter v1.10.0) → Home (prosjekt-liste + 3 entry-tracks) → Catalog (25 commands gruppert i 5 expansion-grupper med søk) → Project (per-prosjekt tabs, command-form-prefill fra felles state, paste-back-import med rapport-visualisering)
-- **Persistens:** IndexedDB-primær med localStorage-fallback. Schema-versjonert (`STATE_KEY = 'ms-ai-architect-state-v1'`) med eager `MIGRATIONS`-pipeline. v1.10.0 introduserer `dataVersion v1→v2`-migrasjon (idempotent) som backfill-er `verdict`+`keyStats`.
-- **17 rapport-renderers (felles grunnskjelett):** Alle wrapper output via `renderPageShell()` med eyebrow + h1 + valgfri verdict-pill + valgfri key-stats-grid + arketype-spesifikk body. Parser → struktur → HTML rutet via kanonisk archetype-routing-tabell.
-- **Foundation-helpers:** `renderPageShell`, `renderVerdictPill`, `renderKeyStatsGrid`, `inferVerdict`, `inferKeyStats`, `KEY_STATS_CONFIG`.
-- **Tier 3-adopsjon:** kanban (conformity, review), mat-ladder (migrate, poc), screen-tabs (utredning, project surface), scenario-card-grid (license, compare), residual-pair (dpia, ros), top-risks (ros), recommendation-card (security, ros), suppressed-panel (review), critique-card (adr), read-more (utredning, summary), traffic-light (poc).
-- **Theme:** Mørk default + lys theme-toggle med Aksel-tokens i begge moduser (lagt til i v1.10.0). Persistert i `localStorage('ms-ai-architect-theme')`. Theme-bootstrap-script i `<head>` unngår FOUC.
-- **Eksport/import:** JSON Decision Record-envelope (Blob + FileReader), schema-versjon-bevisst på import.
-
-### Validering (v1.14.0-tall)
-
-| Test | Kommando | Dekning |
-|------|----------|---------|
-| Statisk struktur | `bash tests/test-playground-v3.sh` | 202 PASS — vendored CSS, surfaces, 25 commands, 14 parsere, 17 renderers (felles grunnskjelett), design-system-klasser, action-handlers, Tier 3-bruk, onboarding field-distribution |
-| Parser-fixtures | `bash tests/test-playground-parsers.sh` | 70 PASS — 17 fixtures × parser-routing |
-| Migrasjon | `bash tests/test-playground-migrations.sh` | 7 PASS — v1→v2 idempotent migrasjon |
-| Kombinert (E2E) | `bash tests/run-e2e.sh --playground` | 272 PASS — statisk + parser-suiter |
-| Plugin-validering | `bash tests/validate-plugin.sh` | 219 PASS |
-| Manuell A11Y QA | Se `playground/MANUAL-CHECKLIST.md` | 10 seksjoner inkl. axe-core-kjøring per surface |
-| A11Y-rapport | `playground/A11Y-RAPPORT.md` | Statisk vurdering klar — browser-axe-kjøring pending |
-
-### Demo system (v1.11.0)
-
-`scripts/build-demo-state.mjs` leser alle 17 fixture-filer fra `playground/test-fixtures/` og injiserer dem som en `<script type="application/json" id="demo-state-v1">`-blokk i playground HTML (idempotent — erstatter eksisterende blokk). "Last inn demo-data"-knappen på onboarding-overflaten kaller `ACTIONS['load-demo']` som leser blokken, erstatter alle state-grener via Proxy-mutasjon, og navigerer til project-surface med 17 pre-importerte rapporter. `rehydratePasteImports()` kjøres via `queueMicrotask` etter project-surface render — fyller textareas fra `project.reports[id].raw_markdown` og kaller `handlePasteImport` for hver. `handlePasteImport` har equal-value-guard for å unngå render-loop.
-
-`tests/screenshot/` inneholder en frittstående Playwright-runner med egen `package.json` (gitignored `node_modules`). `node run.mjs` produserer 24 PNG-er (12 surfaces × 2 tema, retina, fullPage) under `playground/screenshots/v1.14.0/` (v1.10.0 + v1.11.0 beholdt som historisk referanse). Disse committes så forkere ser pluginen uten å installere noe. Demo-org er "Acme Kommune" og demo-prosjekt er "Acme: Kunde-chatbot" — konsistente navn på tvers av alle 17 fixtures (etter v1.11.0 rename fra "Acme AS" / "Demosystem").
-
-### Design-system 100%-adoption (v1.11.0 → v1.14.0)
-
-Sesjon 3-5 la til inline CSS i `playground/ms-ai-architect-playground.html`. v1.11.0 hoisted alle generiske komponenter til `shared/playground-design-system/components-tier3-supplement.css` (DS v0.3.0):
-- `.pyramide-desc` / `.pyramide-desc__item`
-- `.scenario-card-grid` / `.scenario-card`
-- `.residual-pair` / `__cell` / `__cell-label/__cell-value/__cell-meta` / `__arrow`
-- `.read-more` / `.read-more__trigger` / `.read-more__chev` / `.read-more__body`
-- `.top-risks` / `.top-risk[data-severity]`
-- `.recommendation-card`
-- `.suppressed-panel`
-- `.screen-tabs` / `.screen-tab` / `.screen[data-active]`
-
-v1.14.0 (DS v0.4.0): root-cause fix for tre DS-bugs som tidligere ble symptomatisk patchet i lokal CSS — `.kanban-card__name` (break-word + overflow-wrap; var break-all), `.expansion__title-main/sub` (display: block), `.matrix__bubble` (cursor + hover/focus). Fix-en re-syncet til vendored DS, og tilsvarende lokal-overrides slettet. Plus: 14 renderere refaktorert til DS-konvensjon (3 risk-renderere → DS-summary-grid + ros-layout, 6 compliance/govern-renderere → DS-konvensjon, renderMigrate + renderPoc → expansion-list per fase). Lokal `<style>`-blokk: 191 → 122 effektive linjer (~36% reduksjon siden v1.13.1).
-
-Alle PARALLEL-CSS-navngrupper migrert til DS-konvensjon. `renderPageShell` + `renderKeyStatsGrid` refaktorert til DS markup. Severity-coded card-borders på rapport-cards, app-header-restruktur, `.stack-lg` body spacing på home/project/catalog, AI Act-pyramide bredde-fix, eyebrow-label på home-projects.
-
-Ved videre hoisting: re-sync via `node scripts/sync-design-system.mjs ms-ai-architect`. Dette er endringer i delt asset — krever drift-deteksjon-handling per `MANIFEST.json`.
-
-### Vendored design-system
-
-Playground laster CSS fra `playground/vendor/playground-design-system/` — en vendored
-kopi av marketplace-rotens `shared/playground-design-system/`. Dette holder pluginen
-**standalone**: HTML-filen kan åpnes fra `file://` uavhengig av marketplace-roten.
-
-- **Sync-skript:** `node scripts/sync-design-system.mjs ms-ai-architect` (ved marketplace-rot)
-- **Drift-deteksjon:** `MANIFEST.json` lagrer SHA-256 per fil. Re-sync feiler hvis
-  vendored fil er endret lokalt — `--force` overstyrer.
-- **Lastes i HTML:** `<link>`-tags til `fonts.css`, `tokens.css`, `base.css`,
-  `components.css`, `components-tier2.css`, `components-tier3.css`,
-  `components-tier3-supplement.css` (i den rekkefølgen).
-- **Aldri rediger** filer under `vendor/playground-design-system/` direkte —
-  endringer går i `shared/`, deretter re-sync.
-
-> v2-spec under `docs/playground-v2-spec.md` er beholdt som historisk
-> referanse, men er IKKE gjeldende kontrakt. v3-arkitekturen er
-> dokumentert i `.claude/projects/2026-05-03-playground-v3-architecture/`.
-
-## Relaterte plugins (fremtidig)
-
-- `ms-rag-architect` — RAG-spesialist (egen plugin)
-- `ms-power-automate-architect` — Power Automate deep-dive
-- `ms-azure-ai-architect` — Azure AI Services deep-dive
-- `ms-foundry-architect` — Azure AI Foundry spesialist
-- `ms-copilot-studio-architect` — Copilot Studio spesialist
-
 ## Hooks (2)
 
 | Event | Script | Formål |
@@ -272,6 +105,12 @@ kopi av marketplace-rotens `shared/playground-design-system/`. Dette holder plug
 
 > Secrets scanning consolidated to llm-security plugin.
 
+## Reference docs (read on demand)
+
+- **Utvikling, testing, KB-refresh-workflow:** `docs/development.md`
+- **Playground v3 (decision-builder + rapport-viewer):** `docs/playground.md`
+- **Recommended MCP servers (detail):** `references/architecture/recommended-mcp-servers.md`
+
 ## Viktige frister (EU AI Act)
 
 | Frist | Krav | Status |
@@ -283,3 +122,10 @@ kopi av marketplace-rotens `shared/playground-design-system/`. Dette holder plug
 
 **Tilsynsmyndigheter:** Datatilsynet (personvern), nasjonal AI-tilsynsmyndighet (under etablering), sektortilsyn.
 
+## Relaterte plugins (fremtidig)
+
+- `ms-rag-architect` — RAG-spesialist (egen plugin)
+- `ms-power-automate-architect` — Power Automate deep-dive
+- `ms-azure-ai-architect` — Azure AI Services deep-dive
+- `ms-foundry-architect` — Azure AI Foundry spesialist
+- `ms-copilot-studio-architect` — Copilot Studio spesialist
diff --git a/plugins/ms-ai-architect/README.md b/plugins/ms-ai-architect/README.md
index 48c359a..188ceb9 100644
--- a/plugins/ms-ai-architect/README.md
+++ b/plugins/ms-ai-architect/README.md
@@ -6,7 +6,7 @@
 
 *AI-generated: all code produced by Claude Code through dialog-driven development. [Full disclosure →](../../README.md#ai-generated-code-disclosure)*
 
-![Version](https://img.shields.io/badge/version-1.14.0-blue)
+![Version](https://img.shields.io/badge/version-1.15.0-blue)
 ![Platform](https://img.shields.io/badge/platform-Claude_Code_Plugin-purple)
 ![Docs](https://img.shields.io/badge/reference_docs-387-green)
 ![Agents](https://img.shields.io/badge/agents-12-orange)
@@ -638,6 +638,7 @@ Category-to-skill routing is defined in `scripts/skill-gen/category-skill-map.js
 
 | Version | Date | Highlights |
 |---------|------|-----------|
+| **1.15.0** | 2026-05-16 | Playground v3 project-view integration — `renderProjectSurface` (v2 screen-tabs + category-tabs + per-command paste-cards) erstattet av `renderProjectView` (sidebar med 17 artifacts + main-area + import-modal overlay). `renderActive()` delegerer nå til `renderProjectSurfaceV3()`. Dead code fjernet: `renderCommandSubCard`, `rehydratePasteImports`, `currentProjectScreen`, `ACTIONS['project-screen']`, 5 v2-CSS-klasser (`.project-tabs`, `.project-tab`, `.project-tab__count`, `.sub-zone`, `.paste-import-row`, `.project-header__*`, `.command-cards`). 2 fingerprint-gap lukket: `requirements.headers` matcher nå "EU AI Act — Krav for høyrisiko..."; `license.headers` matcher "Lisens-kapabilitetsmatrise...". v2→v3 migrasjon utvidet med `parserFor` slik at demo-state med kun `raw_markdown` auto-parses inn i `project.artifacts[cid]`. `components-tier4-project-view.css` wired inn (var ikke loaded — modal-overlay og two-column layout virket ikke). `renderImportModal` setter `data-open="true"` (DS-kontrakt). 219 plugin-validering, 386 E2E playground (32 fingerprints, 219 v3-static, 70 parsers, 16 migrations, 30 project-view, 19 actions), 0 FAIL, 2 WARN (pre-eksisterende). 24 screenshots regenerert til `playground/screenshots/v1.15.0/`. Demo viser nå 17 artifacts navigerbare i sidebar, aggregate verdict (BLOKKERT), top-risks-liste, og fungerende re-importer/slett-knapper per artifact. |
 | **1.14.0** | 2026-05-08 | Playground root-cause refaktor — DS-konvensjon-adopsjon på tvers av 14 renderere over 6 sesjoner. Sesjon 2: B-DS-1/2/3 fikset i shared/ DS v0.4.0 (kanban-card word-break, expansion title-block, matrix-bubble cursor). Sesjon 3: renderDpia/Security/Ros til DS-summary-grid + ros-layout. Sesjon 4: 6 compliance/govern-renderere bytter `.report-meta`-wrapper mot DS-konvensjon (renderAiActPyramid, renderRequirements, renderConformity, renderTransparency, renderFria, renderReview). Sesjon 5: renderMigrate + renderPoc → expansion-list per fase (slett `.phase-detail`-CSS). Sesjon 5b: renderCost key-stats viste "[object Object]" (parser-output har p50/p90 = {monthly,yearly}-objekter — nå ekstrahert via `.monthly`); renderCompare distinctive-token-matching erstatter firstWord-heuristikk; renderUtredning droppet misvisende `role="tab"`-attributter. Lokal `<style>`-blokk: 191 → 122 effektive linjer (~36% reduksjon). 17 renderere PASS visuell QA mot demo-data. 219 plugin-validering, 272 E2E playground, 7 migrations PASS. 24 screenshots regenerert. |
 | **1.13.1** | 2026-05-06 | Playground visual bugs patch — 10 bugs identifisert post-v1.13.0 av maintainer i nettleser. Fixet: (B7) classify Forpliktelser indent via `.report-meta` CSS-reset; (B8a) `requirement-expand` ACTIONS-handler manglet — R-01..R-09-rader i AI Act-krav var ikke klikkbare; (B8b) expansion title-main + title-sub display:block så de stables; (B10) kanban-card `word-break:break-word` override DS' break-all; (B11) DPIA matrix-bobler match by description (Pass 1 first-cell exact + Pass 2 any-cell substring); (B12, B13, B15) defensive `display:block; clear:both; width:100%` på top-risks/suppressed-panel/phase-detail/aiact-timeline; (B14) Migrate/POC phases-summary-tabell over phase-detail-seksjoner. 23/23 smoke + 271 E2E + 219 plugin-validering. |
 | **1.13.0** | 2026-05-06 | Playground visual DS-fixes — 5 bugs identifisert og fikset i fix-pakke som speiler llm-security v7.6.1: (B1) `renderFindingsBlock` + `renderRequirements` outer-wrapper byttet fra `<div class="findings">` (DS grid 360px+1fr klemte indre struktur) til `<section class="report-meta">`; (B2) lokal `.report-table` CSS for 6+ rapporter (Trusler, Kostnadsoversikt, TCO, Risiko, Key Metrics) som manglet styling; (B3) ROS-matrise-bobler byttet `<span>` → `<button>` med `data-threat-id` + click-handler som scroller til Trusler-tabell-rad og highlighter; (B4) `renderRadarSvg` bumpet 300×300→380×380, R=125, dynamisk `text-anchor` for å unngå label-overlap ved 6+ akser; (B5) `recommendation-card__body` overflow-wrap. 22/22 smoke-test PASS. 219 plugin-validering. 272 E2E. |
diff --git a/plugins/ms-ai-architect/docs/development.md b/plugins/ms-ai-architect/docs/development.md
new file mode 100644
index 0000000..efca26d
--- /dev/null
+++ b/plugins/ms-ai-architect/docs/development.md
@@ -0,0 +1,92 @@
+# ms-ai-architect — Development
+
+Plugin development, testing, KB-refresh. Imported from `CLAUDE.md` via pointer.
+
+## Legge til ny kunnskapsbase
+1. Opprett `.md`-fil i riktig undermappe under den relevante skillens `references/`-mappe (f.eks. `skills/ms-ai-engineering/references/`)
+2. Følg format fra eksisterende filer (header, dato, seksjoner, "For Cosmo"-seksjon)
+3. Oppdater relevant SKILL.md med referanse
+
+## Legge til ny kommando
+1. Opprett `commands/navn.md` med frontmatter (`description`, `argument-hint`)
+2. Følg mønster fra eksisterende kommandoer
+3. Oppdater `commands/help.md` med ny kommando
+4. Oppdater `CLAUDE.md`
+
+## Legge til ny agent
+1. Opprett `agents/navn-agent.md` med frontmatter (`name`, `description`, `model`, `color`, `tools`)
+2. Inkluder tydelig "triggers on" i description
+3. Oppdater `CLAUDE.md`
+
+## Testing
+
+### Statisk validering
+```bash
+# Kjør plugin-validering (frontmatter, encoding, KB-referanser)
+bash tests/validate-plugin.sh
+```
+
+### KB-ferskhet (sitemap-basert, manuell drift)
+
+**Apply-fasen kjøres via slash-kommandoen** (krever aktiv Claude Code-sesjon, holder oss innenfor Anthropic Consumer Terms § 3):
+
+```text
+/architect:kb-update                          # default: critical + high
+/architect:kb-update --priorities critical    # bare critical
+/architect:kb-update --skip-discover          # hopp over new-URL discovery
+/architect:kb-update --dry-run                # rapport uten apply
+```
+
+**Endringsrapport-fasen kan kjøres som rent Node-script (ingen LLM-kostnad):**
+
+```bash
+# Poll sitemaps → endringsrapport (ingen filendringer)
+node scripts/kb-update/run-weekly-update.mjs --force
+
+# Med discovery av nye relevante sider
+node scripts/kb-update/run-weekly-update.mjs --force --discover
+
+# Vis rapport på nytt etter polling
+node scripts/kb-update/report-changes.mjs
+
+# Bygg/oppdater URL-registry fra referansefiler
+node scripts/kb-update/build-registry.mjs [--merge]
+```
+
+Systemet sammenligner Microsoft Learn sitemap-`<lastmod>` med filenes `Last updated:` header, og genererer en prioritert endringsrapport (critical/high/medium/low).
+
+**Match rate:** ~69% av 1342 URLer matche mot sitemaps. ~31% (mest `azure/ai-foundry/openai/`-stier) finnes ikke i sitemaps pga. Microsofts URL-restrukturering.
+
+**Schedulering:** Pluginen schedulerer ingenting. Bruker som vil ha periodisk varsling kan sette opp egen cron / launchd / systemd / GitHub Actions som kjører `node scripts/kb-update/run-weekly-update.mjs --force --discover` (rapport-fasen, ikke apply). Apply-fasen er bevisst manuell — den krever LLM-resonnering på diff og kjører fra en åpen Claude Code-sesjon.
+
+Legacy (deprecated):
+```bash
+bash scripts/kb-staleness-check.sh  # mtime-basert, upålitelig etter git clone
+```
+
+### E2E-regresjonstester
+```bash
+# Kjør alle E2E-suiter
+bash tests/run-e2e.sh
+
+# Kjør enkeltsuiter
+bash tests/run-e2e.sh --security
+bash tests/run-e2e.sh --cost
+bash tests/run-e2e.sh --summary
+bash tests/run-e2e.sh --ai-act
+```
+
+Fixture-basert validering av agent-output (sikkerhet, kostnad, sammendrag). Tester struktur, encoding, og domene-spesifikke krav uten å invokere Claude.
+
+### Manuell test
+```bash
+# Test at plugin registreres
+cd <plugin-root>
+claude --plugin ./plugins/ms-ai-architect
+
+# Kjør hovedcommand
+/architect
+
+# Vis alle kommandoer
+/architect:help
+```
diff --git a/plugins/ms-ai-architect/docs/playground.md b/plugins/ms-ai-architect/docs/playground.md
new file mode 100644
index 0000000..9b08a26
--- /dev/null
+++ b/plugins/ms-ai-architect/docs/playground.md
@@ -0,0 +1,66 @@
+# ms-ai-architect — Playground (v3 / v1.15.0)
+
+Interaktiv decision-builder + rapport-viewer for Microsoft AI-beslutninger. Imported from `CLAUDE.md` via pointer.
+
+Erstatter v2 5-stegs-pipelinen med en multi-surface-app som persisterer state og visualiserer importerte rapporter inline. Spec: v3-arkitektur dokumentert under `.claude/projects/2026-05-03-playground-v3-architecture/`. v1.10.0-utvidelser dokumentert under `.claude/projects/2026-05-03-ms-ai-architect-v1-10-playground/`. v1.11.0 leverer design-system 100%-adoption. v1.13.0/.1 patchet 10+ symptomatiske visuelle bugs. v1.14.0 leverer root-cause refaktor over 6 sesjoner (DS-konvensjon-adopsjon på 14 renderere, lokal CSS halvert).
+
+**v1.15.0 (sesjon 5 av ~8 i v2-prosjektet):** Project-surface byttet fra v2 `renderProjectSurface` (screen-tabs + category-tabs + per-command paste-cards) til v3 `renderProjectView` (sidebar med 17 artifacts + main-area + import-modal overlay). `renderActive()` ruter `project`-surface til `renderProjectSurfaceV3()` som wrapper renderProjectView + topbar + app-shell. V2-surface helt fjernet: `renderProjectSurface` (152 linjer), `renderCommandSubCard` (87 linjer), `rehydratePasteImports` (15 linjer), `currentProjectScreen`, `ACTIONS['project-screen']`, 5 v2-CSS-klasser. Zombie-handlers beholdt for test-back-compat: `currentProjectTab`, `ACTIONS['project-tab']`, `ACTIONS['parse']`, `handlePasteImport`, `window.__handlePasteImport`. 2 fingerprint-gap lukket: requirements.headers + license.headers. `migrateDataVersion` utvidet med `parserFor` → demo-state (kun `raw_markdown`) auto-parses til `project.artifacts[cid]`. Ship-QA-bugfixes: `components-tier4-project-view.css` lagt til i `<link>`-kjeden (manglet → modal-overlay og two-column layout virket ikke); `renderImportModal` setter `data-open="true"` (DS-kontrakt).
+
+- **Fil:** `playground/ms-ai-architect-playground.html` (~3870+ linjer, single-file v3-arkitektur)
+- **4 surfaces:** Onboarding (18 felles felt — 4 strukturerte / 14 fritekst etter v1.10.0) → Home (prosjekt-liste + 3 entry-tracks) → Catalog (25 commands gruppert i 5 expansion-grupper med søk) → **Project v3** (sidebar med 17 artifacts gruppert i 4 kategorier + søk + main-area med per-artifact view eller overview med top-risks/next-actions + import-modal som DS-overlay)
+- **Persistens:** IndexedDB-primær med localStorage-fallback. Schema-versjonert (`STATE_KEY = 'ms-ai-architect-state-v1'`) med eager `MIGRATIONS`-pipeline. v1.10.0 introduserer `dataVersion v1→v2`-migrasjon (idempotent) som backfill-er `verdict`+`keyStats`.
+- **17 rapport-renderers (felles grunnskjelett):** Alle wrapper output via `renderPageShell()` med eyebrow + h1 + valgfri verdict-pill + valgfri key-stats-grid + arketype-spesifikk body. Parser → struktur → HTML rutet via kanonisk archetype-routing-tabell.
+- **Foundation-helpers:** `renderPageShell`, `renderVerdictPill`, `renderKeyStatsGrid`, `inferVerdict`, `inferKeyStats`, `KEY_STATS_CONFIG`.
+- **Tier 3-adopsjon:** kanban (conformity, review), mat-ladder (migrate, poc), screen-tabs (utredning, project surface), scenario-card-grid (license, compare), residual-pair (dpia, ros), top-risks (ros), recommendation-card (security, ros), suppressed-panel (review), critique-card (adr), read-more (utredning, summary), traffic-light (poc).
+- **Theme:** Mørk default + lys theme-toggle med Aksel-tokens i begge moduser (lagt til i v1.10.0). Persistert i `localStorage('ms-ai-architect-theme')`. Theme-bootstrap-script i `<head>` unngår FOUC.
+- **Eksport/import:** JSON Decision Record-envelope (Blob + FileReader), schema-versjon-bevisst på import.
+
+## Validering (v1.15.0-tall)
+
+| Test | Kommando | Dekning |
+|------|----------|---------|
+| Statisk struktur | `bash tests/test-playground-v3.sh` | 219 PASS, 2 WARN (pre-eks.) — vendored CSS, surfaces, 25 commands, 14 parsere, 17 renderers via PROJECT_VIEW_CONFIG.renderers-routing, action-handlers |
+| Parser-fixtures | `bash tests/test-playground-parsers.sh` | 70 PASS — 17 fixtures × parser-routing |
+| Migrasjon | `bash tests/test-playground-migrations.sh` | 16 PASS — v1→v2 + v2→v3 idempotent migrasjon |
+| Fingerprints | `bash tests/test-playground-fingerprints.sh` | 32 PASS — 17-fixture true-positive + 4 anti-match + API-sanity |
+| Project-view | `bash tests/test-playground-projectview.sh` | 30 PASS — 4 view-states + nav-søk + null-guard |
+| ACTIONS | `bash tests/test-playground-actions.sh` | 19 PASS — 6 pure-state-handlers + projectViewUiState |
+| Kombinert (E2E) | `bash tests/run-e2e.sh --playground` | 386 PASS, 0 FAIL, 2 WARN |
+| Plugin-validering | `bash tests/validate-plugin.sh` | 219 PASS |
+| Manuell A11Y QA | Se `playground/MANUAL-CHECKLIST.md` | 10 seksjoner inkl. axe-core-kjøring per surface |
+| A11Y-rapport | `playground/A11Y-RAPPORT.md` | Statisk vurdering klar — browser-axe-kjøring pending |
+
+## Demo system (v1.11.0 → v1.15.0)
+
+`scripts/build-demo-state.mjs` leser alle 17 fixture-filer fra `playground/test-fixtures/` og injiserer dem som en `<script type="application/json" id="demo-state-v1">`-blokk i playground HTML (idempotent — erstatter eksisterende blokk). "Last inn demo-data"-knappen på onboarding-overflaten kaller `ACTIONS['load-demo']` som leser blokken, erstatter alle state-grener via Proxy-mutasjon, kjører `migrateDataVersion` (v2→v3 auto-parser raw_markdown til artifacts), og navigerer til project-surface. Demo viser 17 artifacts gruppert i sidebar med severity-badges, aggregate verdict (BLOKKERT), top-risks-liste, og fungerende re-importer/slett-knapper per artifact.
+
+`tests/screenshot/` inneholder en frittstående Playwright-runner med egen `package.json` (gitignored `node_modules`). `node run.mjs` produserer 24 PNG-er (12 surfaces × 2 tema) under `playground/screenshots/v1.15.0/`. v1.15.0-surfaces: onboarding-empty, project-overview, project-artifact-{classify,security,ros,cost,summary}, project-import-modal (viewport-only — modal er position:fixed overlay), project-search, home, catalog, onboarding-prefilled. v1.10.0/v1.11.0/v1.14.0 beholdt som historisk referanse. Disse committes så forkere ser pluginen uten å installere noe. Demo-org er "Acme Kommune" og demo-prosjekt er "Acme: Kunde-chatbot".
+
+## Design-system 100%-adoption (v1.11.0 → v1.14.0)
+
+Sesjon 3-5 la til inline CSS i `playground/ms-ai-architect-playground.html`. v1.11.0 hoisted alle generiske komponenter til `shared/playground-design-system/components-tier3-supplement.css` (DS v0.3.0):
+- `.pyramide-desc` / `.pyramide-desc__item`
+- `.scenario-card-grid` / `.scenario-card`
+- `.residual-pair` / `__cell` / `__cell-label/__cell-value/__cell-meta` / `__arrow`
+- `.read-more` / `.read-more__trigger` / `.read-more__chev` / `.read-more__body`
+- `.top-risks` / `.top-risk[data-severity]`
+- `.recommendation-card`
+- `.suppressed-panel`
+- `.screen-tabs` / `.screen-tab` / `.screen[data-active]`
+
+v1.14.0 (DS v0.4.0): root-cause fix for tre DS-bugs som tidligere ble symptomatisk patchet i lokal CSS — `.kanban-card__name` (break-word + overflow-wrap; var break-all), `.expansion__title-main/sub` (display: block), `.matrix__bubble` (cursor + hover/focus). Fix-en re-syncet til vendored DS, og tilsvarende lokal-overrides slettet. Plus: 14 renderere refaktorert til DS-konvensjon (3 risk-renderere → DS-summary-grid + ros-layout, 6 compliance/govern-renderere → DS-konvensjon, renderMigrate + renderPoc → expansion-list per fase). Lokal `<style>`-blokk: 191 → 122 effektive linjer (~36% reduksjon siden v1.13.1).
+
+Alle PARALLEL-CSS-navngrupper migrert til DS-konvensjon. `renderPageShell` + `renderKeyStatsGrid` refaktorert til DS markup. Severity-coded card-borders på rapport-cards, app-header-restruktur, `.stack-lg` body spacing på home/project/catalog, AI Act-pyramide bredde-fix, eyebrow-label på home-projects.
+
+Ved videre hoisting: re-sync via `node scripts/sync-design-system.mjs ms-ai-architect`. Dette er endringer i delt asset — krever drift-deteksjon-handling per `MANIFEST.json`.
+
+## Vendored design-system
+
+Playground laster CSS fra `playground/vendor/playground-design-system/` — en vendored kopi av marketplace-rotens `shared/playground-design-system/`. Dette holder pluginen **standalone**: HTML-filen kan åpnes fra `file://` uavhengig av marketplace-roten.
+
+- **Sync-skript:** `node scripts/sync-design-system.mjs ms-ai-architect` (ved marketplace-rot)
+- **Drift-deteksjon:** `MANIFEST.json` lagrer SHA-256 per fil. Re-sync feiler hvis vendored fil er endret lokalt — `--force` overstyrer.
+- **Lastes i HTML:** `<link>`-tags til `fonts.css`, `tokens.css`, `base.css`, `components.css`, `components-tier2.css`, `components-tier3.css`, `components-tier3-supplement.css` (i den rekkefølgen).
+- **Aldri rediger** filer under `vendor/playground-design-system/` direkte — endringer går i `shared/`, deretter re-sync.
+
+> v2-spec under `docs/playground-v2-spec.md` er beholdt som historisk referanse, men er IKKE gjeldende kontrakt. v3-arkitekturen er dokumentert i `.claude/projects/2026-05-03-playground-v3-architecture/`.
diff --git a/plugins/ms-ai-architect/playground/ms-ai-architect-playground.html b/plugins/ms-ai-architect/playground/ms-ai-architect-playground.html
index 20ec73e..382c6e2 100644
--- a/plugins/ms-ai-architect/playground/ms-ai-architect-playground.html
+++ b/plugins/ms-ai-architect/playground/ms-ai-architect-playground.html
@@ -38,6 +38,7 @@
   <link rel="stylesheet" href="vendor/playground-design-system/components-tier2.css">
   <link rel="stylesheet" href="vendor/playground-design-system/components-tier3.css">
   <link rel="stylesheet" href="vendor/playground-design-system/components-tier3-supplement.css">
+  <link rel="stylesheet" href="vendor/playground-design-system/components-tier4-project-view.css">
 
   <!-- App-shell layout. Vendored design-system levner komponent-CSS;
        her bor kun side-spesifikk layout-grid (sidebar+main, modals, sub-cards).
@@ -77,21 +78,10 @@
 
     /* Project surface */
     .project-header { display: flex; flex-direction: column; gap: var(--space-2); padding: var(--space-5) 0 var(--space-4); border-bottom: 1px solid var(--color-border-subtle); margin-bottom: var(--space-5); }
-    .project-header__top { display: flex; align-items: flex-start; justify-content: space-between; gap: var(--space-4); }
-    .project-header__title { font-size: var(--font-size-2xl); margin: 0; }
-    .project-header__meta { display: flex; flex-wrap: wrap; gap: var(--space-3); font-size: var(--font-size-sm); color: var(--color-text-secondary); }
-    .project-header__chip { display: inline-flex; align-items: center; gap: 6px; padding: 2px 8px; border-radius: var(--radius-sm); background: var(--color-bg-soft); color: var(--color-text-secondary); font-size: var(--font-size-xs); font-family: var(--font-family-mono); }
-    .project-tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--color-border-subtle); margin-bottom: var(--space-5); flex-wrap: wrap; }
-    .project-tab { background: transparent; border: 0; padding: 10px 16px; cursor: pointer; font-family: inherit; font-size: var(--font-size-sm); font-weight: var(--font-weight-medium); color: var(--color-text-secondary); border-bottom: 2px solid transparent; margin-bottom: -1px; }
-    .project-tab:hover { color: var(--color-text-primary); }
-    .project-tab[aria-current="true"] { color: var(--color-text-primary); border-bottom-color: var(--color-primary-500); }
-    .project-tab__count { display: inline-block; margin-left: 6px; padding: 1px 6px; background: var(--color-bg-soft); border-radius: 10px; font-size: 11px; color: var(--color-text-tertiary); }
-    .command-cards { display: flex; flex-direction: column; gap: var(--space-4); }
-    /* .card + .card__* hentet fra vendored DS (base.css + tier3-supplement). */
-    .sub-zone { border-top: 1px solid var(--color-border-subtle); padding-top: var(--space-3); }
-    .sub-zone__heading { font-size: var(--font-size-xs); font-weight: var(--font-weight-semibold); text-transform: uppercase; letter-spacing: 0.06em; color: var(--color-text-tertiary); margin: 0 0 var(--space-2); }
-    .paste-import-row { display: flex; flex-direction: column; gap: var(--space-2); }
-    .paste-import-row__actions { display: flex; gap: var(--space-2); align-items: center; }
+    /* v1.15.0: v2 project-surface CSS (.project-tabs, .project-tab*, .sub-zone,
+       .paste-import-row, .project-header__*, .command-cards) fjernet sammen
+       med renderProjectSurface/renderCommandSubCard. v3 bruker .project-view*
+       fra DS (components-tier3-supplement.css) + lokal CSS lengre ned. */
     .form-zone-placeholder { padding: var(--space-3); background: var(--color-bg-soft); border-radius: var(--radius-sm); font-size: var(--font-size-sm); color: var(--color-text-tertiary); font-style: italic; }
     .report-slot { min-height: 24px; }
     .report-slot:empty::before { content: "Ingen importert rapport ennå."; font-size: var(--font-size-sm); color: var(--color-text-tertiary); font-style: italic; }
@@ -649,7 +639,7 @@
       if (!loaded.schemaVersion) loaded.schemaVersion = SCHEMA_VERSION;
       // Data-version migrasjon (v1.9.0 -> v1.10.0): utled verdict/keyStats
       // for eksisterende parser-output. Idempotent via state.dataVersion-guard.
-      try { migrateDataVersion(loaded, defaultArchetypeFor); }
+      try { migrateDataVersion(loaded, defaultArchetypeFor, defaultParserFor); }
       catch (e) { console.warn('[playground v3] migrateDataVersion failed:', e); }
       store = createStore(loaded, sharedBus);
       scheduleWrite = makeThrottledWriter(function () {
@@ -783,7 +773,7 @@
       });
       // Data-version migrasjon (additive — verdict/keyStats utledes for
       // pre-v1.10.0 envelope-er). Idempotent via dataVersion=2 guard.
-      try { migrateDataVersion(migrated, defaultArchetypeFor); }
+      try { migrateDataVersion(migrated, defaultArchetypeFor, defaultParserFor); }
       catch (e) { console.warn('[playground v3] migrateDataVersion (import) failed:', e); }
       // Skriv direkte til persistens for å unngå at debounce-vinduet
       // svelger import-en ved en samtidig page-unload.
@@ -1669,10 +1659,31 @@
       showSurface(active);
       if (active === 'onboarding') renderOnboardingSurface();
       else if (active === 'home') renderHomeSurface();
-      else if (active === 'project') renderProjectSurface();
+      else if (active === 'project') renderProjectSurfaceV3();
       else if (active === 'catalog') renderCatalogSurface();
     }
 
+    // v1.15.0: project-surface delegerer til renderProjectView (V2-arkitektur).
+    // Wrapper-funksjonen rendrer topbar + app-shell rundt project-view, og
+    // sørger for at modalen fra renderProjectView (import-modal) plasseres
+    // utenfor .app-shell — søsken til .project-view-roten — slik at modal
+    // overlay-en ikke arver shell-paddingen.
+    function renderProjectSurfaceV3() {
+      const root = getSurfaceEl('project');
+      if (!root) return;
+      const project = findProject(store.state.activeProjectId);
+      if (!project) {
+        navigate('home');
+        return;
+      }
+      root.innerHTML = (
+        renderTopbar('Prosjekt: ' + escapeHtml(project.name)) +
+        '<div class="app-shell app-shell--wide">' +
+          renderProjectView(project, PROJECT_VIEW_CONFIG) +
+        '</div>'
+      );
+    }
+
     function navigate(surface) {
       store.state.activeSurface = surface;
       scheduleRender();
@@ -1917,12 +1928,11 @@
       { id: 'reporting', name: 'AI-assistert rapportering' }
     ];
 
+    // v1.15.0: currentProjectTab beholdes som zombie for ACTIONS['project-tab']-
+    // back-compat (test-playground-v3.sh asserter at handleren er definert).
+    // Selve action-en er unreachable fra v3 DOM. currentProjectScreen er fjernet
+    // sammen med ACTIONS['project-screen'].
     let currentProjectTab = 'regulatory';
-    // Screen-tabs på project-surface (A4 Tier 3): Oversikt / Rapporter /
-    // Kontekst / Eksport. Default 'rapporter' = primær arbeidsflate (eksisterende
-    // category-tabs + panels). Andre skjermer er stub i Sesjon 2 og fylles ut
-    // i senere sesjoner.
-    let currentProjectScreen = 'rapporter';
 
     function findProject(id) {
       const list = store.state.projects || [];
@@ -1948,7 +1958,6 @@
       store.state.projects.push(project);
       store.state.activeProjectId = id;
       currentProjectTab = 'regulatory';
-      currentProjectScreen = 'rapporter';
       return project;
     }
 
@@ -2057,248 +2066,9 @@
       );
     }
 
-    // ---- Sub-card rendering ----
-
-    function renderCommandSubCard(cmd, projectId) {
-      // Sev-modifier: hvis rapporten er parsed, mappe verdict til DS card--severity-{level}.
-      // Plugin-domain-verdicts (go/block/approved/...) → severity-band (positive/critical/medium).
-      const project = findProject(projectId);
-      const report = project && project.reports && project.reports[cmd.id];
-      const verdict = report && report.parsed && report.parsed.verdict
-        ? String(report.parsed.verdict).toLowerCase() : '';
-      const sevMap = {
-        'go': 'positive', 'approved': 'positive', 'allow': 'positive',
-        'go-with-conditions': 'medium', 'warning': 'medium',
-        'block': 'critical', 'failed': 'critical'
-      };
-      const sevModifier = sevMap[verdict] || '';
-      const sevClass = sevModifier ? ' card--severity-' + sevModifier : '';
-
-      const titleHtml = (
-        '<div class="card__head">' +
-          '<div>' +
-            '<h3 class="card__title">' + escapeHtml(cmd.label) + '</h3>' +
-            '<p class="card__desc">' + escapeHtml(cmd.description) + '</p>' +
-          '</div>' +
-          '<span class="card__id">/architect:' + escapeHtml(cmd.id) + '</span>' +
-        '</div>'
-      );
-
-      const formZone = (
-        '<div class="sub-zone">' +
-          '<h4 class="sub-zone__heading">Skjema</h4>' +
-          '<div data-form-zone="' + escapeAttr(cmd.id) + '">' +
-            renderCommandForm(cmd.id, { context: 'project', projectId: projectId, scope: 'p' }) +
-          '</div>' +
-        '</div>'
-      );
-
-      if (!cmd.produces_report) {
-        // Verktøy: skjema-zone + .guide-panel--info notis
-        const toolNotice = (
-          '<div class="sub-zone">' +
-            '<div class="guide-panel guide-panel--info">' +
-              '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-              '<div class="guide-panel__body">' +
-                '<h3 class="guide-panel__title">Verktøy</h3>' +
-                '<p class="guide-panel__text">Dette er et verktøy. Ingen rapport-import — bruk skjemaet til å bygge en pipeline-streng som kjøres i terminalen.</p>' +
-              '</div>' +
-            '</div>' +
-          '</div>'
-        );
-        return (
-          '<article class="card' + sevClass + '" data-command-card data-command-id="' + escapeAttr(cmd.id) + '">' +
-            titleHtml +
-            formZone +
-            toolNotice +
-          '</article>'
-        );
-      }
-
-      // Rapport-produserende: skjema-zone + paste-import-zone + report-zone
-      const pasteZone = (
-        '<div class="sub-zone">' +
-          '<h4 class="sub-zone__heading">Lim inn rapport-output</h4>' +
-          '<div class="paste-import-row">' +
-            '<textarea class="textarea" data-paste-import="' + escapeAttr(cmd.id) + '" rows="4" placeholder="Lim inn markdown-output fra terminalen her"></textarea>' +
-            '<div class="paste-import-row__actions">' +
-              '<button type="button" class="btn btn--secondary btn--sm" data-action="parse" data-command="' + escapeAttr(cmd.id) + '">Analyser rapport</button>' +
-              '<span class="field-help">Routes via PARSERS[' + escapeHtml(cmd.report_archetype || '?') + '] → ' + escapeHtml(cmd.renderer || '?') + ' (Step 11/12).</span>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const reportZone = (
-        '<div class="sub-zone">' +
-          '<h4 class="sub-zone__heading">Visualisering</h4>' +
-          '<div class="report-slot ' + escapeAttr(cmd.report_root_class || '') + '" data-report-slot="' + escapeAttr(cmd.id) + '"></div>' +
-        '</div>'
-      );
-
-      return (
-        '<article class="card' + sevClass + '" data-command-card data-command-id="' + escapeAttr(cmd.id) + '">' +
-          titleHtml +
-          formZone +
-          pasteZone +
-          reportZone +
-        '</article>'
-      );
-    }
-
-    function renderProjectSurface() {
-      const root = getSurfaceEl('project');
-      if (!root) return;
-
-      const project = findProject(store.state.activeProjectId);
-      if (!project) {
-        // Mistet aktivt prosjekt — fall tilbake til hjem.
-        navigate('home');
-        return;
-      }
-
-      const reportTotal = CATALOG.commands.filter(function (c) { return c.produces_report; }).length;
-      const reportFilled = projectReportCount(project);
-
-      // Action-bar (Tilbake / Slett) flyttet under page-shell-headeren —
-      // page__header har dedikert verdict-slot som ikke tar arbitrary HTML.
-      const actionBar = (
-        '<div class="onboarding-actions" style="justify-content: flex-end; margin-bottom: var(--space-4);">' +
-          '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-home">← Tilbake</button>' +
-          '<button type="button" class="btn btn--secondary btn--sm" data-action="delete-project" data-project-id="' + escapeAttr(project.id) + '">Slett</button>' +
-        '</div>'
-      );
-
-      // Tab-list (DS): Oversikt / Rapporter / Kontekst / Eksport.
-      // Sesjon 2: Rapporter er primær; andre er stub-skjermer som fylles ut
-      // i Sesjon 3-6.
-      const SCREENS = [
-        { id: 'oversikt',  label: 'Oversikt' },
-        { id: 'rapporter', label: 'Rapporter' },
-        { id: 'kontekst',  label: 'Kontekst' },
-        { id: 'eksport',   label: 'Eksport' }
-      ];
-      const screenTabsHtml = '<nav class="tab-list" role="tablist" aria-label="Prosjekt-skjermer">' + SCREENS.map(function (s) {
-        const isActive = currentProjectScreen === s.id;
-        return (
-          '<button type="button" class="tab" role="tab"' +
-            ' aria-current="' + (isActive ? 'true' : 'false') + '"' +
-            ' data-action="project-screen" data-screen="' + escapeAttr(s.id) + '">' +
-            escapeHtml(s.label) +
-          '</button>'
-        );
-      }).join('') + '</nav>';
-
-      // Tabs per CATALOG.categories — kun synlig under "Rapporter"-skjermen.
-      const tabsHtml = '<div class="project-tabs" role="tablist">' + CATALOG.categories.map(function (cat) {
-        const isActive = currentProjectTab === cat.id;
-        return (
-          '<button type="button" class="project-tab" role="tab"' +
-            (isActive ? ' aria-current="true"' : '') +
-            ' data-action="project-tab" data-tab="' + escapeAttr(cat.id) + '">' +
-            escapeHtml(cat.label) +
-            '<span class="project-tab__count">' + cat.count + '</span>' +
-          '</button>'
-        );
-      }).join('') + '</div>';
-
-      // Render ALLE kategori-paneler i DOM (med [hidden] på inaktive). Dette
-      // sikrer at querySelectorAll('[data-paste-import]') matcher alle 17
-      // rapport-produserende commands uavhengig av aktiv tab.
-      const panelsHtml = CATALOG.categories.map(function (cat) {
-        const isActive = currentProjectTab === cat.id;
-        const cards = CATALOG.commands
-          .filter(function (c) { return c.category === cat.id; })
-          .map(function (c) { return renderCommandSubCard(c, project.id); }).join('');
-        return (
-          '<div class="command-cards" role="tabpanel" data-tab-panel="' + escapeAttr(cat.id) + '"' + (isActive ? '' : ' hidden') + '>' +
-            cards +
-          '</div>'
-        );
-      }).join('');
-
-      const scenarioChipsList = (project.scenarios || []).map(function (sid) {
-        const s = SCENARIOS.find(function (x) { return x.id === sid; });
-        return '<li>' + escapeHtml(s ? s.name : sid) + '</li>';
-      }).join('');
-
-      const oversiktHtml = (
-        '<div class="tab-panel" data-screen-id="oversikt"' + (currentProjectScreen === 'oversikt' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Oversikt</h3>' +
-              '<p class="guide-panel__text">Opprettet ' + escapeHtml((project.createdAt || '').slice(0, 10)) + '. ' + reportFilled + ' av ' + reportTotal + ' rapporter generert.</p>' +
-              (scenarioChipsList ? '<p class="guide-panel__text" style="margin-top: var(--space-2);"><strong>Scenarioer:</strong></p><ul style="margin: 0; padding-left: var(--space-4); color: var(--color-text-secondary);">' + scenarioChipsList + '</ul>' : '') +
-              '<p class="guide-panel__text" style="margin-top: var(--space-3);"><em>Sesjon 3+: aggregerte verdict-pillen, recommended-next-actions og top-risks vises her.</em></p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const rapporterHtml = (
-        '<div class="tab-panel" data-screen-id="rapporter"' + (currentProjectScreen === 'rapporter' ? '' : ' hidden') + '>' +
-          tabsHtml +
-          panelsHtml +
-        '</div>'
-      );
-
-      const kontekstHtml = (
-        '<div class="tab-panel" data-screen-id="kontekst"' + (currentProjectScreen === 'kontekst' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Kontekst</h3>' +
-              '<p class="guide-panel__text">Fellesfeltene fra onboarding gjenbrukes automatisk i alle command-skjemaer. Bruk <button type="button" class="btn btn--ghost btn--sm" data-action="goto-onboarding" style="display:inline;">Re-onboard</button> for å oppdatere.</p>' +
-              '<p class="guide-panel__text" style="margin-top: var(--space-2);"><em>Sesjon 3+: snapshot av de 20 fellesfeltene og hva som er prefilled per command vises her.</em></p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const eksportHtml = (
-        '<div class="tab-panel" data-screen-id="eksport"' + (currentProjectScreen === 'eksport' ? '' : ' hidden') + '>' +
-          '<div class="guide-panel guide-panel--info">' +
-            '<div class="guide-panel__icon" aria-hidden="true">i</div>' +
-            '<div class="guide-panel__body">' +
-              '<h3 class="guide-panel__title">Eksport</h3>' +
-              '<p class="guide-panel__text">Bruk <strong>Eksporter</strong> i toppmenyen for hele state. Per-prosjekt eksport (PDF/Markdown) kommer i Sesjon 6.</p>' +
-            '</div>' +
-          '</div>' +
-        '</div>'
-      );
-
-      const projectShell = renderPageShell({
-        eyebrow: 'PROSJEKT',
-        title: project.name,
-        lede: project.description || '',
-        verdict: inferProjectVerdict(project),
-        keyStats: [
-          { label: 'RAPPORTER', value: reportFilled + '/' + reportTotal },
-          { label: 'SIST OPPDATERT', value: inferProjectLastUpdated(project) }
-        ]
-      },
-        '<div class="stack-lg">' +
-          actionBar +
-          screenTabsHtml +
-          oversiktHtml +
-          rapporterHtml +
-          kontekstHtml +
-          eksportHtml +
-        '</div>'
-      );
-
-      root.innerHTML = (
-        renderTopbar('Prosjekt: ' + escapeHtml(project.name)) +
-        '<div class="app-shell app-shell--wide">' +
-          projectShell +
-        '</div>'
-      );
-
-      // v1.10.0+: rehydrer paste-imports etter at DOM er bygget. queueMicrotask
-      // sikrer at innerHTML har commit-et før vi spørr etter [data-paste-import].
-      queueMicrotask(rehydratePasteImports);
-    }
+    // v1.15.0: renderCommandSubCard + renderProjectSurface fjernet.
+    // v3 project-view (renderProjectView/renderProjectSurfaceV3) er nå eneste
+    // project-overflate. Paste-import er erstattet av modal-flow (import-open).
 
     // ============================================================
     // CATALOG SURFACE (Step 9)
@@ -4924,24 +4694,83 @@
     // inferVerdict + inferKeyStats. Setter state.dataVersion = 2 så
     // migrasjonen er idempotent (re-kjøring er no-op).
 
-    function migrateDataVersion(state, archetypeFor) {
+    // v1.15.0: parserFor lagt til som tredje arg. Brukes i v2→v3 til å
+    // auto-parse raw_markdown når reports[cid].parsed mangler (f.eks. demo-state
+    // pre-import-er). Idempotent — kun fyller artifacts.parsed når lyset er rødt.
+    function migrateDataVersion(state, archetypeFor, parserFor) {
       if (!state) return state;
-      if (state.dataVersion === 2) return state;
-      const projects = state.projects || [];
-      for (let i = 0; i < projects.length; i++) {
-        const reports = (projects[i] && projects[i].reports) || {};
-        const ids = Object.keys(reports);
-        for (let j = 0; j < ids.length; j++) {
-          const cmdId = ids[j];
-          const r = reports[cmdId];
-          if (!r || !r.parsed) continue;
-          const arche = typeof archetypeFor === 'function' ? archetypeFor(cmdId) : null;
-          if (!arche) continue;
-          if (r.parsed.verdict == null) r.parsed.verdict = inferVerdict(r.parsed, arche);
-          if (!Array.isArray(r.parsed.keyStats)) r.parsed.keyStats = inferKeyStats(r.parsed, arche);
+      const from = Number(state.dataVersion) || 0;
+
+      // v? -> v2: backfill verdict + keyStats på project.reports[cmdId].parsed.
+      // Idempotent — sjekker per-felt før vi setter.
+      if (from < 2) {
+        const projects = state.projects || [];
+        for (let i = 0; i < projects.length; i++) {
+          const reports = (projects[i] && projects[i].reports) || {};
+          const ids = Object.keys(reports);
+          for (let j = 0; j < ids.length; j++) {
+            const cmdId = ids[j];
+            const r = reports[cmdId];
+            if (!r || !r.parsed) continue;
+            const arche = typeof archetypeFor === 'function' ? archetypeFor(cmdId) : null;
+            if (!arche) continue;
+            if (r.parsed.verdict == null) r.parsed.verdict = inferVerdict(r.parsed, arche);
+            if (!Array.isArray(r.parsed.keyStats)) r.parsed.keyStats = inferKeyStats(r.parsed, arche);
+          }
         }
+        state.dataVersion = 2;
       }
-      state.dataVersion = 2;
+
+      // v2 -> v3: konverter project.reports → project.artifacts med v3-shape.
+      // Bevarer project.reports for bakover-kompatibilitet (fjernes i v1.16.0).
+      // Idempotent — per-prosjekt-guard + per-artifact-guard.
+      if ((Number(state.dataVersion) || 0) < 3) {
+        const projects = state.projects || [];
+        for (let i = 0; i < projects.length; i++) {
+          const proj = projects[i];
+          if (!proj) continue;
+          if (!proj.artifacts) proj.artifacts = {};
+          const reports = proj.reports || {};
+          const ids = Object.keys(reports);
+          const fallbackTs = proj.createdAt || new Date(0).toISOString();
+          for (let j = 0; j < ids.length; j++) {
+            const cmdId = ids[j];
+            if (proj.artifacts[cmdId]) continue; // idempotens: skip eksisterende artifact
+            const r = reports[cmdId];
+            if (!r) continue;
+            let parsed = r.parsed || null;
+            // v1.15.0: hvis parsed mangler men raw_markdown finnes, kjør parserFor
+            // for å bootstrappe artifact. Brukes av demo-state og rehydrering.
+            if (!parsed && r.raw_markdown && typeof parserFor === 'function') {
+              const parser = parserFor(cmdId);
+              if (parser) {
+                try {
+                  const pr = parser(r.raw_markdown);
+                  if (pr && pr.ok && pr.data) parsed = pr.data;
+                } catch (_e) { /* ignore — artifact får parsed=null */ }
+              }
+            }
+            const arche = typeof archetypeFor === 'function' ? archetypeFor(cmdId) : null;
+            const verdict = parsed && parsed.verdict
+              ? parsed.verdict
+              : (arche && parsed ? inferVerdict(parsed, arche) : null);
+            const keyStats = parsed && Array.isArray(parsed.keyStats)
+              ? parsed.keyStats
+              : (arche && parsed ? inferKeyStats(parsed, arche) : []);
+            proj.artifacts[cmdId] = {
+              commandId: cmdId,
+              raw_markdown: r.raw_markdown || '',
+              parsed: parsed,
+              verdict: verdict,
+              keyStats: keyStats,
+              importedAt: r.importedAt || fallbackTs,
+              updatedAt: r.updatedAt || fallbackTs
+            };
+          }
+        }
+        state.dataVersion = 3;
+      }
+
       return state;
     }
 
@@ -4953,6 +4782,13 @@
       return null;
     }
 
+    // v1.15.0: defaultParserFor resolver PARSERS[archetypeFor(cmdId)] for bruk
+    // av migrasjonen. Eksponert som window.__defaultParserFor for tester.
+    function defaultParserFor(commandId) {
+      const arche = defaultArchetypeFor(commandId);
+      return arche && PARSERS && PARSERS[arche] ? PARSERS[arche] : null;
+    }
+
     // Eksponer for tester og fremtidig renderer-iterasjon (Sesjon 3-5)
     window.__renderPageShell  = renderPageShell;
     window.__renderVerdictPill = renderVerdictPill;
@@ -4962,6 +4798,7 @@
     window.__KEY_STATS_CONFIG = KEY_STATS_CONFIG;
     window.__migrateDataVersion = migrateDataVersion;
     window.__defaultArchetypeFor = defaultArchetypeFor;
+    window.__defaultParserFor = defaultParserFor;
     // === V2_FOUNDATION_END ===
 
     // ---- RENDERERS routing-objekt (17 commands) ----
@@ -5031,24 +4868,641 @@
     }
     window.__handlePasteImport = handlePasteImport;
 
-    // v1.10.0+: Rehydrer paste-imports fra raw_markdown på aktivt prosjekt.
-    // Kalles av project surface render etter at tabs/panels er i DOM.
-    // Filler textareas og kjører handlePasteImport for hver lagret rapport.
-    function rehydratePasteImports() {
-      const project = findProject(store.state.activeProjectId);
-      if (!project || !project.reports) return;
-      const root = getSurfaceEl('project');
-      if (!root) return;
-      Object.keys(project.reports).forEach(function (cmdId) {
-        const rec = project.reports[cmdId];
-        if (!rec || !rec.raw_markdown) return;
-        const ta = root.querySelector('[data-paste-import="' + cmdId + '"]');
-        if (ta) ta.value = rec.raw_markdown;
-        // Render visualiseringen — handlePasteImport finner slot via querySelector.
-        handlePasteImport(cmdId, rec.raw_markdown);
-      });
+    // v1.15.0: rehydratePasteImports + window.__rehydratePasteImports fjernet.
+    // v3 project-view leser direkte fra project.artifacts[cid].parsed — ingen
+    // textarea-rehydrering nødvendig.
+
+    // === PROJECT_VIEW_V2_BEGIN ===
+    // ============================================================
+    // PROJECT-VIEW V2 (Sesjon 3 — JS-foundation)
+    // ============================================================
+    //
+    // Ny project-view-arketype som erstatter renderProjectSurface i Sesjon 5.
+    // Inntil videre kjører den parallelt: ingen call-site, men eksponert via
+    // window.__projectView for testing.
+    //
+    // Spec: playground/V2-PROJECT-VIEW-SPEC.local.md (Seksjon 2/4/5/6/7).
+    //
+    // Skjema-overflate (artifact-shape, v3-state):
+    //   project.artifacts[cmdId] = { commandId, raw_markdown, parsed, verdict,
+    //                                keyStats, importedAt, updatedAt }
+    //
+    // 4 view-tilstander styres via `state.ui.projectView`:
+    //   - overview              (default; selectedArtifactId null)
+    //   - artifact-{id}         (filled)
+    //   - empty-{id}            (sidebar-treff uten artifact)
+    //   - import-modal-open     (toppstate uavhengig av main-view)
+
+    // Severity-mapping fra plugin-verdict til DS-sev-klasse.
+    function projectViewSeverityClass(verdict) {
+      const v = String(verdict || '').toLowerCase();
+      if (v === 'block' || v === 'failed' || v === 'critical') return 'critical';
+      if (v === 'warning' || v === 'go-with-conditions' || v === 'medium') return 'medium';
+      if (v === 'go' || v === 'approved' || v === 'allow' || v === 'low') return 'positive';
+      return 'empty';
     }
-    window.__rehydratePasteImports = rehydratePasteImports;
+
+    // Worst-case aggregat på tvers av alle artefakters verdict.
+    // BLOCK > WARN > APPROVED/GO > IN-PROGRESS > n-a.
+    function projectViewAggregateVerdict(artifacts) {
+      const list = artifacts ? Object.keys(artifacts).map(function (k) { return artifacts[k]; }) : [];
+      if (!list.length) return 'n-a';
+      const verdicts = list.map(function (a) { return String(a && a.verdict || '').toLowerCase(); });
+      if (verdicts.some(function (v) { return v === 'block' || v === 'failed'; })) return 'block';
+      if (verdicts.some(function (v) { return v === 'warning' || v === 'go-with-conditions'; })) return 'go-with-conditions';
+      const allPositive = verdicts.every(function (v) {
+        return v === 'go' || v === 'approved' || v === 'allow';
+      });
+      return allPositive ? 'approved' : 'n-a';
+    }
+
+    // Plukk topp N truslers/funn på tvers av ros + security + dpia.
+    function projectViewTopRisks(artifacts, n) {
+      n = n || 5;
+      const pool = [];
+      const sevScore = function (s) {
+        const k = String(s || '').toLowerCase();
+        if (k === 'critical' || k === 'kritisk') return 4;
+        if (k === 'high'     || k === 'høy')     return 3;
+        if (k === 'medium'   || k === 'middels') return 2;
+        if (k === 'low'      || k === 'lav')     return 1;
+        return 0;
+      };
+      ['ros', 'dpia'].forEach(function (cid) {
+        const a = artifacts && artifacts[cid];
+        const threats = (a && a.parsed && a.parsed.threats) || [];
+        threats.forEach(function (t) {
+          pool.push({
+            source: cid,
+            id: t.id || '',
+            description: t.description || t.threat || '',
+            severity: t.severity || '',
+            mitigation: t.mitigation || '',
+            score: Number(t.score) || sevScore(t.severity)
+          });
+        });
+      });
+      const sec = artifacts && artifacts.security;
+      const secFindings = (sec && sec.parsed && sec.parsed.findings) || [];
+      secFindings.forEach(function (f) {
+        pool.push({
+          source: 'security',
+          id: f.id || '',
+          description: f.recommendation || f.finding || '',
+          severity: f.severity || '',
+          mitigation: f.mitigation || '',
+          score: Number(f.score) || sevScore(f.severity)
+        });
+      });
+      pool.sort(function (a, b) { return (b.score || 0) - (a.score || 0); });
+      return pool.slice(0, n);
+    }
+
+    // Anbefalte neste-handlinger basert på artefakt-state.
+    function projectViewNextActions(artifacts) {
+      const out = [];
+      const has = function (cid) {
+        return !!(artifacts && artifacts[cid] && artifacts[cid].parsed);
+      };
+      if (!has('classify')) {
+        out.push({ commandId: 'classify', text: 'Kjør EU AI Act-klassifisering — regulatorisk grunnmur.' });
+      } else {
+        const cls = artifacts.classify.parsed || {};
+        const lvl = String(cls.risk_level || '').toLowerCase();
+        if ((lvl === 'høy' || lvl === 'high') && !has('frimpact')) {
+          out.push({ commandId: 'frimpact', text: 'Høyrisiko: gjennomfør FRIA (Art. 27) — obligatorisk for offentlig sektor.' });
+        }
+      }
+      if (!has('ros')) out.push({ commandId: 'ros', text: 'Kjør ROS-analyse — risiko-grunnmur.' });
+      if (!has('security')) out.push({ commandId: 'security', text: 'Kjør sikkerhetsvurdering (6×5) — sikkerhets-grunnmur.' });
+      if (has('security')) {
+        const sec = artifacts.security.parsed || {};
+        const crit = (sec.findings || []).filter(function (f) {
+          return /crit|kritisk/i.test(f.severity || '');
+        }).length;
+        if (crit) {
+          out.push({ commandId: 'security', text: 'Adressér ' + crit + ' kritiske sikkerhets-funn.' });
+        }
+      }
+      if (!has('summary') && Object.keys(artifacts || {}).length >= 3) {
+        out.push({ commandId: 'summary', text: 'Generer beslutningsnotat — sammendrag av valg, risiko, kostnad.' });
+      }
+      return out.slice(0, 3);
+    }
+
+    // Manglende must-have-rapporter for must-have-listen.
+    function projectViewMissingReports(artifacts, mustHave) {
+      const list = Array.isArray(mustHave) ? mustHave : [];
+      const out = [];
+      for (let i = 0; i < list.length; i++) {
+        const cid = list[i];
+        if (!artifacts || !artifacts[cid] || !artifacts[cid].parsed) out.push(cid);
+      }
+      return out;
+    }
+
+    function projectViewArtifactStatus(artifact) {
+      if (!artifact || !artifact.parsed) return { verdict: null, sevClass: 'empty' };
+      const verdict = artifact.verdict || (artifact.parsed && artifact.parsed.verdict) || null;
+      return {
+        verdict: verdict,
+        sevClass: projectViewSeverityClass(verdict)
+      };
+    }
+
+    // PROJECT_VIEW_CONFIG (plugin-spesifikk). Refererer renderers via
+    // RENDERERS-routing slik at vi gjenbruker alle 17 eksisterende renderXxx.
+    // Tool-kommandoer (produces_report=false) er ikke med — de vises ikke
+    // i project-view-sidebar.
+    const PROJECT_VIEW_CONFIG = {
+      categories: [
+        { id: 'regulatory',    label: 'Regulatorisk',       icon: '⚖️', order: 1 },
+        { id: 'security',      label: 'Risiko & sikkerhet', icon: '🛡️', order: 2 },
+        { id: 'economy',       label: 'Økonomi',            icon: '💰', order: 3 },
+        { id: 'documentation', label: 'Dokumentasjon',      icon: '📄', order: 4 }
+      ],
+      // 17 produces_report-entries — alle renderer-referanser via RENDERERS.
+      renderers: {
+        classify:     RENDERERS.renderAiActPyramid,
+        requirements: RENDERERS.renderRequirements,
+        transparency: RENDERERS.renderTransparency,
+        frimpact:     RENDERERS.renderFria,
+        conformity:   RENDERERS.renderConformity,
+        dpia:         RENDERERS.renderDpia,
+        security:     RENDERERS.renderSecurity,
+        ros:          RENDERERS.renderRos,
+        review:       RENDERERS.renderReview,
+        cost:         RENDERERS.renderCost,
+        license:      RENDERERS.renderLicense,
+        migrate:      RENDERERS.renderMigrate,
+        adr:          RENDERERS.renderAdr,
+        summary:      RENDERERS.renderSummary,
+        poc:          RENDERERS.renderPoc,
+        utredning:    RENDERERS.renderUtredning,
+        compare:      RENDERERS.renderCompare
+      },
+      mustHave: ['classify', 'ros', 'security', 'dpia', 'summary'],
+      getArtifactStatus: projectViewArtifactStatus,
+      aggregateVerdict:  projectViewAggregateVerdict,
+      topRisks:          projectViewTopRisks,
+      nextActions:       projectViewNextActions,
+      missingReports:    function (artifacts) { return projectViewMissingReports(artifacts, this.mustHave); }
+    };
+
+    // ---- Smart-detect (inferCommandIdFromMarkdown) ----
+    //
+    // Hver command har 1+ header-pattern + nøkkel-ord-counter. Score er
+    // antall match / antall mønstre (cap 1.0). Lavest aksepterbar score er 0.4
+    // (returnerer null under). Returnerer { commandId, confidence }.
+    const COMMAND_FINGERPRINTS = {
+      classify:     { headers: [/^\s*#\s*(EU\s*AI\s*Act|AI\s*Act-?klassifisering|Klassifisering)/im],
+                      keywords: ['risikoklassifisering', 'risk_level', 'annex iii', 'forbudt', 'høyrisiko'] },
+      requirements: { headers: [/^\s*#\s*(EU\s*AI\s*Act\s*[—-]\s*Krav|AI\s*Act-?krav|Krav per|Requirements)/im],
+                      keywords: ['provider', 'deployer', 'forpliktelser', 'art\\.\\s*9', 'art\\.\\s*16'] },
+      transparency: { headers: [/^\s*#\s*(Transparensnotis|Transparency\s*Notice)/im, /Art\.?\s*1?3(\s*\/|\s+og\s+)50/i],
+                      keywords: ['informasjonsplikt', 'samhandling', 'art. 13', 'art. 50'] },
+      frimpact:     { headers: [/^\s*#\s*FRIA/im, /Fundamental\s*Rights\s*Impact/i],
+                      keywords: ['berørte grupper', 'grunnleggende rettigheter', 'art. 27'] },
+      conformity:   { headers: [/^\s*#\s*(Samsvarsvurdering|Conformity\s*Assessment)/im, /Annex\s*IV/i],
+                      keywords: ['eu-erklæring', 'samsvarserklæring', 'annex iv', 'art. 43'] },
+      dpia:         { headers: [/^\s*#\s*(DPIA|PVK|Personvernkonsekvens)/im],
+                      keywords: ['gdpr', 'personopplysninger', 'behandlingsgrunnlag', 'art. 6', 'datasubjekt'] },
+      security:     { headers: [/^\s*#\s*(Sikkerhetsvurdering|Security\s*Assessment)/im, /6\s*[×x]\s*5/i],
+                      keywords: ['owasp', 'stride', 'prompt injection', 'dimensjoner', '6x5'] },
+      ros:          { headers: [/^\s*#\s*(ROS-?analyse|Risiko-?\s*og\s*sårbar)/im],
+                      keywords: ['ns 5814', 'iso 31000', 'sannsynlighet', 'konsekvens', 'trusselbibliotek'] },
+      review:       { headers: [/^\s*#\s*(Arkitekturgjennomgang|Architecture\s*Review)/im],
+                      keywords: ['digdir', 'nsm', 'schrems ii', 'arkitekturprinsipp'] },
+      cost:         { headers: [/^\s*#\s*(Kostnadsestimat|Cost\s*Estimate)/im, /P10\s*\/\s*P50\s*\/\s*P90/i],
+                      keywords: ['nok', 'månedlig', 'p50', 'p90', 'tco'] },
+      license:      { headers: [/^\s*#\s*(Lisens(kart|kapabilitets|-kapabilitets)?(legging|matrise)?|License\s*Mapping)/im],
+                      keywords: ['m365', 'lisenser', 'kapabiliteter', 'e3', 'e5'] },
+      migrate:      { headers: [/^\s*#\s*(Migrasjon|Migration\s*Plan)/im],
+                      keywords: ['fase', 'pilot', 'roll-out', 'kutover'] },
+      adr:          { headers: [/^\s*#\s*ADR/im, /Architecture\s*Decision\s*Record/i, /madr/i],
+                      keywords: ['context', 'consequences', 'alternatives', 'decided'] },
+      summary:      { headers: [/^\s*#\s*(Beslutnings(notat|sammendrag)|Teknisk\s*sammendrag|Executive\s*Summary)/im],
+                      keywords: ['anbefaling', 'beslutning', 'sammendrag', 'nøkkeltall'] },
+      poc:          { headers: [/^\s*#\s*(POC-?plan|Proof\s*of\s*Concept)/im],
+                      keywords: ['suksesskriterier', 'pilot', 'gate', 'milepæl'] },
+      utredning:    { headers: [/^\s*#\s*(Utredning|AI-?arkitektur-?utredning)/im],
+                      keywords: ['utredningsinstruksen', 'samfunnseffekt', 'alternativer'] },
+      compare:      { headers: [/^\s*#\s*(Sammenligning|Comparison|Plattformsammenligning)/im],
+                      keywords: ['copilot studio', 'foundry', 'azure openai', 'dimensjoner'] }
+    };
+
+    function fingerprintScore(text, spec) {
+      if (!spec) return 0;
+      const headers = spec.headers || [];
+      const keywords = spec.keywords || [];
+      let score = 0;
+      // Header-match veier tyngst (0.6 hver, cap 0.9)
+      let headerHits = 0;
+      for (let i = 0; i < headers.length; i++) {
+        if (headers[i].test(text)) headerHits++;
+      }
+      score += Math.min(0.9, headerHits * 0.6);
+      // Keyword-match veier mindre (0.05 hver, cap 0.4)
+      const lower = text.toLowerCase();
+      let kwHits = 0;
+      for (let j = 0; j < keywords.length; j++) {
+        try {
+          if (new RegExp(keywords[j], 'i').test(lower)) kwHits++;
+        } catch (_e) { /* invalid pattern — skip */ }
+      }
+      score += Math.min(0.4, kwHits * 0.08);
+      return Math.min(1, score);
+    }
+
+    function inferCommandIdFromMarkdown(text, parsers) {
+      if (!text || typeof text !== 'string') return null;
+      let best = { commandId: null, score: 0 };
+      const ids = Object.keys(COMMAND_FINGERPRINTS);
+      for (let i = 0; i < ids.length; i++) {
+        const cid = ids[i];
+        const s = fingerprintScore(text, COMMAND_FINGERPRINTS[cid]);
+        if (s > best.score) best = { commandId: cid, score: s };
+      }
+      if (best.score < 0.4) return null;
+      return { commandId: best.commandId, confidence: best.score };
+    }
+
+    // ---- Sub-renderers (alle returnerer HTML-strenger) ----
+
+    function projectViewTimeAgo(iso) {
+      if (!iso) return '';
+      const then = Date.parse(iso);
+      if (!isFinite(then)) return '';
+      const diff = Math.max(0, Date.now() - then);
+      const days = Math.floor(diff / 86400000);
+      if (days <= 0) return 'i dag';
+      if (days === 1) return 'i går';
+      if (days < 30) return days + ' dager siden';
+      const months = Math.floor(days / 30);
+      if (months < 12) return months + ' mnd siden';
+      return Math.floor(months / 12) + ' år siden';
+    }
+
+    function projectViewKeyStats(project, config) {
+      const artifacts = project.artifacts || {};
+      const total = config.renderers ? Object.keys(config.renderers).length : 0;
+      const filled = Object.keys(artifacts).filter(function (k) {
+        return artifacts[k] && artifacts[k].parsed;
+      }).length;
+      const must = projectViewMissingReports(artifacts, config.mustHave);
+      const lastUpdated = (function () {
+        const ts = Object.keys(artifacts).map(function (k) { return artifacts[k] && artifacts[k].updatedAt; }).filter(Boolean).sort();
+        return ts.length ? ts[ts.length - 1].slice(0, 10) : '–';
+      })();
+      return [
+        { label: 'ARTEFAKTER',     value: filled + '/' + total },
+        { label: 'MÅ HA',          value: (config.mustHave || []).length - must.length + '/' + (config.mustHave || []).length, modifier: must.length ? 'high' : 'low' },
+        { label: 'SIST OPPDATERT', value: lastUpdated }
+      ];
+    }
+
+    function renderProjectHeader(project, aggregateVerdict, keyStats) {
+      return renderPageShell({
+        eyebrow: 'PROSJEKT',
+        title: project.name || 'Uten navn',
+        lede: project.description || '',
+        verdict: aggregateVerdict || 'n-a',
+        keyStats: keyStats || []
+      },
+        '<div class="project-view__actions">' +
+          '<button type="button" class="btn btn--ghost btn--sm" data-action="goto-home">← Tilbake</button>' +
+          '<button type="button" class="btn btn--secondary btn--sm" data-action="import-open">Importer rapport</button>' +
+          '<button type="button" class="btn btn--secondary btn--sm" data-action="export-state">Eksporter</button>' +
+          '<button type="button" class="btn btn--ghost btn--sm" data-action="delete-project" data-project-id="' + escapeAttr(project.id) + '">Slett</button>' +
+        '</div>'
+      );
+    }
+
+    function renderArtifactNavItem(commandId, artifact, config, isSelected) {
+      const cmd = (CATALOG.commands || []).find(function (c) { return c.id === commandId; }) || { id: commandId, label: commandId };
+      const filled = !!(artifact && artifact.parsed);
+      const status = config.getArtifactStatus(filled ? artifact : null);
+      const state = isSelected ? 'active' : (filled ? 'filled' : 'empty');
+      const sev = status.sevClass || 'empty';
+      const meta = filled
+        ? 'Importert ' + (projectViewTimeAgo(artifact.importedAt) || '–')
+        : 'Ingen rapport';
+      const statusPill = filled && status.verdict
+        ? '<span class="verdict-pill verdict-pill--small" data-verdict="' + escapeAttr(String(status.verdict).toLowerCase()) + '">' + escapeHtml(String(status.verdict).toUpperCase()) + '</span>'
+        : '';
+      return (
+        '<li class="artifact-list__item"' +
+          ' data-state="' + escapeAttr(state) + '"' +
+          ' data-severity="' + escapeAttr(sev) + '"' +
+          ' data-action="project-select-artifact"' +
+          ' data-artifact-id="' + escapeAttr(commandId) + '">' +
+          '<span class="artifact-list__item-marker" aria-hidden="true"></span>' +
+          '<span class="artifact-list__item-body">' +
+            '<span class="artifact-list__item-name">' + escapeHtml(cmd.label || commandId) + '</span>' +
+            '<span class="artifact-list__item-meta">' + escapeHtml(meta) + '</span>' +
+          '</span>' +
+          (statusPill ? '<span class="artifact-status">' + statusPill + '</span>' : '') +
+        '</li>'
+      );
+    }
+
+    function renderArtifactNav(project, config, selectedId, searchQuery) {
+      const q = String(searchQuery || '').trim().toLowerCase();
+      const artifacts = project.artifacts || {};
+      const cmds = (CATALOG.commands || []).filter(function (c) { return c.produces_report && config.renderers[c.id]; });
+      const groups = config.categories.slice().sort(function (a, b) { return a.order - b.order; }).map(function (cat) {
+        const cmdsInCat = cmds.filter(function (c) {
+          if (c.category !== cat.id) return false;
+          if (!q) return true;
+          const hay = (c.id + ' ' + c.label + ' ' + (c.description || '')).toLowerCase();
+          return hay.indexOf(q) !== -1;
+        });
+        if (!cmdsInCat.length) return '';
+        const items = cmdsInCat.map(function (c) {
+          return renderArtifactNavItem(c.id, artifacts[c.id] || null, config, c.id === selectedId);
+        }).join('');
+        const filledCount = cmdsInCat.filter(function (c) { return artifacts[c.id] && artifacts[c.id].parsed; }).length;
+        return (
+          '<section class="artifact-list__group">' +
+            '<header class="artifact-list__group-label">' +
+              '<span class="artifact-list__group-label-icon" aria-hidden="true">' + escapeHtml(cat.icon || '') + '</span>' +
+              '<span class="artifact-list__group-label-text">' + escapeHtml(cat.label) + '</span>' +
+              '<span class="artifact-list__group-label-count">' + filledCount + '/' + cmdsInCat.length + '</span>' +
+            '</header>' +
+            '<ul class="artifact-list__group-items">' + items + '</ul>' +
+          '</section>'
+        );
+      }).filter(Boolean).join('');
+      const overviewActive = !selectedId ? ' data-state="active"' : '';
+      return (
+        '<nav class="project-view__nav" aria-label="Artefakt-navigasjon">' +
+          '<div class="project-view__nav-search">' +
+            '<input type="search" class="input input--sm" placeholder="Søk artefakter…"' +
+              ' value="' + escapeAttr(searchQuery || '') + '"' +
+              ' data-project-search aria-label="Søk i artefakter">' +
+          '</div>' +
+          '<ul class="artifact-list">' +
+            '<li class="artifact-list__item artifact-list__item--overview"' + overviewActive +
+              ' data-action="project-show-overview">' +
+              '<span class="artifact-list__item-marker" aria-hidden="true"></span>' +
+              '<span class="artifact-list__item-body">' +
+                '<span class="artifact-list__item-name">Oversikt</span>' +
+                '<span class="artifact-list__item-meta">Dashboard og aggregater</span>' +
+              '</span>' +
+            '</li>' +
+          '</ul>' +
+          '<div class="artifact-list">' + (groups || '<p class="empty-hint">Ingen treff.</p>') + '</div>' +
+        '</nav>'
+      );
+    }
+
+    function renderProjectOverview(project, config) {
+      const artifacts = project.artifacts || {};
+      const cats = config.categories.slice().sort(function (a, b) { return a.order - b.order; });
+      const verdictGrid = cats.map(function (cat) {
+        const cmdsInCat = (CATALOG.commands || []).filter(function (c) { return c.category === cat.id && c.produces_report; });
+        const filled = cmdsInCat.filter(function (c) { return artifacts[c.id] && artifacts[c.id].parsed; }).length;
+        const worst = (function () {
+          const verdicts = cmdsInCat.map(function (c) {
+            const a = artifacts[c.id];
+            return a && a.verdict ? String(a.verdict).toLowerCase() : '';
+          });
+          if (verdicts.some(function (v) { return v === 'block' || v === 'failed'; })) return 'block';
+          if (verdicts.some(function (v) { return v === 'warning' || v === 'go-with-conditions'; })) return 'go-with-conditions';
+          if (verdicts.some(function (v) { return v === 'go' || v === 'approved' || v === 'allow'; })) return 'approved';
+          return 'n-a';
+        })();
+        const sev = projectViewSeverityClass(worst);
+        return (
+          '<article class="project-overview__verdict-tile" data-severity="' + escapeAttr(sev) + '">' +
+            '<span class="project-overview__verdict-tile-label">' + escapeHtml(cat.icon || '') + ' ' + escapeHtml(cat.label) + '</span>' +
+            '<span class="project-overview__verdict-tile-value">' + renderVerdictPill(worst) + '</span>' +
+            '<span class="project-overview__verdict-tile-meta">' + filled + ' av ' + cmdsInCat.length + ' artefakter</span>' +
+          '</article>'
+        );
+      }).join('');
+
+      const risks = config.topRisks(artifacts, 5);
+      const risksHtml = risks.length
+        ? '<ol class="top-risks">' + risks.map(function (r) {
+            const sev = projectViewSeverityClass(r.severity);
+            return '<li class="top-risk" data-severity="' + escapeAttr(sev) + '">' +
+                     '<span class="top-risk__id">' + escapeHtml(r.id || '–') + '</span>' +
+                     '<span class="top-risk__desc">' + escapeHtml(r.description || '') + '</span>' +
+                     '<span class="top-risk__source">' + escapeHtml(r.source) + '</span>' +
+                   '</li>';
+          }).join('') + '</ol>'
+        : '<p class="empty-hint">Ingen risikoer registrert ennå. Importer ROS- eller sikkerhetsrapport.</p>';
+
+      const actions = config.nextActions(artifacts);
+      const actionsHtml = actions.length
+        ? '<ol class="project-overview__next-actions">' + actions.map(function (a) {
+            return '<li><button type="button" class="link-btn" data-action="import-open"' +
+                     ' data-prefill-command="' + escapeAttr(a.commandId) + '">' +
+                     escapeHtml(a.text) +
+                   '</button></li>';
+          }).join('') + '</ol>'
+        : '<p class="empty-hint">Alle anbefalte neste-trinn er fullført.</p>';
+
+      const missing = config.missingReports(artifacts);
+      const missingHtml = missing.length
+        ? '<ul class="project-overview__missing-reports">' + missing.map(function (cid) {
+            const cmd = (CATALOG.commands || []).find(function (c) { return c.id === cid; }) || { id: cid, label: cid };
+            return '<li>' +
+                     '<span class="missing-reports__icon" aria-hidden="true">+</span>' +
+                     '<span class="missing-reports__label">' + escapeHtml(cmd.label || cid) + '</span>' +
+                     '<button type="button" class="btn btn--ghost btn--sm" data-action="import-open"' +
+                       ' data-prefill-command="' + escapeAttr(cid) + '">Importer rapport</button>' +
+                   '</li>';
+          }).join('') + '</ul>'
+        : '<p class="empty-hint">Alle må-ha-rapporter er importert.</p>';
+
+      return (
+        '<div class="project-overview">' +
+          '<section class="project-overview__intro">' +
+            '<h2>Prosjektoversikt</h2>' +
+            '<p class="page__lede">Aggregat per kategori. Velg en artefakt i sidemenyen for å vise full rapport.</p>' +
+          '</section>' +
+          '<section class="project-overview__verdict-grid">' + verdictGrid + '</section>' +
+          '<section class="stack-lg">' +
+            '<h3>Topp-risikoer</h3>' + risksHtml +
+          '</section>' +
+          '<section class="stack-lg">' +
+            '<h3>Anbefalte neste-trinn</h3>' + actionsHtml +
+          '</section>' +
+          '<section class="stack-lg">' +
+            '<h3>Manglende rapporter (må ha)</h3>' + missingHtml +
+          '</section>' +
+        '</div>'
+      );
+    }
+
+    function renderProjectArtifact(artifact, config) {
+      const cmd = (CATALOG.commands || []).find(function (c) { return c.id === artifact.commandId; }) || { id: artifact.commandId, label: artifact.commandId };
+      const renderer = config.renderers[artifact.commandId];
+      // Bygg en in-memory slot, kall renderer (slot-mutator), trekk ut HTML.
+      // Eksisterende renderXxx tar (data, slot) og setter slot.innerHTML.
+      let bodyHtml = '';
+      if (renderer && artifact.parsed) {
+        try {
+          const slot = (typeof document !== 'undefined') ? document.createElement('div') : null;
+          if (slot) {
+            renderer(artifact.parsed, slot);
+            bodyHtml = slot.innerHTML;
+          } else {
+            bodyHtml = '<p class="empty-hint">Renderer krever DOM (test-miljø).</p>';
+          }
+        } catch (e) {
+          bodyHtml = '<div class="error-summary"><h3 class="error-summary__heading">Rendringsfeil</h3>' +
+                     '<div class="error-summary__body"><p>' + escapeHtml(String(e.message || e)) + '</p></div></div>';
+        }
+      } else {
+        bodyHtml = '<p class="empty-hint">Ingen parsed data.</p>';
+      }
+      const updated = projectViewTimeAgo(artifact.updatedAt) || projectViewTimeAgo(artifact.importedAt) || '';
+      return (
+        '<article class="project-view__artifact" data-artifact="' + escapeAttr(artifact.commandId) + '">' +
+          '<header class="project-view__artifact-header">' +
+            '<div class="project-view__artifact-header-main">' +
+              '<span class="page__eyebrow">ARTEFAKT</span>' +
+              '<h2 class="project-view__artifact-title">' + escapeHtml(cmd.label || artifact.commandId) + '</h2>' +
+              (updated ? '<p class="project-view__artifact-meta">Sist oppdatert ' + escapeHtml(updated) + '</p>' : '') +
+            '</div>' +
+            '<div class="project-view__artifact-actions">' +
+              '<button type="button" class="btn btn--ghost btn--sm" data-action="artifact-reimport"' +
+                ' data-command="' + escapeAttr(artifact.commandId) + '">Re-importer</button>' +
+              '<button type="button" class="btn btn--ghost btn--sm" data-action="artifact-delete"' +
+                ' data-command="' + escapeAttr(artifact.commandId) + '">Slett</button>' +
+            '</div>' +
+          '</header>' +
+          '<div class="project-view__artifact-body">' + bodyHtml + '</div>' +
+        '</article>'
+      );
+    }
+
+    function renderEmptyArtifactPrompt(commandId, config) {
+      const cmd = (CATALOG.commands || []).find(function (c) { return c.id === commandId; }) || { id: commandId, label: commandId };
+      return (
+        '<div class="empty-artifact-prompt" data-command="' + escapeAttr(commandId) + '">' +
+          '<div class="empty-artifact-prompt__icon" aria-hidden="true">○</div>' +
+          '<h2 class="empty-artifact-prompt__title">Ingen ' + escapeHtml(cmd.label || commandId) + '-rapport ennå</h2>' +
+          '<p class="empty-artifact-prompt__text">' + escapeHtml(cmd.description || '') + '</p>' +
+          '<div class="empty-artifact-prompt__actions">' +
+            '<button type="button" class="btn btn--primary" data-action="import-open"' +
+              ' data-prefill-command="' + escapeAttr(commandId) + '">Importer rapport</button>' +
+            '<button type="button" class="btn btn--ghost" data-action="open-catalog-form"' +
+              ' data-command="' + escapeAttr(commandId) + '">Bygg command-streng</button>' +
+          '</div>' +
+        '</div>'
+      );
+    }
+
+    function renderProjectMain(project, config, viewState) {
+      const selectedId = viewState && viewState.selectedArtifactId;
+      if (!selectedId) {
+        return '<main class="project-view__main" data-state="overview">' +
+                 renderProjectOverview(project, config) +
+               '</main>';
+      }
+      const artifact = project.artifacts && project.artifacts[selectedId];
+      if (!artifact || !artifact.parsed) {
+        return '<main class="project-view__main" data-state="empty">' +
+                 renderEmptyArtifactPrompt(selectedId, config) +
+               '</main>';
+      }
+      return '<main class="project-view__main" data-state="artifact">' +
+               renderProjectArtifact(artifact, config) +
+             '</main>';
+    }
+
+    function renderImportModal(state, config) {
+      const modal = state && state.ui && state.ui.importModal;
+      if (!modal || !modal.open) return '';
+      const prefillCmd = modal.prefillCommandId || '';
+      const prefillText = modal.prefillMarkdown || '';
+      const allCmds = (CATALOG.commands || []).filter(function (c) {
+        return c.produces_report && config.renderers[c.id];
+      });
+      const cmdOptions = '<option value="">— Velg command —</option>' + allCmds.map(function (c) {
+        const sel = c.id === prefillCmd ? ' selected' : '';
+        return '<option value="' + escapeAttr(c.id) + '"' + sel + '>' + escapeHtml(c.label) + '</option>';
+      }).join('');
+      return (
+        '<div class="import-modal" data-open="true" role="dialog" aria-modal="true" aria-label="Importer rapport" data-import-modal>' +
+          '<div class="import-modal__backdrop" data-action="import-close"></div>' +
+          '<div class="import-modal__panel">' +
+            '<header class="import-modal__head">' +
+              '<h2 class="import-modal__title">Importer rapport</h2>' +
+              '<button type="button" class="import-modal__close" data-action="import-close" aria-label="Lukk">×</button>' +
+            '</header>' +
+            '<form class="import-modal__form" data-import-form>' +
+              '<div class="field">' +
+                '<label class="field__label" for="import-command">Command</label>' +
+                '<select id="import-command" class="select" data-import-command>' + cmdOptions + '</select>' +
+              '</div>' +
+              '<div class="field">' +
+                '<label class="field__label" for="import-markdown">Markdown-output</label>' +
+                '<textarea id="import-markdown" class="textarea" rows="12" data-import-markdown' +
+                  ' placeholder="Lim inn full markdown-output fra terminal-kjøringen her">' + escapeHtml(prefillText) + '</textarea>' +
+              '</div>' +
+              '<div class="import-modal__detect" data-import-detect aria-live="polite"></div>' +
+              '<div class="import-modal__preview" data-import-preview></div>' +
+            '</form>' +
+            '<footer class="import-modal__footer">' +
+              '<button type="button" class="btn btn--ghost" data-action="import-close">Avbryt</button>' +
+              '<button type="button" class="btn btn--primary" data-action="import-save" data-import-save>Lagre</button>' +
+            '</footer>' +
+          '</div>' +
+        '</div>'
+      );
+    }
+
+    function renderProjectView(project, config) {
+      if (!project) return '<p class="empty-hint">Ingen prosjekt valgt.</p>';
+      const cfg = config || PROJECT_VIEW_CONFIG;
+      const ui = (store && store.state && store.state.ui) || {};
+      const pv = ui.projectView || {};
+      const selectedId = pv.selectedArtifactId || null;
+      const searchQuery = pv.searchQuery || '';
+      const artifacts = project.artifacts || {};
+      const aggregateVerdict = cfg.aggregateVerdict(artifacts);
+      const keyStats = projectViewKeyStats(project, cfg);
+      const viewState = {
+        view: selectedId ? (artifacts[selectedId] && artifacts[selectedId].parsed ? 'artifact' : 'empty') : 'overview',
+        selectedArtifactId: selectedId
+      };
+      const importModalHtml = renderImportModal(store && store.state, cfg);
+      return (
+        '<section class="project-view" data-view="' + escapeAttr(viewState.view) + '">' +
+          '<header class="project-view__header">' +
+            renderProjectHeader(project, aggregateVerdict, keyStats) +
+          '</header>' +
+          '<div class="project-view__layout">' +
+            renderArtifactNav(project, cfg, selectedId, searchQuery) +
+            renderProjectMain(project, cfg, viewState) +
+          '</div>' +
+        '</section>' +
+        importModalHtml
+      );
+    }
+
+    // Eksponer for tester (Sesjon 4) og integrasjon (Sesjon 5).
+    window.__projectView = {
+      renderProjectView: renderProjectView,
+      renderProjectHeader: renderProjectHeader,
+      renderArtifactNav: renderArtifactNav,
+      renderArtifactNavItem: renderArtifactNavItem,
+      renderProjectMain: renderProjectMain,
+      renderProjectOverview: renderProjectOverview,
+      renderProjectArtifact: renderProjectArtifact,
+      renderEmptyArtifactPrompt: renderEmptyArtifactPrompt,
+      renderImportModal: renderImportModal,
+      inferCommandIdFromMarkdown: inferCommandIdFromMarkdown,
+      fingerprintScore: fingerprintScore,
+      PROJECT_VIEW_CONFIG: PROJECT_VIEW_CONFIG,
+      COMMAND_FINGERPRINTS: COMMAND_FINGERPRINTS
+    };
+    // === PROJECT_VIEW_V2_END ===
 
     // ============================================================
     // ONBOARDING SURFACE (Step 5)
@@ -5553,9 +6007,20 @@
        'activeSurface', 'preferences'].forEach(function (k) {
         if (demo[k] !== undefined) store.state[k] = demo[k];
       });
-      // Reset interne UI-state-variabler så project-render starter i 'rapporter'-tab.
+      // v1.15.0: kjør migrasjonen så demo-state med dataVersion=2 + reports
+      // konverteres til v3 artifacts-shape FØR render. parserFor sørger for at
+      // raw_markdown auto-parses inn i artifacts.parsed/verdict/keyStats.
+      try { migrateDataVersion(store.state, defaultArchetypeFor, defaultParserFor); }
+      catch (e) { console.warn('[playground v3] load-demo migrate failed:', e); }
       currentProjectTab = 'regulatory';
-      currentProjectScreen = 'rapporter';
+      // Reset v3 project-view UI-state så sidebar starter på overview.
+      if (store.state.ui && store.state.ui.projectView) {
+        store.state.ui.projectView.selectedArtifactId = null;
+        store.state.ui.projectView.searchQuery = '';
+      }
+      if (store.state.ui && store.state.ui.importModal) {
+        store.state.ui.importModal.open = false;
+      }
       navigate(demo.activeSurface || 'project');
     };
 
@@ -5671,24 +6136,8 @@
       });
     };
 
-    ACTIONS['project-screen'] = function (ev, el) {
-      const screen = el.dataset.screen;
-      if (!screen) return;
-      currentProjectScreen = screen;
-      // Toggle aria-current på .tab-list-knappene + [hidden] på .tab-panel-paneler
-      // uten full re-render (bevarer evt textarea-input i panels).
-      const root = getSurfaceEl('project');
-      if (!root) return;
-      const tabs = root.querySelectorAll('.tab-list .tab');
-      tabs.forEach(function (t) {
-        t.setAttribute('aria-current', t.dataset.screen === screen ? 'true' : 'false');
-      });
-      const screens = root.querySelectorAll('.tab-panel[data-screen-id]');
-      screens.forEach(function (s) {
-        if (s.dataset.screenId === screen) s.removeAttribute('hidden');
-        else s.setAttribute('hidden', '');
-      });
-    };
+    // v1.15.0: ACTIONS['project-screen'] fjernet sammen med screen-tabs i
+    // renderProjectSurface (v3 project-view bruker artifact-sidebar i stedet).
 
     ACTIONS['parse'] = function (ev, el) {
       const commandId = el.dataset.command;
@@ -5702,6 +6151,247 @@
       handlePasteImport(commandId, markdown);
     };
 
+    // ============================================================
+    // PROJECT-VIEW V2 ACTIONS (Sesjon 3)
+    // ============================================================
+    //
+    // Disse handlers betjener renderProjectView (parallell implementasjon).
+    // Ingen call-site i Sesjon 3 — Sesjon 5 bytter renderProjectSurface →
+    // renderProjectView i renderActive() og aktiverer hele kjeden.
+
+    function projectViewUiState() {
+      if (!store || !store.state) return null;
+      if (!store.state.ui) store.state.ui = {};
+      if (!store.state.ui.projectView) {
+        store.state.ui.projectView = { selectedArtifactId: null, searchQuery: '' };
+      }
+      if (!store.state.ui.importModal) {
+        store.state.ui.importModal = { open: false, prefillCommandId: '', prefillMarkdown: '' };
+      }
+      return store.state.ui;
+    }
+
+    ACTIONS['project-select-artifact'] = function (ev, el) {
+      const id = el.dataset.artifactId;
+      if (!id) return;
+      const ui = projectViewUiState();
+      if (!ui) return;
+      ui.projectView.selectedArtifactId = id;
+      scheduleRender();
+    };
+
+    ACTIONS['project-show-overview'] = function () {
+      const ui = projectViewUiState();
+      if (!ui) return;
+      ui.projectView.selectedArtifactId = null;
+      scheduleRender();
+    };
+
+    ACTIONS['import-open'] = function (ev, el) {
+      const ui = projectViewUiState();
+      if (!ui) return;
+      const prefillCmd = (el && el.dataset && el.dataset.prefillCommand) || '';
+      ui.importModal.open = true;
+      ui.importModal.prefillCommandId = prefillCmd;
+      // Hvis det allerede finnes artifact for prefillCmd, fyll markdown så
+      // re-import-flowen får eksisterende tekst tilgjengelig.
+      const project = findProject(store.state.activeProjectId);
+      const existing = project && project.artifacts && project.artifacts[prefillCmd];
+      ui.importModal.prefillMarkdown = (existing && existing.raw_markdown) || '';
+      scheduleRender();
+    };
+
+    ACTIONS['import-close'] = function () {
+      const ui = projectViewUiState();
+      if (!ui) return;
+      ui.importModal.open = false;
+      ui.importModal.prefillCommandId = '';
+      ui.importModal.prefillMarkdown = '';
+      scheduleRender();
+    };
+
+    ACTIONS['artifact-reimport'] = function (ev, el) {
+      const cid = el && el.dataset && el.dataset.command;
+      if (!cid) return;
+      const ui = projectViewUiState();
+      if (!ui) return;
+      const project = findProject(store.state.activeProjectId);
+      const existing = project && project.artifacts && project.artifacts[cid];
+      ui.importModal.open = true;
+      ui.importModal.prefillCommandId = cid;
+      ui.importModal.prefillMarkdown = (existing && existing.raw_markdown) || '';
+      scheduleRender();
+    };
+
+    ACTIONS['artifact-delete'] = function (ev, el) {
+      const cid = el && el.dataset && el.dataset.command;
+      if (!cid) return;
+      if (typeof confirm === 'function' && !confirm('Slette artefakt for «' + cid + '»? Kan ikke angres.')) return;
+      const project = findProject(store.state.activeProjectId);
+      if (!project) return;
+      if (project.artifacts && project.artifacts[cid]) delete project.artifacts[cid];
+      if (project.reports && project.reports[cid]) delete project.reports[cid];
+      const ui = projectViewUiState();
+      if (ui && ui.projectView.selectedArtifactId === cid) ui.projectView.selectedArtifactId = null;
+      scheduleRender();
+    };
+
+    // Smart-detect på textarea-input i import-modal.
+    // Re-rendrer kun .import-modal__detect + .import-modal__preview-banner-områdene
+    // (ikke full surface-render — beholder cursor i textarea).
+    const projectViewDetectDebounceMs = 250;
+    let projectViewDetectTimer = null;
+    function projectViewRunDetect() {
+      const modal = document.querySelector('[data-import-modal]');
+      if (!modal) return;
+      const ta = modal.querySelector('[data-import-markdown]');
+      const detectEl = modal.querySelector('[data-import-detect]');
+      const select = modal.querySelector('[data-import-command]');
+      const previewEl = modal.querySelector('[data-import-preview]');
+      const saveBtn = modal.querySelector('[data-import-save]');
+      if (!ta || !detectEl) return;
+      const text = ta.value || '';
+      const result = inferCommandIdFromMarkdown(text, PARSERS);
+      if (result && result.confidence >= 0.7) {
+        const cmd = (CATALOG.commands || []).find(function (c) { return c.id === result.commandId; });
+        const label = cmd ? cmd.label : result.commandId;
+        const pct = Math.round(result.confidence * 100);
+        detectEl.innerHTML = '<span class="import-modal__detect-banner" data-confidence="' + pct + '">' +
+                               '✓ Detektert: <strong>' + escapeHtml(label) + '</strong> (' + pct + '% sikker)' +
+                             '</span>';
+        if (select && !select.value) select.value = result.commandId;
+      } else if (result) {
+        const pct = Math.round(result.confidence * 100);
+        detectEl.innerHTML = '<span class="import-modal__detect-banner import-modal__detect-banner--low" data-confidence="' + pct + '">' +
+                               'Mulig: ' + escapeHtml(result.commandId) + ' (' + pct + '%) — bekreft i dropdown' +
+                             '</span>';
+      } else {
+        detectEl.innerHTML = '';
+      }
+      // Preview: parse + render hvis vi har gyldig command + tekst.
+      const activeCmd = select ? select.value : '';
+      if (activeCmd && text.trim() && previewEl) {
+        const cmd = (CATALOG.commands || []).find(function (c) { return c.id === activeCmd; });
+        if (cmd && cmd.report_archetype) {
+          const parser = PARSERS[cmd.report_archetype];
+          const renderer = RENDERERS[cmd.renderer];
+          if (parser && renderer) {
+            try {
+              const r = parser(text);
+              if (r && r.ok && r.data) {
+                previewEl.innerHTML = '';
+                renderer(r.data, previewEl);
+                if (saveBtn) saveBtn.removeAttribute('disabled');
+              } else {
+                previewEl.innerHTML = '<p class="import-modal__preview-warning">Klarte ikke å tolke markdown — sjekk at det matcher /' + escapeHtml(activeCmd) + '-formatet.</p>';
+                if (saveBtn) saveBtn.setAttribute('disabled', '');
+              }
+            } catch (e) {
+              previewEl.innerHTML = '<p class="import-modal__preview-warning">Parser-feil: ' + escapeHtml(String(e.message || e)) + '</p>';
+              if (saveBtn) saveBtn.setAttribute('disabled', '');
+            }
+          }
+        }
+      } else if (previewEl) {
+        previewEl.innerHTML = '';
+        if (saveBtn) saveBtn.setAttribute('disabled', '');
+      }
+    }
+
+    ACTIONS['import-detect'] = function () {
+      if (projectViewDetectTimer) clearTimeout(projectViewDetectTimer);
+      projectViewDetectTimer = setTimeout(projectViewRunDetect, projectViewDetectDebounceMs);
+    };
+
+    ACTIONS['import-save'] = function () {
+      const modal = document.querySelector('[data-import-modal]');
+      if (!modal) return;
+      const select = modal.querySelector('[data-import-command]');
+      const ta = modal.querySelector('[data-import-markdown]');
+      if (!select || !ta) return;
+      const cid = select.value;
+      const text = ta.value || '';
+      if (!cid || !text.trim()) return;
+      const cmd = (CATALOG.commands || []).find(function (c) { return c.id === cid; });
+      if (!cmd || !cmd.report_archetype) return;
+      const parser = PARSERS[cmd.report_archetype];
+      if (!parser) return;
+      const r = parser(text);
+      if (!r || !r.ok || !r.data) return;
+      const project = findProject(store.state.activeProjectId);
+      if (!project) return;
+      if (!project.artifacts) project.artifacts = {};
+      const arche = cmd.report_archetype;
+      const nowIso = new Date().toISOString();
+      const existing = project.artifacts[cid];
+      const verdict = r.data.verdict || inferVerdict(r.data, arche);
+      const keyStats = Array.isArray(r.data.keyStats) ? r.data.keyStats : inferKeyStats(r.data, arche);
+      project.artifacts[cid] = {
+        commandId: cid,
+        raw_markdown: text,
+        parsed: r.data,
+        verdict: verdict,
+        keyStats: keyStats,
+        importedAt: existing ? existing.importedAt : nowIso,
+        updatedAt: nowIso
+      };
+      // Bakover-kompat: speil til project.reports inntil v1.16.0.
+      if (!project.reports) project.reports = {};
+      if (!project.reports[cid]) project.reports[cid] = { input: {} };
+      project.reports[cid].raw_markdown = text;
+      project.reports[cid].parsed = r.data;
+      project.reports[cid].updatedAt = nowIso;
+      const ui = projectViewUiState();
+      if (ui) {
+        ui.importModal.open = false;
+        ui.importModal.prefillCommandId = '';
+        ui.importModal.prefillMarkdown = '';
+        ui.projectView.selectedArtifactId = cid;
+      }
+      scheduleRender();
+    };
+
+    // Live søk i sidebar — re-render hele project-view-surface ville flyttet
+    // textarea-caret i import-modal og søkefelt-caret. Setter searchQuery
+    // og re-rendrer kun nav-containeren in-place.
+    document.addEventListener('input', function (ev) {
+      if (!ev.target || !ev.target.matches) return;
+      if (ev.target.matches('[data-project-search]')) {
+        const ui = projectViewUiState();
+        if (!ui) return;
+        ui.projectView.searchQuery = ev.target.value || '';
+        const project = findProject(store.state.activeProjectId);
+        const root = document.querySelector('[data-surface="project"] .project-view .project-view__nav');
+        if (project && root && root.parentNode) {
+          const tmp = document.createElement('div');
+          tmp.innerHTML = renderArtifactNav(project, PROJECT_VIEW_CONFIG, ui.projectView.selectedArtifactId, ui.projectView.searchQuery);
+          const newNav = tmp.firstElementChild;
+          if (newNav) {
+            root.parentNode.replaceChild(newNav, root);
+            const searchInput = newNav.querySelector('[data-project-search]');
+            if (searchInput) {
+              searchInput.focus();
+              const len = searchInput.value.length;
+              try { searchInput.setSelectionRange(len, len); } catch (_e) { /* ignore */ }
+            }
+          }
+        }
+        return;
+      }
+      if (ev.target.matches('[data-import-markdown]')) {
+        const handler = ACTIONS['import-detect'];
+        if (handler) handler(ev, ev.target);
+      }
+    });
+
+    // change-event på import-modal-dropdown trigger preview-refresh.
+    document.addEventListener('change', function (ev) {
+      if (!ev.target || !ev.target.matches) return;
+      if (ev.target.matches('[data-import-command]')) {
+        projectViewRunDetect();
+      }
+    });
+
     // ---- Step 8: copy-command + preview-command ----
 
     ACTIONS['copy-command'] = function (ev, el) {
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-dark.png
new file mode 100644
index 0000000..a3ae5fa
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-light.png
new file mode 100644
index 0000000..2166e22
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/01-onboarding-empty-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-dark.png
new file mode 100644
index 0000000..0083a02
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-light.png
new file mode 100644
index 0000000..1279d74
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/02-project-overview-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-dark.png
new file mode 100644
index 0000000..2f13e4f
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-light.png
new file mode 100644
index 0000000..ce014d0
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/03-project-artifact-classify-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-dark.png
new file mode 100644
index 0000000..69b26d5
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-light.png
new file mode 100644
index 0000000..63943de
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/04-project-artifact-security-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-dark.png
new file mode 100644
index 0000000..845a291
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-light.png
new file mode 100644
index 0000000..26eb802
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/05-project-artifact-ros-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-dark.png
new file mode 100644
index 0000000..060ecf0
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-light.png
new file mode 100644
index 0000000..35d51c7
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/06-project-artifact-cost-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-dark.png
new file mode 100644
index 0000000..3770d47
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-light.png
new file mode 100644
index 0000000..08673f0
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/07-project-artifact-summary-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-dark.png
new file mode 100644
index 0000000..031c1f8
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-light.png
new file mode 100644
index 0000000..3e110fb
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/08-project-import-modal-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-dark.png
new file mode 100644
index 0000000..7fff2c5
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-light.png
new file mode 100644
index 0000000..1a9e64d
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/09-project-search-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-dark.png
new file mode 100644
index 0000000..01d3caf
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-light.png
new file mode 100644
index 0000000..5247ca3
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/10-home-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-dark.png
new file mode 100644
index 0000000..90b8a87
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-light.png
new file mode 100644
index 0000000..ffebc40
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/11-catalog-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-dark.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-dark.png
new file mode 100644
index 0000000..009ecac
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-light.png b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-light.png
new file mode 100644
index 0000000..2166e22
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v1.15.0/12-onboarding-prefilled-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-dark.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-dark.png
new file mode 100644
index 0000000..4a6d204
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-light.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-light.png
new file mode 100644
index 0000000..ac29e75
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/artifact-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-dark.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-dark.png
new file mode 100644
index 0000000..22ebf60
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-light.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-light.png
new file mode 100644
index 0000000..ecd1e4a
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/empty-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-dark.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-dark.png
new file mode 100644
index 0000000..0e1fcdf
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-light.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-light.png
new file mode 100644
index 0000000..c5a86d6
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/import-light.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-dark.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-dark.png
new file mode 100644
index 0000000..43835c3
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-dark.png differ
diff --git a/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-light.png b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-light.png
new file mode 100644
index 0000000..3c85b04
Binary files /dev/null and b/plugins/ms-ai-architect/playground/screenshots/v2-mockup/overview-light.png differ
diff --git a/plugins/ms-ai-architect/playground/vendor/playground-design-system/CHANGELOG.md b/plugins/ms-ai-architect/playground/vendor/playground-design-system/CHANGELOG.md
index 3741e52..3d489a7 100644
--- a/plugins/ms-ai-architect/playground/vendor/playground-design-system/CHANGELOG.md
+++ b/plugins/ms-ai-architect/playground/vendor/playground-design-system/CHANGELOG.md
@@ -1,5 +1,65 @@
 # playground-design-system — CHANGELOG
 
+## 0.6.0 — 2026-05-15
+
+### Added — Project-view archetype (Tier 4)
+
+Generic "project as artifact-collection" archetype for plugins where a project owns 0-N read-only report artifacts grouped by category. Default view is an aggregated dashboard; clicking a sidebar item swaps the main panel to the per-artifact render. Edit-mode is paste-import only (no inline editor).
+
+- **New file `components-tier4-project-view.css`** — 11 sections covering:
+  - `.project-view` + `.project-view__layout` (grid: nav 280px + main 1fr, responsive collapse at 1280 / 960px)
+  - `.project-view__header` (CSS Grid with eyebrow/title/lede/verdict/key-stats/actions areas)
+  - `.verdict-pill` (small pill variant — companion to existing `.verdict-pill-lg` in tier2)
+  - `.project-view__nav` + `.project-view__nav-search` (sticky sidebar with search)
+  - `.artifact-list` + `__group` / `__group-label` / `__group-count` / `__group-items` / `__item` / `__item-marker` / `__item-body` / `__item-name` / `__item-meta` (grouped, severity-coded sidebar)
+  - `.artifact-status[data-severity]` (mini-pill: positive | medium | critical)
+  - `.project-view__main` (main column container)
+  - `.project-overview` + `__intro` / `__verdict-grid` / `__verdict-tile[data-severity]` / `__section` / `__top-risks` / `__next-actions` / `__missing-reports` (aggregated dashboard)
+  - `.project-view__artifact` + `__artifact-header` / `__artifact-title` / `__artifact-meta` / `__artifact-actions` / `__artifact-body` (single-rapport viewer wrapper)
+  - `.empty-artifact-prompt` + `__icon` / `__title` / `__text` / `__actions` (empty-state)
+  - `.import-modal` + `__backdrop` / `__panel` / `__head` / `__title` / `__close` / `__form` / `__detect` / `__preview` / `__preview-label` / `__footer` (overlay modal for paste-import)
+
+- **6 new tokens in `tokens.css`:**
+  - `--project-view-nav-width: 280px` — sidebar width at full layout
+  - `--project-view-collapse-bp: 960px` — doc-only token referenced by responsive breakpoints
+  - `--artifact-list-item-pad-y: var(--space-2)` — sidebar row vertical padding
+  - `--artifact-list-item-pad-x: var(--space-3)` — sidebar row horizontal padding
+  - `--artifact-marker-size: 14px` — sidebar status marker diameter
+  - `--artifact-marker-border: 1.5px` — sidebar status marker border thickness
+
+### Påvirkning
+
+Endringen er **additiv**: ny komponent-fil + 6 nye tokens, ingen eksisterende selectors eller verdier endres. Plugin-konsumenter (`ms-ai-architect`, `llm-security`, `okr`, `config-audit`, `voyage`) får silent drift mot ny source-commit, men kan re-sync på eget tempo. Bare `ms-ai-architect` og `llm-security` re-syncer i samme commit som denne DS-bumpen (forberedelse til koordinert v1.15.0 / v7.7.0-release etter ~8 sesjoner med JS-implementasjon).
+
+Førsteadoptere: `ms-ai-architect` v1.15.0 (17 artefakter, 5 kategorier) + `llm-security` v7.7.0 (≥18 artefakter, 6 kategorier). State-driven visibility håndteres i plugin-JS, ikke i denne CSS-en — kun aktiv state rendres per pass.
+
+### Plugins som må laste den nye filen
+
+Etter `<link>` til `components-tier3-supplement.css`, legg til:
+
+```html
+<link rel="stylesheet" href="vendor/playground-design-system/components-tier4-project-view.css">
+```
+
+### For å adoptere v0.6.0
+
+```bash
+node scripts/sync-design-system.mjs <plugin-name>
+# --force hvis drift detected
+```
+
+## 0.5.0 — 2026-05-10
+
+### Added
+- **voyage scope tokens (B-DS-4):** `--color-scope-voyage` (aqua-blue `#1B5FB8`), `--color-scope-voyage-soft` (`#E5EFFA`), `--color-scope-voyage-strong` (`#143E78`) appended to scope-color group in `tokens.css`. Matches the existing `--color-scope-{architect,okr,security,ultraplan,config}` family so voyage-playground can use the canonical badge convention.
+- **`.badge--scope-voyage`** in `base.css`: white-on-aqua-blue badge variant matching the existing scope-badge family.
+
+### Påvirkning
+
+Endringen er **additiv**: legger TIL voyage-scope-tokens og en ny badge-modifier. Ingen eksisterende selectors eller token-verdier endres. Plugin-konsumenter (llm-security, ms-ai-architect, okr, config-audit) får stale vendor-state mot ny source-commit, men det er silent drift — re-sync skjer på eget tempo neste playground-touch. Bare `voyage` re-syncer i denne commit-en.
+
+Førsteadopter: `voyage` v4.3.0 (multi-sesjons-løp 2026-05-10, sesjon 1 = Wave 0+1 Foundation).
+
 ## 0.4.0 — 2026-05-08
 
 ### Bug fixes
diff --git a/plugins/ms-ai-architect/playground/vendor/playground-design-system/MANIFEST.json b/plugins/ms-ai-architect/playground/vendor/playground-design-system/MANIFEST.json
index d89f470..45c6e0d 100644
--- a/plugins/ms-ai-architect/playground/vendor/playground-design-system/MANIFEST.json
+++ b/plugins/ms-ai-architect/playground/vendor/playground-design-system/MANIFEST.json
@@ -2,16 +2,17 @@
   "generated_by": "scripts/sync-design-system.mjs",
   "do_not_edit": true,
   "source": "shared/playground-design-system/",
-  "source_commit": "9f806469f37742be65f778059bf364308c9d2811",
-  "sync_date": "2026-05-08T17:57:53.412Z",
-  "file_count": 26,
+  "source_commit": "c1b7bad3899c5cfe9ff90663003609b018aa79a0",
+  "sync_date": "2026-05-15T14:11:07.444Z",
+  "file_count": 27,
   "files": {
-    "CHANGELOG.md": "dfbd75552c94848acba3e2503bfad56c1c4bc8cfdcbd638d9409149010913d28",
+    "CHANGELOG.md": "b5018b46cd0830334109e915d23b5554c060412c2b7e132f97f2933e5dd5d79c",
     "README.md": "83de0e29b207c979b7b2a3327b7a4ec0c2e1b4d3705ee2677f26c28c3a3ee643",
-    "base.css": "604fe6839e2ed304bc0ba112a4e045f208b4b3f084f449a1abdb94ce0a1e5263",
+    "base.css": "df0db874473412eb771b7355b589f7478042987756898f0921584286bd5ba70a",
     "components-tier2.css": "c2cb7e9d76d6af28d50db654030413777feb2f2f2b93213e598de8b686b14523",
     "components-tier3-supplement.css": "51fab10377d80029d6552613069d46fd14ce66af77fe6705b1c6bdf5c9e6481e",
     "components-tier3.css": "c391ea387298ce864bc35078e7e044b2cdd4187e3130456347d91876599ff4b1",
+    "components-tier4-project-view.css": "f8f784df70044ecc9bdc862a327b1ee58b201d056581316808a9b60632c5a993",
     "components.css": "56fa7392b8b20b567a46f72a8fe9e0205d78ce475eae6b22fc3f50b39b235545",
     "fonts.css": "e3c3df581c6e4d66e25c555f125c745f6512a33038401089d2519a94ea63ee3d",
     "fonts/Inter-Bold.woff2": "220976705fbec109f43c5cfdceca639e99ace7e51f3eb67292b105d3575eb39b",
@@ -31,6 +32,6 @@
     "schemas/finding.schema.json": "0b24797373650582bac232d31a4dd9260593375a0d17259e18f1141a20de8d0c",
     "schemas/okr-set.schema.json": "aa27347fb232a956ec9dcee1775115710e2715a665c8d729ac50b90c6884de26",
     "schemas/ros-threat.schema.json": "e16497c1a6b79d6e78149d6cf1c28ac9df1e93234627a0c546814fb24d6c96d9",
-    "tokens.css": "1499bc2eea0178e35935413c79a10bbee7d49fdfa91bd33eeba3bb9e9acab809"
+    "tokens.css": "63dca13f8341937169fc8e84d3f37ae0c714901fa006c865ea377bd448f87644"
   }
 }
diff --git a/plugins/ms-ai-architect/playground/vendor/playground-design-system/base.css b/plugins/ms-ai-architect/playground/vendor/playground-design-system/base.css
index abeb790..27f3920 100644
--- a/plugins/ms-ai-architect/playground/vendor/playground-design-system/base.css
+++ b/plugins/ms-ai-architect/playground/vendor/playground-design-system/base.css
@@ -146,6 +146,7 @@ button { font-family: inherit; }
 .badge--scope-security  { background: var(--color-scope-security);  color: #fff; border-color: transparent; }
 .badge--scope-ultraplan { background: var(--color-scope-ultraplan); color: #fff; border-color: transparent; }
 .badge--scope-config    { background: var(--color-scope-config);    color: #fff; border-color: transparent; }
+.badge--scope-voyage    { background: var(--color-scope-voyage);    color: #fff; border-color: transparent; }
 
 /* ---------- Cards / surfaces ---------- */
 .card {
diff --git a/plugins/ms-ai-architect/playground/vendor/playground-design-system/components-tier4-project-view.css b/plugins/ms-ai-architect/playground/vendor/playground-design-system/components-tier4-project-view.css
new file mode 100644
index 0000000..5f97c20
--- /dev/null
+++ b/plugins/ms-ai-architect/playground/vendor/playground-design-system/components-tier4-project-view.css
@@ -0,0 +1,666 @@
+/* Code generated by sync-design-system.mjs; DO NOT EDIT. */
+/* =============================================================================
+   Playground Design System — components-tier4-project-view.css
+   v0.6.0 — Tier 4 project-view archetype
+   ============================================================================
+
+   Generic "project as artifact-collection" archetype. Default-view is an
+   aggregated overview dashboard; clicking a sidebar item swaps main to a
+   per-artifact render. Tracks 0-N read-only artifacts; edit-mode is paste-
+   import only (markdown from terminal → parser → store).
+
+   First adopters: ms-ai-architect v1.15.0 (17 artifacts, 5 categories) +
+   llm-security v7.7.0 (≥18 artifacts, 6 categories). Each plugin injects a
+   PROJECT_VIEW_CONFIG object that maps commands → renderers, categories,
+   verdict-aggregators, missing-report heuristics.
+
+   The CSS in this file is plugin-agnostic. Plugin-specific shape (category
+   names, artifact ordering, custom severity-mappings) lives in JS config.
+
+   State-driven visibility is NOT handled here — production playgrounds emit
+   only the active state (overview | artifact | empty | import) per render
+   pass. The mockup uses body[data-state="..."] for prototyping; production
+   renders one branch at a time.
+   ============================================================================= */
+
+
+/* === 1. Project-view top-level layout ===================================== */
+
+.project-view {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-view__layout {
+  display: grid;
+  grid-template-columns: var(--project-view-nav-width) 1fr;
+  gap: var(--space-6);
+  align-items: start;
+}
+
+@media (max-width: 1279px) {
+  .project-view__layout { grid-template-columns: 240px 1fr; }
+}
+
+@media (max-width: 959px) {
+  .project-view__layout { grid-template-columns: 1fr; }
+}
+
+
+/* === 2. Project-view header =============================================== */
+
+.project-view__header {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5) var(--space-6);
+  display: grid;
+  grid-template-columns: 1fr auto;
+  grid-template-areas:
+    "title    verdict"
+    "title    keystats"
+    "actions  actions";
+  gap: var(--space-4) var(--space-6);
+  align-items: start;
+}
+
+.project-view__title-block { grid-area: title; }
+.project-view__verdict     { grid-area: verdict; justify-self: end; }
+.project-view__key-stats   { grid-area: keystats; justify-self: end; }
+.project-view__actions     { grid-area: actions; display: flex; gap: var(--space-2); justify-content: flex-end; }
+
+.project-view__eyebrow {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__title {
+  font-size: var(--font-size-2xl);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-primary);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__lede {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 60ch;
+}
+
+.project-view__key-stats {
+  display: flex;
+  gap: var(--space-5);
+}
+
+.project-view__key-stat-label {
+  font-size: 10px;
+  text-transform: uppercase;
+  color: var(--color-text-tertiary);
+  letter-spacing: 0.06em;
+}
+
+.project-view__key-stat-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+  font-variant-numeric: tabular-nums;
+}
+
+
+/* === 3. Verdict-pill (small) ==============================================
+   Companion to .verdict-pill-lg (Tier 2). Inline-flex pill used in project
+   header + sidebar status badges. The larger -lg variant lives in
+   components-tier2.css; both share the same severity-band semantics. */
+
+.verdict-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: var(--space-1);
+  padding: 4px 12px;
+  border-radius: 999px;
+  font-weight: var(--font-weight-semibold);
+  font-size: var(--font-size-sm);
+}
+
+.verdict-pill--positive    { background: var(--color-state-success);   color: #fff; }
+.verdict-pill--medium      { background: var(--color-severity-medium); color: var(--color-severity-medium-on); }
+.verdict-pill--critical    { background: var(--color-severity-critical); color: #fff; }
+.verdict-pill--in-progress {
+  background: var(--color-bg-soft);
+  color: var(--color-text-secondary);
+  border: 1px dashed var(--color-border-moderate);
+}
+
+
+/* === 4. Sidebar nav ======================================================= */
+
+.project-view__nav {
+  position: sticky;
+  top: var(--space-6);
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-3);
+}
+
+.project-view__nav-search input {
+  width: 100%;
+  box-sizing: border-box;
+  padding: 6px 10px;
+  font-size: var(--font-size-sm);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+}
+
+
+/* === 5. Artifact-list ===================================================== */
+
+.artifact-list {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+  margin: 0;
+  padding: 0;
+  list-style: none;
+}
+
+.artifact-list__group {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.artifact-list__group-label {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  padding: 0 var(--space-2);
+}
+
+.artifact-list__group-count {
+  background: var(--color-bg-soft);
+  color: var(--color-text-tertiary);
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  padding: 1px 6px;
+  border-radius: 999px;
+}
+
+.artifact-list__group-items {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+
+.artifact-list__item {
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--artifact-list-item-pad-y) var(--artifact-list-item-pad-x);
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  background: transparent;
+  border: 1px solid transparent;
+  transition: background 120ms ease, border-color 120ms ease;
+}
+
+.artifact-list__item:hover { background: var(--color-bg-soft); }
+
+.artifact-list__item[data-state="active"] {
+  background: var(--color-bg-soft);
+  border-color: var(--color-primary-500);
+  box-shadow: inset 3px 0 0 var(--color-primary-500);
+  padding-left: calc(var(--artifact-list-item-pad-x) - 3px);
+}
+
+.artifact-list__item-marker {
+  width: var(--artifact-marker-size);
+  height: var(--artifact-marker-size);
+  border-radius: 50%;
+  border: var(--artifact-marker-border) solid var(--color-border-moderate);
+  background: transparent;
+  flex-shrink: 0;
+}
+
+.artifact-list__item[data-state="filled"][data-severity="positive"] .artifact-list__item-marker {
+  background: var(--color-state-success);
+  border-color: var(--color-state-success);
+}
+.artifact-list__item[data-state="filled"][data-severity="medium"] .artifact-list__item-marker {
+  background: var(--color-severity-medium);
+  border-color: var(--color-severity-medium);
+}
+.artifact-list__item[data-state="filled"][data-severity="critical"] .artifact-list__item-marker {
+  background: var(--color-severity-critical);
+  border-color: var(--color-severity-critical);
+}
+
+.artifact-list__item-body { min-width: 0; }
+
+.artifact-list__item-name {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-medium);
+  color: var(--color-text-primary);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.artifact-list__item[data-state="empty"] .artifact-list__item-name {
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-regular);
+}
+
+.artifact-list__item-meta {
+  font-size: 11px;
+  color: var(--color-text-tertiary);
+}
+
+
+/* === 6. Artifact-status (mini pill in sidebar) =========================== */
+
+.artifact-status {
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  font-weight: var(--font-weight-semibold);
+  padding: 1px 5px;
+  border-radius: var(--radius-sm);
+  letter-spacing: 0.04em;
+}
+
+.artifact-status[data-severity="positive"] { background: var(--color-severity-low-soft);      color: var(--color-severity-low-on); }
+.artifact-status[data-severity="medium"]   { background: var(--color-severity-medium-soft);   color: var(--color-severity-medium-on); }
+.artifact-status[data-severity="critical"] { background: var(--color-severity-critical-soft); color: var(--color-severity-critical-on); }
+
+
+/* === 7. Project-view main panel ========================================== */
+
+.project-view__main {
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 8. Project-overview (default dashboard) ============================= */
+
+.project-overview {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-overview__intro {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__intro h2 {
+  font-size: var(--font-size-lg);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-overview__intro p {
+  color: var(--color-text-secondary);
+  margin: 0;
+}
+
+.project-overview__verdict-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: var(--space-3);
+}
+
+.project-overview__verdict-tile {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-left: 4px solid var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.project-overview__verdict-tile[data-severity="positive"] { border-left-color: var(--color-state-success); }
+.project-overview__verdict-tile[data-severity="medium"]   { border-left-color: var(--color-severity-medium); }
+.project-overview__verdict-tile[data-severity="critical"] { border-left-color: var(--color-severity-critical); }
+.project-overview__verdict-tile[data-severity="empty"]    { border-left-style: dashed; }
+
+.project-overview__verdict-tile-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-meta {
+  font-size: var(--font-size-xs);
+  color: var(--color-text-secondary);
+}
+
+.project-overview__section h3 {
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-3) 0;
+}
+
+.project-overview__top-risks,
+.project-overview__next-actions {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__top-risks ol,
+.project-overview__next-actions ol {
+  list-style: none;
+  counter-reset: rank;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__top-risks li,
+.project-overview__next-actions li {
+  counter-increment: rank;
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-bg-soft);
+}
+
+.project-overview__top-risks li::before,
+.project-overview__next-actions li::before {
+  content: counter(rank);
+  font-family: var(--font-family-mono);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-tertiary);
+  font-size: var(--font-size-sm);
+  min-width: 20px;
+}
+
+.project-overview__missing-reports {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__missing-reports ul {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__missing-reports li {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg-soft);
+  border-radius: var(--radius-sm);
+  border-left: 3px dashed var(--color-border-moderate);
+}
+
+
+/* === 9. Artifact-view (one report rendered) ============================== */
+
+.project-view__artifact {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-6);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+.project-view__artifact-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: start;
+  gap: var(--space-4);
+  padding-bottom: var(--space-4);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.project-view__artifact-title {
+  font-size: var(--font-size-xl);
+  margin: 0 0 var(--space-1) 0;
+}
+
+.project-view__artifact-meta {
+  font-size: var(--font-size-sm);
+  color: var(--color-text-tertiary);
+  margin: 0;
+}
+
+.project-view__artifact-actions {
+  display: flex;
+  gap: var(--space-2);
+  flex-shrink: 0;
+}
+
+.project-view__artifact-body {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 10. Empty-artifact-prompt (no report imported yet) ================== */
+
+.empty-artifact-prompt {
+  background: var(--color-surface);
+  border: 2px dashed var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-8);
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: var(--space-3);
+  text-align: center;
+}
+
+.empty-artifact-prompt__icon {
+  font-size: 48px;
+  opacity: 0.5;
+}
+
+.empty-artifact-prompt__title {
+  font-size: var(--font-size-lg);
+  margin: 0;
+}
+
+.empty-artifact-prompt__text {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 50ch;
+}
+
+.empty-artifact-prompt__actions {
+  display: flex;
+  gap: var(--space-2);
+  margin-top: var(--space-2);
+}
+
+
+/* === 11. Import-modal (overlay) ========================================== */
+
+.import-modal {
+  position: fixed;
+  inset: 0;
+  z-index: 200;
+  display: none;
+}
+
+.import-modal[data-open="true"] {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.import-modal__backdrop {
+  position: absolute;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+}
+
+.import-modal__panel {
+  position: relative;
+  width: min(720px, 92vw);
+  max-height: 90vh;
+  overflow: auto;
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-strong);
+  border-radius: var(--radius-md);
+  box-shadow: var(--shadow-lg);
+  display: flex;
+  flex-direction: column;
+}
+
+.import-modal__head {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-4) var(--space-5);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.import-modal__title {
+  margin: 0;
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.import-modal__close {
+  background: transparent;
+  border: none;
+  cursor: pointer;
+  padding: 4px 10px;
+  color: var(--color-text-tertiary);
+  font-size: 20px;
+  line-height: 1;
+  border-radius: var(--radius-sm);
+}
+
+.import-modal__close:hover {
+  background: var(--color-bg-soft);
+  color: var(--color-text-primary);
+}
+
+.import-modal__form {
+  padding: var(--space-5);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+}
+
+.import-modal__form .field {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.import-modal__form label {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-semibold);
+  color: var(--color-text-secondary);
+}
+
+.import-modal__form select,
+.import-modal__form textarea {
+  width: 100%;
+  box-sizing: border-box;
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+  font-family: var(--font-family-mono);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__form textarea {
+  resize: vertical;
+  min-height: 180px;
+}
+
+.import-modal__detect {
+  display: flex;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-severity-low-soft);
+  color: var(--color-severity-low-on);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__preview {
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-sm);
+  padding: var(--space-3);
+  background: var(--color-bg);
+  max-height: 200px;
+  overflow: auto;
+}
+
+.import-modal__preview-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  margin-bottom: var(--space-2);
+}
+
+.import-modal__footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: var(--space-2);
+  padding: var(--space-3) var(--space-5);
+  border-top: 1px solid var(--color-border-subtle);
+  background: var(--color-bg-soft);
+}
diff --git a/plugins/ms-ai-architect/playground/vendor/playground-design-system/tokens.css b/plugins/ms-ai-architect/playground/vendor/playground-design-system/tokens.css
index 6712666..65ec45a 100644
--- a/plugins/ms-ai-architect/playground/vendor/playground-design-system/tokens.css
+++ b/plugins/ms-ai-architect/playground/vendor/playground-design-system/tokens.css
@@ -102,6 +102,9 @@
   --color-scope-security:  #A40E26;     /* llm-security — crimson */
   --color-scope-ultraplan: #4338CA;     /* ultraplan-local — indigo */
   --color-scope-config:    #3F5963;     /* config-audit — slate */
+  --color-scope-voyage:        #1B5FB8; /* voyage — aqua-blue */
+  --color-scope-voyage-soft:   #E5EFFA; /* voyage — light tint */
+  --color-scope-voyage-strong: #143E78; /* voyage — dark strong */
 
   /* ---------- Spacing -------------------------------------------------- */
   --space-1: 4px;
@@ -140,6 +143,14 @@
   --container-default: 1080px;
   --container-wide: 1280px;
   --sidebar-width: 280px;
+
+  /* ---------- Project-view (Tier 4 — v0.6.0) --------------------------- */
+  --project-view-nav-width: 280px;
+  --project-view-collapse-bp: 960px;        /* doc-only — referenced by media queries */
+  --artifact-list-item-pad-y: var(--space-2);
+  --artifact-list-item-pad-x: var(--space-3);
+  --artifact-marker-size: 14px;
+  --artifact-marker-border: 1.5px;
 }
 
 :root { color-scheme: light; }
diff --git a/plugins/ms-ai-architect/skills/ms-ai-advisor/SKILL.md b/plugins/ms-ai-architect/skills/ms-ai-advisor/SKILL.md
index d1b8325..050a8c6 100644
--- a/plugins/ms-ai-architect/skills/ms-ai-advisor/SKILL.md
+++ b/plugins/ms-ai-architect/skills/ms-ai-advisor/SKILL.md
@@ -1,14 +1,7 @@
 ---
 name: ms-ai-advisor
-description: |
-  This skill should be used when the user needs Microsoft AI architecture guidance, wants help
-  choosing between Azure AI platforms, or asks about Copilot vs Foundry trade-offs. Cosmo Skyberg
-  persona guides through structured problem understanding before technology selection. Specialist
-  in Azure AI Foundry, M365 Copilot, Copilot Studio, Power Platform, Azure OpenAI, and
-  Microsoft Agent Framework.
-  Triggers on: "Microsoft AI architecture", "Copilot vs Foundry", "which Microsoft AI platform",
-  "Azure AI advice", "M365 Copilot vs Copilot Studio", "help me choose between Azure OpenAI and Copilot Studio",
-  "trenger arkitekturveiledning", "hvilken Copilot skal jeg bruke", "/architect", "Cosmo".
+description: >-
+  Microsoft AI architecture guidance, choosing between Azure AI platforms, Copilot vs Foundry trade-offs. Cosmo Skyberg persona guides through structured problem understanding before technology selection. Specialist in Azure AI Foundry, M365 Copilot, Copilot Studio, Power Platform, Azure OpenAI, Microsoft Agent Framework. Triggers on: "Microsoft AI architecture", "Copilot vs Foundry", "which Microsoft AI platform", "Cosmo", "/architect".
 ---
 
 > **INSTRUKSJON:** Du ER Cosmo Skyberg. Følg arbeidsprosessen nedenfor.
diff --git a/plugins/ms-ai-architect/skills/ms-ai-engineering/SKILL.md b/plugins/ms-ai-architect/skills/ms-ai-engineering/SKILL.md
index 20ad369..bbc5532 100644
--- a/plugins/ms-ai-architect/skills/ms-ai-engineering/SKILL.md
+++ b/plugins/ms-ai-architect/skills/ms-ai-engineering/SKILL.md
@@ -1,13 +1,7 @@
 ---
 name: ms-ai-engineering
-description: |
-  This skill should be used when the user needs deep technical guidance for building AI solutions
-  in the Microsoft stack — RAG architecture, multi-agent orchestration, Azure AI Services,
-  data engineering with Fabric, MLOps/GenAIOps, multimodal AI, or API Management for AI.
-  Triggers on: "RAG architecture on Azure", "multi-agent orchestration pattern",
-  "MLOps for generative AI", "Azure AI Search implementation", "Semantic Kernel agent",
-  "Fabric data pipeline for AI", "API gateway for AI", "chunking strategy",
-  "embedding model", "APIM for Azure OpenAI".
+description: >-
+  Deep technical guidance for building AI solutions in the Microsoft stack — RAG architecture, multi-agent orchestration, Azure AI Services, data engineering with Fabric, MLOps/GenAIOps, multimodal AI, API Management for AI. Triggers on: "RAG architecture on Azure", "multi-agent orchestration pattern", "MLOps for generative AI", "Azure AI Search", "Semantic Kernel agent", "Fabric data pipeline".
 ---
 
 > **INSTRUKSJON:** Denne skillen gir dyp teknisk kunnskap for AI-løsningsbygging.
diff --git a/plugins/ms-ai-architect/skills/ms-ai-governance/SKILL.md b/plugins/ms-ai-architect/skills/ms-ai-governance/SKILL.md
index 0f7c450..c5c9ac2 100644
--- a/plugins/ms-ai-architect/skills/ms-ai-governance/SKILL.md
+++ b/plugins/ms-ai-architect/skills/ms-ai-governance/SKILL.md
@@ -1,14 +1,7 @@
 ---
 name: ms-ai-governance
-description: |
-  This skill should be used when the user asks about Norwegian public sector AI compliance,
-  utredningsinstruksen for AI projects, EU AI Act risk classification, DPIA for AI systems,
-  Digdir architecture principles, responsible AI governance, or monitoring and observability
-  for AI in production.
-  Triggers on: "Norwegian public sector AI compliance", "utredningsinstruksen for AI",
-  "AI Act risk classification", "DPIA for AI system", "Digdir architecture principles",
-  "ansvarlig AI i offentlig sektor", "compliance-vurdering for AI", "Forvaltningsloven AI",
-  "Schrems II AI", "bias detection", "AI governance framework".
+description: >-
+  Norwegian public sector AI compliance, utredningsinstruksen for AI, EU AI Act risk classification, DPIA for AI systems, Digdir architecture principles, responsible AI governance, monitoring and observability. Triggers on: "Norwegian public sector AI compliance", "AI Act risk classification", "DPIA for AI system", "Digdir architecture principles", "ansvarlig AI i offentlig sektor", "Forvaltningsloven AI".
 ---
 
 # ms-ai-governance
diff --git a/plugins/ms-ai-architect/skills/ms-ai-infrastructure/SKILL.md b/plugins/ms-ai-architect/skills/ms-ai-infrastructure/SKILL.md
index 8034536..43cab23 100644
--- a/plugins/ms-ai-architect/skills/ms-ai-infrastructure/SKILL.md
+++ b/plugins/ms-ai-architect/skills/ms-ai-infrastructure/SKILL.md
@@ -1,14 +1,7 @@
 ---
 name: ms-ai-infrastructure
-description: |
-  This skill should be used when the user asks about disaster recovery for AI workloads,
-  multi-region Azure AI deployment, hybrid or edge AI architecture, sovereign cloud for Norway,
-  offline-first AI patterns, or AI infrastructure resilience planning.
-  Covers BCDR, Azure Arc for AI, ONNX Runtime edge deployment, disconnected scenarios,
-  and Norwegian data sovereignty requirements.
-  Triggers on: "disaster recovery for AI workloads", "edge AI deployment", "sovereign cloud AI",
-  "multi-region Azure AI", "Azure Arc for AI", "offline AI deployment",
-  "AI infrastructure resilience", "BCDR for AI", "hybrid AI", "Norway East failover".
+description: >-
+  Disaster recovery for AI workloads, multi-region Azure AI deployment, hybrid or edge AI architecture, sovereign cloud for Norway, offline-first AI patterns, AI infrastructure resilience. Covers BCDR, Azure Arc for AI, ONNX Runtime edge deployment, disconnected scenarios, Norwegian data sovereignty. Triggers on: "disaster recovery for AI workloads", "edge AI deployment", "sovereign cloud AI", "Azure Arc for AI", "BCDR for AI".
 ---
 
 > **INSTRUKSJON:** Denne ferdigheten dekker infrastrukturresiliens og driftsarkitektur for AI-arbeidsbelastninger.
diff --git a/plugins/ms-ai-architect/skills/ms-ai-security/SKILL.md b/plugins/ms-ai-architect/skills/ms-ai-security/SKILL.md
index bff4474..5be3d24 100644
--- a/plugins/ms-ai-architect/skills/ms-ai-security/SKILL.md
+++ b/plugins/ms-ai-architect/skills/ms-ai-security/SKILL.md
@@ -1,13 +1,7 @@
 ---
 name: ms-ai-security
-description: |
-  This skill should be used when the user needs a security assessment for an AI solution,
-  wants cost estimation for Azure AI workloads, asks about OWASP LLM Top 10 mitigations,
-  or needs performance optimization guidance. Provides deterministic 6x5 security scoring,
-  P10/P50/P90 cost confidence intervals, and FinOps practices for AI.
-  Triggers on: "security assessment for AI", "AI threat modeling", "cost estimation for Azure AI",
-  "FinOps for AI workloads", "prompt injection defense", "kostnadsestimat for AI-løsning",
-  "sikkerhetsscoring for AI", "OWASP LLM", "6x5 scoring", "PTU vs pay-as-you-go".
+description: >-
+  Security assessment, cost estimation, OWASP LLM Top 10 mitigations, performance optimization for AI on Microsoft stack. Deterministic 6x5 security scoring, P10/P50/P90 cost confidence intervals, FinOps practices. Triggers on: "security assessment for AI", "AI threat modeling", "cost estimation for Azure AI", "FinOps for AI workloads", "OWASP LLM", "kostnadsestimat for AI-løsning".
 ---
 
 > **INSTRUKSJON:** Denne skillen dekker kvantitative vurderingsaktiviteter med deterministiske
diff --git a/plugins/ms-ai-architect/tests/run-e2e.sh b/plugins/ms-ai-architect/tests/run-e2e.sh
index f4913a8..b6806f5 100755
--- a/plugins/ms-ai-architect/tests/run-e2e.sh
+++ b/plugins/ms-ai-architect/tests/run-e2e.sh
@@ -76,6 +76,10 @@ fi
 if $RUN_PLAYGROUND; then
   bash "$SCRIPT_DIR/test-playground-v3.sh" || FAILURES=$((FAILURES + 1))
   bash "$SCRIPT_DIR/test-playground-parsers.sh" || FAILURES=$((FAILURES + 1))
+  bash "$SCRIPT_DIR/test-playground-migrations.sh" || FAILURES=$((FAILURES + 1))
+  bash "$SCRIPT_DIR/test-playground-fingerprints.sh" || FAILURES=$((FAILURES + 1))
+  bash "$SCRIPT_DIR/test-playground-projectview.sh" || FAILURES=$((FAILURES + 1))
+  bash "$SCRIPT_DIR/test-playground-actions.sh" || FAILURES=$((FAILURES + 1))
 fi
 
 if $RUN_KB_UPDATE; then
diff --git a/plugins/ms-ai-architect/tests/screenshot/run.mjs b/plugins/ms-ai-architect/tests/screenshot/run.mjs
index 946aa5f..16b7e3d 100644
--- a/plugins/ms-ai-architect/tests/screenshot/run.mjs
+++ b/plugins/ms-ai-architect/tests/screenshot/run.mjs
@@ -1,14 +1,12 @@
 #!/usr/bin/env node
-// Capture playground screenshots for v1.14.0 documentation.
+// Capture playground screenshots for v1.15.0 documentation.
 //
-// Opens the single-file playground HTML via file://, drives it through:
-//   - Initial onboarding (empty state)
-//   - "Last inn demo-data" → project surface with all 17 reports rehydrated
-//   - All 4 project screen-tabs (oversikt / rapporter / kontekst / eksport)
-//   - Each rapport-tab category (regulatory / security / economy / docs / tool)
-//   - Both themes (dark + light)
+// v1.15.0: v2 project-surface (renderProjectSurface med screen-tabs +
+// category-tabs) erstattet av renderProjectView (sidebar med 17 artifacts +
+// main-area med per-artifact view + import-modal). Skjermbilder oppdatert
+// til å fange v3-surfaces.
 //
-// Output: playground/screenshots/v1.14.0/<surface>-<theme>.png
+// Output: playground/screenshots/v1.15.0/<surface>-<theme>.png
 //
 // Usage:
 //   cd tests/screenshot
@@ -25,7 +23,7 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const PLUGIN_ROOT = resolve(__dirname, '..', '..');
 const HTML_PATH = join(PLUGIN_ROOT, 'playground', 'ms-ai-architect-playground.html');
-const OUT_DIR = join(PLUGIN_ROOT, 'playground', 'screenshots', 'v1.14.0');
+const OUT_DIR = join(PLUGIN_ROOT, 'playground', 'screenshots', 'v1.15.0');
 const HTML_URL = 'file://' + HTML_PATH;
 
 const VIEWPORT = { width: 1440, height: 900 };
@@ -49,7 +47,6 @@ async function clearState(page) {
   await page.evaluate(() => {
     try { localStorage.clear(); } catch (e) {}
     try {
-      // Best-effort: clear IndexedDB databases.
       const dbs = ['ms-ai-architect-state-v1', 'ms-ai-architect-playground'];
       dbs.forEach((n) => indexedDB.deleteDatabase(n));
     } catch (e) {}
@@ -61,9 +58,9 @@ async function loadDemo(page) {
     const action = document.querySelector('[data-action="load-demo"]');
     if (action) action.click();
   });
-  // Wait for project surface to render + rehydrate paste-imports.
   await page.waitForSelector('[data-surface="project"]:not([hidden])', { timeout: 5000 });
-  await page.waitForTimeout(800); // settle rehydrate microtasks
+  // Settle migrasjon (v2→v3 auto-parse) + render.
+  await page.waitForTimeout(1200);
 }
 
 async function clickAction(page, action) {
@@ -71,28 +68,46 @@ async function clickAction(page, action) {
     const el = document.querySelector('[data-action="' + a + '"]');
     if (el) el.click();
   }, action);
-  await page.waitForTimeout(300);
-}
-
-async function clickProjectTab(page, tabId) {
-  await page.evaluate((t) => {
-    const el = document.querySelector('[data-action="project-tab"][data-tab="' + t + '"]');
-    if (el) el.click();
-  }, tabId);
   await page.waitForTimeout(400);
 }
 
-async function clickProjectScreen(page, screenId) {
-  await page.evaluate((s) => {
-    const el = document.querySelector('[data-action="project-screen"][data-screen="' + s + '"]');
+async function selectArtifact(page, artifactId) {
+  await page.evaluate((id) => {
+    const el = document.querySelector('[data-action="project-select-artifact"][data-artifact-id="' + id + '"]');
     if (el) el.click();
-  }, screenId);
+  }, artifactId);
+  await page.waitForTimeout(500);
+}
+
+async function openImportModal(page, prefillCmd) {
+  await page.evaluate((cid) => {
+    // Foretrukket: artifact-reimport-knappen (har eksisterende markdown).
+    if (cid) {
+      const el = document.querySelector('[data-action="artifact-reimport"][data-command="' + cid + '"]');
+      if (el) { el.click(); return; }
+    }
+    // Fallback: generisk "Importer rapport"-knapp.
+    const open = document.querySelector('[data-action="import-open"]');
+    if (open) open.click();
+  }, prefillCmd);
+  await page.waitForSelector('[data-import-modal]', { timeout: 3000 });
   await page.waitForTimeout(400);
 }
 
-async function shoot(page, name) {
+async function setSearchQuery(page, query) {
+  await page.evaluate((q) => {
+    const input = document.querySelector('[data-project-search]');
+    if (!input) return;
+    input.value = q;
+    input.dispatchEvent(new Event('input', { bubbles: true }));
+  }, query);
+  await page.waitForTimeout(400);
+}
+
+async function shoot(page, name, opts) {
   const path = join(OUT_DIR, name + '.png');
-  await page.screenshot({ path, fullPage: FULL_PAGE });
+  const useFullPage = (opts && opts.fullPage != null) ? opts.fullPage : FULL_PAGE;
+  await page.screenshot({ path, fullPage: useFullPage });
   console.log('  → ' + name + '.png');
 }
 
@@ -106,52 +121,58 @@ async function captureAllSurfaces(page, theme) {
   await setTheme(page, theme);
   await shoot(page, '01-onboarding-empty-' + theme);
 
-  // 2. Load demo → project surface (rapporter screen, regulatory tab default)
+  // 2. Load demo → project-view overview (default — ingen artifact valgt)
   await loadDemo(page);
   await setTheme(page, theme);
-  await shoot(page, '02-project-rapporter-regulatory-' + theme);
+  await shoot(page, '02-project-overview-' + theme);
 
-  // 3. Project tab cycle (5 categories)
-  const TABS = [
-    { id: 'security',      label: 'security'      },
-    { id: 'economy',       label: 'economy'       },
-    { id: 'documentation', label: 'documentation' },
-    { id: 'tool',          label: 'tool'          }
+  // 3-7. 5 sample artifacts som dekker arketype-bredden
+  const SAMPLE_ARTIFACTS = [
+    { id: 'classify', label: 'classify' }, // AI Act-pyramide
+    { id: 'security', label: 'security' }, // 6×5 sikkerhets-matrise
+    { id: 'ros',      label: 'ros'      }, // ROS matrise + radar
+    { id: 'cost',     label: 'cost'     }, // P10/P50/P90 distribusjon
+    { id: 'summary',  label: 'summary'  }  // Beslutningsnotat
   ];
-  for (const tab of TABS) {
-    await clickProjectTab(page, tab.id);
-    await page.waitForTimeout(500);
-    await shoot(page, '03-project-rapporter-' + tab.label + '-' + theme);
+  for (let i = 0; i < SAMPLE_ARTIFACTS.length; i++) {
+    const a = SAMPLE_ARTIFACTS[i];
+    await selectArtifact(page, a.id);
+    const num = String(3 + i).padStart(2, '0');
+    await shoot(page, num + '-project-artifact-' + a.label + '-' + theme);
   }
 
-  // 4. Project screen-tabs (oversikt / kontekst / eksport)
-  await clickProjectScreen(page, 'oversikt');
-  await shoot(page, '04-project-oversikt-' + theme);
-  await clickProjectScreen(page, 'kontekst');
-  await shoot(page, '05-project-kontekst-' + theme);
-  await clickProjectScreen(page, 'eksport');
-  await shoot(page, '06-project-eksport-' + theme);
+  // 8. Import-modal åpen (med prefill fra eksisterende ros-artifact)
+  // Viewport-only (ikke fullPage) — modal er position:fixed; fullPage
+  // skroller forbi overlay-en og kaster bort kontekst.
+  await openImportModal(page, 'ros');
+  await page.evaluate(() => window.scrollTo(0, 0));
+  await page.waitForTimeout(200);
+  await shoot(page, '08-project-import-modal-' + theme, { fullPage: false });
+  await clickAction(page, 'import-close');
+  await page.waitForTimeout(300);
 
-  // Back to rapporter for nav screenshots
-  await clickProjectScreen(page, 'rapporter');
+  // 9. Sidebar-søk aktivt (filtrer på "ros")
+  await setSearchQuery(page, 'ros');
+  await shoot(page, '09-project-search-' + theme);
+  await setSearchQuery(page, ''); // reset
 
-  // 5. Home surface
+  // 10. Home surface
   await clickAction(page, 'goto-home');
   await page.waitForSelector('[data-surface="home"]:not([hidden])');
   await page.waitForTimeout(300);
-  await shoot(page, '07-home-' + theme);
+  await shoot(page, '10-home-' + theme);
 
-  // 6. Catalog surface
+  // 11. Catalog surface
   await clickAction(page, 'goto-catalog');
   await page.waitForSelector('[data-surface="catalog"]:not([hidden])');
   await page.waitForTimeout(300);
-  await shoot(page, '08-catalog-' + theme);
+  await shoot(page, '11-catalog-' + theme);
 
-  // 7. Onboarding (with prefilled state from demo)
+  // 12. Onboarding prefilled (post-demo med org-felter fylt)
   await clickAction(page, 'goto-onboarding');
   await page.waitForSelector('[data-surface="onboarding"]:not([hidden])');
   await page.waitForTimeout(300);
-  await shoot(page, '09-onboarding-prefilled-' + theme);
+  await shoot(page, '12-onboarding-prefilled-' + theme);
 }
 
 async function main() {
@@ -160,7 +181,7 @@ async function main() {
   const browser = await chromium.launch();
   const context = await browser.newContext({
     viewport: VIEWPORT,
-    deviceScaleFactor: 2 // crisper screenshots for retina
+    deviceScaleFactor: 2
   });
   const page = await context.newPage();
   page.on('console', (msg) => {
diff --git a/plugins/ms-ai-architect/tests/screenshot/shoot-mockup.local.mjs b/plugins/ms-ai-architect/tests/screenshot/shoot-mockup.local.mjs
new file mode 100644
index 0000000..41a86a6
--- /dev/null
+++ b/plugins/ms-ai-architect/tests/screenshot/shoot-mockup.local.mjs
@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+// Mockup verification screenshots — sesjon 2 (DS-hoist).
+// Captures the 4 mockup states × 2 themes to confirm visual identity
+// after hoisting project-view CSS to shared DS.
+//
+// Output: playground/screenshots/v2-mockup/<state>-<theme>.png
+
+import { chromium } from 'playwright';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve, join } from 'node:path';
+import { mkdirSync, existsSync } from 'node:fs';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const PLUGIN_ROOT = resolve(__dirname, '..', '..');
+const HTML_PATH = join(PLUGIN_ROOT, 'playground', 'v2-mockup.local.html');
+const OUT_DIR = join(PLUGIN_ROOT, 'playground', 'screenshots', 'v2-mockup');
+const HTML_URL = 'file://' + HTML_PATH;
+
+const VIEWPORT = { width: 1440, height: 1200 };
+const STATES = ['overview', 'artifact', 'empty', 'import'];
+const THEMES = ['dark', 'light'];
+
+if (!existsSync(OUT_DIR)) mkdirSync(OUT_DIR, { recursive: true });
+
+const browser = await chromium.launch();
+const ctx = await browser.newContext({ viewport: VIEWPORT, deviceScaleFactor: 2 });
+const page = await ctx.newPage();
+
+await page.goto(HTML_URL, { waitUntil: 'load' });
+
+for (const theme of THEMES) {
+  await page.evaluate((t) => {
+    document.documentElement.setAttribute('data-theme', t);
+    const btns = document.querySelectorAll('[data-action="set-theme"]');
+    btns.forEach((b) => b.setAttribute('aria-pressed', b.getAttribute('data-target') === t ? 'true' : 'false'));
+  }, theme);
+  await page.waitForTimeout(200);
+
+  for (const state of STATES) {
+    await page.evaluate((s) => {
+      const btn = document.querySelector(`[data-action="set-state"][data-target="${s}"]`);
+      if (btn) btn.click();
+    }, state);
+    await page.waitForTimeout(300);
+    const outPath = join(OUT_DIR, `${state}-${theme}.png`);
+    await page.screenshot({ path: outPath, fullPage: true });
+    console.log(`  → ${state}-${theme}.png`);
+  }
+}
+
+await browser.close();
+console.log('\nDone. 8 screenshots → ' + OUT_DIR);
diff --git a/plugins/ms-ai-architect/tests/test-playground-actions.sh b/plugins/ms-ai-architect/tests/test-playground-actions.sh
new file mode 100755
index 0000000..4ddc829
--- /dev/null
+++ b/plugins/ms-ai-architect/tests/test-playground-actions.sh
@@ -0,0 +1,248 @@
+#!/bin/bash
+# test-playground-actions.sh — Playground v3 ACTIONS handler-state-effekter
+#
+# Verifiserer at de 6 pure-state-ACTIONS-handlerne (project-select-artifact,
+# project-show-overview, import-open, import-close, artifact-reimport,
+# artifact-delete) muterer state korrekt.
+#
+# Handlerne import-detect og import-save krever document/DOM og dekkes ikke
+# her — de testes implisitt via browser-walkthrough før release og via
+# manuell QA per playground/MANUAL-CHECKLIST.md.
+#
+# Bash 3.2-kompatibel. Bruker node til JS-eval. Ingen npm-deps.
+
+set -euo pipefail
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+HTML_FILE="$PLUGIN_ROOT/playground/ms-ai-architect-playground.html"
+
+# shellcheck disable=SC1091
+source "$PLUGIN_ROOT/tests/lib/e2e-helpers.sh"
+
+init_suite "Playground v3 — ACTIONS handler state-effekter"
+
+if [ ! -f "$HTML_FILE" ]; then
+  fail "HTML-fila finnes ikke: $HTML_FILE"
+  print_summary; exit 1
+fi
+pass "HTML-fil finnes: $(basename "$HTML_FILE")"
+
+NODE_OUT=$(node -e '
+const fs = require("fs");
+const htmlPath = process.argv[1];
+const htmlSrc = fs.readFileSync(htmlPath, "utf8");
+
+// Ekstraher ACTIONS-blokken fra "// PROJECT-VIEW V2 ACTIONS" (sesjon 3-kommentaren)
+// til starten av smart-detect-blokken. Tar med projectViewUiState + 6 handlere.
+const startMarker = "// PROJECT-VIEW V2 ACTIONS (Sesjon 3)";
+const endMarker = "// Smart-detect på textarea-input i import-modal.";
+const startIdx = htmlSrc.indexOf(startMarker);
+const endIdx = htmlSrc.indexOf(endMarker);
+if (startIdx < 0 || endIdx < 0) {
+  console.error("MARKERS_MISSING start=" + startIdx + " end=" + endIdx);
+  process.exit(2);
+}
+const block = htmlSrc.substring(startIdx, endIdx);
+
+// Stubs som gir handlerne et minimums-miljø uten document/window.
+const stubs = `
+  let __store_state = null;
+  const store = {
+    get state() { return __store_state; },
+    save: function () {}
+  };
+  function setStoreState(s) { __store_state = s; }
+  function findProject(id) {
+    const list = (store.state && store.state.projects) || [];
+    for (let i = 0; i < list.length; i++) if (list[i].id === id) return list[i];
+    return null;
+  }
+  let __renderCount = 0;
+  function scheduleRender() { __renderCount++; }
+  let __confirmAnswer = true;
+  function confirm() { return __confirmAnswer; }
+  function setConfirmAnswer(b) { __confirmAnswer = b; }
+  function renderCount() { return __renderCount; }
+  function resetRenderCount() { __renderCount = 0; }
+  const ACTIONS = {};
+`;
+const wrapped = stubs + block + "\nreturn { ACTIONS, setStoreState, setConfirmAnswer, renderCount, resetRenderCount, projectViewUiState };";
+let api;
+try {
+  api = (new Function(wrapped))();
+} catch (e) {
+  console.error("EVAL_FAILED: " + e.message);
+  process.exit(3);
+}
+
+function emit(ok, desc) { console.log((ok ? "PASS" : "FAIL") + "\t" + desc); }
+
+function freshState(opts) {
+  const o = opts || {};
+  return {
+    schemaVersion: 1,
+    dataVersion: 3,
+    activeProjectId: "p1",
+    projects: [{
+      id: "p1",
+      name: "Demo",
+      artifacts: {
+        classify: { commandId: "classify", raw_markdown: "RAW_CLASSIFY", parsed: { risk_level: "minimal" }, verdict: "go", keyStats: [], importedAt: "x", updatedAt: "x" },
+        ros: { commandId: "ros", raw_markdown: "RAW_ROS", parsed: { threats: [] }, verdict: "approved", keyStats: [], importedAt: "x", updatedAt: "x" }
+      },
+      reports: {
+        classify: { raw_markdown: "RAW_CLASSIFY", parsed: { risk_level: "minimal" } },
+        ros: { raw_markdown: "RAW_ROS", parsed: { threats: [] } }
+      }
+    }],
+    ui: o.ui || {}
+  };
+}
+
+// ---- API ----
+emit(typeof api.ACTIONS === "object" && api.ACTIONS !== null, "ACTIONS-objekt eksponert");
+emit(typeof api.ACTIONS["project-select-artifact"] === "function", "project-select-artifact handler finnes");
+emit(typeof api.ACTIONS["project-show-overview"] === "function",   "project-show-overview handler finnes");
+emit(typeof api.ACTIONS["import-open"] === "function",             "import-open handler finnes");
+emit(typeof api.ACTIONS["import-close"] === "function",            "import-close handler finnes");
+emit(typeof api.ACTIONS["artifact-reimport"] === "function",       "artifact-reimport handler finnes");
+emit(typeof api.ACTIONS["artifact-delete"] === "function",         "artifact-delete handler finnes");
+
+// ---- project-select-artifact ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["project-select-artifact"]({}, { dataset: { artifactId: "classify" } });
+  const ok = state.ui.projectView && state.ui.projectView.selectedArtifactId === "classify"
+    && api.renderCount() === 1;
+  emit(ok, "project-select-artifact setter selectedArtifactId og trigger scheduleRender (got=" + (state.ui.projectView && state.ui.projectView.selectedArtifactId) + ")");
+})();
+
+// ---- project-select-artifact uten artifactId — no-op ----
+(function () {
+  const state = freshState({ ui: { projectView: { selectedArtifactId: "ros", searchQuery: "" }, importModal: { open: false, prefillCommandId: "", prefillMarkdown: "" } } });
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["project-select-artifact"]({}, { dataset: {} });
+  const ok = state.ui.projectView.selectedArtifactId === "ros" && api.renderCount() === 0;
+  emit(ok, "project-select-artifact uten dataset.artifactId → no-op (selectedArtifactId beholdt, ingen render)");
+})();
+
+// ---- project-show-overview ----
+(function () {
+  const state = freshState({ ui: { projectView: { selectedArtifactId: "classify", searchQuery: "" }, importModal: { open: false, prefillCommandId: "", prefillMarkdown: "" } } });
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["project-show-overview"]({}, {});
+  const ok = state.ui.projectView.selectedArtifactId === null && api.renderCount() === 1;
+  emit(ok, "project-show-overview tømmer selectedArtifactId");
+})();
+
+// ---- import-open med prefill-command (eksisterende artifact gir prefillMarkdown) ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["import-open"]({}, { dataset: { prefillCommand: "ros" } });
+  const m = state.ui.importModal;
+  const ok = m && m.open === true && m.prefillCommandId === "ros"
+    && m.prefillMarkdown === "RAW_ROS" && api.renderCount() === 1;
+  emit(ok, "import-open med prefillCommand=\"ros\" åpner modal + prefyller raw_markdown");
+})();
+
+// ---- import-open uten prefill-command ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["import-open"]({}, { dataset: {} });
+  const m = state.ui.importModal;
+  const ok = m && m.open === true && m.prefillCommandId === "" && m.prefillMarkdown === "";
+  emit(ok, "import-open uten prefill → modal åpnet, ingen prefyll");
+})();
+
+// ---- import-close ----
+(function () {
+  const state = freshState({ ui: { projectView: { selectedArtifactId: null, searchQuery: "" }, importModal: { open: true, prefillCommandId: "ros", prefillMarkdown: "RAW_ROS" } } });
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["import-close"]({}, {});
+  const m = state.ui.importModal;
+  const ok = m.open === false && m.prefillCommandId === "" && m.prefillMarkdown === "" && api.renderCount() === 1;
+  emit(ok, "import-close tilbakestiller modal-state");
+})();
+
+// ---- artifact-reimport prefyller modal med eksisterende markdown ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.resetRenderCount();
+  api.ACTIONS["artifact-reimport"]({}, { dataset: { command: "classify" } });
+  const m = state.ui.importModal;
+  const ok = m.open === true && m.prefillCommandId === "classify" && m.prefillMarkdown === "RAW_CLASSIFY";
+  emit(ok, "artifact-reimport åpner modal med prefill fra eksisterende artifact");
+})();
+
+// ---- artifact-delete med confirm=false → no-op ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.setConfirmAnswer(false);
+  api.resetRenderCount();
+  api.ACTIONS["artifact-delete"]({}, { dataset: { command: "classify" } });
+  const ok = state.projects[0].artifacts.classify !== undefined && api.renderCount() === 0;
+  emit(ok, "artifact-delete med confirm=false → artifact bevart, ingen render");
+})();
+
+// ---- artifact-delete med confirm=true → sletter + clearer selectedArtifactId ----
+(function () {
+  const state = freshState({ ui: { projectView: { selectedArtifactId: "classify", searchQuery: "" }, importModal: { open: false, prefillCommandId: "", prefillMarkdown: "" } } });
+  api.setStoreState(state);
+  api.setConfirmAnswer(true);
+  api.resetRenderCount();
+  api.ACTIONS["artifact-delete"]({}, { dataset: { command: "classify" } });
+  const p = state.projects[0];
+  const ok = p.artifacts.classify === undefined && p.reports.classify === undefined
+    && state.ui.projectView.selectedArtifactId === null && api.renderCount() === 1;
+  emit(ok, "artifact-delete med confirm=true sletter artifact + reports + clearer selectedArtifactId");
+})();
+
+// ---- artifact-delete bevarer andre artifacts ----
+(function () {
+  const state = freshState();
+  api.setStoreState(state);
+  api.setConfirmAnswer(true);
+  api.ACTIONS["artifact-delete"]({}, { dataset: { command: "ros" } });
+  const p = state.projects[0];
+  const ok = p.artifacts.classify !== undefined && p.artifacts.ros === undefined;
+  emit(ok, "artifact-delete sletter bare den ene — andre artifacts bevart");
+})();
+
+// ---- projectViewUiState initialiserer state-grener idempotent ----
+(function () {
+  const state = { projects: [], ui: {} };
+  api.setStoreState(state);
+  const ui1 = api.projectViewUiState();
+  const ui2 = api.projectViewUiState();
+  const ok = ui1 === ui2
+    && ui1.projectView && ui1.projectView.selectedArtifactId === null && ui1.projectView.searchQuery === ""
+    && ui1.importModal && ui1.importModal.open === false;
+  emit(ok, "projectViewUiState initialiserer projectView + importModal idempotent");
+})();
+' "$HTML_FILE" 2>&1) || NODE_RC=$?
+
+if [ "${NODE_RC:-0}" -ne 0 ]; then
+  fail "node-eval feilet (rc=${NODE_RC:-0}): $NODE_OUT"
+  print_summary; exit 1
+fi
+
+while IFS=$'\t' read -r status desc; do
+  case "$status" in
+    PASS) pass "$desc" ;;
+    FAIL) fail "$desc" ;;
+    WARN) warn "$desc" ;;
+  esac
+done <<< "$NODE_OUT"
+
+print_summary
diff --git a/plugins/ms-ai-architect/tests/test-playground-fingerprints.sh b/plugins/ms-ai-architect/tests/test-playground-fingerprints.sh
new file mode 100755
index 0000000..6c1f284
--- /dev/null
+++ b/plugins/ms-ai-architect/tests/test-playground-fingerprints.sh
@@ -0,0 +1,218 @@
+#!/bin/bash
+# test-playground-fingerprints.sh — Playground v3 inferCommandIdFromMarkdown
+#
+# Verifiserer:
+#   1. PROJECT_VIEW_V2_BEGIN/END-markørene finnes
+#   2. inferCommandIdFromMarkdown matcher hver av 17 test-fixtures mot
+#      egen commandId med confidence >= 0.6 (true-positive matrise)
+#   3. False-positive immunity:
+#        - tom streng → null
+#        - 100 tegn lorem ipsum → null
+#        - kun "# Hello"-header → null
+#        - mixed content med kun classify-header → matcher classify
+#   4. Sanity-asserts på COMMAND_FINGERPRINTS-shape og fingerprintScore-API
+#
+# Bash 3.2-kompatibel. Bruker node til JS-eval; ingen npm-deps.
+
+set -euo pipefail
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+HTML_FILE="$PLUGIN_ROOT/playground/ms-ai-architect-playground.html"
+FIXTURE_DIR="$PLUGIN_ROOT/playground/test-fixtures"
+
+# shellcheck disable=SC1091
+source "$PLUGIN_ROOT/tests/lib/e2e-helpers.sh"
+
+init_suite "Playground v3 — inferCommandIdFromMarkdown fingerprints"
+
+# ---- 1. Filer eksisterer ----
+if [ ! -f "$HTML_FILE" ]; then
+  fail "HTML-fila finnes ikke: $HTML_FILE"
+  print_summary; exit 1
+fi
+pass "HTML-fil finnes: $(basename "$HTML_FILE")"
+
+if [ ! -d "$FIXTURE_DIR" ]; then
+  fail "Fixture-mappe mangler: $FIXTURE_DIR"
+  print_summary; exit 1
+fi
+pass "Fixture-mappe finnes"
+
+# ---- 2. PROJECT_VIEW_V2-markører eksisterer ----
+if grep -q "PROJECT_VIEW_V2_BEGIN" "$HTML_FILE" && grep -q "PROJECT_VIEW_V2_END" "$HTML_FILE"; then
+  pass "PROJECT_VIEW_V2_BEGIN/END markører finnes"
+else
+  fail "Mangler PROJECT_VIEW_V2-markører i HTML"
+  print_summary; exit 1
+fi
+
+# ---- 3. Kjør hele test-matrisen i én node-prosess (effektivt) ----
+# Node-skriptet:
+#   - ekstraherer PROJECT_VIEW_V2-blokken
+#   - stubber dependencies
+#   - leser alle 17 fixture-filer
+#   - kjører true-positive + anti-match + sanity-tester
+#   - skriver én linje per assert: "PASS|FAIL <description>"
+
+NODE_OUT=$(node -e '
+const fs = require("fs");
+const path = require("path");
+const htmlPath = process.argv[1];
+const fixtureDir = process.argv[2];
+
+const html = fs.readFileSync(htmlPath, "utf8");
+const beginMarker = "// === PROJECT_VIEW_V2_BEGIN ===";
+const endMarker = "// === PROJECT_VIEW_V2_END ===";
+const beginIdx = html.indexOf(beginMarker);
+const endIdx = html.indexOf(endMarker);
+if (beginIdx < 0 || endIdx < 0) {
+  console.error("MARKER_MISSING");
+  process.exit(2);
+}
+const block = html.substring(beginIdx, endIdx + endMarker.length);
+
+// 17 produces_report-renderers per PROJECT_VIEW_CONFIG.renderers.
+const RENDERER_IDS = ["renderAiActPyramid","renderRequirements","renderTransparency","renderFria","renderConformity","renderDpia","renderSecurity","renderRos","renderReview","renderCost","renderLicense","renderMigrate","renderAdr","renderSummary","renderPoc","renderUtredning","renderCompare"];
+const rendererStubs = RENDERER_IDS.map(function (n) { return n + ": function () {}"; }).join(", ");
+
+// CATALOG.commands: 17 produces_report=true entries med id, label, category, renderer.
+const COMMANDS = [
+  { id: "classify",     category: "regulatory",    label: "EU AI Act — Klassifisering",      renderer: "renderAiActPyramid", produces_report: true, report_archetype: "aiact" },
+  { id: "requirements", category: "regulatory",    label: "EU AI Act — Krav per risiko",     renderer: "renderRequirements", produces_report: true, report_archetype: "requirements-list" },
+  { id: "transparency", category: "regulatory",    label: "Transparensnotis (Art. 13/50)",   renderer: "renderTransparency", produces_report: true, report_archetype: "text-document" },
+  { id: "frimpact",     category: "regulatory",    label: "FRIA (Art. 27)",                   renderer: "renderFria",         produces_report: true, report_archetype: "fria" },
+  { id: "conformity",   category: "regulatory",    label: "Samsvarsvurdering (Art. 43)",      renderer: "renderConformity",   produces_report: true, report_archetype: "conformity-checklist" },
+  { id: "dpia",         category: "regulatory",    label: "DPIA / PVK",                       renderer: "renderDpia",         produces_report: true, report_archetype: "matrix-risk" },
+  { id: "security",     category: "security",      label: "Sikkerhetsvurdering (6×5)",        renderer: "renderSecurity",     produces_report: true, report_archetype: "matrix-risk-6x5" },
+  { id: "ros",          category: "security",      label: "ROS-analyse",                      renderer: "renderRos",          produces_report: true, report_archetype: "matrix-risk" },
+  { id: "review",       category: "security",      label: "Arkitekturgjennomgang",            renderer: "renderReview",       produces_report: true, report_archetype: "findings" },
+  { id: "cost",         category: "economy",       label: "Kostnadsestimat",                  renderer: "renderCost",         produces_report: true, report_archetype: "cost-distribution" },
+  { id: "license",      category: "economy",       label: "Lisenskartlegging",                renderer: "renderLicense",      produces_report: true, report_archetype: "scenario-comparison" },
+  { id: "migrate",      category: "economy",       label: "Migrasjonsplan",                   renderer: "renderMigrate",      produces_report: true, report_archetype: "phase-plan" },
+  { id: "adr",          category: "documentation", label: "ADR",                              renderer: "renderAdr",          produces_report: true, report_archetype: "adr" },
+  { id: "summary",      category: "documentation", label: "Beslutningsnotat",                 renderer: "renderSummary",      produces_report: true, report_archetype: "verdict" },
+  { id: "poc",          category: "documentation", label: "POC-plan",                         renderer: "renderPoc",          produces_report: true, report_archetype: "phase-plan" },
+  { id: "utredning",    category: "documentation", label: "Utredning",                        renderer: "renderUtredning",    produces_report: true, report_archetype: "utredning" },
+  { id: "compare",      category: "documentation", label: "Plattformsammenligning",           renderer: "renderCompare",      produces_report: true, report_archetype: "scenario-comparison" }
+];
+
+const stubs = `
+  const window = {};
+  function escapeHtml(s) { return String(s == null ? "" : s); }
+  function escapeAttr(s) { return escapeHtml(s); }
+  function renderPageShell(opts, body) { return "<header>" + (opts && opts.title || "") + "</header>" + (body || ""); }
+  function renderVerdictPill(v) { return "<span class=\\"verdict-pill\\" data-verdict=\\"" + v + "\\">" + v + "</span>"; }
+  function renderKeyStatsGrid(s) { return "<div class=\\"key-stats\\">" + (s && s.length || 0) + "</div>"; }
+  function inferVerdict() { return "n-a"; }
+  function inferKeyStats() { return []; }
+  const PARSERS = {};
+  const RENDERERS = { ` + rendererStubs + ` };
+  const CATALOG = { commands: ` + JSON.stringify(COMMANDS) + ` };
+  const ACTIONS = {};
+  const store = { state: { ui: {}, projects: [], activeProjectId: null }, save: function () {} };
+  function findProject() { return null; }
+  function scheduleRender() {}
+`;
+
+const wrapped = stubs + block + "\nreturn { inferCommandIdFromMarkdown, fingerprintScore, COMMAND_FINGERPRINTS };";
+let api;
+try {
+  api = (new Function(wrapped))();
+} catch (e) {
+  console.error("EVAL_FAILED: " + e.message);
+  process.exit(3);
+}
+
+function emit(ok, desc) {
+  console.log((ok ? "PASS" : "FAIL") + "\t" + desc);
+}
+
+// ---- Sanity-asserts (5) ----
+emit(typeof api.inferCommandIdFromMarkdown === "function", "inferCommandIdFromMarkdown er funksjon");
+emit(typeof api.fingerprintScore === "function", "fingerprintScore er funksjon");
+emit(typeof api.COMMAND_FINGERPRINTS === "object" && api.COMMAND_FINGERPRINTS !== null, "COMMAND_FINGERPRINTS er objekt");
+const cfKeys = Object.keys(api.COMMAND_FINGERPRINTS);
+emit(cfKeys.length === 17, "COMMAND_FINGERPRINTS har 17 entries (got " + cfKeys.length + ")");
+let allShapeOk = true;
+for (const k of cfKeys) {
+  const v = api.COMMAND_FINGERPRINTS[k];
+  if (!v || !Array.isArray(v.headers) || !Array.isArray(v.keywords)) {
+    allShapeOk = false; break;
+  }
+}
+emit(allShapeOk, "Hver fingerprint har headers[] og keywords[]");
+
+// ---- True-positive matrise (17 fixtures) ----
+//
+// Kjente fingerprint/fixture-gap (oppdaget av denne testen, fix i sesjon 5):
+//   - requirements.md har header "# EU AI Act — Krav for høyrisiko" som ikke
+//     matcher /^\s*#\s*(AI\s*Act-?krav|Krav per|Requirements)/i. Annex IV-
+//     omtale i tabellen gjør at conformity vinner med 0.76.
+//   - license.md har header "# Lisens-kapabilitetsmatrise" som ikke matcher
+//     /^\s*#\s*(Lisens(kart)?legging|License\s*Mapping)/i.
+// v1.15.0 (sesjon 5): begge gap-er lukket — requirements.headers og
+// license.headers utvidet i COMMAND_FINGERPRINTS. KNOWN_GAP_FIXTURES tømt.
+const KNOWN_GAP_FIXTURES = {};
+
+const expectedIds = ["classify","requirements","transparency","frimpact","conformity","dpia","security","ros","review","cost","license","migrate","adr","summary","poc","utredning","compare"];
+for (const cid of expectedIds) {
+  const fxPath = path.join(fixtureDir, cid + ".md");
+  let text = "";
+  try { text = fs.readFileSync(fxPath, "utf8"); } catch (e) {
+    emit(false, "fixture " + cid + ".md kunne ikke leses: " + e.message);
+    continue;
+  }
+  const r = api.inferCommandIdFromMarkdown(text, {});
+  const matchedCid = r && r.commandId;
+  const conf = r && r.confidence;
+  const ok = r && r.commandId === cid && r.confidence >= 0.6;
+  if (ok) {
+    emit(true, "fixture " + cid + ".md → " + matchedCid + " conf=" + conf.toFixed(2));
+  } else if (KNOWN_GAP_FIXTURES[cid]) {
+    console.log("WARN\tfixture " + cid + ".md → " + (matchedCid || "null") +
+                " (KNOWN_GAP — fingerprint dekker ikke fixture-header; fix i sesjon 5)");
+  } else {
+    emit(false, "fixture " + cid + ".md → " + (matchedCid || "null") +
+                (conf != null ? " conf=" + conf.toFixed(2) : ""));
+  }
+}
+
+// ---- Anti-match (4) ----
+emit(api.inferCommandIdFromMarkdown("", {}) === null,
+     "tom streng → null");
+emit(api.inferCommandIdFromMarkdown(null, {}) === null,
+     "null input → null");
+const lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim";
+emit(api.inferCommandIdFromMarkdown(lorem, {}) === null,
+     "100 tegn lorem ipsum → null (got " + JSON.stringify(api.inferCommandIdFromMarkdown(lorem, {})) + ")");
+emit(api.inferCommandIdFromMarkdown("# Hello\n\nIngen relevant tekst.", {}) === null,
+     "kun \"# Hello\"-header → null");
+
+// ---- Mixed content: dominant header vinner ----
+const mixed = "# EU AI Act — Klassifisering\n\nDette inneholder også owasp og prompt injection-referanser men headeren er klassifisering.";
+const mixedR = api.inferCommandIdFromMarkdown(mixed, {});
+emit(mixedR !== null && mixedR.commandId === "classify",
+     "mixed content med classify-header → " + (mixedR && mixedR.commandId));
+
+// ---- fingerprintScore-API direkte ----
+emit(api.fingerprintScore("any text", null) === 0,
+     "fingerprintScore(null spec) === 0");
+emit(api.fingerprintScore("", api.COMMAND_FINGERPRINTS.classify) === 0,
+     "fingerprintScore(tom tekst) === 0");
+' "$HTML_FILE" "$FIXTURE_DIR" 2>&1) || NODE_RC=$?
+
+if [ "${NODE_RC:-0}" -ne 0 ]; then
+  fail "node-eval feilet (rc=${NODE_RC:-0}): $NODE_OUT"
+  print_summary; exit 1
+fi
+
+# Parse PASS/FAIL/WARN-linjer fra node-output
+while IFS=$'\t' read -r status desc; do
+  case "$status" in
+    PASS) pass "$desc" ;;
+    FAIL) fail "$desc" ;;
+    WARN) warn "$desc" ;;
+  esac
+done <<< "$NODE_OUT"
+
+print_summary
diff --git a/plugins/ms-ai-architect/tests/test-playground-migrations.sh b/plugins/ms-ai-architect/tests/test-playground-migrations.sh
index 2493a22..a9642ed 100755
--- a/plugins/ms-ai-architect/tests/test-playground-migrations.sh
+++ b/plugins/ms-ai-architect/tests/test-playground-migrations.sh
@@ -122,8 +122,8 @@ api.migrateDataVersion(stateB, api.defaultArchetypeFor);
 const a = JSON.stringify(stateA);
 const b = JSON.stringify(stateB);
 
-if (stateA.dataVersion !== 2) {
-  console.error("DATA_VERSION_NOT_BUMPED");
+if (stateA.dataVersion !== 3) {
+  console.error("DATA_VERSION_NOT_BUMPED got=" + stateA.dataVersion);
   process.exit(4);
 }
 
@@ -141,8 +141,22 @@ for (const p of (stateA.projects || [])) {
 if (verdictsAdded === 0) { console.error("NO_VERDICTS_ADDED"); process.exit(5); }
 if (statsAdded === 0)    { console.error("NO_KEYSTATS_ADDED"); process.exit(6); }
 
+// Sesjon 3: v2→v3-migrasjon må produsere project.artifacts med v3-shape.
+let artifactsBuilt = 0;
+for (const p of (stateA.projects || [])) {
+  if (!p.artifacts) continue;
+  for (const id of Object.keys(p.artifacts)) {
+    const a = p.artifacts[id];
+    if (a && a.commandId === id && typeof a.raw_markdown === "string"
+        && a.importedAt && a.updatedAt) {
+      artifactsBuilt++;
+    }
+  }
+}
+if (artifactsBuilt === 0) { console.error("NO_ARTIFACTS_BUILT"); process.exit(8); }
+
 if (a === b) {
-  console.log("IDEMPOTENT verdicts=" + verdictsAdded + " stats=" + statsAdded);
+  console.log("IDEMPOTENT verdicts=" + verdictsAdded + " stats=" + statsAdded + " artifacts=" + artifactsBuilt);
 } else {
   console.error("NOT_IDEMPOTENT");
   process.exit(7);
@@ -155,7 +169,7 @@ else
   fail "Idempotency-test feilet: $IDEMPOTENCY_RESULT"
 fi
 
-# ---- 6. dataVersion bumpes til 2 ved første kjøring ----
+# ---- 6. dataVersion bumpes til 3 ved første kjøring (v?→v3 kjede) ----
 DV_RESULT=$(node -e '
 const fs = require("fs");
 const html = fs.readFileSync(process.argv[1], "utf8");
@@ -176,10 +190,256 @@ api.migrateDataVersion(state, api.defaultArchetypeFor);
 console.log(state.dataVersion);
 ' "$HTML_FILE" 2>&1) || true
 
-if [ "$DV_RESULT" = "2" ]; then
-  pass "dataVersion bumpes til 2"
+if [ "$DV_RESULT" = "3" ]; then
+  pass "dataVersion bumpes til 3 (kjede v?→v3)"
 else
-  fail "dataVersion ble ikke bumpet til 2 (got '$DV_RESULT')"
+  fail "dataVersion ble ikke bumpet til 3 (got '$DV_RESULT')"
 fi
 
+# ---- 7. v2→v3 produserer artifacts uten å miste reports ----
+V3_SHAPE=$(node -e '
+const fs = require("fs");
+const html = fs.readFileSync(process.argv[1], "utf8");
+const begin = html.indexOf("// === V2_FOUNDATION_BEGIN ===");
+const end   = html.indexOf("// === V2_FOUNDATION_END ===");
+const block = html.substring(begin, end + 32);
+const stubs = `
+  const window = {};
+  function escapeHtml(s) { return String(s == null ? "" : s); }
+  function escapeAttr(s) { return escapeHtml(s); }
+  const CATALOG = { commands: [
+    { id: "classify", report_archetype: "aiact" }
+  ]};
+`;
+const api = (new Function(stubs + block + "\nreturn { migrateDataVersion, defaultArchetypeFor };"))();
+// Bygg en v2-state med ett prosjekt og én report som har parsed-data
+const state = {
+  schemaVersion: 1,
+  dataVersion: 2,
+  projects: [{
+    id: "p1",
+    name: "Test",
+    createdAt: "2026-05-15T00:00:00.000Z",
+    reports: {
+      classify: { raw_markdown: "# klassifisering", parsed: { risk_level: "minimal", verdict: "go", keyStats: [] } }
+    }
+  }]
+};
+api.migrateDataVersion(state, api.defaultArchetypeFor);
+const p = state.projects[0];
+const hasReports = !!(p.reports && p.reports.classify);
+const hasArtifacts = !!(p.artifacts && p.artifacts.classify);
+const a = p.artifacts && p.artifacts.classify;
+const shapeOk = a && a.commandId === "classify" && a.raw_markdown === "# klassifisering"
+  && a.parsed && a.parsed.risk_level === "minimal" && a.verdict === "go"
+  && Array.isArray(a.keyStats) && typeof a.importedAt === "string"
+  && typeof a.updatedAt === "string";
+console.log(JSON.stringify({ dataVersion: state.dataVersion, hasReports, hasArtifacts, shapeOk }));
+' "$HTML_FILE" 2>&1) || true
+
+if echo "$V3_SHAPE" | grep -q '"dataVersion":3'; then
+  pass "v2→v3 setter dataVersion=3"
+else
+  fail "v2→v3 setter ikke dataVersion=3 ($V3_SHAPE)"
+fi
+if echo "$V3_SHAPE" | grep -q '"hasReports":true'; then
+  pass "v2→v3 bevarer project.reports (bakover-kompat v1.15.0)"
+else
+  fail "v2→v3 mistet project.reports ($V3_SHAPE)"
+fi
+if echo "$V3_SHAPE" | grep -q '"hasArtifacts":true'; then
+  pass "v2→v3 bygger project.artifacts"
+else
+  fail "v2→v3 bygde ikke project.artifacts ($V3_SHAPE)"
+fi
+if echo "$V3_SHAPE" | grep -q '"shapeOk":true'; then
+  pass "v2→v3 artifact-shape ({commandId, raw_markdown, parsed, verdict, keyStats, importedAt, updatedAt})"
+else
+  fail "v2→v3 artifact-shape mismatch ($V3_SHAPE)"
+fi
+
+# ---- 8. v2→v3 kant-case-tester (sesjon 4) ----
+# Tomt prosjekt, manglende reports, blandet state, idempotens-mutasjon.
+EDGE_RESULT=$(node -e '
+const fs = require("fs");
+const html = fs.readFileSync(process.argv[1], "utf8");
+const begin = html.indexOf("// === V2_FOUNDATION_BEGIN ===");
+const end   = html.indexOf("// === V2_FOUNDATION_END ===");
+const block = html.substring(begin, end + 32);
+const stubs = `
+  const window = {};
+  function escapeHtml(s) { return String(s == null ? "" : s); }
+  function escapeAttr(s) { return escapeHtml(s); }
+  const CATALOG = { commands: [
+    { id: "classify", report_archetype: "aiact" },
+    { id: "ros",      report_archetype: "matrix-risk" },
+    { id: "cost",     report_archetype: "cost-distribution" },
+    { id: "summary",  report_archetype: "verdict" }
+  ]};
+`;
+const api = (new Function(stubs + block + "\nreturn { migrateDataVersion, defaultArchetypeFor };"))();
+
+function emit(key, ok, info) {
+  console.log("EDGE\t" + key + "\t" + (ok ? "PASS" : "FAIL") + "\t" + (info || ""));
+}
+
+// Case A: tomt prosjekt (reports={}).
+(function () {
+  const state = {
+    schemaVersion: 1,
+    dataVersion: 2,
+    projects: [{ id: "pA", name: "Empty", createdAt: "2026-05-15T00:00:00.000Z", reports: {} }]
+  };
+  api.migrateDataVersion(state, api.defaultArchetypeFor);
+  const p = state.projects[0];
+  const ok = p.artifacts !== undefined && typeof p.artifacts === "object"
+    && Object.keys(p.artifacts).length === 0
+    && state.dataVersion === 3;
+  emit("empty-project", ok, "artifacts=" + JSON.stringify(p.artifacts) + " dv=" + state.dataVersion);
+})();
+
+// Case B: prosjekt uten reports-felt i det hele tatt.
+(function () {
+  const state = {
+    schemaVersion: 1,
+    dataVersion: 2,
+    projects: [{ id: "pB", name: "NoReports", createdAt: "2026-05-15T00:00:00.000Z" }]
+  };
+  let threw = false;
+  try {
+    api.migrateDataVersion(state, api.defaultArchetypeFor);
+  } catch (e) { threw = true; }
+  const p = state.projects[0];
+  const ok = !threw && p.artifacts !== undefined && typeof p.artifacts === "object"
+    && Object.keys(p.artifacts).length === 0;
+  emit("no-reports-field", ok, "threw=" + threw + " artifacts=" + JSON.stringify(p.artifacts));
+})();
+
+// Case C: blandet state — artifacts har 2 entries fra før, reports har 5.
+// Migrering skal legge til de 3 manglende uten å overskrive eksisterende.
+(function () {
+  const preNow = "2026-04-01T00:00:00.000Z";
+  const state = {
+    schemaVersion: 1,
+    dataVersion: 2,
+    projects: [{
+      id: "pC",
+      name: "Mixed",
+      createdAt: preNow,
+      artifacts: {
+        classify: {
+          commandId: "classify",
+          raw_markdown: "EXISTING_CLASSIFY",
+          parsed: { risk_level: "minimal" },
+          verdict: "go",
+          keyStats: [],
+          importedAt: preNow,
+          updatedAt: preNow,
+          _preExisting: true
+        },
+        ros: {
+          commandId: "ros",
+          raw_markdown: "EXISTING_ROS",
+          parsed: { threats: [] },
+          verdict: "approved",
+          keyStats: [],
+          importedAt: preNow,
+          updatedAt: preNow,
+          _preExisting: true
+        }
+      },
+      reports: {
+        classify: { raw_markdown: "NEW_CLASSIFY", parsed: { risk_level: "high" } },
+        ros:      { raw_markdown: "NEW_ROS",      parsed: { threats: [{ id: "T1" }] } },
+        cost:     { raw_markdown: "NEW_COST",     parsed: { p50: 1000 } },
+        summary:  { raw_markdown: "NEW_SUMMARY",  parsed: { verdict: "go" } }
+      }
+    }]
+  };
+  api.migrateDataVersion(state, api.defaultArchetypeFor);
+  const p = state.projects[0];
+  const cls = p.artifacts.classify;
+  const ros = p.artifacts.ros;
+  const cost = p.artifacts.cost;
+  const summary = p.artifacts.summary;
+  // Eksisterende artifacts bevart med _preExisting-flag og opprinnelig raw_markdown.
+  const classifyPreserved = cls && cls._preExisting === true && cls.raw_markdown === "EXISTING_CLASSIFY";
+  const rosPreserved = ros && ros._preExisting === true && ros.raw_markdown === "EXISTING_ROS";
+  // Nye artifacts bygget fra reports.
+  const costAdded = cost && cost.commandId === "cost" && cost.raw_markdown === "NEW_COST";
+  const summaryAdded = summary && summary.commandId === "summary" && summary.raw_markdown === "NEW_SUMMARY";
+  const ok = classifyPreserved && rosPreserved && costAdded && summaryAdded;
+  emit("mixed-state-merge", ok,
+       "cls_preserved=" + !!classifyPreserved + " ros_preserved=" + !!rosPreserved +
+       " cost_added=" + !!costAdded + " summary_added=" + !!summaryAdded);
+})();
+
+// Case D: idempotens etter mutasjon — sett _touched=true på en artifact, kjør
+// migrasjon på nytt, sjekk at flagget er bevart (ikke overskrevet).
+(function () {
+  const state = {
+    schemaVersion: 1,
+    dataVersion: 2,
+    projects: [{
+      id: "pD",
+      name: "Idempotent",
+      createdAt: "2026-04-01T00:00:00.000Z",
+      reports: {
+        classify: { raw_markdown: "# klassifisering", parsed: { risk_level: "minimal" } }
+      }
+    }]
+  };
+  // Første migrasjon bygger artifact.
+  api.migrateDataVersion(state, api.defaultArchetypeFor);
+  const p = state.projects[0];
+  p.artifacts.classify._touched = true;
+  p.artifacts.classify.raw_markdown = "MUTATED_AFTER_MIGRATION";
+  // Re-migrer — idempotent skal ikke overskrive.
+  api.migrateDataVersion(state, api.defaultArchetypeFor);
+  const a = state.projects[0].artifacts.classify;
+  const ok = a._touched === true && a.raw_markdown === "MUTATED_AFTER_MIGRATION";
+  emit("idempotent-after-mutation", ok,
+       "_touched=" + a._touched + " raw=" + JSON.stringify(a.raw_markdown));
+})();
+
+// Case E: dataVersion=3 fra før — migrasjon er no-op.
+(function () {
+  const state = {
+    schemaVersion: 1,
+    dataVersion: 3,
+    projects: [{
+      id: "pE",
+      name: "AlreadyV3",
+      createdAt: "2026-04-01T00:00:00.000Z",
+      artifacts: {
+        cost: { commandId: "cost", raw_markdown: "EXISTING", parsed: { p50: 1 },
+                verdict: "go", keyStats: [], importedAt: "x", updatedAt: "x" }
+      }
+    }]
+  };
+  const beforeJson = JSON.stringify(state);
+  api.migrateDataVersion(state, api.defaultArchetypeFor);
+  const afterJson = JSON.stringify(state);
+  emit("already-v3-noop", beforeJson === afterJson, "diff=" + (beforeJson === afterJson ? "none" : "changed"));
+})();
+' "$HTML_FILE" 2>&1) || true
+
+# Parse EDGE-resultater
+while IFS=$'\t' read -r tag key status info; do
+  [ "$tag" = "EDGE" ] || continue
+  case "$key" in
+    empty-project)             desc="v3 kant-case: tomt prosjekt (reports={}) → artifacts={} uten å feile" ;;
+    no-reports-field)          desc="v3 kant-case: prosjekt uten reports-felt → artifacts={} opprettet" ;;
+    mixed-state-merge)         desc="v3 kant-case: blandet state — eksisterende artifacts bevart, nye lagt til" ;;
+    idempotent-after-mutation) desc="v3 kant-case: idempotens etter mutasjon — _touched-flag bevart" ;;
+    already-v3-noop)           desc="v3 kant-case: state allerede v3 → migrasjon er no-op" ;;
+    *)                         desc="v3 kant-case: $key" ;;
+  esac
+  if [ "$status" = "PASS" ]; then
+    pass "$desc"
+  else
+    fail "$desc ($info)"
+  fi
+done <<< "$EDGE_RESULT"
+
 print_summary
diff --git a/plugins/ms-ai-architect/tests/test-playground-projectview.sh b/plugins/ms-ai-architect/tests/test-playground-projectview.sh
new file mode 100755
index 0000000..ce264bf
--- /dev/null
+++ b/plugins/ms-ai-architect/tests/test-playground-projectview.sh
@@ -0,0 +1,323 @@
+#!/bin/bash
+# test-playground-projectview.sh — Playground v3 renderProjectView integration
+#
+# Verifiserer at renderProjectView + sub-renderers produserer korrekt HTML
+# (som strenger — ingen DOM-deps) mot en inline demo-state-snippet.
+#
+# Dekker 4 view-tilstander:
+#   - overview               (selectedArtifactId null)
+#   - artifact (filled)      (selectedArtifactId = 'classify')
+#   - empty (sidebar-treff)  (selectedArtifactId = 'frimpact' — mangler)
+#   - import-modal-open      (top-state, orthogonal)
+#
+# Pluss:
+#   - renderArtifactNav-søk filtrerer
+#   - renderProjectOverview har 4 verdict-tiles, top-risks, next-actions, missing
+#   - renderImportModal har 17 dropdown-options + prefill
+#
+# Bash 3.2-kompatibel. Bruker node til JS-eval. Ingen npm-deps.
+
+set -euo pipefail
+
+PLUGIN_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+HTML_FILE="$PLUGIN_ROOT/playground/ms-ai-architect-playground.html"
+
+# shellcheck disable=SC1091
+source "$PLUGIN_ROOT/tests/lib/e2e-helpers.sh"
+
+init_suite "Playground v3 — renderProjectView integration"
+
+if [ ! -f "$HTML_FILE" ]; then
+  fail "HTML-fila finnes ikke: $HTML_FILE"
+  print_summary; exit 1
+fi
+pass "HTML-fil finnes: $(basename "$HTML_FILE")"
+
+if grep -q "PROJECT_VIEW_V2_BEGIN" "$HTML_FILE" && grep -q "PROJECT_VIEW_V2_END" "$HTML_FILE"; then
+  pass "PROJECT_VIEW_V2_BEGIN/END markører finnes"
+else
+  fail "Mangler PROJECT_VIEW_V2-markører i HTML"
+  print_summary; exit 1
+fi
+
+NODE_OUT=$(node -e '
+const fs = require("fs");
+const htmlPath = process.argv[1];
+
+const htmlSrc = fs.readFileSync(htmlPath, "utf8");
+const beginMarker = "// === PROJECT_VIEW_V2_BEGIN ===";
+const endMarker = "// === PROJECT_VIEW_V2_END ===";
+const beginIdx = htmlSrc.indexOf(beginMarker);
+const endIdx = htmlSrc.indexOf(endMarker);
+if (beginIdx < 0 || endIdx < 0) {
+  console.error("MARKER_MISSING"); process.exit(2);
+}
+const block = htmlSrc.substring(beginIdx, endIdx + endMarker.length);
+
+// 17 produces_report-renderers per PROJECT_VIEW_CONFIG.renderers.
+// Hver stub returnerer en deterministisk HTML-streng vi kan asserte mot.
+const RENDERER_IDS = ["renderAiActPyramid","renderRequirements","renderTransparency","renderFria","renderConformity","renderDpia","renderSecurity","renderRos","renderReview","renderCost","renderLicense","renderMigrate","renderAdr","renderSummary","renderPoc","renderUtredning","renderCompare"];
+const rendererStubs = RENDERER_IDS.map(function (n) {
+  return n + ": function (data, slot) { if (slot) slot.innerHTML = \"<div class=\\\"stub-\" + " + JSON.stringify(n) + " + \"\\\">\" + (data && data.title || \"stub\") + \"</div>\"; }";
+}).join(", ");
+
+const COMMANDS = [
+  { id: "classify",     category: "regulatory",    label: "EU AI Act — Klassifisering",      description: "EU AI Act klass.", renderer: "renderAiActPyramid", produces_report: true, report_archetype: "aiact" },
+  { id: "requirements", category: "regulatory",    label: "EU AI Act — Krav",                description: "Krav per risiko",  renderer: "renderRequirements", produces_report: true, report_archetype: "requirements-list" },
+  { id: "transparency", category: "regulatory",    label: "Transparensnotis (Art. 13/50)",   description: "Art. 13/50",       renderer: "renderTransparency", produces_report: true, report_archetype: "text-document" },
+  { id: "frimpact",     category: "regulatory",    label: "FRIA (Art. 27)",                   description: "FRIA",             renderer: "renderFria",         produces_report: true, report_archetype: "fria" },
+  { id: "conformity",   category: "regulatory",    label: "Samsvarsvurdering (Art. 43)",      description: "Annex IV",         renderer: "renderConformity",   produces_report: true, report_archetype: "conformity-checklist" },
+  { id: "dpia",         category: "regulatory",    label: "DPIA / PVK",                       description: "PVK",              renderer: "renderDpia",         produces_report: true, report_archetype: "matrix-risk" },
+  { id: "security",     category: "security",      label: "Sikkerhetsvurdering (6×5)",        description: "6×5 scoring",      renderer: "renderSecurity",     produces_report: true, report_archetype: "matrix-risk-6x5" },
+  { id: "ros",          category: "security",      label: "ROS-analyse",                      description: "NS 5814",          renderer: "renderRos",          produces_report: true, report_archetype: "matrix-risk" },
+  { id: "review",       category: "security",      label: "Arkitekturgjennomgang",            description: "Digdir/NSM",       renderer: "renderReview",       produces_report: true, report_archetype: "findings" },
+  { id: "cost",         category: "economy",       label: "Kostnadsestimat",                  description: "P10/P50/P90 NOK",  renderer: "renderCost",         produces_report: true, report_archetype: "cost-distribution" },
+  { id: "license",      category: "economy",       label: "Lisenskartlegging",                description: "M365-lisenser",    renderer: "renderLicense",      produces_report: true, report_archetype: "scenario-comparison" },
+  { id: "migrate",      category: "economy",       label: "Migrasjonsplan",                   description: "Fase-plan",        renderer: "renderMigrate",      produces_report: true, report_archetype: "phase-plan" },
+  { id: "adr",          category: "documentation", label: "ADR",                              description: "MADR v3.0",        renderer: "renderAdr",          produces_report: true, report_archetype: "adr" },
+  { id: "summary",      category: "documentation", label: "Beslutningsnotat",                 description: "Sammendrag",       renderer: "renderSummary",      produces_report: true, report_archetype: "verdict" },
+  { id: "poc",          category: "documentation", label: "POC-plan",                         description: "Suksesskriterier", renderer: "renderPoc",          produces_report: true, report_archetype: "phase-plan" },
+  { id: "utredning",    category: "documentation", label: "Utredning",                        description: "Utredningsinstr.", renderer: "renderUtredning",    produces_report: true, report_archetype: "utredning" },
+  { id: "compare",      category: "documentation", label: "Plattformsammenligning",           description: "Plattformer",      renderer: "renderCompare",       produces_report: true, report_archetype: "scenario-comparison" }
+];
+
+// Demo state med 5 fylte artifacts + ui i forskjellige tilstander.
+function buildDemoState(opts) {
+  const o = opts || {};
+  const now = "2026-05-15T10:00:00.000Z";
+  return {
+    dataVersion: 3,
+    schemaVersion: 1,
+    activeProjectId: "p1",
+    projects: [{
+      id: "p1",
+      name: "Acme: Kunde-chatbot",
+      description: "AI-system for objekt-deteksjon i sensordata.",
+      createdAt: "2026-04-01T08:00:00.000Z",
+      artifacts: {
+        classify: {
+          commandId: "classify",
+          raw_markdown: "# EU AI Act — Klassifisering",
+          parsed: { title: "Klassifisering", risk_level: "Høy", role: "Provider og Deployer" },
+          verdict: "warning",
+          keyStats: [{ label: "Risikonivå", value: "Høy" }],
+          importedAt: now, updatedAt: now
+        },
+        ros: {
+          commandId: "ros",
+          raw_markdown: "# ROS-analyse",
+          parsed: { title: "ROS", threats: [
+            { id: "T1", description: "Modell-bias", severity: "Høy" },
+            { id: "T2", description: "Privacy leak", severity: "Kritisk" },
+            { id: "T3", description: "Hallusinerte fakta", severity: "Medium" }
+          ]},
+          verdict: "warning",
+          keyStats: [],
+          importedAt: now, updatedAt: now
+        },
+        security: {
+          commandId: "security",
+          raw_markdown: "# Sikkerhetsvurdering",
+          parsed: { title: "Security", findings: [
+            { id: "S1", finding: "Manglende DLP", severity: "Kritisk" },
+            { id: "S2", finding: "Audit ufullstendig", severity: "Høy" }
+          ]},
+          verdict: "block",
+          keyStats: [],
+          importedAt: now, updatedAt: now
+        },
+        dpia: {
+          commandId: "dpia",
+          raw_markdown: "# DPIA",
+          parsed: { title: "DPIA", threats: [] },
+          verdict: "go-with-conditions",
+          keyStats: [],
+          importedAt: now, updatedAt: now
+        },
+        cost: {
+          commandId: "cost",
+          raw_markdown: "# Kostnadsestimat",
+          parsed: { title: "Kostnad", p10: 78000, p50: 142000, p90: 285000 },
+          verdict: "approved",
+          keyStats: [{ label: "P50/mnd", value: "142 000 NOK" }],
+          importedAt: now, updatedAt: now
+        }
+      },
+      reports: {}
+    }],
+    ui: {
+      projectView: {
+        selectedArtifactId: o.selectedArtifactId === undefined ? null : o.selectedArtifactId,
+        searchQuery: o.searchQuery || ""
+      },
+      importModal: {
+        open: !!o.importOpen,
+        prefillCommandId: o.prefillCommandId || "",
+        prefillMarkdown: o.prefillMarkdown || ""
+      }
+    }
+  };
+}
+
+const stubs = `
+  const window = {};
+  function escapeHtml(s) {
+    return String(s == null ? "" : s)
+      .replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+  }
+  function escapeAttr(s) { return escapeHtml(s); }
+  function renderPageShell(opts, body) {
+    const t = (opts && opts.title) || "";
+    const e = (opts && opts.eyebrow) || "";
+    const v = (opts && opts.verdict) || "";
+    return "<header class=\\"page__header\\" data-eyebrow=\\"" + escapeAttr(e) + "\\" data-verdict=\\"" + escapeAttr(v) + "\\"><h1>" + escapeHtml(t) + "</h1></header>" + (body || "");
+  }
+  function renderVerdictPill(v) {
+    return "<span class=\\"verdict-pill\\" data-verdict=\\"" + escapeAttr(String(v || "").toLowerCase()) + "\\">" + escapeHtml(String(v || "").toUpperCase()) + "</span>";
+  }
+  function renderKeyStatsGrid(s) { return "<div class=\\"key-stats\\">" + (Array.isArray(s) ? s.length : 0) + "</div>"; }
+  function inferVerdict() { return "n-a"; }
+  function inferKeyStats() { return []; }
+  const PARSERS = {};
+  const RENDERERS = { ` + rendererStubs + ` };
+  const CATALOG = { commands: ` + JSON.stringify(COMMANDS) + ` };
+  const ACTIONS = {};
+  let __STORE_STATE = null;
+  const store = {
+    get state() { return __STORE_STATE; },
+    save: function () {}
+  };
+  function setStoreState(s) { __STORE_STATE = s; }
+  function findProject(id) {
+    const list = (store.state && store.state.projects) || [];
+    for (let i = 0; i < list.length; i++) if (list[i].id === id) return list[i];
+    return null;
+  }
+  function scheduleRender() {}
+`;
+
+const wrapped = stubs + block + "\nreturn { renderProjectView, renderProjectHeader, renderArtifactNav, renderArtifactNavItem, renderProjectMain, renderProjectOverview, renderProjectArtifact, renderEmptyArtifactPrompt, renderImportModal, PROJECT_VIEW_CONFIG, setStoreState };";
+let api;
+try {
+  api = (new Function(wrapped))();
+} catch (e) {
+  console.error("EVAL_FAILED: " + e.message);
+  process.exit(3);
+}
+
+function emit(ok, desc) { console.log((ok ? "PASS" : "FAIL") + "\t" + desc); }
+
+// ---- API-eksponering ----
+emit(typeof api.renderProjectView === "function", "renderProjectView er funksjon");
+emit(typeof api.renderProjectOverview === "function", "renderProjectOverview er funksjon");
+emit(typeof api.renderImportModal === "function", "renderImportModal er funksjon");
+emit(typeof api.PROJECT_VIEW_CONFIG === "object" && api.PROJECT_VIEW_CONFIG !== null, "PROJECT_VIEW_CONFIG eksponert");
+
+// ---- View 1: overview (selectedArtifactId null) ----
+let demo = buildDemoState({});
+api.setStoreState(demo);
+let project = demo.projects[0];
+let html = api.renderProjectView(project, api.PROJECT_VIEW_CONFIG);
+
+emit(html.indexOf("class=\"project-view\"") !== -1 && html.indexOf("data-view=\"overview\"") !== -1,
+     "overview: .project-view rot med data-view=\"overview\"");
+emit(html.indexOf("Acme: Kunde-chatbot") !== -1,
+     "overview: prosjekt-navn rendres i header");
+emit(html.indexOf("data-action=\"import-open\"") !== -1,
+     "overview: Importer-rapport-knapp finnes");
+// Alle 4 kategori-grupper i sidebaren
+emit(html.indexOf("Regulatorisk") !== -1 && html.indexOf("Risiko &amp; sikkerhet") !== -1 && html.indexOf("Økonomi") !== -1 && html.indexOf("Dokumentasjon") !== -1,
+     "overview: alle 4 kategori-labels rendres i nav");
+// Overview-tiles (verdict-grid)
+emit(html.indexOf("project-overview__verdict-tile") !== -1,
+     "overview: project-overview__verdict-tile finnes");
+const tileCount = (html.match(/project-overview__verdict-tile/g) || []).length;
+emit(tileCount >= 4, "overview: minst 4 verdict-tiles (got " + tileCount + ")");
+// Top-risks (3 fra ros + 2 fra security = 5)
+emit(html.indexOf("top-risks") !== -1 && html.indexOf("Privacy leak") !== -1,
+     "overview: top-risks-listen inkluderer ROS-trussel");
+// Next-actions / missing reports
+emit(html.indexOf("project-overview__next-actions") !== -1 || html.indexOf("empty-hint") !== -1,
+     "overview: next-actions-seksjon rendres");
+emit(html.indexOf("project-overview__missing-reports") !== -1 || html.indexOf("Alle må-ha-rapporter er importert") !== -1,
+     "overview: missing-reports-seksjon rendres");
+
+// ---- View 2: artifact (filled) ----
+demo = buildDemoState({ selectedArtifactId: "classify" });
+api.setStoreState(demo);
+project = demo.projects[0];
+html = api.renderProjectView(project, api.PROJECT_VIEW_CONFIG);
+emit(html.indexOf("data-view=\"artifact\"") !== -1,
+     "artifact: data-view=\"artifact\"");
+emit(html.indexOf("project-view__artifact") !== -1 && html.indexOf("data-artifact=\"classify\"") !== -1,
+     "artifact: .project-view__artifact med data-artifact=\"classify\"");
+emit(html.indexOf("project-view__artifact-title") !== -1 && html.indexOf("EU AI Act — Klassifisering") !== -1,
+     "artifact: command-label vises i artifact-header");
+emit(html.indexOf("data-action=\"artifact-reimport\"") !== -1 && html.indexOf("data-action=\"artifact-delete\"") !== -1,
+     "artifact: reimport + delete-action-knapper finnes");
+
+// ---- View 3: empty (sidebar-treff uten artifact) ----
+demo = buildDemoState({ selectedArtifactId: "frimpact" });
+api.setStoreState(demo);
+project = demo.projects[0];
+html = api.renderProjectView(project, api.PROJECT_VIEW_CONFIG);
+emit(html.indexOf("data-view=\"empty\"") !== -1,
+     "empty: data-view=\"empty\"");
+emit(html.indexOf("empty-artifact-prompt") !== -1 && html.indexOf("data-command=\"frimpact\"") !== -1,
+     "empty: empty-artifact-prompt for frimpact");
+emit(html.indexOf("data-prefill-command=\"frimpact\"") !== -1,
+     "empty: Importer-knapp har data-prefill-command=\"frimpact\"");
+
+// ---- View 4: import-modal-open ----
+demo = buildDemoState({ importOpen: true, prefillCommandId: "ros", prefillMarkdown: "# ROS-analyse\nDemo" });
+api.setStoreState(demo);
+project = demo.projects[0];
+html = api.renderProjectView(project, api.PROJECT_VIEW_CONFIG);
+emit(html.indexOf("data-import-modal") !== -1,
+     "import-modal: [data-import-modal] rendres når open=true");
+// Dropdown har 17 options + tom default = 18 <option>-tags
+const optionMatches = html.match(/<option /g) || [];
+emit(optionMatches.length >= 17,
+     "import-modal: dropdown har 17+ options (got " + optionMatches.length + ")");
+emit(html.indexOf("value=\"ros\" selected") !== -1 || html.indexOf("value=\"ros\"  selected") !== -1,
+     "import-modal: prefillCommandId=\"ros\" gir selected option");
+emit(html.indexOf("# ROS-analyse") !== -1 || html.indexOf("ROS-analyse") !== -1,
+     "import-modal: prefillMarkdown rendres i textarea");
+
+// ---- Modal IKKE rendret når open=false ----
+demo = buildDemoState({});
+api.setStoreState(demo);
+project = demo.projects[0];
+html = api.renderProjectView(project, api.PROJECT_VIEW_CONFIG);
+emit(html.indexOf("data-import-modal") === -1,
+     "import-modal: ikke rendret når importModal.open=false");
+
+// ---- renderArtifactNav-søk filtrerer ----
+demo = buildDemoState({ searchQuery: "ros" });
+api.setStoreState(demo);
+project = demo.projects[0];
+const navHtml = api.renderArtifactNav(project, api.PROJECT_VIEW_CONFIG, null, "ros");
+emit(navHtml.indexOf("data-artifact-id=\"ros\"") !== -1,
+     "nav-filter: ROS-element finnes ved søk=\"ros\"");
+emit(navHtml.indexOf("data-artifact-id=\"cost\"") === -1,
+     "nav-filter: cost-element filtrert ut ved søk=\"ros\"");
+
+// ---- renderProjectView med null project ----
+emit(api.renderProjectView(null, api.PROJECT_VIEW_CONFIG).indexOf("Ingen prosjekt valgt") !== -1,
+     "guard: null project → empty-hint");
+' "$HTML_FILE" 2>&1) || NODE_RC=$?
+
+if [ "${NODE_RC:-0}" -ne 0 ]; then
+  fail "node-eval feilet (rc=${NODE_RC:-0}): $NODE_OUT"
+  print_summary; exit 1
+fi
+
+while IFS=$'\t' read -r status desc; do
+  case "$status" in
+    PASS) pass "$desc" ;;
+    FAIL) fail "$desc" ;;
+    WARN) warn "$desc" ;;
+  esac
+done <<< "$NODE_OUT"
+
+print_summary
diff --git a/plugins/ms-ai-architect/tests/test-playground-v3.sh b/plugins/ms-ai-architect/tests/test-playground-v3.sh
index c2e92a0..c2aed98 100755
--- a/plugins/ms-ai-architect/tests/test-playground-v3.sh
+++ b/plugins/ms-ai-architect/tests/test-playground-v3.sh
@@ -223,20 +223,23 @@ else
 fi
 
 # -------------------------------------------------------
-# 13. data-report-slot per rapport-produserende command (17 stk)
+# 13. v1.15.0: artifact-slot rendres dynamisk via renderProjectArtifact
 # -------------------------------------------------------
+# v2 hadde per-command data-report-slot="..." på alle 17 cards. v3 har én
+# .project-main-zone der renderProjectArtifact mounter den valgte artefakten.
+# Sjekk i stedet at RENDERERS routing-objektet er wired for alle 17.
 REPORT_CMDS="classify requirements transparency frimpact conformity dpia security ros review cost license migrate adr summary poc utredning compare"
-slot_hits=0
+renderer_hits=0
 for c in $REPORT_CMDS; do
-  if grep -qE "data-report-slot=[\"']${c}[\"']" "$HTML_FILE"; then
-    pass "data-report-slot=\"${c}\" markup til stede"
-    slot_hits=$((slot_hits + 1))
+  # PROJECT_VIEW_CONFIG.renderers[<cid>] = RENDERERS.renderXxx
+  if grep -qE "^[[:space:]]+${c}:[[:space:]]+RENDERERS\." "$HTML_FILE"; then
+    pass "PROJECT_VIEW_CONFIG.renderers.${c} wired"
+    renderer_hits=$((renderer_hits + 1))
   else
-    warn "data-report-slot=\"${c}\" finnes ikke i statisk markup (kan rendres dynamisk)"
+    fail "PROJECT_VIEW_CONFIG.renderers.${c} mangler"
   fi
 done
-# Slot rendrer dynamisk via render-funksjoner — warn kun, ingen fail
-pass "Report-slot-stikkprøve fullført ($slot_hits/17 statiske; resterende rendres dynamisk)"
+pass "v3 renderer-routing wired ($renderer_hits/17)"
 
 # -------------------------------------------------------
 # 14. report_archetype-routing-felt i CATALOG-data
diff --git a/plugins/okr/skills/okr-offentlig-sektor/SKILL.md b/plugins/okr/skills/okr-offentlig-sektor/SKILL.md
index 78209a1..b8ff3c7 100644
--- a/plugins/okr/skills/okr-offentlig-sektor/SKILL.md
+++ b/plugins/okr/skills/okr-offentlig-sektor/SKILL.md
@@ -1,13 +1,7 @@
 ---
 name: okr-offentlig-sektor
-description: |
-  This skill should be used when the user asks about OKR (Objectives and Key Results)
-  in Norwegian public sector context, including writing OKR, reviewing OKR quality,
-  cascading OKR from strategy to team level, tracking OKR progress, running OKR meetings,
-  or translating tildelingsbrev to OKR. Also for CFR, OKR antipatterns, scoring, and Oboard.
-  Triggers on: "OKR", "objectives and key results", "skriv OKR", "vurder OKR",
-  "OKR-scoring", "kaskadere OKR", "OKR-workshop", "tildelingsbrev til OKR",
-  "OKR for offentlig sektor", "Oboard", "CFR", "OKR antipatterns", "OKR kvalitetssjekk".
+description: >-
+  OKR (Objectives and Key Results) for Norwegian public sector: writing OKR, reviewing OKR quality, cascading OKR from strategy to team, tracking progress, running OKR meetings, translating tildelingsbrev to OKR. Also CFR, OKR antipatterns, scoring, Oboard. Triggers on: "OKR", "skriv OKR", "vurder OKR", "OKR-scoring", "kaskadere OKR", "tildelingsbrev til OKR", "OKR for offentlig sektor".
 version: "1.0.0"
 ---
 
diff --git a/plugins/voyage/.claude-plugin/plugin.json b/plugins/voyage/.claude-plugin/plugin.json
index 82a017b..957ce0e 100644
--- a/plugins/voyage/.claude-plugin/plugin.json
+++ b/plugins/voyage/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "voyage",
-  "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs) and printing the file:// link — the operator clicks lines, adds their own notes, copies a structured prompt, pastes back, Claude revises the .md.",
-  "version": "5.0.2",
+  "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs, modelled on claude-code-100x): select text or click any element, pick intent (Fiks/Endre/Spørsmål), write comment, copy structured prompt, paste back, Claude revises the .md.",
+  "version": "5.1.1",
   "author": {
     "name": "Kjell Tore Guttormsen"
   },
diff --git a/plugins/voyage/CHANGELOG.md b/plugins/voyage/CHANGELOG.md
index e7ba3ce..54cd59a 100644
--- a/plugins/voyage/CHANGELOG.md
+++ b/plugins/voyage/CHANGELOG.md
@@ -4,6 +4,218 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## v5.1.1 — 2026-05-14 — Remediation patch (11/12 review findings closed)
+
+Additive. No breaking changes against v5.1.0. Closes 11 of 12 BLOCKER/MAJOR/MINOR findings from the v5.1.0 review (sesjon 5, review.md SHA range `8cbb33e..8f4b79c`). SC8 dogfood gate (#5) is scheduled for sesjon 8 as a fresh-CC-session operator action — its closure cannot happen inside the v5.1.1 execute session.
+
+### Bug fixes (load-bearing)
+
+- **#8 YAML-number bypass closed.** `lib/validators/brief-validator.mjs` now coerces `brief_version` to string before comparison; both `brief_version: 2.1` (parsed as Number) and `brief_version: "2.1"` (parsed as String) trigger the v5.1+ sequencing gate. Previously the unquoted form silently bypassed the gate. Three regression tests added in `tests/validators/brief-validator.test.mjs`.
+- **#11 Doc-consistency pin lock-in.** `tests/lib/doc-consistency.test.mjs` pins `templates/trekbrief-template.md` to emit `brief_version: "2.1"` (quoted) so future template edits can't reintroduce the bypass.
+
+### Wiring (closes #9 + #12)
+
+- **`lib/profiles/phase-signal-resolver.mjs` helper** (new). Reads `brief.phase_signals` (or `phase_signals_partial`) and the active profile's `phase_models`, returns the resolved `{effort, model, source}` per phase. Composition rule: brief signal wins per-phase, profile fills gaps. The resolver controls only the orchestrator and the model parameter at `Agent`-spawn sites — sub-agents otherwise read `model:` from their own `agents/*.md` frontmatter (still pinned to `opus`).
+- **4 downstream commands wired.** `/trekplan`, `/trekresearch`, `/trekreview`, `/trekexecute` each invoke the resolver in their Phase 1 (or equivalent first-phase block), capture the result as `phase_signal_result`, and pass it to `Agent` tool calls explicitly. Per-command low-effort code-paths reuse existing `--quick`-equivalent logic.
+- **`resolvePhaseModel` orchestrator-override added** (#9 part A). Profile-tier model picks are overridden when `brief.phase_signals[<phase>].model` is set. Non-interference verified by new test `tests/lib/profile-resolver.test.mjs` (Step 7 TDD pair, Red→Green).
+- **`brief-validator --soft` gate required uniformly** in `/trekresearch` + `/trekexecute` (previously only `/trekplan` + `/trekreview`). `BRIEF_V51_MISSING_SIGNALS` halts all 4 commands with a clear hint pointing back to `/trekbrief`.
+
+### Test refactor (closes #1 #2 #3 #4 #6 #7 #10)
+
+- **Runtime SC1 walk for `tests/commands/trekbrief.test.mjs`** (#1). Replaces prose-grep with `resolvePhaseSignal` invariant: returns non-null for all 4 entries in `PHASE_SIGNAL_PHASES` when applied to a fixture brief with a committed `phase_signals` block; returns gate-fire when applied to a v2.1 brief missing the block.
+- **Per-tier resolver-output + missing-signals falsification** (#2 #3 #6 #10). `tests/commands/trekplan.test.mjs`, `trekresearch.test.mjs`, `trekreview.test.mjs`, `trekexecute.test.mjs` each refactored from doc-pin pattern to runtime assertion against 4 new fixture briefs (`tests/fixtures/briefs/{low,standard,high,partial}.md`).
+- **Dedicated SC5 profile-resolver non-interference test** (#7). `tests/lib/profile-resolver.test.mjs` asserts that brief-emitted signals are not overridden by `VOYAGE_PROFILE`, and that `--profile` does not silently override brief-emitted answers.
+- **#4 SC5 invariant** locked at resolver level rather than test-strategy level (no scope expansion — see `source_findings` audit trail in plan.md frontmatter).
+- **Total test delta:** +12 tests (539 baseline + 12 + 4 doc-pins from Step 10 = 555 expected; actual 578 because the existing tests grew underneath us during the v5.1.0→v5.1.1 cycle). 0 fail, 2 skipped.
+
+### Documentation (closes #5 scheduling + Decision B high-effort)
+
+- **#5 SC8 dogfood scheduling.** `REMEMBER.md` (gitignored) gains a `## v5.1.1 sesjon 8 — DOGFOOD GATE OBSERVATIONS` reserved placeholder with concrete procedure: fresh CC-session → real v5.1-eligible task → Phase 3.5 observation → 5 specific questions to answer. The actual observation is a sesjon 8 manual operator action; sesjon 7 produces scaffolding only.
+- **Decision B high-effort behavior locked per command** (operator-confirmed, decisions.local.json):
+  - `/trekplan` high: gemini-bridge plan-review Pass 2 on the post-revision plan (replaces fragile plan-critic doubling per risk-assessor finding — line numbers shift after revisions, breaking dedup triplets).
+  - `/trekresearch` high: full swarm + `contrarian-researcher` AND `gemini-bridge` always-on regardless of normal triggering rules.
+  - `/trekreview` high: skip Pass 3 reasonableness filter; coordinator applies `PLAN_EXECUTE_DRIFT` normalization for unknown rule_keys (preserves original in `original_rule_key`).
+  - `/trekexecute` high: `gates_mode = 'closed'` automatically; explicit `--gates` flag still wins.
+- **Brief Non-Goal amendment** (`.claude/projects/2026-05-13-trekflow-solo-lane/brief.md`, gitignored): low/high effort tiers now locked in v5.1.1; standard remains fallthrough default. Continue + brief phases remain effort-less.
+- **Brief SC1 amendment** (same file, gitignored): SC1 "4 AskUserQuestion calls" interpreted as the resolver-invariant `resolvePhaseSignal` returns non-null for all 4 entries in `PHASE_SIGNAL_PHASES`. The literal AskUserQuestion mocking interpretation would require a state-machine harness module (significant scope expansion); the resolver-invariant interpretation is authorized as equivalent. **Operator-confirmed via Pre-Step-10 autonomy gate.**
+
+### Known scheduling
+
+SC8 (#5) dogfood-gate closure happens in sesjon 8 (fresh CC-session, manual `/trekbrief` walk-through). v5.1.1 push to Forgejo gated on sesjon 9 `/trekreview` returning `ALLOW`. If sesjon 9 returns `BLOCK`, loop back to sesjon 6 (new remediation plan).
+
+### Source findings audit trail
+
+Plan-frontmatter `source_findings:` lists the 12 review-finding IDs each step closes. Audit trail traces `review.md` → `/trekplan --brief review.md` (Handover 6) → `plan.md` → `/trekexecute` → individual commits.
+
+## v5.1.0 — 2026-05-13 — Per-phase effort + model dialog
+
+Additive. No breaking changes. Forward-compat with all v5.0.x briefs.
+
+### Why
+
+The voyage pipeline runs a single profile-tier setting for every task. For
+typo fixes and small bugfixes the full `brief → research → plan → execute
+→ review` ceremony is over-engineered; for risky migrations the same
+profile-tier is too thin. v5.1 hands ceremony-level back to the operator
+per phase in the same dialog that produces the brief — without removing
+the disciplined defaults that protect high-stakes work. Independent of
+v4.1's profile system: composition happens at the command level (brief
+signal wins per-phase, profile fills gaps). No `/trekflow`, no helper
+module, no per-command effort dictionary — composition is documented
+prose in each downstream command.
+
+### Added
+
+- **`/trekbrief` Phase 3.5** — between Phase 3 completeness exit and
+  Phase 4 draft, 4 tier-coupled `AskUserQuestion` calls commit an effort
+  level (`low | standard | high`) and an optional `model` (`sonnet |
+  opus`) per downstream phase (`research`, `plan`, `execute`, `review`).
+  Tier mapping: `low → {effort: low, model: sonnet}`, `standard →
+  {effort: standard}` (model omitted; composition falls through to
+  profile), `high → {effort: high, model: opus}`. Force-stop pattern
+  (Phase 4f verbatim) records `phase_signals_partial: true` instead.
+  `--quick` skips Phase 3.5 entirely and auto-writes
+  `phase_signals_partial: true`.
+- **`brief-validator` extension** — 6 new issue codes:
+  `BRIEF_INVALID_PHASE_SIGNALS`, `BRIEF_INVALID_PHASE_SIGNAL_PHASE`,
+  `BRIEF_INVALID_EFFORT`, `BRIEF_INVALID_MODEL`,
+  `BRIEF_SIGNALS_MUTUALLY_EXCLUSIVE`, `BRIEF_V51_MISSING_SIGNALS` +
+  exported `PHASE_SIGNAL_PHASES` + `EFFORT_LEVELS` constants. The
+  `BASE_ALLOWED_MODELS` const in `lib/validators/profile-validator.mjs`
+  was promoted to `export const` so the brief validator can re-use it.
+- **HANDOVER-CONTRACTS amendments** — Handover 1 gets 5 inserts:
+  versioning row → `2.1`, two new schema-table rows (`phase_signals`,
+  `phase_signals_partial`), v5.1 sequencing-gate validation row,
+  versioning-paragraph expansion explaining the version-conditional
+  gate, 6 new failure-mode bullets.
+- **Template bump** — `templates/trekbrief-template.md` → `brief_version
+  2.1` with a default `phase_signals:` block (4 phases × `effort:
+  standard`, model omitted) and a commented `phase_signals_partial:
+  true` line showing the force-stop alternative.
+- **Composition rule (v5.1)** — new `## Composition rule (v5.1)`
+  sub-section in each of `commands/{trekplan,trekresearch,trekexecute,
+  trekreview}.md`. Documents `effort_for_phase = brief.phase_signals[
+  <phase>]?.effort ?? 'standard'` and `model_for_phase =
+  brief.phase_signals[<phase>]?.model ?? profile.phase_models[<phase>]`.
+  Per command: `effort == low` activates that command's existing
+  `--quick`-equivalent code-path (`/trekplan` skips Phase 5 agent swarm,
+  `/trekresearch` inline research, `/trekreview` correctness-only,
+  `/trekexecute` `--gates open` + sequential-only).
+- **Sequencing-gate surface** in 4 downstream commands — when
+  `brief-validator.mjs` returns `BRIEF_V51_MISSING_SIGNALS` in `errors`,
+  halt with a one-line user-readable message pointing back to
+  `/trekbrief`. Enforcement is validator-only.
+- **5 new minimal command test files** under `tests/commands/` —
+  `trekbrief.test.mjs` (3 cases), `trekplan.test.mjs` /
+  `trekresearch.test.mjs` / `trekreview.test.mjs` (2 cases each),
+  `trekexecute.test.mjs` (2 cases). Pattern D (read .md, assert prose
+  patterns). Verifies sequencing-gate surface + low-effort prose.
+- **5 new doc-consistency pins** — template `brief_version 2.1` +
+  `phase_signals:` block, HANDOVER schema rows, voyage CLAUDE.md +
+  README.md mention `phase_signals`.
+- **2 new fixtures** — `tests/fixtures/brief-with-phase-signals.md` +
+  `brief-without-phase-signals.md` (backward-compat).
+
+### Changed
+
+- `brief_version` bumped `2.0 → 2.1`. The bump exists because v2.1
+  activates the **version-conditional sequencing gate** — the only check
+  in the brief validator that triggers on `brief_version` rather than
+  field-presence. The forward-compat policy still applies to the field
+  itself (unknown frontmatter keys flow through).
+
+### Notes
+
+- Test count grows by ≥ 17 new cases minimum: 6 brief-validator + 11
+  command-test minimums. Realistic delta is ~25 new cases (Step 6 adds 5
+  doc-consistency pins on top). Target ≥ 533 pass at Step 10 verify.
+- `MIGRATION.md` was deliberately NOT created — v5.1 is an additive
+  minor (brief_version 2.0 → 2.1, not major). v5.4 may promote
+  `phase_signals` from optional to required (breaking change → 3.0).
+- High-effort behaviors for `/trekplan` / `/trekresearch` /
+  `/trekreview` are deferred to v5.1.1 per brief Non-Goal ("No complete
+  per-phase effort dictionary"). v5.1 locks only the low-effort floor.
+- `phase_signals_present` stats emission is also deferred to v5.1.1
+  (opt-in observability per Research 03 Q5).
+
+## v5.0.3 — 2026-05-13 — Annotation UX matches the claude-code-100x reference
+
+**No new breaking changes beyond v5.0.0.** Forks consuming v5.0.2's
+annotation HTML keep working — the file path and entry point are
+unchanged. The internal localStorage key bumps from `voyage-annotate:` to
+`voyage-annotate:v2:` to avoid mixing the v5.0.2 shape (line-click,
+freeform notes) with the v5.0.3 shape (intent-tagged annotations).
+
+### Why
+
+v5.0.2 shipped a too-simple annotation surface: click a line, write a
+freeform note, save. The operator pointed at the existing
+`claude-code-100x/build-site.js` annotation system as the actual
+reference — pencil-toggle mode, text-selection capture, three intent
+categories (**Fiks** / **Endre** / **Spørsmål**), a popover form at the
+cursor, structured markdown export with intent labels. v5.0.3 brings
+`scripts/annotate.mjs` up to that pattern.
+
+This reference had been mentioned by the operator early in the
+conversation; the iteration through v5.0.0 / v5.0.1 / v5.0.2 reflects me
+reading past it and trying alternatives instead of just matching it. The
+loss is real and is documented here in plain terms so future maintainers
+don't repeat it.
+
+### Changed
+
+- **`scripts/annotate.mjs`** — rewritten to match the
+  `claude-code-100x/build-site.js` UX:
+  - **Article rendering** — markdown is rendered to proper HTML elements
+    (`<h1>`/`<p>`/`<ul>`/`<li>`/`<table>`/`<blockquote>`/`<pre>`), not as
+    line-numbered raw lines. Document reads as a normal article.
+  - **Annotatable elements** — every heading, paragraph, list item, table
+    cell, blockquote, and code block gets a stable `data-anchor-id`.
+  - **Pencil-toggle button** in the topbar — annotation mode default ON.
+    Toggle OFF to read normally and follow links.
+  - **Click any annotatable element** (in mode) → opens a form popover
+    at the cursor with: section context (auto-detected from nearest
+    h1/h2), anchored snippet (the exact selected substring via
+    `window.getSelection()` if any text is highlighted, else the
+    element's text content up to 200 chars), three intent buttons
+    (**Fiks** / **Endre** / **Spørsmål**), comment textarea, Cancel +
+    Save. Save is disabled until an intent is picked.
+  - **Sidebar panel** — collapsed by default; "Show annotations" button
+    in the topbar opens it. Annotations grouped by section, sorted by
+    document order. Each card shows the intent badge (colored by
+    category), the anchored snippet, the operator comment, and a delete
+    button. Click a card to scroll the article to that element + flash
+    highlight.
+  - **Copy Prompt** — structured markdown:
+    `### N. [Intent] Section: <section>` + `Quote: «<snippet>»` +
+    `Comment: <text>`. Copies to clipboard.
+  - **Clear all** — wipes every annotation for the current artifact
+    (after confirm).
+  - **Persistence** — `localStorage` key `voyage-annotate:v2:<abs path>`.
+    Refresh/close/reopen the same HTML keeps every annotation.
+  - **Toast feedback** for save / copy / clear.
+- **`tests/scripts/annotate.test.mjs`** — refreshed for the v5.0.3 shape:
+  pins the three intent buttons (`data-intent="fiks"` / `"endre"` /
+  `"spørsmål"`), form popover, selection capture, section auto-detect,
+  `voyage-annotate:v2:` storage key prefix, `data-anchor-id` coverage,
+  Copy Prompt + Clear all affordances, and the markdown renderer's
+  heading / list / table / blockquote / code-fence output. 12 tests
+  (up from 10), all passing.
+
+### Notes
+
+- The producing commands (`/trekbrief` Step 4g, `/trekplan` Phase 10,
+  `/trekreview` Phase 8) call `scripts/annotate.mjs` the same way as in
+  v5.0.2 — no change to their wiring beyond the build-output now being
+  the v5.0.3 interactive surface.
+- `npm test`: 518 tests, 516 pass, 0 fail, 2 skipped (up from 516 — 2
+  new annotate tests for hostile-content escape + renderMarkdown table/
+  blockquote coverage).
+- Reference: `~/repos/claude-code-100x/claude-code-100x/build-site.js`
+  lines 1431–2255 (annotation UI section).
+- Version bump 5.0.2 → 5.0.3 in `.claude-plugin/plugin.json`,
+  `package.json`, `package-lock.json`, plugin `README.md` badge.
+
 ## v5.0.2 — 2026-05-13 — Operator-driven annotation HTML (the actual fix)
 
 **No new breaking changes beyond v5.0.0.** Forks that consumed the v5.0.1
diff --git a/plugins/voyage/CLAUDE.md b/plugins/voyage/CLAUDE.md
index c0d0768..26c9d74 100644
--- a/plugins/voyage/CLAUDE.md
+++ b/plugins/voyage/CLAUDE.md
@@ -6,6 +6,10 @@ Voyage — a contract-driven Claude Code pipeline: brief, research, plan, execut
 
 > **v3.0.0 — architect step extracted from this plugin.** The plan command still auto-discovers `architecture/overview.md` if present, so any compatible producer (architect plugin no longer publicly distributed; the architecture/overview.md slot remains available for any compatible producer) plugs into the same slot. See [CHANGELOG.md](CHANGELOG.md) for migration history.
 
+> **Trinity context (2026-05-13, informational).** Voyage is Tier 1 (per-task) of a three-tier architecture in active design under the author's private marketplace: Tier 2 `app-creator` (per-app — "what does the app need, what's the next brief?") produces briefs Voyage consumes; Tier 3 `app-factory` (per-portfolio — "which app needs me now?") aggregates state across multiple app-creator instances. Both are pre-implementation and will ship to Forgejo when ready. **Asymmetry is a hard invariant:** Voyage stays unaware of Tier 2/3. Handover 1 (brief format) is the only integration point — any compatible producer can feed Voyage, app-creator is not privileged. Brief-schema changes are therefore breaking changes for downstream consumers, formalized as a public contract in v5.4.
+
+> **Cross-cutting invariant: brief framing must match operator intent (2026-05-15).** Etablert etter residiv. Briefen er pipelinens source of truth; operatørens intent lever i hodet + i memory-filer (`feedback_*`, `project_*`); pipelinen tvinger ikke alignment. Høyere reasoning-kraft polerer feil premiss istedenfor å utfordre det. **Tre lag av forsvar (input-siden), alle BLOCKER ved brudd når v5.5 shipper:** (1) eksplisitt `framing: preserve|refine|replace|new-direction` i brief-frontmatter, `AskUserQuestion`-validert før brief-prosa skrives; (2) memory-alignment check som ny dimensjon i `brief-reviewer` — sammenlikner brief-prosa mot relevante memory-filer og rapporterer eksplisitte motsigelser; (3) obligatorisk `## TL;DR`-seksjon (≤ 5 linjer) øverst i `brief.md`. Implementeres i v5.5 — se [ROADMAP.md](ROADMAP.md). Inntil shipping: operatør må manuelt sjekke at briefens framingord ikke motsier intent, særlig etter avvist iterasjon hvor "delta fra forrige" er en farlig default-ankring.
+
 ## Commands
 
 | Command | Description | Model |
@@ -16,89 +20,9 @@ Voyage — a contract-driven Claude Code pipeline: brief, research, plan, execut
 | `/trekexecute` | Execute — disciplined plan/session-spec executor with failure recovery | opus |
 | `/trekreview` | Review — independent post-hoc review of delivered code against the brief. Produces `review.md` with severity-tagged findings (Handover 6) | opus |
 | `/trekcontinue` | Continue — resumes the next session of a multi-session voyage project. Reads `.session-state.local.json` (Handover 7) and immediately begins executing | opus |
-| `/trekendsession` | End-session — mark the current session complete and write session-state pointing at the next session. Helper for informal multi-session flows | sonnet |
+| `/trekendsession` | End-session — mark the current session complete and write session-state pointing at the next session. Helper for informal multi-session flows | opus |
 
-### /trekbrief modes
-
-| Flag | Behavior |
-|------|----------|
-| _(default)_ | Dynamic interview until quality gates pass → brief.md with research plan |
-| `--quick` | Compact start; still escalates if required sections are weak or the brief-review gate fails → brief.md with research plan |
-| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
-| `--profile <name>` | (v4.1.0) Model profile: `economy` / `balanced` / `premium` / `<custom>`. Sets `phase_models` for the brief phase. See `## Profile system` below. |
-
-Always interactive. Phase 3 is a section-driven completeness loop (no hard cap on question count); Phase 4 runs a `brief-reviewer` stop-gate with max 3 review iterations. After writing the brief, asks the user to choose manual (print commands) or auto (Claude runs research + plan in foreground).
-
-### /trekresearch modes
-
-| Flag | Behavior |
-|------|----------|
-| _(default)_ | Interview + research (local + external) + synthesis + brief (foreground) |
-| `--project <dir>` | Write brief to `{dir}/research/{NN}-{slug}.md` (auto-incremented) |
-| `--quick` | Interview (short) + inline research (no agent swarm) |
-| `--local` | Only codebase analysis agents (skip external + Gemini) |
-| `--external` | Only external research agents (skip codebase analysis) |
-| `--fg` | No-op alias (foreground is default since v2.4.0) |
-| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
-| `--profile <name>` | (v4.1.0) Model profile for the research phase. See `## Profile system` below. |
-
-Flags combine: `--project <dir> --local`, `--external --quick`.
-
-### /trekplan modes
-
-| Flag | Behavior |
-|------|----------|
-| `--project <dir>` | **Required path A** — read `{dir}/brief.md`, auto-discover `{dir}/research/*.md`, write `{dir}/plan.md` |
-| `--brief <path>` | **Required path B** — plan from a specific brief file; write to `.claude/plans/trekplan-{date}-{slug}.md` |
-| `--research <brief> [brief2]` | Enrich with extra research briefs beyond what is in `{project_dir}/research/` |
-| `--fg` | No-op alias (foreground is default since v2.4.0) |
-| `--quick` | Plan directly (no agent swarm) |
-| `--export <pr\|issue\|markdown\|headless> <plan>` | Generate shareable output from existing plan |
-| `--decompose <plan>` | Split plan into self-contained headless sessions |
-| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
-| `--profile <name>` | (v4.1.0) Model profile for the plan phase (and others, since plan emits `profile:` to plan.md frontmatter). See `## Profile system` below. |
-
-**Breaking change (v2.0):** one of `--brief` or `--project` is required. There is no interview inside `/trekplan`. The `--spec` flag has been removed — use `/trekbrief` to produce a brief instead.
-
-If `{project_dir}/architecture/overview.md` exists (typically produced by an opt-in upstream architect plugin, not bundled), the plan command auto-discovers it and treats `cc_features_proposed` as priors. Missing file is fine — discovery is additive, not required.
-
-### /trekexecute modes
-
-| Flag | Behavior |
-|------|----------|
-| _(default)_ | Execute plan — auto-detects Execution Strategy for multi-session |
-| `--project <dir>` | Read `{dir}/plan.md`, write `{dir}/progress.json` |
-| `--resume` | Resume from last progress checkpoint |
-| `--dry-run` | Validate plan structure without executing |
-| `--validate` | Schema-only check — parse steps + manifests, report `READY \| FAIL`, no execution |
-| `--step N` | Execute only step N |
-| `--fg` | Force foreground — run all steps sequentially, ignore Execution Strategy |
-| `--session N` | Execute only session N from plan's Execution Strategy |
-| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
-| `--profile <name>` | (v4.1.0) Model profile for the execute phase. Inherited from plan.md frontmatter `profile:` if present. See `## Profile system` below. |
-
-### /trekreview modes
-
-| Flag | Behavior |
-|------|----------|
-| _(default)_ | Run brief-conformance + code-correctness reviewers in parallel, coordinator dedup + verdict, write `{project_dir}/review.md` |
-| `--project <dir>` | **Required.** Path to trekplan project folder containing `brief.md`. Review is written to `{dir}/review.md` |
-| `--since <ref>` | Override "before" SHA for the diff range. Validated via `git rev-parse --verify` |
-| `--quick` | Skip brief-conformance reviewer; skip coordinator's reasonableness filter — fast correctness-only pass |
-| `--validate` | Schema-only check on existing `{dir}/review.md`. No LLM calls |
-| `--dry-run` | Print discovered scope + triage map; skip writes |
-| `--fg` | No-op alias (foreground is default) |
-| `--profile <name>` | (v4.1.0) Model profile for the review phase. See `## Profile system` below. |
-
-### /trekcontinue modes
-
-| Flag | Behavior |
-|------|----------|
-| _(default)_ | Auto-discover active project's `.session-state.local.json` and resume |
-| `<project-dir>` | Resume the next session of an explicit project directory |
-| `--profile <name>` | (v4.1.0) Model profile for the resumed session. Inherited from the previous session's plan.md frontmatter when absent. See `## Profile system` below. |
-
-The triage gate is deterministic — path-pattern classifier produces `{file → deep-review|summary-only|skip}`. Hard refuse-with-suggestion above 100 files / 100K diff tokens.
+Full flag reference for each command (modes, `--gates`, `--profile`, breaking changes): see `docs/command-modes.md`.
 
 ## Agents
 
@@ -107,191 +31,32 @@ The triage gate is deterministic — path-pattern classifier produces `{file →
 | planning-orchestrator | opus | Inline reference documentation for the planning pipeline workflow (brief-driven) |
 | research-orchestrator | opus | Inline reference documentation for the research pipeline workflow |
 | review-orchestrator | opus | Inline reference documentation for the review pipeline workflow |
-| architecture-mapper | sonnet | Codebase structure, tech stack, patterns |
-| dependency-tracer | sonnet | Import chains, data flow, side effects |
-| task-finder | sonnet | Task-relevant files, functions, reuse candidates |
-| risk-assessor | sonnet | Risks, edge cases, failure modes |
-| test-strategist | sonnet | Test patterns, coverage gaps, strategy |
-| git-historian | sonnet | Recent changes, ownership, hot files |
-| research-scout | sonnet | External docs for unfamiliar tech (conditional, planning only) |
-| convention-scanner | sonnet | Coding conventions: naming, style, error handling, test patterns |
-| brief-reviewer | sonnet | Task brief quality (5 dimensions: completeness, consistency, testability, scope clarity, research plan validity) |
-| brief-conformance-reviewer | sonnet | Brief conformance review (SC + Non-Goal traceability) |
-| code-correctness-reviewer | sonnet | Code correctness review (7 dimensions) |
-| review-coordinator | sonnet | Judge Agent — dedup + reasonableness filter + verdict |
-| plan-critic | sonnet | Adversarial plan review (9 dimensions) |
-| scope-guardian | sonnet | Scope alignment (creep + gaps) |
-| session-decomposer | sonnet | Splits plans into headless sessions with dependency graph |
-| docs-researcher | sonnet | Official documentation, RFCs, vendor docs (Tavily, MS Learn) |
-| community-researcher | sonnet | Community experience: issues, blogs, discussions |
-| security-researcher | sonnet | CVEs, audit history, supply chain risks |
-| contrarian-researcher | sonnet | Counter-evidence, overlooked alternatives |
-| gemini-bridge | sonnet | Gemini Deep Research second opinion (conditional) |
+| architecture-mapper | opus | Codebase structure, tech stack, patterns |
+| dependency-tracer | opus | Import chains, data flow, side effects |
+| task-finder | opus | Task-relevant files, functions, reuse candidates |
+| risk-assessor | opus | Risks, edge cases, failure modes |
+| test-strategist | opus | Test patterns, coverage gaps, strategy |
+| git-historian | opus | Recent changes, ownership, hot files |
+| research-scout | opus | External docs for unfamiliar tech (conditional, planning only) |
+| convention-scanner | opus | Coding conventions: naming, style, error handling, test patterns |
+| brief-reviewer | opus | Task brief quality (5 dimensions: completeness, consistency, testability, scope clarity, research plan validity) |
+| brief-conformance-reviewer | opus | Brief conformance review (SC + Non-Goal traceability) |
+| code-correctness-reviewer | opus | Code correctness review (7 dimensions) |
+| review-coordinator | opus | Judge Agent — dedup + reasonableness filter + verdict |
+| plan-critic | opus | Adversarial plan review (9 dimensions) |
+| scope-guardian | opus | Scope alignment (creep + gaps) |
+| session-decomposer | opus | Splits plans into headless sessions with dependency graph |
+| docs-researcher | opus | Official documentation, RFCs, vendor docs (Tavily, MS Learn) |
+| community-researcher | opus | Community experience: issues, blogs, discussions |
+| security-researcher | opus | CVEs, audit history, supply chain risks |
+| contrarian-researcher | opus | Counter-evidence, overlooked alternatives |
+| gemini-bridge | opus | Gemini Deep Research second opinion (conditional) |
 
-## Quality infrastructure (v3.4.0)
+## Reference docs (read on demand)
 
-`lib/` contains zero-dep validators, parsers, and autonomy primitives wired into the four commands:
-
-- `lib/util/{frontmatter,result,atomic-write,autonomy-gate}.mjs` — shared YAML-frontmatter parser + Result helpers + `atomicWriteJson(path, obj)` for tmp+rename writes + autonomy-gate state machine (v3.4.0)
-- `lib/parsers/{plan-schema,manifest-yaml,project-discovery,arg-parser,bash-normalize,jaccard,finding-id}.mjs` — pure parsers (no I/O), unit-tested. `manifest-yaml` extended in v3.4.0 with additive `skip_commit_check` + `memory_write` flags (forward-compat: unknown keys ignored)
-- `lib/review/{rule-catalogue,plan-review-dedup}.mjs` — version-pinned rule catalogue (12 keys) + Phase 9 inline dedup helpers (v3.4.0)
-- `lib/stats/event-emit.mjs` — single-source stats event emitter for autonomy-gate transitions and main-merge-gate (v3.4.0)
-- `lib/validators/{brief,research,plan,progress,session-state}-validator.mjs` — schema validators with CLI shims (`node lib/validators/X.mjs --json <path>`)
-- `lib/validators/architecture-discovery.mjs` — drift-WARN external-contract discovery for `architecture/overview.md`
-
-Wiring points (replaces previous prose-grep instructions):
-- `/trekbrief` Phase 4g → `brief-validator` (post-write sanity check)
-- `/trekplan` Phase 1 → `brief-validator --soft`, `research-validator --dir`, `architecture-discovery`
-- `planning-orchestrator` Phase 5.5 → `plan-validator --strict` (replaces 3 `grep -cE` calls)
-- `/trekexecute --validate` → `plan-validator --strict` + `progress-validator`
-
-Tests under `tests/**/*.test.mjs` (~290 tests, 0 deps). `npm test` is the fork-readiness gate. v3.4.0 adds: synthetic determinism fixtures (`tests/synthetic/plan-run-*.md` + `review-run-*.md` + companion `*-determinism.test.mjs` enforcing Jaccard ≥ 0.833 SC7 floor) and hook baseline regression pins (`tests/hooks/{path-guard,bash-guard}.test.mjs` exercising `pre-write-executor.mjs` + `pre-bash-executor.mjs` denylist BLOCK paths).
-
-Doc-consistency test at `tests/lib/doc-consistency.test.mjs` pins agent-table count, command-table coverage, plan_version invariant, settings.json scope cleanliness, Handover 7 presence, and `session-state-validator` CLI shim.
-
-`docs/HANDOVER-CONTRACTS.md` is the single source of truth for the 7 pipeline handovers (brief→research, research→plan, architecture→plan EXTERNAL, plan→execute, progress.json resume, review→plan, `.session-state.local.json`). Read it before changing any artifact format.
-
-`hooks/scripts/pre-compact-flush.mjs` (PreCompact event, CC v2.1.105+) fixes the documented P0 in `docs/trekexecute-v2-observations-from-config-audit-v4.md`: keeps `progress.json` in sync with git history before context compaction so `--resume` works after long conversations. Atomic write, monotonic only, never blocks compaction.
-
-`hooks/scripts/session-title.mjs` (UserPromptSubmit, CC v2.1.94+) sets `sessionTitle` to `voyage:<command>:<slug>` for voyage-command invocations. Helps multi-session headless runs identify themselves in process lists.
-
-`hooks/scripts/post-bash-stats.mjs` (PostToolUse, CC v2.1.97+) appends `duration_ms` for each Bash call into `${CLAUDE_PLUGIN_DATA}/trekexecute-stats.jsonl`. Useful for finding long-running verify or checkpoint commands.
-
-`hooks/scripts/post-compact-flush.mjs` (PostCompact event, v3.4.0) re-injects `.session-state.local.json` after context compaction so multi-session work survives a compaction boundary. Companion to `pre-compact-flush.mjs` (which writes the state file before compaction); together they form the rehydrate cycle that keeps `/trekcontinue` reliable across long-running multi-session work.
-
-## Autonomy mode (`--gates`, v3.4.0)
-
-All four pipeline commands accept `--gates {open|closed|adaptive}`:
-
-| Value | Behavior |
-|-------|----------|
-| `open` | Skip optional checkpoints; trust manifests + verify gates only |
-| `closed` | Stop at every autonomy boundary; operator confirms each transition |
-| `adaptive` (default) | Stop only at meaningful boundaries (manifest-audit FAIL, plan-critic BLOCKER, main-merge gate) |
-
-Under the hood: `lib/util/autonomy-gate.mjs` runs the state machine `idle → approved → executing → merge-pending → main-merged`. `lib/stats/event-emit.mjs` records each transition to `${CLAUDE_PLUGIN_DATA}/trek*-stats.jsonl`. The main-merge gate is the final autonomy boundary before HEAD lands on `main`.
-
-### Path A/B/C decision (v3.4.0; Path C closed 2026-05-05)
-
-Three architectural options were considered for the speedup work:
-
-- **Path A — cache-first** (drop `--allowedTools` per child to recover cross-phase cache sharing): REJECTED. Inverts the security model; plugin hooks don't fire reliably in `claude -p` (research/06 GH #36071).
-- **Path B — sequential `--no-ff` parallel waves with manifest-driven failure recovery**: CHOSEN. Ships in v3.4.0. Phase 2.6 of `/trekexecute` runs the wave executor with hardenings for plugin-in-monorepo + gitignored-state topology.
-- **Path C — hybrid (cache-warm sentinel + identical-tool parallel)**: **CLOSED 2026-05-05.** Q3 experiment measured median `cache_creation_input_tokens` = 163,903 across 3 fork-children at 186K parent context (CC v2.1.128, Sonnet 4.6). Master-plan thresholds: ≤ 1,500 POSITIVE / ≥ 3,500 NEGATIVE. Result is solidly NEGATIVE — `CLAUDE_CODE_FORK_SUBAGENT` does not preserve cache prefix across identical-tool children at our context size. Path C migration is deferred indefinitely; reassessment is appropriate when CC v2.2.xxx ships fork-cache-relevant features. Harness: `scripts/q3-cache-prefix-experiment.mjs`. Companion analyser: `lib/stats/cache-analyzer.mjs`.
-
-A revived Path C (post-v2.2.xxx) would require: (1) re-architecting tool-list to be identical across all wave children, (2) cache-telemetry analysis confirming the new fork-cache behaviour holds, (3) prompt-level deny re-enablement to compensate for tool scoping rollback.
-
-## Profile system (`--profile`, v4.1.0)
-
-Three built-in model profiles plus operator-defined `<custom>.yaml`. Each profile pins `phase_models` for the six pipeline phases (`brief`, `research`, `plan`, `execute`, `review`, `continue`). Profile is recorded in plan.md frontmatter as `profile: <name>` and emitted to `${CLAUDE_PLUGIN_DATA}/trek*-stats.jsonl` for cost-attribution.
-
-| Profile | Brief | Research | Plan | Execute | Review | Continue | Use case |
-|---------|-------|----------|------|---------|--------|----------|----------|
-| `economy` | sonnet | sonnet | sonnet | sonnet | sonnet | sonnet | Lowest cost; high-confidence small-scope tasks |
-| `balanced` (default) | sonnet | sonnet | opus | sonnet | opus | sonnet | Default — opus where reasoning depth pays off |
-| `premium` | opus | sonnet | opus | sonnet | opus | sonnet | Critical-path planning + review when budget allows |
-
-### Lookup order
-
-1. Explicit `--profile <name>` flag passed to the command
-2. Plan-file frontmatter `profile:` (when resuming via `/trekexecute --resume` or `/trekcontinue`)
-3. `VOYAGE_PROFILE` environment variable
-4. Default `balanced`
-
-### Custom profiles
-
-Create `lib/profiles/<custom>.yaml` to define a new tier. The validator (`lib/validators/profile-validator.mjs`) enforces: every `phase_models[].phase` must be a known phase enum; every `phase_models[].model` must match `^(opus|sonnet)(\b|-).*` or one of the canonical short names. Custom profiles override built-ins of the same name (lookup is alphabetical with `<custom>` taking precedence).
-
-Drift between plan-frontmatter `profile:` and step-manifest `profile_used:` emits a `MANIFEST_PROFILE_DRIFT` warning from `plan-validator --strict` (Step 20). Plan remains valid; the warning surfaces accidental tier-mismatch.
-
-## Observability (Stop hook, v4.1.0)
-
-The `Stop` hook in `hooks/hooks.json` runs `hooks/scripts/otel-export.mjs` at session-end. The hook is **opt-in** — when `VOYAGE_EXPORT_MODE` is unset or `off`, no work is done.
-
-| Mode | Output | Endpoint env-var |
-|------|--------|------------------|
-| `off` (default) | _(no export)_ | — |
-| `textfile` | `voyage.prom` (Prometheus exposition format) | `VOYAGE_TEXTFILE_DIR` |
-| `otlp` | OTLP/JSON POST | `VOYAGE_OTEL_ENDPOINT` |
-
-Endpoint validation: `VOYAGE_OTEL_ALLOW_PRIVATE=1` is required to send to loopback or RFC1918 destinations (CWE-918 SSRF mitigation). Allowlist `lib/exporters/field-allowlist.mjs` redacts records before export (CWE-212). Path validation (`lib/exporters/path-validator.mjs`) rejects symlink + traversal (CWE-22).
-
-Local Docker Compose stack: `examples/observability/`. Operator docs: `docs/observability.md`. Both pin minimum versions per CVE history (`prom/prometheus:v3.0.1`, `grafana/grafana:11.4.0`, `otel/opentelemetry-collector-contrib:0.115.0`).
-
-## Architecture
-
-**Brief:** 7-phase workflow: Parse mode → Create project dir → Phase 3 completeness loop (section-driven, no question cap) → Phase 4 draft/review/revise with `brief-reviewer` as stop-gate (max 3 iterations; gate = all dimensions ≥ 4 and research plan = 5) → Finalize (`brief.md` on pass, or `brief_quality: partial` on cap/force-stop) → Manual/auto opt-in → Stats. Always interactive. Auto mode runs research + plan inline in the main context (v2.4.0).
-
-**Research:** Foreground workflow (v2.4.0): Parse mode → Interview → Parallel research swarm (5 local + 4 external + 1 bridge, spawned from main context) → Follow-ups → Triangulation → Synthesis + brief → Stats. With `--project`, writes to `{dir}/research/NN-slug.md`.
-
-**Plan:** Foreground workflow (v2.4.0): Parse mode (validate brief input) → Codebase sizing → Brief review (`brief-reviewer`) → Parallel exploration (6-8 agents, spawned from main context) → Deep-dives → Synthesis (with architecture-note cross-reference if present) → Planning → Adversarial review (`plan-critic` + `scope-guardian`) → Present/refine → Handoff. With `--project`, writes to `{dir}/plan.md` and auto-detects `{dir}/architecture/overview.md` (produced by an opt-in upstream architect plugin if installed; not bundled).
-
-**Decompose:** Parse plan → Analyze step dependencies → Group into sessions → Identify parallel waves → Generate session specs + dependency graph + launch script.
-
-**Execute:** Parse plan → Security scan (Phase 2.4) → Detect Execution Strategy → Single-session (step loop) or multi-session (parallel waves via `claude -p` with scoped `--allowedTools`) → Phase 7.5 manifest audit → Phase 7.6 bounded recovery (if partial) → Phase 8 atomically writes `progress.json` + `.session-state.local.json` (Handover 7) → Report. With `--project`, reads `{dir}/plan.md`. Phase 2.55 (pre-flight stop) and Phase 4 (entry-condition stop) also write `.session-state.local.json` so `/trekcontinue` can surface the stop and prompt for next steps.
-
-**Continue:** `/trekcontinue` reads `{dir}/.session-state.local.json` (Handover 7), validates schema-v1 via `session-state-validator`, narrates a 3-line summary (project / next-session-label / brief-path), and immediately begins executing the next session. Auto-discovers active project state files under `.claude/projects/*/.session-state.local.json` if no explicit `<project-dir>` argument. Operator-invoked only — never auto-loaded via SessionStart. The `/trekendsession` helper is the informal-flow producer: writes the same state file for ad-hoc multi-session handovers that don't run through `/trekexecute`.
-
-**Operator-annotation HTML (v5.0.2):** the last step of `/trekbrief`, `/trekplan`, and `/trekreview` runs `scripts/annotate.mjs` against the just-written `.md` and prints the resulting `file://<abs path>` link. The HTML is self-contained (zero npm deps, zero external network, design-system-styled, light + dark + print), and built around the operator. The operator opens the file, clicks any line of the document, writes their own note in an inline textarea, hits Save. The sidebar collects every note (editable + deletable, sorted by line). Notes persist in `localStorage` per artifact path — refresh or browser-close doesn't lose work. A "Copy Prompt" button at the bottom assembles every note into one structured prompt; the operator copies it and pastes it back into Claude, and Claude revises the `.md` freehand from the notes. **The operator drives every annotation.** Claude does not pre-generate suggestions in this flow — that was the v5.0.1 path (via `/playground document-critique`), which inverted the direction the operator actually wanted. v5.0.2 makes the loop OPERATOR-LEADS, CLAUDE-REACTS, which is what was asked for all along. The v5.0.0 standalone `.html` render (`scripts/render-artifact.mjs`) was a read-only view that didn't afford annotation; the v4.2/v4.3 bespoke playground SPA + `/trekrevise` + Handover 8 were 388 KB of broken UX. Both stay removed. See [CHANGELOG.md](CHANGELOG.md) § v5.0.2.
-
-**Security:** 4-layer defense-in-depth: plugin hooks (pre-bash-executor, pre-write-executor), prompt-level denylist (works in headless sessions), pre-execution plan scan (Phase 2.4), scoped `--allowedTools` replacing `--dangerously-skip-permissions`. Hard Rules 14-16 enforce verify command security, repo-boundary writes, and sensitive path protection.
-
-**Pipeline:** `/trekbrief` produces the task brief. `/trekresearch --project <dir>` fills in `{dir}/research/`. `/trekplan --project <dir>` reads brief + research to produce `{dir}/plan.md` (and auto-discovers `{dir}/architecture/overview.md` if an opt-in upstream architect plugin produced one). `/trekexecute --project <dir>` executes and writes `{dir}/progress.json`. `/trekreview --project <dir>` produces `{dir}/review.md`. `/trekbrief`, `/trekplan`, and `/trekreview` each end by running `scripts/annotate.mjs` on the just-written artifact, producing `{dir}/{artifact}.html` — a self-contained operator-annotation surface — and printing the `file://` link. The operator opens it, clicks lines, writes their own notes, copies a structured prompt, pastes back, Claude revises the `.md`. All artifacts live in one project directory.
-
-**Project-directory contract (v3.0.0):** trekplan owns the directory layout below. The `architecture/` subdirectory is opt-in and produced by an opt-in upstream architect plugin (not bundled) — the architect plugin is no longer publicly distributed, but the `architecture/overview.md` slot remains available for any compatible producer.
-
-```
-.claude/projects/{YYYY-MM-DD}-{slug}/
-  brief.md           ← trekbrief writes; everyone reads
-  brief.html         ← trekbrief annotates (operator-annotation HTML, gitignored, re-buildable from brief.md)
-  research/*.md      ← trekresearch writes; plan + architect read
-  architecture/      ← OPT-IN, owned by an opt-in upstream architect plugin (not bundled)
-    overview.md
-    gaps.md
-  plan.md            ← trekplan writes; trekexecute reads
-  plan.html          ← trekplan annotates
-  progress.json      ← trekexecute writes
-  review.md          ← trekreview writes; trekplan reads (Handover 6)
-  review.html        ← trekreview annotates
-```
-
-The `.html` files (`brief.html`, `plan.html`, `review.html`) are produced by `scripts/annotate.mjs` and live alongside their `.md` siblings in the project directory. They are re-buildable from the `.md` source at any time (deterministic, byte-identical output on re-run), so they are conventionally gitignored along with the rest of `.claude/projects/`. Operator annotations live in browser `localStorage` keyed on the absolute artifact path — they survive refresh and browser-close, but are local to the operator's machine.
-
-No code-level dependency between plugins — the contract is filesystem-level only.
-
-## State
-
-All artifacts in one project directory (default):
-- Project root: `.claude/projects/{YYYY-MM-DD}-{slug}/`
-  - `brief.md` + `brief.html` (task brief from `/trekbrief`; `.html` is the operator-annotation surface from `scripts/annotate.mjs`)
-  - `research/{NN}-{slug}.md` (research briefs from `/trekresearch --project`)
-  - `architecture/overview.md` + `architecture/gaps.md` (opt-in, produced by an opt-in upstream architect plugin, not bundled)
-  - `plan.md` + `plan.html` (from `/trekplan --project`)
-  - `sessions/session-*.md` (from `--decompose`)
-  - `progress.json` (from `/trekexecute --project`)
-  - `review.md` + `review.html` (from `/trekreview --project`)
-  - `.session-state.local.json` (Handover 7 — gitignored via `*.local.json`; written by `/trekexecute` Phase 8/2.55/4 or `/trekendsession`; read by `/trekcontinue`)
-
-Legacy paths (still work without `--project`):
-- Research briefs: `.claude/research/trekresearch-{date}-{slug}.md`
-- Plans: `.claude/plans/trekplan-{date}-{slug}.md`
-- Sessions: `.claude/trekplan-sessions/{slug}/session-*.md`
-- Launch scripts: `.claude/trekplan-sessions/{slug}/launch.sh`
-- Progress: `{plan-dir}/.trekexecute-progress-{slug}.json`
-
-Stats:
-- Brief stats: `${CLAUDE_PLUGIN_DATA}/trekbrief-stats.jsonl`
-- Plan stats: `${CLAUDE_PLUGIN_DATA}/trekplan-stats.jsonl`
-- Exec stats: `${CLAUDE_PLUGIN_DATA}/trekexecute-stats.jsonl`
-- Research stats: `${CLAUDE_PLUGIN_DATA}/trekresearch-stats.jsonl`
-- Continue stats: `${CLAUDE_PLUGIN_DATA}/trekcontinue-stats.jsonl`
-
-## Terminology
-
-- **Task brief** — produced by `/trekbrief`. Declares intent, goal, and research plan. Drives planning.
-- **Research brief** — produced by `/trekresearch`. Answers a specific research question. Feeds planning.
-- **Architecture note** — opt-in, produced by an opt-in upstream architect plugin (not bundled; the architect plugin is no longer publicly distributed, but the `architecture/overview.md` filesystem slot remains available for any compatible producer). Proposes which Claude Code features fit the task with brief-anchored rationale + explicit gaps. When present, enriches planning.
-- **Review** — produced by `/trekreview`. Independent post-hoc review of delivered code against the task brief. **Handover 6 (review → plan)** routes BLOCKER + MAJOR findings into `/trekplan --brief review.md` for a remediation plan. The plan's optional `source_findings:` frontmatter list is the audit trail back to the consumed findings. MINOR + SUGGESTION are skipped for v1.0 plan-input.
-- **Session state** — `.session-state.local.json` per project. **Handover 7** — produced by any session-end mechanism (`/trekexecute` Phase 8/2.55/4, `/trekendsession` helper, future graceful-handoff v2.2). Consumed by `/trekcontinue` to resume the next session in a fresh chat. Schema v1 is forward-compat (unknown top-level keys ignored). Never committed (gitignored via `*.local.json`).
-
-A project typically has 1 task brief, 0–N research briefs, 0 or 1 architecture note, 0–N reviews (one per review iteration), and 0 or 1 session-state file (overwritten on every session-end).
+- **Architecture, workflows, project-directory contract, state, terminology:** `docs/architecture.md`
+- **Quality infrastructure (`lib/` validators, parsers, autonomy primitives, hooks):** `docs/architecture.md` §Quality infrastructure
+- **Autonomy gates (`--gates`), Path A/B/C decision:** `docs/operations.md`
+- **Profile system (`--profile economy/balanced/premium`), lookup order, custom profiles:** `docs/operations.md`
+- **Observability (Stop hook, OTLP/textfile export, SSRF mitigation):** `docs/operations.md`
+- **Handover contracts (the 7 pipeline handovers):** `docs/HANDOVER-CONTRACTS.md`
diff --git a/plugins/voyage/README.md b/plugins/voyage/README.md
index 1c366ab..30eea85 100644
--- a/plugins/voyage/README.md
+++ b/plugins/voyage/README.md
@@ -1,6 +1,6 @@
 # trekplan — Brief, Research, Plan, Execute, Review, Continue
 
-![Version](https://img.shields.io/badge/version-5.0.2-blue)
+![Version](https://img.shields.io/badge/version-5.1.1-blue)
 ![License](https://img.shields.io/badge/license-MIT-green)
 ![Platform](https://img.shields.io/badge/platform-Claude%20Code-purple)
 
@@ -10,6 +10,15 @@
 
 A [Claude Code](https://docs.anthropic.com/en/docs/claude-code) plugin for deep implementation planning, multi-source research, autonomous execution, independent post-hoc review, and zero-friction multi-session resumption. Six commands, one pipeline:
 
+> **What's new in v5.1.1** — Remediation patch closing 11 of 12 findings from the v5.1.0 review (SC8 dogfood gate scheduled for sesjon 8). Lukker:
+> - **Bug fixes (load-bearing):** YAML-number bypass in `brief-validator` (#8) + doc-consistency pin lock-in (#11) so the gate fires for both quoted and unquoted `brief_version`.
+> - **Wiring:** `phase-signal-resolver` helper wired into all 4 downstream commands (#9) with TDD pair `resolvePhaseModel` + profile-resolver non-interference test (#4 SC5); `brief-validator` gate required uniformly in `/trekresearch` + `/trekexecute` (#12).
+> - **Test refactor:** runtime SC1 walk for trekbrief (#1) + per-tier resolver-output + missing-signals falsification for `/trekplan`/`/trekresearch`/`/trekreview`/`/trekexecute` (#2 #3 #6 #10) + dedicated SC5 test (#7).
+> - **Documentation:** Dogfood-gate scheduling in REMEMBER (#5, sesjon 8 manual) + Decision B high-effort behavior per command + brief Non-Goal/SC1 amendments + coordinator high-effort normalization.
+> v5.1.1 is additive — no breaking changes against v5.1.0.
+>
+> **What v5.1 introduced** — `/trekbrief` Phase 3.5 commits per-phase `phase_signals` (effort + optional model for `research`/`plan`/`execute`/`review`) to `brief.md` frontmatter. `brief_version: 2.1` activates a validator-side sequencing gate (`BRIEF_V51_MISSING_SIGNALS`) so downstream commands halt with a friendly hint when signals are missing. Composition rule per downstream command: brief signal wins per-phase, profile fills gaps. `effort == low` activates the existing `--quick`-equivalent code-path in each command (`/trekexecute` low-effort = `--gates open` + sequential). Additive — no breaking changes; pre-2.1 briefs still validate.
+
 | Command | What it does |
 |---------|-------------|
 | **`/trekbrief`** | Brief — interactive interview produces a task brief with explicit research plan |
@@ -503,7 +512,7 @@ Both arguments are required. No interactive prompt — headless-safe.
 
 ---
 
-## Reviewing and annotating artifacts (v5.0.2)
+## Reviewing and annotating artifacts (v5.0.3)
 
 `/trekbrief`, `/trekplan`, and `/trekreview` each end by running
 `scripts/annotate.mjs` against the just-written `.md` and printing the
@@ -528,40 +537,56 @@ the tab and reopen the same file.
 ```
 
 You run `open` (or click the `file://` link in your terminal), the HTML
-opens in your default browser. In the browser:
+opens in your default browser. The annotation UX is modelled on
+`claude-code-100x/build-site.js`:
 
-- **Left:** the artifact, rendered with line numbers. Hover any line — the
-  gutter shows a `+`. Click — an inline textarea appears under that line.
-  Write your note, hit Save (or `⌘Enter`). The line gets a colored left
-  border + a number badge showing the annotation count on that line.
-- **Right (sidebar):** every annotation you've made, sorted by line. Each
-  card shows the line reference (click to scroll), the target text
-  snippet, and your note text. Click the note to edit it, click `✕` to
-  delete. A **Clear all** button at the top wipes the slate.
-- **Bottom:** a structured prompt that updates live with every note. A
-  **Copy Prompt** button. Click — your clipboard now has the prompt.
+- **Topbar:** pencil-toggle button — annotation mode default ON. Click
+  to turn off (then you read the article normally, follow links, etc.).
+  A second button opens the sidebar panel.
+- **Article body:** the artifact rendered as a proper article — headings,
+  paragraphs, lists, tables, code blocks, blockquotes. Hover any element
+  in mode and it highlights. To anchor on a specific phrase, **select
+  the text first**, then click. Otherwise the whole element becomes the
+  anchor.
+- **Form popover** appears at the cursor with:
+  - **Section** (auto-detected from the nearest h1/h2 above).
+  - **Anchored to** — the exact text you selected, or the element's
+    first ~200 chars if you didn't select.
+  - **Three intent buttons:** **Fiks** (something is wrong — fix it),
+    **Endre** (change the wording / content), **Spørsmål** (an open
+    question — clarify or answer). Colored: red / orange / blue.
+  - **Comment** textarea (optional but helpful).
+  - **Cancel** / **Save**. Save stays disabled until you pick an intent.
+    Shortcut: `⌘Enter` to save, `Esc` to cancel.
+- **Annotated elements** get an amber highlight + a number badge in the
+  margin showing how many annotations target that element.
+- **Sidebar panel** (Show annotations) — every annotation grouped by
+  section, in document order. Each card shows the intent badge
+  (colored), the anchored snippet (mono-quote), the comment text, and a
+  delete button. Click a card to scroll the article to that element and
+  flash it.
+- **Copy Prompt** at the foot of the panel — assembles every annotation
+  into one structured markdown prompt and copies it to your clipboard.
+- **Clear all** wipes every annotation (after confirm).
 - **Persistence:** every annotation is saved to browser `localStorage`
-  keyed on the artifact's absolute path. Refresh the tab or close the
-  browser and re-open — your notes are still there.
+  keyed on the artifact's absolute path (`voyage-annotate:v2:<abs path>`).
+  Refresh the tab or close the browser and re-open — your work is there.
 
-You write your notes, click Copy Prompt, paste back into Claude. Claude
-revises the `.md` freehand from your notes. **The operator drives every
-annotation.** Claude never pre-generates suggestions in this flow.
+You select / click, pick intent, write comment, repeat. When you're
+done, Copy Prompt, paste back into this chat. Claude revises the `.md`
+freehand from your notes. **The operator drives every annotation.**
+Claude never pre-generates suggestions in this flow.
 
-> **What v5.0.2 changed from v5.0.1.** v5.0.0 added a read-only HTML
-> render that didn't afford annotation. v5.0.1 deleted that and pointed
-> operators at `/playground document-critique` — but the `document-critique`
-> template pre-generates **Claude's** suggestions and asks the operator to
-> approve/reject them. That's "Claude leads, operator reacts" — the
-> opposite of what was asked for. v5.0.2 ships `scripts/annotate.mjs`, a
-> self-contained zero-dependency operator-annotation HTML generator. The
-> operator clicks lines, writes their own notes, copies a structured prompt
-> with every note. No Claude-generated suggestions in the loop.
->
-> **Still removed from v5.0.0 onward:** the v4.2/v4.3 bespoke playground SPA,
-> `/trekrevise`, Handover 8 (annotation → revision), the supporting `lib/`
-> modules, and the Playwright e2e suite. See [CHANGELOG.md](CHANGELOG.md)
-> § v5.0.0, § v5.0.1, and § v5.0.2.
+> **What v5.0.3 changed from v5.0.2.** v5.0.2 was operator-led but the UX
+> was too thin — click a line, type a freeform note, save. The reference
+> the operator pointed at (`~/repos/claude-code-100x/claude-code-100x/build-site.js`)
+> already had the right pattern: pencil-toggle, selection capture, three
+> intent categories, popover form, structured markdown export. v5.0.3
+> rebuilds `scripts/annotate.mjs` against that reference. v5.0.0 / v5.0.1
+> / v5.0.2 are all superseded; only the v5.0.0 removals (bespoke
+> playground SPA, `/trekrevise`, Handover 8, supporting `lib/` modules,
+> Playwright e2e + devDeps) stay. See [CHANGELOG.md](CHANGELOG.md)
+> § v5.0.0 → § v5.0.3.
 
 ---
 
diff --git a/plugins/voyage/agents/architecture-mapper.md b/plugins/voyage/agents/architecture-mapper.md
index 0da6f57..2fafd05 100644
--- a/plugins/voyage/agents/architecture-mapper.md
+++ b/plugins/voyage/agents/architecture-mapper.md
@@ -21,7 +21,7 @@ description: |
   Direct architecture analysis request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: cyan
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/agents/brief-conformance-reviewer.md b/plugins/voyage/agents/brief-conformance-reviewer.md
index 1c60e0c..6259d07 100644
--- a/plugins/voyage/agents/brief-conformance-reviewer.md
+++ b/plugins/voyage/agents/brief-conformance-reviewer.md
@@ -5,7 +5,7 @@ description: |
   against the task brief — every Success Criterion must trace to delivered
   code, every Non-Goal must remain unbuilt. Emits findings with rule_keys
   from the canonical RULE_CATALOGUE. Never praises.
-model: sonnet
+model: opus
 color: magenta
 tools: ["Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/brief-reviewer.md b/plugins/voyage/agents/brief-reviewer.md
index 6cc8ebf..bd1f3b1 100644
--- a/plugins/voyage/agents/brief-reviewer.md
+++ b/plugins/voyage/agents/brief-reviewer.md
@@ -23,7 +23,7 @@ description: |
   Brief review request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: magenta
 tools: ["Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/code-correctness-reviewer.md b/plugins/voyage/agents/code-correctness-reviewer.md
index d8dac3d..f0c938f 100644
--- a/plugins/voyage/agents/code-correctness-reviewer.md
+++ b/plugins/voyage/agents/code-correctness-reviewer.md
@@ -6,7 +6,7 @@ description: |
   cross-file regressions, test coverage gaps, placeholder code, security
   surface, hidden dependencies. Cites file:line for every finding. Never
   praises.
-model: sonnet
+model: opus
 color: red
 tools: ["Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/community-researcher.md b/plugins/voyage/agents/community-researcher.md
index c2a3e54..6317d86 100644
--- a/plugins/voyage/agents/community-researcher.md
+++ b/plugins/voyage/agents/community-researcher.md
@@ -24,7 +24,7 @@ description: |
   finds the practical signal that helps teams make adoption decisions.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: green
 tools: ["WebSearch", "WebFetch", "mcp__tavily__tavily_search", "mcp__tavily__tavily_research"]
 ---
diff --git a/plugins/voyage/agents/contrarian-researcher.md b/plugins/voyage/agents/contrarian-researcher.md
index f589c6f..b0b9f95 100644
--- a/plugins/voyage/agents/contrarian-researcher.md
+++ b/plugins/voyage/agents/contrarian-researcher.md
@@ -24,7 +24,7 @@ description: |
   but to ensure the final recommendation is genuinely considered.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: red
 tools: ["WebSearch", "WebFetch", "mcp__tavily__tavily_search", "mcp__tavily__tavily_research"]
 ---
diff --git a/plugins/voyage/agents/convention-scanner.md b/plugins/voyage/agents/convention-scanner.md
index 9abc32e..686715f 100644
--- a/plugins/voyage/agents/convention-scanner.md
+++ b/plugins/voyage/agents/convention-scanner.md
@@ -23,7 +23,7 @@ description: |
   Direct convention discovery request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: yellow
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/agents/dependency-tracer.md b/plugins/voyage/agents/dependency-tracer.md
index c390d70..7185894 100644
--- a/plugins/voyage/agents/dependency-tracer.md
+++ b/plugins/voyage/agents/dependency-tracer.md
@@ -21,7 +21,7 @@ description: |
   Impact analysis request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: blue
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/agents/docs-researcher.md b/plugins/voyage/agents/docs-researcher.md
index 4e40386..364a3e8 100644
--- a/plugins/voyage/agents/docs-researcher.md
+++ b/plugins/voyage/agents/docs-researcher.md
@@ -23,7 +23,7 @@ description: |
   microsoft_docs_fetch) that docs-researcher uses for higher-quality results.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: blue
 tools: ["WebSearch", "WebFetch", "Read", "mcp__tavily__tavily_search", "mcp__tavily__tavily_research", "mcp__microsoft-learn__microsoft_docs_search", "mcp__microsoft-learn__microsoft_docs_fetch"]
 ---
diff --git a/plugins/voyage/agents/gemini-bridge.md b/plugins/voyage/agents/gemini-bridge.md
index b9c0c6a..a15de55 100644
--- a/plugins/voyage/agents/gemini-bridge.md
+++ b/plugins/voyage/agents/gemini-bridge.md
@@ -24,7 +24,7 @@ description: |
   Direct request for Gemini research on a complex architectural question triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: magenta
 tools: ["mcp__gemini-mcp__gemini_deep_research", "mcp__gemini-mcp__gemini_get_research_status", "mcp__gemini-mcp__gemini_get_research_result", "mcp__gemini-mcp__gemini_research_followup"]
 ---
diff --git a/plugins/voyage/agents/git-historian.md b/plugins/voyage/agents/git-historian.md
index f64c31a..9971a41 100644
--- a/plugins/voyage/agents/git-historian.md
+++ b/plugins/voyage/agents/git-historian.md
@@ -21,7 +21,7 @@ description: |
   Git history analysis request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: yellow
 tools: ["Bash", "Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/plan-critic.md b/plugins/voyage/agents/plan-critic.md
index c8a3b28..ac382d9 100644
--- a/plugins/voyage/agents/plan-critic.md
+++ b/plugins/voyage/agents/plan-critic.md
@@ -21,7 +21,7 @@ description: |
   Plan review request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: red
 tools: ["Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/planning-orchestrator.md b/plugins/voyage/agents/planning-orchestrator.md
index d7f6abb..50afa89 100644
--- a/plugins/voyage/agents/planning-orchestrator.md
+++ b/plugins/voyage/agents/planning-orchestrator.md
@@ -137,7 +137,7 @@ medium: default, large: default) rather than dropping agents.
 | `research-scout` | Conditional | Conditional | Conditional | External docs (only when unfamiliar tech detected AND not covered by briefs) |
 | `convention-scanner` | No | Yes | Yes | Coding conventions, naming, style, test patterns |
 
-**Convention Scanner** — use the `convention-scanner` plugin agent (model: "sonnet")
+**Convention Scanner** — use the `convention-scanner` plugin agent (model: "opus")
 for medium+ codebases only. Pass the task description as context.
 
 **research-scout** — launch conditionally if the task involves technologies, APIs,
diff --git a/plugins/voyage/agents/research-scout.md b/plugins/voyage/agents/research-scout.md
index bbde9c0..09efc9a 100644
--- a/plugins/voyage/agents/research-scout.md
+++ b/plugins/voyage/agents/research-scout.md
@@ -21,7 +21,7 @@ description: |
   Research request for external technology triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: blue
 tools: ["WebSearch", "WebFetch", "Read"]
 ---
diff --git a/plugins/voyage/agents/review-coordinator.md b/plugins/voyage/agents/review-coordinator.md
index 4544897..ed6df5d 100644
--- a/plugins/voyage/agents/review-coordinator.md
+++ b/plugins/voyage/agents/review-coordinator.md
@@ -6,7 +6,7 @@ description: |
   applies BOUNDED operations: deduplication, severity ranking, HubSpot
   Judge filters, Cloudflare reasonableness filter, verdict computation.
   Synthesis-level inference across files is forbidden in v1.0.
-model: sonnet
+model: opus
 color: yellow
 tools: ["Read", "Glob", "Grep"]
 ---
@@ -112,6 +112,18 @@ Drop findings that fail ANY of these tests:
 In `quick` mode, skip this pass entirely. Note the skip in the
 Executive Summary so the reader knows reasonableness was not applied.
 
+**High-effort normalization (v5.1.1):** When the review is invoked
+under high-effort mode (`phase_signals[review].effort: high`), Pass 3
+reasonableness filtering is bypassed. To prevent unknown rule_keys
+from polluting downstream plans, the coordinator MUST substitute any
+rule_key not exported from `lib/review/rule-catalogue.mjs:RULE_KEYS`
+with the literal string `PLAN_EXECUTE_DRIFT` (the most general drift
+category from the 12-entry catalogue). The original rule_key is
+preserved in the finding's `original_rule_key` field for diagnostic
+purposes. This normalization happens BEFORE writing review.md,
+ensuring all `rule_key` values in the final review match the
+catalogue.
+
 ### Pass 4 — Compute verdict
 
 Count findings by severity AFTER dedup and filtering. Verdict thresholds:
diff --git a/plugins/voyage/agents/risk-assessor.md b/plugins/voyage/agents/risk-assessor.md
index da697a9..d8f4a56 100644
--- a/plugins/voyage/agents/risk-assessor.md
+++ b/plugins/voyage/agents/risk-assessor.md
@@ -21,7 +21,7 @@ description: |
   Risk analysis request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: yellow
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/agents/scope-guardian.md b/plugins/voyage/agents/scope-guardian.md
index 29b4302..789c228 100644
--- a/plugins/voyage/agents/scope-guardian.md
+++ b/plugins/voyage/agents/scope-guardian.md
@@ -21,7 +21,7 @@ description: |
   Scope verification request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: magenta
 tools: ["Read", "Glob", "Grep"]
 ---
diff --git a/plugins/voyage/agents/security-researcher.md b/plugins/voyage/agents/security-researcher.md
index 6338ee0..d960c0d 100644
--- a/plugins/voyage/agents/security-researcher.md
+++ b/plugins/voyage/agents/security-researcher.md
@@ -23,7 +23,7 @@ description: |
   using CVE databases, OWASP categories, and verified audit reports.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: red
 tools: ["WebSearch", "WebFetch", "mcp__tavily__tavily_search", "mcp__tavily__tavily_research"]
 ---
diff --git a/plugins/voyage/agents/session-decomposer.md b/plugins/voyage/agents/session-decomposer.md
index a3e1d74..fb82457 100644
--- a/plugins/voyage/agents/session-decomposer.md
+++ b/plugins/voyage/agents/session-decomposer.md
@@ -22,7 +22,7 @@ description: |
   Plan decomposition request for parallel headless execution.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: green
 tools: ["Read", "Glob", "Grep", "Write"]
 ---
diff --git a/plugins/voyage/agents/task-finder.md b/plugins/voyage/agents/task-finder.md
index c81977b..f0a585b 100644
--- a/plugins/voyage/agents/task-finder.md
+++ b/plugins/voyage/agents/task-finder.md
@@ -22,7 +22,7 @@ description: |
   Direct code discovery request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: green
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/agents/test-strategist.md b/plugins/voyage/agents/test-strategist.md
index 1db4bb5..b95e0cb 100644
--- a/plugins/voyage/agents/test-strategist.md
+++ b/plugins/voyage/agents/test-strategist.md
@@ -21,7 +21,7 @@ description: |
   Test planning request triggers the agent.
   </commentary>
   </example>
-model: sonnet
+model: opus
 color: green
 tools: ["Read", "Glob", "Grep", "Bash"]
 ---
diff --git a/plugins/voyage/commands/trekbrief.md b/plugins/voyage/commands/trekbrief.md
index 0036747..edafd94 100644
--- a/plugins/voyage/commands/trekbrief.md
+++ b/plugins/voyage/commands/trekbrief.md
@@ -288,6 +288,118 @@ Phase 3 complete: {N} questions asked across {M} sections.
 Proceeding to draft and review.
 ```
 
+## Phase 3.5 — Per-phase effort dialog
+
+Phase 3.5 is the v5.1 entry-point for **adaptive-depth execution**. After
+Phase 3 has gathered intent / goal / success criteria / research plan, the
+operator commits an effort level and (optional) model per downstream phase
+(`research`, `plan`, `execute`, `review`). The committed signals are written
+to brief frontmatter as a `phase_signals:` list that the four downstream
+commands read via their `## Composition rule (v5.1)` section.
+
+### State requirements
+
+Before entering Phase 3.5 the following must be populated:
+
+- `state.intent` — the Phase 3 Intent answer (1+ paragraph)
+- `state.goal` — the Phase 3 Goal answer
+- `state.success_criteria` — at least one falsifiable SC
+- `state.research_plan.topics` — list (may be empty)
+
+If any are absent: skip Phase 3.5 entirely and write `phase_signals_partial:
+true` to the draft frontmatter. Do not block.
+
+### --quick mode
+
+If the operator launched with `--quick`: skip Phase 3.5 entirely and
+auto-write `phase_signals_partial: true` to draft frontmatter. The brief
+will satisfy the v5.1 sequencing gate without going through the dialog.
+
+### Default-derivation heuristic (LLM judgment, not algorithmic)
+
+Before each phase question, propose a default tier marked `(default)`. Use
+these signals — they are weak heuristics, not rules:
+
+- `research_topics_count` → high (`high`), low (`low`), absent (`low`)
+- `sc_count` (count of falsifiable SCs) → high (≥6 ⇒ `high`), low (≤2 ⇒ `low`)
+- Goal complexity: keywords like "rewrite", "migration", "refactor across",
+  "new platform" ⇒ `high`; "typo", "small bugfix", "docs touch-up" ⇒ `low`
+- Otherwise: `standard`
+
+Mix these into one proposed default per phase. Document the proposed tier
+in the question body so the operator sees why it was picked.
+
+### The loop — 4 tier-coupled AskUserQuestion calls
+
+Loop over `[research, plan, execute, review]` in order. For each phase,
+issue one `AskUserQuestion` with 3 options:
+
+| Option | Maps to phase_signals entry |
+|--------|----------------------------|
+| **Low effort** | `{phase: <name>, effort: low, model: sonnet}` |
+| **Standard (default)** | `{phase: <name>, effort: standard}` *(model omitted — composition falls through to profile)* |
+| **High effort** | `{phase: <name>, effort: high, model: opus}` |
+
+The proposed tier per phase (from the default-derivation heuristic) MUST be
+labelled `(default)` in the option list so the operator can one-click
+accept. Commit the chosen tier immediately to an in-memory `effort_state`
+dict — no bulk summary-before-commit. The loop is interruptible.
+
+The mapping table is canonical:
+- `low → {effort: low, model: sonnet}` (force sonnet for the low-cost path)
+- `standard → {effort: standard}` (model omitted; composition rule resolves via profile)
+- `high → {effort: high, model: opus}` (force opus for the high-confidence path)
+
+### Force-stop handling
+
+If during any of the four `AskUserQuestion` calls the operator says "stop",
+"skip", "enough", "just write it", or similar, do NOT exit silently — apply
+the Phase 4f force-stop pattern verbatim:
+
+```
+You stopped before committing per-phase signals. Remaining phases:
+  - {list of phases not yet answered}
+
+The brief will still be valid (v5.1 supports `phase_signals_partial: true`
+as a force-stop record). Downstream commands will fall back to the profile
+resolver for the un-committed phases.
+
+Continue anyway?
+```
+
+Then `AskUserQuestion`:
+
+| Option | Action |
+|--------|--------|
+| **Answer one more phase** | Return to the next un-answered phase question. |
+| **Stop now (record partial)** | Drop any in-progress `effort_state` and set `phase_signals_partial: true` in draft frontmatter. Mutually exclusive with `phase_signals`. Break Phase 3.5. |
+
+This pattern matches Step 4f (line 436-458) so the force-stop UX is
+identical across both surfaces.
+
+### Hand-off to Phase 4a
+
+If `effort_state` is fully populated (4 commits, no force-stop): write a
+`phase_signals:` block to draft frontmatter — one entry per phase,
+preserving the canonical-mapping form above. Omit `model:` for standard
+tier (composition falls through to profile).
+
+If `phase_signals_partial: true` was set: write that single line to draft
+frontmatter and skip the `phase_signals:` block (mutually exclusive per
+validator).
+
+Phase 4a (Step 4a — Draft in memory) reads from `effort_state` /
+`phase_signals_partial` and incorporates the appropriate frontmatter block
+into the draft brief.
+
+### Sequencing gate (downstream)
+
+`brief_version: 2.1` activates the validator's sequencing gate. If the
+final brief reaches `/trekplan`, `/trekresearch`, `/trekexecute`, or
+`/trekreview` WITHOUT `phase_signals` and WITHOUT `phase_signals_partial:
+true`, the validator emits `BRIEF_V51_MISSING_SIGNALS` and the command
+halts with a friendly hint pointing back to `/trekbrief`.
+
 ## Phase 4 — Draft, review, and revise
 
 Phase 4 runs a **draft → brief-reviewer → revise** loop. The draft is
diff --git a/plugins/voyage/commands/trekendsession.md b/plugins/voyage/commands/trekendsession.md
index 7a4188d..122fbb8 100644
--- a/plugins/voyage/commands/trekendsession.md
+++ b/plugins/voyage/commands/trekendsession.md
@@ -2,7 +2,7 @@
 name: trekendsession
 description: Mark the current session as complete and write session-state pointing at the next session. Helper for informal multi-session flows.
 argument-hint: "<next-brief-path> <next-label> | --help"
-model: sonnet
+model: opus
 ---
 
 # Voyage End-Session Local v1.0
diff --git a/plugins/voyage/commands/trekexecute.md b/plugins/voyage/commands/trekexecute.md
index 27f1514..d6b8115 100644
--- a/plugins/voyage/commands/trekexecute.md
+++ b/plugins/voyage/commands/trekexecute.md
@@ -1519,6 +1519,62 @@ VOYAGE_PROFILE=balanced /trekexecute --project ...
 Stats records emit `profile`, `phase_models`, and `profile_source` per
 Phase 9 record.
 
+## Composition rule (v5.1)
+
+Independent of the profile system. When `brief.md` carries
+`phase_signals` (brief_version ≥ 2.1), each downstream phase resolves
+effort + model as:
+
+```
+effort_for_phase = brief.phase_signals[<phase>]?.effort ?? 'standard'
+model_for_phase  = brief.phase_signals[<phase>]?.model  ?? profile.phase_models[<phase>]
+```
+
+The brief signal wins per-phase when present; the profile fills any
+gaps. Composition is mechanically resolved via
+`node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs`
+invoked in Phase 2.4; the resolved JSON is captured as `phase_signal_result`
+and consumed when picking the orchestration model + parallel-wave
+strategy. The resolver controls only the orchestrator — sub-agents read
+`model:` from their own `agents/*.md` frontmatter (still pinned to `opus`).
+
+For `/trekexecute` specifically: `effort == 'low'` activates `--gates open`
++ sequential-only execution (no worktree-isolated parallel waves — runs
+all sessions in a single foreground loop). `effort == 'standard'` (or
+absent) → no change (default execution strategy applies). `effort == 'high'`
+activates the high-effort behavior documented under `### High-effort
+behavior (v5.1.1)` below.
+
+### Sequencing gate surface
+
+When `/trekexecute --project <dir>` is invoked, ALWAYS run
+`brief-validator.mjs --soft --json` against `{dir}/brief.md`. If
+`BRIEF_V51_MISSING_SIGNALS` appears in `errors` (brief_version ≥ 2.1
+without `phase_signals` or `phase_signals_partial: true`), halt with:
+`Brief is brief_version 2.1 but does not carry phase_signals — re-run
+/trekbrief to commit them (Phase 3.5).` Enforcement is validator-only;
+commands surface, don't re-enforce.
+
+### High-effort behavior (v5.1.1)
+
+When `phase_signal_result.effort == 'high'` for the `execute` phase,
+set `gates_mode = 'closed'` automatically (equivalent to passing
+`--gates closed` on the command line). All autonomy boundaries become
+operator-stopping points: manifest-audit FAIL halts immediately, the
+main-merge gate pauses for operator confirm, and Phase 7.5
+manifest-audit runs in its strictest form (fails on ANY mismatch, not
+just deltas above threshold). Operator explicit `--gates` flag still
+wins over the brief signal — if the operator passes `--gates open` on
+the command line while `phase_signal_result.effort == 'high'`, the
+flag takes precedence and the override is logged to
+`${CLAUDE_PLUGIN_DATA}/trekexecute-stats.jsonl` as
+`{event: 'gates_mode_flag_override', flag: 'open', signal_effort: 'high'}`.
+
+Standard effort (or absent): use `gates_mode = 'adaptive'` (the
+default). Low effort: `gates_mode = 'open'` plus sequential-only
+execution (no parallel waves) — existing `--quick`-equivalent
+code-path.
+
 ## Hard rules
 
 1. **No AskUserQuestion for execution decisions.** All execution decisions come
diff --git a/plugins/voyage/commands/trekplan.md b/plugins/voyage/commands/trekplan.md
index 667cb86..b7e30ce 100644
--- a/plugins/voyage/commands/trekplan.md
+++ b/plugins/voyage/commands/trekplan.md
@@ -66,6 +66,11 @@ Parse `$ARGUMENTS` for mode flags. Order of precedence:
      # Brief schema sanity check (frontmatter + state machine, soft on body sections)
      node ${CLAUDE_PLUGIN_ROOT}/lib/validators/brief-validator.mjs --soft --json "{dir}/brief.md"
 
+     # v5.1.1 — resolve per-phase brief-signal for plan phase. Result is
+     # captured as phase_signal_result and used at Agent-spawn sites below
+     # to override the orchestrator model when a signal is present.
+     node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs --brief "{dir}/brief.md" --phase plan --json
+
      # Research briefs (if any) — drift-warn only, none of these block the run
      [ -d "{dir}/research" ] && \
        node ${CLAUDE_PLUGIN_ROOT}/lib/validators/research-validator.mjs --soft --dir "{dir}/research" --json
@@ -501,7 +506,7 @@ ownership, hot files, and active branches that may affect planning."
 
 ### Launch for medium+ codebases (50+ files):
 
-**Convention Scanner** — use the `convention-scanner` plugin agent (model: "sonnet")
+**Convention Scanner** — use the `convention-scanner` plugin agent (model: "opus")
 for medium+ codebases only.
 Provide concrete examples from the codebase, not generic advice."
 
@@ -538,7 +543,7 @@ Common reasons for deep-dives:
 - A test pattern was identified but the test infrastructure needs more detail
 - A risk was flagged but the actual impact needs verification
 
-For each significant gap, spawn a targeted deep-dive agent (model: "sonnet",
+For each significant gap, spawn a targeted deep-dive agent (model: "opus",
 subagent_type: "Explore") with a narrow, specific brief.
 
 Launch up to 3 deep-dive agents in parallel. If no gaps exist, skip this phase
@@ -894,6 +899,60 @@ VOYAGE_PROFILE=balanced /trekplan --project ...
 Stats records emit `profile`, `phase_models`, `parallel_agents`, and
 `profile_source` so operators can audit which profile drove which session.
 
+## Composition rule (v5.1)
+
+Independent of the profile system. When `brief.md` carries
+`phase_signals` (brief_version ≥ 2.1), each downstream phase resolves
+effort + model as:
+
+```
+effort_for_phase = brief.phase_signals[<phase>]?.effort ?? 'standard'
+model_for_phase  = brief.phase_signals[<phase>]?.model  ?? profile.phase_models[<phase>]
+```
+
+The brief signal wins per-phase when present; the profile fills any
+gaps. Composition is mechanically resolved via
+`node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs`
+invoked in Phase 1; the resolved JSON is captured as `phase_signal_result`
+and passed to `Agent` tool calls explicitly. The resolver controls only
+the orchestrator and the model parameter at Agent-spawn sites — sub-agents
+otherwise read `model:` from their own `agents/*.md` frontmatter (still
+pinned to `opus`).
+
+For `/trekplan` specifically: `effort == 'low'` activates the existing
+`--quick`-equivalent code-path (skip Phase 5 agent swarm — plan directly
+without exploration agents). `effort == 'standard'` (or absent) → no
+change. `effort == 'high'` activates the high-effort behavior documented
+under `### High-effort behavior (v5.1.1)` below.
+
+### Sequencing gate surface
+
+Phase 1 already calls `brief-validator.mjs --soft`. If the validator
+returns `BRIEF_V51_MISSING_SIGNALS` in `errors` (brief_version ≥ 2.1
+without `phase_signals` or `phase_signals_partial: true`), halt with a
+one-line message: `Brief is brief_version 2.1 but does not carry phase_signals
+— re-run /trekbrief to commit them (Phase 3.5).` Enforcement is
+validator-only; this surface just makes the friendly hint readable.
+
+### High-effort behavior (v5.1.1)
+
+When `phase_signal_result.effort == 'high'` for the `plan` phase, after
+Phase 9 (plan-critic + scope-guardian dedup pass) runs to completion on
+the post-revision plan, run an ADDITIONAL `gemini-bridge` plan-review
+pass on the post-revision plan. Surface its findings as a separate
+`## Adversarial Pass 2 (gemini-bridge, v5.1.1 high-effort)` section
+appended to plan.md before the trailing JSON block.
+
+Rationale (per risk-assessor finding + Decision B substitution
+2026-05-14): the originally-considered "extra plan-critic-iterasjon"
+risked a revision-loop because plan-critic dedup keys on
+`(file, line, rule_key)` triplets and post-revision line numbers shift.
+The gemini-bridge pass is independent (different agent, different
+perspective) and does not re-tread the same dedup space — it surfaces
+genuinely new findings rather than re-emitting closed ones.
+
+Standard and low effort: do NOT run the additional pass.
+
 ## Hard rules
 
 - **Brief-driven**: Every plan decision must trace back to a section of the
@@ -903,8 +962,10 @@ Stats records emit `profile`, `phase_models`, `parallel_agents`, and
   inadequate, stop and ask the user to run `/trekbrief` again.
 - **Scope**: Only explore the current working directory and its subdirectories.
   Never read files outside the repo (no ~/.env, no credentials, no other repos).
-- **Cost**: Sonnet for all agents (exploration, deep-dives, research, critics).
-  Opus only runs in the main thread for synthesis and planning.
+- **Cost**: Sub-agents use their pinned `model:` frontmatter (currently `opus`).
+  When `phase_signals[<phase>].model` is set, the orchestrator AND Agent-spawn
+  sites use the resolved model (`phase_signal_result.model`) for that phase.
+  Frontmatter is the default; brief signal is the per-phase override.
 - **Privacy**: Never log, store, or repeat file contents that look like
   secrets, tokens, or credentials. Never log prompt text.
 - **No premature execution**: Do not modify any project files until the user
diff --git a/plugins/voyage/commands/trekresearch.md b/plugins/voyage/commands/trekresearch.md
index 14f6166..f5a7169 100644
--- a/plugins/voyage/commands/trekresearch.md
+++ b/plugins/voyage/commands/trekresearch.md
@@ -54,6 +54,16 @@ Supported flags:
    ```
    Create `{dir}/research/` if it does not already exist.
 
+   When `{dir}/brief.md` exists, ALWAYS run the brief-validator (soft mode)
+   AND the phase-signal-resolver for this command's phase before continuing.
+   The resolver's JSON output is captured as `phase_signal_result` and used
+   at Agent-spawn sites in Phase 4 to inject the brief-resolved model:
+
+   ```bash
+   node ${CLAUDE_PLUGIN_ROOT}/lib/validators/brief-validator.mjs --soft --json "{dir}/brief.md"
+   node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs --brief "{dir}/brief.md" --phase research --json
+   ```
+
 6. `--gates` — autonomy control. When present, set `gates_mode = true`. The
    research command will pause after each topic completes ("Topic N
    complete. Proceed to topic N+1? (yes/no)"). Default `gates_mode = false`
@@ -291,7 +301,7 @@ other agents — the value of Gemini is independence.
 ### Launch rules
 
 - Launch ALL selected agents **in parallel** in a single message
-- Use model: "sonnet" for all sub-agents (the orchestrator runs on Opus)
+- Use model: "opus" for all sub-agents (the orchestrator runs on Opus)
 - Scale maxTurns by codebase size for local agents (same as trekplan):
   small = halved, medium/large = default
 - convention-scanner: medium+ codebases only (50+ files)
@@ -301,7 +311,7 @@ other agents — the value of Gemini is independence.
 Review all agent results. Identify knowledge gaps — areas where findings are
 thin, contradictory, or missing.
 
-For each significant gap, launch a targeted follow-up agent (model: "sonnet")
+For each significant gap, launch a targeted follow-up agent (model: "opus")
 with a narrow, specific brief. Maximum 2 follow-ups.
 
 If no gaps exist, skip: "Initial research sufficient — no follow-ups needed."
@@ -435,6 +445,60 @@ Stats records emit `profile`, `phase_models`, `parallel_agents`,
 `external_research_enabled`, and `profile_source` so operators can audit
 which profile drove which session.
 
+## Composition rule (v5.1)
+
+Independent of the profile system. When `brief.md` carries
+`phase_signals` (brief_version ≥ 2.1), each downstream phase resolves
+effort + model as:
+
+```
+effort_for_phase = brief.phase_signals[<phase>]?.effort ?? 'standard'
+model_for_phase  = brief.phase_signals[<phase>]?.model  ?? profile.phase_models[<phase>]
+```
+
+The brief signal wins per-phase when present; the profile fills any
+gaps. Composition is mechanically resolved via
+`node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs`
+invoked in Phase 1; the resolved JSON is captured as `phase_signal_result`
+and passed to `Agent` tool calls explicitly. The resolver controls only
+the orchestrator and the model parameter at Agent-spawn sites — sub-agents
+otherwise read `model:` from their own `agents/*.md` frontmatter (still
+pinned to `opus`).
+
+For `/trekresearch` specifically: `effort == 'low'` activates the
+existing `--quick`-equivalent code-path (inline research, no agent swarm).
+`effort == 'standard'` (or absent) → no change. `effort == 'high'`
+activates the high-effort behavior documented under `### High-effort
+behavior (v5.1.1)` below.
+
+### Sequencing gate surface
+
+When `/trekresearch --project <dir>` is invoked and `{dir}/brief.md`
+exists, ALWAYS run `brief-validator.mjs --soft --json` against it.
+If `BRIEF_V51_MISSING_SIGNALS` appears in `errors` (brief_version ≥ 2.1
+without `phase_signals` or `phase_signals_partial: true`), halt with:
+`Brief is brief_version 2.1 but does not carry phase_signals — re-run
+/trekbrief to commit them (Phase 3.5).` Enforcement is validator-only;
+commands surface, don't re-enforce.
+
+### High-effort behavior (v5.1.1)
+
+When `phase_signal_result.effort == 'high'` for the `research` phase,
+run the FULL swarm regardless of normal triggering rules: 5 local
+agents + 4 external agents + 1 bridge agent, AND force
+`contrarian-researcher` AND `gemini-bridge` to always-on. Normally
+`contrarian-researcher` triggers conditionally when a leading
+recommendation is emerging from initial agents; in high-effort mode it
+runs unconditionally so the final brief always carries an adversarial
+counter-evidence pass. Similarly, `gemini-bridge` normally activates on
+significant architectural questions or when triangulation value is
+high; in high-effort mode it runs unconditionally to provide an
+independent second opinion.
+
+Standard effort (or absent): use the existing conditional triggers.
+Low effort: inline research only, no agent swarm (existing
+`--quick`-equivalent code-path).
+
 ## Hard rules
 
 - **No planning:** This command produces research briefs, not implementation plans.
@@ -444,7 +508,10 @@ which profile drove which session.
   Triangulate AFTER independent research.
 - **Graceful degradation:** If MCP tools are unavailable (Tavily, Gemini, MS Learn),
   proceed with available tools and note limitations in brief metadata.
-- **Cost:** Sonnet for all sub-agents. Opus only in the main command/orchestrator.
+- **Cost:** Sub-agents use their pinned `model:` frontmatter (currently `opus`).
+  When `phase_signals[<phase>].model` is set, the orchestrator AND Agent-spawn
+  sites use the resolved model (`phase_signal_result.model`) for that phase.
+  Frontmatter is the default; brief signal is the per-phase override.
 - **Privacy:** Never log secrets, tokens, or credentials.
 - **Honesty:** If the question is trivially answerable, say so. Don't inflate research.
 - **Scope of codebase:** Only analyze the current working directory for local research.
diff --git a/plugins/voyage/commands/trekreview.md b/plugins/voyage/commands/trekreview.md
index 73bf18d..4fd24b3 100644
--- a/plugins/voyage/commands/trekreview.md
+++ b/plugins/voyage/commands/trekreview.md
@@ -83,6 +83,11 @@ as the file is parseable:
 
 ```bash
 node ${CLAUDE_PLUGIN_ROOT}/lib/validators/brief-validator.mjs --soft --json "{brief_path}"
+
+# v5.1.1 — resolve the review-phase brief signal. The JSON is captured as
+# phase_signal_result and used in Phase 7 at the reviewer-launch site to
+# inject the brief-resolved model.
+node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs --brief "{brief_path}" --phase review --json
 ```
 
 Read the JSON output. If `valid: false` AND any error has code
@@ -357,6 +362,61 @@ VOYAGE_PROFILE=premium /trekreview --project ...
 
 Stats records emit `profile` and `profile_source`.
 
+## Composition rule (v5.1)
+
+Independent of the profile system. When `brief.md` carries
+`phase_signals` (brief_version ≥ 2.1), each downstream phase resolves
+effort + model as:
+
+```
+effort_for_phase = brief.phase_signals[<phase>]?.effort ?? 'standard'
+model_for_phase  = brief.phase_signals[<phase>]?.model  ?? profile.phase_models[<phase>]
+```
+
+The brief signal wins per-phase when present; the profile fills any
+gaps. Composition is mechanically resolved via
+`node ${CLAUDE_PLUGIN_ROOT}/lib/profiles/phase-signal-resolver.mjs`
+invoked in Phase 2; the resolved JSON is captured as `phase_signal_result`
+and passed to `Agent` tool calls explicitly. The resolver controls only
+the orchestrator and the model parameter at Agent-spawn sites — sub-agents
+otherwise read `model:` from their own `agents/*.md` frontmatter (still
+pinned to `opus`).
+
+For `/trekreview` specifically: `effort == 'low'` activates the existing
+`--quick`-equivalent code-path (skip the brief-conformance reviewer; run
+correctness-only). `effort == 'standard'` (or absent) → no change.
+`effort == 'high'` activates the high-effort behavior documented under
+`### High-effort behavior (v5.1.1)` below.
+
+### Sequencing gate surface
+
+Phase 1 already calls `brief-validator.mjs --soft` against `{brief_path}`.
+If the validator returns `BRIEF_V51_MISSING_SIGNALS` in `errors`
+(brief_version ≥ 2.1 without `phase_signals` or `phase_signals_partial:
+true`), halt with: `Brief is brief_version 2.1 but does not carry
+phase_signals — re-run /trekbrief to commit them (Phase 3.5).`
+Enforcement is validator-only; this surface just makes the friendly hint
+readable.
+
+### High-effort behavior (v5.1.1)
+
+When `phase_signal_result.effort == 'high'` for the `review` phase,
+skip Pass 3 (Cloudflare reasonableness filter) in
+`agents/review-coordinator.md`. Passes 1, 2, and 4 still run.
+Rationale: high-effort review trusts the operator to weigh borderline
+findings rather than have the coordinator drop them. To prevent
+unknown `rule_key` values from polluting downstream remediation plans
+(Handover 6), the coordinator applies its v5.1.1 high-effort
+normalization rule — substituting unknown `rule_key` values with the
+literal string `PLAN_EXECUTE_DRIFT` (the most general drift category
+in the 12-entry catalogue) and preserving the original in
+`original_rule_key`. See `agents/review-coordinator.md` § Pass 3
+"High-effort normalization (v5.1.1)" for the full normalization spec.
+
+Standard effort (or absent): run all 4 passes as usual.
+Low effort: skip the brief-conformance reviewer entirely (existing
+`--quick`-equivalent code-path).
+
 ## Hard rules
 
 - **Brief is the contract.** Every finding in the review traces to a
@@ -377,8 +437,10 @@ Stats records emit `profile` and `profile_source`.
   `findings:\n  - a\n  - b`.
 - **Refuse-with-suggestion above 100 files / 100K tokens.** Never run
   blind on a giant diff. Use AskUserQuestion to surface the gate.
-- **Cost.** Sonnet for all sub-agents (reviewers + coordinator). Opus
-  only runs in the main /trekreview command thread.
+- **Cost.** Sub-agents use their pinned `model:` frontmatter (currently `opus`).
+  When `phase_signals[<phase>].model` is set, the orchestrator AND Agent-spawn
+  sites use the resolved model (`phase_signal_result.model`) for that phase.
+  Frontmatter is the default; brief signal is the per-phase override.
 - **Privacy.** Never log secrets, tokens, or credentials in review.md.
   Findings citing files with secret-like content must redact the secret
   in the `detail` field.
diff --git a/plugins/voyage/docs/HANDOVER-CONTRACTS.md b/plugins/voyage/docs/HANDOVER-CONTRACTS.md
index a45eb05..9d2e1f8 100644
--- a/plugins/voyage/docs/HANDOVER-CONTRACTS.md
+++ b/plugins/voyage/docs/HANDOVER-CONTRACTS.md
@@ -10,7 +10,7 @@ Each artifact carries an explicit version field. Schema bumps are coordinated:
 
 | Artifact | Field | Current |
 |---|---|---|
-| `brief.md` | `brief_version` (frontmatter) | `2.0` |
+| `brief.md` | `brief_version` (frontmatter) | `2.1` |
 | `research/*.md` | (implicit; tracked via `type: trekresearch-brief`) | unversioned |
 | `plan.md` | `plan_version` (frontmatter) | `1.7` |
 | `progress.json` | `schema_version` (top-level) | `"1"` |
@@ -67,6 +67,8 @@ Every validator exposes a CLI: `node lib/validators/<name>.mjs --json <path>` re
 | `interview_turns` | number | optional | ≥ 0 | |
 | `source` | string | optional | `interview \| manual` | |
 | `brief_quality` | string | optional | `complete \| partial` | Set when iteration cap is hit |
+| `phase_signals` | list | optional (v5.1+) | list of `{phase, effort?, model?}` entries | Per-phase effort + model commitment from Phase 3.5. Mutually exclusive with `phase_signals_partial`. |
+| `phase_signals_partial` | bool | optional (v5.1+) | `true` | Force-stop record from Phase 3.5. Mutually exclusive with `phase_signals`. |
 
 **Body invariants:** required sections (validator runs in strict mode at write-time, soft mode at read-time):
 - `## Intent`
@@ -84,11 +86,12 @@ Optional but standard sections: `## Non-Goals`, `## Constraints`, `## Preference
 | Type discriminator | every read | `type === "trekbrief"` |
 | Status enum | every read | `research_status ∈ allowed values` |
 | **State machine** | every read | `research_topics > 0 && research_status === "skipped"` requires `brief_quality === "partial"` |
+| **v5.1 sequencing gate** | every read | `brief_version ≥ 2.1` requires `phase_signals` (list) OR `phase_signals_partial: true` — error `BRIEF_V51_MISSING_SIGNALS` on miss. Validator-only enforcement; commands surface, don't re-enforce. |
 | Body sections | strict only | All `BRIEF_BODY_SECTIONS` present |
 
 **State machine** detail: a brief that says it has research topics but skipped them must explicitly admit it (via `brief_quality: partial`). This is the most common failure mode the validator catches.
 
-**Versioning:** current is `2.0`. There are no live `1.x` briefs; remove legacy paths in next major.
+**Versioning:** current is `2.1` (v5.1 — adds optional `phase_signals` + `phase_signals_partial`). The forward-compat policy in `brief-validator.mjs` header still applies: unknown frontmatter keys flow through silently, so a `2.1` brief still validates against pre-v5.1 consumers. The version bump exists because v2.1 activates the **version-conditional sequencing gate** (above) — the only check in the validator that triggers on `brief_version` rather than field-presence. There are no live `1.x` briefs; remove legacy paths in next major. v5.4 may promote `phase_signals` from optional to required (breaking change → `3.0`).
 
 **Failure modes:**
 - `BRIEF_NOT_FOUND` → consumer halts with a usage message
@@ -97,6 +100,12 @@ Optional but standard sections: `## Non-Goals`, `## Constraints`, `## Preference
 - `BRIEF_MISSING_FIELD` → strict halt; soft-mode warning
 - `BRIEF_STATE_INCOHERENT` → strict halt; soft-mode warning (incoherence will haunt downstream agents)
 - `BRIEF_MISSING_SECTION` → strict halt; soft-mode warning
+- `BRIEF_V51_MISSING_SIGNALS` → strict halt (v5.1+ sequencing gate); soft-mode warning. Commands surface a friendly hint pointing back to `/trekbrief` (Phase 3.5).
+- `BRIEF_INVALID_PHASE_SIGNALS` → strict halt; phase_signals must be a list of `{phase, effort?, model?}` entries.
+- `BRIEF_INVALID_PHASE_SIGNAL_PHASE` → strict halt; phase ∉ `[research, plan, execute, review]`.
+- `BRIEF_INVALID_EFFORT` → strict halt; effort ∉ `[low, standard, high]`.
+- `BRIEF_INVALID_MODEL` → strict halt; model ∉ `BASE_ALLOWED_MODELS` (currently `[sonnet, opus]`).
+- `BRIEF_SIGNALS_MUTUALLY_EXCLUSIVE` → strict halt; cannot set both `phase_signals` and `phase_signals_partial: true`.
 
 ---
 
diff --git a/plugins/voyage/docs/architecture.md b/plugins/voyage/docs/architecture.md
new file mode 100644
index 0000000..0493b4f
--- /dev/null
+++ b/plugins/voyage/docs/architecture.md
@@ -0,0 +1,116 @@
+# Voyage — Architecture, project layout, state, terminology
+
+Imported from `CLAUDE.md` via pointer.
+
+## Quality infrastructure (v3.4.0)
+
+`lib/` contains zero-dep validators, parsers, and autonomy primitives wired into the four commands:
+
+- `lib/util/{frontmatter,result,atomic-write,autonomy-gate}.mjs` — shared YAML-frontmatter parser + Result helpers + `atomicWriteJson(path, obj)` for tmp+rename writes + autonomy-gate state machine (v3.4.0)
+- `lib/parsers/{plan-schema,manifest-yaml,project-discovery,arg-parser,bash-normalize,jaccard,finding-id}.mjs` — pure parsers (no I/O), unit-tested. `manifest-yaml` extended in v3.4.0 with additive `skip_commit_check` + `memory_write` flags (forward-compat: unknown keys ignored)
+- `lib/review/{rule-catalogue,plan-review-dedup}.mjs` — version-pinned rule catalogue (12 keys) + Phase 9 inline dedup helpers (v3.4.0)
+- `lib/stats/event-emit.mjs` — single-source stats event emitter for autonomy-gate transitions and main-merge-gate (v3.4.0)
+- `lib/validators/{brief,research,plan,progress,session-state}-validator.mjs` — schema validators with CLI shims (`node lib/validators/X.mjs --json <path>`)
+- `lib/validators/architecture-discovery.mjs` — drift-WARN external-contract discovery for `architecture/overview.md`
+
+Wiring points (replaces previous prose-grep instructions):
+- `/trekbrief` Phase 4g → `brief-validator` (post-write sanity check)
+- `/trekplan` Phase 1 → `brief-validator --soft`, `research-validator --dir`, `architecture-discovery`
+- `planning-orchestrator` Phase 5.5 → `plan-validator --strict` (replaces 3 `grep -cE` calls)
+- `/trekexecute --validate` → `plan-validator --strict` + `progress-validator`
+
+Tests under `tests/**/*.test.mjs` (~290 tests, 0 deps). `npm test` is the fork-readiness gate. v3.4.0 adds: synthetic determinism fixtures (`tests/synthetic/plan-run-*.md` + `review-run-*.md` + companion `*-determinism.test.mjs` enforcing Jaccard ≥ 0.833 SC7 floor) and hook baseline regression pins (`tests/hooks/{path-guard,bash-guard}.test.mjs` exercising `pre-write-executor.mjs` + `pre-bash-executor.mjs` denylist BLOCK paths).
+
+Doc-consistency test at `tests/lib/doc-consistency.test.mjs` pins agent-table count, command-table coverage, plan_version invariant, settings.json scope cleanliness, Handover 7 presence, and `session-state-validator` CLI shim.
+
+`docs/HANDOVER-CONTRACTS.md` is the single source of truth for the 7 pipeline handovers (brief→research, research→plan, architecture→plan EXTERNAL, plan→execute, progress.json resume, review→plan, `.session-state.local.json`). Read it before changing any artifact format.
+
+`hooks/scripts/pre-compact-flush.mjs` (PreCompact event, CC v2.1.105+) fixes the documented P0 in `docs/trekexecute-v2-observations-from-config-audit-v4.md`: keeps `progress.json` in sync with git history before context compaction so `--resume` works after long conversations. Atomic write, monotonic only, never blocks compaction.
+
+`hooks/scripts/session-title.mjs` (UserPromptSubmit, CC v2.1.94+) sets `sessionTitle` to `voyage:<command>:<slug>` for voyage-command invocations. Helps multi-session headless runs identify themselves in process lists.
+
+`hooks/scripts/post-bash-stats.mjs` (PostToolUse, CC v2.1.97+) appends `duration_ms` for each Bash call into `${CLAUDE_PLUGIN_DATA}/trekexecute-stats.jsonl`. Useful for finding long-running verify or checkpoint commands.
+
+`hooks/scripts/post-compact-flush.mjs` (PostCompact event, v3.4.0) re-injects `.session-state.local.json` after context compaction so multi-session work survives a compaction boundary. Companion to `pre-compact-flush.mjs` (which writes the state file before compaction); together they form the rehydrate cycle that keeps `/trekcontinue` reliable across long-running multi-session work.
+
+## Architecture
+
+**Brief:** 7-phase workflow: Parse mode → Create project dir → Phase 3 completeness loop (section-driven, no question cap) → Phase 3.5 per-phase effort dialog (v5.1) → Phase 4 draft/review/revise with `brief-reviewer` as stop-gate (max 3 iterations; gate = all dimensions ≥ 4 and research plan = 5) → Finalize (`brief.md` on pass, or `brief_quality: partial` on cap/force-stop) → Manual/auto opt-in → Stats. Always interactive. Auto mode runs research + plan inline in the main context (v2.4.0).
+
+**Phase 3.5 (v5.1) — adaptive-depth signals:** Between Phase 3 completeness exit and Phase 4 draft, the operator commits an effort level (`low | standard | high`) and an optional `model` (`sonnet | opus`) per downstream phase (`research`, `plan`, `execute`, `review`) via 4 tier-coupled `AskUserQuestion` calls. The choices land in `brief.md` frontmatter as `phase_signals:` (a list of `{phase, effort?, model?}` entries) when committed, or `phase_signals_partial: true` when the operator force-stops. `brief_version: 2.1` activates the **sequencing gate**: validator emits `BRIEF_V51_MISSING_SIGNALS` if a 2.1-versioned brief lacks both fields. Downstream commands surface a friendly hint pointing back to `/trekbrief` — enforcement is validator-only. Composition is documented prose in each downstream command's `## Composition rule (v5.1)` section: `brief.phase_signals[phase] > profile.phase_models[phase]`. The brief signal wins per-phase when present; the profile fills gaps. `effort == low` activates each command's existing `--quick`-equivalent code-path (`/trekexecute` low-effort = `--gates open` + sequential-only). High-effort behavior is deferred to v5.1.1 per brief Non-Goal.
+
+**Research:** Foreground workflow (v2.4.0): Parse mode → Interview → Parallel research swarm (5 local + 4 external + 1 bridge, spawned from main context) → Follow-ups → Triangulation → Synthesis + brief → Stats. With `--project`, writes to `{dir}/research/NN-slug.md`.
+
+**Plan:** Foreground workflow (v2.4.0): Parse mode (validate brief input) → Codebase sizing → Brief review (`brief-reviewer`) → Parallel exploration (6-8 agents, spawned from main context) → Deep-dives → Synthesis (with architecture-note cross-reference if present) → Planning → Adversarial review (`plan-critic` + `scope-guardian`) → Present/refine → Handoff. With `--project`, writes to `{dir}/plan.md` and auto-detects `{dir}/architecture/overview.md` (produced by an opt-in upstream architect plugin if installed; not bundled).
+
+**Decompose:** Parse plan → Analyze step dependencies → Group into sessions → Identify parallel waves → Generate session specs + dependency graph + launch script.
+
+**Execute:** Parse plan → Security scan (Phase 2.4) → Detect Execution Strategy → Single-session (step loop) or multi-session (parallel waves via `claude -p` with scoped `--allowedTools`) → Phase 7.5 manifest audit → Phase 7.6 bounded recovery (if partial) → Phase 8 atomically writes `progress.json` + `.session-state.local.json` (Handover 7) → Report. With `--project`, reads `{dir}/plan.md`. Phase 2.55 (pre-flight stop) and Phase 4 (entry-condition stop) also write `.session-state.local.json` so `/trekcontinue` can surface the stop and prompt for next steps.
+
+**Continue:** `/trekcontinue` reads `{dir}/.session-state.local.json` (Handover 7), validates schema-v1 via `session-state-validator`, narrates a 3-line summary (project / next-session-label / brief-path), and immediately begins executing the next session. Auto-discovers active project state files under `.claude/projects/*/.session-state.local.json` if no explicit `<project-dir>` argument. Operator-invoked only — never auto-loaded via SessionStart. The `/trekendsession` helper is the informal-flow producer: writes the same state file for ad-hoc multi-session handovers that don't run through `/trekexecute`.
+
+**Operator-UX guarantee (since v5.0.2):** `/trekbrief`, `/trekplan`, and `/trekreview` MUST always emit (a) a plain `file://<abs path>` URL AND (b) a copy-pasteable `open file://<abs path>` command in the final report block. The file:// URL must use an ABSOLUTE path (not relative or `~/`-prefixed) so terminals with cmd+click support (Ghostty, iTerm2, modern Terminal.app) can resolve it without shell interpretation. This is a non-negotiable operator-UX contract — the doc-consistency test pins both forms in all three commands' final report blocks.
+
+**Operator-annotation HTML (v5.0.3):** the last step of `/trekbrief`, `/trekplan`, and `/trekreview` runs `scripts/annotate.mjs` against the just-written `.md` and prints the resulting `file://<abs path>` link. The HTML is self-contained (zero npm deps, zero external network, design-system-styled, light + dark + print) and modelled on `~/repos/claude-code-100x/claude-code-100x/build-site.js` (lines 1431–2255). The operator opens the file, the document renders as a proper article (headings / paragraphs / lists / tables / code / quotes — every element gets a stable `data-anchor-id`). In annotation mode (default ON, pencil-toggle in topbar), the operator can **select any text or click any element** → a form popover opens at the cursor with: section context auto-detected from nearest h1/h2, the anchored snippet (selection if any, else element text), **three intent buttons (Fiks / Endre / Spørsmål)**, comment textarea, Save/Cancel. The sidebar (Show annotations button) lists every annotation grouped by section with intent badge + snippet + comment + delete; clicking a card scrolls to and flashes the source element. **Copy Prompt** assembles a structured markdown (`### N. [Intent] Section: <…>` + `Quote: «…»` + `Comment: …`) and copies to clipboard. Persistence: `localStorage` keyed on absolute artifact path (`voyage-annotate:v2:<abs path>`). v5.0.0 removed the v4.2/v4.3 bespoke playground SPA + `/trekrevise` + Handover 8; v5.0.1 pointed at `/playground document-critique` (Claude-leads, wrong direction); v5.0.2 was operator-led but too thin (line-click + freeform note, no intents); v5.0.3 matches the claude-code-100x reference the operator first pointed at, with pencil-toggle / selection capture / intent categories / popover form / structured export. See [CHANGELOG.md](../CHANGELOG.md) § v5.0.3.
+
+**Security:** 4-layer defense-in-depth: plugin hooks (pre-bash-executor, pre-write-executor), prompt-level denylist (works in headless sessions), pre-execution plan scan (Phase 2.4), scoped `--allowedTools` replacing `--dangerously-skip-permissions`. Hard Rules 14-16 enforce verify command security, repo-boundary writes, and sensitive path protection.
+
+**Pipeline:** `/trekbrief` produces the task brief. `/trekresearch --project <dir>` fills in `{dir}/research/`. `/trekplan --project <dir>` reads brief + research to produce `{dir}/plan.md` (and auto-discovers `{dir}/architecture/overview.md` if an opt-in upstream architect plugin produced one). `/trekexecute --project <dir>` executes and writes `{dir}/progress.json`. `/trekreview --project <dir>` produces `{dir}/review.md`. `/trekbrief`, `/trekplan`, and `/trekreview` each end by running `scripts/annotate.mjs` on the just-written artifact, producing `{dir}/{artifact}.html` — a self-contained operator-annotation surface — and printing the `file://` link. The operator opens it, clicks lines, writes their own notes, copies a structured prompt, pastes back, Claude revises the `.md`. All artifacts live in one project directory.
+
+**Project-directory contract (v3.0.0):** trekplan owns the directory layout below. The `architecture/` subdirectory is opt-in and produced by an opt-in upstream architect plugin (not bundled) — the architect plugin is no longer publicly distributed, but the `architecture/overview.md` slot remains available for any compatible producer.
+
+```
+.claude/projects/{YYYY-MM-DD}-{slug}/
+  brief.md           ← trekbrief writes; everyone reads
+  brief.html         ← trekbrief annotates (operator-annotation HTML, gitignored, re-buildable from brief.md)
+  research/*.md      ← trekresearch writes; plan + architect read
+  architecture/      ← OPT-IN, owned by an opt-in upstream architect plugin (not bundled)
+    overview.md
+    gaps.md
+  plan.md            ← trekplan writes; trekexecute reads
+  plan.html          ← trekplan annotates
+  progress.json      ← trekexecute writes
+  review.md          ← trekreview writes; trekplan reads (Handover 6)
+  review.html        ← trekreview annotates
+```
+
+The `.html` files (`brief.html`, `plan.html`, `review.html`) are produced by `scripts/annotate.mjs` and live alongside their `.md` siblings in the project directory. They are re-buildable from the `.md` source at any time (deterministic, byte-identical output on re-run), so they are conventionally gitignored along with the rest of `.claude/projects/`. Operator annotations live in browser `localStorage` keyed on the absolute artifact path — they survive refresh and browser-close, but are local to the operator's machine.
+
+No code-level dependency between plugins — the contract is filesystem-level only.
+
+## State
+
+All artifacts in one project directory (default):
+- Project root: `.claude/projects/{YYYY-MM-DD}-{slug}/`
+  - `brief.md` + `brief.html` (task brief from `/trekbrief`; `.html` is the operator-annotation surface from `scripts/annotate.mjs`)
+  - `research/{NN}-{slug}.md` (research briefs from `/trekresearch --project`)
+  - `architecture/overview.md` + `architecture/gaps.md` (opt-in, produced by an opt-in upstream architect plugin, not bundled)
+  - `plan.md` + `plan.html` (from `/trekplan --project`)
+  - `sessions/session-*.md` (from `--decompose`)
+  - `progress.json` (from `/trekexecute --project`)
+  - `review.md` + `review.html` (from `/trekreview --project`)
+  - `.session-state.local.json` (Handover 7 — gitignored via `*.local.json`; written by `/trekexecute` Phase 8/2.55/4 or `/trekendsession`; read by `/trekcontinue`)
+
+Legacy paths (still work without `--project`):
+- Research briefs: `.claude/research/trekresearch-{date}-{slug}.md`
+- Plans: `.claude/plans/trekplan-{date}-{slug}.md`
+- Sessions: `.claude/trekplan-sessions/{slug}/session-*.md`
+- Launch scripts: `.claude/trekplan-sessions/{slug}/launch.sh`
+- Progress: `{plan-dir}/.trekexecute-progress-{slug}.json`
+
+Stats:
+- Brief stats: `${CLAUDE_PLUGIN_DATA}/trekbrief-stats.jsonl`
+- Plan stats: `${CLAUDE_PLUGIN_DATA}/trekplan-stats.jsonl`
+- Exec stats: `${CLAUDE_PLUGIN_DATA}/trekexecute-stats.jsonl`
+- Research stats: `${CLAUDE_PLUGIN_DATA}/trekresearch-stats.jsonl`
+- Continue stats: `${CLAUDE_PLUGIN_DATA}/trekcontinue-stats.jsonl`
+
+## Terminology
+
+- **Task brief** — produced by `/trekbrief`. Declares intent, goal, and research plan. Drives planning.
+- **Research brief** — produced by `/trekresearch`. Answers a specific research question. Feeds planning.
+- **Architecture note** — opt-in, produced by an opt-in upstream architect plugin (not bundled; the architect plugin is no longer publicly distributed, but the `architecture/overview.md` filesystem slot remains available for any compatible producer). Proposes which Claude Code features fit the task with brief-anchored rationale + explicit gaps. When present, enriches planning.
+- **Review** — produced by `/trekreview`. Independent post-hoc review of delivered code against the task brief. **Handover 6 (review → plan)** routes BLOCKER + MAJOR findings into `/trekplan --brief review.md` for a remediation plan. The plan's optional `source_findings:` frontmatter list is the audit trail back to the consumed findings. MINOR + SUGGESTION are skipped for v1.0 plan-input.
+- **Session state** — `.session-state.local.json` per project. **Handover 7** — produced by any session-end mechanism (`/trekexecute` Phase 8/2.55/4, `/trekendsession` helper, future graceful-handoff v2.2). Consumed by `/trekcontinue` to resume the next session in a fresh chat. Schema v1 is forward-compat (unknown top-level keys ignored). Never committed (gitignored via `*.local.json`).
+
+A project typically has 1 task brief, 0–N research briefs, 0 or 1 architecture note, 0–N reviews (one per review iteration), and 0 or 1 session-state file (overwritten on every session-end).
diff --git a/plugins/voyage/docs/command-modes.md b/plugins/voyage/docs/command-modes.md
new file mode 100644
index 0000000..f9e3256
--- /dev/null
+++ b/plugins/voyage/docs/command-modes.md
@@ -0,0 +1,85 @@
+# Voyage — Command flag reference
+
+Per-command flag tables, imported from `CLAUDE.md` via pointer.
+
+## /trekbrief modes
+
+| Flag | Behavior |
+|------|----------|
+| _(default)_ | Dynamic interview until quality gates pass → brief.md with research plan |
+| `--quick` | Compact start; still escalates if required sections are weak or the brief-review gate fails → brief.md with research plan |
+| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
+| `--profile <name>` | (v4.1.0) Model profile: `economy` / `balanced` / `premium` / `<custom>`. Sets `phase_models` for the brief phase. See `## Profile system` in `docs/operations.md`. |
+
+Always interactive. Phase 3 is a section-driven completeness loop (no hard cap on question count); Phase 4 runs a `brief-reviewer` stop-gate with max 3 review iterations. After writing the brief, asks the user to choose manual (print commands) or auto (Claude runs research + plan in foreground).
+
+## /trekresearch modes
+
+| Flag | Behavior |
+|------|----------|
+| _(default)_ | Interview + research (local + external) + synthesis + brief (foreground) |
+| `--project <dir>` | Write brief to `{dir}/research/{NN}-{slug}.md` (auto-incremented) |
+| `--quick` | Interview (short) + inline research (no agent swarm) |
+| `--local` | Only codebase analysis agents (skip external + Gemini) |
+| `--external` | Only external research agents (skip codebase analysis) |
+| `--fg` | No-op alias (foreground is default since v2.4.0) |
+| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
+| `--profile <name>` | (v4.1.0) Model profile for the research phase. |
+
+Flags combine: `--project <dir> --local`, `--external --quick`.
+
+## /trekplan modes
+
+| Flag | Behavior |
+|------|----------|
+| `--project <dir>` | **Required path A** — read `{dir}/brief.md`, auto-discover `{dir}/research/*.md`, write `{dir}/plan.md` |
+| `--brief <path>` | **Required path B** — plan from a specific brief file; write to `.claude/plans/trekplan-{date}-{slug}.md` |
+| `--research <brief> [brief2]` | Enrich with extra research briefs beyond what is in `{project_dir}/research/` |
+| `--fg` | No-op alias (foreground is default since v2.4.0) |
+| `--quick` | Plan directly (no agent swarm) |
+| `--export <pr\|issue\|markdown\|headless> <plan>` | Generate shareable output from existing plan |
+| `--decompose <plan>` | Split plan into self-contained headless sessions |
+| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
+| `--profile <name>` | (v4.1.0) Model profile for the plan phase (and others, since plan emits `profile:` to plan.md frontmatter). |
+
+**Breaking change (v2.0):** one of `--brief` or `--project` is required. There is no interview inside `/trekplan`. The `--spec` flag has been removed — use `/trekbrief` to produce a brief instead.
+
+If `{project_dir}/architecture/overview.md` exists (typically produced by an opt-in upstream architect plugin, not bundled), the plan command auto-discovers it and treats `cc_features_proposed` as priors. Missing file is fine — discovery is additive, not required.
+
+## /trekexecute modes
+
+| Flag | Behavior |
+|------|----------|
+| _(default)_ | Execute plan — auto-detects Execution Strategy for multi-session |
+| `--project <dir>` | Read `{dir}/plan.md`, write `{dir}/progress.json` |
+| `--resume` | Resume from last progress checkpoint |
+| `--dry-run` | Validate plan structure without executing |
+| `--validate` | Schema-only check — parse steps + manifests, report `READY \| FAIL`, no execution |
+| `--step N` | Execute only step N |
+| `--fg` | Force foreground — run all steps sequentially, ignore Execution Strategy |
+| `--session N` | Execute only session N from plan's Execution Strategy |
+| `--gates {open\|closed\|adaptive}` | (v3.4.0) Autonomy-checkpoint policy. Default `adaptive` |
+| `--profile <name>` | (v4.1.0) Model profile for the execute phase. Inherited from plan.md frontmatter `profile:` if present. |
+
+## /trekreview modes
+
+| Flag | Behavior |
+|------|----------|
+| _(default)_ | Run brief-conformance + code-correctness reviewers in parallel, coordinator dedup + verdict, write `{project_dir}/review.md` |
+| `--project <dir>` | **Required.** Path to trekplan project folder containing `brief.md`. Review is written to `{dir}/review.md` |
+| `--since <ref>` | Override "before" SHA for the diff range. Validated via `git rev-parse --verify` |
+| `--quick` | Skip brief-conformance reviewer; skip coordinator's reasonableness filter — fast correctness-only pass |
+| `--validate` | Schema-only check on existing `{dir}/review.md`. No LLM calls |
+| `--dry-run` | Print discovered scope + triage map; skip writes |
+| `--fg` | No-op alias (foreground is default) |
+| `--profile <name>` | (v4.1.0) Model profile for the review phase. |
+
+## /trekcontinue modes
+
+| Flag | Behavior |
+|------|----------|
+| _(default)_ | Auto-discover active project's `.session-state.local.json` and resume |
+| `<project-dir>` | Resume the next session of an explicit project directory |
+| `--profile <name>` | (v4.1.0) Model profile for the resumed session. Inherited from the previous session's plan.md frontmatter when absent. |
+
+The triage gate is deterministic — path-pattern classifier produces `{file → deep-review|summary-only|skip}`. Hard refuse-with-suggestion above 100 files / 100K diff tokens.
diff --git a/plugins/voyage/docs/operations.md b/plugins/voyage/docs/operations.md
new file mode 100644
index 0000000..0530d8d
--- /dev/null
+++ b/plugins/voyage/docs/operations.md
@@ -0,0 +1,62 @@
+# Voyage — Autonomy gates, profile system, observability
+
+Imported from `CLAUDE.md` via pointer.
+
+## Autonomy mode (`--gates`, v3.4.0)
+
+All four pipeline commands accept `--gates {open|closed|adaptive}`:
+
+| Value | Behavior |
+|-------|----------|
+| `open` | Skip optional checkpoints; trust manifests + verify gates only |
+| `closed` | Stop at every autonomy boundary; operator confirms each transition |
+| `adaptive` (default) | Stop only at meaningful boundaries (manifest-audit FAIL, plan-critic BLOCKER, main-merge gate) |
+
+Under the hood: `lib/util/autonomy-gate.mjs` runs the state machine `idle → approved → executing → merge-pending → main-merged`. `lib/stats/event-emit.mjs` records each transition to `${CLAUDE_PLUGIN_DATA}/trek*-stats.jsonl`. The main-merge gate is the final autonomy boundary before HEAD lands on `main`.
+
+### Path A/B/C decision (v3.4.0; Path C closed 2026-05-05)
+
+Three architectural options were considered for the speedup work:
+
+- **Path A — cache-first** (drop `--allowedTools` per child to recover cross-phase cache sharing): REJECTED. Inverts the security model; plugin hooks don't fire reliably in `claude -p` (research/06 GH #36071).
+- **Path B — sequential `--no-ff` parallel waves with manifest-driven failure recovery**: CHOSEN. Ships in v3.4.0. Phase 2.6 of `/trekexecute` runs the wave executor with hardenings for plugin-in-monorepo + gitignored-state topology.
+- **Path C — hybrid (cache-warm sentinel + identical-tool parallel)**: **CLOSED 2026-05-05.** Q3 experiment measured median `cache_creation_input_tokens` = 163,903 across 3 fork-children at 186K parent context (CC v2.1.128, Sonnet 4.6). Master-plan thresholds: ≤ 1,500 POSITIVE / ≥ 3,500 NEGATIVE. Result is solidly NEGATIVE — `CLAUDE_CODE_FORK_SUBAGENT` does not preserve cache prefix across identical-tool children at our context size. Path C migration is deferred indefinitely; reassessment is appropriate when CC v2.2.xxx ships fork-cache-relevant features. Harness: `scripts/q3-cache-prefix-experiment.mjs`. Companion analyser: `lib/stats/cache-analyzer.mjs`.
+
+A revived Path C (post-v2.2.xxx) would require: (1) re-architecting tool-list to be identical across all wave children, (2) cache-telemetry analysis confirming the new fork-cache behaviour holds, (3) prompt-level deny re-enablement to compensate for tool scoping rollback.
+
+## Profile system (`--profile`, v4.1.0)
+
+Three built-in model profiles plus operator-defined `<custom>.yaml`. Each profile pins `phase_models` for the six pipeline phases (`brief`, `research`, `plan`, `execute`, `review`, `continue`). Profile is recorded in plan.md frontmatter as `profile: <name>` and emitted to `${CLAUDE_PLUGIN_DATA}/trek*-stats.jsonl` for cost-attribution.
+
+| Profile | Brief | Research | Plan | Execute | Review | Continue | Use case |
+|---------|-------|----------|------|---------|--------|----------|----------|
+| `economy` | sonnet | sonnet | sonnet | sonnet | sonnet | sonnet | Lowest cost; high-confidence small-scope tasks (operator-opt-in via `--profile economy`) |
+| `balanced` | sonnet | sonnet | opus | sonnet | opus | sonnet | Mixed — opus where reasoning depth pays off (operator-opt-in via `--profile balanced`) |
+| `premium` (default) | opus | opus | opus | opus | opus | opus | Maximum quality — Opus on every phase. Default since 2026-05-13 operator request; also the hardcoded resolver default at `lib/profiles/resolver.mjs:145` |
+
+### Lookup order
+
+1. Explicit `--profile <name>` flag passed to the command
+2. Plan-file frontmatter `profile:` (when resuming via `/trekexecute --resume` or `/trekcontinue`)
+3. `VOYAGE_PROFILE` environment variable
+4. Default `balanced`
+
+### Custom profiles
+
+Create `lib/profiles/<custom>.yaml` to define a new tier. The validator (`lib/validators/profile-validator.mjs`) enforces: every `phase_models[].phase` must be a known phase enum; every `phase_models[].model` must match `^(opus|sonnet)(\b|-).*` or one of the canonical short names. Custom profiles override built-ins of the same name (lookup is alphabetical with `<custom>` taking precedence).
+
+Drift between plan-frontmatter `profile:` and step-manifest `profile_used:` emits a `MANIFEST_PROFILE_DRIFT` warning from `plan-validator --strict` (Step 20). Plan remains valid; the warning surfaces accidental tier-mismatch.
+
+## Observability (Stop hook, v4.1.0)
+
+The `Stop` hook in `hooks/hooks.json` runs `hooks/scripts/otel-export.mjs` at session-end. The hook is **opt-in** — when `VOYAGE_EXPORT_MODE` is unset or `off`, no work is done.
+
+| Mode | Output | Endpoint env-var |
+|------|--------|------------------|
+| `off` (default) | _(no export)_ | — |
+| `textfile` | `voyage.prom` (Prometheus exposition format) | `VOYAGE_TEXTFILE_DIR` |
+| `otlp` | OTLP/JSON POST | `VOYAGE_OTEL_ENDPOINT` |
+
+Endpoint validation: `VOYAGE_OTEL_ALLOW_PRIVATE=1` is required to send to loopback or RFC1918 destinations (CWE-918 SSRF mitigation). Allowlist `lib/exporters/field-allowlist.mjs` redacts records before export (CWE-212). Path validation (`lib/exporters/path-validator.mjs`) rejects symlink + traversal (CWE-22).
+
+Local Docker Compose stack: `examples/observability/`. Operator docs: `docs/observability.md`. Both pin minimum versions per CVE history (`prom/prometheus:v3.0.1`, `grafana/grafana:11.4.0`, `otel/opentelemetry-collector-contrib:0.115.0`).
diff --git a/plugins/voyage/lib/profiles/phase-signal-resolver.mjs b/plugins/voyage/lib/profiles/phase-signal-resolver.mjs
new file mode 100644
index 0000000..d8588bd
--- /dev/null
+++ b/plugins/voyage/lib/profiles/phase-signal-resolver.mjs
@@ -0,0 +1,86 @@
+// lib/profiles/phase-signal-resolver.mjs
+// v5.1.1 — extract per-phase signal from a brief's frontmatter.
+//
+// Decision A wiring: commands invoke this helper via Bash CLI shim
+// (`node lib/profiles/phase-signal-resolver.mjs --brief <path> --phase <name> --json`)
+// to obtain the {effort, model} pair for a specific pipeline phase.
+//
+// Sole source of truth for PHASE_SIGNAL_PHASES + EFFORT_LEVELS is
+// lib/validators/brief-validator.mjs — re-imported here so the helper
+// cannot drift from the schema validator.
+
+import { readFileSync, existsSync } from 'node:fs';
+import { parseDocument } from '../util/frontmatter.mjs';
+import { PHASE_SIGNAL_PHASES, EFFORT_LEVELS } from '../validators/brief-validator.mjs';
+
+/**
+ * Resolve a brief's phase_signal entry for one phase.
+ *
+ * @param {object|null} briefFrontmatter  Parsed YAML frontmatter dict (or null/undefined).
+ * @param {string} phase                  One of PHASE_SIGNAL_PHASES; anything else returns null.
+ * @returns {{effort?: string, model?: string} | null}
+ *
+ * Never throws. Returns null on:
+ *  - Falsy / non-object frontmatter
+ *  - phase not in PHASE_SIGNAL_PHASES (e.g. 'brief' or 'continue')
+ *  - Missing phase_signals array
+ *  - No entry for the requested phase
+ *
+ * Returns partial `{effort}` (with `model: undefined`) when the signal omits model.
+ */
+export function resolvePhaseSignal(briefFrontmatter, phase) {
+  if (!briefFrontmatter || typeof briefFrontmatter !== 'object') return null;
+  if (typeof phase !== 'string' || !PHASE_SIGNAL_PHASES.includes(phase)) return null;
+  const signals = briefFrontmatter.phase_signals;
+  if (!Array.isArray(signals)) return null;
+  for (const entry of signals) {
+    if (entry && typeof entry === 'object' && entry.phase === phase) {
+      const out = {};
+      if ('effort' in entry && EFFORT_LEVELS.includes(entry.effort)) out.effort = entry.effort;
+      if ('model' in entry) out.model = entry.model;
+      return out;
+    }
+  }
+  return null;
+}
+
+/**
+ * Convenience wrapper: read a brief file, parse, and resolve a single phase.
+ * Returns null on any read or parse failure (graceful degradation).
+ */
+export function resolvePhaseSignalFromFile(briefPath, phase) {
+  if (typeof briefPath !== 'string' || briefPath.length === 0) return null;
+  if (!existsSync(briefPath)) return null;
+  let text;
+  try { text = readFileSync(briefPath, 'utf-8'); } catch { return null; }
+  const doc = parseDocument(text);
+  if (!doc || !doc.valid) return null;
+  const fm = doc.parsed && doc.parsed.frontmatter;
+  return resolvePhaseSignal(fm, phase);
+}
+
+// CLI shim — mirrors lib/validators/brief-validator.mjs:168 pattern.
+if (import.meta.url === `file://${process.argv[1]}`) {
+  const args = process.argv.slice(2);
+  const getArg = (name) => {
+    const i = args.indexOf(name);
+    return i >= 0 && i + 1 < args.length ? args[i + 1] : null;
+  };
+  const briefPath = getArg('--brief');
+  const phase = getArg('--phase');
+  if (!briefPath || !phase) {
+    process.stderr.write('Usage: phase-signal-resolver.mjs --brief <path> --phase <name> [--json]\n');
+    process.exit(2);
+  }
+  const result = resolvePhaseSignalFromFile(briefPath, phase);
+  if (args.includes('--json')) {
+    process.stdout.write(JSON.stringify(result) + '\n');
+  } else if (result === null) {
+    process.stdout.write('null\n');
+  } else {
+    const effort = 'effort' in result ? result.effort : '';
+    const model = 'model' in result ? result.model : '';
+    process.stdout.write(`effort=${effort} model=${model}\n`);
+  }
+  process.exit(0);
+}
diff --git a/plugins/voyage/lib/profiles/resolver.mjs b/plugins/voyage/lib/profiles/resolver.mjs
index 45354e0..3d17bc1 100644
--- a/plugins/voyage/lib/profiles/resolver.mjs
+++ b/plugins/voyage/lib/profiles/resolver.mjs
@@ -1,5 +1,5 @@
 // lib/profiles/resolver.mjs
-// Profile resolution layer (v4.1 SC #5-#9).
+// Profile resolution layer (v4.1 SC #5-#9; v5.1.1 brief-signal extension).
 //
 // Locked interface contract (per brief Preferences):
 //   loadProfile(name) → ProfileObject
@@ -22,6 +22,16 @@
 //   validateProfileFile(path) → Result
 //     - Thin wrapper around validateProfile from profile-validator.mjs.
 //
+//   resolvePhaseModel(phase, briefPath, argv, env)
+//                                              → {model, source}  (v5.1.1 ADDITIVE)
+//     - Highest-priority lookup step: brief.phase_signals[phase].model (source='brief-signal').
+//     - Falls through via resolveProfile (flag → env → default) when brief signal absent.
+//     - Never throws; ENOENT/parse failures degrade silently to the next step.
+//     - phase ∈ {brief, continue} (outside PHASE_SIGNAL_PHASES) always falls through.
+//     - Controls ORCHESTRATOR model only. Sub-agents read agents/*.md frontmatter
+//       directly; commands must inject {resolved model} into Agent-tool spawn sites
+//       for sub-agents to honor brief signals. See feedback_voyage_opus_always.md.
+//
 // Custom.yaml lookup order: <repo-root>/voyage-profiles/<name>.yaml > ~/.claude/voyage-profiles/<name>.yaml
 // Both attempted paths included in error message on miss (HIGH-risk-mitigering).
 
@@ -31,6 +41,7 @@ import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
 import { parseDocument } from '../util/frontmatter.mjs';
 import { validateProfile } from '../validators/profile-validator.mjs';
+import { resolvePhaseSignal } from './phase-signal-resolver.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const BUILTIN_PROFILES_DIR = __dirname; // lib/profiles/
@@ -201,3 +212,97 @@ export function resolveTrekcontinueProfile(planPath, argv, opts = {}) {
 export function validateProfileFile(path, opts = {}) {
   return validateProfile(path, opts);
 }
+
+/**
+ * Resolve the model for a specific pipeline phase, applying brief-signal override
+ * as the new highest-priority lookup step (v5.1.1).
+ *
+ * @param {string} phase            One of brief|research|plan|execute|review|continue
+ * @param {string|null} briefPath   Absolute or repo-relative path to brief.md, or null
+ * @param {string[]|object} argv    Full process.argv array OR parsed flags object
+ * @param {object} [env]            Environment-variable record (defaults to process.env)
+ * @returns {{model: string, source: 'brief-signal'|'flag'|'env'|'default'}}
+ *
+ * Error handling contract:
+ *  - Never throws. Any failure (ENOENT on briefPath, malformed YAML, missing
+ *    phase_signals entry, missing model field) silently falls through.
+ *  - Treats unreadable briefPath as equivalent to briefPath=null.
+ *  - Returns the fallthrough resolution when phase ∈ {brief, continue} (not in
+ *    PHASE_SIGNAL_PHASES).
+ *
+ * Controls ORCHESTRATOR model only. Sub-agents read agents/*.md frontmatter
+ * directly; commands must inject {resolved model} at Agent-tool spawn sites.
+ */
+export function resolvePhaseModel(phase, briefPath, argv, env = process.env) {
+  // Step 1: brief-signal lookup
+  if (typeof briefPath === 'string' && briefPath.length > 0 && existsSync(briefPath)) {
+    let fm = null;
+    try {
+      const text = readFileSync(briefPath, 'utf-8');
+      const doc = parseDocument(text);
+      if (doc && doc.valid) fm = doc.parsed && doc.parsed.frontmatter;
+    } catch {
+      // swallow — degrade gracefully to fallthrough
+    }
+    if (fm) {
+      const signal = resolvePhaseSignal(fm, phase);
+      if (signal && typeof signal.model === 'string' && signal.model.length > 0) {
+        return { model: signal.model, source: 'brief-signal' };
+      }
+    }
+  }
+
+  // Step 2+3+4: fall through via existing resolveProfile chain
+  // (flag → env → default), then index into profile.phase_models[phase].
+  // Normalize argv: resolveProfile expects flags-object form. When called with
+  // a raw process.argv-style array, extract --profile here.
+  let normalizedFlags = argv;
+  if (Array.isArray(argv)) {
+    const idx = argv.indexOf('--profile');
+    normalizedFlags = (idx >= 0 && idx + 1 < argv.length)
+      ? { '--profile': argv[idx + 1] }
+      : {};
+  }
+  const { profile, profile_source } = resolveProfile(normalizedFlags, env);
+  let phaseModels = {};
+  try {
+    const p = loadProfile(profile);
+    phaseModels = p.phase_models || {};
+  } catch {
+    // Unknown profile → fall back to premium
+    try {
+      const p = loadProfile('premium');
+      phaseModels = p.phase_models || {};
+    } catch {
+      phaseModels = {};
+    }
+  }
+  const model = phaseModels[phase] || 'opus';
+  return { model, source: profile_source };
+}
+
+// CLI shim — invoked by commands/trek*.md via Bash.
+// Usage: node lib/profiles/resolver.mjs --resolve-phase-model --phase plan --brief-path foo.md --json
+if (import.meta.url === `file://${process.argv[1]}`) {
+  const args = process.argv.slice(2);
+  if (args.includes('--resolve-phase-model')) {
+    const getArg = (name) => {
+      const i = args.indexOf(name);
+      return i >= 0 && i + 1 < args.length ? args[i + 1] : null;
+    };
+    const phase = getArg('--phase');
+    const briefPath = getArg('--brief-path');
+    if (!phase) {
+      process.stderr.write('Usage: resolver.mjs --resolve-phase-model --phase <name> [--brief-path <path>] [--json]\n');
+      process.exit(2);
+    }
+    const r = resolvePhaseModel(phase, briefPath || null, args, process.env);
+    if (args.includes('--json')) {
+      process.stdout.write(JSON.stringify(r) + '\n');
+    } else {
+      process.stdout.write(`model=${r.model} source=${r.source}\n`);
+    }
+    process.exit(0);
+  }
+  // Otherwise no-op (the module is primarily imported, not run directly).
+}
diff --git a/plugins/voyage/lib/validators/brief-validator.mjs b/plugins/voyage/lib/validators/brief-validator.mjs
index 760ba9f..de22278 100644
--- a/plugins/voyage/lib/validators/brief-validator.mjs
+++ b/plugins/voyage/lib/validators/brief-validator.mjs
@@ -9,12 +9,15 @@
 import { readFileSync, existsSync } from 'node:fs';
 import { parseDocument } from '../util/frontmatter.mjs';
 import { issue, ok, fail } from '../util/result.mjs';
+import { BASE_ALLOWED_MODELS } from './profile-validator.mjs';
 
 export const BRIEF_REQUIRED_FRONTMATTER = ['type', 'brief_version', 'task', 'slug', 'research_topics', 'research_status'];
 export const REVIEW_AS_BRIEF_REQUIRED_FRONTMATTER = ['type', 'task', 'slug', 'project_dir', 'findings'];
 export const BRIEF_TYPE_VALUES = Object.freeze(['trekbrief', 'trekreview']);
 export const BRIEF_RESEARCH_STATUS_VALUES = ['pending', 'in_progress', 'complete', 'skipped'];
 export const BRIEF_BODY_SECTIONS = ['Intent', 'Goal', 'Success Criteria'];
+export const PHASE_SIGNAL_PHASES = Object.freeze(['research', 'plan', 'execute', 'review']);
+export const EFFORT_LEVELS = Object.freeze(['low', 'standard', 'high']);
 
 function getRequiredFields(type) {
   return type === 'trekreview' ? REVIEW_AS_BRIEF_REQUIRED_FRONTMATTER : BRIEF_REQUIRED_FRONTMATTER;
@@ -36,6 +39,71 @@ export function validateBriefContent(text, opts = {}) {
     }
   }
 
+  // v5.1 — phase_signals (additive optional field) + version-conditional sequencing gate.
+  // Composition rule documented in each downstream command's "Composition rule (v5.1)" section.
+  const hasSignals = 'phase_signals' in fm;
+  const hasPartial = 'phase_signals_partial' in fm;
+  if (hasSignals && hasPartial) {
+    errors.push(issue(
+      'BRIEF_SIGNALS_MUTUALLY_EXCLUSIVE',
+      'phase_signals and phase_signals_partial are mutually exclusive — set exactly one',
+      'Either commit per-phase signals OR record phase_signals_partial: true (force-stop).',
+    ));
+  }
+  if (hasSignals) {
+    if (!Array.isArray(fm.phase_signals)) {
+      errors.push(issue(
+        'BRIEF_INVALID_PHASE_SIGNALS',
+        'phase_signals must be a list of {phase, effort?, model?} entries',
+      ));
+    } else {
+      for (const entry of fm.phase_signals) {
+        if (!entry || typeof entry !== 'object' || !('phase' in entry)) {
+          errors.push(issue('BRIEF_INVALID_PHASE_SIGNALS', `phase_signals entry must include a "phase" key`));
+          continue;
+        }
+        if (!PHASE_SIGNAL_PHASES.includes(entry.phase)) {
+          errors.push(issue(
+            'BRIEF_INVALID_PHASE_SIGNAL_PHASE',
+            `phase_signals.phase "${entry.phase}" not in [${PHASE_SIGNAL_PHASES.join(', ')}]`,
+          ));
+        }
+        if ('effort' in entry && !EFFORT_LEVELS.includes(entry.effort)) {
+          errors.push(issue(
+            'BRIEF_INVALID_EFFORT',
+            `phase_signals.effort "${entry.effort}" not in [${EFFORT_LEVELS.join(', ')}]`,
+          ));
+        }
+        if ('model' in entry && !BASE_ALLOWED_MODELS.includes(entry.model)) {
+          errors.push(issue(
+            'BRIEF_INVALID_MODEL',
+            `phase_signals.model "${entry.model}" not in [${BASE_ALLOWED_MODELS.join(', ')}]`,
+          ));
+        }
+      }
+    }
+  }
+  // Sequencing gate: brief_version ≥ 2.1 requires phase_signals OR phase_signals_partial.
+  // Coerce to String so the gate fires regardless of whether YAML parsed the value as
+  // a string ("2.1") or a number (2.1). v5.1.0 shipped with an unquoted-2.1 template
+  // that silently bypassed this gate — fix locked in by quoting the template AND
+  // accepting both shapes here as defense-in-depth (v5.1.1, finding 3c834097/df1435a2).
+  if (typeof fm.brief_version === 'string' || typeof fm.brief_version === 'number') {
+    const vm = String(fm.brief_version).match(/^(\d+)\.(\d+)$/);
+    if (vm) {
+      const major = Number(vm[1]);
+      const minor = Number(vm[2]);
+      const atLeast21 = major > 2 || (major === 2 && minor >= 1);
+      if (atLeast21 && !hasSignals && !hasPartial && fm.type !== 'trekreview') {
+        errors.push(issue(
+          'BRIEF_V51_MISSING_SIGNALS',
+          'brief_version ≥ 2.1 requires phase_signals (or phase_signals_partial: true)',
+          'Re-run /trekbrief — Phase 3.5 collects per-phase effort + model signals.',
+        ));
+      }
+    }
+  }
+
   if (fm.type !== undefined && !BRIEF_TYPE_VALUES.includes(fm.type)) {
     errors.push(issue(
       'BRIEF_WRONG_TYPE',
@@ -82,8 +150,8 @@ export function validateBriefContent(text, opts = {}) {
     }
   }
 
-  if (typeof fm.brief_version === 'string') {
-    const m = fm.brief_version.match(/^(\d+)\.(\d+)$/);
+  if (typeof fm.brief_version === 'string' || typeof fm.brief_version === 'number') {
+    const m = String(fm.brief_version).match(/^(\d+)\.(\d+)$/);
     if (!m) {
       warnings.push(issue('BRIEF_VERSION_FORMAT', `brief_version "${fm.brief_version}" not in N.M form`));
     }
diff --git a/plugins/voyage/lib/validators/profile-validator.mjs b/plugins/voyage/lib/validators/profile-validator.mjs
index 48e84d6..c7fec26 100644
--- a/plugins/voyage/lib/validators/profile-validator.mjs
+++ b/plugins/voyage/lib/validators/profile-validator.mjs
@@ -38,7 +38,7 @@ export const PROFILE_REQUIRED_PHASES = Object.freeze([
   'brief', 'research', 'plan', 'execute', 'review', 'continue',
 ]);
 
-const BASE_ALLOWED_MODELS = Object.freeze(['sonnet', 'opus']);
+export const BASE_ALLOWED_MODELS = Object.freeze(['sonnet', 'opus']);
 
 function getAllowedModels(env = process.env) {
   if (env.VOYAGE_ALLOW_HAIKU === '1') {
diff --git a/plugins/voyage/package-lock.json b/plugins/voyage/package-lock.json
index a77c117..7d55cd3 100644
--- a/plugins/voyage/package-lock.json
+++ b/plugins/voyage/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "voyage",
-  "version": "5.0.2",
+  "version": "5.1.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "voyage",
-      "version": "5.0.2",
+      "version": "5.1.1",
       "license": "MIT",
       "engines": {
         "node": ">=18"
diff --git a/plugins/voyage/package.json b/plugins/voyage/package.json
index 8c84b4b..faab9fc 100644
--- a/plugins/voyage/package.json
+++ b/plugins/voyage/package.json
@@ -1,7 +1,7 @@
 {
   "name": "voyage",
-  "version": "5.0.2",
-  "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs) and printing the file:// link — the operator clicks lines, adds their own notes, copies a structured prompt, pastes back, Claude revises the .md.",
+  "version": "5.1.1",
+  "description": "Voyage — brief, research, plan, execute, review, continue. Contract-driven Claude Code pipeline. /trekbrief, /trekplan, and /trekreview each end by building a self-contained operator-annotation HTML (scripts/annotate.mjs, modelled on claude-code-100x): select text or click any heading/paragraph/list-item, pick intent (Fiks/Endre/Spørsmål), write comment, copy structured prompt, paste back, Claude revises the .md.",
   "type": "module",
   "engines": {
     "node": ">=18"
diff --git a/plugins/voyage/scripts/annotate.mjs b/plugins/voyage/scripts/annotate.mjs
index 0426741..2d66294 100644
--- a/plugins/voyage/scripts/annotate.mjs
+++ b/plugins/voyage/scripts/annotate.mjs
@@ -1,18 +1,27 @@
 #!/usr/bin/env node
 // scripts/annotate.mjs
 //
-// Builds a self-contained operator-annotation HTML for a voyage artifact
-// (brief.md / plan.md / review.md). The producing commands call this on
-// their last step and print the file:// link; the operator opens it in
-// a browser, clicks any line to attach their own note, watches a sidebar
-// of all their annotations, and copies a single prompt (with every note)
-// back into Claude. Claude revises the source .md from the notes.
+// Operator-annotation HTML for a voyage artifact (brief.md / plan.md /
+// review.md). The producing commands run this on their last step and
+// print the file:// link. The operator opens the HTML in their browser,
+// the page renders the artifact as a proper article (headings, lists,
+// paragraphs, code blocks — not raw lines), and the operator drives every
+// annotation themselves: select text or click any element, choose intent
+// (Fiks / Endre / Spørsmål), write a comment, save. The sidebar shows
+// every annotation grouped by section; Copy Prompt assembles them into
+// one structured markdown the operator pastes back into Claude.
 //
-//   • Operator drives every annotation. No pre-generated suggestions.
-//   • Each annotation is anchored to the source line number (1-based).
-//   • Annotations persist in localStorage per artifact path — refresh
-//     does not lose work; closing the browser does not either.
-//   • Zero external network, zero npm deps, deterministic output.
+// UX modelled on the claude-code-100x annotation surface
+// (build-site.js, 2026 — same pencil-toggle, intent buttons, form popover,
+// localStorage persistence, structured markdown export).
+//
+//   • Operator drives every annotation. No Claude-generated suggestions.
+//   • Three intent categories: Fiks (fix) / Endre (change) / Spørsmål (question).
+//   • Element + selection anchoring — clicking an element captures it whole;
+//     selecting text inside an element captures the exact substring.
+//   • Section context auto-detected (nearest h1/h2 above).
+//   • Annotations persist in localStorage keyed on the absolute artifact path.
+//   • Zero npm deps, zero external network, deterministic output.
 
 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
 import { basename, resolve } from 'node:path';
@@ -29,66 +38,248 @@ function escapeHtml(s) {
 function deriveTitle(mdText, fallbackName) {
   const { hasFrontmatter, frontmatter } = splitFrontmatter(mdText);
   if (hasFrontmatter) {
-    const taskMatch = frontmatter.match(/^task:\s*(.+)$/m);
-    if (taskMatch) return taskMatch[1].trim().replace(/^["']|["']$/g, '');
-    const slugMatch = frontmatter.match(/^slug:\s*(.+)$/m);
-    if (slugMatch) return slugMatch[1].trim().replace(/^["']|["']$/g, '');
+    const m = frontmatter.match(/^task:\s*(.+)$/m) || frontmatter.match(/^slug:\s*(.+)$/m);
+    if (m) return m[1].trim().replace(/^["']|["']$/g, '');
   }
   const h1 = mdText.match(/^#\s+(.+)$/m);
   if (h1) return h1[1].trim();
   return fallbackName;
 }
 
+// ---------------------------------------------------------------------------
+// Markdown → HTML with data-anchor-id on every annotatable element.
+// Hand-rolled subset matching what artifact templates emit.
+// ---------------------------------------------------------------------------
+
+function renderInline(escaped) {
+  let s = escaped.replace(/`([^`]+)`/g, (_, c) => `<code>${c}</code>`);
+  s = s.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, (_, t, h) => {
+    const safe = /^(https?:|mailto:|#|\.|\/)/i.test(h) ? h : '#';
+    return `<a href="${safe}" target="_blank" rel="noopener">${t}</a>`;
+  });
+  s = s.replace(/\*\*([^*]+)\*\*/g, (_, c) => `<strong>${c}</strong>`);
+  s = s.replace(/(^|[^*])\*([^*\s][^*]*?)\*(?!\*)/g, (_, pre, c) => `${pre}<em>${c}</em>`);
+  return s;
+}
+
+function renderMarkdown(md) {
+  const lines = md.replace(/\r\n/g, '\n').split('\n');
+  let html = '';
+  let anchorId = 0;
+  const anchor = () => `anch-${anchorId++}`;
+  let i = 0;
+  let paraBuf = [];
+
+  const flushPara = () => {
+    if (paraBuf.length) {
+      const text = paraBuf.join(' ');
+      html += `<p data-anchor-id="${anchor()}">${renderInline(escapeHtml(text))}</p>\n`;
+      paraBuf = [];
+    }
+  };
+
+  while (i < lines.length) {
+    const line = lines[i];
+
+    // Fenced code block — NOT annotatable as a whole; we keep it readable
+    // but skip the data-anchor-id so the operator clicks around it.
+    const fence = line.match(/^(\s*)(`{3,}|~{3,})(.*)$/);
+    if (fence) {
+      flushPara();
+      const marker = fence[2][0];
+      const lang = (fence[3] || '').trim().split(/\s+/)[0];
+      const buf = [];
+      i++;
+      while (i < lines.length && !new RegExp('^\\s*' + marker + '{3,}\\s*$').test(lines[i])) {
+        buf.push(lines[i]);
+        i++;
+      }
+      i++; // closing fence
+      const cls = lang ? ` class="language-${escapeHtml(lang)}"` : '';
+      html += `<pre data-anchor-id="${anchor()}"><code${cls}>${escapeHtml(buf.join('\n'))}\n</code></pre>\n`;
+      continue;
+    }
+
+    // ATX heading
+    const h = line.match(/^(#{1,6})\s+(.*?)\s*#*\s*$/);
+    if (h) {
+      flushPara();
+      const lvl = h[1].length;
+      html += `<h${lvl} data-anchor-id="${anchor()}">${renderInline(escapeHtml(h[2]))}</h${lvl}>\n`;
+      i++;
+      continue;
+    }
+
+    // Horizontal rule
+    if (/^\s*([-*_])(\s*\1){2,}\s*$/.test(line)) {
+      flushPara();
+      html += '<hr>\n';
+      i++;
+      continue;
+    }
+
+    // Table
+    if (/^\s*\|.*\|\s*$/.test(line) && i + 1 < lines.length &&
+        /^\s*\|?[\s:|-]+\|?\s*$/.test(lines[i + 1]) && lines[i + 1].includes('-')) {
+      flushPara();
+      const rows = [];
+      while (i < lines.length && /^\s*\|.*\|\s*$/.test(lines[i])) { rows.push(lines[i]); i++; }
+      const cells = (l) => l.replace(/^\s*\|/, '').replace(/\|\s*$/, '').split('|').map((c) => c.trim());
+      const header = cells(rows[0]);
+      const body = rows.slice(2).map(cells);
+      html += '<table>\n<thead><tr>';
+      for (const c of header) html += `<th data-anchor-id="${anchor()}">${renderInline(escapeHtml(c))}</th>`;
+      html += '</tr></thead>\n<tbody>\n';
+      for (const r of body) {
+        html += '<tr>';
+        for (let k = 0; k < header.length; k++) html += `<td data-anchor-id="${anchor()}">${renderInline(escapeHtml(r[k] || ''))}</td>`;
+        html += '</tr>\n';
+      }
+      html += '</tbody>\n</table>\n';
+      continue;
+    }
+
+    // Blockquote
+    if (/^\s*>\s?/.test(line)) {
+      flushPara();
+      const buf = [];
+      while (i < lines.length && /^\s*>\s?/.test(lines[i])) {
+        buf.push(lines[i].replace(/^\s*>\s?/, ''));
+        i++;
+      }
+      html += `<blockquote data-anchor-id="${anchor()}">${renderInline(escapeHtml(buf.join(' ')))}</blockquote>\n`;
+      continue;
+    }
+
+    // Lists — one block, allow blank lines between items
+    const listMatch = line.match(/^(\s*)([-*+]|\d+[.)])\s+(.*)$/);
+    if (listMatch) {
+      flushPara();
+      const items = [];
+      while (i < lines.length) {
+        const m = lines[i].match(/^(\s*)([-*+]|\d+[.)])\s+(.*)$/);
+        if (m) {
+          items.push({ indent: m[1].length, ordered: /\d/.test(m[2]), text: m[3] });
+          i++;
+        } else if (lines[i].trim() === '' && i + 1 < lines.length &&
+                   lines[i + 1].match(/^(\s*)([-*+]|\d+[.)])\s+/)) {
+          i++;
+        } else {
+          break;
+        }
+      }
+      html += renderList(items, anchor);
+      continue;
+    }
+
+    // Blank
+    if (line.trim() === '') {
+      flushPara();
+      i++;
+      continue;
+    }
+
+    // Default: paragraph accumulation
+    paraBuf.push(line.trim());
+    i++;
+  }
+  flushPara();
+  return html;
+}
+
+function renderList(items, anchor) {
+  let html = '';
+  const stack = [];
+  for (const { indent, ordered, text } of items) {
+    while (stack.length && (indent < stack[stack.length - 1].indent ||
+      (indent === stack[stack.length - 1].indent && ordered !== stack[stack.length - 1].ordered))) {
+      const top = stack.pop();
+      html += top.ordered ? '</li></ol>' : '</li></ul>';
+    }
+    if (!stack.length || indent > stack[stack.length - 1].indent) {
+      html += ordered ? '<ol>' : '<ul>';
+      stack.push({ indent, ordered });
+    } else {
+      html += '</li>';
+    }
+    html += `<li data-anchor-id="${anchor()}">${renderInline(escapeHtml(text))}`;
+  }
+  while (stack.length) {
+    const top = stack.pop();
+    html += top.ordered ? '</li></ol>' : '</li></ul>';
+  }
+  return html + '\n';
+}
+
+// ---------------------------------------------------------------------------
+// Build full HTML document
+// ---------------------------------------------------------------------------
+
 function buildHtml(artifactPath, mdText) {
-  const lines = mdText.replace(/\r\n/g, '\n').split('\n');
   const fileName = basename(artifactPath);
   const title = deriveTitle(mdText, fileName);
-  const linesJson = JSON.stringify(lines);
-  const artifactPathJson = JSON.stringify(artifactPath);
-  const titleEsc = escapeHtml(title);
-  const fileNameEsc = escapeHtml(fileName);
-
+  const { body } = splitFrontmatter(mdText);
+  const articleHtml = renderMarkdown(body);
   return '<!DOCTYPE html>\n'
     + '<html lang="en">\n'
     + '<head>\n'
     + '<meta charset="utf-8">\n'
     + '<meta name="viewport" content="width=device-width, initial-scale=1">\n'
-    + '<title>' + titleEsc + ' — annotate</title>\n'
+    + '<title>' + escapeHtml(title) + ' — annotate</title>\n'
     + '<style>\n' + STYLE + '\n</style>\n'
     + '</head>\n'
-    + '<body>\n'
-    + '<div class="app">\n'
+    + '<body class="ann-mode">\n'
     + '<header class="topbar">\n'
     + '  <div class="hdr-meta">\n'
-    + '    <h1>' + titleEsc + '</h1>\n'
-    + '    <p class="path" title="' + escapeHtml(artifactPath) + '">' + fileNameEsc + '</p>\n'
+    + '    <h1>' + escapeHtml(title) + '</h1>\n'
+    + '    <p class="path" title="' + escapeHtml(artifactPath) + '">' + escapeHtml(fileName) + '</p>\n'
+    + '  </div>\n'
+    + '  <div class="hdr-actions">\n'
+    + '    <button class="ann-toggle" id="ann-toggle" title="Toggle annotation mode (pencil)">✎ <span id="ann-toggle-label">Annotation mode: ON</span> <span class="ann-badge" id="ann-badge">0</span></button>\n'
+    + '    <button class="ghost-btn" id="open-panel">Show annotations</button>\n'
     + '  </div>\n'
-    + '  <div class="hdr-stats" id="stats"></div>\n'
     + '</header>\n'
-    + '<main class="split">\n'
-    + '  <section class="doc-panel">\n'
-    + '    <div class="doc-help"><strong>Click any line</strong> to add your own annotation. Annotations are saved in your browser per artifact path.</div>\n'
-    + '    <div class="doc-content" id="doc"></div>\n'
-    + '  </section>\n'
-    + '  <aside class="notes-panel">\n'
-    + '    <div class="notes-header">\n'
-    + '      <h3>Your annotations</h3>\n'
-    + '      <button id="clear-all" class="ghost-btn" title="Remove all annotations">Clear all</button>\n'
-    + '    </div>\n'
-    + '    <div class="notes-list" id="notes-list"></div>\n'
-    + '  </aside>\n'
+    + '<main class="article-wrap">\n'
+    + '  <div class="article-help" id="article-help">Click any heading, paragraph, list item, table cell, or quote to add an annotation. To anchor on a specific phrase, <strong>select the text first</strong>, then click. Toggle annotation mode off (pencil button) to read normally / follow links.</div>\n'
+    + '  <article class="article" id="article">\n'
+    + articleHtml
+    + '\n  </article>\n'
     + '</main>\n'
-    + '<section class="prompt-panel">\n'
-    + '  <div class="prompt-head">\n'
-    + '    <span class="prompt-title">Prompt for Claude</span>\n'
-    + '    <button class="copy-btn" id="copy" disabled>Copy Prompt</button>\n'
+    + '<div class="ann-form" id="ann-form" role="dialog" aria-label="New annotation">\n'
+    + '  <div class="ann-form-section">\n'
+    + '    <div class="ann-form-section-label">Section</div>\n'
+    + '    <div class="ann-form-section-value" id="ann-form-section">—</div>\n'
+    + '  </div>\n'
+    + '  <div class="ann-form-snippet">\n'
+    + '    <div class="ann-form-section-label">Anchored to</div>\n'
+    + '    <blockquote class="ann-form-snippet-text" id="ann-form-snippet">…</blockquote>\n'
+    + '  </div>\n'
+    + '  <div class="ann-form-intents">\n'
+    + '    <button class="ann-intent" data-intent="fiks" title="Something is wrong or broken — needs to be fixed">Fiks</button>\n'
+    + '    <button class="ann-intent" data-intent="endre" title="Change the wording or content">Endre</button>\n'
+    + '    <button class="ann-intent" data-intent="spørsmål" title="An open question or clarification request">Spørsmål</button>\n'
+    + '  </div>\n'
+    + '  <textarea class="ann-form-comment" id="ann-form-comment" placeholder="Your comment (optional but helpful)…"></textarea>\n'
+    + '  <div class="ann-form-actions">\n'
+    + '    <button class="btn" id="ann-form-cancel">Cancel (Esc)</button>\n'
+    + '    <button class="btn primary" id="ann-form-save" disabled>Save (⌘Enter)</button>\n'
     + '  </div>\n'
-    + '  <pre class="prompt-body empty" id="prompt">Click a line and add a note to generate a prompt.</pre>\n'
-    + '</section>\n'
     + '</div>\n'
+    + '<aside class="ann-panel" id="ann-panel" aria-label="Annotations panel">\n'
+    + '  <div class="ann-panel-head">\n'
+    + '    <h2>Your annotations</h2>\n'
+    + '    <button class="icon-btn" id="ann-panel-close" title="Close">✕</button>\n'
+    + '  </div>\n'
+    + '  <div class="ann-panel-body" id="ann-panel-body"></div>\n'
+    + '  <div class="ann-panel-foot">\n'
+    + '    <button class="ghost-btn" id="ann-clear-all">Clear all</button>\n'
+    + '    <button class="btn primary" id="ann-copy" disabled>Copy Prompt</button>\n'
+    + '  </div>\n'
+    + '</aside>\n'
+    + '<div class="ann-toast" id="ann-toast" role="status" aria-live="polite"></div>\n'
+    + '<div class="ann-overlay" id="ann-overlay"></div>\n'
     + '<script>\n'
-    + 'const DOC_LINES = ' + linesJson + ';\n'
-    + 'const ARTIFACT_PATH = ' + artifactPathJson + ';\n'
+    + 'const ARTIFACT_PATH = ' + JSON.stringify(resolve(artifactPath)) + ';\n'
     + 'const ARTIFACT_NAME = ' + JSON.stringify(fileName) + ';\n'
     + APP_JS
     + '\n</script>\n'
@@ -97,8 +288,9 @@ function buildHtml(artifactPath, mdText) {
 }
 
 // ---------------------------------------------------------------------------
-// Stylesheet — design-system-aligned, light + dark, no external fonts/CDN.
+// Stylesheet — light + dark + print. Design-system-aligned.
 // ---------------------------------------------------------------------------
+
 const STYLE = `
 :root {
   --bg: #f7f7f8;
@@ -117,8 +309,15 @@ const STYLE = `
   --green-soft: #d5ecdb;
   --red: #b3262d;
   --red-soft: #f6d9da;
+  --blue: #0855a8;
+  --blue-soft: #e4ecf6;
+  --orange: #d4790a;
+  --orange-soft: #fceede;
+  --purple: #6638b6;
+  --purple-soft: #ebe1f9;
   --mono: ui-monospace, "SF Mono", "JetBrains Mono", Menlo, Consolas, monospace;
   --sans: -apple-system, BlinkMacSystemFont, "Inter", "Segoe UI", Roboto, sans-serif;
+  --serif: ui-serif, "Source Serif 4", Georgia, "Times New Roman", serif;
 }
 @media (prefers-color-scheme: dark) {
   :root {
@@ -138,398 +337,581 @@ const STYLE = `
     --green-soft: rgba(63, 185, 80, 0.12);
     --red: #f0626a;
     --red-soft: rgba(240, 98, 106, 0.12);
+    --blue: #6db0ee;
+    --blue-soft: rgba(109, 176, 238, 0.15);
+    --orange: #f6ad55;
+    --orange-soft: rgba(246, 173, 85, 0.15);
+    --purple: #d2a8ff;
+    --purple-soft: rgba(210, 168, 255, 0.15);
   }
 }
 * { box-sizing: border-box; }
-html, body { margin: 0; padding: 0; height: 100%; background: var(--bg); color: var(--text);
-  font-family: var(--sans); font-size: 14px; line-height: 1.55; }
-.app { display: grid; grid-template-rows: auto 1fr auto; height: 100vh; }
-header.topbar { display: flex; align-items: center; justify-content: space-between; gap: 16px;
-  padding: 12px 20px; background: var(--bg-elev); border-bottom: 1px solid var(--border); }
+html, body { margin: 0; padding: 0; background: var(--bg); color: var(--text);
+  font-family: var(--sans); font-size: 15px; line-height: 1.6; }
+body { min-height: 100vh; }
+/* Topbar */
+.topbar { position: sticky; top: 0; z-index: 50; display: flex; align-items: center; justify-content: space-between;
+  gap: 16px; padding: 12px 24px; background: var(--bg-elev); border-bottom: 1px solid var(--border); }
 .hdr-meta h1 { font-size: 16px; font-weight: 650; margin: 0; }
 .hdr-meta .path { color: var(--text-dim); font-size: 12px; font-family: var(--mono); margin: 2px 0 0; word-break: break-all; }
-.hdr-stats { display: flex; gap: 8px; font-size: 12px; color: var(--text-dim); }
-.pill { padding: 2px 10px; border-radius: 99px; background: var(--bg-soft); border: 1px solid var(--border); }
-.pill.accent { color: var(--accent); border-color: var(--accent); }
-main.split { display: grid; grid-template-columns: 1fr 380px; overflow: hidden; min-height: 0; }
-.doc-panel { overflow-y: auto; background: var(--bg); padding: 16px 24px 80px; }
-.doc-help { font-size: 12px; color: var(--text-dim); background: var(--bg-soft);
-  border: 1px solid var(--border); border-radius: 6px; padding: 8px 12px; margin: 0 0 18px; }
-.doc-help strong { color: var(--text); }
-.doc-content { font-family: var(--mono); font-size: 13px; line-height: 1.6; }
-.doc-line { display: grid; grid-template-columns: 44px 24px 1fr; gap: 6px;
-  padding: 1px 8px 1px 0; border-left: 3px solid transparent; cursor: pointer; transition: background .08s; }
-.doc-line:hover { background: var(--accent-soft); }
-.doc-line:hover .gutter { color: var(--accent); }
-.doc-line .ln { color: var(--text-mute); text-align: right; user-select: none; font-size: 11px; padding-top: 2px; }
-.doc-line .gutter { font-size: 13px; color: transparent; text-align: center; user-select: none; line-height: 1.6; }
-.doc-line .content { white-space: pre-wrap; word-break: break-word; color: var(--text); }
-.doc-line.annotated { border-left-color: var(--amber); background: var(--amber-soft); }
-.doc-line.annotated .gutter { color: var(--amber); font-weight: 700; font-size: 11px; }
-.doc-line.annotated:hover { background: var(--amber-soft); filter: brightness(0.97); }
-.doc-line.active { outline: 2px solid var(--accent); outline-offset: -2px; }
-.doc-line .heading-1 { color: var(--text); font-size: 18px; font-weight: 700; }
-.doc-line .heading-2 { color: var(--text); font-size: 15px; font-weight: 700; padding-top: 6px; }
-.doc-line .heading-3 { color: var(--text); font-size: 14px; font-weight: 650; }
-.doc-line .ic { background: var(--bg-soft); padding: 0 4px; border-radius: 3px; font-size: 0.95em; }
-.doc-line .strong { font-weight: 700; }
-.doc-line .em { font-style: italic; color: var(--accent); }
-.doc-line a { color: var(--accent); text-decoration: underline; }
-.input-row { grid-column: 1 / -1; margin: 4px 0 8px 44px; padding: 8px;
-  background: var(--bg-elev); border: 1px solid var(--accent); border-radius: 6px; }
-.input-row textarea { width: 100%; min-height: 60px; padding: 6px 8px;
-  font-family: var(--sans); font-size: 13px; line-height: 1.4; color: var(--text);
-  background: var(--bg); border: 1px solid var(--border); border-radius: 4px; resize: vertical; }
-.input-row textarea:focus { outline: 1px solid var(--accent); border-color: var(--accent); }
-.input-row .input-actions { display: flex; gap: 6px; margin-top: 6px; justify-content: flex-end; }
-.btn { padding: 5px 12px; border-radius: 5px; border: 1px solid var(--border);
-  background: transparent; color: var(--text-dim); font-family: inherit; font-size: 12px; font-weight: 500; cursor: pointer; }
+.hdr-actions { display: flex; gap: 8px; align-items: center; }
+.ann-toggle { display: inline-flex; align-items: center; gap: 6px;
+  background: var(--accent); color: #fff; border: 1px solid var(--accent);
+  border-radius: 5px; padding: 6px 12px; font-family: inherit; font-size: 13px; font-weight: 600; cursor: pointer; }
+.ann-toggle:hover { filter: brightness(1.05); }
+body:not(.ann-mode) .ann-toggle { background: var(--bg-soft); color: var(--text-dim); border-color: var(--border); }
+body:not(.ann-mode) .ann-toggle:hover { color: var(--text); border-color: var(--border-strong); }
+.ann-badge { background: rgba(255,255,255,0.25); color: inherit; padding: 0 6px; border-radius: 99px; font-size: 11px; font-weight: 700; }
+body:not(.ann-mode) .ann-badge { background: var(--bg); color: var(--text-dim); }
+.ghost-btn { background: transparent; color: var(--text-dim); border: 1px solid var(--border);
+  border-radius: 5px; padding: 6px 12px; font-family: inherit; font-size: 13px; cursor: pointer; }
+.ghost-btn:hover { color: var(--text); border-color: var(--border-strong); }
+.icon-btn { background: transparent; border: none; color: var(--text-dim); cursor: pointer;
+  font-size: 16px; padding: 4px 8px; border-radius: 4px; }
+.icon-btn:hover { color: var(--text); background: var(--bg-soft); }
+/* Article */
+.article-wrap { max-width: 820px; margin: 0 auto; padding: 24px 32px 96px; }
+.article-help { font-size: 13px; color: var(--text-dim); background: var(--accent-soft);
+  border: 1px solid var(--accent); border-radius: 6px; padding: 10px 14px; margin: 0 0 24px; line-height: 1.5; }
+body:not(.ann-mode) .article-help { display: none; }
+.article-help strong { color: var(--text); }
+.article { font-size: 15px; line-height: 1.7; }
+.article h1, .article h2, .article h3, .article h4, .article h5, .article h6 {
+  font-family: var(--serif); font-weight: 700; line-height: 1.25; margin: 1.8em 0 .55em; color: var(--text); }
+.article h1 { font-size: 2rem; margin-top: 0; }
+.article h2 { font-size: 1.5rem; border-bottom: 1px solid var(--border); padding-bottom: .3em; }
+.article h3 { font-size: 1.2rem; }
+.article h4 { font-size: 1.05rem; }
+.article p { margin: .9em 0; }
+.article a { color: var(--accent); text-decoration: underline; text-underline-offset: 2px; }
+.article code { font-family: var(--mono); font-size: .9em; background: var(--bg-soft);
+  padding: .12em .4em; border-radius: 4px; }
+.article pre { position: relative; background: #1e1e24; color: #e6e6eb; padding: 16px 18px; border-radius: 8px;
+  overflow-x: auto; font-size: .88rem; line-height: 1.55; margin: 1.2em 0; }
+.article pre code { background: none; padding: 0; color: inherit; font-size: inherit; }
+.code-copy-btn { position: absolute; top: 8px; right: 8px; background: rgba(255,255,255,0.08);
+  color: #e6e6eb; border: 1px solid rgba(255,255,255,0.15); border-radius: 5px;
+  padding: 4px 10px; font: 600 11px var(--sans); cursor: pointer; opacity: 0;
+  transition: opacity .15s ease, background .15s ease; letter-spacing: .02em; z-index: 2; }
+.article pre:hover .code-copy-btn,
+.article pre:focus-within .code-copy-btn { opacity: 1; }
+.code-copy-btn:hover { background: rgba(255,255,255,0.16); }
+.code-copy-btn:focus { opacity: 1; outline: 2px solid var(--accent); outline-offset: 2px; }
+.code-copy-btn.copied { background: var(--green); color: #fff; border-color: var(--green); }
+.article blockquote { margin: 1.2em 0; padding: .5em 1.2em; border-left: 4px solid var(--accent);
+  background: var(--accent-soft); color: var(--text-dim); border-radius: 0 6px 6px 0; }
+.article ul, .article ol { padding-left: 1.8em; margin: .9em 0; }
+.article li { margin: .3em 0; }
+.article table { border-collapse: collapse; width: 100%; margin: 1.4em 0; font-size: .92em; }
+.article th, .article td { border: 1px solid var(--border); padding: .55em .8em; text-align: left; vertical-align: top; }
+.article th { background: var(--bg-soft); font-weight: 650; }
+.article hr { border: none; border-top: 1px solid var(--border); margin: 2.2em 0; }
+.article strong { font-weight: 700; }
+.article em { font-style: italic; }
+/* Annotation mode: highlight annotatable elements on hover, mark annotated ones */
+.article [data-anchor-id] { position: relative; transition: background .08s, outline .08s; border-radius: 3px; }
+body.ann-mode .article [data-anchor-id] { cursor: pointer; }
+body.ann-mode .article [data-anchor-id]:hover {
+  outline: 2px dashed var(--accent); outline-offset: 2px; background: var(--accent-soft);
+}
+.article [data-anchor-id].annotated {
+  background: var(--amber-soft);
+  outline: 1px solid var(--amber); outline-offset: 1px;
+}
+.article [data-anchor-id].annotated::after {
+  content: attr(data-ann-count); position: absolute; right: -22px; top: 2px;
+  background: var(--amber); color: #fff; font-size: 10px; font-weight: 700;
+  padding: 1px 6px; border-radius: 99px; font-family: var(--sans);
+}
+body.ann-mode .article [data-anchor-id].annotated:hover { outline-color: var(--amber); }
+.article [data-anchor-id].flash {
+  animation: flash 1.6s ease-out;
+}
+@keyframes flash {
+  0%   { background: var(--accent-soft); outline: 2px solid var(--accent); }
+  100% { background: var(--amber-soft); outline: 1px solid var(--amber); }
+}
+/* Form popover */
+.ann-form { position: fixed; z-index: 200; background: var(--bg-elev); border: 1px solid var(--border-strong);
+  border-radius: 8px; padding: 14px; box-shadow: 0 8px 24px rgba(0,0,0,0.25);
+  width: 380px; max-width: calc(100vw - 24px); display: none; flex-direction: column; gap: 10px;
+  font-family: var(--sans); }
+.ann-form.visible { display: flex; }
+.ann-form-section-label { font-size: 11px; text-transform: uppercase; letter-spacing: 0.04em;
+  color: var(--text-mute); font-weight: 600; margin-bottom: 3px; }
+.ann-form-section-value { font-size: 13px; color: var(--text-dim); font-style: italic; }
+.ann-form-snippet-text { margin: 0; padding: 6px 10px; border-left: 3px solid var(--accent);
+  background: var(--bg); border-radius: 0 4px 4px 0; font-family: var(--mono); font-size: 12px;
+  color: var(--text); max-height: 100px; overflow-y: auto; line-height: 1.5; white-space: pre-wrap; word-break: break-word; }
+.ann-form-intents { display: flex; gap: 6px; }
+.ann-intent { flex: 1; padding: 7px 10px; border-radius: 5px; border: 1px solid var(--border);
+  background: transparent; color: var(--text-dim); font-family: inherit; font-size: 12px; font-weight: 600; cursor: pointer; }
+.ann-intent:hover { color: var(--text); border-color: var(--border-strong); }
+.ann-intent[data-intent="fiks"].selected     { background: var(--red);    color: #fff; border-color: var(--red); }
+.ann-intent[data-intent="endre"].selected    { background: var(--orange); color: #fff; border-color: var(--orange); }
+.ann-intent[data-intent="spørsmål"].selected { background: var(--blue);   color: #fff; border-color: var(--blue); }
+.ann-form-comment { width: 100%; min-height: 80px; padding: 8px 10px;
+  font-family: inherit; font-size: 13px; line-height: 1.5; color: var(--text);
+  background: var(--bg); border: 1px solid var(--border); border-radius: 5px; resize: vertical; }
+.ann-form-comment:focus { outline: 1px solid var(--accent); border-color: var(--accent); }
+.ann-form-actions { display: flex; gap: 6px; justify-content: flex-end; }
+.btn { padding: 6px 14px; border-radius: 5px; border: 1px solid var(--border);
+  background: transparent; color: var(--text-dim); font-family: inherit; font-size: 12px; font-weight: 600; cursor: pointer; }
 .btn:hover { color: var(--text); border-color: var(--border-strong); }
 .btn.primary { background: var(--accent); color: #fff; border-color: var(--accent); }
-.btn.primary:hover { filter: brightness(1.1); color: #fff; }
-.btn.primary:disabled { background: var(--bg-soft); color: var(--text-mute); cursor: not-allowed; filter: none; border-color: var(--border); }
-.ghost-btn { background: transparent; color: var(--text-dim); border: 1px solid var(--border);
-  border-radius: 5px; padding: 4px 10px; font-family: inherit; font-size: 12px; cursor: pointer; }
-.ghost-btn:hover { color: var(--red); border-color: var(--red); }
-.notes-panel { border-left: 1px solid var(--border); background: var(--bg-elev);
-  display: flex; flex-direction: column; overflow: hidden; min-height: 0; }
-.notes-header { display: flex; align-items: center; justify-content: space-between;
-  padding: 14px 16px; border-bottom: 1px solid var(--border); }
-.notes-header h3 { font-size: 13px; font-weight: 650; margin: 0; color: var(--text); }
-.notes-list { overflow-y: auto; padding: 12px; flex: 1; min-height: 0; }
-.notes-empty { color: var(--text-mute); font-size: 12px; text-align: center; padding: 24px 8px;
+.btn.primary:hover:not(:disabled) { filter: brightness(1.1); color: #fff; }
+.btn.primary:disabled { background: var(--bg-soft); color: var(--text-mute); border-color: var(--border); cursor: not-allowed; filter: none; }
+/* Annotations panel (slide-in sidebar) */
+.ann-panel { position: fixed; top: 0; right: 0; bottom: 0; width: 420px; max-width: 100vw;
+  background: var(--bg-elev); border-left: 1px solid var(--border); z-index: 150;
+  transform: translateX(100%); transition: transform .2s ease;
+  display: flex; flex-direction: column; box-shadow: -4px 0 20px rgba(0,0,0,0.15); }
+.ann-panel.open { transform: translateX(0); }
+.ann-panel-head { display: flex; align-items: center; justify-content: space-between;
+  padding: 14px 18px; border-bottom: 1px solid var(--border); }
+.ann-panel-head h2 { font-size: 14px; font-weight: 650; margin: 0; }
+.ann-panel-body { flex: 1; overflow-y: auto; padding: 12px 14px; }
+.ann-panel-foot { display: flex; justify-content: space-between; gap: 8px;
+  padding: 12px 14px; border-top: 1px solid var(--border); }
+.ann-panel-empty { color: var(--text-mute); font-size: 13px; text-align: center; padding: 32px 12px;
   font-style: italic; line-height: 1.5; }
-.note-card { background: var(--bg); border: 1px solid var(--border); border-radius: 6px;
-  padding: 10px 12px; margin-bottom: 10px; }
-.note-card:hover { border-color: var(--border-strong); }
-.note-card.active { border-color: var(--accent); box-shadow: 0 0 0 2px var(--accent-soft); }
-.note-card .note-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 4px; }
-.note-card .lineref { font-family: var(--mono); font-size: 11px; color: var(--accent); cursor: pointer; font-weight: 600; }
-.note-card .lineref:hover { text-decoration: underline; }
-.note-card .delete-btn { background: transparent; border: none; color: var(--text-mute);
-  cursor: pointer; padding: 2px 6px; font-size: 12px; border-radius: 4px; }
-.note-card .delete-btn:hover { color: var(--red); background: var(--red-soft); }
-.note-card .target { font-family: var(--mono); font-size: 11px; color: var(--text-mute);
-  margin: 0 0 6px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.note-card .note-text { font-size: 12.5px; color: var(--text); line-height: 1.45; white-space: pre-wrap; word-break: break-word; }
-.note-card textarea { width: 100%; min-height: 60px; padding: 6px 8px;
-  font-family: var(--sans); font-size: 12.5px; line-height: 1.4; color: var(--text);
-  background: var(--bg-elev); border: 1px solid var(--border); border-radius: 4px; resize: vertical; }
-.note-card textarea:focus { outline: 1px solid var(--accent); border-color: var(--accent); }
-.note-card .edit-actions { display: flex; gap: 6px; margin-top: 6px; justify-content: flex-end; }
-.prompt-panel { border-top: 1px solid var(--border); background: var(--bg-elev);
-  padding: 12px 20px 14px; display: flex; flex-direction: column; gap: 8px; max-height: 30vh; }
-.prompt-head { display: flex; justify-content: space-between; align-items: center; font-size: 12px; color: var(--text-dim); }
-.prompt-title { font-weight: 600; color: var(--text); font-size: 13px; }
-.prompt-body { flex: 1; min-height: 0; background: var(--bg); border: 1px solid var(--border); border-radius: 6px;
-  padding: 10px 12px; font-family: var(--mono); font-size: 12px; line-height: 1.5;
-  overflow-y: auto; white-space: pre-wrap; color: var(--text); margin: 0; }
-.prompt-body.empty { color: var(--text-mute); font-style: italic; }
-.copy-btn { background: var(--accent); color: #fff; border: none; border-radius: 5px;
-  padding: 6px 14px; font-family: inherit; font-size: 12px; font-weight: 600; cursor: pointer; }
-.copy-btn:hover:not(:disabled) { filter: brightness(1.1); }
-.copy-btn:disabled { background: var(--bg-soft); color: var(--text-mute); cursor: not-allowed; }
-.copy-btn.copied { background: var(--green); }
+.ann-section { margin: 12px 0 6px; font-size: 11px; font-weight: 650; text-transform: uppercase;
+  letter-spacing: 0.04em; color: var(--text-mute); padding: 0 4px; }
+.ann-section:first-child { margin-top: 0; }
+.ann-item { background: var(--bg); border: 1px solid var(--border); border-radius: 6px;
+  padding: 10px 12px; margin-bottom: 8px; cursor: pointer; }
+.ann-item:hover { border-color: var(--border-strong); }
+.ann-item .ann-item-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 6px; gap: 6px; }
+.ann-item-intent { font-size: 10px; font-weight: 700; text-transform: uppercase;
+  letter-spacing: 0.04em; padding: 2px 8px; border-radius: 99px; }
+.ann-item-intent.fiks     { background: var(--red-soft); color: var(--red); }
+.ann-item-intent.endre    { background: var(--orange-soft); color: var(--orange); }
+.ann-item-intent.spørsmål { background: var(--blue-soft); color: var(--blue); }
+.ann-item-delete { background: transparent; border: none; color: var(--text-mute);
+  cursor: pointer; padding: 2px 6px; border-radius: 4px; font-size: 13px; }
+.ann-item-delete:hover { color: var(--red); background: var(--red-soft); }
+.ann-item-snippet { font-family: var(--mono); font-size: 11px; color: var(--text-mute);
+  margin: 0 0 6px; line-height: 1.5; padding: 4px 8px; background: var(--bg-soft);
+  border-left: 2px solid var(--border-strong); border-radius: 0 4px 4px 0;
+  max-height: 60px; overflow-y: auto; white-space: pre-wrap; word-break: break-word; }
+.ann-item-comment { font-size: 13px; color: var(--text); line-height: 1.5; white-space: pre-wrap; word-break: break-word; }
+.ann-item-comment.empty { color: var(--text-mute); font-style: italic; }
+/* Toast */
+.ann-toast { position: fixed; bottom: 24px; left: 50%; transform: translateX(-50%) translateY(20px);
+  background: var(--text); color: var(--bg-elev); padding: 9px 16px; border-radius: 6px;
+  font-size: 13px; font-weight: 500; opacity: 0; pointer-events: none;
+  transition: opacity .2s, transform .2s; z-index: 300; }
+.ann-toast.visible { opacity: 1; transform: translateX(-50%) translateY(0); }
+/* Overlay (form backdrop) */
+.ann-overlay { position: fixed; inset: 0; background: rgba(0,0,0,0.3); z-index: 100;
+  opacity: 0; pointer-events: none; transition: opacity .15s; }
+.ann-overlay.visible { opacity: 1; pointer-events: auto; }
+/* Scrollbar */
 ::-webkit-scrollbar { width: 10px; height: 10px; }
 ::-webkit-scrollbar-track { background: transparent; }
 ::-webkit-scrollbar-thumb { background: var(--border-strong); border-radius: 6px; }
 ::-webkit-scrollbar-thumb:hover { background: var(--text-mute); }
+/* Print: hide annotation chrome, show article only */
+@media print {
+  .topbar, .ann-form, .ann-panel, .ann-toast, .ann-overlay, .article-help { display: none !important; }
+  .article-wrap { max-width: none; padding: 0; }
+  body { background: #fff; color: #000; }
+}
 `.trim();
 
 // ---------------------------------------------------------------------------
-// Embedded JS app — operator annotation surface.
-// Uses concatenation (no template literals) to avoid backtick collisions
-// with the outer mjs string assembly.
+// Embedded JS app. Uses concatenation (no template literals) to avoid
+// backtick collisions with the outer mjs string assembly.
 // ---------------------------------------------------------------------------
-const APP_JS = `
-const STORAGE_KEY = 'voyage-annotate:' + ARTIFACT_PATH;
-let state = { annotations: [], openInputLine: null, editingId: null, activeId: null };
-let nextId = 1;
 
-function load() {
+const APP_JS = `
+const STORAGE_KEY = 'voyage-annotate:v2:' + ARTIFACT_PATH;
+const INTENT_LABELS = { fiks: 'Fiks', endre: 'Endre', 'spørsmål': 'Spørsmål' };
+const INTENT_ORDER = ['fiks', 'endre', 'spørsmål'];
+
+let annotations = [];
+let nextId = 1;
+let mode = true;
+let currentTarget = null;
+let currentSection = null;
+let currentSnippet = null;
+let currentIntent = null;
+
+// ── Storage ──
+function loadState() {
   try {
     const raw = localStorage.getItem(STORAGE_KEY);
     if (!raw) return;
     const data = JSON.parse(raw);
     if (data && Array.isArray(data.annotations)) {
-      state.annotations = data.annotations;
-      nextId = (data.nextId || data.annotations.reduce(function(m, a){return Math.max(m, a.id);}, 0) + 1) || 1;
+      annotations = data.annotations;
+      nextId = data.nextId || (annotations.reduce(function(m, a){return Math.max(m, a.id);}, 0) + 1);
     }
   } catch (e) {}
 }
-function save() {
-  try { localStorage.setItem(STORAGE_KEY, JSON.stringify({ annotations: state.annotations, nextId: nextId })); } catch (e) {}
+function saveState() {
+  try { localStorage.setItem(STORAGE_KEY, JSON.stringify({ annotations: annotations, nextId: nextId })); } catch (e) {}
 }
-function escapeHtml(s) {
-  return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
-}
-function renderInline(raw) {
-  // raw is the ALREADY-escaped line content
-  let s = raw;
-  s = s.replace(/\\\`([^\\\`]+)\\\`/g, '<span class="ic">$1</span>');
-  s = s.replace(/\\*\\*([^*]+)\\*\\*/g, '<span class="strong">$1</span>');
-  s = s.replace(/(^|[\\s])\\*([^*\\s][^*]*?)\\*(?=\\s|[.,;:!?]|$)/g, '$1<span class="em">$2</span>');
-  s = s.replace(/\\[([^\\]]+)\\]\\(([^)\\s]+)\\)/g, function(m, t, h) {
-    const safe = /^(https?:|mailto:|#)/i.test(h) ? h : '#';
-    return '<a href="' + safe + '" target="_blank" rel="noopener">' + t + '</a>';
-  });
-  return s;
-}
-function classifyLine(raw) {
-  if (/^#{1,6}\\s/.test(raw)) {
-    const m = raw.match(/^(#{1,6})\\s+(.*)$/);
-    return { kind: 'heading', level: m[1].length, content: m[2] };
-  }
-  if (raw.trim() === '') return { kind: 'blank' };
-  return { kind: 'text', content: raw };
-}
-function renderDocLine(raw, lineNum) {
-  const cls = classifyLine(raw);
-  const escaped = escapeHtml(cls.content || raw);
-  let inner = '';
-  if (cls.kind === 'heading') {
-    inner = '<span class="heading-' + Math.min(cls.level, 3) + '">' + renderInline(escaped) + '</span>';
-  } else if (cls.kind === 'blank') {
-    inner = '&nbsp;';
-  } else {
-    inner = renderInline(escaped);
-  }
-  return inner;
-}
-function getAnnotationsForLine(lineNum) {
-  return state.annotations.filter(function(a){ return a.line === lineNum; });
-}
-function renderDoc() {
-  const root = document.getElementById('doc');
-  const html = DOC_LINES.map(function(raw, i) {
-    const lineNum = i + 1;
-    const anns = getAnnotationsForLine(lineNum);
-    const annotated = anns.length > 0 ? ' annotated' : '';
-    const active = state.activeId && anns.some(function(a){return a.id === state.activeId;}) ? ' active' : '';
-    const gutter = anns.length > 0 ? String(anns.length) : '';
-    const content = renderDocLine(raw, lineNum);
-    let row = '<div class="doc-line' + annotated + active + '" data-line="' + lineNum + '" id="ln-' + lineNum + '">'
-      + '<span class="ln">' + lineNum + '</span>'
-      + '<span class="gutter">' + (gutter || '+') + '</span>'
-      + '<span class="content">' + content + '</span>'
-      + '</div>';
-    if (state.openInputLine === lineNum) {
-      const placeholder = anns.length > 0 ? 'Add another note for line ' + lineNum + '...' : 'Your note for line ' + lineNum + '...';
-      row += '<div class="input-row" data-input-line="' + lineNum + '">'
-        + '<textarea id="input-' + lineNum + '" placeholder="' + escapeHtml(placeholder) + '" autofocus></textarea>'
-        + '<div class="input-actions">'
-        + '<button class="btn" data-act="cancel-input">Cancel (Esc)</button>'
-        + '<button class="btn primary" data-act="save-input" data-line="' + lineNum + '" disabled>Save (⌘Enter)</button>'
-        + '</div></div>';
-    }
-    return row;
-  }).join('');
-  root.innerHTML = html;
+function escHtml(s) { return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); }
 
-  root.querySelectorAll('.doc-line').forEach(function(el) {
-    el.addEventListener('click', function(e) {
-      if (e.target.closest('.input-row')) return;
-      const ln = parseInt(el.getAttribute('data-line'), 10);
-      state.openInputLine = state.openInputLine === ln ? null : ln;
-      state.activeId = null;
-      renderAll();
-      if (state.openInputLine) {
-        setTimeout(function(){
-          const ta = document.getElementById('input-' + ln);
-          if (ta) ta.focus();
-        }, 0);
+// ── DOM refs ──
+const body = document.body;
+const article = document.getElementById('article');
+const form = document.getElementById('ann-form');
+const formSection = document.getElementById('ann-form-section');
+const formSnippet = document.getElementById('ann-form-snippet');
+const formComment = document.getElementById('ann-form-comment');
+const formSave = document.getElementById('ann-form-save');
+const formCancel = document.getElementById('ann-form-cancel');
+const intents = document.querySelectorAll('.ann-intent');
+const panel = document.getElementById('ann-panel');
+const panelBody = document.getElementById('ann-panel-body');
+const panelCloseBtn = document.getElementById('ann-panel-close');
+const openPanelBtn = document.getElementById('open-panel');
+const clearAllBtn = document.getElementById('ann-clear-all');
+const copyBtn = document.getElementById('ann-copy');
+const annToggle = document.getElementById('ann-toggle');
+const annToggleLabel = document.getElementById('ann-toggle-label');
+const annBadge = document.getElementById('ann-badge');
+const toast = document.getElementById('ann-toast');
+const overlay = document.getElementById('ann-overlay');
+
+// ── Section lookup ──
+function findSection(el) {
+  let p = el;
+  while (p) {
+    if (p.previousElementSibling) {
+      let s = p.previousElementSibling;
+      while (s) {
+        if (s.matches && (s.matches('h1') || s.matches('h2'))) return s.textContent.trim();
+        s = s.previousElementSibling;
       }
-    });
-  });
-  root.querySelectorAll('button[data-act]').forEach(function(b) {
-    b.addEventListener('click', function(e) {
-      e.stopPropagation();
-      const act = b.dataset.act;
-      if (act === 'cancel-input') { state.openInputLine = null; renderAll(); }
-      else if (act === 'save-input') {
-        const ln = parseInt(b.dataset.line, 10);
-        const ta = document.getElementById('input-' + ln);
-        const text = ta.value.trim();
-        if (!text) return;
-        addAnnotation(ln, text);
-      }
-    });
-  });
-  root.querySelectorAll('textarea[id^="input-"]').forEach(function(ta) {
-    ta.addEventListener('input', function() {
-      const ln = parseInt(ta.id.replace('input-', ''), 10);
-      const saveBtn = document.querySelector('button[data-act="save-input"][data-line="' + ln + '"]');
-      if (saveBtn) saveBtn.disabled = ta.value.trim().length === 0;
-    });
-    ta.addEventListener('keydown', function(e) {
-      if (e.key === 'Escape') { state.openInputLine = null; renderAll(); }
-      else if (e.key === 'Enter' && (e.metaKey || e.ctrlKey)) {
-        const ln = parseInt(ta.id.replace('input-', ''), 10);
-        const text = ta.value.trim();
-        if (text) addAnnotation(ln, text);
-      }
-    });
-  });
+    }
+    p = p.parentElement;
+    if (p && p.tagName === 'ARTICLE') break;
+  }
+  // Fallback: first h1 in article
+  const firstH = article.querySelector('h1, h2');
+  return firstH ? firstH.textContent.trim() : '(top)';
 }
-function addAnnotation(lineNum, text) {
-  const raw = DOC_LINES[lineNum - 1] || '';
-  const snippet = raw.trim().length > 80 ? raw.trim().slice(0, 77) + '…' : raw.trim();
-  const a = { id: nextId++, line: lineNum, target: snippet || '(blank line)', text: text, ts: new Date().toISOString() };
-  state.annotations.push(a);
-  state.openInputLine = null;
-  state.activeId = a.id;
-  save();
-  renderAll();
-  setTimeout(function(){
-    const card = document.getElementById('card-' + a.id);
-    if (card) card.scrollIntoView({ behavior: 'smooth', block: 'nearest' });
-  }, 50);
+
+// ── Snippet from selection or element text ──
+function captureSnippet(el) {
+  const sel = window.getSelection();
+  if (sel && sel.toString().trim().length > 0 && el.contains(sel.anchorNode)) {
+    return sel.toString().trim().slice(0, 300);
+  }
+  return (el.textContent || '').trim().slice(0, 200);
 }
+
+// ── Form open/close ──
+function openForm(evt, target) {
+  currentTarget = target;
+  currentSection = findSection(target);
+  currentSnippet = captureSnippet(target);
+  currentIntent = null;
+  formSection.textContent = currentSection || '(top)';
+  formSnippet.textContent = currentSnippet || '(empty)';
+  formComment.value = '';
+  intents.forEach(function(b) { b.classList.remove('selected'); });
+  formSave.disabled = true;
+
+  // Position near the click (clamped to viewport)
+  const fw = 380, fh = 320;
+  let x = evt.clientX + 14;
+  let y = evt.clientY + 14;
+  if (x + fw > window.innerWidth) x = window.innerWidth - fw - 12;
+  if (y + fh > window.innerHeight) y = Math.max(12, window.innerHeight - fh - 12);
+  if (x < 12) x = 12;
+  if (y < 12) y = 12;
+  form.style.left = x + 'px';
+  form.style.top = y + 'px';
+  form.classList.add('visible');
+  overlay.classList.add('visible');
+  setTimeout(function() { formComment.focus(); }, 50);
+}
+function closeForm() {
+  form.classList.remove('visible');
+  overlay.classList.remove('visible');
+  currentTarget = null;
+  currentSection = null;
+  currentSnippet = null;
+  currentIntent = null;
+}
+
+// ── Save ──
+function saveAnnotation() {
+  if (!currentIntent || !currentTarget) return;
+  const a = {
+    id: nextId++,
+    anchorId: currentTarget.getAttribute('data-anchor-id'),
+    section: currentSection || '(top)',
+    snippet: currentSnippet || '',
+    intent: currentIntent,
+    comment: (formComment.value || '').trim(),
+    ts: new Date().toISOString(),
+  };
+  annotations.push(a);
+  saveState();
+  closeForm();
+  refreshArticleAnnotations();
+  renderPanel();
+  updateCounts();
+  showToast('Annotasjon lagret (' + annotations.length + ')');
+}
+
+// ── Delete ──
 function deleteAnnotation(id) {
-  state.annotations = state.annotations.filter(function(a){ return a.id !== id; });
-  if (state.activeId === id) state.activeId = null;
-  if (state.editingId === id) state.editingId = null;
-  save();
-  renderAll();
+  annotations = annotations.filter(function(a) { return a.id !== id; });
+  saveState();
+  refreshArticleAnnotations();
+  renderPanel();
+  updateCounts();
+  showToast('Annotasjon slettet');
 }
-function updateAnnotation(id, text) {
-  const a = state.annotations.find(function(x){ return x.id === id; });
-  if (!a) return;
-  if (!text.trim()) { deleteAnnotation(id); return; }
-  a.text = text.trim();
-  a.ts = new Date().toISOString();
-  state.editingId = null;
-  save();
-  renderAll();
+
+// ── Refresh article markers ──
+function refreshArticleAnnotations() {
+  // Clear all current markers
+  article.querySelectorAll('[data-anchor-id].annotated').forEach(function(el) {
+    el.classList.remove('annotated');
+    el.removeAttribute('data-ann-count');
+  });
+  // Group by anchorId
+  const byAnchor = {};
+  for (const a of annotations) {
+    if (!a.anchorId) continue;
+    if (!byAnchor[a.anchorId]) byAnchor[a.anchorId] = 0;
+    byAnchor[a.anchorId]++;
+  }
+  for (const anchorId in byAnchor) {
+    const el = article.querySelector('[data-anchor-id="' + CSS.escape(anchorId) + '"]');
+    if (el) {
+      el.classList.add('annotated');
+      el.setAttribute('data-ann-count', byAnchor[anchorId]);
+    }
+  }
 }
-function renderNotesList() {
-  const root = document.getElementById('notes-list');
-  if (state.annotations.length === 0) {
-    root.innerHTML = '<div class="notes-empty">No annotations yet.<br><br>Click any line on the left to add your first note.</div>';
+
+// ── Sidebar panel render ──
+function renderPanel() {
+  if (annotations.length === 0) {
+    panelBody.innerHTML = '<div class="ann-panel-empty">No annotations yet.<br><br>Click any heading, paragraph, list item, or quote in the article to add one.</div>';
     return;
   }
-  const sorted = state.annotations.slice().sort(function(a, b){ return a.line - b.line || a.id - b.id; });
-  root.innerHTML = sorted.map(function(a) {
-    const active = a.id === state.activeId ? ' active' : '';
-    const editing = a.id === state.editingId;
-    return '<div class="note-card' + active + '" id="card-' + a.id + '">'
-      + '<div class="note-head">'
-      + '<span class="lineref" data-jump="' + a.line + '">Line ' + a.line + '</span>'
-      + '<button class="delete-btn" data-del="' + a.id + '" title="Delete">✕</button>'
-      + '</div>'
-      + '<p class="target">' + escapeHtml(a.target) + '</p>'
-      + (editing
-        ? '<textarea id="edit-' + a.id + '">' + escapeHtml(a.text) + '</textarea>'
-          + '<div class="edit-actions">'
-          + '<button class="btn" data-act="cancel-edit">Cancel</button>'
-          + '<button class="btn primary" data-act="save-edit" data-id="' + a.id + '">Save</button>'
-          + '</div>'
-        : '<div class="note-text" data-edit="' + a.id + '" title="Click to edit">' + escapeHtml(a.text) + '</div>')
-      + '</div>';
-  }).join('');
-
-  root.querySelectorAll('.lineref[data-jump]').forEach(function(el) {
-    el.addEventListener('click', function() {
-      const ln = parseInt(el.dataset.jump, 10);
-      const target = document.getElementById('ln-' + ln);
-      if (target) target.scrollIntoView({ behavior: 'smooth', block: 'center' });
-      const id = parseInt(el.closest('.note-card').id.replace('card-', ''), 10);
-      state.activeId = id;
-      renderAll();
-    });
+  // Group by section (preserve insertion order)
+  const groups = [];
+  const groupMap = {};
+  // Sort by document order using anchorId numerical suffix
+  const sorted = annotations.slice().sort(function(a, b) {
+    const ai = parseInt((a.anchorId || '').replace('anch-', ''), 10) || 0;
+    const bi = parseInt((b.anchorId || '').replace('anch-', ''), 10) || 0;
+    if (ai !== bi) return ai - bi;
+    return a.id - b.id;
   });
-  root.querySelectorAll('button[data-del]').forEach(function(b) {
-    b.addEventListener('click', function() {
+  for (const a of sorted) {
+    if (!groupMap[a.section]) {
+      groupMap[a.section] = { section: a.section, items: [] };
+      groups.push(groupMap[a.section]);
+    }
+    groupMap[a.section].items.push(a);
+  }
+  let html = '';
+  for (const g of groups) {
+    html += '<div class="ann-section">' + escHtml(g.section) + '</div>';
+    for (const a of g.items) {
+      html += '<div class="ann-item" data-anchor-id="' + escHtml(a.anchorId || '') + '" data-id="' + a.id + '">'
+        + '<div class="ann-item-head">'
+        + '<span class="ann-item-intent ' + escHtml(a.intent) + '">' + escHtml(INTENT_LABELS[a.intent] || a.intent) + '</span>'
+        + '<button class="ann-item-delete" data-del="' + a.id + '" title="Delete">✕</button>'
+        + '</div>'
+        + '<blockquote class="ann-item-snippet">' + escHtml(a.snippet || '(empty)') + '</blockquote>'
+        + '<div class="ann-item-comment' + (a.comment ? '' : ' empty') + '">' + escHtml(a.comment || '(no comment)') + '</div>'
+        + '</div>';
+    }
+  }
+  panelBody.innerHTML = html;
+
+  panelBody.querySelectorAll('.ann-item-delete').forEach(function(b) {
+    b.addEventListener('click', function(e) {
+      e.stopPropagation();
       if (confirm('Delete this annotation?')) deleteAnnotation(parseInt(b.dataset.del, 10));
     });
   });
-  root.querySelectorAll('.note-text[data-edit]').forEach(function(el) {
-    el.addEventListener('click', function() {
-      state.editingId = parseInt(el.dataset.edit, 10);
-      renderAll();
-      setTimeout(function(){
-        const ta = document.getElementById('edit-' + state.editingId);
-        if (ta) { ta.focus(); ta.setSelectionRange(ta.value.length, ta.value.length); }
-      }, 0);
-    });
-  });
-  root.querySelectorAll('button[data-act="cancel-edit"]').forEach(function(b) {
-    b.addEventListener('click', function() { state.editingId = null; renderAll(); });
-  });
-  root.querySelectorAll('button[data-act="save-edit"]').forEach(function(b) {
-    b.addEventListener('click', function() {
-      const id = parseInt(b.dataset.id, 10);
-      const ta = document.getElementById('edit-' + id);
-      updateAnnotation(id, ta.value);
+  panelBody.querySelectorAll('.ann-item').forEach(function(card) {
+    card.addEventListener('click', function() {
+      const anchor = card.getAttribute('data-anchor-id');
+      const el = article.querySelector('[data-anchor-id="' + CSS.escape(anchor) + '"]');
+      if (el) {
+        el.scrollIntoView({ behavior: 'smooth', block: 'center' });
+        el.classList.remove('flash');
+        void el.offsetWidth;
+        el.classList.add('flash');
+      }
     });
   });
 }
-function renderStats() {
-  const n = state.annotations.length;
-  document.getElementById('stats').innerHTML = n === 0
-    ? '<span class="pill">No annotations yet</span>'
-    : '<span class="pill accent">' + n + ' annotation' + (n === 1 ? '' : 's') + '</span>';
-  const copyBtn = document.getElementById('copy');
-  copyBtn.disabled = n === 0;
+
+// ── Counts + toggle label ──
+function updateCounts() {
+  annBadge.textContent = String(annotations.length);
+  copyBtn.disabled = annotations.length === 0;
 }
-function renderPrompt() {
-  const out = document.getElementById('prompt');
-  if (state.annotations.length === 0) {
-    out.classList.add('empty');
-    out.textContent = 'Click a line and add a note to generate a prompt.';
+
+function setMode(on) {
+  mode = on;
+  body.classList.toggle('ann-mode', on);
+  annToggleLabel.textContent = on ? 'Annotation mode: ON' : 'Annotation mode: OFF';
+  if (!on) closeForm();
+}
+
+// ── Toast ──
+function showToast(msg) {
+  toast.textContent = msg;
+  toast.classList.add('visible');
+  setTimeout(function() { toast.classList.remove('visible'); }, 1800);
+}
+
+// ── Copy Prompt ──
+function buildPromptMarkdown() {
+  if (annotations.length === 0) return '';
+  const sorted = annotations.slice().sort(function(a, b) {
+    const ai = parseInt((a.anchorId || '').replace('anch-', ''), 10) || 0;
+    const bi = parseInt((b.anchorId || '').replace('anch-', ''), 10) || 0;
+    if (ai !== bi) return ai - bi;
+    return a.id - b.id;
+  });
+  let p = 'Please revise the voyage artifact at \\\`' + ARTIFACT_PATH + '\\\` with the operator annotations below.\\n';
+  p += 'Each annotation has an intent — **Fiks** (something is wrong / fix it), **Endre** (change wording/content),\\n';
+  p += 'or **Spørsmål** (operator question — clarify or answer). The quote shows what the operator anchored to.\\n';
+  p += 'Treat the operator notes as authoritative direction.\\n\\n';
+  p += '## Annotations (' + annotations.length + ' total)\\n\\n';
+  let n = 0;
+  for (const a of sorted) {
+    n++;
+    p += '### ' + n + '. [' + (INTENT_LABELS[a.intent] || a.intent) + '] Section: ' + a.section + '\\n';
+    if (a.snippet) p += 'Quote: «' + a.snippet + '»\\n';
+    p += 'Comment: ' + (a.comment || '(no comment)') + '\\n\\n';
+  }
+  return p;
+}
+
+async function copyPrompt() {
+  const md = buildPromptMarkdown();
+  if (!md) return;
+  try {
+    await navigator.clipboard.writeText(md);
+    showToast('Prompt copied (' + annotations.length + ' annotation' + (annotations.length === 1 ? '' : 's') + ')');
+  } catch (e) {
+    // Fallback
+    const ta = document.createElement('textarea');
+    ta.value = md; ta.style.position = 'fixed'; ta.style.opacity = '0';
+    document.body.appendChild(ta); ta.select();
+    try { document.execCommand('copy'); showToast('Prompt copied'); } catch (e2) { alert('Copy failed: ' + e2.message); }
+    ta.remove();
+  }
+}
+
+// ── Wiring ──
+article.addEventListener('click', function(e) {
+  if (!mode) return;
+  const target = e.target.closest('[data-anchor-id]');
+  if (!target) return;
+  // Don't open form when clicking inside an already-open form (overlay catches outside clicks)
+  if (e.target.closest('.ann-form')) return;
+  // Don't open form when clicking a link the user wants to follow — but only if they didn't select text
+  if (e.target.tagName === 'A' && (!window.getSelection() || window.getSelection().toString().trim().length === 0)) {
+    // Allow link clicks in mode if no selection
     return;
   }
-  out.classList.remove('empty');
-  const sorted = state.annotations.slice().sort(function(a, b){ return a.line - b.line || a.id - b.id; });
-  let p = 'Please revise the voyage artifact at \`' + ARTIFACT_PATH + '\` with the operator annotations below.\\n';
-  p += 'Each annotation is anchored to a specific line of the source markdown.\\n';
-  p += 'Treat the operator notes as authoritative direction for what should change.\\n\\n';
-  p += '## Annotations (' + state.annotations.length + ' total)\\n\\n';
-  for (let i = 0; i < sorted.length; i++) {
-    const a = sorted[i];
-    p += '### Line ' + a.line + '\\n';
-    p += 'Source: ' + a.target + '\\n';
-    p += 'Operator note: ' + a.text + '\\n\\n';
-  }
-  out.textContent = p;
-}
-document.getElementById('copy').addEventListener('click', async function() {
-  const txt = document.getElementById('prompt').textContent;
-  try {
-    await navigator.clipboard.writeText(txt);
-    const btn = document.getElementById('copy');
-    btn.classList.add('copied');
-    const old = btn.textContent;
-    btn.textContent = 'Copied!';
-    setTimeout(function(){ btn.classList.remove('copied'); btn.textContent = old; }, 1500);
-  } catch (e) { alert('Copy failed: ' + e.message); }
+  e.preventDefault();
+  openForm(e, target);
 });
-document.getElementById('clear-all').addEventListener('click', function() {
-  if (state.annotations.length === 0) return;
-  if (confirm('Remove all ' + state.annotations.length + ' annotations? This cannot be undone.')) {
-    state.annotations = []; state.activeId = null; state.editingId = null;
-    save(); renderAll();
+
+intents.forEach(function(b) {
+  b.addEventListener('click', function() {
+    intents.forEach(function(x) { x.classList.remove('selected'); });
+    b.classList.add('selected');
+    currentIntent = b.dataset.intent;
+    formSave.disabled = false;
+  });
+});
+
+formSave.addEventListener('click', saveAnnotation);
+formCancel.addEventListener('click', closeForm);
+overlay.addEventListener('click', closeForm);
+
+formComment.addEventListener('keydown', function(e) {
+  if (e.key === 'Enter' && (e.metaKey || e.ctrlKey) && !formSave.disabled) {
+    saveAnnotation();
+  } else if (e.key === 'Escape') {
+    closeForm();
   }
 });
+
 document.addEventListener('keydown', function(e) {
-  if (e.key === 'Escape' && state.openInputLine !== null) {
-    state.openInputLine = null;
-    renderAll();
+  if (e.key === 'Escape' && form.classList.contains('visible')) closeForm();
+});
+
+annToggle.addEventListener('click', function() { setMode(!mode); });
+
+openPanelBtn.addEventListener('click', function() {
+  panel.classList.toggle('open');
+});
+panelCloseBtn.addEventListener('click', function() { panel.classList.remove('open'); });
+
+clearAllBtn.addEventListener('click', function() {
+  if (annotations.length === 0) return;
+  if (confirm('Remove all ' + annotations.length + ' annotations? This cannot be undone.')) {
+    annotations = [];
+    saveState();
+    refreshArticleAnnotations();
+    renderPanel();
+    updateCounts();
+    showToast('All annotations cleared');
   }
 });
-function renderAll() {
-  renderDoc();
-  renderNotesList();
-  renderStats();
-  renderPrompt();
-}
-load();
-renderAll();
+
+copyBtn.addEventListener('click', copyPrompt);
+
+// ── Init ──
+loadState();
+refreshArticleAnnotations();
+renderPanel();
+updateCounts();
+setMode(true);
+
+// ── Code-block copy buttons ──
+document.querySelectorAll('.article pre').forEach(function(pre) {
+  var btn = document.createElement('button');
+  btn.type = 'button';
+  btn.className = 'code-copy-btn';
+  btn.textContent = 'Copy';
+  btn.setAttribute('aria-label', 'Copy code block to clipboard');
+  btn.addEventListener('click', function(e) {
+    e.stopPropagation();
+    var code = pre.querySelector('code');
+    var text = code ? code.textContent : pre.textContent;
+    navigator.clipboard.writeText(text).then(function() {
+      btn.textContent = 'Copied';
+      btn.classList.add('copied');
+      setTimeout(function() {
+        btn.textContent = 'Copy';
+        btn.classList.remove('copied');
+      }, 1500);
+    }).catch(function() {
+      btn.textContent = 'Failed';
+      setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
+    });
+  });
+  pre.appendChild(btn);
+});
 `.trim();
 
 // ---------------------------------------------------------------------------
 // CLI
 // ---------------------------------------------------------------------------
+
 function parseArgs(argv) {
   const args = { input: null, out: null, help: false };
   for (let i = 0; i < argv.length; i++) {
@@ -559,9 +941,10 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     process.stdout.write(
       'Usage: annotate <artifact.md> [--out <file.html>]\n\n'
       + 'Builds a self-contained operator-annotation HTML for a voyage\n'
-      + 'artifact. The operator opens the HTML, clicks lines to attach\n'
-      + 'their own notes, copies a structured prompt, pastes back into\n'
-      + 'Claude. Annotations persist in localStorage per artifact path.\n\n'
+      + 'artifact. The operator opens the HTML, selects text or clicks any\n'
+      + 'element, picks an intent (Fiks / Endre / Spørsmål), writes a\n'
+      + 'comment, and copies a structured prompt to paste back into Claude.\n'
+      + 'Annotations persist in localStorage per artifact path.\n\n'
       + 'Default output: <input-basename>.html next to input.\n',
     );
     process.exit(args.help ? 0 : 2);
@@ -570,4 +953,4 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   process.stdout.write(out + '\n');
 }
 
-export { render, buildHtml, parseArgs };
+export { render, buildHtml, renderMarkdown, parseArgs };
diff --git a/plugins/voyage/templates/trekbrief-template.md b/plugins/voyage/templates/trekbrief-template.md
index b35d893..e0c2232 100644
--- a/plugins/voyage/templates/trekbrief-template.md
+++ b/plugins/voyage/templates/trekbrief-template.md
@@ -1,6 +1,6 @@
 ---
 type: trekbrief
-brief_version: 2.0
+brief_version: "2.1"
 created: {YYYY-MM-DD}
 task: "{one-line task description}"
 slug: {slug}
@@ -10,6 +10,20 @@ research_status: pending         # pending | in_progress | complete | skipped
 auto_research: false             # true if user opted into Claude-managed research
 interview_turns: {N}
 source: {interview | manual}
+# v5.1 — per-phase effort + model signal (Phase 3.5).
+# `effort` ∈ {low, standard, high}. Omit `model:` for `standard` so composition
+# falls through to profile resolver. Force-stop alternative is the commented
+# `phase_signals_partial: true` below (mutually exclusive with `phase_signals`).
+phase_signals:
+  - phase: research
+    effort: standard
+  - phase: plan
+    effort: standard
+  - phase: execute
+    effort: standard
+  - phase: review
+    effort: standard
+# phase_signals_partial: true   # uncomment to record force-stop instead of phase_signals
 ---
 
 # Task: {title}
diff --git a/plugins/voyage/tests/commands/trekbrief.test.mjs b/plugins/voyage/tests/commands/trekbrief.test.mjs
new file mode 100644
index 0000000..0788f67
--- /dev/null
+++ b/plugins/voyage/tests/commands/trekbrief.test.mjs
@@ -0,0 +1,130 @@
+// tests/commands/trekbrief.test.mjs
+// v5.1 prose-pin tests + v5.1.1 runtime SC1 tests.
+//
+// Pattern D prose-pins kept as doc-anchors for the .md file. Runtime tests
+// added per finding 350853 (BLOCKER SC1) + a7f4f95a (MAJOR Plan Step 5 drift).
+//
+// SC1 re-interpretation (per plan Step 10 amendment): "asserts on 4
+// AskUserQuestion calls" → "asserts resolvePhaseSignal returns non-null for
+// all 4 entries in PHASE_SIGNAL_PHASES when applied to a brief with a
+// committed phase_signals block." See brief amendment for full rationale.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseSignal } from '../../lib/profiles/phase-signal-resolver.mjs';
+import { validateBriefContent, PHASE_SIGNAL_PHASES, EFFORT_LEVELS } from '../../lib/validators/brief-validator.mjs';
+import { parseDocument } from '../../lib/util/frontmatter.mjs';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(HERE, '..', '..');
+const COMMAND_FILE = join(ROOT, 'commands', 'trekbrief.md');
+const FIXTURE = (name) => join(ROOT, 'tests', 'fixtures', name);
+
+function read() {
+  return readFileSync(COMMAND_FILE, 'utf8');
+}
+
+function readFixture(name) {
+  return readFileSync(FIXTURE(name), 'utf8');
+}
+
+function frontmatterOf(text) {
+  const doc = parseDocument(text);
+  return doc.parsed && doc.parsed.frontmatter;
+}
+
+// --- Pattern D prose-pins (doc-anchors) ---
+
+test('trekbrief — Phase 3.5 heading is present', () => {
+  const text = read();
+  assert.match(text, /^## Phase 3\.5 — Per-phase effort dialog$/m,
+    'Phase 3.5 heading missing from commands/trekbrief.md');
+});
+
+test('trekbrief — Phase 3.5 references all 4 downstream phases', () => {
+  const text = read();
+  const startIdx = text.indexOf('## Phase 3.5');
+  assert.ok(startIdx >= 0, 'Phase 3.5 not found');
+  const section = text.slice(startIdx, text.indexOf('## Phase 4', startIdx));
+  for (const phase of ['research', 'plan', 'execute', 'review']) {
+    assert.ok(section.includes(phase),
+      `Phase 3.5 missing reference to "${phase}"`);
+  }
+});
+
+test('trekbrief — Phase 3.5 documents phase_signals_partial force-stop', () => {
+  const text = read();
+  assert.ok(text.includes('phase_signals_partial'),
+    'phase_signals_partial not mentioned in /trekbrief command prose');
+});
+
+// --- v5.1.1 runtime SC1 tests ---
+
+test('trekbrief — SC1: resolvePhaseSignal returns non-null for all 4 phases on committed brief (brief-effort-low)', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-low.md'));
+  for (const phase of PHASE_SIGNAL_PHASES) {
+    const r = resolvePhaseSignal(fm, phase);
+    assert.ok(r && typeof r === 'object',
+      `phase=${phase}: resolver must return non-null for committed brief; got ${JSON.stringify(r)}`);
+    assert.ok(typeof r.effort === 'string',
+      `phase=${phase}: resolver result must include effort`);
+  }
+});
+
+test('trekbrief — SC1: each of 4 phases has both effort AND model on full-signals fixture', () => {
+  const fm = frontmatterOf(readFixture('brief-with-phase-signals.md'));
+  for (const phase of PHASE_SIGNAL_PHASES) {
+    const r = resolvePhaseSignal(fm, phase);
+    assert.ok(r && typeof r === 'object', `phase=${phase}: must resolve`);
+    assert.ok(EFFORT_LEVELS.includes(r.effort),
+      `phase=${phase}: effort "${r.effort}" not in EFFORT_LEVELS`);
+    if ('model' in r) {
+      assert.ok(['sonnet', 'opus'].includes(r.model),
+        `phase=${phase}: model "${r.model}" not in [sonnet, opus]`);
+    }
+  }
+});
+
+test('trekbrief — SC1: missing phase_signals + brief_version 2.1 triggers BRIEF_V51_MISSING_SIGNALS', () => {
+  const r = validateBriefContent(readFixture('brief-v21-no-signals.md'), { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `gate must fire; errors=${JSON.stringify(r.errors)}`,
+  );
+});
+
+test('trekbrief — SC1: phase_signals_partial: true does NOT trigger the gate', () => {
+  const partial = `---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-14
+task: "Partial brief"
+slug: partial-brief
+project_dir: .claude/projects/2026-05-14-partial-brief/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 2
+source: fixture
+phase_signals_partial: true
+---
+
+# Task
+
+## Intent
+Stop early.
+
+## Goal
+Test partial mode.
+
+## Success Criteria
+- gate does not fire.
+`;
+  const r = validateBriefContent(partial, { strict: true });
+  assert.equal(r.valid, true, `errors=${JSON.stringify(r.errors)}`);
+  assert.ok(!r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'));
+});
diff --git a/plugins/voyage/tests/commands/trekexecute.test.mjs b/plugins/voyage/tests/commands/trekexecute.test.mjs
new file mode 100644
index 0000000..15a67c7
--- /dev/null
+++ b/plugins/voyage/tests/commands/trekexecute.test.mjs
@@ -0,0 +1,75 @@
+// tests/commands/trekexecute.test.mjs
+// v5.1 prose-pin tests + v5.1.1 runtime SC4 + SC7 tests for /trekexecute.
+// Plan Assumption 2 locks low-effort to --gates open + sequential-only.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseSignal } from '../../lib/profiles/phase-signal-resolver.mjs';
+import { validateBriefContent } from '../../lib/validators/brief-validator.mjs';
+import { parseDocument } from '../../lib/util/frontmatter.mjs';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(HERE, '..', '..');
+const COMMAND_FILE = join(ROOT, 'commands', 'trekexecute.md');
+const PHASE = 'execute';
+
+function read() { return readFileSync(COMMAND_FILE, 'utf8'); }
+function readFixture(name) { return readFileSync(join(ROOT, 'tests', 'fixtures', name), 'utf8'); }
+function frontmatterOf(text) {
+  const doc = parseDocument(text);
+  return doc.parsed && doc.parsed.frontmatter;
+}
+
+// --- Pattern D prose-pins ---
+
+test('trekexecute — sequencing-gate surface mentions BRIEF_V51_MISSING_SIGNALS + phase_signals', () => {
+  const text = read();
+  assert.ok(text.includes('BRIEF_V51_MISSING_SIGNALS'),
+    '/trekexecute must surface the BRIEF_V51_MISSING_SIGNALS sequencing gate');
+  assert.ok(text.includes('phase_signals'),
+    '/trekexecute must reference phase_signals (v5.1 composition rule)');
+});
+
+test('trekexecute — low-effort path references --gates open + sequential', () => {
+  const text = read();
+  const compIdx = text.indexOf('## Composition rule (v5.1)');
+  assert.ok(compIdx >= 0, 'Composition rule (v5.1) section missing');
+  const section = text.slice(compIdx, compIdx + 2000);
+  assert.match(section, /--gates open/, 'Low-effort path must mention --gates open');
+  assert.match(section, /sequential/, 'Low-effort path must mention sequential-only execution');
+});
+
+// --- v5.1.1 runtime SC4 + SC7 ---
+
+test('trekexecute — SC4: low-effort fixture → resolver returns {effort: low, model: sonnet}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-low.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'low');
+  assert.equal(r.model, 'sonnet');
+});
+
+test('trekexecute — SC4: standard-effort fixture → resolver returns {effort: standard, model: undefined}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-standard.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'standard');
+  assert.equal(r.model, undefined);
+});
+
+test('trekexecute — SC4: high-effort fixture → resolver returns {effort: high, model: opus}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-high.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'high');
+  assert.equal(r.model, 'opus');
+});
+
+test('trekexecute — SC7: brief_version 2.1 + no phase_signals + no partial → BRIEF_V51_MISSING_SIGNALS', () => {
+  const r = validateBriefContent(readFixture('brief-v21-no-signals.md'), { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `sequencing gate must fire; errors=${JSON.stringify(r.errors)}`,
+  );
+});
diff --git a/plugins/voyage/tests/commands/trekplan.test.mjs b/plugins/voyage/tests/commands/trekplan.test.mjs
new file mode 100644
index 0000000..1ab3ee0
--- /dev/null
+++ b/plugins/voyage/tests/commands/trekplan.test.mjs
@@ -0,0 +1,73 @@
+// tests/commands/trekplan.test.mjs
+// v5.1 prose-pin tests + v5.1.1 runtime SC4 + SC7 tests for /trekplan.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseSignal } from '../../lib/profiles/phase-signal-resolver.mjs';
+import { validateBriefContent } from '../../lib/validators/brief-validator.mjs';
+import { parseDocument } from '../../lib/util/frontmatter.mjs';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(HERE, '..', '..');
+const COMMAND_FILE = join(ROOT, 'commands', 'trekplan.md');
+const PHASE = 'plan';
+
+function read() { return readFileSync(COMMAND_FILE, 'utf8'); }
+function readFixture(name) { return readFileSync(join(ROOT, 'tests', 'fixtures', name), 'utf8'); }
+function frontmatterOf(text) {
+  const doc = parseDocument(text);
+  return doc.parsed && doc.parsed.frontmatter;
+}
+
+// --- Pattern D prose-pins (kept) ---
+
+test('trekplan — sequencing-gate surface mentions BRIEF_V51_MISSING_SIGNALS + phase_signals', () => {
+  const text = read();
+  assert.ok(text.includes('BRIEF_V51_MISSING_SIGNALS'),
+    '/trekplan must surface the BRIEF_V51_MISSING_SIGNALS sequencing gate');
+  assert.ok(text.includes('phase_signals'),
+    '/trekplan must reference phase_signals (v5.1 composition rule)');
+});
+
+test('trekplan — low-effort path references --quick equivalent', () => {
+  const text = read();
+  const compIdx = text.indexOf('## Composition rule (v5.1)');
+  assert.ok(compIdx >= 0, 'Composition rule (v5.1) section missing');
+  const section = text.slice(compIdx, compIdx + 2000);
+  assert.match(section, /--quick/, 'Low-effort path must mention --quick equivalent');
+});
+
+// --- v5.1.1 runtime SC4 + SC7 tests ---
+
+test('trekplan — SC4: low-effort fixture → resolver returns {effort: low, model: sonnet}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-low.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'low');
+  assert.equal(r.model, 'sonnet');
+});
+
+test('trekplan — SC4: standard-effort fixture → resolver returns {effort: standard, model: undefined}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-standard.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'standard');
+  assert.equal(r.model, undefined);
+});
+
+test('trekplan — SC4: high-effort fixture → resolver returns {effort: high, model: opus}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-high.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'high');
+  assert.equal(r.model, 'opus');
+});
+
+test('trekplan — SC7: brief_version 2.1 + no phase_signals + no partial → BRIEF_V51_MISSING_SIGNALS', () => {
+  const r = validateBriefContent(readFixture('brief-v21-no-signals.md'), { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `sequencing gate must fire; errors=${JSON.stringify(r.errors)}`,
+  );
+});
diff --git a/plugins/voyage/tests/commands/trekresearch.test.mjs b/plugins/voyage/tests/commands/trekresearch.test.mjs
new file mode 100644
index 0000000..0e10351
--- /dev/null
+++ b/plugins/voyage/tests/commands/trekresearch.test.mjs
@@ -0,0 +1,73 @@
+// tests/commands/trekresearch.test.mjs
+// v5.1 prose-pin tests + v5.1.1 runtime SC4 + SC7 tests for /trekresearch.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseSignal } from '../../lib/profiles/phase-signal-resolver.mjs';
+import { validateBriefContent } from '../../lib/validators/brief-validator.mjs';
+import { parseDocument } from '../../lib/util/frontmatter.mjs';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(HERE, '..', '..');
+const COMMAND_FILE = join(ROOT, 'commands', 'trekresearch.md');
+const PHASE = 'research';
+
+function read() { return readFileSync(COMMAND_FILE, 'utf8'); }
+function readFixture(name) { return readFileSync(join(ROOT, 'tests', 'fixtures', name), 'utf8'); }
+function frontmatterOf(text) {
+  const doc = parseDocument(text);
+  return doc.parsed && doc.parsed.frontmatter;
+}
+
+// --- Pattern D prose-pins ---
+
+test('trekresearch — sequencing-gate surface mentions BRIEF_V51_MISSING_SIGNALS + phase_signals', () => {
+  const text = read();
+  assert.ok(text.includes('BRIEF_V51_MISSING_SIGNALS'),
+    '/trekresearch must surface the BRIEF_V51_MISSING_SIGNALS sequencing gate');
+  assert.ok(text.includes('phase_signals'),
+    '/trekresearch must reference phase_signals (v5.1 composition rule)');
+});
+
+test('trekresearch — low-effort path references --quick equivalent', () => {
+  const text = read();
+  const compIdx = text.indexOf('## Composition rule (v5.1)');
+  assert.ok(compIdx >= 0, 'Composition rule (v5.1) section missing');
+  const section = text.slice(compIdx, compIdx + 2000);
+  assert.match(section, /--quick/, 'Low-effort path must mention --quick equivalent');
+});
+
+// --- v5.1.1 runtime SC4 + SC7 ---
+
+test('trekresearch — SC4: low-effort fixture → resolver returns {effort: low, model: sonnet}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-low.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'low');
+  assert.equal(r.model, 'sonnet');
+});
+
+test('trekresearch — SC4: standard-effort fixture → resolver returns {effort: standard, model: undefined}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-standard.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'standard');
+  assert.equal(r.model, undefined);
+});
+
+test('trekresearch — SC4: high-effort fixture → resolver returns {effort: high, model: opus}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-high.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'high');
+  assert.equal(r.model, 'opus');
+});
+
+test('trekresearch — SC7: brief_version 2.1 + no phase_signals + no partial → BRIEF_V51_MISSING_SIGNALS', () => {
+  const r = validateBriefContent(readFixture('brief-v21-no-signals.md'), { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `sequencing gate must fire; errors=${JSON.stringify(r.errors)}`,
+  );
+});
diff --git a/plugins/voyage/tests/commands/trekreview.test.mjs b/plugins/voyage/tests/commands/trekreview.test.mjs
new file mode 100644
index 0000000..e66ef00
--- /dev/null
+++ b/plugins/voyage/tests/commands/trekreview.test.mjs
@@ -0,0 +1,74 @@
+// tests/commands/trekreview.test.mjs
+// v5.1 prose-pin tests + v5.1.1 runtime SC4 + SC7 tests for /trekreview.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseSignal } from '../../lib/profiles/phase-signal-resolver.mjs';
+import { validateBriefContent } from '../../lib/validators/brief-validator.mjs';
+import { parseDocument } from '../../lib/util/frontmatter.mjs';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(HERE, '..', '..');
+const COMMAND_FILE = join(ROOT, 'commands', 'trekreview.md');
+const PHASE = 'review';
+
+function read() { return readFileSync(COMMAND_FILE, 'utf8'); }
+function readFixture(name) { return readFileSync(join(ROOT, 'tests', 'fixtures', name), 'utf8'); }
+function frontmatterOf(text) {
+  const doc = parseDocument(text);
+  return doc.parsed && doc.parsed.frontmatter;
+}
+
+// --- Pattern D prose-pins ---
+
+test('trekreview — sequencing-gate surface mentions BRIEF_V51_MISSING_SIGNALS + phase_signals', () => {
+  const text = read();
+  assert.ok(text.includes('BRIEF_V51_MISSING_SIGNALS'),
+    '/trekreview must surface the BRIEF_V51_MISSING_SIGNALS sequencing gate');
+  assert.ok(text.includes('phase_signals'),
+    '/trekreview must reference phase_signals (v5.1 composition rule)');
+});
+
+test('trekreview — low-effort path references --quick equivalent', () => {
+  const text = read();
+  const compIdx = text.indexOf('## Composition rule (v5.1)');
+  assert.ok(compIdx >= 0, 'Composition rule (v5.1) section missing');
+  const section = text.slice(compIdx, compIdx + 2000);
+  assert.match(section, /--quick/, 'Low-effort path must mention --quick equivalent');
+});
+
+// --- v5.1.1 runtime SC4 + SC7 ---
+
+test('trekreview — SC4: low-effort fixture → resolver returns {effort: low, model: sonnet}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-low.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'low');
+  assert.equal(r.model, 'sonnet');
+});
+
+test('trekreview — SC4: standard-effort fixture → resolver returns {effort: standard, model: undefined}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-standard.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'standard');
+  assert.equal(r.model, undefined);
+});
+
+test('trekreview — SC4: high-effort fixture → resolver returns {effort: high, model: opus}', () => {
+  const fm = frontmatterOf(readFixture('brief-effort-high.md'));
+  const r = resolvePhaseSignal(fm, PHASE);
+  assert.equal(r.effort, 'high');
+  assert.equal(r.model, 'opus');
+});
+
+test('trekreview — SC7: brief_version 2.1 + no phase_signals + no partial → BRIEF_V51_MISSING_SIGNALS', () => {
+  // Falsification via brief-v21-no-signals fixture: validator must catch missing signals.
+  const r = validateBriefContent(readFixture('brief-v21-no-signals.md'), { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `sequencing gate must fire; errors=${JSON.stringify(r.errors)}`,
+  );
+});
diff --git a/plugins/voyage/tests/fixtures/brief-effort-high.md b/plugins/voyage/tests/fixtures/brief-effort-high.md
new file mode 100644
index 0000000..0d119b1
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-effort-high.md
@@ -0,0 +1,45 @@
+---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-14
+task: "Fixture: high-effort all phases (v5.1.1 runtime test)"
+slug: brief-effort-high
+project_dir: .claude/projects/2026-05-14-brief-effort-high/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 4
+source: fixture
+phase_signals:
+  - phase: research
+    effort: high
+    model: opus
+  - phase: plan
+    effort: high
+    model: opus
+  - phase: execute
+    effort: high
+    model: opus
+  - phase: review
+    effort: high
+    model: opus
+---
+
+# Task: High-effort fixture
+
+## Intent
+
+Test fixture for v5.1.1 runtime resolver tests — all 4 phases at the
+high effort tier with explicit opus model overrides. Mirrors the
+production-grade premium-profile scenario.
+
+## Goal
+
+Resolver returns `{effort: 'high', model: 'opus'}` for each of the 4
+PHASE_SIGNAL_PHASES.
+
+## Success Criteria
+
+- Validator passes.
+- resolvePhaseSignal(fm, phase).effort === 'high' for all 4 phases.
+- resolvePhaseSignal(fm, phase).model === 'opus' for all 4 phases.
diff --git a/plugins/voyage/tests/fixtures/brief-effort-low.md b/plugins/voyage/tests/fixtures/brief-effort-low.md
new file mode 100644
index 0000000..40b4f93
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-effort-low.md
@@ -0,0 +1,43 @@
+---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-14
+task: "Fixture: low-effort all phases (v5.1.1 runtime test)"
+slug: brief-effort-low
+project_dir: .claude/projects/2026-05-14-brief-effort-low/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 4
+source: fixture
+phase_signals:
+  - phase: research
+    effort: low
+    model: sonnet
+  - phase: plan
+    effort: low
+    model: sonnet
+  - phase: execute
+    effort: low
+    model: sonnet
+  - phase: review
+    effort: low
+    model: sonnet
+---
+
+# Task: Low-effort fixture
+
+## Intent
+
+Test fixture for v5.1.1 runtime resolver tests — all 4 phases at the lowest
+effort tier with explicit sonnet model overrides.
+
+## Goal
+
+Resolver returns `{effort: 'low', model: 'sonnet'}` for each of the 4
+PHASE_SIGNAL_PHASES.
+
+## Success Criteria
+
+- Validator passes.
+- resolvePhaseSignal(fm, phase) is non-null for all 4 phases.
diff --git a/plugins/voyage/tests/fixtures/brief-effort-standard.md b/plugins/voyage/tests/fixtures/brief-effort-standard.md
new file mode 100644
index 0000000..f0bb3dd
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-effort-standard.md
@@ -0,0 +1,42 @@
+---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-14
+task: "Fixture: standard-effort all phases, no model (v5.1.1 runtime test)"
+slug: brief-effort-standard
+project_dir: .claude/projects/2026-05-14-brief-effort-standard/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 4
+source: fixture
+phase_signals:
+  - phase: research
+    effort: standard
+  - phase: plan
+    effort: standard
+  - phase: execute
+    effort: standard
+  - phase: review
+    effort: standard
+---
+
+# Task: Standard-effort fixture (no model override)
+
+## Intent
+
+Test fixture for v5.1.1 runtime resolver tests — all 4 phases at the
+standard tier WITHOUT explicit model fields. This is the operator-skipped
+model path that should fall through to the profile.
+
+## Goal
+
+Resolver returns `{effort: 'standard', model: undefined}` for each of the 4
+PHASE_SIGNAL_PHASES. The orchestrator-model path then falls through to the
+active profile's phase_models.
+
+## Success Criteria
+
+- Validator passes.
+- resolvePhaseSignal(fm, phase).model is undefined.
+- resolvePhaseSignal(fm, phase).effort is 'standard'.
diff --git a/plugins/voyage/tests/fixtures/brief-v21-no-signals.md b/plugins/voyage/tests/fixtures/brief-v21-no-signals.md
new file mode 100644
index 0000000..d705406
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-v21-no-signals.md
@@ -0,0 +1,32 @@
+---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-14
+task: "Fixture: v5.1 brief WITHOUT phase_signals or partial (falsification target)"
+slug: brief-v21-no-signals
+project_dir: .claude/projects/2026-05-14-brief-v21-no-signals/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 4
+source: fixture
+---
+
+# Task: brief_version 2.1 without phase_signals
+
+## Intent
+
+Falsification fixture for the v5.1 sequencing gate. The brief declares
+`brief_version: "2.1"` but omits BOTH `phase_signals` AND
+`phase_signals_partial: true`. The brief-validator MUST emit
+`BRIEF_V51_MISSING_SIGNALS` for this file — the runtime test for the
+sequencing gate asserts the error code fires.
+
+## Goal
+
+Validate that brief-validator catches the missing-signals scenario.
+
+## Success Criteria
+
+- brief-validator returns valid: false.
+- errors contains BRIEF_V51_MISSING_SIGNALS.
diff --git a/plugins/voyage/tests/fixtures/brief-with-phase-signals.md b/plugins/voyage/tests/fixtures/brief-with-phase-signals.md
new file mode 100644
index 0000000..c68e37c
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-with-phase-signals.md
@@ -0,0 +1,42 @@
+---
+type: trekbrief
+brief_version: "2.1"
+created: 2026-05-13
+task: "Add per-phase effort dialog to /trekbrief"
+slug: phase-signals-example
+project_dir: .claude/projects/2026-05-13-phase-signals-example/
+research_topics: 2
+research_status: complete
+auto_research: false
+interview_turns: 6
+source: interview
+phase_signals:
+  - phase: research
+    effort: low
+    model: sonnet
+  - phase: plan
+    effort: standard
+  - phase: execute
+    effort: high
+    model: opus
+  - phase: review
+    effort: standard
+---
+
+# Task: Phase-signals example
+
+## Intent
+
+A minimal brief that exercises the v5.1 phase_signals additive field with a
+mix of effort levels and model overrides. Used by tests/validators to confirm
+the validator accepts well-formed signals across the supported tier matrix.
+
+## Goal
+
+Validator returns valid: true. annotate.mjs strips phase_signals from the
+rendered HTML body (frontmatter stays in source).
+
+## Success Criteria
+
+- Validator passes.
+- annotate.mjs determinism: re-run produces byte-identical HTML.
diff --git a/plugins/voyage/tests/fixtures/brief-without-phase-signals.md b/plugins/voyage/tests/fixtures/brief-without-phase-signals.md
new file mode 100644
index 0000000..8bec99e
--- /dev/null
+++ b/plugins/voyage/tests/fixtures/brief-without-phase-signals.md
@@ -0,0 +1,31 @@
+---
+type: trekbrief
+brief_version: "2.0"
+created: 2026-05-13
+task: "Backward-compat fixture for v5.0-style brief"
+slug: legacy-brief-example
+project_dir: .claude/projects/2026-05-13-legacy-brief-example/
+research_topics: 0
+research_status: complete
+auto_research: false
+interview_turns: 3
+source: interview
+---
+
+# Task: Legacy brief example
+
+## Intent
+
+A pre-v5.1 brief that pre-dates the phase_signals field. Used by
+tests/validators to confirm backward-compatibility: the brief is accepted
+without phase_signals as long as brief_version is < 2.1.
+
+## Goal
+
+Validator returns valid: true. The sequencing gate
+(BRIEF_V51_MISSING_SIGNALS) does NOT fire for brief_version 2.0.
+
+## Success Criteria
+
+- Validator passes.
+- No BRIEF_V51_MISSING_SIGNALS error in r.errors.
diff --git a/plugins/voyage/tests/lib/doc-consistency.test.mjs b/plugins/voyage/tests/lib/doc-consistency.test.mjs
index 5c7bef8..bc96ab4 100644
--- a/plugins/voyage/tests/lib/doc-consistency.test.mjs
+++ b/plugins/voyage/tests/lib/doc-consistency.test.mjs
@@ -485,6 +485,24 @@ test('producing commands tell the operator the flow is THEIR own annotations', (
   }
 });
 
+test('producing commands emit file:// link in final report (operator-UX contract, 2026-05-13)', () => {
+  // Operator runs Ghostty / iTerm2 / modern Terminal.app — all support cmd+click
+  // on file:// URLs. Producing commands MUST emit both forms: (a) plain file://
+  // line in the report block, (b) `open file://...` copy-pasteable command.
+  // Both must reference $ANNOT_HTML (absolute path from scripts/annotate.mjs).
+  for (const f of ['trekbrief.md', 'trekplan.md', 'trekreview.md']) {
+    const text = read(`commands/${f}`);
+    assert.ok(
+      /file:\/\/\{\$ANNOT_HTML\}/.test(text),
+      `commands/${f} must include "file://{$ANNOT_HTML}" plain URL in the final report block`,
+    );
+    assert.ok(
+      /open file:\/\/\{\$ANNOT_HTML\}/.test(text),
+      `commands/${f} must include "open file://{$ANNOT_HTML}" copy-pasteable command in the final report block`,
+    );
+  }
+});
+
 test('package.json still has no "npm run render" script (removed in v5.0.1)', () => {
   const pkg = JSON.parse(read('package.json'));
   assert.equal(
@@ -533,3 +551,63 @@ test('operational files no longer reference trekrevise (v5.0.0 removal)', () =>
     );
   }
 });
+
+// --- v5.1 — phase_signals + brief_version 2.1 ---
+
+test('v5.1 — templates/trekbrief-template.md declares brief_version: "2.1" (quoted)', () => {
+  const t = read('templates/trekbrief-template.md');
+  assert.match(t, /^brief_version: "2\.1"$/m,
+    'trekbrief-template.md must declare brief_version: "2.1" (quoted) — unquoted parses as Number and bypasses sequencing gate');
+});
+
+test('v5.1 — templates/trekbrief-template.md contains phase_signals: block', () => {
+  const t = read('templates/trekbrief-template.md');
+  assert.match(t, /^phase_signals:$/m,
+    'trekbrief-template.md must contain a phase_signals: block in frontmatter');
+});
+
+test('v5.1 — HANDOVER-CONTRACTS.md schema row includes phase_signals + phase_signals_partial', () => {
+  const t = read('docs/HANDOVER-CONTRACTS.md');
+  assert.ok(t.includes('| `phase_signals` |'),
+    'HANDOVER-CONTRACTS must add a phase_signals row to the Handover 1 schema table');
+  assert.ok(t.includes('| `phase_signals_partial` |'),
+    'HANDOVER-CONTRACTS must add a phase_signals_partial row to the Handover 1 schema table');
+});
+
+test('v5.1 — voyage CLAUDE.md mentions phase_signals', () => {
+  const t = read('CLAUDE.md');
+  assert.ok(t.includes('phase_signals'),
+    'voyage CLAUDE.md must document phase_signals (v5.1)');
+});
+
+test('v5.1 — voyage README.md mentions phase_signals', () => {
+  const t = read('README.md');
+  assert.ok(t.includes('phase_signals'),
+    'voyage README.md must mention phase_signals (v5.1 "What\'s new" bullet)');
+});
+
+// --- v5.1.1 — High-effort behavior sub-section per command (Step 10) ---
+
+test('v5.1.1 — commands/trekplan.md contains ### High-effort behavior (v5.1.1) sub-section', () => {
+  const t = read('commands/trekplan.md');
+  assert.match(t, /^### High-effort behavior \(v5\.1\.1\)$/m,
+    'trekplan.md must contain ### High-effort behavior (v5.1.1) sub-section under Composition rule (Decision B + gemini-bridge)');
+});
+
+test('v5.1.1 — commands/trekresearch.md contains ### High-effort behavior (v5.1.1) sub-section', () => {
+  const t = read('commands/trekresearch.md');
+  assert.match(t, /^### High-effort behavior \(v5\.1\.1\)$/m,
+    'trekresearch.md must contain ### High-effort behavior (v5.1.1) sub-section under Composition rule (contrarian-researcher + gemini-bridge always-on)');
+});
+
+test('v5.1.1 — commands/trekreview.md contains ### High-effort behavior (v5.1.1) sub-section', () => {
+  const t = read('commands/trekreview.md');
+  assert.match(t, /^### High-effort behavior \(v5\.1\.1\)$/m,
+    'trekreview.md must contain ### High-effort behavior (v5.1.1) sub-section under Composition rule (skip Pass 3 + coordinator normalization)');
+});
+
+test('v5.1.1 — commands/trekexecute.md contains ### High-effort behavior (v5.1.1) sub-section', () => {
+  const t = read('commands/trekexecute.md');
+  assert.match(t, /^### High-effort behavior \(v5\.1\.1\)$/m,
+    'trekexecute.md must contain ### High-effort behavior (v5.1.1) sub-section under Composition rule (gates_mode = closed)');
+});
diff --git a/plugins/voyage/tests/lib/phase-signal-resolver.test.mjs b/plugins/voyage/tests/lib/phase-signal-resolver.test.mjs
new file mode 100644
index 0000000..5461740
--- /dev/null
+++ b/plugins/voyage/tests/lib/phase-signal-resolver.test.mjs
@@ -0,0 +1,77 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { execFileSync } from 'node:child_process';
+import { writeFileSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { resolvePhaseSignal, resolvePhaseSignalFromFile } from '../../lib/profiles/phase-signal-resolver.mjs';
+
+const FULL_SIGNALS_FM = {
+  phase_signals: [
+    { phase: 'research', effort: 'low', model: 'sonnet' },
+    { phase: 'plan', effort: 'standard' },
+    { phase: 'execute', effort: 'high', model: 'opus' },
+    { phase: 'review', effort: 'standard', model: 'sonnet' },
+  ],
+};
+
+test('resolvePhaseSignal — returns {effort, model} for all 4 phases on full-signals brief', () => {
+  for (const phase of ['research', 'plan', 'execute', 'review']) {
+    const r = resolvePhaseSignal(FULL_SIGNALS_FM, phase);
+    assert.ok(r && typeof r === 'object', `phase=${phase} should resolve non-null`);
+    assert.ok(typeof r.effort === 'string', `phase=${phase} should have effort`);
+  }
+});
+
+test('resolvePhaseSignal — returns null when brief has no phase_signals', () => {
+  const r = resolvePhaseSignal({ task: 'x' }, 'plan');
+  assert.equal(r, null);
+});
+
+test('resolvePhaseSignal — returns partial {effort} with model undefined when signal omits model', () => {
+  const r = resolvePhaseSignal(FULL_SIGNALS_FM, 'plan');
+  assert.equal(r.effort, 'standard');
+  assert.equal(r.model, undefined);
+  assert.ok(!('model' in r), 'model key should be absent when not in signal');
+});
+
+test('resolvePhaseSignal — returns null when phase is not in PHASE_SIGNAL_PHASES', () => {
+  assert.equal(resolvePhaseSignal(FULL_SIGNALS_FM, 'brief'), null);
+  assert.equal(resolvePhaseSignal(FULL_SIGNALS_FM, 'continue'), null);
+  assert.equal(resolvePhaseSignal(FULL_SIGNALS_FM, 'nonsense'), null);
+});
+
+test('resolvePhaseSignal — defensive: null/non-object input returns null', () => {
+  assert.equal(resolvePhaseSignal(null, 'plan'), null);
+  assert.equal(resolvePhaseSignal(undefined, 'plan'), null);
+  assert.equal(resolvePhaseSignal('string', 'plan'), null);
+  assert.equal(resolvePhaseSignal({ phase_signals: 'not-array' }, 'plan'), null);
+});
+
+test('resolvePhaseSignalFromFile + CLI shim — writes JSON to stdout, exit 0', () => {
+  const fixture = join(tmpdir(), `phase-signal-test-${process.pid}.md`);
+  writeFileSync(fixture, `---
+type: trekbrief
+brief_version: "2.1"
+phase_signals:
+  - phase: plan
+    effort: high
+    model: opus
+---
+# x
+`);
+  try {
+    // Programmatic invocation
+    const r = resolvePhaseSignalFromFile(fixture, 'plan');
+    assert.deepEqual(r, { effort: 'high', model: 'opus' });
+    // CLI shim
+    const helperPath = new URL('../../lib/profiles/phase-signal-resolver.mjs', import.meta.url).pathname;
+    const out = execFileSync('node', [helperPath, '--brief', fixture, '--phase', 'plan', '--json'], {
+      encoding: 'utf-8',
+    });
+    const parsed = JSON.parse(out.trim());
+    assert.deepEqual(parsed, { effort: 'high', model: 'opus' });
+  } finally {
+    try { unlinkSync(fixture); } catch { /* swallow */ }
+  }
+});
diff --git a/plugins/voyage/tests/lib/profile-resolver.test.mjs b/plugins/voyage/tests/lib/profile-resolver.test.mjs
new file mode 100644
index 0000000..4eef940
--- /dev/null
+++ b/plugins/voyage/tests/lib/profile-resolver.test.mjs
@@ -0,0 +1,62 @@
+// tests/lib/profile-resolver.test.mjs
+// v5.1.1 SC5 — non-interference cases for resolvePhaseModel().
+// Verifies the new highest-priority lookup step (brief.phase_signals[phase].model)
+// wins over --profile flag and VOYAGE_PROFILE env; falls through cleanly when
+// no brief signal is present.
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolvePhaseModel } from '../../lib/profiles/resolver.mjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = join(__dirname, '..', '..');
+const FIXTURE = (name) => join(REPO_ROOT, 'tests', 'fixtures', name);
+
+test('resolvePhaseModel — Case 1: brief signal wins over VOYAGE_PROFILE env', () => {
+  // brief-effort-low.md pins all 4 phases to model: sonnet.
+  // env says premium (would normally select opus). Brief must win.
+  const r = resolvePhaseModel('research', FIXTURE('brief-effort-low.md'), [], { VOYAGE_PROFILE: 'premium' });
+  assert.equal(r.model, 'sonnet', `brief signal should beat env; got ${JSON.stringify(r)}`);
+  assert.equal(r.source, 'brief-signal');
+});
+
+test('resolvePhaseModel — Case 2: brief signal wins over --profile flag', () => {
+  // brief-effort-high.md pins all 4 phases to model: opus.
+  // flag says economy (would normally select sonnet). Brief must win.
+  const r = resolvePhaseModel('execute', FIXTURE('brief-effort-high.md'), ['--profile', 'economy'], {});
+  assert.equal(r.model, 'opus', `brief signal should beat flag; got ${JSON.stringify(r)}`);
+  assert.equal(r.source, 'brief-signal');
+});
+
+test('resolvePhaseModel — Case 3: no phase_signals → fallthrough to --profile flag', () => {
+  // brief-without-phase-signals fixture lacks phase_signals entirely.
+  // --profile balanced is set. Should return balanced.phase_models.plan (= opus per yaml).
+  const r = resolvePhaseModel('plan', FIXTURE('brief-without-phase-signals.md'), ['--profile', 'balanced'], {});
+  assert.equal(r.model, 'opus', `balanced.plan should be opus; got ${JSON.stringify(r)}`);
+  assert.equal(r.source, 'flag');
+});
+
+test('resolvePhaseModel — Case 4: phase not in PHASE_SIGNAL_PHASES falls through gracefully', () => {
+  // brief-effort-high.md has signals for the 4 supported phases.
+  // Asking for 'continue' (not in PHASE_SIGNAL_PHASES) must fall through.
+  // --profile premium is set, so continue resolves to premium.phase_models.continue (= opus).
+  const r = resolvePhaseModel('continue', FIXTURE('brief-effort-high.md'), ['--profile', 'premium'], {});
+  assert.equal(r.model, 'opus', `premium.continue should be opus; got ${JSON.stringify(r)}`);
+  assert.ok(r.source !== 'brief-signal', 'continue must not resolve via brief-signal');
+});
+
+test('resolvePhaseModel — Case 5 (defensive): missing brief file falls through cleanly', () => {
+  // Non-existent path. Must not throw; must fall through to flag/env/default.
+  const r = resolvePhaseModel('plan', '/nonexistent/brief.md', ['--profile', 'economy'], {});
+  assert.equal(r.model, 'sonnet', 'economy.plan should be sonnet on fallthrough');
+  assert.equal(r.source, 'flag');
+});
+
+test('resolvePhaseModel — Case 6 (defensive): null briefPath falls through to default', () => {
+  // null briefPath, no flag, no env → default = premium.
+  const r = resolvePhaseModel('plan', null, [], {});
+  assert.equal(r.model, 'opus', 'premium.plan default = opus');
+  assert.equal(r.source, 'default');
+});
diff --git a/plugins/voyage/tests/scripts/annotate.test.mjs b/plugins/voyage/tests/scripts/annotate.test.mjs
index 4bd2a9f..3044447 100644
--- a/plugins/voyage/tests/scripts/annotate.test.mjs
+++ b/plugins/voyage/tests/scripts/annotate.test.mjs
@@ -1,26 +1,29 @@
 // tests/scripts/annotate.test.mjs
-// Covers scripts/annotate.mjs — the v5.0.2 operator-annotation HTML
-// generator. The producing commands call it to print a file:// link the
-// operator opens in a browser, where they click lines, write their own
-// notes, copy a structured prompt, and paste back into Claude.
+// Covers scripts/annotate.mjs — the v5.0.3 operator-annotation HTML
+// generator. UX modelled on claude-code-100x/build-site.js (pencil
+// toggle, intent buttons, form popover, selection-anchoring, localStorage
+// persistence, structured markdown export).
 //
 // What we pin:
 //   • Output is a complete, self-contained HTML document.
-//   • Zero external network references in the static HTML.
+//   • No external <link href=> or <script src=>.
 //   • The embedded inline <script> parses as valid JavaScript.
-//   • Source document content + artifact path are embedded verbatim
-//     (so the browser-side app can render exactly the same lines).
-//   • HTML special chars and code-fence content are escaped — no raw
-//     <script>-injection from the source .md.
+//   • The artifact path is embedded (used as the localStorage key + prompt context).
+//   • The markdown source is rendered to proper HTML (h1/p/li etc.), not as raw lines.
+//   • HTML metacharacters in the title are escaped (XSS).
+//   • Inline content from a hostile .md never appears as a live attribute.
 //   • render() is deterministic — two runs produce byte-identical output.
 //   • Default output path is <input-basename>.html next to the input.
+//   • The v5.0.3 affordances are wired into the HTML: pencil-toggle, form
+//     popover with three intent buttons (Fiks/Endre/Spørsmål), annotations
+//     sidebar, Copy Prompt button, Clear all, localStorage persistence.
 
 import { test } from 'node:test';
 import { strict as assert } from 'node:assert';
 import { mkdtempSync, writeFileSync, readFileSync, rmSync, existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { buildHtml, render, parseArgs } from '../../scripts/annotate.mjs';
+import { buildHtml, renderMarkdown, render, parseArgs } from '../../scripts/annotate.mjs';
 
 const SAMPLE = `---
 type: trekplan
@@ -55,9 +58,6 @@ test('buildHtml produces a complete self-contained HTML document', () => {
 
 test('buildHtml has zero external network references in static HTML', () => {
   const html = buildHtml('/abs/path/plan.md', SAMPLE);
-  // Strip the script section (the embedded clipboard-API safe link list may
-  // technically include example.com in inline content; that's allowed).
-  // Static HTML structure must not have any <link href=...> or <script src=...>.
   assert.ok(!/<link[^>]+href\s*=/i.test(html), 'no external <link href> stylesheets');
   assert.ok(!/<script[^>]+src\s*=/i.test(html), 'no external <script src>');
 });
@@ -66,56 +66,48 @@ test('buildHtml embeds the inline <script> as parseable JavaScript', () => {
   const html = buildHtml('/abs/path/plan.md', SAMPLE);
   const m = html.match(/<script>([\s\S]*?)<\/script>/);
   assert.ok(m, 'must contain a <script> block');
-  // Function() parses but doesn't execute references to document/localStorage,
-  // so a SyntaxError here is the only failure mode we want to surface.
   assert.doesNotThrow(() => new Function(m[1]), 'inline script must parse without SyntaxError');
 });
 
-test('buildHtml embeds the artifact path and source lines verbatim', () => {
+test('buildHtml embeds the artifact path (used as localStorage key + prompt context)', () => {
   const html = buildHtml('/abs/projects/2026-05-13-foo/brief.md', SAMPLE);
   assert.ok(html.includes('/abs/projects/2026-05-13-foo/brief.md'),
     'artifact path must appear in the HTML so the script can use it as the localStorage key + prompt context');
-  // The DOC_LINES JSON literal must contain the actual content of the source.
-  assert.match(html, /DOC_LINES\s*=\s*\[/);
-  assert.ok(html.includes('Operator-annotation smoke test'),
-    'source document content must round-trip into the embedded DOC_LINES');
-  assert.ok(html.includes('inline code'),
-    'inline content from the source markdown must appear in DOC_LINES');
+});
+
+test('buildHtml renders the markdown source to proper article HTML', () => {
+  const html = buildHtml('/abs/path/plan.md', SAMPLE);
+  // Headings, paragraph content, list items, code fence — all present as HTML.
+  assert.ok(html.includes('<h1 data-anchor-id='),  'top-level heading rendered as <h1>');
+  assert.ok(html.includes('<h2 data-anchor-id='),  '## heading rendered as <h2>');
+  assert.ok(html.includes('Operator-annotation smoke test'), 'h1 text preserved');
+  assert.ok(html.includes('<li data-anchor-id='),  'list items rendered with anchor ids');
+  assert.ok(html.includes('first item'), 'list content preserved');
+  assert.ok(html.includes('<pre data-anchor-id='), 'code fence rendered with anchor');
+  assert.ok(html.includes('const x = 1;'), 'code fence body preserved (escaped)');
+  assert.ok(html.includes('<blockquote data-anchor-id='), 'blockquote rendered with anchor');
 });
 
 test('buildHtml escapes HTML metacharacters in the title (XSS surface)', () => {
   const md = '---\ntype: trekbrief\ntask: "<script>alert(1)</script>"\n---\n\n# Foo\n';
   const html = buildHtml('/abs/path/brief.md', md);
-  // The raw <script> from the title must NOT appear unescaped anywhere
-  // outside our own inline <script>.
   const titleMatch = html.match(/<title>([\s\S]*?)<\/title>/);
   assert.ok(titleMatch, 'must have a title');
   assert.ok(!titleMatch[1].includes('<script>'), 'title must not carry a raw <script> tag');
-  assert.ok(titleMatch[1].includes('&lt;script&gt;') || titleMatch[1].includes('alert'),
-    'title must be HTML-escaped');
+  assert.match(titleMatch[1], /&lt;script&gt;/, 'title must be HTML-escaped');
 });
 
-test('buildHtml escapes source-document content so a malicious .md cannot inject code', () => {
-  // The embedded DOC_LINES is a JSON literal, which already escapes anything
-  // dangerous. But the script then renders content into the DOM — the inline
-  // renderer escapes everything before DOM-insertion. This test pins the
-  // JSON-level escaping invariant.
-  const md = '# Heading\n\n<img src=x onerror="alert(1)">\n';
+test('hostile inline content cannot inject as live HTML attributes', () => {
+  const md = '# Heading\n\nA paragraph with <img src=x onerror="alert(1)"> embedded.\n';
   const html = buildHtml('/abs/path/brief.md', md);
-  // The dangerous attribute must NOT appear as a live HTML construct outside
-  // a JSON string. Easiest pin: the literal substring should appear inside
-  // quoted JSON (with backslash-escaped quotes), and the raw construct
-  // `onerror="alert(1)"` should not appear with unescaped double quotes
-  // outside the script-embedded JSON literal.
-  const m = html.match(/<script>([\s\S]*?)<\/script>/);
-  assert.ok(m, 'must contain script');
-  // The JSON encoding of `"` is `\"`, so we expect at least the escaped form.
-  assert.ok(m[1].includes('onerror=\\"alert(1)\\"') || m[1].includes("onerror=\\'alert(1)\\'"),
-    'dangerous source attribute should be JSON-escaped in DOC_LINES');
-  // Static HTML outside <script> must not carry the live attribute either.
-  const outsideScript = html.replace(/<script>[\s\S]*?<\/script>/, '');
-  assert.ok(!/onerror\s*=\s*"alert/i.test(outsideScript),
-    'static HTML must not carry a live onerror attribute');
+  // The article body must not carry a live onerror="..." attribute (the renderer
+  // HTML-escapes everything in the body, so `<` → `&lt;`).
+  const articleMatch = html.match(/<article[^>]*>([\s\S]*?)<\/article>/);
+  assert.ok(articleMatch, 'must have article body');
+  assert.ok(!/onerror\s*=\s*"alert/i.test(articleMatch[1]),
+    'article body must not carry a live onerror attribute');
+  assert.ok(articleMatch[1].includes('&lt;img'),
+    'hostile <img> must be escaped to &lt;img');
 });
 
 test('render() is deterministic — two runs byte-identical', () => {
@@ -151,17 +143,66 @@ test('parseArgs handles --out, positional input, and --help', () => {
   assert.equal(parseArgs(['--help']).help, true);
 });
 
-test('buildHtml output contains the operator-driven copy-paste loop affordances', () => {
-  // Pin the user-visible affordances that v5.0.2 promised:
-  //   - Per-line click target (gutter '+' marker)
-  //   - "Your annotations" sidebar
-  //   - "Copy Prompt" button
-  //   - "Clear all" button (so the operator can reset state)
-  //   - localStorage persistence
+test('buildHtml wires the v5.0.3 operator-driven annotation affordances', () => {
+  // Pin every UX-critical affordance modelled on claude-code-100x/build-site.js:
+  //   - Pencil-toggle button (annotation mode on/off)
+  //   - Form popover with three intent buttons (Fiks/Endre/Spørsmål)
+  //   - Annotations sidebar (Your annotations + Clear all + Copy Prompt)
+  //   - Selection capture (window.getSelection())
+  //   - Section context auto-detection (findSection)
+  //   - localStorage persistence (voyage-annotate:v2:...)
+  //   - Annotatable elements (data-anchor-id on h1-h6, p, li, td, blockquote, pre)
   const html = buildHtml('/abs/path/brief.md', SAMPLE);
-  assert.ok(html.includes('Your annotations'), 'must show a "Your annotations" sidebar');
-  assert.ok(html.includes('Copy Prompt'), 'must have a "Copy Prompt" button');
-  assert.ok(html.includes('Clear all'), 'must have a "Clear all" affordance');
-  assert.ok(html.includes('localStorage'), 'must persist state in localStorage');
-  assert.ok(html.includes('Click any line'), 'must tell the operator how to start');
+  // Toggle
+  assert.ok(html.includes('ann-toggle'), 'must have the pencil-toggle button');
+  assert.ok(html.includes('Annotation mode: ON'), 'must label the toggle state');
+  // Form + intents (the three CSS classes for selected state)
+  assert.ok(html.includes('data-intent="fiks"'), 'must have Fiks intent button');
+  assert.ok(html.includes('data-intent="endre"'), 'must have Endre intent button');
+  assert.ok(html.includes('data-intent="spørsmål"'), 'must have Spørsmål intent button');
+  // Form popover
+  assert.ok(html.includes('ann-form'), 'must have the form popover');
+  assert.ok(html.includes('ann-form-comment'), 'must have a comment textarea');
+  assert.ok(html.includes('ann-form-save'), 'must have a Save button');
+  // Sidebar
+  assert.ok(html.includes('ann-panel'), 'must have the annotations sidebar');
+  assert.ok(html.includes('Your annotations'), 'sidebar must title the list');
+  assert.ok(html.includes('Clear all'), 'sidebar must offer Clear all');
+  assert.ok(html.includes('Copy Prompt'), 'sidebar must offer Copy Prompt');
+  // Selection + section
+  assert.ok(html.includes('window.getSelection'), 'must capture selection');
+  assert.ok(html.includes('findSection'), 'must auto-detect section context');
+  // Persistence
+  assert.ok(html.includes("'voyage-annotate:v2:'"), 'must use the v2 localStorage key prefix');
+  // Anchor coverage
+  const anchors = (html.match(/data-anchor-id="anch-/g) || []).length;
+  assert.ok(anchors >= 5, 'must emit data-anchor-id on enough elements (got ' + anchors + ')');
+});
+
+test('renderMarkdown produces headings, lists, code, table, blockquote with anchors', () => {
+  const html = renderMarkdown(`# H1
+## H2
+- a
+- b
+
+1. one
+2. two
+
+| Col | Val |
+|-----|-----|
+| x   | 1   |
+
+\`\`\`
+plain code
+\`\`\`
+
+> quote
+`);
+  assert.match(html, /<h1 data-anchor-id="anch-0">H1<\/h1>/);
+  assert.match(html, /<h2 data-anchor-id="anch-1">H2<\/h2>/);
+  assert.match(html, /<ul><li data-anchor-id=/);
+  assert.match(html, /<ol><li data-anchor-id=/);
+  assert.match(html, /<table>[\s\S]*<th data-anchor-id=/);
+  assert.match(html, /<pre data-anchor-id=/);
+  assert.match(html, /<blockquote data-anchor-id=/);
 });
diff --git a/plugins/voyage/tests/validators/brief-validator.test.mjs b/plugins/voyage/tests/validators/brief-validator.test.mjs
index 6e501d2..69e250f 100644
--- a/plugins/voyage/tests/validators/brief-validator.test.mjs
+++ b/plugins/voyage/tests/validators/brief-validator.test.mjs
@@ -152,3 +152,101 @@ test('validateBrief — wrong-type error message includes accepted set', () => {
   assert.ok(/trekbrief/.test(wrongType.message));
   assert.ok(/trekreview/.test(wrongType.message));
 });
+
+// --- v5.1 — phase_signals additive field + sequencing gate ---
+
+const SIGNALS_BLOCK = `phase_signals:
+  - phase: research
+    effort: standard
+  - phase: plan
+    effort: high
+    model: opus
+  - phase: execute
+    effort: low
+    model: sonnet
+  - phase: review
+    effort: standard
+`;
+
+test('validateBrief — v5.1 well-formed phase_signals accepted', () => {
+  const t = GOOD_BRIEF
+    .replace('brief_version: "2.0"', 'brief_version: "2.1"')
+    .replace('source: interview\n', `source: interview\n${SIGNALS_BLOCK}`);
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, true, JSON.stringify(r.errors));
+});
+
+test('validateBrief — pre-v5.1 brief without phase_signals accepted (backward-compat)', () => {
+  const r = validateBriefContent(GOOD_BRIEF, { strict: true });
+  assert.equal(r.valid, true, JSON.stringify(r.errors));
+  assert.ok(!r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'));
+});
+
+test('validateBrief — v5.1+ brief missing phase_signals + partial emits BRIEF_V51_MISSING_SIGNALS', () => {
+  const t = GOOD_BRIEF.replace('brief_version: "2.0"', 'brief_version: "2.1"');
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'));
+});
+
+test('validateBrief — v5.1+ brief with phase_signals_partial: true accepted', () => {
+  const t = GOOD_BRIEF
+    .replace('brief_version: "2.0"', 'brief_version: "2.1"')
+    .replace('source: interview\n', 'source: interview\nphase_signals_partial: true\n');
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, true, JSON.stringify(r.errors));
+});
+
+test('validateBrief — phase_signals + phase_signals_partial both set rejected (mutually exclusive)', () => {
+  const t = GOOD_BRIEF
+    .replace('brief_version: "2.0"', 'brief_version: "2.1"')
+    .replace('source: interview\n', `source: interview\nphase_signals_partial: true\n${SIGNALS_BLOCK}`);
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(r.errors.find(e => e.code === 'BRIEF_SIGNALS_MUTUALLY_EXCLUSIVE'));
+});
+
+test('validateBrief — phase_signals with unknown phase rejected', () => {
+  const BAD_SIGNALS = `phase_signals:
+  - phase: nonsense
+    effort: standard
+`;
+  const t = GOOD_BRIEF
+    .replace('brief_version: "2.0"', 'brief_version: "2.1"')
+    .replace('source: interview\n', `source: interview\n${BAD_SIGNALS}`);
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(r.errors.find(e => e.code === 'BRIEF_INVALID_PHASE_SIGNAL_PHASE'));
+});
+
+// --- v5.1.1 regression: YAML-number bypass closed ---
+// Findings 3c834097 + df1435a2: v5.1.0 shipped with an unquoted `brief_version: 2.1`
+// template. parseScalar coerces unquoted "2.1" to Number 2.1, and the original gate
+// guarded `typeof === 'string'`, silently bypassing the sequencing check. v5.1.1
+// coerces via String() so both shapes trigger the gate.
+
+test('validateBrief — v5.1.1: UNQUOTED brief_version 2.1 without signals triggers gate', () => {
+  const t = GOOD_BRIEF.replace('brief_version: "2.0"', 'brief_version: 2.1');
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(
+    r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'),
+    `gate must fire for unquoted brief_version: 2.1 (YAML Number); errors=${JSON.stringify(r.errors)}`,
+  );
+});
+
+test('validateBrief — v5.1.1: QUOTED brief_version "2.1" without signals triggers gate (regression guard)', () => {
+  const t = GOOD_BRIEF.replace('brief_version: "2.0"', 'brief_version: "2.1"');
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, false);
+  assert.ok(r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'));
+});
+
+test('validateBrief — v5.1.1: UNQUOTED brief_version 2.1 WITH phase_signals is valid (positive case)', () => {
+  const t = GOOD_BRIEF
+    .replace('brief_version: "2.0"', 'brief_version: 2.1')
+    .replace('source: interview\n', `source: interview\n${SIGNALS_BLOCK}`);
+  const r = validateBriefContent(t, { strict: true });
+  assert.equal(r.valid, true, JSON.stringify(r.errors));
+  assert.ok(!r.errors.find(e => e.code === 'BRIEF_V51_MISSING_SIGNALS'));
+});
diff --git a/shared/playground-design-system/CHANGELOG.md b/shared/playground-design-system/CHANGELOG.md
index 1594aa0..3d489a7 100644
--- a/shared/playground-design-system/CHANGELOG.md
+++ b/shared/playground-design-system/CHANGELOG.md
@@ -1,5 +1,53 @@
 # playground-design-system — CHANGELOG
 
+## 0.6.0 — 2026-05-15
+
+### Added — Project-view archetype (Tier 4)
+
+Generic "project as artifact-collection" archetype for plugins where a project owns 0-N read-only report artifacts grouped by category. Default view is an aggregated dashboard; clicking a sidebar item swaps the main panel to the per-artifact render. Edit-mode is paste-import only (no inline editor).
+
+- **New file `components-tier4-project-view.css`** — 11 sections covering:
+  - `.project-view` + `.project-view__layout` (grid: nav 280px + main 1fr, responsive collapse at 1280 / 960px)
+  - `.project-view__header` (CSS Grid with eyebrow/title/lede/verdict/key-stats/actions areas)
+  - `.verdict-pill` (small pill variant — companion to existing `.verdict-pill-lg` in tier2)
+  - `.project-view__nav` + `.project-view__nav-search` (sticky sidebar with search)
+  - `.artifact-list` + `__group` / `__group-label` / `__group-count` / `__group-items` / `__item` / `__item-marker` / `__item-body` / `__item-name` / `__item-meta` (grouped, severity-coded sidebar)
+  - `.artifact-status[data-severity]` (mini-pill: positive | medium | critical)
+  - `.project-view__main` (main column container)
+  - `.project-overview` + `__intro` / `__verdict-grid` / `__verdict-tile[data-severity]` / `__section` / `__top-risks` / `__next-actions` / `__missing-reports` (aggregated dashboard)
+  - `.project-view__artifact` + `__artifact-header` / `__artifact-title` / `__artifact-meta` / `__artifact-actions` / `__artifact-body` (single-rapport viewer wrapper)
+  - `.empty-artifact-prompt` + `__icon` / `__title` / `__text` / `__actions` (empty-state)
+  - `.import-modal` + `__backdrop` / `__panel` / `__head` / `__title` / `__close` / `__form` / `__detect` / `__preview` / `__preview-label` / `__footer` (overlay modal for paste-import)
+
+- **6 new tokens in `tokens.css`:**
+  - `--project-view-nav-width: 280px` — sidebar width at full layout
+  - `--project-view-collapse-bp: 960px` — doc-only token referenced by responsive breakpoints
+  - `--artifact-list-item-pad-y: var(--space-2)` — sidebar row vertical padding
+  - `--artifact-list-item-pad-x: var(--space-3)` — sidebar row horizontal padding
+  - `--artifact-marker-size: 14px` — sidebar status marker diameter
+  - `--artifact-marker-border: 1.5px` — sidebar status marker border thickness
+
+### Påvirkning
+
+Endringen er **additiv**: ny komponent-fil + 6 nye tokens, ingen eksisterende selectors eller verdier endres. Plugin-konsumenter (`ms-ai-architect`, `llm-security`, `okr`, `config-audit`, `voyage`) får silent drift mot ny source-commit, men kan re-sync på eget tempo. Bare `ms-ai-architect` og `llm-security` re-syncer i samme commit som denne DS-bumpen (forberedelse til koordinert v1.15.0 / v7.7.0-release etter ~8 sesjoner med JS-implementasjon).
+
+Førsteadoptere: `ms-ai-architect` v1.15.0 (17 artefakter, 5 kategorier) + `llm-security` v7.7.0 (≥18 artefakter, 6 kategorier). State-driven visibility håndteres i plugin-JS, ikke i denne CSS-en — kun aktiv state rendres per pass.
+
+### Plugins som må laste den nye filen
+
+Etter `<link>` til `components-tier3-supplement.css`, legg til:
+
+```html
+<link rel="stylesheet" href="vendor/playground-design-system/components-tier4-project-view.css">
+```
+
+### For å adoptere v0.6.0
+
+```bash
+node scripts/sync-design-system.mjs <plugin-name>
+# --force hvis drift detected
+```
+
 ## 0.5.0 — 2026-05-10
 
 ### Added
diff --git a/shared/playground-design-system/components-tier4-project-view.css b/shared/playground-design-system/components-tier4-project-view.css
new file mode 100644
index 0000000..3db37b8
--- /dev/null
+++ b/shared/playground-design-system/components-tier4-project-view.css
@@ -0,0 +1,665 @@
+/* =============================================================================
+   Playground Design System — components-tier4-project-view.css
+   v0.6.0 — Tier 4 project-view archetype
+   ============================================================================
+
+   Generic "project as artifact-collection" archetype. Default-view is an
+   aggregated overview dashboard; clicking a sidebar item swaps main to a
+   per-artifact render. Tracks 0-N read-only artifacts; edit-mode is paste-
+   import only (markdown from terminal → parser → store).
+
+   First adopters: ms-ai-architect v1.15.0 (17 artifacts, 5 categories) +
+   llm-security v7.7.0 (≥18 artifacts, 6 categories). Each plugin injects a
+   PROJECT_VIEW_CONFIG object that maps commands → renderers, categories,
+   verdict-aggregators, missing-report heuristics.
+
+   The CSS in this file is plugin-agnostic. Plugin-specific shape (category
+   names, artifact ordering, custom severity-mappings) lives in JS config.
+
+   State-driven visibility is NOT handled here — production playgrounds emit
+   only the active state (overview | artifact | empty | import) per render
+   pass. The mockup uses body[data-state="..."] for prototyping; production
+   renders one branch at a time.
+   ============================================================================= */
+
+
+/* === 1. Project-view top-level layout ===================================== */
+
+.project-view {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-view__layout {
+  display: grid;
+  grid-template-columns: var(--project-view-nav-width) 1fr;
+  gap: var(--space-6);
+  align-items: start;
+}
+
+@media (max-width: 1279px) {
+  .project-view__layout { grid-template-columns: 240px 1fr; }
+}
+
+@media (max-width: 959px) {
+  .project-view__layout { grid-template-columns: 1fr; }
+}
+
+
+/* === 2. Project-view header =============================================== */
+
+.project-view__header {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5) var(--space-6);
+  display: grid;
+  grid-template-columns: 1fr auto;
+  grid-template-areas:
+    "title    verdict"
+    "title    keystats"
+    "actions  actions";
+  gap: var(--space-4) var(--space-6);
+  align-items: start;
+}
+
+.project-view__title-block { grid-area: title; }
+.project-view__verdict     { grid-area: verdict; justify-self: end; }
+.project-view__key-stats   { grid-area: keystats; justify-self: end; }
+.project-view__actions     { grid-area: actions; display: flex; gap: var(--space-2); justify-content: flex-end; }
+
+.project-view__eyebrow {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__title {
+  font-size: var(--font-size-2xl);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-primary);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-view__lede {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 60ch;
+}
+
+.project-view__key-stats {
+  display: flex;
+  gap: var(--space-5);
+}
+
+.project-view__key-stat-label {
+  font-size: 10px;
+  text-transform: uppercase;
+  color: var(--color-text-tertiary);
+  letter-spacing: 0.06em;
+}
+
+.project-view__key-stat-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+  font-variant-numeric: tabular-nums;
+}
+
+
+/* === 3. Verdict-pill (small) ==============================================
+   Companion to .verdict-pill-lg (Tier 2). Inline-flex pill used in project
+   header + sidebar status badges. The larger -lg variant lives in
+   components-tier2.css; both share the same severity-band semantics. */
+
+.verdict-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: var(--space-1);
+  padding: 4px 12px;
+  border-radius: 999px;
+  font-weight: var(--font-weight-semibold);
+  font-size: var(--font-size-sm);
+}
+
+.verdict-pill--positive    { background: var(--color-state-success);   color: #fff; }
+.verdict-pill--medium      { background: var(--color-severity-medium); color: var(--color-severity-medium-on); }
+.verdict-pill--critical    { background: var(--color-severity-critical); color: #fff; }
+.verdict-pill--in-progress {
+  background: var(--color-bg-soft);
+  color: var(--color-text-secondary);
+  border: 1px dashed var(--color-border-moderate);
+}
+
+
+/* === 4. Sidebar nav ======================================================= */
+
+.project-view__nav {
+  position: sticky;
+  top: var(--space-6);
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-3);
+}
+
+.project-view__nav-search input {
+  width: 100%;
+  box-sizing: border-box;
+  padding: 6px 10px;
+  font-size: var(--font-size-sm);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+}
+
+
+/* === 5. Artifact-list ===================================================== */
+
+.artifact-list {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+  margin: 0;
+  padding: 0;
+  list-style: none;
+}
+
+.artifact-list__group {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.artifact-list__group-label {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  padding: 0 var(--space-2);
+}
+
+.artifact-list__group-count {
+  background: var(--color-bg-soft);
+  color: var(--color-text-tertiary);
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  padding: 1px 6px;
+  border-radius: 999px;
+}
+
+.artifact-list__group-items {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+
+.artifact-list__item {
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--artifact-list-item-pad-y) var(--artifact-list-item-pad-x);
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  background: transparent;
+  border: 1px solid transparent;
+  transition: background 120ms ease, border-color 120ms ease;
+}
+
+.artifact-list__item:hover { background: var(--color-bg-soft); }
+
+.artifact-list__item[data-state="active"] {
+  background: var(--color-bg-soft);
+  border-color: var(--color-primary-500);
+  box-shadow: inset 3px 0 0 var(--color-primary-500);
+  padding-left: calc(var(--artifact-list-item-pad-x) - 3px);
+}
+
+.artifact-list__item-marker {
+  width: var(--artifact-marker-size);
+  height: var(--artifact-marker-size);
+  border-radius: 50%;
+  border: var(--artifact-marker-border) solid var(--color-border-moderate);
+  background: transparent;
+  flex-shrink: 0;
+}
+
+.artifact-list__item[data-state="filled"][data-severity="positive"] .artifact-list__item-marker {
+  background: var(--color-state-success);
+  border-color: var(--color-state-success);
+}
+.artifact-list__item[data-state="filled"][data-severity="medium"] .artifact-list__item-marker {
+  background: var(--color-severity-medium);
+  border-color: var(--color-severity-medium);
+}
+.artifact-list__item[data-state="filled"][data-severity="critical"] .artifact-list__item-marker {
+  background: var(--color-severity-critical);
+  border-color: var(--color-severity-critical);
+}
+
+.artifact-list__item-body { min-width: 0; }
+
+.artifact-list__item-name {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-medium);
+  color: var(--color-text-primary);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.artifact-list__item[data-state="empty"] .artifact-list__item-name {
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-regular);
+}
+
+.artifact-list__item-meta {
+  font-size: 11px;
+  color: var(--color-text-tertiary);
+}
+
+
+/* === 6. Artifact-status (mini pill in sidebar) =========================== */
+
+.artifact-status {
+  font-family: var(--font-family-mono);
+  font-size: 10px;
+  font-weight: var(--font-weight-semibold);
+  padding: 1px 5px;
+  border-radius: var(--radius-sm);
+  letter-spacing: 0.04em;
+}
+
+.artifact-status[data-severity="positive"] { background: var(--color-severity-low-soft);      color: var(--color-severity-low-on); }
+.artifact-status[data-severity="medium"]   { background: var(--color-severity-medium-soft);   color: var(--color-severity-medium-on); }
+.artifact-status[data-severity="critical"] { background: var(--color-severity-critical-soft); color: var(--color-severity-critical-on); }
+
+
+/* === 7. Project-view main panel ========================================== */
+
+.project-view__main {
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 8. Project-overview (default dashboard) ============================= */
+
+.project-overview {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-6);
+}
+
+.project-overview__intro {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__intro h2 {
+  font-size: var(--font-size-lg);
+  margin: 0 0 var(--space-2) 0;
+}
+
+.project-overview__intro p {
+  color: var(--color-text-secondary);
+  margin: 0;
+}
+
+.project-overview__verdict-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: var(--space-3);
+}
+
+.project-overview__verdict-tile {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-left: 4px solid var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-4);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.project-overview__verdict-tile[data-severity="positive"] { border-left-color: var(--color-state-success); }
+.project-overview__verdict-tile[data-severity="medium"]   { border-left-color: var(--color-severity-medium); }
+.project-overview__verdict-tile[data-severity="critical"] { border-left-color: var(--color-severity-critical); }
+.project-overview__verdict-tile[data-severity="empty"]    { border-left-style: dashed; }
+
+.project-overview__verdict-tile-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-value {
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.project-overview__verdict-tile-meta {
+  font-size: var(--font-size-xs);
+  color: var(--color-text-secondary);
+}
+
+.project-overview__section h3 {
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--color-text-tertiary);
+  font-weight: var(--font-weight-semibold);
+  margin: 0 0 var(--space-3) 0;
+}
+
+.project-overview__top-risks,
+.project-overview__next-actions {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__top-risks ol,
+.project-overview__next-actions ol {
+  list-style: none;
+  counter-reset: rank;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__top-risks li,
+.project-overview__next-actions li {
+  counter-increment: rank;
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-bg-soft);
+}
+
+.project-overview__top-risks li::before,
+.project-overview__next-actions li::before {
+  content: counter(rank);
+  font-family: var(--font-family-mono);
+  font-weight: var(--font-weight-bold);
+  color: var(--color-text-tertiary);
+  font-size: var(--font-size-sm);
+  min-width: 20px;
+}
+
+.project-overview__missing-reports {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-5);
+}
+
+.project-overview__missing-reports ul {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+}
+
+.project-overview__missing-reports li {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg-soft);
+  border-radius: var(--radius-sm);
+  border-left: 3px dashed var(--color-border-moderate);
+}
+
+
+/* === 9. Artifact-view (one report rendered) ============================== */
+
+.project-view__artifact {
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-md);
+  padding: var(--space-6);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+.project-view__artifact-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: start;
+  gap: var(--space-4);
+  padding-bottom: var(--space-4);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.project-view__artifact-title {
+  font-size: var(--font-size-xl);
+  margin: 0 0 var(--space-1) 0;
+}
+
+.project-view__artifact-meta {
+  font-size: var(--font-size-sm);
+  color: var(--color-text-tertiary);
+  margin: 0;
+}
+
+.project-view__artifact-actions {
+  display: flex;
+  gap: var(--space-2);
+  flex-shrink: 0;
+}
+
+.project-view__artifact-body {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-5);
+}
+
+
+/* === 10. Empty-artifact-prompt (no report imported yet) ================== */
+
+.empty-artifact-prompt {
+  background: var(--color-surface);
+  border: 2px dashed var(--color-border-moderate);
+  border-radius: var(--radius-md);
+  padding: var(--space-8);
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: var(--space-3);
+  text-align: center;
+}
+
+.empty-artifact-prompt__icon {
+  font-size: 48px;
+  opacity: 0.5;
+}
+
+.empty-artifact-prompt__title {
+  font-size: var(--font-size-lg);
+  margin: 0;
+}
+
+.empty-artifact-prompt__text {
+  color: var(--color-text-secondary);
+  margin: 0;
+  max-width: 50ch;
+}
+
+.empty-artifact-prompt__actions {
+  display: flex;
+  gap: var(--space-2);
+  margin-top: var(--space-2);
+}
+
+
+/* === 11. Import-modal (overlay) ========================================== */
+
+.import-modal {
+  position: fixed;
+  inset: 0;
+  z-index: 200;
+  display: none;
+}
+
+.import-modal[data-open="true"] {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.import-modal__backdrop {
+  position: absolute;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+}
+
+.import-modal__panel {
+  position: relative;
+  width: min(720px, 92vw);
+  max-height: 90vh;
+  overflow: auto;
+  background: var(--color-surface);
+  border: 1px solid var(--color-border-strong);
+  border-radius: var(--radius-md);
+  box-shadow: var(--shadow-lg);
+  display: flex;
+  flex-direction: column;
+}
+
+.import-modal__head {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: var(--space-3);
+  padding: var(--space-4) var(--space-5);
+  border-bottom: 1px solid var(--color-border-subtle);
+}
+
+.import-modal__title {
+  margin: 0;
+  font-size: var(--font-size-lg);
+  font-weight: var(--font-weight-semibold);
+}
+
+.import-modal__close {
+  background: transparent;
+  border: none;
+  cursor: pointer;
+  padding: 4px 10px;
+  color: var(--color-text-tertiary);
+  font-size: 20px;
+  line-height: 1;
+  border-radius: var(--radius-sm);
+}
+
+.import-modal__close:hover {
+  background: var(--color-bg-soft);
+  color: var(--color-text-primary);
+}
+
+.import-modal__form {
+  padding: var(--space-5);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-4);
+}
+
+.import-modal__form .field {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-1);
+}
+
+.import-modal__form label {
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-semibold);
+  color: var(--color-text-secondary);
+}
+
+.import-modal__form select,
+.import-modal__form textarea {
+  width: 100%;
+  box-sizing: border-box;
+  padding: var(--space-2) var(--space-3);
+  background: var(--color-bg);
+  color: var(--color-text-primary);
+  border: 1px solid var(--color-border-moderate);
+  border-radius: var(--radius-sm);
+  font-family: var(--font-family-mono);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__form textarea {
+  resize: vertical;
+  min-height: 180px;
+}
+
+.import-modal__detect {
+  display: flex;
+  align-items: center;
+  gap: var(--space-2);
+  padding: var(--space-2) var(--space-3);
+  border-radius: var(--radius-sm);
+  background: var(--color-severity-low-soft);
+  color: var(--color-severity-low-on);
+  font-size: var(--font-size-sm);
+}
+
+.import-modal__preview {
+  border: 1px solid var(--color-border-subtle);
+  border-radius: var(--radius-sm);
+  padding: var(--space-3);
+  background: var(--color-bg);
+  max-height: 200px;
+  overflow: auto;
+}
+
+.import-modal__preview-label {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-tertiary);
+  margin-bottom: var(--space-2);
+}
+
+.import-modal__footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: var(--space-2);
+  padding: var(--space-3) var(--space-5);
+  border-top: 1px solid var(--color-border-subtle);
+  background: var(--color-bg-soft);
+}
diff --git a/shared/playground-design-system/tokens.css b/shared/playground-design-system/tokens.css
index 95ef620..1686a5c 100644
--- a/shared/playground-design-system/tokens.css
+++ b/shared/playground-design-system/tokens.css
@@ -142,6 +142,14 @@
   --container-default: 1080px;
   --container-wide: 1280px;
   --sidebar-width: 280px;
+
+  /* ---------- Project-view (Tier 4 — v0.6.0) --------------------------- */
+  --project-view-nav-width: 280px;
+  --project-view-collapse-bp: 960px;        /* doc-only — referenced by media queries */
+  --artifact-list-item-pad-y: var(--space-2);
+  --artifact-list-item-pad-x: var(--space-3);
+  --artifact-marker-size: 14px;
+  --artifact-marker-border: 1.5px;
 }
 
 :root { color-scheme: light; }