Web UI design system

- rebased-green (visit 1): pass, then land: exit 0
- land (visit 1): pass, then wait-landed: exit 0
- wait-landed (visit 1): pass, then landed-green: held after 25 checks
- landed-green (visit 1): pass, then rebase-merge: exit 0
- rebase-merge (visit 1): pass, then wait-rebased-merge: exit 0
- wait-rebased-merge (visit 1): pass, then rebased-merge-green: held after 1 checks
- rebased-merge-green (visit 1): pass, then merge: exit 0
- merge (visit 1): pass, then wait-main: exit 0
- wait-main (visit 1): pass, then main-green: held after 1 checks
- main-green (visit 1): pass, then close-out: exit 0
- close-out (visit 1): pass, then ship: exit 0
- ship (visit 1): pass, then end: exit 0

## Leaves

- web-design-tokens (step build/build): passed: attempt 1: verifier passed
  - attempt 1 builder, session 41efc683-8f34-4aa9-b96e-01a1ae2f1a96: pass (said done)
  - attempt 1 verifier, session e29ed6df-08c3-4367-9705-01a1ae2fdbc1: pass (Evidence written by the verifier)
- web-fonts-embedded (step build/build): passed: attempt 1: verifier passed
  - attempt 1 builder, session ac9ccd24-a21b-4db5-ae42-01a1ae2ffded: pass (said done)
  - attempt 1 verifier, session ea82f104-45ae-462f-b7ef-01a1ae30d402: pass (Evidence written by the verifier)
- web-design-components (step build/build): passed: attempt 1: verifier passed
  - attempt 1 builder, session d8a23b19-0521-40d7-8a8a-01a1ae30fb94: pass (said done)
  - attempt 1 verifier, session f480fe06-c91c-46bf-a700-01a1ae32bbbf: pass (Evidence written by the verifier)
- web-design-components (step review/review): open
  - attempt 2 fixer in cycle 2, session 565bebd2-8a58-46d8-82be-01a1ae376f85: pass (said done)
  - attempt 2 verifier in cycle 2, session f1ae5389-4c52-42b0-9cf6-01a1ae396568: pass (Evidence written by the verifier)
  - attempt 5 fixer in cycle 3, session 15c5e9fb-2a81-4b70-97b2-01a1ae3c44c9: pass (said done)
  - attempt 5 verifier in cycle 3, session eba36e56-37ea-4f11-8b57-01a1ae3cdd7f: pass (Evidence written by the verifier)

## Checks

- compliance (step review/review): passed after 1 cycle
  - cycle 1: passed, check session 83485d8c-1403-47ed-9e5d-01a1ae342eb3 pass (said done)
  - round 1 (cycle 1): 2 findings, 0 confirmed
    - f1 nit at internal/web/tokens_test.go:11 on web-design-tokens: All 22 colour tokens are pinned for both themes, but the colour-bearing --glow shadow token is not asserted.
    - f2 nit at internal/web/templates/partials.html:9 on web-design-components: A question glyph falls through to the else branch and renders the decision's diamond without a kind class, so it looks the same as a decision.
- quality (step review/review): passed after 3 cycles
  - cycle 1: failed, check session f6731feb-4664-42c5-a23f-01a1ae345166 pass (said done), critic session 285b6e4d-48f1-43db-9e08-01a1ae3677a6 pass (said done)
  - cycle 2: failed, check session 25b52b46-af9f-47dc-910e-01a1ae3a8272 pass (said done), critic session 5cc21fec-bcdb-4b83-a0db-01a1ae3ba521 pass (said done)
  - cycle 3: passed, check session fd01b4e1-9570-41c9-89b0-01a1ae3dd9d2 pass (said done)
  - round 1 (cycle 1): 2 findings, 1 confirmed
    - f1 major at internal/web/templates/partials.html:9 on web-design-components: The row partial puts a run's short ID (Row.ID) as the visible link text, and the steps partial (line 21) does the same with each session's ID. The web UI is an owner-facing surface, and constraint owner-surfaces-no-ids (which is newer than this leaf) says it shows no run, session or change set ID: it names runs and change sets by title. The goldens (testdata/rows.golden.html, steps.golden.html) lock in visible IDs such as 01M6PF31 and 01M6PF3A. The ID can stay in the href, but the visible text should be the title, or the leaf's 'teal short ID' wording needs an owner ruling against the constraint. — confirmed: Confirmed against the code: partials.html:12 renders the row's visible link text as {{.ID}} under an 'ID' column header (line 14), and line 21 does the same for each session's ID; rows.golden.html and steps.golden.html lock in 01M6PF31, 01M6PE7Q and 01M6PF3A as visible text (plus 'cs 01M6NZ8K' in the sub line). Constraint owner-surfaces-no-ids is in this change set's slice and says the web UI shows no run, change set or session ID and names runs and change sets by title. The ID may stay in the href; the visible text and the golden fixtures must change, or the leaf's 'teal short ID' wording needs an owner ruling against the constraint.
    - f2 nit at internal/web/templates/partials.html:15: The glyph partial uses its else branch for question and for any unknown Kind, so a typo'd kind quietly renders the question diamond. That matches the delivered pages, but an explicit question case would make the intent clear.
  - round 2 (cycle 2): 2 findings, 1 confirmed
    - f1 major at internal/web/components.go:33 on web-design-components: gofmt -l lists internal/web/components.go: the fixer commit 1ef23973 dropped ID from the Row struct's first field line, but the Pill, Step, Live and Time/Datetime fields kept the old wider alignment. make check's fmt-check fails on any unformatted file, so the PR's CI fails. Running gofmt -w internal/web/components.go fixes it. go vet and go test ./internal/web/... pass. — confirmed: Confirmed at HEAD e8078b47: gofmt -l internal/web/ lists components.go, and gofmt -d shows the Row struct's Pill, Step, Live and Time/Datetime fields aligned to the old width after ID was dropped. make check's fmt-check fails on it, so CI fails; gofmt -w fixes it.
    - f2 nit at internal/web/templates/partials.html:10: The glyph partial still falls through to its else branch for question and for any unknown Kind, so a mistyped kind silently renders the question diamond. An explicit question case would make the intent clear.
  - round 3 (cycle 3): 1 finding, 0 confirmed
    - f1 nit at internal/web/templates/partials.html:10 on web-design-components: The glyph partial still renders question through its else branch, so an unknown or mistyped Kind silently gets the question diamond; an explicit question case would make the intent clear.
- qa (step review/review): passed after 1 cycle
  - cycle 1: passed, check session 37ef1809-70ca-4503-9c4a-01a1ae347800 pass (said done)
  - round 1 (cycle 1): 1 finding, 0 confirmed
    - f1 minor at internal/web/web.go:95 on web-design-components: The daemon-served overview renders page{} with no Daemon pill, so the live header shows only the live indicator; the daemon pill appears only in the golden test fixture. Fine if a page change set fills it, but nothing on the served page shows it yet.
- scope (step review/review): passed after 1 cycle
  - cycle 1: passed, check session 2a3d23a7-c13e-46e2-b2a9-01a1ae34abcf pass (said done)
  - round 1 (cycle 1): no findings
- model (step review/review): passed after 2 cycles
  - cycle 1: failed, check session ea4c5103-6fd0-4334-a8ce-01a1ae34dace pass (said done), critic session 7d2b4eca-dab2-4593-91cd-01a1ae369a5b pass (said done)
  - cycle 2: passed, check session 109acc42-a569-4b83-ae55-01a1ae3aa626 pass (said done)
  - round 1 (cycle 1): 3 findings, 1 confirmed
    - f1 major at internal/web/templates/partials.html:13 on web-design-components: The model contradicts itself and the code follows the side that breaks a constraint. The constraint owner-surfaces-no-ids (added in 01M6PMSN, after this leaf was planned) names the web UI as an owner-facing surface that never shows a run, change set or node ID and names runs and change sets by title. This leaf's statement still asks for a 'dense row with a teal short ID', and the row and session partials lead with a teal rz-id link showing the ID (goldens rows/steps render 01M6PF31, 01M6PF3A). The page change sets will build on these partials and repeat the violation. Either the leaf and partials drop the ID (link the title instead) or the owner narrows the constraint for the web UI; as it stands, the model cannot be satisfied. — confirmed: Constraint owner-surfaces-no-ids (landed on main via #310/#313, present in this branch) explicitly lists the web UI as an owner-facing surface that never shows run, change set or session IDs and names runs and change sets by title. internal/web/templates/partials.html:13 (row) and :19 (session) lead with an rz-id link rendering the ID under an 'ID' column header, and rows.golden.html/steps.golden.html show 01M6PF31, 01M6PF3A and 'cs 01M6NZ8K'. The leaf statement's 'dense row with a teal short ID' contradicts the constraint, so the model is inconsistent and the shared partials carry the violation into every page; must be resolved before ship.
    - f2 minor at internal/web/static/css/rhiza-tokens.css:1 on web-design-tokens: The leaf says 'one embedded stylesheet' carries the design system, but the code (and decision web-design-system-in-internal-web) ships two, rhiza-tokens.css and rhiza.css, and the layout links both. The statement should name the token sheet, or both files.
    - f3 nit at internal/web/templates/partials.html:9 on web-design-components: The glyph partial renders a fifth kind, question, as an uncoloured diamond (the same shape as decision, without its class). The owner's basics (web-ui-design-basics) define only four glyphs, so the question glyph's look is unmodelled; a Decision or a line in the leaf would pin it.
  - round 2 (cycle 2): 2 findings, 0 confirmed
    - f1 minor at internal/web/static/css/rhiza-tokens.css:1 on web-design-tokens: Still open from cycle 1: the leaf says 'one embedded stylesheet' carries the design system, but the code and decision web-design-system-in-internal-web ship two (rhiza-tokens.css and rhiza.css), and the layout links both. The statement should name the token sheet, or both files.
    - f2 nit at internal/web/templates/partials.html:9 on web-design-components: Still open from cycle 1: the question glyph falls through to the else branch as an uncoloured diamond, the decision's shape without its class. Nothing in the model pins how a question glyph looks.

## Code checks

- step review/code: pass

## Sign-offs

- signoff (visit 1): approved by rule autonomous

## Sessions

- build/build, session 41efc683-8f34-4aa9-b96e-01a1ae2f1a96: tokens input 12, output 2876, cache creation 32837, cache read 296740; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session e29ed6df-08c3-4367-9705-01a1ae2fdbc1: tokens input 16, output 2382, cache creation 33334, cache read 412747; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session ac9ccd24-a21b-4db5-ae42-01a1ae2ffded: tokens input 12, output 1979, cache creation 28228, cache read 290382; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session ea82f104-45ae-462f-b7ef-01a1ae30d402: tokens input 16, output 2415, cache creation 27589, cache read 401988; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session d8a23b19-0521-40d7-8a8a-01a1ae30fb94: tokens input 20, output 10002, cache creation 53761, cache read 617698; helper tokens input 0, output 0, cache creation 0, cache read 0
- build/build, session f480fe06-c91c-46bf-a700-01a1ae32bbbf: tokens input 20, output 3318, cache creation 42178, cache read 589945; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 83485d8c-1403-47ed-9e5d-01a1ae342eb3: tokens input 16, output 2314, cache creation 46018, cache read 490897; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session f6731feb-4664-42c5-a23f-01a1ae345166: tokens input 18, output 3044, cache creation 41170, cache read 521015; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 37ef1809-70ca-4503-9c4a-01a1ae347800: tokens input 24, output 5759, cache creation 44593, cache read 737450; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 2a3d23a7-c13e-46e2-b2a9-01a1ae34abcf: tokens input 12, output 1226, cache creation 35872, cache read 318141; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session ea4c5103-6fd0-4334-a8ce-01a1ae34dace: tokens input 18, output 3405, cache creation 44949, cache read 541638; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 285b6e4d-48f1-43db-9e08-01a1ae3677a6: tokens input 16, output 2843, cache creation 32222, cache read 415106; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 7d2b4eca-dab2-4593-91cd-01a1ae369a5b: tokens input 14, output 2274, cache creation 29502, cache read 348343; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 565bebd2-8a58-46d8-82be-01a1ae376f85: tokens input 28, output 6862, cache creation 43417, cache read 860055; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session f1ae5389-4c52-42b0-9cf6-01a1ae396568: tokens input 18, output 2956, cache creation 41636, cache read 533678; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 25b52b46-af9f-47dc-910e-01a1ae3a8272: tokens input 18, output 2790, cache creation 42002, cache read 521145; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 109acc42-a569-4b83-ae55-01a1ae3aa626: tokens input 16, output 2620, cache creation 48230, cache read 485515; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 5cc21fec-bcdb-4b83-a0db-01a1ae3ba521: tokens input 14, output 1930, cache creation 24400, cache read 332102; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session 15c5e9fb-2a81-4b70-97b2-01a1ae3c44c9: tokens input 8, output 890, cache creation 20932, cache read 176817; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session eba36e56-37ea-4f11-8b57-01a1ae3cdd7f: tokens input 18, output 1899, cache creation 37568, cache read 502700; helper tokens input 0, output 0, cache creation 0, cache read 0
- review/review, session fd01b4e1-9570-41c9-89b0-01a1ae3dd9d2: tokens input 14, output 2342, cache creation 48162, cache read 414858; helper tokens input 0, output 0, cache creation 0, cache read 0

Totals: tokens input 348, output 66126, cache creation 798600, cache read 9808960; helper tokens input 0, output 0, cache creation 0, cache read 0