dev → main: the design system, governance decisions 4 and 10, the merge in History

[WaylandYang]

Twenty-two commits on dev since #443. Merge commit, as always for dev → main; DCO is red on this PR because it aggregates earlier commits, and the required checks are backend, web and migrations.

Design system

• Tokens: text in two tones, corners in four roles, five sizes (Design tokens: text in two tones, corners in four #465, The pages follow the new tokens #466, One radius: 8 px on everything that has corners #453); every page titles itself with one PageHeader (Every page titles itself with one PageHeader #452); the header's controls stand 32 tall (The header's controls all stand 32 tall #454); a rail row stands 32 tall with its icon in the text's colour (A rail row stands 32 tall with its icon in the text's colour, and a text-only row keeps the icon's slot #451, The area right of a rail fills it, and a form inside a card stops at xl #450); rail counts are chips and a zero is not written (Rail counts are chips, and a zero is not written #447); one anatomy for a collapsible row (A collapsible row has one anatomy: a chevron, a head, and an indented body #455); the class panel's two tabs (A class has two tabs, one for its relations and one for its attributes, and neither carries a count #449); the shape picker (A square sits a touch inside the circle, and the shape picker stands as tall as the colour well #445).
• Panels and rails: padding, the alert panel (search, pager, severity badge, unread dot), the user menu (Panels and rails: padding, the alert panel, the user menu #467); the tokens page becomes a table and administration navigates from a two-level rail (The tokens page becomes a table, and administration navigates from the rail #468); users, knowledge bases and data sources as tables with filters and dialogs, knowledge-base creation on the top-level page (Users, knowledge bases and data sources #469).
• The canvas writes like the interface: labels on the app's scale, bare labels with a halo, distance-based level of detail, edge labels at deep zoom, one wordmark size, data mapping as rows (The canvas writes like the interface #471).

Governance (0025)

• The agent judges on its own; history moves the bar or blocks (decision 4 revised, The agent judges on its own; history moves the bar or blocks (0025 decision 4 revised) #446).
• Identity rules the model reads and two it cannot argue with, measured against a hand-labeled set by scripts/bench/govern.mjs (decision 10, The agent judges identity by written rules, and a labeled set says whether it did (0025 decision 10) #457).
• The cluster the agent is deciding is locked, and the Review page says it is working (The cluster the agent is deciding is locked, and the Review page says it is working #460); the governor decides three clusters at once (The governor decides three clusters at once #461).

Also

• The merge itself joins the entity history (The merge itself joins the entity history #472).
• The database init script survives being sourced (The database init script survives being sourced, and a rejected password says what to do #459).

🤖 Generated with Claude Code