@nurix/etna 0.18.19 → 0.18.20

package/data/harness-index.json

@@ -1,5 +1,5 @@
 {
-    "fingerprint": "36cfdb5ed4f4",
+    "fingerprint": "1573653d37b0",
     "harnesses": {
         "code": {
             "plugin": "code",

package/data/harnesses/code/harness.json

@@ -1,11 +1,11 @@
 {
   "harness": "code",
   "name": "code",
-  "version": "3.1.3",
+  "version": "3.1.4",
   "files": [
     ".prettierrc.json",
     ".prettierignore",
     ".vscode/settings.json"
   ],
-  "digest": "d078197b0b06"
+  "digest": "15411f0d9e07"
 }

package/data/harnesses/code/skills/design/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: design
+description: Design, build, review, polish, redesign, or introspect internal operator UIs — CRMs, ticket queues, admin panels, analytics dashboards, log viewers, command centers, and any internal/back-office tool an operator, agent, or analyst works in all day. Resolves the project's brand from a design.md, derives structure from the domain objects, emits a working React + Tailwind UI against @nurix/components or shadcn/ui, and holds it to operator-grade quality across a full sixteen-dimension taxonomy. Triggers on "build a dashboard", "design an admin panel", "review this CRM UI", "polish this queue", "redesign this internal tool", "why does this table feel off", "make it feel like Linear", or any create/improve/introspect request for an internal operator interface. Coverage is the operator pack: marketing sites, landing pages, storefronts, homepages, and mobile-native apps are out of scope — no carried pack covers them, so refuse cleanly and redirect. The machinery is not the limit; the packs are.
+---
+
+# design
+
+The design skill. Its shipped coverage is the **operator pack**: internal tools — CRMs, ticket queues, admin panels, dashboards, log viewers, command centers. It resolves the brand, derives the structure from the domain objects, emits a React + Tailwind UI, and enforces operator-grade quality across the sixteen-dimension taxonomy. This file is a router — it names where to go and what not to do; the knowledge lives in the references and data below, loaded on demand.
+
+## The front gate
+
+**Recognition, by precedence — stop at the first that resolves.**
+
+1. **Project-declared identity wins.** A resolved `design.md` carrying `product-traits` decides coverage outright.
+2. **The signal checklist recognizes** when no `design.md` speaks: the audience is employees / agents / analysts; the metric is task throughput, not conversion; the surfaces are queues / tables / forms / monitors. The `design.md` library (`data/design-md/library/`) assists the lookup by resemblance — it never overrides the checklist.
+3. **Refuse with a redirect** when no carried pack covers the brief — marketing sites, landing pages, storefronts, mobile-native. State plainly which pack is missing and point elsewhere; never a degraded attempt. The machinery is artifact-agnostic; the boundary is pack coverage, and it moves only by adding a pack.
+
+**Then the intent digest — infer and confirm.** Build a structured digest — entities, archetype guesses, density tier, substrate — with **every inference marked as inferred**. Present it once for confirmation before any derivation begins. Ask questions only for strategic unknowns whose answers change the design. Nothing auto-runs on silent inference; nothing stalls on a blanket interview.
+
+## Boot order
+
+Before **any** design output, read [`references/hard-rules.md`](references/hard-rules.md) — the boot-loaded floor of 131 rules <!-- count:rules=131 --> (bans, deterministic thresholds, mandatory procedures, each keyed to an anchor id). Then route by workflow. JIT loads never happen at boot — they fire at the gate that needs them.
+
+| Route | Load, when |
+| --- | --- |
+| **create** (nothing exists yet) | [`references/create.md`](references/create.md) at intake; then per phase: [`structure.md`](references/structure.md) at structure, [`personality.md`](references/personality.md) at tokens, [`lifecycle.md`](references/lifecycle.md) + [`interaction.md`](references/interaction.md) at surfaces |
+| **improve** (a UI already exists) | [`references/improve.md`](references/improve.md) + [`references/diagnosis.md`](references/diagnosis.md) |
+| **introspect** (why is it wrong) | [`references/introspect.md`](references/introspect.md) + [`references/diagnosis.md`](references/diagnosis.md) |
+| JIT — archetype exemplar | `data/operator-pack/exemplars/<slug>.tsx` at that archetype's emission gate during surfaces — never at boot |
+| JIT — fixture pair | `data/catalog/fixtures/<id>.{flag,pass}` only when a rule is contested and the contrastive pair teaches it (authoring repo only — pairs are stripped from shipped bundles; when the folder is absent, the finding's exact-fix line carries the teaching) |
+
+## The three workflows
+
+**Create** makes taste where nothing exists. It runs **six gated phases** — intake, structure, scaffold, tokens, fixtures, surfaces — and closes on the verification ladder. Each boundary is `phase-gate.mjs <phase>`; the next phase does not open until the gate is green. The object pass is never skipped — a small brief earns a proportionally small pass, never a guessed archetype; every surface takes an archetype from the closed six <!-- count:archetypes=6 --> (`list-detail`, `dashboard`, `entity-detail`, `create-edit`, `log-stream`, `command-center`). Fixtures are seeded and generated **before** surfaces, because realistic data is taste-bearing design material. See [`create.md`](references/create.md).
+
+**Improve** is one engine over a UI that already exists, run at a point on scope × depth × authority; the verbs — review, polish, redesign, typeset — are parameter bindings, never sibling files. Emission is **jailed to the lever manifest** by default: an edit may emit only values inside the project's `design.md` vocabulary, enforced by `detector.mjs --manifest`. On a foreign UI, **extract a `design.md` first** (`provenance: extracted`) — record what IS, never what should be. Wrong fundamentals are tier-two (`lever-change`) findings: finish the within-levers work, report them, and offer a consent-gated lever run — never change levers unbidden. See [`improve.md`](references/improve.md) + [`diagnosis.md`](references/diagnosis.md).
+
+**Introspect** explains **why** a UI isn't working; it reads code and never edits it. **Ask the reader question first**, every run, verbatim — designer / developer / PM — never inferred, never a stored default. Diagnose causes-first (Structure → Behavior → Perception), narrate each finding from the felt symptom down to its cause, render it in the reader's register, and **always file a dated report**. See [`introspect.md`](references/introspect.md) + [`diagnosis.md`](references/diagnosis.md).
+
+## Scripts
+
+Under `scripts/`; spawn them from this skill directory. All ESM, Node ≥ 22, zero dependencies.
+
+- `detector.mjs <file...> [--manifest design.md] [--json]` — per-edit source rules + lever-manifest drift; exit 1 with the fix-or-classify directive (fix now, or classify the inapplicability into the decay ledger — never ignore).
+- `phase-gate.mjs <phase> [--project <dir>]` — validates a phase's exit preconditions; exit non-zero printing the exact fix. Phases: `intake`, `structure`, `scaffold`, `tokens`, `fixtures`, `surfaces`.
+- `preship-sweep.mjs [--project <dir>]` — whole-app catalog sweep + viewport sweep + copy audit + scope cross-check; prints the manual `proc-*` checklist.
+- `render-rung.mjs [--project <dir>] [--url <dev-server>]` — render-only rules at 375/768/1024/1440 plus the render instruments (evidence, never gates); a one-line notice and exit 0 when no headless browser is importable.
+- `derive-personality.mjs <design.md> [--check|--emit <outdir>]` — `--check` is the coverage gate; `--emit` writes `personality.css` + `globals.css`. The gate fails unless all 26 primitives <!-- count:primitives=26 -->, both dials, and every one of the 34 color values (17 semantic <!-- count:semantic-tokens=17 --> + 17 substrate <!-- count:substrate-tokens=17 -->) <!-- count:color-tokens=34 --> is assigned or hinted.
+- `scaffold.mjs <structure.md> --out <dir>` — routes, nav, state-shells, and fixture wiring from the entity/surface map.
+- `generate-fixtures.mjs <structure.md> --seed <n> --out <dir>` — seeded, domain-shaped fixture modules.
+- `self-integrity.mjs` — run from `skills/design/`: anchor parity (prose ↔ catalog), stated counts, fixture-pair presence and contrastive validity. CI-owned.
+
+## Project artifacts
+
+The skill writes these into the consumer project; the emitted code and these files are the only design record — no sidecar caches.
+
+- `design.md` (project root) — the brand document + lever manifest. Create writes it; improve reads and, on a foreign UI, extracts it. Provenance is one of `project | extracted | library | default` (extracted sits at project precedence).
+- `docs/design/structure.md` — the entity/surface map, in a fenced `yaml structure` block; `scaffold.mjs` consumes it.
+- `docs/design/findings/YYYY-MM-DD-<slug>.md` — dated introspect and review reports.
+- `docs/memory/design-decay.md` — the decay ledger: rules skipped or fought, the fix-or-classify classifications, guidance that produced wrong output. Append-only, maintainer-read, human-closed. The skill never self-modifies — it observes decay; the maintainer closes it.
+
+## Substrate and scope
+
+- Substrate is **`@nurix/components` (default) or `shadcn/ui` only** — the Tailwind + shadcn-flavor floor. Import `@nurix/components` by subpath (`@nurix/components/button`); emit `.tsx`, never `.jsx`.
+- The `components` API reference is a **separate skill** — a pure reference, never invoked from here. `design` ships as one skill with zero cross-skill invocation; all its knowledge is lazily-loaded data under `references/` and `data/`.

package/data/harnesses/code/skills/design/data/catalog/rules.csv

@@ -0,0 +1,132 @@
+id,dimension,statement,numbers,grade,fire_points,detector,scope_note,provenance,fixture_pair
+typ-01,P1,"Text meets contrast minimums: body against its background, large text at the relaxed floor.","body >=4.5:1; large >=3:1",machine,render,render,"Effective contrast is pixel-measured on the rendered surface (render rung, D32).",WCAG 1.4.3;uxui;gnu;ben;uupm,na
+typ-02,P1,"Body text sits at 14px or above on operator surfaces; nothing renders below 11px anywhere.","body >=14px; hard ban <11px; uupm calls <12px a failure",machine,edit,source,"The <11px absolute ban is the universal source check; body-vs-label 14px scope is best-effort.",new;stitch;uupm,yes
+typ-03,P1,"Form inputs are at least 16px on touch and mobile surfaces to defeat iOS zoom.",">=16px",machine,edit,source,"Touch/mobile surfaces only; desktop operator inputs are exempt.",ben;uupm,yes
+typ-04,P1,"Line-height runs inverse to size: looser for body prose, tighter for headings.","body 1.4-1.6; headings 1.1-1.3",judged,sweep,none,"Prose text only (universality flag); dense table leading legitimately runs tighter and is exempt.",imp;new;gnu;uupm;volt/sentry,na
+typ-05,P1,"Prose measure stays inside the readable band; data tables are exempt.","45-75ch",machine,edit,source,"Tables exempt.",imp;stitch;taste;gnu,yes
+typ-06,P1,"At most two font families per app; the type scale holds a bounded set of distinct sizes.","<=2 families; ~6 distinct sizes",machine,sweep,source,"<=2 families is the hard machine bound; the ~6-sizes figure is advisory scale conformance (universality flag: needs a hard number to gate).",imp;new;ben;taste,yes
+typ-07,P1,"Tabular lining numerals on every numeric column, KPI, timer, and ID.",,machine,edit,source,"The survey's single most convergent operator-table rule; font-variant-numeric on numeric contexts.",floor;new;ben;volt/stripe;volt/binance;uupm,yes
+typ-08,P1,"All-caps micro-labels carry positive tracking; tracking never falls below the negative floor.",">=0.02em; floor >=-0.04em; caps band 0.05-0.12em",machine,edit,source,,imp;ben;taste,yes
+typ-09,P1,"Type sizes come from a fixed rem scale, never viewport-fluid; scale steps hold the ratio band.","step ratio 1.125-1.2",machine,edit,source,"Operator surfaces; ban vw/vh/clamp on font-size.",imp,yes
+typ-10,P1,"Adjacent type-scale steps stay at least a quarter apart.",">=25%",machine,sweep,source,"Given a declared scale.",gnu,yes
+typ-11,P1,"No UI font weight below 400.",">=400",machine,edit,source,,gnu,yes
+typ-12,P1,"Never size type in em; px or rem only.",,machine,edit,source,"em compounds unpredictably.",gnu,yes
+typ-13,P1,"Dense-app type ladder as an advisory reference; the brand's declared scale wins.","H1 30-36/700; H2 24/600; H3 20/600; H4 16/600; body 14-16/400; small 12-13/400",judged,sweep,none,"Advisory ladder, not a gate; the declared scale overrides.",gnu,na
+typ-14,P1,"Typographic characters: curly quotes and apostrophes, en-dash for ranges, real ellipsis and multiply and copyright glyphs, one space after punctuation, never underline non-links, bold XOR italic.",,machine,edit,source,"Lintable copy rules.",ben,yes
+typ-15,P1,"Zero em-dashes in UI copy.",,machine,edit,source,"House rule, binary.",taste,yes
+typ-16,P1,"Serif faces are banned in dashboards and software UIs.",,machine,edit,source,"Scoped to operator surfaces.",stitch,yes
+typ-17,P1,"AI-default fonts are house-taste flags: Inter-as-reflex, Roboto or Arial or system-as-primary, Space Grotesk.",,judged,sweep,none,"House taste; a brand may legitimately choose Inter.",taste;stitch;ben,na
+typ-18,P1,"Ration eyebrow and micro-label uppercase-tracking instances against section count.","<= ceil(sectionCount/3)",machine,sweep,source,"Mechanical count; marketing-scoped, rarely fires on operator surfaces.",taste,yes
+typ-19,P1,"Code and mono type never scales down: fixed at 16px, long lines scroll horizontally rather than wrap.","16px fixed",machine,edit,source,,volt/sentry,yes
+col-01,P2,"Non-text UI components clear the component-contrast floor: input borders, icons, focus rings.",">=3:1",machine,render,render,"Pixel-measured at the render rung.",WCAG 1.4.11,na
+col-02,P2,"One accent, reserved for primary action, selection, and state; the accent stays below the saturation ceiling.","saturation <80%",machine,edit,source,"Saturation <80% is the machine check; the one-accent count is warning-tier judged (status palettes are additional, not accent violations).",floor;stitch;taste;volt/binance;volt/sentry,yes
+col-03,P2,"Color is never the only signal: status always pairs with an icon or text.",,machine,render,render,"Pairing is confirmed on the rendered element (use-of-color, WCAG 1.4.1).",WCAG 1.4.1;uxui;uupm,na
+col-04,P2,"Status colors flow only through semantic tokens: success, warning, destructive.",,machine,edit,source,,floor;D6,yes
+col-05,P2,"Ban literal palette classes, hex/rgb/oklch literals, and dark: prefixes in JSX.",,machine,edit,source,"The survey's most proven machine rule (stitch validate.js).",floor;stitch;uupm,yes
+col-06,P2,"No pure black text or canvas and no pure white surfaces; start near the near-black greys.","#000000; #111827; #1F2937; #ffffff",machine,edit,source,"Fires only when no brand token declares pure black; explicit brand tokens override (universality flag).",gnu;taste;stitch,yes
+col-07,P2,"No opacity or rgba-fabricated shades: every shade is an explicit hex or token.",,machine,edit,source,,gnu,yes
+col-08,P2,"Shade counts stay within bounds: the grey family and each accent family hold a bounded ramp.","greys 8-10; each accent family 5-10",machine,sweep,source,"Token-set count.",gnu,yes
+col-09,P2,"Disabled-state opacity sits in the muted band.","0.38-0.5; ben 40-50%",machine,edit,source,,uupm;ben,yes
+col-10,P2,"Modal scrim sits in the mid black band.","40-60% black",machine,edit,source,,uupm,yes
+col-11,P2,"Hover darkens the base shade by a small delta.","10-15%",judged,sweep,none,"Warning-tier: token ramps quantize the delta, nearest ramp step wins.",ben,na
+col-12,P2,"AI-slop palette ban: purple and blue neon glows and gradients, purple-gradient-on-white, reflex SaaS blue.","#3B82F6",judged,sweep,none,"Warning-tier: hue-range is detectable but a brand may legitimately be purple; the reflex #3B82F6 literal is a source-catchable sub-signal.",stitch;uupm;ben;taste,na
+col-13,P2,"Semantic price and status colors are text-only, never fills, and never repurposed for generic success or error.",,machine,edit,source,"Per token set.",volt/binance,yes
+col-14,P2,"Data-viz elements clear contrast: lines and bars against the background, data labels against theirs.","lines/bars >=3:1; labels >=4.5:1",machine,render,render,"Pixel-measured at the render rung.",uupm,na
+col-15,P2,"One grey family per app: no warm and cool grey mixing.",,judged,sweep,none,"Warning-tier: a deliberate warm-surface/cool-chrome split is a brand decision, not drift.",taste;gnu,na
+spc-01,P3,"Every spacing value lands on the declared 4/8-based scale.","standard 4/8/12/16/24/32/48/64/96px; dense 2/4/8/12/16/24/32px; monotony ceiling >=10 identical",machine,edit,source,"On-scale conformance is the machine core; the monotony sub-check (>=10 identical) does not apply to operator surfaces, where uniform row/cell rhythm is deliberate (universality flag).",gnu;ben;taste;uupm;imp;new,yes
+spc-02,P3,"Adjacent spacing values stay at least a quarter apart.",">=25%",machine,sweep,source,"On the declared spacing scale.",gnu,yes
+spc-03,P3,"Click and tap targets clear the minimum target size (WCAG 2.2 SC 2.5.8); touch-primary surfaces go larger.",">=24x24px; >=44px touch; dense-row 28px; >=8px spacing exception",machine,render,render,"Assembled as one SC 2.5.8 (spatial + interaction restatement); dense data-row controls compact to 28px; undersized allowed only via the >=8px target-spacing exception (int-11). Actual geometry measured at render.",WCAG 2.5.8;HIG;volt/binance;wcag22;deep-research,na
+spc-04,P3,"Numeric table columns right-align, text left-aligns; ban center-aligned data columns.",,machine,edit,source,,new;ben,yes
+spc-05,P3,"Group spacing exceeds within-group spacing so proximity encodes structure.","within 4-16px; between 24-64px",judged,sweep,none,"Judgment on what reads as a group.",imp;gnu,na
+spc-06,P3,"Corners land on a fixed radius scale, one scale per page.","2/4/6/8/12/9999",machine,edit,source,"Per token set.",volt/binance;volt/theverge;taste,yes
+spc-07,P3,"Table rows run tight: vertical cell padding plus hairline dividers, buttons compacted inside dense rows, mono numbers on every figure.","12px vertical padding; 28px button height",machine,edit,source,"Per token set; operator gold.",volt/binance,yes
+spc-08,P3,"Full-viewport height uses min-h dvh, never h-screen or 100vh.","min-h-[100dvh]",machine,edit,source,,stitch;taste;uupm,yes
+spc-09,P3,"Ban calc-percentage layout arithmetic; CSS Grid instead.","calc(33% - 1rem)",machine,edit,source,,stitch;taste,yes
+spc-10,P3,"No horizontal scroll at any viewport; any overflow means the design is broken.","sweep 375/768/1024/1440",machine,render,render,"Real overflow measured at each breakpoint (render rung).",stitch;uupm;taste,na
+spc-11,P3,"Container max-width around the wide ceiling.","~1400px; max-w-7xl",judged,sweep,none,"Operator surfaces are often legitimately full-bleed.",stitch;taste,na
+spc-12,P3,"Section rhythm runs tighter on dense product pages than marketing.","80px dense; 96px marketing",judged,sweep,none,"Advisory.",volt/binance;volt/sentry,na
+spc-13,P3,"Cockpit rule above the density threshold: no card boxes, hairline dividers, tight padding, mono numbers.","density >7",judged,sweep,none,"Warning-tier, dial-conditional: fires only at the declared dense tier.",taste,na
+spc-14,P3,"Content-overload ceilings on action areas, elements, visible required fields, and nav items.",">7 action areas; 15+ elements; 12+ required fields; nav 5-9",judged,sweep,none,"Warning-tier: dense operator surfaces legitimately exceed the element counts.",uxui,na
+spc-15,P3,"Grid and bento integrity: N items fill exactly N cells, no orphan corners, spans interlock.",,machine,render,render,"Mechanical fill; actual cell occupancy confirmed at render (dynamic lists are not statically countable).",taste,na
+dep-01,P4,"z-index values come only from a declared scale; ban arbitrary values.","scale 0/10/20/40/100/1000; ban 999; ban 9999",machine,edit,source,,new;uupm;stitch,yes
+dep-02,P5,"One h1 per view; heading levels never skip.","one h1",machine,sweep,source,"Whole-app cross-file check.",new;uupm,yes
+dep-03,P5,"Dashboard holds a small set of primary metrics above the fold.","<=~4",judged,sweep,none,"Non-deterministic threshold; primary metric is not machine-detectable and command centers legitimately exceed (universality flag).",imp,na
+dep-04,P4,"Border and shadow never do the same separation job on one element.",,machine,edit,source,"Flags an element carrying both a border and an elevation shadow; redundancy judgment noted.",imp;gnu,yes
+int-01,B1,"Every interactive element ships a visible focus-visible ring: contrast, thickness, and offset.",">=3:1; >=2px; uupm 2-4px",machine,edit+render,source,"Ring presence is the file-local source check; ring contrast is verified at the render rung.",imp;WCAG;gnu;uupm,yes
+int-02,B1,"Ban outline:none without a replacement focus style.",,machine,edit,source,,imp,yes
+int-03,B1,"No pointer-only affordances: anything hover-revealed has a keyboard or focus path.",,machine,edit,source,"Partial: flags hover-only reveals lacking a focus path.",floor,yes
+int-04,B1,"Modals use native dialog and inert focus containment; ban nested modals; side panel before modal.",,machine,edit,source,"Partial.",floor;imp,yes
+int-05,B1,"Undo over confirm for reversible actions; confirmation only for destructive irreversible ones.",,judged,sweep,none,"An irreversible action lacking both confirm and undo is auto-critical.",imp;uxui;uupm,na
+int-06,B1,"Optimistic updates only for low-stakes actions, always with rollback.",,judged,sweep,none,,imp,na
+int-07,B1,"Validate on blur, never per keystroke.",,judged,sweep,none,"Scoped or judged: strength meters and character counters are legitimate per-keystroke feedback (universality flag).",imp;gnu;stitch;taste;uupm,na
+int-08,B1,"Labels stay visible above the input; errors render inline below the field; hard ban on placeholder-as-label.","gap 4-8px",machine,edit,source,"Form fields only; a bare search input with a placeholder is the recognized exception (universality flag).",new;gnu;stitch;taste;uupm,yes
+int-09,B4,"Sortable headers carry aria-sort; tables beyond one viewport get a sticky header or first column; a bounded default column set with a picker; bounded pagination, never infinite scroll on work queues.","5-7 visible columns; 1-25 of 150",machine,edit,source,"Most of the rule is source-checkable presence and count.",uxui;new,yes
+int-10,B1,"An aria-live region is present wherever async status updates render.",,machine,edit,source,"Presence.",new,yes
+int-11,B1,"Target-to-target spacing clears the minimum gap (the SC 2.5.8 spacing-exception path).",">=8px",machine,edit,source,"Declared gap on adjacent interactive targets.",uupm,yes
+int-12,B1,"cursor:pointer on every clickable element on web.",,machine,edit,source,,uupm,yes
+int-13,P5,"One primary CTA per screen or region; distinct button tiers; duplicate-intent CTAs fail.",,judged,sweep,none,"Warning-tier: multi-pane surfaces legitimately carry one primary per pane.",gnu;taste;uupm,na
+int-14,B1,"All five button states are present: default, hover, active, focus, disabled.","5 states",machine,edit,source,"Presence of focus/active/disabled styling.",ben,yes
+int-15,S4,"Virtualize lists beyond the item threshold.",">=50 items",judged,sweep,none,"Warning-tier: bounded and paginated lists are exempt; static list length is not reliably known.",uupm,na
+int-16,B2,"Tactile press feedback: a small active translate or scale, responding within the reaction window.","-1px translateY; scale 0.98; <100-150ms",judged,sweep,none,"Warning-tier: suppressed under reduced-motion.",stitch;taste;uupm,na
+int-17,S1,"Every interactive element and image carries a discernible accessible name (axe button-name, select-name, image-alt Critical; link-name Serious).",,machine,render,render,"Deterministic W3C accname on the rendered DOM; gate on the violations bucket only.",axe;deep-research,na
+int-18,S1,"ARIA usage is spec-valid: allowed-attr, required-attr, required-children, valid-attr-value.",,machine,render,render,"duplicate-id-aria excluded (deprecating, WCAG 2.2 dropped SC 4.1.1); gate on violations only.",axe;deep-research,na
+mot-01,B2,"UI transitions hold the default duration band and never exceed the hard ceiling.","default 150-250ms; micro 100-150; state 200-300; larger 300-500; ceiling 500ms",machine,edit,source,"Declared-value ceiling.",imp;ben;uupm,yes
+mot-02,B2,"Per-interaction reference durations as a catalog, not a ban.","button 100; hover 150; tooltip 200; tab 250; modal-open 300; modal-close 250; page 400ms",judged,sweep,none,"Reference values, not bans.",ben,na
+mot-03,B2,"Every animation is gated on prefers-reduced-motion.","0.01ms reset",machine,edit,source,,WCAG 2.3.3;ben;taste;uupm,yes
+mot-04,B2,"Ban spring and bounce easing on operator surfaces and ban linear everywhere; easing strings come from the token set; no orchestrated page-load sequences.","ease-out cubic-bezier(0,0,0.2,1)",machine,edit,source,,floor;imp;ben;stitch;taste,yes
+mot-05,B2,"Animate only transform and opacity, never top, left, width, height, or margin.",,machine,edit,source,"The survey's most convergent motion rule.",ben;stitch;taste;uupm,yes
+mot-06,B2,"will-change only rides an in-progress transform or opacity animation, never blanket, never left dangling.",,machine,edit,source,,D26,yes
+mot-07,B2,"Loading indicators skeleton the content shape, delay to avoid flash, and follow the wait-time thresholds.","delay 150-300ms; nothing <500ms; spinner/skeleton 500ms-2s; progress bar >2s",machine,edit,source,"Partial.",new;stitch;uupm;ben,yes
+mot-08,B2,"Stagger children by a small per-item delay, capped in count and total sequence length.","30-50ms/item; cap ~8 children; total <1s; 80-100ms minimalist",judged,sweep,none,"Warning-tier, register-dependent: operator surfaces skip orchestration entirely.",uupm;taste,na
+mot-09,B2,"Ban scroll-event listeners for animation; observers or scrubbing only.","window.addEventListener('scroll')",machine,edit,source,,taste,yes
+mot-10,B2,"Ban useState for continuous scroll or pointer values; motion values instead.",,machine,edit,source,"Framework-scoped (React).",taste,yes
+mot-11,B2,"Exit runs shorter than enter; press scale stays in the tight band; few animated elements per view.","exit 60-70% of enter; press scale 0.95-1.05; <=1-2 elements",judged,sweep,none,"Warning-tier: coordinated pairs legitimately exceed the element cap.",uupm,na
+sta-01,B1,"Every data surface ships loading, empty, error, and partial/degraded states, plus post-action, cancel, disconnection/timeout, and concurrent-edit where they exist.",,machine,gate,source,"Required states, not afterthoughts; presence checked per surface.",dossier;jam;stitch;ben;uupm,yes
+sta-02,B1,"Empty states are text-first with at most one action, never a dead-end on actionable surfaces, never a literal no-data message.","<=1 action; copy 1-2 sentences",machine,gate,source,"Shape is machine; at most one action (read-only surfaces offer zero, universality flag); copy quality is judged.",floor;imp;gnu;uxui;stitch,yes
+sta-03,B5,"Error copy follows the formula: what happened, why, how to fix; ban dead-ends and silent failures.",,machine,gate,source,"Shape is machine: an error render must carry a recovery affordance (the dead-end/silent-failure detection); the three-part copy quality (diagnose, explain, recover) stays judged.",imp;uxui;jam,yes
+sta-04,B1,"Errors render inline next to the offending field, not banner-only; every error is visible.",,judged,sweep,none,"Warning-tier: system-wide failures legitimately banner.",uxui,na
+sta-05,B1,"Toasts auto-dismiss in the short band, announce politely, and never steal focus.","3-5s; aria-live polite",machine,edit,source,"Attrs.",uupm,yes
+sta-06,B1,"Empty-state taxonomy: first-time, user-cleared, no-results, no-access, and error are distinct states with distinct copy.",,judged,sweep,none,"Judgment on which state applies; presence is machine once the state is declared.",gnu,na
+cod-01,S3,"Emitted CSS defines every token the substrate consumes.",,machine,gate,source,"Coverage check over the full D6 token surface at token emission.",D6,yes
+cod-02,S3,"On improve runs, every value stays inside the lever manifest's vocabulary.",,machine,edit,source,"The D10 golden-rule drift check.",D10,yes
+cod-03,S3,"Every color, spacing, radius, and duration in a diff resolves to an emitted token.","",machine,edit,source,"Token-lock; the survey's only script-proven enforcement pattern (stitch validate.js + uupm resolver).",stitch;uupm,yes
+cod-04,S2,"No elision comments; files compile before done.","",machine,edit,source,"Bans rest-of-code, ellipsis-comment, TODO, and for-brevity markers; files-compile is verified at the compile rung.",taste;stitch,yes
+cod-05,B5,"Anti-fabrication: no invented metrics, no fake round numbers, no by-the-numbers stat sections, no placeholder person or company names; fake-precise mock numbers carry a mock marker; unknowable values use a bracket placeholder.","examples 99.98%; 124ms; 99.99%; 50%",machine,edit,source,"Name and section string bans are machine; number authenticity is judged; critical for KPI-dense operator surfaces.",stitch;taste,yes
+cod-06,P6,"No emoji anywhere and no emoji-as-icons: inline SVG only, one icon family per app, consistent stroke width, never hand-rolled icon paths.","strokeWidth 1.5 or 2",machine,edit,source,"Lucide or Heroicons or Phosphor.",stitch;uupm;taste,yes
+cod-07,S2,"Check dependencies before importing; fonts are self-hosted or use next/font with font-display swap, never a Google Fonts link in prod.",,machine,edit,source,"Dependency check before import is a procedure; the font-link ban and font-display presence are the source checks.",taste,yes
+cod-08,P6,"Image placeholders are deterministic seeds, never broken hotlinks; images declare dimensions; below-the-fold images lazy-load.","picsum.photos/seed/{seed}/{w}/{h}; loading=lazy",machine,edit,source,,stitch;taste;uupm,yes
+cod-09,S2,"Component line ceilings hold and files outside scope are never modified.","<120 ln table; <80 ln section",machine,edit,source,"Ceilings pinned here (survey numbers were illustrative).",uxui,yes
+cod-10,P6,"No div-built fake product screenshots.",,judged,sweep,none,"The number-one LLM-design tell.",taste,na
+cod-11,S2,"Every emitted component exports a typed Props interface; no HTML tags in React Native output.",,machine,edit,source,"Proven (stitch validate.js); the HTML-tag ban is framework-scoped.",stitch,yes
+cod-12,S4,"Runtime perf budgets: LCP, INP, CLS, and frame time.","LCP <2.5s; INP <200ms; CLS <0.1; 16ms frame",machine,render,render,"Runtime metrics measured at the render rung.",taste;uupm,na
+cod-13,B5,"Audit output carries a numeric before to after per finding; no vague language, no feels without a measurable change.",,judged,sweep,none,"The D22 finding-schema contract, enforced by self-integrity over findings rather than the UI detector.",ben,na
+cod-14,B5,"One name per concept, one concept per name, across UI copy, help text, and API names.",,judged,sweep,none,"Legacy-locked internal names may lag a renamed label; divergence must be deliberate, never accidental.",jam,na
+inst-01,P5,"Edge density: Canny edge pixels over total pixels, the cheapest instrument, start here.","Canny edges / pixels; r~0.83 with visual-search times",judged,render,render,"Instrument, never a gate: dense is not bad (lower-complexity-is-better refuted 0-3); a number is evidence inside a judged finding, never a verdict.",rosenholtz 2007;deep-research,na
+inst-02,P5,"Feature congestion of the rendered surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",rosenholtz 2007;deep-research,na
+inst-03,P5,"Subband entropy of the rendered surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",rosenholtz 2007;deep-research,na
+inst-04,P5,"Grid quality of the layout.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-05,P5,"White-space ratio of the layout.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-06,P5,"Symmetry of the layout.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-07,P5,"Figure-ground contrast of the surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-08,P5,"Contour congestion of the surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-09,P2,"Colorfulness of the surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-10,P2,"Distinct-RGB count of the surface.",,judged,render,render,"Instrument, never a gate: dense is not bad; evidence inside a judged finding, never a verdict.",miniukovich CHI'15;aalto-ui/aim;deep-research,na
+inst-11,B1,"KLM operator-cost of the core loop: sum the typed operators over a fixed path.","P=1.10s; H=0.40s; M=1.35s; K=0.20-0.28s; klm-fa 89.1% agreement",judged,render,render,"Comparative cost model, not throughput ground truth; a judged diagnosis dimension pairing with the D28 core loop and floor P1 throughput; countable clicks, keystrokes, tab-stops, and homings given a fixed path.",card-moran-newell;al-megren 2018;deep-research,na
+trust-01,B1,"AI presence is disclosed on the surface.",,judged,sweep,none,"Absence grades auto-critical (D34).",D34,na
+trust-02,B1,"A human override path is visible.",,judged,sweep,none,"Absence grades auto-critical (D34).",D34,na
+trust-03,B1,"AI-initiated irreversible actions are consent-gated with a preview.",,judged,sweep,none,"Absence grades auto-critical (D34).",D34,na
+trust-04,B1,"AI actions are auditable.",,judged,sweep,none,"Judged trust dimension (D34).",D34,na
+proc-01,S3,"Extract levers before any improve run on a foreign UI.",,procedure,gate,procedure,"Recover the lever manifest from code into a design.md before writing (D10).",D10,na
+proc-02,B5,"Ask the reader question before any introspect run.",,procedure,gate,procedure,"One question, every run; never inferred, never a stored default (D14).",D14,na
+proc-03,P5,"Run the object pass before screens.",,procedure,gate,procedure,"Six-archetype catalog, no brief-size threshold; a small brief earns a proportionally small pass, never a skipped one (D28).",D28,na
+proc-04,P3,"Declare the density tier per surface archetype before emission.",,procedure,gate,procedure,"Global tier plus per-archetype relative modifiers (D31).",D31,na
+proc-05,P7,"Name the taste anchor before look decisions: the selected design.md, project over library over Nurix default.",,procedure,gate,procedure,"Named-reference discipline (D5).",D5;imp,na
+proc-06,S2,"Run the self-critique pass against the brief and the ban list before declaring a create run done.",,procedure,sweep,procedure,"The four-rung verification ladder (D32).",D32,na
+proc-07,S3,"Resolve the design system and persist it before any UI code.",,procedure,gate,procedure,"Resolver-before-code; the machine complement of the named-taste-anchor step, occupied by personality.css emission.",uupm,na
+proc-08,S3,"Token-lock at emission: after resolution, no value lands outside the emitted token file.",,procedure,gate,procedure,"The procedural counterpart of cod-03 (stitch validate.js pattern).",stitch,na
+proc-09,S2,"Run a mechanical pre-flight self-count with a fail condition: count rule instances against thresholds; the output fails if over.",,procedure,sweep,procedure,"No unticked box ships; sharpens the self-critique pass from vibes to counting.",taste,na
+proc-10,P3,"Run numeric-anchored self-audit passes, each carrying an exact-value criterion.",,procedure,sweep,procedure,"Audit canvas, corners-on-scale, shadows, link hover (volt Family-B).",volt,na
+proc-11,P5,"Follow the fixed audit ordering, then consolidate, dedupe, severity-rank, and report before to after.",,procedure,sweep,procedure,"hierarchy -> typography -> palette -> spacing -> buttons -> clutter -> empty states -> shadows -> contrast -> grouping.",gnu;ben,na
+proc-12,B5,"Run the copy self-audit: re-read every visible string and rewrite every flagged one.",,procedure,sweep,procedure,"Kills lorem-slop and fabricated metrics in one pass.",taste,na
+proc-13,B3,"Sweep viewports before done; any horizontal scroll means the design is broken.","375/768/1024/1440",procedure,sweep,procedure,"Fix, do not ship.",stitch;uupm;taste,na
+proc-14,S2,"Cross-check scope: compare deliverable count against scope count and add anything missing before responding.",,procedure,sweep,procedure,,taste,na

package/data/harnesses/code/skills/design/data/design-md/SCHEMA.md

@@ -0,0 +1,317 @@
+# design.md — schema `design-md/v1`
+
+A `design.md` is one operator UI's brand document: nine prose sections that describe the look for a
+human, followed by two fenced machine blocks that make it derivable. `derive-personality.mjs` parses
+both blocks; the prose is for the reader and the emitting agent. The prose informs, the blocks bind.
+
+**One schema, every origin.** A project's own `design.md`, a shipped library product entry, the Nurix
+default ([`nurix.md`](nurix.md)), and a manifest [`derive-personality.mjs`](../../scripts/derive-personality.mjs)
+extracts from a foreign UI all use this identical shape. The only thing that varies is the `provenance`
+field. Downstream is unchanged: whichever document resolves, personality synthesis derives the 26
+primitive values and dial defaults from the same two blocks.
+
+---
+
+## Frontmatter
+
+```yaml
+---
+schema: design-md/v1
+product: Meridian
+provenance: project          # project | library | default | extracted
+sourced: 2026-07-04
+---
+```
+
+| Field | Required | Value |
+| --- | --- | --- |
+| `schema` | yes | Literal `design-md/v1`. The version tag; a parser refuses an unknown value. |
+| `product` | yes | The product name. For `default` it is `Nurix`; for `project`/`extracted` it is the project's own `data-style` slug source. |
+| `provenance` | yes | One of the four legal origins (below). |
+| `sourced` | yes | ISO date the document was authored, extracted, or last re-sourced. |
+
+## Provenance and precedence
+
+Four legal `provenance` values; three resolution origins. Look resolution reads `design.md`-first
+and never applies a library match silently (D29/D30 — **propose-confirm**).
+
+| Value | Origin | Precedence |
+| --- | --- | --- |
+| `project` | The project's own `design.md` at repo root, authored by a create run. | **Wins outright** when present. |
+| `extracted` | The project's manifest, recovered from a UI this skill did not build (improve extracts it before touching code — D10). | Same tier as `project`: once written it *is* the project's lever manifest. |
+| `library` | A shipped named-product entry (`library/<product>.md`). | Serves only when the brief names or resembles the product **and the user confirms**. Never applied on inference alone. |
+| `default` | The Nurix default ([`nurix.md`](nurix.md)). | Worn when there is no project document and no confirmed library match. Zero input → default; the default *is* the confirmation. |
+
+Matching is propose-confirm: the skill may propose a `library` entry from brief resemblance, presents
+it once, and applies it only on confirmation. The project's own document always beats a proposal.
+
+---
+
+## The nine prose sections
+
+Fixed order. Each is human-facing narration; cite roles and token names, never bare literals in the
+component/layout prose (the values live in the machine blocks). A good entry is concrete and checkable,
+not adjectival.
+
+| # | Section | What belongs · what a good entry looks like |
+| --- | --- | --- |
+| 1 | **Visual Theme** | The one-paragraph identity a stranger could repeat: surface polarity (light default; dark opt-in), material feel (flat vs lifted), accent discipline, density posture. Names its anchor surface and its single accent — not a mood board. |
+| 2 | **Color Roles** | Every color by role — background, ink/foreground, the one accent, the status hues — with its value and where it is *allowed*. Reads `role → value → usage rule`; light values first; states the one-accent default. |
+| 3 | **Typography** | The sans/mono families, the size·weight·tracking ramp, and where tabular figures apply. Names each ramp step with its numbers; states that numeric columns render `tabular-nums`. |
+| 4 | **Component Stylings** | How the shared primitives render on the recurring operator components — button, input, card, table row, side panel, badge: fill, radius, border, padding. Each line cites token roles, no literal hex. |
+| 5 | **Layout** | Spacing base unit and scale, the shell dimensions (sidebar expanded/collapsed, topbar, side panel, form/table), grid and container widths, density posture. The dimensions map one-to-one to the layout primitives. |
+| 6 | **Depth** | The elevation strategy: surface ladder vs shadow, hairline discipline, the focus-ring treatment, the z-index scale. Names levels `0..n` with treatment and use; states whether shadow or surface carries hierarchy. |
+| 7 | **Do's & Don'ts** | The enforceable taste rules unique to this brand — reserve the accent, never pill the CTA, never a second chromatic accent. Imperative bullets, each checkable; every don't names the specific off-brand move. |
+| 8 | **Responsive** | Breakpoints and the collapse strategy across the operator sweep (375 / 768 / 1024 / 1440): nav collapse, grid re-flow, side-panel → sheet, density steps. Reads `breakpoint → what changes`. |
+| 9 | **Agent Prompt Guide** | Directives the emitting agent follows verbatim: what to reach for first, the invariants, the scarce elements the machine blocks can't carry (e.g. "lead every queue with the table; accent only on the primary action"). |
+
+---
+
+## Machine block 1 — `design-primitives`
+
+Fenced as ` ```yaml design-primitives `. Carries **all 26 visual primitives** (names below, without
+the leading `--`) plus the two behavioral dials, the density tier, and the product-type traits. Every
+key is either a concrete value or a `hint:` (the hint convention, below).
+
+| Family | Key | Type / unit | Example |
+| --- | --- | --- | --- |
+| geometric | `radius` | length | `6px` |
+| | `shadow-intensity` | 0–1 multiplier on `--shadow-*` | `0.5` |
+| | `border-weight` | length | `1px` |
+| | `density-gap` | multiplier on the `0.25rem` spacing base | `0.85` |
+| | `density-inset` | multiplier on component insets | `0.85` |
+| typographic | `font-sans` | font stack | `Inter, system-ui, sans-serif` |
+| | `font-mono` | font stack | `JetBrains Mono, ui-monospace, monospace` |
+| | `font-weight-normal` | 100–900 | `400` |
+| | `font-weight-strong` | 100–900 | `600` |
+| | `heading-tracking` | em/px tracking | `-0.01em` |
+| temporal | `duration-unit` | ms base | `50ms` |
+| | `duration-fast` | ms | `100ms` |
+| | `duration-normal` | ms | `150ms` |
+| | `duration-slow` | ms | `250ms` |
+| | `ease-default` | cubic-bezier | `cubic-bezier(0.4,0,0.2,1)` |
+| surface | `contrast-boost` | multiplier (1 = default) | `1` |
+| iconography | `icon-stroke` | px stroke-width | `1.75` |
+| | `icon-size-base` | length | `16px` |
+| layout | `sidebar-width-expanded` | length | `248px` |
+| | `sidebar-width-collapsed` | length | `56px` |
+| | `topbar-height` | length | `52px` |
+| | `side-panel-width` | length | `420px` |
+| | `side-panel-width-rich` | length | `640px` |
+| | `modal-width-max` | length | `560px` |
+| | `form-max-width` | length | `640px` |
+| | `table-row-height` | length | `40px` |
+
+Then the dials and traits:
+
+| Key | Values | Note |
+| --- | --- | --- |
+| `verbosity` | `full` \| `default` \| `compact` \| `expert` | Emits `data-verbosity` on `<html>` (D4). |
+| `feedback` | `subtle` \| `minimal` | Emits `data-feedback` (D4). |
+| `density-tier` | `spacious` \| `standard` \| `dense` | The global tier (D31); emits `data-density`; drives `density-gap`/`density-inset` coherently. |
+| `product-traits` | list of trait slugs | Product-type signals the front gate reads (D30) — e.g. `[review-queue, case-detail, fintech]`. Non-empty. |
+
+**Derived, never stored.** Emission computes `--ease-enter`, `--ease-exit`, and `--stagger-delay` from
+`ease-default` and `duration-unit`. They are not among the 26, not authored in the block, and not part
+of the coverage gate. Do not add them.
+
+## Machine block 2 — `lever-manifest`
+
+Fenced as ` ```yaml lever-manifest `. The machine-readable **allowlist** the drift check reads (D10/D19):
+[`detector.mjs`](../../scripts/detector.mjs) flags any emitted value outside this vocabulary — a radius
+not in `radius-scale`, a color that is not one of these tokens, a spacing off `spacing-scale`, a motion
+duration off `motion.durations`.
+
+```yaml
+version: 1
+fonts: { sans: "…", mono: "…" }        # match font-sans / font-mono
+color-tokens:
+  light: { … 17 semantic + 17 substrate tokens, every one valued … }
+spacing-scale: [2, 4, 8, 12, 16, 24, 32, 48, 64]   # px, on-scale values ONLY, ascending
+radius-scale: [0, 4, 6, 12, 9999]                  # px, ascending
+shadow-levels: [none, sm, md]                       # ordered by increasing intensity
+motion: { durations: [100, 150, 250], easings: ["cubic-bezier(0.4,0,0.2,1)"] }   # ms, ascending
+icons: { family: lucide, stroke: 1.75 }
+accent-count: 1
+```
+
+`color-tokens.light` must value **every** token below. Dark is opt-in; when a project ships dark, add a
+parallel `dark:` map — light is never omitted.
+
+- **Semantic (17):** `background` · `foreground` · `card` · `card-foreground` · `muted` ·
+  `muted-foreground` · `border` · `input` · `ring` · `primary` · `primary-foreground` · `accent` ·
+  `accent-foreground` · `destructive` · `destructive-foreground` · `success` · `warning`.
+- **Substrate (17, the D6 set):** `popover` · `popover-foreground` · `secondary` · `secondary-foreground` ·
+  `chart-1` · `chart-2` · `chart-3` · `chart-4` · `chart-5` · `sidebar` · `sidebar-foreground` ·
+  `sidebar-primary` · `sidebar-primary-foreground` · `sidebar-accent` · `sidebar-accent-foreground` ·
+  `sidebar-border` · `sidebar-ring`.
+
+No consumed token falls back to a shadcn-gray default: emission sets all 34 (D6).
+
+---
+
+## The `hint:` convention and derivation write-back
+
+Where a value needs judgment the document states a **hint** instead of a value: the key's value begins
+with `hint:` followed by the intent in plain words.
+
+```yaml
+contrast-boost: hint: nudge borders up a step so the dense table grid reads as a grid
+```
+
+A hint **passes** the coverage gate (`--check`) — the key is present and un-missing. It does not pass
+emission: `derive-personality.mjs --emit` resolves each hint to a concrete value by judgment and
+**records its rationale back into the document**, rewriting the line so the resolved document is
+self-explaining and re-derivable:
+
+```yaml
+contrast-boost: 1.1   # derived: dense-grid brief → one step up (was hint)
+```
+
+After resolution no bare `hint:` remains; a re-run of `--check` sees only concrete values. Judgment is
+recorded, never silent (D29).
+
+---
+
+## Validation — what `derive-personality.mjs --check` enforces
+
+The coverage gate. It exits non-zero and **names every offending key** so the fix is mechanical.
+
+1. **Frontmatter** present with `schema: design-md/v1` and a legal `provenance`.
+2. **Both blocks present and parseable** — exactly one `design-primitives` and one `lever-manifest`
+   fenced YAML block.
+3. **Every primitive assigned or hinted** — all 26 keys present as a value or a `hint:`; fails naming
+   any absent key.
+4. **Every dial and the tier assigned** — `verbosity`, `feedback`, `density-tier` set to a legal value;
+   `product-traits` a non-empty list.
+5. **Every color token valued** — all 17 semantic + 17 substrate tokens present in
+   `color-tokens.light` with a non-empty value; fails naming any missing token.
+6. **Scales non-empty and sorted** — `spacing-scale`, `radius-scale`, and `motion.durations` non-empty
+   and ascending; `shadow-levels` non-empty and ordered by intensity; `motion.easings`, `fonts.sans`,
+   `fonts.mono` non-empty; `icons.family`/`icons.stroke` present; `accent-count` ≥ 1.
+
+A document that passes `--check` is guaranteed derivable — every primitive, dial, and substrate token
+is assigned or hinted before token emission may run (never best-effort, D6/D29).
+
+---
+
+## Worked example — Meridian (fictional fraud-review console)
+
+A dense review-queue + case-detail operator tool. Both machine blocks are complete and fully derived
+(no remaining hints); the prose sections are sketched to one line each for brevity.
+
+````markdown
+---
+schema: design-md/v1
+product: Meridian
+provenance: project
+sourced: 2026-07-04
+---
+
+## 1 Visual Theme
+Light, flat, cool-slate operator console; a single indigo accent; dense on purpose.
+
+## 2 Color Roles
+Ink #0f172a on #ffffff; indigo #4f46e5 is the only accent; red/green/amber for status only.
+
+## 3 Typography
+Inter for text, JetBrains Mono for IDs and amounts; body 14px/400, headings 600, tabular-nums on every numeric column.
+
+## 4 Component Stylings
+Buttons `radius`/`primary`, no pill; inputs 1px `border`; table rows `table-row-height`; case detail opens in the side panel.
+
+## 5 Layout
+4px base; sidebar 248/56px, topbar 52px, side panel 420/640px, tables full-width.
+
+## 6 Depth
+Surface ladder over shadow; hairline `border`; 2px `ring` focus outline; three z-levels.
+
+## 7 Do's & Don'ts
+Do reserve indigo for the primary action. Don't pill the CTA; don't add a second chromatic accent.
+
+## 8 Responsive
+375 stacks to a sheet; 768 collapses the sidebar; 1024/1440 hold the two-pane queue+detail.
+
+## 9 Agent Prompt Guide
+Lead with the queue table; accent only the primary action; keep the case panel beside the work, never a modal.
+
+```yaml design-primitives
+radius: 6px
+shadow-intensity: 0.5
+border-weight: 1px
+density-gap: 0.85
+density-inset: 0.85
+font-sans: Inter, system-ui, sans-serif
+font-mono: JetBrains Mono, ui-monospace, monospace
+font-weight-normal: 400
+font-weight-strong: 600
+heading-tracking: -0.01em
+duration-unit: 50ms
+duration-fast: 100ms
+duration-normal: 150ms
+duration-slow: 250ms
+ease-default: cubic-bezier(0.4,0,0.2,1)
+contrast-boost: 1
+icon-stroke: 1.75
+icon-size-base: 16px
+sidebar-width-expanded: 248px
+sidebar-width-collapsed: 56px
+topbar-height: 52px
+side-panel-width: 420px
+side-panel-width-rich: 640px
+modal-width-max: 560px
+form-max-width: 640px
+table-row-height: 40px
+verbosity: default
+feedback: subtle
+density-tier: dense
+product-traits: [review-queue, case-detail, fintech]
+```
+
+```yaml lever-manifest
+version: 1
+fonts: { sans: "Inter, system-ui, sans-serif", mono: "JetBrains Mono, ui-monospace, monospace" }
+color-tokens:
+  light:
+    background: "#ffffff"
+    foreground: "#0f172a"
+    card: "#ffffff"
+    card-foreground: "#0f172a"
+    muted: "#f1f5f9"
+    muted-foreground: "#64748b"
+    border: "#e2e8f0"
+    input: "#e2e8f0"
+    ring: "#6366f1"
+    primary: "#4f46e5"
+    primary-foreground: "#ffffff"
+    accent: "#eef2ff"
+    accent-foreground: "#4f46e5"
+    destructive: "#dc2626"
+    destructive-foreground: "#ffffff"
+    success: "#16a34a"
+    warning: "#d97706"
+    popover: "#ffffff"
+    popover-foreground: "#0f172a"
+    secondary: "#f1f5f9"
+    secondary-foreground: "#0f172a"
+    chart-1: "#4f46e5"
+    chart-2: "#0ea5e9"
+    chart-3: "#16a34a"
+    chart-4: "#d97706"
+    chart-5: "#dc2626"
+    sidebar: "#f8fafc"
+    sidebar-foreground: "#0f172a"
+    sidebar-primary: "#4f46e5"
+    sidebar-primary-foreground: "#ffffff"
+    sidebar-accent: "#eef2ff"
+    sidebar-accent-foreground: "#4f46e5"
+    sidebar-border: "#e2e8f0"
+    sidebar-ring: "#6366f1"
+spacing-scale: [2, 4, 8, 12, 16, 24, 32, 48, 64]
+radius-scale: [0, 4, 6, 12, 9999]
+shadow-levels: [none, sm, md]
+motion: { durations: [100, 150, 250], easings: ["cubic-bezier(0.4,0,0.2,1)"] }
+icons: { family: lucide, stroke: 1.75 }
+accent-count: 1
+```
+````