@cyberskill/design 2.3.0 → 2.4.0

package/docs/consuming.md

@@ -1,6 +1,6 @@
 # Consuming & upgrading the CyberSkill Design System
 
-**Source checkout:** VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->** is local source identity, not a registry-availability claim. For an unpublished candidate, validate the reviewed local package tarball or source checkout. Registry commands below refer to published stable 2.0.0 (and the dated ADOPT-001 1.7.2 sibling inventory) and are not automatically updated by preparation. Preparation does not authorize publication.
+**Source checkout:** VERSION **<!-- cs-source-version:checkout -->2.4.0<!-- /cs-source-version -->** is local source identity, not a registry-availability claim. For an unpublished candidate, validate the reviewed local package tarball or source checkout. Registry commands below refer to published stable 2.3.0 (and the dated ADOPT-001 1.7.2 sibling inventory) and are not automatically updated by preparation. Preparation does not authorize publication.
 
 How any project — human-driven or agent-driven — adopts this HTML-first design system, and how to take updates safely. Published on Storybook **Docs** at `design.cyberskill.world`.
 

package/docs/contrast-report.md

@@ -1,6 +1,6 @@
 # Contrast report — elemental pairings (APCA)
 
-Generated · sweep at VERSION 2.3.0.
+Generated · sweep at VERSION 2.4.0.
 
 Published on Storybook **Docs** at `design.cyberskill.world`.
 

package/docs/conventions.md

@@ -78,7 +78,7 @@ only for HTML element content, never URL, attribute, CSS or script contexts.
 
 **New element variant** — stay inside the element's oklch envelope; set the 10 `--cs-accent-*` contract tokens (incl. `--cs-accent-on-strong` ≥4.5:1 and body APCA75 on `-strong`) plus `--cs-color-text-accent`/`--cs-color-link` (APCA-check both); the aurora wash inherits from the element via `.cs-aurora-wash` (override the class rule only if the variant truly needs its own image); gradient partner (`grad-b`) must follow Tương sinh.
 
-**Ship check** — follow the portable verification gate in `docs/doctrine.md`, then run `_audit/docs-consistency.html` **and** `_audit/namespace-portability.html` (both must be green). source checkout VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->**.
+**Ship check** — follow the portable verification gate in `docs/doctrine.md`, then run `_audit/docs-consistency.html` **and** `_audit/namespace-portability.html` (both must be green). source checkout VERSION **<!-- cs-source-version:checkout -->2.4.0<!-- /cs-source-version -->**.
 
 ## Decision log (owner-approved)
 

package/docs/reference-catalog.json

@@ -4,7 +4,7 @@
     "path": "scripts/generate-reference-catalog.mjs",
     "sha256": "be85a593b4b29f0d26e5733502f8d9e4f536e10ab015173a34f4101af11723ef"
   },
-  "version": "2.3.0",
+  "version": "2.4.0",
   "interpretation": "The document inventory covers Git-listed Markdown and llms.txt; HTML count surfaces are tracked separately. Audience follows the website publication policy, not npm membership. Source paths locate repository evidence and need not all be packaged. Roles describe source routing and audience, not approval, factual freshness of every sentence, translation quality or capability certification.",
   "countScope": "Counts describe declared inventory only. Declared language/theme/boolean controls are inventory facts, not proof of complete content, working behavior or every supported state; token declarations and typed base values are distinct counts.",
   "counts": {
@@ -29,8 +29,8 @@
   },
   "sourceHashes": {
     "_audit/visual-diff.html": "fd344cf31f0aa4130dddec2a99dca5ef60d9d08025b5dc2b4b729a1d388c5bb8",
-    "_ds_manifest.json": "2ff3ac9bd9fd509669b188c7c249aa73e90a4a35b90acc9024f05d33f4629da5",
-    "scripts/public-site-policy.json": "ffc461f55367201365ed6c8b97e0c06eed50e139e312644da3727d76c7feea47",
+    "_ds_manifest.json": "9b086742b366b68bb6204a620127bfce931749b56a0291dcf216679fb2296204",
+    "scripts/public-site-policy.json": "69ec241ac1a63cc5d90c5a40a3925e39ef58dfc79907bf5cb87d1024e1d0de1f",
     "templates/app-shell/AppShell.dc.html": "f71017a26f12b71d9e653dff79635ed14d5eb4a3dac9c5ce095188c537b858e3",
     "templates/article/Article.dc.html": "9b2ed3af604ac9e552f33bc922ec7dd2659b786dcb624cb491f7a437658adb2f",
     "templates/auth/Auth.dc.html": "ab6fb52740dbda804c9963cd2b63aa7d482c4b3cd2fa87b9a7f0c20ab2ef1e64",
@@ -78,7 +78,7 @@
     "templates/tech-release-notes/TechReleaseNotes.dc.html": "6f271eeda023da50ee640e3df171e24ca160143232ab2c6e0243e8fed81b2726",
     "templates/tech-retro/TechRetro.dc.html": "ac268c817891399285e3efbbc72e3a425b50d67874bdc0d4ad2ee6ebdaa10a39",
     "templates/tech-rfc/TechRfc.dc.html": "283a1ae0cc7569ad53e1923eda560aeca592d32c6f5a88161a798675f08f016e",
-    "templates/vn-appointment-transfer/VnAppointmentTransfer.dc.html": "78c1e79582be111786a5c3bb93a70715481b01531b0c5fc71688883ea1f5fe72",
+    "templates/vn-appointment-transfer/VnAppointmentTransfer.dc.html": "5d627cf56ad8ca1e5172e0520a5ce1616a70e0bc4fbcaad71fc9b40463382a45",
     "templates/vn-certificate-of-employment/VnCertificateOfEmployment.dc.html": "88aa8a66a15ae4ae104476fb44066121038fbf6b09b4f4482c75f3d613e5c3d5",
     "templates/vn-code-of-conduct/VnCodeOfConduct.dc.html": "ee9b48c9c0b11517c580fc63490ad25a83eef86c74b3518d5f6b56f6c97e7c4f",
     "templates/vn-compensation-regulation/VnCompensationRegulation.dc.html": "df36f2b51fc791a14bf26482cb56c51029063622a8bcba43df99486a9a7ca98d",
@@ -112,11 +112,11 @@
     "templates/vn-resignation-letter/VnResignationLetter.dc.html": "6d98e4352e71672245acdf45be2c6403e12861faab2edd44e91263c6ca155d16",
     "templates/vn-salary-scale/VnSalaryScale.dc.html": "8d37239d772f60bcad268a44874493fedffc0650251607fc1dcd9d058eca2f0f",
     "templates/vn-sow-appendix/VnSowAppendix.dc.html": "c04069dd949f383cef3f8123c7c1cd5b479ae88f3cd3a872e6693fc71f14ae30",
-    "templates/vn-termination-decision/VnTerminationDecision.dc.html": "cd766f07aaab5e3de82a75d95e6aa1de69e1360c36f65770bd78bbf8834c7148",
+    "templates/vn-termination-decision/VnTerminationDecision.dc.html": "dbe04dfcb416025b01857a9784810944108866b967a8009daebedc31b8eb0cf7",
     "templates/vn-total-rewards-appendix/VnTotalRewardsAppendix.dc.html": "ee941a6d26aa525bba779015ca01f4bdb7246571db2c3558499d7bc2fee3c2aa",
     "templates/vn-training-commitment/VnTrainingCommitment.dc.html": "49b2b4459bf2a900ddfafe679b6f3b088c78a31f611ae76dc3ac276e05a14c46",
     "templates/vn-travel-expense-policy/VnTravelExpensePolicy.dc.html": "1e585bd53ec6fb41322082bddfb7eed4ac811bfabb1ad2d639b9babba6c0e212",
-    "tokens/tokens.dtcg.json": "768b48fbabfa808ea8f8b755486268170815a3fa3dd2a960cf7ca16df113c042"
+    "tokens/tokens.dtcg.json": "5c4b7bcc05ed52a32577ffc2eaa523379eaf657530490736738251f14e98bc8c"
   },
   "documents": [
     {
@@ -129,7 +129,7 @@
       "path": "DESIGN.md",
       "audience": "documentation",
       "role": "generated_reference",
-      "sha256": "380b4bb61cee345d12b96e40092a081bc7773ee4fb58d638baf28ac554c635ae"
+      "sha256": "63ce3dcf3fa7f7aca4e5dbb9c9af5ab1481eafb9507cbb72c2f9683f7c4f681c"
     },
     {
       "path": "MAINTAINERS.md",
@@ -141,13 +141,13 @@
       "path": "README.md",
       "audience": "documentation",
       "role": "human_orientation",
-      "sha256": "6e60ce7941e1b21226413778c7426a580af48d3a3c7c39c70184a2c3c6cadbf6"
+      "sha256": "4fff9ded70a6e7fd9295baf10046e2fab625fdba6fb2ceb53cb44224da50d4ef"
     },
     {
       "path": "SECURITY.md",
       "audience": "documentation",
       "role": "security_reporting_policy",
-      "sha256": "625410a24dedd969d4d8baaf18aad10f2c56f47f050c927bc0a78623cc48f940"
+      "sha256": "de01aa640e513f3fd27b6b82069f1ffdf22da832845fb15f94d9a89236e298ca"
     },
     {
       "path": "SKILL.md",
@@ -909,19 +909,19 @@
       "path": "docs/consuming.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "20c99ab5b7eecdcaaffe63fa3b1704f2ba29018f555d7b33606a7350a1e6ff6e"
+      "sha256": "62e07ee791ca4de4ed545ab6659476f611ad42e5aaaa1aa756044f90c4d7e6df"
     },
     {
       "path": "docs/contrast-report.md",
       "audience": "documentation",
       "role": "generated_measurement",
-      "sha256": "626481c92ebb512eeeeb54ce3d67e1a154971c2107c25e814b3723fae88cc994"
+      "sha256": "a9462f354c80cd2f0e9f4d1e79b104d5e61773685021e15cc03af009a347a4c0"
     },
     {
       "path": "docs/conventions.md",
       "audience": "documentation",
       "role": "normative_repository_contract",
-      "sha256": "7f2cf8052a2ee38e4d87b53c9e507099ae4ec7a23eea0af689586d32fbc1597b"
+      "sha256": "f1ff93252f06067008c26f6302bc2c2d272735406425d8a9bc9638c7b53d3cd4"
     },
     {
       "path": "docs/decisions.md",
@@ -1059,7 +1059,7 @@
       "path": "docs/release-notes.md",
       "audience": "documentation",
       "role": "release_history",
-      "sha256": "594caf2b55b6a3445d9e5be1203f241846c98d0f996f870abd919ff4daea1879"
+      "sha256": "3769ea8ed8e16b26d9a1c344d20ee586b000825351c249f3be27b1b961af7b57"
     },
     {
       "path": "docs/releasing.md",
@@ -1077,7 +1077,7 @@
       "path": "docs/static-html-reference.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "991904349f56dfb4bc4fe0b863303f89fe85fe236f87835846fc60c06d191f76"
+      "sha256": "24292bbfe296188c6c8f2c9b84858412133a3d4a8d74f61a3741a464d6f35345"
     },
     {
       "path": "docs/storybook.md",
@@ -1185,19 +1185,19 @@
       "path": "docs/vi/consuming.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "f263237716c11f5c9327764531c598ab14f381887c9ce3ba2a45c84aa82a0c79"
+      "sha256": "caee0aadf6262082bd700c3c72f0c8d241b4d301407d8c905f2c3e2af6fbe9ce"
     },
     {
       "path": "docs/vi/contrast-report.md",
       "audience": "documentation",
       "role": "generated_measurement",
-      "sha256": "4dbd58c2be266273e2b7057f79f230bb96edb6e1b0badd687fb440655935919b"
+      "sha256": "93b5cfd2b0deb45a13fa418d605e2693615b915a1874f492873a7e9c40fa9c38"
     },
     {
       "path": "docs/vi/conventions.md",
       "audience": "documentation",
       "role": "normative_repository_contract",
-      "sha256": "9be8fea0bb711ecc3c34a25c36f1432ce3c469af7cdf9ce77a004e46873bbc98"
+      "sha256": "ab3bdb27e1fc8c093e2e214c14ca76b73dea86f6aefdd14e066566d311d7c820"
     },
     {
       "path": "docs/vi/decisions.md",
@@ -1233,13 +1233,13 @@
       "path": "docs/vi/entrypoints/DESIGN.md",
       "audience": "documentation",
       "role": "generated_reference",
-      "sha256": "7a1fbccb17e087c4766f9aa98a22488cc3b78b48be84727c43e1fb8d9924a407"
+      "sha256": "aa88f7fc36d5bbaa6ae5342aa47eebd23a29caf7e89dfb07369736f400c796da"
     },
     {
       "path": "docs/vi/entrypoints/README.md",
       "audience": "documentation",
       "role": "human_orientation",
-      "sha256": "334525614833c314cb4fafcfee25f9b3d42f576b4518cb17c5a17e915b5312fc"
+      "sha256": "5c68b403f0da7d01b98e6265a16a8942d1ab7ecd6ebeb7ec26e9e6f9343c812d"
     },
     {
       "path": "docs/vi/entrypoints/SKILL.md",
@@ -1335,7 +1335,7 @@
       "path": "docs/vi/release-notes.md",
       "audience": "documentation",
       "role": "release_history",
-      "sha256": "ae1ef3fadbdf840c5013976b4685d0f865303069241c02c979c2fcd95b424726"
+      "sha256": "06dad4f351f1c1afdd4c47fc22189a769137e47f4dc90dcba9ecca48b59417c0"
     },
     {
       "path": "docs/vi/releasing.md",
@@ -1353,7 +1353,7 @@
       "path": "docs/vi/static-html-reference.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "931b02d11ac482e2ceb714f22f4489093b24144bf47d79baabe9f762434dbb66"
+      "sha256": "49016cb1b1508e3591c04b7752c91691435f5c7dcb6887c72181600daff24251"
     },
     {
       "path": "docs/vi/storybook.md",

package/docs/release-notes.md

@@ -1,6 +1,6 @@
 # Release Notes
 
-Curated product highlights for operators. This is **not** a git log and **not** a `CHANGELOG.md` — the design system does not maintain a changelog file. source checkout VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->** identifies the repository version. This page supplies Storybook **Release Notes**; local edits do not establish what is deployed at `design.cyberskill.world`.
+Curated product highlights for operators. This is **not** a git log and **not** a `CHANGELOG.md` — the design system does not maintain a changelog file. source checkout VERSION **<!-- cs-source-version:checkout -->2.4.0<!-- /cs-source-version -->** identifies the repository version. This page supplies Storybook **Release Notes**; local edits do not establish what is deployed at `design.cyberskill.world`.
 
 ## Unreleased revision — local implementation, acceptance pending
 
@@ -28,6 +28,18 @@ These changes belong to the current revision working tree. They are not a publis
 
 Release remains pending human visual acceptance, required native/manual assistive-technology checks, provenance decisions, and acceptance of changed pilot artifacts. Changed support evidence requires fresh review in `components/lifecycle.json`. EN/VI is the intended language scope; Japanese remains a partial spike. No support expansion, deprecation or removal is authorized by this note.
 
+## Release — `@cyberskill/design@2.3.0`
+
+Published stable minor release recorded in `_audit/ci/fixtures/npm-published-release.json` (observed `2026-11-06T03:56:00.000Z`, tag `v2.3.0` at commit `1f873e812e9a02ec68bbc49c3b7ae3248a165ac9`).
+
+- **Generated `DESIGN.md` Open-Spec v3 (`build:design-md`):** Projects both the Stitch 9-Section specification and extended analytical subsections (`Elevation Levels 0–5`, `Shapes & Photography Geometry`, `Font Substitutes`, and 10 canonical `ex-*` component recipes) in English and Vietnamese.
+- **Surface Alternation & Editorial Prose Utilities:** Adds `.cs-card--raised` and `.cs-card--featured` in `base/data.css`, `.cs-prose` (`max-inline-size: var(--cs-prose-measure, 45rem)`) in `base/typography.css`, and theme-adaptive overlay scrims/shadows in `base/shell.css` and `base/controls.css`.
+- **Automated `AT-01..AT-16` Verification Receipt (`scripts/run-automated-at-matrix.mjs`):** Verifies all 16 assistive-technology release matrix rows across `_audit/a11y-gate.html`, `_audit/component-behavior-test.html`, and `_audit/at-kit-probe.html` (`passed=16, pending=0`).
+
+```bash
+npm install @cyberskill/design@2.3.0
+```
+
 ## Release — `@cyberskill/design@2.0.0`
 
 Published stable major release recorded in `_audit/ci/fixtures/npm-published-release.json` (observed `2026-10-30T16:59:22.000Z`, tag `v2.0.0` at commit `a159211acf8338cfdc4df18e9fa92c461071e00f`). Subsequent repository tags `v2.1.0` and `v2.2.0` advance the 2.x source line.