filegrc 0.6.3 → 0.6.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "filegrc",
-  "version": "0.6.3",
+  "version": "0.6.5",
   "description": "Zero-dependency Git-native GRC engine",
   "license": "MIT",
   "repository": {

package/src/batch-review.js

@@ -1,7 +1,13 @@
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
 import { applyResourceBatch } from "./files.js";
-import { getGitSummary } from "./git.js";
-import { loadWorkspace } from "./workspace.js";
+import { getWorkspaceRevisionSnapshot } from "./git.js";
+import { serializeWorkspaceMutation } from "./mutation.js";
+import { resolveDataPath } from "./paths.js";
 import { resolveProgram } from "./program.js";
+import { markdownEntries } from "./resource-markdown.js";
+import { assessWorkflow, buildWorkflowDelta } from "./workflow.js";
+import { loadWorkspace } from "./workspace.js";
 
 const REVIEWABLE_TYPES = new Set([
   "requirement",
@@ -11,7 +17,8 @@ const REVIEWABLE_TYPES = new Set([
 ]);
 
 export async function scaffoldApplicabilityReview(input = process.cwd(), options = {}) {
-  const loaded = await loadWorkspace(input);
+  const context = await applicabilityReviewContext(input);
+  const { loaded } = context;
   if (!["3", "4"].includes(String(loaded.model.modelVersion))) {
     throw new Error("Batch applicability review requires a model v3 or v4 workspace.");
   }
@@ -32,6 +39,7 @@ export async function scaffoldApplicabilityReview(input = process.cwd(), options
     && !["retired", "superseded"].includes(record.status)
   ));
   return {
+    basis: context.basis,
     reviewedByIds: [],
     reviewedOn: null,
     decisions: records
@@ -45,14 +53,25 @@ export async function scaffoldApplicabilityReview(input = process.cwd(), options
 }
 
 export async function planApplicabilityReview(input = process.cwd(), options = {}) {
-  const loaded = await loadWorkspace(input);
+  const context = await applicabilityReviewContext(input);
+  return planApplicabilityReviewWithContext(context, options);
+}
+
+function planApplicabilityReviewWithContext(context, options) {
+  const { basis, loaded } = context;
   if (!["3", "4"].includes(String(loaded.model.modelVersion))) {
     throw new Error("Batch applicability review requires a model v3 or v4 workspace.");
   }
   if (!Array.isArray(options.decisions) || !options.decisions.length) {
     throw new Error("Applicability review needs at least one decision.");
   }
+  if (options.basis !== undefined) assertApplicabilityReviewBasis(options.basis, basis);
   const byId = new Map(loaded.resources.map((record) => [record.id, record]));
+  const revisionById = new Map(loaded.entries.map((entry) => [entry.record.id, entry.revision]));
+  const expectedRevisions = options.expectedRevisions ?? {};
+  if (Array.isArray(expectedRevisions) || typeof expectedRevisions !== "object" || expectedRevisions === null) {
+    throw new Error("Batch expected revisions must be keyed by resource ID.");
+  }
   const program = resolveProgram(loaded, options.programId);
   const v4RequirementDecisions = [];
   const update = options.decisions.flatMap((decision) => {
@@ -62,12 +81,6 @@ export async function planApplicabilityReview(input = process.cwd(), options = {
     }
     const reviewedByIds = [...new Set((decision.reviewedByIds || options.reviewedByIds || []).map(String))];
     const reviewedOn = String(decision.reviewedOn || options.reviewedOn || "").trim();
-    const scopeRevision = String(
-      decision.scopeRevision
-      || options.scopeRevision
-      || getGitSummary(loaded.root).commit
-      || "uncommitted"
-    ).trim();
     const rationale = String(decision.rationale || "").trim();
     const result = String(decision.decision || "").trim();
     if (!["applicable", "not-applicable", "externally-managed", "zero-population"].includes(result)) {
@@ -83,7 +96,7 @@ export async function planApplicabilityReview(input = process.cwd(), options = {
         rationale,
         reviewedByIds,
         reviewedOn,
-        scopeRevision
+        scopeRevision: basis.scopeRevision
       }
     };
     if (record.type === "requirement") {
@@ -91,7 +104,14 @@ export async function planApplicabilityReview(input = process.cwd(), options = {
         throw new Error(`Requirement "${record.id}" must be applicable or not-applicable.`);
       }
       if (String(loaded.model.modelVersion) === "4") {
-        v4RequirementDecisions.push({ requirementId: record.id, decision: result, rationale, reviewedByIds, reviewedOn, scopeRevision });
+        v4RequirementDecisions.push({
+          requirementId: record.id,
+          decision: result,
+          rationale,
+          reviewedByIds,
+          reviewedOn,
+          scopeRevision: basis.scopeRevision
+        });
         return [];
       }
       next.applicability = result;
@@ -113,20 +133,125 @@ export async function planApplicabilityReview(input = process.cwd(), options = {
   }
   return {
     operation: "applicability-review",
+    basis,
     reviewedIds: options.decisions.map(({ id }) => id),
     changes: {
       update,
-      expectedRevisions: options.expectedRevisions || {},
+      expectedRevisions: Object.fromEntries(update.map((record) => [
+        record.id,
+        expectedRevisions[record.id] || revisionById.get(record.id)
+      ])),
       validateWholeWorkspace: true
     }
   };
 }
 
-export async function applyApplicabilityReview(input = process.cwd(), options = {}) {
+export function applyApplicabilityReview(input = process.cwd(), options = {}) {
+  return applyApplicabilityReviewWithContext(input, options);
+}
+
+export async function applyApplicabilityReviewWithContext(input = process.cwd(), options = {}, contextOptions = {}) {
   if (options.confirmed !== true) {
     throw new Error("Preview the applicability decisions and confirm the write.");
   }
-  const plan = await planApplicabilityReview(input, options);
-  const result = await applyResourceBatch(input, plan.changes);
-  return { ...plan, result };
+  return serializeWorkspaceMutation(input, async (root) => {
+    const context = await applicabilityReviewContext(root, contextOptions);
+    if (options.basis === undefined) {
+      throw new Error("Applicability review apply requires the basis returned by scaffold or --preview --json. Generate the decisions again before confirming the write.");
+    }
+    const plan = planApplicabilityReviewWithContext(context, options);
+    const before = contextOptions.includeWorkflowDelta
+      ? await assessWorkflow(context.loaded, { git: workflowGitState(context.repository) })
+      : null;
+    const result = await applyResourceBatch(root, plan.changes);
+    if (!before) return { ...plan, result };
+    const after = await assessWorkflow(result.validation.loaded, {
+      git: workflowGitState(context.repository),
+      validation: result.validation
+    });
+    return {
+      ...plan,
+      result,
+      workflowDelta: buildWorkflowDelta(before, after)
+    };
+  });
+}
+
+async function applicabilityReviewContext(input, options = {}) {
+  const loaded = await loadWorkspace(input);
+  const repository = options.repositorySnapshot ?? await getWorkspaceRevisionSnapshot(loaded.root);
+  return {
+    basis: await applicabilityReviewBasis(loaded, repository),
+    loaded,
+    repository
+  };
+}
+
+function workflowGitState(repository) {
+  return {
+    ...repository,
+    commit: repository.currentCommit ?? repository.commit ?? null
+  };
+}
+
+async function applicabilityReviewBasis(loaded, repository) {
+  const scopeFingerprint = await applicabilityScopeFingerprint(loaded);
+  const commit = repository.currentCommit ?? repository.commit ?? null;
+  const clean = repository.clean === true || repository.wholeWorktreeClean === true;
+  return {
+    scopeRevision: commit && clean ? commit : `uncommitted:${scopeFingerprint}`,
+    scopeFingerprint
+  };
+}
+
+function assertApplicabilityReviewBasis(expected, current) {
+  if (
+    !expected
+    || Array.isArray(expected)
+    || typeof expected !== "object"
+    || typeof expected.scopeRevision !== "string"
+    || typeof expected.scopeFingerprint !== "string"
+  ) {
+    throw new Error("Applicability review basis must include its scope revision and scope fingerprint. Generate a new scaffold or preview.");
+  }
+  if (
+    expected.scopeRevision !== current.scopeRevision
+    || expected.scopeFingerprint !== current.scopeFingerprint
+  ) {
+    throw new Error("The workspace scope changed after this applicability review was prepared. Generate a new preview before confirming the write.");
+  }
+}
+
+async function applicabilityScopeFingerprint(loaded) {
+  const hash = createHash("sha256");
+  hash.update(`model\0${loaded.model.modelVersion}\0`);
+  for (const entry of [...loaded.entries].sort((left, right) => compareText(left.relativePath, right.relativePath))) {
+    hash.update(`record\0${entry.relativePath}\0${stableJson(entry.record)}\0`);
+    for (const markdown of markdownEntries(loaded.model, entry.record).sort((left, right) => (
+      compareText(left.path, right.path)
+    ))) {
+      try {
+        const source = await readFile(resolveDataPath(loaded.root, markdown.path), "utf8");
+        hash.update(`markdown\0${markdown.path}\0${source.length}\0${source}\0`);
+      } catch (error) {
+        if (error.code !== "ENOENT") throw error;
+        hash.update(`markdown-missing\0${markdown.path}\0`);
+      }
+    }
+  }
+  return hash.digest("hex");
+}
+
+function compareText(left, right) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
+
+function stableJson(value) {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value).sort().map((key) => (
+      `${JSON.stringify(key)}:${stableJson(value[key])}`
+    )).join(",")}}`;
+  }
+  return JSON.stringify(value);
 }

package/src/cli.js

@@ -6,7 +6,7 @@ import { buildAgentGuide, findResourceReferences, listResourceTypes, scaffoldRes
 import { assessAuditPreparation, prepareAuditWorkspace } from "./audit-preparation.js";
 import { createNextAuditCycle, planNextAuditCycle } from "./audit-transition.js";
 import {
-  applyApplicabilityReview,
+  applyApplicabilityReviewWithContext,
   planApplicabilityReview,
   scaffoldApplicabilityReview
 } from "./batch-review.js";
@@ -561,7 +561,7 @@ export async function runCli(argv = process.argv.slice(2)) {
     const options = { ...payload, confirmed: flags.yes === true };
     const result = flags.preview
       ? await planApplicabilityReview(root, options)
-      : await withWorkflowDelta(root, () => applyApplicabilityReview(root, options));
+      : await applyApplicabilityReviewWithContext(root, options, { includeWorkflowDelta: true });
     if (flags.json) console.log(JSON.stringify(result, null, 2));
     else if (flags.preview) console.log(`Applicability preview: ${result.reviewedIds.length} decisions.`);
     else console.log(`Recorded ${result.reviewedIds.length} reviewed applicability decisions.`);

package/src/collection-review.js

@@ -1,32 +1,12 @@
 import { createHash } from "node:crypto";
+import { collectionRevision } from "./collection-revision.js";
+import { scopedCollectionRecords } from "./collection-scope.js";
 import { applyResourceBatch } from "./files.js";
 import { getGitSummary } from "./git.js";
 import { loadWorkspace } from "./workspace.js";
-import { programComponents, resolveProgram, selectedRequirementIds } from "./program.js";
+import { resolveProgram } from "./program.js";
 
-export function collectionRevision(loaded, resourceType, options = {}) {
-  const program = resolveProgram(loaded, options.programId);
-  const scopedIds = new Set(scopedCollectionRecords(loaded, resourceType, program).map(({ id }) => id));
-  const records = loaded.entries
-    .filter(({ record }) => record.type === resourceType && scopedIds.has(record.id))
-    .map(({ record, source }) => ({
-      id: record.id,
-      revision: createHash("sha256").update(source).digest("hex")
-    }))
-    .sort((left, right) => left.id.localeCompare(right.id));
-  const workspaceScope = {
-    programId: program?.id ?? null,
-    assuranceGoal: program?.assuranceGoal ?? null,
-    candidateCoverage: program?.candidateCoverage ?? null,
-    systemIds: [...(program?.systemIds || [])].sort(),
-    frameworkIds: [...(program?.frameworkIds || [])].sort(),
-    requirementIds: [...selectedRequirementIds(program || {}, loaded.model)].sort(),
-    controlIds: [...(program?.controlIds || [])].sort()
-  };
-  return createHash("sha256")
-    .update(JSON.stringify({ resourceType, records, workspaceScope }))
-    .digest("hex");
-}
+export { collectionRevision };
 
 export function assessCollectionReviews(input, options = {}) {
   const loaded = input?.resources && input?.model && input?.entries
@@ -49,7 +29,13 @@ export function assessCollectionReview(loaded, resourceType, options = {}) {
     && (String(loaded.model.modelVersion) !== "4" || (record.scopeResourceIds || []).includes(program.id))
   ));
   const review = reviewEntry?.record || null;
-  const currentRevision = collectionRevision(loaded, resourceType, { programId: program.id });
+  const authoritativeSourceId = review?.decision === "externally-managed"
+    ? review.authoritativeComponentId || review.authoritativeSystemId
+    : null;
+  const currentRevision = collectionRevision(loaded, resourceType, {
+    programId: program.id,
+    authoritativeSourceId
+  });
   const allowedDecisions = configuration.decisions || ["complete"];
   const allowsEmptyCollection = allowedDecisions.some((decision) => (
     decision === "zero-population" || decision === "externally-managed"
@@ -146,6 +132,10 @@ export async function planCollectionReview(input = process.cwd(), options = {})
     ));
     if (!system) throw new Error(`${configuration.title} review needs an active authoritative ${v4 ? "Component" : "System"}.`);
   }
+  const currentRevision = collectionRevision(loaded, resourceType, {
+    programId: program.id,
+    authoritativeSourceId: decision === "externally-managed" ? authoritativeSourceId : null
+  });
   const existing = assessment.review;
   const record = {
     ...(existing || {
@@ -160,7 +150,7 @@ export async function planCollectionReview(input = process.cwd(), options = {})
     rationale,
     reviewedByIds,
     reviewedOn,
-    collectionRevision: assessment.collectionRevision,
+    collectionRevision: currentRevision,
     scopeRevision,
     ...(decision === "externally-managed"
       ? { [v4 ? "authoritativeComponentId" : "authoritativeSystemId"]: authoritativeSourceId }
@@ -200,26 +190,6 @@ export async function applyCollectionReview(input = process.cwd(), options = {})
   };
 }
 
-function scopedCollectionRecords(loaded, resourceType, program) {
-  if (String(loaded.model.modelVersion) !== "4") {
-    return loaded.resources.filter((record) => record.type === resourceType);
-  }
-  const components = programComponents(loaded, program);
-  const componentIds = new Set(components.map(({ id }) => id));
-  const selected = {
-    system: new Set(program.systemIds || []),
-    component: componentIds,
-    framework: new Set(program.frameworkIds || []),
-    vendor: new Set(components.map(({ vendorId }) => vendorId).filter(Boolean)),
-    asset: new Set(loaded.resources.filter((record) => (
-      record.type === "asset" && (record.componentIds || []).some((id) => componentIds.has(id))
-    )).map(({ id }) => id))
-  }[resourceType];
-  return loaded.resources.filter((record) => (
-    record.type === resourceType && (!selected || selected.has(record.id))
-  ));
-}
-
 function requiredType(loaded, value) {
   const resourceType = String(value || "").trim();
   if (!loaded.model.collectionReviews?.[resourceType]) {

package/src/collection-revision.js

@@ -0,0 +1,83 @@
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import {
+  collectionRevisionInputs,
+  collectionScopeRevisionFacts
+} from "./collection-scope.js";
+import { resolveDataPath } from "./paths.js";
+import { resolveProgram } from "./program.js";
+import { markdownEntries } from "./resource-markdown.js";
+
+export function collectionRevision(loaded, resourceType, options = {}) {
+  const program = Object.hasOwn(options, "program")
+    ? options.program
+    : resolveProgram(loaded, options.programId);
+  const inputs = new Map(collectionRevisionInputs(loaded, resourceType, program)
+    .map((input) => [input.record.id, input]));
+  const authoritativeSource = loaded.resources.find(({ id }) => id === options.authoritativeSourceId);
+  if (authoritativeSource) {
+    inputs.set(authoritativeSource.id, { record: authoritativeSource, value: authoritativeSource });
+  }
+  const records = [...inputs.values()]
+    .map(({ record, value }) => ({
+      id: record.id,
+      revision: createHash("sha256")
+        .update(JSON.stringify(canonicalRecordValue(loaded.model, record.type, value)))
+        .digest("hex"),
+      contentRevisions: markdownEntries(loaded.model, record).flatMap(({ path }) => {
+        try {
+          const content = readFileSync(resolveDataPath(loaded.root, path), "utf8");
+          return [{ path, revision: createHash("sha256").update(content).digest("hex") }];
+        } catch (error) {
+          if (error.code === "ENOENT") return [];
+          throw error;
+        }
+      })
+    }))
+    .sort((left, right) => left.id.localeCompare(right.id));
+  const workspaceScope = collectionScopeRevisionFacts(loaded, resourceType, program);
+  return createHash("sha256")
+    .update(JSON.stringify({ resourceType, records, workspaceScope }))
+    .digest("hex");
+}
+
+function canonicalRecordValue(model, resourceType, value) {
+  const fields = {
+    ...model.commonFields,
+    ...model.resources[resourceType]?.fields
+  };
+  return canonicalObject(model, value, fields);
+}
+
+function canonicalObject(model, value, fields = {}) {
+  return Object.fromEntries(Object.keys(value).sort().map((name) => [
+    name,
+    canonicalFieldValue(model, value[name], fields[name])
+  ]));
+}
+
+function canonicalFieldValue(model, value, field) {
+  if (Array.isArray(value)) {
+    const objectType = field?.itemObjectType;
+    const itemFields = objectType ? model.objectTypes?.[objectType]?.properties : undefined;
+    const items = value.map((item) => (
+      item && typeof item === "object" && !Array.isArray(item)
+        ? canonicalObject(model, item, itemFields)
+        : item
+    ));
+    return field?.type === "array"
+      ? items.sort(compareCanonicalValues)
+      : items;
+  }
+  if (value && typeof value === "object") {
+    const objectType = field?.objectType;
+    return canonicalObject(model, value, objectType ? model.objectTypes?.[objectType]?.properties : undefined);
+  }
+  return value;
+}
+
+function compareCanonicalValues(left, right) {
+  const leftValue = JSON.stringify(left);
+  const rightValue = JSON.stringify(right);
+  return leftValue < rightValue ? -1 : leftValue > rightValue ? 1 : 0;
+}

package/src/collection-scope.js

@@ -0,0 +1,182 @@
+import { programComponents, selectedRequirementIds } from "./program.js";
+
+export function scopedCollectionRecords(loaded, resourceType, program) {
+  if (String(loaded.model.modelVersion) !== "4") {
+    return loaded.resources.filter((record) => record.type === resourceType);
+  }
+  if (resourceType === "vendor") {
+    return loaded.resources.filter((record) => record.type === "vendor");
+  }
+  const scopedProgram = program || {};
+  const components = programComponents(loaded, scopedProgram);
+  const componentIds = new Set(components.map(({ id }) => id));
+  const systemIds = new Set(scopedProgram.systemIds || []);
+  const controlIds = new Set(scopedProgram.controlIds || []);
+  const selected = {
+    system: systemIds,
+    component: componentIds,
+    framework: new Set(scopedProgram.frameworkIds || []),
+    "complementary-control": new Set(loaded.resources.filter((record) => (
+      record.type === "complementary-control"
+      && record.status !== "superseded"
+      && record.status !== "retired"
+      && (
+        (record.systemIds || []).some((id) => systemIds.has(id))
+        || (record.relatedControlIds || []).some((id) => controlIds.has(id))
+        || (record.componentIds || []).some((id) => componentIds.has(id))
+      )
+    )).map(({ id }) => id)),
+    asset: new Set(loaded.resources.filter((record) => (
+      record.type === "asset" && (record.componentIds || []).some((id) => componentIds.has(id))
+    )).map(({ id }) => id))
+  }[resourceType];
+  return loaded.resources.filter((record) => (
+    record.type === resourceType && (!selected || selected.has(record.id))
+  ));
+}
+
+export function collectionRevisionInputs(loaded, resourceType, program) {
+  const reviewed = scopedCollectionRecords(loaded, resourceType, program);
+  if (String(loaded.model.modelVersion) !== "4") {
+    return reviewed.map((record) => ({ record, value: record }));
+  }
+  const byId = new Map(loaded.resources.map((record) => [record.id, record]));
+  const records = new Map(reviewed.map((record) => [record.id, record]));
+  const reviewedIds = new Set(records.keys());
+  const addIds = (ids) => {
+    for (const id of ids || []) {
+      const record = byId.get(id);
+      if (record) records.set(record.id, record);
+    }
+  };
+
+  if (resourceType === "framework") {
+    addIds(program?.systemIds);
+    addIds(selectedRequirementIds(program || {}, loaded.model));
+  }
+  if (resourceType === "vendor") {
+    for (const record of reviewed) {
+      addIds([record.agreementDocumentId, record.classificationId]);
+      addIds(record.informationTypeIds);
+    }
+  }
+  if (resourceType === "system") {
+    for (const record of reviewed) {
+      addIds([record.classificationId]);
+      addIds(record.informationTypeIds);
+    }
+  }
+  if (resourceType === "component") {
+    addIds(program?.systemIds);
+    addIds(program?.controlIds);
+    for (const record of reviewed) {
+      addIds([record.vendorId, record.classificationId]);
+      addIds((record.informationUses || []).map(({ informationTypeId }) => informationTypeId));
+    }
+  }
+  if (resourceType === "complementary-control") {
+    addIds(program?.systemIds);
+    addIds(program?.controlIds);
+    for (const record of reviewed) {
+      addIds([record.vendorId]);
+      addIds(record.requirementIds);
+      addIds(record.commitmentIds);
+      addIds(record.sourceDocumentIds);
+      addIds(record.componentIds);
+    }
+  }
+  return [...records.values()].map((record) => ({
+    record,
+    value: reviewedIds.has(record.id)
+      ? record
+      : dependencyRevisionValue(resourceType, record)
+  }));
+}
+
+export function collectionScopeRevisionFacts(loaded, resourceType, program) {
+  if (String(loaded.model.modelVersion) !== "4") {
+    const common = { programId: program?.id ?? null };
+    if (resourceType === "framework") {
+      return {
+        ...common,
+        assuranceGoal: program?.assuranceGoal ?? null,
+        systemIds: sorted(program?.systemIds),
+        frameworkIds: sorted(program?.frameworkIds),
+        requirementIds: sorted(selectedRequirementIds(program || {}, loaded.model))
+      };
+    }
+    if (resourceType === "vendor" || resourceType === "system" || resourceType === "complementary-control") {
+      return {
+        ...common,
+        systemIds: sorted(program?.systemIds),
+        controlIds: sorted(program?.controlIds)
+      };
+    }
+    return common;
+  }
+  const common = { programId: program?.id ?? null };
+  if (resourceType === "framework") {
+    return {
+      ...common,
+      assuranceGoal: program?.assuranceGoal ?? null,
+      systemIds: sorted(program?.systemIds),
+      frameworkIds: sorted(program?.frameworkIds),
+      requirementIds: sorted(selectedRequirementIds(program || {}, loaded.model))
+    };
+  }
+  if (resourceType === "system") {
+    return { ...common, systemIds: sorted(program?.systemIds) };
+  }
+  if (resourceType === "component" || resourceType === "complementary-control") {
+    return {
+      ...common,
+      systemIds: sorted(program?.systemIds),
+      controlIds: sorted(program?.controlIds)
+    };
+  }
+  return common;
+}
+
+const dependencyFields = {
+  framework: {
+    system: ["id", "type", "status", "purpose", "servicesProvided", "boundary", "exclusions", "informationTypeIds", "classificationId", "internetExposed"],
+    requirement: ["id", "type", "title", "frameworkId", "reference", "description", "parentRequirementId"]
+  },
+  vendor: {
+    document: ["id", "type", "status", "documentKind", "version", "effectiveOn", "approvedOn", "approvedContentRevisions", "systemIds", "controlIds", "componentIds", "classificationId"],
+    classification: ["id", "type", "status", "rank", "description", "handlingRequirements"],
+    "information-type": ["id", "type", "status", "classificationId", "description"]
+  },
+  system: {
+    classification: ["id", "type", "status", "rank", "description", "handlingRequirements"],
+    "information-type": ["id", "type", "status", "classificationId", "description"]
+  },
+  component: {
+    system: ["id", "type", "status", "purpose", "servicesProvided", "boundary", "exclusions", "criticality", "informationTypeIds", "classificationId", "internetExposed", "continuityObjectives"],
+    control: ["id", "type", "status", "statement", "activity", "controlType", "operationMode", "operationPattern", "systemIds", "componentIds", "evidenceSourceComponentIds"],
+    vendor: ["id", "type", "status", "category", "criticality", "description", "standardAgreement", "agreementDocumentId", "startDate", "endDate", "classificationId", "informationTypeIds"],
+    classification: ["id", "type", "status", "rank", "description", "handlingRequirements"],
+    "information-type": ["id", "type", "status", "classificationId", "description"]
+  },
+  "complementary-control": {
+    system: ["id", "type", "status", "purpose", "servicesProvided", "boundary", "exclusions", "informationTypeIds", "classificationId", "internetExposed"],
+    control: ["id", "type", "status", "statement", "activity", "controlType", "operationMode", "operationPattern", "systemIds", "componentIds", "evidenceSourceComponentIds"],
+    vendor: ["id", "type", "status", "category", "criticality", "description", "standardAgreement", "agreementDocumentId", "startDate", "endDate", "classificationId", "informationTypeIds"],
+    requirement: ["id", "type", "title", "frameworkId", "reference", "description", "parentRequirementId"],
+    commitment: ["id", "type", "status", "commitmentKind", "statement", "systemIds", "requirementIds", "controlIds", "customerFacing", "effectiveOn"],
+    document: ["id", "type", "status", "documentKind", "version", "effectiveOn", "approvedOn", "approvedContentRevisions", "systemIds", "controlIds", "componentIds", "classificationId"],
+    component: ["id", "type", "status", "componentKind", "description", "vendorId", "systemUses", "informationUses", "internetExposed"]
+  }
+};
+
+function dependencyRevisionValue(resourceType, record) {
+  const fields = dependencyFields[resourceType]?.[record.type];
+  if (!fields) return { id: record.id, type: record.type };
+  return Object.fromEntries(fields
+    .filter((field) => record[field] !== undefined)
+    .map((field) => [field, record[field]]));
+}
+
+function sorted(values) {
+  return [...(values || [])].sort();
+}

package/src/git.js

@@ -7,7 +7,7 @@ import { performance } from "node:perf_hooks";
 import { isSafeGitName } from "./git-name.js";
 import { serializeWorkspaceMutation, withDeferredWorkspaceValidation } from "./mutation.js";
 import { resolveWorkspaceRoot } from "./paths.js";
-import { measureTiming, recordTiming, timingEnabled } from "./timing.js";
+import { measureTiming, measureTimingSync, recordTiming, timingEnabled } from "./timing.js";
 import { fingerprintWorkspace, validateWorkspace } from "./validate.js";
 import { loadWorkspace } from "./workspace.js";
 
@@ -44,7 +44,7 @@ export class GitOperationError extends Error {
 export function getGitSummary(input = process.cwd()) {
   const root = resolveWorkspaceRoot(input);
   try {
-    const topLevel = git(root, ["rev-parse", "--show-toplevel"]);
+    const topLevel = measureTimingSync("git-discovery", () => git(root, ["rev-parse", "--show-toplevel"]));
     const status = git(root, ["status", "--porcelain=v1", "--", "."]);
     const commit = tryGit(root, ["rev-parse", "HEAD"]) || null;
     const branch = tryGit(root, ["symbolic-ref", "--short", "HEAD"]) || null;
@@ -181,12 +181,40 @@ export function getRepositorySnapshot(input = process.cwd(), options = {}) {
   return snapshot;
 }
 
+export async function getWorkspaceRevisionSnapshot(input = process.cwd()) {
+  const root = resolveWorkspaceRoot(input);
+  try {
+    const source = await measureTiming("repository-revision", () => runGitCommand(root, [
+      "status",
+      "--porcelain=v2",
+      "--branch",
+      "-z",
+      "--untracked-files=all",
+      "--",
+      "data"
+    ], { operation: "resolve the workspace revision" }));
+    const parsed = parseWorkspaceRevision(source);
+    return {
+      available: true,
+      commit: parsed.commit,
+      shortCommit: parsed.commit?.slice(0, 8) ?? "no commits",
+      clean: parsed.changePaths.length === 0,
+      changes: parsed.changePaths,
+      workspaceChangePaths: parsed.changePaths
+    };
+  } catch (error) {
+    return unavailableSnapshot(error, { workspaceChangePaths: [] });
+  }
+}
+
 async function buildRepositorySnapshot(root) {
   let repositoryPaths;
   try {
-    repositoryPaths = await runGitCommand(root, ["rev-parse", "--show-toplevel", "--absolute-git-dir"], {
-      operation: "locate the repository"
-    });
+    repositoryPaths = await measureTiming("git-discovery", () => runGitCommand(
+      root,
+      ["rev-parse", "--show-toplevel", "--absolute-git-dir"],
+      { operation: "locate the repository" }
+    ));
   } catch (error) {
     return unavailableSnapshot(error);
   }
@@ -1058,6 +1086,27 @@ function parsePorcelainV2(source, topLevel, root) {
   return { commit, branch, upstream, ahead, behind, allChanges, workspaceChanges };
 }
 
+function parseWorkspaceRevision(source) {
+  const fields = source.split("\0").filter(Boolean);
+  let commit = null;
+  const changePaths = [];
+  for (let index = 0; index < fields.length; index += 1) {
+    const field = fields[index];
+    if (field.startsWith("# branch.oid ")) {
+      commit = field.slice(13) === "(initial)" ? null : field.slice(13);
+    } else if (/^[12u?!] /.test(field)) {
+      changePaths.push(porcelainV2Path(field));
+      if (field.startsWith("2 ")) {
+        changePaths.push(fields[++index]);
+      }
+    }
+  }
+  return {
+    commit,
+    changePaths: [...new Set(changePaths.filter(Boolean))].sort()
+  };
+}
+
 function porcelainV2Path(field) {
   if (field.startsWith("? ") || field.startsWith("! ")) return field.slice(2);
   const requiredSpaces = field.startsWith("2 ") ? 9 : field.startsWith("u ") ? 10 : 8;

package/src/reconciliation.js

@@ -91,7 +91,9 @@ const TRANSITIONS = {
 };
 
 export async function planReconciliation(input = process.cwd()) {
-  const loaded = await loadWorkspace(input);
+  const loaded = input?.resources && input?.model && input?.entries
+    ? input
+    : await loadWorkspace(input);
   if (!["3", "4"].includes(String(loaded.model.modelVersion))) {
     return {
       contractVersion: 1,

package/src/server.js

@@ -6,7 +6,7 @@ import { performance } from "node:perf_hooks";
 import { getResourceDefinition } from "../model/index.js";
 import { prepareAuditWorkspace } from "./audit-preparation.js";
 import { createNextAuditCycle, planNextAuditCycle } from "./audit-transition.js";
-import { applyApplicabilityReview, planApplicabilityReview } from "./batch-review.js";
+import { applyApplicabilityReviewWithContext, planApplicabilityReview } from "./batch-review.js";
 import { applyCollectionReview, planCollectionReview } from "./collection-review.js";
 import { generateEvidencePacket, prepareEvidencePacket } from "./evidence-packet.js";
 import { FAVICON_PNG, LOGO_MARK_PNG } from "./favicon.js";
@@ -174,10 +174,11 @@ export function createFilegrcServer(input = process.cwd(), options = {}) {
           message: (result) => `Record ${result.reviewedIds?.length || 0} applicability decisions`,
           fastResponse: prefersFastMutation(request),
           prefetchToken
-        }, (_root, mutationContext) => applyApplicabilityReview(input, {
+        }, (_root, mutationContext) => applyApplicabilityReviewWithContext(input, {
           ...reviewPayload,
-          scopeRevision: mutationContext?.repositorySnapshot?.currentCommit,
           confirmed: payload.confirmed === true
+        }, {
+          repositorySnapshot: mutationContext?.repositorySnapshot
         })));
       }
       if (request.method === "POST" && url.pathname === "/api/collection-review/preview") {

package/src/validate.js

@@ -2,6 +2,8 @@ import { createHash } from "node:crypto";
 import { readFile, stat } from "node:fs/promises";
 import { performance } from "node:perf_hooks";
 import { getResourceDefinition } from "../model/index.js";
+import { scopedCollectionRecords } from "./collection-scope.js";
+import { collectionRevision } from "./collection-revision.js";
 import { isSafeGitName } from "./git-name.js";
 import { isCanonicalDataPath, resolveDataPath } from "./paths.js";
 import { parseCalendarDate, validCalendarRecurrence } from "./recurrence.js";
@@ -78,7 +80,7 @@ async function validateWorkspaceUnmeasured(input) {
     if (record.type === "control") validateControlComponents(record, byId, displayPath, diagnostics);
     if (record.type === "audit") validateAuditSubservices(record, byId, displayPath, diagnostics);
     if (record.type === "collection-review") {
-      validateCollectionReview(record, loaded.model, loaded.resources, byId, displayPath, diagnostics);
+      validateCollectionReview(record, loaded, byId, displayPath, diagnostics);
     }
     if (record.type === "obligation") validateObligation(record, loaded.model, byId, displayPath, diagnostics);
     if (record.type === "action-item") {
@@ -158,8 +160,9 @@ async function validateWorkspaceUnmeasured(input) {
   };
 }
 
-function validateCollectionReview(record, model, resources, byId, path, diagnostics) {
+function validateCollectionReview(record, loaded, byId, path, diagnostics) {
   if (record.status !== "active") return;
+  const { model } = loaded;
   const configuration = model.collectionReviews?.[record.resourceType];
   if (!configuration) return;
   const allowedDecisions = configuration.decisions || ["complete"];
@@ -174,29 +177,22 @@ function validateCollectionReview(record, model, resources, byId, path, diagnost
   const program = String(model.modelVersion) === "4"
     ? (record.scopeResourceIds || []).map((id) => byId.get(id)).find(({ type } = {}) => type === "program")
     : null;
-  const programSystemIds = new Set(program?.systemIds || []);
-  const componentIds = new Set(resources.filter((candidate) => (
-    candidate.type === "component"
-    && (candidate.systemUses || []).some(({ systemId }) => programSystemIds.has(systemId))
-  )).map(({ id }) => id));
-  const selectedIds = {
-    system: programSystemIds,
-    component: componentIds,
-    framework: new Set(program?.frameworkIds || []),
-    vendor: new Set(resources.filter(({ id }) => componentIds.has(id)).map(({ vendorId }) => vendorId).filter(Boolean)),
-    asset: new Set(resources.filter(({ type, componentIds: ids }) => type === "asset" && (ids || []).some((id) => componentIds.has(id))).map(({ id }) => id))
-  }[record.resourceType];
-  const recordCount = resources.filter(({ type, id }) => (
-    type === record.resourceType && (!program || !selectedIds || selectedIds.has(id))
-  )).length;
-  if (!recordCount && record.decision === "complete") {
+  const recordCount = scopedCollectionRecords(loaded, record.resourceType, program).length;
+  const currentRevision = collectionRevision(loaded, record.resourceType, {
+    program,
+    authoritativeSourceId: record.decision === "externally-managed"
+      ? record.authoritativeComponentId || record.authoritativeSystemId
+      : null
+  });
+  const current = record.collectionRevision === currentRevision;
+  if (current && !recordCount && record.decision === "complete") {
     diagnostics.push(error(
       "invalid-collection-review-decision",
       path,
       `${configuration.title} has no records and cannot use the complete conclusion.`
     ));
   }
-  if (recordCount && record.decision === "zero-population") {
+  if (current && recordCount && record.decision === "zero-population") {
     diagnostics.push(error(
       "invalid-collection-review-decision",
       path,
@@ -204,7 +200,8 @@ function validateCollectionReview(record, model, resources, byId, path, diagnost
     ));
   }
   if (
-    record.decision === "externally-managed"
+    current
+    && record.decision === "externally-managed"
     && byId.get(record.authoritativeComponentId || record.authoritativeSystemId)?.status !== "active"
   ) {
     diagnostics.push(error(

package/src/web.js

@@ -184,7 +184,7 @@ function buildNavigation(route) {
   const organizationCurrent = route.name === "organization" || route.name === "repository" || ["workspace", "renderer-settings"].includes(route.type);
   const organizationName = state.workspace.organizationName || "Organization";
   const initial = organizationName.trim().charAt(0).toUpperCase() || "O";
-  return '<aside class="sidebar" id="sidebar-navigation"><button class="nav-close" type="button" aria-label="Close navigation">×</button><a href="#/" class="brand"' + (route.name === "home" ? ' aria-current="page"' : "") + '><img class="mark" src="./logo-mark-white.png" alt="" width="39" height="39"><span><strong>filegrc</strong><small>SOC 2 workspace</small></span></a><nav class="sidebar-nav">' + stages + '</nav><div class="sidebar-footer"><a class="organization-nav ' + (organizationCurrent ? "current" : "") + '" href="#/organization"><span class="organization-mark">' + esc(initial) + '</span><span><strong>' + esc(organizationName) + '</strong><small>Organization</small></span><span class="organization-arrow">›</span></a></div></aside><button class="nav-scrim" type="button" aria-label="Close navigation"></button>';
+  return '<aside class="sidebar" id="sidebar-navigation"><button class="nav-close" type="button" aria-label="Close navigation">×</button><a href="#/" class="brand"' + (route.name === "home" ? ' aria-current="page"' : "") + '><img class="mark" src="./logo-mark-white.png" alt="" width="39" height="39"><span><strong>filegrc</strong><small>SOC 2 workspace</small></span></a><label class="search mobile-sidebar-search"><span aria-hidden="true">⌕</span><input data-global-search type="search" placeholder="Search records" aria-label="Search records"></label><nav class="sidebar-nav">' + stages + '</nav><div class="sidebar-footer"><a class="organization-nav ' + (organizationCurrent ? "current" : "") + '" href="#/organization"><span class="organization-mark">' + esc(initial) + '</span><span><strong>' + esc(organizationName) + '</strong><small>Organization</small></span><span class="organization-arrow">›</span></a></div></aside><button class="nav-scrim" type="button" aria-label="Close navigation"></button>';
 }
 
 function readinessStageForRoute(route) {
@@ -249,7 +249,13 @@ function topbar(route) {
   const repositoryTone = state.repository?.mode === "trunk"
     ? repositoryStatusTone(state.repository.status)
     : state.git.clean ? "good" : "warn";
-  return '<button class="mobile-nav" type="button" aria-label="Open navigation" aria-controls="sidebar-navigation" aria-expanded="false">☰</button><div><small class="eyebrow">' + esc(state.workspace.organizationName) + '</small><h1>' + esc(titleCase(title)) + '</h1></div><label class="search"><span aria-hidden="true">⌕</span><input id="global-search" type="search" placeholder="Search records" aria-label="Search records"><kbd>/</kbd></label><div class="topbar-status"><a class="validation-chip" href="#/repository"><span class="status-dot ' + (state.validation.ok ? "good" : "bad") + '"></span>' + (state.validation.ok ? "Data valid" : state.validation.counts.errors + " validation errors") + '</a><a class="repo-chip" href="#/repository"><span class="status-dot ' + repositoryTone + '"></span>' + esc(repositoryLabel) + '</a></div>';
+  return '<button class="mobile-nav" type="button" aria-label="Open navigation" aria-controls="sidebar-navigation" aria-expanded="false">☰</button><div><small class="eyebrow">' + esc(state.workspace.organizationName) + '</small><h1>' + esc(titleCase(title)) + '</h1></div><div class="topbar-status">' + topbarProgramReadiness() + '<label class="search topbar-search"><span aria-hidden="true">⌕</span><input data-global-search type="search" placeholder="Search records" aria-label="Search records"><kbd>/</kbd></label><a class="validation-chip" href="#/repository"><span class="status-dot ' + (state.validation.ok ? "good" : "bad") + '"></span>' + (state.validation.ok ? "Data valid" : state.validation.counts.errors + " validation errors") + '</a><a class="repo-chip" href="#/repository"><span class="status-dot ' + repositoryTone + '"></span>' + esc(repositoryLabel) + '</a></div>';
+}
+
+function topbarProgramReadiness() {
+  const progress = dashboardProgramReadiness(state.programReadiness);
+  const detail = progress.complete + " of " + progress.total + " readiness items complete";
+  return '<a class="topbar-readiness" href="' + nextProgramStageHref() + '" aria-label="' + esc("Program readiness: " + progress.percent + "%. " + detail + ". " + progress.status + ".") + '"><span class="topbar-readiness-copy"><span>Program readiness</span><strong>' + progress.percent + '%</strong></span><span class="progress" aria-hidden="true"><span style="width:' + progress.percent + '%"></span></span></a>';
 }
 
 function repositoryStatusTone(status) {
@@ -310,7 +316,6 @@ function initialSetupBanner() {
 }
 
 function readinessOverview() {
-  const progress = dashboardProgramReadiness(state.programReadiness);
   const nextHref = nextProgramStageHref();
   const programStage = (id, href) => {
     const stage = READINESS_STAGES.find((candidate) => candidate.id === id);
@@ -326,7 +331,7 @@ function readinessOverview() {
     programStage("run", "#/stage/run"),
     programStage("audit", "#/stage/audit")
   ];
-  return '<section class="readiness-map"><div class="readiness-map-head"><div><p class="kicker">SOC 2 program path</p><h3>Prepare, Operate, Then Audit</h3></div><div class="readiness-progress-summary"><div><span>Program readiness</span><strong>' + progress.percent + '%</strong><b class="badge ' + esc(progress.tone) + '">' + esc(progress.status) + '</b><div class="progress"><span style="width:' + progress.percent + '%"></span></div><small>' + esc(progress.complete + " of " + progress.total + " readiness items complete") + '</small></div><a class="button primary" href="' + nextHref + '">Continue</a></div></div><div class="readiness-flow">' + stages.map(([title, body, href, status, tone], index) => '<a href="' + href + '"><span>' + (index + 1) + '</span><strong>' + esc(title) + '</strong><small>' + esc(body) + '</small><b class="readiness-state ' + esc(tone) + '">' + esc(status) + '</b></a>').join("") + '</div></section>';
+  return '<section class="readiness-map"><div class="readiness-map-head"><div><p class="kicker">SOC 2 program path</p><h3>Prepare, Operate, Then Audit</h3></div><a class="button primary" href="' + nextHref + '">Continue</a></div><div class="readiness-flow">' + stages.map(([title, body, href, status, tone], index) => '<a href="' + href + '"><span>' + (index + 1) + '</span><strong>' + esc(title) + '</strong><small>' + esc(body) + '</small><b class="readiness-state ' + esc(tone) + '">' + esc(status) + '</b></a>').join("") + '</div></section>';
 }
 
 function nextProgramStageHref() {
@@ -1511,7 +1516,6 @@ function openApplicabilityReviewDialog(type, entries) {
       decisions,
       reviewedByIds: [form.elements.reviewerId.value],
       reviewedOn: form.elements.reviewedOn.value,
-      scopeRevision: state.git?.commit || undefined,
       expectedRevisions: Object.fromEntries([
         ...entries.filter((entry) => decisionIds.has(entry.record.id)).map((entry) => [entry.record.id, entry.revision]),
         ...(type === "requirement" && String(state.model.modelVersion) === "4"
@@ -1529,7 +1533,7 @@ function openApplicabilityReviewDialog(type, entries) {
         });
         if (!response.ok) throw new Error(await responseMessage(response));
         const preview = await response.json();
-        previewedPayload = payload;
+        previewedPayload = { ...payload, basis: preview.basis };
         dialog.querySelector(".workflow-preview").innerHTML = '<strong>Review before saving</strong><p>' + preview.reviewedIds.length + ' ' + pluralize("decision", preview.reviewedIds.length) + ' will be saved with the reviewer, review date, and current scope recorded automatically.</p>';
         dialog.querySelector("[data-preview-review]").textContent = "Confirm and save";
       } else {
@@ -3666,7 +3670,7 @@ function bindCommon() {
     setNavigation(false);
     navButton?.focus();
   });
-  const search = root.querySelector("#global-search");
+  const searches = [...root.querySelectorAll("[data-global-search]")];
   const sidebarNavigation = root.querySelector(".sidebar-nav");
   sidebarNavigation?.addEventListener("scroll", () => {
     navigationScrollTop = sidebarNavigation.scrollTop;
@@ -3676,12 +3680,13 @@ function bindCommon() {
       // Browser storage may be unavailable; navigation still preserves the position in memory.
     }
   }, { passive: true });
-  search?.addEventListener("keydown", (event) => {
+  searches.forEach((search) => search.addEventListener("keydown", (event) => {
     if (event.key === "Enter" && search.value.trim()) {
       event.preventDefault();
+      if (search.closest(".sidebar")) setNavigation(false);
       globalSearch(search.value);
     }
-  });
+  }));
   document.onkeydown = (event) => {
     if (event.key === "Escape" && sidebar.classList.contains("shown")) {
       setNavigation(false);
@@ -3690,6 +3695,9 @@ function bindCommon() {
     }
     if (event.key === "/" && !/input|textarea/i.test(document.activeElement?.tagName)) {
       event.preventDefault();
+      const mobile = window.matchMedia("(max-width: 760px)").matches;
+      const search = root.querySelector(mobile ? ".mobile-sidebar-search input" : ".topbar-search input");
+      if (mobile) setNavigation(true);
       search?.focus();
     }
   };
@@ -3706,8 +3714,9 @@ function globalSearch(query) {
   document.body.append(dialog);
   dialog.showModal();
   const clearSearch = () => {
-    const search = root.querySelector("#global-search");
-    if (search?.value.trim() === query) search.value = "";
+    root.querySelectorAll("[data-global-search]").forEach((search) => {
+      if (search.value.trim() === query) search.value = "";
+    });
   };
   dialog.querySelector(".icon-button").onclick = () => {
     clearSearch();
@@ -4297,8 +4306,8 @@ function esc(value) { return String(value ?? "").replace(/[&<>"']/g, (character)
 
 export const APP_STYLES = String.raw`
 :root{--ink:#151827;--muted:#5d6475;--line:#dfe3ef;--paper:#f6f7fb;--panel:#fff;--accent:#0000a5;--accent-soft:#eef1ff;--accent-light:#8aa1ff;--focus:#0000e0;--amber:#8a5200;--red:#a13a31;--sidebar:linear-gradient(135deg,#000070 0%,#000035 60%);--primary-gradient:linear-gradient(135deg,#000070 0%,#000035 60%);--surface-soft:#f2f4fa;--surface-muted:#eceff7;--field:#fff;--field-readonly:#eef0f6;--code-bg:#10162b;--code-ink:#e8ebff;--shadow:0 8px 28px rgba(0,0,53,.08);color-scheme:light dark;font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;color:var(--ink);background:var(--paper);font-synthesis:none}
-*{box-sizing:border-box}body{margin:0;min-width:320px;background:var(--paper)}button,input,select,textarea{font:inherit}a{color:inherit}.skip-link{position:fixed;left:1rem;top:-4rem;z-index:100;padding:.7rem 1rem;background:#fff}.skip-link:focus{top:1rem}.loading,.fatal{padding:3rem}.shell{display:grid;grid-template-columns:248px 1fr;min-height:100vh}.sidebar{position:fixed;inset:0 auto 0 0;width:248px;background:var(--sidebar);color:#eef1ff;padding:25px 18px 18px;overflow:auto;z-index:20}.brand{display:flex;align-items:center;gap:12px;text-decoration:none;margin:0 7px 27px}.brand .mark{display:block;width:39px;height:39px;border-radius:10px}.brand strong,.brand small{display:block}.brand strong{color:#fff;font-size:18px}.brand small{font-size:13.2px;color:#c5cae2;margin-top:2px}.nav-home,.nav-items a{display:flex;justify-content:space-between;align-items:center;text-decoration:none;border-radius:7px;padding:8px 10px;font-size:15.6px;color:#d5d9ed}.nav-home{margin-bottom:9px}.nav-home:hover,.nav-items a:hover,.nav-home.current,.nav-items a.current{background:#202066;color:#fff}.nav-heading{width:100%;border:0;background:none;color:#b4bbdc;text-transform:uppercase;letter-spacing:.11em;font-size:12px;font-weight:750;display:flex;align-items:center;justify-content:space-between;padding:13px 10px 5px;cursor:pointer}.chevron{display:grid;place-items:center;width:14px;height:22px;font-size:0;line-height:1;transform:none}.chevron:before{content:"";width:6px;height:6px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(-45deg);transform-origin:center;transition:transform .15s}.nav-items{display:none}.nav-group.open .nav-items{display:block}.nav-items small{font-size:12px;color:#b8bed7}.side-foot{position:sticky;bottom:-18px;margin:25px -18px -18px;padding:17px 25px;background:#000024;border-top:1px solid #34345f;color:#cbd0e5;font-size:13.2px;display:flex;align-items:center;gap:8px}.status-dot{width:8px;height:8px;border-radius:50%;background:#9aa39f;display:inline-block;flex:0 0 auto}.status-dot.good,.badge.good{background:#6abf8c}.status-dot.warn,.badge.warn{background:#e9a445}.status-dot.bad,.badge.bad{background:#dc6c5d}.status-dot.neutral{background:#9aabff}.workspace{grid-column:2;min-width:0}.topbar{height:86px;background:rgba(255,255,255,.88);backdrop-filter:blur(10px);border-bottom:1px solid var(--line);padding:0 32px;display:flex;align-items:center;gap:23px;position:sticky;top:0;z-index:10}.topbar>div:first-of-type{min-width:190px}.topbar h1{font-size:20.4px;line-height:1.1;margin:3px 0 0}.eyebrow,.kicker{color:var(--accent);text-transform:uppercase;letter-spacing:.12em;font-weight:760;font-size:10.8px;margin:0}.search{height:39px;max-width:480px;flex:1;margin-left:auto;display:flex;align-items:center;gap:9px;background:#f2f4fa;border:1px solid #dfe3ef;border-radius:8px;padding:0 10px;color:#5d6475}.search input{border:0;outline:0;background:none;min-width:0;flex:1;font-size:15.6px}.search kbd{background:#fff;border:1px solid #dfe3ef;border-radius:4px;padding:1px 5px;font-size:12px}.repo-chip{display:flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:8px;padding:10px 12px;color:var(--muted);font-size:13.2px;white-space:nowrap;text-decoration:none}.mobile-nav{display:none}.page{padding:30px 34px 70px;max-width:1510px;margin:auto}.hero{color:#f8f9ff;background:linear-gradient(120deg,#000070,#000035);border-radius:13px;padding:28px 31px;display:flex;justify-content:space-between;align-items:end;min-height:158px;box-shadow:var(--shadow);position:relative;overflow:hidden}.hero:after{content:"";position:absolute;width:270px;height:270px;border:55px solid rgba(138,161,255,.1);border-radius:50%;right:-80px;top:-145px}.hero .kicker{color:#cbd3ff}.hero h2{font-family:Georgia,serif;font-weight:500;font-size:33.6px;margin:10px 0 8px;letter-spacing:-.02em}.hero p:not(.kicker){margin:0;color:#dde1f4;font-size:15.6px;max-width:650px}.hero-meta{display:flex;gap:15px;position:relative;z-index:1}.hero-meta span{font-size:12px;text-transform:uppercase;letter-spacing:.08em;color:#e6e8f7;border-left:1px solid #6874ab;padding-left:15px}.metrics{display:grid;grid-template-columns:repeat(4,1fr);gap:12px;margin:14px 0}.metric{background:#fff;border:1px solid var(--line);border-radius:10px;padding:16px 18px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.metric-label{font-size:12px;text-transform:uppercase;letter-spacing:.08em;color:var(--muted);display:flex;align-items:center;gap:7px}.metric>strong{display:block;font-family:Georgia,serif;font-size:30px;font-weight:500;margin:8px 0 2px}.metric>small{font-size:12px;color:#697184}.dashboard-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px}.panel{background:#fff;border:1px solid var(--line);border-radius:11px;padding:21px;min-width:0;box-shadow:0 2px 8px rgba(21,40,33,.025)}.span-2{grid-column:span 2}.panel-head{display:flex;align-items:start;justify-content:space-between;gap:15px;margin-bottom:18px}.panel-head h3{font-size:16.8px;margin:4px 0 0}.panel-head>a{font-size:13.2px;color:var(--accent);font-weight:700}.audit-progress{display:grid;grid-template-columns:105px 1fr;gap:11px 20px;align-items:end}.progress-number strong{font-family:Georgia,serif;font-size:36px;font-weight:500;display:block}.progress-number span{font-size:12px;color:var(--muted)}.progress{height:9px;background:#eceff7;border-radius:9px;overflow:hidden}.progress span{display:block;height:100%;background:linear-gradient(90deg,#0000a5,var(--accent-light));border-radius:9px}.progress-meta{grid-column:2;display:flex;justify-content:space-between;font-size:10.8px;text-transform:uppercase;letter-spacing:.08em;color:#5d6475}.due-list{display:grid}.due-list a{display:grid;grid-template-columns:60px 1fr;text-decoration:none;border-top:1px solid #e8ebf3;padding:10px 0;align-items:center}.due-list a:first-child{border:0;padding-top:0}.due-list time{font-size:12px;color:var(--accent);font-weight:750}.due-list strong,.due-list small{display:block}.due-list strong{font-size:13.2px}.due-list small{font-size:10.8px;color:var(--muted);margin-top:3px}.resource-bars{display:grid;gap:11px}.resource-bars a{display:grid;grid-template-columns:105px 1fr 20px;gap:9px;align-items:center;text-decoration:none;font-size:12px}.resource-bars i{height:5px;background:#e8ebf3;border-radius:5px;overflow:hidden}.resource-bars b{display:block;height:100%;background:#6676dd;border-radius:5px}.resource-bars strong{text-align:right}.catalog{display:grid;grid-template-columns:repeat(4,1fr);gap:7px}.catalog a{display:flex;justify-content:space-between;text-decoration:none;padding:9px 11px;background:#f2f4fa;border-radius:6px;font-size:12px}.catalog a:hover{background:var(--accent-soft)}.page-intro{display:flex;justify-content:space-between;align-items:end;margin-bottom:25px}.page-intro h2,.detail-head h2{font-family:Georgia,serif;font-size:37.2px;font-weight:500;margin:7px 0}.page-intro p:not(.kicker){color:var(--muted);max-width:700px;font-size:15.6px;margin:0}.button{border:1px solid #d0d5e3;background:#fff;border-radius:7px;padding:9px 13px;cursor:pointer;font-size:14.4px;font-weight:650}.button.primary{background:var(--accent);border-color:var(--accent);color:#fff}.button.danger{color:var(--red)}.list-tools{display:flex;align-items:center;gap:10px;margin-bottom:12px}.list-tools label{flex:1}.list-tools input,.list-tools select{width:100%;border:1px solid var(--line);border-radius:7px;background:#fff;padding:10px 12px;font-size:14.4px}.list-tools select{width:auto}.list-tools>span{color:var(--muted);font-size:12px}.record-table-wrap{background:#fff;border:1px solid var(--line);border-radius:10px;overflow:auto}.record-table{width:100%;border-collapse:collapse;font-size:13.2px}.record-table th{background:#f2f4fa;text-align:left;text-transform:uppercase;letter-spacing:.08em;color:#75817b;font-size:10.8px;padding:11px 14px;border-bottom:1px solid var(--line)}.record-table td{padding:13px 14px;border-bottom:1px solid #e8ebf3;vertical-align:top}.record-table tr:last-child td{border-bottom:0}.record-table code{font-size:10.8px;color:#5d6475}.record-title{display:block;color:var(--ink);font-weight:700;text-decoration:none}.record-table td>small{display:block;color:#6a7181;margin-top:3px}.record-table td[data-label="Description"]{min-width:260px;max-width:520px;color:var(--muted);line-height:1.45}.badge,.tag,.type-pill{display:inline-block;border-radius:99px;background:#eceff7;padding:3px 7px;font-size:10.8px;text-transform:uppercase;letter-spacing:.05em;white-space:nowrap}.tag{text-transform:none;margin:1px}.badge.status-active,.badge.status-approved,.badge.status-complete,.badge.status-passed,.badge.status-accepted{background:#ddefe5;color:#176143}.badge.status-open,.badge.status-high,.badge.status-critical,.badge.status-failed{background:#f5ded9;color:#8d352c}.badge.status-draft,.badge.status-planned,.badge.status-in-progress,.badge.status-medium{background:#f7e9cf;color:#855717}.breadcrumbs{display:flex;gap:8px;color:var(--muted);font-size:13.2px;margin-bottom:20px}.detail-head{display:flex;justify-content:space-between;align-items:end;margin-bottom:22px}.detail-head h2{margin-bottom:4px}.detail-head>div>code{font-size:12px;color:var(--muted)}.actions{display:flex;gap:7px}.detail-grid{display:grid;grid-template-columns:minmax(0,2fr) minmax(270px,1fr);gap:14px}.detail-grid aside{display:grid;gap:14px;align-content:start}.detail-main{padding:29px}.content-label{color:#75817b;text-transform:uppercase;letter-spacing:.08em;font-size:10.8px;border-bottom:1px solid var(--line);padding-bottom:13px;margin-bottom:23px}.markdown{max-width:790px}.markdown h1{font-family:Georgia,serif;font-size:34.8px;font-weight:500}.markdown h2{font-family:Georgia,serif;font-size:27.6px;font-weight:500;margin-top:1.8em}.markdown h3{font-size:18px;margin-top:1.7em}.markdown p,.markdown li{font-size:15.6px;line-height:1.65;color:#272c3b}.markdown code{background:#eef0f6;border-radius:3px;padding:1px 4px}.markdown pre{padding:15px;background:#10162b;color:#e8ebff;border-radius:7px;overflow:auto}.markdown blockquote{border-left:3px solid var(--accent-light);padding:4px 15px;color:var(--muted);margin-left:0}.table-wrap{overflow:auto}.markdown table{border-collapse:collapse;width:100%;font-size:13.2px}.markdown th,.markdown td{border:1px solid var(--line);padding:8px;text-align:left}.metadata{margin:0}.metadata>div{display:grid;grid-template-columns:105px 1fr;gap:10px;border-top:1px solid #e8ebf3;padding:10px 0}.metadata>div:first-child{border-top:0;padding-top:0}.metadata dt{font-size:10.8px;text-transform:uppercase;letter-spacing:.06em;color:#5d6475}.metadata dd{margin:0;font-size:13.2px;min-width:0}.compact-json{white-space:pre-wrap;font-size:10.8px}.git-panel>code{font-size:10.8px;word-break:break-all}.git-panel p{font-size:12px;color:var(--muted)}.relation{color:var(--accent);text-decoration:none}.history{display:grid}.history>div{display:grid;grid-template-columns:60px 1fr;gap:8px;padding:8px 0;border-top:1px solid #e8ebf3}.history>div:first-child{border-top:0}.history code{font-size:10.8px;color:var(--accent)}.history strong,.history small{display:block}.history strong{font-size:12px}.history small{font-size:10.8px;color:var(--muted);margin-top:2px}.empty{padding:25px;color:#697184;text-align:center;font-size:13.2px;background:#f4f5fa;border-radius:7px}.changes{padding-left:18px}.changes li{margin:8px 0}.diagnostics>div{display:grid;grid-template-columns:58px minmax(120px,180px) minmax(0,1fr);gap:10px;align-items:start;border-top:1px solid var(--line);padding:10px 0}.diagnostics p{margin:0;font-size:13.2px;overflow-wrap:anywhere}.diagnostics code{font-size:10.8px;overflow-wrap:anywhere}.editor,.search-results{width:min(760px,calc(100vw - 30px));border:0;border-radius:12px;padding:0;box-shadow:0 25px 80px rgba(0,0,24,.28)}dialog::backdrop{background:rgba(0,0,24,.55)}.editor form,.search-results{padding:23px}.dialog-head{display:flex;justify-content:space-between;align-items:start}.dialog-head h2{font-family:Georgia,serif;font-weight:500;margin:5px 0 0}.icon-button{border:0;background:#eceff7;width:32px;height:32px;border-radius:50%;font-size:26.4px;cursor:pointer}.editor form>p{font-size:13.2px;color:var(--muted)}.editor textarea{width:100%;height:440px;border:1px solid var(--line);border-radius:7px;background:#10162b;color:#e8ebff;padding:15px;font:13.2px/1.5 ui-monospace,SFMono-Regular,Menlo,monospace;tab-size:2}.dialog-actions{display:flex;justify-content:end;gap:8px;margin-top:14px}.dialog-error{color:var(--red);font-size:13.2px;min-height:18px;margin-top:7px}.result-list{display:grid;margin-top:17px;max-height:60vh;overflow:auto}.result-list a{display:block;text-decoration:none;padding:11px;border-top:1px solid var(--line)}.result-list strong,.result-list small{display:block}.result-list small{color:var(--muted);margin-top:3px}.muted{color:#737a8b}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
-.topbar-status{display:flex;align-items:center;gap:8px}.repo-chip,.validation-chip{display:flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:8px;padding:10px 12px;color:var(--muted);font-size:13.2px;white-space:nowrap;text-decoration:none}.repo-chip:hover,.validation-chip:hover{color:var(--ink);border-color:var(--accent-light)}
+*{box-sizing:border-box}body{margin:0;min-width:320px;background:var(--paper)}button,input,select,textarea{font:inherit}a{color:inherit}.skip-link{position:fixed;left:1rem;top:-4rem;z-index:100;padding:.7rem 1rem;background:#fff}.skip-link:focus{top:1rem}.loading,.fatal{padding:3rem}.shell{display:grid;grid-template-columns:248px 1fr;min-height:100vh}.sidebar{position:fixed;inset:0 auto 0 0;width:248px;background:var(--sidebar);color:#eef1ff;padding:25px 18px 18px;overflow:auto;z-index:20}.brand{display:flex;align-items:center;gap:12px;text-decoration:none;margin:0 7px 27px}.brand .mark{display:block;width:39px;height:39px;border-radius:10px}.brand strong,.brand small{display:block}.brand strong{color:#fff;font-size:18px}.brand small{font-size:13.2px;color:#c5cae2;margin-top:2px}.nav-home,.nav-items a{display:flex;justify-content:space-between;align-items:center;text-decoration:none;border-radius:7px;padding:8px 10px;font-size:15.6px;color:#d5d9ed}.nav-home{margin-bottom:9px}.nav-home:hover,.nav-items a:hover,.nav-home.current,.nav-items a.current{background:#202066;color:#fff}.nav-heading{width:100%;border:0;background:none;color:#b4bbdc;text-transform:uppercase;letter-spacing:.11em;font-size:12px;font-weight:750;display:flex;align-items:center;justify-content:space-between;padding:13px 10px 5px;cursor:pointer}.chevron{display:grid;place-items:center;width:14px;height:22px;font-size:0;line-height:1;transform:none}.chevron:before{content:"";width:6px;height:6px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(-45deg);transform-origin:center;transition:transform .15s}.nav-items{display:none}.nav-group.open .nav-items{display:block}.nav-items small{font-size:12px;color:#b8bed7}.side-foot{position:sticky;bottom:-18px;margin:25px -18px -18px;padding:17px 25px;background:#000024;border-top:1px solid #34345f;color:#cbd0e5;font-size:13.2px;display:flex;align-items:center;gap:8px}.status-dot{width:8px;height:8px;border-radius:50%;background:#9aa39f;display:inline-block;flex:0 0 auto}.status-dot.good,.badge.good{background:#6abf8c}.status-dot.warn,.badge.warn{background:#e9a445}.status-dot.bad,.badge.bad{background:#dc6c5d}.status-dot.neutral{background:#9aabff}.workspace{grid-column:2;min-width:0}.topbar{height:86px;background:rgba(255,255,255,.88);backdrop-filter:blur(10px);border-bottom:1px solid var(--line);padding:0 32px;display:flex;align-items:center;gap:23px;position:sticky;top:0;z-index:10}.topbar>div:first-of-type{min-width:190px}.topbar h1{font-size:20.4px;line-height:1.1;margin:3px 0 0}.eyebrow,.kicker{color:var(--accent);text-transform:uppercase;letter-spacing:.12em;font-weight:760;font-size:10.8px;margin:0}.search{height:39px;max-width:240px;flex:1;margin-left:auto;display:flex;align-items:center;gap:9px;background:#f2f4fa;border:1px solid #dfe3ef;border-radius:8px;padding:0 10px;color:#5d6475}.search input{border:0;outline:0;background:none;min-width:0;flex:1;font-size:15.6px}.search kbd{background:#fff;border:1px solid #dfe3ef;border-radius:4px;padding:1px 5px;font-size:12px}.mobile-sidebar-search{display:none}.repo-chip{display:flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:8px;padding:10px 12px;color:var(--muted);font-size:13.2px;white-space:nowrap;text-decoration:none}.mobile-nav{display:none}.page{padding:30px 34px 70px;max-width:1510px;margin:auto}.hero{color:#f8f9ff;background:linear-gradient(120deg,#000070,#000035);border-radius:13px;padding:28px 31px;display:flex;justify-content:space-between;align-items:end;min-height:158px;box-shadow:var(--shadow);position:relative;overflow:hidden}.hero:after{content:"";position:absolute;width:270px;height:270px;border:55px solid rgba(138,161,255,.1);border-radius:50%;right:-80px;top:-145px}.hero .kicker{color:#cbd3ff}.hero h2{font-family:Georgia,serif;font-weight:500;font-size:33.6px;margin:10px 0 8px;letter-spacing:-.02em}.hero p:not(.kicker){margin:0;color:#dde1f4;font-size:15.6px;max-width:650px}.hero-meta{display:flex;gap:15px;position:relative;z-index:1}.hero-meta span{font-size:12px;text-transform:uppercase;letter-spacing:.08em;color:#e6e8f7;border-left:1px solid #6874ab;padding-left:15px}.metrics{display:grid;grid-template-columns:repeat(4,1fr);gap:12px;margin:14px 0}.metric{background:#fff;border:1px solid var(--line);border-radius:10px;padding:16px 18px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.metric-label{font-size:12px;text-transform:uppercase;letter-spacing:.08em;color:var(--muted);display:flex;align-items:center;gap:7px}.metric>strong{display:block;font-family:Georgia,serif;font-size:30px;font-weight:500;margin:8px 0 2px}.metric>small{font-size:12px;color:#697184}.dashboard-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px}.panel{background:#fff;border:1px solid var(--line);border-radius:11px;padding:21px;min-width:0;box-shadow:0 2px 8px rgba(21,40,33,.025)}.span-2{grid-column:span 2}.panel-head{display:flex;align-items:start;justify-content:space-between;gap:15px;margin-bottom:18px}.panel-head h3{font-size:16.8px;margin:4px 0 0}.panel-head>a{font-size:13.2px;color:var(--accent);font-weight:700}.audit-progress{display:grid;grid-template-columns:105px 1fr;gap:11px 20px;align-items:end}.progress-number strong{font-family:Georgia,serif;font-size:36px;font-weight:500;display:block}.progress-number span{font-size:12px;color:var(--muted)}.progress{height:9px;background:#eceff7;border-radius:9px;overflow:hidden}.progress span{display:block;height:100%;background:linear-gradient(90deg,#0000a5,var(--accent-light));border-radius:9px}.progress-meta{grid-column:2;display:flex;justify-content:space-between;font-size:10.8px;text-transform:uppercase;letter-spacing:.08em;color:#5d6475}.due-list{display:grid}.due-list a{display:grid;grid-template-columns:60px 1fr;text-decoration:none;border-top:1px solid #e8ebf3;padding:10px 0;align-items:center}.due-list a:first-child{border:0;padding-top:0}.due-list time{font-size:12px;color:var(--accent);font-weight:750}.due-list strong,.due-list small{display:block}.due-list strong{font-size:13.2px}.due-list small{font-size:10.8px;color:var(--muted);margin-top:3px}.resource-bars{display:grid;gap:11px}.resource-bars a{display:grid;grid-template-columns:105px 1fr 20px;gap:9px;align-items:center;text-decoration:none;font-size:12px}.resource-bars i{height:5px;background:#e8ebf3;border-radius:5px;overflow:hidden}.resource-bars b{display:block;height:100%;background:#6676dd;border-radius:5px}.resource-bars strong{text-align:right}.catalog{display:grid;grid-template-columns:repeat(4,1fr);gap:7px}.catalog a{display:flex;justify-content:space-between;text-decoration:none;padding:9px 11px;background:#f2f4fa;border-radius:6px;font-size:12px}.catalog a:hover{background:var(--accent-soft)}.page-intro{display:flex;justify-content:space-between;align-items:end;margin-bottom:25px}.page-intro h2,.detail-head h2{font-family:Georgia,serif;font-size:37.2px;font-weight:500;margin:7px 0}.page-intro p:not(.kicker){color:var(--muted);max-width:700px;font-size:15.6px;margin:0}.button{border:1px solid #d0d5e3;background:#fff;border-radius:7px;padding:9px 13px;cursor:pointer;font-size:14.4px;font-weight:650}.button.primary{background:var(--accent);border-color:var(--accent);color:#fff}.button.danger{color:var(--red)}.list-tools{display:flex;align-items:center;gap:10px;margin-bottom:12px}.list-tools label{flex:1}.list-tools input,.list-tools select{width:100%;border:1px solid var(--line);border-radius:7px;background:#fff;padding:10px 12px;font-size:14.4px}.list-tools select{width:auto}.list-tools>span{color:var(--muted);font-size:12px}.record-table-wrap{background:#fff;border:1px solid var(--line);border-radius:10px;overflow:auto}.record-table{width:100%;border-collapse:collapse;font-size:13.2px}.record-table th{background:#f2f4fa;text-align:left;text-transform:uppercase;letter-spacing:.08em;color:#75817b;font-size:10.8px;padding:11px 14px;border-bottom:1px solid var(--line)}.record-table td{padding:13px 14px;border-bottom:1px solid #e8ebf3;vertical-align:top}.record-table tr:last-child td{border-bottom:0}.record-table code{font-size:10.8px;color:#5d6475}.record-title{display:block;color:var(--ink);font-weight:700;text-decoration:none}.record-table td>small{display:block;color:#6a7181;margin-top:3px}.record-table td[data-label="Description"]{min-width:260px;max-width:520px;color:var(--muted);line-height:1.45}.badge,.tag,.type-pill{display:inline-block;border-radius:99px;background:#eceff7;padding:3px 7px;font-size:10.8px;text-transform:uppercase;letter-spacing:.05em;white-space:nowrap}.tag{text-transform:none;margin:1px}.badge.status-active,.badge.status-approved,.badge.status-complete,.badge.status-passed,.badge.status-accepted{background:#ddefe5;color:#176143}.badge.status-open,.badge.status-high,.badge.status-critical,.badge.status-failed{background:#f5ded9;color:#8d352c}.badge.status-draft,.badge.status-planned,.badge.status-in-progress,.badge.status-medium{background:#f7e9cf;color:#855717}.breadcrumbs{display:flex;gap:8px;color:var(--muted);font-size:13.2px;margin-bottom:20px}.detail-head{display:flex;justify-content:space-between;align-items:end;margin-bottom:22px}.detail-head h2{margin-bottom:4px}.detail-head>div>code{font-size:12px;color:var(--muted)}.actions{display:flex;gap:7px}.detail-grid{display:grid;grid-template-columns:minmax(0,2fr) minmax(270px,1fr);gap:14px}.detail-grid aside{display:grid;gap:14px;align-content:start}.detail-main{padding:29px}.content-label{color:#75817b;text-transform:uppercase;letter-spacing:.08em;font-size:10.8px;border-bottom:1px solid var(--line);padding-bottom:13px;margin-bottom:23px}.markdown{max-width:790px}.markdown h1{font-family:Georgia,serif;font-size:34.8px;font-weight:500}.markdown h2{font-family:Georgia,serif;font-size:27.6px;font-weight:500;margin-top:1.8em}.markdown h3{font-size:18px;margin-top:1.7em}.markdown p,.markdown li{font-size:15.6px;line-height:1.65;color:#272c3b}.markdown code{background:#eef0f6;border-radius:3px;padding:1px 4px}.markdown pre{padding:15px;background:#10162b;color:#e8ebff;border-radius:7px;overflow:auto}.markdown blockquote{border-left:3px solid var(--accent-light);padding:4px 15px;color:var(--muted);margin-left:0}.table-wrap{overflow:auto}.markdown table{border-collapse:collapse;width:100%;font-size:13.2px}.markdown th,.markdown td{border:1px solid var(--line);padding:8px;text-align:left}.metadata{margin:0}.metadata>div{display:grid;grid-template-columns:105px 1fr;gap:10px;border-top:1px solid #e8ebf3;padding:10px 0}.metadata>div:first-child{border-top:0;padding-top:0}.metadata dt{font-size:10.8px;text-transform:uppercase;letter-spacing:.06em;color:#5d6475}.metadata dd{margin:0;font-size:13.2px;min-width:0}.compact-json{white-space:pre-wrap;font-size:10.8px}.git-panel>code{font-size:10.8px;word-break:break-all}.git-panel p{font-size:12px;color:var(--muted)}.relation{color:var(--accent);text-decoration:none}.history{display:grid}.history>div{display:grid;grid-template-columns:60px 1fr;gap:8px;padding:8px 0;border-top:1px solid #e8ebf3}.history>div:first-child{border-top:0}.history code{font-size:10.8px;color:var(--accent)}.history strong,.history small{display:block}.history strong{font-size:12px}.history small{font-size:10.8px;color:var(--muted);margin-top:2px}.empty{padding:25px;color:#697184;text-align:center;font-size:13.2px;background:#f4f5fa;border-radius:7px}.changes{padding-left:18px}.changes li{margin:8px 0}.diagnostics>div{display:grid;grid-template-columns:58px minmax(120px,180px) minmax(0,1fr);gap:10px;align-items:start;border-top:1px solid var(--line);padding:10px 0}.diagnostics p{margin:0;font-size:13.2px;overflow-wrap:anywhere}.diagnostics code{font-size:10.8px;overflow-wrap:anywhere}.editor,.search-results{width:min(760px,calc(100vw - 30px));border:0;border-radius:12px;padding:0;box-shadow:0 25px 80px rgba(0,0,24,.28)}dialog::backdrop{background:rgba(0,0,24,.55)}.editor form,.search-results{padding:23px}.dialog-head{display:flex;justify-content:space-between;align-items:start}.dialog-head h2{font-family:Georgia,serif;font-weight:500;margin:5px 0 0}.icon-button{border:0;background:#eceff7;width:32px;height:32px;border-radius:50%;font-size:26.4px;cursor:pointer}.editor form>p{font-size:13.2px;color:var(--muted)}.editor textarea{width:100%;height:440px;border:1px solid var(--line);border-radius:7px;background:#10162b;color:#e8ebff;padding:15px;font:13.2px/1.5 ui-monospace,SFMono-Regular,Menlo,monospace;tab-size:2}.dialog-actions{display:flex;justify-content:end;gap:8px;margin-top:14px}.dialog-error{color:var(--red);font-size:13.2px;min-height:18px;margin-top:7px}.result-list{display:grid;margin-top:17px;max-height:60vh;overflow:auto}.result-list a{display:block;text-decoration:none;padding:11px;border-top:1px solid var(--line)}.result-list strong,.result-list small{display:block}.result-list small{color:var(--muted);margin-top:3px}.muted{color:#737a8b}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
+.topbar-readiness{display:grid;grid-template-columns:minmax(0,1fr);gap:3px;flex:0 1 220px;min-width:155px;padding:5px 8px;border:1px solid transparent;border-radius:8px;color:var(--ink);text-decoration:none}.topbar-readiness:hover{border-color:var(--accent-light);background:var(--accent-soft)}.topbar-readiness-copy{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:7px;align-items:center}.topbar-readiness-copy>span{overflow:hidden;color:var(--muted);font-size:9.6px;font-weight:700;text-overflow:ellipsis;text-transform:uppercase;letter-spacing:.08em;white-space:nowrap}.topbar-readiness-copy>strong{font-size:10.8px;line-height:1}.topbar-readiness>.progress{width:100%;height:5px}.topbar-status{display:flex;flex:1 1 auto;min-width:0;align-items:center;justify-content:flex-end;gap:8px;margin-left:auto}.topbar-status .topbar-search{flex:0 1 240px;width:240px;min-width:140px;margin-left:0}.repo-chip,.validation-chip{display:flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:8px;padding:10px 12px;color:var(--muted);font-size:13.2px;white-space:nowrap;text-decoration:none}.repo-chip:hover,.validation-chip:hover{color:var(--ink);border-color:var(--accent-light)}
 .audit-progress-empty{padding:11px 13px;border-radius:8px;background:var(--surface-soft)}.audit-progress-empty strong,.audit-progress-empty span{display:block}.audit-progress-empty strong{font-size:13.2px}.audit-progress-empty span{margin-top:4px;color:var(--muted);font-size:10.8px}
 .icon-button{position:relative;display:grid;place-items:center;padding:0;color:var(--ink);font-size:0}.icon-button:before,.icon-button:after{content:"";position:absolute;width:13px;height:2px;border-radius:2px;background:currentColor;transform:rotate(45deg)}.icon-button:after{transform:rotate(-45deg)}
 html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(0,1fr);height:100vh;min-height:0}.sidebar{display:flex;flex-direction:column;height:100vh;overflow:hidden;overscroll-behavior:contain}.workspace{height:100vh;overflow-x:hidden;overflow-y:auto;overscroll-behavior:contain;-webkit-overflow-scrolling:touch}
@@ -4322,6 +4331,7 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 .record-content-action{display:flex;justify-content:flex-start;margin-top:20px}.record-content-details{border-top:1px solid var(--line);margin-top:18px;padding-top:13px}.record-content-details summary{cursor:pointer;color:var(--accent);font-size:13.2px;font-weight:750}.record-content-details>p{color:var(--muted);font-size:12px}.record-content-editor>span small{color:var(--muted);font-size:10.8px;font-weight:500}
 .program-setup{grid-template-columns:minmax(250px,.75fr) minmax(440px,1.4fr)}.setup-steps{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:7px}.setup-steps a{display:grid;grid-template-columns:24px minmax(0,1fr);gap:9px;align-items:start;padding:10px;border:1px solid var(--line);border-radius:8px;background:var(--panel);color:var(--ink);text-decoration:none}.setup-steps a:hover{border-color:var(--accent-light)}.setup-steps a>span:first-child{display:grid;place-items:center;width:24px;height:24px;border-radius:50%;background:var(--accent-soft);color:var(--accent);font-size:12px}.setup-steps a.done>span:first-child{background:#dcefe4;color:#125733}.setup-steps strong,.setup-steps small{display:block}.setup-steps strong{font-size:12px}.setup-steps small{margin-top:3px;color:var(--muted);font-size:9.6px;line-height:1.4;font-weight:500}
 .readiness-map{margin:14px 0;background:var(--panel);border:1px solid var(--line);border-radius:11px;padding:20px 22px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.readiness-map-head{display:grid;grid-template-columns:minmax(220px,1fr) minmax(320px,420px);gap:28px;align-items:center;margin-bottom:17px}.readiness-map-head h3{font-size:18px;margin:5px 0 0}.readiness-progress-summary{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:8px 14px;align-items:center}.readiness-progress-summary>div{display:grid;grid-template-columns:minmax(0,1fr) auto auto;gap:3px 8px;align-items:baseline}.readiness-progress-summary>div>span{color:var(--muted);font-size:9.6px;font-weight:700;text-transform:uppercase;letter-spacing:.08em}.readiness-progress-summary>div>strong{font-size:9.6px;font-weight:700;line-height:1.2}.readiness-progress-summary>div>.badge{font-size:8.4px}.readiness-progress-summary .progress,.readiness-progress-summary small{grid-column:1/-1}.readiness-progress-summary small{color:var(--muted);font-size:9.6px}.readiness-progress-summary>.button{white-space:nowrap}.readiness-flow{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:7px}.readiness-flow a{display:grid;grid-template-columns:23px minmax(0,1fr);column-gap:8px;align-content:start;min-width:0;padding:11px;border:1px solid var(--line);border-radius:8px;background:var(--surface-soft);text-decoration:none}.readiness-flow a:hover{border-color:var(--accent-light);background:var(--accent-soft)}.readiness-flow a>span{grid-row:1/4;display:grid;place-items:center;width:23px;height:23px;border-radius:50%;background:var(--primary-gradient);color:#fff;font-size:9.6px;font-weight:800}.readiness-flow strong{font-size:12px;line-height:1.25}.readiness-flow small{grid-column:2;color:var(--muted);font-size:9.6px;line-height:1.4;margin-top:3px}.readiness-state{grid-column:2;justify-self:start;margin-top:8px;padding:3px 6px;border-radius:99px;background:var(--surface-muted);color:var(--muted);font-size:8.4px;line-height:1.2}.readiness-state.good{background:#dcefe4;color:#125733}.readiness-state.warn{background:#f6e8c9;color:#79500f}.readiness-state.bad{background:#f7dfdc;color:#873027}.audit-engagement{display:grid;grid-template-columns:minmax(210px,1fr) minmax(260px,1.25fr) auto;gap:20px;align-items:center;padding:14px 15px;border-radius:8px;background:var(--surface-soft)}.audit-engagement strong{font-size:13.2px}.audit-engagement p,.audit-engagement li{color:var(--muted);font-size:10.8px;line-height:1.5}.audit-engagement p{margin:5px 0 0}.audit-engagement ul{margin:0;padding-left:18px}.audit-engagement .button{white-space:nowrap;text-decoration:none}.resource-directory{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.resource-directory>section{min-width:0;padding:12px;border-radius:8px;background:var(--surface-soft)}.resource-directory h4{margin:0 0 7px;color:var(--muted);font-size:10.8px;text-transform:uppercase;letter-spacing:.08em}.resource-directory a{display:flex;justify-content:space-between;gap:10px;padding:5px 0;border-top:1px solid var(--line);font-size:10.8px;text-decoration:none}.resource-directory a:first-of-type{border-top:0}.resource-directory a:hover span{color:var(--accent)}.resource-directory a strong{color:var(--muted);font-size:9.6px}.record-prose{max-width:790px}.record-prose section{padding:0 0 20px}.record-prose section+section{padding-top:20px;border-top:1px solid var(--line)}.record-prose h3{margin:0 0 7px;color:var(--muted);font-size:10.8px;text-transform:uppercase;letter-spacing:.08em}.record-prose p{margin:0;font-size:16.8px;line-height:1.65;white-space:pre-wrap}.connections-panel .panel-head>span{display:grid;place-items:center;min-width:22px;height:22px;border-radius:99px;background:var(--surface-muted);color:var(--muted);font-size:9.6px}.connections{display:grid}.connections a{display:block;padding:9px 0;border-top:1px solid var(--line);text-decoration:none}.connections a:first-child{padding-top:0;border-top:0}.connections strong,.connections small{display:block}.connections strong{font-size:12px}.connections small{margin-top:3px;color:var(--muted);font-size:9.6px;line-height:1.4}.connections a:hover strong{color:var(--accent)}.connections-more{margin:9px 0 0;color:var(--muted);font-size:9.6px;line-height:1.4}.external-source{display:flex;align-items:flex-start;justify-content:space-between;gap:8px;color:var(--accent);text-decoration:none}.external-source span,.external-source strong,.external-source small{display:block}.external-source strong{font-size:12px;line-height:1.35}.external-source small{margin-top:3px;color:var(--muted);font-size:9.6px;line-height:1.35;overflow-wrap:anywhere}.external-source b{font-size:13.2px}.external-source:hover strong{text-decoration:underline}
+.readiness-map-head{display:flex;justify-content:space-between}.readiness-map-head>.button{flex:0 0 auto;white-space:nowrap}
 .page-title-line{display:flex;align-items:center;gap:8px}.guide-trigger{display:grid;place-items:center;width:24px;height:24px;flex:0 0 auto;padding:0;border:1px solid var(--line);border-radius:50%;background:var(--panel);color:var(--muted);cursor:pointer}.guide-trigger svg{width:16px;height:16px;fill:none;stroke:currentColor;stroke-width:1.7;stroke-linecap:round}.guide-trigger:hover{border-color:var(--accent-light);color:var(--accent)}.guide-trigger:focus-visible{outline:2px solid var(--focus);outline-offset:2px}.page-guide{display:grid;grid-template-columns:1.05fr 1.25fr 1fr;gap:0;margin:0;background:var(--panel);border:1px solid var(--line);border-radius:10px;box-shadow:0 2px 8px rgba(21,40,33,.025)}.resource-guide-popover{position:fixed;z-index:40;overflow:auto;box-shadow:0 18px 50px rgba(0,0,24,.24)}.resource-guide-popover[hidden]{display:none}.page-guide>div{padding:14px 16px;border-left:1px solid var(--line);min-width:0}.page-guide>div:first-child{border-left:0}.page-guide>div>span{display:block;color:var(--accent);text-transform:uppercase;letter-spacing:.09em;font-size:9.6px;font-weight:780;margin-bottom:6px}.page-guide p{color:var(--muted);font-size:12px;line-height:1.5;margin:0}.page-guide>.guide-review{grid-column:1/-1;border-top:1px solid var(--line);border-left:0}.guide-review ul{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:5px 28px;margin:0;padding-left:18px;color:var(--muted);font-size:11px;line-height:1.45}.guide-links{display:flex;flex-wrap:wrap;gap:5px;margin-top:8px}.guide-links a{color:var(--accent);background:var(--accent-soft);border-radius:99px;padding:4px 7px;text-decoration:none;font-size:9.6px;font-weight:700}
 .operation-tracking{display:grid;gap:2px;min-width:0;text-decoration:none}.operation-tracking strong,.operation-tracking small{display:block;overflow-wrap:anywhere}.operation-tracking small{color:var(--muted);line-height:1.35}.operation-tracking.running strong{color:#176143}.operation-tracking.waiting strong,.operation-tracking.mixed strong{color:var(--amber)}.operation-tracking.paused strong{color:var(--red)}a.operation-tracking:hover strong{text-decoration:underline}
 .page-actions{display:flex;align-items:center;justify-content:flex-end;gap:7px;flex-wrap:wrap}.repository-sync-status{min-height:18px;margin:7px 0 0;color:var(--muted);font-size:13.2px}.repository-sync-status.error{color:var(--red)}.repository-sync-alert{display:flex;align-items:flex-start;gap:9px;padding:10px 22px;border-bottom:1px solid #e9c888;background:#fff8e8;color:var(--ink);font-size:12px;line-height:1.45}.repository-sync-alert.syncing{border-color:var(--line);background:var(--surface-soft)}.repository-sync-alert .status-dot{flex:0 0 auto;margin-top:4px}.repository-sync-alert a{margin-left:auto;white-space:nowrap}.repository-state-banner,.repository-override{display:flex;align-items:flex-start;gap:13px;margin-bottom:14px}.repository-state-banner>.status-dot,.repository-override>.status-dot{margin-top:5px}.repository-state-banner h3{margin:3px 0 5px}.repository-state-banner p:last-child,.repository-override p{margin:0;color:var(--muted);line-height:1.5}.repository-override{padding:14px 17px;border:1px solid #e9c888;border-radius:9px;background:#fff8e8;font-size:13.2px}.repository-override strong{display:block;margin-bottom:4px}.onboarding-dialog{width:min(470px,calc(100vw - 30px));max-height:calc(100vh - 32px);margin:0;border:1px solid var(--line);border-radius:13px;padding:0;background:var(--panel);color:var(--ink);box-shadow:0 28px 90px rgba(0,0,24,.38);overflow:hidden}.onboarding-dialog[open]{display:flex;flex-direction:column}.onboarding-dialog::backdrop{background:transparent;backdrop-filter:none}.onboarding-shade{position:fixed;inset:0;z-index:60;pointer-events:none}.onboarding-shade span{position:absolute;background:rgba(0,0,24,.58)}.onboarding-progress{display:grid;flex:0 0 auto;grid-template-columns:repeat(var(--onboarding-step-count),1fr);gap:5px;padding:18px 24px 0}.onboarding-progress span{height:3px;border-radius:3px;background:var(--surface-muted)}.onboarding-progress span.active{background:var(--accent-light)}.onboarding-scroll{min-height:0;overflow-y:auto}.onboarding-head{padding:22px 25px 0}.onboarding-head h2{font-family:Georgia,serif;font-size:30px;font-weight:500;letter-spacing:-.015em;margin:8px 0 0}.onboarding-body{color:var(--muted);font-size:14.4px;line-height:1.6;margin:13px 25px 0}.onboarding-body+.onboarding-body{margin-top:8px}.onboarding-points{display:grid;gap:9px;margin:18px 25px 4px;padding-left:19px}.onboarding-points li{font-size:13.2px;line-height:1.5;padding-left:3px}.onboarding-sections{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin:16px 25px 4px}.onboarding-sections section{padding:13px;border:1px solid var(--line);border-radius:8px;background:var(--surface-soft)}.onboarding-sections strong{font-size:13.2px}.onboarding-sections p{margin:6px 0 0;color:var(--muted);font-size:12px;line-height:1.5}.onboarding-actions{flex:0 0 auto;flex-wrap:wrap;padding:12px 25px 23px;border-top:1px solid var(--line);background:var(--panel)}.onboarding-skip{margin-right:auto;color:var(--muted);text-transform:none;letter-spacing:0;font-size:13.2px}.onboarding-form{display:grid;grid-template-columns:1fr 1fr;gap:13px;margin:18px 25px 0}.onboarding-form label{display:block;min-width:0}.onboarding-form label.wide{grid-column:1/-1}.onboarding-form label>span{display:block;color:var(--ink);font-size:12px;font-weight:720;margin-bottom:6px}.onboarding-form input,.onboarding-form select,.onboarding-form textarea{width:100%;min-height:40px;border:1px solid var(--line);border-radius:7px;background:var(--field);color:var(--ink);padding:9px 10px;font-size:14.4px}.onboarding-form textarea{min-height:78px;resize:vertical}.onboarding-form small{display:block;color:var(--muted);font-size:10.8px;line-height:1.45;margin-top:5px}.onboarding-write-note{color:var(--muted);font-size:10.8px;line-height:1.5;margin:12px 25px 16px}.onboarding-scroll>.dialog-error{margin:8px 25px 0}.onboarding-focus{outline:4px solid var(--accent-light)!important;outline-offset:5px;scroll-margin-top:102px}
@@ -4331,15 +4341,16 @@ html,body{height:100%;overflow:hidden}.shell{grid-template-columns:248px minmax(
 .not-found{max-width:620px;padding:28px}.not-found h2{font-family:Georgia,serif;font-size:37.2px;font-weight:500;margin:7px 0}.not-found>p:not(.kicker){margin:0;color:var(--muted);font-size:15.6px}.not-found .page-actions{justify-content:flex-start;margin-top:22px}
 .button.danger-action{background:var(--red);border-color:var(--red);color:#fff}
 @media(max-width:1200px){.readiness-flow{grid-template-columns:repeat(3,minmax(0,1fr))}.audit-engagement{grid-template-columns:1fr 1fr}.audit-engagement .button{grid-column:1/-1;justify-self:start}}
-@media(max-width:1100px){.search{display:none}.topbar-status{margin-left:auto}.metrics{grid-template-columns:repeat(2,1fr)}.dashboard-grid,.organization-grid{grid-template-columns:repeat(2,1fr)}.catalog{grid-template-columns:repeat(3,1fr)}.span-2{grid-column:span 2}.resource-directory{grid-template-columns:repeat(2,minmax(0,1fr))}}
-@media(max-width:760px){.shell{display:block}.sidebar{transform:translateX(-100%);transition:.2s;box-shadow:8px 0 30px rgba(0,0,0,.2)}.sidebar.shown{transform:translateX(0)}.workspace{min-width:0}.mobile-nav{display:block;border:0;background:none;font-size:24px}.topbar{height:72px;padding:0 16px}.topbar>div:first-of-type{flex:1;min-width:0}.topbar h1{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.topbar-status{display:none}.search{display:flex;flex:0 1 180px;min-width:110px;max-width:none}.search kbd,.topbar .eyebrow{display:none}.page{padding:20px 15px 60px}.hero{display:block;padding:23px}.hero-meta{margin-top:22px;flex-wrap:wrap}.metrics,.dashboard-grid,.organization-grid{grid-template-columns:1fr}.span-2{grid-column:auto}.catalog{grid-template-columns:repeat(2,1fr)}.detail-grid{grid-template-columns:1fr}.page-intro,.detail-head{display:block}.page-intro>.button,.actions{margin-top:15px}.page-intro>.list-header-tools{justify-content:flex-start;margin:15px 0 0}.list-header-tools label{max-width:none}.record-table{min-width:720px}.readiness-map{padding:17px}.readiness-map-head{grid-template-columns:1fr;gap:8px}.readiness-flow{grid-template-columns:repeat(2,minmax(0,1fr))}.audit-engagement{grid-template-columns:1fr}.audit-engagement .button{grid-column:auto}.resource-directory{grid-template-columns:1fr}}
+@media(max-width:1100px){.topbar-search{display:none}.topbar-status{margin-left:auto}.metrics{grid-template-columns:repeat(2,1fr)}.dashboard-grid,.organization-grid{grid-template-columns:repeat(2,1fr)}.catalog{grid-template-columns:repeat(3,1fr)}.span-2{grid-column:span 2}.resource-directory{grid-template-columns:repeat(2,minmax(0,1fr))}}
+@media(max-width:920px){.topbar-status>.validation-chip,.topbar-status>.repo-chip{display:none}}
+@media(max-width:760px){.shell{display:block}.sidebar{transform:translateX(-100%);transition:.2s;box-shadow:8px 0 30px rgba(0,0,0,.2)}.sidebar.shown{transform:translateX(0)}.workspace{min-width:0}.mobile-nav{display:block;border:0;background:none;font-size:24px}.topbar{height:72px;padding:0 16px}.topbar>div:first-of-type{flex:1;min-width:0}.topbar h1{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.topbar-search,.topbar-status>.validation-chip,.topbar-status>.repo-chip{display:none}.topbar-status{display:flex;margin-left:auto}.sidebar .mobile-sidebar-search{display:flex;flex:0 0 auto;width:100%;max-width:none;min-width:0;margin:0 0 14px;background:rgba(255,255,255,.1);border-color:rgba(255,255,255,.2);color:#d5d9ed}.mobile-sidebar-search input{color:#fff}.mobile-sidebar-search input::placeholder{color:#c5cae2}.topbar .eyebrow{display:none}.page{padding:20px 15px 60px}.hero{display:block;padding:23px}.hero-meta{margin-top:22px;flex-wrap:wrap}.metrics,.dashboard-grid,.organization-grid{grid-template-columns:1fr}.span-2{grid-column:auto}.catalog{grid-template-columns:repeat(2,1fr)}.detail-grid{grid-template-columns:1fr}.page-intro,.detail-head{display:block}.page-intro>.button,.actions{margin-top:15px}.page-intro>.list-header-tools{justify-content:flex-start;margin:15px 0 0}.list-header-tools label{max-width:none}.record-table{min-width:720px}.readiness-map{padding:17px}.readiness-map-head{grid-template-columns:1fr;gap:8px}.readiness-flow{grid-template-columns:repeat(2,minmax(0,1fr))}.audit-engagement{grid-template-columns:1fr}.audit-engagement .button{grid-column:auto}.resource-directory{grid-template-columns:1fr}}
 @media(max-width:760px){.setup-banner,.page-guide,.stage-overview-hero,.relationship-note,.group-destination-card,.stage-page-grid,.evidence-map-expectation,.evidence-map-links,.external-evidence-list{grid-template-columns:1fr}.context-workflow,.evidence-map-head{align-items:stretch;flex-direction:column}.evidence-map-actions{flex-wrap:wrap}.page-guide>div{border-left:0;border-top:1px solid var(--line)}.page-guide>div:first-child{border-top:0}.group-overview-head{display:block}.stage-progress-card,.stage-status-link{margin-top:15px}.destination-rollup{text-align:left}.form-grid{grid-template-columns:1fr}.record-table{min-width:0}.record-table thead{display:none}.record-table,.record-table tbody,.record-table tr{display:block}.record-table tr{padding:8px 12px;border-bottom:1px solid var(--line)}.record-table tr:last-child{border-bottom:0}.record-table td:not([data-label]){display:block}.record-table td[data-label]{display:grid;grid-template-columns:105px minmax(0,1fr);gap:10px;border:0;padding:7px 0;align-items:start}.record-table td[data-label]::before{content:attr(data-label);color:#75817b;text-transform:uppercase;letter-spacing:.07em;font-size:9.6px;font-weight:700}.record-table td[data-primary-field]{display:block;padding:8px 0 10px}.record-table td[data-primary-field]::before{display:none}.content-label{align-items:flex-start}.editor form{padding:18px}.diagnostics>div{grid-template-columns:58px minmax(0,1fr)}.diagnostics p{grid-column:1/-1}.changes code{overflow-wrap:anywhere}.onboarding-dialog{max-height:56vh}}
 @media(max-width:760px){.guide-review ul,.resource-review-criteria ul{grid-template-columns:1fr}.collection-review-head,.collection-review-foot{align-items:stretch;flex-direction:column}.record-workflow-action{min-width:0}}
 @media(max-width:520px){.onboarding-form,.onboarding-sections,.setup-steps{grid-template-columns:1fr}.onboarding-form label.wide{grid-column:auto}.onboarding-actions{flex-wrap:wrap}.onboarding-skip{width:100%;order:3;margin:3px 0 0}.readiness-flow{grid-template-columns:1fr}.obligation-card-foot{align-items:flex-start;flex-direction:column}.obligation-action{align-self:flex-start}}
 @media(min-width:761px){.detail-grid{grid-template-columns:minmax(270px,1fr) minmax(0,2fr)}.detail-grid aside{grid-column:1;grid-row:1}.detail-main{grid-column:2;grid-row:1}}
 @media(min-width:761px){.detail-grid.detail-grid-structured{grid-template-columns:1fr}.detail-grid-structured aside{grid-column:1;grid-row:1;grid-template-columns:repeat(auto-fit,minmax(320px,1fr))}.detail-grid-structured aside>.panel{align-self:start}}
 @media(max-width:760px){.sidebar{visibility:hidden;transition:transform .2s,visibility 0s .2s}.sidebar.shown{visibility:visible;transition-delay:0s}.nav-close{display:grid;place-items:center;position:absolute;top:25px;right:18px;width:34px;height:34px;border:1px solid #5966a4;border-radius:50%;background:#11174a;color:#eef1ff;font-size:24px;cursor:pointer}.nav-scrim{display:block;position:fixed;inset:0;border:0;background:rgba(0,0,24,.38);opacity:0;pointer-events:none;transition:opacity .2s;z-index:15}.sidebar.shown+.nav-scrim{opacity:1;pointer-events:auto}.pagination{justify-content:space-between;gap:8px}.page-status{min-width:0}}
-@media(max-width:760px){.topbar{height:56px}.topbar>div:first-of-type{display:none}.search{flex:1;min-width:0}.nav-close{font-size:0}.nav-close:before,.nav-close:after{content:"";position:absolute;width:13px;height:2px;border-radius:2px;background:currentColor;transform:rotate(45deg)}.nav-close:after{transform:rotate(-45deg)}}
+@media(max-width:760px){.topbar{height:56px}.topbar>div:first-of-type{display:none}.topbar-readiness{flex:0 1 220px;min-width:120px}.nav-close{font-size:0}.nav-close:before,.nav-close:after{content:"";position:absolute;width:13px;height:2px;border-radius:2px;background:currentColor;transform:rotate(45deg)}.nav-close:after{transform:rotate(-45deg)}}
 
 .connection-group+.connection-group{margin-top:15px;padding-top:13px;border-top:1px solid var(--line)}.connection-group h4{margin:0 0 8px;color:var(--muted);font-size:9.6px;text-transform:uppercase;letter-spacing:.08em}
 body,button,input,select,textarea,dialog{color:var(--ink)}

package/src/workflow.js

@@ -23,6 +23,7 @@ import { assessProgramReadiness } from "./program-readiness.js";
 import { resolveProgram } from "./program.js";
 import { planReconciliation } from "./reconciliation.js";
 import { currentCalendarDate } from "./time.js";
+import { measureTiming } from "./timing.js";
 import { validateWorkspace } from "./validate.js";
 import { loadWorkspace } from "./workspace.js";
 
@@ -77,6 +78,10 @@ const OWNER_FIELDS = [
  * the complete contract for cross-interface workflow guidance.
  */
 export async function assessWorkflow(input, options = {}) {
+  return measureTiming("workflow-assessment", () => assessWorkflowUnmeasured(input, options));
+}
+
+async function assessWorkflowUnmeasured(input, options = {}) {
   const loaded = input?.resources && input?.model && input?.entries
     ? input
     : await loadWorkspace(input);
@@ -116,7 +121,7 @@ export async function assessWorkflow(input, options = {}) {
     model: loaded.model
   });
   const validation = options.validation || await validateWorkspace(loaded);
-  const reconciliation = options.reconciliation || await planReconciliation(loaded.root);
+  const reconciliation = options.reconciliation || await planReconciliation(loaded);
   const coverage = normalizeCoverage(
     options.coverage
     || (options.auditId ? audits[0]?.coverage : null)