diff --git a/apps/web/src/lib/components/theme/SiteLayout.svelte b/apps/web/src/lib/components/theme/SiteLayout.svelte
index 19f09ac..cc727bf 100644
--- a/apps/web/src/lib/components/theme/SiteLayout.svelte
+++ b/apps/web/src/lib/components/theme/SiteLayout.svelte
@@ -33,6 +33,17 @@
 	);
 
 	const nav = $derived(site.pages.filter((page) => page.listed));
+
+	// UTC keeps server-rendered and hydrated output identical across timezones.
+	const postmarked = new Intl.DateTimeFormat('en-US', {
+		month: 'short',
+		year: 'numeric',
+		timeZone: 'UTC'
+	}).format(new Date());
+
+	const composeUrl = $derived(
+		`https://bsky.app/intent/compose?text=${encodeURIComponent(`@${site.handle} `)}`
+	);
 </script>
 
 <svelte:head>
@@ -71,6 +82,32 @@
 		{@render children()}
 	</main>
 
+	<div class="signoff">
+		<div class="signoff-stripe" aria-hidden="true"></div>
+		<div class="signoff-inner">
+			<div class="postmark" aria-hidden="true">
+				<span>{site.handle}</span>
+				<span class="postmark-rule"></span>
+				<span>{postmarked}</span>
+			</div>
+			<div class="signoff-body">
+				<p class="closing">
+					{#if site.signOff}<span class="valediction">{site.signOff}</span>{/if}
+					<strong>{site.name}</strong>
+				</p>
+				<div class="signoff-actions">
+					<a href="https://bsky.app/profile/{site.did}" target="_blank" rel="noopener noreferrer"
+						>Follow @{site.handle}</a
+					>
+					<a href={composeUrl} target="_blank" rel="noopener noreferrer">Say hello on Bluesky</a>
+					{#if site.contactEmail}
+						<a href="mailto:{site.contactEmail}">Write to me</a>
+					{/if}
+				</div>
+			</div>
+		</div>
+	</div>
+
 	<footer>
 		<a class="handle" href="https://bsky.app/profile/{site.did}" target="_blank" rel="noopener noreferrer">@{site.handle}</a>
 		{#if site.contactEmail}
@@ -219,6 +256,111 @@
 		padding: clamp(1.75rem, 3vw, 2.75rem) var(--pad) clamp(2.5rem, 6vw, 5rem);
 	}
 
+	/* The letter's close: the airmail stripe returns to bookend the top edge. */
+	.signoff {
+		background: var(--paper-sunk);
+		border-top: 1px solid var(--rule);
+	}
+
+	.signoff-stripe {
+		height: 4px;
+		background: repeating-linear-gradient(
+			-45deg,
+			var(--accent) 0 10px,
+			var(--paper-sunk) 10px 20px,
+			var(--airmail-blue) 20px 30px,
+			var(--paper-sunk) 30px 40px
+		);
+	}
+
+	.signoff-inner {
+		display: flex;
+		flex-wrap: wrap;
+		align-items: center;
+		gap: 1.75rem 3.5rem;
+		padding: 2.5rem var(--pad) 2.75rem;
+		max-width: calc(var(--shell) + 2 * var(--pad));
+		margin-inline: auto;
+		width: 100%;
+		box-sizing: border-box;
+	}
+
+	.postmark {
+		flex-shrink: 0;
+		width: 7.5rem;
+		height: 7.5rem;
+		border: 2px solid color-mix(in srgb, var(--airmail-blue) 55%, transparent);
+		border-radius: 50%;
+		display: flex;
+		flex-direction: column;
+		align-items: center;
+		justify-content: center;
+		gap: 0.2rem;
+		transform: rotate(-7deg);
+		font-family: var(--font-mono);
+		font-size: 0.62rem;
+		letter-spacing: 0.14em;
+		text-transform: uppercase;
+		color: color-mix(in srgb, var(--airmail-blue) 75%, var(--ink));
+		/* Long handles stay inside the circle. */
+		padding: 0.5rem;
+		box-sizing: border-box;
+		overflow: hidden;
+	}
+
+	.postmark span {
+		max-width: 100%;
+		overflow: hidden;
+		text-overflow: ellipsis;
+		white-space: nowrap;
+	}
+
+	.postmark-rule {
+		width: 3.9rem;
+		height: 1px;
+		background: color-mix(in srgb, var(--airmail-blue) 45%, transparent);
+	}
+
+	.closing {
+		margin: 0;
+		font-size: 1.35rem;
+		line-height: 1.3;
+	}
+
+	.valediction {
+		font-style: italic;
+		color: var(--muted);
+	}
+
+	.closing strong {
+		font-weight: 600;
+	}
+
+	.signoff-actions {
+		display: flex;
+		flex-wrap: wrap;
+		gap: 0.5rem;
+		margin-top: 1.1rem;
+		font-family: var(--font-mono);
+		font-size: 0.72rem;
+		letter-spacing: 0.04em;
+	}
+
+	.signoff-actions a {
+		padding: 0.35rem 0.75rem;
+		border: 1px solid var(--accent);
+		border-radius: 2px;
+		color: var(--accent);
+		text-decoration: none;
+		transition: background-color 160ms ease, color 160ms ease;
+	}
+
+	.signoff-actions a:hover,
+	.signoff-actions a:focus-visible {
+		background: var(--accent);
+		color: var(--accent-ink);
+	}
+
 	footer {
 		display: flex;
 		flex-wrap: wrap;
diff --git a/apps/web/src/lib/server/mooring/forms.ts b/apps/web/src/lib/server/mooring/forms.ts
index a70834b..3865ed9 100644
--- a/apps/web/src/lib/server/mooring/forms.ts
+++ b/apps/web/src/lib/server/mooring/forms.ts
@@ -12,6 +12,7 @@ export function siteInputFromForm(form: FormData): SiteInput {
 		name: field(form, 'name'),
 		description: field(form, 'description'),
 		contactEmail: field(form, 'contactEmail'),
+		signOff: field(form, 'signOff'),
 		// An unchecked checkbox is absent from the submission.
 		discoverable: form.get('discoverable') !== null
 	};
diff --git a/apps/web/src/lib/server/mooring/records.test.ts b/apps/web/src/lib/server/mooring/records.test.ts
index 631eeb1..969f154 100644
--- a/apps/web/src/lib/server/mooring/records.test.ts
+++ b/apps/web/src/lib/server/mooring/records.test.ts
@@ -112,6 +112,13 @@ describe('buildSiteRecord', () => {
 		);
 	});
 
+	it('stores a trimmed sign-off and drops a blank one', () => {
+		expect(buildSiteRecord({ signOff: ' Warmly, ' }, { now: NOW })).toMatchObject({
+			signOff: 'Warmly,'
+		});
+		expect(buildSiteRecord({ signOff: '   ' }, { now: NOW })).not.toHaveProperty('signOff');
+	});
+
 	it('stores only the discoverable opt-out', () => {
 		expect(buildSiteRecord({ discoverable: true }, { now: NOW })).not.toHaveProperty('discoverable');
 		expect(buildSiteRecord({ discoverable: false }, { now: NOW })).toMatchObject({
diff --git a/apps/web/src/lib/server/mooring/records.ts b/apps/web/src/lib/server/mooring/records.ts
index 5c532cc..7c14842 100644
--- a/apps/web/src/lib/server/mooring/records.ts
+++ b/apps/web/src/lib/server/mooring/records.ts
@@ -41,6 +41,7 @@ export interface SiteInput {
 	name?: string;
 	description?: string;
 	contactEmail?: string;
+	signOff?: string;
 	discoverable?: boolean;
 }
 
@@ -141,6 +142,7 @@ export function buildSiteRecord(
 		throw new InvalidInput('The contact email needs the shape name@domain.');
 	}
 	setOrDelete(record, 'contactEmail', contactEmail);
+	setOrDelete(record, 'signOff', trimmed(input.signOff));
 	// Absent means discoverable; only the opt-out is stored.
 	setOrDelete(record, 'discoverable', input.discoverable === false ? false : undefined);
 	return validated(SITE_COLLECTION, record);
diff --git a/apps/web/src/lib/server/render/site.ts b/apps/web/src/lib/server/render/site.ts
index 8368746..5f3a44e 100644
--- a/apps/web/src/lib/server/render/site.ts
+++ b/apps/web/src/lib/server/render/site.ts
@@ -169,6 +169,7 @@ export async function loadSiteView(
 		name,
 		description,
 		contactEmail: typeof site?.contactEmail === 'string' ? site.contactEmail : undefined,
+		signOff: typeof site?.signOff === 'string' ? site.signOff : undefined,
 		iconUrl: iconUrlFor(ctx, site, profile?.avatarUrl),
 		discoverable: site?.discoverable !== false,
 		colors: themeColors(site),
diff --git a/apps/web/src/lib/site-view.ts b/apps/web/src/lib/site-view.ts
index c6632f3..c043ebf 100644
--- a/apps/web/src/lib/site-view.ts
+++ b/apps/web/src/lib/site-view.ts
@@ -119,6 +119,8 @@ export interface SiteView {
 	description?: string;
 	/** Public contact address from the site record; renders a contact affordance. */
 	contactEmail?: string;
+	/** Valediction rendered before the name in the closing sign-off, like "Warmly,". */
+	signOff?: string;
 	/** Site icon: the record's icon blob, falling back to the profile avatar. */
 	iconUrl?: string;
 	discoverable: boolean;
diff --git a/apps/web/src/routes/admin/+page.server.ts b/apps/web/src/routes/admin/+page.server.ts
index ca00b06..8db884e 100644
--- a/apps/web/src/routes/admin/+page.server.ts
+++ b/apps/web/src/routes/admin/+page.server.ts
@@ -28,6 +28,7 @@ function siteFields(record: Record<string, unknown>) {
 		name: typeof record.name === 'string' ? record.name : '',
 		description: typeof record.description === 'string' ? record.description : '',
 		contactEmail: typeof record.contactEmail === 'string' ? record.contactEmail : '',
+		signOff: typeof record.signOff === 'string' ? record.signOff : '',
 		discoverable: record.discoverable !== false
 	};
 }
diff --git a/apps/web/src/routes/admin/+page.svelte b/apps/web/src/routes/admin/+page.svelte
index b0ccd81..a4330c1 100644
--- a/apps/web/src/routes/admin/+page.svelte
+++ b/apps/web/src/routes/admin/+page.svelte
@@ -9,6 +9,7 @@
 					name: form.name ?? '',
 					description: form.description ?? '',
 					contactEmail: form.contactEmail ?? '',
+					signOff: form.signOff ?? '',
 					discoverable: form.discoverable !== false
 				}
 			: data.site
@@ -56,6 +57,11 @@
 			/>
 			<small>Shown publicly on your site as a "write to me" link. Leave empty to hide it.</small>
 		</label>
+		<label>
+			Sign-off
+			<input name="signOff" value={site.signOff} maxlength="64" placeholder="Warmly," />
+			<small>Closes every page like a letter, before your name. Leave empty for the name alone.</small>
+		</label>
 		<label class="check">
 			<input type="checkbox" name="discoverable" checked={site.discoverable} />
 			Let search engines index this site
diff --git a/docs/NEXT.md b/docs/NEXT.md
index 984f50e..7f30954 100644
--- a/docs/NEXT.md
+++ b/docs/NEXT.md
@@ -2,7 +2,7 @@
 
 The flight plan. Each item carries enough context to start cold; update this file whenever an item lands (move it to "Done") or a new one is queued. Decisions made while working an item still go through `decisions/` as usual.
 
-_Last updated: 2026-08-25 (**session handoff** — the 2026-08-24/25 theme-UX push is complete through PR #25; critique trend 25 → 31 → 29 → 32 across four dual-assessment rounds, snapshots in `.impeccable/critique/`. Nothing is in flight; the queue below is current and each item starts cold)._
+_Last updated: 2026-08-25 (sign-off band + Atmosphere actions landed from the theme-UX tail; the `signOff` lexicon republication is queued for Jacob. Critique trend for the push: 25 → 31 → 29 → 32, snapshots in `.impeccable/critique/`)._
 
 ## Where things stand
 
@@ -17,11 +17,10 @@ Done so far: OAuth login (loopback dev client; hosted-client path ready pending
 - **Post embed rendering** (queued 2026-08-25, Jacob's call): render Bluesky post embeds instead of the "· view on Bluesky" cue that currently marks `hasEmbed` posts (critique 4: "the inconsistency reads as a glitch even though it's signal"). Scope: external-link cards (embed `app.bsky.embed.external` — title/description/thumb, thumb blob via the `/blob` route), image thumbnails (`app.bsky.embed.images` — blobs via `/blob`, alt text from the record), and quote posts (`app.bsky.embed.record` — needs a second `getRecord` for the quoted post; render author/text compactly, tolerate deleted/blocked targets). Adapter work in `atmosphere/bluesky.ts` (embed extraction, defensively parsed like facets), view-model additions in `site-view.ts`, theme rendering in `SiteSections.svelte` posts notes. The `/blob` width allowlist (256/768/1600) probably gains a thumb size. Keep the "view on Bluesky" cue only for embed kinds not rendered.
 - **Theme UX polish, remaining tail** (all mechanical findings from four critique rounds are fixed and deployed; what remains is design-decision territory — mock on a canvas before coding, per this push's working pattern):
   1. *Record-level career curation fields* (decided 2026-08-24, staged): hide/order/feature for positions, education, skills — e.g. de-emphasizing a high-school entry or dropping generic imported skills ("Software Development", "Windows 7"); becomes `careerSection` fields once the admin grows a section editor. Framing from the reviews: "honest by default, curatable by choice."
-  2. *The airmail sign-off block*: the page opens like a letter and never signs off — a closing band above the footer (restated contact/postmark/handle; round 4 asked "what would 'Warmly, Jacob' look like as a template affordance?").
-  3. *Atmosphere-native actions*: email is currently the only action; no follow/DM intent anywhere on an Atmosphere-native product.
-  4. *Contrast guards for user color overrides*: `theme.colors` can set any `--accent`/background; nothing protects the AA math or the dark scheme (a single background override pins both schemes).
-  5. *Volume behavior*: every section is an uncapped list — decide caps/pagination ("latest N") before a user with 40 posts finds the missing answer. Posts/writing already honor per-section `limit` in the site record; the question is defaults and UI.
-  6. *Residual*: no RSS; postcard hero still unexercised by a real record (flip `heroSection.style` on a site record to demo); mono-metadata density (the detector's standing flat-type finding, 10.9–11.5px cluster — deliberate system, revisit only if it keeps bothering reviewers).
+  2. *Contrast guards for user color overrides*: `theme.colors` can set any `--accent`/background; nothing protects the AA math or the dark scheme (a single background override pins both schemes).
+  3. *Volume behavior*: every section is an uncapped list — decide caps/pagination ("latest N") before a user with 40 posts finds the missing answer. Posts/writing already honor per-section `limit` in the site record; the question is defaults and UI.
+  4. *Residual*: no RSS; postcard hero still unexercised by a real record (flip `heroSection.style` on a site record to demo); mono-metadata density (the detector's standing flat-type finding, 10.9–11.5px cluster — deliberate system, revisit only if it keeps bothering reviewers).
+- **Republish the `page.mooring.site` lexicon** (queued 2026-08-25): the sign-off work added the optional `signOff` field to the draft; the on-network `com.atproto.lexicon.schema` record is now behind the tree. Jacob's side, runbook §§3–4 (`docs/runbooks/lexicon-publication.md`) — an add-optional-only change per ADR 0012, so no republication urgency: records with `signOff` validate against the open object either way.
 - **Thin deletion-honoring cache** over the direct PDS reads (ADR 0010 §4) — deliberately reordered below hosting on 2026-08-07: rendering reads live per request, which is correct until there is traffic to cache. Revisit once sites are actually served; when it comes up, start from Jetstream v2's snapshot+tail replay (`research/2026-08-14-bluesky-protocol-services.md`) rather than a relay consumer.
 - Later, when token-refresh races become real: a Durable-Object `requestLock` for the OAuth client.
 
@@ -34,6 +33,7 @@ Done so far: OAuth login (loopback dev client; hosted-client path ready pending
 
 ## Done
 
+- 2026-08-25 — **The airmail sign-off band landed — the letter signs off, with Atmosphere-native actions** (tail items "sign-off block" and "Atmosphere-native actions", resolved together). Three directions were mocked on the design canvas (letter closing / postmark band / "From" block); Jacob picked the **postmark band**: a sunk-paper band above the footer where the airmail stripe returns to bookend the page, a rotated circular postmark (handle + render-month, airmail-blue ink), the owner's name, and three actions — Follow (Bluesky profile link, where Follow/Message actually live; Bluesky has no follow/DM intent URL), Say hello (`bsky.app/intent/compose` prefilled with the @mention), Write to me (mailto, only when `contactEmail` is set). The valediction is **configurable, not default**: new optional `signOff` field on `page.mooring.site` (add-optional-only per ADR 0012; republication queued above) flowing lexicon → record builder → settings form → `SiteView` → `SiteLayout`; empty renders the name alone — Jacob was unsure "Warmly," suits every site, so it's a choice ("whimsy seasons the dish"). Band renders on every page like the footer; verified locally against live PDS data (jzweifel.dev): actions resolve, dark tokens flip, no horizontal overflow at 375px, chips ≥24px targets.
 - 2026-08-25 — **Critique rounds 3–4 and their fix PRs (#24, #25) merged and deployed.** Round 3 (29/40) discovered pre-existing issues all earlier reviews missed; PR #24 fixed the mechanical ones: per-site favicons (the stock Svelte logo was the P0 — sites use the record `icon` blob → avatar fallback via `/blob`, app pages get an airmail-striped icon), sifa positions/education sorted newest-first (record order was never meaningful), `yearOf`/`yearSpan` tolerant of formless date strings, the career "More" disclosure made reversible with focus retained, visible contact address in the footer, banner `srcset` + 768 blob width, absolute `og:image` via `/blob`, `color-scheme`/`theme-color`. Round 4 scored **32/40** ("an authored design with a real point of view") and caught PR #24's own regression; PR #25 fixed it: footer wraps at phone widths (the visible email had overflowed the nowrap row), the career summary leads with its full first paragraph so the quantified proof ("~1M → 5M+") is visible without clicking, Skills sublabel, "+21 more"→"Show fewer" swap, ≥24px disclosure targets, banner double-download eliminated. Working pattern that held all push: dual-assessment critique → decisions with Jacob (AskUserQuestion) → design canvas when the change is visual → PR with local verification against live PDS data → deploy → re-critique.
 - 2026-08-25 — **PR #22 merged: contact affordance, career clamp, blob proxy, polish.** The site record gained optional `contactEmail` (admin settings field; renders a "Write to me" mailto stamp in every hero and a filled "Say hello →" chip on the Open to row — answering the re-critique's P0). The sifa career summary clamps to two sentences behind a native disclosure; record-level curation fields stay queued. Profile images serve through `/blob/{did}/{cid}?w=` (ADR 0015, **Accepted**): DID-document-pinned source, width allowlist, immutable cache, `cf.image` transform with pass-through fallback. Sweep: own-host links suppressed in bios, single writing link, consistent new-tab externals, permalink `aria-label`s, ≥24px tap targets, dark-mode airmail token, " · " paragraph separator in meta descriptions, avatar alt text. Re-critique of the deployed overhaul scored **31/40** (from 25; dual-assessment snapshots in `.impeccable/critique/`).
 - 2026-08-24 — **Theme UX overhaul landed** (PR #20 merged: linkification everywhere, two CSS specificity/background bugs, sifa `startedAt`/`endedAt` date fix, writing URLs joined from publication url + doc path, skill cap, dates in `<time>`, a11y/meta; second PR: banner heroes). The hero now renders the Bluesky banner — `band` full-width strip with overlapping avatar by default, `postcard` framed-photo variant via the new optional `heroSection.style` field, media-object 184px-avatar fallback without a banner; pronouns (sifa) sit beside the name; the career section opens with the sifa `about` and "Open to" chips mapped from `openTo` tokens; writing is title-first with the document description as excerpt and a Read link; education sits under a Study sublabel with the current role's date in accent; the content column centres on a `--shell` width and the hero splits name/tagline | bio to use the field right of the headlines; `og:image` prefers the banner. Design direction was mocked and approved on a Claude Design canvas against Jacob's real PDS data before implementation. Verified locally against jzweifel.dev (band hero, all sifa fields) and malpercio.dev (no sifa, Zalgo display name — no overflow).
diff --git a/lexicons/page/mooring/site.json b/lexicons/page/mooring/site.json
index cf8b9f1..d7dbd4b 100644
--- a/lexicons/page/mooring/site.json
+++ b/lexicons/page/mooring/site.json
@@ -29,6 +29,12 @@
             "maxLength": 2540,
             "description": "Public contact email, rendered as a contact affordance on the site. Publishing an address here makes it world-readable."
           },
+          "signOff": {
+            "type": "string",
+            "maxGraphemes": 64,
+            "maxLength": 640,
+            "description": "Valediction rendered before the owner's name in the site's closing sign-off, like 'Warmly,'. When absent, the sign-off shows the name alone."
+          },
           "icon": {
             "type": "blob",
             "accept": ["image/*"],
-- 
2.51.2


From 24b4958cab5869a902feae0cd1f9710df3843dbc Mon Sep 17 00:00:00 2001
From: Jacob Zweifel <jacob@jacobzweifel.com>
Date: Tue, 25 Aug 2026 21:02:55 -0400
Subject: [PATCH 2/2] Finish the merge: both 2026-08-25 Done entries stay

The prior merge commit left the Done-section conflict markers in
NEXT.md; this keeps the sign-off entry and PR #27's allowlist entry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 docs/NEXT.md | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/docs/NEXT.md b/docs/NEXT.md
index c43c39f..ab5fea0 100644
--- a/docs/NEXT.md
+++ b/docs/NEXT.md
@@ -37,11 +37,8 @@ Done so far: OAuth login (loopback dev client; hosted-client path ready pending
 
 ## Done
 
-<<<<<<< HEAD
 - 2026-08-25 — **The airmail sign-off band landed — the letter signs off, with Atmosphere-native actions** (tail items "sign-off block" and "Atmosphere-native actions", resolved together). Three directions were mocked on the design canvas (letter closing / postmark band / "From" block); Jacob picked the **postmark band**: a sunk-paper band above the footer where the airmail stripe returns to bookend the page, a rotated circular postmark (handle + render-month, airmail-blue ink), the owner's name, and three actions — Follow (Bluesky profile link, where Follow/Message actually live; Bluesky has no follow/DM intent URL), Say hello (`bsky.app/intent/compose` prefilled with the @mention), Write to me (mailto, only when `contactEmail` is set). The valediction is **configurable, not default**: new optional `signOff` field on `page.mooring.site` (add-optional-only per ADR 0012; republication queued above) flowing lexicon → record builder → settings form → `SiteView` → `SiteLayout`; empty renders the name alone — Jacob was unsure "Warmly," suits every site, so it's a choice ("whimsy seasons the dish"). Band renders on every page like the footer; verified locally against live PDS data (jzweifel.dev): actions resolve, dark tokens flip, no horizontal overflow at 375px, chips ≥24px targets.
-=======
 - 2026-08-25 — **Costly hosting actions gated behind DID allowlists** (PD-9, PR #27). `hosting/access.ts` holds `allows(list, did)`; the two actions that take a *new* host — `claim` and `addDomain` in `/admin/hosting` — check it and 403, and the page hides their forms. On mooring.page only custom domains are actually locked: subdomains are PD-4's free tier and cost nothing per account, so `SUBDOMAIN_ALLOWLIST` ships as a `*` var while `CUSTOM_DOMAIN_ALLOWLIST` is a secret naming individuals. The subdomain gate stays in the code because a self-hosted instance may want it, and flipping it is a config change. Nothing else needed gating: `release`, `verifyDomain` and `removeDomain` already 404 on rows the account does not hold, so accounts that already have a subdomain or a domain keep them, keep serving, and can still retry TLS. Serving is untouched — `hooks.server.ts` never consults the lists. 8 new unit tests (194 in `web`). Caveat by design: a grandfathered account that *releases* its subdomain cannot reclaim one while the lock is on, and the release copy says so.
->>>>>>> origin/main
 - 2026-08-25 — **Critique rounds 3–4 and their fix PRs (#24, #25) merged and deployed.** Round 3 (29/40) discovered pre-existing issues all earlier reviews missed; PR #24 fixed the mechanical ones: per-site favicons (the stock Svelte logo was the P0 — sites use the record `icon` blob → avatar fallback via `/blob`, app pages get an airmail-striped icon), sifa positions/education sorted newest-first (record order was never meaningful), `yearOf`/`yearSpan` tolerant of formless date strings, the career "More" disclosure made reversible with focus retained, visible contact address in the footer, banner `srcset` + 768 blob width, absolute `og:image` via `/blob`, `color-scheme`/`theme-color`. Round 4 scored **32/40** ("an authored design with a real point of view") and caught PR #24's own regression; PR #25 fixed it: footer wraps at phone widths (the visible email had overflowed the nowrap row), the career summary leads with its full first paragraph so the quantified proof ("~1M → 5M+") is visible without clicking, Skills sublabel, "+21 more"→"Show fewer" swap, ≥24px disclosure targets, banner double-download eliminated. Working pattern that held all push: dual-assessment critique → decisions with Jacob (AskUserQuestion) → design canvas when the change is visual → PR with local verification against live PDS data → deploy → re-critique.
 - 2026-08-25 — **PR #22 merged: contact affordance, career clamp, blob proxy, polish.** The site record gained optional `contactEmail` (admin settings field; renders a "Write to me" mailto stamp in every hero and a filled "Say hello →" chip on the Open to row — answering the re-critique's P0). The sifa career summary clamps to two sentences behind a native disclosure; record-level curation fields stay queued. Profile images serve through `/blob/{did}/{cid}?w=` (ADR 0015, **Accepted**): DID-document-pinned source, width allowlist, immutable cache, `cf.image` transform with pass-through fallback. Sweep: own-host links suppressed in bios, single writing link, consistent new-tab externals, permalink `aria-label`s, ≥24px tap targets, dark-mode airmail token, " · " paragraph separator in meta descriptions, avatar alt text. Re-critique of the deployed overhaul scored **31/40** (from 25; dual-assessment snapshots in `.impeccable/critique/`).
 - 2026-08-24 — **Theme UX overhaul landed** (PR #20 merged: linkification everywhere, two CSS specificity/background bugs, sifa `startedAt`/`endedAt` date fix, writing URLs joined from publication url + doc path, skill cap, dates in `<time>`, a11y/meta; second PR: banner heroes). The hero now renders the Bluesky banner — `band` full-width strip with overlapping avatar by default, `postcard` framed-photo variant via the new optional `heroSection.style` field, media-object 184px-avatar fallback without a banner; pronouns (sifa) sit beside the name; the career section opens with the sifa `about` and "Open to" chips mapped from `openTo` tokens; writing is title-first with the document description as excerpt and a Read link; education sits under a Study sublabel with the current role's date in accent; the content column centres on a `--shell` width and the hero splits name/tagline | bio to use the field right of the headlines; `og:image` prefers the banner. Design direction was mocked and approved on a Claude Design canvas against Jacob's real PDS data before implementation. Verified locally against jzweifel.dev (band hero, all sifa fields) and malpercio.dev (no sifa, Zalgo display name — no overflow).