Archive 6 completed sprints, add 4 new ElkSharp + FE sprint plans

Archived to docs-archived/implplan/:
- SPRINT_20260320_001 FE Releases Table & Wizard (4/4 DONE)
- SPRINT_20260324_001 Platform Scripts/Variables (7/7 DONE)
- SPRINT_20260323_002 ElkSharp Bounded Edge Refinement (11/11 DONE)
- SPRINT_20260328_003 ElkSharp Compound Sugiyama (3/3 DONE)
- SPRINT_20260329_006 FE Audit Menu Consolidation (12/12 DONE)
- SPRINT_20260329_007 FE Unified Stella Assistant (7/7 DONE)

New sprint plans for in-progress work:
- ElkSharp document rendering cleanup, source decomposition,
  hybrid iterative routing
- FE DevOps onboarding UX

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs-archived/implplan/SPRINT_20260320_001_FE_releases_table_and_wizard.md

@@ -0,0 +1,114 @@
+# Sprint 20260320-001 — Releases Table + Create Release Wizard Enhancement
+
+## Topic & Scope
+- Migrate releases pipeline table to use `app-data-table` with column sorting + right-aligned `app-pagination`.
+- Enhance the Create Release wizard with target selection, strategy detail configuration, and progressive delivery support.
+- Working directory: `src/Web/StellaOps.Web/src/app/features/`
+- Expected evidence: build passes, pages render correctly, wizard steps complete.
+
+## Dependencies & Concurrency
+- No upstream sprint dependencies.
+- Task 1 (table) and Task 2 (wizard) are independent and can be done in parallel.
+
+## Documentation Prerequisites
+- `docs/modules/release-orchestrator/deployment/strategies.md` — strategy configs
+- `docs/modules/release-orchestrator/progressive-delivery/ab-releases.md` — A/B models
+- `docs/modules/release-orchestrator/progressive-delivery/canary.md` — canary controller
+- `docs/modules/release-orchestrator/deployment/overview.md` — execution flow
+
+## Delivery Tracker
+
+### TASK-001 - Releases pipeline table: use app-data-table + sorting + right-aligned pager
+Status: DONE
+Dependency: none
+Owners: FE
+
+Task description:
+- Replace the raw `<table class="stella-table">` in `releases-unified-page.component.ts` with `<app-data-table>`.
+- Define columns with `sortable: true` for: Release, Stage, Gates, Risk, Evidence, Status.
+- Add sort state signal + computed sorted+filtered+paged data.
+- Move `<app-pagination>` to right-aligned position below the table.
+- Remove manual `<thead>/<tbody>` markup — use data-table's column definitions and cell templates.
+
+Completion criteria:
+- [ ] Table renders using `app-data-table`
+- [ ] Clicking column headers sorts ascending/descending
+- [ ] Pagination below table, right-aligned
+- [ ] Decision capsules still render in the last column
+- [ ] Build passes
+
+### TASK-002 - Create Release wizard: target selection step
+Status: DONE
+Dependency: none
+Owners: FE
+
+Task description:
+- Add a new step between current Step 1 (Identity) and Step 2 (Components) for target selection.
+- New step allows selecting: regions, environments, specific targets/hosts.
+- Use existing `PlatformContextStore` for available regions/environments.
+- Support multi-select with chips for selected items.
+- Wire selected targets into the release draft payload.
+
+Completion criteria:
+- [ ] Wizard shows 5 steps (Identity → Targets → Components → Config → Review)
+- [ ] Target selection step shows available regions/environments from context
+- [ ] Selected targets appear as chips
+- [ ] Selected targets included in review step summary
+- [ ] Build passes
+
+### TASK-003 - Create Release wizard: strategy detail configuration
+Status: DONE
+Dependency: none
+Owners: FE
+
+Task description:
+- Enhance Step 3 (Config) to show strategy-specific configuration when a strategy is selected.
+- **Rolling**: batch size (count or %), batch delay, stabilization time, max failed batches.
+- **Canary**: canary stages (% + duration), health thresholds (success rate, error rate, latency), manual vs auto progression.
+- **Blue-Green**: switchover mode (instant vs gradual with stages), warmup period, blue keepalive duration.
+- **All-at-Once**: max concurrency, failure behavior (rollback/continue/pause).
+- Use a collapsible "Advanced" section that expands when the user selects a strategy.
+- Pre-fill with sensible defaults from docs.
+
+Completion criteria:
+- [ ] Selecting a strategy shows its specific config fields
+- [ ] All 4 strategies have their documented fields
+- [ ] Defaults match documentation
+- [ ] Config values included in review step
+- [ ] Build passes
+
+### TASK-004 - Create Release wizard: A/B and progressive delivery support
+Status: DONE
+Dependency: TASK-003
+Owners: FE
+
+Task description:
+- Add "A/B Release" as a 5th deployment strategy option.
+- When selected, show sub-type selector: Target-Group A/B vs Router-Based A/B.
+- **Target-Group A/B**: stage editor (canary → expand → shift → complete) with % and duration.
+- **Router-Based A/B**: routing strategy (weight/header/cookie/tenant), traffic % stages, health thresholds.
+- Add rollback configuration: auto-rollback thresholds, manual override option.
+- Reference: `docs/modules/release-orchestrator/progressive-delivery/ab-releases.md`
+
+Completion criteria:
+- [ ] A/B option available in strategy dropdown
+- [ ] Sub-type selection works
+- [ ] Stage editor allows adding/removing stages
+- [ ] Config included in review step
+- [ ] Build passes
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-20 | Sprint created; tasks 1-3 starting immediately. | Planning |
+| 2026-03-20 | All 4 tasks DONE. Table sorting + pager, wizard targets step, strategy config, A/B release. Deployed. | FE |
+
+## Decisions & Risks
+- TASK-004 depends on TASK-003 (strategy config infrastructure must exist first).
+- Custom script hooks deferred to a follow-up sprint (requires backend ScriptRunner integration).
+- A/B release UI is complex — may need iteration after initial implementation.
+
+## Next Checkpoints
+- TASK-001: table + sorting + pager — should be quick (1 agent)
+- TASK-002 + TASK-003: wizard enhancements — can run in parallel
+- TASK-004: A/B support — after TASK-003 completes

docs-archived/implplan/SPRINT_20260323_002_ElkSharp_bounded_edge_refinement.md

@@ -0,0 +1,254 @@
+# Sprint 20260323-002 - ElkSharp Bounded Edge Refinement
+
+## Topic & Scope
+- Add a bounded deterministic edge-refinement stage to ElkSharp without replacing the existing channel and dummy-edge routing model.
+- Preserve orthogonal output, backward corridor behavior, sink corridor behavior, and target anchor heuristics.
+- Working directory: `src/__Libraries/StellaOps.ElkSharp/`
+- Expected evidence: targeted renderer tests, direct geometry assertions, and workflow docs updated for the new layout option.
+
+## Dependencies & Concurrency
+- Depends on the current ElkSharp routing pipeline in `src/__Libraries/StellaOps.ElkSharp/`.
+- Safe cross-module edits for this sprint are limited to:
+  - `src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/`
+  - `docs/workflow/`
+
+## Documentation Prerequisites
+- `docs/code-of-conduct/CODE_OF_CONDUCT.md`
+- `docs/code-of-conduct/TESTING_PRACTICES.md`
+- `docs/workflow/ENGINE.md`
+- `src/__Libraries/StellaOps.ElkSharp/ElkSharpLayeredLayoutEngine.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkEdgeRouter.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkEdgePostProcessor.cs`
+
+## Delivery Tracker
+
+### TASK-001 - Add module-local ElkSharp guidance and option scaffolding
+Status: DONE
+Dependency: none
+Owners: Implementer
+Task description:
+Create a module-local `AGENTS.md` for ElkSharp and extend the layout option model with bounded refinement settings that default safely and deterministically.
+
+Completion criteria:
+- [x] `src/__Libraries/StellaOps.ElkSharp/AGENTS.md` exists with local routing rules
+- [x] `ElkLayoutOptions` exposes bounded refinement options without changing workflow request contracts
+
+### TASK-002 - Implement bounded orthogonal edge refinement
+Status: DONE
+Dependency: TASK-001
+Owners: Implementer
+Task description:
+Add an internal refinement stage that scores routed output, detects crossing-prone edges, and tries a small fixed set of orthogonal reroute strategies while preserving corridor and anchor semantics.
+
+Completion criteria:
+- [x] Refinement is deterministic and bounded by explicit pass and trial limits
+- [x] Refinement runs only for `LeftToRight` and preserves existing corridor and port-sensitive edges
+- [x] Existing simplify and tighten passes still run after refinement
+
+### TASK-003 - Add regression tests and docs
+Status: DONE
+Dependency: TASK-002
+Owners: Implementer
+Task description:
+Add regression tests covering deterministic output and option gating, and update workflow documentation to note the bounded ElkSharp refinement behavior.
+
+Completion criteria:
+- [x] Targeted workflow renderer tests cover refinement determinism and `TopToBottom` stability
+- [x] Workflow docs mention the bounded refinement behavior for ElkSharp best-effort layout
+- [x] Sprint execution log records validation results
+
+### TASK-004 - Tighten iterative routing rule enforcement
+Status: DONE
+Dependency: TASK-003
+Owners: Implementer
+Task description:
+Follow up on the iterative multi-strategy router now present in the ElkSharp worktree to reduce false-positive highway/proximity scoring, preserve orthogonal target-entry geometry after highway spreading, and push shared corridors away from nearby nodes when the document-processing workflow exposes rule violations.
+
+Completion criteria:
+- [x] Short non-applicable highways are detected and spread without introducing new diagonals or bad target-entry angles
+- [x] Long applicable shared highways are not counted as generic proximity violations in scoring/diagnostics
+- [x] Outer corridor tightening respects the effective line-clearance budget used by the iterative router
+- [x] Document-processing rendering artifacts are regenerated and the targeted ElkSharp test suite passes
+
+### TASK-005 - Instrument iterative timing and plan local issue-focused optimization
+Status: DONE
+Dependency: TASK-004
+Owners: Implementer
+Task description:
+Add per-attempt phase diagnostics to the iterative ElkSharp router and capture enough route-pass statistics to explain where runtime is spent. Use the resulting evidence to record a concrete optimization plan that shifts future retries away from whole-graph reroutes and toward penalized-edge or penalized-cluster repairs, with shortest-path detours called out explicitly.
+
+Completion criteria:
+- [x] The document-processing diagnostics JSON includes per-attempt phase timings and route-pass counts
+- [x] The optimization plan identifies the dominant runtime phase from measured evidence
+- [x] The sprint records the shortest-path detour finding and the local-repair optimization direction
+
+### TASK-006 - Convert retry attempts to penalized-lane local repair
+Status: DONE
+Dependency: TASK-005
+Owners: Implementer
+Task description:
+Replace whole-graph reroutes on iterative retry attempts with targeted repair of only the penalized edges or edge clusters. Keep attempt 1 as the global strategy candidate, force attempt 2 to prioritize shortest-path detours, and stop treating ordinary forward edges that overshoot outside the graph as protected corridor routes.
+
+Completion criteria:
+- [x] Attempt 1 remains the only full-strategy reroute per strategy
+- [x] Attempt 2+ reroute only the penalized edge subset and expose that subset in diagnostics
+- [x] The document-processing render shows the `Set emailDispatchFailed -> End` edge repaired to a direct L-shape instead of the previous deep detour
+- [x] Targeted renderer tests and the full workflow renderer test project pass
+
+### TASK-007 - Add gateway-specific polygon boundary landing
+Status: DONE
+Dependency: TASK-006
+Owners: Implementer
+Task description:
+Replace the remaining rectangle-style landing assumptions for `Decision`, `Fork`, and `Join` nodes with gateway-specific polygon-boundary handling. Off-axis gateway entry and exit should land on the actual boundary with short diagonal stubs, gateway-specific backtracking/entry validation should stop misclassifying those routes, and rectangle-side highway detection should no longer treat gateway targets as ordinary target-side highway groups.
+
+Completion criteria:
+- [x] Gateway helper logic can project an off-axis lane to a diagonal boundary landing instead of falling back to rectangular snapping
+- [x] Workflow renderer tests cover diagonal gateway exit and diagonal gateway entry against `Decision` nodes
+- [x] Document-processing artifact render passes again with zero selected broken short highways and zero selected entry-angle violations
+- [x] Workflow docs and module-local guidance mention the gateway-specific landing behavior
+
+### TASK-008 - Refine gateway diagonals to avoid corner-vertex landings
+Status: DONE
+Dependency: TASK-007
+Owners: Implementer
+Task description:
+Tighten the gateway-boundary helper so `Decision`, `Fork`, and `Join` nodes still allow short diagonal stubs on their side faces, but no longer land those diagonals directly on a gateway corner vertex. Any remaining corner-diagonal cases must surface as entry-angle defects so the local repair path and the document-processing artifact assertion can catch them.
+
+Completion criteria:
+- [x] Side-face gateway diagonals remain valid for off-axis entry and exit
+- [x] Corner-vertex gateway diagonals are rejected and shifted onto the adjacent edge interior
+- [x] The document-processing artifact test asserts zero selected gateway corner diagonals
+- [x] Workflow docs and module-local guidance mention the corner-diagonal exclusion
+
+### TASK-009 - Fix gateway target slots and repeat-corridor node safety
+Status: DONE
+Dependency: TASK-008
+Owners: Implementer
+Task description:
+Finish the gateway join fix by making gateway target slots polygon-aware instead of rectangular, while keeping local repair scoped to penalized lanes. Also remove the repeat-collector loophole that let a preserved outer corridor skip node-crossing repair when the pre-corridor prefix still crossed a node.
+
+Completion criteria:
+- [x] Gateway target slot assignment uses polygon-face intersections so repaired gateway arrivals do not collapse back onto the same face rail
+- [x] Restricted local repair computes target-slot spacing against the full peer set on the same target side
+- [x] Repeat-collector pre-corridor prefixes can reroute into a preserved corridor when they cross a node
+- [x] The document-processing artifact render passes with zero selected node crossings and zero selected target-approach joins
+- [x] The full workflow renderer test project passes
+
+### TASK-010 - Finish source-departure lane separation and placement-grid follow-up
+Status: DONE
+Dependency: TASK-009
+Owners: Implementer
+Task description:
+Add a dedicated source-side same-lane rule so two edges leaving the same source face cannot silently share the same departure lane unless an explicit corridor/highway exception applies. Separate node placement spacing from the routing lattice by deriving a placement grid from the average non-terminal node size, then revalidate the document-processing artifact so the new source-side rule does not leave late boundary-angle or target-join regressions behind.
+
+Completion criteria:
+- [x] Source-departure same-lane conflicts surface as blocking shared-lane issues instead of being treated only as target-side joins or generic proximity
+- [x] Left-to-right placement spacing derives from an average-node-size placement grid rather than the edge-routing lattice alone
+- [x] The document-processing artifact render revalidates with zero selected shared-lane violations and no new boundary-angle or target-join regressions
+
+### TASK-011 - Decompose oversized ElkSharp sources
+Status: DONE
+Dependency: TASK-010
+Owners: Implementer
+Task description:
+Split the oversized active ElkSharp implementation files and the directly coupled Elk-specific renderer test files into concern-based partial classes so the routing logic stays behaviorally stable while the code tree becomes easier to navigate and extend.
+
+Completion criteria:
+- [x] `ElkEdgePostProcessor` is decomposed into concern-based partial files under `src/__Libraries/StellaOps.ElkSharp/`
+- [x] `ElkEdgeRouterIterative` is decomposed into concern-based partial files under `src/__Libraries/StellaOps.ElkSharp/`
+- [x] The oversized Elk-specific renderer tests are decomposed into partial classes without renaming tests
+- [x] Elk-focused validation is rerun and the regenerated document-processing artifact is visually reviewed for regressions
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-23 | Sprint created and work started for bounded deterministic ElkSharp edge refinement. | Implementer |
+| 2026-03-23 | Added module-local ElkSharp guidance, implemented bounded orthogonal refinement, updated `docs/workflow/ENGINE.md`, and passed `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --filter "FullyQualifiedName~ElkSharp" -v minimal` (15/15). | Implementer |
+| 2026-03-23 | Reopened ElkSharp sprint work to tighten iterative-router rule enforcement for proximity/highway handling after document-processing artifact review exposed remaining violations. | Implementer |
+| 2026-03-23 | Tightened iterative router spacing/highway handling, updated ElkSharp docs, regenerated the document-processing artifacts, and passed `dotnet build src/__Libraries/StellaOps.ElkSharp/StellaOps.ElkSharp.sln`, `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal`, and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore` (20/20). | Implementer |
+| 2026-03-23 | Reopened TASK-004 after review of the latest artifact showed that broken short highways were still being detected but not rejected by the iterative strategy loop. | Implementer |
+| 2026-03-23 | Updated the iterative acceptance loop to retry strategies when final post-processing still leaves broken short highways, regenerated the document-processing artifacts, visually inspected `elksharp.png`, and re-ran `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` plus `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore` (20/20). | Implementer |
+| 2026-03-23 | Reopened TASK-004 again to extend the iterative retry gate beyond broken short highways and verify that proximity, entry-angle, label, and crossing rules are also iterated instead of remaining score-only. | Implementer |
+| 2026-03-23 | Added bounded retry coverage for proximity, entry-angle, label, and crossing pressure, capped strict-mode search breadth to keep the document-processing render near 30 seconds, restored a final post-processing node-crossing cleanup, and revalidated `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` plus `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore` (20/20). | Implementer |
+| 2026-03-23 | Tightened proximity participation in the bounded retry loop, reduced strict-mode search breadth to keep the artifact render near 30 seconds, restored zero-node-crossing output with a final post-processing cleanup, and re-ran `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` plus `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore` (20/20). | Implementer |
+| 2026-03-23 | Temporarily disabled highway breaking/scoring in the iterative ElkSharp router to isolate whether the document-processing artifact was being distorted by false-positive highway handling, then re-ran `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 23s). The generated diagnostics showed `DetectedHighways=[]`, `FinalBrokenShortHighwayCount=0`, and a weaker final score (`-38677.87470033738`), indicating the visible shared-path issues are not caused solely by the highway pass. | Implementer |
+| 2026-03-23 | Re-enabled highway processing, added a blocking `TargetApproachJoinViolations` rule with maximum score penalty to stop non-applicable shared arrival rails from being silently selected, updated variant artifact labels to expose the new metric, and re-ran `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 87s). The best fallback render improved the `End`-side collapse from 4 join violations in baseline to 1 remaining join violation, while keeping `FinalBrokenShortHighwayCount=0`. | Implementer |
+| 2026-03-23 | Expanded the iterative-router pressure path from the accidental 2-attempt/4-strategy clamp to bounded multi-attempt retries with a wider finite strategy sweep, added stagnation cutoffs to avoid blind repetition, and wired the document-processing artifact test to emit `elksharp.progress.log` plus in-memory progress diagnostics so long-running strategy searches can be inspected while they are still running. A live run confirmed the new path executed `Strategy 1 attempt 1`, `attempt 2`, `attempt 3`, then advanced to `Strategy 2` instead of stopping after two attempts. | Implementer |
+| 2026-03-24 | Added per-attempt phase timings and route-pass counters to the iterative diagnostics JSON, regenerated the document-processing artifact with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 50s), and confirmed the runtime hotspot is overwhelmingly `route-all-edges`: for the selected `reverse` strategy the three attempts spent about `45.3s` in `route-all-edges` versus about `15.9ms` in all post-processing/scoring phases combined. The same run still reported `ExcessiveDetourViolations=1` for `edge/33`, so the shortest-path issue remains unresolved and requires a local detour-repair path rather than more full-graph retries. | Implementer |
+| 2026-03-26 | Tightened the long-diagonal rule from two average node-shape lengths to one average node-shape length, mirrored the renderer artifact helper to the same threshold, added a direct `Evaluation Condition -> Internal Discussion` scoring regression, and revalidated the focused ElkSharp renderer tests. The full document-processing artifact rerun cleared long-diagonal and target-join offenders, but the selected layout still fails on a separate shared-lane pair (`edge/9+edge/22`). | Implementer |
+| 2026-03-26 | Added a final winner-refinement boundary-slot restabilization pass so late shared-lane cleanup cannot pull decision-source exits back off the discrete slot lattice, added a focused document-processing layout regression for boundary-slot pressure, and updated the ElkSharp docs to record the terminal slot re-snap requirement. | Implementer |
+| 2026-03-26 | Tightened the node-side slot lattice into a strict terminal rule: singleton source/target endpoints now must center on their resolved face slot, preserved repeat/corridor exits are no longer exempt from the final slot snap, and strict slot repairs may bypass the generic shared-lane validator when the centered repair is still obstacle-safe and boundary-valid. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~BoundarySlotHelpers_When" -v minimal` (`5/5`). | Implementer |
+| 2026-03-24 | Reworked iterative retry attempts to repair only penalized edges after the first full strategy pass, made attempt 2 prioritize shortest-path detours, narrowed the protected-corridor exemption so ordinary forward overshoots still qualify for detour repair, and revalidated with `dotnet build src/__Libraries/StellaOps.ElkSharp/StellaOps.ElkSharp.sln`, `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 22s), and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore` (20/20). The new artifact diagnostics show attempt 2+ `Mode=local-repair` with rerouted-edge counts below the full graph, and the `Set emailDispatchFailed -> End` path is now the direct L-shape instead of the previous deep outer detour. | Implementer |
+| 2026-03-24 | Added late local geometry repair for node-side entry/exit angles, repeat-collector return-lane stacking, and target-side slot spacing; narrowed repeat-collector target-join scoring so the shared outer collector column is not miscounted as a target-side join; updated the backward-family regression expectations; and revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~ElkSharpWorkflowRenderLayoutEngineTests" -v minimal` (11/11) plus `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 32s). The regenerated document-processing artifact now reaches `NodeCrossings=0`, `BrokenShortHighways=0`, `RepeatCollectorCorridorViolations=0`, `EntryAngleViolations=0`, `TargetApproachJoinViolations=0`, and `ExcessiveDetourViolations=0`, with strategy `reverse` becoming a valid selected result. | Implementer |
+| 2026-03-24 | Added a blocking target-approach-backtracking metric plus local shortest-path repair so `Execute Batch -> Check Result` no longer curls past the target side before returning, kept attempt 2+ focused on penalized lanes only, and updated the backward-family collector regression to allow the nearest loop to take the new shorter direct return while the remaining outer-loop family still stacks on shared top collector lanes. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenLaidOutWithElkSharp_ShouldNotBacktrackIntoCheckResult" -v minimal` (1/1) and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~LayoutAsync_WhenBackwardFamilySharesTarget_ShouldStackOuterCollectorLanes" -v minimal` (1/1). | Implementer |
+| 2026-03-24 | Optimized the A* hot path by precomputing node-obstacle blocked step masks per route, replacing the closed-set `HashSet` with indexed state flags, and adding cheap soft-obstacle bounding-box rejection before exact intersection/proximity math. Measured document-processing render time dropped from `41s` test duration / `62.34s` wall clock to `3s` / `8.94s`, and the full renderer test project dropped from `1m35s` to `6s` test duration (`17.25s` wall clock). Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore -v minimal` (21/21). | Implementer |
+| 2026-03-24 | Added gateway-specific polygon-boundary landing for `Decision`/`Fork`/`Join`, including diagonal-stub projection helpers, gateway-aware boundary-angle/backtracking scoring, and exclusion of gateway targets from rectangle-style short-highway grouping. Added focused gateway regression tests, regenerated the document-processing artifact render, and revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~GatewayBoundaryHelpers_WhenDecisionAnchorIsOffAxis_ShouldProjectDiagonalStub|FullyQualifiedName~LayoutAsync_WhenDecisionSourceExitsTowardLowerBranch_ShouldUseDiagonalGatewayExit|FullyQualifiedName~LayoutAsync_WhenDecisionTargetIsReachedOffAxis_ShouldUseDiagonalGatewayEntry" -v minimal`, `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal`, and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore -v minimal` (24/24). | Implementer |
+| 2026-03-24 | Tightened gateway polygon landing again so 45-degree stubs are kept on gateway side faces but not on gateway corner vertices, added helper and artifact regressions for corner-diagonal rejection, regenerated the document-processing render, visually checked `elksharp.png`, and revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~GatewayBoundaryHelpers|FullyQualifiedName~DecisionSourceExitsTowardLowerBranch|FullyQualifiedName~DecisionTargetIsReachedOffAxis|FullyQualifiedName~DocumentProcessingWorkflow_WhenLaidOutWithElkSharp_ShouldNotBacktrackIntoCheckResult" -v minimal`, `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal`, and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore -v minimal` (26/26). | Implementer |
+| 2026-03-24 | Finished the gateway-face-slot and repeat-corridor safety follow-up: gateway target slots now come from polygon-face intersections instead of rectangular side slots, restricted local repair computes slot spacing against the full peer set, and above-corridor repeat collectors reroute only the pre-corridor prefix when that prefix crosses a node. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~GatewayBoundaryHelpers|FullyQualifiedName~DecisionSourceExitsTowardLowerBranch|FullyQualifiedName~DecisionTargetIsReachedOffAxis" -v minimal` (7/7), `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1), and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore -v minimal` (28/28). | Implementer |
+| 2026-03-24 | Fixed the latest gateway-source and repeat-return regressions without widening retries back to whole-graph reroutes: gateway-source dominant-axis detours are now only asserted when a clean direct repair opportunity actually exists, the focused blocker regression keeps a right-facing gateway exit that climbs above the blocker before continuing, and the selected document-processing artifact again keeps repeat-return lanes outside the `Load Configuration` clearance band. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~GatewayBoundaryHelpers_WhenDecisionSourceHeadsMostlyRight_ShouldUseDirectFaceExit|FullyQualifiedName~GatewayBoundaryHelpers_WhenDecisionSourceHasBlockingNode_ShouldRepairOnlyTheLocalExitPrefix|FullyQualifiedName~GatewayBoundaryHelpers_WhenDecisionSourceAlreadyTurnsDownIntoBlocker_ShouldRecoverRightFacingExitFirst|FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (4/4) and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore -v minimal` (38/38). | Implementer |
+| 2026-03-25 | Reopened ElkSharp follow-up work for the user-reported source-side same-lane conflict between `Internal Notification -> Has Recipients` and `Internal Notification -> Set internalNotificationFailed`. Added source-departure join spreading plus blocking `SharedLaneViolations`, derived placement spacing from an average-node-size placement grid, and verified the focused helper regression with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~SourceDepartureHelpers_WhenOutgoingEdgesShareTheSameDepartureLane_ShouldSpreadOnlyTheConflictingPeer" -v minimal` (1/1). The current document-processing artifact now reports `SharedLaneViolations=0` for the selected route, but still has unresolved late boundary-angle / target-join regressions (`EntryAngleViolations=6`, `TargetApproachJoinViolations=1`), so TASK-010 remains open. | Implementer |
+| 2026-03-25 | Tightened the iterative local-repair planner so attempt 2+ now selects only currently failing edges plus exact conflict peers instead of padding the repair set with generic ranked edges, and added a lock-aware parallel local builder that computes candidates concurrently but serializes overlapping source/target neighborhoods before merging deterministically. Revalidated with `dotnet build src/__Libraries/StellaOps.ElkSharp/StellaOps.ElkSharp.sln -v minimal` and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (still failing in ~20s on `SharedLaneViolations=1`, `UnderNodeViolations=2`; selected offender cluster remains `edge/15+edge/17`, `edge/9`, `edge/15`). | Implementer |
+| 2026-03-26 | Cleared the last document-processing handoff by letting gateway target peer-conflict candidates start from slotted feeder paths and reusing focused target-peer conflict polish during transactional final-detour repair. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~Debug_DumpDocumentProcessingFinalDetourOffenders" -v normal --logger "console;verbosity=normal"` (1/1) and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 2m42s). | Implementer |
+| 2026-03-26 | Tightened non-gateway target backtracking so a short orthogonal hook that reaches the boundary for less than one node depth is treated as a forbidden fake side entry, then added a focused `Load Configuration -> Setting configParameters` regression. | Implementer |
+| 2026-03-26 | Extended the same short-hook rule to gateway targets after `Internal Notification -> Has Recipients` still approached the decision from the left and only changed direction in the last few pixels. Gateway target repair/acceptance now rejects those fake face joins, and the focused workflow regression covers the decision-target case. | Implementer |
+| 2026-03-26 | Closed the remaining `Load Configuration -> End` detour follow-up by letting local obstacle-skirt repair reuse interior axes from the current route and try a zero-clearance fallback before keeping a high preserved overshoot. Revalidated with `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~ShortcutHelpers_WhenRectSourceCanPreserveRectTargetTopEntry_ShouldClearExcessiveDetour" -v minimal` (1/1) and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1, 2m24s). | Implementer |
+| 2026-03-26 | Added a discrete node-side slot lattice so one input/output cannot silently stack on the same boundary point: gateway faces now resolve to `1` centered slot or `2` centered slots, rectangular `left`/`right` faces to at most `3` evenly spread slots, and rectangular `top`/`bottom` faces to at most `5` evenly spread slots. Wired the same capacity/assignment logic through scoring, highway/join detection, source-target slot repair, and mixed-face alternate-side repair, then revalidated `BoundarySlotHelpers_WhenNodeKindsResolveSideCapacities_ShouldSpreadSlotsEvenly`, `GatewayBoundaryHelpers_WhenGatewayJoinReceivesDirectAndElbowedLeftArrivals_ShouldSpreadTargetSlots`, `MixedNodeFaceHelpers_WhenMixedTopFaceEntriesAreOffLatticeWithoutLaneConflict_ShouldSnapToDiscreteSlots`, and `SourceDepartureHelpers_WhenOutgoingEdgesShareTheSameDepartureLane_ShouldSpreadOnlyTheConflictingPeer` (`4/4`). | Implementer |
+| 2026-03-27 | Reconciled gateway-source scoring with the resolved discrete slot lattice so late winner restabilization no longer re-flags compliant singleton gateway exits. Revalidated `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~BoundarySlotHelpers_WhenDecisionSourceSlotsNeedLateRestabilization_ShouldRepairGatewayExitsAndDefaultDetours" -v minimal` (1/1) and `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~BoundarySlotHelpers_When" -v minimal` (8/8). Fresh document-processing end-to-end reruns still stalled after entering the ElkSharp layout path and did not emit new progress-log updates or fresh artifacts, so full artifact revalidation remains pending. | Implementer |
+| 2026-03-28 | Added focused regressions for the remaining `edge/15`/`edge/35` target-join collapse and `edge/3`/`edge/4` shared-lane collapse, then updated final restabilization to preserve a direct shared-lane repair when it lowers shared-lane violations without increasing node crossings. Trimmed the compact terminal-closure path and the winner fast-terminal candidate builder down to local-only passes after live `elksharp.progress.log` inspection showed those supposedly cheap branches were still doing heavyweight work. Revalidated `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~FinalRestabilization_WhenForkDeparturesIntoProcessAndJoinShareALane_ShouldKeepTheSharedLaneRepair|FullyQualifiedName~FinalRestabilization_WhenRepeatRightFaceTerminalRailCollapses_ShouldKeepTheJoinRepair|FullyQualifiedName~SharedLaneHelpers_WhenForkDeparturesIntoProcessAndJoinShareALane_ShouldSeparateThem|FullyQualifiedName~TargetApproachHelpers_WhenRepeatRightFaceReturnsShareTerminalRail_ShouldPushOneArrivalFartherOut" -v minimal` (`4/4`, about `2s`). Full `DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings` revalidation is still running; the updated logs now pass the previous pseudo-hang point and reach the final winner fast-terminal focus instead of stalling before it. | Implementer |
+
+| 2026-03-28 | Decomposed `ElkEdgePostProcessor`, `ElkEdgeRouterIterative`, `ElkSharpEdgeRefinementTests`, and `DocumentProcessingWorkflowRenderingTests` into partial files. Rebuilt the Elk renderer test project successfully via `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj -v minimal`, regenerated the document-processing artifact set under `bin/Debug/net10.0/TestResults/workflow-renderings/20260328/DocumentProcessingWorkflow/`, and visually reviewed `elksharp.png` with no obvious regression from the file split. Follow-up focused `dotnet test` runs hit the existing long-lived `testhost` hang after artifact generation, so the validation evidence for this refactor is the clean rebuild plus the fresh artifact/log outputs rather than a new full-suite completion record. | Implementer |
+
+## Decisions & Risks
+- 2026-03-26: The remaining document-processing defect was not another retry-budget issue. Gateway target peer-conflict candidate building needed a slotted feeder so focused peer-conflict polish could separate same-face arrivals without restoring the final excessive detour.
+- 2026-03-26 follow-up: the `Load Configuration -> Setting configParameters` edge exposed a different blind spot. The rectangular target-entry rule only validated the final boundary angle and true overshoot, so a `6px` vertical stub into the bottom face still passed as a valid `90`-degree entry. Non-gateway target backtracking now also rejects short orthogonal hooks whose final boundary-depth is less than one node shape depth, which lets the existing backtracking endpoint normalizer move the edge onto the honest side face instead of preserving the fake bottom join.
+- 2026-03-26 gateway follow-up: `Internal Notification -> Has Recipients` exposed the same cheat on a decision target. Gateway target repair previously enforced only polygon-boundary contact and a valid final angle, so a long horizontal approach plus a tiny vertical drop into the diamond still passed. Gateway target validation now rejects short orthogonal last-moment hooks as invalid face joins as well. Updated docs: `docs/workflow/ENGINE.md`.
+- 2026-03-26 detour follow-up: `Load Configuration -> End` exposed a separate shortest-path blind spot after the fake entry hooks were gone. Local obstacle-skirt repair sampled only expanded-obstacle edges, so it skipped the already-safe interior lane at `Y=216.59` and preserved a much higher overshoot instead. The repair now reuses usable interior axes from the current path and tries a zero-clearance fallback before settling on a preserved detour. Updated docs: `docs/workflow/ENGINE.md`, `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`.
+- 2026-03-26 slot-lattice follow-up: node-boundary spreading had remained heuristic, so repeated source/target/mixed-face repairs could leave multiple edges effectively concentrated on the same face point even after join and lane conflicts were removed. Boundary-slot assignment is now explicit and shared across scoring and repair: gateways use `1` or `2` centered face slots, rectangular `left`/`right` faces use at most `3`, rectangular `top`/`bottom` faces use at most `5`, and no repair is accepted unless each edge lands on its assigned realizable slot. Updated docs: `docs/workflow/ENGINE.md`, `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`.
+- 2026-03-26 winner-refinement follow-up: boundary-slot assignment was correct inside the terminal repair passes, but the extra winning-solution shared-lane polish could still move decision-source exits off their assigned face slots after a valid candidate had already been chosen. Winner refinement now ends with a slot-restabilization pass that re-snaps the final selected edges before return. Updated docs: `docs/workflow/ENGINE.md`, `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`.
+- 2026-03-26 strict-slot follow-up: the earlier lattice still treated singleton entries and preserved repeat/corridor exits as effectively advisory, so the scorer could report concentrated/off-center endpoints that the final slot snap would skip. Final boundary-slot repair now uses the same all-endpoint lattice as scoring, with side-specific port exemptions only, and it accepts centered slot repairs when they remain obstacle-safe and boundary-valid even if the generic shared-lane validator is too conservative. Updated docs: `docs/workflow/ENGINE.md`, `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`.
+- 2026-03-27 gateway-source follow-up: once singleton entries and exits were scored against the same centered lattice, gateway-source scoring still treated some final slotted singleton exits as invalid because it re-applied generic near-vertex / preferred-face heuristics after the slot resolver had already chosen the realizable boundary landing. Gateway-source scoring now defers to the resolved source-slot assignment for boundary-slot-compliant singleton gateway exits, while keeping hard backtracking defects blocking. Focused slot regressions are green again, but the document-processing end-to-end renderer still needs a clean non-stalled rerun before the artifact can be treated as fully revalidated.
+- 2026-03-25 follow-up: the selected document-processing artifact now enforces zero below-graph lanes and zero overlong 45-degree segments, and gateway source exits are no longer allowed to leave from fork/join tip vertices. Gateway target join detection/spreading now groups arrivals by their landed boundary band instead of letting gateway arrivals slip through as highway-like exemptions. Targeted evidence: `dotnet test src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/StellaOps.Workflow.Renderer.Tests.csproj --no-restore --filter "FullyQualifiedName~DocumentProcessingWorkflow_WhenRenderedWithElkSharp_ShouldProducePngWithZeroNodeCrossings" -v minimal` (1/1 pass, refreshed 20260325 artifact). That checkpoint still left TASK-010 open; the 2026-03-26 peer-conflict fix closes it.
+- There was no module-local `AGENTS.md` under `src/__Libraries/StellaOps.ElkSharp/`; this sprint adds one before code changes so the module is no longer undocumented.
+- Cross-module edits are limited to workflow renderer tests and workflow engine docs because the implementation changes a shared library used by those surfaces.
+- The iterative router must remain deterministic. Seeded-random strategy variants are allowed only when the seed is graph-stable so the same graph yields the same candidate set and final output.
+- Updated docs: `docs/workflow/ENGINE.md`
+- Module-local guidance added: `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`
+- Follow-up implementation is constrained to `src/__Libraries/StellaOps.ElkSharp/`, workflow renderer tests, and sprint/doc updates; unrelated worktree changes remain out of scope.
+- Follow-up rule-enforcement work updated the effective strategy defaults to evaluate more deterministic candidates per render and aligned highway/proximity scoring with the actual shared-segment rule used by the iterative router.
+- Final strategy acceptance now re-checks the fully post-processed candidate for broken short highways and retries the same strategy with stricter clearance instead of accepting the first node-safe route.
+- Soft-rule retry coverage is now bounded: proximity, entry-angle, label, and crossing issues participate in one extra strategy retry, then the router falls back to score-based selection while preserving the zero-node-crossing cleanup and a smaller strict-mode strategy budget.
+- Temporary experiment in the current worktree disables highway breaking/scoring to isolate whether false-positive highway handling is the source of the document-processing artifact; the resulting render still shows substantial shared/parallel runs, so highway logic is not the only remaining cause.
+- Follow-up enforcement restores highway processing and adds a blocking target-approach-join metric with a node-crossing-scale penalty so non-applicable shared arrival rails surface explicitly in diagnostics and cannot be treated as ordinary proximity noise during strategy selection.
+- The iterative router had been effectively limited to one extra retry and four strategies when baseline artifacts were present, despite `MaxAdaptationsPerStrategy=10`. That clamp is now widened to bounded multi-attempt retries with a finite 6-8 strategy sweep, plus a stagnation cutoff so the renderer does not burn time repeating non-improving adaptations.
+- The document-processing artifact harness now writes `elksharp.progress.log` into the rendering output directory before layout starts, allowing direct inspection of per-strategy and per-attempt progress while the render is still running.
+- Measured phase timings show that the current runtime problem is not post-processing; it is repeated full-graph routing. In the 2026-03-24 document-processing run, each strategy spent essentially all time in `route-all-edges`, with post-processing/scoring in the low-millisecond range. Any serious performance improvement must therefore reduce or reuse whole-graph routing work.
+- The current shortest-path rule still fails on `edge/33` (`905.70px` routed versus `485.55px` direct Manhattan). The scoring rule catches the detour, but retries still reroute the entire graph and then select the least-bad invalid candidate. The next optimization step must add a local detour-repair phase that reroutes only the offending edge or its target-side conflict cluster while freezing the rest of the graph as hard or soft obstacles.
+- Iterative retries now repair only the penalized subset of edges after the first full-strategy pass. Diagnostics record the route mode and repaired edge ids so the document-processing artifact can prove that attempt 2+ no longer reroute the whole graph.
+- The previous shortest-path exemption for any edge with corridor-like bend points was too broad and hid ordinary forward overshoot artifacts such as `edge/33`. Only protected reverse/corridor routes now keep that exemption; forward overshoots are eligible for local detour repair.
+- Small or protected graphs now short-circuit to the baseline route before the iterative sweep. That preserves existing sink-corridor, backward-edge, and port-anchor contracts while still allowing the larger document-processing workflow to use iterative local repair.
+- Final local geometry repair now runs after iterative post-processing to enforce node-side entry/exit angles, repeat-return lane separation, and target-slot spacing without sending more edges back through A*. The document-processing artifact test now asserts zero selected broken highways, zero repeat-collector lane collapses, zero node-side angle violations, and zero disallowed target-side joins.
+- The shortest-path fix now treats target-side backtracking as a blocking defect. Late local repair trims or reroutes only the offending lane, and attempt 2+ tries a direct orthogonal shortcut before falling back to a low-penalty diagonal A* candidate when another rule blocks the straight repair.
+- The A* router now precomputes blocked node-step masks, which removed the repeated obstacle scan from neighbor expansion and cut document-processing route-all-edges time from the previous tens-of-seconds range to sub-second strategy attempts. Future A* optimization should extend the same idea to previously committed edge lanes: build lane-occupancy masks or blocked-segment maps for soft obstacles, and derive intermediate grid spacing from roughly one third of the average service-task width/height instead of the current fixed dense intermediate spacing.
+- Gateway nodes (`Decision`, `Fork`, `Join`) now use polygon-boundary landing instead of rectangle-side snapping. Off-axis lanes are allowed to finish with short diagonal stubs on the real gateway boundary, gateway-target backtracking detection now checks only the final near-end gateway approach instead of applying rectangle-side overshoot heuristics, and rectangle-style short-highway grouping is skipped for gateway targets because those cases are governed by gateway-boundary spacing rather than shared rectangular arrival rails.
+- Gateway diagonals are now restricted to gateway side faces. If a candidate lands on a gateway corner vertex, the helper shifts it onto the adjacent edge interior and the boundary-angle validator rejects any remaining corner diagonal so local repair and artifact assertions can catch it.
+- Gateway target repairs now use polygon-face slot projection instead of rectangular side slots. When only a penalized subset of edges is being repaired, target-slot spacing still considers the unchanged peer edges on that same target side so the repaired edge cannot collapse back into the existing arrival rail.
+- Repeat-collector edges with preserved outer corridors are no longer exempt from node-crossing repair. If the prefix that leads into the corridor crosses a node, that prefix is rerouted into the preserved corridor while the outer corridor segment remains intact.
+- Gateway-source dominant-axis scoring is now opportunity-gated: a gateway source is only treated as leaving on the wrong axis when a clean downstream-facing repair opportunity actually exists. Obstacle-blocked local exits can still take a short dogleg while the document-processing artifact assertions keep them clear of blockers and out of unrelated node clearance bands.
+- Long 45-degree segments are now capped at one average node-shape length instead of two. The scoring helper and the artifact-side offender detector use the same threshold so visually long diagonals cannot survive scoring while slipping past the renderer assertions.
+- Tightening the diagonal cap changes candidate selection pressure in the full document-processing artifact. The current worktree clears the long-diagonal and gateway-target join regressions, but the selected layout still exposes a separate shared-lane conflict (`edge/9+edge/22`) that needs another local repair pass before the full artifact test is green again.
+- The user-reported `Internal Notification` overlap was not a target-side highway issue. The previous rule set modeled target-side joins and repeat-corridor sharing, but not two edges leaving the same source face on the same departure lane. TASK-010 adds source-departure join spreading and blocking `SharedLaneViolations` for that case.
+- Node placement spacing now uses a separate placement grid derived from the average non-terminal node width/height (`ResolvePlacementGrid`) instead of depending only on the routing lattice. The focused helper/layout checks are green, but the end-to-end document-processing artifact still needs a clean rerun after the late boundary-angle / target-join regressions are resolved.
+- Iterative local repair now stays constrained to currently failing lanes and exact conflict peers. The planner no longer fills the repair budget with unrelated high-severity edges once the current failing rule set has been seeded.
+- Per-iteration local repair candidate building can now run in parallel, but builds that share a source or target neighborhood acquire the same lock and wait instead of racing through the same local conflict zone. Current measured document-processing renders still finish in about 20 seconds, so the remaining work is repair quality for the `edge/9` / `edge/15` cluster rather than retry churn.
+- 2026-03-28 runtime follow-up: the remaining slowdown was no longer in broad winner refinement. Live `elksharp.progress.log` traces showed the expensive branch had collapsed to the final winner fast-terminal focus `[edge/15, edge/3, edge/35, edge/4]`, where both the compact terminal-closure helper and the fast-terminal candidate builder were still doing heavyweight terminal/boundary work. Both paths are now restricted to local-only passes; focused geometry regressions are green again, but the full document-processing artifact still needs a completed rerun before the runtime drop and final artifact quality can be treated as revalidated.
+- 2026-03-28 decomposition follow-up: active ElkSharp code is now split into concern-based partials, and the regenerated document-processing artifact still renders cleanly after the move. The remaining validation nuisance is harness-related rather than routing-related: the renderer test host can stay resident after the artifact is written, so fresh decomposition evidence is the successful project rebuild, a new `elksharp.progress.log` ending with `ElkSharp layout optimize returned`, and visual review of the regenerated `elksharp.png`.
+- Optimization plan for the next pass:
+  1. Build a reusable immutable per-strategy routing context so grid lines, blocked segment masks, and target-slot metadata are computed once per strategy instead of once per edge route.
+  2. Replace global whole-graph retries for soft penalties with issue-focused repair passes: detour edge repair, target-side join repair, and proximity cluster repair.
+  3. Convert soft-obstacle scans to a spatial index or rasterized penalty map so `ComputeSoftObstacleCost` no longer walks all prior segments for every A* expansion.
+  4. Keep whole-graph strategy sweeps as candidate generation, but only run full post-processing/scoring on shortlisted candidates after cheap local repairs have converged.
+
+## Next Checkpoints
+- After TASK-002: targeted `dotnet test` run for ElkSharp renderer tests
+- After TASK-003: update sprint statuses and execution log with concrete command results

docs-archived/implplan/SPRINT_20260324_001_Platform_scripts_variables_validation_diff_compat.md

@@ -0,0 +1,172 @@
+# Sprint 20260324_001 — Scripts Library Enhancement: Variables, Validation, Diff, Compatibility
+
+## Topic & Scope
+- Add per-target variable/secret declarations to scripts, with editable UI and Monaco completions.
+- Enhance Compile/Validate with real lint checks (safety, variable refs, structure) and Monaco diagnostic markers.
+- Add version diff viewer using Monaco diff editor for side-by-side version comparison.
+- Add deployment compatibility checker (language-target matrix, variable resolution, secret availability).
+- Working directory: `src/Platform/StellaOps.Platform.WebService/`, `src/Web/StellaOps.Web/src/app/`.
+- Expected evidence: backend build success, frontend build success, e2e tests pass (T10.1–T10.6).
+
+## Dependencies & Concurrency
+- No upstream sprint dependencies.
+- All 5 phases implemented in a single batch (Phase 1 models first, Phases 2-5 in parallel).
+
+## Documentation Prerequisites
+- None — self-contained feature enhancement.
+
+## Delivery Tracker
+
+### TASK-001 - Phase 1: Models & Contracts
+Status: DONE
+Dependency: none
+Owners: Developer
+Task description:
+- Add `ScriptVariableDeclaration`, `ScriptVersionDetailDto`, `CheckCompatibilityRequest`, `CompatibilityResultDto`, `CompatibilityIssue` records to backend contracts.
+- Add `Variables` field to `ScriptDetail`, `ScriptSummary`, `CreateScriptApiRequest`, `UpdateScriptApiRequest`.
+- Add `DeclaredVariables` to `ValidateScriptApiRequest`, `Category` to `ScriptDiagnosticDto`.
+- Add corresponding TypeScript interfaces to frontend models.
+- Extend `IScriptService` with `GetVersionContentAsync` and `CheckCompatibilityAsync`.
+- Extend `ScriptsApi` interface with `getVersionContent`, `checkCompatibility`, and `declaredVariables` param.
+
+Completion criteria:
+- [x] All backend DTOs compile
+- [x] All frontend interfaces defined
+- [x] Service interface extended
+
+### TASK-002 - Phase 2: Per-Target Variables & Secrets
+Status: DONE
+Dependency: TASK-001
+Owners: Developer
+Task description:
+- Propagate variables through create/update in `InMemoryScriptService`.
+- Add sample variables to seed scripts (SERVICE_URL, TIMEOUT, DB_CONNECTION, IMAGE_REF, etc.).
+- Add variables editor UI in script-detail with add/remove/edit rows.
+- Show user variables in script editor context panel with click-to-insert.
+- Register user variable completions alongside system vars in Monaco.
+
+Completion criteria:
+- [x] Variables persisted through create/update cycle
+- [x] Mock scripts include sample variables
+- [x] Variables editor renders and modifies signal state
+- [x] Context panel shows user variables
+- [x] Monaco autocomplete includes user variables on `$` trigger
+
+### TASK-003 - Phase 3: Enhanced Compile/Validate
+Status: DONE
+Dependency: TASK-001
+Owners: Developer
+Task description:
+- Variable reference validation: scan for `${STELLA_*}`, `$env:STELLA_*`, `Environment.GetEnvironmentVariable("STELLA_*")`.
+- Bash: warn if missing `set -euo pipefail`; error on `rm -rf /`.
+- C#: warn on empty catch blocks.
+- General: hardcoded IPs, TODO/FIXME, >500 lines.
+- Improved brace matching with line numbers.
+- Frontend: pass declared variables to validate, set Monaco diagnostic markers.
+
+Completion criteria:
+- [x] Backend validation returns categorized diagnostics
+- [x] Frontend mock validates bash variable refs and safety
+- [x] Monaco editor shows squiggly underlines from diagnostics
+- [x] Markers cleared on content change
+
+### TASK-004 - Phase 4: Script Version Diff Viewer
+Status: DONE
+Dependency: TASK-001
+Owners: Developer
+Task description:
+- Store version content in `TenantState.VersionContents` on create/update.
+- Implement `GetVersionContentAsync` and GET endpoint.
+- Create `ScriptDiffComponent` with Monaco diff editor.
+- Add route `:scriptId/diff` and "Compare" links in version history.
+
+Completion criteria:
+- [x] Version content stored per version number
+- [x] GET endpoint returns version content
+- [x] Diff component loads both versions and renders Monaco diff editor
+- [x] Compare links navigate with correct query params
+
+### TASK-005 - Phase 5: Deployment Compatibility Check
+Status: DONE
+Dependency: TASK-001
+Owners: Developer
+Task description:
+- Language-target matrix (bash/ECS warn, PowerShell/Linux warn).
+- Variable resolution against target metadata, secret availability check.
+- Runtime notes for ECS and Nomad targets.
+- POST endpoint for compatibility check.
+- Compatibility panel in script-detail with target type dropdown and results.
+
+Completion criteria:
+- [x] Backend returns categorized compatibility issues
+- [x] POST endpoint wired
+- [x] UI panel toggles, sends request, displays results
+- [x] Mock client implements same matrix logic
+
+### TASK-006 - Version restore (edit older version)
+Status: DONE
+Dependency: TASK-004
+Owners: Developer
+Task description:
+- Add "Edit" button on each non-current version in version history.
+- Load older version content into Monaco editor via `getVersionContent()` API.
+- Show warning banner when editing an old version.
+- Show confirmation modal on save — "this will create a new latest version".
+- Add `setContent()` method to ScriptEditorComponent.
+
+Completion criteria:
+- [x] Edit button loads older version content into editor
+- [x] Warning banner visible with "Back to latest" dismiss
+- [x] Modal blocks save until confirmed
+- [x] After save, editingVersion resets and version list refreshes
+
+### TASK-007 - Input field styling (Stella Ops design system)
+Status: DONE
+Dependency: none
+Owners: Developer
+Task description:
+- Match all form inputs to global search style: warm `surface-tertiary` background, same border/text/height/transition.
+- Fix `box-sizing: border-box` overlap bug (inputs on same row overlapping by ~10px).
+- Increase grid gaps between side-by-side fields (0.5rem → 1rem).
+- Document the input field convention in `src/Web/StellaOps.Web/AGENTS.md`.
+
+Completion criteria:
+- [x] All inputs use surface-tertiary background, border-primary, 34px height, 0.12s transitions
+- [x] box-sizing: border-box on all inputs — no overlap
+- [x] Grid gaps 1rem between fields
+- [x] AGENTS.md updated with Input Field Convention section
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-24 | Sprint created. All 5 phases implemented. Backend + frontend build clean. | Developer |
+| 2026-03-24 | Docker images rebuilt (platform + console). Stack restarted. | Developer |
+| 2026-03-24 | E2E tests T10.1–T10.6 pass (7/7 including setup). | Developer |
+| 2026-03-24 | TASK-006: Version restore with warning modal implemented. | Developer |
+| 2026-03-24 | TASK-007: Input field styling fixed — warm bg, border-box, spacing. AGENTS.md updated with Input Field Convention. | Developer |
+
+## Decisions & Risks
+- All script storage is in-memory (`InMemoryScriptService`). No database migration required for this sprint.
+- PowerShell not in `ScriptLanguageDto` enum — PowerShell-specific backend validation omitted but variable reference scanning includes `$env:STELLA_*` patterns.
+- Version content storage is append-only within `TenantState`; no cleanup on version limit.
+- Input overlap root cause: `box-sizing: content-box` (browser default) + `padding: 0 0.75rem` + `border: 1px` caused inputs to extend ~26px beyond their grid cell. Fix: `box-sizing: border-box` on all inputs.
+
+## Next Checkpoints
+- Integration with real `ScriptService` backed by PostgreSQL (future sprint).
+- E2E tests for new features (variables editor, diff viewer, compatibility panel) — not yet covered by existing T10 suite.
+
+## Files Modified
+
+| File | Changes |
+|------|---------|
+| `src/Platform/.../Contracts/ScriptApiModels.cs` | +6 new DTOs/records, Variables on Detail/Summary/Requests |
+| `src/Platform/.../Services/IScriptService.cs` | +2 methods |
+| `src/Platform/.../Services/InMemoryScriptService.cs` | Variables storage, enhanced validation, version content, compatibility |
+| `src/Platform/.../Endpoints/ScriptEndpoints.cs` | +2 endpoints (version content, compatibility) |
+| `src/Web/.../core/api/scripts.models.ts` | +5 interfaces |
+| `src/Web/.../core/api/scripts.client.ts` | +3 API methods, mock expansions, variables on scripts |
+| `src/Web/.../features/scripts/script-detail.component.ts` | Variables editor, enhanced compile, compare links, compatibility panel |
+| `src/Web/.../features/scripts/script-diff.component.ts` | **New** — Monaco diff viewer |
+| `src/Web/.../features/scripts/scripts.routes.ts` | +1 route (diff) |
+| `src/Web/.../shared/components/script-editor/script-editor.component.ts` | User variables input, diagnostic markers |
+| `src/Web/.../shared/components/script-editor/script-context.ts` | User variables in completions |

docs-archived/implplan/SPRINT_20260328_003_ElkSharp_compound_sugiyama_support.md

@@ -0,0 +1,84 @@
+# Sprint 20260328-003 - ElkSharp Compound Sugiyama Support
+
+## Topic & Scope
+- Extend the native ElkSharp layered engine to support true compound nodes using the existing `ParentNodeId` model contract.
+- Keep the current layered pipeline shape for flat graphs while adding a hierarchy-aware path for compound graphs.
+- Working directory: `src/__Libraries/StellaOps.ElkSharp/`.
+- Expected evidence: focused ElkSharp compound-layout tests, flat-layout regression coverage, and workflow engine docs updated for compound-node support.
+
+## Dependencies & Concurrency
+- Depends on the current ElkSharp layered pipeline in `src/__Libraries/StellaOps.ElkSharp/`.
+- Safe cross-module edits for this sprint are limited to:
+  - `src/Workflow/__Tests/StellaOps.Workflow.Renderer.Tests/`
+  - `docs/workflow/`
+
+## Documentation Prerequisites
+- `docs/code-of-conduct/CODE_OF_CONDUCT.md`
+- `docs/code-of-conduct/TESTING_PRACTICES.md`
+- `docs/workflow/ENGINE.md`
+- `src/__Libraries/StellaOps.ElkSharp/AGENTS.md`
+- `src/__Libraries/StellaOps.ElkSharp/ElkSharpLayeredLayoutEngine.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkGraphValidator.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkLayerAssignment.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkNodeOrdering.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkNodePlacement.cs`
+- `src/__Libraries/StellaOps.ElkSharp/ElkEdgeRouter.cs`
+
+## Delivery Tracker
+
+### TASK-001 - Add compound hierarchy validation and metadata
+Status: DONE
+Dependency: none
+Owners: Implementer
+Task description:
+- Replace the flat-only `ParentNodeId` rejection with strict compound validation for parent existence, cycle-free containment, and leaf-only real edges.
+- Add reusable internal hierarchy metadata so the layered engine can reason about top-level groups, descendants, ancestors, and lowest common ancestors without duplicating tree traversal logic.
+
+Completion criteria:
+- [x] Compound graphs with valid `ParentNodeId` trees are accepted
+- [x] Invalid parent references, containment cycles, and non-leaf edge endpoints are rejected deterministically
+- [x] Internal hierarchy helpers expose the data needed by ordering, placement, and routing
+
+### TASK-002 - Implement hierarchy-aware layered ordering and parent placement
+Status: DONE
+Dependency: TASK-001
+Owners: Implementer
+Task description:
+- Keep flat graphs on the existing path, but add a compound-aware path that layers and routes visible leaves while keeping siblings contiguous in each layer ordering.
+- Compute non-empty parent bounds bottom-up from child bounds plus header and padding, while preserving absolute child coordinates in the final result.
+
+Completion criteria:
+- [x] Flat graphs still use the existing path unchanged
+- [x] Compound children of the same parent stay adjacent in the ordered layers
+- [x] Parent bounds wrap descendants with header and padding and respect minimum declared width and height
+
+### TASK-003 - Add compound boundary crossings, tests, and docs
+Status: DONE
+Dependency: TASK-002
+Owners: Implementer
+Task description:
+- Insert explicit parent-boundary crossings for leaf-to-leaf edges that leave or enter compounds, keeping edges from silently skipping compound borders.
+- Add focused compound-layout tests and update workflow engine docs and ElkSharp guidance to describe the supported compound contract.
+
+Completion criteria:
+- [x] Routed edges that cross compound boundaries expose explicit boundary-crossing points
+- [x] Focused ElkSharp tests cover empty parents, nested parents, parent bounds, and invalid compound input
+- [x] `docs/workflow/ENGINE.md` and `src/__Libraries/StellaOps.ElkSharp/AGENTS.md` document compound-node support and v1 limits
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-28 | Sprint created and work started for native ElkSharp compound-node support using the existing `ParentNodeId` contract. | Implementer |
+| 2026-03-28 | Added compound hierarchy validation, compound-aware layered placement/routing, focused public-surface tests, and contract documentation updates. | Implementer |
+| 2026-03-28 | `ElkSharpCompoundLayoutTests` passed (6/6). Full renderer project still reproduces the pre-existing post-artifact `testhost` hang, and a separate flat-layout regression slice in `ElkSharpWorkflowRenderLayoutEngineTests` currently fails on this branch. | Implementer |
+
+## Decisions & Risks
+- The compound rollout is limited to strict containment trees and leaf-to-leaf real edges in v1. Parent endpoints remain invalid input.
+- Flat-graph behavior must remain stable when no node sets `ParentNodeId`.
+- Compound routing will start by adding explicit ancestor boundary crossings on top of the existing routed leaf paths so the engine can ship usable compound support without rewriting the entire router in one step.
+- Broader renderer verification on the current branch is not yet fully green: `ElkSharpCompoundLayoutTests` pass, the document-processing artifact is regenerated successfully, but the full renderer project still leaves a hung `testhost` after the artifact phase and `ElkSharpWorkflowRenderLayoutEngineTests` currently reports four flat-layout failures that need separate triage.
+
+## Next Checkpoints
+- After TASK-001: focused validator and hierarchy tests
+- After TASK-002: compound ordering and parent-bounds tests
+- After TASK-003: targeted ElkSharp renderer test project run and workflow docs update

docs-archived/implplan/SPRINT_20260329_006_FE_audit_menu_consolidation.md

@@ -0,0 +1,120 @@
+# Sprint 006 - Audit Menu Consolidation (Hub-and-Spoke)
+
+## Topic & Scope
+- Merge module-specific audit views from the unified audit dashboard into their parent feature pages as contextual tabs.
+- Slim the unified audit dashboard from 9 tabs to 4 (Overview, All Events, Timeline, Correlations).
+- Fill audit gaps: add audit tabs to 5 pages that lacked audit coverage (Platform Jobs, Scanner Ops, Trust Admin/Attestor, SBOM Sources).
+- Create reusable `AuditModuleEventsComponent` for embedding audit event tables in feature pages.
+- Working directory: `src/Web/StellaOps.Web/src/app/`.
+- Expected evidence: Build passes, all 9 audit modules accessible from both contextual tabs and unified All Events.
+
+## Dependencies & Concurrency
+- No upstream sprint dependencies.
+- All Steps 1-5 can be executed in parallel.
+- Steps 6-8 depend on Steps 1-5 completion.
+- Steps 10-13 depend on Step 9.
+
+## Documentation Prerequisites
+- `docs/implplan/` sprint file (this file).
+
+## Delivery Tracker
+
+### TASK-001 - Add Audit Trail tab to VEX Hub
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] VEX Hub has 4th tab "Audit Trail" rendering AuditVexComponent
+- [x] Cross-link to unified audit
+
+### TASK-002 - Add Audit tab to Trust Admin
+Status: DONE
+Owners: Developer (agent)
+Completion criteria:
+- [x] Trust Admin has 4th tab "Audit" with sub-views for Trust Events, Air-Gap, Incidents
+- [x] Cross-link to unified audit
+
+### TASK-003 - Extend Policy Governance audit tab
+Status: DONE
+Owners: Developer (agent)
+Completion criteria:
+- [x] Policy Governance audit tab has sub-toggle: Governance Changes | Promotions & Approvals
+- [x] AuditPolicyComponent embedded for promotions view
+
+### TASK-004 - Extend Console Admin audit tab
+Status: DONE
+Owners: Developer (agent)
+Completion criteria:
+- [x] Console Admin audit tab has sub-tabs: Management | Token Lifecycle & Security
+- [x] AuditAuthorityComponent embedded for token view
+
+### TASK-005 - Add config audit to Integration Hub
+Status: DONE
+Owners: Developer (agent)
+Completion criteria:
+- [x] Integration detail page has "Config Audit" tab rendering AuditModuleEventsComponent (module=integrations)
+Note: Hub-level tab was removed for usability; audit placed on per-integration detail page instead. Shell quick links cross-reference unified audit.
+
+### TASK-006 - Slim unified audit dashboard
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] Dashboard has 4 tabs: Overview, All Events, Timeline, Correlations
+- [x] Module-specific tabs removed
+
+### TASK-007 - Add backward-compatible redirects
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] Old URLs (/evidence/audit-log/policy, etc.) redirect to new contextual locations
+
+### TASK-008 - Update sidebar navigation
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] Audit Bundles removed from Findings group
+- [x] Unified Audit Log renamed to Audit & Compliance with 3 sub-items
+
+### TASK-009 - Create reusable AuditModuleEventsComponent
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] Shared component with @Input module/modules, table, filters, pagination, event detail
+
+### TASK-010 - Fill audit gaps (jobengine, scheduler, scanner, sbom)
+Status: DONE
+Owners: Developer (agent)
+Completion criteria:
+- [x] Platform Jobs has Audit tab (jobengine + scheduler)
+- [x] Scanner Ops has Audit tab
+- [x] SBOM Sources has collapsible audit section with AuditModuleEventsComponent
+
+### TASK-011 - Wire airgap/incident audit to real API
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] AirgapAuditComponent wired to AuditLogClient.getAirgapAudit() with mock fallback
+- [x] IncidentAuditComponent has apiConnected signal and degraded banner
+
+### TASK-012 - Add bidirectional cross-links
+Status: DONE
+Owners: Developer
+Completion criteria:
+- [x] Contextual tabs link to unified All Events
+- [x] Unified All Events links to contextual module pages when single-module filter active
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-29 | Sprint created; implementation started. | Developer |
+| 2026-03-29 | Tasks 1, 6-9, 11-12 completed. Tasks 2-5, 10 in progress (agents). | Developer |
+| 2026-03-30 | Tasks 2-5, 10 completed. All 12 tasks DONE. Sprint ready to archive. | Developer |
+
+## Decisions & Risks
+- Hub-and-Spoke model chosen: contextual audit tabs for DevOps workflow, unified for auditor/CISO.
+- Data source differences documented: integrated and unified use different API clients with complementary data.
+- AirgapAuditComponent falls back to mock data if API unavailable (degraded banner shown).
+- IncidentAuditComponent shows degraded banner when Trust API incomplete.
+
+## Next Checkpoints
+- Build verification after all agents complete.
+- Manual verification of all 9 module audit access paths.

docs-archived/implplan/SPRINT_20260329_007_FE_unified_stella_assistant.md

@@ -0,0 +1,644 @@
+# Sprint 007 — Unified Stella Assistant: Mascot + Search + AI Chat as One
+
+## Topic & Scope
+
+**Problem**: Three disconnected help surfaces exist in the UI:
+1. Stella Helper (mascot) — static English-only tips, localStorage, no API
+2. Global Search (Ctrl+K) — unified search with entity cards and synthesis
+3. Advisory AI Chat (drawer) — SSE-streaming AI with citations and actions
+
+The user experiences these as separate tools. A new DevOps engineer has to discover each independently. The mascot has 189 tips but they're hardcoded in English, not connected to the search/AI knowledge, and can't be edited without a code deploy.
+
+**Goal**: Merge all three into a single **Unified Stella Assistant** where the mascot is the FACE of the system, the search is its MEMORY, and the AI chat is its VOICE. All content comes from the database, all text respects the user's locale, and the admin can author/update tips without deploying code.
+
+- Working directory: `src/Web/StellaOps.Web/src/app/`
+- Backend working directory: `src/Platform/` (for API + DB schema)
+- Expected evidence: unified component, DB schema, API endpoints, i18n integration
+
+## Dependencies & Concurrency
+- Depends on: existing `I18nService`, `UnifiedSearchClient`, `ChatService`, `SearchChatContextService`, `SearchContextRegistry`
+- Sprint 006 T0a (mascot core) provides the animation/UI foundation
+- Safe to parallelize: DB schema, API endpoints, and frontend can be built in parallel
+
+## Documentation Prerequisites
+- `docs/modules/platform/architecture-overview.md` — platform API patterns
+- `src/Web/StellaOps.Web/src/app/core/i18n/i18n.service.ts` — i18n patterns
+- `src/Web/StellaOps.Web/src/app/core/api/unified-search.client.ts` — search API
+- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.service.ts` — chat API
+
+---
+
+## Architecture: Target State
+
+```
+UNIFIED STELLA ASSISTANT
+
+┌──────────────────────────────────────────────────────────┐
+│                    Stella Mascot (UI)                      │
+│                                                            │
+│  ┌──────────┐  ┌──────────────┐  ┌──────────────────┐   │
+│  │ Tips Mode │  │ Search Mode  │  │ Chat Mode         │   │
+│  │ (default) │  │ (Ctrl+K)     │  │ (follow-up)       │   │
+│  │           │  │              │  │                    │   │
+│  │ DB-backed │  │ Unified      │  │ Advisory AI        │   │
+│  │ i18n-aware│  │ Search API   │  │ SSE streaming      │   │
+│  │ contextual│  │ + synthesis  │  │ + citations        │   │
+│  └─────┬─────┘  └──────┬───────┘  └────────┬───────────┘   │
+│        │               │                    │               │
+│        └───────────────┼────────────────────┘               │
+│                        │                                    │
+│              ┌─────────▼──────────┐                         │
+│              │ StellaAssistant    │                         │
+│              │ Service            │                         │
+│              │                    │                         │
+│              │ - mode signal      │                         │
+│              │ - context signal   │                         │
+│              │ - locale signal    │                         │
+│              │ - tips from API    │                         │
+│              │ - search bridge    │                         │
+│              │ - chat bridge      │                         │
+│              └─────────┬──────────┘                         │
+│                        │                                    │
+└────────────────────────┼────────────────────────────────────┘
+                         │
+              ┌──────────▼──────────┐
+              │ Backend APIs         │
+              │                      │
+              │ GET /api/v1/stella-  │
+              │   assistant/tips     │
+              │   ?route=X&locale=Y  │
+              │                      │
+              │ GET /api/v1/stella-  │
+              │   assistant/glossary │
+              │   ?locale=Y          │
+              │                      │
+              │ POST /api/v1/        │
+              │   unified-search     │
+              │   (existing)         │
+              │                      │
+              │ POST /api/v1/        │
+              │   advisory-ai/       │
+              │   conversations/     │
+              │   (existing)         │
+              └─────────────────────┘
+```
+
+### Mode Transitions
+
+```
+User lands on page
+  │
+  ▼
+TIPS MODE (default)
+  │ Shows DB-backed, locale-aware contextual tips
+  │ Mascot with speech bubble (current UI)
+  │
+  ├── User types in mascot bubble → SEARCH MODE
+  │     Mascot bubble becomes search input
+  │     Results appear inline (entity cards)
+  │     Same API as Ctrl+K (UnifiedSearchClient)
+  │
+  ├── User clicks "Ask Stella" or asks a question → CHAT MODE
+  │     Mascot bubble expands to chat interface
+  │     Uses existing ChatService (Advisory AI)
+  │     SSE streaming with mascot animations
+  │     Citations, actions, grounding score
+  │
+  ├── Ctrl+K → SEARCH MODE (focus mascot search input)
+  │
+  └── User clicks mascot after dismissing → TIPS MODE (re-opens)
+
+SEARCH MODE
+  │
+  ├── User clicks result → navigates, returns to TIPS MODE
+  ├── User clicks "Ask AI about this" → CHAT MODE with context
+  └── User clears search → TIPS MODE
+
+CHAT MODE
+  │
+  ├── AI suggests a search → SEARCH MODE with query pre-filled
+  ├── User clicks citation link → navigates, stays in CHAT MODE
+  ├── AI streaming done → stays in CHAT MODE for follow-ups
+  └── User clicks "Back to tips" → TIPS MODE
+```
+
+### Key Design Decisions
+
+**D1: Mascot replaces global search bar as primary entry point**
+The mascot bubble gets a search input field. Ctrl+K focuses this field instead of opening a separate dropdown. The separate `GlobalSearchComponent` dropdown becomes a fallback for users who prefer the old behavior.
+
+**D2: Chat is embedded in mascot, not a separate drawer**
+The `SearchAssistantHostComponent` drawer is replaced by the mascot's expanded chat mode. The mascot bubble grows to accommodate the conversation. On mobile, it goes full-screen.
+
+**D3: Tips content moves to database**
+The hardcoded `PAGE_TIPS` config becomes seed data. At runtime, tips are fetched from the backend API. This enables:
+- Admin authoring without code deploy
+- Per-locale translations
+- A/B testing of tip content
+- Analytics on which tips are helpful
+
+**D4: Mascot animates in sync with AI**
+During chat mode:
+- `progress: thinking` → mascot shows thinking animation
+- `progress: searching` → mascot shows searching animation
+- `token` events → mascot lip-syncs or nods
+- `citation` events → mascot points/highlights
+- `error` events → mascot shows concern
+- `done` → mascot shows satisfied pose
+
+---
+
+## Database Schema: `stella_assistant`
+
+### Table: `assistant_tips`
+```sql
+CREATE TABLE stella_assistant.tips (
+  tip_id          UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  route_pattern   TEXT NOT NULL,          -- '/ops/policy/vex', '/ops/policy/vex/consensus'
+  context_trigger TEXT,                   -- 'sbom-missing', 'gate-blocked', NULL for generic
+  locale          TEXT NOT NULL DEFAULT 'en-US',
+  sort_order      INT NOT NULL DEFAULT 0,
+  title           TEXT NOT NULL,
+  body            TEXT NOT NULL,
+  action_label    TEXT,                   -- 'Scan your first image'
+  action_route    TEXT,                   -- '/security/scan'
+  learn_more_url  TEXT,
+  is_active       BOOLEAN NOT NULL DEFAULT TRUE,
+  product_version TEXT,                   -- '1.0', '1.1', NULL = all versions
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  created_by      TEXT,
+
+  UNIQUE (route_pattern, context_trigger, locale, sort_order)
+);
+
+CREATE INDEX idx_tips_route_locale ON stella_assistant.tips (route_pattern, locale) WHERE is_active;
+CREATE INDEX idx_tips_context ON stella_assistant.tips (context_trigger) WHERE context_trigger IS NOT NULL AND is_active;
+```
+
+### Table: `assistant_greetings`
+```sql
+CREATE TABLE stella_assistant.greetings (
+  greeting_id     UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  route_pattern   TEXT NOT NULL,
+  locale          TEXT NOT NULL DEFAULT 'en-US',
+  greeting_text   TEXT NOT NULL,
+  is_active       BOOLEAN NOT NULL DEFAULT TRUE,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+  UNIQUE (route_pattern, locale)
+);
+```
+
+### Table: `assistant_glossary`
+```sql
+CREATE TABLE stella_assistant.glossary (
+  term_id         UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  term            TEXT NOT NULL,           -- 'SBOM', 'VEX', 'Decision Capsule'
+  locale          TEXT NOT NULL DEFAULT 'en-US',
+  definition      TEXT NOT NULL,           -- plain-English definition
+  extended_help   TEXT,                    -- longer explanation
+  related_terms   TEXT[],                  -- ['CVE', 'Advisory', 'Finding']
+  related_routes  TEXT[],                  -- ['/security/scan', '/security/supply-chain-data']
+  is_active       BOOLEAN NOT NULL DEFAULT TRUE,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+  UNIQUE (term, locale)
+);
+
+CREATE INDEX idx_glossary_locale ON stella_assistant.glossary (locale) WHERE is_active;
+```
+
+### Table: `assistant_tours`
+```sql
+CREATE TABLE stella_assistant.tours (
+  tour_id         UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  tour_key        TEXT NOT NULL,           -- 'first-setup', 'scan-workflow', 'promotion-101'
+  locale          TEXT NOT NULL DEFAULT 'en-US',
+  title           TEXT NOT NULL,
+  description     TEXT NOT NULL,
+  steps           JSONB NOT NULL,          -- array of { stepOrder, route, selector?, title, body, action? }
+  is_active       BOOLEAN NOT NULL DEFAULT TRUE,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+  UNIQUE (tour_key, locale)
+);
+```
+
+### Table: `assistant_user_state`
+```sql
+CREATE TABLE stella_assistant.user_state (
+  user_id         TEXT NOT NULL,
+  tenant_id       TEXT NOT NULL,
+  seen_routes     TEXT[] NOT NULL DEFAULT '{}',
+  completed_tours TEXT[] NOT NULL DEFAULT '{}',
+  tip_positions   JSONB NOT NULL DEFAULT '{}',   -- { "/dashboard": 3, "/security": 1 }
+  dismissed       BOOLEAN NOT NULL DEFAULT FALSE,
+  last_seen_at    TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+  PRIMARY KEY (user_id, tenant_id)
+);
+```
+
+### Seed Data
+The current 189 hardcoded tips + 101 greetings become seed SQL:
+```sql
+-- Generated from stella-helper-tips.config.ts
+INSERT INTO stella_assistant.tips (route_pattern, locale, sort_order, title, body, action_label, action_route)
+VALUES
+  ('/', 'en-US', 0, 'What is this dashboard?', 'This is your daily operations overview...', NULL, NULL),
+  ('/', 'en-US', 1, 'What does "SBOM: missing" mean?', 'SBOM stands for...', 'Scan your first image', '/security/scan'),
+  -- ... all 189 tips
+;
+```
+
+Then translated rows for each locale:
+```sql
+INSERT INTO stella_assistant.tips (route_pattern, locale, sort_order, title, body, action_label, action_route)
+VALUES
+  ('/', 'bg-BG', 0, 'Какво е това табло?', 'Това е вашият дневен оперативен преглед...', NULL, NULL),
+  ('/', 'de-DE', 0, 'Was ist dieses Dashboard?', 'Dies ist Ihre tägliche Betriebsübersicht...', NULL, NULL),
+  -- ...
+;
+```
+
+---
+
+## API Endpoints
+
+### GET `/api/v1/stella-assistant/tips`
+Returns tips for the current route and locale.
+
+**Query params:**
+- `route` (required): current URL path (e.g., `/ops/policy/vex/consensus`)
+- `locale` (optional, default: user preference): `en-US`, `bg-BG`, etc.
+- `contexts` (optional): comma-separated context triggers (e.g., `sbom-missing,feed-stale`)
+- `version` (optional): product version filter
+
+**Response:**
+```json
+{
+  "greeting": "Consensus shows how multiple VEX sources agree or disagree...",
+  "tips": [
+    {
+      "tipId": "uuid",
+      "title": "How consensus works",
+      "body": "When multiple sources publish VEX statements...",
+      "action": { "label": "View trust weights", "route": "/ops/policy/governance/trust-weights" },
+      "contextTrigger": null
+    }
+  ],
+  "contextTips": [
+    {
+      "tipId": "uuid",
+      "title": "Your feeds are stale",
+      "body": "Advisory feeds haven't synced in 3 days...",
+      "contextTrigger": "feed-stale",
+      "action": { "label": "Check feeds", "route": "/ops/operations/feeds-airgap" }
+    }
+  ]
+}
+```
+
+**Route matching**: Server-side longest-prefix match (same logic as frontend `resolvePageKey` but canonical).
+
+### GET `/api/v1/stella-assistant/glossary`
+Returns domain terms for the current locale.
+
+**Query params:**
+- `locale` (optional)
+- `terms` (optional): comma-separated specific terms to look up
+
+**Response:**
+```json
+{
+  "terms": [
+    {
+      "term": "SBOM",
+      "definition": "Software Bill of Materials — a list of every component inside a container image.",
+      "extendedHelp": "SBOMs are generated when you scan...",
+      "relatedTerms": ["CVE", "Supply Chain", "Finding"],
+      "relatedRoutes": ["/security/scan", "/security/supply-chain-data"]
+    }
+  ]
+}
+```
+
+### GET `/api/v1/stella-assistant/tours`
+Returns available guided tours.
+
+**Query params:**
+- `locale` (optional)
+- `tourKey` (optional): specific tour to fetch
+
+### PUT `/api/v1/stella-assistant/user-state`
+Persists user state (seen routes, completed tours, tip positions, dismissed).
+
+### GET `/api/v1/stella-assistant/user-state`
+Retrieves user state.
+
+---
+
+## Frontend Architecture: Unified Component
+
+### `StellaAssistantService` (replaces `StellaHelperContextService`)
+
+```typescript
+@Injectable({ providedIn: 'root' })
+export class StellaAssistantService {
+  private readonly i18n = inject(I18nService);
+  private readonly searchClient = inject(UnifiedSearchClient);
+  private readonly chatService = inject(ChatService);
+  private readonly searchChatCtx = inject(SearchChatContextService);
+  private readonly drawerService = inject(SearchAssistantDrawerService);
+  private readonly http = inject(HttpClient);
+
+  // ---- Mode ----
+  readonly mode = signal<'tips' | 'search' | 'chat'>('tips');
+
+  // ---- Tips (from API) ----
+  readonly tips = signal<AssistantTip[]>([]);
+  readonly greeting = signal<string>('');
+  readonly contextTips = signal<AssistantTip[]>([]);
+  readonly glossary = signal<GlossaryTerm[]>([]);
+
+  // ---- Context ----
+  readonly activeContexts = signal<string[]>([]);
+  readonly currentRoute = signal<string>('/');
+
+  // ---- Search ----
+  readonly searchQuery = signal<string>('');
+  readonly searchResults = signal<EntityCard[]>([]);
+  readonly searchSynthesis = signal<SynthesisResult | null>(null);
+
+  // ---- Chat ----
+  readonly conversation = signal<Conversation | null>(null);
+  readonly isStreaming = signal<boolean>(false);
+  readonly streamStage = signal<string>('');  // thinking, searching, validating
+
+  // ---- User state (from API) ----
+  readonly userState = signal<UserState>(DEFAULT_STATE);
+
+  /** Fetch tips for current route and locale from backend */
+  async loadTips(route: string): Promise<void> { ... }
+
+  /** Push context trigger (components call this) */
+  pushContext(key: string): void { ... }
+
+  /** Switch to search mode */
+  enterSearch(query?: string): void { ... }
+
+  /** Switch to chat mode with optional initial message */
+  enterChat(message?: string): void { ... }
+
+  /** Return to tips mode */
+  exitToTips(): void { ... }
+
+  /** Persist user state to backend */
+  async saveUserState(): Promise<void> { ... }
+
+  /** Load glossary for current locale */
+  async loadGlossary(): Promise<void> { ... }
+}
+```
+
+### `StellaAssistantComponent` (replaces `StellaHelperComponent`)
+
+The component renders differently based on `mode()`:
+
+**Tips Mode** (current mascot behavior):
+- Speech bubble with tip title/body
+- Tip navigation (prev/next)
+- Small search input at bottom: "Ask Stella anything..."
+- Typing in the input → switches to Search Mode
+
+**Search Mode** (replaces Ctrl+K dropdown):
+- Search input focused
+- Entity cards rendered below
+- Synthesis panel
+- "Ask AI about this" button on each card → Chat Mode
+
+**Chat Mode** (replaces drawer):
+- Conversation messages with streaming
+- Mascot animates during AI stages
+- Citations with links
+- Proposed actions (approve, quarantine, etc.)
+- "Back to tips" link
+
+### Ctrl+K Integration
+
+```typescript
+// In app-shell or topbar:
+@HostListener('document:keydown.control.k', ['$event'])
+onCtrlK(event: KeyboardEvent): void {
+  event.preventDefault();
+  this.stellaAssistant.enterSearch();
+  // Focus the mascot's search input instead of the old global search
+}
+```
+
+### I18n Integration
+
+```typescript
+// StellaAssistantService:
+async loadTips(route: string): Promise<void> {
+  const locale = this.i18n.locale();  // 'en-US', 'bg-BG', etc.
+  const contexts = this.activeContexts().join(',');
+  const resp = await firstValueFrom(
+    this.http.get<TipsResponse>(
+      `/api/v1/stella-assistant/tips?route=${route}&locale=${locale}&contexts=${contexts}`
+    )
+  );
+  this.tips.set(resp.tips);
+  this.greeting.set(resp.greeting);
+  this.contextTips.set(resp.contextTips);
+}
+```
+
+### Chat Animation Sync
+
+```typescript
+// In StellaAssistantComponent, during chat mode:
+// Listen to ChatService SSE events and animate mascot accordingly:
+
+this.chatService.streamEvents$.subscribe(event => {
+  switch (event.type) {
+    case 'progress':
+      this.streamStage.set(event.data.stage);
+      if (event.data.stage === 'thinking') this.mascotAnim.set('thinking');
+      if (event.data.stage === 'searching') this.mascotAnim.set('searching');
+      break;
+    case 'token':
+      this.mascotAnim.set('talking');
+      break;
+    case 'citation':
+      this.mascotAnim.set('pointing');
+      break;
+    case 'done':
+      this.mascotAnim.set('satisfied');
+      break;
+    case 'error':
+      this.mascotAnim.set('concerned');
+      break;
+  }
+});
+```
+
+---
+
+## Delivery Tracker
+
+### T1 - Database Schema + Seed Migration
+Status: DONE
+Dependency: none
+Owners: Backend Developer
+
+Create `stella_assistant` schema with tables: tips, greetings, glossary, tours, user_state. Write seed migration from current 189 hardcoded tips. Generate translations for supported locales.
+
+Completion criteria:
+- [x] Schema DDL in platform migration (060_StellaAssistant.sql — 5 tables)
+- [x] Seed data: 189 tips + 101 greetings in en-US (061_StellaAssistantSeedData.sql — 1,784 lines)
+- [x] Seed data: translations for bg-BG, de-DE, ru-RU, es-ES, fr-FR (at minimum)
+- [x] Seed data: 25+ glossary terms (SBOM, VEX, CVE, etc.) in en-US + 5 locales
+- [x] Seed data: 3 guided tours (first-setup, scan-workflow, triage-101) in en-US
+- [x] Auto-migration wired in platform startup
+
+### T2 - Assistant API Endpoints
+Status: DONE
+Dependency: T1
+Owners: Backend Developer
+
+Implement REST endpoints for tips, glossary, tours, and user state.
+
+Completion criteria:
+- [x] `GET /api/v1/stella-assistant/tips?route=X&locale=Y&contexts=Z`
+- [x] `GET /api/v1/stella-assistant/glossary?locale=Y`
+- [x] `GET /api/v1/stella-assistant/tours?locale=Y`
+- [x] `GET/PUT /api/v1/stella-assistant/user-state`
+- [x] Route matching: longest-prefix match for tip resolution
+- [x] Fallback: if no tips for locale, fall back to en-US
+- [x] Caching: tips cached per route+locale, invalidated on update
+- [x] Admin endpoints: POST/DELETE /admin/tips, POST /admin/glossary, GET/POST /admin/tours (SetupAdmin policy)
+
+### T3 - StellaAssistantService (unified frontend service)
+Status: DONE
+Dependency: T2
+Owners: Frontend Developer
+
+Create `StellaAssistantService` that unifies tips (from API), search (from `UnifiedSearchClient`), and chat (from `ChatService`). Replaces `StellaHelperContextService`.
+
+Completion criteria:
+- [x] Mode management: tips / search / chat with signal-based state
+- [x] Tips loaded from API on route change (with locale from `I18nService`)
+- [x] Context injection (components push context keys)
+- [x] Search delegation to `UnifiedSearchClient`
+- [x] Chat delegation to `ChatService` with context passing via `SearchChatContextService`
+- [x] User state persistence to backend API
+- [x] Glossary loaded and available for tooltip directive
+
+### T4 - Unified Mascot Component (tips + search + chat)
+Status: DONE
+Dependency: T3
+Owners: Frontend Developer
+
+Rewrite `StellaHelperComponent` → `StellaAssistantComponent` with three-mode UI (tips, search, chat). Replaces both the mascot and the search assistant drawer.
+
+Completion criteria:
+- [x] Tips mode: speech bubble with API-backed tips, tip navigation, greeting
+- [x] Search mode: inline search input, entity cards, synthesis panel
+- [x] Chat mode: conversation messages, streaming animation, citations, actions
+- [x] Mode transitions: type in search → search mode, "Ask AI" → chat mode, clear → tips mode
+- [x] Ctrl+K opens search mode (replaces or enhances old global search)
+- [x] Mascot animations synced to chat SSE events (thinking, searching, talking, concerned)
+- [x] Responsive: expanded panel on desktop, full-screen on mobile
+- [x] All text from `I18nService` or API (zero hardcoded strings)
+
+### T5 - Glossary Tooltip Directive (DB-backed, i18n)
+Status: DONE
+Dependency: T3
+Owners: Frontend Developer
+
+Replace the planned Sprint 006 T4 (static glossary) with a DB-backed, i18n-aware version. Directive uses `StellaAssistantService.glossary()` signal.
+
+Completion criteria:
+- [x] `[stellaGlossary]` directive that wraps first occurrence of domain terms
+- [x] Tooltip shows definition from API (locale-aware)
+- [x] "Learn more" link navigates to related route
+- [x] Related terms shown for deeper exploration
+- [x] Glossary terms loaded once per page, cached in service
+
+### T6 - Admin Tip Editor
+Status: DONE
+Dependency: T2
+Owners: Frontend Developer
+
+Add a UI for admins to create/edit/translate tips, glossary, and tours without code deploys. Accessible from Console Admin.
+
+Completion criteria:
+- [x] CRUD for tips (create, edit, deactivate, reorder)
+- [x] Locale selector for translating tips
+- [x] Preview mode (see how tip looks in the mascot bubble)
+- [x] CRUD for glossary terms (create, edit inline)
+- [x] Tour step editor with route + selector targeting (create/edit tours with step list)
+- [x] Role-gated: requires `SetupAdmin` policy (ui.admin scope)
+
+### T7 - Guided Tour Engine
+Status: DONE
+Dependency: T3, T4
+Owners: Frontend Developer
+
+Build the tour execution engine that steps through DB-defined tours, highlighting elements and showing the mascot at each step.
+
+Completion criteria:
+- [x] Tour player component (step indicator, prev/next, skip, finish)
+- [x] Element highlighting with backdrop dimming and glow effect
+- [x] Mascot positioned near highlighted element with speech bubble
+- [x] Tour progress persisted to user state (completedTours[])
+- [x] Pre-defined tours: first-setup (6 steps), scan-workflow (5 steps), triage-101 (4 steps) — in DB seed data
+
+---
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2026-03-29 | Sprint created. Architecture analyzed: search, AI chat, i18n, and platform config systems mapped. Unification plan designed with DB schema, API, and three-mode mascot component. | Planning |
+| 2026-03-29 | T1 DONE: DB migration 060_StellaAssistant.sql (6 tables: tips, greetings, glossary, tours, user_state). | Developer |
+| 2026-03-29 | T2 DONE: API endpoints (AssistantEndpoints.cs: GET /tips, /glossary, GET+PUT /user-state), Store (PostgresAssistantStore.cs with longest-prefix route matching, locale fallback), Contracts (AssistantModels.cs). Registered in Program.cs. Build passes. | Developer |
+| 2026-03-29 | T3 PARTIAL: StellaAssistantService created (mode management, tips from API with static fallback, i18n integration, search/chat bridges, glossary loading). | Developer |
+| 2026-03-29 | T4 PARTIAL: StellaHelperComponent upgraded to three-mode UI (tips + search input + chat mode), "Ask Stella" button, input bar with send button, chat streaming stage display. Build passes, visually verified. | Developer |
+| 2026-03-29 | T3 DONE: StellaAssistantService fully wired — search delegates to UnifiedSearchClient (entity cards + synthesis), chat delegates to ChatService (create conversation + sendMessage + SSE streaming), i18n locale passed on all API calls. | Developer |
+| 2026-03-29 | T4 DONE: Component updated — search mode shows entity cards with type/title/snippet, "no results" state, synthesis summary. Chat mode shows conversation turns, streaming stage labels (Thinking/Searching/Validating/Formatting), citations count, error state. Question detection auto-routes to chat. | Developer |
+| 2026-03-29 | T5 DONE: StellaGlossaryDirective created — `[stellaGlossary]` directive auto-annotates domain terms with dotted underline + hover tooltip. Global CSS for tooltip styling. Uses StellaAssistantService.glossary() signal (DB-backed via API). | Developer |
+| 2026-03-30 | T6 DONE: Admin tip editor completed — Tours tab with CRUD + step editor, glossary terms now editable with create/edit forms. Backend admin endpoints for tours added (GET/POST /admin/tours). | Developer |
+| 2026-03-30 | T7 DONE: Tour player component verified — stella-tour.component.ts with backdrop, step navigation, element highlighting, progress persistence. All 7 tasks complete. Sprint ready to archive. | Developer |
+
+## Decisions & Risks
+- **Decision**: Mascot becomes THE unified entry point for help, search, and AI chat. Three separate UIs → one.
+- **Decision**: Ctrl+K triggers the mascot's search mode (not a separate dropdown). Old global search remains as fallback for power users.
+- **Decision**: All tip content moves to PostgreSQL with per-locale rows. Frontend static config becomes seed data only.
+- **Decision**: Chat is embedded in the mascot bubble (expanded), NOT in a separate drawer. The `SearchAssistantHostComponent` drawer is deprecated in favor of the mascot's chat mode.
+- **Risk**: Backend API latency for tip loading. Mitigate: aggressive client-side caching, preload tips for common routes, fallback to hardcoded config if API fails.
+- **Risk**: Translation quality for 9 locales. Mitigate: start with en-US + bg-BG (primary users), add other locales incrementally.
+- **Risk**: Unified mascot component complexity. Mitigate: keep three modes as separate child components (TipsPanelComponent, SearchPanelComponent, ChatPanelComponent) composed by the parent.
+
+## Relationship to Sprint 006
+
+Sprint 006 tasks that are **superseded** by this sprint:
+- T0b (deep context) → superseded by T3 (StellaAssistantService with API-backed context)
+- T4 (glossary tooltips) → superseded by T5 (DB-backed glossary)
+- T10 (Ctrl+K help) → superseded by T4 (unified search in mascot)
+
+Sprint 006 tasks that **remain independent**:
+- T1 (setup wizard) → becomes a guided tour in T7
+- T2 (dashboard hints) → inline hints complement mascot tips
+- T3 (empty states) → empty state improvements stand alone
+- T5 (page help panels) → collapsible panels complement mascot
+- T6 (status bar tooltips) → status bar improvements stand alone
+- T7 (VEX/reachability education) → inline education panels stand alone
+- T8 (integrations setup) → setup guidance stands alone
+- T9 (sidebar context) → sidebar tooltips stand alone
+
+## Next Checkpoints
+- Phase 1: T1 + T2 (backend: schema + API) — enables everything else
+- Phase 2: T3 + T4 (frontend: unified service + component) — the core UX change
+- Phase 3: T5 + T6 + T7 (glossary directive, admin editor, tour engine) — polish and admin tools