fix: [verified] simplify Roadmap adoption timeline

README.md

@@ -31,6 +31,10 @@ Top-level sections are Organization, Strategy, and Contribution, each with an in
 
 Archify 3.0.1 is vendored under `vendor/archify/` from commit `d5a1333d7447c866a765adac7d4d062f2f02e4d2`. MIT and third-party notices are preserved. `diagrams/` holds editable JSON; `pnpm diagrams:build` validates and generates local standalone viewers before every site build. The iframe is sandboxed without same-origin permission. See `docs/contribution/diagrams.md` for capability analysis, authoring, boundaries, and upgrade procedure.
 
+The build checks upstream provenance before applying the portal integration: `scripts/inline-viewer.css` restores compact embed controls, two guarded preset restrictions are removed from generated viewers only, and `scripts/viewer-theme-bridge.js` synchronizes theme with the portal through source-validated messages. Vendor files remain unchanged. Delivery receipts describe the upstream artifact before this integration, not the final served bytes. Theme changes do not reload viewers or discard visual presets. PNG, JPEG, WebP and SVG downloads remain available; browser-dependent exports stay disabled when unsupported.
+
+For interaction acceptance, serve the production build on port 4173 and run `pnpm test:browser` with an installed Playwright Chromium (or `PLAYWRIGHT_CHROMIUM_EXECUTABLE`). This checks story layouts, portal/diagram theme synchronization, all four presets, actual exported artifact decoding, route changes, and fullscreen click/Escape/focus behavior at desktop and mobile widths. Screenshots, downloads and results are saved under ignored `.cache/` directories.
+
 ## Design
 
 Inspired by https://www.eldorado.gg/: Lato, near-black navigation, charcoal, gold `#ffc950`, light panels, bold headings. Original documentation artwork and square panels; no official marketplace assets or business claims. See `docs/core/reference.md`.

diagrams/ai-adoption-target.architecture.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {"title": "TO-BE: governed AI adoption", "output": "static/diagrams/ai-adoption-target/index.html", "quality_profile": "showcase"},
+  "components": [
+    {"id":"people","type":"external","label":"Accountable people","sublabel":"Existing teams; approved work","pos":[40,80],"size":[240,80]},
+    {"id":"coordinator","type":"backend","label":"One SDLC coordinator","sublabel":"Data & AI; durable task ledger","pos":[440,80],"size":[240,80]},
+    {"id":"registry","type":"database","label":"Governed skills registry","sublabel":"Pinned bundles + qualified adapters","pos":[840,80],"size":[260,80]},
+    {"id":"provider","type":"cloud","label":"Model providers","sublabel":"Approved data + retention terms","pos":[40,340],"size":[240,80]},
+    {"id":"clients","type":"frontend","label":"Local laptop contributors","sublabel":"Copilot / Claude Code / Cline","pos":[440,340],"size":[240,80]},
+    {"id":"gates","type":"security","label":"Repository + CI gates","sublabel":"Independent exact-revision checks","pos":[440,600],"size":[240,80]},
+    {"id":"approval","type":"external","label":"Human release approval","sublabel":"Exact artifact; scoped; expires","pos":[840,600],"size":[260,80]},
+    {"id":"release","type":"security","label":"Release service","sublabel":"Production credentials only here","pos":[840,860],"size":[260,80]},
+    {"id":"audit","type":"database","label":"Audit + measurement","sublabel":"Restricted evidence; feedback","pos":[40,860],"size":[240,80]}
+  ],
+  "boundaries": [
+    {"kind":"security-group","label":"Supply-chain review","wraps":["registry"]},
+    {"kind":"security-group","label":"Data / egress boundary","wraps":["provider"]},
+    {"kind":"security-group","label":"Untrusted local proposals","wraps":["clients"]},
+    {"kind":"security-group","label":"Independent delivery authority","wraps":["gates","approval","release"]}
+  ],
+  "connections": [
+    {"id":"approved-work","from":"people","to":"coordinator","label":"Authorize scope","variant":"security"},
+    {"id":"coord-skills","from":"registry","to":"coordinator","label":"Pinned skills"},
+    {"id":"task-proposals","from":"coordinator","to":"clients","label":"Route tasks","variant":"dashed"},
+    {"id":"local-skills","from":"registry","to":"clients","label":"Qualified bundle","fromSide":"bottom","toSide":"right"},
+    {"id":"inference","from":"clients","to":"provider","label":"Allowed data","variant":"security"},
+    {"id":"proposals","from":"clients","to":"gates","label":"Propose changes","variant":"dashed"},
+    {"id":"evidence","from":"gates","to":"approval","label":"Verified evidence"},
+    {"id":"authorize","from":"approval","to":"release","label":"Approve artifact","variant":"security"},
+    {"id":"outcomes","from":"release","to":"audit","label":"Outcome evidence"},
+    {"id":"feedback","from":"audit","to":"people","label":"Review outcomes","variant":"dashed"}
+  ],
+  "cards": [
+    {"dot":"cyan","title":"Target, not deployed","items":["One logical coordinating function; resilient ledger and human takeover.","Registry content is guidance, not authority. No laptop or coordinator production credentials."]},
+    {"dot":"rose","title":"Human authority","items":["Department leaders retain accountability; independent reviewers accept actual artifacts.","CI and release controls fail closed; approval is bound to the exact revision."]},
+    {"dot":"emerald","title":"Evidence loop","items":["Audit feedback informs people and the next authorized coordinator task.","Approved provider routing applies to coordinator and local inference; no silent policy-changing fallback."]}
+  ]
+}

diagrams/organization-reporting.architecture.json

@@ -77,7 +77,7 @@
       "id": "engineers",
       "type": "frontend",
       "label": "Software engineers",
-      "sublabel": "Product Engineering teams",
+      "sublabel": "Product Engineering team",
       "pos": [
         1480,
         40
@@ -220,10 +220,10 @@
     },
     {
       "dot": "amber",
-      "title": "Cross-functional execution",
+      "title": "Interdepartmental collaboration",
       "items": [
         "Product Owners, Designers and Tech Leads align on product outcomes.",
-        "AI Enablement works across engineering teams."
+        "Data & AI enables AI adoption across Technology."
       ]
     }
   ]

diagrams/organization-structure.architecture.json

@@ -23,7 +23,7 @@
       "label": "Management",
       "sublabel": "CEO / COO",
       "pos": [
-        660,
+        820,
         40
       ],
       "size": [
@@ -41,7 +41,7 @@
         280
       ],
       "size": [
-        240,
+        280,
         80
       ]
     },
@@ -51,11 +51,11 @@
       "label": "Technology",
       "sublabel": "Engineering and platform",
       "pos": [
-        320,
+        360,
         280
       ],
       "size": [
-        240,
+        280,
         80
       ]
     },
@@ -65,11 +65,11 @@
       "label": "Operations",
       "sublabel": "Service, resolution and trust",
       "pos": [
-        600,
+        680,
         280
       ],
       "size": [
-        240,
+        280,
         80
       ]
     },
@@ -79,11 +79,11 @@
       "label": "Marketing",
       "sublabel": "Brand and customer growth",
       "pos": [
-        880,
+        1000,
         280
       ],
       "size": [
-        240,
+        280,
         80
       ]
     },
@@ -93,11 +93,11 @@
       "label": "Finance & Accounting",
       "sublabel": "Financial performance and controls",
       "pos": [
-        1160,
+        1320,
         280
       ],
       "size": [
-        240,
+        280,
         80
       ]
     },
@@ -107,11 +107,165 @@
       "label": "HR & Administration",
       "sublabel": "People and workplace",
       "pos": [
-        1440,
+        1640,
         280
       ],
       "size": [
-        240,
+        280,
+        80
+      ]
+    },
+    {
+      "id": "product-team-1",
+      "type": "frontend",
+      "label": "Product Management",
+      "sublabel": "Strategy, priorities and outcomes",
+      "pos": [
+        100,
+        480
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "product-team-2",
+      "type": "frontend",
+      "label": "Product Design",
+      "sublabel": "Research and experience design",
+      "pos": [
+        100,
+        620
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "technology-team-1",
+      "type": "frontend",
+      "label": "Product Engineering",
+      "sublabel": "Marketplace software delivery",
+      "pos": [
+        420,
+        480
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "technology-team-2",
+      "type": "frontend",
+      "label": "Platform & IT",
+      "sublabel": "Reliability and internal systems",
+      "pos": [
+        420,
+        620
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "technology-team-3",
+      "type": "frontend",
+      "label": "Architecture & Security",
+      "sublabel": "Technical standards and protection",
+      "pos": [
+        420,
+        760
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "technology-team-4",
+      "type": "frontend",
+      "label": "Quality Engineering",
+      "sublabel": "Testing and release quality",
+      "pos": [
+        420,
+        900
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "technology-team-5",
+      "type": "frontend",
+      "label": "Data & AI",
+      "sublabel": "Analytics, ML and AI enablement",
+      "pos": [
+        420,
+        1040
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "operations-team-1",
+      "type": "frontend",
+      "label": "Operations Squad",
+      "sublabel": "Service, resolution, risk and quality",
+      "pos": [
+        740,
+        480
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "marketing-team-1",
+      "type": "frontend",
+      "label": "Marketing Squad",
+      "sublabel": "Brand, acquisition and retention",
+      "pos": [
+        1060,
+        480
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "finance-team-1",
+      "type": "frontend",
+      "label": "Finance & Accounting Squad",
+      "sublabel": "Planning, controls and payments",
+      "pos": [
+        1380,
+        480
+      ],
+      "size": [
+        220,
+        80
+      ]
+    },
+    {
+      "id": "people-team-1",
+      "type": "frontend",
+      "label": "People & Administration Squad",
+      "sublabel": "Talent, people and workplace",
+      "pos": [
+        1700,
+        480
+      ],
+      "size": [
+        220,
         80
       ]
     }
@@ -121,43 +275,137 @@
       "id": "management-product",
       "from": "management",
       "to": "product",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
     },
     {
       "id": "management-technology",
       "from": "management",
       "to": "technology",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
     },
     {
       "id": "management-operations",
       "from": "management",
       "to": "operations",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
     },
     {
       "id": "management-marketing",
       "from": "management",
       "to": "marketing",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
     },
     {
       "id": "management-finance",
       "from": "management",
       "to": "finance",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
     },
     {
       "id": "management-people",
       "from": "management",
       "to": "people",
-      "label": "Coordinates",
+      "variant": "default",
-      "variant": "default"
+      "fromSide": "bottom",
+      "toSide": "top"
+    },
+    {
+      "id": "product-1",
+      "from": "product",
+      "to": "product-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "product-2",
+      "from": "product",
+      "to": "product-team-2",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "technology-1",
+      "from": "technology",
+      "to": "technology-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "technology-2",
+      "from": "technology",
+      "to": "technology-team-2",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "technology-3",
+      "from": "technology",
+      "to": "technology-team-3",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "technology-4",
+      "from": "technology",
+      "to": "technology-team-4",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "technology-5",
+      "from": "technology",
+      "to": "technology-team-5",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "operations-1",
+      "from": "operations",
+      "to": "operations-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "marketing-1",
+      "from": "marketing",
+      "to": "marketing-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "finance-1",
+      "from": "finance",
+      "to": "finance-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
+    },
+    {
+      "id": "people-1",
+      "from": "people",
+      "to": "people-team-1",
+      "variant": "default",
+      "fromSide": "bottom",
+      "toSide": "left"
     }
   ],
   "cards": [
@@ -165,24 +413,26 @@
       "dot": "cyan",
       "title": "Product",
       "items": [
-        "Orders; Categories",
+        "Product Management",
-        "Sellers & Operations",
+        "Product Design"
-        "Data & Intelligence; Product Design"
       ]
     },
     {
       "dot": "amber",
       "title": "Technology",
       "items": [
-        "Product Engineering; Quality Engineering",
+        "Product Engineering",
-        "Platform & Reliability; Architecture & Security",
+        "Platform & IT",
-        "AI Enablement; Internal IT"
+        "Architecture & Security",
+        "Quality Engineering",
+        "Data & AI"
       ]
     },
     {
       "dot": "cyan",
       "title": "Operations",
       "items": [
+        "Operations Squad",
         "Customer Support; Trust & Resolution",
         "Risk & Fraud",
         "Operational Quality"
@@ -192,6 +442,7 @@
       "dot": "amber",
       "title": "Marketing",
       "items": [
+        "Marketing Squad",
         "Brand & Community; Creative; SEO",
         "PPC & Affiliate; Influencer",
         "CRM"
@@ -201,6 +452,7 @@
       "dot": "cyan",
       "title": "Finance & Accounting",
       "items": [
+        "Finance & Accounting Squad",
         "Financial Planning & Analysis",
         "Accounting, Tax & Controls",
         "Treasury & Payment Operations"
@@ -210,6 +462,7 @@
       "dot": "amber",
       "title": "HR & Administration",
       "items": [
+        "People & Administration Squad",
         "Talent Acquisition",
         "People Operations",
         "Office & Administration"

diagrams/strategy-adoption-mobile.architecture.json

@@ -0,0 +1,139 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Learn before expanding",
+    "output": "static/diagrams/strategy-adoption-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "choose",
+      "type": "backend",
+      "label": "Choose workflow",
+      "sublabel": "Department outcome",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "coach",
+      "type": "backend",
+      "label": "Coach people",
+      "sublabel": "Verify + recover",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "canary",
+      "type": "backend",
+      "label": "Run bounded canary",
+      "sublabel": "Qualified skill + client",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "accept",
+      "type": "backend",
+      "label": "Accept real work",
+      "sublabel": "Independent review",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "feedback",
+      "type": "backend",
+      "label": "Review feedback",
+      "sublabel": "Usefulness + non-use",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "expand",
+      "type": "backend",
+      "label": "Expand or revise",
+      "sublabel": "Keep a manual path",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "choose",
+      "to": "coach",
+      "label": "Prepare"
+    },
+    {
+      "id": "flow-1",
+      "from": "coach",
+      "to": "canary",
+      "label": "support pilot"
+    },
+    {
+      "id": "flow-2",
+      "from": "canary",
+      "to": "accept",
+      "label": "Verify"
+    },
+    {
+      "id": "flow-3",
+      "from": "accept",
+      "to": "feedback",
+      "label": "learn"
+    },
+    {
+      "id": "flow-4",
+      "from": "feedback",
+      "to": "expand",
+      "label": "decide"
+    },
+    {
+      "id": "feedback-loop",
+      "from": "expand",
+      "to": "coach",
+      "label": "Review revision",
+      "variant": "dashed",
+      "fromSide": "right",
+      "toSide": "right"
+    }
+  ]
+}

diagrams/strategy-adoption.architecture.json

@@ -0,0 +1,139 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Learn before expanding",
+    "output": "static/diagrams/strategy-adoption/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "choose",
+      "type": "backend",
+      "label": "Choose workflow",
+      "sublabel": "Department outcome",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "coach",
+      "type": "backend",
+      "label": "Coach people",
+      "sublabel": "Verify + recover",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "canary",
+      "type": "backend",
+      "label": "Run bounded canary",
+      "sublabel": "Qualified skill + client",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "accept",
+      "type": "backend",
+      "label": "Accept real work",
+      "sublabel": "Independent review",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "feedback",
+      "type": "backend",
+      "label": "Review feedback",
+      "sublabel": "Usefulness + non-use",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "expand",
+      "type": "backend",
+      "label": "Expand or revise",
+      "sublabel": "Keep a manual path",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "choose",
+      "to": "coach",
+      "label": "Prepare"
+    },
+    {
+      "id": "flow-1",
+      "from": "coach",
+      "to": "canary",
+      "label": "support pilot"
+    },
+    {
+      "id": "flow-2",
+      "from": "canary",
+      "to": "accept",
+      "label": "Verify"
+    },
+    {
+      "id": "flow-3",
+      "from": "accept",
+      "to": "feedback",
+      "label": "learn"
+    },
+    {
+      "id": "flow-4",
+      "from": "feedback",
+      "to": "expand",
+      "label": "decide"
+    },
+    {
+      "id": "feedback-loop",
+      "from": "expand",
+      "to": "coach",
+      "label": "Review revision",
+      "variant": "dashed",
+      "fromSide": "right",
+      "toSide": "right"
+    }
+  ]
+}

diagrams/strategy-governance-mobile.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Independent approval",
+    "output": "static/diagrams/strategy-governance-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "owner",
+      "type": "security",
+      "label": "Owner proposes",
+      "sublabel": "Existing accountable team",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "review",
+      "type": "security",
+      "label": "Independent review",
+      "sublabel": "Quality + risk evidence",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "canary",
+      "type": "security",
+      "label": "Bounded canary",
+      "sublabel": "Qualified client path",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "approve",
+      "type": "security",
+      "label": "Approve revision",
+      "sublabel": "Exact digest + scope",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "publish",
+      "type": "security",
+      "label": "Publish bundle",
+      "sublabel": "Data & AI catalog",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "distribute",
+      "type": "security",
+      "label": "Verify effective state",
+      "sublabel": "Platform & IT",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "owner",
+      "to": "review",
+      "label": "submit"
+    },
+    {
+      "id": "flow-1",
+      "from": "review",
+      "to": "canary",
+      "label": "qualify"
+    },
+    {
+      "id": "flow-2",
+      "from": "canary",
+      "to": "approve",
+      "label": "Accept"
+    },
+    {
+      "id": "flow-3",
+      "from": "approve",
+      "to": "publish",
+      "label": "record approval"
+    },
+    {
+      "id": "flow-4",
+      "from": "publish",
+      "to": "distribute",
+      "label": "Deliver"
+    }
+  ]
+}

diagrams/strategy-governance.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Independent approval",
+    "output": "static/diagrams/strategy-governance/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "owner",
+      "type": "security",
+      "label": "Owner proposes",
+      "sublabel": "Existing accountable team",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "review",
+      "type": "security",
+      "label": "Independent review",
+      "sublabel": "Quality + risk evidence",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "canary",
+      "type": "security",
+      "label": "Bounded canary",
+      "sublabel": "Qualified client path",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "approve",
+      "type": "security",
+      "label": "Approve revision",
+      "sublabel": "Exact digest + scope",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "publish",
+      "type": "security",
+      "label": "Publish bundle",
+      "sublabel": "Data & AI catalog",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "distribute",
+      "type": "security",
+      "label": "Verify effective state",
+      "sublabel": "Platform & IT",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "owner",
+      "to": "review",
+      "label": "submit"
+    },
+    {
+      "id": "flow-1",
+      "from": "review",
+      "to": "canary",
+      "label": "qualify"
+    },
+    {
+      "id": "flow-2",
+      "from": "canary",
+      "to": "approve",
+      "label": "Accept"
+    },
+    {
+      "id": "flow-3",
+      "from": "approve",
+      "to": "publish",
+      "label": "record approval"
+    },
+    {
+      "id": "flow-4",
+      "from": "publish",
+      "to": "distribute",
+      "label": "Deliver"
+    }
+  ]
+}

diagrams/strategy-journey-mobile.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Skills before authority",
+    "output": "static/diagrams/strategy-journey-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "skills",
+      "type": "backend",
+      "label": "Govern skills",
+      "sublabel": "Owner + pinned revision",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "prove",
+      "type": "backend",
+      "label": "Prove quality",
+      "sublabel": "Independent evaluation",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "pilot",
+      "type": "backend",
+      "label": "Pilot with people",
+      "sublabel": "Qualified local clients",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "distribute",
+      "type": "backend",
+      "label": "Verify distribution",
+      "sublabel": "Canary + rollback",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "coordinate",
+      "type": "backend",
+      "label": "Coordinate delivery",
+      "sublabel": "One logical SDLC agent",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "expand",
+      "type": "backend",
+      "label": "Expand by evidence",
+      "sublabel": "Department outcomes",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "skills",
+      "to": "prove",
+      "label": "qualify"
+    },
+    {
+      "id": "flow-1",
+      "from": "prove",
+      "to": "pilot",
+      "label": "coach"
+    },
+    {
+      "id": "flow-2",
+      "from": "pilot",
+      "to": "distribute",
+      "label": "Verify"
+    },
+    {
+      "id": "flow-3",
+      "from": "distribute",
+      "to": "coordinate",
+      "label": "prove recovery"
+    },
+    {
+      "id": "flow-4",
+      "from": "coordinate",
+      "to": "expand",
+      "label": "Justify"
+    }
+  ]
+}

diagrams/strategy-journey.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Skills before authority",
+    "output": "static/diagrams/strategy-journey/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "skills",
+      "type": "backend",
+      "label": "Govern skills",
+      "sublabel": "Owner + pinned revision",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "prove",
+      "type": "backend",
+      "label": "Prove quality",
+      "sublabel": "Independent evaluation",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "pilot",
+      "type": "backend",
+      "label": "Pilot with people",
+      "sublabel": "Qualified local clients",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "distribute",
+      "type": "backend",
+      "label": "Verify distribution",
+      "sublabel": "Canary + rollback",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "coordinate",
+      "type": "backend",
+      "label": "Coordinate delivery",
+      "sublabel": "One logical SDLC agent",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "expand",
+      "type": "backend",
+      "label": "Expand by evidence",
+      "sublabel": "Department outcomes",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "skills",
+      "to": "prove",
+      "label": "qualify"
+    },
+    {
+      "id": "flow-1",
+      "from": "prove",
+      "to": "pilot",
+      "label": "coach"
+    },
+    {
+      "id": "flow-2",
+      "from": "pilot",
+      "to": "distribute",
+      "label": "Verify"
+    },
+    {
+      "id": "flow-3",
+      "from": "distribute",
+      "to": "coordinate",
+      "label": "prove recovery"
+    },
+    {
+      "id": "flow-4",
+      "from": "coordinate",
+      "to": "expand",
+      "label": "Justify"
+    }
+  ]
+}

diagrams/strategy-maintenance-mobile.architecture.json

@@ -0,0 +1,141 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Maintain trust over time",
+    "output": "static/diagrams/strategy-maintenance-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "monitor",
+      "type": "backend",
+      "label": "Monitor skills",
+      "sublabel": "Usefulness + safety",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "triage",
+      "type": "backend",
+      "label": "Triage changes",
+      "sublabel": "Owner + risk review",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "correct",
+      "type": "backend",
+      "label": "Correct and test",
+      "sublabel": "Independent regression",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "decision",
+      "type": "backend",
+      "label": "Approve or hold",
+      "sublabel": "Exact revised bundle",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "promote",
+      "type": "backend",
+      "label": "Promote safely",
+      "sublabel": "Verify state + monitor",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "observe",
+      "type": "backend",
+      "label": "Quarantine / rollback",
+      "sublabel": "Revoke unsafe revision",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "monitor",
+      "to": "triage",
+      "label": "Detect"
+    },
+    {
+      "id": "flow-1",
+      "from": "triage",
+      "to": "correct",
+      "label": "scope correction"
+    },
+    {
+      "id": "flow-2",
+      "from": "correct",
+      "to": "decision",
+      "label": "Prove"
+    },
+    {
+      "id": "flow-3",
+      "from": "decision",
+      "to": "promote",
+      "label": "authorize"
+    },
+
+    {
+      "id": "unsafe",
+      "from": "triage",
+      "to": "observe",
+      "label": "Unsafe",
+      "variant": "security",
+      "fromSide": "right",
+      "toSide": "right"
+    },
+    {
+      "id": "review-loop",
+      "from": "observe",
+      "to": "correct",
+      "label": "Requalify",
+      "variant": "dashed"
+    }
+  ]
+}

diagrams/strategy-maintenance.architecture.json

@@ -0,0 +1,141 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Maintain trust over time",
+    "output": "static/diagrams/strategy-maintenance/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "monitor",
+      "type": "backend",
+      "label": "Monitor skills",
+      "sublabel": "Usefulness + safety",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "triage",
+      "type": "backend",
+      "label": "Triage changes",
+      "sublabel": "Owner + risk review",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "correct",
+      "type": "backend",
+      "label": "Correct and test",
+      "sublabel": "Independent regression",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "decision",
+      "type": "backend",
+      "label": "Approve or hold",
+      "sublabel": "Exact revised bundle",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "promote",
+      "type": "backend",
+      "label": "Promote safely",
+      "sublabel": "Verify state + monitor",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "observe",
+      "type": "backend",
+      "label": "Quarantine / rollback",
+      "sublabel": "Revoke unsafe revision",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "monitor",
+      "to": "triage",
+      "label": "Detect"
+    },
+    {
+      "id": "flow-1",
+      "from": "triage",
+      "to": "correct",
+      "label": "scope correction"
+    },
+    {
+      "id": "flow-2",
+      "from": "correct",
+      "to": "decision",
+      "label": "Prove"
+    },
+    {
+      "id": "flow-3",
+      "from": "decision",
+      "to": "promote",
+      "label": "authorize"
+    },
+
+    {
+      "id": "unsafe",
+      "from": "triage",
+      "to": "observe",
+      "label": "Unsafe",
+      "variant": "security",
+      "fromSide": "right",
+      "toSide": "right"
+    },
+    {
+      "id": "review-loop",
+      "from": "observe",
+      "to": "correct",
+      "label": "Requalify",
+      "variant": "dashed"
+    }
+  ]
+}

diagrams/strategy-measurement-mobile.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Measure skills adoption",
+    "output": "static/diagrams/strategy-measurement-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "collect",
+      "type": "backend",
+      "label": "Establish baseline",
+      "sublabel": "Current workflow",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "validate",
+      "type": "backend",
+      "label": "Join evidence",
+      "sublabel": "Tasks / versions / costs",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "calculate",
+      "type": "backend",
+      "label": "Measure the pilot",
+      "sublabel": "Outcomes / quality",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "balance",
+      "type": "backend",
+      "label": "Report together",
+      "sublabel": "Cost / confidence / gaps",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "weigh",
+      "type": "backend",
+      "label": "Broader adoption",
+      "sublabel": "Availability + use",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "decide",
+      "type": "backend",
+      "label": "Ongoing monitoring",
+      "sublabel": "Review + maintenance",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "collect",
+      "to": "validate",
+      "label": "prepare"
+    },
+    {
+      "id": "flow-1",
+      "from": "validate",
+      "to": "calculate",
+      "label": "collect"
+    },
+    {
+      "id": "flow-2",
+      "from": "calculate",
+      "to": "balance",
+      "label": "calculate"
+    },
+    {
+      "id": "flow-3",
+      "from": "balance",
+      "to": "weigh",
+      "label": "extend"
+    },
+    {
+      "id": "flow-4",
+      "from": "weigh",
+      "to": "decide",
+      "label": "repeat"
+    }
+  ]
+}

diagrams/strategy-measurement.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Measure skills adoption",
+    "output": "static/diagrams/strategy-measurement/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "collect",
+      "type": "backend",
+      "label": "Establish baseline",
+      "sublabel": "Current workflow",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "validate",
+      "type": "backend",
+      "label": "Join evidence",
+      "sublabel": "Tasks / versions / costs",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "calculate",
+      "type": "backend",
+      "label": "Measure the pilot",
+      "sublabel": "Outcomes / quality",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "balance",
+      "type": "backend",
+      "label": "Report together",
+      "sublabel": "Cost / confidence / gaps",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "weigh",
+      "type": "backend",
+      "label": "Broader adoption",
+      "sublabel": "Availability + use",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "decide",
+      "type": "backend",
+      "label": "Ongoing monitoring",
+      "sublabel": "Review + maintenance",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "collect",
+      "to": "validate",
+      "label": "prepare"
+    },
+    {
+      "id": "flow-1",
+      "from": "validate",
+      "to": "calculate",
+      "label": "collect"
+    },
+    {
+      "id": "flow-2",
+      "from": "calculate",
+      "to": "balance",
+      "label": "calculate"
+    },
+    {
+      "id": "flow-3",
+      "from": "balance",
+      "to": "weigh",
+      "label": "extend"
+    },
+    {
+      "id": "flow-4",
+      "from": "weigh",
+      "to": "decide",
+      "label": "repeat"
+    }
+  ]
+}

diagrams/strategy-quality-mobile.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Risk-tiered qualification",
+    "output": "static/diagrams/strategy-quality-mobile/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "risk",
+      "type": "security",
+      "label": "Classify risk",
+      "sublabel": "R1 / R2 / R3",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "plan",
+      "type": "security",
+      "label": "Agree evaluation",
+      "sublabel": "Task mix + thresholds",
+      "pos": [
+        20,
+        140
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "trial",
+      "type": "security",
+      "label": "Repeat trials",
+      "sublabel": "Candidate vs approved",
+      "pos": [
+        20,
+        260
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "verify",
+      "type": "security",
+      "label": "Verify artifacts",
+      "sublabel": "Independent checks",
+      "pos": [
+        20,
+        380
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "gate",
+      "type": "security",
+      "label": "All gates pass?",
+      "sublabel": "Safety cannot be traded",
+      "pos": [
+        20,
+        500
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "promote",
+      "type": "security",
+      "label": "Promote or hold",
+      "sublabel": "Owner decision",
+      "pos": [
+        20,
+        620
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "risk",
+      "to": "plan",
+      "label": "Scope"
+    },
+    {
+      "id": "flow-1",
+      "from": "plan",
+      "to": "trial",
+      "label": "freeze plan"
+    },
+    {
+      "id": "flow-2",
+      "from": "trial",
+      "to": "verify",
+      "label": "Assess"
+    },
+    {
+      "id": "flow-3",
+      "from": "verify",
+      "to": "gate",
+      "label": "review evidence"
+    },
+    {
+      "id": "flow-4",
+      "from": "gate",
+      "to": "promote",
+      "label": "decide"
+    }
+  ]
+}

diagrams/strategy-quality.architecture.json

@@ -0,0 +1,130 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {
+    "title": "TO-BE: Risk-tiered qualification",
+    "output": "static/diagrams/strategy-quality/index.html",
+    "quality_profile": "showcase",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "components": [
+    {
+      "id": "risk",
+      "type": "security",
+      "label": "Classify risk",
+      "sublabel": "R1 / R2 / R3",
+      "pos": [
+        20,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "plan",
+      "type": "security",
+      "label": "Agree evaluation",
+      "sublabel": "Task mix + thresholds",
+      "pos": [
+        260,
+        20
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "trial",
+      "type": "security",
+      "label": "Repeat trials",
+      "sublabel": "Candidate vs approved",
+      "pos": [
+        260,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "verify",
+      "type": "security",
+      "label": "Verify artifacts",
+      "sublabel": "Independent checks",
+      "pos": [
+        20,
+        150
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "gate",
+      "type": "security",
+      "label": "All gates pass?",
+      "sublabel": "Safety cannot be traded",
+      "pos": [
+        20,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    },
+    {
+      "id": "promote",
+      "type": "security",
+      "label": "Promote or hold",
+      "sublabel": "Owner decision",
+      "pos": [
+        260,
+        280
+      ],
+      "size": [
+        180,
+        60
+      ]
+    }
+  ],
+  "connections": [
+    {
+      "id": "flow-0",
+      "from": "risk",
+      "to": "plan",
+      "label": "Scope"
+    },
+    {
+      "id": "flow-1",
+      "from": "plan",
+      "to": "trial",
+      "label": "freeze plan"
+    },
+    {
+      "id": "flow-2",
+      "from": "trial",
+      "to": "verify",
+      "label": "Assess"
+    },
+    {
+      "id": "flow-3",
+      "from": "verify",
+      "to": "gate",
+      "label": "review evidence"
+    },
+    {
+      "id": "flow-4",
+      "from": "gate",
+      "to": "promote",
+      "label": "decide"
+    }
+  ]
+}

diagrams/strategy-roadmap-mobile.workflow.json

@@ -0,0 +1,117 @@
+{
+  "schema_version": 2,
+  "diagram_type": "workflow",
+  "meta": {
+    "title": "Recommended adoption roadmap",
+    "output": "static/diagrams/strategy-roadmap-mobile/index.html",
+    "quality_profile": "showcase",
+    "animation": "none",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "lanes": [
+    {
+      "id": "adoption",
+      "label": "Recommended sequence"
+    }
+  ],
+  "mainPath": [
+    "assessment",
+    "readiness",
+    "pilot",
+    "expansion",
+    "sustain"
+  ],
+  "nodes": [
+    {
+      "id": "assessment",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Understand today",
+      "sublabel": "Code quality and delivery processes understood.",
+      "width": 340,
+      "height": 240,
+      "yOffset": -560
+    },
+    {
+      "id": "readiness",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Prepare foundations",
+      "sublabel": "Critical pilot gaps closed.",
+      "width": 340,
+      "height": 240,
+      "yOffset": -280
+    },
+    {
+      "id": "pilot",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Pilot",
+      "sublabel": "AI skills tested against the baseline.",
+      "width": 340,
+      "height": 240,
+      "yOffset": 0
+    },
+    {
+      "id": "expansion",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Expand",
+      "sublabel": "Next workflow justified by evidence.",
+      "width": 340,
+      "height": 240,
+      "yOffset": 280
+    },
+    {
+      "id": "sustain",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Sustain",
+      "sublabel": "Skills reviewed and improved.",
+      "width": 340,
+      "height": 240,
+      "yOffset": 560
+    }
+  ],
+  "edges": [
+    {
+      "id": "flow-0",
+      "from": "assessment",
+      "to": "readiness",
+      "role": "main",
+      "fromSide": "bottom",
+      "toSide": "top"
+    },
+    {
+      "id": "flow-1",
+      "from": "readiness",
+      "to": "pilot",
+      "role": "main",
+      "fromSide": "bottom",
+      "toSide": "top"
+    },
+    {
+      "id": "flow-2",
+      "from": "pilot",
+      "to": "expansion",
+      "role": "main",
+      "fromSide": "bottom",
+      "toSide": "top"
+    },
+    {
+      "id": "flow-3",
+      "from": "expansion",
+      "to": "sustain",
+      "role": "main",
+      "fromSide": "bottom",
+      "toSide": "top"
+    }
+  ]
+}

diagrams/strategy-roadmap.workflow.json

@@ -0,0 +1,112 @@
+{
+  "schema_version": 2,
+  "diagram_type": "workflow",
+  "meta": {
+    "title": "Recommended adoption roadmap",
+    "output": "static/diagrams/strategy-roadmap/index.html",
+    "quality_profile": "showcase",
+    "animation": "none",
+    "legend": {
+      "mode": "hidden"
+    }
+  },
+  "lanes": [
+    {
+      "id": "adoption",
+      "label": "Recommended sequence"
+    }
+  ],
+  "mainPath": [
+    "assessment",
+    "readiness",
+    "pilot",
+    "expansion",
+    "sustain"
+  ],
+  "nodes": [
+    {
+      "id": "assessment",
+      "lane": "adoption",
+      "col": 0,
+      "type": "backend",
+      "label": "Understand today",
+      "sublabel": "Code quality and delivery processes understood.",
+      "width": 340,
+      "height": 240
+    },
+    {
+      "id": "readiness",
+      "lane": "adoption",
+      "col": 1,
+      "type": "backend",
+      "label": "Prepare foundations",
+      "sublabel": "Critical pilot gaps closed.",
+      "width": 340,
+      "height": 240
+    },
+    {
+      "id": "pilot",
+      "lane": "adoption",
+      "col": 2,
+      "type": "backend",
+      "label": "Pilot",
+      "sublabel": "AI skills tested against the baseline.",
+      "width": 340,
+      "height": 240
+    },
+    {
+      "id": "expansion",
+      "lane": "adoption",
+      "col": 3,
+      "type": "backend",
+      "label": "Expand",
+      "sublabel": "Next workflow justified by evidence.",
+      "width": 340,
+      "height": 240
+    },
+    {
+      "id": "sustain",
+      "lane": "adoption",
+      "col": 4,
+      "type": "backend",
+      "label": "Sustain",
+      "sublabel": "Skills reviewed and improved.",
+      "width": 340,
+      "height": 240
+    }
+  ],
+  "edges": [
+    {
+      "id": "flow-0",
+      "from": "assessment",
+      "to": "readiness",
+      "role": "main",
+      "fromSide": "right",
+      "toSide": "left"
+    },
+    {
+      "id": "flow-1",
+      "from": "readiness",
+      "to": "pilot",
+      "role": "main",
+      "fromSide": "right",
+      "toSide": "left"
+    },
+    {
+      "id": "flow-2",
+      "from": "pilot",
+      "to": "expansion",
+      "role": "main",
+      "fromSide": "right",
+      "toSide": "left"
+    },
+    {
+      "id": "flow-3",
+      "from": "expansion",
+      "to": "sustain",
+      "role": "main",
+      "fromSide": "right",
+      "toSide": "left"
+    }
+  ]
+}

diagrams/strategy-target-mobile.architecture.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {"title": "TO-BE: autonomous SDLC, human direction", "output": "static/diagrams/strategy-target-mobile/index.html", "quality_profile": "showcase", "legend": {"mode": "hidden"}},
+  "components": [
+    {"id":"agent","type":"security","label":"Autonomous agent","sublabel":"Human Controlled","pos":[140,200],"size":[360,120]},
+    {"id":"scope","type":"backend","label":"Scope","sublabel":"01","pos":[100,440],"size":[240,100]},
+    {"id":"architecture","type":"backend","label":"Architecture","sublabel":"02","pos":[100,660],"size":[240,100]},
+    {"id":"ui-ux","type":"backend","label":"UI/UX","sublabel":"03","pos":[100,880],"size":[240,100]},
+    {"id":"planning","type":"backend","label":"Planning","sublabel":"04","pos":[100,1100],"size":[240,100]},
+    {"id":"delivery","type":"backend","label":"Delivery","sublabel":"05","pos":[100,1320],"size":[240,100]},
+    {"id":"uat","type":"backend","label":"UAT","sublabel":"06","pos":[100,1540],"size":[240,100]},
+    {"id":"security","type":"backend","label":"Security","sublabel":"07","pos":[100,1760],"size":[240,100]},
+    {"id":"releases","type":"backend","label":"Releases","sublabel":"08","pos":[100,1980],"size":[240,100]},
+    {"id":"code-scope","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,440],"size":[240,100]},
+    {"id":"code-architecture","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,660],"size":[240,100]},
+    {"id":"code-ui-ux","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,880],"size":[240,100]},
+    {"id":"code-planning","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,1100],"size":[240,100]},
+    {"id":"code-delivery","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,1320],"size":[240,100]},
+    {"id":"code-uat","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,1540],"size":[240,100]},
+    {"id":"code-security","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,1760],"size":[240,100]},
+    {"id":"code-releases","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[400,1980],"size":[240,100]}
+  ],
+  "connections": [
+
+    {"id":"govern-scope","from":"agent","to":"scope","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,490]]},
+    {"id":"govern-architecture","from":"agent","to":"architecture","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,710]]},
+    {"id":"govern-ui-ux","from":"agent","to":"ui-ux","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,930]]},
+    {"id":"govern-planning","from":"agent","to":"planning","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,1150]]},
+    {"id":"govern-delivery","from":"agent","to":"delivery","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,1370]]},
+    {"id":"govern-uat","from":"agent","to":"uat","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,1590]]},
+    {"id":"govern-security","from":"agent","to":"security","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,1810]]},
+    {"id":"govern-releases","from":"agent","to":"releases","label":"","variant":"security","fromSide":"left","toSide":"left","via":[[60,260],[60,2030]]},
+    {"id":"stage-1","from":"scope","to":"architecture","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-2","from":"architecture","to":"ui-ux","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-3","from":"ui-ux","to":"planning","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-4","from":"planning","to":"delivery","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-5","from":"delivery","to":"uat","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-6","from":"uat","to":"security","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-7","from":"security","to":"releases","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-8","from":"releases","to":"scope","label":"Repeat indefinitely","variant":"emphasis","fromSide":"bottom","toSide":"top","via":[[220,2140],[680,2140],[680,380],[220,380]],"labelAt":[440,2180]},
+    {"id":"contribute-scope","from":"code-scope","to":"scope","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-architecture","from":"code-architecture","to":"architecture","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-ui-ux","from":"code-ui-ux","to":"ui-ux","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-planning","from":"code-planning","to":"planning","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-delivery","from":"code-delivery","to":"delivery","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-uat","from":"code-uat","to":"uat","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-security","from":"code-security","to":"security","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"},
+    {"id":"contribute-releases","from":"code-releases","to":"releases","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right"}
+  ]
+}

diagrams/strategy-target.architecture.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": 1,
+  "diagram_type": "architecture",
+  "meta": {"title": "TO-BE: autonomous SDLC, human direction", "output": "static/diagrams/strategy-target/index.html", "quality_profile": "showcase", "legend": {"mode": "hidden"}},
+  "components": [
+    {"id":"agent","type":"security","label":"Autonomous agent","sublabel":"Human Controlled","pos":[465,450],"size":[270,90]},
+    {"id":"scope","type":"backend","label":"Scope","sublabel":"01","pos":[510,187.5],"size":[180,75]},
+    {"id":"architecture","type":"backend","label":"Architecture","sublabel":"02","pos":[780,187.5],"size":[180,75]},
+    {"id":"ui-ux","type":"backend","label":"UI/UX","sublabel":"03","pos":[780,457.5],"size":[180,75]},
+    {"id":"planning","type":"backend","label":"Planning","sublabel":"04","pos":[780,727.5],"size":[180,75]},
+    {"id":"delivery","type":"backend","label":"Delivery","sublabel":"05","pos":[510,727.5],"size":[180,75]},
+    {"id":"uat","type":"backend","label":"UAT","sublabel":"06","pos":[240,727.5],"size":[180,75]},
+    {"id":"security","type":"backend","label":"Security","sublabel":"07","pos":[240,457.5],"size":[180,75]},
+    {"id":"releases","type":"backend","label":"Releases","sublabel":"08","pos":[240,187.5],"size":[180,75]},
+    {"id":"code-scope","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[510,37.5],"size":[180,75]},
+    {"id":"code-architecture","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[780,37.5],"size":[180,75]},
+    {"id":"code-ui-ux","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[1005,457.5],"size":[180,75]},
+    {"id":"code-planning","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[780,877.5],"size":[180,75]},
+    {"id":"code-delivery","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[510,877.5],"size":[180,75]},
+    {"id":"code-uat","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[240,877.5],"size":[180,75]},
+    {"id":"code-security","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[15,457.5],"size":[180,75]},
+    {"id":"code-releases","type":"frontend","label":"AI Agent","sublabel":"Human-controlled","pos":[240,37.5],"size":[180,75]}
+  ],
+  "connections": [
+
+    {"id":"govern-scope","from":"agent","to":"scope","label":"","variant":"security","fromSide":"top","toSide":"bottom","route":"straight"},
+    {"id":"govern-architecture","from":"agent","to":"architecture","label":"","variant":"security","fromSide":"top","toSide":"bottom","via":[[600,345],[870,345]]},
+    {"id":"govern-ui-ux","from":"agent","to":"ui-ux","label":"","variant":"security","fromSide":"right","toSide":"left","route":"straight"},
+    {"id":"govern-planning","from":"agent","to":"planning","label":"","variant":"security","fromSide":"bottom","toSide":"top","via":[[600,645],[870,645]]},
+    {"id":"govern-delivery","from":"agent","to":"delivery","label":"","variant":"security","fromSide":"bottom","toSide":"top","route":"straight"},
+    {"id":"govern-uat","from":"agent","to":"uat","label":"","variant":"security","fromSide":"bottom","toSide":"top","via":[[600,645],[330,645]]},
+    {"id":"govern-security","from":"agent","to":"security","label":"","variant":"security","fromSide":"left","toSide":"right","route":"straight"},
+    {"id":"govern-releases","from":"agent","to":"releases","label":"","variant":"security","fromSide":"top","toSide":"bottom","via":[[600,345],[330,345]]},
+    {"id":"stage-1","from":"scope","to":"architecture","label":"Then","variant":"emphasis","fromSide":"right","toSide":"left"},
+    {"id":"stage-2","from":"architecture","to":"ui-ux","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-3","from":"ui-ux","to":"planning","label":"Then","variant":"emphasis","fromSide":"bottom","toSide":"top"},
+    {"id":"stage-4","from":"planning","to":"delivery","label":"Then","variant":"emphasis","fromSide":"left","toSide":"right"},
+    {"id":"stage-5","from":"delivery","to":"uat","label":"Then","variant":"emphasis","fromSide":"left","toSide":"right"},
+    {"id":"stage-6","from":"uat","to":"security","label":"Then","variant":"emphasis","fromSide":"top","toSide":"bottom"},
+    {"id":"stage-7","from":"security","to":"releases","label":"Then","variant":"emphasis","fromSide":"top","toSide":"bottom"},
+    {"id":"stage-8","from":"releases","to":"scope","label":"Repeat indefinitely","variant":"emphasis","fromSide":"right","toSide":"left","labelAt":[465,170]},
+    {"id":"contribute-scope","from":"code-scope","to":"scope","label":"Contribute","variant":"dashed","fromSide":"bottom","toSide":"top"},
+    {"id":"contribute-architecture","from":"code-architecture","to":"architecture","label":"Contribute","variant":"dashed","fromSide":"bottom","toSide":"top"},
+    {"id":"contribute-ui-ux","from":"code-ui-ux","to":"ui-ux","label":"Contribute","variant":"dashed","fromSide":"left","toSide":"right","labelAt":[990,570]},
+    {"id":"contribute-planning","from":"code-planning","to":"planning","label":"Contribute","variant":"dashed","fromSide":"top","toSide":"bottom"},
+    {"id":"contribute-delivery","from":"code-delivery","to":"delivery","label":"Contribute","variant":"dashed","fromSide":"top","toSide":"bottom"},
+    {"id":"contribute-uat","from":"code-uat","to":"uat","label":"Contribute","variant":"dashed","fromSide":"top","toSide":"bottom"},
+    {"id":"contribute-security","from":"code-security","to":"security","label":"Contribute","variant":"dashed","fromSide":"right","toSide":"left","labelAt":[220,570]},
+    {"id":"contribute-releases","from":"code-releases","to":"releases","label":"Contribute","variant":"dashed","fromSide":"bottom","toSide":"top"}
+  ]
+}

docs/contribution/diagrams.md

@@ -15,13 +15,15 @@ description: Author typed JSON diagrams and embed their local interactive viewer
 | Dataflow | Sources, processing and destinations |
 | Lifecycle | States and transitions |
 
-The standalone viewer provides pan/zoom, node inspection, search/focus, relationship tracing, light/dark themes, and an export menu. Motion is opt-in. The Organization views exercise architecture mode; other diagram types use the same build interface but do not yet have portal-specific examples. Browser-dependent exports such as video are not acceptance-tested by this integration.
+The standalone viewer provides pan/zoom, node inspection, search/focus, relationship tracing, light/dark themes, and an export menu. Motion is opt-in. The Organization views exercise architecture mode; Roadmap uses native Workflow v2 with a horizontal desktop path and the same stages stacked on mobile. Other diagram types use the same build interface but do not yet have portal-specific examples. Browser-dependent exports such as video are not acceptance-tested by this integration.
 
 ## Author a diagram
 
 Create `diagrams/<name>.<type>.json` using the matching schema and authoring guidance in `vendor/archify/schemas/` and `vendor/archify/references/`. Use stable IDs, explicit relationships, and honest evidence labels. Do not include private information merely because the source repository is private: Pages access is a separate platform policy.
 
-Set `meta.output` to `static/diagrams/<name>/index.html`. The build validates the typed source with the upstream showcase profile, renders locally, checks the artifact, and publishes the standalone HTML and a downloadable JSON source.
+Set `meta.output` to `static/diagrams/<name>/index.html`. The build validates the typed source with the upstream showcase profile, renders locally, checks the artifact, and publishes the standalone HTML. Editable JSON stays in the repository; the portal does not publish source-download files.
+
+Roadmap has a scoped multiline typography adapter in `scripts/roadmap-viewer.mjs`. Its two `.workflow.json` sources use the native v2 schema, one lane, `mainPath`, logical columns and native routes. The native renderer validates the schema and solves geometry; the adapter wraps the existing action/output/exit copy, removes the redundant lane frame and trims empty canvas. The final artifact then passes the upstream showcase composition checker. This path records source, adapter and final artifact hashes in private `.cache/archify/*.portal.json` receipts, not upstream `deliver` provenance. Keep the vendor unchanged and run the Roadmap browser check at 1440, 390 and 320 pixels after any copy or sizing change. Typography is embedded in the SVG so exports retain it.
 
 ```sh
 pnpm diagrams:build
@@ -37,7 +39,7 @@ import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
 <ArchifyDiagram name="organization-structure" title="Eldorado organization structure" />
 ```
 
-Supply a text alternative below each diagram. The wrapper uses a local, base-path-aware iframe with a descriptive title, scripts and downloads enabled, and no same-origin or parent-navigation permissions. The Open full viewer button expands the diagram in a full-screen modal on the current page, with the same iframe sandbox. Close it with the Close button or Escape; focus returns to the opener. It does not open a new tab. The separate standalone HTML asset remains directly addressable and is not itself iframe-sandboxed, so publish only reviewed, trusted diagrams. Generated output is ignored by Git and rebuilt in CI.
+Supply a text alternative below each diagram. The wrapper uses a local, base-path-aware iframe with a descriptive title, scripts and downloads enabled, and no same-origin or parent-navigation permissions. The top-right expand icon expands the diagram in a full-screen modal on the current page, with the same iframe sandbox. Close it with the Close button or Escape; focus returns to the opener. It does not open a new tab. The separate standalone HTML asset remains directly addressable and is not itself iframe-sandboxed, so publish only reviewed, trusted diagrams. Generated output is ignored by Git and rebuilt in CI.
 
 ## Integration boundaries
 

docs/organization/collaboration.mdx

@@ -0,0 +1,23 @@
+---
+title: Collaboration
+description: How Eldorado departments combine their responsibilities to deliver shared business outcomes.
+---
+
+Departments collaborate around shared outcomes while retaining their own team ownership and accountability. See [Structure](./structure.mdx) for department and squad responsibilities.
+
+## How the departments work together
+
+| Business outcome | Collaboration |
+| --- | --- |
+| Better buyer experience | Product defines improvements; Technology delivers them; Operations brings customer feedback; Data & AI measures the result. |
+| Stronger seller experience | Product and Technology develop seller tools; Operations supports sellers; Finance manages financial processes. |
+| Safe and trustworthy trading | Risk & Fraud, Trust & Resolution, Architecture & Security, and Finance coordinate controls and incident responses. |
+| Sustainable growth | Marketing develops demand; Product improves conversion and retention; Finance measures profitability. |
+| AI-powered execution | Data & AI supports engineering and develops marketplace intelligence; Operations improves service and quality workflows. |
+
+Department leaders remain accountable for outcomes, controls and service quality as AI becomes part of everyday work.
+
+## Related pages
+
+- [Structure](./structure.mdx) — departments, squads and responsibilities.
+- [SDLC — Software Delivery Life Cycle](./sdlc.mdx) — leadership and delivery responsibilities.

docs/organization/sdlc.mdx

@@ -0,0 +1,27 @@
+---
+title: SDLC — Software Delivery Life Cycle
+sidebar_label: SDLC
+description: Leadership, reporting lines and team responsibilities supporting software delivery at Eldorado.
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+Software delivery brings together Product and Technology, supported by the departments responsible for marketplace operations and growth. This page describes the leadership and delivery responsibilities that support that work.
+
+## Leadership and delivery structure
+
+<ArchifyDiagram name="organization-reporting" compact title="Eldorado leadership and delivery structure" />
+
+The diagram shows management responsibility from leader to role or team:
+
+- **CTO → Head of Engineering → Group Engineering Managers → Engineering Managers → the Product Engineering team.**
+- **CTO → AI Architect**, coordinating engineering AI enablement.
+- **COO → Operational Quality**, providing independent quality oversight.
+- **CMO → Brand Team Lead**, leading Brand & Community.
+
+Product and Technology retain separate team ownership and reporting lines. Their teams coordinate priorities, design, engineering, quality and data work to deliver business outcomes.
+
+## Related pages
+
+- [Structure](./structure.mdx) — departments, squads and responsibilities.
+- [Collaboration](./collaboration.mdx) — how departments coordinate around business outcomes.

docs/organization/structure.mdx

@@ -24,40 +24,40 @@ Functional leaders translate company priorities into departmental plans. Team le
 
 ## Departments and teams
 
+Product has **two teams** and Technology has **five teams**. Operations, Marketing, Finance & Accounting, and HR & Administration each have **one squad** covering their departmental workstreams. Each team belongs to one department, with its own leadership and responsibilities. The departments collaborate on delivery without sharing team ownership.
+
 ### Product
 
 **Purpose:** improve the buyer and seller experience and turn marketplace opportunities into valuable product capabilities.
 
 | Team | Responsibilities |
 | --- | --- |
-| Orders | Purchase and post-purchase journeys, order status, delivery experience, dispute flows, feedback and loyalty. |
+| Product Management | Product strategy, roadmaps, priorities and outcome measurement across discovery, categories, orders, seller tools, payments and operational workflows. |
-| Categories | Category experiences, including Boosting and Currency, discovery, conversion and category-specific user journeys. |
+| Product Design | User research, interaction design, design consistency and accessible buyer and seller experiences. |
-| Sellers & Operations | Seller Portal, seller integrations, onboarding and verification, balances and withdrawals, invoicing and operational tooling. |
-| Data & Intelligence | Product analytics, experimentation, offer ranking, recommendations and decision support. |
-| Product Design | User research, interaction design, design consistency and accessible buyer and seller experiences across product teams. |
 
-Product Owners, Designers and Tech Leads work together on each product area. Product owns priorities and outcomes; Technology owns engineering execution and technical quality.
+Product Management owns what to improve and why. Product Design shapes the experience. Both work with Technology teams while remaining within Product.
 
 ### Technology
 
 **Purpose:** build and operate a secure, reliable marketplace and improve the effectiveness of engineering.
 
-| Team / function | Responsibilities |
+| Team | Responsibilities |
 | --- | --- |
-| Product Engineering | Develop and maintain marketplace capabilities in cross-functional product teams. |
+| Product Engineering | Build and maintain marketplace capabilities, including search, orders, seller tools, checkout, wallet and operational tooling. |
-| Platform & Reliability | Shared platform services, delivery infrastructure, observability, availability and performance. |
+| Platform & IT | Platform services, delivery infrastructure, observability, reliability, performance, internal systems, employee devices and identity administration. |
-| Architecture & Security | Technical standards, system design, infrastructure security and secure engineering practices. |
+| Architecture & Security | Technical standards, system design, security architecture and secure engineering practices. |
 | Quality Engineering | Test strategy, automation, release quality and defect prevention. |
-| AI Enablement | AI-assisted engineering workflows, developer tools, adoption, standards and safe use of AI. |
+| Data & AI | Analytics, experimentation, ranking, recommendations, marketplace ML and safe AI-assisted engineering workflows. |
-| Internal IT | Identity and access, employee devices, internal systems, software administration and joiner–mover–leaver processes. |
 
-The CTO owns technology direction. The Head of Engineering leads engineering delivery through Group Engineering Managers and Engineering Managers. The AI Architect coordinates AI enablement across engineering, working with Architecture & Security and team leaders.
+The CTO owns technology direction. The Head of Engineering leads engineering delivery through Group Engineering Managers and Engineering Managers. The AI Architect coordinates AI enablement within Data & AI, working with Architecture & Security and the other Technology teams. These are leadership roles within the five-team structure, not additional teams.
 
 ### Operations
 
 **Purpose:** keep marketplace trading dependable and resolve customer issues fairly and efficiently.
 
-| Team | Responsibilities |
+**Operations Squad** delivers the department’s responsibilities across the following workstreams.
+
+| Workstream | Responsibilities |
 | --- | --- |
 | Customer Support | Buyer and seller assistance, knowledge management, self-service and support workflow automation. |
 | Trust & Resolution | Disputes, appeals, refunds, warranties, chargebacks and complex customer cases. |
@@ -70,7 +70,9 @@ The COO coordinates Operations. Team leads manage specialists and daily service
 
 **Purpose:** attract and retain customers, build the Eldorado brand and grow marketplace demand.
 
-| Team / workstream | Responsibilities |
+**Marketing Squad** delivers the department’s responsibilities across the following workstreams.
+
+| Workstream | Responsibilities |
 | --- | --- |
 | Brand & Community | Brand positioning, campaigns, organic social, community and brand partnerships. |
 | Creative | Campaign concepts, visual assets and performance creative. |
@@ -85,7 +87,9 @@ The CMO coordinates Marketing. The Brand Team Lead owns Brand & Community, with
 
 **Purpose:** maintain financial control, support business decisions and keep marketplace money flows dependable.
 
-| Team / function | Responsibilities |
+**Finance & Accounting Squad** delivers the department’s responsibilities across the following workstreams.
+
+| Workstream | Responsibilities |
 | --- | --- |
 | Financial Planning & Analysis | Budgets, forecasts, profitability, management reporting and investment analysis. |
 | Accounting, Tax & Controls | Accounting, financial reporting, tax, audit coordination and internal controls. |
@@ -97,35 +101,17 @@ The CFO coordinates Finance & Accounting and works with executive leadership on
 
 **Purpose:** help teams attract, develop and retain people and provide an effective working environment.
 
-| Team | Responsibilities |
+**People & Administration Squad** delivers the department’s responsibilities across the following workstreams.
+
+| Workstream | Responsibilities |
 | --- | --- |
 | Talent Acquisition | Recruitment, candidate experience, hiring coordination and workforce demand support. |
 | People Operations | Employee onboarding, development, performance processes, policies and employee experience. |
 | Office & Administration | Workplace services, office operations and administrative coordination. |
 
-HR partners with department leaders on team capacity and development. People Operations works with Internal IT on employee onboarding, role changes and offboarding.
+HR partners with department leaders on team capacity and development. People Operations works with Platform & IT on employee onboarding, role changes and offboarding.
 
-## Leadership and delivery structure
+## Related pages
 
-<ArchifyDiagram name="organization-reporting" title="Eldorado leadership and delivery structure" />
+- [Collaboration](./collaboration.mdx) — how departments work together on business outcomes.
-
+- [SDLC — Software Delivery Life Cycle](./sdlc.mdx) — leadership and delivery responsibilities.
-The diagram shows management responsibility from leader to role or team:
-
-- **CTO → Head of Engineering → Group Engineering Managers → Engineering Managers → Product Engineering teams.**
-- **CTO → AI Architect**, coordinating engineering AI enablement.
-- **COO → Operational Quality**, providing independent quality oversight.
-- **CMO → Brand Team Lead**, leading Brand & Community.
-
-Product teams combine product ownership, design, engineering, quality and data expertise. Functional management develops people and professional standards; cross-functional teams deliver business outcomes.
-
-## How the departments work together
-
-| Business outcome | Collaboration |
-| --- | --- |
-| Better buyer experience | Product defines improvements; Technology delivers them; Operations brings customer feedback; Data measures the result. |
-| Stronger seller experience | Product and Technology develop seller tools; Operations supports sellers; Finance manages financial processes. |
-| Safe and trustworthy trading | Risk & Fraud, Trust & Resolution, Architecture & Security, and Finance coordinate controls and incident responses. |
-| Sustainable growth | Marketing develops demand; Product improves conversion and retention; Finance measures profitability. |
-| AI-powered execution | AI Enablement supports engineering; Data & Intelligence develops marketplace intelligence; Operations improves service and quality workflows. |
-
-Department leaders remain accountable for outcomes, controls and service quality as AI becomes part of everyday work.

docs/strategy/direction.md

@@ -1,11 +0,0 @@
----
-title: Direction
-description: Define the strategy and direction for an AI-powered Eldorado.
-slug: /
----
-
-# Strategy and direction
-
-**Eldorado Powered By AI** is the space for shaping how AI can support Eldorado.
-
-Specific initiatives, priorities, measures of success, and a delivery roadmap remain to be agreed. This section is ready for that work; no proposals here should be treated as approved commitments until explicitly agreed.

docs/strategy/measurement.mdx

@@ -0,0 +1,71 @@
+---
+id: measurement
+title: Skills Measurement
+sidebar_label: Skills Measurement
+description: Which KPIs to collect during skills adoption, where the evidence comes from, how to calculate them and when to report.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+Measure adoption in stages: first establish today’s performance, then follow the pilot, extend coverage and keep skills current. Count use separately from outcomes—more use does not by itself mean better work.
+
+<ArchifyDiagram name="strategy-measurement" title="Skills adoption measurement: baseline, pilot, broader adoption and monitoring" story />
+
+**Recommended collection plan · Target operating model, not installed telemetry.** Confirm the proposed roles and reporting cadence below before collecting data.
+
+## 1. Establish the baseline
+
+Choose one workflow, such as reviewing a code change with a review skill. Agree what counts as a started task, independent acceptance and the follow-up period before counting outcomes. Collect current-practice evidence over a complete comparable workflow cycle and until the agreed sample requirement is met; use the same rules in the pilot.
+
+Start with a controlled worksheet or export. Join task IDs to acceptance records, PR/commit IDs, CI results and later defects. Record the exact skill revision and client configuration for pilot work; keep missing versions unknown. Repository and CI evidence support verification, but a green build alone is not task acceptance.
+
+## 2. Measure the pilot
+
+Start with these four questions. Capture inputs as work happens; do not reconstruct review effort from elapsed PR time.
+
+### Are tasks reaching acceptance?
+
+**Collect:** task starts and independent acceptance, failure or abandonment records from the work tracker. **Calculate:** accepted tasks / all eligible starts whose observation period has ended × 100. Failed, abandoned and unresolved tasks stay in the denominator; show unknown outcomes and coverage separately. This is [validated task success](./reference/measurement-contracts.mdx#validated-task-success), not a count of agent completions. **Weekly:** Quality Engineering reviews the pilot cohort.
+
+### Is quality holding up?
+
+**Collect:** accepted change IDs, linked confirmed defects, severity and follow-up dates from review and defect records; retain PR/CI evidence. **Calculate:** changes with at least one confirmed defect / accepted changes with completed follow-up × 100. Count each affected change once, not each defect. Missing links do not mean clean work. **Monthly:** Quality Engineering reviews [escaped quality](./reference/measurement-contracts.mdx#changes-with-escaped-quality-issues) after follow-up, alongside severe incident counts.
+
+### What does an accepted outcome cost?
+
+**Collect:** invoices and usage costs plus sampled human review/rework minutes at approved rates, including unsuccessful attempts and allocated licenses/tooling. **Calculate:** total allocated workflow cost / independently accepted tasks in the same matured start cohort. Keep effort separate from waiting time. Missing buckets make this a partial estimate, not total cost. **Monthly:** Finance & Accounting reconciles [cost per accepted outcome](./reference/measurement-contracts.mdx#cost-per-accepted-outcome), restating late invoices.
+
+### Can people confidently verify the work?
+
+**Collect:** an anonymous 1–5 survey after a pilot workflow cycle: verification confidence, manageable workload and usefulness as separate items. **Calculate:** sum of valid confidence scores / valid responses; also show the distribution and responses / invitations × 100. This guides enablement, not claims of saved time. **After each pilot cycle:** People & Administration reviews [confidence and cognitive load](./reference/measurement-contracts.mdx#verification-confidence-and-cognitive-load); protect small groups.
+
+### What a pilot report looks like
+
+**Illustrative arithmetic, not company results or targets.** The bundled synthetic fixture shows four matured starts: one accepted, one failed, one abandoned and one unresolved. Confirmed success is **1 / 4 × 100 = 25%**, with **75%** known-outcome coverage. A newer start has not finished its observation period and is shown separately.
+
+Recorded compute spend is **EUR 60 / 1 = EUR 60** per accepted outcome—a **partial estimate** because licenses, tooling, review and rework are missing. Five survey responses total 20 points: **20 / 5 = 4** out of 5; response rate is **5 / 10 × 100 = 50%**. The report calls for reconciling the unknown task and missing costs, not claiming a skills benefit. Reproduce it with `node scripts/ai-kpi.mjs`; [fixture and limits](./reference/measurement-contracts.mdx#run-the-synthetic-measurement-example).
+
+## 3. Extend collection as adoption grows
+
+Keep those outcome measures, then add reach. An adoption percentage is meaningless without a known eligible population.
+
+**Are supported skills available?** Freeze the expected active installation inventory; compare observed bundle/adapter revisions with the approved support and revocation records. [Supported bundle coverage](./reference/measurement-contracts.mdx#supported-bundle-coverage) = fresh, verified supported installations / all expected active installations × 100. Offline or stale entries stay in the denominator. **Weekly and at revocation:** Platform & IT reconciles coverage.
+
+**Are approved workflows being used?** Freeze the lawfully enrolled participant cohort; collect workflow-linked use of an approved revision through a qualified adapter or a separately labeled declaration. [Approved-workflow adoption](./reference/measurement-contracts.mdx#approved-workflow-adoption) = eligible participants with at least one observed approved use / eligible invited participants × 100. Report this as an observed lower bound with source coverage: missing use is unknown. Installation and loading are not use. **Monthly:** Data & AI reviews reach without invocation quotas or employee rankings.
+
+## 4. Keep the collection running
+
+**Are skills still maintained?** From the versioned catalog, join each active approved revision to its owner, substantive review evidence and due date. [Review coverage](./reference/measurement-contracts.mdx#skills-within-substantive-review-window) = revisions with all three current / all active approved revisions × 100. **Monthly and each release:** Data & AI reports overdue/ownerless revisions and deprecated or revoked versions still in use—not just a percentage.
+
+At each report, compare like workflows with the baseline and publish the period, counts, exclusions and source coverage. Zero denominators mean “not available.” Trends are descriptive, not causal ROI. Act on critical policy effects immediately; add selection precision/recall at qualification and service-level delivery or departmental outcome measures when their source links are ready.
+
+Agree purpose, lawful basis, access and retention first. No raw prompts, code or secrets by default; suppress people cohorts below five and prevent identifying drill-downs.
+
+[Full KPI reference →](./reference/measurement-contracts.mdx) preserves all definitions, collection safeguards and the distinction between synthetic calculations and unimplemented metrics.
+
+**Next:** [Maintain skills using the evidence →](./skills-maintenance.mdx)
+
+</div>

docs/strategy/reference/measurement-contracts.mdx

@@ -0,0 +1,363 @@
+---
+id: measurement-contracts
+title: Skills KPI reference
+description: Full KPI contracts, minimal events, illustrative calculations, privacy and limits.
+---
+
+<div className="strategy-content">
+
+Return to the [Skills Measurement collection plan](../measurement.mdx).
+
+**Target operating model — recommended contracts, not installed collection.** All owner and cadence entries below are proposals to confirm before the pilot, not assigned responsibilities or approved schedules.
+
+There are **16 contracts: 9 prototype calculations and 7 unimplemented metrics**. The prototype has no network collectors. None of these counts establishes live telemetry.
+
+The nine calculations cover task success, selection precision and recall, change fail rate, deployment rework, escaped quality, policy effects, cost and the primary human-experience item. The seven omissions are supported bundle coverage, approved-workflow adoption, change lead time, deployment frequency, failed deployment recovery time, substantive-review coverage and workflow-specific business acceptance.
+
+## Collection and safeguards
+
+Introduction depends on the [roadmap gates](../roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+### Decide what counts before counting
+
+Use the metric contracts below for exact definitions. Every report states its eligible population, observation window, numerator and denominator or distribution sample count, source coverage, exclusions and calculation version. Zero denominators return “not available.” Missing telemetry is unknown, not inactivity, compliance or success. Examples are explicitly synthetic and illustrative.
+
+Begin with task acceptance, repository, CI, deployment and incident systems because they can independently establish outcomes. Add catalog/version inventory and task-level declarations. Client telemetry is supplementary and version-dependent; enabling rich tool details may collect sensitive commands and identifiers. Do not enable it merely to count skills. A normalized adapter may report approved skill identifiers without forwarding raw arguments.
+
+Validated success uses all eligible initiated tasks whose predeclared observation window has matured. Failed and abandoned tasks remain nonsuccess. Unresolved or unobserved outcomes remain in the denominator, with known-outcome coverage shown alongside the conservative confirmed-success share. They are not relabeled as observed failure. A task cancelled before start is excluded; cancellation after start remains visible. Count a task once across retries and multiple skills. For timeliness, also show unfinished work and age; accepted-only lead-time distributions have survivorship limitations.
+
+Track all five service-level DORA measures: commit-to-production lead time, deployment frequency, change fail rate, failed deployment recovery time and deployment rework rate. Do not substitute PR-open-to-merge time or all-incident MTTR. Pair them with matured escaped-quality rates, policy effects, total cost per accepted outcome, support coverage, adoption, human experience and catalog maintenance. Keep customer/business outcomes linked to their departmental hypotheses; do not infer conversion, trust or revenue improvement from delivery telemetry.
+
+### Baseline and interpretation
+
+Before a pilot, freeze eligibility and acceptance rules and verify event joins. Collect prospective no-skill/current-practice evidence over a complete comparable workflow cycle and until the preregistered precision/sample requirement is met. Do not select a convenient end date after seeing results. Retain task class, service, skill, client/model configuration and concurrent changes. A matched or randomized comparison may be used when practical and ethical; label observational trends as descriptive and report confounding, selection and uncertainty.
+
+Elapsed time and human effort are different quantities. Parallel agents may reduce waiting while increasing review or compute. Include failed attempts and human review/rework in cost, do not multiply a multi-skill task's value across every invocation, and do not convert survey perceptions into proven time savings. Small or incomplete populations yield evidence limits, not an ROI percentage.
+
+### Event and privacy contract
+
+Use a versioned event envelope and required fields per event. Source producer plus event ID deduplicates transport retries. Conflicting payloads under the same key are quarantined. Attempts have distinct IDs under one task. Domain IDs deduplicate deployments, defects and approvals even when multiple feeds describe them. Late arrivals produce versioned aggregate corrections; never silently overwrite a published result. Preserve occurrence and receipt times, reject impossible orderings and flag clock skew. Missing terminal events remain unresolved until the work owner reconciles them.
+
+Many-to-many task/attempt/skill/client associations preserve exact immutable versions. Unknown version stays null with a reason; never assign the latest revision retroactively. Client declarations, server facts and self-reports remain separately labeled. A skill-loaded event is evidence of loading only. The minimal prototype can operate without actor identity except where a lawful, necessary adoption denominator requires pseudonymous cohort membership.
+
+The privacy starting proposal is 30 days for raw structured analytics events and 12 months for aggregated trends, subject to the responsible owners' review. Keep the approved catalog/approval record for the supported revision's lifetime and its required audit period, which must be decided separately. Incident evidence uses a restricted, explicitly authorized hold and deletion schedule, not an indefinite analytics exception. Suppress reports below five people and prohibit drill-down or overlapping cohort slices that reconstruct identities. Five is a proposed minimum, not a guarantee against re-identification. No raw prompts, code, screens, customer cases or secrets are collected by default. Publish the purpose, lawful collection basis, access/deletion route and retention before collecting. Consent is not presumed to be an appropriate employment-law basis.
+
+## Metric contracts
+
+Each contract is a prospective collection design. No live source or observed baseline is established. N and D refer to the numerator and denominator shown for that metric.
+
+### Validated task success
+
+Confirmed independently accepted tasks as a share of all eligible initiated tasks in a matured start cohort; a conservative confirmed-success share, not observed failure rate.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct matured task_ids with valid independent task.accepted evidence by as_of |
+| Denominator | All distinct eligible task_ids started in window with started_at + preregistered task_observation_hours &lt;= as_of |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Tasks in a preregistered workflow cohort, started in window; each counted once across retries, skills and clients. |
+| Exclusions | Cancelled before start, sandbox/evaluation tasks and out-of-scope workflows; never post-start failures/abandonments. |
+| Events and source | task.started; task.accepted; task.failed; task.abandoned; task.cancelled; work-management acceptance record |
+| Owner / cadence | Quality Engineering / Weekly pilot; monthly departmental outcome review |
+| Missing evidence | Unresolved/missing terminal outcomes remain in denominator with unknown count and known-outcome coverage; do not label them failed. Invalid/missing start excluded from calculation but flagged as orphan evidence. |
+| Gaming and limits | Split easy tasks or omit starts; reconcile starts to approved backlog and audit acceptance rubrics. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Maturation horizon is workflow-specific and must be approved; no automatic abandonment on timeout. |
+
+
+### Skill selection precision
+
+Correct activations among activations on an independently labeled evaluation corpus.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | True-positive activations for the requested workflow |
+| Denominator | True-positive plus false-positive activations |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | All candidate/client labeled evaluation task-trials with known activation and relevance. |
+| Exclusions | Unlabeled/unknown activations excluded with coverage; no cherry-picked failed trials. |
+| Events and source | eval.selection; versioned labeled corpus and runner |
+| Owner / cadence | Data & AI / Each skill/client qualification |
+| Missing evidence | Unknown activation/relevance is unscorable; publish missing count and deny qualification if planned coverage incomplete. |
+| Gaming and limits | Choose easy labels or hide negative cases; freeze corpus and independently review labels. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Does not show execution success; precision depends on corpus prevalence. |
+
+
+### Skill selection recall
+
+Relevant task-trials in which the intended skill activates.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | True-positive activations |
+| Denominator | True-positive plus false-negative task-trials |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Independently labeled relevant evaluation task-trials for a skill/client tuple. |
+| Exclusions | Irrelevant tasks; missing relevance or activation reported as unscorable, not negative. |
+| Events and source | eval.selection; versioned labeled corpus and runner |
+| Owner / cadence | Data & AI / Each skill/client qualification |
+| Missing evidence | Report evaluation coverage; null if no relevant labeled tasks. |
+| Gaming and limits | Overtrigger to maximize recall; always pair with precision and negative cases. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Loading the right skill is not adherence. |
+
+
+### Supported bundle coverage
+
+Inventoried active installations with verified effective approved, supported and nonrevoked bundle/adapter tuple.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Eligible installation_ids with valid inventory evidence within approved freshness window and matching support matrix |
+| Denominator | All expected active installation_ids in the managed pilot inventory |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Active installation inventory frozen for report, including invisible/offline entries until authoritative offboarding. |
+| Exclusions | Verified decommissioned installations and nonpilot assets; lack of telemetry alone never excludes. |
+| Events and source | inventory.observed; catalog.published; catalog.revoked; device inventory |
+| Owner / cadence | Platform & IT / Weekly and at revocation |
+| Missing evidence | Unknown/stale versions count outside numerator, inside denominator. Show inventory discovery coverage versus eligible device roster; if roster unknown metric is provisional. |
+| Gaming and limits | Remove silent devices or trust declared versions; reconcile managed inventory and separately label attestation trust. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Even verified file digests do not prove a private model followed the content. |
+
+
+### Approved-workflow adoption
+
+Eligible participants with at least one approved-skill workflow use; usefulness assessed separately through accepted outcomes and feedback.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct eligible pseudonymous participants with workflow-linked skill.used on approved revision |
+| Denominator | Distinct eligible participants in frozen invited cohort |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Consented or otherwise lawfully enrolled pilot cohort for the period; supported workflow available. |
+| Exclusions | Outside pilot and formally recorded leave before period; nonresponders remain eligible, not excluded. |
+| Events and source | skill.used; cohort.snapshot; optional qualified client adapter or declaration |
+| Owner / cadence | Data & AI / Monthly |
+| Missing evidence | Show observed lower bound and telemetry/response coverage; missing usage unknown rather than non-use. |
+| Gaming and limits | Invocation quotas and coercion; no target usage count, split server/client/self-report origins. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Self-report is not verified use; installation/loading is not use or benefit. Suppress small groups. |
+
+
+### Change lead time
+
+Arithmetic mean commit-to-first-successful-production-deployment duration; also publish median/p90 and sample count.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Sum of elapsed hours from committed_at to first successful production deployment for each service+commit |
+| Denominator | Count of eligible service+commit pairs with valid mappings |
+| Expression | N / D |
+| Aggregation | mean |
+| Unit | hours/change |
+| Eligible population | Changes first successfully deployed to a service in reporting window; rollout retries collapse to same logical deployment. |
+| Exclusions | Nonproduction, duplicates, no-op deployment with no new commits; missing mappings shown as coverage loss. |
+| Events and source | change.committed; deployment.completed; VCS immutable commit timestamps and release manifest |
+| Owner / cadence | Platform & IT / Weekly per service |
+| Missing evidence | Missing commit mapping or negative/skewed duration excluded from numeric sample, reported explicitly; no zero substitution. |
+| Gaming and limits | Timestamp rewriting and cherry-picking fast work; lock change mapping and show undeployed backlog age. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Not PR cycle time, effort saved, or a complete view of unfinished changes. p90 uses nearest-rank sorted sample. |
+
+
+### Deployment frequency
+
+Distinct successful logical production deployments per complete service-day of observation.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct service_id+deployment_id successful production deployments in window |
+| Denominator | Observed service-days in window |
+| Expression | N / D |
+| Aggregation | ratio |
+| Unit | deployments/service-day |
+| Eligible population | Declared production services and complete UTC observation days; report each service before pooled views. |
+| Exclusions | Test/staging, failed attempts without production effect, duplicate callbacks and retries of the same rollout. |
+| Events and source | deployment.completed; authoritative deployment service |
+| Owner / cadence | Platform & IT / Weekly per service |
+| Missing evidence | Missing feed periods not zero; report coverage and no unqualified overall rate when period incomplete. |
+| Gaming and limits | Split deployments without value; pair with success, rework and failure measures. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. More deployments alone do not establish better performance; affected unsuccessful changes remain in change-fail population. |
+
+
+### Change fail rate
+
+Production deployment effects requiring unplanned remediation, rollback or hotfix, not solely outage declarations.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct matured production deployment_ids linked to qualifying immediate intervention |
+| Denominator | All distinct production deployment_ids that reached production in the matured deployment cohort |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Deployments with production effect during window and approved intervention follow-up horizon elapsed. |
+| Exclusions | Failed preproduction attempts, duplicate callbacks and no-effect retries; failures after production effect stay included. |
+| Events and source | deployment.completed; deployment.failed; incident.linked; release and incident records |
+| Owner / cadence | Quality Engineering / Weekly; finalized after horizon |
+| Missing evidence | Known failures / all eligible deployments is a lower bound where incident linkage incomplete; label provisional and report unknown links. |
+| Gaming and limits | Avoid incident links or relabel intervention planned; reconcile rollbacks/hotfixes independently. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Define immediate intervention and follow-up horizon before pilot; no universal incident-to-AI attribution. |
+
+
+### Failed deployment recovery time
+
+Mean elapsed time from production deployment failure onset to service restoration, with median/p90 and unresolved count/age.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Sum of recovery_at minus failure_started_at in hours for recovered eligible deployment failures |
+| Denominator | Count of recovered eligible deployment failures with valid timestamps |
+| Expression | N / D |
+| Aggregation | mean |
+| Unit | hours/failure |
+| Eligible population | Production deployment failures beginning in window; latest verified restoration if a recovery is rescinded. |
+| Exclusions | Nondeployment incidents; invalid timestamp pairs reported missing, not treated as instantaneous recovery. |
+| Events and source | deployment.failed; service.restored; incident service |
+| Owner / cadence | Platform & IT / Weekly with unresolved failures |
+| Missing evidence | Unresolved failures reported separately and excluded only from recovered-duration distribution; prevent declaring improvement without their visibility. |
+| Gaming and limits | Premature recovery declarations or omit hard cases; require operational readback and carry unresolved ages. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Not all-incident MTTR; recovered-only sample has survivorship bias. p90 nearest rank. |
+
+
+### Deployment rework rate
+
+Unplanned production deployment effects triggered by a production incident as a share of deployment effects.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct incident-linked deployment_ids classified unplanned remediation |
+| Denominator | All distinct production deployment_ids with production effect in window |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Production deployment effects in window with immutable planned/unplanned classification and incident linkage. |
+| Exclusions | Nonproduction, no-effect retries and duplicates; do not exclude unclassified changes silently. |
+| Events and source | deployment.completed; incident.linked; release intent classification |
+| Owner / cadence | Platform & IT / Weekly |
+| Missing evidence | Unknown classification stays denominator; observed numerator is lower bound until reconciliation; show classification coverage. |
+| Gaming and limits | Call hotfixes planned; freeze reason and independently reconcile incident/deployment links. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Distinct from failure rate: one failed deployment can lead to multiple separate rework deployments. |
+
+
+### Changes with escaped quality issues
+
+Accepted changes with at least one confirmed post-acceptance defect during approved follow-up, split by severity.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct eligible change_ids with one or more linked confirmed defects in follow-up |
+| Denominator | Accepted change_ids with completed predeclared follow-up horizon |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Accepted changes in acceptance window whose follow-up is complete by as_of. |
+| Exclusions | Immature changes shown separately; duplicates/unconfirmed reports excluded but counted as pending triage. |
+| Events and source | change.accepted; defect.confirmed; defect tracking and acceptance evidence |
+| Owner / cadence | Quality Engineering / Monthly mature cohorts |
+| Missing evidence | Unknown linkage is a coverage warning; no fabricated clean outcome. Show absolute defect and severe incident counts as well. |
+| Gaming and limits | Shorten follow-up or downgrade severity; freeze horizon and rubric and independently sample defects. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Counts affected changes, not raw defects per change; no presumption defects are AI-caused. |
+
+
+### Confirmed policy effects
+
+Eligible evaluated attempts with an actual confirmed prohibited effect; report attempts, blocked attempts and effects separately.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct attempt_ids with confirmed prohibited action effect |
+| Denominator | All evaluated eligible attempt_ids including failed and abandoned runs |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Governed skill trials or supported workflow attempts, reported separately for eval and live populations. |
+| Exclusions | Out-of-scope runs; detection gaps remain coverage issues, not exclusions from known initiated population. |
+| Events and source | attempt.started; policy.violation; gate.blocked; security audit and incident triage |
+| Owner / cadence | Architecture & Security / Immediate incident action; weekly aggregates |
+| Missing evidence | Unknown outcomes remain visible; zero detected effects never proves safety. Missing audits make rate provisional. |
+| Gaming and limits | Hide incidents or inflate harmless trials; absolute severity counts and fixed task mix accompany rate. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Blocked attempts are not actual effects; any critical effect blocks promotion regardless of aggregate rate. |
+
+
+### Cost per accepted outcome
+
+Allocated total workflow cost including unsuccessful attempts, licenses, compute, tooling and human review/rework divided by accepted outcomes.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Sum allocated costs in one approved reporting currency for all tasks/attempts in matured start cohort |
+| Denominator | Distinct independently accepted tasks in same cohort |
+| Expression | N / D |
+| Aggregation | ratio |
+| Unit | currency/accepted outcome |
+| Eligible population | Matured eligible started-task cohort, with all attempt costs through as_of and allocated shared period costs. |
+| Exclusions | Unrelated projects and documented taxes/transfers outside chosen accounting basis; never failed/abandoned attempts. |
+| Events and source | cost.recorded; task.accepted; finance invoices, usage ledger, sampled effort with approved rates |
+| Owner / cadence | Finance & Accounting Squad / Monthly with late invoice restatement |
+| Missing evidence | Missing cost buckets produce partial estimate plus coverage, not a total. Mixed currency requires dated approved conversion; zero accepted outcomes = null with full cost shown. |
+| Gaming and limits | Count tokens only or hide labor/failures; reconcile invoice and allocation totals without double counting. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Allocation and sampled labor carry uncertainty; no ROI without independently measured business benefit. |
+
+
+### Verification confidence and cognitive load
+
+Three separate anonymous 1–5 item distributions: confidence in verifying output, manageable workload, usefulness. Primary item: verification confidence mean; report full distributions and response rate.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Sum valid 1–5 verification-confidence responses, one per participant per survey wave |
+| Denominator | Count valid responses to that item |
+| Expression | N / D |
+| Aggregation | mean |
+| Unit | points (1–5) |
+| Eligible population | Invited eligible cohort at fixed survey wave; voluntary responses. |
+| Exclusions | Invalid/out-of-range answers and superseded duplicate submission; nonresponders stay in response-rate denominator. |
+| Events and source | survey.response; anonymous survey with single-use token and aggregate invitation count |
+| Owner / cadence | People & Administration Squad / After pilot workflow cycle; periodic follow-up |
+| Missing evidence | Report valid response count / invited count and item nonresponse; no imputation. Suppress people cohorts below five. |
+| Gaming and limits | Pressure to respond positively; no manager access to individual responses, avoid identifying free text. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Perception and selection bias; not measured time savings. No composite productivity index. |
+
+
+### Skills within substantive review window
+
+Active approved skill revisions with an accountable owner and completed substantive review not past due.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Distinct active approved skill revisions with current owner, review evidence and review_due_at &gt;= as_of |
+| Denominator | All active approved skill revisions in catalog snapshot |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | Approved revisions currently supported for use at as_of. |
+| Exclusions | Experimental and retired revisions; deprecated/revoked in-use counts reported independently, not hidden. |
+| Events and source | catalog.published; catalog.reviewed; catalog.deprecated; catalog.revoked; version inventory |
+| Owner / cadence | Data & AI / Monthly and each release |
+| Missing evidence | Missing owner/date/evidence outside numerator; show ownerless, deprecated-in-use and revoked-in-use absolute counts. |
+| Gaming and limits | Rubber-stamp review dates; require linked regression/security/usefulness evidence. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. A current review is not proof of effectiveness; consumer inventory may miss shadow copies. |
+
+
+### Workflow-specific business acceptance
+
+Independently accepted domain outcomes against a predeclared business rubric, separate from technical completion.
+
+| Contract | Definition |
+| --- | --- |
+| Numerator | Eligible completed-observation task_ids meeting the department-specific outcome rubric |
+| Denominator | All eligible initiated workflow task_ids with matured business-outcome horizon |
+| Expression | N / D * 100 |
+| Aggregation | percent |
+| Unit | % |
+| Eligible population | One named departmental workflow and predeclared start cohort; never pool unlike rubrics. |
+| Exclusions | Cancelled-before-start and unrelated workflows; unsuccessful or abandoned eligible work remains. |
+| Events and source | task.started; business.accepted; departmental case/content/reconciliation/onboarding review record |
+| Owner / cadence | Product Management / Each pilot cycle with owning department |
+| Missing evidence | Unknown follow-up stays denominator with unresolved count; no claim actual business outcome changed without source evidence. |
+| Gaming and limits | Weaken rubric or count drafts as customer benefit; lock rubric and independently audit acceptance. Descriptive signal, not causal AI productivity attribution. Source completeness, task mix and sampling limit inference; report uncertainty. Domain owner signs acceptance: Operations service accuracy; Marketing claims/rights; Finance reconciliation accuracy; HR policy correctness; Product usability/value. Not revenue uplift. |
+
+
+## Run the synthetic measurement example
+
+**Executed synthetic example — not Eldorado results.** The bundled fixture produces 1 independently accepted task from 4 matured starts: 25% confirmed success. One unresolved task remains in that denominator; known-outcome coverage is 75%. Selection precision and recall are each 1 / 2 = 50%. Recorded synthetic compute cost is EUR 60 / 1 accepted outcome = EUR 60 per accepted outcome, a partial estimate: licenses, tooling, review and rework are missing. These deliberately small samples demonstrate arithmetic and missingness, not a baseline, target or ROI claim.
+
+From the private documentation checkout, run `node scripts/ai-kpi.mjs` and `node --test scripts/ai-kpi.test.mjs`. The fixture `scripts/fixtures/ai-kpi-synthetic.json` is labeled synthetic; every result carries the same label and calculation version. This prototype has no network collectors and does not enable employee telemetry.
+
+The executable covers validated success, selection precision/recall, change fail and rework rates, escaped quality, policy effects, cost and human experience. Other catalog metrics remain contracts rather than implemented collectors; output lists the omissions. Snapshot inputs are simplified, pre-reconciled records, not a production ingestion system. Conflicting duplicates reject the calculation rather than silently choosing a value.
+
+**Next:** [Use findings to maintain, quarantine or replace skills →](../skills-maintenance.mdx)
+
+</div>

docs/strategy/roadmap.mdx

@@ -0,0 +1,79 @@
+---
+id: roadmap
+title: Roadmap
+description: Assess current code quality and delivery processes, close critical gaps, then pilot, expand and sustain AI adoption.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+Understand today’s code and how work really reaches production before introducing AI into the workflow. Fix what would make a pilot unsafe or impossible to evaluate—not every item of technical debt.
+
+<ArchifyDiagram name="strategy-roadmap" title="Understand today → Prepare foundations → Pilot → Expand → Sustain" story />
+
+**Recommended sequence · Target operating model, not an approved schedule or deployed governance.**
+
+## 1. Understand code quality and delivery
+
+Inspect representative repositories across important services and change types: tests and CI reliability, maintainability, technical debt and security findings. Trace recent changes through the actual SDLC with the people doing the work—from request to production and feedback. Check ownership, review and release practices, handoffs, rework and bottlenecks; do not assume the documented process is the real one.
+
+**Output:** baseline findings, a process map and prioritized gaps. Use these to identify a low-risk, repeatable workflow with observable acceptance—not simply the easiest repository.
+
+## 2. Fix critical readiness gaps
+
+Resolve gaps that threaten safe execution or a trustworthy comparison: for example, exposed secrets, unclear approval authority or unreliable checks needed to accept the pilot’s changes. Establish accountable people, data boundaries and recovery for the selected scope. Broader refactoring and non-critical debt can run alongside the pilot with a separate improvement backlog.
+
+**Output:** a readiness decision and bounded pilot charter. Proceed only when the critical gaps for that workflow are closed; otherwise narrow the scope or hold.
+
+## 3. Run a bounded pilot
+
+Try a small set of reviewed skills in the selected workflow, with human review and no new privileged autonomous actions. Compare equivalent work with the baseline: accepted outcomes, escaped defects, full cost and verification effort. [Skills Measurement](./measurement.mdx) explains what to collect, calculate and report; agree the comparison rules before starting.
+
+**Output:** a pilot report and a continue, adjust or stop decision. Missing evidence is a reason to investigate, not proof of improvement.
+
+## 4. Expand only on evidence
+
+Extend to another workflow or team only when quality, usefulness, cost and support capacity justify it. Prove reliable skill distribution, revocation and recovery before expanding authority. Introduce autonomous SDLC execution progressively under human direction; new departmental workflows need their own data boundaries and acceptance evidence.
+
+**Output:** an evidenced expansion decision with verified controls for the next scope—not organization-wide rollout by default.
+
+## 5. Sustain and improve
+
+Review outcomes, drift, incidents and maintenance effort. Retire ineffective skills, revisit process bottlenecks and repeat assessment when repositories, clients, data or authority change. Work toward [Target](./target-operating-model.mdx): an autonomous agent executes and governs the repeating SDLC while humans direct, guide and review.
+
+**Output:** maintained skills, a refreshed improvement backlog and evidence for the next cycle. Keep human takeover available; narrow or stop workflows when evidence no longer supports them.
+
+<details>
+<summary>Supporting gate evidence and hold conditions</summary>
+
+These are recommended implementation gates, not assigned human owners, approved thresholds or installed integrations. Agree acceptance criteria for each selected workflow before evaluating it.
+
+### Assessment → readiness
+
+Retain the sampled repository revisions, test/CI results, debt and security findings, and traced changes behind the process map. Record coverage and unknowns. Distinguish critical pilot blockers from parallel improvements; hold selection if the sample cannot explain how the candidate workflow is delivered and accepted.
+
+### Readiness → pilot
+
+Inventory actual client hosts/builds, provider/data terms, authority and event availability. Confirm accountable people and independent reviewers, forbidden actions, data/retention decisions, recovery and a reproducible baseline. Hold if accountability, lawful collection or critical acceptance checks remain unresolved.
+
+### Pilot → expansion
+
+Use a small registry, immutable skill contracts, qualified client adapters, evaluations and coaching. Verify the measurement calculations with synthetic fixtures before interpreting real outcomes. Require mandatory safety checks, independent task acceptance, reconciled source coverage and user feedback. Hold or narrow scope if quality or coverage is inadequate; usage alone does not justify expansion.
+
+### Expansion → wider authority
+
+Prove canary updates, effective-version readback, version locking, exception expiry, stale/offline handling, rollback and revocation. Hold if effective versions or controls cannot be verified or the catalog cannot be supported.
+
+For autonomous execution, begin with observation and evidence assembly, then proposing and routing work, before granting scoped execution authority. Recommended controls include exact-artifact approvals, idempotency, duplicate/outage recovery, separation of duties, audit and kill-switch drills. Prove human takeover; never infer permission from missing evidence. The agent ultimately executes and governs the cycle, not only routes tasks.
+
+### Sustained operation
+
+Operations, Marketing, Finance & Accounting and HR & Administration workflows each need a workflow owner, outcome, data boundary, capacity and domain-specific review; Product and Technology continue quality improvement. Keep sensitive decisions human. Use accepted outcomes, guardrails, total cost and experience to continue, narrow, stop or roll back. Changed client, provider, data or authority boundaries reopen the relevant gates.
+
+</details>
+
+**Next:** [Return to the strategy destination →](./target-operating-model.mdx)
+
+</div>

docs/strategy/skills-adoption.mdx

@@ -0,0 +1,41 @@
+---
+id: skills-adoption
+title: Skills adoption
+description: Workflow-led coaching, client choice, feedback, manual path.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+**TO-BE · Target operating model — not installed controls or company results.**
+
+## When should a pilot become a team workflow?
+
+Expand only when a bounded canary produces independently accepted work and useful feedback. Teach people to verify artifacts and recover without AI, not merely invoke a skill.
+
+<ArchifyDiagram name="strategy-adoption" title="Choose a workflow, coach a canary, verify outcomes and improve before expansion" story />
+
+- **Team-led:** the departmental owner defines the outcome; People &amp; Administration Squad supports learning.
+- **Choice within support:** qualify the client path instead of promising identical agent behavior.
+- **No adoption quotas:** retain a manual path; rejected suggestions and non-use are feedback, not poor performance.
+
+<details>
+<summary>Onboarding responsibilities, coaching and feedback safeguards</summary>
+
+**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+Start with a small set of useful workflows chosen by the existing teams. Product Management and the departmental owner identify the outcome; Data & AI helps turn it into a skill; Quality Engineering establishes acceptance; Platform & IT qualifies the client path; Architecture & Security clears the data boundary. People & Administration Squad coordinates learning and accessible feedback.
+
+Onboarding should teach people to select the right skill, inspect the actual artifact, recognize untrusted instructions, use the exception and incident routes and recover without AI. A practice task ends with verified work and an explanation of limits, not just a logged invocation. Demonstrate the same portable skill on the supported local clients without promising identical agent behavior.
+
+Use short worked examples, peer pairing, office hours and a clear catalog search path. Gather reasons for non-use and rejected suggestions without penalizing them. Preserve a manual path. Training feedback improves the skill only through review, not automatic self-modification of the approved catalog. Departmental workflow outcomes matter more than uniform uptake.
+
+No developer rankings, individual productivity scores, minimum invocation quotas or inference of effort from token counts are part of this strategy. Report cohort-level evidence with privacy protection and balanced quality, flow, risk and cost. A participant may reasonably stop using a skill that creates more work or uncertainty.
+
+</details>
+
+**Next:** [Measure accepted outcomes, not activity →](./measurement.mdx)
+
+</div>

docs/strategy/skills-governance.mdx

@@ -0,0 +1,104 @@
+---
+id: skills-governance
+title: Skills governance
+description: Contract, lifecycle, decision rights, adapters, locking, exceptions.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+**TO-BE · Target operating model — not installed controls or company results.**
+
+## Who can approve a skill for use?
+
+The owning team authors the skill; independent reviewers assess it before exact-revision approval. Data &amp; AI maintains the catalog, while Platform &amp; IT verifies distribution and revocation.
+
+<ArchifyDiagram name="strategy-governance" title="An owner proposes; independent review and canary evidence precede approval" story />
+
+- **Separate duties:** the author cannot provide the only approval; higher risk involves Architecture &amp; Security.
+- **Pin the whole bundle:** content, adapters and executable dependencies travel together.
+- **Keep controls authoritative:** exceptions expire and cannot bypass protected release, payment or identity controls.
+
+<details>
+<summary>Ownership, client qualification, exceptions and rollback</summary>
+
+**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+### A contract that travels, controls that stay authoritative
+
+Maintain one catalog entry per stable skill ID, with immutable revisions and a concise portable `SKILL.md` body. Required content includes when to use and when not to use the skill, prerequisites, bounded steps, expected artifacts, verification, failure handling and escalation. The catalog contract below defines owner and independent reviewer, risk tier, supported clients and versions, dependencies, digest, provenance and license, evaluations, approval, review date, deprecation and rollback.
+
+The release manifest pins the content, dependencies and adapter revisions by full immutable commit or digest. Names use an `eldorado-` prefix to reduce collisions. Friendly versions aid communication but never replace the digest. No arbitrary upstream automatic update is admitted into the approved bundle. Changes to scripts, resources or dependencies count as skill changes, not harmless documentation edits.
+
+Adapters place content in the qualified client's discovery paths and implement only verified client-specific behavior. Qualification records the host, exact build, OS, model configuration, discovery, explicit invocation, collisions, disabled skills, permission behavior, context compaction and reload behavior. A common file format is not common precedence or a portable hooks API. Claude and Cline skill-name precedence differs from rule/memory behavior; Copilot support varies by surface. Test the actual build, not the brand name.
+
+### Lifecycle and decision rights
+
+A proposal names the problem, owner, data scope and testable outcome. Experimental revisions run only in approved disposable environments. Promotion requires independent review, static and executable dependency checks, per-client behavioral evaluations and a bounded canary. Approval records bind the exact artifact and permitted uses. Deprecated revisions carry a migration path and deadline; retired revisions are unavailable for new work. Any active revision can be quarantined immediately.
+
+The author never supplies the only approval. Data & AI maintains catalog state; the owning team is accountable for content; Quality Engineering approves evaluation evidence; Architecture & Security approves higher-risk boundaries; Platform & IT verifies distribution and revocation. A business owner accepts workflow outcomes. These functions can be covered by existing staff, but incompatible author/approver duties must remain separate for the same release.
+
+An exception contains its ID, skill/client revision, scope, business reason, risk owner, compensating checks, approver, start and expiry, affected users/projects and rollback route. It does not disable protected release, payment or identity controls. Expired or unverifiable exceptions deny privileged actions. Repeated exceptions trigger a supported-design change rather than permanent informal bypass.
+
+### Distribution, stale clients and rollback
+
+Stage a verified bundle atomically, check its digest, load it through the qualified adapter and read back its effective revision. Test already-open sessions; changing files is not proof of reloading instructions. Record immutable last-known-good content and adapter dependencies. Canary upgrades precede wider distribution.
+
+A cached verified bundle may support explicitly permitted low-risk work if its model and tool dependencies are available. It does not make a cloud-backed client work offline. Stale or unsupported sessions cannot obtain centrally mediated privileged access. Reconnection revalidates support, revocation and policy before credentials are issued. Central artifact review protects delivery even when a laptop declaration is absent or false; a client report cannot prove which private prompt was actually followed.
+
+Rollback restores the approved manifest and dependencies, invalidates affected sessions, revokes unsafe revisions, runs a smoke test and verifies effective state. It cannot undo data disclosure or commands already executed. Those require incident response.
+
+</details>
+
+<details>
+<summary>Catalog contract — required fields</summary>
+
+## Catalog contract
+
+| Contract | Definition |
+| --- | --- |
+| skill_id | Stable globally unique eldorado-&lt;domain&gt;-&lt;purpose&gt;; never reused for a different purpose |
+| name | Human-readable name |
+| purpose | Problem, expected outcome and intended users |
+| triggers | Positive and negative invocation conditions |
+| owner | Existing department/team plus assigned accountable person before approval |
+| reviewer | Independent person and existing team; cannot equal release author |
+| backup | Named coverage within existing team before production support |
+| risk_tier | R1\|R2\|R3; maximum implied by data, tool and effect scope |
+| data_classification | Allowed input/output/provider boundary and forbidden data |
+| authority_envelope | Allowed resources/operations and forbidden effects; enforced externally |
+| supported_clients | Array of client, host, exact tested builds, OS, model configuration, adapter digest and qualification evidence |
+| dependencies | All skill/resource/script/tool/MCP/plugin dependencies pinned by immutable digest plus license and source |
+| revision | Full immutable source commit and content/artifact digest; friendly semver optional |
+| tests_evals | Suite/corpus/rubric/runner/judge revisions, client tuple, seeds or trial IDs, results and independent evidence refs |
+| approval | Approver identities, exact digest and policy revision, approved scope, time and expiry/invalidation condition |
+| provenance_license | Origin repository/author, upstream revision, acquisition/review history, rights/license for content and bundled resources |
+| maintenance_date | Last substantive review timestamp plus next review due and trigger conditions |
+| deprecation | State, reason, replacement, migration instructions, consumers and retirement deadline if applicable |
+| rollback | Approved known-good bundle+adapter+dependency digests, revocation/reload procedure and tested evidence |
+| procedure | Prerequisites, bounded steps, expected artifacts, verification, failure handling, escalation |
+
+
+</details>
+
+<details>
+<summary>Lifecycle transitions and required evidence</summary>
+
+## Promotion and retirement
+
+| Transition | Required evidence |
+| --- | --- |
+| proposed → experimental | Owner, purpose, risk/data scope, disposable environment and preregistered test plan |
+| experimental → approved | Independent review, all mandatory tests, qualified clients, canary, exact-digest approval |
+| approved → deprecated | Owner gives migration/replacement and retirement conditions |
+| deprecated → retired | Consumers reconciled or explicit risk-approved cutover; no new invocation |
+| any active state → quarantined | Incident or unsafe/unknown provenance; central deny immediately |
+| quarantined → experimental | Reviewed correction; new immutable revision; requalify, never auto-restore approval |
+
+</details>
+
+**Next:** [See the evidence needed to qualify a skill →](./skills-quality.mdx)
+
+</div>

docs/strategy/skills-maintenance.mdx

@@ -0,0 +1,49 @@
+---
+id: skills-maintenance
+title: Skills maintenance
+description: Review, drift, deprecation, rollback and incident handling.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+**TO-BE · Target operating model — not installed controls or company results.**
+
+## What happens when a skill drifts or causes harm?
+
+Monitor usefulness and safety throughout a revision's life. Unsafe behavior triggers containment; a correction returns through independent tests and approval, never automatic reinstatement.
+
+<ArchifyDiagram name="strategy-maintenance" title="Monitor, triage and test corrections; promote safely or contain and roll back" story />
+
+- **Named ownership:** Data &amp; AI coordinates catalog health with the owning teams.
+- **Early triggers:** incidents and client, model or dependency changes override the calendar.
+- **Recovery is verified:** rollback restores a known-good bundle; it cannot undo disclosure or past effects.
+
+<details>
+<summary>Review responsibilities, incident handling and proposed review intervals</summary>
+
+**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+Every approved skill has an accountable owning team, independent reviewer, review due date, supported client matrix and rollback bundle. Review both usefulness and safety, not just metadata freshness. Proposed maximum review intervals are recorded by risk tier; incidents, dependency changes, model/client drift or repeated failures trigger earlier review.
+
+Data & AI reviews catalog health with the owning teams. Quality Engineering samples accepted outputs and adds confirmed failures to regression sets without exposing sensitive content. Platform & IT watches unsupported, deprecated and revoked revisions and tests distribution recovery. Architecture & Security reviews emerging misuse and exception expiry. Remove redundant or unused entries deliberately, after examining whether poor discoverability or fit explains non-use.
+
+A reported unsafe behavior opens an incident with artifact, policy and client versions. Architecture & Security coordinates containment; Platform & IT revokes authority, stops scheduling and quarantines affected revisions; the owning department handles customer or business consequences; Quality Engineering reproduces the failure; Data & AI coordinates catalog correction and trend analysis. Preserve minimal restricted evidence and involve People & Administration Squad for employee-data concerns and Finance & Accounting Squad for financial effects. Restart requires a reviewed fix, regression evidence, verified rollback/revocation and accountable human authorization. Closing the incident does not erase the historical failure from measurement.
+
+## Proposed maximum review intervals
+
+Owner ratification is required before adoption. Review earlier after incidents or material dependency changes.
+
+| Tier | Maximum days between substantive reviews |
+| --- | --- |
+| R1 | 90 |
+| R2 | 60 |
+| R3 | 30 |
+
+</details>
+
+**Next:** [Use exit evidence to choose the next rollout stage →](./roadmap.mdx)
+
+</div>

docs/strategy/skills-quality.mdx

@@ -0,0 +1,86 @@
+---
+id: skills-quality
+title: Skills quality
+description: Risk tiers, independent evaluation, repeated trials, adversarial conformance.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+**TO-BE · Target operating model — not installed controls or company results.**
+
+## What evidence is enough to promote a skill?
+
+Risk determines the evaluation depth, not whether safety checks apply. Independent evidence must show useful outcomes and no failed mandatory gate before promotion.
+
+<ArchifyDiagram name="strategy-quality" title="Classify risk, test independently, then pass every mandatory gate" story />
+
+- **R1:** approved nonsensitive drafting. **R2:** code or customer-impacting material. **R3:** privileged or sensitive effects; human-authorized, outside initial autonomous scope.
+- **No averaging away harm:** a critical unauthorized effect blocks promotion.
+- **Proposed floors need owner ratification:** missing coverage or acceptance rules means qualification is incomplete.
+
+<details>
+<summary>Evaluation design, adversarial cases and interpretation</summary>
+
+**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+Quality has four separate questions: was the right skill selected, was the procedure executed safely, did the artifact pass independent checks, and did the workflow produce useful outcomes? A successful invocation answers none of the remaining questions by itself.
+
+The proposed qualification contract uses three tiers. R1 is read-only or drafting with nonsensitive approved material; R2 creates code or material with customer impact but no privileged external effect; R3 touches privileged, financial, sensitive-personal or production decisions. R3 remains human-authorized and out of the initial autonomous scope.
+
+Every tier requires all mandatory deterministic safety, schema, authorization and provenance checks to pass, with no observed critical unauthorized action. An observed critical effect blocks promotion. The proposed pilot evaluation floors below set success thresholds; these are design defaults for owner ratification, not externally validated guarantees or approved service levels. If sample coverage, acceptance criteria or responsible reviewers are missing, qualification remains incomplete. No aggregate score can trade off a failed mandatory safety check.
+
+Use sanitized, predeclared task sets containing positive triggers, near misses, negative cases and the normal workload mix. Compare no-skill, current-approved and candidate paths with the same starting artifacts; repeat stochastic trials and retain failed and abandoned attempts. Independently inspect output state. Deterministic tests grade checkable constraints; calibrated humans grade usefulness, maintainability and experience. A model judge is supplementary, versioned and checked against human disagreements, never the sole safety or promotion authority.
+
+Include adversarial repository text, malicious referenced code, wrong permissions, client toggles, name shadowing, unsupported versions, hook timeout/crash/malformed response, stale sessions, offline recovery and rollback. Run central checks against forged/missing client declarations. Hook presence is not fail-closed enforcement: failure semantics must be tested on each client, and central authorization remains independent.
+
+Report denominators, task mix, trial counts, per-client results and uncertainty. A passing benchmark is evidence within a tested envelope, not proof that all future tasks are safe. Material model, client, adapter or dependency changes trigger requalification.
+
+</details>
+
+<details>
+<summary>Proposed R1 / R2 / R3 sample sizes and thresholds</summary>
+
+## Proposed qualification floors
+
+These are local design defaults for responsible-owner ratification, not approved service levels or guarantees. All mandatory checks must pass regardless of aggregate score.
+
+### R1
+
+**Distinct tasks** — 30
+
+**Trials per task/client** — 3
+
+**Artifact success** — 90%
+
+**Selection precision / recall** — 90% / 90%
+
+### R2
+
+**Distinct tasks** — 60
+
+**Trials per task/client** — 3
+
+**Artifact success** — 95%
+
+**Selection precision / recall** — 95% / 90%
+
+### R3
+
+**Distinct tasks** — 100
+
+**Trials per task/client** — 5
+
+**Artifact success** — 99%
+
+**Selection precision / recall** — 99% / 95%
+
+Artifact success denominator is every planned executed trial, retaining failures and abandonment. Trials of same task are correlated: show per-task and per-client strata; do not inflate independent sample size. Selection floors use independent labels. Report 95% uncertainty intervals clustered by task for outcome comparisons; no regression versus current approved path beyond a preregistered owner-approved margin. Missing margin/precision rule prevents promotion.
+
+</details>
+
+**Next:** [Introduce qualified skills through a bounded pilot →](./skills-adoption.mdx)
+
+</div>

docs/strategy/target-operating-model.mdx

@@ -0,0 +1,167 @@
+---
+id: target-operating-model
+title: Target operating model
+sidebar_label: Target
+description: An autonomous agent executes and governs the SDLC; humans direct, guide and review the repeating cycle.
+hide_table_of_contents: true
+---
+
+import ArchifyDiagram from '@site/src/components/ArchifyDiagram';
+
+<div className="strategy-content">
+
+**TO-BE · Target operating model — the intended strategy, not a deployed system.**
+
+## Autonomous SDLC, human direction
+
+<ArchifyDiagram name="strategy-target" title="Autonomous agent executes and governs the SDLC; humans direct, guide and review" story />
+
+An autonomous agent executes and governs every phase. Humans direct, guide and review it; a separate human-controlled AI Agent contributes to each phase from outside the cycle.
+
+**Solid arrows:** lifecycle · **Dotted spokes:** execution and governance · **Dashed arrows:** contributions.
+
+**Scope → Architecture → UI/UX → Planning → Delivery → UAT → Security → Releases → Scope**
+
+Each stage follows the previous one. Releases returns to Scope; the cycle repeats indefinitely, with human direction informing the next iteration.
+
+<details>
+<summary>Supporting implementation options: trust boundaries and recovery</summary>
+
+## Controls that support autonomous execution
+
+The lifecycle above is the strategic direction. The earlier control design below is a supporting implementation option, not an agreed assignment of approval roles or a claim of installed controls. Detailed approval policy and responsibilities remain to be defined with humans.
+
+1. Humans direct, guide and review; the autonomous agent executes and governs work across the lifecycle.
+2. The reviewed registry supplies pinned skills and qualified adapters to coordinator and local clients.
+3. Laptop contributors can participate alongside the agent; independent repository and CI checks verify the exact revision.
+4. A separate release service and artifact-scoped approval are possible controls, subject to the policy humans define.
+5. Restricted audit and measurement evidence supports human review and the next Scope iteration.
+
+<ArchifyDiagram name="ai-adoption-target" title="Supporting control option, not agreed approval policy: isolated release authority" />
+
+**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
+
+### One coordination function, distributed contributions
+
+The autonomous agent is more than a task router: it executes and governs the repeating SDLC under human direction, guidance and review. A coordinating function maintains work records, dependencies, evidence requests, bounded retries and escalation. Data & AI and the existing AI Architect function are possible implementation contributors, not newly assigned approval authorities. Autonomous execution does not remove human involvement or allow the agent to redefine its own controls.
+
+One logical coordinator does not mean one fragile process. A durable task ledger, explicit state transitions, leases and idempotency keys allow recovery or multiple replicas without duplicate delivery. Inference outages stop new agent decisions, not the organization's ability to take over. People can resume work through the normal deterministic workflow. Evidence and authorization services fail closed for privileged actions; missing evidence never becomes permission.
+
+These controls support the sequence Scope → Architecture → UI/UX → Planning → Delivery → UAT → Security → Releases → Scope; they do not replace it with a separate lifecycle. Product, engineering, design, quality, security and platform expertise inform human direction and review. Specific approval assignments and release permissions are implementation decisions still to be defined.
+
+### Trust and authority boundaries
+
+People authenticate to the work system; the coordinator receives only the project context it needs. Untrusted issue text, repository content, web pages and tool output are task data, never an authorization source. Local clients operate under device controls and project-scoped access. Hard containment requires OS/container isolation, filesystem and network restrictions and separate short-lived identities; a skill folder, prompt or working directory is not a sandbox.
+
+The registry distributes reviewed immutable content and adapters, not ambient credentials. Executable scripts, plugins, MCP servers and dependencies are separately reviewed and pinned. Model-provider routing is allowlisted for the data classification, with approved retention and training-use terms before sensitive data crosses that boundary. Fallback to another provider must not silently change the data policy.
+
+Central controls verify protected-branch review, actual artifact identity, exact commit and policy revision, required checks and a scoped human approval. Candidate changes cannot edit their own authoritative gate or reuse approval for a different artifact. Deployment credentials belong to the release service, not the local agent. Approval expires or is invalidated by changed content. Emergency stop revokes mutation credentials and stops scheduling independently of the model, preserves evidence and enables human takeover.
+
+</details>
+
+<details>
+<summary>Candidate contributions and first workflows for all eleven teams</summary>
+
+### Department contributions
+
+The existing team structure provides a starting point. The contributions below are implementation proposals, not settled approval roles or lifecycle gates.
+
+### Product / Product Management
+
+**Contribution and retained human decision** — Own pilot priorities, acceptance criteria and outcome hypotheses; decide product value.
+
+**First bounded workflow and evidence** — Draft acceptance criteria from sanitized discovery notes; independent completeness review and accepted-task success.
+
+### Product / Product Design
+
+**Contribution and retained human decision** — Own design quality, accessibility and research handling.
+
+**First bounded workflow and evidence** — Review a proposed flow against an accessibility checklist; verify findings against the interface.
+
+### Technology / Product Engineering
+
+**Contribution and retained human decision** — Own skill authoring, code review and maintainability; remain accountable for generated code.
+
+**First bounded workflow and evidence** — Test scaffolding and change summaries in a disposable branch; independent tests and escaped-quality follow-up.
+
+### Technology / Platform & IT
+
+**Contribution and retained human decision** — Own supported client inventory, distribution, identity, isolation, CI/release integration, transport and emergency revocation.
+
+**First bounded workflow and evidence** — Qualify a pinned bundle and exercise rollback; inventory and exact-revision gate evidence.
+
+### Technology / Architecture & Security
+
+**Contribution and retained human decision** — Own risk classification, data boundaries, security review and bounded exceptions.
+
+**First bounded workflow and evidence** — Review injected-input and unauthorized-tool cases; independent control evidence and policy-effect counts.
+
+### Technology / Quality Engineering
+
+**Contribution and retained human decision** — Own regression/adversarial suites, rubric calibration and acceptance evidence.
+
+**First bounded workflow and evidence** — Evaluate candidate versus approved skills on repeated representative tasks; retain all failures.
+
+### Technology / Data & AI
+
+**Contribution and retained human decision** — Own catalog coordination, coordinator evaluation and measurement design, through existing AI enablement responsibilities.
+
+**First bounded workflow and evidence** — Curate a small skill set and analyze a prospective pilot; no new AI department.
+
+### Operations / Operations Squad
+
+**Contribution and retained human decision** — Own service acceptance, disputes, fraud, refunds and customer communications.
+
+**First bounded workflow and evidence** — Draft an answer from sanitized resolved cases; Operational Quality workstream checks correctness before any send. No automated dispute/refund decision.
+
+### Marketing / Marketing Squad
+
+**Contribution and retained human decision** — Own brand, factual claims, content rights, publication and spend approvals.
+
+**First bounded workflow and evidence** — Draft a campaign brief against approved brand material; human claim/rights review before publication.
+
+### Finance & Accounting / Finance & Accounting Squad
+
+**Contribution and retained human decision** — Own allocation of total costs, financial evidence and segregation of approvals.
+
+**First bounded workflow and evidence** — Explain a sanitized reconciliation exception; no posting, payout or payment authority.
+
+### HR & Administration / People & Administration Squad
+
+**Contribution and retained human decision** — Own coaching, acceptable use, feedback privacy and people decisions; partner with Platform & IT on access lifecycle.
+
+**First bounded workflow and evidence** — Draft onboarding guidance from approved policy; human accuracy review. No hiring or performance decision automation.
+
+Product keeps two teams; Technology keeps five; the other four departments keep one squad each. Coordination, skill ownership, approval and cover are assignments inside these teams, not new standing departments, roles or headcount. Department leaders retain accountability and designate real approvers before a pilot starts.
+
+See the existing [organization structure](/organization/structure/), [department collaboration](/organization/collaboration/) and [SDLC responsibilities](/organization/sdlc/).
+
+</details>
+
+<details>
+<summary>Strategy rationale and reading map</summary>
+
+### Govern skills first, expand authority only with evidence
+
+Eldorado's target is to make AI-assisted work dependable across the organization: useful guidance, clear human ownership, controlled execution and measurable outcomes. The first investment is a governed skills system, not an autonomous replacement for the organization. A skill packages reusable working knowledge, prerequisites and verification steps. It helps an agent perform a task; it does not grant permission or guarantee that the work is correct.
+
+The target combines an autonomous agent executing and governing the SDLC with humans directing, guiding and reviewing it. Developer choice on local laptops remains a supporting option: Copilot, Claude Code and Cline can receive reviewed portable skill content through qualified adapters. Repository, CI and release controls support execution; detailed approval policies remain implementation decisions, not new roles established by this strategy.
+
+The strategy describes the intended operating model and the evidence required to introduce it. It does not establish that these controls are installed, that every client is supported, or that AI has improved Eldorado's performance. The current reference is the documented six-department organization. Rollout begins by validating actual clients, responsibilities, data boundaries and available evidence.
+
+Success means accepted outcomes with maintained quality, controlled risk and understood total cost. Faster activity without reliable outcomes is not success. More skill invocations, generated lines or tool subscriptions are not productivity targets. People remain accountable for product, customer, financial and personnel decisions.
+
+### Navigate the strategy
+
+- [Roadmap](./roadmap.mdx) — Evidence-gated phases, no promised dates or budgets.
+- [Skills governance](./skills-governance.mdx) — Contract, lifecycle, decision rights, adapters, locking, exceptions.
+- [Skills quality](./skills-quality.mdx) — Risk tiers, independent evaluation, repeated trials, adversarial conformance.
+- [Skills adoption](./skills-adoption.mdx) — Workflow-led coaching, client choice, feedback, manual path.
+- [Measurement](./measurement.mdx) — Full KPI contracts, minimal events, illustrative calculations, privacy and limits.
+- [Skills maintenance](./skills-maintenance.mdx) — Review, drift, deprecation, rollback and incident handling.
+
+</details>
+
+**Next:** [Decide who owns and approves each skill →](./skills-governance.mdx)
+
+</div>

docusaurus.config.ts

@@ -18,6 +18,7 @@ const config: Config = {
     theme: {customCss: './src/css/custom.css'},
   } satisfies Preset.Options]],
   plugins: [
+    ['@docusaurus/plugin-client-redirects', {redirects: [{from: '/strategy/', to: '/strategy/target-operating-model/'}]}],
     ['@docusaurus/plugin-content-docs', {id: 'organization', path: 'docs/organization', routeBasePath: 'organization', sidebarPath: './sidebars/organization.ts'}],
     ['@docusaurus/plugin-content-docs', {id: 'strategy', path: 'docs/strategy', routeBasePath: 'strategy', sidebarPath: './sidebars/strategy.ts'}],
     ['@docusaurus/plugin-content-docs', {id: 'contribution', path: 'docs/contribution', routeBasePath: 'contribution', sidebarPath: './sidebars/contribution.ts'}],

package.json

@@ -14,11 +14,15 @@
     "verify": "pnpm test && node scripts/verify.mjs",
     "verify:build": "node scripts/verify.mjs --build",
     "diagrams:build": "node scripts/build-diagrams.mjs",
-    "test": "node --test scripts/portal.test.mjs"
+    "test": "node --test scripts/*.test.mjs",
+    "test:browser": "node scripts/browser/strategy-story.cjs && node scripts/browser/inline-controls.cjs && node scripts/browser/sdlc-cycle.cjs && node scripts/browser/target-midpoints.cjs && node scripts/browser/skills-measurement.cjs && node scripts/browser/roadmap.cjs && node scripts/browser/roadmap-timeline.cjs",
+    "kpi:example": "node scripts/ai-kpi.mjs"
   },
   "dependencies": {
     "@docusaurus/core": "3.10.2",
+    "@docusaurus/plugin-client-redirects": "3.10.2",
     "@docusaurus/preset-classic": "3.10.2",
+    "@docusaurus/theme-common": "3.10.2",
     "@easyops-cn/docusaurus-search-local": "0.55.3",
     "@fontsource/lato": "5.2.6",
     "@mdx-js/react": "3.1.1",
@@ -32,9 +36,14 @@
     "@docusaurus/tsconfig": "3.10.2",
     "@docusaurus/types": "3.10.2",
     "@types/react": "19.1.13",
+    "playwright": "1.63.0",
     "typescript": "5.9.3"
   },
-  "pnpm": {"overrides": {"serialize-javascript": "7.0.5"}},
+  "pnpm": {
+    "overrides": {
+      "serialize-javascript": "7.0.5"
+    }
+  },
   "browserslist": {
     "production": [
       ">0.5%",

pnpm-lock.yaml

@@ -14,9 +14,15 @@ importers:
       '@docusaurus/core':
         specifier: 3.10.2
         version: 3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(debug@4.4.3)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)
+      '@docusaurus/plugin-client-redirects':
+        specifier: 3.10.2
+        version: 3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)
       '@docusaurus/preset-classic':
         specifier: 3.10.2
         version: 3.10.2(@algolia/client-search@5.59.0)(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(@types/react@19.1.13)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(search-insights@2.17.3)(typescript@5.9.3)
+      '@docusaurus/theme-common':
+        specifier: 3.10.2
+        version: 3.10.2(@docusaurus/plugin-content-docs@3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)
       '@easyops-cn/docusaurus-search-local':
         specifier: 0.55.3
         version: 0.55.3(@docusaurus/theme-common@3.10.2(@docusaurus/plugin-content-docs@3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1))(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)
@@ -51,6 +57,9 @@ importers:
       '@types/react':
         specifier: 19.1.13
         version: 19.1.13
+      playwright:
+        specifier: 1.63.0
+        version: 1.63.0
       typescript:
         specifier: 5.9.3
         version: 5.9.3
@@ -1109,6 +1118,13 @@ packages:
       react: '*'
       react-dom: '*'
 
+  '@docusaurus/plugin-client-redirects@3.10.2':
+    resolution: {integrity: sha512-z5I5ttCXw+8y2gHVZvqAMmUw4Rb0ZzKA5eCPk87SfM/jCKOTvE24yDpPAwwipvug96ij7mOwEHXWw8G4LlWdGA==}
+    engines: {node: '>=20.0'}
+    peerDependencies:
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+
   '@docusaurus/plugin-content-blog@3.10.2':
     resolution: {integrity: sha512-0cbEnNKf0InmLkhj/+nVRmqEnWEoOE8Mh+2x1qOXI0qYpCnphq4RXknVJ8BvybKRXqYVvbmdMfiJSup+k4tm5w==}
     engines: {node: '>=20.0'}
@@ -3962,6 +3978,16 @@ packages:
     resolution: {integrity: sha512-Oo/NZcSWccq8KyoG7gLE9fnltgHns+pNCjCAp/WmjsUySi+sX7y4z4Xqu4fVb42CDHzRPl33fjzT15V1wvcyhA==}
     engines: {node: '>=16.0.0'}
 
+  playwright-core@1.63.0:
+    resolution: {integrity: sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==}
+    engines: {node: '>=20'}
+    hasBin: true
+
+  playwright@1.63.0:
+    resolution: {integrity: sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==}
+    engines: {node: '>=20'}
+    hasBin: true
+
   postcss-attribute-case-insensitive@7.0.1:
     resolution: {integrity: sha512-Uai+SupNSqzlschRyNx3kbCTWgY/2hcwtHEI/ej2LJWc9JJ77qKgGptd8DHwY1mXtZ7Aoh4z4yxfwMBue9eNgw==}
     engines: {node: '>=18'}
@@ -6768,6 +6794,47 @@ snapshots:
       - uglify-js
       - webpack-cli
 
+  '@docusaurus/plugin-client-redirects@3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)':
+    dependencies:
+      '@docusaurus/core': 3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(debug@4.4.3)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)
+      '@docusaurus/logger': 3.10.2
+      '@docusaurus/utils': 3.10.2(clean-css@5.3.3)(cssnano@6.1.2(postcss@8.5.28))(html-minifier-terser@7.2.0)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)
+      '@docusaurus/utils-common': 3.10.2(clean-css@5.3.3)(cssnano@6.1.2(postcss@8.5.28))(html-minifier-terser@7.2.0)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)
+      '@docusaurus/utils-validation': 3.10.2(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)
+      eta: 2.2.0
+      fs-extra: 11.4.1
+      lodash: 4.18.1
+      react: 19.1.1
+      react-dom: 19.1.1(react@19.1.1)
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - '@docusaurus/faster'
+      - '@mdx-js/react'
+      - '@minify-html/node'
+      - '@napi-rs/image'
+      - '@parcel/css'
+      - '@rspack/core'
+      - '@swc/core'
+      - '@swc/css'
+      - '@swc/html'
+      - bufferutil
+      - clean-css
+      - cssnano
+      - csso
+      - debug
+      - esbuild
+      - html-minifier-terser
+      - imagemin
+      - lightningcss
+      - postcss
+      - sharp
+      - supports-color
+      - svgo
+      - typescript
+      - uglify-js
+      - utf-8-validate
+      - webpack-cli
+
   '@docusaurus/plugin-content-blog@3.10.2(@docusaurus/plugin-content-docs@3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3))(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)':
     dependencies:
       '@docusaurus/core': 3.10.2(@mdx-js/react@3.1.1(@types/react@19.1.13)(react@19.1.1))(debug@4.4.3)(postcss@8.5.28)(react-dom@19.1.1(react@19.1.1))(react@19.1.1)(typescript@5.9.3)
@@ -10793,6 +10860,12 @@ snapshots:
       pvutils: 1.2.0
       tslib: 2.8.1
 
+  playwright-core@1.63.0: {}
+
+  playwright@1.63.0:
+    dependencies:
+      playwright-core: 1.63.0
+
   postcss-attribute-case-insensitive@7.0.1(postcss@8.5.28):
     dependencies:
       postcss: 8.5.28

research/ai-adoption/findings.md

@@ -0,0 +1,229 @@
+# Eldorado AI adoption — research handoff
+
+Research only. Retrieved 4 October 2026 UTC. This document separates documented vendor capability, empirical evidence, and recommendations. Nothing here certifies an Eldorado rollout, installed client, enabled telemetry, staffing appointment, measured baseline, or realized productivity improvement. Sources and literal supporting passages are in `sources.json`; fetched text, retrieval outcomes and citation ledger are retained alongside it.
+
+## 1. Local organizational baseline and scope
+
+Read-only remote fetch and status inspection found a clean documentation checkout on `main`, with HEAD and `origin/main` both `14ba1aa1ef66c91525135f743d15c77e32db78d3`. Inspected all three current Organization pages: `structure.mdx`, `collaboration.mdx`, `sdlc.mdx`, plus channel wiki `/opt/data/wiki/channels/1555510466904727622.md`. This is documentation evidence, not independent verification of actual personnel, systems, or deployed controls. No repository file was changed.
+
+Preserve the existing structure:
+
+- Product: Product Management and Product Design.
+- Technology: Product Engineering, Platform & IT, Architecture & Security, Quality Engineering, Data & AI.
+- Operations: Operations Squad; Marketing: Marketing Squad; Finance & Accounting: Finance & Accounting Squad; HR & Administration: People & Administration Squad.
+- Existing leadership documentation locates AI enablement coordination with the AI Architect within Data & AI, alongside established engineering leadership. Do not invent a new AI department, standing committee, delivery team, or confirmed headcount.
+
+The requested target is ONE logical SDLC coordinating agent, with people using local Copilot, Claude Code or Cline agents. Logical coordination does not require a single fragile process and does not transfer human accountability to a model. The recommendations below develop this target; they are not a description of present operations.
+
+## 2. Principal conclusions
+
+1. Standardize a portable skill content contract, not the fiction of one universal client policy. Agent Skills defines `SKILL.md`, metadata and resources; `allowed-tools` is experimental, and the discovery directory is not mandated by the format.[1][21]
+2. Treat instructions as guidance. GitHub explicitly warns of nondeterministic instruction following, and Claude describes memory files as context rather than enforced configuration.[3][5] Recommended enforcement belongs in independently administered repository, CI, artifact and release controls.
+3. Maintain client-specific adapters and an explicit supported version matrix. Current official docs disagree even about collision precedence: Claude enterprise > personal > project; Cline global skill > project skill; Cline rules use the opposite workspace-over-global rule.[4][8][9]
+4. Assess skill selection, execution, artifact quality and business outcomes separately. Repeated trials and environment-state verification matter more than an agent reporting success.[11]
+5. Measure a balanced portfolio of flow, quality, risk, cost and human experience. DORA now uses five delivery metrics; SPACE explicitly rejects a single productivity metric.[12][24] Adoption counts or accepted code are not causal productivity evidence.
+6. Use comparative pilots, not an imported percentage ROI. Controlled studies have reported substantial speedups and slowdowns in different settings, and METR's newer study explains why selection and concurrent-agent timing make current effects difficult to estimate.[16][17][22]
+
+## 3. Compatibility and enforcement matrix
+
+Every capability below is documented upstream, not exercised in Eldorado. A supported client means a particular host, version, model configuration and OS combination that passes local conformance tests; a product brand alone is insufficient.
+
+| Dimension | GitHub Copilot | Claude Code | Cline |
+| --- | --- | --- | --- |
+| Skills and scope | Project `.github/skills`, `.claude/skills`, `.agents/skills`; personal `~/.copilot/skills`, `~/.agents/skills`. About page includes cloud agent, code review, CLI, app, VS Code and JetBrains agent mode.[2] | Common format plus invocation controls, subagents and dynamic context extensions. Native project/personal `.claude/skills`; enterprise and nested scopes also documented.[4] | Workspace `.cline/skills`, global `~/.cline/skills`; explicit invocation and enabled-by-default toggles documented.[8] |
+| Always-on instructions | Repository-wide `.github/copilot-instructions.md`, path-specific files and agent instructions have surface-dependent support. Do not apply the GitHub.com hierarchy to every IDE.[3] | `CLAUDE.md` and related discovered memory files are concatenated into context, not overriding configuration files.[5] | Workspace/global rules combine, with workspace taking precedence for conflicts; toggles may disable rules.[9] |
+| Name collision / precedence | Inspected docs establish instruction precedence on GitHub.com, not a universal skill-name collision order. Test duplicate personal/project skills before approval.[3] | Enterprise skill over personal over project for same-name collisions; distinct from memory-file concatenation.[4][5] | Global skill over project skill, but workspace rules over global rules. Do not conflate them.[8][9] |
+| Trust and execution | GitHub warns shared skills are not verified, may contain injection or malicious scripts, and shell preapproval can remove a protective confirmation.[26] | Trust/permission dialogs and sandbox capability exist, but approved shell access can exceed working directory; unattended sessions differ.[7] | User toggles do not establish an enterprise security boundary. Current hook landing page redirects to SDK plugin documentation, which describes executable plugins.[8][10][23] |
+| Hooks and enforcement | No universal Copilot hook parity established by inspected sources. Do not promise a portable hook API or use absence of research as proof none exists. | PreToolUse supports blocking, but command/http/MCP timeout does NOT block automatically; plain exit 1 is generally nonblocking without valid decision JSON. Agent SDK callbacks differ.[6] | SDK documents lifecycle hooks and explicit `fail_closed` policy. This is not proof every IDE/CLI installation exposes identical configuration or failure semantics.[23] |
+| Distribution | Repository content can travel with code. `gh skill` public preview documents installation, source provenance, `@SHA` and `--pin`; pinned skills are skipped in updates.[26] | Repository/managed deployment plus client-specific facilities. Use an external immutable bundle manifest; do not presume Copilot's installer or plugin semantics apply unchanged.[4] | Commit workspace skill directories for team sharing. SDK plugins can come from npm/git/file sources; these require separate software-supply-chain review.[8][23] |
+| Telemetry | Usage API spans multiple surfaces, but rich IDE detail requires telemetry; server-side active-user recovery does not fill missing dimensional data.[19] | OTel supports configured usage/cost/tool export; detailed skill names/tool arguments require explicit collection settings. Version-specific behavior is substantial.[20] | SDK lifecycle hooks provide instrumentation building blocks, not proof of a ready-made comparable enterprise skill dashboard or retention contract.[23] |
+| Portable guarantee | Readable common content only; neither skill selection nor correct execution follows from installation.[3][26] | Shared format does not standardize extension behavior or guarantee instruction adherence.[4][5] | Shared content and client behavior remain different; toggles and name shadowing affect what executes.[8][9] |
+
+### Version pinning, updates, rollback and stale laptops — recommended operational contract
+
+These are recommended design choices, not features claimed to exist universally:
+
+- Maintain one reviewed registry with stable skill IDs, human owner/reviewer, purpose, risk tier, provenance/license, immutable source revision, artifact digest, dependencies, supported client/OS/version range, evaluation revision/results, approval record, last review date, deprecation state, migration guide and rollback digest. Keep client-specific invocation and tool configuration outside the portable core, generated and tested as adapters.
+- Release a manifest mapping stable IDs to exact immutable content and adapter revisions. Pin full commit/digest, not a mutable branch or tag alone. GitHub's preview installer provides pin/provenance mechanisms, but private Gitea compatibility and availability on Eldorado laptops have not been established.[26] A controlled vendored bundle is the simpler cross-client recommendation until proven otherwise.
+- Promotion: author branch → independent review → format/resource validation → script/dependency/security checks → per-client behavioral and adversarial evals → canary → approval → distribution. Never permit a proposed skill to approve itself or edit its own promotion checks without independent review.
+- Updates: compare signed/verified manifest and content digest; show release notes; stage atomically; restart/reload affected sessions where required by the client. Test whether already-open sessions retain old instructions. Do not infer reload from files changing.
+- Rollback: restore a previously approved manifest AND adapter/dependency versions, revoke the unsafe revision centrally, expire affected sessions, rerun a smoke test and read back effective version. Reverting a file does not undo commands already executed or leaked data.
+- Offline laptop: a verified cached bundle can support permitted low-risk local drafting, provided required local model/tool dependencies actually work offline. Local files being present do not mean cloud-backed inference is offline-capable. No claim of native offline inference or guaranteed durable telemetry buffering is made for any client.
+- Stale/unsupported bundle: show a visible warning and prevent high-risk centrally mediated actions; allow explicitly approved low-risk work only. Recommended grace periods are risk decisions to settle, not fabricated vendor defaults. On reconnect, revalidate revocation and support status before obtaining privileged credentials or submitting gated delivery actions.
+- Laptop evidence is fallible and may be altered by its owner. CI should verify repository-delivered manifest/content and actual output, but cannot prove which private prompt or skill a laptop truly used. Treat client attestations as advisory unless an independently verified device/runtime trust mechanism exists. Central enforcement must still protect work with no attestation.
+- Avoid conflicting names and broad user-directory installation; prefix governed IDs and detect shadowing. Keep an explicit exception route with owner, scope, justification, expiry and compensating checks. An exception must not quietly disable protected-release controls.
+
+## 4. Conflicts, weak evidence and what not to conclude
+
+| Claim / conflict | Classification and resolution |
+| --- | --- |
+| “Project skills universally override user skills.” | Contradicted as a universal claim. Agent Skills implementation guide says this; current Claude and Cline product docs specify personal/global priority for skill collisions. Weight actual client documentation for that client, then verify behavior locally.[21][4][8] |
+| “GitHub organization instructions enforce company policy everywhere.” | Unsupported. GitHub documents limited surfaces, personal/repository precedence, nondeterminism and head-branch review instructions. Use repository ownership and independently protected gates instead.[3] |
+| “All clients support the same skills/hooks/telemetry.” | Unsupported. Standard content exists, but scope, extensions, hooks and instrumentation differ. Cline's hook page now points to SDK plugins; do not repeat historical hook file recipes without version testing.[1][10][23] |
+| “Copilot supports JetBrains skills.” | About-skills page explicitly includes JetBrains; adding-skills overview currently omits it. This is documentation asymmetry, not sufficient evidence to declare unsupported. Verify the exact target host/version during adapter qualification.[2][26] |
+| “Hook failure blocks dangerous work.” | Not generically true. Claude documents nonblocking timeout and exit-code cases; Cline SDK offers an explicit fail-closed setting. Test timeout, crash and malformed output separately.[6][23] |
+| “AI makes developers 55.8% faster.” | Supported paraphrase only for Peng et al.'s controlled JavaScript HTTP-server task; abstract inspected. Not a software-organization forecast.[17] |
+| “AI makes experienced developers 19% slower today.” | Misleading temporal/generalized claim. METR's early-2025 RCT involved 16 developers and 246 issues; the authors now label those results outdated as current capability evidence.[16] |
+| “METR's newer results prove a universal speedup.” | Unsupported. Follow-up raw estimates suggest shorter task time, but intervals include no effect and authors warn participant/task selection and parallel-agent timing compromise the estimate.[22] |
+| “Independent study proves a 21% Eldorado improvement.” | Unsupported. Paradis et al.'s abstract reports approximately 21% shorter task time for 96 Google engineers, with a large interval and explicit ecosystem/generalization caveats. Primary abstract, not full methods, inspected.[18] |
+| “Agent says done / skill was loaded, therefore compliant.” | Unsupported. Outcome must be inspected in the environment; selection, reading, following, tool execution and outcome are separate observations.[11] |
+
+Research hygiene correction: the initial URL seed for arXiv `2410.12944` was mistakenly labelled as a Cui field-experiments source. The retrieved body is Paradis et al.'s Google RCT; `sources.json` records the correct identity. No Cui statistic is used. Likewise, ACM SPACE returned HTTP 403; an author-hosted Microsoft Research publication summary was retrieved instead. These are bounded acquisition limitations, not invented evidence.
+
+## 5. Target coordination, authority and organization mapping
+
+Recommended trust flow: people and approved work records → one logical SDLC coordinator → task-scoped local-agent work proposals → repository review → independently administered CI/artifact evidence → authorized human release decision → release service. The coordinator should maintain workflow state, dependencies, requested evidence, retries and escalation. It should not be sole author, evaluator and approver, nor hold unrestricted production credentials.
+
+Use durable IDs, idempotent task transitions and bounded retry budgets so multiple coordinator replicas cannot publish twice. Keep a human takeover and deterministic queue/authorization path if inference is unavailable. Project-level context sharing must be deliberately scoped; shared coordination is not permission to mix secrets, HR records, customer disputes and source code.
+
+| Existing owner | Recommended accountability, without creating teams |
+| --- | --- |
+| Product Management | Choose outcome hypotheses and eligible work; accept product value and prioritize pilots rather than maximize AI usage. |
+| Product Design | Validate usability/accessibility and customer research handling; review generated experience changes and design-task skills. |
+| Product Engineering | Own code, practical skill authoring and local-agent use; review generated changes and remain responsible for maintainability. |
+| Platform & IT | Own bundle delivery, device/client support, identity, workload isolation, central CI/release integration, telemetry transport and emergency revocation. |
+| Architecture & Security | Own trust boundaries, data/permission risk classification, supply-chain approval requirements and security exceptions; review privileged skill proposals. |
+| Quality Engineering | Own independent regression/adversarial suites, quality rubrics, gate evidence, failure sampling and evaluation reproducibility. |
+| Data & AI | Coordinate the skills catalog and logical SDLC-agent evaluation with the documented AI Architect function; own statistical analysis and model/client experiment design. |
+| Operations Squad | Supply sanitized service cases and operational acceptance; own human decisions on disputes, refunds, fraud and customer communications, not the coordinator. |
+| Marketing Squad | Own brand/claim review, campaign approval and content rights; start with drafting/review skills rather than autonomous spending or publication. |
+| Finance & Accounting Squad | Validate cost allocation and investment evidence; retain payout, accounting and financial approval segregation. |
+| People & Administration Squad | Own training, onboarding, acceptable use and privacy-sensitive adoption feedback, with Platform & IT on access lifecycle; no individual developer ranking. |
+
+Department leaders retain business accountability. Staffing capacity, named approvers and deputies need human confirmation; the operating-model role description is not evidence that every position is filled. For synthesis, map recommendations to existing responsibilities rather than publish uncertain staffing as fact.
+
+### Threat and failure controls
+
+NIST supplies a voluntary lifecycle governance framework and GenAI companion, not certification; the RMF core organizes work around govern, map, measure and manage.[13][14][25]
+
+OWASP identifies external-content injection and recommends least privilege, human approval and adversarial testing.[15]
+
+Recommended controls by failure mode:
+
+- Malicious skill, script, dependency, MCP server or changed upstream tag: allowlisted source, immutable digest, independent review, license/provenance inventory, restricted network/runtime and no automatic arbitrary installs. A reviewed Markdown file does not make referenced executable code safe.
+- Prompt injection from issues, repository instructions, web pages or tool results: treat as untrusted input; separate data from authority; limit credentials and egress; require independent authorization. GitHub code review's use of PR-head instructions is a concrete reason not to trust AI review as the sole gate.[3][15]
+- Fabricated success, omitted tests, cherry-picked evidence or judge manipulation: verify actual artifact/CI state tied to exact commit and policy revision; keep evaluation checks outside candidate-controlled changes; sample human review.
+- Overbroad local shell permissions: isolate process/OS identity, filesystem, network and secrets. A profile, skill folder or current directory is not containment. Claude's own docs distinguish permission prompts from sandbox controls.[7]
+- Duplicate or looping agent work, runaway spend and unavailable coordinator: task idempotency, bounded retries/time/cost, lease expiry, human recovery and read-only/degraded mode. Never downgrade a release gate because the model or evidence service is unavailable.
+- Model/client/context drift or stale session instructions: version-qualified adapters; requalification on material updates; compaction/long-session tests; version-aware incident analysis.
+- Privacy leakage through telemetry or shared memory: minimal structured events, pseudonymous IDs, restricted retention and access; no raw prompts, secrets or source contents by default. Explicitly review the privacy cost before enabling detailed tool/skill-name export.[20]
+- Kill switch: independently revoke mutation/release credentials and stop scheduling; disable affected revisions and preserve evidence. Sending “stop” to a model is not the security boundary.
+
+## 6. Skill quality, evaluation and lifecycle recommendations
+
+A useful skill must state when to use it, when not to use it, prerequisites, exact steps, expected artifacts, verification, failure handling and escalation. Keep the portable body small and reference bounded resources. The format specification supports progressive disclosure and recommends concise main files.[1]
+
+Proposed evaluation layers:
+
+1. Static contract: parse metadata; verify stable identity/owner/review date; validate links and resource paths; detect embedded secrets, prohibited dependencies, unsafe commands and unsupported client-only fields.
+2. Selection tests: positive trigger tasks, near misses and negative tasks; report false activation and missed activation separately. A larger catalog should be tested for routing regressions, not presumed better.
+3. Execution tests: run representative sanitized tasks in disposable environments with fixed starting repositories; verify real outputs, not self-reports. Include missing prerequisite, invalid input, tool timeout, denied permission, malformed evidence and interrupted session.
+4. Safety tests: injected repository text, malicious referenced scripts, conflicting global/project skills, user toggle, unsupported version, expired/revoked bundle, offline network, context compaction and stale in-memory version.
+5. Outcome grading: deterministic tests for mechanically checkable constraints; independent human review for product/design/maintainability; model judges only with explicit rubric and human calibration. Record disagreements and judge version.[11]
+6. Comparison: same tasks and conditions for no-skill/current-approved/candidate versions; repeated trials, failure/abandonment retained; separate client/model/skill changes. Report sample size, variability, confidence and task mix, not only a mean pass percentage.[11]
+
+Recommended promotion policy: all mandatory deterministic safety/authorization checks must pass; any observed critical unauthorized action blocks promotion pending investigation. This is a proposed policy, NOT proof of zero residual risk. Quantitative success-rate thresholds should be set after pilot variance and business impact are known, by risk tier; do not invent universally validated percentages. Privileged release/payment/customer-impact workflows need stronger review than read-only documentation assistance.
+
+Lifecycle: proposed → experimental → approved → deprecated → retired, with quarantine available from every active state. Review triggered by incident, tool/model/client change, dependency change, usage feedback or scheduled owner review. Each approved skill needs an owner and backup, change history, support window, migration route and known-good rollback. Deprecation should warn, offer replacement and track consumers before retirement; urgent security revocation overrides convenience. Do not retain unowned skills merely because they remain popular.
+
+Adoption should begin with training on how to inspect results, report failures and refuse unsafe requests. Build examples from actual team workflows; offer office hours and opt-in feedback; record why a skill was rejected. Measure whether people can perform and verify work, not whether they obey a target number of invocations. Avoid automatically promoting agent-written corrections into the governed catalog.
+
+## 7. KPI instrumentation options and recommended choices
+
+### Practical source tiers
+
+A. Start with authoritative repository/CI/deployment/incident events. These can measure delivery outcomes without observing every laptop prompt. No event feed has been inspected here; feasibility must be verified with the current hosting platforms and retention.
+
+B. Add a governed catalog/version inventory and opt-in task-level skill/client declarations. This supplies adoption and support coverage, but declarations are not proof of execution or adherence.
+
+C. Add client adapters where supported: Copilot usage APIs and Claude OTel may help; their fields, licensing, enabled state and missingness differ.[19][20] Cline SDK hooks are an instrumentation option requiring engineering and exact-version qualification, not a proven universal collector.[23]
+
+D. Use short anonymous surveys, work sampling and pilot comparisons for cognitive load, confidence and rework not visible in logs. SPACE's multidimensional premise supports this combination; surveys alone cannot establish time saved.[24][16]
+
+### Candidate measurement contracts for synthesis
+
+These are recommended options, not observed metrics or approved targets. All denominators must use a predeclared eligible population and reporting window; zero denominators produce “not available,” never zero performance.
+
+| Measure | Definition and useful source | Owner / interpretation / missingness |
+| --- | --- | --- |
+| Validated task success | Independently accepted successful tasks / all eligible initiated tasks with matured observation window; count failed/abandoned tasks as nonsuccess and show still-open separately. Task ID + acceptance evidence, not agent message. | Quality Engineering; weekly pilot report. Show task type, sample size and unobserved outcomes separately; exclude cancelled-before-start work by stated rule, not post-hoc cherry-picking. |
+| Skill selection precision / recall | Correct relevant activations / all activations; relevant tasks with activation / all relevant tasks, on a labeled evaluation set. | Data & AI with Quality Engineering; per candidate/client release. Not obtainable from skill-loaded logs without relevance labels. |
+| Supported bundle coverage | Eligible active installations with verified supported revision / eligible active installations inventoried. | Platform & IT; weekly. Unknown/invisible laptops remain unknown and inventory coverage is separately reported; do not treat silence as compliant. |
+| Useful adoption | Distinct eligible participants using an approved skill in an eligible workflow / eligible participants during window, plus qualitative usefulness. | Data & AI and People & Administration Squad; monthly aggregate. Separate declared, observed and inferred usage; suppress small cohorts and never rank people. |
+| Change lead time | Commit-to-production elapsed time per deployed change; report distribution and population. Repository + deployment SHA association. | Platform & IT / Product Engineering; service-level trend. Missing SHA mapping is missing coverage, not instantaneous delivery. DORA definition, not PR-open-to-merge time.[12] |
+| Deployment frequency | Production deployments / stated period, service-scoped. | Platform & IT; report with quality measures. Exclude retries/duplicate events; no incentive to split meaningless deployments.[12] |
+| Change fail rate | Production deployments requiring immediate intervention / all production deployments. | Quality Engineering / Platform & IT; require incident/rollback linkage and intervention definition. Missing incident links limit confidence.[12] |
+| Failed deployment recovery time | Recovery timestamp minus failed-deployment failure timestamp; distribution over relevant failed deployments. | Platform & IT; unresolved failures shown separately, never dropped as if recovered. Not all-incident MTTR.[12] |
+| Deployment rework rate | Unplanned incident-driven production deployments / all production deployments. | Platform & IT; preserve planned/unplanned classification and incident link. DORA fifth metric, distinct from change fail rate.[12] |
+| Escaped quality issues | Severity-stratified post-acceptance defects / accepted changes with completed follow-up, plus absolute incident counts. | Quality Engineering; agreed maturation window. Do not compare immature and mature cohorts or imply every defect was AI-caused. |
+| Safety / policy violations | Confirmed prohibited actions or attempted bypasses / evaluated eligible runs, with severe incidents also as absolute counts. | Architecture & Security; immediate incident response and periodic trend. Separate detected attempts, blocked attempts and actual effects; zero observed is not proof of no risk. |
+| Cost per accepted outcome | Allocated license + model/tool/compute + human review/rework costs / independently accepted outcomes; include costs of failed/abandoned attempts in numerator. | Finance & Accounting Squad; monthly. Show uncertain allocation and missing spend; do not call model tokens the whole cost. |
+| Human experience | Aggregate survey distribution for cognitive load, confidence in verification and perceived usefulness, with response count / invited eligible population. | People & Administration Squad / Data & AI; periodic. Self-selection and perception bias explicit; no employee surveillance dashboard. |
+| Maintenance health | Approved skills within review window / active approved skills; separately count ownerless, deprecated-in-use and revoked-in-use revisions. | Data & AI / Platform & IT; catalog release and periodic review. Review stamp alone is not quality evidence. |
+
+Recommended minimal event schema: `event_id`, `schema_version`, `event_type`, `occurred_at`, `received_at`, `producer`, `task_id`, `attempt_id`, `project_id`, `pseudonymous_actor_id` where necessary, `client/host/version`, `model_id/version_if_exposed`, `skill_id/revision/digest`, `adapter_revision`, `policy_revision`, `repo_commit`, `outcome`, `reason_code`, `evidence_ref`, `cost_amount/currency/basis`, `measurement_origin` (server/client/self-report), and `consent_or_collection_basis`. Fields can be nullable with reason; do not fabricate a model revision hidden by a provider.
+
+Recommended ingestion rules: deduplicate by producer + event_id; model retries as attempts, not extra completed tasks; preserve late events and recompute versioned aggregates; use server receipt and skew checks rather than trusting laptop clocks blindly. A lost terminal event is unknown until reconciled, not automatically success or abandonment. Distinguish paused, failed, abandoned, cancelled-before-start and accepted. A skill-loaded event records loading only. A task can involve multiple skills/versions and agents; avoid attributing the entire outcome or labor time to every invocation.
+
+Suggested privacy starting point for human approval: short raw structured-event retention (for example 30 days), longer aggregate trends (for example 12 months), no raw prompts/code/screens by default, role-limited incident evidence, and explicit deletion/access process. These durations are policy proposals, not legal requirements or existing Eldorado settings. Confirm employment/privacy constraints with responsible owners before collection.
+
+Pilot comparison recommendation: define task classes and quality acceptance first; collect a prospective baseline and eligible population; compare matched or randomized cohorts when ethical/practical; record concurrent process/client/model changes. Keep quality and risk guardrails fixed. Report descriptive trends separately from causal estimates. Measure elapsed lead time and human effort separately because parallel agents break the assumption that elapsed time equals labor saved; METR's follow-up explicitly raises this issue.[22]
+
+For executable downstream examples, use clearly synthetic fixtures covering duplicates, retries, unknown outcomes, multiple skills, zero denominator, immature quality window and late deployment/incident events. Assert exact expected numerator/denominator and units. Do not display synthetic values as Eldorado baseline data.
+
+## 8. Recommended sequence and evidence gates
+
+- Foundation: inventory actual clients, repositories, data sensitivity, available events and accountable owners. Exit only with a supported pilot boundary and explicit forbidden actions, not with a catalog full of untested skills.
+- Low-risk pilot: small set of useful read-only/drafting/test-assistance skills; reviewed immutable bundles; exact-client smoke and adversarial tests; human review and failure reporting. Exit with reproducible quality evidence and usable measurement coverage.
+- Governed distribution: add version-aware adapters, onboarding, staged upgrades, rollback/revocation drills and exception expiry. Exit when stale/offline/unsupported clients cannot bypass central privileged gates.
+- Logical SDLC coordination: coordinator starts by observing and assembling evidence, then proposing work and routing approvals. Expand mutation only after idempotency, separation of duties, scoped credentials, outage recovery and kill-switch tests pass.
+- Broader departmental use: Operations, Marketing, Finance & Accounting and HR & Administration adopt domain-specific skills with their own human decisions, data boundaries and outcome measures. Do not copy coding autonomy into payments, personnel decisions or disputes.
+
+No invented rollout dates, budget, staffing capacity or required improvement percentage. Scale only when quality, risk and cost evidence support it; stop or narrow scope when benefits are not demonstrated.
+
+## 9. Source coverage and unresolved questions
+
+Coverage: 26 retrieved primary-source records with 50 literal evidence passages. Includes Agent Skills specification and integration guidance; GitHub support/instructions/install/metrics; Claude skills/memory/hooks/security/monitoring; Cline skills/rules/hooks and linked SDK plugins; agent-evaluation methodology; current DORA definitions; author-hosted SPACE summary; NIST framework/core/GenAI profile landing page; OWASP prompt injection; two primary research abstracts plus METR historical study and 2026 follow-up. This is substantive source-body review, but not a systematic literature review, independent replication, legal assessment or live client qualification. Full PDFs for the two arXiv papers and NIST GenAI profile were not reviewed; claims are limited accordingly. ACM's 403 is recorded and resolved only to the author-hosted summary, not bypassed or silently called full text.
+
+Open decisions/evidence needed before implementation:
+
+1. Which actual client hosts, versions, models, OSs, subscriptions and managed-device controls are in use? What is the allowed support window?
+2. Which repository/CI/release systems and protected-branch controls are authoritative? Can required checks and policy definitions be altered by a candidate PR or bypassed by administrators?
+3. Who fills each approving/operating function and who provides cover? What pilot capacity is available? The documented organization does not establish personnel availability.
+4. What data may reach each model provider or telemetry endpoint; what retention/training/region and contractual terms apply? No provider contract was inspected.
+5. Which low-risk workflows have enough representative tasks and independent quality labels? What is the actual eligible population and baseline coverage?
+6. What timeout, stale-bundle grace, critical-risk rejection and emergency-revocation policies will owners approve? Can laptop access be independently revoked?
+7. Does the chosen distributor support private Gitea securely, and can every supported client report effective skill/adapter versions without collecting sensitive content?
+8. What causal claims, if any, can the proposed pilot design justify given self-selection, learning, task mix and parallel work?
+9. Which detailed Cline/Copilot hooks and offline/resume behavior exist in the precise deployed builds? Sources here do not establish cross-client equivalence.
+
+Synthesis handoff: keep this research trail outside reader-facing portal prose. Use ordinary operating-model language for the strategy, preserve all existing teams and leadership uncertainty, visibly distinguish target maturity from current state, and retain recommendation/source mapping internally. No portal publication is part of this research card.
+
+## Sources
+
+[1] https://agentskills.io/specification — Agent Skills specification
+[2] https://docs.github.com/en/copilot/concepts/agents/about-agent-skills — Copilot Agent Skills
+[3] https://docs.github.com/en/copilot/concepts/prompting/response-customization — Copilot custom instructions
+[4] https://code.claude.com/docs/en/skills — Claude Code skills
+[5] https://code.claude.com/docs/en/memory — Claude Code memory
+[6] https://code.claude.com/docs/en/hooks — Claude Code hooks
+[7] https://code.claude.com/docs/en/security — Claude Code security
+[8] https://docs.cline.bot/customization/skills — Cline skills
+[9] https://docs.cline.bot/customization/cline-rules — Cline rules
+[10] https://docs.cline.bot/customization/hooks — Cline hooks
+[11] https://www.anthropic.com/engineering/demystifying-evals-for-ai-agents — Demystifying evals for AI agents
+[12] https://dora.dev/guides/dora-metrics — DORA software delivery metrics
+[13] https://www.nist.gov/itl/ai-risk-management-framework — NIST AI RMF
+[14] https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence — NIST Generative AI Profile
+[15] https://genai.owasp.org/llmrisk/llm01-prompt-injection — OWASP prompt injection
+[16] https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study — Experienced developer RCT
+[17] https://arxiv.org/abs/2302.06590 — AI developer productivity experiment
+[18] https://arxiv.org/abs/2410.12944 — Field experiments in software development
+[19] https://docs.github.com/en/copilot/concepts/billing-and-usage/copilot-usage-metrics/copilot-metrics — Copilot metrics concepts
+[20] https://code.claude.com/docs/en/monitoring-usage — Claude Code monitoring
+[21] https://agentskills.io/client-implementation/adding-skills-support — Agent Skills security
+[22] https://metr.org/blog/2026-02-24-uplift-update — METR productivity update 2026
+[23] https://docs.cline.bot/sdk/plugins — Cline SDK plugins
+[24] https://www.microsoft.com/en-us/research/publication/the-space-of-developer-productivity-theres-more-to-it-than-you-think — SPACE research publication
+[25] https://airc.nist.gov/airmf-resources/airmf/5-sec-core — NIST AI RMF Core
+[26] https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/add-skills — Copilot adding skills

research/ai-adoption/sources.json

@@ -0,0 +1,564 @@
+[
+  {
+    "id": 1,
+    "title": "Agent Skills specification",
+    "url": "https://agentskills.io/specification",
+    "publisher": "Agent Skills",
+    "retrieved_at": "2026-10-04T10:27:53.189577+00:00",
+    "claims": [
+      {
+        "claim": "The specification defines a skill directory with SKILL.md, not a universal deployment or enforcement service.",
+        "evidence": "A skill is a directory containing, at minimum, a SKILL.md file:",
+        "limitations": "Format compatibility does not certify discovery, precedence, tool permissions, safety, or instruction compliance."
+      },
+      {
+        "claim": "allowed-tools is experimental in the common specification.",
+        "evidence": "allowed-toolsNoSpace-separated string of pre-approved tools the skill may use. (Experimental)",
+        "limitations": "Format compatibility does not certify discovery, precedence, tool permissions, safety, or instruction compliance."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/01.txt",
+    "body_sha256": "0913e84055bc7eb05649aa49123a783dc1a413e4c31d0861f9ac367849c7b00e",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 2,
+    "title": "Copilot Agent Skills",
+    "url": "https://docs.github.com/en/copilot/concepts/agents/about-agent-skills",
+    "publisher": "GitHub",
+    "retrieved_at": "2026-10-04T10:27:53.333904+00:00",
+    "claims": [
+      {
+        "claim": "GitHub documents skill support across specified Copilot surfaces, not all modes indiscriminately.",
+        "evidence": "Agent skills work with Copilot cloud agent, Copilot code review, the GitHub Copilot CLI, the GitHub Copilot app, and agent mode in Visual Studio Code and JetBrains IDEs.",
+        "limitations": "Vendor documentation, not an Eldorado installation test. Separate adding-skills page omits JetBrains in its overview; validate exact host/version."
+      },
+      {
+        "claim": "Copilot documents multiple project skill paths.",
+        "evidence": "Project skills, stored in your repository (.github/skills, .claude/skills, or .agents/skills)",
+        "limitations": "Vendor documentation, not an Eldorado installation test. Separate adding-skills page omits JetBrains in its overview; validate exact host/version."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/02.txt",
+    "body_sha256": "26c86bc2afa4813c46361429f015f687164a69f39030fa05dbc1f513a04c0ca3",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 3,
+    "title": "Copilot custom instructions",
+    "url": "https://docs.github.com/en/copilot/concepts/prompting/response-customization",
+    "publisher": "GitHub",
+    "retrieved_at": "2026-10-04T10:27:53.960265+00:00",
+    "claims": [
+      {
+        "claim": "GitHub explicitly warns that custom-instruction following is nondeterministic.",
+        "evidence": "Due to the non-deterministic nature of AI, Copilot may not always follow your custom instructions in exactly the same way every time they are used.",
+        "limitations": "Instruction precedence is surface-specific and is not enforceable authorization. Head-branch instructions create a review trust risk."
+      },
+      {
+        "claim": "The GitHub.com instruction hierarchy prioritizes personal over repository over organization instructions.",
+        "evidence": "Multiple types of custom instructions can apply to a request sent to Copilot. Personal instructions take the highest priority. Repository instructions come next, and then organization instructions are prioritized last. However, all sets of relevant instructions are provided to Copilot.",
+        "limitations": "Instruction precedence is surface-specific and is not enforceable authorization. Head-branch instructions create a review trust risk."
+      },
+      {
+        "claim": "Copilot review reads instructions and skills from the PR head branch.",
+        "evidence": "When reviewing a pull request, Copilot reads repository custom instructions, agent instructions, and agent skills from the head branch (the branch with your changes), not the base branch. For example, when merging my-feature-branch into main, Copilot uses the instructions and skills in my-feature-branch, so you can test changes to them in the same pull request without merging them first.",
+        "limitations": "Instruction precedence is surface-specific and is not enforceable authorization. Head-branch instructions create a review trust risk."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/03.txt",
+    "body_sha256": "1c2c190052653b8baad1478dc53b7a0657b741be0dbb0ef202b3f503c6b3379c",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 4,
+    "title": "Claude Code skills",
+    "url": "https://code.claude.com/docs/en/skills",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:53.088978+00:00",
+    "claims": [
+      {
+        "claim": "Claude skill name collisions prioritize enterprise over personal over project.",
+        "evidence": "Two of enterprise, personal, and projectEnterprise over personal, and personal over project. With deploy in both ~/.claude/skills/ and the project’s .claude/skills/, /deploy runs the personal one",
+        "limitations": "Vendor extensions and changing versions prevent assuming cross-client parity. No local client exercised."
+      },
+      {
+        "claim": "Claude extends the common skill format with client-specific functionality.",
+        "evidence": "Claude Code skills follow the Agent Skills open standard, which works across multiple AI tools. Claude Code extends the standard with additional features like invocation control, subagent execution, and dynamic context injection. See Using skill frontmatter outside Claude Code for which frontmatter fields are part of the standard and which are Claude Code extensions.",
+        "limitations": "Vendor extensions and changing versions prevent assuming cross-client parity. No local client exercised."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/04.txt",
+    "body_sha256": "4ac3de187f2ba050da149e1bea3364a959366be03963e7a76dc9f9041bdb4e1f",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 5,
+    "title": "Claude Code memory",
+    "url": "https://code.claude.com/docs/en/memory",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:52.994293+00:00",
+    "claims": [
+      {
+        "claim": "Claude memory instructions are context, not enforced configuration.",
+        "evidence": "Claude Code has two complementary memory systems. Both are loaded at the start of every conversation. Claude treats them as context, not enforced configuration. To block an action regardless of what Claude decides, use a PreToolUse hook instead. The more specific and concise your instructions, the more consistently Claude follows them.",
+        "limitations": "Context order does not establish deterministic behavior; conflicting prose may still produce arbitrary choices."
+      },
+      {
+        "claim": "Claude concatenates discovered memory files rather than treating them as override-only configuration.",
+        "evidence": "All discovered files are concatenated into context rather than overriding each other. Across the directory tree, content is ordered from the filesystem root down to your working directory. For the foo/bar/ example, foo/CLAUDE.md appears in context before foo/bar/CLAUDE.md, so instructions closer to where you launched Claude are read last. Within each directory, CLAUDE.local.md is appended after CLAUDE.md, so your personal notes are the last thing Claude reads at that level.",
+        "limitations": "Context order does not establish deterministic behavior; conflicting prose may still produce arbitrary choices."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/05.txt",
+    "body_sha256": "b19869f25886f95f8d93cec941482cbf9472b507ab8d643b446b1450b915e0df",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 6,
+    "title": "Claude Code hooks",
+    "url": "https://code.claude.com/docs/en/hooks",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:53.059984+00:00",
+    "claims": [
+      {
+        "claim": "Claude PreToolUse command/http/MCP hook timeout is not fail-closed.",
+        "evidence": "A timed-out command, http, or mcp_tool hook doesn’t block the tool call. The call continues through the normal permission flow, so don’t count on a stalled hook to act as a gate.",
+        "limitations": "Event and hook-family distinctions matter; no universal fail-closed promise. No hook was installed or tested here."
+      },
+      {
+        "claim": "A conventional exit code 1 alone does not reliably block most Claude hook events.",
+        "evidence": "For most hook events, exit code 2 is the only exit code that blocks through the code alone. Without valid JSON on stdout, Claude Code treats exit code 1 as a non-blocking error and proceeds with the action, even though 1 is the conventional Unix failure code. If your hook is meant to enforce a policy, use exit 2. The worktree events differ: any non-zero exit code from WorktreeCreate aborts worktree creation, and any non-zero exit code from WorktreeRemove makes worktree removal fail if the directory still exists afterward.",
+        "limitations": "Event and hook-family distinctions matter; no universal fail-closed promise. No hook was installed or tested here."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/06.txt",
+    "body_sha256": "ae1919a5b06aa6d4a213bfafcaab1d2473f0b89d53b9fcc35358a19ab9ca3e5d",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 7,
+    "title": "Claude Code security",
+    "url": "https://code.claude.com/docs/en/security",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:52.953904+00:00",
+    "claims": [
+      {
+        "claim": "Claude working-directory approval is not OS-level containment.",
+        "evidence": "Working directory boundary: In Manual mode, Claude Code asks you before its file tools read or write outside the folder where it was started and its subfolders. The boundary is a permission prompt, so a Bash command you approve can still write anywhere your user account can",
+        "limitations": "Vendor capability is not evidence the sandbox is enabled; approved shell commands inherit actual OS authority."
+      },
+      {
+        "claim": "OS-level Bash restrictions require sandboxing.",
+        "evidence": "To restrict Bash commands at the operating system level, turn on sandboxing",
+        "limitations": "Vendor capability is not evidence the sandbox is enabled; approved shell commands inherit actual OS authority."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/07.txt",
+    "body_sha256": "a8a2ad7d077347f1d3ea43549b0be1070e03c7737647f73ef40035d5dafb5f40",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 8,
+    "title": "Cline skills",
+    "url": "https://docs.cline.bot/customization/skills",
+    "publisher": "Cline",
+    "retrieved_at": "2026-10-04T10:27:53.250798+00:00",
+    "claims": [
+      {
+        "claim": "Cline global skill overrides same-name project skill.",
+        "evidence": "When a global skill and project skill have the same name, the global skill takes precedence. This lets you keep general-purpose skills globally while using project-specific skills in .cline/skills/ so the whole team can use them.",
+        "limitations": "Current docs disagree with Agent Skills guide generalization. Exact installed Cline version remains unknown."
+      },
+      {
+        "claim": "Discovered Cline skills have user-controlled enable/disable toggles.",
+        "evidence": "Every skill has a toggle to enable or disable it. This lets you control which skills are active without deleting the skill directory. Skills are enabled by default when discovered.",
+        "limitations": "Current docs disagree with Agent Skills guide generalization. Exact installed Cline version remains unknown."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/08.txt",
+    "body_sha256": "38e6af22c7e9f78e90e899a7bd285e6556bfd64197fbc3f7cf279cc9ff29d416",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 9,
+    "title": "Cline rules",
+    "url": "https://docs.cline.bot/customization/cline-rules",
+    "publisher": "Cline",
+    "retrieved_at": "2026-10-04T10:27:53.308915+00:00",
+    "claims": [
+      {
+        "claim": "Cline workspace rules override conflicting global rules, unlike skill name precedence.",
+        "evidence": "When both workspace and global rules exist, Cline combines them. Workspace rules take precedence when they conflict with global rules. See Storage Locations for more guidance.",
+        "limitations": "Rule precedence is not skill precedence; both are guidance and can be toggled."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/09.txt",
+    "body_sha256": "c1a2353c024491a42961e5ea171c341c66bbed2647464d200bf90fdbaa8a48e3",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 10,
+    "title": "Cline hooks",
+    "url": "https://docs.cline.bot/customization/hooks",
+    "publisher": "Cline",
+    "retrieved_at": "2026-10-04T10:27:53.370475+00:00",
+    "claims": [
+      {
+        "claim": "Cline hooks landing page delegates details to SDK plugins.",
+        "evidence": "See details under SDK Plugins page.",
+        "limitations": "Landing page alone proves no event schema or IDE compatibility. SDK page was followed separately."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/10.txt",
+    "body_sha256": "2ebd8cd1c0b11fec466a3b577971382d2c4ec1f9911679b10100029e9b3be095",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 11,
+    "title": "Demystifying evals for AI agents",
+    "url": "https://www.anthropic.com/engineering/demystifying-evals-for-ai-agents",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:53.451618+00:00",
+    "claims": [
+      {
+        "claim": "Repeated trials are needed for variable agent outputs.",
+        "evidence": "Each attempt at a task is a trial. Because model outputs vary between runs, we run multiple trials to produce more consistent results.",
+        "limitations": "Vendor-authored methodology and examples, not independent proof of any skill gain or target threshold."
+      },
+      {
+        "claim": "Agent outcome evaluation must inspect environment state rather than trust claimed completion.",
+        "evidence": "The outcome is the final state in the environment at the end of the trial. A flight-booking agent might say “Your flight has been booked” at the end of the transcript, but the outcome is whether a reservation exists in the environment’s SQL database.",
+        "limitations": "Vendor-authored methodology and examples, not independent proof of any skill gain or target threshold."
+      },
+      {
+        "claim": "Agent evals combine code, model and human graders.",
+        "evidence": "Agent evaluations typically combine three types of graders: code-based, model-based, and human. Each grader evaluates some portion of either the transcript or the outcome. An essential component of effective evaluation design is to choose the right graders for the job.",
+        "limitations": "Vendor-authored methodology and examples, not independent proof of any skill gain or target threshold."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/11.txt",
+    "body_sha256": "7940a33d8e19ff68aac5e3c095e0fa771565a4b2416e8a781e9ed02d55668a12",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 12,
+    "title": "DORA software delivery metrics",
+    "url": "https://dora.dev/guides/dora-metrics/",
+    "publisher": "DORA",
+    "retrieved_at": "2026-10-04T10:27:53.335018+00:00",
+    "claims": [
+      {
+        "claim": "DORA now documents five software-delivery performance metrics.",
+        "evidence": "These metrics have evolved alongside the technology landscape: shifting from the original four keys to the current five-metric model. To understand the research behind changes like the move from MTTR to Failed Deployment Recovery Time, read A history of DORA’s software delivery metrics.",
+        "limitations": "Service/team outcome measures, not causal AI-effect estimates or individual productivity scores."
+      },
+      {
+        "claim": "DORA change lead time runs from commit to production deployment.",
+        "evidence": "Change lead time: The amount of time it takes for a change to go from committed to version control to deployed in production.",
+        "limitations": "Service/team outcome measures, not causal AI-effect estimates or individual productivity scores."
+      },
+      {
+        "claim": "DORA deployment rework measures unplanned incident-driven deployments.",
+        "evidence": "Deployment rework rate: The ratio of deployments that are unplanned but happen as a result of an incident in production.",
+        "limitations": "Service/team outcome measures, not causal AI-effect estimates or individual productivity scores."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/12.txt",
+    "body_sha256": "0535efe22d238f38d1de5ec655efeb44a313e59f8a71085e902bde5c7a693cb9",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 13,
+    "title": "NIST AI RMF",
+    "url": "https://www.nist.gov/itl/ai-risk-management-framework",
+    "publisher": "NIST",
+    "retrieved_at": "2026-10-04T10:27:53.731461+00:00",
+    "claims": [
+      {
+        "claim": "NIST AI RMF is voluntary guidance for trustworthiness across the AI lifecycle.",
+        "evidence": "Led by the Information Technology Laboratory (ITL) AI Program, and in collaboration with the private and public sectors, NIST has developed a framework to better manage risks to individuals, organizations, and society associated with artificial intelligence (AI). The NIST AI Risk Management Framework (AI RMF) is intended for voluntary use and to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.",
+        "limitations": "Voluntary framework, not certification, legal advice, or evidence of Eldorado compliance."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/14.txt",
+    "body_sha256": "2fed4e9811f05579384a23b9c3b81600ddf0f011fc4cfe638352a817f91ed603",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 14,
+    "title": "NIST Generative AI Profile",
+    "url": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence",
+    "publisher": "NIST",
+    "retrieved_at": "2026-10-04T10:27:53.743664+00:00",
+    "claims": [
+      {
+        "claim": "NIST GenAI profile is a cross-sectoral companion to AI RMF.",
+        "evidence": "This document is a cross-sectoral profile of and companion resource for the AI Risk Management Framework (AI RMF 1.0) for Generative AI, pursuant to President Biden's Executive Order (EO) 14110 on Safe, Secure, and Trustworthy Artificial Intelligence. The AI RMF was released in January 2023, and is intended for voluntary use and to improve the ability of organizations to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.",
+        "limitations": "Publication landing-page abstract inspected; full PDF not read. Do not attribute detailed risk taxonomy to this excerpt."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/15.txt",
+    "body_sha256": "7998580f4dc83770568dc361ecae1d46e1d652a2df12a278263b88de6cbfb624",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 15,
+    "title": "OWASP prompt injection",
+    "url": "https://genai.owasp.org/llmrisk/llm01-prompt-injection/",
+    "publisher": "OWASP",
+    "retrieved_at": "2026-10-04T10:27:53.529810+00:00",
+    "claims": [
+      {
+        "claim": "External sources can carry prompt injections.",
+        "evidence": "Indirect prompt injections occur when an LLM accepts input from external sources, such as websites or files. The content may have in the external content data that when interpreted by the model, alters the behavior of the model in unintended or unexpected ways. Like direct injections, indirect injections can be either intentional or unintentional.",
+        "limitations": "Mitigations reduce exposure; no guarantee that prompt injection is eliminated."
+      },
+      {
+        "claim": "OWASP recommends least privilege.",
+        "evidence": "Provide the application with its own API tokens for extensible functionality, and handle these functions in code rather than providing them to the model. Restrict the model’s access privileges to the minimum necessary for its intended operations.",
+        "limitations": "Mitigations reduce exposure; no guarantee that prompt injection is eliminated."
+      },
+      {
+        "claim": "OWASP recommends human approval for high-risk operations.",
+        "evidence": "Implement human-in-the-loop controls for privileged operations to prevent unauthorized actions.",
+        "limitations": "Mitigations reduce exposure; no guarantee that prompt injection is eliminated."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/16.txt",
+    "body_sha256": "5bfcc42a422165d0a6b25f28fbff144fc0dec5289f1a672a40203e1d64200c07",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 16,
+    "title": "Experienced developer RCT",
+    "url": "https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/",
+    "publisher": "METR",
+    "retrieved_at": "2026-10-04T10:27:54.289507+00:00",
+    "claims": [
+      {
+        "claim": "METR early-2025 RCT found 19% longer task time in its setting.",
+        "evidence": "We conduct a randomized controlled trial (RCT) to understand how early-2025 AI tools affect the productivity of experienced open-source developers working on their own repositories. Surprisingly, we find that when developers use AI tools, they take 19% longer than without—AI makes them slower. We view this result as a snapshot of early-2025 AI capabilities in one relevant setting; as these systems continue to rapidly evolve, we plan on continuing to use this methodology to help estimate AI acceleration from AI R&D automation.",
+        "limitations": "Historical narrow setting, tools from early 2025; superseded as a current estimate by authors. No Eldorado forecast."
+      },
+      {
+        "claim": "Study involved 16 experienced developers and 246 issues on their repositories.",
+        "evidence": "To directly measure the real-world impact of AI tools on software development, we recruited 16 experienced developers from large open-source repositories (averaging 22k+ stars and 1M+ lines of code) that they’ve contributed to for multiple years. Developers provide lists of real issues (246 total) that would be valuable to the repository—bug fixes, features, and refactors that would normally be part of their regular work. Then, we randomly assign each issue to either allow or disallow use of AI while working on the issue. When AI is allowed, developers can use any tools they choose (primarily Cursor Pro with Claude 3.5/3.7 Sonnet—frontier models at the time of the study); when disallowed, they work without generative AI assistance. Developers complete these tasks (which average two hours each) while recording their screens, then self-report the total implementation time they needed. We pay developers $150/hr as compensation for their participation in the study.",
+        "limitations": "Historical narrow setting, tools from early 2025; superseded as a current estimate by authors. No Eldorado forecast."
+      },
+      {
+        "claim": "METR now explicitly marks those historical results as not current.",
+        "evidence": "We have released results that are current as of early 2026, in a continuation of this study. We believe these historical results no longer reflect the current impact of AI models on open-source developer productivity.",
+        "limitations": "Historical narrow setting, tools from early 2025; superseded as a current estimate by authors. No Eldorado forecast."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/17.txt",
+    "body_sha256": "f9abab8a3ad312279800d8327122ebae70c13804d9f91fda1788db1a466a178b",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 17,
+    "title": "AI developer productivity experiment",
+    "url": "https://arxiv.org/abs/2302.06590",
+    "publisher": "Peng et al.",
+    "retrieved_at": "2026-10-04T10:27:53.477297+00:00",
+    "claims": [
+      {
+        "claim": "Peng et al. controlled HTTP-server task study reports 55.8% faster completion with Copilot.",
+        "evidence": "Abstract:Generative AI tools hold promise to increase human productivity. This paper presents results from a controlled experiment with GitHub Copilot, an AI pair programmer. Recruited software developers were asked to implement an HTTP server in JavaScript as quickly as possible. The treatment group, with access to the AI pair programmer, completed the task 55.8% faster than the control group. Observed heterogenous effects show promise for AI pair programmers to help people transition into software development careers.",
+        "limitations": "Primary paper abstract inspected, not full methods. Bounded JavaScript task; not whole-SDLC productivity."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/18.txt",
+    "body_sha256": "76c71ee9844c5066d184ec5006945c48959dfcd75854842463cd756f348a3140",
+    "evidence_type": "primary research abstract"
+  },
+  {
+    "id": 18,
+    "title": "How much does AI impact development speed? An enterprise-based randomized controlled trial",
+    "url": "https://arxiv.org/abs/2410.12944",
+    "publisher": "Paradis et al. / arXiv",
+    "retrieved_at": "2026-10-04T10:27:53.495104+00:00",
+    "claims": [
+      {
+        "claim": "Paradis et al. Google RCT abstract reports about 21% shorter task time with a large confidence interval, among 96 engineers.",
+        "evidence": "Abstract:How much does AI assistance impact developer productivity? To date, the software engineering literature has provided a range of answers, targeting a diversity of outcomes: from perceived productivity to speed on task and developer throughput. Our randomized controlled trial with 96 full-time Google software engineers contributes to this literature by sharing an estimate of the impact of three AI features on the time developers spent on a complex, enterprise-grade task. We found that AI significantly shortened the time developers spent on task. Our best estimate of the size of this effect, controlling for factors known to influence developer time on task, stands at about 21\\%, although our confidence interval is large. We also found an interesting effect whereby developers who spend more hours on code-related activities per day were faster with AI. Product and future research considerations are discussed. In particular, we invite further research that explores the impact of AI at the ecosystem level and across multiple suites of AI-enhanced tools, since we cannot assume that the effect size obtained in our lab study will necessarily apply more broadly, or that the effect of AI found using internal Google tooling in the summer of 2024 will translate across tools and over time.",
+        "limitations": "Primary paper abstract inspected, not full methods. Google-specific task/tool setting; no universal gain claim. Retrieval seed title was wrong and corrected from body."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/19.txt",
+    "body_sha256": "e3ac83e7a8c9a613ed67b179321599538d4132e0caf858c4d335452c924c6839",
+    "evidence_type": "primary research abstract"
+  },
+  {
+    "id": 19,
+    "title": "Copilot metrics concepts",
+    "url": "https://docs.github.com/en/copilot/concepts/billing-and-usage/copilot-usage-metrics/copilot-metrics",
+    "publisher": "GitHub",
+    "retrieved_at": "2026-10-04T10:27:54.384631+00:00",
+    "claims": [
+      {
+        "claim": "Copilot richest metrics depend on enabled client telemetry.",
+        "evidence": "Copilot usage metrics are derived from telemetry across multiple Copilot surfaces, including IDE, Copilot CLI, and agent apps activity. Most metrics come from client-side IDE telemetry, and end users need telemetry enabled in their IDE for the richest data in these metrics.",
+        "limitations": "No access to Eldorado subscription, settings, enabled exporters, reports or coverage. Adoption is not impact."
+      },
+      {
+        "claim": "Server-side active-user coverage does not ensure complete feature/LOC breakdowns.",
+        "evidence": "Users surfaced through server-side telemetry are fully counted toward your active user totals (such as daily active users, daily_active_users ). When available, they may also appear in totals_by_ide (including the most recently detected IDE and Copilot extension versions in per-user reports). However, other dimensional breakdowns—such as totals_by_feature and lines-of-code metrics—remain empty until richer telemetry is available for them. Top-level totals and breakdowns for users already captured by client telemetry are unchanged.",
+        "limitations": "No access to Eldorado subscription, settings, enabled exporters, reports or coverage. Adoption is not impact."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/20.txt",
+    "body_sha256": "556fe5be28952b3b7d980b86b8a1a15713f0cff8359a7a0e02e09af7d6916ace",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 20,
+    "title": "Claude Code monitoring",
+    "url": "https://code.claude.com/docs/en/monitoring-usage",
+    "publisher": "Anthropic",
+    "retrieved_at": "2026-10-04T10:27:53.636289+00:00",
+    "claims": [
+      {
+        "claim": "Claude supports configured OTel usage/cost/tool telemetry.",
+        "evidence": "Track Claude Code usage, costs, and tool activity across your organization by exporting telemetry data through OpenTelemetry (OTel). Claude Code exports metrics as time series data via the standard metrics protocol, events via the logs/events protocol, and optionally distributed traces via the traces protocol.",
+        "limitations": "Capability depends on version/configuration. Tool/skill-name export may expose confidential identifiers; no observed Eldorado telemetry."
+      },
+      {
+        "claim": "Skill-name/tool detail collection has explicit opt-in and privacy implications.",
+        "evidence": "OTEL_LOG_TOOL_DETAILSEnable logging of tool parameters and input arguments in tool events and trace span attributes: Bash commands, MCP server and tool names, skill names, user-authored workflow names, and tool input. Also enables custom, plugin, and MCP command names on user_prompt events, and real agent, skill, plugin, and MCP server and tool names on the cost and token counters (default: disabled). For Claude Desktop’s built-in servers, in sessions Claude Desktop owns, mcp_server_name/mcp_tool_name emit on tool_decision/tool_result even with the flag off. The exception requires Claude Code v2.1.214 or later1 to enable",
+        "limitations": "Capability depends on version/configuration. Tool/skill-name export may expose confidential identifiers; no observed Eldorado telemetry."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/21.txt",
+    "body_sha256": "197b3be58cae62470e82ac24074ca81024b030701ab3e2729116067dac798b48",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 21,
+    "title": "Agent Skills security",
+    "url": "https://agentskills.io/client-implementation/adding-skills-support",
+    "publisher": "Agent Skills",
+    "retrieved_at": "2026-10-04T10:27:53.937245+00:00",
+    "claims": [
+      {
+        "claim": "The implementation guide claims project-over-user skill precedence as universal.",
+        "evidence": "The universal convention across existing implementations: project-level skills override user-level skills.",
+        "limitations": "Implementation guidance rather than normative format; universal precedence claim contradicted by current Claude and Cline docs."
+      },
+      {
+        "claim": "Agent Skills format does not mandate discovery paths.",
+        "evidence": "The .agents/skills/ paths have emerged as a widely-adopted convention for cross-client skill sharing. While the Agent Skills specification does not mandate where skill directories live (it only defines what goes inside them), scanning .agents/skills/ means skills installed by other compliant clients are automatically visible to yours, and vice versa.",
+        "limitations": "Implementation guidance rather than normative format; universal precedence claim contradicted by current Claude and Cline docs."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/22.txt",
+    "body_sha256": "fb2909a93d445a4b18a7cab89c22a7e92502e99d2caa586cf785e8aa8ae7a77b",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 22,
+    "title": "METR productivity update 2026",
+    "url": "https://metr.org/blog/2026-02-24-uplift-update/",
+    "publisher": "METR",
+    "retrieved_at": "2026-10-04T10:29:00.438454+00:00",
+    "claims": [
+      {
+        "claim": "METR 2026 follow-up calls its productivity signal unreliable because of selection and time-measurement issues.",
+        "evidence": "Unfortunately, given participant feedback and surveys, we believe that the data from our new experiment gives us an unreliable signal of the current productivity effect of AI tools. The primary reason is that we have observed a significant increase in developers choosing not to participate in the study because they do not wish to work without AI, which likely biases downwards our estimate of AI-assisted speedup. We additionally believe there have been selection effects due to a lower pay rate (we reduced the pay from $150/hr to $50/hr), and that our measurements of time-spent on each task are unreliable for the fraction of developers who use multiple AI agents concurrently.",
+        "limitations": "Authors explicitly warn selection and parallel-agent timing compromise causal magnitude. Neither raw estimate is an Eldorado baseline."
+      },
+      {
+        "claim": "2026 raw estimates suggest speedup, but intervals include no effect and selection limits generalization.",
+        "evidence": "Our raw results show some evidence for speedup. Our early 2025 study found the use of AI causes tasks to take 19% longer, with a confidence interval between +2% and +39%. For the subset of the original developers who participated in the later study, we now estimate a speedup of -18% with a confidence interval between -38% and +9%. Among newly-recruited developers the estimated speedup is -4%, with a confidence interval between -15% and +9%.",
+        "limitations": "Authors explicitly warn selection and parallel-agent timing compromise causal magnitude. Neither raw estimate is an Eldorado baseline."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/23.txt",
+    "body_sha256": "7a4ce4ac6ba1a7a2410e17982493ab0d905d5d6418f28dda7460ca2aa4068306",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 23,
+    "title": "Cline SDK plugins",
+    "url": "https://docs.cline.bot/sdk/plugins",
+    "publisher": "Cline",
+    "retrieved_at": "2026-10-04T10:28:59.766735+00:00",
+    "claims": [
+      {
+        "claim": "Cline SDK plugins document fail_closed hook policy.",
+        "evidence": "Use fail_closed for policy-enforcement hooks where bypassing the hook is unsafe.",
+        "limitations": "SDK capability cannot be assumed identical in every Cline IDE/CLI build. Fail-closed behavior needs adapter conformance tests."
+      },
+      {
+        "claim": "Cline plugin installation accepts npm/git/file sources.",
+        "evidence": "Plugins can also be installed from file URLs, npm, git, or local paths using cline plugin install. See Plugins for install commands, the manifest format, and directory layout.",
+        "limitations": "SDK capability cannot be assumed identical in every Cline IDE/CLI build. Fail-closed behavior needs adapter conformance tests."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/24.txt",
+    "body_sha256": "445ba1089e4157e9eac938d1b7f1adf482769f3ae6d495d4bef5d666614fbd6a",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 24,
+    "title": "SPACE research publication",
+    "url": "https://www.microsoft.com/en-us/research/publication/the-space-of-developer-productivity-theres-more-to-it-than-you-think/",
+    "publisher": "Microsoft Research",
+    "retrieved_at": "2026-10-04T10:29:02.189612+00:00",
+    "claims": [
+      {
+        "claim": "SPACE rejects productivity measurement with a single activity metric.",
+        "evidence": "Developer productivity is about more than an individual’s activity levels or the efficiency of the engineering systems relied on to ship software, and it cannot be measured by a single metric or dimension. The SPACE framework captures different dimensions of productivity, and here we demonstrate how this framework can be used to understand productivity in practice and why using it will help teams better understand developer productivity and create better measures to inform their work and teams.",
+        "limitations": "Author-hosted publication summary retrieved after ACM 403; supports multidimensional principle, not detailed instrument validity."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/25.txt",
+    "body_sha256": "1f8176ad5b14a5f4053162f670b95bdef81e191104f682c506b11099525b734e",
+    "evidence_type": "primary research abstract"
+  },
+  {
+    "id": 25,
+    "title": "NIST AI RMF Core",
+    "url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/",
+    "publisher": "NIST",
+    "retrieved_at": "2026-10-04T10:29:00.075579+00:00",
+    "claims": [
+      {
+        "claim": "NIST RMF organizes risk activity into govern, map, measure, manage.",
+        "evidence": "highest level to govern, map, measure, and manage AI risks. Governance is designed to be a cross-cutting function",
+        "limitations": "Risk-framework recommendations are not proof controls are deployed or staffing exists."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/26.txt",
+    "body_sha256": "c80bf3d3d59511eb3932cfd285893aa2a329ca9d997939c7c8c7718d704f857b",
+    "evidence_type": "primary source body"
+  },
+  {
+    "id": 26,
+    "title": "Copilot adding skills",
+    "url": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/add-skills",
+    "publisher": "GitHub",
+    "retrieved_at": "2026-10-04T10:29:00.472587+00:00",
+    "claims": [
+      {
+        "claim": "gh skill --pin skips pinned skills during updates.",
+        "evidence": "To lock a skill to a specific version (or commit SHA) so it is skipped during updates, use --pin:",
+        "limitations": "gh skill is public preview, requires documented minimum CLI version; Gitea interoperability not verified. Pinning is not artifact safety."
+      },
+      {
+        "claim": "GitHub warns shared skills are unverified and may be malicious.",
+        "evidence": "Skills are not verified by GitHub and may contain prompt injections, hidden instructions, or malicious scripts. Always inspect the content of a skill before installation using gh skill preview.",
+        "limitations": "gh skill is public preview, requires documented minimum CLI version; Gitea interoperability not verified. Pinning is not artifact safety."
+      },
+      {
+        "claim": "gh skill records source ref and tree SHA in frontmatter.",
+        "evidence": "When you install a skill with gh skill, provenance metadata is written into the skill's SKILL.md frontmatter, including the source repository, ref, and tree SHA. The gh skill update command uses this metadata to check for upstream changes.",
+        "limitations": "gh skill is public preview, requires documented minimum CLI version; Gitea interoperability not verified. Pinning is not artifact safety."
+      }
+    ],
+    "evidence_file": "/opt/data/channels/eldorado-storm-v1/research/ai-adoption/bodies/27.txt",
+    "body_sha256": "7a5d8597f2ed72edb4610124e83f2abc282311739eabb561b3997ab6cbcbc46b",
+    "evidence_type": "primary source body"
+  }
+]

research/ai-adoption/strategy-blueprint.md

@@ -0,0 +1,190 @@
+# Eldorado AI adoption — strategy implementation blueprint
+
+Status: target operating model for review; not an approved rollout or an inventory of deployed controls. This handoff is documentation design only. It does not authorize installing agents, collecting employee telemetry, changing permissions or enabling autonomous delivery.
+
+## Implementation contract
+
+Create eight substantive pages in the independent Strategy navigation, in this order: `index`, `target-operating-model`, `skills-governance`, `skills-quality`, `skills-adoption`, `measurement`, `skills-maintenance`, `roadmap`. The structured companion is `strategy-model.json`; its KPI definitions and identifiers are authoritative for the measurement prototype. Preserve Organization Structure, Collaboration and SDLC and their exact department/team names. Cross-link rather than duplicate reporting charts. The existing organizational documentation is an operating model, not certification of staffing.
+
+Use the existing Archify JSON renderer and shared icon-only modal control. Diagram logical ID: `ai-adoption-target`; editable source: `diagrams/ai-adoption-target.architecture.json`. Do not expose downloadable JSON. Keep source mapping and open-decision material outside docs/static/search. Reader-facing prose below can be adapted into MDX without bibliography, evidence codes, recruitment commentary or repeated caveats. Use a visible **Target operating model** introduction and prospective verbs where status matters. Never present synthetic calculations as Eldorado results.
+
+## 1. Overview — index
+
+### Govern skills first, expand authority only with evidence
+
+Eldorado's target is to make AI-assisted work dependable across the organization: useful guidance, clear human ownership, controlled execution and measurable outcomes. The first investment is a governed skills system, not an autonomous replacement for the organization. A skill packages reusable working knowledge, prerequisites and verification steps. It helps an agent perform a task; it does not grant permission or guarantee that the work is correct.
+
+The target combines one logical SDLC coordinating agent with developer choice on local laptops. Copilot, Claude Code and Cline remain client options within a qualified support matrix. They receive the same reviewed portable skill content through client-specific adapters. Repository, CI and release services remain the enforcement points, independently of what any agent says or which local tool produced a change.
+
+The strategy describes the intended operating model and the evidence required to introduce it. It does not establish that these controls are installed, that every client is supported, or that AI has improved Eldorado's performance. The current reference is the documented six-department organization. Rollout begins by validating actual clients, responsibilities, data boundaries and available evidence.
+
+Success means accepted outcomes with maintained quality, controlled risk and understood total cost. Faster activity without reliable outcomes is not success. More skill invocations, generated lines or tool subscriptions are not productivity targets. People remain accountable for product, customer, financial and personnel decisions.
+
+## 2. Target operating model — target-operating-model
+
+### One coordination function, distributed contributions
+
+Data & AI owns the coordinating function, with the existing AI Architect function connecting it to Technology leadership. The logical coordinator maintains approved work records, dependencies, evidence requests, bounded retries and escalation. It can summarize, propose work and route decisions. It cannot declare its own work approved, change protected checks, authorize production release or replace the responsible human.
+
+One logical coordinator does not mean one fragile process. A durable task ledger, explicit state transitions, leases and idempotency keys allow recovery or multiple replicas without duplicate delivery. Inference outages stop new agent decisions, not the organization's ability to take over. People can resume work through the normal deterministic workflow. Evidence and authorization services fail closed for privileged actions; missing evidence never becomes permission.
+
+The delivery path is: an approved problem and acceptance criteria; an authorized task; local or isolated worker proposals; independently reviewed repository changes; exact-revision CI evidence; a human release decision; execution by the release service; then operational feedback. Product Management accepts the outcome hypothesis and business result. Product Design reviews experience and accessibility. Product Engineering owns the code and maintainability. Quality Engineering assesses quality independently. Architecture & Security assesses risk. Platform & IT operates the delivery boundary. No arrow from a laptop or coordinator goes directly to production authority.
+
+### Trust and authority boundaries
+
+People authenticate to the work system; the coordinator receives only the project context it needs. Untrusted issue text, repository content, web pages and tool output are task data, never an authorization source. Local clients operate under device controls and project-scoped access. Hard containment requires OS/container isolation, filesystem and network restrictions and separate short-lived identities; a skill folder, prompt or working directory is not a sandbox.
+
+The registry distributes reviewed immutable content and adapters, not ambient credentials. Executable scripts, plugins, MCP servers and dependencies are separately reviewed and pinned. Model-provider routing is allowlisted for the data classification, with approved retention and training-use terms before sensitive data crosses that boundary. Fallback to another provider must not silently change the data policy.
+
+Central controls verify protected-branch review, actual artifact identity, exact commit and policy revision, required checks and a scoped human approval. Candidate changes cannot edit their own authoritative gate or reuse approval for a different artifact. Deployment credentials belong to the release service, not the local agent. Approval expires or is invalidated by changed content. Emergency stop revokes mutation credentials and stops scheduling independently of the model, preserves evidence and enables human takeover.
+
+### Department contributions
+
+| Department / existing team | Contribution and retained human decision | First bounded workflow and evidence |
+| --- | --- | --- |
+| Product / Product Management | Own pilot priorities, acceptance criteria and outcome hypotheses; decide product value. | Draft acceptance criteria from sanitized discovery notes; independent completeness review and accepted-task success. |
+| Product / Product Design | Own design quality, accessibility and research handling. | Review a proposed flow against an accessibility checklist; verify findings against the interface. |
+| Technology / Product Engineering | Own skill authoring, code review and maintainability; remain accountable for generated code. | Test scaffolding and change summaries in a disposable branch; independent tests and escaped-quality follow-up. |
+| Technology / Platform & IT | Own supported client inventory, distribution, identity, isolation, CI/release integration, transport and emergency revocation. | Qualify a pinned bundle and exercise rollback; inventory and exact-revision gate evidence. |
+| Technology / Architecture & Security | Own risk classification, data boundaries, security review and bounded exceptions. | Review injected-input and unauthorized-tool cases; independent control evidence and policy-effect counts. |
+| Technology / Quality Engineering | Own regression/adversarial suites, rubric calibration and acceptance evidence. | Evaluate candidate versus approved skills on repeated representative tasks; retain all failures. |
+| Technology / Data & AI | Own catalog coordination, coordinator evaluation and measurement design, through existing AI enablement responsibilities. | Curate a small skill set and analyze a prospective pilot; no new AI department. |
+| Operations / Operations Squad | Own service acceptance, disputes, fraud, refunds and customer communications. | Draft an answer from sanitized resolved cases; Operational Quality workstream checks correctness before any send. No automated dispute/refund decision. |
+| Marketing / Marketing Squad | Own brand, factual claims, content rights, publication and spend approvals. | Draft a campaign brief against approved brand material; human claim/rights review before publication. |
+| Finance & Accounting / Finance & Accounting Squad | Own allocation of total costs, financial evidence and segregation of approvals. | Explain a sanitized reconciliation exception; no posting, payout or payment authority. |
+| HR & Administration / People & Administration Squad | Own coaching, acceptable use, feedback privacy and people decisions; partner with Platform & IT on access lifecycle. | Draft onboarding guidance from approved policy; human accuracy review. No hiring or performance decision automation. |
+
+Product keeps two teams; Technology keeps five; the other four departments keep one squad each. Coordination, skill ownership, approval and cover are assignments inside these teams, not new standing departments, roles or headcount. Department leaders retain accountability and designate real approvers before a pilot starts.
+
+## 3. Skills governance — skills-governance
+
+### A contract that travels, controls that stay authoritative
+
+Maintain one catalog entry per stable skill ID, with immutable revisions and a concise portable `SKILL.md` body. Required content includes when to use and when not to use the skill, prerequisites, bounded steps, expected artifacts, verification, failure handling and escalation. The companion model defines the complete metadata contract: owner and independent reviewer, risk tier, supported clients and versions, dependencies, digest, provenance and license, evaluations, approval, review date, deprecation and rollback.
+
+The release manifest pins the content, dependencies and adapter revisions by full immutable commit or digest. Names use an `eldorado-` prefix to reduce collisions. Friendly versions aid communication but never replace the digest. No arbitrary upstream automatic update is admitted into the approved bundle. Changes to scripts, resources or dependencies count as skill changes, not harmless documentation edits.
+
+Adapters place content in the qualified client's discovery paths and implement only verified client-specific behavior. Qualification records the host, exact build, OS, model configuration, discovery, explicit invocation, collisions, disabled skills, permission behavior, context compaction and reload behavior. A common file format is not common precedence or a portable hooks API. Claude and Cline skill-name precedence differs from rule/memory behavior; Copilot support varies by surface. Test the actual build, not the brand name.
+
+### Lifecycle and decision rights
+
+A proposal names the problem, owner, data scope and testable outcome. Experimental revisions run only in approved disposable environments. Promotion requires independent review, static and executable dependency checks, per-client behavioral evaluations and a bounded canary. Approval records bind the exact artifact and permitted uses. Deprecated revisions carry a migration path and deadline; retired revisions are unavailable for new work. Any active revision can be quarantined immediately.
+
+The author never supplies the only approval. Data & AI maintains catalog state; the owning team is accountable for content; Quality Engineering approves evaluation evidence; Architecture & Security approves higher-risk boundaries; Platform & IT verifies distribution and revocation. A business owner accepts workflow outcomes. These functions can be covered by existing staff, but incompatible author/approver duties must remain separate for the same release.
+
+An exception contains its ID, skill/client revision, scope, business reason, risk owner, compensating checks, approver, start and expiry, affected users/projects and rollback route. It does not disable protected release, payment or identity controls. Expired or unverifiable exceptions deny privileged actions. Repeated exceptions trigger a supported-design change rather than permanent informal bypass.
+
+### Distribution, stale clients and rollback
+
+Stage a verified bundle atomically, check its digest, load it through the qualified adapter and read back its effective revision. Test already-open sessions; changing files is not proof of reloading instructions. Record immutable last-known-good content and adapter dependencies. Canary upgrades precede wider distribution.
+
+A cached verified bundle may support explicitly permitted low-risk work if its model and tool dependencies are available. It does not make a cloud-backed client work offline. Stale or unsupported sessions cannot obtain centrally mediated privileged access. Reconnection revalidates support, revocation and policy before credentials are issued. Central artifact review protects delivery even when a laptop declaration is absent or false; a client report cannot prove which private prompt was actually followed.
+
+Rollback restores the approved manifest and dependencies, invalidates affected sessions, revokes unsafe revisions, runs a smoke test and verifies effective state. It cannot undo data disclosure or commands already executed. Those require incident response.
+
+## 4. Skills quality — skills-quality
+
+Quality has four separate questions: was the right skill selected, was the procedure executed safely, did the artifact pass independent checks, and did the workflow produce useful outcomes? A successful invocation answers none of the remaining questions by itself.
+
+The proposed qualification contract uses three tiers. R1 is read-only or drafting with nonsensitive approved material; R2 creates code or material with customer impact but no privileged external effect; R3 touches privileged, financial, sensitive-personal or production decisions. R3 remains human-authorized and out of the initial autonomous scope.
+
+Every tier requires all mandatory deterministic safety, schema, authorization and provenance checks to pass, with no observed critical unauthorized action. An observed critical effect blocks promotion. The model gives proposed pilot evaluation floors and success thresholds; these are design defaults for owner ratification, not externally validated guarantees or approved service levels. If sample coverage, acceptance criteria or responsible reviewers are missing, qualification remains incomplete. No aggregate score can trade off a failed mandatory safety check.
+
+Use sanitized, predeclared task sets containing positive triggers, near misses, negative cases and the normal workload mix. Compare no-skill, current-approved and candidate paths with the same starting artifacts; repeat stochastic trials and retain failed and abandoned attempts. Independently inspect output state. Deterministic tests grade checkable constraints; calibrated humans grade usefulness, maintainability and experience. A model judge is supplementary, versioned and checked against human disagreements, never the sole safety or promotion authority.
+
+Include adversarial repository text, malicious referenced code, wrong permissions, client toggles, name shadowing, unsupported versions, hook timeout/crash/malformed response, stale sessions, offline recovery and rollback. Run central checks against forged/missing client declarations. Hook presence is not fail-closed enforcement: failure semantics must be tested on each client, and central authorization remains independent.
+
+Report denominators, task mix, trial counts, per-client results and uncertainty. A passing benchmark is evidence within a tested envelope, not proof that all future tasks are safe. Material model, client, adapter or dependency changes trigger requalification.
+
+## 5. Adoption — skills-adoption
+
+Start with a small set of useful workflows chosen by the existing teams. Product Management and the departmental owner identify the outcome; Data & AI helps turn it into a skill; Quality Engineering establishes acceptance; Platform & IT qualifies the client path; Architecture & Security clears the data boundary. People & Administration Squad coordinates learning and accessible feedback.
+
+Onboarding should teach people to select the right skill, inspect the actual artifact, recognize untrusted instructions, use the exception and incident routes and recover without AI. A practice task ends with verified work and an explanation of limits, not just a logged invocation. Demonstrate the same portable skill on the supported local clients without promising identical agent behavior.
+
+Use short worked examples, peer pairing, office hours and a clear catalog search path. Gather reasons for non-use and rejected suggestions without penalizing them. Preserve a manual path. Training feedback improves the skill only through review, not automatic self-modification of the approved catalog. Departmental workflow outcomes matter more than uniform uptake.
+
+No developer rankings, individual productivity scores, minimum invocation quotas or inference of effort from token counts are part of this strategy. Report cohort-level evidence with privacy protection and balanced quality, flow, risk and cost. A participant may reasonably stop using a skill that creates more work or uncertainty.
+
+## 6. Measurement — measurement
+
+### Decide what counts before counting
+
+Use the machine-readable KPI catalog for exact definitions. Every report states its eligible population, observation window, numerator and denominator or distribution sample count, source coverage, exclusions and calculation version. Zero denominators return “not available.” Missing telemetry is unknown, not inactivity, compliance or success. Examples are explicitly synthetic and illustrative.
+
+Begin with task acceptance, repository, CI, deployment and incident systems because they can independently establish outcomes. Add catalog/version inventory and task-level declarations. Client telemetry is supplementary and version-dependent; enabling rich tool details may collect sensitive commands and identifiers. Do not enable it merely to count skills. A normalized adapter may report approved skill identifiers without forwarding raw arguments.
+
+Validated success uses all eligible initiated tasks whose predeclared observation window has matured. Failed and abandoned tasks remain nonsuccess. Unresolved or unobserved outcomes remain in the denominator, with known-outcome coverage shown alongside the conservative confirmed-success share. They are not relabeled as observed failure. A task cancelled before start is excluded; cancellation after start remains visible. Count a task once across retries and multiple skills. For timeliness, also show unfinished work and age; accepted-only lead-time distributions have survivorship limitations.
+
+Track all five service-level DORA measures: commit-to-production lead time, deployment frequency, change fail rate, failed deployment recovery time and deployment rework rate. Do not substitute PR-open-to-merge time or all-incident MTTR. Pair them with matured escaped-quality rates, policy effects, total cost per accepted outcome, support coverage, adoption, human experience and catalog maintenance. Keep customer/business outcomes linked to their departmental hypotheses; do not infer conversion, trust or revenue improvement from delivery telemetry.
+
+### Baseline and interpretation
+
+Before a pilot, freeze eligibility and acceptance rules and verify event joins. Collect prospective no-skill/current-practice evidence over a complete comparable workflow cycle and until the preregistered precision/sample requirement is met. Do not select a convenient end date after seeing results. Retain task class, service, skill, client/model configuration and concurrent changes. A matched or randomized comparison may be used when practical and ethical; label observational trends as descriptive and report confounding, selection and uncertainty.
+
+Elapsed time and human effort are different quantities. Parallel agents may reduce waiting while increasing review or compute. Include failed attempts and human review/rework in cost, do not multiply a multi-skill task's value across every invocation, and do not convert survey perceptions into proven time savings. Small or incomplete populations yield evidence limits, not an ROI percentage.
+
+### Event and privacy contract
+
+Use the event envelope and per-event required fields in the model. Source producer plus event ID deduplicates transport retries. Conflicting payloads under the same key are quarantined. Attempts have distinct IDs under one task. Domain IDs deduplicate deployments, defects and approvals even when multiple feeds describe them. Late arrivals produce versioned aggregate corrections; never silently overwrite a published result. Preserve occurrence and receipt times, reject impossible orderings and flag clock skew. Missing terminal events remain unresolved until the work owner reconciles them.
+
+Many-to-many task/attempt/skill/client associations preserve exact immutable versions. Unknown version stays null with a reason; never assign the latest revision retroactively. Client declarations, server facts and self-reports remain separately labeled. A skill-loaded event is evidence of loading only. The minimal prototype can operate without actor identity except where a lawful, necessary adoption denominator requires pseudonymous cohort membership.
+
+The privacy starting proposal is 30 days for raw structured analytics events and 12 months for aggregated trends, subject to the responsible owners' review. Keep the approved catalog/approval record for the supported revision's lifetime and its required audit period, which must be decided separately. Incident evidence uses a restricted, explicitly authorized hold and deletion schedule, not an indefinite analytics exception. Suppress reports below five people and prohibit drill-down or overlapping cohort slices that reconstruct identities. Five is a proposed minimum, not a guarantee against re-identification. No raw prompts, code, screens, customer cases or secrets are collected by default. Publish the purpose, lawful collection basis, access/deletion route and retention before collecting. Consent is not presumed to be an appropriate employment-law basis.
+
+## 7. Maintenance — skills-maintenance
+
+Every approved skill has an accountable owning team, independent reviewer, review due date, supported client matrix and rollback bundle. Review both usefulness and safety, not just metadata freshness. Proposed maximum review intervals are recorded by risk tier; incidents, dependency changes, model/client drift or repeated failures trigger earlier review.
+
+Data & AI reviews catalog health with the owning teams. Quality Engineering samples accepted outputs and adds confirmed failures to regression sets without exposing sensitive content. Platform & IT watches unsupported, deprecated and revoked revisions and tests distribution recovery. Architecture & Security reviews emerging misuse and exception expiry. Remove redundant or unused entries deliberately, after examining whether poor discoverability or fit explains non-use.
+
+A reported unsafe behavior opens an incident with artifact, policy and client versions. Architecture & Security coordinates containment; Platform & IT revokes authority, stops scheduling and quarantines affected revisions; the owning department handles customer or business consequences; Quality Engineering reproduces the failure; Data & AI coordinates catalog correction and trend analysis. Preserve minimal restricted evidence and involve People & Administration Squad for employee-data concerns and Finance & Accounting Squad for financial effects. Restart requires a reviewed fix, regression evidence, verified rollback/revocation and accountable human authorization. Closing the incident does not erase the historical failure from measurement.
+
+## 8. Roadmap — roadmap
+
+| Phase | Entry evidence | Work | Exit evidence and hold condition |
+| --- | --- | --- | --- |
+| Foundation | Strategy scope accepted for planning; existing teams identified. | Inventory actual client hosts/builds, provider/data terms, repositories, authority, owners and event availability; select low-risk workflows and metric definitions. | Named accountable people and independent reviewers, bounded pilot charter, forbidden actions, data/retention decision and reproducible baseline plan. Hold if accountability or lawful collection is unresolved. |
+| Governed skills pilot | Foundation evidence approved; no privileged autonomous effects. | Build a small registry, immutable contract, client adapters, evaluations, coaching and synthetic measurement verification. | Qualified client/skill tuples, mandatory safety checks, independent task acceptance, reconciled coverage and user feedback. Hold or narrow scope if quality or data coverage is inadequate. |
+| Reliable distribution | Pilot quality and usefulness support continuing. | Canary updates, effective-version readback, version locking, exception expiry, stale/offline handling and rollback. | Tested revocation and recovery, no bypass of central privileged gates, owners can support the catalog. Hold if effective versions or controls cannot be verified. |
+| Logical SDLC coordination | Distribution, authority and measurement evidence stable. | Observe and assemble evidence first, then propose and route work within scoped identities and budgets. | Exact-artifact approvals, idempotency, duplicate/outage recovery, separation of duties, audit and kill-switch drills pass; humans can take over. No authority expansion based on usage alone. |
+| Departmental expansion | Each department supplies a workflow owner, outcome, data boundary and capacity. | Add Operations, Marketing, Finance & Accounting and HR & Administration workflows with domain-specific review; Product and Technology continue quality improvement. | Departmental accepted outcomes, guardrails, total cost and experience justify continuation; sensitive decisions stay human. Stop or roll back workflows without adequate evidence. |
+
+There are no invented launch dates, budgets, staffing commitments or guaranteed gains. Phase gates permit narrowing or stopping. Re-evaluate earlier phases when the underlying client, provider, data scope or authority changes.
+
+## Internal architecture brief for implementer
+
+Use a small overview with six groups: (1) accountable people and approved work; (2) one logical coordinator and durable ledger; (3) governed registry plus qualified adapters; (4) local client contributors; (5) independent repository/CI/release boundary with separate human approval; (6) audit/measurement feedback. Put external model-provider access across a labeled data/egress boundary, with approved routing. Show registry-to-coordinator and registry-to-local-client distribution; coordinator-to-work proposals; clients-to-repository proposals; CI-to-human approval evidence; approval-to-release service; resulting evidence-to-audit and audit-to-people/coordinator feedback. Distinguish proposal/evidence arrows from authorization arrows. No coordinator-to-production or laptop-to-production edge. Diagram alt text must state target status, human accountability and lack of direct production authority. Keep full contract detail in prose, not tiny diagram boxes. Organization page links identify existing teams, not a new hierarchy.
+
+## Internal evidence mapping and open decisions
+
+Source IDs below refer to `research/ai-adoption/sources.json`. They support principles and documented capabilities, not local deployment or approval. Organization mapping was read from `repositories/documentation/docs/organization/{structure,collaboration,sdlc}.mdx` at `14ba1aa1ef66c91525135f743d15c77e32db78d3`.
+
+| Recommendation | Evidence | Design decision / limit |
+| --- | --- | --- |
+| Portable contract plus exact-client adapters | 1, 2, 4, 8, 9, 21, 26 | Content format is portable; precedence and enforcement are not. Vendored immutable distribution is the proposed default; no Gitea installer compatibility established. |
+| Independent gates, least privilege and human authority | 3, 5, 6, 7, 15, 23 | Central authorization and kill switch are target controls; local hooks are supplementary and may fail open. |
+| One logical coordinator, resilient task ledger and bounded authority | Task direction; 11, 15, 25 | Replica/idempotency/recovery topology is a design choice, not an observed installation or a vendor guarantee. |
+| Exact existing-team ownership | Three organization pages; findings section 5 | Assignments extend the documented model without asserting named staffing, capacity or approval. |
+| Immutable provenance, review, dependency checks and rollback | 1, 26, 15 | Approval digest and distribution manifest are proposed operational contracts. Pinning alone does not make content safe. |
+| Layered repeated evaluation and independent output checks | 11, 15 | Risk tiers, evaluation floors, review intervals and proposed percentages are local design defaults requiring ratification, not thresholds from the literature. |
+| Balanced KPIs and all five delivery measures | 12, 24 | Service/team evidence; no individual ranking or AI causal claim from activity. |
+| Comparative baseline, effort/elapsed distinction and no forecast ROI | 16, 17, 18, 22 | Studies vary by context; abstract-only evidence for 17/18 and known 2026 selection/timing limitations. Do not reproduce percentages as expected gains. |
+| Version-aware optional client telemetry | 19, 20, 23 | Actual licensing, settings and host coverage unknown; normalize only minimally necessary events. |
+| Lifecycle ownership, privacy and gates before expansion | 13, 14, 25; 20 | NIST voluntary framework is not certification; 14 inspected at landing-page level. Retention and cohort floor are proposals for review. |
+
+Open decisions (not blockers to writing target documentation; blockers to their corresponding rollout gates):
+
+1. Platform & IT with Architecture & Security: actual supported hosts/builds/OSs, identity boundaries, authoritative CI/release controls, protected-policy administration and stale-bundle access rule.
+2. Department leaders with Data & AI: named owner/reviewer/deputy coverage, pilot capacity and selected workflows; no new headcount is implied.
+3. Architecture & Security with People & Administration Squad and the relevant data owner: provider processing terms, data classification, lawful telemetry basis, retention, incident holds and access/deletion handling. Obtain specialist legal advice where needed; no new permanent legal role is invented.
+4. Quality Engineering with Data & AI and each workflow owner: ratify or replace the proposed risk-tier thresholds, task distributions, minimum samples, uncertainty criterion and quality follow-up windows before using them for promotion.
+5. Finance & Accounting Squad: cost allocation, currency normalization, treatment of shared licenses, effort sampling and confidence required for investment decisions.
+6. Product Management with departmental owners: business outcome hypotheses and whether a matched/randomized pilot is practical. No tool choice is coerced for an unreviewed experiment.
+7. Platform & IT: private registry distribution method, digest verification, revocation semantics, coordinator recovery and feasible minimal adapters. Do not assume vendor-preview installation or Cline SDK telemetry is already available.
+
+## Executable handoff and verification
+
+`build_strategy_model.py` writes the structured contract and illustrative values. `sample_calculations.py` is an executable reference/test plan using only labeled synthetic in-memory fixtures. The implementation child should port the same assertions into the documentation repository's established test tooling and add a CLI/fixture interface, rather than treating this reference as a production collector. Required cases are declared in the model. Do not ship research files or raw event fixtures into public static assets inadvertently.
+
+Acceptance for this synthesis: both requested files parse/exist; eight page IDs and all eleven existing teams are exact; every KPI has the full calculation/evidence/privacy contract; source IDs resolve; illustrative arithmetic is executed; synthetic edge-case tests pass; documentation repository remains unchanged. Publication, browser review, diagrams and production measurement infrastructure belong to the downstream implementation task, not this synthesis.

scripts/ai-kpi.mjs

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+/** SYNTHETIC reference only. No collectors, network access or production authorization.
+ * Input is a deliberately simplified, reconciled fixture, NOT a production event schema.
+ * Conflicts fail closed (no output); reconciliation/quarantine storage is not implemented.
+ */
+import { readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+export const LABEL = 'SYNTHETIC — illustrative, not Eldorado observations';
+export const CALCULATION_VERSION = 'synthetic-1.0.0';
+export const ratio = (n, d, scale = 100) => d === 0 ? null : n / d * scale;
+export function time(value) {
+  if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|\+00:00)$/.test(value)) throw new Error('UTC timestamp required');
+  const t = Date.parse(value);
+  if (!Number.isFinite(t) || new Date(t).toISOString().slice(0,19) !== value.slice(0,19)) throw new Error('Invalid timestamp');
+  return t;
+}
+const canonical = value => JSON.stringify(value, (_, v) => v && typeof v === 'object' && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).sort(([a],[b]) => a.localeCompare(b))) : v);
+const without = (row, keys) => Object.fromEntries(Object.entries(row).filter(([k]) => !keys.includes(k)));
+export function dedup(events) {
+  const kept = new Map();
+  for (const e of events) {
+    if (!e.producer || !e.event_id) throw new Error('Missing transport identity');
+    if (time(e.received_at) < time(e.occurred_at)) throw new Error('Receipt before occurrence');
+    const key = canonical([e.producer, e.event_id]), prior = kept.get(key);
+    if (prior && canonical(without(prior,['received_at'])) !== canonical(without(e,['received_at']))) throw new Error('Conflicting duplicate requires quarantine');
+    if (!prior || time(e.received_at) < time(prior.received_at)) kept.set(key,e);
+  }
+  return [...kept.values()];
+}
+function result(n, d, as_of, {unit = '%', scale = 100, unknown = 0, exclusions = {}, ...extra} = {}) {
+  return {label:LABEL, as_of, calculation_version:CALCULATION_VERSION, numerator:n, denominator:d, unit, value_or_null:ratio(n,d,scale), unknown_count:unknown, exclusions, coverage:{known_percent:ratio(d-unknown,d)}, warnings:unknown ? ['Unknown records remain visible; this is not a failure/non-use rate.'] : [], ...extra};
+}
+function taskCohort(events, start, end, as_of) {
+  const lo=time(start), hi=time(end), cutoff=time(as_of);
+  if (lo >= hi) throw new Error('Invalid half-open window');
+  const starts=new Map(), terminal=new Map();
+  for (const e of dedup(events)) {
+    if (time(e.occurred_at)>cutoff || time(e.received_at)>cutoff) continue;
+    if (e.event_type.startsWith('task.') && !e.task_id) throw new Error('Missing task ID');
+    if (e.event_type==='task.started') {
+      if (!Number.isFinite(e.horizon_hours) || e.horizon_hours<0) throw new Error('Missing/invalid observation horizon');
+      const prior=starts.get(e.task_id);
+      if (prior && (time(prior.occurred_at)!==time(e.occurred_at) || prior.horizon_hours!==e.horizon_hours)) throw new Error('Conflicting semantic task start');
+      starts.set(e.task_id,e);
+    } else if (['task.accepted','task.failed','task.abandoned','task.cancelled'].includes(e.event_type)) {
+      if (e.event_type==='task.accepted' && e.independent_evidence!==true) continue;
+      const prior=terminal.get(e.task_id);
+      if (prior && prior.event_type!==e.event_type) throw new Error('Conflicting task terminal state');
+      if (!prior || time(e.occurred_at)<time(prior.occurred_at)) terminal.set(e.task_id,e);
+    }
+  }
+  for (const [id,e] of terminal) if (starts.has(id) && time(e.occurred_at)<time(starts.get(id).occurred_at)) throw new Error('Terminal before start');
+  const eligible = new Set([...starts].filter(([,e]) => time(e.occurred_at)>=lo && time(e.occurred_at)<hi && time(e.occurred_at)+e.horizon_hours*3600000<=cutoff).map(([id])=>id));
+  return {starts, terminal, eligible};
+}
+// Snapshot rows are pre-reconciled at fixture as_of. Optional receipt/occurrence
+// timestamps support late-record tests; missing timestamps are NOT inferred events.
+function unique(rows, fields=['id']) {
+  const map=new Map();
+  for (const r of rows) {
+    if (fields.some(k=>typeof r[k]!=='string' || !r[k])) throw new Error('Missing semantic identity');
+    const key=canonical(fields.map(k=>r[k])), payload=without(r,['producer','event_id','received_at']);
+    if (map.has(key) && canonical(without(map.get(key),['producer','event_id','received_at']))!==canonical(payload)) throw new Error('Semantic conflict requires reconciliation');
+    const prior=map.get(key);
+    if (!prior || (r.received_at && prior.received_at && time(r.received_at)<time(prior.received_at))) map.set(key,r);
+  }
+  return [...map.values()];
+}
+const visible = (r, as_of) => (!r.received_at || time(r.received_at)<=time(as_of)) && (!r.occurred_at || time(r.occurred_at)<=time(as_of));
+const within = (t,start,end) => time(t)>=time(start) && time(t)<time(end);
+function horizon(r) {
+  if (!Number.isFinite(r.followup_hours) || r.followup_hours<0) throw new Error('Missing/invalid followup horizon');
+  return r.followup_hours*3600000;
+}
+export function association(rows) {
+  const map=new Map();
+  for (const r of rows) {
+    const tuple={skill_id:r.skill_id,revision:r.revision ?? null,version_status:!Object.hasOwn(r,'revision') ? 'missing' : r.revision===null ? 'unknown' : 'known',client:r.client,missing_reason:r.missing_reason ?? null};
+    if (!map.has(r.task_id)) map.set(r.task_id,new Map());
+    map.get(r.task_id).set(canonical(tuple),tuple);
+  }
+  return Object.fromEntries([...map].map(([id, tuples])=>[id,[...tuples.values()].sort((a,b)=>canonical(a).localeCompare(canonical(b)))]));
+}
+export function deployments(rows) {
+  const effects=unique(rows,['service_id','deployment_id']).filter(r=>r.environment==='production' && r.production_effect===true);
+  return {effects:effects.length,successful:effects.filter(r=>r.succeeded===true).length,change_fail_rate:ratio(effects.filter(r=>r.intervention===true).length,effects.length),rework_rate:ratio(effects.filter(r=>r.planned===false && Boolean(r.incident_id)).length,effects.length)};
+}
+export function matureDefects(changes,defects,as_of,start='0001-01-01T00:00:00Z',end=as_of) {
+  const eligible=unique(changes).filter(c=>visible(c,as_of) && within(c.accepted_at,start,end) && time(c.accepted_at)+horizon(c)<=time(as_of));
+  const affected=new Set();
+  for (const d of unique(defects)) {
+    const c=eligible.find(c=>c.id===d.change_id);
+    if (c && d.confirmed===true && visible(d,as_of) && time(d.detected_at)>=time(c.accepted_at) && time(d.detected_at)<=time(c.accepted_at)+horizon(c)) affected.add(c.id);
+  }
+  return [affected.size,eligible.length];
+}
+export function survey(rows,invited,as_of) {
+  if (!Number.isInteger(invited) || invited<0) throw new Error('Invalid invitation count');
+  const all=unique(rows), valid=all.filter(r=>Number.isInteger(r.score) && r.score>=1 && r.score<=5);
+  if (all.length>invited) throw new Error('Responses exceed invitations');
+  const suppressed=valid.length<5;
+  return result(suppressed?null:valid.reduce((n,r)=>n+r.score,0),valid.length,as_of,{unit:'points (1–5)',scale:1,value_or_null:suppressed?null:ratio(valid.reduce((n,r)=>n+r.score,0),valid.length,1),suppressed,exclusions:{invalid_answers:all.length-valid.length},coverage:{response_percent:ratio(valid.length,invited)},distribution:suppressed?null:Object.fromEntries([1,2,3,4,5].map(s=>[s,valid.filter(r=>r.score===s).length])),warnings:suppressed?['People cohort below five suppressed.']:[]});
+}
+export function calculate(f) {
+  if (f.synthetic!==true || f.schema_version!=='1.0') throw new Error('Explicit synthetic schema 1.0 fixture required');
+  const {start,end,as_of}=f, kpis={};
+  kpis['validated-task-success']=success(f.events,start,end,as_of);
+  const trials=unique(f.selection).filter(r=>visible(r,as_of));
+  const scored=trials.filter(r=>typeof r.relevant==='boolean' && typeof r.activated==='boolean');
+  const tp=scored.filter(r=>r.relevant && r.activated).length;
+  for (const [id,den] of [['selection-precision',scored.filter(r=>r.activated).length],['selection-recall',scored.filter(r=>r.relevant).length]]) {
+    kpis[id]=result(tp,den,as_of,{unknown:trials.length-scored.length,coverage:{scorable_percent:ratio(scored.length,trials.length)},exclusions:{unscorable:trials.length-scored.length}});
+  }
+  const effects=unique(f.deployments,['service_id','deployment_id']).filter(r=>visible(r,as_of) && r.environment==='production' && r.production_effect===true && within(r.deployed_at,start,end));
+  const mature=effects.filter(r=>time(r.deployed_at)+horizon(r)<=time(as_of));
+  kpis['change-fail-rate']=result(mature.filter(r=>r.intervention===true).length,mature.length,as_of,{unknown:mature.filter(r=>typeof r.intervention!=='boolean').length,exclusions:{immature:effects.length-mature.length}});
+  kpis['deployment-rework-rate']=result(effects.filter(r=>r.planned===false && Boolean(r.incident_id)).length,effects.length,as_of,{unknown:effects.filter(r=>typeof r.planned!=='boolean' || (r.planned===false && !Object.hasOwn(r,'incident_id'))).length});
+  const [affected,accepted]=matureDefects(f.changes,f.defects,as_of,start,end);
+  const matureChanges=unique(f.changes).filter(r=>visible(r,as_of) && within(r.accepted_at,start,end) && time(r.accepted_at)+horizon(r)<=time(as_of));
+  kpis['escaped-quality-rate']=result(affected,accepted,as_of,{unknown:matureChanges.filter(r=>r.linkage_complete!==true).length,exclusions:{outside_window_immature_or_late:unique(f.changes).length-matureChanges.length},pending_triage_count:unique(f.defects).filter(r=>visible(r,as_of) && r.confirmed!==true).length});
+  const attempts=unique(f.attempts).filter(r=>visible(r,as_of));
+  kpis['policy-effects']=result(attempts.filter(r=>r.actual_effect===true).length,attempts.length,as_of,{unknown:attempts.filter(r=>typeof r.actual_effect!=='boolean').length,blocked_count:attempts.filter(r=>r.blocked===true).length});
+  const {eligible}=taskCohort(f.events,start,end,as_of);
+  const costs=unique(f.costs).filter(r=>visible(r,as_of) && (eligible.has(r.task_id) || r.task_id==='shared_pool'));
+  if (costs.some(r=>r.currency!==f.currency || !Number.isFinite(r.amount) || r.amount<0)) throw new Error('Invalid cost or mixed currency: approved conversion required');
+  const missing=f.expected_cost_buckets.filter(b=>!costs.some(r=>r.bucket===b));
+  kpis['cost-per-accepted-outcome']=result(costs.reduce((sum,r)=>sum+r.amount,0),kpis['validated-task-success'].numerator,as_of,{scale:1,unit:`${f.currency}/accepted outcome`,partial_estimate:missing.length>0,coverage:{missing_cost_buckets:missing},warnings:missing.length?['Partial estimate, not total cost; missing cost buckets.']:[]});
+  kpis['human-experience']=survey(f.survey.responses.filter(r=>visible(r,as_of)),f.survey.invited,as_of);
+  return {label:LABEL,as_of,calculation_version:CALCULATION_VERSION,window:{start,end},kpis,associations:association(f.associations),not_implemented:['supported-bundle-coverage','useful-adoption','change-lead-time','deployment-frequency','failed-deployment-recovery-time','maintenance-health','department-outcome'],limitations:['Synthetic simplified reconciled snapshots only; not the full production event envelope.','Snapshot rows without timestamps are assumed frozen at as_of, not missing-event evidence.','No causal attribution, uncertainty intervals, authorization or telemetry collection.','Survey implements primary item only; no cross-slice disclosure protection.','Defect severity strata and policy severity counts are not implemented.']};
+}
+if (process.argv[1] && import.meta.url===pathToFileURL(process.argv[1]).href) {
+  try {
+    if (process.argv.length>3) throw new Error('Usage: node scripts/ai-kpi.mjs [synthetic-fixture.json]');
+    const source=process.argv[2] ?? new URL('./fixtures/ai-kpi-synthetic.json',import.meta.url);
+    console.log(JSON.stringify(calculate(JSON.parse(readFileSync(source,'utf8'))),null,2));
+  } catch (error) { console.error(`Synthetic KPI calculation failed: ${error.message}`); process.exitCode=1; }
+}
+export function success(events,start,end,as_of) {
+  const {starts,terminal,eligible}=taskCohort(events,start,end,as_of);
+  const n=[...eligible].filter(id=>terminal.get(id)?.event_type==='task.accepted').length;
+  const unknown=[...eligible].filter(id=>!terminal.has(id)).length;
+  return result(n,eligible.size,as_of,{unknown, known_outcome_coverage:ratio(eligible.size-unknown,eligible.size), orphan_terminal_count:[...terminal.keys()].filter(id=>!starts.has(id)).length, excluded_start_count:starts.size-eligible.size, exclusions:{outside_window_or_immature:starts.size-eligible.size}});
+}

scripts/ai-kpi.test.mjs

@@ -0,0 +1,153 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { existsSync, readFileSync } from 'node:fs';
+const moduleUrl = new URL('./ai-kpi.mjs', import.meta.url);
+import { spawnSync } from 'node:child_process';
+import * as api from './ai-kpi.mjs';
+const fixture = () => JSON.parse(readFileSync(new URL('./fixtures/ai-kpi-synthetic.json', import.meta.url)));
+test('semantic change duplicates preserve the complete quality report including exclusions', () => {
+  const original = fixture();
+  const repeated = fixture();
+  repeated.changes.push({...repeated.changes[0]});
+  assert.deepEqual(api.calculate(repeated).kpis['escaped-quality-rate'], api.calculate(original).kpis['escaped-quality-rate']);
+});
+test('CLI report exposes implemented KPI contracts and explicit omissions', async () => {
+  const m = await import(moduleUrl);
+  assert.equal(typeof m.calculate, 'function');
+  const r = m.calculate(fixture());
+  assert.equal(Object.keys(r.kpis).length, 9);
+  assert.equal(r.not_implemented.length, 7);
+  assert.equal(r.kpis['cost-per-accepted-outcome'].value_or_null, 60);
+  assert.equal(r.kpis['selection-precision'].value_or_null, 50);
+  assert.equal(r.kpis['selection-recall'].value_or_null, 50);
+  assert.equal(r.kpis['change-fail-rate'].value_or_null, 100);
+  assert.equal(r.kpis['deployment-rework-rate'].value_or_null, 100);
+  assert.equal(r.kpis['escaped-quality-rate'].value_or_null, 100);
+  assert.equal(r.kpis['policy-effects'].value_or_null, 50);
+  assert.equal(r.kpis['human-experience'].value_or_null, 4);
+});
+function event(id,task,kind,day=1,extra={}) {
+  const timestamp=`2026-01-${String(day).padStart(2,'0')}T00:00:00Z`;
+  return {producer:'synthetic',event_id:id,task_id:task,event_type:kind,occurred_at:timestamp,received_at:timestamp,...extra};
+}
+const run = (events,as_of=fixture().as_of) => api.success(events,fixture().start,fixture().end,as_of);
+test('transport duplicates and redelivery use earliest receipt in either order',()=>{
+  const f=fixture(), duplicate={...f.events[0],received_at:'2026-01-06T00:00:00Z'};
+  assert.deepEqual(run([...f.events,f.events[0]]),run(f.events));
+  assert.deepEqual(run([...f.events,duplicate]),run(f.events));
+  assert.deepEqual(run([duplicate,...f.events]),run(f.events));
+});
+test('transport conflicts fail closed',()=>assert.throws(()=>run([...fixture().events,{...fixture().events[0],task_id:'other'}]),/Conflicting duplicate/));
+test('retry and cross-feed semantic duplicate never add tasks',()=>{
+  const f=fixture();
+  assert.equal(run([...f.events,event('retry','accepted','attempt.started',2),event('retry-fail','accepted','attempt.failed',2),{...f.events[0],producer:'mirror',event_id:'mirror-start'}]).denominator,4);
+});
+test('immature task and half-open end excluded',()=>{
+  const r=run([...fixture().events,event('boundary','boundary','task.started',5,{horizon_hours:0})]);
+  assert.equal(r.excluded_start_count,2);
+  assert.equal(r.denominator,4);
+});
+test('all implemented zero denominator values are null',()=>{
+  const f=fixture();
+  for (const k of ['events','selection','deployments','changes','defects','attempts','costs','associations']) f[k]=[];
+  f.survey={invited:0,responses:[]};
+  for (const r of Object.values(api.calculate(f).kpis)) assert.equal(r.value_or_null,null);
+});
+test('orphan terminal does not increase accepted count',()=>{
+  const r=run([...fixture().events,event('orphan','absent','task.accepted',2,{independent_evidence:true})]);
+  assert.equal(r.orphan_terminal_count,1); assert.equal(r.numerator,1);
+});
+test('late arrival restates only when received',()=>{
+  const events=[...fixture().events,event('late','unknown','task.accepted',3,{independent_evidence:true,received_at:'2026-01-06T00:00:00Z'})];
+  assert.equal(run(events).numerator,1);
+  assert.equal(run(events,'2026-01-06T00:00:00Z').numerator,2);
+});
+test('unknown, absent and mixed versions retained without latest inference',()=>{
+  const rows=['a','b','a',null].map(revision=>({task_id:'t',skill_id:'s',revision,client:'Cline'}));
+  rows.push({task_id:'t',skill_id:'s',client:'Cline'});
+  const r=api.association(rows).t;
+  assert.equal(r.length,4);
+  assert.equal(r.filter(x=>x.version_status==='known').length,2);
+  assert.deepEqual(new Set(r.filter(x=>x.revision===null).map(x=>x.version_status)),new Set(['missing','unknown']));
+});
+test('invalid timestamps, UTC offsets, receipt order and terminal order rejected',()=>{
+  for(const t of ['no','2026-02-30T00:00:00Z','2026-01-01T00:00:00+01:00']) assert.throws(()=>api.time(t));
+  assert.throws(()=>run([event('s','t','task.started',2,{horizon_hours:24}),event('a','t','task.accepted',1,{independent_evidence:true})]),/Terminal before start/);
+  assert.throws(()=>api.dedup([event('s','t','task.started',2,{received_at:'2026-01-01T00:00:00Z'})]),/Receipt before/);
+});
+test('missing horizon is not silently mature',()=>assert.throws(()=>run([event('s','t','task.started')]),/horizon/));
+test('conflicting terminal and semantic start require reconciliation',()=>{
+  assert.throws(()=>run([...fixture().events,event('conflict','accepted','task.failed',3)]),/Conflicting task terminal/);
+  assert.throws(()=>run([...fixture().events,event('conflict','accepted','task.started',2,{horizon_hours:48})]),/semantic task start/);
+});
+test('no independent acceptance evidence means unknown, not accepted',()=>{
+  const r=run([event('s','t','task.started',1,{horizon_hours:24}),event('a','t','task.accepted',2)]);
+  assert.equal(r.numerator,0); assert.equal(r.unknown_count,1);
+});
+test('pre-start cancellation excluded; post-start cancellation remains denominator',()=>{
+  const r=run([event('pre','never','task.cancelled',1,{before_start:true}),event('s','started','task.started',1,{horizon_hours:24}),event('post','started','task.cancelled',2,{before_start:false})]);
+  assert.deepEqual([r.numerator,r.denominator,r.unknown_count],[0,1,0]);
+});
+test('deployment retries collapse; unknown rework not treated as planned',()=>{
+  const row=fixture().deployments[0];
+  assert.deepEqual(api.deployments([row,{...row,producer:'mirror',event_id:'2'}]),{effects:1,successful:1,change_fail_rate:100,rework_rate:100});
+  assert.equal(api.deployments([{...row,planned:null}]).rework_rate,0);
+  const f=fixture(); f.deployments[0].planned=null;
+  const r=api.calculate(f).kpis['deployment-rework-rate'];
+  assert.equal(r.denominator,1); assert.equal(r.unknown_count,1);
+  assert.throws(()=>api.deployments([row,{...row,planned:true}]),/Semantic conflict/);
+});
+test('mature deployment denominator retains unsuccessful production effects',()=>{
+  const f=fixture(); f.deployments[0].succeeded=false;
+  assert.equal(api.calculate(f).kpis['change-fail-rate'].denominator,1);
+  f.deployments[0].followup_hours=1000;
+  assert.equal(api.calculate(f).kpis['change-fail-rate'].denominator,0);
+});
+test('mature defect followup is linked, bounded and deduplicated',()=>{
+  const f=fixture();
+  f.changes.push({id:'new',accepted_at:'2026-01-04T00:00:00Z',followup_hours:48});
+  f.defects.push({...f.defects[0],id:'new-defect',change_id:'new'});
+  assert.deepEqual(api.matureDefects(f.changes,[...f.defects,f.defects[0]],f.as_of),[1,1]);
+  f.defects[0].detected_at='2026-01-04T00:00:00Z';
+  assert.deepEqual(api.matureDefects(f.changes,f.defects,f.as_of),[0,1]);
+});
+test('cost includes failed attempts, flags partial buckets and rejects mixed currencies',()=>{
+  const f=fixture(); let r=api.calculate(f).kpis['cost-per-accepted-outcome'];
+  assert.equal(r.numerator,60); assert.equal(r.partial_estimate,true);
+  f.costs.push({...f.costs[0]});
+  assert.equal(api.calculate(f).kpis['cost-per-accepted-outcome'].numerator,60);
+  f.costs.pop(); // Currency validation is separate from conflicting duplicate validation.
+  f.costs[0].currency='USD'; assert.throws(()=>api.calculate(f),/mixed currency/);
+});
+test('blocked attempts are not prohibited effects; unknown audits remain denominator',()=>{
+  const f=fixture(); f.attempts.push({id:'unknown'});
+  const r=api.calculate(f).kpis['policy-effects'];
+  assert.deepEqual([r.numerator,r.denominator,r.blocked_count,r.unknown_count],[1,3,1,1]);
+});
+test('survey suppresses small groups including sum and distribution',()=>{
+  const f=fixture(), r=api.survey(f.survey.responses.slice(0,4),10,f.as_of);
+  assert.equal(r.value_or_null,null); assert.equal(r.numerator,null); assert.equal(r.distribution,null);
+});
+test('required output fields accompany every implemented KPI',()=>{
+  const required=['label','as_of','calculation_version','numerator','denominator','unit','value_or_null','unknown_count','exclusions','coverage','warnings'];
+  for (const r of Object.values(api.calculate(fixture()).kpis)) for(const key of required) assert.ok(Object.hasOwn(r,key),key);
+});
+test('non-synthetic and unknown fixture schemas rejected',()=>{
+  assert.throws(()=>api.calculate({...fixture(),synthetic:false}),/synthetic/);
+  assert.throws(()=>api.calculate({...fixture(),schema_version:'future'}),/schema/);
+});
+test('CLI executes default and explicit fixture and fails visibly for missing input',()=>{
+  for(const args of [[],[new URL('./fixtures/ai-kpi-synthetic.json',import.meta.url).pathname]]) {
+    const r=spawnSync(process.execPath,[moduleUrl.pathname,...args],{encoding:'utf8'});
+    assert.equal(r.status,0,r.stderr); assert.equal(JSON.parse(r.stdout).kpis['validated-task-success'].value_or_null,25);
+  }
+  const r=spawnSync(process.execPath,[moduleUrl.pathname,'/nonexistent/synthetic-fixture.json'],{encoding:'utf8'});
+  assert.equal(r.status,1); assert.equal(r.stdout,''); assert.match(r.stderr,/failed/);
+});
+test('synthetic task calculator exists and retains failed, abandoned, unknown tasks', async () => {
+  assert.ok(existsSync(moduleUrl), 'calculator implementation is required');
+  const { success } = await import(moduleUrl);
+  const f = JSON.parse(readFileSync(new URL('./fixtures/ai-kpi-synthetic.json', import.meta.url)));
+  const r = success(f.events, f.start, f.end, f.as_of);
+  assert.deepEqual([r.numerator, r.denominator, r.unknown_count, r.value_or_null, r.known_outcome_coverage], [1,4,1,25,75]);
+});

scripts/browser/inline-controls.cjs

@@ -0,0 +1,144 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/inline-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output, {recursive: true});
+  const browser = await chromium.launch({headless: true, executablePath: process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args: ['--no-sandbox']});
+  const results = [];
+  try {
+    for (const width of [1440, 390, 320]) {
+      const context = await browser.newContext({viewport: {width, height: 1000}, colorScheme: 'light'});
+      const page = await context.newPage();
+      await page.goto(`${base}/eldorado-v1/documentation/strategy/`, {waitUntil: 'networkidle'});
+      const panel = page.locator('.archify-panel--story');
+      const iframe = panel.locator(width > 700 ? '.story-desktop' : '.story-mobile');
+      await iframe.scrollIntoViewIfNeeded();
+      const frame = await (await iframe.elementHandle()).contentFrame();
+      const theme = async value => {
+        await page.waitForFunction(t => document.documentElement.dataset.theme === t, value);
+        await frame.waitForFunction(t => document.documentElement.dataset.theme === t, value);
+      };
+      await theme('light');
+      for (const id of ['btn-theme', 'btn-preset', 'btn-export']) {
+        const box = await frame.locator(`#${id}`).boundingBox();
+        assert(box && box.width >= 40 && box.height >= 44, id);
+      }
+      const toolbar = await frame.locator('.toolbar').boundingBox();
+      const exportButton = await frame.locator('#btn-export').boundingBox();
+      const diagram = await frame.locator('.diagram-container > svg').boundingBox();
+      const rightGap = toolbar.x + toolbar.width - exportButton.x - exportButton.width;
+      assert(Math.abs(rightGap - 8) < 1, `toolbar right padding at ${width}: ${rightGap}`);
+      assert(diagram.y >= toolbar.y + toolbar.height, 'toolbar must stay above nodes');
+      const checkMenu = async selector => {
+        await frame.locator(selector).evaluate(n => Promise.all(n.getAnimations().map(a => a.finished)));
+        const menu = await frame.locator(selector).boundingBox();
+        const viewport = await iframe.boundingBox();
+        const currentToolbar = await frame.locator('.toolbar').boundingBox();
+        assert(menu && menu.x >= viewport.x - 1 && menu.y >= currentToolbar.y + currentToolbar.height - 1, selector);
+        assert(menu.x + menu.width <= viewport.x + viewport.width + 1, `${selector} clips horizontally`);
+        assert(menu.y + menu.height <= viewport.y + viewport.height + 1, `${selector} clips vertically`);
+      };
+      const light = await frame.locator('body').evaluate(n => getComputedStyle(n).backgroundColor);
+      await frame.locator('#btn-theme').click(); await theme('dark');
+      assert.notEqual(await frame.locator('body').evaluate(n => getComputedStyle(n).backgroundColor), light);
+      await frame.locator('#btn-theme').click(); await theme('light');
+      // Mobile portal theme control lives in the navigation drawer.
+      const portalTheme = async target => {
+        if (width <= 700) await page.getByRole('button', {name: 'Toggle navigation bar'}).click();
+        for (let attempt = 0; attempt < 3; attempt++) {
+          await page.getByRole('button', {name: /Switch between dark and light mode/}).filter({visible: true}).click();
+          if (await page.locator('html').getAttribute('data-theme') === target) break;
+        }
+        if (width <= 700) await page.getByRole('button', {name: 'Close navigation bar'}).click();
+      };
+      await portalTheme('dark'); await theme('dark');
+      await portalTheme('light'); await theme('light');
+      for (const preset of ['signal-flow', 'blueprint', 'editorial', 'classic']) {
+        await frame.locator('#btn-preset').click();
+        await checkMenu('.preset-menu');
+        await frame.locator(`[data-preset-value="${preset}"]`).click();
+        assert.equal(await frame.locator('html').getAttribute('data-preset'), preset);
+      }
+      // A theme change must not reload the iframe or lose the selected visual preset.
+      await frame.locator('#btn-preset').click();
+      await frame.locator('[data-preset-value="blueprint"]').click();
+      await portalTheme('dark'); await theme('dark');
+      assert.equal(await frame.locator('html').getAttribute('data-preset'), 'blueprint');
+      const exports = [];
+      for (const format of ['png', 'jpeg', 'webp', 'svg', 'svg-light', 'svg-dark', 'webm']) {
+        await frame.locator('#btn-export').click();
+        await checkMenu('.export-menu');
+        if (format === 'webm' && await frame.locator('[data-format="webm"]').isDisabled()) {
+          exports.push({format, unsupported: true});
+          await frame.locator('#btn-export').click();
+          continue;
+        }
+        console.log(`Export ${width} ${format}`);
+        const [download] = await Promise.all([
+          page.waitForEvent('download', {timeout: 60000}),
+          frame.locator(`[data-format="${format}"]`).click(),
+        ]);
+        assert.equal(await download.failure(), null);
+        const path = `${output}/${width}-${format}-${download.suggestedFilename()}`;
+        await download.saveAs(path);
+        const bytes = fs.readFileSync(path);
+        assert(bytes.length > 1000);
+        if (format.startsWith('svg')) {
+          const valid = await page.evaluate(xml => {
+            const doc = new DOMParser().parseFromString(xml, 'image/svg+xml');
+            if (doc.querySelector('[data-node-id="humans"], [data-edge-id="human-direction"]')) return false;
+            if (![...doc.querySelectorAll('[data-node-id="agent"] text')].some(n => n.textContent === 'Human Controlled')) return false;
+            if (doc.querySelectorAll('[data-node-id]').length !== 17 || doc.querySelectorAll('path[data-edge-id]').length !== 24) return false;
+            return !doc.querySelector('parsererror') && doc.documentElement.localName === 'svg' && doc.querySelectorAll('text').length > 0 && doc.querySelector('#eldorado-cycle-export')?.textContent.includes('stroke-dasharray: 3 9');
+          }, bytes.toString());
+          assert(valid, format);
+        } else {
+          const mime = {png:'image/png', jpeg:'image/jpeg', webp:'image/webp', webm:'video/webm'}[format];
+          const dimensions = await page.evaluate(async ({data, mime}) => {
+            const media = document.createElement(mime.startsWith('video') ? 'video' : 'img');
+            const loaded = new Promise((resolve, reject) => {media[mime.startsWith('video') ? 'onloadedmetadata' : 'onload'] = resolve; media.onerror = reject;});
+            media.src = `data:${mime};base64,${data}`; await loaded;
+            return [media.videoWidth || media.naturalWidth, media.videoHeight || media.naturalHeight];
+          }, {data: bytes.toString('base64'), mime});
+          assert(dimensions.every(n => n > 0), format);
+        }
+        exports.push({format, path, bytes:bytes.length});
+      }
+      const opener = panel.getByRole('button', {name:/^Expand /});
+      await opener.click();
+      let full = await (await panel.locator('dialog iframe').elementHandle()).contentFrame();
+      await full.waitForFunction(() => document.documentElement.dataset.theme === 'dark');
+      await full.locator('#btn-theme').click(); await theme('light');
+      const close = panel.getByRole('button', {name:'Close full-screen diagram'});
+      assert.equal(await close.innerText(), '×');
+      await close.click(); assert(await opener.evaluate(n => n === document.activeElement));
+      await opener.click();
+      full = await (await panel.locator('dialog iframe').elementHandle()).contentFrame();
+      await full.waitForFunction(() => document.documentElement.dataset.theme === 'light');
+      await close.focus(); await page.keyboard.press('Escape');
+      assert(await opener.evaluate(n => n === document.activeElement));
+      await iframe.scrollIntoViewIfNeeded();
+      await page.evaluate(() => scrollTo({top: 0, behavior: 'instant'}));
+      await page.evaluate(() => new Promise(resolve => requestAnimationFrame(() => requestAnimationFrame(resolve))));
+      await page.screenshot({path:`${output}/${width}.png`, fullPage:true});
+      await frame.locator('#btn-theme').click(); await theme('dark');
+      // Exercise keyboard navigation without racing the portal's smooth scroll.
+      await page.locator('.strategy-content a[href$="/strategy/skills-governance/"]').filter({visible:true}).focus();
+      await page.keyboard.press('Enter');
+      await page.waitForURL('**/strategy/skills-governance/');
+      await page.goBack({waitUntil:'domcontentloaded'});
+      await page.waitForURL('**/strategy/target-operating-model/');
+      await page.getByRole('heading', {name:'Target operating model', exact:true, level:1}).waitFor();
+      const next = page.locator(`.archify-panel--story[data-diagram="strategy-target"] > .story-${width > 700 ? 'desktop' : 'mobile'}`);
+      await next.scrollIntoViewIfNeeded();
+      await (await (await next.elementHandle()).contentFrame()).waitForFunction(() => document.documentElement.dataset.theme === 'dark');
+      assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth));
+      results.push({width, toolbar, rightGap, dropdownsUnclipped:true, themeSync:true, presets:4, exports, fullscreen:true, routeTheme:true});
+      fs.writeFileSync(`${output}/results.json`, JSON.stringify(results,null,2));
+      await context.close();
+    }
+    console.log(`PASS ${results.length} viewports: bidirectional themes, 4 presets, all supported exports decoded, fullscreen and route persistence`);
+  } finally {await browser.close();}
+})().catch(error => {console.error(error); process.exitCode = 1;});

scripts/browser/roadmap-timeline.cjs

@@ -0,0 +1,129 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const ids = ['assessment','readiness','pilot','expansion','sustain'];
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/roadmap-timeline-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output, {recursive:true});
+  const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args:['--no-sandbox']});
+  const results = [];
+  const inspect = async (frame, vertical) => {
+    await frame.locator('svg[role="img"]').waitFor();
+    const geometry = await frame.locator('svg[role="img"]').evaluate(svg => ({
+      width:innerWidth, height:innerHeight,
+      cards:[...svg.querySelectorAll('[data-node-id]')].map(node => ({
+        id:node.dataset.nodeId, box:node.querySelector('rect').getBoundingClientRect().toJSON(),
+        number:node.querySelector('[data-stage-number]').textContent,
+        numberColor:getComputedStyle(node.querySelector('[data-stage-number]')).fill,
+        titleColor:getComputedStyle(node.querySelector('[data-node-label]')).fill,
+        text:[...node.querySelectorAll('text')].map(text => ({value:text.textContent, box:text.getBoundingClientRect().toJSON(), size:parseFloat(getComputedStyle(text).fontSize)*text.getScreenCTM().a}))
+      }))
+    }));
+    geometry.cards.sort((a,b) => a.box.y-b.box.y || a.box.x-b.box.x);
+    assert.deepEqual(geometry.cards.map(n => n.id), ids);
+    assert.deepEqual(geometry.cards.map(n => n.number), ['1','2','3','4','5']);
+    for (const [index, card] of geometry.cards.entries()) {
+      assert.equal(card.text.length, 3, 'number, title and one outcome only');
+      assert.equal(card.numberColor,card.titleColor,'stage number must inherit readable theme color');
+      assert(card.box.left >= 0 && card.box.top >= 0 && card.box.right <= geometry.width + 1 && card.box.bottom <= geometry.height + 1, `outside iframe: ${card.id}`);
+      for (const text of card.text) {
+        assert(text.size >= 13, `small text: ${card.id} ${text.size}`);
+        assert(!/OUTPUT|Exit:/.test(text.value));
+        assert(text.box.left >= card.box.left && text.box.right <= card.box.right + 1 && text.box.top >= card.box.top && text.box.bottom <= card.box.bottom + 1, `clipped: ${card.id}`);
+      }
+      for (let t=1; t<card.text.length; t++) assert(card.text[t-1].box.bottom < card.text[t].box.top, `overlapping text: ${card.id}`);
+      if (index) {
+        const previous = geometry.cards[index-1].box;
+        if (vertical) {assert.equal(previous.x,card.box.x); assert(previous.bottom < card.box.top);}
+        else {assert.equal(previous.y,card.box.y); assert(previous.right < card.box.left);}
+      }
+    }
+    return geometry;
+  };
+  try {
+    for (const width of [1440,1024,390,320]) {
+      const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+      try {
+        const page = await context.newPage();
+        const errors = [];
+        page.on('pageerror', error => errors.push(error.message));
+        assert.equal((await page.goto(`${base}/eldorado-v1/documentation/strategy/roadmap/`, {waitUntil:'networkidle'})).status(),200);
+        const panel = page.locator('[data-diagram="strategy-roadmap"]');
+        const iframe = panel.locator(width < 1360 ? '.story-mobile' : '.story-desktop');
+        const frame = await (await iframe.elementHandle()).contentFrame();
+        await frame.locator('svg[role="img"]').waitFor();
+        const opener = panel.getByRole('button', {name:/^Expand /});
+        for (const theme of ['light','dark']) {
+          if (await frame.locator('html').getAttribute('data-theme') !== theme) await frame.locator('#btn-theme').click();
+          await page.waitForFunction(t => document.documentElement.dataset.theme === t, theme);
+          const inline = await inspect(frame,width < 1360);
+          await panel.screenshot({path:`${output}/${width}-${theme}-inline.png`});
+          await opener.focus(); await page.keyboard.press('Enter');
+          const close = panel.getByRole('button', {name:'Close full-screen diagram', exact:true});
+          await close.waitFor({state:'visible'});
+          const fullscreen = await (await panel.locator('dialog iframe').elementHandle()).contentFrame();
+          await fullscreen.waitForFunction(t => document.documentElement.dataset.theme === t, theme);
+          const expanded = await inspect(fullscreen,width < 1000);
+          await page.screenshot({path:`${output}/${width}-${theme}-fullscreen.png`});
+          await page.keyboard.press('Escape');
+          await page.waitForFunction(() => !document.querySelector('[data-diagram="strategy-roadmap"] dialog').open);
+          assert(await opener.evaluate(n => n === document.activeElement));
+          assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth));
+          results.push({width,theme,inline,expanded});
+          fs.writeFileSync(`${output}/results.json`,JSON.stringify(results,null,2));
+        }
+        assert.deepEqual(errors,[]);
+      } finally {await context.close();}
+    }
+    assert.equal(results.length,8);
+    for (const viewport of [{width:390,height:667},{width:320,height:568}]) {
+      const context = await browser.newContext({viewport});
+      try {
+        const page = await context.newPage();
+        await page.goto(`${base}/eldorado-v1/documentation/strategy/roadmap/`, {waitUntil:'networkidle'});
+        const panel = page.locator('[data-diagram="strategy-roadmap"]');
+        const opener = panel.getByRole('button', {name:/^Expand /});
+        await opener.focus(); await page.keyboard.press('Enter');
+        const modal = panel.locator('dialog');
+        const close = modal.getByRole('button', {name:'Close full-screen diagram', exact:true});
+        await close.waitFor({state:'visible'});
+        const iframe = modal.locator('iframe');
+        const frame = await (await iframe.elementHandle()).contentFrame();
+        const geometry = await inspect(frame,true);
+        assert(await modal.evaluate(n => n.scrollHeight > n.clientHeight), 'short fullscreen must scroll');
+        for (const card of geometry.cards) {
+          await modal.evaluate((n, y) => {n.scrollTop = y;}, card.box.top);
+          const frameBox = await iframe.boundingBox();
+          const toolbarBox = await modal.locator('.archify-modal-toolbar').boundingBox();
+          const closeBox = await close.boundingBox();
+          assert(closeBox.y >= 0 && closeBox.y + closeBox.height <= viewport.height, 'close remains visible');
+          assert(frameBox.y + card.box.top >= toolbarBox.y + toolbarBox.height - 1 && frameBox.y + card.box.bottom <= viewport.height + 1, `stage unreachable: ${card.id}`);
+        }
+        // Controls stay reachable at the beginning of the scrollable viewer.
+        await modal.evaluate(n => {n.scrollTop = 0;});
+        for (const selector of ['#btn-theme','#btn-preset','#btn-export']) {
+          const control = frame.locator(selector);
+          const box = await control.boundingBox();
+          assert(box.x >= 0 && box.x + box.width <= viewport.width && box.y >= 0 && box.y + box.height <= viewport.height, `control outside viewport: ${selector}`);
+          await control.click();
+          if (selector !== '#btn-theme') await control.click();
+        }
+        await close.focus(); await page.keyboard.press('Escape');
+        await page.waitForFunction(() => !document.querySelector('[data-diagram="strategy-roadmap"] dialog').open);
+        await iframe.waitFor({state:'detached'});
+        assert(await opener.evaluate(n => n === document.activeElement), 'Escape restores opener focus');
+        await page.keyboard.press('Enter');
+        await close.waitFor({state:'visible'});
+        await close.focus(); await page.keyboard.press('Enter');
+        await page.waitForFunction(() => !document.querySelector('[data-diagram="strategy-roadmap"] dialog').open);
+        assert(await opener.evaluate(n => n === document.activeElement), 'close button restores opener focus');
+        results.push({viewport,scrollable:geometry});
+        fs.writeFileSync(`${output}/results.json`,JSON.stringify(results,null,2));
+      } finally {await context.close();}
+    }
+    assert.equal(results.length,10);
+    console.log('PASS 16 timeline contexts: 4 widths × 2 themes × inline/fullscreen; ordered readable text, no clipping, keyboard exit.');
+    console.log('PASS short fullscreen 390×667 and 320×568: readable stages reachable by scroll, sticky close, accessible controls, keyboard close and focus restoration.');
+  } finally {await browser.close();}
+})().catch(error => {console.error(error); process.exitCode=1;});

scripts/browser/roadmap.cjs

@@ -0,0 +1,164 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/roadmap-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output, {recursive:true});
+  const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args:['--no-sandbox']});
+  const results = [];
+  try {
+    // Intermediate widths must use the readable vertical Roadmap, not shrink five cards.
+    for (const width of [768, 1024, 1280]) {
+      const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+      try {
+        const page = await context.newPage();
+        const errors = [];
+        page.on('pageerror', error => errors.push(error.message));
+        const response = await page.goto(`${base}/eldorado-v1/documentation/strategy/roadmap/`, {waitUntil:'networkidle'});
+        assert.equal(response.status(), 200);
+        const panel = page.locator('.archify-panel--story[data-diagram="strategy-roadmap"]');
+        const iframe = panel.locator('.story-mobile');
+        assert(await iframe.isVisible(), `${width}: vertical Roadmap iframe must be visible`);
+        assert(!await panel.locator('.story-desktop').isVisible(), `${width}: horizontal Roadmap must be hidden`);
+        const frame = await (await iframe.elementHandle()).contentFrame();
+        await frame.locator('svg[role="img"]').waitFor();
+        const geometry = await frame.locator('svg[role="img"]').evaluate(svg => ({
+          width:innerWidth, height:innerHeight,
+          overflow:document.documentElement.scrollWidth > innerWidth || document.documentElement.scrollHeight > innerHeight,
+          nodes:[...svg.querySelectorAll('[data-node-id]')].map(node => ({
+            id:node.dataset.nodeId, box:node.querySelector('rect').getBoundingClientRect().toJSON(),
+            text:[...node.querySelectorAll('text')].map(t => ({text:t.textContent, box:t.getBoundingClientRect().toJSON(), size:parseFloat(getComputedStyle(t).fontSize)*t.getScreenCTM().a}))
+          })).sort((a,b) => a.box.y-b.box.y || a.box.x-b.box.x)
+        }));
+        assert.deepEqual(geometry.nodes.map(n => n.id), ['assessment','readiness','pilot','expansion','sustain']);
+        for (const [index, card] of geometry.nodes.entries()) {
+          assert(card.text.length > 0, `${width}: missing text in ${card.id}`);
+          assert(card.box.left >= 0 && card.box.top >= 0 && card.box.right <= geometry.width + 1 && card.box.bottom <= geometry.height + 1, `${width}: card outside iframe: ${card.id}`);
+          for (const t of card.text) {
+            assert(t.box.left >= card.box.left && t.box.right <= card.box.right + 1 && t.box.top >= card.box.top && t.box.bottom <= card.box.bottom + 1, `${width}: clipped ${card.id} ${t.text}`);
+            assert(t.size >= 11, `${width}: small ${card.id} ${t.text}: ${t.size}`);
+          }
+          if (index) {
+            const previous = geometry.nodes[index - 1].box;
+            assert.equal(previous.x, card.box.x);
+            assert(previous.bottom < card.box.top, `${width}: stages must flow vertically`);
+          }
+        }
+        assert(!geometry.overflow, `${width}: iframe overflow`);
+        assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth), `${width}: page overflow`);
+        assert.deepEqual(errors, []);
+        results.push({width, geometry, responsiveReadability:true});
+        fs.writeFileSync(`${output}/results.json`, JSON.stringify(results,null,2));
+      } finally {await context.close();}
+    }
+    for (const width of [1440, 390, 320]) {
+      const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+      const page = await context.newPage();
+      const errors = [];
+      page.on('pageerror', error => errors.push(error.message));
+      const response = await page.goto(`${base}/eldorado-v1/documentation/strategy/roadmap/`, {waitUntil:'networkidle'});
+      assert.equal(response.status(), 200);
+      assert.equal(await page.locator('h1').innerText(), 'Roadmap');
+      const headings = page.locator('.strategy-content > h2');
+      assert.deepEqual((await headings.allTextContents()).map(s => s.replace(/\u200b/g, '')), ['1. Understand code quality and delivery','2. Fix critical readiness gaps','3. Run a bounded pilot','4. Expand only on evidence','5. Sustain and improve']);
+      const text = await page.locator('.strategy-content').innerText();
+      for (const marker of ['baseline findings', 'process map', 'prioritized gaps', 'alongside the pilot', 'Recommended sequence']) assert(text.includes(marker), marker);
+      assert(!text.includes('Supporting gate evidence and hold conditions\n\nThese are'));
+      if (width < 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+      const menu = page.locator('.theme-doc-sidebar-menu .menu__link').filter({visible:true});
+      await menu.first().waitFor({state:'visible'});
+      assert.deepEqual((await menu.allTextContents()).slice(0,2), ['Target','Roadmap']);
+      if (width < 700) await page.getByRole('button', {name:'Close navigation bar'}).click();
+      const panel = page.locator('.archify-panel--story');
+      const iframe = panel.locator(width > 700 ? '.story-desktop' : '.story-mobile');
+      await iframe.scrollIntoViewIfNeeded();
+      const frame = await (await iframe.elementHandle()).contentFrame();
+      await frame.locator('svg[role="img"]').waitFor();
+      const checkCards = async () => {
+        const cards = await frame.locator('svg[role="img"] [data-node-id]').evaluateAll(nodes => nodes.map(node => {
+          const box = node.querySelector('rect').getBoundingClientRect();
+          return {id:node.dataset.nodeId, box:box.toJSON(), text:[...node.querySelectorAll('text')].map(t => ({text:t.textContent, box:t.getBoundingClientRect().toJSON(), size:parseFloat(getComputedStyle(t).fontSize)*t.getScreenCTM().a}))};
+        }));
+        for (const card of cards) for (const t of card.text) {
+          assert(t.box.left >= card.box.left && t.box.right <= card.box.right + 1 && t.box.top >= card.box.top && t.box.bottom <= card.box.bottom + 1, `${width}: clipped ${card.id} ${t.text}`);
+          assert(t.size >= 11, `${width}: small ${card.id} ${t.text}: ${t.size}`);
+        }
+        return cards;
+      };
+      await checkCards();
+      const geometry = await frame.locator('svg[role="img"]').evaluate(svg => ({
+        nodes:[...svg.querySelectorAll('[data-node-id]')].map(n => ({id:n.dataset.nodeId,...n.getBoundingClientRect().toJSON()})).sort((a,b) => a.y-b.y || a.x-b.x),
+        width:innerWidth, height:innerHeight,
+        minLabel:Math.min(...[...svg.querySelectorAll('text[data-node-label]')].map(n => parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a))
+      }));
+      assert.deepEqual(geometry.nodes.map(n => n.id), ['assessment','readiness','pilot','expansion','sustain']);
+      for (const n of geometry.nodes) assert(n.x >= 0 && n.y >= 0 && n.right <= geometry.width + 1 && n.bottom <= geometry.height + 1);
+      assert(geometry.minLabel >= 10, `readable node labels: ${geometry.minLabel}`);
+      for (let i=1; i<geometry.nodes.length; i++) {
+        const a=geometry.nodes[i-1], b=geometry.nodes[i];
+        if(width > 700) {assert.equal(a.y,b.y); assert(a.right < b.x);}
+        else {assert.equal(a.x,b.x); assert(a.bottom < b.y);}
+      }
+      // Portal -> diagram and diagram -> portal are both part of the contract.
+      if (width <= 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+      for (let attempt=0; attempt<3; attempt++) {
+        await page.getByRole('button', {name:/Switch between dark and light mode/}).filter({visible:true}).click();
+        if (await page.locator('html').getAttribute('data-theme') === 'dark') break;
+      }
+      if (width <= 700) await page.getByRole('button', {name:'Close navigation bar'}).click();
+      await frame.waitForFunction(() => document.documentElement.dataset.theme === 'dark');
+      await frame.locator('#btn-theme').click();
+      await page.waitForFunction(() => document.documentElement.dataset.theme === 'light');
+      await frame.locator('#btn-theme').click();
+      await page.waitForFunction(() => document.documentElement.dataset.theme === 'dark');
+      await checkCards();
+      await frame.locator('#btn-theme').click();
+      await page.waitForFunction(() => document.documentElement.dataset.theme === 'light');
+      for (const preset of ['blueprint','classic']) {
+        await frame.locator('#btn-preset').click();
+        await frame.locator(`[data-preset-value="${preset}"]`).click();
+        assert.equal(await frame.locator('html').getAttribute('data-preset'), preset);
+        await checkCards();
+      }
+      await frame.locator('#btn-export').click();
+      const [download] = await Promise.all([page.waitForEvent('download'), frame.locator('[data-format="svg"]').click()]);
+      assert.equal(await download.failure(), null);
+      await download.saveAs(`${output}/${width}.svg`);
+      assert(fs.readFileSync(`${output}/${width}.svg`, 'utf8').includes('Understand today'));
+      assert(fs.readFileSync(`${output}/${width}.svg`, 'utf8').includes('eldorado-roadmap-typography'));
+      for (const id of ['assessment','readiness','pilot','expansion','sustain']) {
+        await frame.locator(`svg[role="img"] [data-node-id="${id}"]`).screenshot({path:`${output}/${width}-${id}-card.png`});
+      }
+      const opener = panel.getByRole('button', {name:/^Expand /});
+      await opener.click();
+      const close = panel.getByRole('button', {name:'Close full-screen diagram', exact:true});
+      await close.waitFor({state:'visible'}); assert.equal(await close.innerText(), '×');
+      await close.click(); assert(await opener.evaluate(n => n === document.activeElement));
+      await opener.click(); await close.waitFor({state:'visible'}); await page.keyboard.press('Escape');
+      await page.waitForFunction(() => !document.querySelector('.archify-panel--story dialog').open);
+      assert(await opener.evaluate(n => n === document.activeElement));
+      assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth));
+      await page.evaluate(() => scrollTo({top:0, behavior:'instant'}));
+      await page.screenshot({path:`${output}/${width}-top.png`});
+      await headings.first().scrollIntoViewIfNeeded();
+      await page.screenshot({path:`${output}/${width}-assessment.png`});
+      await page.screenshot({path:`${output}/${width}-full.png`, fullPage:true});
+      await page.locator('.strategy-content summary').focus();
+      await page.keyboard.press('Enter');
+      await page.waitForFunction(() => document.querySelector('.strategy-content details').open);
+      await page.locator('.strategy-content details p').last().waitFor({state:'visible'});
+      assert((await page.locator('.strategy-content details').innerText()).includes('exact-artifact approvals'));
+      const links = await page.locator('.strategy-content a').evaluateAll(nodes => nodes.filter(n => !n.classList.contains('hash-link')).map(n => n.href));
+      for (const href of [...new Set(links)]) {
+        const r = await page.goto(href, {waitUntil:'networkidle'}); assert.equal(r.status(), 200);
+        assert.equal(page.url(), href);
+      }
+      assert.deepEqual(errors, []);
+      results.push({width, geometry, links:links.length, controls:true, export:true, sidebar:true, visibleAssessment:true});
+      fs.writeFileSync(`${output}/results.json`, JSON.stringify(results,null,2));
+      await context.close();
+    }
+    console.log(`PASS ${results.length} Roadmap viewports: visible stages/outputs, sidebar, diagram geometry, controls, export and links`);
+  } finally {await browser.close();}
+})().catch(error => {console.error(error); process.exitCode = 1;});

scripts/browser/sdlc-cycle.cjs

@@ -0,0 +1,102 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/cycle-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output, {recursive:true});
+  const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args:['--no-sandbox']});
+  const results = [];
+  try {
+    for (const width of [1440, 390, 320]) {
+      const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+      const page = await context.newPage();
+      await page.goto(`${base}/eldorado-v1/documentation/`, {waitUntil:'networkidle'});
+      if (width < 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+      const nav = page.getByRole('link', {name:'Strategy', exact:true}).filter({visible:true});
+      assert((await nav.getAttribute('href')).endsWith('/strategy/target-operating-model/'));
+      await nav.click();
+      await page.waitForURL('**/strategy/target-operating-model/');
+      for (const route of ['target-operating-model/', '']) {
+        await page.goto(`${base}/eldorado-v1/documentation/strategy/${route}`, {waitUntil:'networkidle'});
+        await page.waitForURL('**/strategy/target-operating-model/');
+        if (width < 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+        const menu = page.locator('.theme-doc-sidebar-menu .menu__link').filter({visible:true});
+        await menu.first().waitFor({state:'visible'});
+        assert.deepEqual(await menu.allTextContents(), ['Target', 'Roadmap', 'Skills governance', 'Skills quality', 'Skills adoption', 'Skills Measurement', 'Skills maintenance']);
+        assert((await menu.nth(0).getAttribute('href')).endsWith('/strategy/target-operating-model/'));
+        assert((await menu.nth(1).getAttribute('href')).endsWith('/strategy/roadmap/'));
+        assert.equal(await menu.filter({hasText:/^Target$/}).count(), 1);
+        await page.screenshot({path:`${output}/${width}-${route ? 'target' : 'landing'}-navigation.png`,fullPage:true,animations:'disabled'});
+        await menu.nth(1).click();
+        await page.waitForURL('**/strategy/roadmap/');
+        await page.getByRole('heading', {level:1,name:'Roadmap',exact:true}).waitFor();
+        await page.goBack({waitUntil:'domcontentloaded'});
+        await page.waitForURL('**/strategy/target-operating-model/');
+        const iframe = page.locator(`.archify-panel--story > .story-${width > 700 ? 'desktop' : 'mobile'}`);
+        await iframe.scrollIntoViewIfNeeded();
+        const frame = await (await iframe.elementHandle()).contentFrame();
+        await frame.locator('svg[role="img"]').waitFor();
+        const metrics = await frame.evaluate(() => {
+          const svg = document.querySelector('svg[role="img"]');
+          const labels = [...svg.querySelectorAll('text[data-node-label]')].map(n => ({text:n.textContent,px:parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a}));
+          const edges = [...svg.querySelectorAll('path[data-edge-id^="stage-"]')].map(n => [n.dataset.edgeFrom,n.dataset.edgeTo,n.getAttribute('marker-end')]);
+          const overflow = [...svg.querySelectorAll('[data-node-id]')].flatMap(n => {
+            const box = n.querySelector('rect').getBoundingClientRect();
+            return [...n.querySelectorAll('text')].filter(t => {const b=t.getBoundingClientRect();return b.left<box.left||b.right>box.right||b.top<box.top||b.bottom>box.bottom;}).map(t=>t.textContent);
+          });
+          const relationships = [...svg.querySelectorAll('path[data-edge-id]')].map(n => ({id:n.dataset.edgeId,from:n.dataset.edgeFrom,to:n.dataset.edgeTo,dash:getComputedStyle(n).strokeDasharray,arrow:n.getAttribute('marker-end')}));
+          const nodes = [...svg.querySelectorAll('[data-node-id]')].map(n => {const r=n.querySelector('rect').getBoundingClientRect();return {id:n.dataset.nodeId,x:r.x+r.width/2,y:r.y+r.height/2};});
+          return {labels,edges,overflow,relationships,nodes};
+        });
+        const ids = ['scope','architecture','ui-ux','planning','delivery','uat','security','releases'];
+        assert.deepEqual(metrics.edges.map(e=>e.slice(0,2)), ids.map((id,i)=>[id,ids[(i+1)%ids.length]]));
+        assert(metrics.edges.every(e=>e[2]?.startsWith('url(')), 'all stages must have arrowheads');
+        assert.equal(metrics.nodes.length, 17);
+        assert.equal(metrics.labels.filter(n => n.text === 'AI Agent').length, 8);
+        assert(!metrics.labels.some(n => /code[ -]agent/i.test(n.text)));
+        assert((await page.locator('.strategy-content').innerText()).includes('human-controlled AI Agent'));
+        assert(!metrics.nodes.some(n=>n.id==='humans'));
+        assert.equal(await frame.locator('[data-node-id="agent"] text').allTextContents().then(texts=>texts.includes('Human Controlled')), true);
+        assert.equal(metrics.relationships.length, 24);
+        const governs = metrics.relationships.filter(e=>e.id.startsWith('govern-'));
+        const contributions = metrics.relationships.filter(e=>e.id.startsWith('contribute-'));
+        assert.deepEqual(governs.map(e=>[e.from,e.to]), ids.map(id=>['agent',id]));
+        assert.deepEqual(contributions.map(e=>[e.from,e.to]), ids.map(id=>[`code-${id}`,id]));
+        assert(governs.every(e=>e.dash==='3px, 9px' && e.arrow?.startsWith('url(')));
+        assert(contributions.every(e=>e.dash==='12px, 8px' && e.arrow?.startsWith('url(')));
+        assert(!metrics.relationships.some(e=>e.id==='human-direction' || e.from==='humans' || e.to==='humans'));
+        if (width > 700) {
+          const agent = metrics.nodes.find(n=>n.id==='agent');
+          const phases = metrics.nodes.filter(n=>ids.includes(n.id));
+          for (const axis of ['x','y']) assert(Math.abs(agent[axis]-(Math.min(...phases.map(n=>n[axis]))+Math.max(...phases.map(n=>n[axis])))/2)<1);
+          for (const id of ids) {
+            const phase=phases.find(n=>n.id===id), code=metrics.nodes.find(n=>n.id===`code-${id}`);
+            assert(Math.hypot(code.x-agent.x,code.y-agent.y)>Math.hypot(phase.x-agent.x,phase.y-agent.y));
+          }
+        }
+        assert(metrics.labels.every(n=>n.px>=14), JSON.stringify(metrics.labels));
+        assert.deepEqual(metrics.overflow, []);
+        await frame.locator('#btn-export').click();
+        const [download] = await Promise.all([page.waitForEvent('download'), frame.locator('[data-format="svg"]').click()]);
+        assert.equal(await download.failure(), null);
+        const exportPath = `${output}/${width}-${route ? 'target' : 'landing'}.svg`;
+        await download.saveAs(exportPath);
+        const exported = fs.readFileSync(exportPath, 'utf8');
+        assert.equal((exported.match(/>AI Agent<\/text>/g) || []).length, 8);
+        assert(!/code[ -]agent/i.test(exported));
+        assert(exported.includes('Autonomous agent') && exported.includes('Human Controlled'));
+        assert(!await page.evaluate(()=>document.documentElement.scrollWidth>innerWidth));
+        await page.evaluate(()=>scrollTo({top:0,behavior:'instant'}));
+        await page.waitForFunction(()=>scrollY===0);
+        await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+        await page.screenshot({path:`${output}/${width}-${route ? 'target' : 'landing'}.png`,fullPage:true});
+        results.push({width,route,...metrics});
+        fs.writeFileSync(`${output}/results.json`,JSON.stringify(results,null,2));
+      }
+      await context.close();
+    }
+    assert.equal(results.length,6);
+    console.log('PASS 6 cycle routes/viewports: navigation, sidebar order, exact directed loop, arrowheads, >=14px labels, text bounds and no overflow');
+  } finally {await browser.close();}
+})().catch(error=>{console.error(error);process.exitCode=1;});

scripts/browser/skills-measurement.cjs

@@ -0,0 +1,85 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/measurement-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output, {recursive:true});
+  const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args:['--no-sandbox']});
+  const results = [];
+  try {
+    for (const width of [1440, 390, 320]) {
+      const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+      const page = await context.newPage();
+      const errors = [];
+      page.on('pageerror', error => errors.push(error.message));
+      const response = await page.goto(`${base}/eldorado-v1/documentation/strategy/measurement/`, {waitUntil:'networkidle'});
+      assert.equal(response.status(), 200);
+      assert.equal(await page.locator('h1').innerText(), 'Skills Measurement');
+      assert((await page.title()).startsWith('Skills Measurement |'));
+      assert.equal(await page.locator('.strategy-content details').count(), 0);
+      assert.equal(await page.locator('.strategy-content h2').count(), 4);
+      if (width < 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+      const menu = page.locator('.theme-doc-sidebar-menu .menu__link').filter({visible:true});
+      await menu.first().waitFor({state:'visible'});
+      assert.deepEqual(await menu.allTextContents(), ['Target','Roadmap','Skills governance','Skills quality','Skills adoption','Skills Measurement','Skills maintenance']);
+      if (width < 700) await page.getByRole('button', {name:'Close navigation bar'}).click();
+      const panel = page.locator('.archify-panel--story');
+      const iframe = panel.locator(width > 700 ? '.story-desktop' : '.story-mobile');
+      await iframe.scrollIntoViewIfNeeded();
+      const frame = await (await iframe.elementHandle()).contentFrame();
+      await frame.locator('svg[role="img"]').waitFor();
+      const geometry = await frame.locator('svg[role="img"]').evaluate(svg => {
+        const nodes = [...svg.querySelectorAll('[data-node-id]')].map(n => n.getBoundingClientRect().toJSON());
+        return {nodes, width:innerWidth, height:innerHeight, minLabel:Math.min(...[...svg.querySelectorAll('text[data-node-label]')].map(n => parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a))};
+      });
+      assert.equal(geometry.nodes.length, 6);
+      for (const n of geometry.nodes) assert(n.x >= 0 && n.y >= 0 && n.right <= geometry.width + 1 && n.bottom <= geometry.height + 1);
+      assert(geometry.minLabel >= 10, `readable node labels: ${geometry.minLabel}`);
+      await frame.locator('#btn-theme').click();
+      await page.waitForFunction(() => document.documentElement.dataset.theme === 'dark');
+      await frame.locator('#btn-theme').click();
+      await page.waitForFunction(() => document.documentElement.dataset.theme === 'light');
+      for (const preset of ['blueprint','classic']) {
+        await frame.locator('#btn-preset').click();
+        await frame.locator(`[data-preset-value="${preset}"]`).click();
+        assert.equal(await frame.locator('html').getAttribute('data-preset'), preset);
+      }
+      await frame.locator('#btn-export').click();
+      const [download] = await Promise.all([page.waitForEvent('download'), frame.locator('[data-format="svg"]').click()]);
+      assert.equal(await download.failure(), null);
+      const path = `${output}/${width}.svg`; await download.saveAs(path);
+      const svg = fs.readFileSync(path, 'utf8');
+      assert(svg.includes('Establish baseline') && svg.includes('Ongoing monitoring'));
+      const opener = panel.getByRole('button', {name:/^Expand /});
+      await opener.click();
+      const close = panel.getByRole('button', {name:'Close full-screen diagram', exact:true});
+      await close.waitFor({state:'visible'}); assert.equal(await close.innerText(), '×');
+      await close.click(); assert(await opener.evaluate(n => n === document.activeElement));
+      await opener.click(); await close.waitFor({state:'visible'}); await close.focus(); await page.keyboard.press('Escape');
+      await page.waitForFunction(() => !document.querySelector('.archify-panel--story dialog').open);
+      assert(await opener.evaluate(n => n === document.activeElement));
+      assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth));
+      await page.evaluate(() => scrollTo({top:0, behavior:'instant'}));
+      await page.screenshot({path:`${output}/${width}-top.png`});
+      await page.locator('.strategy-content h2').nth(1).scrollIntoViewIfNeeded();
+      await page.screenshot({path:`${output}/${width}-pilot.png`});
+      await page.screenshot({path:`${output}/${width}-full.png`, fullPage:true});
+      const links = await page.locator('.strategy-content a[href*="measurement-contracts"]').evaluateAll(nodes => nodes.map(n => n.href));
+      for (const href of [...new Set(links)]) {
+        const navigation = await page.goto(href, {waitUntil:'networkidle'});
+        if (navigation) assert.equal(navigation.status(), 200);
+        assert.equal(page.url(), href);
+        if (new URL(href).hash) await page.locator(new URL(href).hash).waitFor({state:'visible'});
+      }
+      assert.equal(await page.locator('.strategy-content h3').count(), 19);
+      assert((await page.locator('.strategy-content').innerText()).includes('9 prototype calculations and 7 unimplemented metrics'));
+      assert(!await page.evaluate(() => document.documentElement.scrollWidth > innerWidth));
+      assert.deepEqual(errors, []);
+      results.push({width, geometry, links:links.length, title:true, sidebar:true, controls:true, export:true, reference:true});
+      fs.writeFileSync(`${output}/results.json`, JSON.stringify(results,null,2));
+      await context.close();
+    }
+    console.log(`PASS ${results.length} Skills Measurement viewports: title/sidebar, open plan, diagram geometry/controls/export, all reference links and no page errors`);
+  } finally {await browser.close();}
+})().catch(error => {console.error(error); process.exitCode = 1;});

scripts/browser/strategy-story.cjs

@@ -0,0 +1,51 @@
+const {chromium}=require('playwright');
+const assert=require('node:assert/strict');
+const fs=require('node:fs');
+(async()=>{
+ const base=process.argv[2]||'http://127.0.0.1:4173';
+ const label=process.argv[3]||'accepted';
+ const browser=await chromium.launch({headless:true,executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE,args:['--no-sandbox']});
+ const results=[];fs.mkdirSync(`.cache/story-${label}`,{recursive:true});
+ try{
+ for(const width of [1440,390]){
+  const context=await browser.newContext({viewport:{width,height:1000}});
+  const page=await context.newPage();
+  for(const id of ['index','target-operating-model','skills-governance','skills-quality','skills-adoption','measurement','skills-maintenance','roadmap']){
+   const response=await page.goto(`${base}/eldorado-v1/documentation/strategy/${id==='index'?'':id+'/'}`,{waitUntil:'networkidle'});assert.equal(response.status(),200);
+   const panel=page.locator('.archify-panel--story');
+   const iframe=panel.locator(width===390?'.story-mobile':'.story-desktop');await iframe.scrollIntoViewIfNeeded();
+   const frame=await (await iframe.elementHandle()).contentFrame();await frame.locator('svg[role="img"]').waitFor();
+   const geometry=await frame.locator('svg[role="img"]').evaluate(svg=>{
+    const nodes=[...svg.querySelectorAll('[data-node-id]')].map(n=>{const r=n.getBoundingClientRect();return {id:n.id,x:r.x,y:r.y,right:r.right,bottom:r.bottom};});
+    return {width:innerWidth,height:innerHeight,nodes,svg:svg.getBoundingClientRect().toJSON(),minLabel:Math.min(...[...svg.querySelectorAll('text[data-node-label]')].map(n=>parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a))};
+   });
+   assert(geometry.nodes.length>=5 && geometry.nodes.length<=(['index','target-operating-model'].includes(id)?18:7),id);
+   for(const n of geometry.nodes) assert(n.x>=0 && n.y>=0 && n.right<=geometry.width+1 && n.bottom<=geometry.height+1,`${id} ${width} clipped ${JSON.stringify(n)} / ${geometry.height}`);
+   const data=await page.locator('.strategy-content').evaluate(el=>({words:el.innerText.trim().split(/\s+/).length,overflow:document.documentElement.scrollWidth>innerWidth,openDetails:el.querySelectorAll('details[open]').length}));
+   assert(data.words<=(id==='measurement'?1100:id==='roadmap'?600:200),id);assert(!data.overflow,id);assert.equal(data.openDetails,0,id);
+   await page.evaluate(()=>scrollTo({top:0,behavior:'instant'}));await page.screenshot({path:`.cache/story-${label}/${width}-${id}.png`,fullPage:true});
+   const opener=panel.getByRole('button',{name:/^Expand /});await opener.click();
+   const close=panel.getByRole('button',{name:'Close full-screen diagram',exact:true});await close.waitFor({state:'visible'});
+   assert.equal(await close.innerText(),'×');assert(await close.evaluate(n=>n===document.activeElement));
+   const box=await close.boundingBox();assert.equal(box.width,44);assert.equal(box.height,44);
+   await close.click();await panel.locator('dialog iframe').waitFor({state:'detached'});assert(await opener.evaluate(n=>n===document.activeElement));
+   await opener.click();await close.waitFor({state:'visible'});await page.keyboard.press('Escape');await page.waitForFunction(()=>!document.querySelector('.archify-panel--story dialog').open);
+   // Native close clears open before the queued React onClose restores focus.
+   // Wait for its unmount before focusing the next keyboard interaction target.
+   await panel.locator('dialog iframe').waitFor({state:'detached'});assert(await opener.evaluate(n=>n===document.activeElement));
+   if(id !== 'measurement') {
+   const summary=page.locator('.strategy-content > details > summary').first();
+   await summary.focus();await page.keyboard.press('Enter');
+   await page.waitForFunction(()=>document.querySelector('.strategy-content > details').open);
+   await page.keyboard.press('Enter');
+   }
+   results.push({id,width,...data,geometry,modalClick:true,modalEscape:true,focusRestored:true,details:id!=='measurement'});fs.writeFileSync(`.cache/story-${label}/results.json`,JSON.stringify(results,null,2));
+  }
+  await page.goto(`${base}/eldorado-v1/documentation/strategy/reference/measurement-contracts/#validated-task-success`,{waitUntil:'networkidle'});
+  const heading=page.locator('#validated-task-success');await heading.waitFor({state:'visible'});
+  assert.equal(await page.locator('.strategy-content details').count(),0,'reference is directly readable');
+  await context.close();
+ }
+ console.log(`PASS ${results.length} desktop/mobile cases, clipping, default word count, details, modal click/Escape/focus and KPI hash navigation`);
+ } finally {await browser.close();}
+})().catch(e=>{console.error(e);process.exitCode=1});

scripts/browser/target-midpoints.cjs

@@ -0,0 +1,185 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const {pathToFileURL} = require('node:url');
+const {resolve} = require('node:path');
+
+// Inspect the rendered paths, not just the authored JSON. Also runs on downloaded SVGs.
+function inspect({mobile}) {
+  const svg = document.querySelector('svg[role="img"]');
+  const point = (element, p) => new DOMPoint(p.x, p.y).matrixTransform(element.getCTM());
+  const boxes = [...svg.querySelectorAll('[data-node-id]')].map(node => {
+    const rect = node.querySelector('rect'), box = rect.getBBox();
+    const a = point(rect, box), b = point(rect, {x:box.x + box.width, y:box.y + box.height});
+    return {id:node.dataset.nodeId, x:a.x, y:a.y, right:b.x, bottom:b.y, cx:(a.x+b.x)/2, cy:(a.y+b.y)/2};
+  });
+  const agent = boxes.find(n => n.id === 'agent');
+  const errors = [], endpoints = {};
+  const phases = ['scope','architecture','ui-ux','planning','delivery','uat','security','releases'];
+  const edges = [...svg.querySelectorAll('path[data-edge-id]')];
+  if (edges.length !== 24) errors.push(`expected 24 graph edges, got ${edges.length}`);
+  phases.forEach((phase, index) => {
+    for (const [id, from, to] of [
+      [`govern-${phase}`,'agent',phase],
+      [`stage-${index+1}`,phase,phases[(index+1)%phases.length]],
+      [`contribute-${phase}`,`code-${phase}`,phase],
+    ]) {
+      const matches = edges.filter(p => p.dataset.edgeId === id);
+      if (matches.length !== 1 || matches[0].dataset.edgeFrom !== from || matches[0].dataset.edgeTo !== to || !matches[0].getAttribute('marker-end') || matches[0].getAttribute('marker-start')) errors.push(`${id}: graph or direction changed`);
+    }
+  });
+  // CTMs put boxes and paths in the same viewport coordinate system.
+  // 0.01 covers floating-point error against bounds, NOT source spreading:
+  // shared endpoints below must be exactly identical.
+  const paths = [...svg.querySelectorAll('path[data-edge-id^="govern-"]')];
+  if (paths.length !== 8) errors.push(`expected eight governance paths, got ${paths.length}`);
+  for (const path of paths) {
+    const id = path.dataset.edgeTo;
+    const side = mobile ? 'left' : ['scope','architecture','releases'].includes(id) ? 'top'
+      : ['planning','delivery','uat'].includes(id) ? 'bottom' : id === 'security' ? 'left' : 'right';
+    const expected = {top:[agent.cx,agent.y],bottom:[agent.cx,agent.bottom],left:[agent.x,agent.cy],right:[agent.right,agent.cy]}[side];
+    const start = point(path,path.getPointAtLength(0));
+    endpoints[id] = [start.x,start.y];
+    if (Math.hypot(start.x-expected[0],start.y-expected[1]) > 0.01) errors.push(`${id}: wrong ${side} midpoint`);
+    const length = path.getTotalLength();
+    const target = boxes.find(n => n.id === id);
+    const destination = mobile ? [target.x,target.cy]
+      : side === 'top' ? [target.cx,target.bottom] : side === 'bottom' ? [target.cx,target.y]
+      : side === 'left' ? [target.right,target.cy] : [target.x,target.cy];
+    const end = point(path,path.getPointAtLength(length));
+    if (Math.hypot(end.x-destination[0],end.y-destination[1]) > 0.01) errors.push(`${id}: destination midpoint changed`);
+    for (let distance = 1; distance < length; distance += 2) {
+      const p = point(path,path.getPointAtLength(distance));
+      for (const box of boxes) {
+        if (box.id === id) continue;
+        if (p.x > box.x+0.1 && p.x < box.right-0.1 && p.y > box.y+0.1 && p.y < box.bottom-0.1) {
+          errors.push(`${id}: crosses ${box.id}`); break;
+        }
+      }
+    }
+  }
+  for (const group of mobile ? [phases] : [['scope','architecture','releases'],['planning','delivery','uat']]) {
+    const first = endpoints[group[0]];
+    if (group.some(id => !endpoints[id] || endpoints[id][0] !== first?.[0] || endpoints[id][1] !== first?.[1])) errors.push(`source-port spreading: ${group.join(',')}`);
+  }
+  const lifecycle = [];
+  if (!mobile) {
+    for (const [id, x, y1, y2, peer] of [
+      ['stage-2',850,262.5,457.5,'architecture'], ['stage-3',850,532.5,727.5,'planning'],
+      ['stage-6',350,727.5,532.5,'uat'], ['stage-7',350,457.5,262.5,'releases'],
+    ]) {
+      const path = svg.querySelector(`path[data-edge-id="${id}"]`);
+      if (!path) {errors.push(`${id}: missing lifecycle path`); continue;}
+      const length = path.getTotalLength();
+      const a = path.getPointAtLength(0), b = path.getPointAtLength(length);
+      // Local SVG coordinates test exact offsets; transformed coordinates test
+      // node clearance at any inline/fullscreen/export scale.
+      if (Math.hypot(a.x-x,a.y-y1) > 0.01 || Math.hypot(b.x-x,b.y-y2) > 0.01) errors.push(`${id}: wrong shifted endpoints`);
+      if (!path.getAttribute('marker-end')) errors.push(`${id}: missing direction`);
+      const governance = paths.find(p => p.dataset.edgeTo === peer);
+      if (!governance) {errors.push(`${id}: missing governance peer ${peer}`); continue;}
+      const end = governance.getPointAtLength(governance.getTotalLength());
+      if (Math.abs(Math.abs(a.x-end.x)-20) > 0.01) errors.push(`${id}: wrong attachment clearance`);
+      for (let distance = 1; distance < length; distance += 2) {
+        const local = path.getPointAtLength(distance), p = point(path,local);
+        if (Math.abs(local.x-x) > 0.01) errors.push(`${id}: channel not straight`);
+        for (const box of boxes) {
+          if (p.x > box.x+0.1 && p.x < box.right-0.1 && p.y > box.y+0.1 && p.y < box.bottom-0.1) errors.push(`${id}: crosses ${box.id}`);
+        }
+      }
+      // No positive-length collinear overlap with ANY governance segment.
+      // Perpendicular crossings remain legitimate in this fixed radial layout.
+      for (const govern of paths) {
+        const total = govern.getTotalLength();
+        for (let d = 0; d < total - 1; d += 1) {
+          const p = govern.getPointAtLength(d), q = govern.getPointAtLength(d+1);
+          if (Math.abs(p.x-x) < 0.01 && Math.abs(q.x-x) < 0.01 && Math.min(Math.max(p.y,q.y),Math.max(y1,y2)) - Math.max(Math.min(p.y,q.y),Math.min(y1,y2)) > 0.01) errors.push(`${id}: overlaps ${govern.dataset.edgeId}`);
+        }
+      }
+      lifecycle.push({id,start:[a.x,a.y],end:[b.x,b.y],attachmentClearance:Math.abs(a.x-end.x)});
+    }
+  }
+  return {errors:[...new Set(errors)],endpoints,lifecycle};
+}
+
+function inspectTypography({mobile}) {
+  const errors = [];
+  const nodes = [...document.querySelectorAll('[data-node-id]')].map(node => {
+    const box = node.querySelector('rect').getBoundingClientRect();
+    const texts = [...node.querySelectorAll(':scope > text')];
+    const bounds = texts.map(text => text.getBoundingClientRect());
+    texts.forEach((text, index) => {
+      const expected = text.hasAttribute('data-node-label') ? (mobile ? 38 : 27) : (mobile ? 28 : 21);
+      if (parseFloat(getComputedStyle(text).fontSize) !== expected) errors.push(`${node.id}: wrong text size`);
+      const b = bounds[index];
+      if (b.width <= 0 || b.height <= 0 || b.x < box.x - 1 || b.right > box.right + 1 || b.y < box.y - 1 || b.bottom > box.bottom + 1) errors.push(`${node.id}: text outside node`);
+    });
+    if (bounds.length === 2 && bounds[0].bottom > bounds[1].top) errors.push(`${node.id}: title/subtitle overlap`);
+    return {id:node.id, text:texts.map(t => t.textContent), sizes:texts.map(t => getComputedStyle(t).fontSize)};
+  });
+  if (nodes.length !== 17) errors.push(`expected 17 nodes, got ${nodes.length}`);
+  return {errors, nodes};
+}
+
+(async () => {
+  const base = process.argv[2] || 'http://127.0.0.1:4173';
+  const output = `.cache/midpoints-${process.argv[3] || 'local'}`;
+  fs.mkdirSync(output,{recursive:true});
+  const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE,args:['--no-sandbox']});
+  const results = [];
+  try {
+    for (const width of [1440,390,320]) {
+      const page = await browser.newPage({viewport:{width,height:1000}});
+      await page.goto(`${base}/eldorado-v1/documentation/strategy/target-operating-model/`,{waitUntil:'networkidle'});
+      const panel = page.locator('[data-diagram="strategy-target"]');
+      const iframe = panel.locator(`:scope > .story-${width > 700 ? 'desktop' : 'mobile'}`);
+      await iframe.scrollIntoViewIfNeeded();
+      const frame = await (await iframe.elementHandle()).contentFrame();
+      await frame.locator('svg[role="img"]').waitFor();
+      const inline = await frame.evaluate(inspect,{mobile:width < 700});
+      assert.deepEqual(inline.errors,[]);
+      await page.screenshot({path:`${output}/${width}-inline.png`,fullPage:true});
+      const exported = [];
+      for (const theme of ['light','dark']) {
+        if (await frame.locator('html').getAttribute('data-theme') !== theme) await frame.locator('#btn-theme').click();
+        await frame.waitForFunction(t => document.documentElement.dataset.theme === t, theme);
+        await frame.locator('#btn-export').click();
+        const [download] = await Promise.all([page.waitForEvent('download'),frame.locator('[data-format="svg"]').click()]);
+        assert.equal(await download.failure(),null);
+        const path = `${output}/${width}-${theme}.svg`;
+        await download.saveAs(path);
+        // A separate SVG document has no viewer CSS to hide export regressions.
+        const standalone = await browser.newPage({viewport:{width:1440,height:1100},colorScheme:theme});
+        await standalone.goto(pathToFileURL(resolve(path)).href);
+        assert.equal(await standalone.evaluate(() => document.contentType),'image/svg+xml');
+        await standalone.evaluate(() => document.fonts.ready);
+        const geometry = await standalone.evaluate(inspect,{mobile:width < 700});
+        const typography = await standalone.evaluate(inspectTypography,{mobile:width < 700});
+        assert.deepEqual(geometry.errors,[]);
+        assert.deepEqual(typography.errors,[]);
+        const background = await standalone.locator('rect.c-bg-rect').evaluate(n => getComputedStyle(n).fill);
+        if (exported.length) assert.notEqual(background,exported[0].background,'standalone theme must change');
+        // CDP captures SVG documents without Playwright's HTML-body screenshot wait.
+        const client = await standalone.context().newCDPSession(standalone);
+        const size = await standalone.evaluate(() => ({width:document.documentElement.width.baseVal.value,height:document.documentElement.height.baseVal.value}));
+        const image = await client.send('Page.captureScreenshot',{format:'png',captureBeyondViewport:true,clip:{x:0,y:0,...size,scale:1}});
+        fs.writeFileSync(`${output}/${width}-${theme}-standalone.png`,Buffer.from(image.data,'base64'));
+        exported.push({theme,background,geometry,typography});
+        await standalone.close();
+      }
+      await panel.getByRole('button',{name:/^Expand /}).click();
+      const full = await (await panel.locator('dialog iframe').elementHandle()).contentFrame();
+      await full.locator('svg[role="img"]').waitFor();
+      // The existing fullscreen viewer always opens the radial desktop source.
+      const fullscreen = await full.evaluate(inspect,{mobile:false});
+      assert.deepEqual(fullscreen.errors,[]);
+      await page.screenshot({path:`${output}/${width}-fullscreen.png`});
+      await panel.getByRole('button',{name:'Close full-screen diagram'}).click();
+      results.push({width,inline,exported,fullscreen});
+      fs.writeFileSync(`${output}/results.json`,JSON.stringify(results,null,2));
+      await page.close();
+    }
+    assert.equal(results.length,3);
+    console.log('PASS midpoint geometry: 3 viewports × inline/fullscreen; standalone SVG geometry and typography in light/dark');
+  } finally {await browser.close();}
+})().catch(error => {console.error(error);process.exitCode=1;});

scripts/build-diagrams.mjs

@@ -1,8 +1,14 @@
-import {readdirSync, readFileSync, mkdirSync, copyFileSync, renameSync, rmSync} from 'node:fs';
+import {readdirSync, readFileSync, writeFileSync, mkdirSync, copyFileSync, renameSync, rmSync} from 'node:fs';
 import {join} from 'node:path';
 import {execFileSync} from 'node:child_process';
+import {roadmapViewer} from './roadmap-viewer.mjs';
+import {targetRouting} from './target-routing.mjs';
+import {createHash} from 'node:crypto';
 const cli = 'vendor/archify/bin/archify.mjs';
 const types = new Set(['architecture','workflow','sequence','dataflow','lifecycle']);
+const inlineStyles = readFileSync(new URL('./inline-viewer.css', import.meta.url), 'utf8');
+const cycleStyles = readFileSync(new URL('./cycle-viewer.css', import.meta.url), 'utf8');
+const themeBridge = readFileSync(new URL('./viewer-theme-bridge.js', import.meta.url), 'utf8');
 // This directory is generated-only and ignored by Git. Remove stale artifacts.
 rmSync('static/diagrams', {recursive: true, force: true});
 mkdirSync('static/diagrams', {recursive: true});
@@ -20,11 +26,58 @@ for (const file of readdirSync('diagrams').sort()) {
   mkdirSync(`static/diagrams/${name}`, {recursive: true});
   if (spec.diagram_type !== type || spec.meta.output !== output) throw new Error(`Diagram type/output mismatch: ${file}`);
   const run = args => execFileSync(process.execPath,[cli,...args],{stdio:'inherit',env:{...process.env,ARCHIFY_UPDATE_CHECK_DISABLED:'1'}});
-  run(['validate',type,input,'--quality','showcase','--json']);
+  const roadmap = ['strategy-roadmap', 'strategy-roadmap-mobile'].includes(name);
-  run(['deliver',type,input,output,'--quality','showcase','--json']);
+  if (roadmap) {
-  run(['check',output,'--json','--require-provenance']);
+    // Native renderer validates schema and compiles layout. Check readability
-  renameSync(`static/diagrams/${name}/index.delivery.json`, `.cache/archify/${name}.delivery.json`);
+    // after multiline typography, not upstream's single-line preview.
-  copyFileSync(input,`static/diagrams/${name}.json`);
+    execFileSync(process.execPath, ['vendor/archify/renderers/workflow/render-workflow.mjs', input, output], {stdio:'inherit', env:{...process.env, ARCHIFY_UPDATE_CHECK_DISABLED:'1'}});
+    writeFileSync(output, roadmapViewer(readFileSync(output, 'utf8'), spec));
+    run(['check',output,'--json']);
+  } else {
+    run(['validate',type,input,'--quality','showcase','--json']);
+    run(['deliver',type,input,output,'--quality','showcase','--json']);
+    run(['check',output,'--json','--require-provenance']);
+  }
+  // Verify the upstream artifact first, then add the scoped portal integration.
+  let viewer = readFileSync(output, 'utf8');
+  if (name === 'strategy-target') viewer = targetRouting(viewer);
+  // Upstream intentionally disables preset selection in gallery embeds. Enable
+  // only those two guards; fail closed if a future vendor update changes them.
+  const start = viewer.indexOf('Archify.preset = (function () {');
+  const end = viewer.indexOf('Archify.theme = (function () {', start);
+  const preset = viewer.slice(start, end);
+  const guard = "if (html.getAttribute('data-embed') === 'true') return false;";
+  if (start < 0 || end < start || preset.split(guard).length !== 3) throw new Error('Archify preset integration drift');
+  viewer = viewer.slice(0, start) + preset.replaceAll(guard, '') + viewer.slice(end);
+  if (!viewer.includes('</head>') || !viewer.includes('</body>')) throw new Error(`Invalid viewer: ${output}`);
+  const storyStyles = ['strategy-target', 'strategy-target-mobile'].includes(name)
+    ? `${name === 'strategy-target' ? ':root {--cycle-label: 27px; --cycle-detail: 21px;}' : ':root {--cycle-label: 38px; --cycle-detail: 28px;}'}${cycleStyles}` : '';
+  if (storyStyles) {
+    // Keep typography and relationship styles inside exported standalone SVGs.
+    const diagramRoot = /<svg\b[^>]*role="img"[^>]*>/g;
+    if ([...viewer.matchAll(diagramRoot)].length !== 1) throw new Error('Cycle SVG integration drift');
+    const exportStyles = storyStyles.replaceAll(':root', 'svg[role="img"]').replaceAll('.diagram-container > svg', 'svg[role="img"]');
+    viewer = viewer.replace(diagramRoot, root => `${root}<style id="eldorado-cycle-export">${exportStyles}</style>`);
+  }
+  writeFileSync(output, viewer.replace('</head>', `<style id="eldorado-inline-controls">${inlineStyles}</style><style id="eldorado-cycle-labels">${storyStyles}</style></head>`)
+    .replace('</body>', `<script>${themeBridge}</script></body>`));
+  if (roadmap) {
+    // This is a portal receipt, not upstream deliver provenance: formatting
+    // happens between the native schema/layout compiler and artifact checker.
+    const hash = path => createHash('sha256').update(readFileSync(path)).digest('hex');
+    const checked = JSON.parse(execFileSync(process.execPath, [cli,'check',output,'--json'], {encoding:'utf8', env:{...process.env, ARCHIFY_UPDATE_CHECK_DISABLED:'1'}}));
+    if (!checked.ok || checked.composition?.status !== 'pass') throw new Error('Roadmap final artifact failed');
+    writeFileSync(`.cache/archify/${name}.portal.json`, JSON.stringify({source:input, sourceSha256:hash(input), adapterSha256:hash('scripts/roadmap-viewer.mjs'), artifactSha256:hash(output), checker:checked}, null, 2));
+  } else {
+    renameSync(`static/diagrams/${name}/index.delivery.json`, `.cache/archify/${name}.delivery.json`);
+    if (name === 'strategy-target') {
+      // The native receipt describes the PRE-integration artifact only.
+      const hash = path => createHash('sha256').update(readFileSync(path)).digest('hex');
+      const checked = JSON.parse(execFileSync(process.execPath, [cli,'check',output,'--json'], {encoding:'utf8', env:{...process.env, ARCHIFY_UPDATE_CHECK_DISABLED:'1'}}));
+      if (!checked.ok || checked.composition?.status !== 'pass') throw new Error('Target final artifact failed');
+      writeFileSync(`.cache/archify/${name}.portal.json`, JSON.stringify({source:input, sourceSha256:hash(input), adapterSha256:hash('scripts/target-routing.mjs'), artifactSha256:hash(output), nativeReceiptScope:'before portal integration', checker:checked}, null, 2));
+    }
+  }
 }
 copyFileSync('vendor/archify/LICENSE','static/diagrams/ARCHIFY-LICENSE.txt');
 copyFileSync('vendor/archify/THIRD_PARTY_NOTICES.md','static/diagrams/THIRD-PARTY-NOTICES.md');

scripts/cycle-viewer.css

@@ -0,0 +1,20 @@
+/* Readable lifecycle story at inline scale, isolated from other diagrams. */
+.diagram-container > svg text {
+  font-family: Arial, sans-serif;
+  letter-spacing: 0;
+  font-size: 30px;
+}
+.diagram-container > svg text[data-node-label] {
+  font-size: var(--cycle-label);
+  transform: translateY(-6px);
+}
+/* Export strips data-detail; node ownership and the muted class survive. */
+.diagram-container > svg [data-node-id] > text.t-muted {
+  font-size: var(--cycle-detail);
+  transform: translateY(16px);
+}
+/* Edge semantics stay in SVG metadata; one page legend avoids repeated labels. */
+.diagram-container > svg g[data-edge-id] {display: none;}
+.diagram-container > svg path[data-edge-id^="stage-"] {stroke-width: 2.5;}
+.diagram-container > svg path[data-edge-id^="govern-"] {stroke-dasharray: 3 9; stroke-width: 3;}
+.diagram-container > svg path[data-edge-id^="contribute-"] {stroke-dasharray: 12 8; stroke-width: 3;}

scripts/fixtures/ai-kpi-synthetic.json

@@ -0,0 +1,37 @@
+{
+  "synthetic": true,
+  "label": "SYNTHETIC — illustrative, not Eldorado observations",
+  "schema_version": "1.0",
+  "start": "2026-01-01T00:00:00Z",
+  "end": "2026-01-05T00:00:00Z",
+  "as_of": "2026-01-05T00:00:00Z",
+  "events": [
+    {"producer":"synthetic","event_id":"sa","task_id":"accepted","event_type":"task.started","occurred_at":"2026-01-01T00:00:00Z","received_at":"2026-01-01T00:00:00Z","horizon_hours":48},
+    {"producer":"synthetic","event_id":"sf","task_id":"failed","event_type":"task.started","occurred_at":"2026-01-01T00:00:00Z","received_at":"2026-01-01T00:00:00Z","horizon_hours":48},
+    {"producer":"synthetic","event_id":"sb","task_id":"abandoned","event_type":"task.started","occurred_at":"2026-01-01T00:00:00Z","received_at":"2026-01-01T00:00:00Z","horizon_hours":48},
+    {"producer":"synthetic","event_id":"su","task_id":"unknown","event_type":"task.started","occurred_at":"2026-01-01T00:00:00Z","received_at":"2026-01-01T00:00:00Z","horizon_hours":48},
+    {"producer":"synthetic","event_id":"a","task_id":"accepted","event_type":"task.accepted","occurred_at":"2026-01-02T00:00:00Z","received_at":"2026-01-02T00:00:00Z","independent_evidence":true},
+    {"producer":"synthetic","event_id":"f","task_id":"failed","event_type":"task.failed","occurred_at":"2026-01-02T00:00:00Z","received_at":"2026-01-02T00:00:00Z"},
+    {"producer":"synthetic","event_id":"b","task_id":"abandoned","event_type":"task.abandoned","occurred_at":"2026-01-02T00:00:00Z","received_at":"2026-01-02T00:00:00Z"},
+    {"producer":"synthetic","event_id":"new","task_id":"immature","event_type":"task.started","occurred_at":"2026-01-04T00:00:00Z","received_at":"2026-01-04T00:00:00Z","horizon_hours":48}
+  ],
+  "selection": [
+    {"id":"trial-a","relevant":true,"activated":true},
+    {"id":"trial-b","relevant":false,"activated":true},
+    {"id":"trial-c","relevant":true,"activated":false},
+    {"id":"trial-d","relevant":null,"activated":null}
+  ],
+  "deployments": [{"service_id":"service-a","deployment_id":"deploy-a","environment":"production","production_effect":true,"succeeded":true,"intervention":true,"planned":false,"incident_id":"incident-a","deployed_at":"2026-01-02T00:00:00Z","followup_hours":24}],
+  "changes": [{"id":"change-a","accepted_at":"2026-01-01T00:00:00Z","followup_hours":48,"linkage_complete":true}],
+  "defects": [{"id":"defect-a","change_id":"change-a","confirmed":true,"detected_at":"2026-01-02T00:00:00Z"}],
+  "attempts": [{"id":"attempt-a","actual_effect":false,"blocked":true},{"id":"attempt-b","actual_effect":true,"blocked":false}],
+  "costs": [{"id":"cost-a","task_id":"accepted","amount":40,"currency":"EUR","bucket":"compute"},{"id":"cost-f","task_id":"failed","amount":20,"currency":"EUR","bucket":"compute"}],
+  "currency":"EUR",
+  "expected_cost_buckets":["compute","licenses","tooling","review","rework"],
+  "survey": {"invited":10,"responses":[{"id":"token-a","score":4},{"id":"token-b","score":5},{"id":"token-c","score":3},{"id":"token-d","score":4},{"id":"token-e","score":4}]},
+  "associations": [
+    {"task_id":"accepted","skill_id":"synthetic-skill","revision":"revision-a","client":"Cline"},
+    {"task_id":"accepted","skill_id":"synthetic-skill","revision":"revision-b","client":"Cline"},
+    {"task_id":"unknown","skill_id":"synthetic-skill","revision":null,"client":"Claude Code","missing_reason":"not_exposed"}
+  ]
+}

scripts/inline-viewer.css

@@ -0,0 +1,33 @@
+/* Portal integration only; keep the upstream renderer and export code pinned. */
+html[data-embed="true"] .toolbar {
+  display: flex !important;
+  position: relative;
+  inset: auto;
+  justify-content: flex-end;
+  height: 52px;
+  padding: 4px 8px;
+  box-sizing: border-box;
+  background: var(--bg);
+}
+html[data-embed="true"] #btn-present,
+html[data-embed="true"] #btn-motion { display: none !important; }
+html[data-embed="true"] .diagram-container > svg {
+  max-height: calc(100vh - 68px);
+}
+html[data-embed="true"] .toolbar .preset-menu,
+html[data-embed="true"] .toolbar .export-menu {
+  position: fixed;
+  top: 52px;
+  left: auto;
+  right: 0;
+  width: min(320px, 100vw);
+  max-width: 100vw;
+  max-height: calc(100vh - 52px);
+  overflow-y: auto;
+  box-sizing: border-box;
+}
+/* Keep the preset menu in the iframe viewport without moving its capsule. */
+html[data-embed="true"] .toolbar .export-wrap { position: static; }
+html[data-embed="true"] .toolbar .export-menu { position: absolute; top: 100%; }
+html[data-embed="true"] .toolbar .preset-menu button,
+html[data-embed="true"] .toolbar .export-menu button { min-height: 44px; }

scripts/inline-viewer.test.mjs

@@ -0,0 +1,51 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {runInNewContext} from 'node:vm';
+const read = path => readFileSync(path, 'utf8');
+
+test('both story layouts permit downloads without weakening origin isolation', () => {
+  const wrapper = read('src/components/ArchifyDiagram/index.tsx');
+  for (const layout of ['desktop', 'mobile']) {
+    const iframe = wrapper.split(`<iframe className="story-${layout}"`)[1].split(' />')[0];
+    assert(iframe.includes('sandbox="allow-scripts allow-downloads"'));
+    assert(iframe.includes('?embed=1&theme=${initialTheme.current}'));
+  }
+  assert(!wrapper.includes('allow-same-origin'));
+});
+
+test('build adds maintained embed-only controls without changing pinned vendor', () => {
+  const build = read('scripts/build-diagrams.mjs');
+  assert(build.includes("new URL('./inline-viewer.css', import.meta.url)"));
+  assert(build.includes('eldorado-inline-controls'));
+  const css = read('scripts/inline-viewer.css');
+  assert(css.includes('html[data-embed="true"] .toolbar'));
+  assert(css.includes('display: flex !important'));
+  assert(css.includes('position: relative'));
+  assert(css.includes('max-height: calc(100vh - 52px)'));
+});
+
+test('theme bridge rejects unrelated senders/values and never echoes parent updates', () => {
+  const root = {dataset:{theme:'light'}};
+  let receive, observerCallback, mutations = 0;
+  const messages = [];
+  const parent = {postMessage: message => messages.push(message)};
+  const window = {parent, addEventListener: (type, callback) => {receive = callback;}};
+  const button = {click: () => {root.dataset.theme = root.dataset.theme === 'light' ? 'dark' : 'light'; mutations++;}};
+  class MutationObserver {
+    constructor(callback) {observerCallback = callback;}
+    observe() {}
+    takeRecords() {mutations = 0;}
+  }
+  runInNewContext(read('scripts/viewer-theme-bridge.js'), {window, document:{documentElement:root, getElementById: () => button}, MutationObserver});
+  const send = (source, theme) => receive({source, data:{type:'eldorado:set-theme', theme}});
+  send({}, 'dark'); send(parent, 'invalid');
+  assert.equal(root.dataset.theme, 'light');
+  send(parent, 'dark');
+  assert.equal(root.dataset.theme, 'dark');
+  assert.equal(mutations, 0);
+  assert.equal(messages.length, 0);
+  button.click(); observerCallback();
+  assert.equal(messages.length, 1);
+  assert.equal(messages[0].theme, 'light');
+});

scripts/portal.test.mjs

@@ -20,6 +20,7 @@ test('real build removes stale diagrams, keeps receipts private and rejects coll
     writeSpec('old');
     let result = build(); assert.equal(result.status,0,result.stderr);
     assert(existsSync(join(root,'static/diagrams/old/index.html')));
+    assert(!existsSync(join(root,'static/diagrams/old.json')));
     assert(!readdirSync(join(root,'static/diagrams'),{recursive:true}).some(p=>p.endsWith('.delivery.json')));
     unlinkSync(join(root,'diagrams/old.architecture.json'));
     writeSpec('new');
@@ -42,7 +43,7 @@ test('three independent section menus and Structure first', () => {
   for (const section of ['Organization', 'Strategy', 'Contribution']) assert(config.includes(`label: '${section}'`));
   assert(!config.includes("label: 'Documentation'"));
   assert(!config.includes("label: 'Maintainer guide'"));
-  assert(read('sidebars/organization.ts').includes("organizationSidebar: ['structure']"));
+  assert(read('sidebars/organization.ts').includes("organizationSidebar: ['structure', 'collaboration', 'sdlc']"));
   for (const section of ['organization','strategy','contribution']) assert(config.includes(`id: '${section}'`));
 });
 test('Archify is pinned, licensed and rebuilt, not a remote embed', () => {
@@ -58,6 +59,81 @@ test('Archify is pinned, licensed and rebuilt, not a remote embed', () => {
   assert(wrapper.includes('showModal()') && wrapper.includes('onClose='));
   assert(!wrapper.includes('target="_blank"'));
   assert(wrapper.includes('Close full-screen diagram'));
+  assert(!wrapper.includes('JSON source') && !wrapper.includes('download>'));
+  assert(!wrapper.includes('Open full viewer'));
+  assert(wrapper.includes('aria-label={`Expand ${title}`}'));
+  assert(wrapper.includes('aria-hidden="true"'));
+  assert(read('src/css/custom.css').includes('justify-content: flex-end'));
+});
+test('full-screen close is cross-only with an accessible name and square touch target', () => {
+  const wrapper = read('src/components/ArchifyDiagram/index.tsx');
+  const button = wrapper.match(/<button[^>]*aria-label="Close full-screen diagram"[^>]*>(.*?)<\/button>/s);
+  assert(button, 'close button retains its accessible name');
+  assert.equal(button[1], '<span aria-hidden="true">×</span>');
+  assert(button[0].includes('autoFocus') && button[0].includes('onClick={close}'));
+  const styles = read('src/css/custom.css').match(/\.archify-modal-toolbar button \{([^}]+)\}/)[1];
+  assert(styles.includes('width: 44px') && styles.includes('height: 44px'));
+  assert(styles.includes('padding: 0') && styles.includes('flex-shrink: 0'));
+});
+test('Product owns two teams and Technology owns five separate teams', () => {
+  const spec = JSON.parse(read('diagrams/organization-structure.architecture.json'));
+  const page = read('docs/organization/structure.mdx');
+  assert(!/shared-delivery|squad-/i.test(JSON.stringify(spec)));
+  assert(!/shared squads|share a delivery structure|cross-functional teams/i.test(page));
+  for (const [dept, count, heading, next] of [['product',2,'Product','Technology'],['technology',5,'Technology','Operations']]) {
+    const teams = spec.components.filter(n => n.id.startsWith(`${dept}-team-`));
+    assert.equal(teams.length, count);
+    const section = page.split(`### ${heading}\n`)[1].split(`### ${next}\n`)[0];
+    const rows = section.split('\n').filter(l => l.startsWith('| ')).slice(2);
+    assert.equal(rows.length, count);
+    for (const team of teams) {
+      const parents = spec.connections.filter(e => e.to === team.id);
+      assert.deepEqual(parents.map(e => e.from), [dept]);
+      assert(rows.some(row => row.startsWith(`| ${team.label} |`)));
+    }
+  }
+});
+test('departments share one row and each has delivery teams below it', () => {
+  const spec = JSON.parse(read('diagrams/organization-structure.architecture.json'));
+  const page = read('docs/organization/structure.mdx');
+  const departments = ['product', 'technology', 'operations', 'marketing', 'finance', 'people'];
+  const nodes = new Map(spec.components.map(n => [n.id, n]));
+  assert.equal(new Set(departments.map(id => nodes.get(id).pos[1])).size, 1);
+  for (const [i, id] of departments.entries()) {
+    const department = nodes.get(id);
+    const teams = spec.connections.filter(e => e.from === id).map(e => nodes.get(e.to));
+    assert.equal(teams.length, i === 0 ? 2 : i === 1 ? 5 : 1);
+    for (const team of teams) {
+      assert(team.pos[1] > department.pos[1] + department.size[1]);
+      assert(team.size[0] < department.size[0]);
+      assert.equal(team.pos[0] + team.size[0], department.pos[0] + department.size[0]);
+      const edge = spec.connections.find(e => e.from === id && e.to === team.id);
+      assert.equal(edge.toSide, 'left');
+      assert.equal(edge.fromSide, 'bottom');
+      assert.equal(spec.connections.find(e => e.from === 'management' && e.to === id).toSide, 'top');
+      assert.deepEqual(spec.connections.filter(e => e.to === team.id).map(e => e.from), [id]);
+      assert(page.includes(team.label));
+    }
+  }
+  for (const [i, a] of spec.components.entries()) for (const b of spec.components.slice(i + 1)) {
+    assert(!(a.pos[0] < b.pos[0] + b.size[0] && a.pos[0] + a.size[0] > b.pos[0] && a.pos[1] < b.pos[1] + b.size[1] && a.pos[1] + a.size[1] > b.pos[1]), `${a.id} overlaps ${b.id}`);
+  }
+});
+test('organization content is split into linked focused pages', () => {
+  const structure = read('docs/organization/structure.mdx');
+  const collaboration = read('docs/organization/collaboration.mdx');
+  const sdlc = read('docs/organization/sdlc.mdx');
+  assert(!structure.includes('## How the departments work together'));
+  assert(!structure.includes('## Leadership and delivery structure'));
+  assert(!structure.includes('name="organization-reporting"'));
+  assert(collaboration.includes('## How the departments work together'));
+  for (const outcome of ['Better buyer experience', 'Stronger seller experience', 'Safe and trustworthy trading', 'Sustainable growth', 'AI-powered execution']) assert(collaboration.includes(outcome));
+  assert(sdlc.includes('title: SDLC — Software Delivery Life Cycle'));
+  assert(sdlc.includes('name="organization-reporting"'));
+  for (const role of ['Head of Engineering', 'AI Architect', 'Operational Quality', 'Brand Team Lead']) assert(sdlc.includes(role));
+  for (const [name, page] of [['structure',structure],['collaboration',collaboration],['sdlc',sdlc]]) {
+    for (const other of ['structure','collaboration','sdlc'].filter(n => n !== name)) assert(page.includes(`./${other}.mdx`));
+  }
 });
 test('organization page presents an operating model, not research notes', () => {
   const page = read('docs/organization/structure.mdx');

scripts/roadmap-viewer.mjs

@@ -0,0 +1,62 @@
+// Native Workflow v2 owns node geometry, mainPath and routing. The portal adds
+// multiline typography: upstream's three single-line labels are too small for
+// a five-stage reading view. Do not change the pinned vendor or graph semantics.
+const escape = text => text.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;');
+const wrap = (text, limit = 21) => {
+  const lines = [];
+  for (const word of text.split(/\s+/)) {
+    if (!lines.length || `${lines.at(-1)} ${word}`.length > limit) lines.push(word);
+    else lines[lines.length - 1] += ` ${word}`;
+  }
+  return lines;
+};
+export function roadmapViewer(html, spec) {
+  if (spec.diagram_type !== 'workflow' || spec.schema_version !== 2 || spec.nodes.length !== 5) throw new Error('Roadmap workflow contract drift');
+  const boxes = [];
+  for (const [index, node] of spec.nodes.entries()) {
+    const start = html.indexOf(`<g id="node-${node.id}"`);
+    const next = html.indexOf('<text data-node-label=', start);
+    const end = html.indexOf('</g>', next) + 4;
+    if (start < 0 || next < start || end < next) throw new Error(`Roadmap node drift: ${node.id}`);
+    const original = html.slice(start, end);
+    const rect = /<rect x="([\d.-]+)" y="([\d.-]+)" width="([\d.]+)" height="([\d.]+)"/.exec(original);
+    if (!rect || (original.match(/<text /g) || []).length !== 2) throw new Error(`Roadmap text contract drift: ${node.id}`);
+    const [x,y,w,h] = rect.slice(1).map(Number);
+    boxes.push({x,y,w,h});
+    const text = (value, top, size, cls, attrs = 'data-detail="context"') => {
+      const lines = wrap(value, size === 30 ? 18 : 21);
+      const maxLines = top === 160 ? 3 : 2;
+      if (lines.length > maxLines || lines.some(line => line.length > 21)) throw new Error(`Roadmap copy exceeds card capacity: ${node.id}`);
+      return `<text x="${x+24}" y="${y+top}" font-size="${size}" class="${cls}" ${attrs}>${lines.map((line,i) => `<tspan x="${x+24}" dy="${i ? 34 : 0}">${escape(line)}</tspan>`).join('')}</text>`;
+    };
+    if (!node.sublabel || node.tag || /Output:|Exit:|\n/.test(node.sublabel)) throw new Error(`Roadmap content contract drift: ${node.id}`);
+    const content = text(String(index+1), 40, 26, 't-primary', 'data-stage-number="" font-weight="700"')
+      + text(node.label, 88, 30, 't-primary', 'data-node-label="" font-weight="700"')
+      + text(node.sublabel, 160, 26, 't-muted');
+    // Preserve native node title/metadata and rectangles; replace sigil/text only.
+    // Sigils are nested SVG groups. Anchor on the two native node rectangles.
+    const rectangles = [...original.matchAll(/<rect\b[^>]*\/>/g)];
+    if (rectangles.length !== 2) throw new Error('Roadmap shape contract drift');
+    const prefixEnd = rectangles[1].index + rectangles[1][0].length;
+    const replacement = original.slice(0,prefixEnd).replaceAll('rx="6"', 'rx="0"') + content + '</g>';
+    html = html.slice(0,start) + replacement + html.slice(end);
+  }
+  const left = Math.min(...boxes.map(b => b.x)) - 12;
+  const top = Math.min(...boxes.map(b => b.y)) - 12;
+  const width = Math.max(...boxes.map(b => b.x+b.w)) - left + 12;
+  const height = Math.max(...boxes.map(b => b.y+b.h)) - top + 12;
+  // One editorial lane; its title/frame would repeat the page's framing.
+  html = html.replace(/<rect\b[^>]*data-composition-frame-kind="lane"[^>]*\/>\s*<text\b[^>]*>[\s\S]*?<\/text>/g, '');
+  const roots = [...html.matchAll(/<svg\b[^>]*role="img"[^>]*>/g)];
+  if (roots.length !== 1) throw new Error('Roadmap SVG contract drift');
+  const root = roots[0][0].replace(/viewBox="[^"]*"/, `viewBox="${left} ${top} ${width} ${height}"`);
+  const styles = `<style id="eldorado-roadmap-typography">
+    [data-node-id] text {font-family: Arial, sans-serif;}
+    svg[data-preset="classic"] [data-node-id] > rect.c-backend,
+    svg[data-preset="editorial"] [data-node-id] > rect.c-backend {fill:var(--panel); stroke:var(--border);}
+    .c-grid {opacity:0;}
+
+  </style>`;
+  html = html.replace(roots[0][0], root + styles);
+  return html;
+}

scripts/roadmap-viewer.test.mjs

@@ -0,0 +1,35 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync, writeFileSync, mkdtempSync, rmSync, mkdirSync} from 'node:fs';
+import {execFileSync} from 'node:child_process';
+import {roadmapViewer} from './roadmap-viewer.mjs';
+
+for (const suffix of ['', '-mobile']) test(`native Workflow${suffix} retains graph and passes final composition`, () => {
+  mkdirSync('.cache', {recursive:true});
+  const dir = mkdtempSync('.cache/roadmap-test-');
+  try {
+    const source = `diagrams/strategy-roadmap${suffix}.workflow.json`;
+    const spec = JSON.parse(readFileSync(source, 'utf8'));
+    const output = `${dir}/index.html`;
+    execFileSync(process.execPath, ['vendor/archify/renderers/workflow/render-workflow.mjs', source, output], {env:{...process.env, ARCHIFY_UPDATE_CHECK_DISABLED:'1'}});
+    const native = readFileSync(output, 'utf8');
+    const styled = roadmapViewer(native, spec);
+    const graph = html => [...html.matchAll(/<path\b[^>]*data-edge-id="[^"]+"[^>]*>/g)].map(m => m[0]);
+    assert.equal(graph(native).length, 4);
+    assert.deepEqual(graph(styled), graph(native), 'native paths must not be rewritten');
+    for (const node of spec.nodes) assert(styled.includes(`data-node-id="${node.id}"`));
+    assert.equal((styled.match(/<text data-node-label=/g) || []).length, 0, 'single-line preview replaced');
+    assert(styled.includes('eldorado-roadmap-typography'));
+    writeFileSync(output, styled);
+    const checked = JSON.parse(execFileSync(process.execPath, ['vendor/archify/bin/archify.mjs','check',output,'--json'], {encoding:'utf8', env:{...process.env, ARCHIFY_UPDATE_CHECK_DISABLED:'1'}}));
+    assert(checked.ok);
+    assert.equal(checked.composition.status, 'pass');
+    assert.equal(checked.composition.metrics.properCrossings, 0);
+    assert.equal(checked.composition.metrics.labelCanvasOverflowIssues, 0);
+    assert.throws(() => roadmapViewer('', spec), /drift/);
+    const oversized = structuredClone(spec);
+    oversized.nodes[0].sublabel = 'Too much copy '.repeat(20);
+    assert.throws(() => roadmapViewer(native, oversized), /capacity/);
+    assert.throws(() => roadmapViewer(native, {...spec,diagram_type:'architecture'}), /contract drift/);
+  } finally {rmSync(dir, {recursive:true, force:true});}
+});

scripts/roadmap.test.mjs

@@ -0,0 +1,35 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+const read = path => readFileSync(path, 'utf8');
+
+test('Roadmap visibly assesses code and real delivery before adoption', () => {
+  const page = read('docs/strategy/roadmap.mdx');
+  const visible = page.split('<details>')[0];
+  const headings = [...visible.matchAll(/^## (.+)$/gm)].map(match => match[1]);
+  assert.deepEqual(headings, ['1. Understand code quality and delivery', '2. Fix critical readiness gaps', '3. Run a bounded pilot', '4. Expand only on evidence', '5. Sustain and improve']);
+  assert(visible.indexOf(' story />') < visible.indexOf('## 1.'));
+  for (const marker of ['representative repositories', 'tests and CI', 'maintainability', 'technical debt', 'security findings', 'actual SDLC', 'ownership', 'review and release', 'bottlenecks', 'baseline findings', 'process map', 'prioritized gaps', 'alongside the pilot', './measurement.mdx', './target-operating-model.mdx']) assert(visible.includes(marker), marker);
+  assert.equal((visible.match(/\*\*Output:/g) || []).length, 5);
+  assert.match(visible, /Recommended sequence/);
+  assert(!page.includes('### Foundation'));
+  for (const marker of ['revocation', 'exact-artifact approvals', 'idempotency', 'human takeover', 'sensitive decisions']) assert(page.includes(marker), marker);
+});
+
+test('both roadmap diagrams make assessment and readiness prerequisites to the pilot', () => {
+  const ids = ['assessment', 'readiness', 'pilot', 'expansion', 'sustain'];
+  for (const suffix of ['', '-mobile']) {
+    const diagram = JSON.parse(read(`diagrams/strategy-roadmap${suffix}.workflow.json`));
+    assert.equal(diagram.schema_version, 2);
+    assert.equal(diagram.diagram_type, 'workflow');
+    assert.deepEqual(diagram.mainPath, ids);
+    assert.deepEqual(diagram.nodes.map(n => n.id), ids);
+    assert.deepEqual(diagram.nodes.map(n => n.label), ['Understand today', 'Prepare foundations', 'Pilot', 'Expand', 'Sustain']);
+    assert.deepEqual(diagram.edges.map(e => [e.from,e.to]), ids.slice(1).map((id, i) => [ids[i],id]));
+    assert.equal(diagram.nodes[0].sublabel, 'Code quality and delivery processes understood.');
+    assert.equal(diagram.nodes[1].sublabel, 'Critical pilot gaps closed.');
+    assert(diagram.nodes.every(n => !n.sublabel.includes('Output:') && !n.tag && n.height === 240));
+    assert.deepEqual(diagram.nodes.map(n => n.col), suffix ? [0,0,0,0,0] : [0,1,2,3,4]);
+    assert.equal(diagram.lanes.length, 1);
+  }
+});

scripts/sdlc-cycle.test.mjs

@@ -0,0 +1,62 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+const read = p => readFileSync(p, 'utf8');
+const stages = ['Scope', 'Architecture', 'UI/UX', 'Planning', 'Delivery', 'UAT', 'Security', 'Releases'];
+
+test('Strategy opens at the canonical autonomous lifecycle', () => {
+  assert.match(read('sidebars/strategy.ts'), /strategySidebar: \['target-operating-model', 'roadmap'/);
+  assert.match(read('docs/strategy/target-operating-model.mdx'), /^sidebar_label: Target$/m);
+  for (const id of ['target-operating-model']) {
+    const page = read(`docs/strategy/${id}.mdx`);
+    const primary = page.split('<details>')[0];
+    assert(primary.includes('name="strategy-target"'));
+    assert(primary.includes('autonomous agent'));
+    assert(primary.includes('direct, guide and review'));
+    assert(primary.includes('Scope → Architecture → UI/UX → Planning → Delivery → UAT → Security → Releases → Scope'));
+    assert(primary.includes('human-controlled AI Agent'));
+    assert(!/code[ -]agent/i.test(page));
+    assert(primary.includes('TO-BE'));
+    assert(!/only routes|People authorize|independent gates protect release/.test(primary));
+  }
+});
+
+test('both target diagrams have eight stages, eight governed phases and eight human-controlled contributors', () => {
+  for (const suffix of ['', '-mobile']) {
+    const d = JSON.parse(read(`diagrams/strategy-target${suffix}.architecture.json`));
+    const ids = stages.map(label => d.components.find(n => n.label === label)?.id);
+    assert(ids.every(Boolean));
+    assert.equal(new Set(ids).size, 8);
+    const flow = d.connections.filter(e => ids.includes(e.from) && ids.includes(e.to));
+    assert.deepEqual(flow.map(e => [e.from, e.to]), ids.map((id, i) => [id, ids[(i + 1) % ids.length]]));
+    assert.match(flow.at(-1).label, /Repeat/);
+
+    assert(d.components.some(n => n.id === 'agent' && n.label === 'Autonomous agent' && n.sublabel === 'Human Controlled'));
+    assert(!d.components.some(n => n.id === 'humans' || n.label === 'Humans'));
+    assert(!d.connections.some(e => e.id === 'human-direction' || e.from === 'humans' || e.to === 'humans'));
+    assert.equal(d.connections.length, 24);
+    assert.deepEqual(d.connections.filter(e => e.from === 'agent').map(e => e.to), ids);
+    const contributors = d.components.filter(n => n.id.startsWith('code-'));
+    assert.equal(contributors.length, 8);
+    assert(contributors.every(n => n.label === 'AI Agent' && n.sublabel === 'Human-controlled'));
+    for (const id of ids) {
+      assert(d.connections.some(e => e.from === `code-${id}` && e.to === id && e.variant === 'dashed'));
+      assert(d.connections.some(e => e.from === 'agent' && e.to === id && e.variant === 'security'));
+    }
+    assert.equal(d.components.length, 17);
+    if (!suffix) {
+      const center = n => n.pos.map((v, i) => v + n.size[i] / 2);
+      const agent = center(d.components.find(n => n.id === 'agent'));
+      const phaseCenters = ids.map(id => center(d.components.find(n => n.id === id)));
+      for (const axis of [0, 1]) {
+        const values = phaseCenters.map(c => c[axis]);
+        assert.equal(agent[axis], (Math.min(...values) + Math.max(...values)) / 2);
+      }
+      for (const code of contributors) {
+        const phase = d.components.find(n => n.id === code.id.slice(5));
+        const distance = n => Math.hypot(...center(n).map((v, i) => v - agent[i]));
+        assert(distance(code) > distance(phase), `${code.id} is exterior`);
+      }
+    }
+  }
+});

scripts/skills-measurement.test.mjs

@@ -0,0 +1,42 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {calculate} from './ai-kpi.mjs';
+const read = path => readFileSync(path, 'utf8');
+
+test('Skills Measurement is an open adoption collection plan, not a hidden catalogue', () => {
+  const page = read('docs/strategy/measurement.mdx');
+  assert.match(page, /title: Skills Measurement\nsidebar_label: Skills Measurement/);
+  for (const heading of ['Establish the baseline', 'Measure the pilot', 'Extend collection as adoption grows', 'Keep the collection running']) assert(page.includes(heading), heading);
+  assert(!page.includes('<details>'));
+  assert(page.includes('./reference/measurement-contracts.mdx'));
+  assert(!page.includes('Is AI-assisted work worth continuing?'));
+  for (const word of ['Recommended', 'not installed', 'unknown', 'review', 'CI', 'revision', 'Monthly', 'Weekly']) assert(page.includes(word), word);
+});
+
+test('all sixteen metric definitions remain in the reference with explicit implementation limits', () => {
+  const page = read('docs/strategy/reference/measurement-contracts.mdx');
+  const model = JSON.parse(read('research/ai-adoption/strategy-model.json'));
+  for (const k of model.kpis) {
+    const section = page.split(`### ${k.name}\n`)[1]?.split('\n### ')[0];
+    assert(section, k.name);
+    for (const field of ['Numerator','Denominator','Expression','Aggregation','Unit','Eligible population','Exclusions','Events and source','Owner / cadence','Missing evidence','Gaming and limits']) assert(section.includes(`| ${field} |`));
+  }
+  for (const text of ['9 prototype calculations', '7 unimplemented metrics', 'no network collectors', '30 days', '12 months', 'below five people', 'Missing telemetry is unknown']) assert(page.includes(text), text);
+});
+
+test('published pilot arithmetic matches the executable fixture, including partial cost', () => {
+  const page = read('docs/strategy/measurement.mdx');
+  const fixture = JSON.parse(read('scripts/fixtures/ai-kpi-synthetic.json'));
+  const report = calculate(fixture);
+  const success = report.kpis['validated-task-success'];
+  assert(page.includes(`${success.numerator} / ${success.denominator} × 100 = ${success.value_or_null}%`));
+  assert(page.includes(`${success.known_outcome_coverage}%`));
+  const cost = report.kpis['cost-per-accepted-outcome'];
+  assert.equal(cost.partial_estimate, true);
+  assert(page.includes(`EUR ${cost.numerator} / ${cost.denominator} = EUR ${cost.value_or_null}`));
+  assert(page.includes('partial estimate'));
+  const experience = report.kpis['human-experience'];
+  assert(page.includes(`${experience.numerator} / ${experience.denominator} = ${experience.value_or_null}`));
+  assert(page.includes(`${experience.denominator} / ${fixture.survey.invited} × 100 = ${experience.coverage.response_percent}%`));
+});

scripts/strategy-navigation.test.mjs

@@ -0,0 +1,19 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync, existsSync} from 'node:fs';
+const read = p => readFileSync(p, 'utf8');
+
+test('Strategy has one canonical Target, then Roadmap, without a landing menu duplicate', () => {
+  const sidebar = read('sidebars/strategy.ts').split('strategySidebar: [')[1].split(']')[0];
+  const ids = [...sidebar.matchAll(/'([^']+)'/g)].map(match => match[1]);
+  assert.deepEqual(ids, ['target-operating-model', 'roadmap', 'skills-governance', 'skills-quality', 'skills-adoption', 'measurement', 'skills-maintenance']);
+  assert.equal(ids.filter(id => id === 'target-operating-model').length, 1);
+  assert.match(read('docs/strategy/target-operating-model.mdx'), /^sidebar_label: Target$/m);
+  assert.match(read('docusaurus.config.ts'), /type: 'docSidebar', docsPluginId: 'strategy', sidebarId: 'strategySidebar', label: 'Strategy'/);
+});
+
+test('old Strategy entry redirects to Target instead of maintaining a second document', () => {
+  assert(!existsSync('docs/strategy/index.mdx'));
+  assert.match(read('docusaurus.config.ts'), /'@docusaurus\/plugin-client-redirects'/);
+  assert.match(read('docusaurus.config.ts'), /from: '\/strategy\/', to: '\/strategy\/target-operating-model\/'/);
+});

scripts/strategy-story.test.mjs

@@ -0,0 +1,56 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+const read = p => readFileSync(p, 'utf8');
+const model = JSON.parse(read('research/ai-adoption/strategy-model.json'));
+
+test('every strategy page leads with a compact diagram story and closes its references', () => {
+  for (const {id} of model.pages) {
+    const page = read(`docs/strategy/${id}.mdx`);
+    const narrative = page.split('<div className="strategy-content">')[1].replace(/<details>[\s\S]*?<\/details>/g, '');
+    assert.equal((narrative.match(/<ArchifyDiagram /g) || []).length, 1, id);
+    assert(narrative.includes(' story />'), id);
+    assert(!page.includes('<details>') || page.indexOf(' story />') < page.indexOf('<details>'), id);
+    assert(!/<details\s+open/.test(page), id);
+    assert.equal((page.match(/<details>/g) || []).length, (page.match(/<\/details>/g) || []).length, id);
+    assert.equal((narrative.match(/^## /gm) || []).length, id === 'measurement' ? 4 : id === 'roadmap' ? 5 : 1, id);
+    assert((narrative.match(/^- /gm) || []).length <= 3, id);
+    assert(narrative.includes('**Next:**'), id);
+    assert(!narrative.includes('| ---'), id);
+    const words = narrative.replace(/<[^>]*>/g, '').trim().split(/\s+/).length;
+    assert(words <= (id === 'measurement' ? 1100 : id === 'roadmap' ? 600 : 200), `${id}: ${words} default narrative words`);
+  }
+});
+
+test('mobile story diagrams preserve the same nodes and directed relationships', () => {
+  for (const {id} of model.pages) {
+    const page = read(`docs/strategy/${id}.mdx`);
+    const name = /<ArchifyDiagram name="([^"]+)"[^>]+ story/.exec(page)[1];
+    if (name === 'strategy-roadmap') {
+      const desktop = JSON.parse(read(`diagrams/${name}.workflow.json`));
+      const mobile = JSON.parse(read(`diagrams/${name}-mobile.workflow.json`));
+      const semantic = d => ({nodes:d.nodes.map(({col,yOffset,...n}) => n), edges:d.edges.map(({fromSide,toSide,...e}) => e)});
+      assert.deepEqual(semantic(desktop), semantic(mobile));
+      continue;
+    }
+    const desktop = JSON.parse(read(`diagrams/${name}.architecture.json`));
+    const mobile = JSON.parse(read(`diagrams/${name}-mobile.architecture.json`));
+    assert(desktop.components.length >= 5 && desktop.components.length <= (name === 'strategy-target' ? 18 : 7), name);
+    const semantic = d => ({nodes:d.components.map(({pos,size,...n})=>n),edges:d.connections.map(({fromSide,toSide,route,via,labelAt,...e})=>e)});
+    assert.deepEqual(semantic(desktop), semantic(mobile), name);
+    assert(desktop.connections.every(e => (e.label || e.id.startsWith('govern-')) && e.from !== e.to), name);
+    assert.equal(desktop.meta.legend.mode, 'hidden');
+  }
+});
+
+test('all sixteen exact KPI formulas remain reachable in the linked reference', () => {
+  assert(read('docs/strategy/measurement.mdx').includes('./reference/measurement-contracts.mdx'));
+  const page = read('docs/strategy/reference/measurement-contracts.mdx');
+  const contracts = page.split('## Metric contracts')[1].split('## Run the synthetic')[0];
+  assert.equal((contracts.match(/^### /gm) || []).length, 16);
+  for (const metric of model.kpis) {
+    const section = contracts.split(`### ${metric.name}\n`)[1]?.split('\n### ')[0];
+    assert(section, metric.name);
+    for (const label of ['Numerator','Denominator','Expression','Aggregation','Unit','Eligible population','Exclusions','Events and source','Owner / cadence','Missing evidence','Gaming and limits']) assert(section.includes(`| ${label} |`), `${metric.name}: ${label}`);
+  }
+});

scripts/strategy.test.mjs

@@ -0,0 +1,40 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync, readdirSync} from 'node:fs';
+const read = p => readFileSync(p, 'utf8');
+const model = JSON.parse(read('research/ai-adoption/strategy-model.json'));
+test('seven canonical strategy pages preserve target boundary and separate evidence', () => {
+  assert.equal(model.pages.length, 7);
+  assert.equal(readdirSync('docs/strategy').filter(p => p.endsWith('.mdx')).length, 7);
+  for (const {id} of model.pages) {
+    const page = read(`docs/strategy/${id}.mdx`);
+    assert(page.includes(`id: ${id}`));
+    assert(page.includes('Target operating model'));
+    assert(!/## Sources|\[\d+\]|Internal evidence mapping/.test(page));
+    assert(read('sidebars/strategy.ts').includes(`'${id}'`));
+  }
+  for (const teams of Object.values(model.organization)) for (const name of teams) {
+    assert(read('docs/organization/structure.mdx').includes(name));
+    assert(read('docs/strategy/target-operating-model.mdx').includes(name));
+  }
+});
+test('every metric has an actionable reader-facing contract', () => {
+  const page = read('docs/strategy/reference/measurement-contracts.mdx');
+  assert.equal(model.kpis.length,16);
+  for (const k of model.kpis) {
+    const section=page.split(`### ${k.name}\n`)[1]?.split('\n### ')[0];
+    assert(section,k.name);
+    for (const field of ['Eligible population','Exclusions','Events and source','Owner / cadence','Missing evidence','Gaming and limits']) assert(section.includes(`| ${field} |`));
+    assert(section.includes(k.owner));
+  }
+  assert(page.includes('synthetic') && page.includes('not a production ingestion system'));
+});
+test('diagram preserves independent release approval and no agent production authority', () => {
+  const d=JSON.parse(read('diagrams/ai-adoption-target.architecture.json'));
+  assert(d.meta.title.startsWith('TO-BE'));
+  assert.equal(d.components.filter(n=>n.id==='coordinator').length,1);
+  assert.deepEqual(d.connections.filter(e=>e.to==='release').map(e=>e.from),['approval']);
+  for (const [from,to] of [['registry','coordinator'],['registry','clients'],['clients','gates'],['gates','approval'],['release','audit'],['audit','people']]) assert(d.connections.some(e=>e.from===from&&e.to===to));
+  assert(!d.connections.some(e=>['clients','coordinator'].includes(e.from)&&['release','approval'].includes(e.to)));
+  assert(d.boundaries.some(b=>b.wraps.includes('gates')&&b.wraps.includes('release')));
+});

scripts/target-midpoints.test.mjs

@@ -0,0 +1,31 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {createRouter} from '../vendor/archify/renderers/architecture/routing.mjs';
+import {segmentIntersectsRect} from '../vendor/archify/renderers/shared/geometry.mjs';
+
+for (const suffix of ['', '-mobile']) {
+  test(`Target${suffix} uses shared native midpoint ports without node crossings`, () => {
+    const diagram = JSON.parse(readFileSync(`diagrams/strategy-target${suffix}.architecture.json`, 'utf8'));
+    const boxes = new Map(diagram.components.map(({id, pos: [x, y], size: [width, height]}) =>
+      [id, {id, x, y, width, height, cx: x + width / 2, cy: y + height / 2}]));
+    const router = createRouter(boxes, diagram.connections, {distinctAutomaticPorts: true});
+    const agent = boxes.get('agent');
+    for (const edge of diagram.connections.filter(edge => edge.from === 'agent')) {
+      const side = suffix ? 'left' : ['scope', 'architecture', 'releases'].includes(edge.to) ? 'top'
+        : ['planning', 'delivery', 'uat'].includes(edge.to) ? 'bottom' : edge.to === 'security' ? 'left' : 'right';
+      assert.equal(edge.fromSide, side, edge.id);
+      assert(edge.via || (edge.route && edge.route !== 'auto'), `${edge.id} must opt out of automatic port spreading`);
+      const expected = {top: [agent.cx, agent.y], bottom: [agent.cx, agent.y + agent.height],
+        left: [agent.x, agent.cy], right: [agent.x + agent.width, agent.cy]}[side];
+      const points = router.pathFor(edge).points;
+      assert.deepEqual(points[0], expected, edge.id);
+      for (let i = 1; i < points.length; i++) {
+        for (const box of boxes.values()) {
+          if ([edge.from, edge.to].includes(box.id)) continue;
+          assert(!segmentIntersectsRect({start: points[i - 1], end: points[i]}, box), `${edge.id} crosses ${box.id}`);
+        }
+      }
+    }
+  });
+}

scripts/target-routing.mjs

@@ -0,0 +1,32 @@
+// Owned desktop-only integration, applied AFTER native artifact verification.
+// Native architecture JSON has no per-edge attachment offset. Keep the central
+// governance ports native; shift only these lifecycle channels on the same sides.
+export const targetLifecycleOffsets = [
+  {id:'stage-2', from:'architecture', to:'ui-ux', x:870, shiftedX:850, y1:262.5, y2:457.5},
+  {id:'stage-3', from:'ui-ux', to:'planning', x:870, shiftedX:850, y1:532.5, y2:727.5},
+  {id:'stage-6', from:'uat', to:'security', x:330, shiftedX:350, y1:727.5, y2:532.5},
+  {id:'stage-7', from:'security', to:'releases', x:330, shiftedX:350, y1:457.5, y2:262.5},
+];
+
+export function targetRouting(viewer) {
+  for (const {id, from, to, x, shiftedX, y1, y2} of targetLifecycleOffsets) {
+    const oldPath = `M ${x} ${y1} L ${x} ${y2}`;
+    const newPath = `M ${shiftedX} ${y1} L ${shiftedX} ${y2}`;
+    const oldPoints = `${x},${y1};${x},${y2}`;
+    const newPoints = `${shiftedX},${y1};${shiftedX},${y2}`;
+    // Match the whole native crossover group: its mask must move with the edge.
+    // Trace/export use this actual path; composition checks use its point list.
+    const groups = [...viewer.matchAll(/<g data-graph-role="automatic-crossover"[^>]*>\s*<path\b[^>]*\/>\s*<path\b[^>]*\/>\s*<\/g>/g)]
+      .filter(([group]) => group.includes(`data-edge-id="${id}"`));
+    if (groups.length !== 1) throw new Error(`Target routing drift: ${id} group`);
+    const group = groups[0][0];
+    for (const attribute of [`data-edge-from="${from}"`, `data-edge-to="${to}"`, `data-composition-points="${oldPoints}"`, 'data-graph-role="automatic-crossover-underlay"']) {
+      if (!group.includes(attribute)) throw new Error(`Target routing drift: ${id} ${attribute}`);
+    }
+    if (group.split(`d="${oldPath}"`).length !== 3) throw new Error(`Target routing drift: ${id} paths`);
+    const shifted = group.replaceAll(`d="${oldPath}"`, `d="${newPath}"`)
+      .replace(`data-composition-points="${oldPoints}"`, `data-composition-points="${newPoints}"`);
+    viewer = viewer.replace(group, shifted);
+  }
+  return viewer;
+}

scripts/target-routing.test.mjs

@@ -0,0 +1,32 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {targetRouting, targetLifecycleOffsets} from './target-routing.mjs';
+
+const fixture = targetLifecycleOffsets.map(({id, from, to, x, y1, y2}) => `<g data-graph-role="automatic-crossover" style="--step:9">
+<path data-graph-role="automatic-crossover-underlay" d="M ${x} ${y1} L ${x} ${y2}"/>
+<path data-edge-from="${from}" data-edge-to="${to}" data-edge-id="${id}" data-composition-points="${x},${y1};${x},${y2}" d="M ${x} ${y1} L ${x} ${y2}" marker-end="url(#arrowhead-emphasis)"/>
+</g>`).join('\n');
+
+test('Target adapter shifts precisely four paths, masks and composition points', () => {
+  const unrelated = '<path data-edge-id="govern-architecture" d="M 600 450 L 870 262.5"/><g data-node-id="agent"/>';
+  const output = targetRouting(fixture + unrelated);
+  assert(output.endsWith(unrelated));
+  let restored = output;
+  for (const {x, shiftedX, y1, y2} of targetLifecycleOffsets) {
+    assert.equal(output.split(`d="M ${shiftedX} ${y1} L ${shiftedX} ${y2}"`).length, 3);
+    assert(output.includes(`data-composition-points="${shiftedX},${y1};${shiftedX},${y2}"`));
+    restored = restored.replaceAll(`d="M ${shiftedX} ${y1} L ${shiftedX} ${y2}"`, `d="M ${x} ${y1} L ${x} ${y2}"`)
+      .replace(`data-composition-points="${shiftedX},${y1};${shiftedX},${y2}"`, `data-composition-points="${x},${y1};${x},${y2}"`);
+  }
+  assert.equal(restored, fixture + unrelated, 'all other bytes preserved');
+});
+
+test('Target adapter fails closed on missing, duplicate, moved or changed native edges', () => {
+  for (const changed of [fixture.replace('stage-2', 'missing'), fixture + fixture,
+    fixture.replace('870 262.5', '871 262.5'), fixture.replace('870,262.5', '871,262.5'),
+    fixture.replace('data-edge-from="architecture"', 'data-edge-from="scope"'),
+    fixture.replace('automatic-crossover-underlay', 'unknown')]) {
+    assert.throws(() => targetRouting(changed), /Target routing drift/);
+  }
+  assert.throws(() => targetRouting(targetRouting(fixture)), /Target routing drift/);
+});

scripts/verify.mjs

@@ -16,14 +16,36 @@ const workflow = read('.gitea/workflows/pages.yml');
 assert(workflow.includes('mountpoint -q'));
 assert(workflow.includes("gitea.event_name == 'push' && gitea.ref == 'refs/heads/main'"));
 if (process.argv.includes('--build')) {
-  for (const route of ['index.html','docs/overview/index.html','docs/maintain/index.html','docs/reference/index.html','404.html','organization/structure/index.html','strategy/index.html','contribution/index.html','contribution/diagrams/index.html','diagrams/organization-structure/index.html']) {
+  const model = JSON.parse(read('research/ai-adoption/strategy-model.json'));
+  const indexes = readdirSync('build').filter(f => /^search-index.*\.json$/.test(f)).map(f => read(join('build',f))).join('\n');
+  const redirect = read('build/strategy/index.html');
+  assert(redirect.includes('/eldorado-v1/documentation/strategy/target-operating-model/'));
+  assert(redirect.includes('window.location.href') && redirect.includes('http-equiv="refresh"') && !redirect.includes('archify-panel'), 'Landing must redirect, not duplicate Target');
+  for (const {id, title} of model.pages) {
+    const route = `strategy/${id === 'index' ? '' : `${id}/`}index.html`;
+    const page = read(join('build',route));
+    assert(page.includes(title) && page.includes('Target operating model'), route);
+    assert(indexes.includes(title), `Missing indexed Strategy page: ${id}`);
+    for (const match of page.matchAll(/href="(\/eldorado-v1\/documentation\/[^"?#]*)/g)) {
+      const local = decodeURIComponent(match[1].replace('/eldorado-v1/documentation/',''));
+      assert(existsSync(join('build', local.endsWith('/') ? `${local}index.html` : local)), `Broken built link: ${local}`);
+    }
+  }
+  assert(!existsSync('build/research'), 'Background research must remain private source');
+  assert(!readdirSync('build/diagrams', {recursive:true}).some(f => f.endsWith('.json')), 'No public diagram JSON');
+  assert(read('build/diagrams/ai-adoption-target/index.html').includes('TO-BE'));
+  for (const route of ['index.html','docs/overview/index.html','docs/maintain/index.html','docs/reference/index.html','404.html','organization/structure/index.html','organization/collaboration/index.html','organization/sdlc/index.html','strategy/index.html','contribution/index.html','contribution/diagrams/index.html','diagrams/organization-structure/index.html']) {
     assert(existsSync(join('build',route)), `Missing route: ${route}`);
   }
   assert(!readdirSync('build/diagrams', {recursive: true}).some(f => f.endsWith('.delivery.json')), 'Private build receipts must not be published');
   const diagram = read('build/diagrams/organization-structure/index.html');
-  assert(diagram.includes('Coordinates') && diagram.includes('node-technology'));
+  assert(diagram.includes('node-product-team-2') && diagram.includes('node-technology-team-5'));
+  assert(!diagram.includes('shared-delivery'));
   assert(!/A: placement|E: careers|J: advertised/.test(diagram));
   assert(!diagram.includes('Example leadership'));
+  for (const [dept, count] of [['product', 2], ['technology', 5]]) {
+    for (let i = 1; i <= count; i++) assert(diagram.includes(`node-${dept}-team-${i}`));
+  }
   const reporting = read('build/diagrams/organization-reporting/index.html');
   assert(reporting.includes('AI Architect') && reporting.includes('Leads'));
   assert(!/A: assumed|J: direct/.test(reporting));

scripts/viewer-theme-bridge.js

@@ -0,0 +1,21 @@
+// Sandboxed viewers have opaque origins: authenticate the sender by WindowProxy,
+// not origin. Only exchange a validated theme, never HTML, URLs or commands.
+(() => {
+  if (window.parent === window) return;
+  let connected = false;
+  window.addEventListener('message', event => {
+    if (event.source !== window.parent || event.data?.type !== 'eldorado:set-theme') return;
+    const theme = event.data.theme;
+    if (theme !== 'light' && theme !== 'dark') return;
+    connected = true;
+    if (document.documentElement.dataset.theme !== theme) {
+      document.getElementById('btn-theme').click();
+      // Parent updates are not new user choices; do not echo stale acknowledgements.
+      observer.takeRecords();
+    }
+  });
+  const observer = new MutationObserver(() => {
+    if (connected) window.parent.postMessage({type: 'eldorado:theme', theme: document.documentElement.dataset.theme}, '*');
+  });
+  observer.observe(document.documentElement, {attributes: true, attributeFilter: ['data-theme']});
+})();

sidebars/organization.ts

@@ -1,2 +1,2 @@
 import type {SidebarsConfig} from '@docusaurus/plugin-content-docs';
-export default {organizationSidebar: ['structure']} satisfies SidebarsConfig;
+export default {organizationSidebar: ['structure', 'collaboration', 'sdlc']} satisfies SidebarsConfig;

sidebars/strategy.ts

@@ -1,2 +1,2 @@
 import type {SidebarsConfig} from '@docusaurus/plugin-content-docs';
-export default {strategySidebar: ['direction']} satisfies SidebarsConfig;
+export default {strategySidebar: ['target-operating-model', 'roadmap', 'skills-governance', 'skills-quality', 'skills-adoption', 'measurement', 'skills-maintenance']} satisfies SidebarsConfig;

src/components/ArchifyDiagram/index.tsx

@@ -1,14 +1,63 @@
 import React, {useEffect, useId, useRef, useState} from 'react';
 import useBaseUrl from '@docusaurus/useBaseUrl';
+import {useLocation} from '@docusaurus/router';
+import {useColorMode} from '@docusaurus/theme-common';
 
-export default function ArchifyDiagram({name, title}: {name: string; title: string}): React.ReactElement {
+export default function ArchifyDiagram({name, title, compact = false, story = false}: {name: string; title: string; compact?: boolean; story?: boolean}): React.ReactElement {
   if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name)) throw new Error('Invalid diagram name');
   const source = useBaseUrl(`/diagrams/${name}/`);
-  const json = useBaseUrl(`/diagrams/${name}.json`);
+  const mobileSource = useBaseUrl(`/diagrams/${name}-mobile/`);
   const dialog = useRef<HTMLDialogElement>(null);
   const opener = useRef<HTMLButtonElement>(null);
   const headingId = useId();
   const [expanded, setExpanded] = useState(false);
+  const [narrowRoadmap, setNarrowRoadmap] = useState(false);
+  useEffect(() => {
+    if (name !== 'strategy-roadmap') return;
+    const media = window.matchMedia('(max-width: 999px)');
+    const update = () => setNarrowRoadmap(media.matches);
+    update();
+    media.addEventListener('change', update);
+    return () => media.removeEventListener('change', update);
+  }, [name]);
+  const {colorMode, setColorMode} = useColorMode();
+  const initialTheme = useRef(colorMode);
+  const desktop = useRef<HTMLIFrameElement>(null);
+  const mobile = useRef<HTMLIFrameElement>(null);
+  const fullscreen = useRef<HTMLIFrameElement>(null);
+  const syncTheme = (frame: HTMLIFrameElement | null) => frame?.contentWindow?.postMessage({type: 'eldorado:set-theme', theme: colorMode}, '*');
+  useEffect(() => {
+    for (const frame of [desktop, mobile, fullscreen]) syncTheme(frame.current);
+    const receiveTheme = (event: MessageEvent) => {
+      if (!event.source || ![desktop, mobile, fullscreen].some(frame => frame.current?.contentWindow === event.source)) return;
+      if (event.data?.type !== 'eldorado:theme' || !['light', 'dark'].includes(event.data.theme)) return;
+      if (event.data.theme !== colorMode) setColorMode(event.data.theme);
+    };
+    window.addEventListener('message', receiveTheme);
+    return () => window.removeEventListener('message', receiveTheme);
+  }, [colorMode, setColorMode, expanded]);
+  const {pathname, hash} = useLocation();
+  useEffect(() => {
+    if (!story || !hash) return;
+    let id: string;
+    try {id = decodeURIComponent(hash.slice(1));} catch {return;}
+    const frame = requestAnimationFrame(() => {
+      const target = document.getElementById(id);
+      if (!target?.closest('.strategy-content')) return;
+      let detail = target.closest('details');
+      if (!detail) return;
+      while (detail) {
+        if (detail.dataset.collapsed === 'true') {
+          detail.querySelector<HTMLElement>(':scope > summary')?.click();
+        } else if (!detail.hasAttribute('data-collapsed')) {
+          detail.open = true;
+        }
+        detail = detail.parentElement?.closest('details') ?? null;
+      }
+      target.scrollIntoView();
+    });
+    return () => cancelAnimationFrame(frame);
+  }, [story, pathname, hash]);
   useEffect(() => {
     if (!expanded) return;
     dialog.current?.showModal();
@@ -17,12 +66,15 @@ export default function ArchifyDiagram({name, title}: {name: string; title: stri
     return () => {document.body.style.overflow = previousOverflow;};
   }, [expanded]);
   const close = () => {dialog.current?.close();};
-  return <section className="archify-panel" aria-label={title}>
+  return <section className={`archify-panel${compact ? ' archify-panel--compact' : ''}${story ? ' archify-panel--story' : ''}`} data-diagram={name} aria-label={title}>
-    <div className="archify-toolbar"><strong>Interactive diagram</strong><div><button ref={opener} type="button" className="archify-expand" onClick={() => setExpanded(true)}>Open full viewer ⛶</button><a href={json} download>JSON source ↓</a></div></div>
+    <div className="archify-toolbar"><button ref={opener} type="button" className="archify-expand" aria-label={`Expand ${title}`} title="Expand diagram" onClick={() => setExpanded(true)}><svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" aria-hidden="true"><path d="M8 3H3v5M16 3h5v5M21 16v5h-5M8 21H3v-5" /></svg></button></div>
-    <iframe src={source} title={title} sandbox="allow-scripts allow-downloads" loading="lazy" referrerPolicy="no-referrer" />
+    {story ? <>
+      <iframe className="story-desktop" ref={desktop} onLoad={() => syncTheme(desktop.current)} src={`${source}?embed=1&theme=${initialTheme.current}`} title={title} sandbox="allow-scripts allow-downloads" loading="lazy" referrerPolicy="no-referrer" />
+      <iframe className="story-mobile" ref={mobile} onLoad={() => syncTheme(mobile.current)} src={`${mobileSource}?embed=1&theme=${initialTheme.current}`} title={`${title} — narrow layout`} sandbox="allow-scripts allow-downloads" loading="lazy" referrerPolicy="no-referrer" />
+    </> : <iframe ref={desktop} onLoad={() => syncTheme(desktop.current)} src={`${source}?theme=${initialTheme.current}`} title={title} sandbox="allow-scripts allow-downloads" loading="lazy" referrerPolicy="no-referrer" />}
     <dialog ref={dialog} className="archify-modal" aria-labelledby={headingId} onClose={() => {setExpanded(false); opener.current?.focus();}}>
-      <div className="archify-modal-toolbar"><strong id={headingId}>{title}</strong><button type="button" onClick={close} autoFocus aria-label="Close full-screen diagram">Close ×</button></div>
+      <div className="archify-modal-toolbar"><strong id={headingId}>{title}</strong><button type="button" onClick={close} autoFocus aria-label="Close full-screen diagram"><span aria-hidden="true">×</span></button></div>
-      {expanded && <iframe src={source} title={`${title} — expanded`} sandbox="allow-scripts allow-downloads" referrerPolicy="no-referrer" />}
+      {expanded && <iframe ref={fullscreen} onLoad={() => syncTheme(fullscreen.current)} src={`${narrowRoadmap ? mobileSource : source}?${name === 'strategy-roadmap' ? 'embed=1&' : ''}theme=${initialTheme.current}`} title={`${title} — expanded`} sandbox="allow-scripts allow-downloads" referrerPolicy="no-referrer" />}
     </dialog>
   </section>;
 }

src/css/custom.css

@@ -92,21 +92,61 @@
 .footer {background: #101014; color: #afadb9; font-size: .8rem; padding: 27px;}
 .theme-doc-markdown {max-width: 850px;}
 .theme-doc-markdown h1 {letter-spacing: -.035em;}
+.strategy-content table {display: table; width: 100%; table-layout: fixed;}
+.strategy-content th, .strategy-content td {overflow-wrap: anywhere; vertical-align: top;}
+.strategy-content th:first-child, .strategy-content td:first-child {width: 25%;}
+@media (max-width: 700px) {
+  .strategy-content th:first-child, .strategy-content td:first-child {width: 32%;}
+  .strategy-content th, .strategy-content td {padding: .65rem;}
+}
 .pagination-nav__link, .menu__link, .theme-admonition, pre {border-radius: 0;}
 a:focus-visible, button:focus-visible {outline: 3px solid #b88719; outline-offset: 4px;}
 @media (max-width: 996px) {.navbar {padding: 0 1rem;} .hero-inner {gap: 15px; padding: 55px 25px;} .hero-art {transform: scale(.85);} .start-section {padding: 35px 25px;} .start-card {padding: 20px;}}
 @media (max-width: 700px) {.hero-inner {grid-template-columns: 1fr; padding: 45px 24px;} .hero-art {display: none;} .hero-copy h1 {font-size: 3rem;} .start-grid {grid-template-columns: 1fr;} .section-heading {align-items: flex-start;} .foundation-badge {display: none;} .start-section {padding: 32px 20px;} .navbar__title {font-size: 1.45rem;} .navbar__logo {height: 31px;} .navbar input {max-width: 145px;} .button--lg {font-size: .95rem;} .button--primary span {padding-left: 10px;}}
 .archify-panel {border: 1px solid var(--line); margin: 1.5rem 0;}
-.archify-toolbar {display: flex; justify-content: space-between; flex-wrap: wrap; gap: 12px; padding: 12px 16px; background: var(--surface); font-size: .85rem;}
+.archify-toolbar {display: flex; justify-content: flex-end; padding: 4px; background: var(--surface);}
-.archify-toolbar div {display: flex; gap: 20px; flex-wrap: wrap;}
 .archify-panel iframe {width: 100%; height: 720px; border: 0; display: block; background: #f6f6f6;}
+.archify-panel--compact > iframe {height: 500px;}
+.archify-panel--story {max-width: 740px;}
+.archify-panel--story > iframe {height: auto; aspect-ratio: 480 / 408;}
+.archify-panel--story > .story-mobile {display: none;}
+.theme-doc-markdown:has([data-diagram="strategy-roadmap"]) {max-width: none;}
+.archify-panel--story[data-diagram="strategy-roadmap"] {max-width: none;}
+.archify-panel--story[data-diagram="strategy-roadmap"] > .story-desktop {aspect-ratio: auto; height: 240px;}
+.archify-panel--story[data-diagram="strategy-target"] > iframe {aspect-ratio: 1620 / 1430;}
+.archify-panel--story[data-diagram="strategy-adoption"] > iframe {aspect-ratio: 545 / 408;}
+.archify-panel--story[data-diagram="strategy-maintenance"] > iframe {aspect-ratio: 524 / 408;}
+.strategy-content > details {margin: .65rem 0; border: 1px solid var(--line); padding: .8rem 1rem; background: var(--surface);}
+.strategy-content summary {cursor: pointer; font-weight: 700;}
+.strategy-content summary:focus-visible {outline: 3px solid #b88719; outline-offset: 4px;}
+.strategy-content > details[open] > summary {margin-bottom: 1rem;}
 @media (max-width: 700px) {.archify-panel iframe {height: 650px;}}
-.archify-expand {border: 0; padding: 0; background: transparent; color: var(--ifm-link-color); font: inherit; cursor: pointer;}
+@media (max-width: 700px) {
-.archify-expand:hover {text-decoration: underline;}
+  .archify-panel--story > .story-desktop {display: none;}
+  .archify-panel--story > .story-mobile {display: block; height: auto; aspect-ratio: 240 / 748;}
+  .archify-panel--story[data-diagram="strategy-roadmap"] > .story-mobile {aspect-ratio: 364 / 1480;}
+  .archify-panel--story[data-diagram="strategy-adoption"] > .story-mobile {aspect-ratio: 305 / 748;}
+  .archify-panel--story[data-diagram="strategy-maintenance"] > .story-mobile {aspect-ratio: 284 / 748;}
+  .archify-panel--story[data-diagram="strategy-target"] > .story-mobile {aspect-ratio: 680 / 2340;}
+}
+/* Five Roadmap cards need desktop space, including room for the sidebar. */
+@media (width < 1360px) {
+  .archify-panel--story[data-diagram="strategy-roadmap"] > .story-desktop {display: none;}
+  .archify-panel--story[data-diagram="strategy-roadmap"] > .story-mobile {display: block; height: auto; width: 100%; max-width: 364px; margin-inline: auto; aspect-ratio: 364 / 1480;}
+}
+.archify-expand {display: grid; place-items: center; width: 44px; height: 44px; border: 0; padding: 0; background: transparent; color: var(--ifm-link-color); cursor: pointer;}
+.archify-expand:hover {background: var(--ifm-hover-overlay);}
 .archify-modal {position: fixed; inset: 0; margin: 0; padding: 0; width: 100vw; height: 100dvh; max-width: none; max-height: none; border: 0; background: var(--surface); color: var(--ifm-color-content);}
 .archify-modal[open] {display: flex; flex-direction: column;}
 .archify-modal::backdrop {background: #000b;}
 .archify-modal-toolbar {display: flex; align-items: center; justify-content: space-between; gap: 16px; padding: 12px 20px; border-bottom: 1px solid var(--line);}
-.archify-modal-toolbar button {flex-shrink: 0; padding: 8px 16px; background: var(--gold); color: #14131a; font: inherit; font-weight: 700; border: 0; cursor: pointer;}
+.archify-modal-toolbar button {display: inline-flex; align-items: center; justify-content: center; flex-shrink: 0; width: 44px; height: 44px; padding: 0; background: var(--gold); color: #14131a; font: inherit; font-size: 24px; font-weight: 700; border: 0; cursor: pointer;}
 .archify-panel .archify-modal iframe {flex: 1; min-height: 0; height: 100%; width: 100%;}
+/* Read the five-stage narrow Roadmap by scrolling, never by fitting its
+   entire height into a short phone screen. Other diagram viewers are unchanged. */
+@media (max-width: 999px) {
+  [data-diagram="strategy-roadmap"] .archify-modal {overflow-y: auto; overscroll-behavior: contain;}
+  [data-diagram="strategy-roadmap"] .archify-modal-toolbar {position: sticky; top: 0; z-index: 1; flex-shrink: 0; background: var(--surface);}
+  [data-diagram="strategy-roadmap"] .archify-modal iframe {flex: none; height: 1480px; min-height: 1480px;}
+}
 @media (prefers-reduced-motion: reduce) {.start-card {transition: none;} .start-card:hover {transform: none;}}

src/pages/index.tsx

@@ -25,7 +25,7 @@ export default function Home(): React.ReactElement {
         <div className="section-heading"><div><p className="eyebrow">START HERE</p><h2 id="start-title">A clear place to begin.</h2></div><span className="foundation-badge">Foundation · v1</span></div>
         <div className="start-grid">
           <Link className="start-card" to="/organization/structure/"><span className="card-number">01 / ORGANIZATION</span><h3>Organization</h3><p>Explore the structure workspace and its first interactive diagram.</p><span className="card-action">Explore structure <span aria-hidden="true">↗</span></span></Link>
-          <Link className="start-card" to="/strategy/"><span className="card-number">02 / STRATEGY</span><h3>Strategy</h3><p>Shape the direction for an AI-powered Eldorado.</p><span className="card-action">View the direction <span aria-hidden="true">↗</span></span></Link>
+          <Link className="start-card" to="/strategy/target-operating-model/"><span className="card-number">02 / STRATEGY</span><h3>Strategy</h3><p>Shape the direction for an AI-powered Eldorado.</p><span className="card-action">View the direction <span aria-hidden="true">↗</span></span></Link>
           <Link className="start-card" to="/contribution/"><span className="card-number">03 / CONTRIBUTION</span><h3>Contribution</h3><p>Contribute evidence, proposals, documentation, and diagrams.</p><span className="card-action">Start contributing <span aria-hidden="true">↗</span></span></Link>
         </div>
         <aside className="scope-note"><span className="scope-symbol" aria-hidden="true">✦</span><div><strong>Shaping the direction.</strong><p>This space is dedicated to AI strategy and direction for Eldorado. Specific initiatives, priorities, and the roadmap remain to be defined.</p></div></aside>