axstack 0.42.2 → 0.44.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.42.2",
+  "version": "0.44.0",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks T3 Code capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/claude-only.json

@@ -151,7 +151,7 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. T3 resolves Claude classes from saved capabilities; a Claude rejection holds. Design review follows design.md for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. Apply Delivery's one design-only repair round within the two-round limit, disclosed cosmetic exception and unknown-render holds. Chat Mermaid and anatomy keep their existing review.",
+      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. T3 resolves Claude classes from saved capabilities; a Claude rejection holds. Design review follows design.md hard rules and FRONTEND-DESIGN.md (calibration defaults, restraint and quality floor) for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit. If only design findings remain after the second round, deliver the visual with each finding named. Never describe a remaining finding as fixed or a clean pass. Apply Delivery's normal holds for other failures and unknown renders. Chat Mermaid and anatomy keep their existing review.",
       "modelClass": "sonnet"
     },
     {

package/profiles/presets/codex-only.json

@@ -151,7 +151,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. Apply Delivery's one design-only repair round within the two-round limit, disclosed cosmetic exception and unknown-render holds. Chat Mermaid and anatomy keep their existing review.",
+      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md hard rules and FRONTEND-DESIGN.md (calibration defaults, restraint and quality floor) for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit. If only design findings remain after the second round, deliver the visual with each finding named. Never describe a remaining finding as fixed or a clean pass. Apply Delivery's normal holds for other failures and unknown renders. Chat Mermaid and anatomy keep their existing review.",
       "modelClass": "luna"
     },
     {

package/profiles/presets/mixed.json

@@ -152,7 +152,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "medium",
-      "notes": "Independent Sol medium explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. Apply Delivery's one design-only repair round within the two-round limit, disclosed cosmetic exception and unknown-render holds. Chat Mermaid and anatomy keep their existing review.",
+      "notes": "Independent Sol medium explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The browser interaction pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution. Design review follows design.md hard rules and FRONTEND-DESIGN.md (calibration defaults, restraint and quality floor) for every inline HTML page and every Publish article adaptation. For inline pages the reviewer itself renders exact bytes with html_preview at 728px dark and 360px light as a non-publishing self-check. For Publish the reviewer opens axstack-ui-verifier PNGs at 728px dark and 360px light plus 390px mobile and 1440px desktop, covering all four widths in both themes with paths bound to the artifact SHA-256 and recorded before review. Inspect the 1440px desktop screenshot for balanced composition, intentional horizontal margins, bounded prose measure, typography, section spacing and chart legibility. Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels. A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit. If only design findings remain after the second round, deliver the visual with each finding named. Never describe a remaining finding as fixed or a clean pass. Apply Delivery's normal holds for other failures and unknown renders. Chat Mermaid and anatomy keep their existing review.",
       "modelClass": "sol"
     },
     {

package/skills/axstack/scripts/check-staged-file-tokens.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env bun
+// Read only the index. No hooks, configuration writes or working-tree reads.
+import { readFileSync } from 'node:fs';
+
+const ignoredPath = /(^|\/)(?:[^/]*\.lockb?|package-lock\.json|pnpm-lock\.yaml|yarn\.lock|go\.sum)$|(^|\/)(?:dist|build|__mocks__|__fixtures__|fixtures|captures)\/|\.(?:min|generated|gen)\.|\.(?:map|snap)$/i;
+const asset = /\.(?:svg|png|jpe?g|gif|webp|avif|ico|bmp|tiff?|pdf|woff2?|ttf|otf|eot|mp[34]|wav|ogg|flac|webm|mov|avi|zip|gz|bz2|xz|7z|rar|tar|exe|dll|so|dylib|wasm|bin|class|jar|pyc|sqlite3?|db)$/i;
+let root = process.cwd();
+function git(...args) {
+  const result = Bun.spawnSync(['git', '--literal-pathspecs', ...args], { cwd: root });
+  if (result.exitCode !== 0) throw Error(result.stderr.toString().trim());
+  return result.stdout.toString();
+}
+
+try {
+  root = git('rev-parse', '--show-toplevel').trim();
+  const ignoreFile = git('rev-parse', '--path-format=absolute', '--git-path', 'info/token-limit-ignore').trim();
+  let ignores = [];
+  try {
+    ignores = readFileSync(ignoreFile, 'utf8').split(/\r?\n/)
+      .map((line) => line.trim()).filter((line) => line && !line.startsWith('#'))
+      .map((pattern) => new Bun.Glob(pattern));
+  } catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+  }
+  const paths = git('diff', '--cached', '--name-only', '--diff-filter=ACMR', '-z').split('\0').filter(Boolean);
+  const offenders = [];
+  for (const path of paths) {
+    if (ignoredPath.test(path) || asset.test(path) || ignores.some((glob) => glob.match(path))) continue;
+    if (git('ls-files', '--stage', '-z', '--', path).startsWith('160000 ')) continue;
+    const bytes = Number(git('cat-file', '-s', `:${path}`));
+    if (bytes <= 20000) continue;
+    if (git('diff', '--cached', '--numstat', '--no-renames', '-z', '--', path).startsWith('-\t')) continue;
+    // Consume the blob fully: closing a pipeline at line five can cause SIGPIPE.
+    const firstLines = git('cat-file', 'blob', `:${path}`).split('\n', 5).join('\n');
+    if (/@generated|auto[- ]?generated|do not edit|code generated by/i.test(firstLines)) continue;
+    offenders.push(`${JSON.stringify(path)}: ${Math.floor(bytes / 4)} tokens`);
+  }
+  if (offenders.length) {
+    console.error(`Staged files exceed 5000 tokens (20000 bytes; tokens = floor(bytes / 4)):
+${offenders.join('\n')}
+
+Split each file before committing:
+1. Find seams: group top-level units by responsibility.
+2. Create a folder named after the original file, with one module per responsibility.
+   TS: foo.ts -> foo/types.ts, foo/parse.ts, foo/index.ts.
+   Rust: foo.rs -> foo/mod.rs + submodules with re-exports.
+   Svelte: child components + a .ts module for pure logic.
+   Specs: one spec per describe block or behaviour.
+   HTML docs: one doc per topic, linked from an index.
+3. Keep the public surface stable via re-exports, or update all imports in the same commit.
+4. Move code verbatim first, then refactor in a separate commit.
+5. Aim for ~3000 tokens per file.
+6. Stage the new files and re-commit.
+If truly generated or recorded data, add a glob to ${JSON.stringify(ignoreFile)}
+or give the file a generated banner in its first 5 lines.`);
+    process.exit(1);
+  }
+} catch (error) {
+  console.error(`Staged-file token check failed: ${error.message}`);
+  process.exit(1);
+}

package/skills/axstack-explain/SKILL.md

@@ -61,7 +61,8 @@ Dispatch every visual Explain delivers to `axstack-explainer` with a bounded
 evidence brief, including inline pages, chat Mermaid and anatomy figures.
 The `axstack-explainer` loads [design.md](references/design.md) and reads
 [FRONTEND-DESIGN.md](references/frontend-design/FRONTEND-DESIGN.md) for every inline HTML page
-and every Publish article adaptation.
+and every Publish article adaptation, using frontend-design as the sole design authority
+subject to design.md's hard rules.
 Never load either reference for chat Mermaid or anatomy figures.
 Explicitly requested standalone HTML files keep their existing review and Visual QA.
 Plain-prose answers stay driver-written; other phases retain their own Mermaid

package/skills/axstack-explain/references/delivery.md

@@ -14,22 +14,18 @@ naming the held page and the reason.
 Whiteboard-defense plain prose still requires `axstack-explainer-review`.
 If a required author or reviewer seat is unavailable, hold the visual and
 answer in plain prose naming the held visual.
-Replace a visual still failing checks after two repair rounds with the same
-author by plain prose with the reason.
-For inline HTML pages and Publish article adaptations, apply [design.md](design.md):
-a named tell is blocking for one design-only repair round with the same author,
-counting within the two-round visual limit.
-Never start a second design-only round.
-A cosmetic tell remaining in fresh exact-byte renders becomes a disclosed
-non-blocking design exception, recorded in evidence and named in delivery.
-Never describe the exception as fixed or a clean design pass.
-This exception never waives source-fidelity, security, asset, theme, layout,
-accessibility, interaction or publication requirements.
-A tell causing any such defect keeps that defect's normal hold and repair rules.
+Except for design-only findings below, replace a visual still failing checks after
+two repair rounds with the same author by plain prose with the reason.
+For inline HTML pages and Publish article adaptations, judge the exact-byte renders
+against [FRONTEND-DESIGN.md](frontend-design/FRONTEND-DESIGN.md), including its calibration defaults,
+restraint and quality floor, plus [design.md](design.md)'s hard rules.
+A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit.
+If only design findings remain after the second round, deliver the visual with each finding named and recorded in evidence.
+Never describe a remaining finding as fixed or a clean pass.
+Hard-rule, fidelity, security, asset, theme, accessibility, layout-defect, interaction
+and publication failures keep their normal holds and repair rules.
 An unavailable, unreadable or stale render leaves design review unknown and holds
 the visual or publication; inline delivery may use the plain-prose fallback above.
-An unknown check is never a tell that expires after one round.
-Overall look is advisory.
 
 The driver never writes a substitute visual.
 Each repair round returns findings to the same author and rechecks the exact final bytes.

package/skills/axstack-explain/references/design.md

@@ -1,37 +1,14 @@
 # Design
 
-Apply precedence in this order: 1) Axstack page rules for the output kind plus this file's subject, colour, motion, font and no-notes rules, 2) source fidelity, 3) named tells, 4) frontend-design for approach and everything else.
-Inline pages favour restraint; published articles may vary boldly within levels 1–3.
-
-Named tells:
-- Eyebrow labels or tiny tracked caps.
-- A single styled accent word.
-- Gradients, glass or resting shadows.
-- Emoji or decorative blobs.
-- Rows of identical cards or bordered boxes.
-- More than two typefaces or five sizes.
-- Body text outside full ink or default left alignment.
-
-Diagram edges and arrows, timeline order, tables and code paths are content, not ornament.
-Anatomy follows its kit.
-A behaviour required by a higher-priority rule is never a tell.
-
-The actual subject and question determine structure.
-Never stop to confirm the subject.
-Inline colour: `--background` is ground, `--foreground` is ink, `--muted-foreground` serves only secondary text, `--ring` is the single accent.
-Published articles may use a small named palette checked in light and dark.
-Motion is static by default; any animation is CSS-only and respects reduced motion.
-Inline pages use only T3 font variables.
-Published articles use system font stacks.
-Never use font files or network requests.
-Never keep design notes or history across pages; frontend-design's note-keeping hint does not apply.
-
-## Standalone Publish layout
-
-Give standalone Publish articles mobile gutters, a bounded prose measure and intentional horizontal margins for balanced desktop composition.
-Centre the reading column or use a deliberate asymmetric layout that balances the whole viewport.
-Set readable body typography and line height, clear heading hierarchy and generous section spacing for standalone articles.
-Size chart labels, values, units and spacing for legibility at mobile and desktop widths in both themes.
-Choose dimensions and rhythm for the article's content; the inline T3 frame supplies its own surrounding space.
-
-Credit: [taste-skill](https://github.com/Leonxlnx/taste-skill/tree/f624f37a) (MIT, `Leonxlnx/taste-skill` at `f624f37a`) and [frontend-design](frontend-design/PROVENANCE.md).
+[FRONTEND-DESIGN.md](frontend-design/FRONTEND-DESIGN.md) is the sole design authority for every visual choice — palette, typography, layout, spacing, structure, motion and self-critique — on every inline HTML page and every Publish article adaptation.
+These hard rules win on conflict.
+
+- Never load network resources or font files. Inline pages use T3 font variables or system font stacks. Published articles use system font stacks.
+- Inline pages follow the live T3 theme: derive every colour from T3 theme variables — ground from `--background`, ink from `--foreground`, all other colours via `color-mix()` with them or T3 semantic/chart variables (`--muted-foreground`, `--accent`, `--success`, `--warning`, `--destructive`, `--info`, `--chart-1`…`--chart-6`). Keep every colour legible in light and dark. `var()` fallbacks are allowed for standalone viewing. Never switch inline palettes on `prefers-color-scheme`; T3's theme leaves that query unchanged. Never redefine T3's own variables in inline pages. Published articles support light and dark via `prefers-color-scheme` outside T3.
+- Keep pages responsive down to 360px with visible keyboard focus, reduced motion respected and sufficient contrast in both themes.
+- Never stop to confirm the subject: the brief and evidence are the subject.
+- Never keep design notes or history across pages. This overrides frontend-design's note hint.
+- Source fidelity beats any design choice: diagram edges, order, tables and code paths show the source.
+- For non-anatomy inline pages only, follow [inline-pages.md](inline-pages.md): its Embed fit and Page rules sections also win on conflict. Anatomy follows its own kit.
+
+Credit: [frontend-design](frontend-design/PROVENANCE.md).

package/skills/axstack-explain/references/frontend-design/PROVENANCE.md

@@ -9,5 +9,4 @@ Commit: `41bbe19d1a1a7eaab5e7bb9050a417e5c6cffc8f`
   Git blob: `f433b1a53f5b830a205fd2df78e2b34974656c7b`.
 
 License: Apache-2.0; the complete upstream licence accompanies this reference.
-This payload is not registered as a skill. Axstack's owned design guidance
-sets precedence and scope in `../design.md`.
+This payload is not registered as a skill. Axstack's hard rules live in `../design.md`.

package/skills/axstack-explain/references/inline-pages.md

@@ -7,21 +7,25 @@ The driver publishes the page in its own thread.
 
 Use T3 theme variables and follow the live theme.
 Only an explicit user theme request overrides the page theme.
-Use `--background`, `--foreground`, `--muted-foreground`, `--ring`,
-`--font-sans`, and `--font-mono` for their named purposes.
-
-Use fluid width, with zero outer horizontal padding.
-Never use an outer frame, banner, or viewport heights.
-Anatomy may retain its figure card as an inner panel with at least 16px padding
-and `var(--radius)`; its page wrapper still has zero gutters and no background.
-Let content set the page height. Use fixed chart heights.
-Set frame `height` to the larger contentHeight of the two previews, capped at 2000.
+For inline pages other than anatomy, follow [design.md](design.md) for the theme rule and visual design authority.
+Anatomy follows its own kit.
 
 Choose the page shape from its content rather than a fixed template.
 Map stages to a connected diagram, sequence to a timeline, comparison to side
-by side or table, and separate equal items to a list.
-Prefer diagrams and timelines. Avoid grids of bordered boxes.
-Keep borders minimal and use color only where it has meaning.
+by side or table, and separate equal items to a list; frontend-design can refine this content-shape mapping guidance.
+
+## Embed fit
+
+The T3 frame is borderless on the thread background, with its left edge aligned to reply text.
+Use fluid width with zero horizontal padding on the outermost element.
+Never add an outer card, border or banner title.
+A banner title means an outer header block or band; an ordinary page heading is allowed.
+Keep html, body and the outermost element without a background colour.
+Give any inner box with its own background at least 16px padding on every side and `var(--radius)` corners.
+Anatomy may retain its figure card as an inner panel with at least 16px padding and `var(--radius)`; its page wrapper still has zero gutters and no background.
+Never use viewport heights.
+Let content set the page height. Use fixed chart heights.
+Set frame `height` to the larger contentHeight of the two previews, capped at 2000.
 
 ## Page rules
 

package/skills/axstack-explain/references/visual-qa.md

@@ -2,7 +2,7 @@
 
 For inline pages, follow [Inline pages](inline-pages.md) instead of this checklist.
 
-Design review against [design.md](design.md) covers every inline HTML page and every Publish article adaptation.
+Design review against [design.md](design.md) hard rules and [FRONTEND-DESIGN.md](frontend-design/FRONTEND-DESIGN.md) covers every inline HTML page and every Publish article adaptation, including its calibration defaults, restraint and quality floor.
 For inline pages, the reviewer itself renders exact bytes with `html_preview` at
 728px dark and 360px light as a non-publishing self-check.
 This supplements the driver's required previews and any verifier pass.
@@ -14,7 +14,10 @@ bounded prose measure, typography, section spacing and chart legibility.
 Inspect the 360px and 390px mobile screenshots for gutters, readable text and chart labels.
 Check every width and theme for clipping and horizontal scroll, recording defects and observations.
 The driver forwards those paths and SHA-256; changed bytes require fresh screenshots and review.
-Apply [Delivery](delivery.md)'s one-round design repair, disclosed cosmetic exception and unknown-render holds.
+A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit.
+If only design findings remain after the second round, deliver the visual with each finding named.
+Never describe a remaining finding as fixed or a clean pass.
+Follow [Delivery](delivery.md) for other failure holds and unknown-render holds.
 Chat Mermaid, anatomy and explicitly requested standalone HTML files keep their existing review and Visual QA.
 Interaction checks remain with `axstack-ui-verifier`; source-fidelity review is unchanged.
 

package/skills/axstack-implement/SKILL.md

@@ -162,6 +162,13 @@ applied or found not applicable in the `Simplification:` line of the
 [section 5 implementation receipt](#5-verify-and-return-the-candidate),
 including evidence and retained complexity.
 
+Before every commit, the author runs the
+[staged-file token gate](../axstack/scripts/check-staged-file-tokens.js)
+with `bun` from the target repository.
+If the gate fails, split files per its instructions before retrying.
+Never bypass the staged-file token gate.
+Record the staged-file token gate result in the implementation receipt.
+
 ## 5. Verify and return the candidate
 
 Run the acceptance checks and affected integration boundaries. Record commands,
@@ -189,6 +196,7 @@ Owner: <profile + session ID + worktree>
 Scope: <approved spec + capability | small-change intent | maintenance snapshot>
 Shape: <total> lines vs base <sha>; bulk: <buckets>; theme: <one line>
 TDD: <normal red/green | structure-preserving old-green/same-check-new-green evidence | F-repair base-green/removal-inversion-red/rewording-green evidence>
+Token limit: <staged-file gate command + observed result before each commit>
 Simplification: <applied | not-applicable> — evidence: <diff locations and checks>; retained complexity: <necessary complexity and why>
 Acceptance: <checks + observed results>
 Dependencies: <parent revisions or none>

package/skills/axstack-publish/SKILL.md

@@ -42,12 +42,10 @@ to remove private paths, IDs, credentials, prompts, messages and internal record
 For public mode, run Explain's [self-contained asset check](../axstack-explain/references/inline-pages.md#check-the-exact-bytes).
 Reuse Explain's [page rules](../axstack-explain/references/inline-pages.md#page-rules)
 and [Visual QA](../axstack-explain/references/visual-qa.md) for checks and verifier routing.
-[Inline zero-padding embed rules](../axstack-explain/references/inline-pages.md#shape-and-theme) apply only to T3 frames.
-Use [design.md](../axstack-explain/references/design.md) for standalone Publish layout.
 
 Send the article adaptation, including art direction and standalone light/dark theme,
 to `axstack-explainer` with a bounded brief.
-The explainer follows Explain's [design guidance](../axstack-explain/references/design.md)
+The explainer loads and follows Explain's [design guidance](../axstack-explain/references/design.md)
 and reads [frontend-design](../axstack-explain/references/frontend-design/FRONTEND-DESIGN.md).
 Require inline defaults and `prefers-color-scheme` so the article works outside T3;
 honor an explicit user theme request.
@@ -59,13 +57,19 @@ covering all four widths in both themes, and record screenshots with paths,
 their artifact SHA-256 and the Explain QA results.
 Require a fresh independent `axstack-explainer-review` on the final bytes.
 The driver forwards the verifier PNG paths and bound artifact SHA-256 for the
-reviewer's design review against design.md, alongside source-fidelity review.
-Apply Explain's [Delivery](../axstack-explain/references/delivery.md) one-round design repair
-and disclosed cosmetic exception; that exception leaves all other requirements binding.
+reviewer's design review against FRONTEND-DESIGN.md (calibration defaults, restraint
+and quality floor) plus design.md's hard rules, alongside source-fidelity review.
+A page failing to look decent is a blocking design finding, repaired by the same author within the two-round visual limit.
+If only design findings remain after the second round, deliver the visual with each finding named and recorded in evidence.
+Never describe a remaining finding as fixed or a clean pass.
+Follow Explain's [Delivery](../axstack-explain/references/delivery.md) for normal holds
+on hard-rule, fidelity, security, asset, theme, accessibility, layout-defect,
+interaction and publication failures.
 Any subsequent byte change invalidates checks and review: repeat this step.
-Hold publication while any required check or review is missing or failed.
-Unavailable, unreadable or stale renders leave design review unknown and hold publication;
-unknown is never passed or a cosmetic exception.
+Hold publication while any required check or review is missing or failed, except for
+the design-only delivery after the second round above.
+Unavailable, unreadable or stale renders leave design review unknown and hold publication.
+Never treat unknown design review as a pass.
 
 ## 3. Publish from the driver