[JacobStephens2]

Summary

Refresh the homepage from the current README and domain model. The press hall now links to installed workflows, and the surrounding copy covers Harness choices, Claims, setup/update, scheduling and optional Security review. Mark the #24 replay as historical.

 The factory grows
- One Run installed; self-merge, architecture and whole-Spec lines unbuilt
+ Run · Merge run · Architect run · Spec run · Pickup run · Security run
+ Six installed lines linking to their current documentation

Share decorative press and chest geometry once; keep each line's text local.

Closes #663

Evidence

• Before: The homepage browser check against main failed: all six current workflows must appear, 4 !== 6; three lines said NOT YET INSTALLED.
  After: The same focused check passes at 1280, 390 and 320 pixels with JavaScript enabled and disabled: six installed lines, workflow copy, README links, unclipped SVG text, no horizontal overflow and keyboard focus. Desktop and phone screenshots inspected after the Standards fix.

• cargo check --all-targets, cargo fmt --check, and cargo clippy --all-targets -- -D warnings passed.

• Existing share_card (4 tests) and site_deploy (7 tests) integration tests passed.

• cargo test passed for the full suite (exit 0); log retained at /tmp/issue-663-cargo-test.log.

Validation seams

• Served homepage: visible workflow descriptions, documentation links, responsive SVG floor plan and keyboard access, with JavaScript enabled and disabled.
• Existing site deployment and share-card integration tests.

Review

Reviewed against main (cfda566) with independent Standards and Spec reviewers. Standards: one P3 duplication judgment call, addressed by sharing both chest rectangles. Spec: no findings. No behavior findings were raised.

Both axes read all changed files (site/index.html, site/styles.css). Changed files left unread: none. Reports, including each axis's final files-read list, are retained in .thirdshift-review-ZgRuM9/standards.md and .thirdshift-review-ZgRuM9/spec.md in the Run worktree.

Unaddressed findings

Standards

None.

Spec

None.

Security

None. Guidance-mode review of git diff cfda566cc9b40f5fb9e1c601b533560329577b7c...HEAD at c16e780218ea32f0577e29fcee84e19b46bc29b2 found no introduced Security findings. Read both changed files and the supporting JavaScript, Caddy configuration, publisher, systemd units, share-card renderer and relevant tests, using the injection, client-side and HTTP security guidance. No repository SECURITY.md or threat model was present.

Offline structural checks passed on HEAD and the pinned merge base: fixed HTTPS/local URLs, unique IDs, local SVG references, no inline event handlers or form/frame/object/embed elements, and only the existing module script. Supporting executable/configuration files are unchanged. No candidate required a proof-of-concept or a fix; no target code or deployed service was executed.

Security review outcome

No unaddressed introduced findings.

Merge Danger

Door: two-way

Revert the site files to roll back. The existing publisher serves these changes after they land on main.

Blast Radius: homepage

Static homepage copy and floor-plan styling; no factory runtime changes.

Built with codex · gpt-6.1-sol · high