filegrc 0.14.0 → 0.15.1

package/src/web.js

@@ -1,4 +1,5 @@
 import { createResourceId } from "./id.js";
+import { selectDefaultAudit } from "./audit-selection.js";
 import { MODEL_CAPABILITY_VERSIONS } from "../model/index.js";
 import {
   calendarOccurrence,
@@ -9,17 +10,25 @@ import {
   utcCalendarDate,
   validCalendarRecurrence
 } from "./recurrence.js";
-import { PROGRAM_PATH, RESOURCE_INSTRUCTIONS, RESOURCE_PAGE_SUMMARIES } from "./program-path.js";
+import { PROGRAM_PATH, programPathForModel, RESOURCE_INSTRUCTIONS, RESOURCE_PAGE_SUMMARIES } from "./program-path.js";
 import { formatCalendarDate, formatLocalDateTime } from "./time.js";
 
 export function dashboardProgramReadiness(programReadiness = {}) {
   const progress = programReadiness.progress || {};
-  const lifecycle = programReadiness.operating
-    ? { status: "Operating", tone: "good" }
-    : programReadiness.evidenceReady
-      ? { status: "Evidence ready", tone: "good" }
-      : { status: "Needs work", tone: "warn" };
+  const lifecycle = progress.mode === "operating-window"
+    ? {
+        status: progress.status || (programReadiness.operating ? "Operating" : "Needs attention"),
+        tone: programReadiness.operating ? "good" : "warn"
+      }
+    : programReadiness.operating
+      ? { status: "Operating", tone: "good" }
+      : programReadiness.evidenceReady
+        ? { status: progress.status || "Evidence ready", tone: "good" }
+        : { status: progress.status || "Needs work", tone: "warn" };
   return {
+    mode: progress.mode || "setup-progress",
+    label: progress.label || "Program setup",
+    detail: progress.detail || `${progress.complete ?? 0} of ${progress.total ?? 0} required actions complete.`,
     percent: progress.percent ?? 0,
     complete: progress.complete ?? 0,
     total: progress.total ?? 0,
@@ -27,6 +36,23 @@ export function dashboardProgramReadiness(programReadiness = {}) {
   };
 }
 
+export function workflowHrefBelongsToPage(destination = {}, href = "") {
+  const route = String(href).split("?")[0];
+  if (!route) return false;
+  if (destination.href === "#/policies") {
+    return ["policy", "document", "training"].some((type) => route.startsWith(`#/resource/${type}/`));
+  }
+  if (destination.type) {
+    return route === `#/resources/${destination.type}` || route.startsWith(`#/resource/${destination.type}/`);
+  }
+  return route === String(destination.href || "").split("?")[0];
+}
+
+export function pageActionIdentity(href = "", fallback = "") {
+  const route = String(href).split("?")[0];
+  return route.startsWith("#/resource/") ? route : fallback || href;
+}
+
 export function renderIndex(state = null) {
   const snapshot = state
     ? `<script id="filegrc-data" type="application/json">${safeJson(state)}</script>`
@@ -64,15 +90,20 @@ let latestPacketResult = null;
 let latestPacketState = null;
 let policyEventFeedback = null;
 const SHARED_PROGRAM_STAGES = ${JSON.stringify(PROGRAM_PATH)};
-const READINESS_STAGES = SHARED_PROGRAM_STAGES.map((stage) => ({
+const LEGACY_PROGRAM_STAGES = ${JSON.stringify(programPathForModel({ modelVersion: "10" }))};
+let READINESS_STAGES = SHARED_PROGRAM_STAGES.map((stage) => ({
   ...stage,
   number: String(stage.number)
 }));
 const RESOURCE_GUIDE_INSTRUCTIONS = ${JSON.stringify(RESOURCE_INSTRUCTIONS)};
 const dashboardProgramReadiness = ${dashboardProgramReadiness.toString()};
+const workflowHrefBelongsToPage = ${workflowHrefBelongsToPage.toString()};
+const pageActionIdentity = ${pageActionIdentity.toString()};
+const selectDefaultAudit = ${selectDefaultAudit.toString()};
 const STAGE_PAGE_SUMMARIES = ${JSON.stringify({
   ...RESOURCE_PAGE_SUMMARIES,
   "utility:evidence-sources": "Check that each Control has an authoritative, retrievable evidence source.",
+  "utility:retention-schedule": "Approve the governed schedule document and its structured rows as one revision.",
   "utility:audit-packet": "Review fieldwork readiness and build the indexed evidence packet."
 })};
 const RECORD_TEXT_FIELDS = new Set(["description", "statement", "activity", "purpose", "scope", "objective", "applicabilityRationale", "summary", "rationale", "businessPurpose", "changeSummary", "decisionSummary", "decisionRationale", "recommendation", "remediationPlan", "auditorNotes", "notPerformedReason"]);
@@ -91,6 +122,7 @@ let onboardingPendingDraft = false;
 const resourceDetailRequests = new Map();
 const stateSectionRequests = new Map();
 let resourceGuideCleanup = null;
+let recordOverflowCleanup = null;
 let repositorySyncPollTimer = null;
 let repositorySyncPollInFlight = false;
 let mutationStateRefreshInFlight = false;
@@ -163,6 +195,8 @@ function handleRouteChange() {
 function render() {
   resourceGuideCleanup?.();
   resourceGuideCleanup = null;
+  recordOverflowCleanup?.();
+  recordOverflowCleanup = null;
   const previousNavigation = root.querySelector(".sidebar-nav");
   if (previousNavigation) navigationScrollTop = previousNavigation.scrollTop;
   const route = parseRoute();
@@ -176,6 +210,9 @@ function render() {
   else if (waitingFor.length) renderStateLoading(main, route, waitingFor);
   else if (route.name === "home") renderHome(main);
   else if (route.name === "stage") renderStageOverview(main, route.stageId, route.params);
+  else if (route.name === "policies") renderPoliciesPage(main, route.params);
+  else if (route.name === "retention-schedule" && modelSupports("retention-schedule-approval")) renderRetentionSchedulePage(main, route.params);
+  else if (route.name === "retention-schedule") renderList(main, "retention-schedule-item", route.params);
   else if (route.name === "evidence-sources") renderEvidenceSourcesPage(main);
   else if (route.name === "obligations") renderObligations(main, route.params);
   else if (route.name === "audit-packet") renderAuditPacket(main, route.params);
@@ -188,6 +225,10 @@ function render() {
 }
 
 function normalizeAppState(next) {
+  const stages = Number(next?.model?.modelVersion || 0) >= MODEL_CAPABILITY_VERSIONS["retention-schedule-approval"]
+    ? SHARED_PROGRAM_STAGES
+    : LEGACY_PROGRAM_STAGES;
+  READINESS_STAGES = stages.map((stage) => ({ ...stage, number: String(stage.number) }));
   if (next.sections) return next;
   return {
     ...next,
@@ -208,6 +249,8 @@ function blockingStateSections(route) {
   if (route.name === "obligations" || route.name === "stage" && route.stageId === "run") return ["program", "obligations"];
   if (route.name === "audit-packet") return ["repository", "program", "obligations", "audits"];
   if (route.name === "evidence-sources") return ["program", "workflow"];
+  if (route.name === "policies") return ["program", "workflow"];
+  if (route.name === "retention-schedule") return ["program", "workflow"];
   if (route.name === "stage" && route.stageId === "audit") return ["program", "workflow", "audits"];
   if (route.name === "stage") return ["program", "workflow"];
   return [];
@@ -286,6 +329,8 @@ function parseRoute() {
   if (parts.length === 2 && parts[0] === "stage" && parts[1]) return { name: "stage", stageId: parts[1], params: new URLSearchParams(query) };
   if (parts.length === 1 && parts[0] === "obligations") return { name: "obligations", params: new URLSearchParams(query) };
   if (parts.length === 1 && parts[0] === "evidence-sources") return { name: "evidence-sources", params: new URLSearchParams(query) };
+  if (parts.length === 1 && parts[0] === "policies") return { name: "policies", params: new URLSearchParams(query) };
+  if (parts.length === 1 && parts[0] === "retention-schedule") return { name: "retention-schedule", params: new URLSearchParams(query) };
   if (parts.length === 1 && parts[0] === "audit-packet") return { name: "audit-packet", params: new URLSearchParams(query) };
   if (parts.length === 2 && parts[0] === "resources" && parts[1]) return { name: "list", type: parts[1], params: new URLSearchParams(query) };
   if (parts.length === 3 && parts[0] === "resource" && parts[1] && parts[2]) return { name: "detail", type: parts[1], id: parts[2], params: new URLSearchParams(query) };
@@ -307,7 +352,9 @@ function buildNavigation(route) {
         || (section.relatedLinks || []).some((link) => route.type === link.type && contextualStageId === stage.id)
         || (section.utility === "obligation-board" && route.name === "obligations")
         || (section.utility === "audit-packet" && route.name === "audit-packet")
-        || (section.utility === "evidence-sources" && route.name === "evidence-sources");
+        || (section.utility === "evidence-sources" && route.name === "evidence-sources")
+        || (section.relatedLinks || []).some((link) => link.href === "#/" + route.name)
+        || (section.utility === "retention-schedule" && route.name === "retention-schedule");
       const sectionOpen = navigationGroupState[sectionKey] ?? (sectionCurrent || section.defaultOpen);
       const resources = section.types
         .map((type) => [type, state.model.resources[type]])
@@ -318,7 +365,8 @@ function buildNavigation(route) {
         return '<a class="' + (direct ? "nav-direct " : "") + (current ? "current" : "") + '" href="#/resources/' + encodeURIComponent(type) + '"><span>' + esc(titleCase(definition.pluralTitle)) + '</span><span class="nav-control-slot" aria-hidden="true"></span></a>';
       }).join("") + (section.relatedLinks || []).map((link) => {
         const current = route.type === link.type && contextualStageId === stage.id
-          || link.href === "#/stage/" + route.stageId;
+          || link.href === "#/stage/" + route.stageId
+          || link.href === "#/" + route.name;
         return '<a class="' + (direct ? "nav-direct " : "") + (current ? "current" : "") + '" href="' + esc(link.href) + '"><span>' + esc(link.label) + '</span><span class="nav-control-slot" aria-hidden="true"></span></a>';
       }).join("") + renderSidebarUtility(section.utility, route, direct);
       if (direct) return links;
@@ -334,6 +382,7 @@ function buildNavigation(route) {
 
 function readinessStageForRoute(route) {
   if (route.name === "stage") return READINESS_STAGES.find((stage) => stage.id === route.stageId);
+  if (route.name === "policies") return READINESS_STAGES.find((stage) => stage.id === "policies");
   const contextualStageId = route.params?.get("stage");
   const contextualStage = contextualStageId && READINESS_STAGES.find((stage) => (
     stage.id === contextualStageId
@@ -345,7 +394,8 @@ function readinessStageForRoute(route) {
     || stage.sections.some((section) => section.types.includes(route.type)
       || (section.utility === "obligation-board" && route.name === "obligations")
       || (section.utility === "audit-packet" && route.name === "audit-packet")
-      || (section.utility === "evidence-sources" && route.name === "evidence-sources"))
+      || (section.utility === "evidence-sources" && route.name === "evidence-sources")
+      || (section.utility === "retention-schedule" && route.name === "retention-schedule"))
   ));
 }
 
@@ -375,6 +425,9 @@ function renderSidebarUtility(utility, route, direct = false) {
   if (utility === "evidence-sources") {
     return '<a class="' + directClass + (route.name === "evidence-sources" ? "current" : "") + '" href="#/evidence-sources"><span>Evidence Sources</span><span class="nav-control-slot" aria-hidden="true"></span></a>';
   }
+  if (utility === "retention-schedule") {
+    return '<a class="' + directClass + (route.name === "retention-schedule" ? "current" : "") + '" href="#/retention-schedule"><span>Data Retention Schedule</span><span class="nav-control-slot" aria-hidden="true"></span></a>';
+  }
   if (utility === "audit-packet") {
     return '<a class="' + directClass + 'audit-packet-link ' + (route.name === "audit-packet" ? "current" : "") + '" href="#/audit-packet"><span>Audit Evidence &amp; Packet</span><span class="nav-control-slot" aria-hidden="true"></span></a>';
   }
@@ -396,6 +449,10 @@ function topbar(route) {
             ? "Audit Readiness"
           : route.name === "evidence-sources"
             ? "Evidence Sources"
+          : route.name === "policies"
+            ? "Policies"
+          : route.name === "retention-schedule"
+            ? "Data Retention Schedule"
             : route.name === "list" && route.type === "document"
               ? documentListTitle(route.params)
               : state.model.resources[route.type]?.pluralTitle || "filegrc";
@@ -435,8 +492,16 @@ function topbarProgramReadiness() {
     return '<a class="topbar-readiness' + (loading ? ' is-loading' : '') + '" href="#/"' + (loading ? ' aria-busy="true"' : '') + '><span class="topbar-readiness-copy"><span>Program readiness</span><strong>' + label + '</strong></span><span class="progress" aria-hidden="true"><span style="width:0%"></span></span></a>';
   }
   const progress = dashboardProgramReadiness(state.programReadiness);
-  const detail = progress.complete + " of " + progress.total + " readiness items complete";
-  return '<a class="topbar-readiness" href="' + nextProgramStageHref() + '" aria-label="' + esc("Program readiness: " + progress.percent + "%. " + detail + ". " + progress.status + ".") + '"><span class="topbar-readiness-copy"><span>Program readiness</span><strong>' + progress.percent + '%</strong></span><span class="progress" aria-hidden="true"><span style="width:' + progress.percent + '%"></span></span></a>';
+  const setupRemaining = state.programReadiness.setupProgress?.remaining || 0;
+  const setupRegression = progress.mode === "operating-window" && setupRemaining > 0;
+  const href = progress.mode === "operating-window" && !setupRegression ? "#/stage/run" : nextProgramStageHref();
+  const label = setupRegression
+    ? progress.label + " · " + setupRemaining + " setup " + (setupRemaining === 1 ? "action" : "actions")
+    : progress.label;
+  const detail = setupRegression
+    ? progress.detail + " " + setupRemaining + " required setup " + (setupRemaining === 1 ? "action also needs" : "actions also need") + " attention."
+    : progress.detail;
+  return '<a class="topbar-readiness" href="' + href + '" aria-label="' + esc(label + ": " + progress.percent + "%. " + detail + " " + progress.status + ".") + '"><span class="topbar-readiness-copy"><span>' + esc(label) + '</span><strong>' + progress.percent + '%</strong></span><span class="progress" aria-hidden="true"><span style="width:' + progress.percent + '%"></span></span></a>';
 }
 
 function repositoryStatusTone(status) {
@@ -535,11 +600,12 @@ function nextProgramStageHref() {
 function renderStageOverview(main, stageId, params = new URLSearchParams()) {
   const stage = READINESS_STAGES.find((candidate) => candidate.id === stageId);
   if (!stage) return renderNotFound(main);
+  if (stage.id === "policies" && !modelSupports("retention-schedule-approval")) return renderPoliciesPage(main, params);
   if (stage.id === "run") return renderObligations(main, params);
   const progress = stageProgress(stage);
   main.innerHTML = '<div class="page stage-overview-page"><nav class="breadcrumbs"><a href="#/">Overview</a><span>/</span><span>' + esc(stage.title) + '</span></nav>' +
     '<section class="stage-overview-hero"><div><p class="kicker">Step ' + esc(stage.number) + ' of 5</p><h2>' + esc(stage.title) + '</h2><p>' + esc(stage.summary) + '</p></div>' + stageProgressCard(progress) + '</section>' +
-    (stage.id === "policies" ? renderPolicyApprovalGuidance() + renderPoliciesTable() : renderStagePageIndex(stage)) + (stage.id === "controls" ? renderFinishStepThree() : "") + (stage.id === "audit" ? renderAuditDocumentActivationAssessments() : "") + '</div>';
+    renderStagePageIndex(stage) + (stage.id === "controls" ? renderFinishStepThree() : "") + (stage.id === "audit" ? renderAuditDocumentActivationAssessments() : "") + '</div>';
   main.querySelector("[data-show-evidence-families]")?.addEventListener("click", (event) => {
     main.querySelectorAll("[data-evidence-family-extra]").forEach((card) => { card.hidden = false; });
     event.currentTarget.remove();
@@ -551,6 +617,173 @@ function renderStageOverview(main, stageId, params = new URLSearchParams()) {
   });
 }
 
+function renderPoliciesPage(main, params = new URLSearchParams()) {
+  const guideTrigger = '<button class="guide-trigger" id="resource-guide-trigger" type="button" aria-label="About Policies" aria-haspopup="dialog" aria-controls="resource-guide" aria-expanded="false"><svg viewBox="0 0 20 20" aria-hidden="true"><circle cx="10" cy="10" r="8"></circle><path d="M7.8 7.5a2.4 2.4 0 1 1 3.25 2.25c-.7.31-1.05.72-1.05 1.5v.25M10 14.5v.1"></path></svg></button>';
+  main.innerHTML = '<div class="page policies-page"><nav class="breadcrumbs"><a href="#/stage/policies">Step 2</a><span>/</span><span>Policies</span></nav>' +
+    '<div class="page-intro"><div><p class="kicker">Step 2</p><div class="page-title-line"><h2>Policies</h2>' + guideTrigger + '</div><p>Review and approve the Policies, program Documents, and Training content that govern this program.</p></div></div>' + policyContentGuide() +
+    renderPolicyApprovalGuidance() + renderPoliciesTable(params) + '</div>';
+  resourceGuideCleanup = setupResourceGuide(main);
+}
+
+function policyContentGuide() {
+  return '<section class="page-guide resource-guide-popover" id="resource-guide" role="dialog" aria-label="How to use Policies" hidden><div><span>Instructions</span><p>Open each Policy, program Document, and Training record. Replace starter placeholders, review its Markdown, and confirm its owner, separate approver, relationships, and intended values.</p></div><div><span>Approval</span><p>Bind approval to the exact Markdown revision. Keep approved content inactive until Step 3 confirms implementation and records the activation cutover.</p></div><div><span>Included here</span><p>Use this page for governed program content. The Data Retention Schedule has its own Step 2 page because its document and structured rows are approved together.</p></div></section>';
+}
+
+function renderRetentionSchedulePage(main, params = new URLSearchParams()) {
+  const documentEntries = state.resources.filter(({ record }) => (
+    record.type === "document"
+    && record.documentKind === "schedule"
+    && record.workflowScope === "program"
+    && !["superseded", "retired"].includes(record.status)
+  ));
+  const documentEntry = documentEntries.length === 1 ? documentEntries[0] : null;
+  const rows = resourcesOfType("retention-schedule-item")
+    .sort((left, right) => left.record.title.localeCompare(right.record.title));
+  const activeRows = rows.filter(({ record }) => record.status === "active").length;
+  const documentReadiness = documentEntry ? retentionScheduleDocumentReadiness(documentEntry.record.id) : null;
+  const documentReady = documentEntries.length === 1 && documentReadiness?.status === "complete";
+  const documentAction = documentEntry
+    ? '<a class="button" href="#/resource/document/' + encodeURIComponent(documentEntry.record.id) + '?stage=policies&documentScope=program">Review document</a>'
+    : !documentEntries.length && !state.readOnly ? '<button class="button" type="button" data-add-retention-document>Add document</button>' : "";
+  const documentSummary = documentEntries.length
+    ? documentEntries.map((entry) => '<a href="#/resource/document/' + encodeURIComponent(entry.record.id) + '?stage=policies&documentScope=program"><strong>' + esc(entry.record.title) + '</strong><small>' + (documentEntries.length > 1 ? 'Resolve this duplicate before approval' : documentReadiness?.message || 'Policy, legal holds, exceptions, and disposal requirements') + '</small></a><span class="badge ' + (documentReady ? "good" : "warn") + '">' + (documentEntries.length > 1 ? "Duplicate" : documentReady ? "Ready" : "Needs work") + '</span>').join("")
+    : '<span><strong>No governing document</strong><small>Add the schedule document before approving its rows.</small></span><span class="badge warn">Required</span>';
+  const rowHtml = rows.length
+    ? rows.map((entry) => {
+        const { record } = entry;
+        const informationTypes = (record.informationTypeIds || []).map(referenceTitle).join(", ") || "Not selected";
+        const scope = (record.scopeResourceIds || []).map(referenceTitle).join(", ") || "Not selected";
+        const cutoff = retentionCutoffLabel(record.cutoff);
+        const period = retentionPeriodLabel(record.retentionPeriod);
+        const action = record.dispositionAction ? properCase(record.dispositionAction) : "Not selected";
+        return '<tr data-retention-row data-history="' + (["superseded", "retired"].includes(record.status) ? "true" : "false") + '"><td data-label="Rule" data-primary-field><a class="record-title" href="#/resource/retention-schedule-item/' + encodeURIComponent(record.id) + '?stage=policies">' + esc(record.title) + '</a><small>' + esc(record.description || record.id) + '</small></td><td data-label="Information types">' + esc(informationTypes) + '</td><td data-label="Scope">' + esc(scope) + '</td><td data-label="Retention"><strong>' + esc(period) + '</strong><small>From ' + esc(cutoff) + '</small></td><td data-label="Disposition">' + esc(action) + '</td><td data-label="Status">' + formatValue(displayStatus(record), "status", record.type, true) + '</td><td data-label="Next action">' + recordWorkflowCell("retention-schedule-item", entry, "?stage=policies") + '</td></tr>';
+      }).join("")
+    : '<tr><td colspan="7">' + empty("No retention rules are needed until an actual information use requires one.") + '</td></tr>';
+  const add = state.readOnly ? "" : '<button class="button primary" type="button" data-add-retention-row>Add schedule row</button>';
+  const guideTrigger = '<button class="guide-trigger" id="resource-guide-trigger" type="button" aria-label="About Data Retention Schedule" aria-haspopup="dialog" aria-controls="resource-guide" aria-expanded="false"><svg viewBox="0 0 20 20" aria-hidden="true"><circle cx="10" cy="10" r="8"></circle><path d="M7.8 7.5a2.4 2.4 0 1 1 3.25 2.25c-.7.31-1.05.72-1.05 1.5v.25M10 14.5v.1"></path></svg></button>';
+  const initialFilter = params.get("q") || "";
+  const showHistory = params.get("history") === "1";
+  const tableTools = '<div class="retention-table-tools"><label><span class="sr-only">Filter schedule rows</span><input type="search" data-retention-search placeholder="Filter schedule rows" value="' + esc(initialFilter) + '"></label><label class="history-toggle"><input type="checkbox" data-retention-history ' + (showHistory ? "checked" : "") + '> Show retired</label></div>';
+  main.innerHTML = '<div class="page retention-schedule-page"><nav class="breadcrumbs"><a href="#/stage/policies">Step 2</a><span>/</span><span>Data Retention Schedule</span></nav>' +
+    '<div class="page-intro"><div><p class="kicker">Step 2</p><div class="page-title-line"><h2>Data Retention Schedule</h2>' + guideTrigger + '</div><p>Define the retention rules management has approved. Step 3 checks whether implemented systems and evidence sources follow them.</p></div><div class="actions">' + documentAction + add + '</div></div>' + resourceGuide("retention-schedule-item") +
+    '<div class="retention-summary"><div><span class="retention-summary-label">Governing document</span>' + documentSummary + '</div><div><span class="retention-summary-label">Schedule revision</span><span><strong>' + activeRows + ' active ' + pluralize("row", activeRows) + '</strong><small>Document and rows are approved together</small></span><span class="badge ' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "good" : "warn") + '">' + (state.collectionReviews?.["retention-schedule-item"]?.status === "current" ? "Approved" : "Approval needed") + '</span></div></div>' +
+    '<section class="retention-rows"><div class="section-head"><div><p class="kicker">Structured schedule</p><h2>Schedule rows</h2><p>Add a row when an Information Type and its operational scope need a distinct cutoff, period, or disposition rule.</p></div>' + tableTools + '</div><div class="record-table-wrap"><table class="record-table"><thead><tr><th>Rule</th><th>Information types</th><th>Scope</th><th>Retention</th><th>Disposition</th><th>Status</th><th>Next action</th></tr></thead><tbody>' + rowHtml + '</tbody></table></div><p class="retention-filter-empty" data-retention-empty hidden>No schedule rows match this filter.</p><p class="retention-row-count" data-retention-count aria-live="polite"></p></section>' +
+    renderRetentionScheduleIssues() + collectionReviewPanel("retention-schedule-item", true) + '</div>';
+  resourceGuideCleanup = setupResourceGuide(main);
+  wireRetentionScheduleTable(rows.length);
+  main.querySelector("[data-review-collection]")?.addEventListener("click", () => openCollectionReviewDialog("retention-schedule-item"));
+  main.querySelector("[data-add-retention-document]")?.addEventListener("click", () => openEditor("document", null, {
+    seed: {
+      documentKind: "schedule",
+      workflowScope: "program",
+      programRole: "required"
+    },
+    description: "Write the governing Data Retention Schedule, link its Controls, and assign a separate approver before approving the document and schedule rows.",
+    saveLabel: "Save schedule document"
+  }));
+  main.querySelector("[data-add-retention-row]")?.addEventListener("click", () => openRetentionScheduleItemEditor());
+  main.querySelector(".retention-rows tbody")?.addEventListener("click", (event) => {
+    if (event.target.closest("[data-load-workflow]")) loadStateSection("workflow");
+  });
+  if (params.get("new") === "1" && !state.readOnly) {
+    const seed = {
+      ...(params.get("title") ? { title: params.get("title") } : {}),
+      ...(params.get("informationTypeId") ? { informationTypeIds: [params.get("informationTypeId")] } : {}),
+      ...(params.getAll("scopeResourceId").length ? { scopeResourceIds: params.getAll("scopeResourceId") } : {}),
+      ...(params.get("scheduleDocumentId") ? { scheduleDocumentId: params.get("scheduleDocumentId") } : {})
+    };
+    history.replaceState(null, "", "#/retention-schedule");
+    queueMicrotask(() => openRetentionScheduleItemEditor(seed));
+  }
+}
+
+function openRetentionScheduleItemEditor(seed = {}) {
+  const scheduleDocuments = resourcesOfType("document").filter(({ record }) => (
+    record.documentKind === "schedule"
+    && record.workflowScope !== "engagement"
+    && !["superseded", "retired"].includes(record.status)
+  ));
+  openEditor("retention-schedule-item", null, {
+    seed: {
+      ...(scheduleDocuments.length === 1 ? { scheduleDocumentId: scheduleDocuments[0].record.id } : {}),
+      ...seed
+    },
+    description: "Define one retention decision. Keep it planned until its scope, cutoff, period, disposition, sources, and approval are complete.",
+    saveLabel: "Save schedule row"
+  });
+}
+
+function wireRetentionScheduleTable(total) {
+  const table = root.querySelector(".retention-rows");
+  if (!table) return;
+  const search = table.querySelector("[data-retention-search]");
+  const historyToggle = table.querySelector("[data-retention-history]");
+  const count = table.querySelector("[data-retention-count]");
+  const noResults = table.querySelector("[data-retention-empty]");
+  const filter = () => {
+    const query = search.value.trim().toLowerCase();
+    let visible = 0;
+    table.querySelectorAll("[data-retention-row]").forEach((row) => {
+      const show = (historyToggle.checked || row.dataset.history !== "true")
+        && (!query || row.textContent.toLowerCase().includes(query));
+      row.hidden = !show;
+      if (show) visible += 1;
+    });
+    noResults.hidden = visible !== 0 || total === 0;
+    count.textContent = visible + " of " + total + " " + pluralize("row", total);
+  };
+  const updateLocation = () => {
+    const params = new URLSearchParams();
+    if (search.value.trim()) params.set("q", search.value.trim());
+    if (historyToggle.checked) params.set("history", "1");
+    history.replaceState(null, "", "#/retention-schedule" + (params.size ? "?" + params : ""));
+  };
+  search.addEventListener("input", () => { filter(); updateLocation(); });
+  historyToggle.addEventListener("change", () => { filter(); updateLocation(); });
+  filter();
+}
+
+function renderRetentionScheduleIssues() {
+  const actions = retentionSchedulePageItems().filter((item) => (
+    item.id !== "collection-review-retention-schedule-item"
+  ));
+  if (!actions.length) return "";
+  return '<section class="retention-issues"><div class="section-head"><div><p class="kicker">Before approval</p><h2>Items to resolve</h2></div></div><div class="retention-issue-list">' + actions.map((item) => {
+    const href = item.href || (item.id?.startsWith("retention-use-")
+      ? retentionScheduleItemHref(item)
+      : item.resourceId && item.resourceType
+        ? '#/resource/' + encodeURIComponent(item.resourceType) + '/' + encodeURIComponent(item.resourceId)
+        : '#/resources/' + encodeURIComponent(item.resourceType || "retention-schedule-item"));
+    return '<a href="' + href + '"><span><strong>' + esc(item.title) + '</strong><small>' + esc(item.message) + '</small></span><b>Review</b></a>';
+  }).join("") + '</div></section>';
+}
+
+function retentionScheduleDocumentReadiness(documentId) {
+  return state.programReadiness?.stages
+    ?.find(({ id }) => id === "policies")
+    ?.items.find(({ id }) => id === "document-approval-" + documentId) || null;
+}
+
+function referenceTitle(id) {
+  return state.resources.find(({ record }) => record.id === id)?.record.title || id;
+}
+
+function retentionPeriodLabel(period) {
+  if (!period) return "Not selected";
+  if (period.basis === "permanent") return "Permanent";
+  if (period.basis === "until-event") return "Until " + (period.event || "specified event");
+  if (period.basis === "fixed" && Number.isFinite(period.amount) && period.unit) {
+    return period.amount + " " + period.unit + (period.amount === 1 ? "" : "s");
+  }
+  return properCase(period.basis || "Configured");
+}
+
+function retentionCutoffLabel(cutoff) {
+  if (!cutoff) return "cutoff not selected";
+  if (cutoff.basis === "event") return cutoff.event || "specified event";
+  return properCase(cutoff.basis || "configured cutoff");
+}
+
 function renderEvidenceSourcesPage(main) {
   main.innerHTML = '<div class="page"><nav class="breadcrumbs"><a href="#/stage/controls">Step 3</a><span>/</span><span>Evidence Sources</span></nav><section class="stage-overview-hero"><div><p class="kicker">Step 3.3</p><h2>Evidence Sources</h2><p>Check that each Control points to an authoritative Component that people can use to retrieve its expected evidence.</p></div></section>' + renderEvidenceReadiness() + '</div>';
   main.querySelector("[data-show-evidence-families]")?.addEventListener("click", (event) => {
@@ -571,11 +804,11 @@ function renderPolicyApprovalGuidance() {
   return '<section class="policy-lifecycle-note panel ' + (proposalRows ? "" : "single") + '"><div><p class="kicker">Step 2 approval</p><h3>Approve the governed content</h3><p>Approval means your company reviewed and accepted the requirements and intended values in each Policy, program Document, and Training record. It does not mean the linked Controls are implemented yet.</p><p>Bind each approval to the exact Markdown revision here. Implement Controls and configure Obligations in Step 3, then activate each unchanged approved revision at implementation cutover.</p></div>' + (proposalRows ? '<div class="policy-library-proposals">' + proposalRows + '</div>' : "") + '</section>';
 }
 
-function renderPoliciesTable() {
+function renderPoliciesTable(params = new URLSearchParams()) {
   const entries = state.resources.filter(({ record }) => (
     record.type === "policy"
     || record.type === "training"
-    || record.type === "document" && !auditSpecificDocument(record)
+    || record.type === "document" && !auditSpecificDocument(record) && record.documentKind !== "schedule"
   )).sort((left, right) => (
     ["policy", "document", "training"].indexOf(left.record.type) - ["policy", "document", "training"].indexOf(right.record.type)
     || left.record.title.localeCompare(right.record.title)
@@ -604,8 +837,10 @@ function renderPoliciesTable() {
   const add = !state.readOnly
     ? '<details class="policy-content-add"><summary class="button primary">Add</summary><div><button type="button" data-add-policy-content="policy">Policy</button><button type="button" data-add-policy-content="document">Document</button><button type="button" data-add-policy-content="training">Training</button></div></details>'
     : '';
+  const initialFilter = params.get("q") || "";
+  const showHistory = params.get("history") === "1";
   const emptyRow = '<tr><td colspan="6">' + empty('No governed content has been created.') + '</td></tr>';
-  const html = '<section class="policy-content-table"><div class="section-head"><div><p class="kicker">Governed content</p><h2>Policies</h2><p>Review every program artifact in one place. Each row keeps its own type-specific fields and Git file.</p></div><div class="policy-content-tools"><label><span class="sr-only">Filter policies</span><input type="search" data-policy-content-search placeholder="Filter policies"></label><label class="history-toggle"><input type="checkbox" data-policy-content-history> Show retired</label>' + add + '</div></div><div class="record-table-wrap"><table class="record-table"><thead><tr><th>Name</th><th>Type</th><th>Owner</th><th>Status</th><th>Approval</th><th>Next action</th></tr></thead><tbody data-policy-content-body>' + (entries.length ? entries.map(row).join('') : emptyRow) + '</tbody></table></div><p class="policy-content-count" data-policy-content-count></p></section>';
+  const html = '<section class="policy-content-table"><div class="section-head"><div><p class="kicker">Policies, Documents, and Training</p><h2>Governed content</h2><p>Review every program artifact in one place. Each row keeps its own type-specific fields and Git file.</p></div><div class="policy-content-tools"><label><span class="sr-only">Filter policies</span><input type="search" data-policy-content-search placeholder="Filter policies" value="' + esc(initialFilter) + '"></label><label class="history-toggle"><input type="checkbox" data-policy-content-history ' + (showHistory ? "checked" : "") + '> Show retired</label>' + add + '</div></div><div class="record-table-wrap"><table class="record-table"><thead><tr><th>Name</th><th>Type</th><th>Owner</th><th>Status</th><th>Approval</th><th>Next action</th></tr></thead><tbody data-policy-content-body>' + (entries.length ? entries.map(row).join('') : emptyRow) + '</tbody></table></div><p class="policy-content-filter-empty" data-policy-content-empty hidden>No governed content matches this filter.</p><p class="policy-content-count" data-policy-content-count aria-live="polite"></p></section>';
   queueMicrotask(() => wirePoliciesTable(entries.length));
   return html;
 }
@@ -614,21 +849,29 @@ function wirePoliciesTable(total) {
   const table = root.querySelector('.policy-content-table');
   if (!table) return;
   const search = table.querySelector('[data-policy-content-search]');
-  const history = table.querySelector('[data-policy-content-history]');
+  const historyToggle = table.querySelector('[data-policy-content-history]');
   const count = table.querySelector('[data-policy-content-count]');
+  const noResults = table.querySelector('[data-policy-content-empty]');
   const filter = () => {
     const query = search.value.trim().toLowerCase();
     let visible = 0;
     table.querySelectorAll('[data-policy-content-row]').forEach((row) => {
-      const show = (history.checked || row.dataset.history !== 'true')
+      const show = (historyToggle.checked || row.dataset.history !== 'true')
         && (!query || row.textContent.toLowerCase().includes(query));
       row.hidden = !show;
       if (show) visible += 1;
     });
+    noResults.hidden = visible !== 0 || total === 0;
     count.textContent = visible + ' of ' + total + ' ' + pluralize('artifact', total);
   };
-  search.addEventListener('input', filter);
-  history.addEventListener('change', filter);
+  const updateLocation = () => {
+    const params = new URLSearchParams();
+    if (search.value.trim()) params.set("q", search.value.trim());
+    if (historyToggle.checked) params.set("history", "1");
+    history.replaceState(null, "", "#/policies" + (params.size ? "?" + params : ""));
+  };
+  search.addEventListener('input', () => { filter(); updateLocation(); });
+  historyToggle.addEventListener('change', () => { filter(); updateLocation(); });
   table.querySelectorAll('[data-add-policy-content]').forEach((button) => {
     button.addEventListener('click', () => openEditor(button.dataset.addPolicyContent));
   });
@@ -640,7 +883,8 @@ function policyContentWorkflowCell(entry) {
   const items = recordWorkflowItems(record.type, record.id);
   if (!items.length) return '<span class="record-workflow-clear">No calculated action</span>';
   const item = items[0];
-  const href = workflowItemHref(item) || '#/resource/' + encodeURIComponent(record.type) + '/' + encodeURIComponent(record.id) + '?stage=policies';
+  let href = workflowItemHref(item) || '#/resource/' + encodeURIComponent(record.type) + '/' + encodeURIComponent(record.id) + '?stage=policies';
+  if (href.startsWith('#/resource/' + encodeURIComponent(record.type) + '/') && !href.includes('?')) href += '?stage=policies';
   const title = ["draft", "in-review"].includes(record.status)
     ? "Complete and approve"
     : record.status === "approved"
@@ -675,7 +919,7 @@ function renderDocumentActivationAssessments() {
 
 function renderAuditDocumentActivationAssessments() {
   const audits = resourcesOfType("audit").map(({ record }) => record);
-  const audit = audits.find(({ status }) => !["complete", "closed", "canceled"].includes(status)) || audits[0];
+  const audit = selectDefaultAudit(audits, state.programReadiness?.asOf || currentDate());
   const preparation = audit ? state.auditPreparations?.[audit.id] : null;
   const assessments = preparation?.documentActivations || [];
   if (!audit || !assessments.length) return "";
@@ -916,32 +1160,62 @@ function collectionReviewPanel(type, force = false) {
   if (!assessment || (!force && !collectionReviewVisible(type))) return "";
   const configuration = assessment.configuration;
   const current = assessment.status === "current";
+  const scheduleReview = type === "retention-schedule-item" && modelSupports("retention-schedule-approval");
+  const scheduleBlocker = scheduleReview ? retentionScheduleApprovalBlocker() : null;
   const needsFirstRecord = collectionNeedsFirstRecord(type);
   const reviewerNames = (assessment.review?.reviewedByIds || [])
     .map((id) => state.resources.find(({ record }) => record.id === id)?.record.title || id);
   const reviewNote = assessment.review?.rationale
     ? " Note: " + esc(assessment.review.rationale)
     : "";
-  const reviewSummary = current
+  const reviewSummary = current && !scheduleBlocker
     ? '<p class="collection-review-result"><strong>' + esc(properCase(assessment.review.decision)) + '</strong><span>Reviewed ' + esc(formatCalendarDate(assessment.review.reviewedOn)) + (reviewerNames.length ? " by " + esc(reviewerNames.join(", ")) : "") + "." + reviewNote + '</span></p>'
-    : '<p class="collection-review-result"><strong>' + (needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Review again" : "Review required") + '</strong><span>' + esc(assessment.message) + '</span></p>';
-  const compactReviewSummary = current
+    : '<p class="collection-review-result"><strong>' + (scheduleBlocker ? "Complete schedule first" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Review again" : "Review required") + '</strong><span>' + esc(scheduleBlocker || assessment.message) + '</span></p>';
+  const compactReviewSummary = current && !scheduleBlocker
     ? '<p class="collection-review-result"><strong>' + esc(properCase(assessment.review.decision)) + '</strong><span>Reviewed ' + esc(formatCalendarDate(assessment.review.reviewedOn)) + (reviewerNames.length ? " by " + esc(reviewerNames.join(", ")) : "") + ".</span></p>"
     : reviewSummary;
   const action = state.readOnly
     ? ""
+    : scheduleBlocker
+      ? '<button class="button" type="button" disabled title="' + esc(scheduleBlocker) + '">Review and approve schedule</button>'
     : needsFirstRecord
       ? '<a class="button primary" href="#/resources/' + encodeURIComponent(type) + '?new=1">Add first ' + esc(state.model.resources[type].title.toLowerCase()) + '</a>'
-      : '<button class="button ' + (current ? "" : "primary") + '" type="button" data-review-collection="' + esc(type) + '">' + (current ? "Review again" : "Review and confirm") + '</button>';
-  const status = current ? "Reviewed" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Stale" : "Review required";
-  const details = '<details ' + (current ? 'class="collection-review-details"' : "open") + '><summary>' + (current ? "Show scope confirmation" : "What to review") + '</summary><div class="collection-review-detail-content"><div class="collection-review-head"><div><p class="kicker">Scope confirmation</p><h3>' + esc(configuration.title) + '</h3><p>' + esc(configuration.description) + '</p></div><span class="badge ' + (current ? "good" : "warn") + '">' + status + '</span></div><ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul>' + (current ? reviewSummary : "") + '</div></details>';
+      : '<button class="button ' + (current ? "" : "primary") + '" type="button" data-review-collection="' + esc(type) + '">' + (current ? scheduleReview ? "Approve a new revision" : "Review again" : scheduleReview ? "Review and approve schedule" : "Review and confirm") + '</button>';
+  const status = scheduleBlocker ? "Not ready" : current ? "Reviewed" : needsFirstRecord ? "Records required" : assessment.status === "stale" ? "Stale" : "Review required";
+  const details = '<details ' + (current ? 'class="collection-review-details"' : "open") + '><summary>' + (current ? scheduleReview ? "Show approved revision" : "Show scope confirmation" : "What to review") + '</summary><div class="collection-review-detail-content"><div class="collection-review-head"><div><p class="kicker">' + (scheduleReview ? "Schedule approval" : "Scope confirmation") + '</p><h3>' + esc(configuration.title) + '</h3><p>' + esc(configuration.description) + '</p></div><span class="badge ' + (current ? "good" : "warn") + '">' + status + '</span></div><ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul>' + (current ? reviewSummary : "") + '</div></details>';
   const summary = current
-    ? '<div class="collection-review-current-row"><div class="collection-review-complete-summary"><span class="kicker">Scope confirmation</span>' + compactReviewSummary + '</div>' + details + action + '</div>'
+    ? '<div class="collection-review-current-row"><div class="collection-review-complete-summary"><span class="kicker">' + (scheduleReview ? "Approved schedule" : "Scope confirmation") + '</span>' + compactReviewSummary + '</div>' + details + action + '</div>'
     : details;
   return '<section class="collection-review-panel panel ' + (current ? "current" : "required") + '">' + summary +
     (current ? "" : '<div class="collection-review-foot">' + reviewSummary + action + '</div>') + '</section>';
 }
 
+function retentionScheduleApprovalBlocker() {
+  if (!modelSupports("retention-schedule-approval")) return null;
+  const documents = state.resources.filter(({ record }) => (
+    record.type === "document"
+    && record.documentKind === "schedule"
+    && record.workflowScope === "program"
+    && !["superseded", "retired"].includes(record.status)
+  )).map(({ record }) => record);
+  const document = documents.length === 1 ? documents[0] : null;
+  if (documents.length > 1) return "Keep exactly one current program Data Retention Schedule document before approval.";
+  if (!document) return "Add the governing Data Retention Schedule document first.";
+  if (!["approved", "active"].includes(document.status) || !document.approvedOn || !document.approvedContentRevisions) {
+    return "Approve the governing document and bind its exact Markdown revision first.";
+  }
+  const documentReadiness = retentionScheduleDocumentReadiness(document.id);
+  if (documentReadiness?.status !== "complete") {
+    return documentReadiness?.message || "Complete the governing document before approving the schedule.";
+  }
+  const planned = resourcesOfType("retention-schedule-item").find(({ record }) => record.status === "planned")?.record;
+  if (planned) return "Complete or retire the planned row: " + planned.title + ".";
+  const incomplete = retentionReviewItems("policies", false).find((item) => (
+    item.status === "action" && item.id !== "collection-review-retention-schedule-item"
+  ));
+  return incomplete?.message || null;
+}
+
 function collectionReviewVisible(type) {
   return type !== "control";
 }
@@ -1033,8 +1307,7 @@ function recordWorkflowItems(type, id) {
   const activeStates = new Set(["blocked", "due", "open", "overdue", "ready", "scheduled", "upcoming", "waiting-external"]);
   return [
     ...(state.workflow?.findings || []),
-    ...(state.workflow?.workItems || []),
-    ...programReadinessWorkflowItems()
+    ...(state.workflow?.workItems || [])
   ].filter((item) => (
     activeStates.has(item.state)
     && (
@@ -1048,14 +1321,15 @@ function recordWorkflowItems(type, id) {
   ));
 }
 
-function recordWorkflowCell(type, entry) {
+function recordWorkflowCell(type, entry, detailContext = "") {
   if (state.sections?.workflow !== "complete") {
     return '<button class="text-button record-workflow-clear" type="button" data-load-workflow>Calculate action</button>';
   }
   const items = recordWorkflowItems(type, entry.record.id);
   if (!items.length) return '<span class="record-workflow-clear">No calculated action</span>';
   const item = items[0];
-  const href = workflowItemHref(item) || "#/resource/" + encodeURIComponent(type) + "/" + encodeURIComponent(entry.record.id);
+  let href = workflowItemHref(item) || "#/resource/" + encodeURIComponent(type) + "/" + encodeURIComponent(entry.record.id);
+  if (detailContext && href.startsWith("#/resource/" + encodeURIComponent(type) + "/") && !href.includes("?")) href += detailContext;
   const title = type === "control" ? "Finish implementation" : item.title;
   return '<a class="record-workflow-action" href="' + href + '"><span class="workflow-finding-status ' + esc(item.state) + '">' + esc(properCase(item.state)) + '</span><span><strong>' + esc(title) + '</strong><small>' + esc(stagePageItemDetail(item)) + (items.length > 1 ? " +" + (items.length - 1) + " more" : "") + '</small></span></a>';
 }
@@ -1064,7 +1338,10 @@ function openCollectionReviewDialog(type) {
   const assessment = state.collectionReviews?.[type];
   if (!assessment) return;
   const configuration = assessment.configuration;
-  const eligibleReviewerIds = type === "control" ? new Set(assessment.eligibleReviewerIds || []) : null;
+  const scheduleReview = type === "retention-schedule-item" && modelSupports("retention-schedule-approval");
+  const eligibleReviewerIds = assessment.eligibleReviewerIds
+    ? new Set(assessment.eligibleReviewerIds)
+    : null;
   const people = resourcesOfType("person").filter(({ record }) => (
     record.status === "active" && (!eligibleReviewerIds || eligibleReviewerIds.has(record.id))
   ));
@@ -1091,10 +1368,18 @@ function openCollectionReviewDialog(type) {
   const dialog = document.createElement("dialog");
   dialog.className = "commit-dialog event-dialog collection-review-dialog";
   dialog.setAttribute("aria-labelledby", "collection-review-dialog-title");
-  const reviewerHelp = type === "control" && !people.length
-    ? '<p class="policy-activation-warning">No eligible reviewer is configured. Add an active external Person who does not own these Controls or their enabled Obligations.</p>'
+  const reviewerHelp = eligibleReviewerIds && !people.length
+    ? '<p class="policy-activation-warning">No eligible reviewer is configured. Add an active Person who does not own ' + (scheduleReview ? 'the governing document or any included schedule row.' : 'these Controls or their enabled Obligations.') + '</p>'
     : "";
-  dialog.innerHTML = '<form><div class="dialog-head"><div><p class="kicker">Scope confirmation</p><h2 id="collection-review-dialog-title">Confirm ' + esc(configuration.title.toLowerCase()) + '</h2></div><button type="button" class="icon-button" aria-label="Close">×</button></div><p>' + esc(configuration.description) + '</p><section class="event-dialog-steps collection-review-checks"><strong>Before confirming</strong><ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul></section>' + reviewerHelp + '<div class="form-grid"><label><span>Conclusion</span><select name="decision" required>' + decisions + '</select></label><label><span>Reviewer</span><select name="reviewerId" required><option value="">Select</option>' + people.map(({ record }) => '<option value="' + esc(record.id) + '" ' + ((assessment.review?.reviewedByIds || []).includes(record.id) ? "selected" : "") + '>' + esc(record.title) + '</option>').join("") + '</select></label><label><span>Reviewed on</span><input name="reviewedOn" type="date" required value="' + esc(currentDate()) + '"></label><label data-authoritative-system><span>Authoritative ' + (v4 ? "Component" : "System") + '</span><select name="authoritativeSourceId"><option value="">Select</option>' + systems.map(({ record }) => '<option value="' + esc(record.id) + '" ' + (preservedAuthoritativeSourceId === record.id ? "selected" : "") + '>' + esc(record.title) + '</option>').join("") + '</select></label><label class="full"><span>Review notes</span><textarea name="rationale" rows="3" required placeholder="Note what you confirmed and any scope decision that needs context.">' + esc(assessment.review?.rationale || "") + '</textarea></label></div><div class="workflow-preview"><strong>What this saves</strong><p>Confirm ' + assessment.recordCount + ' current ' + esc(pluralize("record", assessment.recordCount)) + '. If the collection or material scope changes, FileGRC will ask for another review.</p></div><div class="dialog-error" role="alert"></div><div class="dialog-actions"><span class="save-status review-save-status" role="status" aria-live="polite"></span><button type="button" class="button" data-event="cancel">Cancel</button><button type="submit" class="button primary">Confirm and save</button></div></form>';
+  const dialogKicker = scheduleReview ? "Schedule approval" : "Scope confirmation";
+  const dialogTitle = scheduleReview ? "Review and approve Data Retention Schedule" : "Confirm " + configuration.title.toLowerCase();
+  const checklistLabel = scheduleReview ? "Before approving" : "Before confirming";
+  const saveDescription = scheduleReview
+    ? 'Approve the governing document and ' + assessment.recordCount + ' current ' + pluralize("schedule row", assessment.recordCount) + ' as one revision. A later document, row, or material scope change requires another approval.'
+    : 'Confirm ' + assessment.recordCount + ' current ' + pluralize("record", assessment.recordCount) + '. If the collection or material scope changes, FileGRC will ask for another review.';
+  const confirmSubmit = '<button type="submit" class="button primary">Confirm and save</button>';
+  const submit = scheduleReview ? '<button type="submit" class="button primary">Approve schedule</button>' : confirmSubmit;
+  dialog.innerHTML = '<form><div class="dialog-head"><div><p class="kicker">' + dialogKicker + '</p><h2 id="collection-review-dialog-title">' + esc(dialogTitle) + '</h2></div><button type="button" class="icon-button" aria-label="Close">×</button></div><p>' + esc(configuration.description) + '</p><section class="event-dialog-steps collection-review-checks"><strong>' + checklistLabel + '</strong><ul>' + configuration.reviewPoints.map((point) => '<li>' + esc(point) + '</li>').join("") + '</ul></section>' + reviewerHelp + '<div class="form-grid"><label><span>Conclusion</span><select name="decision" required>' + decisions + '</select></label><label><span>Reviewer</span><select name="reviewerId" required><option value="">Select</option>' + people.map(({ record }) => '<option value="' + esc(record.id) + '" ' + ((assessment.review?.reviewedByIds || []).includes(record.id) ? "selected" : "") + '>' + esc(record.title) + '</option>').join("") + '</select></label><label><span>Reviewed on</span><input name="reviewedOn" type="date" required value="' + esc(currentDate()) + '"></label><label data-authoritative-system><span>Authoritative ' + (v4 ? "Component" : "System") + '</span><select name="authoritativeSourceId"><option value="">Select</option>' + systems.map(({ record }) => '<option value="' + esc(record.id) + '" ' + (preservedAuthoritativeSourceId === record.id ? "selected" : "") + '>' + esc(record.title) + '</option>').join("") + '</select></label><label class="full"><span>Review notes</span><textarea name="rationale" rows="3" required placeholder="Note what you confirmed and any scope decision that needs context.">' + esc(assessment.review?.rationale || "") + '</textarea></label></div><div class="workflow-preview"><strong>What this saves</strong><p>' + esc(saveDescription) + '</p></div><div class="dialog-error" role="alert"></div><div class="dialog-actions"><span class="save-status review-save-status" role="status" aria-live="polite"></span><button type="button" class="button" data-event="cancel">Cancel</button>' + submit + '</div></form>';
   document.body.append(dialog);
   dialog.showModal();
   const form = dialog.querySelector("form");
@@ -1126,7 +1411,8 @@ function openCollectionReviewDialog(type) {
       reviewedOn: form.elements.reviewedOn.value,
       scopeRevision: state.git?.commit || undefined,
       [v4 ? "authoritativeComponentId" : "authoritativeSystemId"]: form.elements.authoritativeSourceId.value || undefined,
-      expectedRevision: assessment.reviewRevision || undefined
+      expectedRevision: assessment.reviewRevision || undefined,
+      expectedCollectionRevision: assessment.collectionRevision
     };
     form.querySelectorAll("button,input,select,textarea").forEach((control) => { control.disabled = true; });
     const submit = form.querySelector('button[type="submit"]');
@@ -1195,6 +1481,7 @@ function workflowItemHref(item) {
   const collectionReviewCommand = commands.find((command) => command.includes(" review-collection "));
   const collectionReviewType = collectionReviewCommand?.match(/review-collection\s+([a-z0-9-]+)/)?.[1];
   if (collectionReviewType && state.model.collectionReviews?.[collectionReviewType]) {
+    if (collectionReviewType === "retention-schedule-item" && modelSupports("retention-schedule-approval")) return "#/retention-schedule";
     return "#/resources/" + encodeURIComponent(collectionReviewType) + "?review-collection=1";
   }
   if (
@@ -1242,7 +1529,10 @@ function workflowItemHref(item) {
 function retentionScheduleItemHref(item) {
   const params = new URLSearchParams({ new: "1" });
   if (item.informationTypeId) params.set("informationTypeId", item.informationTypeId);
-  if (item.resourceId || item.subject?.id) params.set("scopeResourceId", item.resourceId || item.subject.id);
+  for (const id of item.retentionScopeResourceIds || []) params.append("scopeResourceId", id);
+  if (!params.has("scopeResourceId") && (item.resourceId || item.subject?.id)) {
+    params.set("scopeResourceId", item.resourceId || item.subject.id);
+  }
   const informationTypeTitle = String(item.title || "").replace(/^Decide retention for\s+/i, "").trim();
   if (informationTypeTitle && informationTypeTitle !== item.title) params.set("title", "Retention for " + informationTypeTitle);
   const scheduleDocuments = resourcesOfType("document").filter(({ record }) => (
@@ -1251,7 +1541,7 @@ function retentionScheduleItemHref(item) {
     && !["superseded", "retired"].includes(record.status)
   ));
   if (scheduleDocuments.length === 1) params.set("scheduleDocumentId", scheduleDocuments[0].record.id);
-  return "#/resources/retention-schedule-item?" + params;
+  return "#/retention-schedule?" + params;
 }
 
 function workflowItemDetail(item) {
@@ -1328,57 +1618,76 @@ function renderEvidenceReadiness() {
   return '<section class="evidence-map"><div class="evidence-map-head"><div><p class="kicker">Control implementation</p><h2>' + completeCount + ' of ' + items.length + ' evidence ' + (items.length === 1 ? "family" : "families") + ' ready</h2><p>Connect each Control to the ' + sourceLabel + ' that produce its evidence.</p></div><div class="evidence-map-actions"><a class="button" href="#/resources/' + sourceType + '">Review ' + sourceLabel + '</a><a class="button primary" href="#/resources/control">Review Controls</a></div></div>' + (cards || empty) + more + '</section>';
 }
 
-function retentionReviewItems() {
+function retentionReviewItems(stageId = null, includeMappings = true) {
+  const scheduleDocumentReviewIds = new Set(state.resources
+    .filter(({ record }) => record.type === "document" && record.documentKind === "schedule" && record.workflowScope === "program")
+    .map(({ record }) => "document-approval-" + record.id));
   return (state.programReadiness?.stages || []).flatMap((stage) => (
     (stage.items || []).filter((item) => (
-      item.id?.startsWith("retention-")
-      || item.id?.startsWith("requirement-mapping-")
+      (!stageId || stage.id === stageId)
+      && (item.id?.startsWith("retention-")
+      || includeMappings && item.id?.startsWith("requirement-mapping-")
       || ["collection-review-information-type", "collection-review-retention-schedule-item"].includes(item.id)
+      || scheduleDocumentReviewIds.has(item.id)
+      )
     )).map((item) => ({ ...item, stage: stage.id }))
   ));
 }
 
-function programReadinessWorkflowItems() {
-  if (state.sections?.workflow === "complete") return [];
-  return retentionReviewItems()
-    .filter((item) => item.status === "action")
-    .map((item) => ({
-      ...item,
-      key: "program-readiness." + item.id,
+function isRetentionScheduleWorkflowItem(item) {
+  if (item.id?.startsWith("retention-") || item.id === "collection-review-retention-schedule-item") return true;
+  return [item.subject, item.source].filter(Boolean).some((reference) => {
+    if (reference.type === "retention-schedule-item") return true;
+    if (reference.type !== "document" || !reference.id) return false;
+    const record = state.resources.find(({ record }) => record.id === reference.id)?.record;
+    return record?.documentKind === "schedule" && record.workflowScope !== "engagement";
+  });
+}
+
+function retentionSchedulePageItems() {
+  const plannedRows = resourcesOfType("retention-schedule-item")
+    .filter(({ record }) => record.status === "planned")
+    .map(({ record }) => ({
+      id: "planned-" + record.id,
+      key: "planned-" + record.id,
+      status: "action",
       state: "ready",
-      subject: item.resourceId && item.resourceType ? { type: item.resourceType, id: item.resourceId } : { type: item.resourceType || "unknown" }
+      title: "Complete or retire " + record.title,
+      message: "Planned rows are excluded from the approved schedule. Finish this decision or retire the row before schedule approval.",
+      resourceType: record.type,
+      resourceId: record.id,
+      href: '#/resource/retention-schedule-item/' + encodeURIComponent(record.id) + '?stage=policies'
     }));
+  return distinctPageActionItems([
+    ...plannedRows,
+    ...retentionReviewItems("policies", false)
+      .filter(({ status }) => status === "action")
+      .map((item) => ({
+        ...item,
+        key: item.id,
+        state: "ready",
+        href: item.id === "collection-review-retention-schedule-item"
+          ? "#/retention-schedule"
+          : item.id?.startsWith("retention-use-")
+            ? retentionScheduleItemHref(item)
+            : item.resourceId && item.resourceType
+              ? '#/resource/' + encodeURIComponent(item.resourceType) + '/' + encodeURIComponent(item.resourceId)
+              : workflowItemHref(item) || "#/retention-schedule",
+        subject: item.resourceId && item.resourceType
+          ? { type: item.resourceType, id: item.resourceId }
+          : item.subject
+      }))
+  ]);
 }
 
-function renderRetentionReadiness() {
-  const items = retentionReviewItems();
-  if (!items.length) return "";
-  const actions = items.filter((item) => item.status === "action");
-  const cards = actions.map((item) => {
-    const ids = [...new Set([
-      item.resourceId,
-      item.informationTypeId,
-      ...(item.retentionScheduleItemIds || []),
-      ...(item.staleResourceIds || [])
-    ].filter(Boolean))];
-    const references = ids.length
-      ? '<div class="evidence-map-references">' + ids.map((id) => formatReference(id)).join("") + '</div>'
-      : "";
-    const href = item.id?.startsWith("retention-use-")
-      ? retentionScheduleItemHref(item)
-      : item.id?.startsWith("collection-review-")
-      ? '#/resources/' + encodeURIComponent(item.resourceType)
-      : item.resourceId && item.resourceType
-      ? '#/resource/' + encodeURIComponent(item.resourceType) + '/' + encodeURIComponent(item.resourceId)
-      : '#/resources/' + encodeURIComponent(item.resourceType || "retention-schedule-item");
-    return '<article class="evidence-map-card"><div class="evidence-map-card-head"><div><span class="badge warn">Review</span><h3><a href="' + href + '">' + esc(item.title) + '</a></h3></div></div><p>' + esc(item.message) + '</p>' + references + '</article>';
-  });
-  const visibleCount = 6;
-  const visibleCards = cards.slice(0, visibleCount).join("");
-  const moreCards = cards.length > visibleCount
-    ? '<details class="workflow-guidance-more retention-readiness-more"><summary>Show ' + (cards.length - visibleCount) + ' more retention and mapping items</summary><div class="policy-activation-grid workflow-findings-more">' + cards.slice(visibleCount).join("") + '</div></details>'
-    : "";
-  return '<section class="evidence-map retention-readiness"><div class="evidence-map-head"><div><p class="kicker">Information lifecycle</p><h2>' + (items.length - actions.length) + ' of ' + items.length + ' retention and mapping checks current</h2><p>Review Information Types, schedule coverage, and mappings here when source records or processing uses change.</p></div><div class="evidence-map-actions"><a class="button" href="#/resources/requirement-mapping">Review mappings</a><a class="button primary" href="#/resources/retention-schedule-item">Review schedule</a></div></div>' + (cards.length ? '<div class="policy-activation-grid">' + visibleCards + '</div>' + moreCards : '<article class="evidence-map-card complete"><span class="badge good">Current</span><p>Every retention decision and Requirement Mapping is bound to its current sources.</p></article>') + '</section>';
+function distinctPageActionItems(items) {
+  const distinct = new Map();
+  for (const item of items) {
+    const href = item.href || workflowItemHref(item);
+    const key = pageActionIdentity(href, item.key || item.id);
+    if (!distinct.has(key)) distinct.set(key, item);
+  }
+  return [...distinct.values()];
 }
 
 function evidenceSourceCheckLabel(name) {
@@ -1418,11 +1727,11 @@ function stagePageCard(stage, destination, index) {
   const stepLabel = "Step " + stage.number + "." + String.fromCharCode(97 + index);
   const derived = derivedStagePageState(stage, destination);
   const complete = derived.complete;
-  const items = stagePageItems(stage, destination);
+  const items = stagePageActionItems(stage, destination);
   const completionState = '<span class="stage-page-completion-state ' + (complete ? "complete" : "") + '">' + esc(derived.label) + '</span>';
   const taskPreview = items.length
     ? '<div class="stage-page-tasks">' + items.slice(0, 3).map((item) => {
-        const href = destination.utility === "evidence-sources" ? destination.href : workflowItemHref(item) || destination.href;
+        const href = destination.utility === "evidence-sources" ? destination.href : item.href || workflowItemHref(item) || destination.href;
         return '<a href="' + href + '"><span class="workflow-finding-status ' + esc(item.state) + '">' + esc(properCase(item.state)) + '</span><span><strong>' + esc(item.title) + '</strong><small>' + esc(stagePageItemDetail(item)) + '</small></span></a>';
       }).join("") + (items.length > 3 ? '<small class="stage-page-tasks-more">+' + (items.length - 3) + ' more on this page</small>' : "") + '</div>'
     : "";
@@ -1457,6 +1766,11 @@ function stageProgress(stage) {
   return progressFromCounts(complete, applicable.length, "page");
 }
 
+function stagePageActionItems(stage, destination) {
+  const deferredStates = new Set(["later", "scheduled", "upcoming", "waiting-external"]);
+  return stagePageItems(stage, destination).filter(({ state }) => !deferredStates.has(state));
+}
+
 function derivedStagePageState(stage, destination) {
   if (
     stage.id === "audit"
@@ -1473,9 +1787,15 @@ function derivedStagePageState(stage, destination) {
       ? { complete: false, label: incomplete + " " + pluralize("source", incomplete) + " need work" }
       : { complete: evidenceItems.length > 0, label: evidenceItems.length ? "Ready" : "Not configured", countsTowardProgress: evidenceItems.length > 0 };
   }
+  if (destination.utility === "retention-schedule") {
+    const incomplete = retentionSchedulePageItems().length;
+    return !incomplete
+      ? { complete: true, label: "Approved" }
+      : { complete: false, label: incomplete ? incomplete + " " + pluralize("item", incomplete) + " need work" : "Approval needed" };
+  }
   const items = stagePageItems(stage, destination);
   const deferredStates = new Set(["later", "scheduled", "upcoming", "waiting-external"]);
-  const blocking = items.filter(({ state }) => !deferredStates.has(state));
+  const blocking = stagePageActionItems(stage, destination);
   if (blocking.length) {
     return { complete: false, label: blocking.length + " " + pluralize("item", blocking.length) + (blocking.length === 1 ? " needs work" : " need work") };
   }
@@ -1500,8 +1820,7 @@ function stagePageItems(stage, destination) {
   const activeStates = new Set(["blocked", "due", "later", "open", "overdue", "ready", "scheduled", "upcoming", "waiting-external"]);
   const items = [
     ...(state.workflow?.findings || []),
-    ...(state.workflow?.workItems || []),
-    ...programReadinessWorkflowItems()
+    ...(state.workflow?.workItems || [])
   ].filter((item) => (
     activeStates.has(item.state)
     && (
@@ -1516,14 +1835,10 @@ function stagePageItems(stage, destination) {
       .filter(({ id, status }) => id.startsWith("source-family-") && status !== "complete")
       .map((item) => ({ ...item, key: item.id, state: item.status, subject: { type: "source-coverage" } }));
   }
-  if (stage.id === "policies" && destination.href === "#/stage/policies") {
-    return items.sort((left, right) => (
-      workflowItemStatePriority(left) - workflowItemStatePriority(right)
-      || (left.priority ?? workflowItemPriority(left)) - (right.priority ?? workflowItemPriority(right))
-      || left.key.localeCompare(right.key)
-    ));
+  if (destination.utility === "retention-schedule") {
+    return retentionSchedulePageItems();
   }
-  return items.filter((item) => {
+  return distinctPageActionItems(items.filter((item) => {
     if (destination.type === "program" && item.key === "program.scope.criteria") return false;
     if (
       destination.type === "requirement"
@@ -1535,22 +1850,10 @@ function stagePageItems(stage, destination) {
       && ["source-coverage", "system"].includes(item.subject?.type)
       && item.key?.startsWith("evidence-source.")
     ) return false;
-    if (
-      stage.id === "policies"
-      && destination.type === "policy"
-      && item.code === "governance.appointment.independent-policy-reviewer"
-    ) return true;
-    if (
-      destination.type
-      && (item.subject?.type === destination.type || item.source?.type === destination.type)
-    ) return true;
     const href = workflowItemHref(item);
-    if (!href) return false;
-    const destinationHref = destination.href.split("?")[0];
-    return href === destinationHref
-      || href.startsWith(destinationHref + "?")
-      || Boolean(destination.type && href.startsWith("#/resource/" + destination.type + "/"));
-  }).sort((left, right) => (
+    return workflowHrefBelongsToPage(destination, href)
+      && !(destination.href === "#/policies" && isRetentionScheduleWorkflowItem(item));
+  })).sort((left, right) => (
     workflowItemStatePriority(left) - workflowItemStatePriority(right)
     || (left.priority ?? workflowItemPriority(left)) - (right.priority ?? workflowItemPriority(right))
     || left.key.localeCompare(right.key)
@@ -1566,7 +1869,7 @@ function operationProgress() {
   const goal = program?.target?.goal || activeProgram().assuranceGoal || "none";
   const asOf = program?.asOf || currentDate();
   const candidateStarted = goal === "soc-2-type-2"
-    ? Boolean(program?.target?.candidateCoverage?.kind === "range" && program.target.candidateCoverage.startsOn <= asOf)
+    ? Boolean(program?.progress?.mode === "operating-window")
     : goal === "soc-2-type-1"
       ? Boolean(program?.target?.candidateCoverage?.kind === "as-of")
       : Boolean(program?.evidenceReady);
@@ -1661,6 +1964,7 @@ function sectionDestinations(section) {
   }
   if (section.utility === "obligation-board") destinations.push({ utility: section.utility, kind: "Working page", label: "Work Queue", href: "#/stage/run", description: "Complete recurring work, Policy Event tasks, and assigned follow-up with its due windows and linked proof." });
   if (section.utility === "evidence-sources") destinations.push({ utility: section.utility, kind: "Coverage page", label: "Evidence Sources", href: "#/evidence-sources", description: section.description });
+  if (section.utility === "retention-schedule") destinations.push({ utility: section.utility, kind: "Governed schedule", label: "Data Retention Schedule", href: "#/retention-schedule", description: section.description });
   if (section.utility === "audit-packet") destinations.push({ utility: section.utility, kind: "Working page", label: "Audit Evidence & Packet", href: "#/audit-packet", description: "Review filegrc Evidence and Evidence Artifacts, prepare fieldwork, and build the indexed packet." });
   return destinations;
 }
@@ -2837,8 +3141,13 @@ function renderList(main, type, params = new URLSearchParams()) {
     const seed = type === "retention-schedule-item" ? {
       ...(params.get("title") ? { title: params.get("title") } : {}),
       ...(params.get("informationTypeId") ? { informationTypeIds: [params.get("informationTypeId")] } : {}),
-      ...(params.get("scopeResourceId") ? { scopeResourceIds: [params.get("scopeResourceId")] } : {}),
+      ...(params.getAll("scopeResourceId").length ? { scopeResourceIds: params.getAll("scopeResourceId") } : {}),
       ...(params.get("scheduleDocumentId") ? { scheduleDocumentId: params.get("scheduleDocumentId") } : {})
+    } : type === "document" ? {
+      ...(params.get("title") ? { title: params.get("title") } : {}),
+      ...(params.get("documentKind") ? { documentKind: params.get("documentKind") } : {}),
+      ...(documentScope ? { workflowScope: documentScope } : {}),
+      ...relationshipSeed
     } : {
       ...(params.get("title") ? { title: params.get("title") } : {}),
       ...relationshipSeed
@@ -2873,8 +3182,19 @@ function renderDetail(main, type, id, params = new URLSearchParams()) {
   const entry = resourcesOfType(type).find(({ record }) => record.id === id);
   const definition = state.model.resources[type];
   if (!entry || !definition) return renderNotFound(main);
+  const scheduleContext = params.get("stage") === "policies" && (
+    type === "retention-schedule-item"
+    || type === "document" && entry.record.documentKind === "schedule" && entry.record.workflowScope !== "engagement"
+  );
+  const policiesContext = params.get("stage") === "policies" && (
+    type === "policy"
+    || type === "training"
+    || type === "document" && !auditSpecificDocument(entry.record) && entry.record.documentKind !== "schedule"
+  );
+  const collectionHref = scheduleContext ? "#/retention-schedule" : policiesContext ? "#/policies" : "#/resources/" + encodeURIComponent(type);
+  const collectionLabel = scheduleContext ? "Data Retention Schedule" : policiesContext ? "Policies" : titleCase(definition.pluralTitle);
   if (entry.detailsLoaded === false) {
-    main.innerHTML = '<div class="page"><div class="detail-head"><div><div class="breadcrumbs header-breadcrumbs"><a href="#/resources/' + encodeURIComponent(type) + '">' + esc(titleCase(definition.pluralTitle)) + '</a><span>/</span><span>' + esc(entry.record.title) + '</span></div><h2>' + esc(titleCase(entry.record.title)) + '</h2></div></div><section class="panel detail-loading is-loading" role="status" aria-live="polite" aria-busy="true">' + loadingIndicator("Loading record…") + '</section></div>';
+    main.innerHTML = '<div class="page"><div class="detail-head"><div><div class="breadcrumbs header-breadcrumbs"><a href="' + collectionHref + '">' + esc(collectionLabel) + '</a><span>/</span><span>' + esc(entry.record.title) + '</span></div><h2>' + esc(titleCase(entry.record.title)) + '</h2></div></div><section class="panel detail-loading is-loading" role="status" aria-live="polite" aria-busy="true">' + loadingIndicator("Loading record…") + '</section></div>';
     loadResourceDetail(type, id);
     return;
   }
@@ -2884,12 +3204,11 @@ function renderDetail(main, type, id, params = new URLSearchParams()) {
   const narrative = recordNarrative(entry.record, fields);
   const narrativeNames = new Set(narrative.map(([name]) => name));
   const visible = Object.entries(entry.record).filter(([name]) => (
-    !["id", "type", "title"].includes(name)
+    !["id", "type", "title", "extensions"].includes(name)
     && !fields[name]?.content
     && !narrativeNames.has(name)
   ));
   const content = Object.entries(entry.content);
-  const sourceMetadata = '<div><dt>Source file</dt><dd><code>' + esc(entry.relativePath) + '</code></dd></div><div><dt>Workspace revision</dt><dd>' + (state.git.available ? '<code>' + esc(state.git.shortCommit) + '</code>' : "Unavailable until the workspace is committed.") + '</dd></div>';
   const narrativeContent = narrative.length
     ? '<div class="content-label"><span>Record</span></div><div class="record-prose">' + narrative.map(([name, value]) => '<section><h3>' + esc(titleCase(fields[name]?.label || humanize(name))) + '</h3><p>' + esc(value) + '</p></section>').join("") + '</div>'
     : "";
@@ -2942,26 +3261,41 @@ function renderDetail(main, type, id, params = new URLSearchParams()) {
     ? '<section class="panel detail-main">' + narrativeContent + markdownContent + addRecordContent + '</section>'
     : "";
   const attachmentPanel = type === "evidence" ? evidenceAttachmentPanel(entry) : "";
-  const historyPanel = entry.history?.length
-    ? '<section class="panel detail-history-panel"><div class="panel-head"><h3>File History</h3></div><div class="history">' + entry.history.map((commit) => '<div><code>' + esc(commit.shortCommit) + '</code><span><strong>' + esc(commit.subject) + '</strong><small>' + esc(commit.author) + ' · ' + esc(formatLocalDateTime(commit.timestamp)) + '</small></span></div>').join("") + '</div></section>'
+  const recordFieldsPanel = visible.length
+    ? '<section class="panel detail-support-panel detail-metadata-panel"><div class="panel-head"><h3>Record details</h3></div><dl class="metadata">' + visible.map(([name, value]) => '<div><dt>' + esc(fields[name]?.label || humanize(name)) + '</dt><dd>' + formatValue(name === "status" ? displayStatus(entry.record) : value, name, type) + '</dd></div>').join("") + '</dl></section>'
     : "";
-  const participationPanel = entry.historyLoaded === false
-    ? '<section class="panel detail-support-panel" role="status" aria-live="polite" aria-busy="true"><div class="panel-head"><h3>Participation</h3></div><p class="muted is-loading">' + loadingIndicator("Loading participation and file history…") + '</p></section>'
-    : entry.historyError
-      ? '<section class="panel detail-support-panel" role="status" aria-live="polite"><div class="panel-head"><h3>Participation</h3></div><p class="muted">Participation and file history are unavailable. Reload the record to try again.</p></section>'
-      : personParticipation(entry);
   const supportPanels = renderDetailSupport({
     hasRecordBody,
     workflowPanel: workflowGuidance({ type, id, title: "Next steps", workflow: entry.workflow }) || recordCompletionState(entry.record),
-    metadataPanel: '<section class="panel detail-support-panel detail-metadata-panel"><div class="panel-head"><h3>Record details</h3></div><dl class="metadata">' + sourceMetadata + visible.map(([name, value]) => '<div><dt>' + esc(fields[name]?.label || humanize(name)) + '</dt><dd>' + formatValue(name === "status" ? displayStatus(entry.record) : value, name, type) + '</dd></div>').join("") + '</dl></section>',
-    attachmentPanel,
-    participationPanel,
-    connectionsPanel: resourceConnections(entry),
-    historyPanel
+    metadataPanel: recordFieldsPanel,
+    attachmentPanel
   });
-  main.innerHTML = '<div class="page"><div class="detail-head"><div><div class="breadcrumbs header-breadcrumbs"><a href="#/resources/' + encodeURIComponent(type) + '">' + esc(titleCase(definition.pluralTitle)) + '</a><span>/</span><span>' + esc(entry.record.title) + '</span></div><h2>' + esc(titleCase(entry.record.title)) + '</h2></div><div class="actions">' + reportingRouteSetActions + auditCycleAction + auditPopulationCorrectionAction + (type === "audit" ? '<a class="button primary" href="#/audit-packet?auditId=' + encodeURIComponent(entry.record.id) + '">Audit Evidence &amp; Packet</a>' : "") + governanceActions + lifecycleActions + issueActions + addRecordContentAction + (!state.readOnly && !routeSetLocked ? '<button class="button" id="edit-resource">Edit</button>' + (!definition.singleton ? '<button class="button danger" id="delete-resource">Delete</button>' : "") : "") + '</div></div><div class="detail-grid ' + (hasRecordBody ? "" : "detail-grid-structured") + '">' + detailMain + supportPanels + '</div></div>';
+  const mayDelete = !state.readOnly && !routeSetLocked && !definition.singleton;
+  const recordMenu = '<details class="record-overflow"><summary aria-label="More record actions" title="More record actions"><svg viewBox="0 0 18 4" aria-hidden="true"><circle cx="2" cy="2" r="2"></circle><circle cx="9" cy="2" r="2"></circle><circle cx="16" cy="2" r="2"></circle></svg></summary><div class="record-overflow-menu" aria-label="Record actions"><button type="button" data-record-modal="info">Record info</button><button type="button" data-record-modal="connections">Connections</button><button type="button" data-record-modal="history"' + (entry.historyLoaded === false ? ' disabled' : '') + '>File history' + (entry.historyLoaded === false ? ' (loading)' : '') + '</button>' + (mayDelete ? '<div class="record-overflow-separator"></div><button class="danger-text" type="button" data-delete-resource>Delete record</button>' : '') + '</div></details>';
+  main.innerHTML = '<div class="page"><div class="detail-head"><div><div class="breadcrumbs header-breadcrumbs"><a href="' + collectionHref + '">' + esc(collectionLabel) + '</a><span>/</span><span>' + esc(entry.record.title) + '</span></div><h2>' + esc(titleCase(entry.record.title)) + '</h2></div><div class="actions">' + reportingRouteSetActions + auditCycleAction + auditPopulationCorrectionAction + (type === "audit" ? '<a class="button primary" href="#/audit-packet?auditId=' + encodeURIComponent(entry.record.id) + '">Audit Evidence &amp; Packet</a>' : "") + governanceActions + lifecycleActions + issueActions + addRecordContentAction + (!state.readOnly && !routeSetLocked ? '<button class="button" id="edit-resource">Edit</button>' : "") + recordMenu + '</div></div><div class="detail-grid ' + (hasRecordBody ? "" : "detail-grid-structured") + '">' + detailMain + supportPanels + '</div></div>';
   main.querySelectorAll("[data-completion-requirements]").forEach((button) => button.addEventListener("click", () => openCompletionRequirementsDialog(button.dataset.completionRequirements)));
   main.querySelector("#edit-resource")?.addEventListener("click", () => openEditor(type, entry));
+  main.querySelectorAll("[data-record-modal]").forEach((button) => button.addEventListener("click", () => {
+    button.closest("details")?.removeAttribute("open");
+    openRecordUtilityDialog(entry, button.dataset.recordModal);
+  }));
+  const overflowMenu = main.querySelector(".record-overflow");
+  const stopOutsideDismissal = () => document.removeEventListener("click", dismissOnOutsideClick);
+  const dismissOnOutsideClick = (event) => {
+    if (overflowMenu.contains(event.target)) return;
+    overflowMenu.removeAttribute("open");
+    stopOutsideDismissal();
+  };
+  overflowMenu?.addEventListener("toggle", () => {
+    stopOutsideDismissal();
+    if (overflowMenu.open) queueMicrotask(() => document.addEventListener("click", dismissOnOutsideClick));
+  });
+  overflowMenu?.addEventListener("keydown", (event) => {
+    if (event.key !== "Escape" || !overflowMenu.open) return;
+    overflowMenu.removeAttribute("open");
+    overflowMenu.querySelector("summary")?.focus();
+  });
+  recordOverflowCleanup = stopOutsideDismissal;
   main.querySelector("[data-external-reviewer-governance]")?.addEventListener("click", openExternalReviewerGovernanceDialog);
   main.querySelector("[data-next-audit-cycle]")?.addEventListener("click", () => openNextAuditCycleDialog(entry.record));
   main.querySelector("[data-correct-audit-population]")?.addEventListener("click", async () => {
@@ -3072,7 +3406,8 @@ function renderDetail(main, type, id, params = new URLSearchParams()) {
   }));
   main.querySelector("#add-record-content")?.addEventListener("click", () => openEditor(type, entry, { addRecordContent: true }));
   main.querySelectorAll("[data-edit-content]").forEach((button) => button.addEventListener("click", () => openContentEditor(entry, button.dataset.editContent)));
-  main.querySelector("#delete-resource")?.addEventListener("click", async () => {
+  main.querySelector("[data-delete-resource]")?.addEventListener("click", async () => {
+    main.querySelector(".record-overflow")?.removeAttribute("open");
     const repositoryPrefetch = prefetchRepositoryForReview();
     if (!await confirmAction({
       kicker: "Delete record",
@@ -3098,17 +3433,50 @@ function renderDetail(main, type, id, params = new URLSearchParams()) {
   }
 }
 
-function renderDetailSupport({ hasRecordBody, workflowPanel, metadataPanel, attachmentPanel, participationPanel, connectionsPanel, historyPanel }) {
-  const panels = workflowPanel + metadataPanel + attachmentPanel + participationPanel + connectionsPanel + historyPanel;
+function renderDetailSupport({ hasRecordBody, workflowPanel, metadataPanel, attachmentPanel }) {
+  const panels = workflowPanel + metadataPanel + attachmentPanel;
   if (hasRecordBody) return '<aside>' + panels + '</aside>';
   const stacks = [
     { name: "guidance", content: workflowPanel },
-    { name: "record", content: metadataPanel + attachmentPanel + historyPanel },
-    { name: "relationships", content: participationPanel + connectionsPanel }
+    { name: "record", content: metadataPanel + attachmentPanel }
   ].filter(({ content }) => content);
   return '<aside class="detail-support-columns">' + stacks.map(({ name, content }) => '<div class="detail-support-stack ' + name + '">' + content + '</div>').join("") + '</aside>';
 }
 
+function openRecordUtilityDialog(entry, view) {
+  const dialog = document.createElement("dialog");
+  dialog.className = "alert-dialog record-utility-dialog";
+  const definitions = {
+    info: {
+      kicker: "Record info",
+      title: entry.record.title,
+      body: '<dl class="metadata record-info"><div><dt>Record ID</dt><dd><code>' + esc(entry.record.id) + '</code></dd></div><div><dt>Type</dt><dd>' + esc(state.model.resources[entry.record.type].title) + '</dd></div><div><dt>Source file</dt><dd><code>' + esc(entry.relativePath) + '</code></dd></div><div><dt>Workspace revision</dt><dd>' + (state.git.available ? '<code>' + esc(state.git.shortCommit) + '</code>' : "Unavailable until the workspace is committed.") + '</dd></div>' + (entry.record.extensions ? '<div><dt>Extensions</dt><dd>' + formatValue(entry.record.extensions, "extensions", entry.record.type) + '</dd></div>' : '') + '</dl><details class="record-json"><summary>View raw JSON</summary><pre class="compact-json">' + esc(JSON.stringify(entry.record, null, 2)) + '</pre></details>'
+    },
+    connections: {
+      kicker: "Connections",
+      title: entry.record.title,
+      body: (personParticipation(entry, true) + resourceConnections(entry, true)) || '<p class="muted">This record has no connected records.</p>'
+    },
+    history: {
+      kicker: "File history",
+      title: entry.record.title,
+      body: entry.historyError
+        ? '<p class="muted">File history is unavailable. Reload the record to try again.</p>'
+        : entry.history?.length
+          ? '<div class="history">' + entry.history.map((commit) => '<div><code>' + esc(commit.shortCommit) + '</code><span><strong>' + esc(commit.subject) + '</strong><small>' + esc(commit.author) + ' · ' + esc(formatLocalDateTime(commit.timestamp)) + '</small></span></div>').join("") + '</div>'
+          : '<p class="muted">No committed history is available for this record.</p>'
+    }
+  };
+  const definition = definitions[view];
+  if (!definition) return;
+  dialog.setAttribute("aria-labelledby", "record-utility-title");
+  dialog.innerHTML = '<div class="dialog-head"><div><p class="kicker">' + esc(definition.kicker) + '</p><h2 id="record-utility-title">' + esc(titleCase(definition.title)) + '</h2></div><button type="button" class="icon-button" aria-label="Close">×</button></div><div class="record-utility-body">' + definition.body + '</div><div class="dialog-actions"><button type="button" class="button primary">Close</button></div>';
+  document.body.append(dialog);
+  dialog.querySelectorAll("button").forEach((button) => button.addEventListener("click", () => dialog.close()));
+  dialog.addEventListener("close", () => dialog.remove(), { once: true });
+  dialog.showModal();
+}
+
 function evidenceAttachmentPanel(entry) {
   const attachments = (entry.record.filePaths || []).map((path) => ({
     path,
@@ -3292,7 +3660,7 @@ function recordContentDefinition(type) {
   };
 }
 
-function personParticipation(entry) {
+function personParticipation(entry, expanded = false) {
   if (entry.record.type !== "person") return "";
   const personId = entry.record.id;
   const appointments = resourcesOfType("appointment")
@@ -3332,8 +3700,8 @@ function personParticipation(entry) {
   const count = affiliations.length + assignments.length;
   if (!count) return "";
   return '<section class="panel connections-panel"><div class="panel-head"><h3>Participation</h3><span>' + count + '</span></div>'
-    + personParticipationGroup("Appointments and teams", affiliations, 8, "more appointments or teams")
-    + personParticipationGroup("Assigned records", assignments, 10, "more assigned records")
+    + personParticipationGroup("Appointments and teams", affiliations, expanded ? affiliations.length : 8, "more appointments or teams")
+    + personParticipationGroup("Assigned records", assignments, expanded ? assignments.length : 10, "more assigned records")
     + '</section>';
 }
 
@@ -3346,7 +3714,7 @@ function personParticipationGroup(title, rows, limit, moreLabel) {
     + '</div>';
 }
 
-function resourceConnections(entry) {
+function resourceConnections(entry, expanded = false) {
   const relatedPeopleOnly = entry.record.type === "person";
   const connections = new Map();
   const entriesById = new Map(state.resources.map((item) => [item.record.id, item]));
@@ -3381,7 +3749,7 @@ function resourceConnections(entry) {
     return firstType - secondType || first.entry.record.title.localeCompare(second.entry.record.title);
   });
   if (!sorted.length) return "";
-  const visible = sorted.slice(0, 14);
+  const visible = expanded ? sorted : sorted.slice(0, 14);
   return '<section class="panel connections-panel"><div class="panel-head"><h3>' + (relatedPeopleOnly ? "Related people" : "Connections") + '</h3><span>' + sorted.length + '</span></div><div class="connections">' + visible.map(({ entry: connected, reasons }) => '<a href="#/resource/' + encodeURIComponent(connected.record.type) + '/' + encodeURIComponent(connected.record.id) + '"><strong>' + esc(connected.record.title) + '</strong><small>' + esc([...reasons].join(" · ")) + '</small></a>').join("") + '</div>' + (sorted.length > visible.length ? '<p class="connections-more">' + (sorted.length - visible.length) + ' more connections are available through the linked records.</p>' : "") + '</section>';
 }
 
@@ -6088,7 +6456,9 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 @media(max-width:520px){.collection-review-complete-summary{flex:1 1 180px;min-width:0;flex-wrap:wrap}.collection-review-complete-summary .collection-review-result{min-width:0;flex-wrap:wrap}.collection-review-complete-summary .collection-review-result span{overflow-wrap:anywhere}.collection-review-panel.current .button{margin-left:0}}
 .evidence-attachments .panel-head{align-items:flex-start}.evidence-attachments .panel-head h3{margin:0}.evidence-attachments .panel-head p{margin:4px 0 0;color:var(--muted);font-size:10px}.evidence-attachments ul{list-style:none;margin:0;padding:0}.evidence-attachments li{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:9px 0;border-top:1px solid var(--line)}.evidence-attachments li:first-child{border-top:0}.evidence-attachments strong,.evidence-attachments small{display:block}.evidence-attachments strong{font-size:11px}.evidence-attachments small{margin-top:2px;color:var(--muted);font-size:9px;overflow-wrap:anywhere}.evidence-attachments .attachment-empty{display:block;color:var(--muted);font-size:10px;line-height:1.45}.danger-text{color:var(--red)}
 .policy-lifecycle-note.single{grid-template-columns:1fr}
-.policy-content-table{margin-top:22px}.policy-content-table>.section-head{align-items:end}.policy-content-table>.section-head h2{font:500 27.6px Georgia,serif;margin:5px 0 6px}.policy-content-table>.section-head p:not(.kicker){max-width:720px;margin:0;color:var(--muted);font-size:12px;line-height:1.5}.policy-content-tools{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.policy-content-tools input[type="search"]{min-width:210px;border:1px solid var(--line);border-radius:7px;background:var(--field);padding:9px 11px}.history-toggle{display:flex;align-items:center;gap:6px;color:var(--muted);font-size:11px}.policy-content-add{position:relative}.policy-content-add>summary{list-style:none}.policy-content-add>summary::-webkit-details-marker{display:none}.policy-content-add>div{position:absolute;right:0;z-index:5;display:grid;min-width:150px;margin-top:6px;padding:5px;border:1px solid var(--line);border-radius:8px;background:var(--panel);box-shadow:var(--shadow)}.policy-content-add button{border:0;border-radius:5px;background:transparent;padding:8px 10px;color:var(--ink);text-align:left;cursor:pointer}.policy-content-add button:hover{background:var(--accent-soft)}.policy-content-type span,.policy-content-approval span{display:block}.policy-content-type small,.policy-content-approval small{display:block;margin-top:3px;color:var(--muted);font-size:9.6px}.policy-content-count{margin:9px 2px 0;color:var(--muted);font-size:10.8px;text-align:right}
+.policy-content-table{margin-top:22px}.policy-content-table>.section-head{align-items:end}.policy-content-table>.section-head h2{font:500 27.6px Georgia,serif;margin:5px 0 6px}.policy-content-table>.section-head p:not(.kicker){max-width:720px;margin:0;color:var(--muted);font-size:12px;line-height:1.5}.policy-content-tools{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.policy-content-tools input[type="search"]{min-width:210px;border:1px solid var(--line);border-radius:7px;background:var(--field);padding:9px 11px}.history-toggle{display:flex;align-items:center;gap:6px;color:var(--muted);font-size:11px}.policy-content-add{position:relative}.policy-content-add>summary{list-style:none}.policy-content-add>summary::-webkit-details-marker{display:none}.policy-content-add>div{position:absolute;right:0;z-index:5;display:grid;min-width:150px;margin-top:6px;padding:5px;border:1px solid var(--line);border-radius:8px;background:var(--panel);box-shadow:var(--shadow)}.policy-content-add button{border:0;border-radius:5px;background:transparent;padding:8px 10px;color:var(--ink);text-align:left;cursor:pointer}.policy-content-add button:hover{background:var(--accent-soft)}.policy-content-type span,.policy-content-approval span{display:block}.policy-content-type small,.policy-content-approval small{display:block;margin-top:3px;color:var(--muted);font-size:9.6px}.policy-content-filter-empty{margin:10px 0 0;padding:16px;border:1px dashed var(--line);border-radius:8px;color:var(--muted);font-size:12px;text-align:center}.policy-content-count{margin:9px 2px 0;color:var(--muted);font-size:10.8px;text-align:right}
+.policy-stage-pages{margin-top:30px}.retention-schedule-page .page-intro{margin-bottom:18px}.retention-schedule-page .page-intro .actions{flex-wrap:wrap;justify-content:flex-end}.retention-summary{margin-bottom:28px;border-top:1px solid var(--line);border-bottom:1px solid var(--line)}.retention-summary>div{display:grid;grid-template-columns:150px minmax(0,1fr) auto;gap:16px;align-items:center;padding:13px 0}.retention-summary>div+div{border-top:1px solid var(--line)}.retention-summary-label{color:var(--muted);font-size:10.8px;font-weight:700;text-transform:uppercase;letter-spacing:.06em}.retention-summary a{text-decoration:none}.retention-summary strong,.retention-summary small{display:block}.retention-summary strong{font-size:13.2px}.retention-summary small{margin-top:3px;color:var(--muted);font-size:10.8px}.retention-rows h2,.retention-issues h2{font:500 24px Georgia,serif;margin:5px 0 7px}.retention-rows .section-head{align-items:end}.retention-rows .section-head p:not(.kicker){max-width:760px;margin:0;color:var(--muted);font-size:12px;line-height:1.55}.retention-table-tools{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.retention-table-tools input[type="search"]{min-width:210px;border:1px solid var(--line);border-radius:7px;background:var(--field);padding:9px 11px}.retention-rows .record-table-wrap{margin-top:12px}.retention-rows .record-title+small{display:block;max-width:380px;margin-top:4px;color:var(--muted);font-size:9.6px;line-height:1.4}.retention-filter-empty{margin:10px 0 0;padding:16px;border:1px dashed var(--line);border-radius:8px;color:var(--muted);font-size:12px;text-align:center}.retention-row-count{margin:9px 2px 0;color:var(--muted);font-size:10.8px;text-align:right}.retention-issues{margin-top:28px}.retention-issue-list{border-top:1px solid var(--line)}.retention-issue-list>a{display:flex;align-items:center;justify-content:space-between;gap:24px;padding:12px 2px;border-bottom:1px solid var(--line);text-decoration:none}.retention-issue-list strong,.retention-issue-list small{display:block}.retention-issue-list strong{font-size:12px}.retention-issue-list small{margin-top:3px;color:var(--muted);font-size:10.4px;line-height:1.45}.retention-issue-list b{color:var(--accent);font-size:11px}.retention-schedule-page>.collection-review-panel{margin-top:28px;margin-bottom:0}
+@media(max-width:760px){.retention-summary>div{grid-template-columns:1fr;gap:7px}.retention-summary>div>.badge{justify-self:start}.retention-schedule-page .page-intro .actions{justify-content:flex-start}}
 .policy-library-proposals{min-width:0}.policy-library-proposals article,.policy-library-proposals details{min-width:0}.policy-library-proposals pre{box-sizing:border-box;max-width:100%;overflow:auto;padding:9px;border:1px solid var(--line);border-radius:6px;background:var(--paper);font-size:9px;line-height:1.45}
 .policy-activation-actions{display:flex;justify-content:flex-end;margin-top:14px;padding-top:12px;border-top:1px solid var(--line)}
 .policy-activation-review-warning{margin-top:14px;padding:12px 14px;border:1px solid #d8bd78;border-radius:8px;background:#fff8e8}.policy-activation-review-warning>strong{font-size:12px}.policy-activation-review-warning ul{display:grid;gap:5px;margin:9px 0;padding-left:20px;font-size:10.8px}.policy-activation-review-warning p{margin:9px 0 0;color:#6d4917;font-size:11px;line-height:1.5}
@@ -6112,7 +6482,7 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 .reconciliation-panel>p{margin:0 0 12px;color:var(--muted);font-size:12px;line-height:1.5}.reconciliation-candidates{display:grid;gap:9px}.reconciliation-candidate{display:grid;grid-template-columns:minmax(0,1fr) minmax(280px,.8fr);gap:16px;padding:13px;border:1px solid var(--line);border-radius:8px;background:var(--surface-soft)}.reconciliation-candidate strong{margin-left:8px;font-size:13.2px}.reconciliation-candidate p{margin:7px 0;color:var(--muted);font-size:12px;line-height:1.5}.reconciliation-candidate small{display:block;overflow-wrap:anywhere;color:var(--muted);font-size:9.6px}.reconciliation-actions{display:grid;gap:8px;justify-items:end;align-content:center}.reconciliation-actions>code{max-width:100%;overflow-wrap:anywhere;color:var(--muted);font-size:9.6px;text-align:right}
 .onboarding-save-status{color:var(--muted);font-size:10.8px;line-height:1.35}.onboarding-save-status:empty{display:none}.onboarding-save-status:not(:empty){order:-1;flex-basis:100%;margin-bottom:4px}.onboarding-retry-sync{margin-top:9px}.detail-loading{color:var(--muted)}
 .save-status{min-height:16px;color:var(--muted);font-size:10.8px;line-height:1.35}
-.page-intro,.detail-head{align-items:center;margin-bottom:12px}.actions{align-items:center}.detail-head>div:first-child{min-width:0}.detail-head h2{margin:7px 0}.detail-head .header-breadcrumbs{margin:0;font-size:10.8px;line-height:normal;min-height:11px;align-items:center}.header-breadcrumbs span:last-child{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:60ch}
+.page-intro,.detail-head{align-items:center;margin-bottom:12px}.actions{align-items:center;justify-content:flex-end;flex-wrap:wrap}.detail-head>div:first-child{min-width:0}.detail-head h2{margin:7px 0}.detail-head .header-breadcrumbs{margin:0;font-size:10.8px;line-height:normal;min-height:11px;align-items:center}.header-breadcrumbs span:last-child{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:60ch}.record-overflow{position:relative;flex:0 0 auto;margin-left:auto}.record-overflow>summary{display:grid;place-items:center;width:38px;height:38px;border:1px solid var(--line);border-radius:7px;background:var(--panel);color:var(--ink);cursor:pointer;list-style:none}.record-overflow>summary::-webkit-details-marker{display:none}.record-overflow>summary svg{display:block;width:18px;height:4px;fill:currentColor}.record-overflow>summary:hover,.record-overflow[open]>summary{border-color:var(--accent-light);background:var(--accent-soft);color:var(--accent)}.record-overflow-menu{position:absolute;z-index:12;top:calc(100% + 6px);right:0;display:grid;width:190px;padding:6px;border:1px solid var(--line);border-radius:9px;background:var(--panel);box-shadow:0 14px 36px rgba(0,0,53,.16)}.record-overflow-menu button{width:100%;border:0;border-radius:6px;padding:9px 10px;background:none;color:var(--ink);font-size:13.2px;text-align:left;cursor:pointer}.record-overflow-menu button:hover{background:var(--surface-soft)}.record-overflow-menu button:disabled{cursor:wait;color:var(--muted)}.record-overflow-menu .danger-text{color:var(--red)}.record-overflow-separator{height:1px;margin:5px 4px;background:var(--line)}.record-utility-dialog{width:min(680px,calc(100vw - 30px));max-height:min(760px,calc(100vh - 30px));overflow:auto}.record-utility-body{display:grid;gap:12px;margin:19px 0}.record-utility-body>.panel{box-shadow:none}.record-info>div:first-child{border-top:0}.record-json{border-top:1px solid var(--line);padding-top:13px}.record-json summary{color:var(--accent);font-size:13.2px;font-weight:750;cursor:pointer}.record-json pre{max-height:360px;overflow:auto;margin:12px 0 0}.record-utility-dialog .history{max-height:none}
 .not-found{max-width:620px;padding:28px}.not-found h2{font-family:Georgia,serif;font-size:37.2px;font-weight:500;margin:7px 0}.not-found>p:not(.kicker){margin:0;color:var(--muted);font-size:15.6px}.not-found .page-actions{justify-content:flex-start;margin-top:22px}
 .button.danger-action{background:var(--red);border-color:var(--red);color:#fff}
 @media(max-width:1200px){.readiness-flow{grid-template-columns:repeat(3,minmax(0,1fr))}.audit-engagement{grid-template-columns:1fr 1fr}.audit-engagement .button{grid-column:1/-1;justify-self:start}}
@@ -6123,12 +6493,12 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 .detail-grid aside .panel{width:100%;max-height:min(520px,65vh);overflow:auto;overscroll-behavior:contain;scrollbar-gutter:stable}.detail-grid aside .workflow-guidance,.detail-grid aside .resource-review-criteria{margin:0}.detail-grid aside .resource-review-criteria{padding:21px}.detail-grid aside .detail-workflow-panel{max-height:min(440px,60vh)}.detail-grid aside .detail-review-panel{max-height:min(300px,50vh)}.detail-grid aside .workflow-findings,.detail-grid aside .resource-review-criteria ul{grid-template-columns:1fr}.detail-support-stack{display:grid;min-width:0;gap:14px;align-content:start}
 @media(max-width:760px){.detail-grid aside{order:-1}}
 @media(max-width:760px){.reconciliation-candidate{grid-template-columns:1fr}.reconciliation-actions{justify-items:start}.reconciliation-actions>code{text-align:left}}
-@media(max-width:760px){.detail-grid-structured .detail-support-columns{display:flex;flex-direction:column}.detail-grid-structured .detail-support-stack{display:contents}.detail-grid-structured .detail-history-panel{order:1}}
+@media(max-width:760px){.detail-grid-structured .detail-support-columns{display:flex;flex-direction:column}.detail-grid-structured .detail-support-stack{display:contents}}
 @media(max-width:760px){.guide-review ul,.resource-review-criteria ul{grid-template-columns:1fr}.collection-review-head,.collection-review-foot{align-items:stretch;flex-direction:column}.record-workflow-action{min-width:0}}
+@media(max-width:760px){.policy-content-table>.section-head{display:block}.policy-content-tools{justify-content:flex-start;margin-top:15px}.policy-content-tools>label:first-child{flex:1 1 100%;width:100%}.policy-content-tools input[type="search"]{width:100%;min-width:0}}
 @media(max-width:520px){.onboarding-form,.onboarding-sections,.setup-steps{grid-template-columns:1fr}.onboarding-form label.wide{grid-column:auto}.onboarding-actions{flex-wrap:wrap}.onboarding-skip{width:100%;order:3;margin:3px 0 0}.readiness-flow{grid-template-columns:1fr}.obligation-card-foot{align-items:flex-start;flex-direction:column}.obligation-action{align-self:flex-start}}
 @media(min-width:761px){.detail-grid{grid-template-columns:minmax(270px,1fr) minmax(0,2fr)}.detail-grid aside{grid-column:1;grid-row:1}.detail-main{grid-column:2;grid-row:1}}
 @media(min-width:761px){.detail-grid.detail-grid-structured{grid-template-columns:1fr}.detail-grid-structured aside{grid-column:1;grid-row:1}.detail-grid-structured .detail-support-columns{grid-template-columns:repeat(2,minmax(0,1fr))}}
-@media(min-width:1300px){.detail-grid-structured .detail-support-columns{grid-template-columns:repeat(3,minmax(0,1fr))}}
 @media(max-width:760px){.sidebar{visibility:hidden;transition:transform .2s,visibility 0s .2s}.sidebar.shown{visibility:visible;transition-delay:0s}.nav-close{display:grid;place-items:center;position:absolute;top:25px;right:18px;width:34px;height:34px;border:1px solid #5966a4;border-radius:50%;background:#11174a;color:#eef1ff;font-size:24px;cursor:pointer}.nav-scrim{display:block;position:fixed;inset:0;border:0;background:rgba(0,0,24,.38);opacity:0;pointer-events:none;transition:opacity .2s;z-index:15}.sidebar.shown+.nav-scrim{opacity:1;pointer-events:auto}.pagination{justify-content:space-between;gap:8px}.page-status{min-width:0}}
 @media(max-width:760px){.topbar{height:56px}.topbar>div:first-of-type{display:none}.topbar-readiness{flex:0 1 220px;min-width:120px}.nav-close{font-size:0}.nav-close:before,.nav-close:after{content:"";position:absolute;width:13px;height:2px;border-radius:2px;background:currentColor;transform:rotate(45deg)}.nav-close:after{transform:rotate(-45deg)}}