fix: correct Roby's wordmark colors

.github/pull_request_template.md

@@ -8,45 +8,58 @@ Link screenshots, logs, artifacts, or reproducible checks.
 
 ## AI review
 
-After the latest PR open or head update, add two separate top-level comments:
+After every PR head update, freeze the branch and post a fresh top-level request for the mandatory independent reviewer. The request must include the full 40-character current head SHA:
 
-`@codex review`
+```text
+@coderabbitai review
 
-`@jules review`
+Exact head: <full 40-character current head SHA>
+```
 
-The AI review contract requires official Codex evidence tied to the current head:
-either a matching `Reviewed commit` value or the Codex bot's thumbs-up reaction on
-the fresh post-head request. AI review remains complementary to required CI and
-human approval.
+CodeRabbit evidence is valid only when the configured bot publishes a pull-request review object whose `commit_id` equals that exact head. A reaction, progress/status comment, maintainer-authored review, proxy marker, or response for an older SHA does not satisfy the gate.
 
-For an optional independent Chinese-model review after the latest head update, add:
+The Codex lane is supplemental on connector surfaces where no native Codex bot review object is available. It may be requested with the same exact-head format:
 
-`/deepseek review`
+```text
+@codex review
 
-Use `/deepseek deep-review` only when a slower reasoning-oriented pass is useful.
-DeepSeek evidence is advisory and must show the current reviewed commit SHA.
+Exact head: <full 40-character current head SHA>
+```
+
+Codex counts as independent evidence only when the configured Codex bot itself publishes a review object bound to the exact head. Output written through the repository owner identity remains advisory and cannot satisfy an independent-review gate.
+
+A new commit invalidates every earlier request and review result. Post fresh requests with the new full SHA.
+
+Optional advisory reviewers may also be requested after the latest head update:
+
+```text
+@jules review
+/deepseek review
+```
+
+Use `/deepseek deep-review` only when a slower reasoning-oriented pass is useful. Advisory evidence must identify the current reviewed commit SHA before it can be treated as exact-head evidence.
 
 ## Solo maintainer decision
 
-When no independent human reviewer is available, finish all checks and review
-findings, then post a top-level comment with the full current head SHA:
+When no independent human reviewer is available, finish all required checks and bot-review dispositions, then post a top-level comment with the full current head SHA:
 
 `/merge-ready <full 40-character current head SHA>`
 
 To revoke the decision, post:
 
 `/merge-hold <full 40-character current head SHA>`
 
-This is explicit maintainer intent, not independent human approval.
+This is explicit maintainer intent, not independent human or bot approval.
 
 ## Checklist
 
-- [ ] Latest CI is green.
+- [ ] Latest exact-head CI is green.
 - [ ] Generated files are current.
-- [ ] Visual changes include evidence.
-- [ ] Official Codex evidence is verified for the current head.
-- [ ] Jules review was requested after the latest head update.
-- [ ] Optional DeepSeek findings are resolved or documented when requested.
+- [ ] Visual changes include exact-head evidence.
+- [ ] A fresh CodeRabbit request contains the full current head SHA.
+- [ ] A CodeRabbit-authored PR review object is bound to that exact head.
+- [ ] Codex is recorded as supplemental unless a native exact-head bot review exists.
+- [ ] Optional reviewer findings are resolved or explicitly dispositioned when requested.
 - [ ] Required independent human approval exists for the exact current head when enforcement is enabled.
-- [ ] Solo maintainer attestation is green for the exact current head when no independent reviewer is available.
-- [ ] Actionable findings are resolved or documented.
+- [ ] Solo maintainer attestation is green for the exact current head when no independent human reviewer is available.
+- [ ] Every actionable finding is resolved or documented on the current head.

.github/workflows/ai-review-contract.yml

@@ -5,141 +5,23 @@ on:
     types: [opened, synchronize]
 
 permissions:
-  contents: read
+  # actions: read is required for the immutable workflow-run freshness anchor.
+  actions: read
+  # issues: read is required for the exact-head review request comment.
   issues: read
+  # pull-requests: read is required for native PR review evidence.
   pull-requests: read
 
 jobs:
   verify:
     runs-on: ubuntu-latest
     timeout-minutes: 12
     steps:
-      - name: Wait for current-head AI review evidence
+      - name: Check out exact head verifier
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Wait for native exact-head CodeRabbit review
         uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         with:
           script: |
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-            const pr = context.payload.pull_request;
-            const trusted = new Set(['OWNER', 'MEMBER', 'COLLABORATOR']);
-            const codexLogins = new Set([
-              'chatgpt-codex-connector[bot]',
-              'chatgpt-codex-connector',
-            ]);
-            const codeRabbitLogins = new Set([
-              'coderabbitai[bot]',
-              'coderabbitai',
-            ]);
-            const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-
-            const evidenceAfter = Date.parse(pr.updated_at);
-            const currentHead = pr.head.sha.toLowerCase();
-            const timeOf = (item) => Math.max(
-              0,
-              ...[item.submitted_at, item.created_at, item.updated_at]
-                .map((value) => Date.parse(value ?? 0))
-                .filter(Number.isFinite),
-            );
-            const bodyOf = (item) => (item.body ?? '').trim();
-            const commandLinesOf = (item) => bodyOf(item)
-              .toLowerCase()
-              .split(/\r?\n/)
-              .map((line) => line.trim())
-              .filter(Boolean);
-            const isCommand = (item, value) => (
-              trusted.has(item.author_association) &&
-              timeOf(item) >= evidenceAfter &&
-              commandLinesOf(item).includes(value)
-            );
-            const latestRequestAt = (requests) => requests.reduce(
-              (latest, request) => Math.max(latest, timeOf(request)),
-              0,
-            );
-            const nativeReviewMatchesHead = (review) => (
-              review.commit_id?.toLowerCase() === currentHead
-            );
-
-            for (let attempt = 1; attempt <= 30; attempt += 1) {
-              const [comments, reviews] = await Promise.all([
-                github.paginate(
-                  github.rest.issues.listComments,
-                  { owner, repo, issue_number: pr.number, per_page: 100 },
-                ),
-                github.paginate(
-                  github.rest.pulls.listReviews,
-                  { owner, repo, pull_number: pr.number, per_page: 100 },
-                ),
-              ]);
-
-              const codexRequests = comments.filter((item) => isCommand(item, '@codex review'));
-              const codeRabbitRequests = comments.filter((item) => isCommand(item, '@coderabbitai review'));
-              const latestCodexRequestAt = latestRequestAt(codexRequests);
-              const latestCodeRabbitRequestAt = latestRequestAt(codeRabbitRequests);
-
-              const codexReview = reviews.find((review) => (
-                codexLogins.has(review.user?.login) &&
-                nativeReviewMatchesHead(review) &&
-                timeOf(review) >= latestCodexRequestAt
-              ));
-              const currentHeadCodeRabbitReview = reviews.find((review) => (
-                codeRabbitLogins.has(review.user?.login) &&
-                nativeReviewMatchesHead(review)
-              ));
-              const codeRabbitReview = reviews.find((review) => (
-                codeRabbitLogins.has(review.user?.login) &&
-                nativeReviewMatchesHead(review) &&
-                timeOf(review) >= latestCodeRabbitRequestAt
-              ));
-              const codeRabbitStatusComment = comments.find((item) => {
-                const body = bodyOf(item);
-                const statusTime = timeOf(item);
-                return (
-                  Boolean(currentHeadCodeRabbitReview) &&
-                  latestCodeRabbitRequestAt > 0 &&
-                  codeRabbitLogins.has(item.user?.login) &&
-                  statusTime >= latestCodeRabbitRequestAt &&
-                  body.includes('<!-- This is an auto-generated comment: summarize by coderabbit.ai -->') &&
-                  body.includes('No new commits to review since the last review.')
-                );
-              });
-
-              const hasCodexRequest = latestCodexRequestAt > 0;
-              const hasCodeRabbitRequest = latestCodeRabbitRequestAt > 0;
-              const hasCodexEvidence = Boolean(codexReview);
-              const hasCodeRabbitEvidence = Boolean(codeRabbitReview || codeRabbitStatusComment);
-
-              if (
-                hasCodexRequest &&
-                hasCodeRabbitRequest &&
-                hasCodexEvidence &&
-                hasCodeRabbitEvidence
-              ) {
-                await core.summary
-                  .addHeading('AI review contract')
-                  .addTable([
-                    [
-                      { data: 'Reviewer', header: true },
-                      { data: 'Fresh request', header: true },
-                      { data: 'Exact-head evidence after request', header: true },
-                    ],
-                    ['Codex', 'yes', 'yes'],
-                    ['CodeRabbit', 'yes', 'yes'],
-                  ])
-                  .write();
-                core.notice(
-                  `Exact-head AI evidence verified for ${pr.head.sha}: Codex and CodeRabbit complete after their latest requests.`,
-                );
-                return;
-              }
-
-              core.info(
-                `Waiting for latest-request exact-head AI evidence (attempt ${attempt}/30): ` +
-                  `Codex=${hasCodexRequest}/${hasCodexEvidence}, ` +
-                  `CodeRabbit=${hasCodeRabbitRequest}/${hasCodeRabbitEvidence}`,
-              );
-              if (attempt < 30) await sleep(20_000);
-            }
-
-            core.setFailed(
-              'Post fresh @codex review and @coderabbitai review commands after the latest head update, then require exact-head evidence newer than each latest request.',
-            );
+            const verify = require('./scripts/verify-ai-review-contract.cjs');
+            await verify({ github, context, core });

discover-weather-guard.js

@@ -1,2 +1,12 @@
 // Compatibility placeholder: the Discover interaction guard is bundled into
 // discover-journeys-v2.js, which is already part of the service-worker precache.
+const WORDMARK_STYLESHEET_ID = "robys-wordmark-responsive";
+const WORDMARK_STYLESHEET_HREF = "wordmark-responsive.css?v=20260704-1";
+
+if (!document.getElementById(WORDMARK_STYLESHEET_ID)) {
+  const wordmarkStylesheet = document.createElement("link");
+  wordmarkStylesheet.id = WORDMARK_STYLESHEET_ID;
+  wordmarkStylesheet.rel = "stylesheet";
+  wordmarkStylesheet.href = WORDMARK_STYLESHEET_HREF;
+  document.head.appendChild(wordmarkStylesheet);
+}