From 74ab417735c98a58c8d14ae3d472ec34853a3b52 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Mon, 7 Sep 2026 13:10:04 +0200
Subject: [PATCH 01/12] Restore CalorieApp page footer and public CAL market
 card in maintenance 0.3.24

---
 .../workflows/bridge-maintenance-checks.yml   |   5 +
 .../identity-bridge/v1/code-provenance.json   |  32 +++
 tools/tests/wordpress_page_ending.test.mjs    | 119 ++++++++
 tools/tests/wordpress_page_ending.test.php    | 125 +++++++++
 .../calorieapp-identity-bridge/README.md      |  13 +
 .../assets/calorieapp-page-ending.css         | 264 ++++++++++++++++++
 .../assets/calorieapp-page-ending.js          | 221 +++++++++++++++
 .../calorieapp-identity-bridge.php            |   4 +-
 ...ieapp-identity-bridge-integrated-login.php |   2 +-
 ...lorieapp-identity-bridge-market-widget.php | 161 +++++++++++
 ...calorieapp-identity-bridge-page-ending.php | 116 ++++++++
 .../class-calorieapp-identity-bridge.php      |  10 +
 12 files changed, 1069 insertions(+), 3 deletions(-)
 create mode 100644 tools/tests/wordpress_page_ending.test.mjs
 create mode 100644 tools/tests/wordpress_page_ending.test.php
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php

diff --git a/.github/workflows/bridge-maintenance-checks.yml b/.github/workflows/bridge-maintenance-checks.yml
index f7c711a..7a10373 100644
--- a/.github/workflows/bridge-maintenance-checks.yml
+++ b/.github/workflows/bridge-maintenance-checks.yml
@@ -4,6 +4,7 @@ on:
   pull_request:
     branches:
       - fix/bridge-033-status-refresh
+      - fix/desktop-widget-column-fit
 
 permissions:
   contents: read
@@ -25,6 +26,10 @@ jobs:
         run: find wordpress-plugins/calorieapp-identity-bridge -name '*.php' -type f -print0 | xargs -0 -n1 php -l
       - name: Exercise WordPress page rendering
         run: php tools/tests/wordpress_site_session_markup.test.php
+      - name: Check the CalorieApp footer and public market data
+        run: |
+          php tools/tests/wordpress_page_ending.test.php
+          node --test tools/tests/wordpress_page_ending.test.mjs
       - name: Exercise the preserved login and site-wide session controls
         run: node --test tools/tests/calorieapp_embed_readiness.test.mjs tools/tests/wordpress_site_session.test.mjs
       - name: Check responsive header correction lifecycle
diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index 8e63215..a43b1da 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -145,6 +145,22 @@
       "source_file": "calorieappdraft3.ai",
       "adaptation": "Original phone-mark vector paths and colours retained; surrounding artboard and border omitted."
     },
+    {
+      "path": "assets/calorieapp-page-ending.css",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-source-and-similarity-review-pending",
+      "source": "CalorieToken/CalorieApp@4baea3acaeaa14dacc602ae8d6154ab4c7e97836; footer and public XPMarket components only; session/layout controllers excluded"
+    },
+    {
+      "path": "assets/calorieapp-page-ending.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-source-and-similarity-review-pending",
+      "source": "CalorieToken/CalorieApp@4baea3acaeaa14dacc602ae8d6154ab4c7e97836; footer and public XPMarket components only; session/layout controllers excluded"
+    },
     {
       "path": "assets/calorieapp-site-layout.css",
       "origin_class": "project-repository-material",
@@ -223,6 +239,22 @@
       "declared_distribution_licence": "GPL-2.0-or-later",
       "clearance_status": "contributor-and-source-declaration-pending"
     },
+    {
+      "path": "includes/class-calorieapp-identity-bridge-market-widget.php",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-source-and-similarity-review-pending",
+      "source": "CalorieToken/CalorieApp@4baea3acaeaa14dacc602ae8d6154ab4c7e97836; footer and public XPMarket components only; session/layout controllers excluded"
+    },
+    {
+      "path": "includes/class-calorieapp-identity-bridge-page-ending.php",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-source-and-similarity-review-pending",
+      "source": "CalorieToken/CalorieApp@4baea3acaeaa14dacc602ae8d6154ab4c7e97836; footer and public XPMarket components only; session/layout controllers excluded"
+    },
     {
       "path": "includes/class-calorieapp-identity-bridge-rest.php",
       "origin_class": "project-repository-material",
diff --git a/tools/tests/wordpress_page_ending.test.mjs b/tools/tests/wordpress_page_ending.test.mjs
new file mode 100644
index 0000000..36f0c74
--- /dev/null
+++ b/tools/tests/wordpress_page_ending.test.mjs
@@ -0,0 +1,119 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+
+const source = readFileSync(new URL('../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js', import.meta.url), 'utf8');
+const tokenUrl = 'https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
+function element() {
+  return {
+    attrs: {}, textContent: '', hidden: false, children: new Map(), listeners: {},
+    classList: { add() {} },
+    setAttribute(name, value) { this.attrs[name] = String(value); },
+    getAttribute(name) { return this.attrs[name] ?? null; },
+    querySelector(selector) { return this.children.get(selector) ?? null; },
+    addEventListener(name, fn) { this.listeners[name] = fn; },
+    set innerHTML(html) {
+      this.markup = html;
+      for (const match of html.matchAll(/<[a-z]+\b[^>]*class="([^"]+)"[^>]*>/g)) {
+        const child = element();
+        child.hidden = /\bhidden\b/.test(match[0]);
+        for (const name of match[1].split(' ')) this.children.set('.' + name, child);
+      }
+    },
+  };
+}
+const good = () => ({ success: true, data: {
+  code: 'Calorie', issuer: 'rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY',
+  title: 'Calorie Token', logo: 'https://xpcdn.xpmarket.com/storage/logo/calorie.webp',
+  price_usd: 0.00000007, price_xrp: 0.00000005, market_cap_usd: 4000, rank: 300, holders: 14000,
+} });
+async function settle() { for (let i = 0; i < 10; i++) await Promise.resolve(); }
+function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true } = {}) {
+  const widget = element();
+  const track = element();
+  track.clientWidth = 400;
+  track.children.set('a', { getBoundingClientRect: () => ({ width: 200 }) });
+  track.moves = [];
+  track.scrollBy = (options) => track.moves.push(options);
+  const carousel = element();
+  carousel.children.set('.calorieapp-shared-social-track', track);
+  const buttons = [-1, 1].map((direction) => {
+    const button = element(); button.setAttribute('data-calorieapp-carousel-direction', direction); return button;
+  });
+  carousel.querySelectorAll = () => buttons;
+  const requests = [];
+  const timers = new Map();
+  let ready;
+  const document = {
+    readyState: 'loading',
+    addEventListener(name, fn) { if (name === 'DOMContentLoaded') ready = fn; },
+    querySelectorAll(selector) {
+      if (empty) return [];
+      return selector.includes('xpmarket-widget') ? [widget] : [carousel];
+    },
+  };
+  const window = {
+    calorieappPageEnding: endpoint ? { xpMarketWidgetUrl: 'https://calorietoken.net/wp-json/calorieapp/v1/xpmarket-widget', xpMarketTokenUrl: tokenUrl } : {},
+    fetch: async (url, options) => {
+      requests.push({ url, options });
+      if (fetchError) throw fetchError;
+      if (stalled) return new Promise((resolve, reject) => options.signal.addEventListener('abort', () => reject(new Error('aborted'))));
+      return response;
+    },
+    AbortController,
+    setTimeout(fn) { timers.set(1, fn); return 1; },
+    clearTimeout(id) { timers.delete(id); },
+    matchMedia() { return { matches: reduced }; },
+  };
+  vm.runInNewContext(source, { window, document, URL, Intl });
+  ready();
+  return { widget, buttons, track, requests, timers, ready };
+}
+
+test('public CAL data is shown beside an always-available XPMarket destination', async () => {
+  const h = run(); await settle();
+  assert.equal(h.widget.getAttribute('data-state'), 'ready');
+  assert.equal(h.widget.querySelector('.calorieapp-xpmarket-price').textContent, '$0.00000007');
+  assert.equal(h.widget.querySelector('.calorieapp-xpmarket-link').getAttribute('href'), tokenUrl);
+  assert.equal(h.widget.querySelector('.calorieapp-xpmarket-state').textContent, 'XPMarket data');
+  assert.equal(h.requests[0].options.credentials, 'omit');
+  assert.equal(h.timers.size, 0);
+  h.ready(); await settle();
+  assert.equal(h.requests.length, 1, 'Repeat initialization reuses the request.');
+});
+test('failed and incomplete feeds keep the fallback link without inventing prices', async () => {
+  for (const options of [
+    { response: { ok: false } }, { fetchError: new Error('offline') },
+    { response: { ok: true, json: async () => ({ success: false }) } }, { endpoint: false },
+  ]) {
+    const h = run(options); await settle();
+    assert.equal(h.widget.getAttribute('data-state'), 'fallback');
+    assert.equal(h.widget.querySelector('.calorieapp-xpmarket-state').textContent, 'Open XPMarket');
+    assert.equal(h.widget.querySelector('.calorieapp-xpmarket-link').getAttribute('href'), tokenUrl);
+    assert.equal(h.widget.querySelector('.calorieapp-xpmarket-price').textContent, '');
+  }
+});
+test('unexpected token data is rejected before filling the card', async () => {
+  const data = good(); data.data.issuer = 'different-token';
+  const h = run({ response: { ok: true, json: async () => data } }); await settle();
+  assert.equal(h.widget.getAttribute('data-state'), 'fallback');
+});
+test('a stalled market request is abortable and does not leave a permanent loading state', async () => {
+  const h = run({ stalled: true });
+  h.timers.get(1)();
+  assert.equal(h.requests[0].options.signal.aborted, true);
+  await settle();
+  assert.equal(h.widget.getAttribute('data-state'), 'fallback');
+});
+test('social arrows move one item and respect reduced motion', () => {
+  const h = run({ reduced: true });
+  h.buttons[0].listeners.click(); h.buttons[1].listeners.click();
+  assert.equal(h.track.moves[0].left, -200);
+  assert.equal(h.track.moves[1].left, 200);
+  assert.equal(h.track.moves[1].behavior, 'auto');
+});
+test('pages without the CalorieApp ending do not request market data', () => {
+  const h = run({ empty: true });
+  assert.equal(h.requests.length, 0);
+});
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
new file mode 100644
index 0000000..4297ef6
--- /dev/null
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -0,0 +1,125 @@
+<?php
+/** Execute the production page renderer and market route with offline WordPress fixtures. */
+define('ABSPATH', __DIR__);
+define('MINUTE_IN_SECONDS', 60);
+define('CALORIEAPP_IDENTITY_BRIDGE_FILE', __FILE__);
+define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', 'test');
+$page = 'calorieapp';
+$admin = false;
+$feed = false;
+$embed = false;
+$actions = $styles = $scripts = $config = $cache = $requests = $routes = [];
+function add_action($name, $callback, $priority = 10): void { $GLOBALS['actions'][$name][$priority][] = $callback; }
+function is_admin(): bool { return $GLOBALS['admin']; }
+function is_feed(): bool { return $GLOBALS['feed']; }
+function is_embed(): bool { return $GLOBALS['embed']; }
+function is_page($slug): bool { return $GLOBALS['page'] === $slug; }
+function plugin_dir_url($file): string { return home_url('/wp-content/plugins/calorieapp-identity-bridge/'); }
+function home_url($path): string { return 'https://calorietoken.net' . $path; }
+function content_url($path): string { return home_url('/wp-content' . $path); }
+function rest_url($path): string { return home_url('/wp-json/' . $path); }
+function wp_date($format): string { return '2031'; }
+function wp_enqueue_style($handle, ...$args): void { $GLOBALS['styles'][$handle] = $args; }
+function wp_enqueue_script($handle, ...$args): void { $GLOBALS['scripts'][$handle] = $args; }
+function wp_script_is($handle, $state): bool { return isset($GLOBALS['scripts'][$handle]); }
+function wp_localize_script($handle, $name, $data): void { $GLOBALS['config'][$handle] = $data; }
+function esc_attr($value): string { return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8'); }
+function esc_html($value): string { return esc_attr($value); }
+function esc_url($value): string { return esc_attr($value); }
+function esc_url_raw($value): string { return $value; }
+function esc_attr__($value, $domain): string { return esc_attr($value); }
+function esc_html__($value, $domain): string { return esc_attr($value); }
+function __($value, $domain): string { return $value; }
+function sanitize_text_field($value): string { return strip_tags($value); }
+function get_transient($key) { return $GLOBALS['cache'][$key]['value'] ?? false; }
+function set_transient($key, $value, $ttl): void { $GLOBALS['cache'][$key] = compact('value', 'ttl'); }
+function wp_safe_remote_get($url, $options) { $GLOBALS['requests'][] = compact('url', 'options'); return $GLOBALS['upstream']; }
+function wp_remote_retrieve_response_code($response): int { return $response['status']; }
+function wp_remote_retrieve_body($response): string { return $response['body']; }
+function is_wp_error($value): bool { return $value instanceof WP_Error; }
+function register_rest_route($namespace, $route, $options): void { $GLOBALS['routes'][] = compact('namespace', 'route', 'options'); }
+class WP_Error { public function __construct(public $code, public $message, public $data) {} }
+class WP_REST_Response {
+    public array $headers = [];
+    public function __construct(public $data, public $status) {}
+    public function header($name, $value): void { $this->headers[$name] = $value; }
+}
+function check($condition, $message): void { if (!$condition) throw new RuntimeException($message); }
+function render($object): string { ob_start(); $object->render(); return (string) ob_get_clean(); }
+$dir = dirname(__DIR__, 2) . '/wordpress-plugins/calorieapp-identity-bridge/includes/';
+require $dir . 'class-calorieapp-identity-bridge-market-widget.php';
+require $dir . 'class-calorieapp-identity-bridge-page-ending.php';
+use CalorieApp\IdentityBridge\PageEnding;
+use CalorieApp\IdentityBridge\MarketWidget;
+
+$ending = new PageEnding();
+$ending->register_hooks();
+check(isset($actions['wp_footer'][5]), 'Render the ending before footer scripts.');
+$ending->enqueue_assets();
+check(count($styles) === 1 && count($scripts) === 1, 'Only the independent page-ending assets are queued.');
+check($scripts['calorieapp-identity-bridge-page-ending'][1] === [], 'Do not load the authentication controller as a dependency.');
+$html = render($ending);
+check(substr_count($html, '<footer ') === 1, 'The app page receives one website footer.');
+check(substr_count($html, 'data-calorieapp-xpmarket-widget') === 1, 'The app page receives one market card.');
+check(strpos($html, 'calorieapp-page-market') < strpos($html, '<footer '), 'Place the market card before the footer.');
+check(str_contains($html, 'Calorie aims to be the world’s food token'), 'Keep the website mission copy.');
+check(str_contains($html, 'Operator: ICTHendrikse · KVK 73774693'), 'Keep the current operator copy.');
+check(str_contains($html, '© 2031 ICTHendrikse'), 'Use the current WordPress year.');
+foreach (['privacy-policy', 'terms-conditions'] as $slug) {
+    check(str_contains($html, home_url('/index.php/' . $slug . '/')), 'Legal links must be usable without JavaScript.');
+}
+foreach (['Telegram', 'GitHub', 'X', 'Facebook', 'YouTube', 'LinkedIn', 'Instagram'] as $label) {
+    check(str_contains($html, 'aria-label="' . $label . '"'), 'Keep named social links.');
+}
+check(str_contains($html, MarketWidget::TOKEN_PAGE), 'The server-rendered card must contain its fallback destination.');
+check(!str_contains($html, '<iframe') && !str_contains($html, 'logout'), 'The ending must not add another app frame or session control.');
+check(render($ending) === '', 'Repeated footer hooks must not duplicate the ending.');
+foreach (['home', 'faq', 'privacy-policy'] as $page) {
+    $styles = $scripts = [];
+    $other = new PageEnding();
+    $other->enqueue_assets();
+    check(render($other) === '' && !$styles && !$scripts, 'Existing footers on other pages remain untouched.');
+}
+$page = 'calorieapp';
+foreach (['admin', 'feed', 'embed'] as $flag) {
+    $GLOBALS[$flag] = true;
+    check(render(new PageEnding()) === '', 'Do not insert public page furniture into ' . $flag . ' responses.');
+    $GLOBALS[$flag] = false;
+}
+
+$market = new MarketWidget();
+$market->register_route();
+check($routes[0]['options']['methods'] === 'GET' && $routes[0]['options']['permission_callback'] === '__return_true', 'Only read-only public market data is exposed.');
+$ending->enqueue_assets();
+$market->add_browser_config();
+check(isset($config['calorieapp-identity-bridge-page-ending']['xpMarketWidgetUrl']), 'The separate market renderer receives its route.');
+$payload = ['success' => true, 'data' => [
+    'code' => 'Calorie', 'issuer' => 'rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY',
+    'title' => 'Calorie Token', 'logo' => 'https://xpcdn.xpmarket.com/storage/logo/calorie.webp',
+    'price' => 0.00000005, 'priceUsd' => 0.00000007, 'marketcap' => 4000,
+    'holders' => 14000, 'rank' => 300, 'private_extra' => 'discard-me',
+]];
+$safe = MarketWidget::sanitize_payload($payload);
+check($safe['code'] === 'Calorie' && !isset($safe['private_extra']), 'Only allowlisted CAL fields leave the endpoint.');
+foreach ([['issuer', 'different-token'], ['logo', 'https://xpcdn.xpmarket.com.evil.test/x'], ['price', -1], ['rank', '1e309']] as [$key, $value]) {
+    $bad = $payload;
+    $bad['data'][$key] = $value;
+    check(MarketWidget::sanitize_payload($bad) === null, 'Reject invalid field: ' . $key);
+}
+$bad = $payload;
+unset($bad['data']['priceUsd']);
+check(MarketWidget::sanitize_payload($bad) === null, 'Reject incomplete market data.');
+$upstream = ['status' => 200, 'body' => json_encode($payload)];
+$response = $market->get_widget();
+check($response instanceof WP_REST_Response && $response->status === 200, 'Successful public data is returned.');
+check(count($requests) === 1 && $requests[0]['options']['redirection'] === 0, 'Only the fixed XPMarket endpoint is fetched.');
+check($requests[0]['options']['limit_response_size'] === 16384, 'Bound the upstream response size.');
+check($response->headers['Cache-Control'] === 'public, max-age=300', 'Successful data uses a five-minute public cache.');
+$market->get_widget();
+check(count($requests) === 1, 'Cached requests must not refetch XPMarket.');
+foreach ([new WP_Error('offline', 'offline', []), ['status' => 503, 'body' => ''], ['status' => 200, 'body' => '{}']] as $upstream) {
+    $cache = $requests = [];
+    check($market->get_widget() instanceof WP_Error, 'Failed upstream data must not become fake figures.');
+    check($market->get_widget() instanceof WP_Error && count($requests) === 1, 'Back off for a minute after an upstream failure.');
+}
+echo "WordPress page-ending rendering, scope, market validation and cache checks passed.\n";
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index 7526c81..ac3ee40 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,6 +41,19 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
+Version 0.3.24 restores the missing WordPress footer and a CAL market card below
+CalorieApp, only on the `calorieapp` page. It reuses the existing footer colours,
+social destinations, and current operator/copyright copy; the privacy and terms
+links remain available without JavaScript. The XPMarket public CAL response is
+validated and cached for five minutes by WordPress. On an upstream failure the
+card keeps its direct XPMarket link and does not invent market figures.
+
+These components have separate PHP, CSS and JavaScript files. The installed
+0.3.23 header, navigation, login and logout remain the maintenance baseline.
+No stored Brizy content or global theme templates are rewritten. The old
+intervening layout releases are not part of this package. Visual verification
+on the live CalorieApp page is still required before accepting the appearance.
+
 Version 0.3.23 keeps the desktop account card within its existing Brizy column.
 The shortcode uses the available column width and the card is centred with a
 maximum width of 220px. This prevents the right edge from being clipped on
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
new file mode 100644
index 0000000..97a1c24
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
@@ -0,0 +1,264 @@
+/* CalorieApp page ending only; no account, header or iframe selectors. */
+.calorieapp-shared-page-ending {
+  box-sizing: border-box;
+  width: 100%;
+  margin: 32px 0 0;
+  color: #fff;
+  font-family: Amiri, Georgia, "Times New Roman", serif;
+}
+.calorieapp-page-market { padding: 0 16px 32px; }
+.calorieapp-shared-footer {
+  box-sizing: border-box;
+  width: 100%;
+  border: 0;
+  border-radius: 0;
+  padding: 24px max(18px, calc((100vw - 1170px) / 2)) 30px;
+  background: #505ba9;
+  color: #fff;
+  text-align: center;
+  box-shadow: none;
+}
+
+.calorieapp-shared-socials {
+  display: grid;
+  grid-template-columns: 48px minmax(0, 1fr) 48px;
+  align-items: center;
+  gap: 12px;
+  width: min(100%, 1170px);
+  margin: 0 auto 18px;
+}
+
+.calorieapp-shared-social-window {
+  min-width: 0;
+  overflow: hidden;
+}
+
+.calorieapp-shared-social-track {
+  display: flex;
+  overflow-x: auto;
+  scroll-behavior: smooth;
+  scroll-snap-type: x mandatory;
+  scrollbar-width: none;
+}
+
+.calorieapp-shared-social-track::-webkit-scrollbar {
+  display: none;
+}
+
+.calorieapp-shared-social {
+  display: flex;
+  flex: 0 0 33.3333%;
+  min-height: 80px;
+  align-items: center;
+  justify-content: center;
+  color: #fff !important;
+  scroll-snap-align: start;
+  text-decoration: none !important;
+}
+
+.calorieapp-shared-social-icon {
+  display: block;
+  width: 48px;
+  height: 48px;
+  fill: currentColor;
+}
+
+.calorieapp-shared-social-arrow {
+  display: inline-flex;
+  width: 48px;
+  height: 64px;
+  align-items: center;
+  justify-content: center;
+  border: 0;
+  padding: 0;
+  background: transparent;
+  color: #079447;
+  font-family: Arial, sans-serif;
+  font-size: 56px;
+  font-weight: 400;
+  line-height: 1;
+  cursor: pointer;
+}
+
+.calorieapp-shared-legal {
+  width: min(100%, 1170px);
+  margin: 0 auto;
+}
+
+.calorieapp-shared-legal-links {
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: center;
+  gap: 8px 28px;
+  margin-top: 12px !important;
+}
+
+.calorieapp-shared-legal-links a {
+  color: #fff !important;
+  font-weight: 700;
+  text-decoration: underline !important;
+}
+
+.calorieapp-shared-social:hover,
+.calorieapp-shared-social:focus-visible,
+.calorieapp-shared-legal-links a:hover,
+.calorieapp-shared-legal-links a:focus-visible {
+  color: #c7f6d6 !important;
+}
+
+.calorieapp-shared-footer p {
+  margin: 7px 0;
+  font-size: 16px;
+  line-height: 1.9;
+}
+
+.calorieapp-shared-social-arrow:focus-visible,
+.calorieapp-shared-social:focus-visible,
+.calorieapp-shared-legal-links a:focus-visible {
+  outline: 3px solid rgba(255, 255, 255, 0.9);
+  outline-offset: 3px;
+}
+
+.calorieapp-xpmarket-widget {
+  display: block;
+  box-sizing: border-box;
+  width: min(380px, calc(100% - 10px));
+  min-height: 0;
+  height: auto;
+  margin: 0 auto;
+  overflow: hidden;
+  border: 5px solid #505ba9;
+  border-radius: 12px;
+  background: #fff;
+  color: #222;
+  font-family: Arial, Helvetica, sans-serif;
+  text-align: left;
+}
+
+.calorieapp-xpmarket-link {
+  display: flex;
+  min-height: 0;
+  box-sizing: border-box;
+  flex-direction: column;
+  gap: 12px;
+  padding: 14px;
+  color: inherit !important;
+  text-decoration: none !important;
+}
+
+.calorieapp-xpmarket-heading {
+  display: grid;
+  grid-template-columns: 48px minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 10px;
+}
+
+.calorieapp-xpmarket-logo {
+  display: block;
+  width: 48px;
+  height: 48px;
+  border-radius: 50%;
+  object-fit: cover;
+}
+
+.calorieapp-xpmarket-heading strong,
+.calorieapp-xpmarket-heading small {
+  display: block;
+}
+
+.calorieapp-xpmarket-heading strong {
+  color: #079447;
+  font-size: 18px;
+  line-height: 1.2;
+}
+
+.calorieapp-xpmarket-heading small,
+.calorieapp-xpmarket-state,
+.calorieapp-xpmarket-prices small,
+.calorieapp-xpmarket-stats small {
+  color: #626b8f;
+  font-size: 11px;
+}
+
+.calorieapp-xpmarket-state {
+  align-self: start;
+  border-radius: 999px;
+  padding: 4px 8px;
+  background: #eef9f2;
+  color: #078442;
+  font-weight: 700;
+  white-space: nowrap;
+}
+
+.calorieapp-xpmarket-prices {
+  display: flex;
+  align-items: baseline;
+  gap: 10px;
+}
+
+.calorieapp-xpmarket-price {
+  color: #222;
+  font-size: 24px;
+  line-height: 1;
+}
+
+.calorieapp-xpmarket-stats {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 6px;
+}
+
+.calorieapp-xpmarket-stats > span {
+  display: flex;
+  min-width: 0;
+  flex-direction: column;
+  gap: 2px;
+  border-radius: 8px;
+  padding: 7px 8px;
+  background: #f3f4fa;
+}
+
+.calorieapp-xpmarket-stats strong {
+  overflow: hidden;
+  color: #30386f;
+  font-size: 14px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.calorieapp-xpmarket-cta {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-top: auto;
+  color: #505ba9;
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.calorieapp-xpmarket-widget[data-state="fallback"]
+  .calorieapp-xpmarket-prices,
+.calorieapp-xpmarket-widget[data-state="fallback"]
+  .calorieapp-xpmarket-stats {
+  opacity: 0.45;
+}
+
+@media (max-width: 767px) {
+  .calorieapp-shared-page-ending { margin-top: 24px; }
+  .calorieapp-shared-footer { padding: 20px 18px 26px; }
+  .calorieapp-shared-socials { grid-template-columns: 42px minmax(0, 1fr) 42px; gap: 4px; }
+  .calorieapp-shared-social { flex-basis: 100%; min-height: 76px; }
+  .calorieapp-shared-social-arrow { width: 42px; font-size: 48px; }
+  .calorieapp-shared-footer p { font-size: 14px; }
+  .calorieapp-xpmarket-link { padding: 12px; }
+}
+.calorieapp-xpmarket-logo[hidden] { display: none; }
+.calorieapp-xpmarket-heading { grid-template-columns: auto minmax(0, 1fr); }
+.calorieapp-xpmarket-state { grid-column: 1 / -1; justify-self: start; }
+.calorieapp-xpmarket-prices { flex-wrap: wrap; overflow-wrap: anywhere; }
+.calorieapp-xpmarket-title { overflow-wrap: anywhere; }
+.calorieapp-xpmarket-link:focus-visible { outline: 3px solid #079447; outline-offset: -4px; }
+.calorieapp-shared-social-arrow { touch-action: manipulation; }
+@media (prefers-reduced-motion: reduce) {
+  .calorieapp-shared-social-track { scroll-behavior: auto; }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
new file mode 100644
index 0000000..78e9d81
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
@@ -0,0 +1,221 @@
+(function () {
+  "use strict";
+  var xpMarketWidgetRequest = null;
+
+  function formatCompactNumber(value) {
+    var number = Number(value);
+    if (!Number.isFinite(number)) {
+      return "—";
+    }
+    try {
+      return new Intl.NumberFormat(undefined, {
+        notation: "compact",
+        maximumFractionDigits: 1,
+      }).format(number);
+    } catch (_error) {
+      return String(Math.round(number));
+    }
+  }
+
+  function formatSmallPrice(value, prefix, suffix) {
+    var number = Number(value);
+    if (!Number.isFinite(number) || number < 0) {
+      return "—";
+    }
+    var formatted;
+    if (number === 0) {
+      formatted = "0";
+    } else if (number < 0.01) {
+      formatted = number.toFixed(10).replace(/0+$/, "").replace(/\.$/, "");
+    } else {
+      formatted = number.toLocaleString(undefined, {
+        maximumFractionDigits: 6,
+      });
+    }
+    return (prefix || "") + formatted + (suffix || "");
+  }
+
+  function renderXpMarketWidget(widget, payload) {
+    var data = payload && payload.data;
+    if (!payload || !payload.success || !data || !widget ||
+        data.code !== "Calorie" ||
+        data.issuer !== "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY" ||
+        !["price_usd", "price_xrp", "market_cap_usd", "rank", "holders"].every(function (key) {
+          return typeof data[key] === "number" && Number.isFinite(data[key]) && data[key] >= 0;
+        })) {
+      throw new Error("XPMarket widget payload is incomplete");
+    }
+
+    var setText = function (selector, value) {
+      var target = widget.querySelector(selector);
+      if (target) {
+        target.textContent = value;
+      }
+    };
+    var logo = widget.querySelector(".calorieapp-xpmarket-logo");
+    if (logo && typeof data.logo === "string" && data.logo.indexOf("https://xpcdn.xpmarket.com/") === 0) {
+      logo.setAttribute("src", data.logo);
+      logo.hidden = false;
+    }
+    setText(".calorieapp-xpmarket-title", data.title || "Calorie Token");
+    setText(
+      ".calorieapp-xpmarket-price",
+      formatSmallPrice(data.price_usd, "$")
+    );
+    setText(
+      ".calorieapp-xpmarket-xrp",
+      formatSmallPrice(data.price_xrp, "", " XRP")
+    );
+    setText(
+      ".calorieapp-xpmarket-market-cap",
+      "$" + formatCompactNumber(data.market_cap_usd)
+    );
+    setText(".calorieapp-xpmarket-rank", "#" + String(data.rank));
+    setText(
+      ".calorieapp-xpmarket-holders",
+      formatCompactNumber(data.holders)
+    );
+    setText(".calorieapp-xpmarket-state", "XPMarket data");
+    widget.setAttribute("data-state", "ready");
+  }
+
+  function enhanceXpMarketPriceWidgets() {
+    if (typeof document.querySelectorAll !== "function") {
+      return;
+    }
+
+    var config = window.calorieappPageEnding || {};
+    var endpoint = config.xpMarketWidgetUrl || "";
+    var tokenUrl =
+      config.xpMarketTokenUrl ||
+      "https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY";
+    var widgets = document.querySelectorAll(
+      "[data-calorieapp-shared-page-ending] [data-calorieapp-xpmarket-widget]"
+    );
+    if (!widgets.length) {
+      return;
+    }
+
+    widgets.forEach(function (widget) {
+      if (widget.getAttribute("data-calorieapp-xpmarket-widget") === "1") {
+        return;
+      }
+      widget.setAttribute("data-calorieapp-xpmarket-widget", "1");
+      widget.setAttribute("data-state", "loading");
+      if (widget.classList) {
+        widget.classList.add("calorieapp-xpmarket-widget");
+      }
+      widget.innerHTML =
+        '<a class="calorieapp-xpmarket-link" rel="noopener noreferrer">' +
+        '<span class="calorieapp-xpmarket-heading">' +
+        '<img class="calorieapp-xpmarket-logo" alt="" width="48" height="48" loading="lazy" referrerpolicy="no-referrer" hidden>' +
+        '<span><strong class="calorieapp-xpmarket-title">Calorie Token</strong>' +
+        '<small>CAL · XPMarket</small></span>' +
+        '<span class="calorieapp-xpmarket-state" aria-live="polite">Loading…</span>' +
+        "</span>" +
+        '<span class="calorieapp-xpmarket-prices">' +
+        '<strong class="calorieapp-xpmarket-price">—</strong>' +
+        '<small class="calorieapp-xpmarket-xrp">—</small>' +
+        "</span>" +
+        '<span class="calorieapp-xpmarket-stats">' +
+        '<span><small>Market cap</small><strong class="calorieapp-xpmarket-market-cap">—</strong></span>' +
+        '<span><small>Rank</small><strong class="calorieapp-xpmarket-rank">—</strong></span>' +
+        '<span><small>Holders</small><strong class="calorieapp-xpmarket-holders">—</strong></span>' +
+        "</span>" +
+        '<span class="calorieapp-xpmarket-cta">View CAL on XPMarket <span aria-hidden="true">→</span></span>' +
+        "</a>";
+
+      var link = widget.querySelector(".calorieapp-xpmarket-link");
+      if (link) {
+        link.setAttribute("href", tokenUrl);
+        link.setAttribute("aria-label", "View live Calorie Token data on XPMarket");
+      }
+    });
+
+    if (!endpoint || typeof window.fetch !== "function") {
+      widgets.forEach(function (widget) {
+        var status = widget.querySelector(".calorieapp-xpmarket-state");
+        if (status) {
+          status.textContent = "Open XPMarket";
+        }
+        widget.setAttribute("data-state", "fallback");
+      });
+      return;
+    }
+
+    if (!xpMarketWidgetRequest) {
+      var controller = typeof window.AbortController === "function" ? new window.AbortController() : null;
+      var timer = controller ? window.setTimeout(function () { controller.abort(); }, 12000) : null;
+      xpMarketWidgetRequest = window
+        .fetch(endpoint, {
+          credentials: "omit",
+          signal: controller ? controller.signal : undefined,
+          headers: { Accept: "application/json" },
+        })
+        .then(function (response) {
+          if (!response.ok) {
+            throw new Error("XPMarket widget request failed");
+          }
+          return response.json();
+        }).finally(function () {
+          if (timer !== null) window.clearTimeout(timer);
+        });
+    }
+
+    xpMarketWidgetRequest
+      .then(function (payload) {
+        widgets.forEach(function (widget) {
+          renderXpMarketWidget(widget, payload);
+        });
+      })
+      .catch(function () {
+        widgets.forEach(function (widget) {
+          var status = widget.querySelector(".calorieapp-xpmarket-state");
+          if (status) {
+            status.textContent = "Open XPMarket";
+          }
+          widget.setAttribute("data-state", "fallback");
+        });
+      });
+  }
+
+  function enhanceSharedFooterCarousels() {
+    document
+      .querySelectorAll("[data-calorieapp-social-carousel]")
+      .forEach(function (carousel) {
+        if (carousel.getAttribute("data-carousel-ready") === "1") {
+          return;
+        }
+        var track = carousel.querySelector(".calorieapp-shared-social-track");
+        if (!track) {
+          return;
+        }
+        carousel.setAttribute("data-carousel-ready", "1");
+        carousel
+          .querySelectorAll("[data-calorieapp-carousel-direction]")
+          .forEach(function (button) {
+            button.addEventListener("click", function () {
+              var direction = Number(
+                button.getAttribute("data-calorieapp-carousel-direction")
+              );
+              var item = track.querySelector("a");
+              var step = item ? item.getBoundingClientRect().width : track.clientWidth;
+              track.scrollBy({
+                left: (direction < 0 ? -1 : 1) * step,
+                behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth",
+              });
+            });
+          });
+      });
+  }
+
+  function initialize() {
+    enhanceXpMarketPriceWidgets();
+    enhanceSharedFooterCarousels();
+  }
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", initialize, { once: true });
+  } else {
+    initialize();
+  }
+})();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 40c4a72..b0d1ad0 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.23
+ * Version: 0.3.24
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.23');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.24');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index 902679f..f7f8045 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.23';
+            : '0.3.24';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
new file mode 100644
index 0000000..02820c7
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
@@ -0,0 +1,161 @@
+<?php
+
+namespace CalorieApp\IdentityBridge;
+
+use WP_Error;
+use WP_REST_Response;
+
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+/**
+ * Public CAL feed for the CalorieApp page's separate market card.
+ *
+ * WordPress fetches and caches only the small public widget payload from a
+ * fixed endpoint. The browser uses the same-origin WordPress route.
+ */
+class MarketWidget {
+    private const REST_NAMESPACE = 'calorieapp/v1';
+    private const REST_ROUTE = '/xpmarket-widget';
+    private const TOKEN = 'Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
+    public const TOKEN_PAGE = 'https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
+    private const API_URL = 'https://api.xpmarket.com/api/currency/widget?token=Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
+    private const CACHE_KEY = 'calorieapp_xpmarket_widget_v1';
+    private const ERROR_CACHE_KEY = 'calorieapp_xpmarket_widget_error_v1';
+    private const CACHE_TTL_SECONDS = 5 * MINUTE_IN_SECONDS;
+
+    public function register_hooks(): void {
+        add_action('rest_api_init', [$this, 'register_route']);
+        add_action('wp_enqueue_scripts', [$this, 'add_browser_config'], 20);
+    }
+
+    public function register_route(): void {
+        register_rest_route(
+            self::REST_NAMESPACE,
+            self::REST_ROUTE,
+            [
+                'methods' => 'GET',
+                'callback' => [$this, 'get_widget'],
+                'permission_callback' => '__return_true',
+            ]
+        );
+    }
+
+    public function add_browser_config(): void {
+        if (!wp_script_is('calorieapp-identity-bridge-page-ending', 'registered')) {
+            return;
+        }
+
+        wp_localize_script(
+            'calorieapp-identity-bridge-page-ending',
+            'calorieappPageEnding',
+            [
+                'xpMarketWidgetUrl' => rest_url(self::REST_NAMESPACE . self::REST_ROUTE),
+                'xpMarketTokenUrl' => self::TOKEN_PAGE,
+            ]
+        );
+    }
+
+    /**
+     * @return WP_REST_Response|WP_Error
+     */
+    public function get_widget() {
+        $cached = get_transient(self::CACHE_KEY);
+        if (is_array($cached)) {
+            return $this->response($cached);
+        }
+
+        if (get_transient(self::ERROR_CACHE_KEY)) {
+            return $this->unavailable();
+        }
+
+        $upstream = wp_safe_remote_get(
+            self::API_URL,
+            [
+                'headers' => ['Accept' => 'application/json'],
+                'redirection' => 0,
+                'limit_response_size' => 16384,
+                'timeout' => 8,
+                'user-agent' => 'CalorieToken WordPress XPMarket widget/1.0',
+            ]
+        );
+
+        if (is_wp_error($upstream) || (int) wp_remote_retrieve_response_code($upstream) !== 200) {
+            set_transient(self::ERROR_CACHE_KEY, true, MINUTE_IN_SECONDS);
+            return $this->unavailable();
+        }
+
+        $payload = json_decode((string) wp_remote_retrieve_body($upstream), true);
+        $data = self::sanitize_payload($payload);
+        if ($data === null) {
+            set_transient(self::ERROR_CACHE_KEY, true, MINUTE_IN_SECONDS);
+            return $this->unavailable();
+        }
+
+        set_transient(self::CACHE_KEY, $data, self::CACHE_TTL_SECONDS);
+
+        return $this->response($data);
+    }
+
+    public static function sanitize_payload($payload): ?array {
+        if (
+            !is_array($payload)
+            || empty($payload['success'])
+            || !isset($payload['data'])
+            || !is_array($payload['data'])
+        ) {
+            return null;
+        }
+
+        $source = $payload['data'];
+        foreach (['code', 'issuer', 'title', 'logo'] as $key) {
+            if (!isset($source[$key]) || !is_string($source[$key]) || trim($source[$key]) === '') {
+                return null;
+            }
+        }
+
+        if (
+            $source['code'] !== 'Calorie'
+            || $source['issuer'] !== 'rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY'
+            || strpos($source['logo'], 'https://xpcdn.xpmarket.com/') !== 0
+        ) {
+            return null;
+        }
+
+        foreach (['price', 'priceUsd', 'marketcap', 'holders', 'rank'] as $key) {
+            if (!isset($source[$key]) || !is_numeric($source[$key]) || !is_finite((float) $source[$key]) || (float) $source[$key] < 0) {
+                return null;
+            }
+        }
+
+        return [
+            'source' => 'XPMarket',
+            'token' => self::TOKEN,
+            'token_url' => self::TOKEN_PAGE,
+            'code' => sanitize_text_field($source['code']),
+            'title' => sanitize_text_field($source['title']),
+            'issuer' => sanitize_text_field($source['issuer']),
+            'logo' => esc_url_raw($source['logo']),
+            'price_xrp' => (float) $source['price'],
+            'price_usd' => (float) $source['priceUsd'],
+            'market_cap_usd' => (float) $source['marketcap'],
+            'holders' => (int) $source['holders'],
+            'rank' => (int) $source['rank'],
+        ];
+    }
+
+    private function unavailable(): WP_Error {
+        return new WP_Error(
+            'calorieapp_xpmarket_unavailable',
+            __('XPMarket price data is temporarily unavailable.', 'calorieapp-identity-bridge'),
+            ['status' => 502]
+        );
+    }
+
+    private function response(array $data): WP_REST_Response {
+        $response = new WP_REST_Response(['success' => true, 'data' => $data], 200);
+        $response->header('Cache-Control', 'public, max-age=' . self::CACHE_TTL_SECONDS);
+        return $response;
+    }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
new file mode 100644
index 0000000..d39c74a
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
@@ -0,0 +1,116 @@
+<?php
+
+namespace CalorieApp\IdentityBridge;
+
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+/**
+ * Restore only the CalorieApp WordPress page ending.
+ * Keep this presentation separate from all sign-in and session controllers.
+ */
+class PageEnding {
+    private bool $rendered = false;
+
+    public function register_hooks(): void {
+        add_action('wp_enqueue_scripts', [$this, 'enqueue_assets']);
+        add_action('wp_footer', [$this, 'render'], 5);
+    }
+
+    private function is_app_page(): bool {
+        return !is_admin() && !is_feed() && !is_embed() && is_page('calorieapp');
+    }
+
+    public function enqueue_assets(): void {
+        if (!$this->is_app_page()) {
+            return;
+        }
+
+        $url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE) . 'assets/';
+        $version = CALORIEAPP_IDENTITY_BRIDGE_VERSION;
+        wp_enqueue_style('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.css', [], $version);
+        wp_enqueue_script('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.js', [], $version, true);
+    }
+
+    public function render(): void {
+        if ($this->rendered || !$this->is_app_page()) {
+            return;
+        }
+        $this->rendered = true;
+        $copyright_year = wp_date('Y');
+        $social_links = [
+            ['label' => 'Telegram', 'url' => 'https://t.me/+7YxaKdQYWNA0NDA0', 'icon' => 'telegram.svg'],
+            ['label' => 'GitHub', 'url' => 'https://github.com/CalorieToken', 'icon' => 'github-square.svg'],
+            ['label' => 'X', 'url' => 'https://twitter.com/CalorieToken', 'icon' => 'twitter.svg'],
+            ['label' => 'Facebook', 'url' => 'https://www.facebook.com/CalorieToken-100422882407878', 'icon' => 'facebook.svg'],
+            ['label' => 'YouTube', 'url' => 'https://www.youtube.com/channel/UCV_87rxST-cQOVu4W8nFZkA', 'icon' => 'youtube.svg'],
+            ['label' => 'LinkedIn', 'url' => 'https://www.linkedin.com/company/calorie-token/', 'icon' => 'linkedin.svg'],
+            ['label' => 'Instagram', 'url' => 'https://www.instagram.com/calorietoken/', 'icon' => 'instagram-square.svg'],
+        ];
+        ?>
+        <div class="calorieapp-shared-page-ending" data-calorieapp-shared-page-ending>
+            <aside class="calorieapp-page-market" aria-label="<?php echo esc_attr__('Calorie Token on XPMarket', 'calorieapp-identity-bridge'); ?>">
+                <div class="calorieapp-xpmarket-widget" data-calorieapp-xpmarket-widget>
+                    <a class="calorieapp-xpmarket-link" href="<?php echo esc_url(MarketWidget::TOKEN_PAGE); ?>" rel="noopener noreferrer">
+                        <?php echo esc_html__('View CAL on XPMarket', 'calorieapp-identity-bridge'); ?>
+                    </a>
+                </div>
+            </aside>
+            <footer class="calorieapp-shared-footer">
+                <nav
+                    class="calorieapp-shared-socials"
+                    aria-label="<?php echo esc_attr__('CalorieToken social channels', 'calorieapp-identity-bridge'); ?>"
+                    data-calorieapp-social-carousel
+                >
+                    <button
+                        type="button"
+                        class="calorieapp-shared-social-arrow"
+                        data-calorieapp-carousel-direction="-1"
+                        aria-label="<?php echo esc_attr__('Previous social channel', 'calorieapp-identity-bridge'); ?>"
+                    >&#8249;</button>
+                    <div class="calorieapp-shared-social-window">
+                        <div class="calorieapp-shared-social-track">
+                            <?php foreach ($social_links as $social) : ?>
+                                <a
+                                    class="calorieapp-shared-social"
+                                    href="<?php echo esc_url($social['url']); ?>"
+                                    rel="noopener"
+                                    aria-label="<?php echo esc_attr($social['label']); ?>"
+                                    title="<?php echo esc_attr($social['label']); ?>"
+                                >
+                                    <svg class="calorieapp-shared-social-icon" aria-hidden="true" focusable="false">
+                                        <use href="<?php echo esc_url(content_url('/plugins/brizy/public/editor-build/prod/editor/icons/fa/' . $social['icon'] . '#fa_icon')); ?>"></use>
+                                    </svg>
+                                </a>
+                            <?php endforeach; ?>
+                        </div>
+                    </div>
+                    <button
+                        type="button"
+                        class="calorieapp-shared-social-arrow"
+                        data-calorieapp-carousel-direction="1"
+                        aria-label="<?php echo esc_attr__('Next social channel', 'calorieapp-identity-bridge'); ?>"
+                    >&#8250;</button>
+                </nav>
+                <div class="calorieapp-shared-legal">
+                    <p><?php echo esc_html__('Calorie aims to be the world’s food token', 'calorieapp-identity-bridge'); ?></p>
+                    <p><?php echo esc_html__('Operator: ICTHendrikse · KVK 73774693', 'calorieapp-identity-bridge'); ?></p>
+                    <p>
+                        <?php
+                        printf(
+                            esc_html__('© %s ICTHendrikse (owned content only) · CalorieToken® trade mark: Pieter Hendrikse', 'calorieapp-identity-bridge'),
+                            esc_html($copyright_year)
+                        );
+                        ?>
+                    </p>
+                    <p class="calorieapp-shared-legal-links">
+                        <a href="<?php echo esc_url(home_url('/index.php/privacy-policy/')); ?>"><?php echo esc_html__('Privacy Policy', 'calorieapp-identity-bridge'); ?></a>
+                        <a href="<?php echo esc_url(home_url('/index.php/terms-conditions/')); ?>"><?php echo esc_html__('Terms & Conditions', 'calorieapp-identity-bridge'); ?></a>
+                    </p>
+                </div>
+            </footer>
+        </div>
+        <?php
+    }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
index 2b6fb9c..00efab9 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
@@ -13,6 +13,8 @@
 require_once __DIR__ . '/class-calorieapp-identity-bridge-integrated-login.php';
 require_once __DIR__ . '/class-calorieapp-identity-bridge-admin.php';
 require_once __DIR__ . '/class-calorieapp-identity-bridge-legal-footer-compatibility.php';
+require_once __DIR__ . '/class-calorieapp-identity-bridge-market-widget.php';
+require_once __DIR__ . '/class-calorieapp-identity-bridge-page-ending.php';
 
 class Plugin {
     public const OPTION_KEY = 'calorieapp_identity_bridge_options';
@@ -31,6 +33,10 @@ class Plugin {
 
     private LegalFooterCompatibility $legal_footer_compatibility;
 
+    private MarketWidget $market_widget;
+
+    private PageEnding $page_ending;
+
     public static function instance(): Plugin {
         if (self::$instance === null) {
             self::$instance = new self();
@@ -46,6 +52,8 @@ private function __construct() {
         $this->integrated_login = new IntegratedLogin($this->rest_api);
         $this->admin = new Admin();
         $this->legal_footer_compatibility = new LegalFooterCompatibility();
+        $this->market_widget = new MarketWidget();
+        $this->page_ending = new PageEnding();
 
         register_activation_hook(CALORIEAPP_IDENTITY_BRIDGE_FILE, [$this, 'activate']);
 
@@ -59,6 +67,8 @@ public function init(): void {
         $this->integrated_login->register_hooks();
         $this->admin->register_hooks();
         $this->legal_footer_compatibility->register_hooks();
+        $this->market_widget->register_hooks();
+        $this->page_ending->register_hooks();
     }
 
     public function activate(): void {

From ed44c52cdcee40df6b4ee7f7f30e84132b04d070 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Mon, 7 Sep 2026 13:56:49 +0200
Subject: [PATCH 02/12] Fix site-wide CAL widgets and conditional floating
 shortcuts in bridge 0.3.25

---
 docs/STEP_3_SESSION_NAVIGATION.md             |  36 ++-
 tools/tests/wordpress_page_ending.test.mjs    |  76 +++++-
 tools/tests/wordpress_page_ending.test.php    |  22 +-
 .../tests/wordpress_site_navigation.test.mjs  | 199 +++++++++++-----
 .../calorieapp-identity-bridge/README.md      |  16 ++
 .../assets/calorieapp-page-ending.css         |  75 +++++-
 .../assets/calorieapp-page-ending.js          |  48 +++-
 .../assets/calorieapp-site-navigation.js      | 218 ++++++++++++------
 .../calorieapp-identity-bridge.php            |   4 +-
 ...ieapp-identity-bridge-integrated-login.php |   2 +-
 ...calorieapp-identity-bridge-page-ending.php |  33 ++-
 11 files changed, 566 insertions(+), 163 deletions(-)

diff --git a/docs/STEP_3_SESSION_NAVIGATION.md b/docs/STEP_3_SESSION_NAVIGATION.md
index fdc209f..81e329a 100644
--- a/docs/STEP_3_SESSION_NAVIGATION.md
+++ b/docs/STEP_3_SESSION_NAVIGATION.md
@@ -12,7 +12,28 @@
 - Prepare the app's matching label and Open Food Facts contribution footer in
   a separate main-based PR: https://github.com/CalorieToken/CalorieApp/pull/129.
 
-## Maintenance boundary
+## Consistency follow-up (0.3.25)
+
+The original 0.3.22 navigation only modified controls already present at its
+first initialization. Version 0.3.25 also detects late Brizy controls, handles
+responsive visibility and provides hidden fallback slots that appear only when
+a corresponding visible control is missing. Home is omitted on Home; App is
+omitted on CalorieApp. Duplicate current/legacy app links are suppressed.
+
+The new slots use the recorded Home stylesheet geometry: 30% fixed wrappers,
+right 81px and bottom 12/66px on desktop, 48px icons; on mobile, 32px icons and
+the original -8/25px slots. A viewport guard keeps the new icons inside narrow
+screens. Back to top uses the existing project glyph and 120/60px slot. Existing
+visible controls retain their Brizy wrappers, placement and icon size. The
+provided fallback bar is inert and hidden until the site controller has verified
+same-origin navigation settings. Scroll-to-top respects reduced motion.
+
+The CAL card renderer is available on all public pages. It replaces the old
+market node, so late legacy callbacks cannot overwrite the new widget, and
+shares one request across cards. The new app footer remains page-specific.
+Account, login, logout and header-layout controllers are unchanged from 0.3.24.
+
+## Original 0.3.22 maintenance boundary
 
 Plugin 0.3.22 starts at installed maintenance merge
 `6f754c837cf80b05422d347b5a43c512aa3c9dea` (0.3.21). This branch must not be merged
@@ -21,12 +42,11 @@ startup URL and session validation are preserved. The site-session script moves
 the same button/status nodes after the embed controller has captured them; it
 does not register another logout handler for the embedded page.
 
-The navigation script targets existing Brizy icon links in fixed containers.
-It does not rewrite inline exchange content, the header logo, other floating
-destinations, or create a new floating bar where one is absent. The live Home
+The original 0.3.22 navigation script targeted existing Brizy icon links in fixed containers.
+It did not create a floating bar where absent. The controls did not rewrite
+inline exchange content, the header logo or other floating destinations. Home
 and FAQ pages have the older exchange shortcut; the current CalorieApp page
-has no such Brizy shortcuts. Its current-page rule is ready for any matching
-shortcuts subsequently added to that template.
+had no such Brizy shortcuts; the 0.3.25 follow-up above fills that gap.
 
 ## Logo source
 
@@ -56,11 +76,11 @@ Run:
 node --test tools/tests/calorieapp_embed_readiness.test.mjs tools/tests/wordpress_site_session.test.mjs tools/tests/wordpress_site_layout.test.mjs tools/tests/wordpress_site_navigation.test.mjs
 php tools/tests/wordpress_site_session_markup.test.php
 python -m unittest tools.tests.test_build_wordpress_plugin_release
-python tools/build_wordpress_plugin_release.py --expected-version 0.3.22
+python tools/build_wordpress_plugin_release.py --expected-version 0.3.25
 ```
 
 CI also lints plugin PHP. The original vector extraction is rendered and
 visually inspected locally. No candidate is installed by this PR. Native
 desktop/mobile rendering of the candidate follows the user's installation
 approval; synthetic DOM checks are not a live browser rendering claim.
-The previously observed small-desktop card clipping remains a separate followup.
+The small-desktop card correction already installed in 0.3.23 remains unchanged.
diff --git a/tools/tests/wordpress_page_ending.test.mjs b/tools/tests/wordpress_page_ending.test.mjs
index 36f0c74..883359f 100644
--- a/tools/tests/wordpress_page_ending.test.mjs
+++ b/tools/tests/wordpress_page_ending.test.mjs
@@ -8,7 +8,8 @@ const tokenUrl = 'https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApb
 function element() {
   return {
     attrs: {}, textContent: '', hidden: false, children: new Map(), listeners: {},
-    classList: { add() {} },
+    classList: { values: new Set(), add(name) { this.values.add(name); }, contains(name) { return this.values.has(name); } },
+    closest(selector) { return this.ancestors?.[selector] || null; },
     setAttribute(name, value) { this.attrs[name] = String(value); },
     getAttribute(name) { return this.attrs[name] ?? null; },
     querySelector(selector) { return this.children.get(selector) ?? null; },
@@ -29,8 +30,26 @@ const good = () => ({ success: true, data: {
   price_usd: 0.00000007, price_xrp: 0.00000005, market_cap_usd: 4000, rank: 300, holders: 14000,
 } });
 async function settle() { for (let i = 0; i < 10; i++) await Promise.resolve(); }
-function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true } = {}) {
+function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true, legacy = false, mixedHost = false } = {}) {
   const widget = element();
+  const widgets = [widget];
+  const oldWidget = widget;
+  const wrapper = element();
+  const host = element();
+  host.ancestors = { '.brz-wrapper': wrapper };
+  if (mixedHost) host.children.set('.xl-card, [data-calorieapp-embed]', {});
+  function attachLegacy(node) {
+    node.nodeType = 1;
+    node.classList.add('livecoinwatch-widget-1');
+    node.ancestors = { '.brz-wp-shortcode': host };
+    node.matches = () => true;
+    node.replaceWith = function (replacement) {
+      replacement.ancestors = this.ancestors;
+      widgets[widgets.indexOf(this)] = replacement;
+      this.detached = true;
+    };
+  }
+  if (legacy) attachLegacy(widget);
   const track = element();
   track.clientWidth = 400;
   track.children.set('a', { getBoundingClientRect: () => ({ width: 200 }) });
@@ -44,13 +63,16 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
   carousel.querySelectorAll = () => buttons;
   const requests = [];
   const timers = new Map();
-  let ready;
+  let ready, mutation;
+  const events = new Map(), frames = [];
   const document = {
+    body: {},
+    createElement() { return element(); },
     readyState: 'loading',
     addEventListener(name, fn) { if (name === 'DOMContentLoaded') ready = fn; },
     querySelectorAll(selector) {
       if (empty) return [];
-      return selector.includes('xpmarket-widget') ? [widget] : [carousel];
+      return selector.includes('xpmarket-widget') ? widgets : [carousel];
     },
   };
   const window = {
@@ -65,10 +87,24 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
     setTimeout(fn) { timers.set(1, fn); return 1; },
     clearTimeout(id) { timers.delete(id); },
     matchMedia() { return { matches: reduced }; },
+    addEventListener(name, fn) { events.set(name, fn); },
+    requestAnimationFrame(fn) { frames.push(fn); },
+    MutationObserver: class {
+      constructor(fn) { mutation = fn; }
+      observe() {}
+    },
   };
   vm.runInNewContext(source, { window, document, URL, Intl });
   ready();
-  return { widget, buttons, track, requests, timers, ready };
+  return { get widget() { return widgets[0]; }, widgets, oldWidget, host, wrapper, buttons, track, requests, timers, ready,
+    event(name) { events.get(name)?.(); },
+    addLate() {
+      const late = element(); attachLegacy(late); widgets.push(late);
+      mutation([{ addedNodes: [late] }]);
+      while (frames.length) frames.shift()();
+      return late;
+    },
+  };
 }
 
 test('public CAL data is shown beside an always-available XPMarket destination', async () => {
@@ -113,7 +149,35 @@ test('social arrows move one item and respect reduced motion', () => {
   assert.equal(h.track.moves[1].left, 200);
   assert.equal(h.track.moves[1].behavior, 'auto');
 });
-test('pages without the CalorieApp ending do not request market data', () => {
+test('pages without market cards do not request market data', () => {
   const h = run({ empty: true });
   assert.equal(h.requests.length, 0);
 });
+
+test('legacy website cards use the same CAL renderer and keep their original slot', async () => {
+  const h = run({ legacy: true }); await settle();
+  assert.equal(h.oldWidget.detached, true);
+  assert.equal(h.widget.getAttribute('data-state'), 'ready');
+  assert.equal(h.widget.querySelector('.calorieapp-xpmarket-price').textContent, '$0.00000007');
+  assert.equal(h.host.classList.contains('calorieapp-xpmarket-host'), true);
+  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-brizy-wrapper'), true);
+  h.oldWidget.innerHTML = '<span class="legacy">Late old provider callback</span>';
+  assert.equal(h.widget.querySelector('.legacy'), null, 'An old provider callback cannot overwrite the replacement.');
+});
+test('a mixed market/account shortcode keeps its account layout', async () => {
+  const h = run({ legacy: true, mixedHost: true }); await settle();
+  assert.equal(h.widget.getAttribute('data-state'), 'ready');
+  assert.equal(h.host.classList.contains('calorieapp-xpmarket-host'), false);
+  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-brizy-wrapper'), false);
+});
+test('late-loaded market cards share the first request without duplicating existing cards', async () => {
+  const h = run(); await settle();
+  const first = h.widget;
+  const oldLate = h.addLate(); await settle();
+  assert.equal(oldLate.detached, true);
+  assert.equal(h.widgets.length, 2);
+  assert.equal(h.widgets[0], first);
+  assert.equal(h.widgets[1].getAttribute('data-state'), 'ready');
+  h.event('load'); h.event('pageshow'); await settle();
+  assert.equal(h.requests.length, 1);
+});
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index 4297ef6..22c3f97 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -78,12 +78,30 @@ function render($object): string { ob_start(); $object->render(); return (string
     $styles = $scripts = [];
     $other = new PageEnding();
     $other->enqueue_assets();
-    check(render($other) === '' && !$styles && !$scripts, 'Existing footers on other pages remain untouched.');
+    check(render($other) === '', 'Existing footers on other pages remain untouched.');
+    check(count($styles) === 1 && count($scripts) === 1, 'Shared market styles and renderer must load on other public pages too.');
 }
+$shortcuts = new PageEnding();
+ob_start();
+$shortcuts->render_shortcuts();
+$shortcut_html = (string) ob_get_clean();
+check(substr_count($shortcut_html, 'data-calorieapp-fallback-shortcuts') === 1, 'Public pages need a fallback navigation surface.');
+check(str_contains($shortcut_html, 'assets/calorieapp-logo.svg'), 'The fallback uses the original transparent vector mark.');
+check(substr_count($shortcut_html, 'data-calorieapp-shortcut=') === 3, 'Provide Home, App and Top slots for conditional display.');
+ob_start();
+$shortcuts->render_shortcuts();
+check(ob_get_clean() === '', 'Repeated hooks cannot duplicate fallback navigation.');
 $page = 'calorieapp';
 foreach (['admin', 'feed', 'embed'] as $flag) {
     $GLOBALS[$flag] = true;
-    check(render(new PageEnding()) === '', 'Do not insert public page furniture into ' . $flag . ' responses.');
+    $special = new PageEnding();
+    check(render($special) === '', 'Do not insert public page furniture into ' . $flag . ' responses.');
+    ob_start();
+    $special->render_shortcuts();
+    check(ob_get_clean() === '', 'No fallback navigation in ' . $flag . ' responses.');
+    $styles = $scripts = [];
+    $special->enqueue_assets();
+    check(!$styles && !$scripts, 'No market assets in ' . $flag . ' responses.');
     $GLOBALS[$flag] = false;
 }
 
diff --git a/tools/tests/wordpress_site_navigation.test.mjs b/tools/tests/wordpress_site_navigation.test.mjs
index 9208d75..3e76fa2 100644
--- a/tools/tests/wordpress_site_navigation.test.mjs
+++ b/tools/tests/wordpress_site_navigation.test.mjs
@@ -4,118 +4,189 @@ import test from "node:test";
 import vm from "node:vm";
 
 const source = await readFile(new URL(
-  "../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js",
-  import.meta.url
+  "../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js", import.meta.url
 ), "utf8");
 const site = "https://calorietoken.net";
-const app = `${site}/index.php/calorieapp/`;
-const logo = `${site}/wp-content/plugins/calorieapp-identity-bridge/assets/calorieapp-logo.svg`;
+const app = site + "/index.php/calorieapp/";
+const logo = site + "/wp-content/plugins/calorieapp-identity-bridge/assets/calorieapp-logo.svg";
 
-function harness({ pathname = "/index.php/faq/", embedded = false, isHome = "0", appLogo = logo } = {}) {
-  const config = { dataset: { homePage: `${site}/`, appPage: app, appLogo, isHome } };
+function style() {
+  const values = new Map();
+  return {
+    setProperty(name, value, priority = "") { values.set(name, { value, priority }); this[name] = value; },
+    getPropertyValue(name) { return values.get(name)?.value || ""; },
+    getPropertyPriority(name) { return values.get(name)?.priority || ""; },
+    removeProperty(name) { values.delete(name); delete this[name]; },
+  };
+}
+function harness({ pathname = "/index.php/faq/", embedded = false, isHome = "0", appLogo = logo, missing = false, delayedPosition = false } = {}) {
+  const config = { dataset: { homePage: site + "/", appPage: app, appLogo, isHome } };
   const body = {};
-  const floatingWrapper = { parentElement: body, position: "fixed", hidden: false };
+  const floatingWrapper = { parentElement: body, position: delayedPosition ? "relative" : "fixed", hidden: false };
   const inlineWrapper = { parentElement: body, position: "relative" };
-  function link(href, floating = true) {
-    const container = {
-      parentElement: floating ? floatingWrapper : inlineWrapper,
-      position: "static", hidden: false,
-      style: { setProperty(name, value) { this[name] = value; } },
-    };
+  const links = [];
+  function link(href, floating = true, top = false) {
+    const container = { parentElement: floating ? floatingWrapper : inlineWrapper, position: "static", hidden: false, style: style() };
     const item = {
-      href, attributes: {},
+      attributes: {}, title: "", rawHref: href,
+      get href() { return new URL(this.rawHref, site + pathname).href; },
+      set href(value) { this.rawHref = value; },
       closest() { return container; },
       setAttribute(name, value) { this.attributes[name] = value; },
-      querySelector() { return this.icon; },
-      icon: { replaceWith(image) { item.image = image; item.icon = image; } },
+      getAttribute(name) { return name === "href" ? this.rawHref : this.attributes[name] ?? null; },
+      querySelector(selector) {
+        if (selector === "use") return top ? { getAttribute() { return "/wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/square-upload.svg#nc_icon"; } } : null;
+        return selector === ".brz-icon-svg" ? this.icon : null;
+      },
+      icon: { tagName: "svg", getAttribute() { return null; }, replaceWith(image) { item.image = image; item.icon = image; } },
     };
-    return { item, container };
+    const pair = { item, container };
+    links.push(pair);
+    return pair;
   }
-  const home = link(`${site}/`);
-  const legacy = link(`${site}/index.php/integrated-exchange/`);
+  const home = link(site + "/");
+  const legacy = link(site + "/index.php/integrated-exchange/");
   const currentApp = link(app);
-  const inline = link(`${site}/index.php/integrated-exchange/`, false);
-  const inlineHome = link(`${site}/`, false);
-  const other = link(`${site}/index.php/contact/`);
+  const top = link("#", true, true);
+  const inline = link(site + "/index.php/integrated-exchange/", false);
+  const inlineHome = link(site + "/", false);
+  const other = link(site + "/index.php/contact/");
   const foreign = link("https://example.com/index.php/calorieapp/");
-  const fragment = link(`${site}/#top`);
-  const links = [home, legacy, currentApp, inline, inlineHome, other, foreign, fragment];
+  const fragment = link(site + "/#top");
+  const slots = Object.fromEntries(["home", "app", "top"].map(role => [role, { hidden: true, getAttribute() { return role; } }]));
+  const topButton = { addEventListener(name, fn) { this[name] = fn; } };
+  const fallback = {
+    hidden: true, querySelectorAll() { return Object.values(slots); },
+    querySelector() { return topButton; },
+  };
   let created = 0;
+  const events = new Map(), frames = [];
+  let mutation;
+  let lastObservation;
   const document = {
     body, readyState: "complete",
     querySelector(selector) {
       if (selector === "[data-calorieapp-site-integration]") return config;
       if (selector === "[data-calorieapp-embed]") return embedded ? {} : null;
+      if (selector === "[data-calorieapp-fallback-shortcuts]") return fallback;
       return null;
     },
-    querySelectorAll(selector) {
-      assert.equal(selector, ".brz-icon__container a[href]");
-      return links.map(link => link.item);
-    },
+    querySelectorAll() { return (missing ? links.filter(x => x.late) : links).map(x => x.item); },
     createElement(tag) {
-      assert.equal(tag, "img");
-      created++;
-      return { style: {}, attributes: {}, setAttribute(name, value) { this.attributes[name] = value; } };
+      assert.equal(tag, "img"); created++;
+      return { tagName: "IMG", style: {}, attributes: {},
+        setAttribute(name, value) { this.attributes[name] = value; },
+        getAttribute(name) { return name === "src" ? this.src : this.attributes[name] ?? null; },
+      };
     },
   };
-  const context = { document, URL, window: {
+  const window = {
     location: { href: site + pathname },
-    getComputedStyle(node) { return { position: node.position }; },
-  } };
-  const run = () => vm.runInNewContext(source, context);
+    getComputedStyle(node) { return { position: node.position, display: node.themeHidden ? "none" : node.style?.display || "block" }; },
+    requestAnimationFrame(fn) { frames.push(fn); },
+    addEventListener(name, fn) { events.set(name, fn); },
+    matchMedia() { return { matches: true }; },
+    scrollTo(value) { this.scrolled = value; },
+    MutationObserver: class {
+      constructor(fn) { mutation = fn; }
+      disconnect() {}
+      observe(target, options) { assert.equal(target, body); lastObservation = options; }
+    },
+  };
+  const run = () => vm.runInNewContext(source, { document, URL, window });
+  const flush = () => { while (frames.length) frames.shift()(); };
   run();
-  return { home, legacy, currentApp, inline, inlineHome, other, foreign, fragment, floatingWrapper, run, count: () => created };
+  return { home, legacy, currentApp, top, inline, inlineHome, other, foreign, fragment, floatingWrapper, fallback, slots, topButton, window,
+    run, count: () => created, flush, event: name => { events.get(name)?.(); flush(); },
+    mutate: () => { mutation?.([]); flush(); }, lastObservation: () => lastObservation,
+    addLate(href) { const value = link(href); value.late = true; return value; },
+  };
 }
 
-test("Home hides its own floating shortcut and retains the original transparent app mark", () => {
+test("Home omits Home and uses one original transparent app logo", () => {
   for (const pathname of ["/", "/?campaign=test", "/index.php/"]) {
     const h = harness({ pathname });
     assert.equal(h.home.container.hidden, true);
-    assert.equal(h.home.container.style.display, "none");
-    assert.equal(h.floatingWrapper.hidden, false, "a shared wrapper must not hide its other shortcuts");
+    assert.equal(h.floatingWrapper.hidden, false);
     assert.equal(h.legacy.item.href, app);
     assert.equal(h.legacy.item.image.src, logo);
     assert.equal(h.legacy.item.image.style.width, "1em");
     assert.equal(h.legacy.item.image.style.height, "1em");
     assert.equal(h.legacy.item.image.attributes["aria-hidden"], "true");
-    assert.equal(h.legacy.item.attributes["aria-label"], "Open CalorieApp");
+    assert.equal(h.currentApp.container.hidden, true, "duplicate destinations are not shown");
+    assert.equal(h.slots.home.hidden, true);
+    assert.equal(h.slots.app.hidden, true);
   }
   assert.equal(harness({ pathname: "/welcome/", isHome: "1" }).home.container.hidden, true);
 });
-
-test("CalorieApp hides both its canonical and former exchange shortcuts, retaining Home", () => {
-  for (const options of [
-    { pathname: "/index.php/calorieapp/" },
-    { pathname: "/calorieapp?locale=nl" },
-    { pathname: "/app-preview/", embedded: true },
-  ]) {
+test("CalorieApp omits canonical and legacy self-links while retaining Home", () => {
+  for (const options of [{ pathname: "/index.php/calorieapp/" }, { pathname: "/calorieapp?locale=nl" }, { pathname: "/app-preview/", embedded: true }]) {
     const h = harness(options);
     assert.equal(h.legacy.container.hidden, true);
     assert.equal(h.currentApp.container.hidden, true);
     assert.equal(h.home.container.hidden, false);
-    assert.equal(h.home.item.attributes["aria-label"], "Go to Home");
+    assert.equal(h.slots.app.hidden, true);
   }
 });
-
-test("FAQ retains both shortcuts; inline content, other icons and fragment links remain intact", () => {
-  const h = harness();
-  assert.equal(h.home.container.hidden, false);
-  assert.equal(h.currentApp.container.hidden, false);
-  assert.equal(h.currentApp.item.image.src, logo);
-  assert.match(h.inline.item.href, /integrated-exchange/);
-  for (const link of [h.inline, h.inlineHome, h.other, h.foreign, h.fragment]) {
-    assert.equal(link.container.hidden, false);
-    assert.equal(link.item.image, undefined);
-    assert.deepEqual(link.item.attributes, {});
+test("FAQ, Tokenomics and other pages share the same destinations without rewriting content links", () => {
+  for (const page of ["faq", "tokenomics-update", "whitepaper", "trustline", "richlist", "blog", "contact", "donate", "merchnfts"]) {
+    const h = harness({ pathname: "/index.php/" + page + "/" });
+    assert.equal(h.home.container.hidden, false);
+    assert.equal(h.legacy.item.href, app);
+    assert.equal(h.legacy.item.image.src, logo);
+    assert.equal(h.currentApp.container.hidden, true);
+    for (const link of [h.inline, h.inlineHome, h.other, h.foreign, h.fragment]) {
+      assert.equal(link.container.hidden, false);
+      assert.equal(link.item.image, undefined);
+      assert.deepEqual(link.item.attributes, {});
+    }
+    const count = h.count(); h.run(); h.event("resize");
+    assert.equal(h.count(), count);
   }
-  const count = h.count();
-  h.run();
-  assert.equal(h.count(), count, "reinitialization must not duplicate assets");
 });
-
-test("foreign asset configuration cannot rewrite website navigation", () => {
+test("missing bars are completed with the appropriate shortcuts on Home, CalorieApp and FAQ", () => {
+  for (const [pathname, expected] of [["/", ["app", "top"]], ["/index.php/calorieapp/", ["home", "top"]], ["/index.php/faq/", ["home", "app", "top"]]]) {
+    const h = harness({ pathname, missing: true });
+    assert.deepEqual(Object.keys(h.slots).filter(role => !h.slots[role].hidden), expected);
+    let prevented = false;
+    h.topButton.click({ preventDefault() { prevented = true; } });
+    assert.equal(prevented, true);
+    assert.equal(h.window.scrolled.top, 0);
+    assert.equal(h.window.scrolled.behavior, "auto");
+  }
+});
+test("late Brizy links replace fallbacks and are upgraded after styles settle", () => {
+  const h = harness({ missing: true });
+  const late = h.addLate(site + "/index.php/integrated-exchange/");
+  h.mutate();
+  assert.equal(late.item.href, app);
+  assert.equal(late.item.image.src, logo);
+  assert.equal(h.slots.app.hidden, true);
+  const delayed = harness({ delayedPosition: true });
+  assert.match(delayed.legacy.item.href, /integrated-exchange/);
+  delayed.floatingWrapper.position = "fixed";
+  delayed.event("load");
+  assert.equal(delayed.legacy.item.href, app);
+  assert.equal(delayed.slots.app.hidden, true);
+});
+test("responsive visibility is reevaluated without losing the theme's original visibility", () => {
+  const h = harness();
+  h.legacy.container.themeHidden = true;
+  h.event("resize");
+  assert.equal(h.currentApp.container.hidden, false, "the other breakpoint's shortcut takes over");
+  assert.equal(h.slots.app.hidden, true);
+  h.currentApp.container.themeHidden = true;
+  h.event("pageshow");
+  assert.equal(h.slots.app.hidden, false, "a missing visible control gets a fallback");
+  h.legacy.container.themeHidden = false;
+  h.mutate();
+  assert.equal(h.slots.app.hidden, true);
+  assert.deepEqual(Array.from(h.lastObservation().attributeFilter), ["class", "style"]);
+});
+test("foreign asset configuration cannot rewrite navigation or expose fallbacks", () => {
   const h = harness({ pathname: "/", appLogo: "https://untrusted.example/logo.svg" });
   assert.equal(h.count(), 0);
   assert.equal(h.home.container.hidden, false);
+  assert.equal(h.fallback.hidden, true);
   assert.match(h.legacy.item.href, /integrated-exchange/);
 });
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index ac3ee40..c634107 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,6 +41,22 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
+Version 0.3.25 applies the CAL market renderer to existing LiveCoinWatch slots
+throughout the public website, including late-loaded cards. The replacement
+stays in its existing position, shares the same cached CAL feed and releases
+obsolete market-shortcode height/width rules. Combined shortcodes containing
+an account card are excluded from that sizing correction.
+
+Floating navigation now rechecks after page load, restored pages, layout changes
+and dynamically inserted Brizy controls. It suppresses duplicate destinations,
+omits the current page and fills missing Home/CalorieApp/Top controls using the
+original transparent logo, original 48px desktop / 32px mobile icon sizing and
+original fixed slots. Existing visible Brizy controls take precedence. Inline
+content links and the installed account/header/authentication code are retained.
+The footer introduced in 0.3.24 is still rendered only on CalorieApp. This package
+does not publish the prepared FAQ, Home or Tokenomics content or the app's food-log
+and background changes; those are separate reviewed deliverables.
+
 Version 0.3.24 restores the missing WordPress footer and a CAL market card below
 CalorieApp, only on the `calorieapp` page. It reuses the existing footer colours,
 social destinations, and current operator/copyright copy; the privacy and terms
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
index 97a1c24..c7ad48e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
@@ -1,4 +1,4 @@
-/* CalorieApp page ending only; no account, header or iframe selectors. */
+/* Shared CAL card and missing shortcuts; footer markup stays app-only. */
 .calorieapp-shared-page-ending {
   box-sizing: border-box;
   width: 100%;
@@ -262,3 +262,76 @@
 @media (prefers-reduced-motion: reduce) {
   .calorieapp-shared-social-track { scroll-behavior: auto; }
 }
+
+/* Original Home shortcut geometry, captured from the existing Brizy stylesheet:
+   48px desktop icons, 32px mobile icons, original colours and fixed slots. */
+.calorieapp-page-tools[hidden],
+.calorieapp-page-tool-position[hidden] { display: none !important; }
+.calorieapp-page-tool-position {
+  position: fixed;
+  z-index: 11;
+  display: flex;
+  box-sizing: border-box;
+  width: 30%;
+  align-items: center;
+  justify-content: center;
+  right: 81px;
+  top: auto;
+  left: auto;
+  margin: 10px 0;
+  padding: 0;
+  pointer-events: none;
+}
+.calorieapp-page-tool-position-home { bottom: 12px; color: #505ba9; }
+.calorieapp-page-tool-position-app { bottom: 66px; color: #008d36; }
+.calorieapp-page-tool-position-top { bottom: 120px; color: #3dbfe8; }
+.calorieapp-page-tool {
+  display: block;
+  margin: 0;
+  padding: 0;
+  line-height: 1;
+  color: inherit !important;
+  background: transparent;
+  border: 0;
+  box-shadow: none;
+  pointer-events: auto;
+  text-decoration: none !important;
+}
+.calorieapp-page-tool-icon {
+  display: block;
+  box-sizing: border-box;
+  width: 48px;
+  height: 48px;
+  max-width: none;
+  object-fit: contain;
+  fill: currentColor;
+  background: transparent;
+  border: 0;
+  border-radius: 0;
+  padding: 0;
+  box-shadow: none;
+}
+.calorieapp-page-tool:focus-visible { outline: 3px solid #f9b233; outline-offset: 2px; }
+@media (min-width: 991px) {
+  .calorieapp-page-tool:hover { color: rgba(249, 178, 51, 0.8) !important; }
+}
+@media (max-width: 767px) {
+  .calorieapp-page-tool-position { right: max(-35px, calc(20px - 15vw)); }
+  .calorieapp-page-tool-position-home { bottom: -8px; }
+  .calorieapp-page-tool-position-app { bottom: 25px; }
+  .calorieapp-page-tool-position-top { bottom: 60px; }
+  .calorieapp-page-tool-icon { width: 32px; height: 32px; }
+}
+/* Release only obsolete market-shortcode sizing; account wrappers are excluded. */
+.calorieapp-xpmarket-brizy-wrapper,
+.calorieapp-xpmarket-host,
+.calorieapp-xpmarket-host > div {
+  box-sizing: border-box;
+  width: 100% !important;
+  max-width: 100% !important;
+  min-height: 0 !important;
+  height: auto !important;
+  margin: 0 !important;
+}
+.calorieapp-xpmarket-brizy-wrapper { justify-content: center !important; }
+.calorieapp-xpmarket-host > div { display: flex; justify-content: center; }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
index 78e9d81..9384edb 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
@@ -79,6 +79,15 @@
     widget.setAttribute("data-state", "ready");
   }
 
+  function normalizeMarketHost(widget) {
+    var host = widget.closest('.brz-wp-shortcode');
+    // A combined shortcode containing an account card must keep its own sizing.
+    if (!host || host.querySelector('.xl-card, [data-calorieapp-embed]')) return;
+    host.classList.add('calorieapp-xpmarket-host');
+    var wrapper = host.closest('.brz-wrapper');
+    if (wrapper) wrapper.classList.add('calorieapp-xpmarket-brizy-wrapper');
+  }
+
   function enhanceXpMarketPriceWidgets() {
     if (typeof document.querySelectorAll !== "function") {
       return;
@@ -89,9 +98,22 @@
     var tokenUrl =
       config.xpMarketTokenUrl ||
       "https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY";
-    var widgets = document.querySelectorAll(
-      "[data-calorieapp-shared-page-ending] [data-calorieapp-xpmarket-widget]"
-    );
+    var widgets = Array.from(document.querySelectorAll(
+      ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]"
+    )).filter(function (widget) {
+      return widget.getAttribute("data-calorieapp-xpmarket-widget") !== "1";
+    }).map(function (widget) {
+      if (widget.classList.contains("livecoinwatch-widget-1")) {
+        // Replace the node so an already-running legacy script cannot refill it.
+        var replacement = document.createElement("div");
+        if (widget.id) replacement.id = widget.id;
+        replacement.setAttribute("data-calorieapp-xpmarket-widget", "");
+        widget.replaceWith(replacement);
+        widget = replacement;
+      }
+      normalizeMarketHost(widget);
+      return widget;
+    });
     if (!widgets.length) {
       return;
     }
@@ -212,6 +234,26 @@
   function initialize() {
     enhanceXpMarketPriceWidgets();
     enhanceSharedFooterCarousels();
+    window.addEventListener("load", enhanceXpMarketPriceWidgets);
+    window.addEventListener("pageshow", enhanceXpMarketPriceWidgets);
+    if (window.MutationObserver) {
+      var scheduled = false;
+      var selector = ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]";
+      var observer = new window.MutationObserver(function (records) {
+        var addedWidget = records.some(function (record) {
+          return Array.from(record.addedNodes).some(function (node) {
+            return node.nodeType === 1 && (node.matches(selector) || node.querySelector(selector));
+          });
+        });
+        if (!addedWidget || scheduled) return;
+        scheduled = true;
+        window.requestAnimationFrame(function () {
+          scheduled = false;
+          enhanceXpMarketPriceWidgets();
+        });
+      });
+      observer.observe(document.body, { childList: true, subtree: true });
+    }
   }
   if (document.readyState === "loading") {
     document.addEventListener("DOMContentLoaded", initialize, { once: true });
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
index fb03bbb..0417f43 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
@@ -7,94 +7,162 @@
 
   function isFloating(container) {
     for (var node = container; node && node !== document.body; node = node.parentElement) {
-      if (window.getComputedStyle(node).position === "fixed") {
-        return true;
-      }
+      if (window.getComputedStyle(node).position === "fixed") return true;
     }
     return false;
   }
 
+  function isVisible(container) {
+    if (container.getClientRects && !container.getClientRects().length) return false;
+    for (var node = container; node && node !== document.body; node = node.parentElement) {
+      var style = window.getComputedStyle(node);
+      if (node.hidden || style.display === "none" || style.visibility === "hidden") return false;
+    }
+    return true;
+  }
+
   function init() {
     var config = document.querySelector("[data-calorieapp-site-integration]");
-    if (!config || config.dataset.navigationReady === "1") {
-      return;
-    }
-    var settings = config.dataset;
-    var homePage;
-    var appPage;
-    var appLogo;
-    var legacyAppPage;
-    var currentPage = new URL(window.location.href);
+    if (!config || config.dataset.navigationReady === "1") return;
+    var homePage, appPage, appLogo, legacyAppPage;
+    var origin = new URL(window.location.href).origin;
     try {
-      homePage = new URL(settings.homePage);
-      appPage = new URL(settings.appPage);
-      appLogo = new URL(settings.appLogo);
+      homePage = new URL(config.dataset.homePage);
+      appPage = new URL(config.dataset.appPage);
+      appLogo = new URL(config.dataset.appLogo);
       legacyAppPage = new URL("index.php/integrated-exchange/", homePage);
       if ([homePage, appPage, appLogo].some(function (url) {
-        return url.origin !== currentPage.origin || url.protocol !== "https:" || url.username || url.password;
-      })) {
-        return;
-      }
-    } catch (_error) {
-      return;
-    }
+        return url.origin !== origin || url.protocol !== "https:" || url.username || url.password;
+      })) return;
+    } catch (_error) { return; }
+
     config.dataset.navigationReady = "1";
-    var onHome = settings.isHome === "1" || path(currentPage) === path(homePage);
-    var onApp = !!document.querySelector("[data-calorieapp-embed]") || path(currentPage) === path(appPage);
+    var hiddenByNavigation = new Map();
+    var observer = null;
+    var scheduled = false;
+    var fallback = document.querySelector("[data-calorieapp-fallback-shortcuts]");
 
-    document.querySelectorAll(".brz-icon__container a[href]").forEach(function (link) {
-      var container = link.closest(".brz-icon__container");
-      if (!container || !isFloating(container)) {
-        return;
-      }
-      var destination;
-      try {
-        destination = new URL(link.href);
-      } catch (_error) {
-        return;
-      }
-      if (destination.origin !== currentPage.origin || destination.hash || destination.search) {
-        return;
-      }
-      var homeLink = path(destination) === path(homePage);
-      var appLink = path(destination) === path(appPage) || path(destination) === path(legacyAppPage);
-      if (!homeLink && !appLink) {
-        return;
+    function hide(container) {
+      if (!hiddenByNavigation.has(container)) {
+        hiddenByNavigation.set(container, {
+          hidden: container.hidden,
+          display: container.style.getPropertyValue("display"),
+          priority: container.style.getPropertyPriority("display")
+        });
       }
-      if ((homeLink && onHome) || (appLink && onApp)) {
-        container.hidden = true;
-        container.style.setProperty("display", "none", "important");
-        return;
-      }
-      if (homeLink) {
-        link.title = "Home";
-        link.setAttribute("aria-label", "Go to Home");
-        return;
-      }
-      var icon = link.querySelector(".brz-icon-svg");
-      if (!icon) {
-        return;
+      container.hidden = true;
+      container.style.setProperty("display", "none", "important");
+    }
+
+    function restore() {
+      hiddenByNavigation.forEach(function (saved, container) {
+        container.hidden = saved.hidden;
+        if (saved.display) container.style.setProperty("display", saved.display, saved.priority);
+        else container.style.removeProperty("display");
+      });
+      hiddenByNavigation.clear();
+    }
+
+    function reconcile() {
+      scheduled = false;
+      // Avoid observing our own image replacements and visibility corrections.
+      if (observer) observer.disconnect();
+      restore();
+      var currentPage = new URL(window.location.href);
+      var onHome = config.dataset.isHome === "1" || path(currentPage) === path(homePage);
+      var onApp = !!document.querySelector("[data-calorieapp-embed]") || path(currentPage) === path(appPage);
+      var found = { home: false, app: false, top: false };
+
+      document.querySelectorAll(".brz-icon__container a[href]").forEach(function (link) {
+        var container = link.closest(".brz-icon__container");
+        if (!container || !isFloating(container)) return;
+        var destination;
+        try { destination = new URL(link.href, window.location.href); }
+        catch (_error) { return; }
+        if (destination.origin !== origin || destination.username || destination.password || destination.search) return;
+
+        var glyph = link.querySelector("use");
+        var glyphHref = glyph && (glyph.getAttribute("href") || glyph.getAttribute("xlink:href") || "");
+        if ((destination.hash || link.getAttribute("href") === "#") &&
+            (glyphHref && /square-upload\.svg#nc_icon$/.test(glyphHref))) {
+          if (isVisible(container)) found.top = true;
+          return;
+        }
+        if (destination.hash || link.getAttribute("href") === "#") return;
+
+        var role = path(destination) === path(homePage) ? "home" :
+          (path(destination) === path(appPage) || path(destination) === path(legacyAppPage) ? "app" : "");
+        if (!role) return;
+        if ((role === "home" && onHome) || (role === "app" && onApp)) { hide(container); return; }
+
+        if (role === "home") {
+          link.title = "Home";
+          link.setAttribute("aria-label", "Go to Home");
+        } else {
+          var icon = link.querySelector(".brz-icon-svg");
+          if (!icon) return;
+          if (icon.tagName !== "IMG" || icon.getAttribute("src") !== appLogo.href) {
+            var image = document.createElement("img");
+            image.src = appLogo.href;
+            image.alt = "";
+            image.setAttribute("aria-hidden", "true");
+            image.className = "brz-icon-svg";
+            image.style.width = "1em";
+            image.style.height = "1em";
+            image.style.objectFit = "contain";
+            image.style.background = "transparent";
+            image.style.display = "block";
+            icon.replaceWith(image);
+          }
+          link.href = appPage.href;
+          link.title = "CalorieApp";
+          link.setAttribute("aria-label", "Open CalorieApp");
+        }
+        if (isVisible(container)) {
+          if (found[role]) hide(container);
+          else found[role] = true;
+        }
+      });
+
+      if (fallback) {
+        var visible = false;
+        fallback.querySelectorAll("[data-calorieapp-shortcut]").forEach(function (slot) {
+          var role = slot.getAttribute("data-calorieapp-shortcut");
+          var show = !found[role] && !(role === "home" && onHome) && !(role === "app" && onApp);
+          slot.hidden = !show;
+          visible = visible || show;
+        });
+        fallback.hidden = !visible;
       }
-      var image = document.createElement("img");
-      image.src = appLogo.href;
-      image.alt = "";
-      image.setAttribute("aria-hidden", "true");
-      image.className = "brz-icon-svg";
-      image.style.width = "1em";
-      image.style.height = "1em";
-      image.style.objectFit = "contain";
-      image.style.background = "transparent";
-      image.style.display = "block";
-      icon.replaceWith(image);
-      link.href = appPage.href;
-      link.title = "CalorieApp";
-      link.setAttribute("aria-label", "Open CalorieApp");
-    });
-  }
+      if (observer) observer.observe(document.body, {
+        childList: true, subtree: true, attributes: true, attributeFilter: ["class", "style"]
+      });
+    }
 
-  if (document.readyState === "loading") {
-    document.addEventListener("DOMContentLoaded", init);
-  } else {
-    init();
+    function schedule() {
+      if (scheduled) return;
+      scheduled = true;
+      window.requestAnimationFrame(reconcile);
+    }
+
+    if (fallback) {
+      var top = fallback.querySelector("[data-calorieapp-scroll-top]");
+      if (top) top.addEventListener("click", function (event) {
+        event.preventDefault();
+        window.scrollTo({
+          top: 0,
+          behavior: window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth"
+        });
+      });
+    }
+    if (window.MutationObserver) observer = new window.MutationObserver(schedule);
+    reconcile();
+    window.addEventListener("load", schedule);
+    window.addEventListener("pageshow", schedule);
+    window.addEventListener("resize", schedule);
+    window.addEventListener("popstate", schedule);
   }
+
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", init, { once: true });
+  else init();
 })();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index b0d1ad0..59a78f9 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.24
+ * Version: 0.3.25
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.24');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.25');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index f7f8045..455a7d6 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.24';
+            : '0.3.25';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
index d39c74a..f7c6861 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
@@ -12,9 +12,11 @@
  */
 class PageEnding {
     private bool $rendered = false;
+    private bool $shortcuts_rendered = false;
 
     public function register_hooks(): void {
         add_action('wp_enqueue_scripts', [$this, 'enqueue_assets']);
+        add_action('wp_footer', [$this, 'render_shortcuts'], 4);
         add_action('wp_footer', [$this, 'render'], 5);
     }
 
@@ -23,7 +25,7 @@ private function is_app_page(): bool {
     }
 
     public function enqueue_assets(): void {
-        if (!$this->is_app_page()) {
+        if (is_admin() || is_feed() || is_embed()) {
             return;
         }
 
@@ -33,6 +35,35 @@ public function enqueue_assets(): void {
         wp_enqueue_script('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.js', [], $version, true);
     }
 
+    /** Fill only missing shortcuts; the browser keeps existing Brizy controls. */
+    public function render_shortcuts(): void {
+        if ($this->shortcuts_rendered || is_admin() || is_feed() || is_embed()) {
+            return;
+        }
+        $this->shortcuts_rendered = true;
+        $glyphs = content_url('/plugins/brizy/public/editor-build/prod/editor/icons/glyph/');
+        $logo = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE) . 'assets/calorieapp-logo.svg';
+        ?>
+        <nav class="calorieapp-page-tools" data-calorieapp-fallback-shortcuts aria-label="<?php echo esc_attr__('Page shortcuts', 'calorieapp-identity-bridge'); ?>" hidden>
+            <div class="calorieapp-page-tool-position calorieapp-page-tool-position-home" data-calorieapp-shortcut="home" hidden>
+                <a class="calorieapp-page-tool" href="<?php echo esc_url(home_url('/')); ?>" aria-label="<?php echo esc_attr__('Go to Home', 'calorieapp-identity-bridge'); ?>" title="Home">
+                    <svg class="calorieapp-page-tool-icon" aria-hidden="true" focusable="false"><use href="<?php echo esc_url($glyphs . 'home-minimal.svg#nc_icon'); ?>"></use></svg>
+                </a>
+            </div>
+            <div class="calorieapp-page-tool-position calorieapp-page-tool-position-app" data-calorieapp-shortcut="app" hidden>
+                <a class="calorieapp-page-tool" href="<?php echo esc_url(home_url('/index.php/calorieapp/')); ?>" aria-label="<?php echo esc_attr__('Open CalorieApp', 'calorieapp-identity-bridge'); ?>" title="CalorieApp">
+                    <img class="calorieapp-page-tool-icon" src="<?php echo esc_url($logo); ?>" alt="" aria-hidden="true" width="48" height="48">
+                </a>
+            </div>
+            <div class="calorieapp-page-tool-position calorieapp-page-tool-position-top" data-calorieapp-shortcut="top" hidden>
+                <a class="calorieapp-page-tool" href="#" data-calorieapp-scroll-top aria-label="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>" title="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>">
+                    <svg class="calorieapp-page-tool-icon" aria-hidden="true" focusable="false"><use href="<?php echo esc_url($glyphs . 'square-upload.svg#nc_icon'); ?>"></use></svg>
+                </a>
+            </div>
+        </nav>
+        <?php
+    }
+
     public function render(): void {
         if ($this->rendered || !$this->is_app_page()) {
             return;

From 8dff6e5db4c41515f8e20437c061ad205154d02f Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Mon, 7 Sep 2026 17:23:38 +0200
Subject: [PATCH 03/12] Fix market columns, compact page shortcuts and embedded
 startup cover (0.3.26)

---
 .../workflows/bridge-maintenance-checks.yml   |   1 +
 tools/tests/wordpress_embed_loading.test.mjs  |  64 ++++
 tools/tests/wordpress_page_ending.test.mjs    |  38 ++-
 tools/tests/wordpress_page_ending.test.php    |   2 +-
 .../tests/wordpress_site_navigation.test.mjs  | 281 ++++++------------
 .../wordpress_site_session_markup.test.php    |  20 +-
 .../calorieapp-identity-bridge/README.md      |  25 ++
 .../assets/calorieapp-page-ending.css         | 101 +++++--
 .../assets/calorieapp-page-ending.js          |  88 +++++-
 .../assets/calorieapp-site-navigation.js      | 159 ++++------
 .../calorieapp-identity-bridge.php            |   4 +-
 ...ieapp-identity-bridge-integrated-login.php |  15 +-
 ...calorieapp-identity-bridge-page-ending.php |   9 +-
 13 files changed, 481 insertions(+), 326 deletions(-)
 create mode 100644 tools/tests/wordpress_embed_loading.test.mjs

diff --git a/.github/workflows/bridge-maintenance-checks.yml b/.github/workflows/bridge-maintenance-checks.yml
index 7a10373..dbf2d3c 100644
--- a/.github/workflows/bridge-maintenance-checks.yml
+++ b/.github/workflows/bridge-maintenance-checks.yml
@@ -30,6 +30,7 @@ jobs:
         run: |
           php tools/tests/wordpress_page_ending.test.php
           node --test tools/tests/wordpress_page_ending.test.mjs
+          node --test tools/tests/wordpress_embed_loading.test.mjs
       - name: Exercise the preserved login and site-wide session controls
         run: node --test tools/tests/calorieapp_embed_readiness.test.mjs tools/tests/wordpress_site_session.test.mjs
       - name: Check responsive header correction lifecycle
diff --git a/tools/tests/wordpress_embed_loading.test.mjs b/tools/tests/wordpress_embed_loading.test.mjs
new file mode 100644
index 0000000..068e9e1
--- /dev/null
+++ b/tools/tests/wordpress_embed_loading.test.mjs
@@ -0,0 +1,64 @@
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+const source=readFileSync(new URL('../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js',import.meta.url),'utf8');
+const appOrigin='https://app.calorietoken.net';
+function element(attrs={}){return {attrs,hidden:false,textContent:'',events:new Map(),
+ getAttribute(n){return this.attrs[n]??null;},setAttribute(n,v){this.attrs[n]=String(v);},removeAttribute(n){delete this.attrs[n];},
+ addEventListener(n,fn){this.events.set(n,fn);}
+};}
+function harness({frameOrigin=appOrigin,locale='en'}={}){
+ const stage=element({'data-calorieapp-frame-loading':'1','aria-busy':'true'});
+ const frame=element({src:frameOrigin+'?embedded=1&locale='+locale});frame.contentWindow={};
+ let reloads=0;const set=frame.setAttribute;frame.setAttribute=function(n,v){if(n==='src')reloads++;set.call(this,n,v);};
+ const mask=element({'data-slow-message':'Still starting. Wait or try again.'});
+ const message=element();message.textContent='Your food log will appear here.';
+ const actions=element();actions.hidden=true;
+ const retry=element(),reveal=element();
+ const children=new Map([
+  ['[data-calorieapp-frame-stage]',stage],['.calorieapp-embed-frame',frame],['[data-calorieapp-embed-loading]',mask],
+  ['[data-calorieapp-loading-message]',message],['[data-calorieapp-loading-actions]',actions],
+  ['[data-calorieapp-loading-retry]',retry],['[data-calorieapp-loading-reveal]',reveal]
+ ]);
+ const root=element({'data-app-origin':appOrigin,'data-locale':locale});
+ root.querySelector=mask.querySelector=s=>children.get(s)||null;
+ const events=new Map(),timers=new Map();let timerId=0;
+ const document={body:{},readyState:'complete',querySelectorAll(s){return s==='[data-calorieapp-embed]'?[root]:[];}};
+ const window={
+  addEventListener(n,fn){if(!events.has(n))events.set(n,[]);events.get(n).push(fn);},
+  setTimeout(fn,ms){timers.set(++timerId,{fn,ms});return timerId;},clearTimeout(id){timers.delete(id);},
+  fetch(){throw new Error('The loader must not send authentication or readiness requests.');}
+ };
+ vm.runInNewContext(source,{document,window,URL,Intl});
+ return {stage,frame,mask,message,actions,retry,reveal,timers,reloads:()=>reloads,
+  messageEvent(data={type:'calorieapp:bridge:initialized',locale},origin=appOrigin,sender=frame.contentWindow){for(const fn of events.get('message')||[])fn({origin,source:sender,data});},
+  slow(){for(const {fn,ms} of [...timers.values()]){assert.equal(ms,45000);fn();}},
+  frameLoad(){frame.events.get('load')?.();}
+ };
+}
+test('provider iframe load does not uncover the app before its existing handshake',()=>{
+ const h=harness();h.frameLoad();assert.equal(h.mask.hidden,false);assert.equal(h.stage.getAttribute('data-calorieapp-frame-loading'),'1');
+ h.messageEvent();assert.equal(h.mask.hidden,true);assert.equal(h.stage.getAttribute('data-calorieapp-frame-loading'),null);
+ assert.equal(h.stage.getAttribute('aria-busy'),'false');assert.equal(h.timers.size,0);assert.equal(h.reloads(),0);
+});
+test('foreign origins, other frames, wrong locales and unrelated messages cannot dismiss the loader',()=>{
+ const h=harness();
+ h.messageEvent(undefined,'https://untrusted.example');h.messageEvent(undefined,appOrigin,{});
+ h.messageEvent({type:'calorieapp:bridge:initialized',locale:'nl'});
+ h.messageEvent({type:'calorieapp:bridge:ready',locale:'en'});
+ h.messageEvent({type:'calorieapp:login:complete',locale:'en'});
+ assert.equal(h.mask.hidden,false);h.messageEvent();assert.equal(h.mask.hidden,true);
+});
+test('a slow start offers manual choices without automatic reloads or authentication requests',()=>{
+ const h=harness();h.slow();assert.equal(h.actions.hidden,false);assert.match(h.message.textContent,/Still starting/);assert.equal(h.reloads(),0);
+ h.retry.events.get('click')();assert.equal(h.reloads(),1);assert.equal(h.actions.hidden,true);assert.equal(h.mask.hidden,false);
+ h.messageEvent();h.retry.events.get('click')();assert.equal(h.reloads(),1,'No retry can reset a ready app.');
+});
+test('the user can reveal a stalled frame and later readiness remains harmless',()=>{
+ const h=harness();h.slow();h.reveal.events.get('click')();assert.equal(h.mask.hidden,true);assert.equal(h.reloads(),0);
+ h.messageEvent();assert.equal(h.mask.hidden,true);
+});
+test('mismatched frame origin is never initialized by the loader',()=>{
+ const h=harness({frameOrigin:'https://other.example'});assert.equal(h.mask.getAttribute('data-loading-ready'),null);assert.equal(h.timers.size,0);
+});
diff --git a/tools/tests/wordpress_page_ending.test.mjs b/tools/tests/wordpress_page_ending.test.mjs
index 883359f..555da81 100644
--- a/tools/tests/wordpress_page_ending.test.mjs
+++ b/tools/tests/wordpress_page_ending.test.mjs
@@ -10,6 +10,12 @@ function element() {
     attrs: {}, textContent: '', hidden: false, children: new Map(), listeners: {},
     classList: { values: new Set(), add(name) { this.values.add(name); }, contains(name) { return this.values.has(name); } },
     closest(selector) { return this.ancestors?.[selector] || null; },
+    matches(selector) { return selector.split(',').some(part => this.classList.contains(part.trim().replace(/^\./, ''))); },
+    cloneNode() {
+      const node = this;
+      return { textContent: this.outsideText || '', querySelectorAll() { return []; },
+        querySelector() { return node.outsideControl ? {} : null; } };
+    },
     setAttribute(name, value) { this.attrs[name] = String(value); },
     getAttribute(name) { return this.attrs[name] ?? null; },
     querySelector(selector) { return this.children.get(selector) ?? null; },
@@ -30,21 +36,34 @@ const good = () => ({ success: true, data: {
   price_usd: 0.00000007, price_xrp: 0.00000005, market_cap_usd: 4000, rank: 300, holders: 14000,
 } });
 async function settle() { for (let i = 0; i < 10; i++) await Promise.resolve(); }
-function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true, legacy = false, mixedHost = false } = {}) {
+function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true, legacy = false, mixedHost = false, mixedColumn = false } = {}) {
   const widget = element();
   const widgets = [widget];
   const oldWidget = widget;
   const wrapper = element();
   const host = element();
+  const inner = element();
+  const columnItems = element();
+  const column = element();
+  const row = element();
+  const container = element();
+  host.classList.add('brz-wp-shortcode'); wrapper.classList.add('brz-wrapper');
+  columnItems.classList.add('brz-column__items'); column.classList.add('brz-columns');
+  row.classList.add('brz-row'); container.classList.add('brz-container');
+  inner.parentElement = host; host.parentElement = wrapper; wrapper.parentElement = columnItems;
+  columnItems.parentElement = column; column.parentElement = row; row.parentElement = container;
   host.ancestors = { '.brz-wrapper': wrapper };
-  if (mixedHost) host.children.set('.xl-card, [data-calorieapp-embed]', {});
+  if (mixedHost) host.outsideControl = true;
+  if (mixedColumn) columnItems.outsideText = 'Existing page heading';
   function attachLegacy(node) {
     node.nodeType = 1;
     node.classList.add('livecoinwatch-widget-1');
     node.ancestors = { '.brz-wp-shortcode': host };
+    node.parentElement = inner;
     node.matches = () => true;
     node.replaceWith = function (replacement) {
       replacement.ancestors = this.ancestors;
+      replacement.parentElement = this.parentElement;
       widgets[widgets.indexOf(this)] = replacement;
       this.detached = true;
     };
@@ -72,6 +91,7 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
     addEventListener(name, fn) { if (name === 'DOMContentLoaded') ready = fn; },
     querySelectorAll(selector) {
       if (empty) return [];
+      if (selector === '[data-calorieapp-embed]') return [];
       return selector.includes('xpmarket-widget') ? widgets : [carousel];
     },
   };
@@ -96,7 +116,7 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
   };
   vm.runInNewContext(source, { window, document, URL, Intl });
   ready();
-  return { get widget() { return widgets[0]; }, widgets, oldWidget, host, wrapper, buttons, track, requests, timers, ready,
+  return { get widget() { return widgets[0]; }, widgets, oldWidget, host, wrapper, inner, columnItems, column, row, container, buttons, track, requests, timers, ready,
     event(name) { events.get(name)?.(); },
     addLate() {
       const late = element(); attachLegacy(late); widgets.push(late);
@@ -160,7 +180,10 @@ test('legacy website cards use the same CAL renderer and keep their original slo
   assert.equal(h.widget.getAttribute('data-state'), 'ready');
   assert.equal(h.widget.querySelector('.calorieapp-xpmarket-price').textContent, '$0.00000007');
   assert.equal(h.host.classList.contains('calorieapp-xpmarket-host'), true);
-  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-brizy-wrapper'), true);
+  for (const node of [h.host, h.wrapper, h.columnItems, h.column, h.row]) {
+    assert.equal(node.classList.contains('calorieapp-xpmarket-layout'), true, 'Normalize the dedicated market column, not only its shortcode.');
+  }
+  assert.equal(h.container.classList.contains('calorieapp-xpmarket-layout'), false, 'Preserve the page section container.');
   h.oldWidget.innerHTML = '<span class="legacy">Late old provider callback</span>';
   assert.equal(h.widget.querySelector('.legacy'), null, 'An old provider callback cannot overwrite the replacement.');
 });
@@ -168,7 +191,12 @@ test('a mixed market/account shortcode keeps its account layout', async () => {
   const h = run({ legacy: true, mixedHost: true }); await settle();
   assert.equal(h.widget.getAttribute('data-state'), 'ready');
   assert.equal(h.host.classList.contains('calorieapp-xpmarket-host'), false);
-  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-brizy-wrapper'), false);
+  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-layout'), false);
+});
+test('market-only sizing stops before an ancestor with ordinary page content', async () => {
+  const h = run({legacy: true, mixedColumn: true}); await settle();
+  assert.equal(h.wrapper.classList.contains('calorieapp-xpmarket-layout'), true);
+  for (const node of [h.columnItems, h.column, h.row]) assert.equal(node.classList.contains('calorieapp-xpmarket-layout'), false);
 });
 test('late-loaded market cards share the first request without duplicating existing cards', async () => {
   const h = run(); await settle();
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index 22c3f97..be3fd2b 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -87,7 +87,7 @@ function render($object): string { ob_start(); $object->render(); return (string
 $shortcut_html = (string) ob_get_clean();
 check(substr_count($shortcut_html, 'data-calorieapp-fallback-shortcuts') === 1, 'Public pages need a fallback navigation surface.');
 check(str_contains($shortcut_html, 'assets/calorieapp-logo.svg'), 'The fallback uses the original transparent vector mark.');
-check(substr_count($shortcut_html, 'data-calorieapp-shortcut=') === 3, 'Provide Home, App and Top slots for conditional display.');
+check(substr_count($shortcut_html, 'data-calorieapp-shortcut=') === 4, 'Provide Home, App, Top and Bottom slots for conditional display.');
 ob_start();
 $shortcuts->render_shortcuts();
 check(ob_get_clean() === '', 'Repeated hooks cannot duplicate fallback navigation.');
diff --git a/tools/tests/wordpress_site_navigation.test.mjs b/tools/tests/wordpress_site_navigation.test.mjs
index 3e76fa2..c198e2a 100644
--- a/tools/tests/wordpress_site_navigation.test.mjs
+++ b/tools/tests/wordpress_site_navigation.test.mjs
@@ -1,192 +1,107 @@
-import assert from "node:assert/strict";
-import { readFile } from "node:fs/promises";
-import test from "node:test";
-import vm from "node:vm";
-
-const source = await readFile(new URL(
-  "../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js", import.meta.url
-), "utf8");
-const site = "https://calorietoken.net";
-const app = site + "/index.php/calorieapp/";
-const logo = site + "/wp-content/plugins/calorieapp-identity-bridge/assets/calorieapp-logo.svg";
-
-function style() {
-  const values = new Map();
-  return {
-    setProperty(name, value, priority = "") { values.set(name, { value, priority }); this[name] = value; },
-    getPropertyValue(name) { return values.get(name)?.value || ""; },
-    getPropertyPriority(name) { return values.get(name)?.priority || ""; },
-    removeProperty(name) { values.delete(name); delete this[name]; },
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+import test from 'node:test';
+import vm from 'node:vm';
+const source=await readFile(new URL('../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js',import.meta.url),'utf8');
+const site='https://calorietoken.net';
+const app=site+'/index.php/calorieapp/';
+const logo=site+'/wp-content/plugins/calorieapp-identity-bridge/assets/calorieapp-logo.svg';
+function style(){const values=new Map();return {
+ setProperty(n,v,p=''){values.set(n,{v,p});this[n]=v;},
+ getPropertyValue(n){return values.get(n)?.v||'';},getPropertyPriority(n){return values.get(n)?.p||'';},
+ removeProperty(n){values.delete(n);delete this[n];}
+};}
+function harness({pathname='/index.php/faq/',embedded=false,isHome='0',appLogo=logo,missingBar=false,height=2400,viewport=800,delayed=false}={}){
+ const config={dataset:{homePage:site+'/',appPage:app,appLogo,isHome}};
+ const body={scrollHeight:height};
+ const html={scrollHeight:height};
+ const links=[];
+ function link(href,{floating=true,glyph='',sharedRoot=null}={}){
+  const root=sharedRoot||{parentElement:body,position:floating&&!delayed?'fixed':'relative',hidden:false,style:style()};
+  const container={parentElement:root,position:'static',hidden:false,style:style()};
+  const item={rawHref:href,attributes:{},
+   get href(){return new URL(this.rawHref,site+pathname).href;},
+   closest(){return container;},
+   getAttribute(n){return n==='href'?this.rawHref:this.attributes[n]??null;},
+   querySelector(s){return s==='use'&&glyph?{getAttribute(){return '/icons/'+glyph+'.svg#nc_icon';}}:null;}
   };
+  const pair={item,container,root};links.push(pair);
+  root.querySelectorAll=()=>links.filter(x=>x.root===root).map(x=>x.item);
+  return pair;
+ }
+ const home=link(site+'/');const legacy=link(site+'/index.php/integrated-exchange/');const currentApp=link(app);
+ const top=link('#',{glyph:'square-upload'});const bottom=link('#bottom',{glyph:'square-download'});
+ const inline=link(app,{floating:false});const other=link(site+'/index.php/contact/');
+ const foreign=link('https://elsewhere.example/index.php/calorieapp/');
+ const fragment=link(site+'/#top');const unrelatedScroll=link(site+'/another/#top',{glyph:'square-upload'});
+ const mixed=link(app);const mixedOther=link(site+'/index.php/contact/',{sharedRoot:mixed.root});
+ const slots=Object.fromEntries(['home','app','bottom','top'].map(role=>[role,{hidden:true,getAttribute(){return role;}}]));
+ const buttons=Object.fromEntries(['top','bottom'].map(role=>[role,{getAttribute(){return role;},addEventListener(n,fn){this[n]=fn;}}]));
+ const bar={hidden:true,querySelectorAll(s){return s==='[data-calorieapp-scroll]'?Object.values(buttons):Object.values(slots);}};
+ const events=new Map(),frames=[];let mutation,resize,observed;
+ const document={body,documentElement:html,readyState:'complete',
+  querySelector(s){if(s==='[data-calorieapp-site-integration]')return config;if(s==='[data-calorieapp-fallback-shortcuts]')return missingBar?null:bar;if(s==='[data-calorieapp-embed]')return embedded?{}:null;return null;},
+  querySelectorAll(){return links.map(x=>x.item);}
+ };
+ const window={location:{href:site+pathname},innerHeight:viewport,
+  getComputedStyle(n){return {position:n.position,display:n.style?.display||'block'};},
+  requestAnimationFrame(fn){frames.push(fn);},addEventListener(n,fn){events.set(n,fn);},
+  matchMedia(){return {matches:true};},scrollTo(v){this.scrolled=v;},
+  MutationObserver:class{constructor(fn){mutation=fn;}disconnect(){}observe(_target,options){observed=options;}},
+  ResizeObserver:class{constructor(fn){resize=fn;}observe(){}}
+ };
+ const flush=()=>{while(frames.length)frames.shift()();};
+ const run=()=>vm.runInNewContext(source,{document,window,URL});run();
+ return {home,legacy,currentApp,top,bottom,inline,other,foreign,fragment,unrelatedScroll,mixed,mixedOther,bar,slots,buttons,window,body,html,
+  run,link,visible:()=>Object.keys(slots).filter(r=>!slots[r].hidden),
+  event(n){events.get(n)?.();flush();},mutate(){mutation?.([]);flush();},resize(){resize?.();flush();},observed:()=>observed};
 }
-function harness({ pathname = "/index.php/faq/", embedded = false, isHome = "0", appLogo = logo, missing = false, delayedPosition = false } = {}) {
-  const config = { dataset: { homePage: site + "/", appPage: app, appLogo, isHome } };
-  const body = {};
-  const floatingWrapper = { parentElement: body, position: delayedPosition ? "relative" : "fixed", hidden: false };
-  const inlineWrapper = { parentElement: body, position: "relative" };
-  const links = [];
-  function link(href, floating = true, top = false) {
-    const container = { parentElement: floating ? floatingWrapper : inlineWrapper, position: "static", hidden: false, style: style() };
-    const item = {
-      attributes: {}, title: "", rawHref: href,
-      get href() { return new URL(this.rawHref, site + pathname).href; },
-      set href(value) { this.rawHref = value; },
-      closest() { return container; },
-      setAttribute(name, value) { this.attributes[name] = value; },
-      getAttribute(name) { return name === "href" ? this.rawHref : this.attributes[name] ?? null; },
-      querySelector(selector) {
-        if (selector === "use") return top ? { getAttribute() { return "/wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/square-upload.svg#nc_icon"; } } : null;
-        return selector === ".brz-icon-svg" ? this.icon : null;
-      },
-      icon: { tagName: "svg", getAttribute() { return null; }, replaceWith(image) { item.image = image; item.icon = image; } },
-    };
-    const pair = { item, container };
-    links.push(pair);
-    return pair;
-  }
-  const home = link(site + "/");
-  const legacy = link(site + "/index.php/integrated-exchange/");
-  const currentApp = link(app);
-  const top = link("#", true, true);
-  const inline = link(site + "/index.php/integrated-exchange/", false);
-  const inlineHome = link(site + "/", false);
-  const other = link(site + "/index.php/contact/");
-  const foreign = link("https://example.com/index.php/calorieapp/");
-  const fragment = link(site + "/#top");
-  const slots = Object.fromEntries(["home", "app", "top"].map(role => [role, { hidden: true, getAttribute() { return role; } }]));
-  const topButton = { addEventListener(name, fn) { this[name] = fn; } };
-  const fallback = {
-    hidden: true, querySelectorAll() { return Object.values(slots); },
-    querySelector() { return topButton; },
-  };
-  let created = 0;
-  const events = new Map(), frames = [];
-  let mutation;
-  let lastObservation;
-  const document = {
-    body, readyState: "complete",
-    querySelector(selector) {
-      if (selector === "[data-calorieapp-site-integration]") return config;
-      if (selector === "[data-calorieapp-embed]") return embedded ? {} : null;
-      if (selector === "[data-calorieapp-fallback-shortcuts]") return fallback;
-      return null;
-    },
-    querySelectorAll() { return (missing ? links.filter(x => x.late) : links).map(x => x.item); },
-    createElement(tag) {
-      assert.equal(tag, "img"); created++;
-      return { tagName: "IMG", style: {}, attributes: {},
-        setAttribute(name, value) { this.attributes[name] = value; },
-        getAttribute(name) { return name === "src" ? this.src : this.attributes[name] ?? null; },
-      };
-    },
-  };
-  const window = {
-    location: { href: site + pathname },
-    getComputedStyle(node) { return { position: node.position, display: node.themeHidden ? "none" : node.style?.display || "block" }; },
-    requestAnimationFrame(fn) { frames.push(fn); },
-    addEventListener(name, fn) { events.set(name, fn); },
-    matchMedia() { return { matches: true }; },
-    scrollTo(value) { this.scrolled = value; },
-    MutationObserver: class {
-      constructor(fn) { mutation = fn; }
-      disconnect() {}
-      observe(target, options) { assert.equal(target, body); lastObservation = options; }
-    },
-  };
-  const run = () => vm.runInNewContext(source, { document, URL, window });
-  const flush = () => { while (frames.length) frames.shift()(); };
-  run();
-  return { home, legacy, currentApp, top, inline, inlineHome, other, foreign, fragment, floatingWrapper, fallback, slots, topButton, window,
-    run, count: () => created, flush, event: name => { events.get(name)?.(); flush(); },
-    mutate: () => { mutation?.([]); flush(); }, lastObservation: () => lastObservation,
-    addLate(href) { const value = link(href); value.late = true; return value; },
-  };
-}
-
-test("Home omits Home and uses one original transparent app logo", () => {
-  for (const pathname of ["/", "/?campaign=test", "/index.php/"]) {
-    const h = harness({ pathname });
-    assert.equal(h.home.container.hidden, true);
-    assert.equal(h.floatingWrapper.hidden, false);
-    assert.equal(h.legacy.item.href, app);
-    assert.equal(h.legacy.item.image.src, logo);
-    assert.equal(h.legacy.item.image.style.width, "1em");
-    assert.equal(h.legacy.item.image.style.height, "1em");
-    assert.equal(h.legacy.item.image.attributes["aria-hidden"], "true");
-    assert.equal(h.currentApp.container.hidden, true, "duplicate destinations are not shown");
-    assert.equal(h.slots.home.hidden, true);
-    assert.equal(h.slots.app.hidden, true);
-  }
-  assert.equal(harness({ pathname: "/welcome/", isHome: "1" }).home.container.hidden, true);
+test('Home and CalorieApp omit their own destination in one shared stack',()=>{
+ for(const pathname of ['/','/index.php/','/?campaign=test']){
+  const h=harness({pathname});assert.deepEqual(h.visible(),['app','bottom','top']);
+  for(const x of [h.home,h.legacy,h.currentApp,h.top,h.bottom]){assert.equal(x.container.hidden,true);assert.equal(x.root.hidden,true);}
+ }
+ for(const options of [{pathname:'/index.php/calorieapp/'},{pathname:'/calorieapp?locale=nl'},{pathname:'/preview/?preview=true',embedded:true}]){
+  const h=harness(options);assert.deepEqual(h.visible(),['home','bottom','top']);assert.equal(h.bar.hidden,false);
+ }
+ assert.equal(harness({pathname:'/welcome/',isHome:'1'}).slots.home.hidden,true);
+});
+test('published, off-menu and private-preview routes use the same controls',()=>{
+ const paths=['faq','tokenomics-update','whitepaper','trustline','richlist','blog','contact','donate','merchnfts','delivery','cafes','takeaway','restaurants','groceries','wholesalers','cart','checkout','privacy-policy','terms-conditions','cookie-policy','legal-notice','community-voting-hub/?preview=true'];
+ for(const page of paths){const h=harness({pathname:'/index.php/'+page});assert.deepEqual(h.visible(),['home','app','bottom','top']);}
 });
-test("CalorieApp omits canonical and legacy self-links while retaining Home", () => {
-  for (const options of [{ pathname: "/index.php/calorieapp/" }, { pathname: "/calorieapp?locale=nl" }, { pathname: "/app-preview/", embedded: true }]) {
-    const h = harness(options);
-    assert.equal(h.legacy.container.hidden, true);
-    assert.equal(h.currentApp.container.hidden, true);
-    assert.equal(h.home.container.hidden, false);
-    assert.equal(h.slots.app.hidden, true);
-  }
+test('inline links, other floating actions and mixed wrappers are preserved',()=>{
+ const h=harness();
+ for(const x of [h.inline,h.other,h.foreign,h.fragment,h.unrelatedScroll,h.mixedOther]){
+  assert.equal(x.container.hidden,false);assert.deepEqual(x.item.attributes,{});
+ }
+ assert.equal(h.mixed.container.hidden,true);assert.equal(h.mixed.root.hidden,false);
 });
-test("FAQ, Tokenomics and other pages share the same destinations without rewriting content links", () => {
-  for (const page of ["faq", "tokenomics-update", "whitepaper", "trustline", "richlist", "blog", "contact", "donate", "merchnfts"]) {
-    const h = harness({ pathname: "/index.php/" + page + "/" });
-    assert.equal(h.home.container.hidden, false);
-    assert.equal(h.legacy.item.href, app);
-    assert.equal(h.legacy.item.image.src, logo);
-    assert.equal(h.currentApp.container.hidden, true);
-    for (const link of [h.inline, h.inlineHome, h.other, h.foreign, h.fragment]) {
-      assert.equal(link.container.hidden, false);
-      assert.equal(link.item.image, undefined);
-      assert.deepEqual(link.item.attributes, {});
-    }
-    const count = h.count(); h.run(); h.event("resize");
-    assert.equal(h.count(), count);
-  }
+test('the down control follows actual page length including later iframe/image growth',()=>{
+ const h=harness({height:1500});assert.equal(h.slots.bottom.hidden,true);
+ h.body.scrollHeight=4000;h.resize();assert.equal(h.slots.bottom.hidden,false);
+ h.body.scrollHeight=1200;h.html.scrollHeight=1200;h.resize();assert.equal(h.slots.bottom.hidden,true);
+ h.window.innerHeight=500;h.event('resize');assert.equal(h.slots.bottom.hidden,false);
 });
-test("missing bars are completed with the appropriate shortcuts on Home, CalorieApp and FAQ", () => {
-  for (const [pathname, expected] of [["/", ["app", "top"]], ["/index.php/calorieapp/", ["home", "top"]], ["/index.php/faq/", ["home", "app", "top"]]]) {
-    const h = harness({ pathname, missing: true });
-    assert.deepEqual(Object.keys(h.slots).filter(role => !h.slots[role].hidden), expected);
-    let prevented = false;
-    h.topButton.click({ preventDefault() { prevented = true; } });
-    assert.equal(prevented, true);
-    assert.equal(h.window.scrolled.top, 0);
-    assert.equal(h.window.scrolled.behavior, "auto");
-  }
+test('top and bottom scroll the current page and respect reduced motion',()=>{
+ const h=harness();let prevented=0;
+ h.buttons.top.click({preventDefault(){prevented++;}});assert.equal(h.window.scrolled.top,0);
+ h.body.scrollHeight=4100;h.buttons.bottom.click({preventDefault(){prevented++;}});
+ assert.equal(h.window.scrolled.top,4100);assert.equal(h.window.scrolled.behavior,'auto');assert.equal(prevented,2);
 });
-test("late Brizy links replace fallbacks and are upgraded after styles settle", () => {
-  const h = harness({ missing: true });
-  const late = h.addLate(site + "/index.php/integrated-exchange/");
-  h.mutate();
-  assert.equal(late.item.href, app);
-  assert.equal(late.item.image.src, logo);
-  assert.equal(h.slots.app.hidden, true);
-  const delayed = harness({ delayedPosition: true });
-  assert.match(delayed.legacy.item.href, /integrated-exchange/);
-  delayed.floatingWrapper.position = "fixed";
-  delayed.event("load");
-  assert.equal(delayed.legacy.item.href, app);
-  assert.equal(delayed.slots.app.hidden, true);
+test('late controls and delayed Brizy styles are reconciled without duplicate stacks',()=>{
+ const h=harness({delayed:true});assert.equal(h.legacy.container.hidden,false);
+ h.legacy.root.position='fixed';h.event('load');assert.equal(h.legacy.container.hidden,true);
+ const late=h.link(app);late.root.position='fixed';h.mutate();assert.equal(late.container.hidden,true);
+ h.run();h.event('pageshow');assert.equal(h.bar.hidden,false);
+ assert.deepEqual(Array.from(h.observed().attributeFilter),['class','style','href']);
 });
-test("responsive visibility is reevaluated without losing the theme's original visibility", () => {
-  const h = harness();
-  h.legacy.container.themeHidden = true;
-  h.event("resize");
-  assert.equal(h.currentApp.container.hidden, false, "the other breakpoint's shortcut takes over");
-  assert.equal(h.slots.app.hidden, true);
-  h.currentApp.container.themeHidden = true;
-  h.event("pageshow");
-  assert.equal(h.slots.app.hidden, false, "a missing visible control gets a fallback");
-  h.legacy.container.themeHidden = false;
-  h.mutate();
-  assert.equal(h.slots.app.hidden, true);
-  assert.deepEqual(Array.from(h.lastObservation().attributeFilter), ["class", "style"]);
+test('an old control restored to ordinary content is no longer hidden',()=>{
+ const h=harness();assert.equal(h.legacy.container.hidden,true);
+ h.legacy.root.position='relative';h.event('resize');assert.equal(h.legacy.container.hidden,false);assert.equal(h.legacy.root.hidden,false);
 });
-test("foreign asset configuration cannot rewrite navigation or expose fallbacks", () => {
-  const h = harness({ pathname: "/", appLogo: "https://untrusted.example/logo.svg" });
-  assert.equal(h.count(), 0);
-  assert.equal(h.home.container.hidden, false);
-  assert.equal(h.fallback.hidden, true);
-  assert.match(h.legacy.item.href, /integrated-exchange/);
+test('missing replacement or invalid asset config never suppresses existing navigation',()=>{
+ for(const options of [{missingBar:true},{appLogo:'https://elsewhere.example/logo.svg'}]){
+  const h=harness(options);assert.equal(h.home.container.hidden,false);assert.equal(h.bar.hidden,true);
+ }
 });
diff --git a/tools/tests/wordpress_site_session_markup.test.php b/tools/tests/wordpress_site_session_markup.test.php
index fb91e84..572398c 100644
--- a/tools/tests/wordpress_site_session_markup.test.php
+++ b/tools/tests/wordpress_site_session_markup.test.php
@@ -23,7 +23,11 @@ function home_url($path = ''): string { return 'https://calorietoken.net' . $pat
 function get_queried_object_id(): int { return 42; }
 function is_singular(): bool { return true; }
 function is_front_page(): bool { return false; }
-function get_permalink($id): string { return home_url('/index.php/about/'); }
+function get_permalink($id = 0): string { return home_url('/index.php/about/'); }
+function shortcode_atts($defaults, $attributes, $name): array { return array_merge($defaults, array_intersect_key($attributes, $defaults)); }
+function wp_generate_uuid4(): string { return '00000000-0000-4000-8000-000000000001'; }
+function wp_script_is($handle, $state): bool { return isset($GLOBALS['registered_scripts'][$handle]); }
+function rest_url($path): string { return home_url('/index.php/wp-json/' . $path); }
 function wp_parse_url($url) { return parse_url($url); }
 function untrailingslashit($value): string { return rtrim($value, '/'); }
 function esc_url_raw($value, $protocols = null): string { return $value; }
@@ -79,4 +83,18 @@ function check($condition, $message): void {
 check($enqueued_scripts === ['calorieapp-identity-bridge-embed', 'calorieapp-identity-bridge-site-session'], 'The full bridge queued by the shortcode must precede the return controller.');
 $admin = true;
 check(render($bridge) === '', 'Do not add public session controls in wp-admin.');
+$admin = false;
+foreach ([false, true] as $signed_in) {
+    $embed = $bridge->render_shortcode(['src' => 'https://app.calorietoken.net', 'locale' => 'nl', 'height' => '900']);
+    check(substr_count($embed, '<iframe') === 1, 'The startup cover must not add another application frame.');
+    check(substr_count($embed, 'data-calorieapp-embed-loading') === 1, 'Render one startup cover before the iframe loads.');
+    check(strpos($embed, 'data-calorieapp-embed-loading') < strpos($embed, '<iframe'), 'The startup cover is present in server-rendered markup.');
+    check(str_contains($embed, 'data-app-origin="https://app.calorietoken.net"') && str_contains($embed, 'data-locale="nl"'), 'Retain the existing origin and locale binding.');
+    check(str_contains($embed, 'height: 900px') && str_contains($embed, 'loading="eager"'), 'Retain the existing iframe sizing and loading strategy.');
+    check(str_contains($embed, '<noscript>') && str_contains($embed, 'visibility:visible!important'), 'Do not leave the cover blocking the frame when scripts are disabled.');
+    check(strpos($embed, 'calorieapp-login-modal') > strpos($embed, '</iframe>'), 'Keep the sign-in modal outside the startup cover.');
+    if ($signed_in) {
+        check(strpos($embed, 'calorieapp-site-logout') < strpos($embed, 'data-calorieapp-frame-stage'), 'Keep the working logout control outside the covered frame.');
+    }
+}
 echo "WordPress site-session renderer checks passed.\n";
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index c634107..e9c6efa 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,6 +41,31 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
+Version 0.3.26 corrects the remaining market and shortcut layout differences
+reported after installing 0.3.25. Dedicated market ancestors are normalized up
+to the Brizy row, stopping before any shared account or content container. This
+removes Home's 28.1% mobile column and large margins without resizing the XUMM
+card. Existing CAL data validation, request sharing and fallback links remain.
+
+One compact shortcut stack replaces recognized fixed Home/App/Up/Down controls.
+It uses the original transparent app mark, Home's green arrows and purple home
+icon, and 48px desktop / 32px mobile artwork. Hidden current-page links take no
+space. Pages longer than two viewports also receive a working Down control;
+page length is reevaluated after late images and iframe height updates.
+
+The embedded app now has a server-rendered startup cover. It listens passively
+for the existing app handshake with matching origin, frame and locale. An iframe
+load alone does not dismiss the cover. Slow starts offer manual retry or reveal;
+there are no automatic reloads or new login requests. This covers the embedded
+frontend only. It cannot cover the separate top-level Render health page used
+by the accepted website sign-in route, which is deliberately unchanged.
+
+The authentication/session JavaScript and header assets are byte-identical to
+0.3.25. IntegratedLogin changes only its shortcode presentation and asset-version
+fallback; server authentication methods are unchanged. No app-main changes,
+WordPress content writes, merge or deployment are included. Native desktop/mobile
+review remains necessary; source/behavior tests are not live visual verification.
+
 Version 0.3.25 applies the CAL market renderer to existing LiveCoinWatch slots
 throughout the public website, including late-loaded cards. The replacement
 stays in its existing position, shares the same cached CAL feed and releases
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
index c7ad48e..ada0249 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
@@ -263,28 +263,41 @@
   .calorieapp-shared-social-track { scroll-behavior: auto; }
 }
 
-/* Original Home shortcut geometry, captured from the existing Brizy stylesheet:
-   48px desktop icons, 32px mobile icons, original colours and fixed slots. */
+/* Original Home icons and colours in one stack: omitted slots take no space. */
 .calorieapp-page-tools[hidden],
 .calorieapp-page-tool-position[hidden] { display: none !important; }
-.calorieapp-page-tool-position {
+.calorieapp-page-tools {
   position: fixed;
   z-index: 11;
   display: flex;
-  box-sizing: border-box;
-  width: 30%;
+  flex-direction: column-reverse;
   align-items: center;
-  justify-content: center;
-  right: 81px;
-  top: auto;
-  left: auto;
-  margin: 10px 0;
+  gap: 6px;
+  width: 48px;
+  right: calc(81px + 15vw - 24px);
+  bottom: max(22px, env(safe-area-inset-bottom));
+  margin: 0;
   padding: 0;
+  border: 0;
+  background: transparent;
+  box-shadow: none;
   pointer-events: none;
 }
-.calorieapp-page-tool-position-home { bottom: 12px; color: #505ba9; }
-.calorieapp-page-tool-position-app { bottom: 66px; color: #008d36; }
-.calorieapp-page-tool-position-top { bottom: 120px; color: #3dbfe8; }
+.calorieapp-page-tool-position {
+  position: static;
+  display: flex;
+  flex: 0 0 auto;
+  align-items: center;
+  justify-content: center;
+  box-sizing: border-box;
+  width: 100%;
+  margin: 0;
+  padding: 0;
+}
+.calorieapp-page-tool-position-home { color: #505ba9; }
+.calorieapp-page-tool-position-app,
+.calorieapp-page-tool-position-top,
+.calorieapp-page-tool-position-bottom { color: #008d36; }
 .calorieapp-page-tool {
   display: block;
   margin: 0;
@@ -316,22 +329,62 @@
   .calorieapp-page-tool:hover { color: rgba(249, 178, 51, 0.8) !important; }
 }
 @media (max-width: 767px) {
-  .calorieapp-page-tool-position { right: max(-35px, calc(20px - 15vw)); }
-  .calorieapp-page-tool-position-home { bottom: -8px; }
-  .calorieapp-page-tool-position-app { bottom: 25px; }
-  .calorieapp-page-tool-position-top { bottom: 60px; }
+  .calorieapp-page-tools {
+    width: 32px;
+    gap: 2px;
+    right: max(4px, calc(15vw - 51px));
+    bottom: max(2px, env(safe-area-inset-bottom));
+  }
   .calorieapp-page-tool-icon { width: 32px; height: 32px; }
 }
-/* Release only obsolete market-shortcode sizing; account wrappers are excluded. */
-.calorieapp-xpmarket-brizy-wrapper,
-.calorieapp-xpmarket-host,
-.calorieapp-xpmarket-host > div {
-  box-sizing: border-box;
+/* Only ancestors containing market cards and decoration receive this class.
+   Home previously constrained its mobile column to 28.1% with 100px margins. */
+.calorieapp-xpmarket-layout,
+.calorieapp-xpmarket-inner {
+  box-sizing: border-box !important;
   width: 100% !important;
   max-width: 100% !important;
+  min-width: 0 !important;
+  flex: 1 1 100% !important;
   min-height: 0 !important;
+  max-height: none !important;
   height: auto !important;
   margin: 0 !important;
+  padding: 0 !important;
+  transform: none !important;
+  animation: none !important;
+  opacity: 1 !important;
+  visibility: visible !important;
+}
+.calorieapp-xpmarket-inner { display: flex; justify-content: center; }
+.calorieapp-xpmarket-layout { justify-content: center !important; }
+
+/* Presentation only: the login modal and session controls remain outside. */
+.calorieapp-frame-stage { position: relative; width: 100%; }
+.calorieapp-frame-stage[data-calorieapp-frame-loading] .calorieapp-embed-frame { visibility: hidden; }
+.calorieapp-embed-loading[hidden],
+.calorieapp-loading-actions[hidden] { display: none !important; }
+.calorieapp-embed-loading {
+  position: absolute;
+  inset: 0;
+  z-index: 2;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  box-sizing: border-box;
+  padding: clamp(32px, 8vw, 72px) 20px;
+  border-radius: 20px;
+  background: #fff;
+  color: #505ba9;
+  font-family: Amiri, Georgia, serif;
+  text-align: center;
 }
-.calorieapp-xpmarket-brizy-wrapper { justify-content: center !important; }
-.calorieapp-xpmarket-host > div { display: flex; justify-content: center; }
+.calorieapp-loading-logo { width: 64px; height: 64px; object-fit: contain; margin-bottom: 18px; }
+.calorieapp-embed-loading strong { color: #008d36; font-size: 26px; line-height: 1.3; }
+.calorieapp-embed-loading p { max-width: 440px; margin: 12px 0 20px; font-size: 18px; line-height: 1.5; }
+.calorieapp-loading-progress { width: min(180px, 100%); height: 5px; border-radius: 5px; background: #f9b233; animation: calorieapp-loading-pulse 1.6s ease-in-out infinite; }
+.calorieapp-loading-actions { display: flex; flex-wrap: wrap; justify-content: center; gap: 12px; margin-top: 20px; }
+.calorieapp-loading-actions button { border: 2px solid #505ba9; border-radius: 18px; background: #fff; color: #505ba9; padding: 9px 18px; font: inherit; cursor: pointer; }
+.calorieapp-loading-actions button:focus-visible { outline: 3px solid #f9b233; outline-offset: 3px; }
+@keyframes calorieapp-loading-pulse { 50% { opacity: 0.35; } }
+@media (prefers-reduced-motion: reduce) { .calorieapp-loading-progress { animation: none; } }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
index 9384edb..6923aab 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
@@ -79,13 +79,28 @@
     widget.setAttribute("data-state", "ready");
   }
 
+  function marketOnly(node) {
+    var copy = node.cloneNode(true);
+    copy.querySelectorAll('script, style, .brz-bg, .livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]').forEach(function (item) { item.remove(); });
+    return !copy.textContent.trim() && !copy.querySelector('a, img, svg, iframe, video, audio, canvas, input, button, select, textarea, .xl-card, [data-calorieapp-embed]');
+  }
+
   function normalizeMarketHost(widget) {
     var host = widget.closest('.brz-wp-shortcode');
     // A combined shortcode containing an account card must keep its own sizing.
-    if (!host || host.querySelector('.xl-card, [data-calorieapp-embed]')) return;
+    if (!host || !marketOnly(host)) return;
     host.classList.add('calorieapp-xpmarket-host');
-    var wrapper = host.closest('.brz-wrapper');
-    if (wrapper) wrapper.classList.add('calorieapp-xpmarket-brizy-wrapper');
+    if (widget.parentElement !== host && marketOnly(widget.parentElement)) {
+      widget.parentElement.classList.add('calorieapp-xpmarket-inner');
+    }
+    // Old mobile widths and negative margins also live ABOVE the shortcode.
+    // Stop before any ancestor shared with account controls or page content.
+    for (var node = host; node && node !== document.body; node = node.parentElement) {
+      if (node.matches('.brz-container, .brz-section, section') || !marketOnly(node)) break;
+      if (node.matches('.brz-wp-shortcode, .brz-wrapper, .brz-column__items, .brz-columns, .brz-row, .brz-row__container')) {
+        node.classList.add('calorieapp-xpmarket-layout');
+      }
+    }
   }
 
   function enhanceXpMarketPriceWidgets() {
@@ -100,9 +115,7 @@
       "https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY";
     var widgets = Array.from(document.querySelectorAll(
       ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]"
-    )).filter(function (widget) {
-      return widget.getAttribute("data-calorieapp-xpmarket-widget") !== "1";
-    }).map(function (widget) {
+    )).map(function (widget) {
       if (widget.classList.contains("livecoinwatch-widget-1")) {
         // Replace the node so an already-running legacy script cannot refill it.
         var replacement = document.createElement("div");
@@ -113,6 +126,8 @@
       }
       normalizeMarketHost(widget);
       return widget;
+    }).filter(function (widget) {
+      return widget.getAttribute("data-calorieapp-xpmarket-widget") !== "1";
     });
     if (!widgets.length) {
       return;
@@ -231,7 +246,68 @@
       });
   }
 
+  function initializeEmbedLoading() {
+    document.querySelectorAll('[data-calorieapp-embed]').forEach(function (root) {
+      var stage = root.querySelector('[data-calorieapp-frame-stage]');
+      var frame = root.querySelector('.calorieapp-embed-frame');
+      var mask = root.querySelector('[data-calorieapp-embed-loading]');
+      if (!stage || !frame || !mask || mask.getAttribute('data-loading-ready') === '1') return;
+      var appOrigin;
+      try {
+        appOrigin = new URL(root.getAttribute('data-app-origin'));
+        if (appOrigin.protocol !== 'https:' || new URL(frame.getAttribute('src')).origin !== appOrigin.origin) return;
+      } catch (_error) { return; }
+      mask.setAttribute('data-loading-ready', '1');
+      var message = mask.querySelector('[data-calorieapp-loading-message]');
+      var actions = mask.querySelector('[data-calorieapp-loading-actions]');
+      var retry = mask.querySelector('[data-calorieapp-loading-retry]');
+      var reveal = mask.querySelector('[data-calorieapp-loading-reveal]');
+      var timer = null;
+      var complete = false;
+      var initialMessage = message.textContent;
+
+      function show() {
+        complete = false;
+        mask.hidden = false;
+        stage.setAttribute('data-calorieapp-frame-loading', '1');
+        stage.setAttribute('aria-busy', 'true');
+        message.textContent = initialMessage;
+        actions.hidden = true;
+        if (timer !== null) window.clearTimeout(timer);
+        timer = window.setTimeout(function () {
+          timer = null;
+          if (complete) return;
+          message.textContent = mask.getAttribute('data-slow-message');
+          actions.hidden = false;
+        }, 45000);
+      }
+      function finish() {
+        complete = true;
+        if (timer !== null) window.clearTimeout(timer);
+        timer = null;
+        mask.hidden = true;
+        stage.removeAttribute('data-calorieapp-frame-loading');
+        stage.setAttribute('aria-busy', 'false');
+      }
+      window.addEventListener('message', function (event) {
+        if (event.source !== frame.contentWindow || event.origin !== appOrigin.origin || !event.data ||
+            event.data.type !== 'calorieapp:bridge:initialized' || event.data.locale !== root.getAttribute('data-locale')) return;
+        finish();
+      });
+      retry.addEventListener('click', function () {
+        if (complete) return;
+        show();
+        frame.setAttribute('src', frame.getAttribute('src'));
+      });
+      reveal.addEventListener('click', finish);
+      // An iframe load can be the hosting provider's wake-up screen. Only the
+      // existing origin/source/locale-bound app handshake dismisses this mask.
+      show();
+    });
+  }
+
   function initialize() {
+    initializeEmbedLoading();
     enhanceXpMarketPriceWidgets();
     enhanceSharedFooterCarousels();
     window.addEventListener("load", enhanceXpMarketPriceWidgets);
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
index 0417f43..db883e1 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
@@ -4,26 +4,21 @@
   function path(url) {
     return url.pathname.replace(/\/index\.php(?=\/|$)/, "").replace(/\/+$/, "") || "/";
   }
-
-  function isFloating(container) {
+  function floatingRoot(container) {
     for (var node = container; node && node !== document.body; node = node.parentElement) {
-      if (window.getComputedStyle(node).position === "fixed") return true;
+      if (window.getComputedStyle(node).position === "fixed") return node;
     }
-    return false;
+    return null;
   }
-
-  function isVisible(container) {
-    if (container.getClientRects && !container.getClientRects().length) return false;
-    for (var node = container; node && node !== document.body; node = node.parentElement) {
-      var style = window.getComputedStyle(node);
-      if (node.hidden || style.display === "none" || style.visibility === "hidden") return false;
-    }
-    return true;
+  function pageHeight() {
+    return Math.max(document.documentElement.scrollHeight, document.body.scrollHeight);
   }
 
   function init() {
     var config = document.querySelector("[data-calorieapp-site-integration]");
-    if (!config || config.dataset.navigationReady === "1") return;
+    var shortcuts = document.querySelector("[data-calorieapp-fallback-shortcuts]");
+    // Do not suppress an old control unless the replacement exists.
+    if (!config || !shortcuts || config.dataset.navigationReady === "1") return;
     var homePage, appPage, appLogo, legacyAppPage;
     var origin = new URL(window.location.href).origin;
     try {
@@ -37,132 +32,94 @@
     } catch (_error) { return; }
 
     config.dataset.navigationReady = "1";
-    var hiddenByNavigation = new Map();
     var observer = null;
     var scheduled = false;
-    var fallback = document.querySelector("[data-calorieapp-fallback-shortcuts]");
-
-    function hide(container) {
-      if (!hiddenByNavigation.has(container)) {
-        hiddenByNavigation.set(container, {
-          hidden: container.hidden,
-          display: container.style.getPropertyValue("display"),
-          priority: container.style.getPropertyPriority("display")
+    var hiddenByNavigation = new Map();
+    function hide(node) {
+      if (!hiddenByNavigation.has(node)) {
+        hiddenByNavigation.set(node, {
+          hidden: node.hidden,
+          display: node.style.getPropertyValue("display"),
+          priority: node.style.getPropertyPriority("display")
         });
       }
-      container.hidden = true;
-      container.style.setProperty("display", "none", "important");
+      node.hidden = true;
+      node.style.setProperty("display", "none", "important");
     }
-
-    function restore() {
-      hiddenByNavigation.forEach(function (saved, container) {
-        container.hidden = saved.hidden;
-        if (saved.display) container.style.setProperty("display", saved.display, saved.priority);
-        else container.style.removeProperty("display");
-      });
-      hiddenByNavigation.clear();
-    }
-
     function reconcile() {
       scheduled = false;
-      // Avoid observing our own image replacements and visibility corrections.
       if (observer) observer.disconnect();
-      restore();
+      hiddenByNavigation.forEach(function (saved, node) {
+        node.hidden = saved.hidden;
+        if (saved.display) node.style.setProperty("display", saved.display, saved.priority);
+        else node.style.removeProperty("display");
+      });
+      hiddenByNavigation.clear();
       var currentPage = new URL(window.location.href);
       var onHome = config.dataset.isHome === "1" || path(currentPage) === path(homePage);
       var onApp = !!document.querySelector("[data-calorieapp-embed]") || path(currentPage) === path(appPage);
-      var found = { home: false, app: false, top: false };
-
+      var longPage = pageHeight() > Math.max(window.innerHeight, 1) * 2;
+      var replaced = new Set();
+      var roots = new Set();
       document.querySelectorAll(".brz-icon__container a[href]").forEach(function (link) {
         var container = link.closest(".brz-icon__container");
-        if (!container || !isFloating(container)) return;
+        var root = container && floatingRoot(container);
+        if (!root) return;
         var destination;
         try { destination = new URL(link.href, window.location.href); }
         catch (_error) { return; }
-        if (destination.origin !== origin || destination.username || destination.password || destination.search) return;
-
+        if (destination.origin !== origin || destination.username || destination.password) return;
         var glyph = link.querySelector("use");
         var glyphHref = glyph && (glyph.getAttribute("href") || glyph.getAttribute("xlink:href") || "");
-        if ((destination.hash || link.getAttribute("href") === "#") &&
-            (glyphHref && /square-upload\.svg#nc_icon$/.test(glyphHref))) {
-          if (isVisible(container)) found.top = true;
-          return;
-        }
-        if (destination.hash || link.getAttribute("href") === "#") return;
-
-        var role = path(destination) === path(homePage) ? "home" :
-          (path(destination) === path(appPage) || path(destination) === path(legacyAppPage) ? "app" : "");
-        if (!role) return;
-        if ((role === "home" && onHome) || (role === "app" && onApp)) { hide(container); return; }
-
-        if (role === "home") {
-          link.title = "Home";
-          link.setAttribute("aria-label", "Go to Home");
-        } else {
-          var icon = link.querySelector(".brz-icon-svg");
-          if (!icon) return;
-          if (icon.tagName !== "IMG" || icon.getAttribute("src") !== appLogo.href) {
-            var image = document.createElement("img");
-            image.src = appLogo.href;
-            image.alt = "";
-            image.setAttribute("aria-hidden", "true");
-            image.className = "brz-icon-svg";
-            image.style.width = "1em";
-            image.style.height = "1em";
-            image.style.objectFit = "contain";
-            image.style.background = "transparent";
-            image.style.display = "block";
-            icon.replaceWith(image);
-          }
-          link.href = appPage.href;
-          link.title = "CalorieApp";
-          link.setAttribute("aria-label", "Open CalorieApp");
-        }
-        if (isVisible(container)) {
-          if (found[role]) hide(container);
-          else found[role] = true;
-        }
+        var anchor = destination.hash || link.getAttribute("href") === "#";
+        var scrollControl = anchor && path(destination) === path(currentPage) &&
+          /square-(upload|download)\.svg#nc_icon$/.test(glyphHref || "");
+        var pageControl = !anchor && !destination.search &&
+          [path(homePage), path(appPage), path(legacyAppPage)].indexOf(path(destination)) !== -1;
+        if (!scrollControl && !pageControl) return;
+        hide(container);
+        replaced.add(link);
+        roots.add(root);
       });
-
-      if (fallback) {
-        var visible = false;
-        fallback.querySelectorAll("[data-calorieapp-shortcut]").forEach(function (slot) {
-          var role = slot.getAttribute("data-calorieapp-shortcut");
-          var show = !found[role] && !(role === "home" && onHome) && !(role === "app" && onApp);
-          slot.hidden = !show;
-          visible = visible || show;
-        });
-        fallback.hidden = !visible;
-      }
+      // Empty fixed wrappers otherwise retain invisible hit areas and old slots.
+      roots.forEach(function (root) {
+        var controls = Array.from(root.querySelectorAll("a, button, input, select, textarea, iframe"));
+        if (controls.length && controls.every(function (control) { return replaced.has(control); })) hide(root);
+      });
+      shortcuts.querySelectorAll("[data-calorieapp-shortcut]").forEach(function (slot) {
+        var role = slot.getAttribute("data-calorieapp-shortcut");
+        slot.hidden = (role === "home" && onHome) || (role === "app" && onApp) || (role === "bottom" && !longPage);
+      });
+      shortcuts.hidden = false;
       if (observer) observer.observe(document.body, {
-        childList: true, subtree: true, attributes: true, attributeFilter: ["class", "style"]
+        childList: true, subtree: true, attributes: true, attributeFilter: ["class", "style", "href"]
       });
     }
-
     function schedule() {
       if (scheduled) return;
       scheduled = true;
       window.requestAnimationFrame(reconcile);
     }
-
-    if (fallback) {
-      var top = fallback.querySelector("[data-calorieapp-scroll-top]");
-      if (top) top.addEventListener("click", function (event) {
+    shortcuts.querySelectorAll("[data-calorieapp-scroll]").forEach(function (button) {
+      button.addEventListener("click", function (event) {
         event.preventDefault();
         window.scrollTo({
-          top: 0,
-          behavior: window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth"
+          top: button.getAttribute("data-calorieapp-scroll") === "bottom" ? pageHeight() : 0,
+          behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth"
         });
       });
-    }
+    });
     if (window.MutationObserver) observer = new window.MutationObserver(schedule);
     reconcile();
+    if (window.ResizeObserver) {
+      var resizeObserver = new window.ResizeObserver(schedule);
+      resizeObserver.observe(document.body);
+    }
     window.addEventListener("load", schedule);
     window.addEventListener("pageshow", schedule);
     window.addEventListener("resize", schedule);
     window.addEventListener("popstate", schedule);
   }
-
   if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", init, { once: true });
   else init();
 })();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 59a78f9..2d500ce 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.25
+ * Version: 0.3.26
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.25');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.26');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index 455a7d6..f8cf7ac 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.25';
+            : '0.3.26';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
@@ -242,6 +242,18 @@ class="calorieapp-site-logout"
                 </div>
             <?php endif; ?>
 
+            <div class="calorieapp-frame-stage" data-calorieapp-frame-stage data-calorieapp-frame-loading="1" aria-busy="true">
+            <div class="calorieapp-embed-loading" data-calorieapp-embed-loading role="status" aria-live="polite" data-slow-message="<?php echo esc_attr__('CalorieApp is taking longer to start. You can keep waiting or try again.', 'calorieapp-identity-bridge'); ?>">
+                <img class="calorieapp-loading-logo" src="<?php echo esc_url(plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE) . 'assets/calorieapp-logo.svg'); ?>" width="64" height="64" alt="" aria-hidden="true">
+                <strong><?php echo esc_html__('CalorieApp is starting', 'calorieapp-identity-bridge'); ?></strong>
+                <p data-calorieapp-loading-message><?php echo esc_html__('Your food log will appear here when the app is ready.', 'calorieapp-identity-bridge'); ?></p>
+                <div class="calorieapp-loading-progress" aria-hidden="true"></div>
+                <div class="calorieapp-loading-actions" data-calorieapp-loading-actions hidden>
+                    <button type="button" data-calorieapp-loading-retry><?php echo esc_html__('Try again', 'calorieapp-identity-bridge'); ?></button>
+                    <button type="button" data-calorieapp-loading-reveal><?php echo esc_html__('Show app', 'calorieapp-identity-bridge'); ?></button>
+                </div>
+            </div>
+            <noscript><style>.calorieapp-embed-loading{display:none!important}.calorieapp-frame-stage .calorieapp-embed-frame{visibility:visible!important}</style></noscript>
             <iframe
                 class="calorieapp-embed-frame"
                 src="<?php echo esc_url($iframe_src); ?>"
@@ -250,6 +262,7 @@ class="calorieapp-embed-frame"
                 loading="eager"
                 referrerpolicy="strict-origin-when-cross-origin"
             ></iframe>
+            </div>
 
             <div class="calorieapp-login-modal" hidden role="dialog" aria-modal="true" aria-labelledby="<?php echo esc_attr($instance_id); ?>-title">
                 <div class="calorieapp-login-card">
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
index f7c6861..fc43fb3 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
@@ -35,7 +35,7 @@ public function enqueue_assets(): void {
         wp_enqueue_script('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.js', [], $version, true);
     }
 
-    /** Fill only missing shortcuts; the browser keeps existing Brizy controls. */
+    /** One compact stack replaces the page-specific fixed shortcut slots. */
     public function render_shortcuts(): void {
         if ($this->shortcuts_rendered || is_admin() || is_feed() || is_embed()) {
             return;
@@ -55,8 +55,13 @@ public function render_shortcuts(): void {
                     <img class="calorieapp-page-tool-icon" src="<?php echo esc_url($logo); ?>" alt="" aria-hidden="true" width="48" height="48">
                 </a>
             </div>
+            <div class="calorieapp-page-tool-position calorieapp-page-tool-position-bottom" data-calorieapp-shortcut="bottom" hidden>
+                <a class="calorieapp-page-tool" href="#" data-calorieapp-scroll="bottom" aria-label="<?php echo esc_attr__('Go to bottom', 'calorieapp-identity-bridge'); ?>" title="<?php echo esc_attr__('Go to bottom', 'calorieapp-identity-bridge'); ?>">
+                    <svg class="calorieapp-page-tool-icon" aria-hidden="true" focusable="false"><use href="<?php echo esc_url($glyphs . 'square-download.svg#nc_icon'); ?>"></use></svg>
+                </a>
+            </div>
             <div class="calorieapp-page-tool-position calorieapp-page-tool-position-top" data-calorieapp-shortcut="top" hidden>
-                <a class="calorieapp-page-tool" href="#" data-calorieapp-scroll-top aria-label="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>" title="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>">
+                <a class="calorieapp-page-tool" href="#" data-calorieapp-scroll="top" aria-label="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>" title="<?php echo esc_attr__('Back to top', 'calorieapp-identity-bridge'); ?>">
                     <svg class="calorieapp-page-tool-icon" aria-hidden="true" focusable="false"><use href="<?php echo esc_url($glyphs . 'square-upload.svg#nc_icon'); ?>"></use></svg>
                 </a>
             </div>

From 8e5dd8fccc45aac552afdf831d62718e39614c18 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Mon, 7 Sep 2026 18:45:26 +0200
Subject: [PATCH 04/12] Bundle mobile layout and donation navigation fixes in
 bridge 0.3.27

---
 .../workflows/bridge-maintenance-checks.yml   |   4 +
 docs/STEP_3_CYCLE_1.md                        |  83 ++++++++
 .../tests/wordpress_donation_return.test.php  |  42 +++++
 .../wordpress_legal_footer_post.test.php      |  44 +++++
 tools/tests/wordpress_site_layout.test.mjs    |  38 +++-
 .../calorieapp-identity-bridge/README.md      |  24 ++-
 .../assets/calorieapp-site-layout.css         | 177 ++++++++++++++++--
 .../assets/calorieapp-site-layout.js          |  32 +++-
 .../calorieapp-identity-bridge.php            |   4 +-
 ...ieapp-identity-bridge-integrated-login.php |   2 +-
 ...tity-bridge-legal-footer-compatibility.php |  24 ++-
 .../class-calorieapp-identity-bridge.php      |  24 +++
 12 files changed, 470 insertions(+), 28 deletions(-)
 create mode 100644 docs/STEP_3_CYCLE_1.md
 create mode 100644 tools/tests/wordpress_donation_return.test.php
 create mode 100644 tools/tests/wordpress_legal_footer_post.test.php

diff --git a/.github/workflows/bridge-maintenance-checks.yml b/.github/workflows/bridge-maintenance-checks.yml
index dbf2d3c..7b7fce2 100644
--- a/.github/workflows/bridge-maintenance-checks.yml
+++ b/.github/workflows/bridge-maintenance-checks.yml
@@ -26,6 +26,10 @@ jobs:
         run: find wordpress-plugins/calorieapp-identity-bridge -name '*.php' -type f -print0 | xargs -0 -n1 php -l
       - name: Exercise WordPress page rendering
         run: php tools/tests/wordpress_site_session_markup.test.php
+      - name: Preserve non-page responses while correcting donation footers
+        run: php tools/tests/wordpress_legal_footer_post.test.php
+      - name: Return successful donation forms to a reloadable page
+        run: php tools/tests/wordpress_donation_return.test.php
       - name: Check the CalorieApp footer and public market data
         run: |
           php tools/tests/wordpress_page_ending.test.php
diff --git a/docs/STEP_3_CYCLE_1.md b/docs/STEP_3_CYCLE_1.md
new file mode 100644
index 0000000..63c406b
--- /dev/null
+++ b/docs/STEP_3_CYCLE_1.md
@@ -0,0 +1,83 @@
+# Step 3 — first bundled implementation candidate
+
+Candidate: Identity Bridge **0.3.27**, based on the uninstalled 0.3.26 work in
+PR #133. Keep its base `fix/desktop-widget-column-fit` (#131), ultimately the
+accepted maintenance line. Never merge that maintenance history into app main.
+The user requested fewer cycles and plugin uploads after supplying 99 mobile
+screenshots, including blog detail links and public usecase pages.
+
+## Included website work
+
+- Retain the prepared CAL market sizing, compact original shortcut artwork,
+  Down control on long pages and passive embedded-app startup cover from 0.3.26.
+- Apply shared header rules to the public XUMM shortcode immediately, including
+  the narrow Richlist header; initialize a card inserted after DOM readiness once.
+- Wrap Richlist tables for horizontal scrolling without changing any rows,
+  wallet addresses, sorting or destination links. The wrapper is keyboard reachable.
+- Keep blog slider pagination in one horizontally scrollable row. All native
+  slider controls and the separate blog/article links remain available.
+- Refine mobile open-price donation fields/buttons, cart table wrapping and
+  the checkout terms area's text size. Rules target the actual Brizy/WooCommerce
+  classes found in the public HTML and preserve the existing design language.
+- Extend the existing footer-label correction to full product/cart HTML after
+  POST. Checkout, AJAX, REST, admin, JSON and fragment responses are excluded.
+- Finish a successful open-price donation submission with a GET of the same
+  product. Existing redirects and the WooCommerce cart-redirect setting win.
+  Prices, quantities, notices, order state and gateway behavior remain owned
+  by WooCommerce and the installed donation/payment plugins.
+
+## Evidence and limits
+
+Public product HTML posts `wcj_open_price` to the donation product itself.
+[WooCommerce 11.0.1's form handler](https://github.com/woocommerce/woocommerce/blob/11.0.1/plugins/woocommerce/includes/class-wc-form-handler.php)
+invokes `woocommerce_add_to_cart_redirect` only after a successful add with no
+error notices. Without an explicit URL or its optional cart redirect, it can
+render the POST response directly. The narrow bridge callback supplies the
+same-product GET destination at that success boundary. This addresses a known
+resubmission path consistent with the screenshot's `ERR_CACHE_MISS`; it is not
+an end-to-end proof of the user's particular browser history.
+
+The public Xumm payment JavaScript file contained no cancellation handler.
+No live checkout was submitted and no payment request was signed, declined or
+cancelled in this work. The faded checkout on return therefore remains an
+explicit live acceptance item, not a claimed gateway fix.
+
+The header and layout changes are supported by screenshot and public HTML
+inspection. Automated DOM fixtures are not browser rendering. Browser tab
+listing failed before inspection, so mobile/desktop appearance remains pending.
+The startup cover applies only to the embedded frontend; the separate top-level
+Render startup page on the accepted login route remains outside this change.
+
+## Separate CalorieApp update
+
+PR #132 against app main retains the prepared product-local portion controls
+and CalorieApp wallpaper and adds a bounded food-search deadline correction.
+The existing backend may spend 10 seconds on its primary request, 15 on its
+fallback, plus queue time, while the old proxy stopped at 18 seconds and the
+browser at 20. Search now has a 45-second proxy limit and 50-second browser limit.
+Existing provider attempt/rate limits and every identity deadline are preserved.
+There are no extra automatic search retries. The captured first failure has no
+HTTP trace; the timing defect is demonstrated, its occurrence in that capture
+is an inference. App deployment is separate from installing this ZIP.
+
+## Focused acceptance after review
+
+1. On a narrow phone, check Home, Richlist, one blog detail and one usecase:
+   header stays readable, menu is usable, table scrolls, dots do not fill rows,
+   CAL card is sized correctly and shortcut controls reach the expected place.
+2. Enter a small donation, add it once, then use Back/Refresh from the resulting
+   page. Confirm the cart amount/quantity do not increase. Review checkout terms;
+   return after closing/declining an unsigned request and check checkout recovers.
+   Do not treat Close as proof of rejection or an unsigned request as payment.
+3. After inactivity, search once for Magnum. Observe completion or a useful
+   bounded failure. Select a result near the top of a long list; its portion
+   controls and feedback should stay beside that same product.
+4. Repeat the accepted joint login/logout once and check a representative
+   desktop width. Confirm the original page/browser and both sessions behave
+   as before.
+
+The source, behavior and package gates run in the existing PR workflows.
+Keep the current installed package available for rollback. This candidate does
+not publish prepared page copy, translate content, merge PRs or deploy services.
+The second cycle handles the full page/article/usecase content inventory and
+remaining source-backed content/asset refinements.
diff --git a/tools/tests/wordpress_donation_return.test.php b/tools/tests/wordpress_donation_return.test.php
new file mode 100644
index 0000000..3d99b1c
--- /dev/null
+++ b/tools/tests/wordpress_donation_return.test.php
@@ -0,0 +1,42 @@
+<?php
+/** Exercise the callback reached after WooCommerce accepts a donation. */
+define('ABSPATH', __DIR__);
+$state = [];
+function is_admin(): bool { return !empty($GLOBALS['state']['admin']); }
+function wp_doing_ajax(): bool { return !empty($GLOBALS['state']['ajax']); }
+function get_option($name) { return $GLOBALS['state']['cart_redirect'] ?? 'no'; }
+function get_permalink($id): string { return 'https://calorietoken.net/index.php/product/donation/'; }
+class WC_Product {
+    private string $slug;
+    public function __construct(string $slug = 'donation') { $this->slug = $slug; }
+    public function get_slug(): string { return $this->slug; }
+    public function get_id(): int { return 1761; }
+}
+require __DIR__ . '/../../wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php';
+use CalorieApp\IdentityBridge\Plugin;
+
+function check(bool $condition, string $message): void {
+    if (!$condition) throw new RuntimeException($message);
+}
+$_SERVER['REQUEST_METHOD'] = 'POST';
+$_POST = ['wcj_open_price' => '0.01', 'quantity' => '1', 'add-to-cart' => '1761'];
+$before = $_POST;
+$donation = new WC_Product();
+check(Plugin::donation_return_url(false, $donation) === get_permalink(1761), 'Use a normal product URL after a successful donation POST.');
+check($_POST === $before, 'Preserve the amount, quantity and original submitted fields.');
+$existing = 'https://calorietoken.net/index.php/cart/';
+check(Plugin::donation_return_url($existing, $donation) === $existing, 'Respect an existing redirect.');
+foreach ([['admin' => true], ['ajax' => true], ['cart_redirect' => 'yes']] as $flags) {
+    $state = $flags;
+    check(Plugin::donation_return_url(false, $donation) === false, 'Leave admin, AJAX and configured WooCommerce cart redirects alone.');
+}
+$state = [];
+foreach ([null, new stdClass(), new WC_Product('merchandise')] as $product) {
+    check(Plugin::donation_return_url(false, $product) === false, 'Only the donation product qualifies.');
+}
+$_SERVER['REQUEST_METHOD'] = 'GET';
+check(Plugin::donation_return_url(false, $donation) === false, 'Do not redirect ordinary product views.');
+$_SERVER['REQUEST_METHOD'] = 'POST';
+$_POST = [];
+check(Plugin::donation_return_url(false, $donation) === false, 'Leave unrelated POST handlers alone.');
+echo "Donation return URL and preserved WooCommerce behavior passed.\n";
diff --git a/tools/tests/wordpress_legal_footer_post.test.php b/tools/tests/wordpress_legal_footer_post.test.php
new file mode 100644
index 0000000..8b1fd5d
--- /dev/null
+++ b/tools/tests/wordpress_legal_footer_post.test.php
@@ -0,0 +1,44 @@
+<?php
+/** Only normal donation product/cart HTML may use the POST footer correction. */
+define('ABSPATH', __DIR__);
+$state = [];
+function is_admin(): bool { return !empty($GLOBALS['state']['admin']); }
+function is_feed(): bool { return !empty($GLOBALS['state']['feed']); }
+function is_embed(): bool { return !empty($GLOBALS['state']['embed']); }
+function is_trackback(): bool { return false; }
+function wp_doing_ajax(): bool { return !empty($GLOBALS['state']['ajax']); }
+function is_cart(): bool { return !empty($GLOBALS['state']['cart']); }
+function is_product(): bool { return !empty($GLOBALS['state']['product']); }
+require __DIR__ . '/../../wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-legal-footer-compatibility.php';
+use CalorieApp\IdentityBridge\LegalFooterCompatibility;
+
+function check(bool $condition, string $message): void {
+    if (!$condition) throw new RuntimeException($message);
+}
+function response(string $method, array $flags, string $body): string {
+    $GLOBALS['state'] = $flags;
+    $_SERVER['REQUEST_METHOD'] = $method;
+    ob_start();
+    $level = ob_get_level();
+    (new LegalFooterCompatibility())->start_output_buffer();
+    echo $body;
+    if (ob_get_level() > $level) ob_end_flush();
+    return (string) ob_get_clean();
+}
+$body = '<!doctype html><html><body><form><input name="amount" value="0.01"></form>'
+    . '<footer>Chamber of Commerce KVK: 84216352 / © 2023 Calorie Token</footer></body></html>';
+foreach (['cart', 'product'] as $page) {
+    $result = response('POST', [$page => true], $body);
+    check(str_contains($result, 'Operator: ICTHendrikse · KVK 73774693'), 'Correct the footer after a donation form POST.');
+    check(str_contains($result, '<input name="amount" value="0.01">'), 'Preserve all form data.');
+}
+foreach ([[], ['checkout' => true], ['cart' => true, 'ajax' => true], ['product' => true, 'admin' => true]] as $flags) {
+    check(response('POST', $flags, $body) === $body, 'Do not rewrite checkout, AJAX, admin or other POST handlers.');
+}
+foreach (['GET', 'HEAD'] as $method) {
+    check(!str_contains(response($method, [], $body), '84216352'), 'Retain existing GET/HEAD footer correction.');
+}
+foreach (['', '{"detail":"© 2023 Calorie Token"}', '<div>© 2023 Calorie Token</div>'] as $payload) {
+    check(response('POST', ['product' => true], $payload) === $payload, 'Leave redirect bodies, JSON and fragments untouched.');
+}
+echo "Donation POST footer and preserved response boundaries passed.\n";
diff --git a/tools/tests/wordpress_site_layout.test.mjs b/tools/tests/wordpress_site_layout.test.mjs
index fd61525..2433fe3 100644
--- a/tools/tests/wordpress_site_layout.test.mjs
+++ b/tools/tests/wordpress_site_layout.test.mjs
@@ -44,25 +44,28 @@ function harness({ width = 360, height = 96, present = true, cardAfterMenu = fal
   const navigation = column(100), footer = column(1200);
   const document = {
     readyState: "complete", documentElement: { get clientWidth() { return state.width; } },
-    querySelectorAll: selector => selector === ".brz .xl-card" ? (present ? [card] : []) : [navigation, navigation, footer].map(item => ({ closest: () => item })),
+    body: {},
+    querySelectorAll: selector => selector === "table.xl-richlist" ? [] : selector === ".brz .xl-card" ? (present ? [card] : []) : [navigation, navigation, footer].map(item => ({ closest: () => item })),
   };
   const listeners = new Map(), raf = [], observed = [];
-  let resize;
+  let resize, mutation, disconnected = false;
   const window = {
     matchMedia: () => ({ get matches() { return state.width <= 768; } }),
     getComputedStyle: () => ({ marginTop: "20px" }),
     addEventListener: (name, callback) => listeners.set(name, callback),
     requestAnimationFrame: callback => raf.push(callback),
     ResizeObserver: true,
+    MutationObserver: true,
   };
   vm.runInNewContext(source, {
     window, document,
     ResizeObserver: class { constructor(callback) { resize = callback; } observe(element) { observed.push(element); } },
+    MutationObserver: class { constructor(callback) { mutation = callback; } observe() {} disconnect() { disconnected = true; } },
     fetch() { throw new Error("The layout must not send requests"); },
   });
   function flush() { while (raf.length) raf.shift()(); }
   function event(name) { listeners.get(name)?.(); flush(); }
-  return { state, card, wrapper, navigation, footer, observed, event, resize: () => { resize(); flush(); } };
+  return { state, card, wrapper, navigation, footer, observed, event, resize: () => { resize(); flush(); }, insertCard: () => { present = true; mutation(); flush(); }, disconnected: () => disconnected };
 }
 
 test("card growth and shrinkage preserve clearance without accumulating margins", () => {
@@ -116,3 +119,32 @@ test("a card following the menu in document flow does not push both farther down
     h.state.width = width; h.event("resize"); assertNaturalFlow();
   }
 });
+
+test("a late shortcode receives layout and disconnects its discovery observer", () => {
+  const h = harness({ present: false, width: 412, height: 164 });
+  assert.equal(h.observed.length, 0);
+  h.insertCard();
+  assert.equal(h.card.getBoundingClientRect().left, 66);
+  assert.equal(h.navigation.getBoundingClientRect().top - h.card.getBoundingClientRect().bottom, 12);
+  assert.equal(h.disconnected(), true);
+  h.state.height = 96; h.resize();
+  assert.equal(h.navigation.getBoundingClientRect().top - h.card.getBoundingClientRect().bottom, 12);
+});
+
+test("Richlist scrolling preserves the original table and does not duplicate wrappers", () => {
+  const wrappers = [], listeners = new Map();
+  const parent = { insertBefore(region, item) { assert.equal(item, table); wrappers.push(region); } };
+  const table = { parentNode: parent, rows: [{ balance: "unchanged" }], closest() { return this.parentNode.className === "calorieapp-richlist-scroll" ? this.parentNode : null; } };
+  const document = {
+    readyState: "complete",
+    querySelectorAll: selector => selector === "table.xl-richlist" ? [table] : [],
+    createElement: () => ({ attributes: {}, setAttribute(key, value) { this.attributes[key] = value; }, appendChild(item) { this.child = item; item.parentNode = this; } }),
+  };
+  vm.runInNewContext(source, { document, window: { addEventListener: (name, callback) => listeners.set(name, callback) } });
+  listeners.get("load")();
+  assert.equal(wrappers.length, 1);
+  assert.equal(wrappers[0].child, table);
+  assert.equal(wrappers[0].tabIndex, 0);
+  assert.equal(wrappers[0].attributes.role, "region");
+  assert.equal(table.rows[0].balance, "unchanged");
+});
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index e9c6efa..1be2276 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,6 +41,28 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
+Version 0.3.27 bundles the 0.3.26 candidate with the mobile screenshot findings.
+The shared header styles now apply to the actual XUMM shortcode before layout
+JavaScript runs, and a late-created account card is initialized once. Richlist
+tables receive a keyboard-accessible horizontal scroll container; their rows,
+addresses and links are preserved. Mobile donation controls, cart tables and
+terms use readable widths and spacing. Blog slider dots stay in one horizontally
+scrollable row, with every original destination retained.
+
+After WooCommerce successfully accepts the donation product's open-price POST,
+the default flow redirects to the same product's ordinary GET page. This avoids
+leaving a resubmittable product form response in history. Explicit redirects and
+the configured cart redirect remain authoritative. This hook does not calculate
+prices, create orders or alter the payment gateway. The existing legal footer
+correction also covers full product/cart HTML returned after POST, excluding
+AJAX, REST, checkout and non-page response bodies.
+
+The accepted authentication/session controllers are retained. The separate app
+PR adds its own search deadline correction, inline food logging and wallpaper;
+those changes cannot be installed through this WordPress ZIP. Native mobile
+review and the complete donation cancellation/return path are still pending.
+See `docs/STEP_3_CYCLE_1.md` in the repository for scope and acceptance checks.
+
 Version 0.3.26 corrects the remaining market and shortcut layout differences
 reported after installing 0.3.25. Dedicated market ancestors are normalized up
 to the Brizy row, stopping before any shared account or content container. This
@@ -60,7 +82,7 @@ there are no automatic reloads or new login requests. This covers the embedded
 frontend only. It cannot cover the separate top-level Render health page used
 by the accepted website sign-in route, which is deliberately unchanged.
 
-The authentication/session JavaScript and header assets are byte-identical to
+In 0.3.26, authentication/session JavaScript and header assets are byte-identical to
 0.3.25. IntegratedLogin changes only its shortcode presentation and asset-version
 fallback; server authentication methods are unchanged. No app-main changes,
 WordPress content writes, merge or deployment are included. Native desktop/mobile
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
index 51d2d8e..330c3f1 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
@@ -1,16 +1,18 @@
+/* The shortcode selectors also apply before script initialization, preventing
+   fixed/narrow legacy cards while a large page or delayed shortcode loads. */
 /* Public-header presentation only. Keep the account card within its desktop
    column. On phones the account card scrolls with the header. */
 @media (min-width: 769px) {
-  .brz .calorieapp-identity-wrapper .brz-wp-shortcode {
+  .brz :is(.calorieapp-identity-wrapper, .brz-wrapper:has(> .brz-wp-shortcode .xl-card)) .brz-wp-shortcode {
     width: 100% !important;
     max-width: 100% !important;
   }
 
-  .brz .calorieapp-identity-wrapper .brz-wp-shortcode > div {
+  .brz :is(.calorieapp-identity-wrapper, .brz-wrapper:has(> .brz-wp-shortcode .xl-card)) .brz-wp-shortcode > div {
     width: 100% !important;
   }
 
-  .brz .calorieapp-identity-card {
+  .brz :is(.calorieapp-identity-card, .brz-wp-shortcode .xl-card) {
     box-sizing: border-box;
     width: 100% !important;
     max-width: 220px !important;
@@ -20,7 +22,7 @@
 }
 
 @media (max-width: 768px) {
-  .brz .calorieapp-identity-wrapper {
+  .brz :is(.calorieapp-identity-wrapper, .brz-wrapper:has(> .brz-wp-shortcode .xl-card)) {
     position: relative !important;
     inset: auto !important;
     box-sizing: border-box;
@@ -33,18 +35,18 @@
     transform: translateX(var(--calorieapp-identity-center-shift, 0px)) !important;
   }
 
-  .brz .calorieapp-identity-wrapper .brz-wp-shortcode {
+  .brz :is(.calorieapp-identity-wrapper, .brz-wrapper:has(> .brz-wp-shortcode .xl-card)) .brz-wp-shortcode {
     width: 100% !important;
     max-width: 100% !important;
   }
 
-  .brz .calorieapp-identity-wrapper .brz-wp-shortcode > div {
+  .brz :is(.calorieapp-identity-wrapper, .brz-wrapper:has(> .brz-wp-shortcode .xl-card)) .brz-wp-shortcode > div {
     width: 100% !important;
     margin-right: auto !important;
     margin-left: auto !important;
   }
 
-  .brz .calorieapp-identity-card {
+  .brz :is(.calorieapp-identity-card, .brz-wp-shortcode .xl-card) {
     box-sizing: border-box;
     width: 100% !important;
     max-width: 100% !important;
@@ -53,35 +55,35 @@
     font-size: 13px;
   }
 
-  .calorieapp-identity-card .xl-card-header {
+  .brz .xl-card .xl-card-header {
     padding: 3px 8px;
     line-height: 18px;
   }
 
-  .calorieapp-identity-card .xl-card-wallet {
+  .brz .xl-card .xl-card-wallet {
     overflow: hidden;
     text-overflow: ellipsis;
     white-space: nowrap;
   }
 
-  .calorieapp-identity-card .xl-card-body {
+  .brz .xl-card .xl-card-body {
     display: flow-root;
     min-height: 52px;
     padding: 6px 8px;
     overflow-wrap: anywhere;
   }
 
-  .calorieapp-identity-card .xl-card-body div { line-height: 16px; }
-  .calorieapp-identity-card .xl-card-body > .xl-card-avatar { width: 52px; margin-right: 8px; }
-  .calorieapp-identity-card .xl-card-avatar img { width: 100%; height: auto; margin-right: 0; }
-  .calorieapp-identity-card .xl-card-avatar a { display: block; min-height: 44px; }
+  .brz .xl-card .xl-card-body div { line-height: 16px; }
+  .brz .xl-card .xl-card-body > .xl-card-avatar { width: 52px; margin-right: 8px; }
+  .brz .xl-card .xl-card-avatar img { width: 100%; height: auto; margin-right: 0; }
+  .brz .xl-card .xl-card-avatar a { display: block; min-height: 44px; }
 
-  .brz .calorieapp-identity-card > .calorieapp-site-session-actions {
+  .brz :is(.calorieapp-identity-card, .brz-wp-shortcode .xl-card) > .calorieapp-site-session-actions {
     clear: both;
     margin: 4px 8px 8px;
   }
 
-  .brz .calorieapp-identity-card .calorieapp-site-logout {
+  .brz :is(.calorieapp-identity-card, .brz-wp-shortcode .xl-card) .calorieapp-site-logout {
     min-height: 44px;
     padding: 8px 12px;
     font-size: 13px;
@@ -90,3 +92,146 @@
 
   .brz .calorieapp-brizy-menu-column { margin-top: var(--calorieapp-menu-margin) !important; }
 }
+
+/* Keep the complete rank, address and balance readable in a scrollable region.
+   Reuse the existing table and its links, rows and colour scheme. */
+.brz :is(.brz-columns, .brz-column__items, .brz-wrapper, .brz-wp-shortcode):has(table.xl-richlist) {
+  min-width: 0;
+  max-width: 100%;
+}
+.brz .calorieapp-richlist-scroll {
+  width: 100%;
+  max-width: 100%;
+  overflow-x: auto;
+  -webkit-overflow-scrolling: touch;
+}
+.brz .calorieapp-richlist-scroll:focus-visible {
+  outline: 2px solid #505ba9;
+  outline-offset: 2px;
+}
+.brz .calorieapp-richlist-scroll table.xl-richlist {
+  width: 100%;
+  min-width: 560px;
+  table-layout: auto;
+}
+.brz .calorieapp-richlist-scroll :is(th, td) {
+  white-space: nowrap;
+  overflow-wrap: normal;
+  word-break: normal;
+  padding: 8px 10px;
+}
+.brz .calorieapp-richlist-scroll td:first-child { width: 3.5em; }
+.brz .calorieapp-richlist-scroll td:last-child {
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+}
+
+/* The blog's MetaSlider has many slides. Keep all native controls in one
+   horizontally scrollable row instead of dozens of wrapping rows. */
+.brz .metaslider .nivo-controlNav {
+  display: flex !important;
+  flex-wrap: nowrap !important;
+  align-items: center;
+  justify-content: flex-start;
+  box-sizing: border-box;
+  width: 100%;
+  max-width: 100%;
+  overflow-x: auto;
+  padding: 6px 4px !important;
+  min-height: 44px;
+  white-space: nowrap;
+}
+.brz .metaslider .nivo-controlNav a {
+  flex: 0 0 auto;
+  margin: 8px 6px !important;
+}
+
+@media (max-width: 768px) {
+  .brz .calorieapp-richlist-scroll table.xl-richlist {
+    font-size: 14px;
+    line-height: 1.5;
+  }
+
+  .brz .brz-woo-add-to-cart,
+  .brz .brz-woo-add-to-cart > div {
+    box-sizing: border-box;
+    min-width: 0;
+    max-width: 100% !important;
+    width: 100% !important;
+  }
+  .brz .brz-woo-add-to-cart form.cart:has(#wcj_open_price) {
+    display: flex !important;
+    flex-wrap: wrap;
+    align-items: center;
+    justify-content: center;
+    gap: 12px;
+    box-sizing: border-box;
+    width: 100%;
+    max-width: 100%;
+    margin: 0 !important;
+  }
+  .brz #wcj_open_price {
+    box-sizing: border-box;
+    min-width: 0 !important;
+    width: 8rem !important;
+    max-width: 100% !important;
+    min-height: 44px;
+    font-size: 18px;
+  }
+  .brz form.cart:has(#wcj_open_price) .single_add_to_cart_button {
+    box-sizing: border-box;
+    flex-basis: 100%;
+    min-width: 0 !important;
+    max-width: 100% !important;
+    min-height: 44px;
+    margin: 0 !important;
+    white-space: normal !important;
+    font-size: 18px !important;
+    line-height: 1.4 !important;
+  }
+
+  /* WooCommerce owns form and payment behavior; these rules only fit its
+     existing controls and totals into the available mobile column. */
+  .brz .woocommerce :is(form.checkout, .woocommerce-cart-form, .cart-collaterals, .cart_totals, .col2-set, .col-1, .col-2) {
+    box-sizing: border-box;
+    float: none !important;
+    min-width: 0;
+    width: 100% !important;
+    max-width: 100%;
+  }
+  .brz .woocommerce :is(input.input-text, textarea, select, .select2-container) {
+    box-sizing: border-box;
+    min-width: 0;
+    width: 100% !important;
+    max-width: 100%;
+    font-size: 16px !important;
+  }
+  .brz .woocommerce table.shop_table {
+    width: 100%;
+    max-width: 100%;
+    table-layout: auto;
+    font-size: 16px !important;
+    line-height: 1.5 !important;
+  }
+  .brz .woocommerce table.shop_table :is(th, td) {
+    padding: 10px 8px !important;
+    font-size: inherit !important;
+    overflow-wrap: anywhere;
+  }
+  .brz .woocommerce table.shop_table .amount { white-space: nowrap; }
+  .brz .woocommerce table.shop_table_responsive tr td::before {
+    max-width: 42%;
+    margin-right: 12px;
+    white-space: normal;
+    font-size: inherit !important;
+  }
+  .brz .woocommerce table.shop_table_responsive tr td { display: flow-root; }
+  .brz .woocommerce :is(.woocommerce-terms-and-conditions-wrapper, .woocommerce-terms-and-conditions) {
+    font-size: 16px !important;
+    line-height: 1.6 !important;
+  }
+  .brz .woocommerce .woocommerce-terms-and-conditions :is(h1, h2, h3) {
+    font-size: 24px !important;
+    line-height: 1.3 !important;
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
index 291ec79..e971103 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
@@ -6,7 +6,7 @@
       return !element.closest("[data-calorieapp-embed]");
     });
     var wrapper = card && card.closest(".brz-wrapper");
-    if (!wrapper) return;
+    if (!wrapper) return false;
 
     var columns = Array.from(document.querySelectorAll(".brz .brz-menu-simple"))
       .map(function (menu) { return menu.closest(".brz-columns"); })
@@ -78,8 +78,34 @@
       observer.observe(card);
       columns.forEach(function (column) { observer.observe(column); });
     }
+    return true;
   }
 
-  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", start, { once: true });
-  else start();
+  function enhanceRichlists() {
+    document.querySelectorAll("table.xl-richlist").forEach(function (table) {
+      if (table.closest(".calorieapp-richlist-scroll")) return;
+      var region = document.createElement("div");
+      region.className = "calorieapp-richlist-scroll";
+      region.tabIndex = 0;
+      region.setAttribute("role", "region");
+      region.setAttribute("aria-label", "CalorieToken holders — scroll sideways for the full table");
+      table.parentNode.insertBefore(region, table);
+      region.appendChild(table);
+    });
+  }
+
+  function boot() {
+    enhanceRichlists();
+    window.addEventListener("load", enhanceRichlists);
+    if (start() || !window.MutationObserver) return;
+    // Brizy can insert a shortcode after DOMContentLoaded. Initialize once
+    // when the card appears, then stop watching the rest of a long Richlist.
+    var waiting = new MutationObserver(function () {
+      if (start()) waiting.disconnect();
+    });
+    waiting.observe(document.body, { childList: true, subtree: true });
+  }
+
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", boot, { once: true });
+  else boot();
 })();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 2d500ce..de8fda9 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.26
+ * Version: 0.3.27
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.26');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.27');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index f8cf7ac..b64a83f 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.26';
+            : '0.3.27';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-legal-footer-compatibility.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-legal-footer-compatibility.php
index 7c0b0db..060cb89 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-legal-footer-compatibility.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-legal-footer-compatibility.php
@@ -38,12 +38,18 @@ public function register_hooks(): void {
 
     public function start_output_buffer(): void {
         $method = strtoupper((string) ($_SERVER['REQUEST_METHOD'] ?? 'GET'));
+        // The donation product/cart may render their normal page after POST.
+        // Correct that HTML footer too, without touching checkout, AJAX,
+        // REST, authentication, or the underlying donation transaction.
+        $cart_page_post = $method === 'POST'
+            && ((function_exists('is_cart') && is_cart())
+                || (function_exists('is_product') && is_product()));
 
         if (
             is_admin()
             || (defined('REST_REQUEST') && REST_REQUEST)
             || wp_doing_ajax()
-            || !in_array($method, ['GET', 'HEAD'], true)
+            || (!in_array($method, ['GET', 'HEAD'], true) && !$cart_page_post)
             || is_feed()
             || is_embed()
             || is_trackback()
@@ -51,7 +57,21 @@ public function start_output_buffer(): void {
             return;
         }
 
-        ob_start([self::class, 'replace_legacy_footer_html']);
+        ob_start([self::class, $cart_page_post ? 'replace_cart_page_footer_html' : 'replace_legacy_footer_html']);
+    }
+
+    public static function replace_cart_page_footer_html(string $html): string {
+        // Only full page documents: leave JSON, fragments and redirect bodies
+        // untouched even if a third-party handler runs on a product URL.
+        if (!preg_match('/^\s*(?:<!doctype\s+html\b|<html\b)/i', $html)) {
+            return $html;
+        }
+        foreach (headers_list() as $header) {
+            if (stripos($header, 'Content-Type:') === 0 && stripos($header, 'text/html') === false) {
+                return $html;
+            }
+        }
+        return self::replace_legacy_footer_html($html);
     }
 
     public static function replace_legacy_footer_html(string $html): string {
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
index 00efab9..2733910 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
@@ -69,6 +69,30 @@ public function init(): void {
         $this->legal_footer_compatibility->register_hooks();
         $this->market_widget->register_hooks();
         $this->page_ending->register_hooks();
+        add_filter('woocommerce_add_to_cart_redirect', [self::class, 'donation_return_url'], 20, 2);
+    }
+
+    /** Finish a successful donation form submission on a reloadable GET page. */
+    public static function donation_return_url($url, $product = null) {
+        // WooCommerce invokes this filter only after its normal validation and
+        // successful add-to-cart. Keep explicit redirects and its cart setting.
+        if ($url
+            || is_admin()
+            || wp_doing_ajax()
+            || (defined('REST_REQUEST') && REST_REQUEST)
+            || strtoupper((string) ($_SERVER['REQUEST_METHOD'] ?? 'GET')) !== 'POST'
+            || !isset($_POST['wcj_open_price'])
+            || !($product instanceof \WC_Product)
+            || $product->get_slug() !== 'donation'
+            || get_option('woocommerce_cart_redirect_after_add') === 'yes'
+        ) {
+            return $url;
+        }
+
+        // Return to the same product and its existing donation summary without
+        // keeping a POST response in browser history. Do not resubmit, reprice,
+        // create an order, or change payment/cancellation state here.
+        return get_permalink($product->get_id()) ?: $url;
     }
 
     public function activate(): void {

From 472f1ab881d43d135c1df72522f4217e7ad84b89 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Tue, 8 Sep 2026 15:03:48 +0200
Subject: [PATCH 05/12] Prepare step 3 website polish and verified DEX pairs

---
 contracts/ecosystem/xrpl-dex-assets.v1.json   |  54 ++
 docs/STEP_3_DEX_SCOPE.md                      |  87 +++
 docs/STEP_3_PRESENTATION_RELEASE.md           |  37 ++
 tools/tests/test_xrpl_dex_asset_registry.py   |  57 ++
 tools/tests/wordpress_page_ending.test.mjs    |   1 +
 tools/tests/wordpress_page_ending.test.php    |  10 +-
 tools/tests/wordpress_site_layout.test.mjs    |   2 +-
 tools/tests/wordpress_step3_polish.test.mjs   |  66 ++
 .../assets/calorieapp-page-ending.css         |   3 +-
 .../assets/calorieapp-page-ending.js          |  21 +
 .../assets/calorieapp-site-layout.css         |  27 +
 .../assets/calorieapp-site-layout.js          |  41 +-
 .../assets/calorieapp-site-polish.css         | 422 +++++++++++++
 .../assets/calorieapp-site-polish.js          | 566 ++++++++++++++++++
 .../calorieapp-identity-bridge.php            |   4 +-
 ...calorieapp-identity-bridge-page-ending.php |  18 +-
 16 files changed, 1399 insertions(+), 17 deletions(-)
 create mode 100644 contracts/ecosystem/xrpl-dex-assets.v1.json
 create mode 100644 docs/STEP_3_DEX_SCOPE.md
 create mode 100644 docs/STEP_3_PRESENTATION_RELEASE.md
 create mode 100644 tools/tests/test_xrpl_dex_asset_registry.py
 create mode 100644 tools/tests/wordpress_step3_polish.test.mjs
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js

diff --git a/contracts/ecosystem/xrpl-dex-assets.v1.json b/contracts/ecosystem/xrpl-dex-assets.v1.json
new file mode 100644
index 0000000..bb6580c
--- /dev/null
+++ b/contracts/ecosystem/xrpl-dex-assets.v1.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": 1,
+  "network": "xrpl-mainnet",
+  "status": "design-only",
+  "assets": {
+    "XRP": {
+      "kind": "native",
+      "currency": "XRP"
+    },
+    "CAL": {
+      "kind": "issued",
+      "currency": "43616C6F72696500000000000000000000000000",
+      "display_code": "CAL",
+      "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY"
+    },
+    "RLUSD": {
+      "kind": "issued",
+      "currency": "524C555344000000000000000000000000000000",
+      "display_code": "RLUSD",
+      "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De"
+    }
+  },
+  "pairs": [
+    {
+      "id": "CAL_XRP",
+      "base": "CAL",
+      "quote": "XRP",
+      "directions": ["buy_cal", "sell_cal"],
+      "amm_account": "rhDx4NgeWz6jzs4TwiwYDmpeF2maJFZBtr",
+      "verification": "validated-ledger"
+    },
+    {
+      "id": "CAL_RLUSD",
+      "base": "CAL",
+      "quote": "RLUSD",
+      "directions": ["buy_cal", "sell_cal"],
+      "amm_account": "rPN26geWz6jzs4TwiwYDmpeF2maJFZBtr",
+      "verification": "validated-ledger"
+    },
+    {
+      "id": "XRP_RLUSD",
+      "base": "XRP",
+      "quote": "RLUSD",
+      "directions": ["both"],
+      "routing_only": true,
+      "verification": "asset-identities-only"
+    }
+  ],
+  "excluded_labels_pending_issuer_review": [
+    "CAL/EUR",
+    "CAL/USD",
+    "BTC/CAL"
+  ]
+}
diff --git a/docs/STEP_3_DEX_SCOPE.md b/docs/STEP_3_DEX_SCOPE.md
new file mode 100644
index 0000000..fb78c3f
--- /dev/null
+++ b/docs/STEP_3_DEX_SCOPE.md
@@ -0,0 +1,87 @@
+# Step 3 DEX scope and pair policy
+
+Status: design and verified-asset registry prepared; production transaction
+submission remains disabled pending legal scope and a separate security review.
+
+## Initial pair set
+
+The first-party selector may show only assets identified by both currency code
+and issuer in `contracts/ecosystem/xrpl-dex-assets.v1.json`.
+
+| Pair | User actions | Role |
+| --- | --- | --- |
+| CAL/XRP | Buy CAL and sell CAL | Primary market |
+| CAL/RLUSD | Buy CAL and sell CAL | Primary market |
+| XRP/RLUSD | Exchange in either direction | Routing/on-ramp bridge only |
+
+The CAL/XRP and CAL/RLUSD AMMs were read from a validated XRPL mainnet ledger on
+2026-09-08. The application must re-read validated ledger state for every quote;
+the recorded pool accounts are identifiers, not a liquidity or price promise.
+
+CAL/EUR, CAL/USD and BTC/CAL labels were observed in a third-party wallet view,
+but are excluded until each issued asset's exact issuer, operator, redemption
+claim and current pool state have been reviewed. A familiar ticker or icon is
+not sufficient identification on XRPL.
+
+## User flow
+
+1. Choose **Buy CAL** or **Sell CAL** before choosing an amount.
+2. Select XRP or RLUSD as the other asset.
+3. If CAL is to be received, check for the exact CAL trustline and offer the
+   existing Xaman TrustSet flow when it is missing.
+4. Request a fresh, validated-ledger quote. Show the route, expected amount,
+   minimum received or maximum spent, price impact, trading fee and network fee.
+5. Stop when issuer identity, ledger freshness, liquidity or price-impact policy
+   fails. Never silently fall back to a same-ticker asset from another issuer.
+6. Create a bounded transaction request and let the user review and sign it in
+   Xaman. The website never receives a seed or private key.
+7. Report success only after the transaction is validated; otherwise show a
+   retry-safe failure state without automatic resubmission.
+
+The initial implementation should use immediate-or-cancel behavior and must not
+create resting orders. It must not trade automatically, custody assets, promise
+execution, or charge an undisclosed routing fee.
+
+## Liquidity and conflicts
+
+Pool participation by a developer, operator, treasury or other project-related
+wallet does not make a pool official and does not guarantee price stability,
+redemption or continued liquidity. The public interface should use a general,
+accurate disclosure:
+
+> Liquidity may be supplied by project-related or affiliated wallets as well as
+> independent participants. Availability, price and execution are not guaranteed.
+
+Personal wallet addresses and individual balances are not part of the interface
+by default. Any legally required conflict disclosure should identify the
+relationship and material risk without unnecessarily publishing a natural
+person's complete position history.
+
+Project and personal liquidity activity should remain separately accounted for.
+Do not generate artificial volume, coordinate trades to support a quoted price,
+or market a displayed APR as expected return. Keep dated, reproducible ledger
+snapshots for material project-wallet disclosures.
+
+## Release gates
+
+- Legal review classifies the proposed interaction under MiCA and confirms which
+  regions, disclosures and service relationships are permitted.
+- Xaman/API terms are reviewed for transaction-signing use beyond authentication.
+- Quote construction, issuer pinning, slippage bounds, idempotency and validated
+  result handling receive tests and independent security review.
+- Mobile buy and sell paths are tested with a dedicated low-value test wallet.
+- Production thresholds are configured centrally and fail closed; they are not
+  inferred from a screenshot or hard-coded marketing figures.
+
+Until all gates pass, the website may explain the verified pairs and link to an
+external market, but must not present its own live mainnet trade button.
+
+## Regulatory references
+
+- ESMA MiCA Article 3 definitions: <https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica/article-3-definitions>
+- ESMA MiCA Article 59 authorisation: <https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica/article-59-authorisation>
+- ESMA MiCA Article 7 marketing communications: <https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica/article-7-marketing-communications>
+- AFM crypto-party supervision: <https://www.afm.nl/nl-nl/sector/cryptopartijen/toezicht>
+- XRPL decentralized exchange: <https://xrpl.org/docs/concepts/tokens/decentralized-exchange>
+- Ripple RLUSD token addresses: <https://docs.ripple.com/products/stablecoin/overview/token-addresses>
+- Xaman regional XRP buying options: <https://help.xaman.app/app/getting-started-with-xaman/buying-xrp>
diff --git a/docs/STEP_3_PRESENTATION_RELEASE.md b/docs/STEP_3_PRESENTATION_RELEASE.md
new file mode 100644
index 0000000..87c8c14
--- /dev/null
+++ b/docs/STEP_3_PRESENTATION_RELEASE.md
@@ -0,0 +1,37 @@
+# Step 3 presentation release
+
+Candidate: Identity Bridge 0.3.30.
+
+## Included presentation changes
+
+- Existing Brizy footers remain stored in place. Singular pages missing a CAL
+  market card receive one candidate which is deduplicated against an existing
+  XPMarket/legacy card and positioned before the existing legal footer.
+- The Trustline page reuses the installed XUMM Login plugin's existing Xaman
+  TrustSet route. No Xaman credential or signing implementation is duplicated.
+- The Richlist highlights only the row already marked for the authenticated
+  visitor and adds an accessible jump control. Logged-out visitors receive no
+  inferred position.
+- Contact, donation and Complianz consent controls receive scoped responsive
+  presentation without changing their submission or consent behavior.
+- How to buy becomes a wallet, regional XRP funding, CAL trustline, then buy or
+  sell path. Unreliable generic DEX links are removed. The issuer-pinned XPMarket
+  destination remains, and CAL/XRP plus CAL/RLUSD are identified as validated
+  XRPL AMMs. First-party mainnet signing stays labelled release-gated.
+
+The display changes are reversible by disabling the companion plugin. They do
+not mutate stored Brizy content, create a DEX transaction, publish personal
+wallet ownership, or merge the application branch.
+
+## Third-party mark added in 0.3.28+
+
+`assets/calorieapp-site-polish.js` contains the monochrome X logo path from X's
+official brand toolkit solely to identify CalorieToken's X profile. The mark is
+not project-owned and is not licensed under the plugin's software licence.
+
+- Source: <https://about.x.com/en/who-we-are/brand-toolkit>
+- Asset: <https://about.x.com/content/dam/about-twitter/x/brand-toolkit/x-logo.zip>
+- Retrieved: 2026-09-08
+
+The original vector geometry is preserved; `currentColor` retains the site's
+monochrome icon colour.
diff --git a/tools/tests/test_xrpl_dex_asset_registry.py b/tools/tests/test_xrpl_dex_asset_registry.py
new file mode 100644
index 0000000..f687e8f
--- /dev/null
+++ b/tools/tests/test_xrpl_dex_asset_registry.py
@@ -0,0 +1,57 @@
+import json
+from pathlib import Path
+
+
+REGISTRY_PATH = (
+    Path(__file__).resolve().parents[2]
+    / "contracts"
+    / "ecosystem"
+    / "xrpl-dex-assets.v1.json"
+)
+
+
+def load_registry() -> dict:
+    return json.loads(REGISTRY_PATH.read_text(encoding="utf-8"))
+
+
+def test_registry_is_non_executing_and_pins_issued_assets() -> None:
+    registry = load_registry()
+
+    assert registry["network"] == "xrpl-mainnet"
+    assert registry["status"] == "design-only"
+    assert registry["assets"]["CAL"] == {
+        "kind": "issued",
+        "currency": "43616C6F72696500000000000000000000000000",
+        "display_code": "CAL",
+        "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY",
+    }
+    assert registry["assets"]["RLUSD"] == {
+        "kind": "issued",
+        "currency": "524C555344000000000000000000000000000000",
+        "display_code": "RLUSD",
+        "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
+    }
+
+
+def test_primary_pairs_support_buying_and_selling_cal() -> None:
+    registry = load_registry()
+    pairs = {pair["id"]: pair for pair in registry["pairs"]}
+
+    assert set(pairs) == {"CAL_XRP", "CAL_RLUSD", "XRP_RLUSD"}
+    for pair_id in ("CAL_XRP", "CAL_RLUSD"):
+        assert pairs[pair_id]["directions"] == ["buy_cal", "sell_cal"]
+        assert pairs[pair_id]["verification"] == "validated-ledger"
+        assert pairs[pair_id]["amm_account"].startswith("r")
+    assert pairs["XRP_RLUSD"]["routing_only"] is True
+
+
+def test_unverified_labels_are_not_selectable_pairs() -> None:
+    registry = load_registry()
+    selectable = {pair["id"] for pair in registry["pairs"]}
+
+    assert selectable.isdisjoint({"CAL_EUR", "CAL_USD", "BTC_CAL"})
+    assert registry["excluded_labels_pending_issuer_review"] == [
+        "CAL/EUR",
+        "CAL/USD",
+        "BTC/CAL",
+    ]
diff --git a/tools/tests/wordpress_page_ending.test.mjs b/tools/tests/wordpress_page_ending.test.mjs
index 555da81..d2135f0 100644
--- a/tools/tests/wordpress_page_ending.test.mjs
+++ b/tools/tests/wordpress_page_ending.test.mjs
@@ -89,6 +89,7 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
     createElement() { return element(); },
     readyState: 'loading',
     addEventListener(name, fn) { if (name === 'DOMContentLoaded') ready = fn; },
+    querySelector() { return null; },
     querySelectorAll(selector) {
       if (empty) return [];
       if (selector === '[data-calorieapp-embed]') return [];
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index be3fd2b..608b710 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -8,11 +8,13 @@
 $admin = false;
 $feed = false;
 $embed = false;
+$singular = true;
 $actions = $styles = $scripts = $config = $cache = $requests = $routes = [];
 function add_action($name, $callback, $priority = 10): void { $GLOBALS['actions'][$name][$priority][] = $callback; }
 function is_admin(): bool { return $GLOBALS['admin']; }
 function is_feed(): bool { return $GLOBALS['feed']; }
 function is_embed(): bool { return $GLOBALS['embed']; }
+function is_singular(): bool { return $GLOBALS['singular']; }
 function is_page($slug): bool { return $GLOBALS['page'] === $slug; }
 function plugin_dir_url($file): string { return home_url('/wp-content/plugins/calorieapp-identity-bridge/'); }
 function home_url($path): string { return 'https://calorietoken.net' . $path; }
@@ -56,7 +58,7 @@ function render($object): string { ob_start(); $object->render(); return (string
 $ending->register_hooks();
 check(isset($actions['wp_footer'][5]), 'Render the ending before footer scripts.');
 $ending->enqueue_assets();
-check(count($styles) === 1 && count($scripts) === 1, 'Only the independent page-ending assets are queued.');
+check(count($styles) === 2 && count($scripts) === 2, 'The independent page-ending and presentation assets are queued.');
 check($scripts['calorieapp-identity-bridge-page-ending'][1] === [], 'Do not load the authentication controller as a dependency.');
 $html = render($ending);
 check(substr_count($html, '<footer ') === 1, 'The app page receives one website footer.');
@@ -78,8 +80,10 @@ function render($object): string { ob_start(); $object->render(); return (string
     $styles = $scripts = [];
     $other = new PageEnding();
     $other->enqueue_assets();
-    check(render($other) === '', 'Existing footers on other pages remain untouched.');
-    check(count($styles) === 1 && count($scripts) === 1, 'Shared market styles and renderer must load on other public pages too.');
+    $other_html = render($other);
+    check(substr_count($other_html, 'data-calorieapp-sitewide-market') === 1, 'Other singular pages receive one deduplicated market candidate.');
+    check(!str_contains($other_html, '<footer '), 'Existing Brizy footers remain untouched.');
+    check(count($styles) === 2 && count($scripts) === 2, 'Shared market and presentation assets load on other public pages too.');
 }
 $shortcuts = new PageEnding();
 ob_start();
diff --git a/tools/tests/wordpress_site_layout.test.mjs b/tools/tests/wordpress_site_layout.test.mjs
index 2433fe3..4999137 100644
--- a/tools/tests/wordpress_site_layout.test.mjs
+++ b/tools/tests/wordpress_site_layout.test.mjs
@@ -134,7 +134,7 @@ test("a late shortcode receives layout and disconnects its discovery observer",
 test("Richlist scrolling preserves the original table and does not duplicate wrappers", () => {
   const wrappers = [], listeners = new Map();
   const parent = { insertBefore(region, item) { assert.equal(item, table); wrappers.push(region); } };
-  const table = { parentNode: parent, rows: [{ balance: "unchanged" }], closest() { return this.parentNode.className === "calorieapp-richlist-scroll" ? this.parentNode : null; } };
+  const table = { parentNode: parent, rows: [{ balance: "unchanged" }], querySelector() { return null; }, closest() { return this.parentNode.className === "calorieapp-richlist-scroll" ? this.parentNode : null; } };
   const document = {
     readyState: "complete",
     querySelectorAll: selector => selector === "table.xl-richlist" ? [table] : [],
diff --git a/tools/tests/wordpress_step3_polish.test.mjs b/tools/tests/wordpress_step3_polish.test.mjs
new file mode 100644
index 0000000..505592e
--- /dev/null
+++ b/tools/tests/wordpress_step3_polish.test.mjs
@@ -0,0 +1,66 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+
+const defaultRoot = fileURLToPath(new URL(
+  "../../wordpress-plugins/calorieapp-identity-bridge",
+  import.meta.url,
+));
+const root = process.env.CALORIEAPP_BRIDGE_ROOT || defaultRoot;
+const source = (relative) => readFile(path.join(root, relative), "utf8");
+
+test("Trustline enhancement reuses the installed Xaman TrustSet route", async () => {
+  const javascript = await source("assets/calorieapp-site-polish.js");
+
+  assert.match(javascript, /if \(id !== 1205\) return/);
+  assert.match(javascript, /trustline\.href = "\?xl-trustline"/);
+  assert.match(javascript, /Set CAL trustline in Xaman/);
+  assert.doesNotMatch(javascript, /api_secret|xummlogin_api_secret/i);
+});
+
+test("Richlist enhancement is limited to an authenticated row marker", async () => {
+  const javascript = await source("assets/calorieapp-site-layout.js");
+  const stylesheet = await source("assets/calorieapp-site-layout.css");
+
+  assert.match(javascript, /table\.querySelector\("tr\.xl-is-user"\)/);
+  assert.match(javascript, /data-calorieapp-own-rank/);
+  assert.match(javascript, /scrollIntoView/);
+  assert.match(stylesheet, /table\.xl-richlist tr\.xl-is-user/);
+  assert.doesNotMatch(javascript, /xrpl-r-address|localStorage|sessionStorage/);
+});
+
+test("Sitewide market card deduplicates and stays next to the existing footer", async () => {
+  const javascript = await source("assets/calorieapp-page-ending.js");
+  const php = await source("includes/class-calorieapp-identity-bridge-page-ending.php");
+
+  assert.match(php, /data-calorieapp-sitewide-market/);
+  assert.match(php, /!is_singular\(\)/);
+  assert.match(javascript, /hasExistingMarket/);
+  assert.match(javascript, /Operator: ICTHendrikse/);
+  assert.match(javascript, /insertBefore\(injected, footerSection\)/);
+});
+
+test("Consent styling preserves Complianz controls", async () => {
+  const stylesheet = await source("assets/calorieapp-site-polish.css");
+
+  assert.match(stylesheet, /#cmplz-cookiebanner-container \.cmplz-cookiebanner/);
+  assert.match(stylesheet, /\.cmplz-accept/);
+  assert.match(stylesheet, /\.cmplz-deny/);
+  assert.match(stylesheet, /\.cmplz-save-preferences/);
+  assert.doesNotMatch(stylesheet, /display\s*:\s*none[^;]*;[^}]*cmplz/i);
+});
+
+test("How to buy covers both directions and removes unreliable destinations", async () => {
+  const javascript = await source("assets/calorieapp-site-polish.js");
+
+  assert.match(javascript, /if \(id !== 4205\) return/);
+  assert.match(javascript, /Buy or sell CAL in four clear steps/);
+  assert.match(javascript, /CAL[^\n]+XRP/);
+  assert.match(javascript, /CAL[^\n]+RLUSD/);
+  assert.match(javascript, /xapp:xumm\.buysellxrp/);
+  assert.match(javascript, /Mainnet transaction submission stays unavailable/);
+  assert.doesNotMatch(javascript, /https:\/\/sologenic\.org/);
+  assert.doesNotMatch(javascript, /xapp:xumm\.dex/);
+});
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
index ada0249..e314a0f 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
@@ -1,4 +1,5 @@
-/* Shared CAL card and missing shortcuts; footer markup stays app-only. */
+/* Shared CAL card, page ending and missing shortcuts. Existing Brizy footers
+   stay stored in place; the companion adds only a deduplicated market card. */
 .calorieapp-shared-page-ending {
   box-sizing: border-box;
   width: 100%;
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
index 6923aab..efc67e7 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
@@ -103,11 +103,32 @@
     }
   }
 
+  function positionSitewideMarket() {
+    if (typeof document.querySelector !== "function") return;
+    var injected = document.querySelector("[data-calorieapp-sitewide-market]");
+    if (!injected) return;
+    var hasExistingMarket = Array.from(document.querySelectorAll(
+      ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]"
+    )).some(function (widget) { return !injected.contains(widget); });
+    if (hasExistingMarket) {
+      injected.remove();
+      return;
+    }
+
+    var legalLine = Array.from(document.querySelectorAll(".brz p, .brz footer, .brz [role=contentinfo]"))
+      .find(function (node) { return String(node.textContent || "").replace(/\s+/g, " ").trim().indexOf("Operator: ICTHendrikse") === 0; });
+    var footerSection = legalLine && (legalLine.closest("section") || legalLine.closest("footer") || legalLine.closest("[role=contentinfo]"));
+    if (footerSection && footerSection.parentNode && injected.nextElementSibling !== footerSection) {
+      footerSection.parentNode.insertBefore(injected, footerSection);
+    }
+  }
+
   function enhanceXpMarketPriceWidgets() {
     if (typeof document.querySelectorAll !== "function") {
       return;
     }
 
+    positionSitewideMarket();
     var config = window.calorieappPageEnding || {};
     var endpoint = config.xpMarketWidgetUrl || "";
     var tokenUrl =
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
index 330c3f1..dfecc23 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
@@ -125,6 +125,33 @@
   text-align: right;
   font-variant-numeric: tabular-nums;
 }
+.brz table.xl-richlist tr.xl-is-user > :is(th,td) {
+  background: #fff4cf !important;
+  color: #303449 !important;
+  font-weight: 700;
+  box-shadow: inset 0 2px 0 #fbb62b, inset 0 -2px 0 #fbb62b;
+}
+.brz table.xl-richlist tr.xl-is-user > :first-child { box-shadow: inset 3px 0 0 #fbb62b, inset 0 2px 0 #fbb62b, inset 0 -2px 0 #fbb62b; }
+.brz table.xl-richlist tr.xl-is-user > :last-child { box-shadow: inset -3px 0 0 #fbb62b, inset 0 2px 0 #fbb62b, inset 0 -2px 0 #fbb62b; }
+.brz table.xl-richlist tr.xl-is-user:focus-visible { outline: 3px solid #505ba9; outline-offset: 3px; }
+.calorieapp-own-rank-jump {
+  position: fixed;
+  z-index: 45;
+  left: max(14px, env(safe-area-inset-left));
+  bottom: max(14px, env(safe-area-inset-bottom));
+  min-height: 44px;
+  max-width: min(220px, calc(100vw - 92px));
+  padding: 10px 18px;
+  border: 2px solid #505ba9;
+  border-radius: 999px;
+  background: #fff;
+  color: #303449;
+  box-shadow: 0 7px 22px #30344933;
+  font: 700 15px/1.35 system-ui, sans-serif;
+  cursor: pointer;
+}
+.calorieapp-own-rank-jump:hover { background: #fff4cf; }
+.calorieapp-own-rank-jump:focus-visible { outline: 3px solid #fbb62b; outline-offset: 3px; }
 
 /* The blog's MetaSlider has many slides. Keep all native controls in one
    horizontally scrollable row instead of dozens of wrapping rows. */
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
index e971103..9bd7a6d 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
@@ -83,14 +83,39 @@
 
   function enhanceRichlists() {
     document.querySelectorAll("table.xl-richlist").forEach(function (table) {
-      if (table.closest(".calorieapp-richlist-scroll")) return;
-      var region = document.createElement("div");
-      region.className = "calorieapp-richlist-scroll";
-      region.tabIndex = 0;
-      region.setAttribute("role", "region");
-      region.setAttribute("aria-label", "CalorieToken holders — scroll sideways for the full table");
-      table.parentNode.insertBefore(region, table);
-      region.appendChild(table);
+      var region = table.closest(".calorieapp-richlist-scroll");
+      if (!region) {
+        region = document.createElement("div");
+        region.className = "calorieapp-richlist-scroll";
+        region.tabIndex = 0;
+        region.setAttribute("role", "region");
+        region.setAttribute("aria-label", "CalorieToken holders — scroll sideways for the full table");
+        table.parentNode.insertBefore(region, table);
+        region.appendChild(table);
+      }
+
+      if (typeof table.querySelector !== "function") return;
+      var ownRow = table.querySelector("tr.xl-is-user");
+      if (!ownRow || document.querySelector("[data-calorieapp-own-rank]")) return;
+      ownRow.setAttribute("aria-current", "true");
+      ownRow.tabIndex = -1;
+      var rankCell = ownRow.querySelector("th,td");
+      var rank = rankCell ? String(rankCell.textContent || "").trim() : "";
+      var jump = document.createElement("button");
+      jump.type = "button";
+      jump.className = "calorieapp-own-rank-jump";
+      jump.setAttribute("data-calorieapp-own-rank", "");
+      jump.textContent = rank ? "My position " + rank : "My position";
+      jump.setAttribute("aria-label", rank ? "Jump to my Richlist position " + rank : "Jump to my Richlist position");
+      jump.addEventListener("click", function () {
+        ownRow.scrollIntoView({
+          behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth",
+          block: "center",
+          inline: "nearest"
+        });
+        window.setTimeout(function () { ownRow.focus({ preventScroll: true }); }, 350);
+      });
+      document.body.appendChild(jump);
     });
   }
 
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
new file mode 100644
index 0000000..dc49952
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
@@ -0,0 +1,422 @@
+/* Scoped presentation for the existing Brizy content. Original banners,
+   illustration files, consent, identity and WooCommerce behavior are retained. */
+.brz {
+  --calorieapp-purple: #505ba9;
+  --calorieapp-green: #07853d;
+  --calorieapp-yellow: #fbb62b;
+  --calorieapp-ink: #303449;
+  --calorieapp-border: #dddfea;
+}
+.brz .calorieapp-reading-copy {
+  box-sizing: border-box;
+  width: 100%;
+  max-width: 70ch;
+  margin-inline: auto;
+  overflow-wrap: anywhere;
+}
+.brz .calorieapp-reading-copy :is(p,li) {
+  font-size: clamp(17px, 1vw + 9px, 20px) !important;
+  line-height: 1.65 !important;
+  letter-spacing: normal !important;
+}
+.brz .calorieapp-reading-copy p { margin-block: 0 1em !important; }
+.brz .calorieapp-reading-copy :is(h2,h3) { line-height: 1.35 !important; }
+.brz .calorieapp-reading-copy :is(img,iframe,video) { max-width: 100%; }
+.brz .calorieapp-reading-copy a { text-underline-offset: .2em; }
+.brz .calorieapp-empty-paragraph { display: none !important; }
+.brz .calorieapp-article-copy {
+  padding: clamp(20px, 3vw, 42px);
+  border: 1px solid var(--calorieapp-border);
+  border-top: 5px solid var(--calorieapp-purple);
+  border-radius: 24px;
+  background: #fff;
+  color: var(--calorieapp-ink);
+  box-shadow: 0 8px 24px #3034490d;
+}
+.brz .calorieapp-article-copy :is(p,li) { text-align: start !important; }
+.brz .calorieapp-article-title h1 {
+  font-size: clamp(24px, 2.8vw, 38px) !important;
+  line-height: 1.35 !important;
+}
+.brz .calorieapp-context-note {
+  box-sizing: border-box;
+  max-width: 70ch;
+  margin: 0 auto 24px;
+  padding: clamp(18px, 2.5vw, 28px);
+  border: 1px solid var(--calorieapp-border);
+  border-left: 5px solid var(--calorieapp-green);
+  border-radius: 18px;
+  background: #fff;
+  color: var(--calorieapp-ink);
+  font: 17px/1.65 system-ui, sans-serif;
+  text-align: start;
+}
+.brz .calorieapp-context-note :is(p,strong,a) { font: inherit; }
+.brz .calorieapp-context-note > strong { display: block; font-weight: 700; color: var(--calorieapp-green); }
+.brz .calorieapp-context-note p { margin: .6em 0 !important; }
+.brz .calorieapp-context-note a { color: var(--calorieapp-purple); text-decoration: underline; }
+.brz :is(.calorieapp-context-note,.calorieapp-social-panel,.calorieapp-donation-steps) a:focus-visible,
+.brz .calorieapp-copy-button:focus-visible,
+.brz a.calorieapp-usecase-link:focus-visible,
+.brz .calorieapp-social-image-link:focus-visible {
+  outline: 3px solid var(--calorieapp-purple);
+  outline-offset: 4px;
+}
+
+/* Blog cards use their existing images, excerpts, dates and read-more links. */
+.brz.page-id-1207 .brz-posts__item > .brz-columns { height: 100%; }
+.brz.page-id-1207 .brz-posts__item > .brz-columns > .brz-column__items {
+  box-sizing: border-box;
+  height: 100%;
+  padding: 20px !important;
+  border: 1px solid var(--calorieapp-border);
+  border-top: 4px solid var(--calorieapp-purple);
+  border-radius: 24px;
+  background: #fff !important;
+  box-shadow: 0 6px 22px #3034490d;
+}
+.brz.page-id-1207 .brz-posts__item .brz-wp-title {
+  color: var(--calorieapp-green);
+  font-size: 22px !important;
+  line-height: 1.4 !important;
+  text-align: start !important;
+}
+.brz.page-id-1207 .brz-posts__item .brz-wp-post-excerpt {
+  color: var(--calorieapp-ink);
+  font-size: 17px !important;
+  line-height: 1.65 !important;
+  text-align: start !important;
+}
+.brz.page-id-1207 .brz-posts__item .brz-rich-text p {
+  font-size: 15px !important;
+  line-height: 1.5 !important;
+}
+.brz.page-id-1207 .brz-posts__item .brz-image { border-radius: 14px; overflow: hidden; }
+.brz.page-id-1207 .brz-posts__item .brz-btn {
+  min-height: 44px;
+  border-radius: 24px !important;
+  color: #303449 !important;
+}
+.brz.page-id-1207 .brz-posts__pagination {
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: center;
+  gap: 8px;
+  margin-block: 24px;
+}
+.brz.page-id-1207 .brz-posts__pagination :is(a,span) {
+  min-width: 44px;
+  min-height: 44px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+}
+.brz .calorieapp-social-panel {
+  box-sizing: border-box;
+  width: 100% !important;
+  max-width: 680px !important;
+  margin: 24px auto !important;
+  padding: clamp(16px, 3vw, 28px);
+  border: 1px solid var(--calorieapp-border);
+  border-top: 4px solid var(--calorieapp-purple);
+  border-radius: 24px;
+  background: #fff;
+}
+.brz .calorieapp-social-panel iframe { max-width: 100% !important; }
+.brz .calorieapp-x-fallback {
+  display: block;
+  margin-top: 16px;
+  padding: 12px 18px;
+  border-radius: 24px;
+  color: #fff !important;
+  background: var(--calorieapp-green);
+  font: 600 16px/1.5 system-ui, sans-serif;
+  text-align: center;
+  text-decoration: none;
+}
+.brz .calorieapp-art-gallery {
+  box-sizing: border-box;
+  max-width: 760px !important;
+  margin: 32px auto !important;
+  padding: 16px;
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 24px;
+  background: #fff;
+  box-shadow: 0 8px 24px #3034490d;
+}
+.brz .calorieapp-art-gallery .nivoSlider { box-shadow: none; border-radius: 12px; }
+.brz .calorieapp-art-gallery .nivo-directionNav a {
+  display: grid !important;
+  place-items: center;
+  width: 44px !important;
+  height: 44px !important;
+  top: calc(50% - 22px);
+  background: #fff !important;
+  color: var(--calorieapp-green) !important;
+  border: 2px solid var(--calorieapp-green);
+  border-radius: 50%;
+  opacity: 1 !important;
+  text-indent: 0 !important;
+  font: 0/1 sans-serif;
+}
+.brz .calorieapp-art-gallery .nivo-prevNav { left: 8px !important; }
+.brz .calorieapp-art-gallery .nivo-nextNav { right: 8px !important; }
+.brz .calorieapp-art-gallery .nivo-prevNav::after { content: "‹"; font-size: 32px; }
+.brz .calorieapp-art-gallery .nivo-nextNav::after { content: "›"; font-size: 32px; }
+.brz .calorieapp-art-gallery :is(.nivo-directionNav,.nivo-controlNav) a:focus-visible {
+  outline: 3px solid var(--calorieapp-purple);
+  outline-offset: 3px;
+}
+.brz .calorieapp-art-gallery .nivo-controlNav a {
+  display: inline-grid !important;
+  place-items: center;
+  width: 36px !important;
+  height: 36px !important;
+  text-indent: 0 !important;
+  border-radius: 50%;
+  background: #f1f2f8 !important;
+  color: var(--calorieapp-purple);
+  font: 600 14px/1 sans-serif;
+}
+.brz .calorieapp-art-gallery .nivo-controlNav a.active { background: var(--calorieapp-purple) !important; color: #fff; }
+.brz .calorieapp-art-caption {
+  margin: 0 0 14px !important;
+  color: var(--calorieapp-purple);
+  font: 600 18px/1.5 system-ui, sans-serif;
+  text-align: center;
+}
+
+/* Contact cards and original usecase illustrations. No artwork is redrawn. */
+.brz .calorieapp-contact-card > .brz-column__items {
+  box-sizing: border-box;
+  min-height: 180px;
+  padding: 24px 18px !important;
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 28px !important;
+  background: #fff !important;
+  box-shadow: 0 6px 20px #30344912 !important;
+}
+.brz .calorieapp-contact-card .brz-wrapper { margin-block: 8px !important; }
+.brz .calorieapp-contact-card .brz-rich-text p { font-size: 22px !important; line-height: 1.4 !important; }
+.brz .calorieapp-social-image-link {
+  display: flex !important;
+  align-items: center;
+  justify-content: center;
+  min-height: 80px;
+}
+.brz .calorieapp-social-image-link > svg { display: block; width: 64px; height: 64px; color: #111; }
+.brz .calorieapp-contact-card .brz-image { max-width: 88px; margin-inline: auto; }
+.brz.page-id-1213 .calorieapp-contact-card,
+.brz.page-id-1213 .calorieapp-contact-card > .brz-column__items,
+.brz.page-id-1213 .calorieapp-contact-card .brz-wrapper {
+  box-sizing: border-box;
+  min-width: 0;
+  max-width: 100%;
+}
+.brz.page-id-1213 .calorieapp-contact-card { position: relative; z-index: 1; }
+.brz .calorieapp-usecase-image {
+  box-sizing: border-box;
+  padding: 10px;
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 22px;
+  background: #fff;
+  box-shadow: 0 6px 20px #30344912;
+}
+.brz .calorieapp-usecase-image img { object-fit: contain !important; }
+.brz .calorieapp-usecase-link { display: block; border-radius: 16px; }
+.brz .calorieapp-usecase-link:hover { outline: 2px solid var(--calorieapp-green); outline-offset: 3px; }
+.brz .calorieapp-trustline-details {
+  box-sizing: border-box;
+  width: 100%;
+  max-width: 760px;
+  margin-inline: auto;
+  padding: clamp(18px, 3vw, 32px);
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 24px;
+  background: #fff;
+}
+.brz .calorieapp-trustline-details p { font-size: 18px !important; line-height: 1.6 !important; overflow-wrap: anywhere; }
+.brz .calorieapp-copy-value { color: var(--calorieapp-ink); font: 16px/1.6 ui-monospace, monospace; user-select: all; overflow-wrap: anywhere; }
+.brz .calorieapp-copy-button {
+  display: block;
+  min-height: 44px;
+  margin: 8px auto 20px;
+  padding: 8px 20px;
+  border: 2px solid var(--calorieapp-purple);
+  border-radius: 24px;
+  background: #fff;
+  color: var(--calorieapp-purple);
+  font: 600 15px/1.5 system-ui, sans-serif;
+  cursor: pointer;
+}
+.brz .calorieapp-copy-status { display: block; min-height: 1.5em; font: 14px/1.5 system-ui, sans-serif; }
+.brz .calorieapp-xaman-label { display: block; color: var(--calorieapp-purple); font: 700 clamp(28px, 5vw, 48px)/1.4 system-ui, sans-serif; text-align: center; }
+.brz .calorieapp-xaman-trustline {
+  display: block;
+  box-sizing: border-box;
+  width: min(100%, 420px);
+  min-height: 48px;
+  margin: 24px auto;
+  padding: 12px 22px;
+  border: 2px solid var(--calorieapp-green);
+  border-radius: 999px;
+  background: var(--calorieapp-green);
+  color: #fff !important;
+  font: 700 17px/1.4 system-ui, sans-serif;
+  text-align: center;
+  text-decoration: none !important;
+}
+.brz .calorieapp-xaman-trustline:hover { background: #056d32; border-color: #056d32; }
+.brz .calorieapp-xaman-trustline:focus-visible { outline: 3px solid var(--calorieapp-yellow); outline-offset: 4px; }
+
+/* A beginner path first; market identities and both trade directions remain
+   visible without presenting the release-gated website module as live. */
+.brz .cal-buy-guide {
+  box-sizing: border-box;
+  width: min(1120px, calc(100% - 24px));
+  margin: 32px auto;
+  color: var(--calorieapp-ink);
+  font: 17px/1.6 system-ui, sans-serif;
+}
+.brz .cal-buy-guide :is(h2,h3,p,dl,ol) { margin-top: 0; }
+.brz .cal-buy-guide h2 { margin-bottom: 14px; color: var(--calorieapp-green); font-size: clamp(30px, 4vw, 48px); line-height: 1.15; }
+.brz .cal-buy-guide h3 { margin-bottom: 8px; color: var(--calorieapp-purple); font-size: 22px; line-height: 1.3; }
+.brz .cal-buy-eyebrow { margin-bottom: 8px !important; color: var(--calorieapp-purple); font-size: 14px; font-weight: 800; letter-spacing: .09em; text-transform: uppercase; }
+.brz .cal-buy-hero,
+.brz .cal-buy-markets,
+.brz .cal-buy-own-dex,
+.brz .cal-buy-risk {
+  box-sizing: border-box;
+  padding: clamp(22px, 4vw, 42px);
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 28px;
+  background: #fff;
+  box-shadow: 0 8px 26px #30344912;
+}
+.brz .cal-buy-hero { border-top: 6px solid var(--calorieapp-green); }
+.brz .cal-buy-identity { display: grid; gap: 10px; margin-bottom: 0; }
+.brz .cal-buy-identity div { display: grid; grid-template-columns: 80px minmax(0,1fr); gap: 12px; }
+.brz .cal-buy-identity dt { color: var(--calorieapp-purple); font-weight: 800; }
+.brz .cal-buy-identity dd { min-width: 0; margin: 0; overflow-wrap: anywhere; }
+.brz .cal-buy-identity code { font-size: 14px; user-select: all; }
+.brz .cal-buy-steps { display: grid; grid-template-columns: repeat(2, minmax(0,1fr)); gap: 18px; margin: 22px 0; padding: 0; list-style: none; counter-reset: none; }
+.brz .cal-buy-steps li { display: grid; grid-template-columns: 48px minmax(0,1fr); gap: 16px; padding: 24px; border: 1px solid var(--calorieapp-border); border-radius: 24px; background: #fff; }
+.brz .cal-buy-steps li > span { display: grid; place-items: center; width: 48px; height: 48px; border-radius: 50%; background: var(--calorieapp-purple); color: #fff; font-size: 20px; font-weight: 800; }
+.brz .cal-buy-guide a { color: var(--calorieapp-green); font-weight: 800; text-underline-offset: .2em; }
+.brz .cal-buy-guide a:focus-visible { outline: 3px solid var(--calorieapp-yellow); outline-offset: 4px; }
+.brz .cal-buy-markets { display: grid; grid-template-columns: 1.1fr .9fr; gap: 24px; align-items: center; }
+.brz .cal-buy-pair-grid { display: grid; gap: 12px; }
+.brz .cal-buy-pair-grid article { padding: 18px; border: 2px solid var(--calorieapp-green); border-radius: 18px; background: #f3fbf6; }
+.brz .cal-buy-pair-grid :is(strong,small) { display: block; }
+.brz .cal-buy-pair-grid strong { font-size: 21px; }
+.brz .cal-buy-pair-grid small { margin-top: 3px; }
+.brz .cal-buy-own-dex { margin-top: 22px; border-left: 6px solid var(--calorieapp-purple); }
+.brz .cal-buy-risk { margin-top: 22px; border-left: 6px solid var(--calorieapp-yellow); box-shadow: none; }
+.brz .cal-buy-risk > strong { color: var(--calorieapp-purple); font-size: 20px; }
+.brz .cal-buy-risk p { margin: 8px 0 0; }
+
+/* Keep totals, fields, transaction state and error handling native. */
+.brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) {
+  box-sizing: border-box;
+  max-width: 100%;
+  color: var(--calorieapp-ink);
+  font-size: 17px;
+  line-height: 1.6;
+}
+.brz.calorieapp-donation-page :is(.woocommerce-cart-form,.cart_totals,form.checkout,form.cart:has(#wcj_open_price)) {
+  box-sizing: border-box;
+  padding: clamp(16px, 3vw, 28px);
+  border: 1px solid var(--calorieapp-border);
+  border-radius: 22px;
+  background: #fff;
+}
+.brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(input.input-text,textarea,select,#wcj_open_price) {
+  min-height: 44px;
+  border: 2px solid var(--calorieapp-border);
+  border-radius: 14px;
+  padding: 10px 12px;
+  color: var(--calorieapp-ink);
+  background: #fff;
+  font-size: 17px !important;
+}
+.brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(button.button,a.button,input.button) {
+  min-height: 44px;
+  padding: 12px 22px;
+  border-radius: 26px !important;
+  white-space: normal;
+  color: #fff !important;
+  background: var(--calorieapp-green) !important;
+  font-size: 17px !important;
+  line-height: 1.5 !important;
+}
+.brz .calorieapp-donation-help {
+  flex-basis: 100%;
+  margin: 0 0 12px;
+  color: var(--calorieapp-purple);
+  font: 16px/1.6 system-ui, sans-serif;
+}
+.brz .calorieapp-donation-steps {
+  box-sizing: border-box;
+  width: 100%;
+  max-width: 760px;
+  margin: 0 auto 24px;
+  font: 16px/1.5 system-ui, sans-serif;
+}
+.brz .calorieapp-donation-steps ol { display: flex; flex-wrap: wrap; justify-content: center; gap: 10px; list-style: none; padding: 0; margin: 0; }
+.brz .calorieapp-donation-steps :is(a,span) { display: block; padding: 10px 16px; border: 1px solid var(--calorieapp-border); border-radius: 24px; background: #fff; color: var(--calorieapp-purple); }
+.brz .calorieapp-donation-steps [aria-current] { background: var(--calorieapp-purple); color: #fff; }
+@media (max-width: 768px) {
+  .brz .calorieapp-article-copy { padding: 20px 16px; }
+  .brz .calorieapp-contact-card > .brz-column__items { padding: 20px 12px !important; }
+  .brz .calorieapp-contact-card .brz-rich-text p { font-size: 19px !important; }
+  .brz.calorieapp-donation-page .cart_totals { margin-top: 20px; }
+  .brz .cal-buy-steps,
+  .brz .cal-buy-markets { grid-template-columns: 1fr; }
+  .brz .cal-buy-steps li { grid-template-columns: 42px minmax(0,1fr); padding: 20px 16px; }
+  .brz .cal-buy-steps li > span { width: 42px; height: 42px; }
+  .brz .cal-buy-identity div { grid-template-columns: 1fr; gap: 2px; }
+}
+
+/* Complianz keeps consent state and behavior; only its presentation is aligned
+   with the public site's existing palette and touch-target sizing. */
+#cmplz-cookiebanner-container .cmplz-cookiebanner {
+  box-sizing: border-box;
+  width: min(440px, calc(100vw - 24px));
+  max-height: calc(100dvh - 24px);
+  overflow-y: auto;
+  border: 2px solid #505ba9;
+  border-radius: 24px;
+  background: #fff;
+  color: #303449;
+  box-shadow: 0 14px 40px #30344940;
+  font-family: system-ui, sans-serif;
+}
+#cmplz-cookiebanner-container .cmplz-title { color: #505ba9; font-weight: 800; }
+#cmplz-cookiebanner-container :is(.cmplz-message,.cmplz-category-title,.cmplz-description) { line-height: 1.55; }
+#cmplz-cookiebanner-container .cmplz-buttons .cmplz-btn {
+  min-height: 44px;
+  border: 2px solid #07853d;
+  border-radius: 999px;
+  font-weight: 700;
+}
+#cmplz-cookiebanner-container .cmplz-accept { background: #07853d; color: #fff; }
+#cmplz-cookiebanner-container :is(.cmplz-deny,.cmplz-view-preferences,.cmplz-save-preferences) { background: #fff; color: #303449; }
+#cmplz-cookiebanner-container :is(.cmplz-link,a) { color: #505ba9; text-underline-offset: .18em; }
+#cmplz-manage-consent .cmplz-manage-consent {
+  min-height: 44px;
+  border: 2px solid #505ba9 !important;
+  border-radius: 16px 16px 0 0 !important;
+  background: #fff !important;
+  color: #303449 !important;
+  font: 700 14px/1.3 system-ui, sans-serif !important;
+}
+#cmplz-cookiebanner-container :is(button,a,input):focus-visible,
+#cmplz-manage-consent .cmplz-manage-consent:focus-visible { outline: 3px solid #fbb62b; outline-offset: 3px; }
+
+@media (max-width: 480px) {
+  #cmplz-cookiebanner-container .cmplz-cookiebanner {
+    width: calc(100vw - 16px);
+    max-height: calc(100dvh - 16px);
+    border-radius: 20px;
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js
new file mode 100644
index 0000000..41b5390
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js
@@ -0,0 +1,566 @@
+(function () {
+  "use strict";
+
+  // X's official monochrome logo, from its public brand toolkit.
+  var xPath = "M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328 0H0L468.492 681.821L0 1226.37H105.866L515.491 750.218L842.672 1226.37H1200L714.137 519.284H714.163ZM569.165 687.828L521.697 619.934L144.011 79.6944H306.615L611.412 515.685L658.88 583.579L1055.08 1150.3H892.476L569.165 687.854V687.828Z";
+  var home = window.location.origin;
+  var hero = home + "/wp-content/uploads/2024/01/achtergrondbannersitea1.png";
+  // Reviewed public copy from the step-3 inventory. Applied only to matching
+  // page IDs and unchanged original text; Brizy source is never rewritten.
+  var contentUpdates = [
+  {
+    "page": 1090,
+    "element": "wygumlqgiqrezhxnioktfbgvtguwcsybfflf",
+    "paragraph": "eugew",
+    "before": "Calorie Token is an XRP Ledger FinTech business focused on the worldwide food and beverage industry (F&B).",
+    "after": "CalorieToken explores how digital tools and the XRP Ledger can support the food and beverage sector."
+  },
+  {
+    "page": 1090,
+    "element": "juxhjswuxuolrxacbxalugomoyswtfmergct",
+    "paragraph": "ejsgn",
+    "before": "Calorie is created by a team of engineers and entrepreneurs who believe in the future of crypto and tokenization.",
+    "after": "CalorieApp is the project's current web app for finding food products, understanding nutrition and keeping a personal food log."
+  },
+  {
+    "page": 1090,
+    "element": "wlagoxngucccobsjnyxfhradewqcyffnztyq",
+    "paragraph": "bfgkq",
+    "before": "Calorie Token targets the worldwide F&B industry and aims to become the most used payment method within this industry.",
+    "after": "Our wider vision includes practical food data tools and possible future payment applications for consumers and businesses."
+  },
+  {
+    "page": 1090,
+    "element": "svtnkbqhfcwfhjndkflkcxdserrqjenkprhx",
+    "paragraph": "hftko",
+    "before": "$CAL runs on the XRP Ledger (XRPL) and is well known for its superior speed, low cost, scalability and sustainability.",
+    "after": "$CAL is the Calorie token issued on the XRP Ledger. It is part of the wider CalorieToken project and its food and beverage vision."
+  },
+  {
+    "page": 6897,
+    "element": "vrhwjlwmuyzhctxiwehppdchpfudmyfvenev",
+    "paragraph": "yAa81",
+    "before": "Catalyze the future of finance with your contribution. Your donation fuels the development of the CalorieApp, unlocking new possibilities and enhancing the Calorie ecosystem. Join us in shaping a revolutionary financial experience – donate today.",
+    "after": "Voluntary contributions support work on CalorieApp and the wider CalorieToken project, including improvements to the food and nutrition experience."
+  },
+  {
+    "page": 6926,
+    "element": "qyhfzzcmfmqhtwpwgmcbfzlduqykzvyvbtdq",
+    "paragraph": "sytvs",
+    "before": "Donations",
+    "after": "Cart"
+  },
+  {
+    "page": 1205,
+    "element": "znktoxmqwoepzseukfugifuucdujbqzchmor",
+    "paragraph": "ucgdw",
+    "before": "Set your trustline on Xumm:",
+    "after": "Set your trustline with Xaman:"
+  },
+  {
+    "page": 1213,
+    "element": "aerjwzqjbkfkyvztwjairnowbewwguyontna",
+    "paragraph": "viurb",
+    "before": "Twitter",
+    "after": "X"
+  },
+  {
+    "page": 1213,
+    "element": "pwwjpwwzusazehemuxkltpyhfnahcbjbdqbm",
+    "paragraph": "ssvhe",
+    "before": "Linkedin",
+    "after": "LinkedIn"
+  },
+  {
+    "page": 1213,
+    "element": "fvpovwkleajvcexfhwyvetuktrzmdjhdijev",
+    "paragraph": "cimmn",
+    "before": "Youtube",
+    "after": "YouTube"
+  },
+  {
+    "page": 1213,
+    "element": "zGipNitpHNJY",
+    "paragraph": "oBMuJ",
+    "before": "New team members are coming",
+    "after": "Team updates"
+  }
+];
+  var usecases = [
+  {
+    "page": 1119,
+    "element": "adjzneiqkagtfdgjljxbaoqcsjclanpaxjwg",
+    "key": "calorieapp-usecase-context-1119",
+    "text": "This illustration explores a possible future use of Calorie in food delivery. Ordering and merchant payment services would require further development and participating businesses. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  },
+  {
+    "page": 1121,
+    "element": "pphvdqmaimxhjnifkigsfdcyguqulfrrhixk",
+    "key": "calorieapp-usecase-context-1121",
+    "text": "This illustration explores possible future uses of Calorie in cafes and bars. Payment applications and a Calorie debit card are concepts, rather than services offered by the current CalorieApp. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  },
+  {
+    "page": 1123,
+    "element": "csfqgofnazlhmpgmwplmyhcbhznuakdreimu",
+    "key": "calorieapp-usecase-context-1123",
+    "text": "This illustration explores a possible future use of Calorie for takeaway orders. Ordering and payment services would require further development and participating businesses. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  },
+  {
+    "page": 1125,
+    "element": "rnkchjwqjfoqimzlqcpdwbdfzbbyilnoksct",
+    "key": "calorieapp-usecase-context-1125",
+    "text": "This illustration explores possible future uses of Calorie in restaurants, including supplier payments and sharing bills. These functions belong to the longer-term vision. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  },
+  {
+    "page": 1127,
+    "element": "pqtstqgpfoxaayuvdzwipgwonqiicrcnvgmc",
+    "key": "calorieapp-usecase-context-1127",
+    "text": "This illustration explores possible future uses of Calorie in grocery shopping and loyalty programmes. Store payments, rewards and debit cards remain concepts that need further development and participating businesses. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  },
+  {
+    "page": 1129,
+    "element": "jamhytnywvwftxmjyfkchyazpxnpdcyshpbn",
+    "key": "calorieapp-usecase-context-1129",
+    "text": "This illustration explores possible future uses of Calorie between farmers, wholesalers and hospitality businesses. Supplier payments and business integrations belong to the longer-term vision. Today, CalorieApp provides food search, nutrition information and a personal food log."
+  }
+];
+  var articleNotes = [
+  {
+    "page": 7608,
+    "key": "calorie-editorial-context-7608-20260907",
+    "prefix": "Title: Embracing the Future: The Potential of CalorieToken as a DAO",
+    "text": "This article records a discussion from August 2024 about a possible DAO structure. A full transfer of the project to a DAO remains a future direction, not an announced completed transition. The legal and organisational references below belong to the article’s original period. For the current product scope, see the project FAQ.",
+    "label": "Project FAQ",
+    "href": "https://calorietoken.net/index.php/faq/"
+  },
+  {
+    "page": 7545,
+    "key": "calorie-editorial-context-7545-20260907",
+    "prefix": "Tackling Frontrunning on the XRPL: Our Journey to a Practical Solution",
+    "text": "This article records a proposed approach to unfunded XRPL offers. The XRP Ledger can remove unfunded offers when it encounters them during transaction processing; an OfferCancel transaction cancels an offer owned by its sending account. An external monitoring service does not automatically gain permission to cancel other accounts’ offers. The proposal below should not be read as evidence of a deployed CalorieApp service.",
+    "label": "XRPL offer lifecycle",
+    "href": "https://xrpl.org/docs/concepts/tokens/decentralized-exchange/offers"
+  },
+  {
+    "page": 7564,
+    "key": "calorie-editorial-context-7564-20260907",
+    "prefix": "CalorieToken: An Update on Our Journey and Future Plans",
+    "text": "This is a historical project update from 2024. Today, CalorieApp provides food search, nutrition information and a personal food log using Open Food Facts. The FoodRepo, BigchainDB and IPFS descriptions below record earlier development plans; they are not a description of the current web app’s deployed architecture. Team circumstances and listing aspirations should also be read in their original context.",
+    "label": "Open CalorieApp",
+    "href": "https://calorietoken.net/index.php/calorieapp/"
+  },
+  {
+    "page": 7569,
+    "key": "calorie-editorial-context-7569-20260907",
+    "prefix": "Exciting News: First Release of the CalorieApp Test APK on Android!",
+    "text": "This article concerns the earlier CalorieAppTestnet Android prototype. The APK link below is retained as development history and is not the current web app or a Play Store release. For the current food search, nutrition information and personal food log, open CalorieApp in your browser.",
+    "label": "Open CalorieApp",
+    "href": "https://calorietoken.net/index.php/calorieapp/"
+  },
+  {
+    "page": 7578,
+    "key": "calorie-editorial-context-7578-20260907",
+    "prefix": "Unlock Seamless Trading with Our Integrated Exchange",
+    "text": "This article describes the former embedded exchange experience. That integration is outside the current CalorieApp web version, which focuses on food search, nutrition information and a personal food log. The wallet counts, supported assets and trading instructions below are historical descriptions, not a current service list. For today’s product scope, see the project FAQ.",
+    "label": "Project FAQ",
+    "href": "https://calorietoken.net/index.php/faq/"
+  },
+  {
+    "page": 7573,
+    "key": "calorie-editorial-context-7573-20260907",
+    "prefix": "Exciting News: Our Donations Page is LIVE!",
+    "text": "This article announced the donation page in 2023. Voluntary contributions support work on CalorieApp and the wider project. The merchandise and NFT launch language below belongs to that historical announcement and does not confirm current availability. Read the current donation page and its terms before contributing.",
+    "label": "Donation information",
+    "href": "https://calorietoken.net/index.php/donate/"
+  },
+  {
+    "page": 7583,
+    "key": "calorie-editorial-context-7583-20260907",
+    "prefix": "CalorieToken Hackathon: Building the Future of Health and Blockchain",
+    "text": "This article records the 2023 CalorieToken hackathon and early development experiments. It is not an open invitation to a current competition, and the APK links refer to the earlier testnet prototype. New events will have their own announcements. The current browser app is available from the CalorieApp page.",
+    "label": "Open CalorieApp",
+    "href": "https://calorietoken.net/index.php/calorieapp/"
+  },
+  {
+    "page": 7575,
+    "key": "calorie-editorial-context-7575-20260907",
+    "prefix": "Enhancing Trust in the XRPL Ecosystem: The Importance of Verified Doma",
+    "text": "This article records the project’s work on domain and account information. Domain verification establishes a specific link between a domain and an account or validator; it is not an endorsement of every claim, service or token associated with that domain. A TOML entry claiming an account must be checked against that account’s on-ledger Domain field.",
+    "label": "XRPL TOML and account verification",
+    "href": "https://xrpl.org/docs/references/xrp-ledger-toml"
+  },
+  {
+    "page": 7587,
+    "key": "calorie-editorial-context-7587-20260907",
+    "prefix": "The Importance of Test Currency and Testing in Blockchain Development",
+    "text": "This article explains the role of test assets in the project’s early experiments. CalorieTest and Lipisa belong to that development context. Their mention does not mean that the current CalorieApp browser experience includes a test wallet, token faucet or payment service. Its current focus is food search, nutrition information and a personal food log.",
+    "label": "Open CalorieApp",
+    "href": "https://calorietoken.net/index.php/calorieapp/"
+  },
+  {
+    "page": 7591,
+    "key": "calorie-editorial-context-7591-20260907",
+    "prefix": "Discover the Future of Food with Calorie Token: A Comprehensive Overvi",
+    "text": "This is the project’s original 2023 overview. The allocation percentages describe the initial plan, not current wallet balances. The payment, NFT, inventory, private-key and BigchainDB/IPFS sections describe that early vision. Today, CalorieApp provides food search, nutrition information and a personal food log using Open Food Facts. The project FAQ explains the current scope.",
+    "label": "Project FAQ",
+    "href": "https://calorietoken.net/index.php/faq/"
+  }
+];
+  var usecaseSlugs = ["delivery", "cafes", "takeaway", "restaurants", "groceries", "wholesalers"];
+
+  function pageId() {
+    var match = document.body.className.match(/(?:^|\s)(?:page-id-|postid-)(\d+)(?:\s|$)/);
+    return match ? Number(match[1]) : 0;
+  }
+  function plain(text) { return String(text || "").replace(/\s+/g, " ").trim(); }
+  function localRoute(slug) { return home + "/index.php/" + slug + "/"; }
+  function svgMark(path) {
+    var svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+    svg.setAttribute("viewBox", "0 0 1200 1227");
+    svg.setAttribute("aria-hidden", "true");
+    svg.setAttribute("focusable", "false");
+    var shape = document.createElementNS("http://www.w3.org/2000/svg", "path");
+    shape.setAttribute("d", path);
+    shape.setAttribute("fill", "currentColor");
+    svg.appendChild(shape);
+    return svg;
+  }
+  function replaceMatchingText(element, before, after) {
+    if (!element || plain(element.textContent) !== plain(before)) return false;
+    // Retain the existing link, emphasis and typography when a leaf contains
+    // the complete text. Never replace a container with a form or image.
+    if (element.querySelector("img,svg,iframe,input,button,select,textarea")) return false;
+    var leaves = Array.from(element.querySelectorAll("a,u,strong,span"));
+    var target = leaves.reverse().find(function (leaf) { return plain(leaf.textContent) === plain(before); }) || element;
+    target.textContent = after;
+    return true;
+  }
+  function applyCopy(id) {
+    contentUpdates.filter(function (item) { return item.page === id; }).forEach(function (item) {
+      var root = document.querySelector('[data-brz-custom-id="' + item.element + '"]');
+      var paragraph = root && root.querySelector('[data-uniq-id="' + item.paragraph + '"]');
+      replaceMatchingText(paragraph, item.before, item.after);
+    });
+  }
+  function contextNote(key, title, text, linkText, href) {
+    var aside = document.createElement("aside");
+    aside.className = "calorieapp-context-note";
+    aside.id = key;
+    var heading = document.createElement("strong");
+    heading.textContent = title;
+    var paragraph = document.createElement("p");
+    paragraph.textContent = text;
+    var link = document.createElement("a");
+    link.href = href;
+    link.textContent = linkText;
+    aside.append(heading, paragraph, link);
+    return aside;
+  }
+  function refineReading(id) {
+    document.querySelectorAll("section .brz-rich-text").forEach(function (rich) {
+      var section = rich.closest("section");
+      if (section.querySelector(".brz-menu-simple,.xl-card") || rich.querySelector("h1,.metaslider,.brz-timeline,iframe,form") ||
+          plain(rich.textContent).indexOf("Operator: ICTHendrikse") === 0) return;
+      if (plain(rich.textContent).length < 220) return;
+      rich.classList.add("calorieapp-reading-copy");
+      rich.querySelectorAll("p").forEach(function (paragraph) {
+        if (!plain(paragraph.textContent) && !paragraph.querySelector("img,svg,iframe,video,input")) paragraph.classList.add("calorieapp-empty-paragraph");
+      });
+    });
+    if (!document.body.classList.contains("single-post")) return;
+    var copies = Array.from(document.querySelectorAll(".calorieapp-reading-copy"));
+    copies.sort(function (a, b) { return b.textContent.length - a.textContent.length; });
+    var article = copies[0];
+    if (!article) return;
+    article.classList.add("calorieapp-article-copy");
+    var section = article.closest("section");
+    var title = section && section.querySelector("h1");
+    var titleRoot = title && title.closest(".brz-rich-text");
+    if (titleRoot) titleRoot.classList.add("calorieapp-article-title");
+    var note = articleNotes.find(function (item) { return item.page === id; });
+    if (!note || document.getElementById(note.key) || /About this article — September 2026/.test(article.textContent)) return;
+    if (plain(article.textContent).indexOf(note.prefix) !== 0) return;
+    article.prepend(contextNote(note.key, "About this article — September 2026", note.text, note.label, note.href));
+  }
+  function refineUsecases(id) {
+    document.querySelectorAll(".brz-image a[href]").forEach(function (link) {
+      var url;
+      try { url = new URL(link.href); } catch (_error) { return; }
+      if (url.origin !== home || url.search || url.hash) return;
+      var slug = url.pathname.replace(/^\/index\.php\//, "/").replace(/^\/|\/$/g, "");
+      if (usecaseSlugs.indexOf(slug) === -1) return;
+      link.classList.add("calorieapp-usecase-link");
+      link.setAttribute("aria-label", "Explore " + slug + " use concept");
+      link.closest(".brz-image").classList.add("calorieapp-usecase-image");
+    });
+    var note = usecases.find(function (item) { return item.page === id; });
+    if (!note) return;
+    document.querySelectorAll("section .brz-image").forEach(function (picture) { picture.classList.add("calorieapp-usecase-image"); });
+    var root = document.querySelector('[data-brz-custom-id="' + note.element + '"]');
+    if (!root || document.getElementById(note.key) || /Future use concept/.test(root.textContent)) return;
+    root.prepend(contextNote(note.key, "Future use concept", note.text, "Open CalorieApp", localRoute("calorieapp")));
+  }
+  function refineBlog(id) {
+    if (id !== 1207) return;
+    document.querySelectorAll(".brz-rich-text").forEach(function (rich) {
+      replaceMatchingText(rich, "X.com/Twitter Posts", "Posts on X");
+    });
+    var embed = document.querySelector('a.twitter-timeline,iframe.twitter-timeline');
+    var panel = embed && embed.closest(".brz-wp-shortcode");
+    if (panel) {
+      panel.classList.add("calorieapp-social-panel");
+      if (!panel.querySelector(".calorieapp-x-fallback")) {
+        var fallback = document.createElement("a");
+        fallback.className = "calorieapp-x-fallback";
+        fallback.href = "https://x.com/CalorieToken";
+        fallback.rel = "noopener noreferrer";
+        fallback.textContent = "View CalorieToken on X";
+        // Outside the consent-controlled embed; no provider script is loaded.
+        panel.appendChild(fallback);
+      }
+    }
+    var gallery = document.getElementById("metaslider-id-819");
+    if (!gallery) return;
+    gallery.classList.add("calorieapp-art-gallery");
+    gallery.setAttribute("aria-label", "Historical CalorieToken community art");
+    if (!gallery.querySelector(".calorieapp-art-caption")) {
+      var caption = document.createElement("p");
+      caption.className = "calorieapp-art-caption";
+      caption.textContent = "Community art · From our history";
+      gallery.prepend(caption);
+    }
+    gallery.querySelectorAll(".nivo-directionNav a,.nivo-controlNav a").forEach(function (control) {
+      if (control.dataset.calorieappKeyboard === "1") return;
+      control.setAttribute("role", "button");
+      control.setAttribute("tabindex", "0");
+      if (!control.hasAttribute("aria-label")) control.setAttribute("aria-label", "Show artwork " + plain(control.textContent));
+      control.addEventListener("keydown", function (event) {
+        if (event.key !== "Enter" && event.key !== " ") return;
+        event.preventDefault();
+        control.click();
+      });
+      control.dataset.calorieappKeyboard = "1";
+    });
+  }
+  function refineContact(id) {
+    if (id !== 1213) return;
+    // The image had an older invite while the text and footer use this one.
+    document.querySelectorAll('section a[href="https://t.me/joinchat/8jIusxwzMVI0NGVk"]').forEach(function (link) {
+      link.href = "https://t.me/+7YxaKdQYWNA0NDA0";
+    });
+    var social = [
+      ["https://x.com/CalorieToken", "X", "#111"],
+      ["https://www.linkedin.com/company/calorie-token/", "LinkedIn", "#0a66c2"],
+      ["https://www.facebook.com/CalorieToken-100422882407878", "Facebook", "#0866ff"],
+      ["https://t.me/+7YxaKdQYWNA0NDA0", "Telegram", "#168ac0"],
+      ["https://www.youtube.com/channel/UCV_87rxST-cQOVu4W8nFZkA", "YouTube", "#e62117"],
+      ["https://www.instagram.com/calorietoken/", "Instagram", "#833ab4"]
+    ];
+    social.forEach(function (item) {
+      document.querySelectorAll('.brz-image a[href="' + item[0] + '"]').forEach(function (link) {
+        var column = link.closest(".brz-columns");
+        if (column) column.classList.add("calorieapp-contact-card");
+        link.classList.add("calorieapp-social-image-link");
+        link.setAttribute("aria-label", "CalorieToken on " + item[1]);
+        link.setAttribute("title", item[1]);
+        var picture = link.querySelector("picture");
+        if (!picture) return;
+        var mark;
+        if (item[1] === "X") mark = svgMark(xPath);
+        else {
+          // Reuse this site's existing footer symbol, never an invented logo.
+          var original = Array.from(document.querySelectorAll('a[href="' + item[0] + '"] svg use'))[0];
+          if (!original) return;
+          mark = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+          mark.setAttribute("aria-hidden", "true");
+          mark.setAttribute("focusable", "false");
+          mark.appendChild(original.cloneNode(true));
+        }
+        mark.style.color = item[2];
+        picture.replaceWith(mark);
+      });
+    });
+  }
+  function refineTrustline(id) {
+    if (id !== 1205) return;
+    var details = document.querySelector('[data-brz-custom-id="nrsbytvlhdquaddotxqmaeiihmzfbcufpmhr"]');
+    if (!details) return;
+    details.classList.add("calorieapp-trustline-details");
+    var values = [
+      ["rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY", "issuer"],
+      ["43616C6F72696500000000000000000000000000", "currency code"]
+    ];
+    values.forEach(function (item) {
+      var paragraph = Array.from(details.querySelectorAll("p")).find(function (p) { return plain(p.textContent) === item[0]; });
+      if (!paragraph || paragraph.dataset.calorieappCopy === "1") return;
+      paragraph.classList.add("calorieapp-copy-value");
+      var button = document.createElement("button");
+      button.className = "calorieapp-copy-button";
+      button.type = "button";
+      button.textContent = "Copy " + item[1];
+      var status = document.createElement("span");
+      status.className = "calorieapp-copy-status";
+      status.setAttribute("role", "status");
+      button.addEventListener("click", function () {
+        if (!navigator.clipboard || !navigator.clipboard.writeText) {
+          status.textContent = "Select the " + item[1] + " above to copy it.";
+          return;
+        }
+        navigator.clipboard.writeText(item[0]).then(function () {
+          status.textContent = "Copied " + item[1] + ".";
+        }, function () { status.textContent = "Select the " + item[1] + " above to copy it."; });
+      });
+      paragraph.after(button, status);
+      paragraph.dataset.calorieappCopy = "1";
+    });
+    var oldLogo = document.querySelector('[data-brz-custom-id="xgtkrgoagaprsyfxmfdmrqmaqfjkwgmokcdq"] picture');
+    if (oldLogo) {
+      var label = document.createElement("span");
+      label.className = "calorieapp-xaman-label";
+      label.textContent = "Xaman";
+      oldLogo.replaceWith(label);
+    }
+    if (!document.getElementById("calorieapp-xaman-trustline")) {
+      var trustline = document.createElement("a");
+      trustline.id = "calorieapp-xaman-trustline";
+      trustline.className = "calorieapp-xaman-trustline";
+      trustline.href = "?xl-trustline";
+      trustline.textContent = "Set CAL trustline in Xaman";
+      trustline.setAttribute("aria-label", "Create a CAL trustline request and review it in Xaman");
+      details.appendChild(trustline);
+    }
+    if (!document.getElementById("calorieapp-trustline-context")) {
+      var note = contextNote("calorieapp-trustline-context", "Before you continue", "A CAL trustline belongs to your XRPL wallet. Check the issuer and currency code in the request before signing. Food search and nutrition information in CalorieApp do not require a CAL trustline.", "Open XRP Toolkit", "https://www.xrptoolkit.com/");
+      details.appendChild(note);
+    }
+  }
+  function refineHowToBuy(id) {
+    if (id !== 4205) return;
+    var guide = document.querySelector(".cal-buy-guide");
+    if (!guide || guide.dataset.calorieappBuyGuide === "1") return;
+    guide.dataset.calorieappBuyGuide = "1";
+    guide.innerHTML = [
+      '<header class="cal-buy-hero">',
+      '<p class="cal-buy-eyebrow">XRPL buying and selling guide</p>',
+      '<h2>Buy or sell CAL in four clear steps</h2>',
+      '<p>CAL is currently traded on the XRP Ledger DEX. There is no confirmed centralised-exchange listing on this page. Always verify the complete issuer, not only the name or logo.</p>',
+      '<dl class="cal-buy-identity"><div><dt>Asset</dt><dd>Calorie (CAL)</dd></div><div><dt>Issuer</dt><dd><code>rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY</code></dd></div></dl>',
+      '</header>',
+      '<ol class="cal-buy-steps">',
+      '<li><span>1</span><div><h3>Set up an XRPL wallet</h3><p>Install Xaman from its official source and secure your recovery information offline. Never enter a recovery phrase on this website or a trading page.</p><a href="https://xaman.app/" rel="noopener noreferrer">Visit Xaman</a></div></li>',
+      '<li><span>2</span><div><h3>Get XRP for funding and fees</h3><p>Use the Xaman country/currency selector to see providers available for your region. Provider access, verification, price and fees vary; CalorieToken does not operate or endorse those services.</p><a href="https://xumm.app/detect/xapp:xumm.buysellxrp" rel="noopener noreferrer">Find options in Xaman</a></div></li>',
+      '<li><span>3</span><div><h3>Add the exact CAL trustline</h3><p>A trustline is required before receiving CAL. Review the issuer and currency code in Xaman before signing.</p><a href="' + localRoute("trustline") + '">Open CAL trustline guide</a></div></li>',
+      '<li><span>4</span><div><h3>Choose buy or sell</h3><p>Open the verified CAL page on XPMarket, choose XRP or RLUSD, inspect the route, fees, liquidity, price impact and amount, then approve only the transaction you intend in your wallet.</p><a href="https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY" rel="noopener noreferrer">Trade CAL on XPMarket</a></div></li>',
+      '</ol>',
+      '<section class="cal-buy-markets" aria-labelledby="cal-buy-markets-title"><div><p class="cal-buy-eyebrow">Issuer-verified assets</p><h3 id="cal-buy-markets-title">Initial CAL markets</h3><p>Both directions are supported by the market: buy CAL or sell CAL. Live availability and execution are never guaranteed.</p></div><div class="cal-buy-pair-grid"><article><strong>CAL <span aria-hidden="true">↔</span><span class="screen-reader-text"> and </span> XRP</strong><small>Validated XRPL AMM</small></article><article><strong>CAL <span aria-hidden="true">↔</span><span class="screen-reader-text"> and </span> RLUSD</strong><small>Validated XRPL AMM</small></article></div></section>',
+      '<aside class="cal-buy-own-dex"><p class="cal-buy-eyebrow">Website trade module</p><h3>Direct Xaman signing is being prepared</h3><p>The planned module will support buying and selling CAL with XRP or RLUSD while keeping keys in Xaman. It will show the exact route, expected amount, fees, liquidity and price impact before signature. Mainnet transaction submission stays unavailable until legal-scope and security release gates are complete.</p></aside>',
+      '<aside class="cal-buy-risk"><strong>Important</strong><p>Trading can result in loss. Liquidity may be supplied by project-related or affiliated wallets as well as independent participants. Availability, price and execution are not guaranteed. This practical guide is not investment advice.</p></aside>'
+    ].join("");
+  }
+  function refineDonations(id) {
+    var steps = [
+      [6897, "Donation", "donate"],
+      [6914, "Amount", "product/donation"],
+      [6926, "Cart", "cart"],
+      [6937, "Checkout", "checkout"]
+    ];
+    var index = steps.findIndex(function (step) { return step[0] === id; });
+    if (index === -1) return;
+    document.body.classList.add("calorieapp-donation-page");
+    var field = document.getElementById("wcj_open_price");
+    if (field && !document.getElementById("calorieapp-donation-help")) {
+      var form = field.closest("form");
+      if (form) {
+        var help = document.createElement("p");
+        help.className = "calorieapp-donation-help";
+        help.id = "calorieapp-donation-help";
+        help.textContent = "Choose your donation amount in XRP. You can review the amount and quantity in your cart before continuing to payment.";
+        form.prepend(help);
+        field.setAttribute("aria-describedby", plain((field.getAttribute("aria-describedby") || "") + " " + help.id));
+        if (!field.hasAttribute("inputmode")) field.setAttribute("inputmode", "decimal");
+      }
+    }
+    if (document.getElementById("calorieapp-donation-steps")) return;
+    var content = document.querySelector(".brz-woo-add-to-cart,.woocommerce-cart-form,form.checkout");
+    if (!content) return;
+    var nav = document.createElement("nav");
+    nav.id = "calorieapp-donation-steps";
+    nav.className = "calorieapp-donation-steps";
+    nav.setAttribute("aria-label", "Donation steps");
+    var list = document.createElement("ol");
+    steps.forEach(function (step, n) {
+      var li = document.createElement("li");
+      // Future steps are text: no shortcut can skip entering/reviewing amount.
+      var label = document.createElement(n < index ? "a" : "span");
+      label.textContent = (n + 1) + ". " + step[1];
+      if (n < index) label.href = localRoute(step[2]);
+      if (n === index) label.setAttribute("aria-current", "step");
+      li.appendChild(label);
+      list.appendChild(li);
+    });
+    nav.appendChild(list);
+    var anchor = content.closest(".brz-wrapper") || content;
+    anchor.parentNode.insertBefore(nav, anchor);
+  }
+
+  function polish() {
+    // Only the main navigation's existing header background is normalized.
+    // Product pictures, historical artwork and payment controls are untouched.
+    document.querySelectorAll(".brz-menu-simple").forEach(function (menu) {
+      var section = menu.closest("section");
+      var background = section && section.querySelector(".brz-section__content > .brz-bg > .brz-bg-image");
+      if (!background || background.dataset.calorieappHeaderPolished === "1") return;
+      var original = window.getComputedStyle(background).backgroundImage;
+      if (!/\/Caloriefoto2\.jpg(?:["')?]|$)/i.test(original)) return;
+      background.style.setProperty("background-image", 'url("' + hero + '")', "important");
+      background.style.setProperty("background-size", "cover", "important");
+      background.style.setProperty("background-position", "center", "important");
+      background.dataset.calorieappHeaderPolished = "1";
+    });
+
+    document.querySelectorAll('a[href]').forEach(function (link) {
+      var url;
+      try { url = new URL(link.href, window.location.href); } catch (_error) { return; }
+      if (url.protocol !== "https:" || url.username || url.password ||
+          !/^(?:www\.)?(?:twitter\.com|x\.com)$/.test(url.hostname) ||
+          !/^\/CalorieToken\/?$/i.test(url.pathname) || url.search || url.hash) return;
+      // Never rewrite historical tweet permalinks or unrelated accounts.
+      link.href = "https://x.com/CalorieToken";
+      var glyph = link.querySelector("svg");
+      var use = glyph && glyph.querySelector("use");
+      var href = use && (use.getAttribute("href") || use.getAttribute("xlink:href") || "");
+      if (glyph && /\/twitter\.svg#fa_icon$/.test(href || "")) {
+        var path = document.createElementNS("http://www.w3.org/2000/svg", "path");
+        path.setAttribute("d", xPath);
+        path.setAttribute("fill", "currentColor");
+        glyph.replaceChildren(path);
+        glyph.setAttribute("viewBox", "0 0 1200 1227");
+        glyph.setAttribute("aria-hidden", "true");
+        glyph.setAttribute("focusable", "false");
+        link.setAttribute("aria-label", "CalorieToken on X");
+        link.setAttribute("title", "CalorieToken on X");
+      }
+    });
+    var id = pageId();
+    applyCopy(id);
+    refineReading(id);
+    refineUsecases(id);
+    refineBlog(id);
+    refineContact(id);
+    refineTrustline(id);
+    refineHowToBuy(id);
+    refineDonations(id);
+  }
+
+  function boot() {
+    if (!document.body || /\/wp-admin\//.test(window.location.pathname) ||
+        document.body.classList.contains("brz-ed") || document.querySelector("#brz-ed-iframe")) return;
+    polish();
+    window.addEventListener("load", polish, { once: true });
+    window.addEventListener("pageshow", polish);
+    // Brizy's carousel clones already-corrected icons after initialization.
+    // No whole-document mutation observer or ongoing polling is needed.
+  }
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", boot, { once: true });
+  else boot();
+})();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index de8fda9..c95401c 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.27
+ * Version: 0.3.30
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.27');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.30');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
index fc43fb3..84e19ec 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
@@ -33,6 +33,8 @@ public function enqueue_assets(): void {
         $version = CALORIEAPP_IDENTITY_BRIDGE_VERSION;
         wp_enqueue_style('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.css', [], $version);
         wp_enqueue_script('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.js', [], $version, true);
+        wp_enqueue_style('calorieapp-identity-bridge-site-polish', $url . 'calorieapp-site-polish.css', ['calorieapp-identity-bridge-page-ending'], $version);
+        wp_enqueue_script('calorieapp-identity-bridge-site-polish', $url . 'calorieapp-site-polish.js', [], $version, true);
     }
 
     /** One compact stack replaces the page-specific fixed shortcut slots. */
@@ -70,15 +72,27 @@ public function render_shortcuts(): void {
     }
 
     public function render(): void {
-        if ($this->rendered || !$this->is_app_page()) {
+        if ($this->rendered || is_admin() || is_feed() || is_embed() || !is_singular()) {
             return;
         }
         $this->rendered = true;
+        if (!$this->is_app_page()) {
+            ?>
+            <aside class="calorieapp-page-market calorieapp-sitewide-market" data-calorieapp-sitewide-market aria-label="<?php echo esc_attr__('Calorie Token on XPMarket', 'calorieapp-identity-bridge'); ?>">
+                <div class="calorieapp-xpmarket-widget" data-calorieapp-xpmarket-widget>
+                    <a class="calorieapp-xpmarket-link" href="<?php echo esc_url(MarketWidget::TOKEN_PAGE); ?>" rel="noopener noreferrer">
+                        <?php echo esc_html__('View CAL on XPMarket', 'calorieapp-identity-bridge'); ?>
+                    </a>
+                </div>
+            </aside>
+            <?php
+            return;
+        }
         $copyright_year = wp_date('Y');
         $social_links = [
             ['label' => 'Telegram', 'url' => 'https://t.me/+7YxaKdQYWNA0NDA0', 'icon' => 'telegram.svg'],
             ['label' => 'GitHub', 'url' => 'https://github.com/CalorieToken', 'icon' => 'github-square.svg'],
-            ['label' => 'X', 'url' => 'https://twitter.com/CalorieToken', 'icon' => 'twitter.svg'],
+            ['label' => 'X', 'url' => 'https://x.com/CalorieToken', 'icon' => 'twitter.svg'],
             ['label' => 'Facebook', 'url' => 'https://www.facebook.com/CalorieToken-100422882407878', 'icon' => 'facebook.svg'],
             ['label' => 'YouTube', 'url' => 'https://www.youtube.com/channel/UCV_87rxST-cQOVu4W8nFZkA', 'icon' => 'youtube.svg'],
             ['label' => 'LinkedIn', 'url' => 'https://www.linkedin.com/company/calorie-token/', 'icon' => 'linkedin.svg'],

From 103f3ea2b51c4d8d042cbadff6f61db856149ed7 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 09:51:44 +0200
Subject: [PATCH 06/12] Complete Step 3 website presentation bundle 0.3.40

---
 .../workflows/bridge-maintenance-checks.yml   |  27 +-
 .../display-language/v1/CMS_EXPERIMENT.md     | 170 ++++++
 contracts/display-language/v1/README.md       | 379 ++++++++++++++
 .../display-language/v1/cms-faq-preview.json  | 488 ++++++++++++++++++
 contracts/display-language/v1/cms-preview.js  | 173 +++++++
 contracts/display-language/v1/copy.json       |  46 ++
 contracts/display-language/v1/runtime.js      | 179 +++++++
 .../xrpl-amm-identities-20260908.json         |  30 ++
 contracts/ecosystem/xrpl-dex-assets.v1.json   |   3 +-
 contracts/identity-bridge/v1/README.md        |   6 +
 .../identity-bridge/v1/code-provenance.json   | 161 +++++-
 docs/FOOD_DATA_SOURCE_ARCHITECTURE.md         |   6 +
 docs/PRIVACY_NOTICE_ALIGNMENT.md              | 234 +++++++++
 docs/STEP_3_DEX_SCOPE.md                      |  16 +
 docs/STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md    | 321 ++++++++++++
 docs/STEP_3_PRESENTATION_RELEASE.md           |  63 +--
 docs/STEP_3_REPAIR_CHECKPOINT.md              |  48 ++
 docs/STEP_3_SESSION_NAVIGATION.md             |   5 +-
 tools/check_step3_candidate.py                | 151 ++++++
 tools/fixtures/step3/faq-language-model.mjs   | 118 +++++
 tools/fixtures/step3/faq-mission-source.html  |   5 +
 tools/fixtures/step3/how-to-buy-legacy.html   |   6 +
 .../fixtures/step3/shared-footer-preview.html |  94 ++++
 .../tests/display_language_protocol.test.mjs  | 166 ++++++
 .../test_build_wordpress_plugin_release.py    |  18 +
 tools/tests/test_xrpl_dex_asset_registry.py   | 173 +++++--
 tools/tests/wordpress_blog_x.test.mjs         | 147 ++++++
 tools/tests/wordpress_buy_guide.test.mjs      |  75 +++
 .../wordpress_cms_language_preview.test.mjs   | 184 +++++++
 .../tests/wordpress_display_language.test.mjs | 229 ++++++++
 .../tests/wordpress_display_language.test.php | 119 +++++
 tools/tests/wordpress_page_ending.test.mjs    |   6 +-
 tools/tests/wordpress_page_ending.test.php    | 160 +++++-
 tools/tests/wordpress_richlist.test.mjs       |  92 ++++
 tools/tests/wordpress_shared_footer.test.mjs  | 193 +++++++
 tools/tests/wordpress_site_layout.test.mjs    |  18 +-
 .../tests/wordpress_site_navigation.test.mjs  |  67 ++-
 tools/tests/wordpress_step3_polish.test.mjs   | 133 +++--
 tools/tests/wordpress_tokenomics.test.mjs     | 100 ++++
 tools/tests/wordpress_trustline.test.mjs      | 217 ++++++++
 .../CONFIGURATION.md                          |  18 +
 .../calorieapp-identity-bridge/README.md      | 110 ++++
 .../THIRD_PARTY_NOTICES.md                    |  16 +-
 .../assets/calorieapp-buy-guide-language.js   |  56 ++
 .../assets/calorieapp-cms-language-preview.js | 173 +++++++
 .../calorieapp-display-language-runtime.js    | 179 +++++++
 .../assets/calorieapp-display-language.css    |  28 +
 .../assets/calorieapp-display-language.js     | 117 +++++
 .../assets/calorieapp-page-ending.css         |  53 +-
 .../assets/calorieapp-page-ending.js          | 140 ++++-
 .../assets/calorieapp-site-layout.css         |  26 +-
 .../assets/calorieapp-site-layout.js          | 139 ++++-
 .../assets/calorieapp-site-navigation.js      |  89 +++-
 .../assets/calorieapp-site-polish.css         | 202 ++++----
 .../assets/calorieapp-site-polish.js          | 388 +++++++++++---
 .../assets/calorieapp-tokenomics.css          |  24 +
 .../assets/calorieapp-tokenomics.js           |  84 +++
 .../calorieapp-identity-bridge.php            |   4 +-
 .../config/app-information.json               |  57 ++
 .../config/blog-x.json                        |  63 +++
 .../config/cms-faq-preview.json               | 488 ++++++++++++++++++
 .../config/display-language.json              |  46 ++
 .../config/how-to-buy.json                    | 349 +++++++++++++
 .../config/navigation.json                    |  85 +++
 .../config/richlist.json                      |  63 +++
 .../config/tokenomics.json                    | 107 ++++
 .../config/trustline.json                     | 151 ++++++
 ...ieapp-identity-bridge-display-language.php | 105 ++++
 ...calorieapp-identity-bridge-page-ending.php | 171 +++++-
 .../class-calorieapp-identity-bridge.php      |   4 +
 70 files changed, 7945 insertions(+), 416 deletions(-)
 create mode 100644 contracts/display-language/v1/CMS_EXPERIMENT.md
 create mode 100644 contracts/display-language/v1/README.md
 create mode 100644 contracts/display-language/v1/cms-faq-preview.json
 create mode 100644 contracts/display-language/v1/cms-preview.js
 create mode 100644 contracts/display-language/v1/copy.json
 create mode 100644 contracts/display-language/v1/runtime.js
 create mode 100644 contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json
 create mode 100644 docs/STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md
 create mode 100644 docs/STEP_3_REPAIR_CHECKPOINT.md
 create mode 100644 tools/check_step3_candidate.py
 create mode 100644 tools/fixtures/step3/faq-language-model.mjs
 create mode 100644 tools/fixtures/step3/faq-mission-source.html
 create mode 100644 tools/fixtures/step3/how-to-buy-legacy.html
 create mode 100644 tools/fixtures/step3/shared-footer-preview.html
 create mode 100644 tools/tests/display_language_protocol.test.mjs
 create mode 100644 tools/tests/wordpress_blog_x.test.mjs
 create mode 100644 tools/tests/wordpress_buy_guide.test.mjs
 create mode 100644 tools/tests/wordpress_cms_language_preview.test.mjs
 create mode 100644 tools/tests/wordpress_display_language.test.mjs
 create mode 100644 tools/tests/wordpress_display_language.test.php
 create mode 100644 tools/tests/wordpress_richlist.test.mjs
 create mode 100644 tools/tests/wordpress_shared_footer.test.mjs
 create mode 100644 tools/tests/wordpress_tokenomics.test.mjs
 create mode 100644 tools/tests/wordpress_trustline.test.mjs
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-buy-guide-language.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-cms-language-preview.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language-runtime.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.css
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.css
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.js
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/app-information.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/blog-x.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/cms-faq-preview.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/display-language.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/how-to-buy.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/navigation.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/richlist.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/tokenomics.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/config/trustline.json
 create mode 100644 wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php

diff --git a/.github/workflows/bridge-maintenance-checks.yml b/.github/workflows/bridge-maintenance-checks.yml
index 7b7fce2..2a27acc 100644
--- a/.github/workflows/bridge-maintenance-checks.yml
+++ b/.github/workflows/bridge-maintenance-checks.yml
@@ -22,26 +22,7 @@ jobs:
       - uses: actions/setup-node@v6
         with:
           node-version: '20'
-      - name: Lint plugin PHP
-        run: find wordpress-plugins/calorieapp-identity-bridge -name '*.php' -type f -print0 | xargs -0 -n1 php -l
-      - name: Exercise WordPress page rendering
-        run: php tools/tests/wordpress_site_session_markup.test.php
-      - name: Preserve non-page responses while correcting donation footers
-        run: php tools/tests/wordpress_legal_footer_post.test.php
-      - name: Return successful donation forms to a reloadable page
-        run: php tools/tests/wordpress_donation_return.test.php
-      - name: Check the CalorieApp footer and public market data
-        run: |
-          php tools/tests/wordpress_page_ending.test.php
-          node --test tools/tests/wordpress_page_ending.test.mjs
-          node --test tools/tests/wordpress_embed_loading.test.mjs
-      - name: Exercise the preserved login and site-wide session controls
-        run: node --test tools/tests/calorieapp_embed_readiness.test.mjs tools/tests/wordpress_site_session.test.mjs
-      - name: Check responsive header correction lifecycle
-        run: node --test tools/tests/wordpress_site_layout.test.mjs
-      - name: Check floating shortcut destinations and current-page visibility
-        run: node --test tools/tests/wordpress_site_navigation.test.mjs
-      - name: Verify deterministic plugin package
-        run: |
-          python -m unittest tools.tests.test_build_wordpress_plugin_release
-          python tools/build_wordpress_plugin_release.py
+      - name: Check the shared Step 3 candidate (PHP required)
+        run: python tools/check_step3_candidate.py --require-php
+      - name: Build the checked local candidate
+        run: python tools/build_wordpress_plugin_release.py
diff --git a/contracts/display-language/v1/CMS_EXPERIMENT.md b/contracts/display-language/v1/CMS_EXPERIMENT.md
new file mode 100644
index 0000000..8a18455
--- /dev/null
+++ b/contracts/display-language/v1/CMS_EXPERIMENT.md
@@ -0,0 +1,170 @@
+# One-page CMS display experiment — 2026-09-08
+
+Status: **included in local Bridge 0.3.33, opt-in and off by default; not installed
+or accepted**. App remains at `80ba6ff`.
+This records the bounded follow-up to the CMS approach in `README.md`, under
+LANG-1 and WEB-16. The maintenance master remains
+`docs/STEP_3_REPAIR_CHECKPOINT.md`; this is not a new project plan.
+
+## What the source inspection changed
+
+The [public Cafes page](https://calorietoken.net/index.php/cafes/) presents its
+main content through `cafesv.png`, with ordinary Back/footer/consent text around
+it. A text-node adapter cannot translate words contained in that image. The
+image and other usecase artwork remain separate work; this finding does not
+establish that every usecase has the same structure. No image was edited.
+
+The [public FAQ](https://calorietoken.net/index.php/faq/), WordPress ID **6855**,
+does have Brizy text. A read-only DOM inspection found exactly one paragraph
+with `data-uniq-id="uddCR"` and one with `data-uniq-id="mE0AL"`, both in the same
+`div[data-brz-translate-text="1"]` under `.brz-rich-text`. The first question's
+coloured initials and word endings occupy twelve separate `strong` elements;
+the answer uses one `span`. Replacing whole paragraphs would discard this
+historical formatting. The exact public paragraphs are retained in
+`tools/fixtures/step3/faq-mission-source.html`. The wrapper in that fixture is
+minimal context, not a capture of the entire page or browser state.
+
+Only these two public paragraphs were saved. Account details, cookies, consent
+state, admin controls, form values and other private content are not in the
+source fixture or catalogue. The browser inspection changed no site content,
+settings or consent, and did not execute the candidate in the page.
+
+## Candidate wording and eleven languages
+
+`cms-faq-preview.json` binds the two original DOM shapes and their SHA-256 audit
+fingerprints to one draft copy version, `faq-mission-current-and-planned-v1`.
+Runtime matching compares the complete original shape/text; the digest is an
+audit fingerprint, not an authorization mechanism or cryptographic live check.
+
+The proposed English answer is:
+
+> CalorieToken's goal is to connect food information with uses of the XRP Ledger.
+> CalorieApp currently offers food lookup and a personal food log. Retail
+> payments, supply-chain tracking and an integrated exchange are planned extensions.
+
+This uses the accepted app baseline and the recorded unimplemented payment,
+traceability and DEX requests. It does not announce those planned services as
+available or promise a delivery date. It is an unpublished wording proposal,
+not a legal classification or a complete review of the FAQ's other claims.
+
+All eleven catalogue entries translate the same proposed answer. Each question
+maps explicitly to the twelve existing text nodes. Unused nodes remain present
+with empty text; no node is removed or replaced. Non-Latin phrases use complete
+prepared fragments without a runtime character-splitting heuristic. Existing
+font/style attributes remain intact. Exact translated appearance, glyph support,
+colour balance, line wrapping and Arabic/Urdu shaping still require visual and
+language review. Every translation remains `prepared-unreviewed`, and
+`release_approved` remains false.
+
+## Adapter behavior and boundaries
+
+`cms-preview.js` exposes an explicit `connect({enabled, document, location,
+catalogue, store})` experiment. It consumes the existing display store's
+`get`/`subscribe` interface and never selects a language, creates another store,
+changes storage or emits a message. The canonical adapter and catalogue are
+copied byte-for-byte into the WordPress plugin. Package verification compares
+both copies, including their ZIP members. Mode is `opt-in-development-preview`;
+this names the experiment and does not advance any copy/source approval.
+
+- Only the exact HTTPS FAQ route on the two established site origins and body
+  page ID can match. Only an optional `ui_lang` query is allowed; it does not
+  set the display language or change the identity locale. Other query contexts
+  keep the source content.
+  There is no navigation, redirect, locale override or rewritten destination.
+- Both paragraphs must be unique, in the same known public Brizy container, and
+  match their complete captured tag/attribute/text shape. Forms, links, buttons,
+  editable regions, account/embed controls, WooCommerce, the consent banner and
+  the editor cannot become translation containers.
+- All translated fragments and the copy version are checked before writing.
+  Only existing `Text.data` plus the two paragraphs' `lang`/`dir` change. Root
+  page language, child elements, classes, inline styles, IDs and links remain
+  untouched. No HTML parser, `innerHTML` replacement, automatic translation,
+  polling, observer, fetch or provider is used by the adapter.
+- A missing or stale translation restores still-owned, unchanged nodes to the
+  captured source. A changed/duplicated/replaced/moved node stops the adapter;
+  that external edit is left intact. Its unchanged companion can be restored.
+  The adapter never overwrites an external edit merely to enforce one language.
+- `disconnect()` removes the store listener and restores only still-owned,
+  unchanged nodes and their original language attributes. A later `refresh()`
+  can discover initially late known content; stopped source conflicts require a
+  new reviewed connection. The source fingerprint must change with a real CMS
+  source edit, rather than accepting a near match.
+
+This is a display-only experiment. It adds no personal-data collection, provider,
+storage, cookie, legal effective date, capability, payment or consent change.
+Public privacy/terms, country/service availability and artwork remain separate
+review items. It does not relax the existing source/publication restrictions.
+
+## Opt-in WordPress integration
+
+The existing strict boolean `CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW` flag remains
+off by default. When enabled, PHP loads the extra adapter and public catalogue
+only for a GET of published, non-password-protected FAQ page 6855, outside a WP
+content preview and unknown/editor query contexts. Admin, feed, embed, AJAX and
+REST retain the existing exclusion. Ordinary pages get no FAQ asset or catalogue.
+The server checks use WordPress's page query and preview interfaces; password
+protection is checked from the raw page field, independent of a visitor's
+password cookie. See [is_page](https://developer.wordpress.org/reference/functions/is_page/),
+[is_preview](https://developer.wordpress.org/reference/functions/is_preview/), and
+[get_post_field](https://developer.wordpress.org/reference/functions/get_post_field/).
+No account preference is placed into cacheable server configuration.
+
+The controller passes its existing store to one adapter connection. Initial
+startup, a language change and existing `load`/`pageshow` events can discover late
+known content. There is no added observer, retry timer or second preference.
+Content arriving after those events waits for a later explicit language change;
+that is a deliberate limit of this sample, not universal Brizy lifecycle support.
+A persisted `pagehide` keeps the same connection for back/forward restoration;
+`pageshow` checks its source again. A final unload disconnects and restores only
+still-owned source. Source conflicts stay stopped across lifecycle events.
+The ordinary selector continues when the FAQ asset/configuration is absent or
+the sample cannot match. These changes do not alter the shared identity/runtime.
+
+Disable the display-preview flag, clear affected page caches when used and
+reload to restore ordinary stored CMS content without disabling the identity bridge. Already-open documents need that
+reload; changing server configuration cannot rewrite them remotely. Do not
+activate the candidate on the live site as a substitute for review/acceptance.
+
+## Evidence and decision
+
+The original offline proof at `bb4c519` passed 21 CMS/display tests. With the
+WordPress wiring, **26 CMS/display tests and nine package tests pass**. Five
+additional wiring cases exercise the packaged adapter with the actual shared
+store: eleven choices without a second store, unavailable config/runtime and
+wrong routes, late content, back/forward/final-unload behavior and preserved
+external edits. Syntax and the repository's legal-boundary guard pass.
+The fixture is parsed independently with Python's
+standard HTML parser; a bounded node model exercises all eleven choices,
+node/text identity and style preservation, rollback, stale/malformed copy,
+literal markup characters, source edits/duplicates and late content.
+
+The control fixture retains the existing donation test's `wcj_open_price`,
+`quantity` and product ID **1761** fields with synthetic entered values, plus
+synthetic account/consent state and event-handler references. None changes or
+submits during language switches. This is **not** a native WooCommerce browser
+test, PHP execution, real payment/signing test or complete responsive acceptance.
+Seven retained same-tab session/Xaman-readiness tests also pass; the shared
+display runtime and existing identity controllers match the pre-wiring commit
+byte-for-byte.
+The existing PHP fixture now covers default-off behavior even on the FAQ,
+dependency/configuration isolation and fifteen request/page cases, including
+POST, HEAD, preview, editor, draft, private, password protection and unknown
+queries. It remains **unexecuted locally because PHP is unavailable**; the
+existing maintenance workflow runs it in its normal and preview modes. Hosted
+CI on this candidate is still pending.
+The candidate was not injected into the live page or used to retry the earlier
+blocked local visual preview.
+
+Conclusion: these exact Brizy fragments can be updated through the existing
+display store without replacing their nodes in the bounded model. This supports
+a small opt-in integration for this sample; it does **not** establish economical
+full-site translation, image translation or compatibility across all 39 routes.
+App `80ba6ff`, deployed plugin files and the shared display/identity runtime are
+unchanged; maintenance candidate is **0.3.33**, last observed installed **0.3.29**.
+
+The bounded wiring is complete locally. Keep the sample separate from full-page
+completion. Next take final source copy and remaining page defects through the
+existing acceptance inventory; do not
+translate the entire old FAQ or duplicate pages speculatively. Legal documents
+must remain whole-version review units. Read-only public DOM inspection here
+does not lift the pending PHP/browser or publication requirements.
diff --git a/contracts/display-language/v1/README.md b/contracts/display-language/v1/README.md
new file mode 100644
index 0000000..b8495a1
--- /dev/null
+++ b/contracts/display-language/v1/README.md
@@ -0,0 +1,379 @@
+# Display-language preview v1
+
+Status: local, opt-in development preview. These are bounded LANG-1 implementation
+slices, not full eleven-language delivery or an installed feature. Maintenance
+Bridge 0.3.37 and the corresponding app candidate are separate artifacts.
+The Step 3 master remains `docs/STEP_3_REPAIR_CHECKPOINT.md` on the maintenance
+branch; this file documents the protocol rather than starting another plan.
+
+## Inspected WordPress state
+
+The authenticated installed-plugin list was read, without changes, on
+2026-09-08. Its 25 listed plugins include Brizy/Brizy Pro, Complianz, WooCommerce
+and Identity Bridge, but no separate translation plugin. The rendered public
+home used `en-US` and had no language control. This does not exclude a custom
+theme translation mechanism; complete CMS content/routing inventory remains
+open. No plugin was installed/activated and no site settings were changed.
+
+## Preview behavior
+
+The WP selector is placed inside the existing account card when that card is
+outside a form; otherwise it remains in ordinary page flow. The app selector
+appears inside the app. Both use the fixed eleven native-language names.
+The translated WP app-information component and the app's introduction, source
+footer, food search/portion/diary controls, own request messages, USDA reference
+and diary filter subscribe to display changes. Entered queries, custom portions,
+filter text and existing product records are preserved; provider food names,
+brands, barcodes and serving descriptions are not translated.
+
+The visible preview notice explains that some content remains English. These
+controls do not yet translate the full Brizy site, the existing login/account
+summary and its parent feedback, artwork or complete legal documents. The
+private export/import/erasure controls now also subscribe to display changes.
+The page-level `lang` remains truthful for the existing English
+content; already translated regions set their own `lang`/`dir`.
+
+The separate pending-login locale, its checks, API requests, redirect/session
+routing, consent and payment handlers are unchanged. No mutation of the
+authentication `locale` query parameter or root data attributes is used.
+
+## Shared shortcut and Richlist helpers — 0.3.37
+
+Five shared-navigation labels and three Richlist helper labels are prepared in
+all eleven locales. They subscribe to the existing display store. The navigation
+catalogue is included only with the opt-in preview; the Richlist catalogue is
+additionally restricted to its known public page. Incomplete/unsupported copy
+falls back as a whole to English. Only owned helper regions set `lang`/`dir`;
+existing table values, links, ranks and table language/direction are retained.
+
+The local `calorieapp:page-tools-ready` event carries no data. If the shared
+shortcut component initializes after the display controller, that controller
+reads its own existing store rather than accepting event data as a preference
+or identity. No second store, cross-origin channel, authentication signal or
+consent mutation is added. Replacement navigation retains destinations/icons
+and receives current display copy without accumulating scroll handlers.
+
+These helper catalogues are prepared-unreviewed and release-unapproved. They
+do not translate page bodies, native WooCommerce/Complianz copy, artwork or
+complete legal documents. Standalone cross-origin/cross-device synchronization
+and the other LANG-1 acceptance items remain open.
+
+## Local activation and storage
+
+Both switches are off by default. For an authorized development preview only:
+
+- WordPress: `CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW` must be the boolean `true`.
+- App build: `NEXT_PUBLIC_CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW=1`.
+
+This documents the switches; it is not production activation or a bypass of
+source clearance, review or publication approval. The WP switch queues no new
+assets/markup when disabled; the disabled app control renders nothing and the
+existing component locale initialization is retained. The app preview build
+was compiled locally with the flag on.
+
+The only new browser record is `calorieapp.display-language.v1`, containing
+`locale` and `savedAt`. An explicit changed selection is remembered for at most
+30 days per origin. Re-reading an unchanged preference does not refresh its
+expiry. Invalid/future/expired data is ignored, and denied storage falls back
+to an in-memory choice. No preference is saved in an account, diary, database
+or XRPL transaction. No polling, new provider, translation API or remote
+preference service is added. Public WP HTML continues to use public locale
+configuration; private preference state is not put into shared server caches.
+Exact public privacy/cookie wording must cover this storage before activation.
+
+## App introduction and source-footer slice
+
+`frontend/config/app-introduction-copy.json` contains nine display strings for
+each registry locale. The two small client components use the existing display
+context; the page's login, search, reference and diary components retain their
+placement and state. Disabled preview or an unsupported display locale renders
+English. Each translated region sets its own `lang`/`dir`; changing these regions
+does not change the English page language or the pending-login locale.
+
+Attribution sentences contain plain-text tokens for the four existing source
+and licence links. Translators may change word order, not destinations or HTML.
+Brand/licence names retain their spelling and use bidi isolation. The footer
+explicitly distinguishes OFF product data from the separate USDA reference
+foods. It does not promise live USDA search or attribute the visitor's entire
+diary to that source. The existing local logo, colours and links are retained;
+the contribution label can wrap instead of forcing a wide footer.
+
+The official source guidance was checked on 2026-09-08. OFF distinguishes the
+database's ODbL, individual contents' DbCL and product images' CC BY-SA rights;
+the short footer names the database licence and does not replace the complete
+reuse/rights review. USDA identifies FoodData Central data as CC0 and requests
+source attribution. Neither source clears the project's own code or trademarks.
+See [OFF's licence guidance](https://openfoodfacts.github.io/openfoodfacts-server/api/tutorials/license-be-on-the-legal-side/)
+and [USDA's API guide](https://fdc.nal.usda.gov/api-guide/).
+These prepared translations still need the integrated language/RTL review;
+they are not complete translated privacy policies or terms.
+
+## Food-control and recorded-grade slice
+
+`frontend/config/food-ui-copy.json` adds 90 prepared strings per locale for
+search, result cards, portion selection/validation, loading/error/success
+messages, diary totals/details/actions and explicit bulk-deletion confirmation.
+The English fallback remains available. Each owned region declares its language
+and direction; long control groups can wrap, and provider values use bidi
+isolation. Display formatting uses the selected locale for numbers and dates,
+preserving the existing decimal precision and rounding before localizing the
+notation. The custom percentage input and all request/persisted values are
+unchanged.
+
+Existing asynchronous controllers continue to store their own fixed English
+status messages. `foodUi.ts` translates only that exact catalogue at rendering;
+the locale does not enter request keys, effects, callback dependencies or
+authentication checks. Success feedback retains the already selected product
+and percentage in component memory so an outstanding response renders in the
+current language. No translation request, new storage, payload field, provider
+call, dependency or schema is introduced. Product text is inserted literally
+in one pass and escaped by React. A language switch never accepts a deletion.
+
+The former synthetic average Nutri-Score and gradient marker are replaced by
+plain counts of the recorded A–E product letters and a separate missing count.
+This corrective summary is present in both preview modes; disabling the
+language preview is not a rollback of that correction. Each loaded log entry
+counts once, including repeated foods. It does not derive a dietary grade,
+weigh portion sizes or change source grades, nutrient totals or diary data.
+
+This is a product decision informed by the inspected code and the official
+description of Nutri-Score as a product calculation per 100 g/100 mL; converting
+letters to an arithmetic mean was not that calculation. The [Santé publique
+France guidance](https://inpes.santepubliquefrance.fr/index.php/en/nutrition-and-physical-activity/nutri-score)
+was checked on 2026-09-08. No official logo is added and no trademark approval
+or complete legal clearance is claimed. Retained product grades do not establish
+which algorithm version was used. Language review and actual RTL/mobile
+appearance are still required; automated key coverage is not translation review.
+
+## Private-account display slice
+
+The three existing export, import and erasure components use the shared display
+choice only for their rendered copy. They reuse the unchanged eleven-language
+`account-privacy-copy.json` catalogue; this is not a new privacy-policy version.
+Their source `locale` prop and request handlers keep their original meaning.
+Known local errors/success can be rendered in the current display language after
+an asynchronous response, without a retry or changing its recorded outcome.
+Unknown text and account/file values are not translated. When preview is off,
+the original locale prop and message behavior remain in effect.
+
+Selected files, exact account confirmations, acknowledgement state, review
+visibility and request controllers survive language switches. Changing language
+does not check a box, submit a form, enable a feature or abort/reissue a request.
+The export keeps its private JSON bytes/name and object-URL cleanup. Authentication
+loss and erasure callbacks still carry the original controller-language messages
+to the unchanged Xaman parent; translating that parent feedback remains open.
+The existing collapsed account-tools container and feature flags are untouched.
+
+Identifiers remain LTR and isolated from surrounding RTL copy. Long button groups
+wrap; these three sections use the existing brand palette with modest button
+corners instead of pills. Those presentation changes also apply with preview off.
+There is no new storage, provider, dependency, schema or financial operation.
+The catalogue still needs linguistic/legal review alongside the full notices.
+
+## CMS approach selected for the next bounded implementation
+
+The 39 published URLs in `cms-surfaces.json` remain the inventory. On 2026-09-08
+the [official Polylang WooCommerce product page](https://polylang.pro/pricing/polylang-for-woocommerce/)
+describes a paid annual add-on covering checkout, cart, products and emails.
+It is therefore not selected as a free solution for this site's complete scope.
+This does not assert that ordinary Polylang page translation is paid. Brizy's
+[2023 template-support discussion](https://support.brizy.io/hc/en-us/community/posts/13444418552082-Translating-Brizy-dynamic-templates-with-Polylang)
+records limitations in that historical version; it is not proof of current
+compatibility or incompatibility with the installed build. No translation plugin
+has been installed and no new compatibility result is claimed.
+
+Selected next experiment: a manually maintained, versioned first-party display
+catalogue for static public content on the existing page URLs. Reuse the current
+display controller and reviewed layout rather than implement a second page
+system. This is an implementation direction, not an already working CMS renderer
+or a claim that full-site translation will be cheap.
+
+- Key entries by observed public WordPress ID and stable content slot, with
+  source version, exact source-text/structure fingerprint, locale and review
+  status. The first captured static Brizy sample is now the two-paragraph FAQ
+  experiment below. Do not bulk-copy
+  the 39 pages or begin translating unfinished source copy.
+- Patch only identified static text/attributes or reviewed artwork variants,
+  preserving the existing nodes, layout and links. Unrecognized or edited source
+  must remain intact and be reported as pending. Do not replace whole DOM
+  subtrees, form HTML, editable user content or live widget values.
+- Keep canonical URLs and existing inbound links. The existing display preference
+  can apply on navigation; an optional public `ui_lang` hint is separate from
+  the identity `locale`. Do not rewrite login, donation, callback or POST targets,
+  redirect a pending flow, or infer cross-origin storage synchronization.
+- Native WooCommerce/Complianz and account interactions need their own integration
+  through supported localization interfaces. [WordPress's gettext guidance](https://developer.wordpress.org/plugins/internationalization/how-to-internationalize-your-plugin/)
+  describes translatable software strings, not automatic translation of Brizy
+  page bodies. No global locale override during authentication or checkout is
+  selected by this design; dynamic states remain explicit acceptance items.
+- Legal documents are versioned as complete documents. A source change invalidates
+  the associated translation review; do not mix paragraphs from different source
+  versions or label a partial translation as the current complete notice. Mark
+  fallback language accurately and do not change a user's consent.
+
+Stop this experiment after the representative Brizy surface and retained native
+form fixture establish whether the adapter is small and robust. If safe stable
+slots require broad interception or page duplication, record the concrete cost
+and scope decision before extending it. This is a budget/implementation cutoff,
+not permission to remove LANG-1. Actual Brizy, PHP, browser, native-plugin and
+complete legal acceptance remain open. Do not repeat the general plugin survey
+on the next turn without a changed fact.
+
+## CMS experiment follow-up
+
+The first bounded experiment is now recorded in [CMS_EXPERIMENT.md](CMS_EXPERIMENT.md).
+Cafes has image-led main content; the text prototype instead uses two uniquely
+observed public FAQ paragraphs (page 6855). It retains the twelve coloured
+question fragments and one answer text node, with an unpublished eleven-language
+copy proposal separating current food functions from planned extensions.
+The local 0.3.33 candidate now includes byte-identical adapter/catalogue copies.
+They load only under the existing opt-in WP preview on the published public FAQ
+GET, with page/preview/password/query checks. The same store drives the sample;
+load/pageshow allow bounded late discovery, persisted pagehide keeps the connection
+and final unload restores still-owned source. No new observer, preference or
+provider is added. Twenty-six CMS/display tests and nine package tests pass;
+PHP execution, installed/native browser acceptance and copy/visual review remain
+open. App `80ba6ff` and the shared display/identity runtime are unchanged. This
+completes the bounded wiring, not full-page translation. Before extending the
+catalogue, return to the remaining source-copy/page defects in the master.
+
+## Blog helper follow-up
+
+Bridge 0.3.34 connects three public blog helper strings to the same store through
+an owned display-only callback. The public WP locale remains the default without
+the preview. All eleven entries are prepared-unreviewed; Arabic/Urdu use RTL and
+isolate the fixed profile handle. The helper sits outside X/CMP content; no cookie
+choice, native banner wording, provider post or account value is translated by
+this callback. Load/pageshow applies the current choice if the helper script was
+late; no second store, preference or message namespace is added. The focused
+blog/source findings and 57-test maintenance selection are recorded in
+`docs/STEP_3_BLOG_ROADMAP_REVIEW.md`. Actual provider/native/visual acceptance
+and full CMS/legal translation remain open.
+
+## Message boundary
+
+`runtime.js` is copied byte-for-byte into the independently deployed app and
+WP assets. Artifact tests compare each copy with its canonical file, and also
+compare the eleven-language selector copy. Publication follows the repository's
+existing source and licence controls.
+
+The namespace is `calorieapp:display-language:`; it never emits identity or
+consent message types. Exact key sets, supported canonical locale tags, version,
+trusted origin and exact sender window are checked. No wildcard destination is
+used. The host recognizes only the existing configured app frames. The guest
+recognizes its actual parent at the two existing HTTPS website origins.
+
+- `hello` / `ready` establish the display channel on either loading order.
+- `state` carries host epoch/revision, guest channel, acknowledgement, locale
+  and whether it resulted from an explicit selection.
+- `request` carries that epoch/channel, increasing sequence, base revision and
+  the requested locale. A stale request receives current state, not permission
+  to overwrite it. A still-pending explicit guest choice can then be submitted
+  against the new revision.
+
+The WP host coordinates embedded display state. An app's incidental initial
+locale does not overwrite the host. A new explicit choice made while handshake
+is pending is retained; rapid choices are coalesced so both sides converge.
+Load/pageshow events recover startup without polling. Old channels, replayed
+sequences, malformed messages and removed frames cannot overwrite current state.
+Cleanup removes listeners. These identifiers are protocol context, not identity
+proof.
+
+## Evidence and remaining work
+
+- Nine protocol/storage tests cover both directions for eleven languages,
+  delayed startup, queued/concurrent choices, malformed/untrusted messages,
+  stale/replayed requests, removed frames and cleanup.
+- Real React server-render tests cover default-off behavior and the eleven-option
+  accessible preview control. Component behavior fixtures cover live language
+  updates without diary filter reset or USDA requests.
+- The introduction/footer follow-up checks all eleven rendered locales,
+  default-off/unsupported English fallback, source/licence token completeness,
+  exact link destinations and RTL metadata using the actual React components.
+  At the introduction-only commit `1829f31`, the changed-area display/food
+  selection passed 33 tests; TypeScript, lint, the legal-boundary guard and a
+  preview-enabled Next build passed. Its backend, login, food search/diary,
+  language provider/runtime and root layout were byte-identical to `f054ade`.
+- The food-control follow-up passed 57 focused food/display/deadline/retained
+  readiness checks, TypeScript, lint, the legal guard and a preview-enabled
+  Next build (167 kB first-load JS, previously 149 kB). New behavior fixtures
+  preserve queries, request signals, custom input and exact save bodies during
+  language changes; enforce one save and explicit localized deletion consent;
+  update existing errors/success; and count known/missing product grades.
+  Real React rendering covers all eleven food-control locales and escapes
+  literal product/query text. The backend, Xaman/account/privacy controllers,
+  API/auth routes, display provider/runtime, app root, request deadlines and
+  dependency files are byte-identical to `1829f31`. This is not a hosted CI,
+  signed transaction or new live-session acceptance result.
+  The final rounding-preservation adjustment also passed the focused 25 food
+  checks and a rebuilt preview; changing locale does not change a decimal value.
+- The private-account display follow-up passed 28 account tests and 38 retained
+  app display/login/readiness checks, TypeScript, lint, the legal guard and a
+  preview-enabled build (still 167 kB first-load JS). Tests exercise pending
+  export/import/erasure while switching all eleven languages, preserved exact
+  bytes/headers/acknowledgements, no implicit submit, one download/request,
+  errors and original authentication callbacks. Real React server rendering
+  checks the existing copy, fallback and RTL metadata. Eleven existing controller,
+  validation and download function bodies are byte-identical to `d6b3f1d`.
+  Backend, Xaman parent, language provider/runtime, privacy catalogue, app root,
+  request policies and dependencies are unchanged. Retained readiness checks
+  include older co-located WP fixtures, not acceptance of maintenance Bridge
+  0.3.32. No private user data, service, wallet or payment was used by the tests.
+- WP wiring fixtures cover owned information text/direction, repeated startup,
+  editor exclusion and preserving form/account nodes.
+- The app authentication/food/private-account selection passed 100 tests; the
+  maintenance website selection passed 64 tests. The later targeted original
+  login-fixture check also injects display messages during a pending login.
+  Nine package tests and both legal-boundary guards passed. TypeScript, lint
+  and the preview-enabled Next build passed.
+- PHP rendering/lint and actual candidate browser appearance remain unexecuted.
+  PHP is unavailable in this environment, and the earlier local-preview URL
+  policy block remains in place. This cycle did not retry or bypass that block.
+  Public/admin inspection above is not visual acceptance of new code.
+
+Next: the bounded FAQ wiring is prepared; finish remaining source
+copy, connect the remaining login/account-summary/site surfaces and complete
+legal documents, and review all eleven translations/RTL. Standalone app-to-WP navigation preference reconciliation,
+multiple independent tabs, unsupported-browser messaging behavior and complete
+integrated login/consent/mobile acceptance remain to verify. A display language
+is not a country or financial-service eligibility decision. Keep the DEX,
+retailer pilot and existing publication requirements separate.
+
+
+### Trustline helper in rebuilt 0.3.38
+
+The public issuer/currency copy feedback, native-handler action and context note
+have eleven prepared, unreviewed translations in `config/trustline.json`. They
+use the same display store through `CalorieAppTrustline.setLocale`; a local
+`calorieapp:trustline-ready` notification only asks that controller to read its
+existing store. Event details are not used as locale or authentication input.
+The catalogue is sent on the known Trustline page only when the existing preview
+is enabled. Incomplete/malformed/unsupported copy uses the complete English
+fallback. Dynamic text is literal, and only helper-owned nodes change language
+or direction. Source token paragraphs, native alternatives, account/session
+locale and legal documents are not translated by this adapter.
+
+
+### Tokenomics helper in 0.3.39
+
+Public page 1209 loads seven helper strings from plugin `config/tokenomics.json`.
+The eleven prepared-unreviewed locales use the existing display store through
+`CalorieAppTokenomics.setLocale`. Late readiness takes that store's current value,
+ignoring event payload data. Missing/incomplete copy falls back wholly to English.
+Only two added panels receive language/direction; the public address stays LTR,
+and historical graphics, native links, account/consent and legal copy are retained.
+This is not full-page translation or reviewed multilingual legal publication.
+
+
+### Complete owned How to Buy guide in 0.3.40
+
+The 29 guide strings in plugin `config/how-to-buy.json` cover the owned newcomer,
+asset identity labels, buy/sell/reserve/withdrawal guidance, market scope and
+conflict/risk copy in eleven prepared-unreviewed languages. The existing store
+calls `CalorieAppBuyGuide.setLocale`; late readiness ignores event data and takes
+the current store value. Text nodes and the owned accessible label change only
+when the generated guide, exact identities, original destinations and known
+copy still match. Missing/partial translations fall back wholly to English.
+Addresses, currency codes, links and unrelated account/form state remain intact.
+This closes prepared guide-copy coverage, not full CMS/legal/artwork translation
+or native linguistic acceptance, and enables no financial service.
diff --git a/contracts/display-language/v1/cms-faq-preview.json b/contracts/display-language/v1/cms-faq-preview.json
new file mode 100644
index 0000000..a504e9a
--- /dev/null
+++ b/contracts/display-language/v1/cms-faq-preview.json
@@ -0,0 +1,488 @@
+{
+  "schema_version": 1,
+  "mode": "opt-in-development-preview",
+  "source_url": "https://calorietoken.net/index.php/faq/",
+  "observed_on": "2026-09-08",
+  "wordpress_id": 6855,
+  "origins": [
+    "https://calorietoken.net",
+    "https://www.calorietoken.net"
+  ],
+  "pathname": "/index.php/faq/",
+  "copy_version": "faq-mission-current-and-planned-v1",
+  "source_copy_review": "prepared-unreviewed",
+  "release_approved": false,
+  "scope": "One FAQ question and answer only. No legal documents, account, consent or payment controls. Current copy is an unpublished proposal; historical source is restored on disconnect.",
+  "slots": [
+    {
+      "key": "question",
+      "element_id": "uddCR",
+      "source_sha256": "9a276cbfed081b6f9e7c2a3c670f403ae1224e5aa86ac7748bcd55fa06b0d762",
+      "source": {
+        "tag": "p",
+        "attributes": [
+          [
+            "class",
+            "brz-lh-lg-1_9 brz-ls-lg-0 brz-fw-lg-400 brz-fss-lg-px brz-fs-lg-16 brz-ft-google brz-ff-knewave brz-tp-lg-empty brz-text-lg-center brz-css-n84dsb"
+          ],
+          [
+            "data-generated-css",
+            "brz-css-g60SK"
+          ],
+          [
+            "data-uniq-id",
+            "uddCR"
+          ]
+        ],
+        "children": [
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "opacity: 1; color: rgb(80, 91, 169); background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "W"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "hat "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "i"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "s "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "t"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "he "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "m"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "ission "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "o"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "f "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "C"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "alorieToken?"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "key": "answer",
+      "element_id": "mE0AL",
+      "source_sha256": "0c8f1594bf097ee64609db992934e5aaa853e05f805c0ab80dedb54149b14c0a",
+      "source": {
+        "tag": "p",
+        "attributes": [
+          [
+            "class",
+            "brz-text-lg-center brz-tp-lg-empty brz-ff-lato brz-ft-google brz-fs-lg-16 brz-fss-lg-px brz-fw-lg-400 brz-ls-lg-0 brz-lh-lg-1_9 brz-vfw-lg-400 brz-fwdth-lg-100 brz-fsft-lg-0 brz-css-1997g7h"
+          ],
+          [
+            "data-generated-css",
+            "brz-css-ufvZL"
+          ],
+          [
+            "data-uniq-id",
+            "mE0AL"
+          ]
+        ],
+        "children": [
+          {
+            "tag": "span",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "Calorie's mission is to establish a diverse network of partners within the food and beverage industry, integrate payment applications for companies and consumers, contribute to corporate social responsibility, and promote a healthier financial lifestyle."
+            ]
+          }
+        ]
+      }
+    }
+  ],
+  "translations": {
+    "en": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "W",
+          "hat ",
+          "i",
+          "s ",
+          "t",
+          "he ",
+          "m",
+          "ission ",
+          "o",
+          "f ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken's goal is to connect food information with uses of the XRP Ledger. CalorieApp currently offers food lookup and a personal food log. Retail payments, supply-chain tracking and an integrated exchange are planned extensions."
+        ]
+      }
+    },
+    "zh-Hans": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " 的",
+          "使命",
+          "是",
+          "什么",
+          "？",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken 旨在将食品信息与 XRP Ledger 的应用相结合。CalorieApp 目前提供食品查询和个人饮食日志。零售支付、供应链追踪和集成交易功能属于计划中的扩展。"
+        ]
+      }
+    },
+    "hi": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " का ",
+          "मिशन",
+          " क्या ",
+          "है",
+          "?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken का लक्ष्य खाद्य जानकारी को XRP Ledger के उपयोगों से जोड़ना है। CalorieApp में अभी खाद्य पदार्थ खोजने और निजी आहार डायरी रखने की सुविधाएँ हैं। दुकानों में भुगतान, आपूर्ति शृंखला की निगरानी और एकीकृत एक्सचेंज की सुविधाएँ भविष्य के विस्तार के लिए नियोजित हैं।"
+        ]
+      }
+    },
+    "es": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "¿C",
+          "uál ",
+          "e",
+          "s ",
+          "l",
+          "a ",
+          "m",
+          "isión ",
+          "d",
+          "e ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken busca conectar la información alimentaria con los usos del XRP Ledger. CalorieApp ofrece actualmente búsqueda de alimentos y un diario alimentario personal. Los pagos en comercios, la trazabilidad de la cadena de suministro y un intercambio integrado son ampliaciones previstas."
+        ]
+      }
+    },
+    "ar": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "rtl",
+      "slots": {
+        "question": [
+          "ما",
+          " هي ",
+          "مهمة",
+          " ",
+          "CalorieToken",
+          "؟",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "يهدف CalorieToken إلى ربط معلومات الأغذية باستخدامات XRP Ledger. يتيح CalorieApp حالياً البحث عن الأغذية وتسجيل يوميات غذائية شخصية. وتشمل التوسعات المخططة الدفع في المتاجر وتتبع سلسلة التوريد ومنصة تبادل مدمجة."
+        ]
+      }
+    },
+    "fr": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "Q",
+          "uelle ",
+          "e",
+          "st ",
+          "l",
+          "a ",
+          "m",
+          "ission ",
+          "d",
+          "e ",
+          "C",
+          "alorieToken ?"
+        ],
+        "answer": [
+          "CalorieToken vise à relier les informations alimentaires aux usages du XRP Ledger. CalorieApp propose actuellement la recherche d’aliments et un journal alimentaire personnel. Les paiements aux commerçants, la traçabilité de la chaîne d’approvisionnement et une plateforme d’échange intégrée font partie des extensions prévues."
+        ]
+      }
+    },
+    "bn": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          "-এর ",
+          "লক্ষ্য",
+          " কী",
+          "?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken-এর লক্ষ্য খাদ্যসংক্রান্ত তথ্যকে XRP Ledger-এর ব্যবহারের সঙ্গে যুক্ত করা। CalorieApp বর্তমানে খাবার খোঁজা এবং ব্যক্তিগত খাদ্য ডায়েরি রাখার সুবিধা দেয়। দোকানে অর্থপ্রদান, সরবরাহ শৃঙ্খল অনুসরণ এবং সমন্বিত এক্সচেঞ্জ পরিকল্পিত সম্প্রসারণের অংশ।"
+        ]
+      }
+    },
+    "pt": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "Q",
+          "ual ",
+          "é",
+          " ",
+          "a",
+          " ",
+          "m",
+          "issão ",
+          "d",
+          "o ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "O objetivo do CalorieToken é ligar informações alimentares às utilizações do XRP Ledger. O CalorieApp oferece atualmente pesquisa de alimentos e um diário alimentar pessoal. Pagamentos em lojas, rastreabilidade da cadeia de abastecimento e uma plataforma de câmbio integrada são extensões previstas."
+        ]
+      }
+    },
+    "id": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "A",
+          "pa ",
+          "m",
+          "isi ",
+          "C",
+          "alorieToken?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken bertujuan menghubungkan informasi pangan dengan penggunaan XRP Ledger. CalorieApp saat ini menyediakan pencarian makanan dan catatan makanan pribadi. Pembayaran di toko, pelacakan rantai pasok, dan bursa terintegrasi merupakan pengembangan yang direncanakan."
+        ]
+      }
+    },
+    "ur": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "rtl",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " کا ",
+          "مشن",
+          " کیا ",
+          "ہے",
+          "؟",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken کا مقصد خوراک کی معلومات کو XRP Ledger کے استعمالات سے جوڑنا ہے۔ CalorieApp فی الحال کھانے کی تلاش اور ذاتی غذائی ڈائری کی سہولت فراہم کرتی ہے۔ دکانوں پر ادائیگیاں، سپلائی چین کی نگرانی اور ایک مربوط ایکسچینج منصوبہ بند توسیعات ہیں۔"
+        ]
+      }
+    },
+    "nl": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "W",
+          "at ",
+          "i",
+          "s ",
+          "d",
+          "e ",
+          "m",
+          "issie ",
+          "v",
+          "an ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken wil voedselinformatie verbinden met toepassingen van de XRP Ledger. CalorieApp biedt momenteel het opzoeken van voedingsmiddelen en een persoonlijk voedingsdagboek. Winkelbetalingen, het volgen van de toeleveringsketen en een geïntegreerde exchange zijn geplande uitbreidingen."
+        ]
+      }
+    }
+  }
+}
diff --git a/contracts/display-language/v1/cms-preview.js b/contracts/display-language/v1/cms-preview.js
new file mode 100644
index 0000000..3ca1f76
--- /dev/null
+++ b/contracts/display-language/v1/cms-preview.js
@@ -0,0 +1,173 @@
+/* Two-paragraph FAQ experiment. Loaded only by the opt-in WordPress preview. */
+(function (root, factory) {
+  if (typeof module === "object" && module.exports) module.exports = factory();
+  else root.CalorieAppCmsLanguagePreview = factory();
+})(typeof window === "object" ? window : this, function () {
+  "use strict";
+
+  var protectedSelector = "form,a,button,input,select,textarea,[contenteditable],#wpadminbar,.brz-ed,.xl-card,.woocommerce,.cmplz-cookiebanner,[data-calorieapp-embed],[data-calorieapp-account]";
+
+  function snapshot(node) {
+    if (node.nodeType === 3) return node.data;
+    if (node.nodeType !== 1) return null;
+    return {
+      tag: node.tagName.toLowerCase(),
+      attributes: Array.from(node.attributes).map(function (attribute) {
+        return [attribute.name, attribute.value];
+      }).sort(function (a, b) { return a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0; }),
+      children: Array.from(node.childNodes).map(snapshot)
+    };
+  }
+
+  function textNodes(node) {
+    if (node.nodeType === 3) return [node];
+    return Array.from(node.childNodes).reduce(function (result, child) {
+      return result.concat(textNodes(child));
+    }, []);
+  }
+
+  function safeShape(shape, top) {
+    if (typeof shape === "string") return !top;
+    return shape && (top ? shape.tag === "p" : ["strong", "span"].indexOf(shape.tag) !== -1)
+      && Array.isArray(shape.attributes) && shape.attributes.every(function (attribute) {
+        return Array.isArray(attribute) && attribute.length === 2
+          && ["class", "style", "data-uniq-id", "data-generated-css", "lang", "dir"].indexOf(attribute[0]) !== -1
+          && typeof attribute[1] === "string";
+      }) && Array.isArray(shape.children) && shape.children.every(function (child) {
+        return safeShape(child, false);
+      });
+  }
+
+  function connect(options) {
+    var document = options.document, location = options.location;
+    var catalogue = options.catalogue, store = options.store;
+    var enabled = options.enabled === true;
+    var active = null, stopped = false, unsubscribe = function () {};
+    var result = { status: "disabled", locale: null };
+
+    function report(status, locale) {
+      result = { status: status, locale: locale || null };
+      return result;
+    }
+    function routeMatches() {
+      try {
+        var url = new URL(location.href);
+        return catalogue.origins.indexOf(url.origin) !== -1 && url.pathname === catalogue.pathname
+          && Array.from(url.searchParams.keys()).every(function (key) { return key === "ui_lang"; })
+          && document.body.classList.contains("page-id-" + catalogue.wordpress_id)
+          && !document.querySelector(".brz-ed");
+      } catch (_) { return false; }
+    }
+    function inScope(node) {
+      return node.isConnected && !node.closest(protectedSelector)
+        && node.parentElement && node.parentElement.tagName === "DIV"
+        && node.parentElement.getAttribute("data-brz-translate-text") === "1"
+        && node.parentElement.parentElement
+        && node.parentElement.parentElement.classList.contains("brz-rich-text");
+    }
+    function unchanged(entry) {
+      if (!inScope(entry.node) || entry.node.parentElement !== entry.parent
+        || JSON.stringify(snapshot(entry.node)) !== entry.expected) return false;
+      var matches = document.querySelectorAll('p[data-uniq-id="' + entry.id + '"]');
+      if (matches.length !== 1 || matches[0] !== entry.node) return false;
+      var current = textNodes(entry.node);
+      return current.length === entry.texts.length && current.every(function (node, index) {
+        return node === entry.texts[index];
+      });
+    }
+    function restore() {
+      if (!active) return;
+      active.forEach(function (entry) {
+        // Never overwrite an edited/replaced node or a node moved into a form.
+        if (!unchanged(entry)) return;
+        entry.texts.forEach(function (node, index) { node.data = entry.original[index]; });
+        ["lang", "dir"].forEach(function (name) {
+          if (entry.attributes[name] === null) entry.node.removeAttribute(name);
+          else entry.node.setAttribute(name, entry.attributes[name]);
+        });
+      });
+      active = null;
+    }
+    function locate() {
+      var entries = [];
+      for (var slot of catalogue.slots) {
+        var matches = document.querySelectorAll('p[data-uniq-id="' + slot.element_id + '"]');
+        if (matches.length !== 1 || !inScope(matches[0])) return null;
+        var node = matches[0];
+        var signature = JSON.stringify(snapshot(node));
+        if (signature !== JSON.stringify(slot.source)) return null;
+        if (entries.length && node.parentElement !== entries[0].parent) return null;
+        var texts = textNodes(node);
+        entries.push({
+          key: slot.key, id: slot.element_id, node: node, parent: node.parentElement, texts: texts,
+          original: texts.map(function (text) { return text.data; }), expected: signature,
+          attributes: { lang: node.getAttribute("lang"), dir: node.getAttribute("dir") }
+        });
+      }
+      return entries;
+    }
+    function render(state) {
+      if (stopped) return result;
+      if (!routeMatches()) {
+        restore(); stopped = true; unsubscribe();
+        return report("outside-scope");
+      }
+      if (active && !active.every(unchanged)) {
+        restore(); stopped = true; unsubscribe();
+        return report("source-changed");
+      }
+      var translation = state && typeof state.locale === "string"
+        && Object.prototype.hasOwnProperty.call(catalogue.translations, state.locale)
+        ? catalogue.translations[state.locale] : null;
+      if (!translation || translation.copy_version !== catalogue.copy_version
+        || translation.direction !== (["ar", "ur"].indexOf(state.locale) !== -1 ? "rtl" : "ltr")
+        || !translation.slots || typeof translation.slots !== "object") {
+        restore(); return report("translation-pending");
+      }
+      var entries = active || locate();
+      if (!entries) return report("source-pending");
+      // Validate the whole question/answer before changing any text node.
+      var valid = entries.every(function (entry) {
+        var values = translation.slots[entry.key];
+        return Array.isArray(values) && values.length === entry.texts.length
+          && values.every(function (value) { return typeof value === "string"; })
+          && values.some(function (value) { return value.trim() !== ""; });
+      });
+      if (!valid) { restore(); return report("translation-pending"); }
+      active = entries;
+      entries.forEach(function (entry) {
+        entry.texts.forEach(function (node, index) { node.data = translation.slots[entry.key][index]; });
+        entry.node.setAttribute("lang", state.locale);
+        entry.node.setAttribute("dir", translation.direction);
+        entry.expected = JSON.stringify(snapshot(entry.node));
+      });
+      return report("preview", state.locale);
+    }
+
+    var api = {
+      get: function () { return { status: result.status, locale: result.locale }; },
+      refresh: function () { return enabled && !stopped ? render(store.get()) : api.get(); },
+      disconnect: function () { unsubscribe(); restore(); stopped = true; report("disconnected"); }
+    };
+    if (!enabled) return api;
+    if (!catalogue || catalogue.schema_version !== 1 || catalogue.mode !== "opt-in-development-preview"
+      || !Number.isInteger(catalogue.wordpress_id) || catalogue.wordpress_id <= 0
+      || !Array.isArray(catalogue.origins) || !catalogue.origins.length
+      || typeof catalogue.pathname !== "string" || typeof catalogue.copy_version !== "string"
+      || !catalogue.copy_version || !catalogue.translations
+      || !Array.isArray(catalogue.slots) || catalogue.slots.length !== 2
+      || !catalogue.slots.every(function (slot) {
+        return slot && ["question", "answer"].indexOf(slot.key) !== -1
+          && typeof slot.element_id === "string" && /^[a-zA-Z0-9_-]+$/.test(slot.element_id)
+          && safeShape(slot.source, true);
+      }) || new Set(catalogue.slots.map(function (slot) { return slot.key; })).size !== 2
+      || new Set(catalogue.slots.map(function (slot) { return slot.element_id; })).size !== 2
+      || !store || typeof store.subscribe !== "function" || typeof store.get !== "function") {
+      stopped = true; report("invalid-catalogue"); return api;
+    }
+    render(store.get());
+    if (!stopped) unsubscribe = store.subscribe(render);
+    return api;
+  }
+  return { connect: connect };
+});
diff --git a/contracts/display-language/v1/copy.json b/contracts/display-language/v1/copy.json
new file mode 100644
index 0000000..6118a91
--- /dev/null
+++ b/contracts/display-language/v1/copy.json
@@ -0,0 +1,46 @@
+{
+  "en": {
+    "label": "Language",
+    "preview": "Translations are being prepared. Some content is still in English."
+  },
+  "zh-Hans": {
+    "label": "语言",
+    "preview": "翻译正在准备中，部分内容仍为英语。"
+  },
+  "hi": {
+    "label": "भाषा",
+    "preview": "अनुवाद तैयार किए जा रहे हैं। कुछ सामग्री अभी भी अंग्रेज़ी में है।"
+  },
+  "es": {
+    "label": "Idioma",
+    "preview": "Se están preparando las traducciones. Parte del contenido sigue en inglés."
+  },
+  "ar": {
+    "label": "اللغة",
+    "preview": "الترجمات قيد الإعداد. لا يزال بعض المحتوى باللغة الإنجليزية."
+  },
+  "fr": {
+    "label": "Langue",
+    "preview": "Les traductions sont en préparation. Certains contenus restent en anglais."
+  },
+  "bn": {
+    "label": "ভাষা",
+    "preview": "অনুবাদ প্রস্তুত করা হচ্ছে। কিছু বিষয়বস্তু এখনও ইংরেজিতে রয়েছে।"
+  },
+  "pt": {
+    "label": "Idioma",
+    "preview": "As traduções estão em preparação. Parte do conteúdo ainda está em inglês."
+  },
+  "id": {
+    "label": "Bahasa",
+    "preview": "Terjemahan sedang disiapkan. Sebagian konten masih berbahasa Inggris."
+  },
+  "ur": {
+    "label": "زبان",
+    "preview": "تراجم تیار کیے جا رہے ہیں۔ کچھ مواد ابھی بھی انگریزی میں ہے۔"
+  },
+  "nl": {
+    "label": "Taal",
+    "preview": "Vertalingen worden voorbereid. Sommige inhoud is nog in het Engels."
+  }
+}
diff --git a/contracts/display-language/v1/runtime.js b/contracts/display-language/v1/runtime.js
new file mode 100644
index 0000000..b5c1133
--- /dev/null
+++ b/contracts/display-language/v1/runtime.js
@@ -0,0 +1,179 @@
+/* Display-language preferences only. No identity, consent or payment messages. */
+(function (root, factory) {
+  if (typeof module === "object" && module.exports) module.exports = factory();
+  else root.CalorieAppDisplayLanguage = factory();
+})(typeof globalThis === "object" ? globalThis : this, function () {
+  "use strict";
+  var prefix = "calorieapp:display-language:";
+  var storageKey = "calorieapp.display-language.v1";
+  var lifetime = 30 * 24 * 60 * 60 * 1000;
+  function record(value, keys) {
+    return value && typeof value === "object" && !Array.isArray(value)
+      && Object.keys(value).length === keys.length
+      && keys.every(function (key) { return Object.prototype.hasOwnProperty.call(value, key); });
+  }
+  function identifier(value) { return typeof value === "string" && /^[a-zA-Z0-9-]{16,64}$/.test(value); }
+  function integer(value) { return Number.isSafeInteger(value) && value >= 0; }
+  function origin(value) {
+    try { var url = new URL(value); return url.protocol === "https:" && url.origin === value; }
+    catch (_) { return false; }
+  }
+  function createStore(options) {
+    var tags = options.locales.slice();
+    var valid = function (value) { return typeof value === "string" && tags.indexOf(value) !== -1; };
+    if (!valid(options.fallback)) throw new Error("Invalid display fallback");
+    var now = options.now || Date.now, storage = options.storage, listeners = new Set();
+    var state = { locale: valid(options.initialLocale) ? options.initialLocale : options.fallback, explicit: false };
+    try {
+      var saved = JSON.parse(storage.getItem(storageKey));
+      if (record(saved, ["locale", "savedAt"]) && valid(saved.locale)
+          && Number.isFinite(saved.savedAt) && saved.savedAt <= now() && now() - saved.savedAt < lifetime) {
+        state = { locale: saved.locale, explicit: true };
+      } else if (saved !== null) storage.removeItem(storageKey);
+    } catch (_) { /* Storage denial never blocks the language control. */ }
+    function update(locale, explicit, source) {
+      if (!valid(locale) || typeof explicit !== "boolean") return false;
+      var changed = state.locale !== locale || state.explicit !== explicit;
+      state = { locale: locale, explicit: explicit };
+      // Persist only a new explicit choice, not every page load or host sync.
+      if (explicit && changed) {
+        try { storage.setItem(storageKey, JSON.stringify({ locale: locale, savedAt: now() })); }
+        catch (_) { /* In-memory selection still works. */ }
+      }
+      if (changed) listeners.forEach(function (listener) { listener(state, source); });
+      return changed;
+    }
+    return {
+      get: function () { return { locale: state.locale, explicit: state.explicit }; },
+      valid: valid,
+      select: function (locale) { return update(locale, true, "local"); },
+      apply: function (locale, explicit) { return update(locale, explicit, "remote"); },
+      subscribe: function (listener) { listeners.add(listener); return function () { listeners.delete(listener); }; }
+    };
+  }
+  function connectHost(options) {
+    if (!identifier(options.epoch)) throw new Error("Invalid display epoch");
+    var peers = new Map(), revision = 0, closed = false;
+    function trusted(event) {
+      return options.frames().find(function (frame) {
+        return origin(frame.origin) && frame.origin === event.origin && frame.window === event.source;
+      });
+    }
+    function send(peer) {
+      if (closed || !trusted({ source: peer.window, origin: peer.origin })) return;
+      var state = options.store.get();
+      peer.window.postMessage({
+        type: prefix + "state", version: 1, channel: peer.channel,
+        epoch: options.epoch, revision: revision, ack: peer.sequence,
+        locale: state.locale, explicit: state.explicit
+      }, peer.origin);
+    }
+    function message(event) {
+      var data = event.data;
+      if (closed || !trusted(event) || !data || data.version !== 1 || !identifier(data.channel)) return;
+      if (data.type === prefix + "ready" && record(data, ["type", "version", "channel"])) {
+        var prior = peers.get(event.source);
+        var peer = prior && prior.channel === data.channel ? prior : {
+          window: event.source, origin: event.origin, channel: data.channel, sequence: 0
+        };
+        peers.set(event.source, peer);
+        send(peer);
+        return;
+      }
+      var peer = peers.get(event.source);
+      if (!peer || data.type !== prefix + "request"
+          || !record(data, ["type", "version", "channel", "epoch", "sequence", "revision", "locale"])
+          || data.channel !== peer.channel || data.epoch !== options.epoch
+          || !integer(data.sequence) || data.sequence <= peer.sequence
+          || !integer(data.revision) || !options.store.valid(data.locale)) return;
+      peer.sequence = data.sequence;
+      if (data.revision === revision) options.store.apply(data.locale, true);
+      // A stale revision is acknowledged with current state, never applied.
+      send(peer);
+    }
+    function announce() {
+      if (closed) return;
+      options.frames().forEach(function (frame) {
+        if (origin(frame.origin)) frame.window.postMessage({ type: prefix + "hello", version: 1 }, frame.origin);
+      });
+    }
+    var unsubscribe = options.store.subscribe(function () {
+      revision += 1;
+      peers.forEach(function (peer, key) {
+        if (!trusted({ source: peer.window, origin: peer.origin })) peers.delete(key);
+        else send(peer);
+      });
+    });
+    options.window.addEventListener("message", message);
+    options.window.addEventListener("load", announce);
+    options.window.addEventListener("pageshow", announce);
+    announce();
+    return function () {
+      closed = true;
+      unsubscribe();
+      peers.clear();
+      options.window.removeEventListener("message", message);
+      options.window.removeEventListener("load", announce);
+      options.window.removeEventListener("pageshow", announce);
+    };
+  }
+  function connectGuest(options) {
+    if (!identifier(options.channel) || !options.origins.length
+        || !options.origins.every(origin)) throw new Error("Invalid display peer");
+    var host = null, revision = -1, sequence = 0, inFlight = 0, desired = null, closed = false;
+    function announce() {
+      if (!closed) options.origins.forEach(function (target) {
+        options.parent.postMessage({ type: prefix + "ready", version: 1, channel: options.channel }, target);
+      });
+    }
+    function flush() {
+      if (closed || !host || inFlight || desired === null) return;
+      inFlight = ++sequence;
+      options.parent.postMessage({
+        type: prefix + "request", version: 1, channel: options.channel,
+        epoch: host.epoch, sequence: inFlight, revision: revision, locale: desired
+      }, host.origin);
+    }
+    function message(event) {
+      var data = event.data;
+      if (!closed && event.source === options.parent && options.origins.indexOf(event.origin) !== -1
+          && record(data, ["type", "version"]) && data.type === prefix + "hello" && data.version === 1) {
+        announce();
+        return;
+      }
+      if (closed || event.source !== options.parent || options.origins.indexOf(event.origin) === -1
+          || !record(data, ["type", "version", "channel", "epoch", "revision", "ack", "locale", "explicit"])
+          || data.type !== prefix + "state" || data.version !== 1 || data.channel !== options.channel
+          || !identifier(data.epoch) || !integer(data.revision) || !integer(data.ack)
+          || data.ack > sequence || !options.store.valid(data.locale) || typeof data.explicit !== "boolean") return;
+      if (host && (host.origin !== event.origin || host.epoch !== data.epoch || data.revision < revision)) return;
+      host = { origin: event.origin, epoch: data.epoch };
+      revision = data.revision;
+      if (inFlight && data.ack >= inFlight) inFlight = 0;
+      if (desired !== null) {
+        if (inFlight) return;
+        if (data.locale !== desired) { flush(); return; }
+        desired = null;
+      }
+      options.store.apply(data.locale, data.explicit);
+    }
+    var unsubscribe = options.store.subscribe(function (state, source) {
+      if (source !== "local") return;
+      desired = state.locale;
+      flush();
+    });
+    options.window.addEventListener("message", message);
+    options.window.addEventListener("pageshow", announce);
+    // Also announce on load: the WP controller may load after the embedded app.
+    options.window.addEventListener("load", announce);
+    announce();
+    return function () {
+      closed = true;
+      unsubscribe();
+      options.window.removeEventListener("message", message);
+      options.window.removeEventListener("pageshow", announce);
+      options.window.removeEventListener("load", announce);
+    };
+  }
+  return { createStore: createStore, connectHost: connectHost, connectGuest: connectGuest };
+});
diff --git a/contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json b/contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json
new file mode 100644
index 0000000..d5f9eb3
--- /dev/null
+++ b/contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "network": "xrpl-mainnet",
+  "observed_on": "2026-09-08",
+  "source": "https://s1.ripple.com:51234/",
+  "method": "amm_info",
+  "projection": "Pool identity and ledger reference only; balances, LP participants, auction and voting accounts omitted. This is not a current quote or a liquidity guarantee.",
+  "observations": {
+    "CAL_XRP": {
+      "ledger_index": 106846514,
+      "ledger_hash": "355289C6237F28F79881D11F5D2A97AA5583AD6295CA56839247099539775C51",
+      "validated": true,
+      "amm_account": "rhDx4NgeWz6jzs4TwiwYDmpeF2maJFZBtr",
+      "assets": [
+        {"currency": "43616C6F72696500000000000000000000000000", "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY"},
+        {"currency": "XRP"}
+      ]
+    },
+    "CAL_RLUSD": {
+      "ledger_index": 106846512,
+      "ledger_hash": "97584F563483BAF7D36E0D6479CFA68FE00AD3278B3ACFB9BCB9C309ACB10FDD",
+      "validated": true,
+      "amm_account": "rPN26geCWSD4xPu8LYBM8zqDrYSgNQGHeQ",
+      "assets": [
+        {"currency": "43616C6F72696500000000000000000000000000", "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY"},
+        {"currency": "524C555344000000000000000000000000000000", "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De"}
+      ]
+    }
+  }
+}
diff --git a/contracts/ecosystem/xrpl-dex-assets.v1.json b/contracts/ecosystem/xrpl-dex-assets.v1.json
index bb6580c..0ecf816 100644
--- a/contracts/ecosystem/xrpl-dex-assets.v1.json
+++ b/contracts/ecosystem/xrpl-dex-assets.v1.json
@@ -2,6 +2,7 @@
   "schema_version": 1,
   "network": "xrpl-mainnet",
   "status": "design-only",
+  "identity_evidence": "contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json",
   "assets": {
     "XRP": {
       "kind": "native",
@@ -34,7 +35,7 @@
       "base": "CAL",
       "quote": "RLUSD",
       "directions": ["buy_cal", "sell_cal"],
-      "amm_account": "rPN26geWz6jzs4TwiwYDmpeF2maJFZBtr",
+      "amm_account": "rPN26geCWSD4xPu8LYBM8zqDrYSgNQGHeQ",
       "verification": "validated-ledger"
     },
     {
diff --git a/contracts/identity-bridge/v1/README.md b/contracts/identity-bridge/v1/README.md
index 7e20acd..bee2224 100644
--- a/contracts/identity-bridge/v1/README.md
+++ b/contracts/identity-bridge/v1/README.md
@@ -30,6 +30,12 @@ remain identical across the WordPress flow, iframe messages, backend callback
 and origin-browser status claim. Locale is request context, not identity proof
 or a persisted user preference.
 
+Step 3's newly requested shared display-language preference is specified as
+LANG-1 in `docs/STEP_3_REPAIR_CHECKPOINT.md`. It is not implemented by this
+identity contract. Its future controls/messages must keep the display choice
+separate from the immutable locale of a pending authentication flow; a selector
+change does not authorize weakening the mismatch, origin or callback checks.
+
 `login-test-matrix.json` freezes the eleven-locale login and failure-path
 coverage used to prevent repetitive manual testing.
 
diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index a43b1da..4dc6da0 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -1,8 +1,11 @@
 {
   "contract_id": "calorieapp.identity-bridge.code-provenance",
-  "contract_version": "1.2.0",
+  "contract_version": "1.3.1",
   "review_date": "2026-09-04",
   "plugin_version_reviewed": "0.3.2",
+  "inventory_updated_on": "2026-09-09",
+  "inventory_plugin_version": "0.3.40",
+  "inventory_update_is_source_clearance": false,
   "distribution_clearance_status": "blocked-pending-source-clearance",
   "release_expansion_allowed": false,
   "local_build_and_test_allowed": true,
@@ -33,6 +36,13 @@
     {
       "id": "installed-xumm-login-plugin",
       "relationship": "reads-xummlogin-api-key-secret-and-create-user-options",
+      "presentation_interface": "existing-xl-trustline-route-only-after-loaded-handler-and-exact-CAL-issuer-currency-positive-limit-check",
+      "presentation_option_names": [
+        "xummlogin_trustline_issuer",
+        "xummlogin_trustline_currency",
+        "xummlogin_trustline_limit"
+      ],
+      "presentation_browser_config": "readiness-boolean-only-no-credentials-or-option-values",
       "source": "live-wordpress-installation-export-no-public-1.3.1-source-url-identified",
       "live_observation_date": "2026-09-03",
       "live_asset_reported_version": "1.3.1",
@@ -85,6 +95,66 @@
     "Codex"
   ],
   "release_files": [
+    {
+      "path": "config/blog-x.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public blog helper copy; eleven translations remain prepared-unreviewed and existing publication boundaries apply"
+    },
+    {
+      "path": "assets/calorieapp-cms-language-preview.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Canonical FAQ display adapter in contracts/display-language/v1/cms-preview.js; existing publication boundaries apply"
+    },
+    {
+      "path": "config/cms-faq-preview.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Versioned public FAQ source and unreviewed translation proposal in contracts/display-language/v1/cms-faq-preview.json; source capture is not rights clearance"
+    },
+    {
+      "path": "assets/calorieapp-display-language-runtime.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Shared display-only runtime in contracts/display-language/v1/runtime.js; existing publication boundaries apply"
+    },
+    {
+      "path": "assets/calorieapp-display-language.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending"
+    },
+    {
+      "path": "assets/calorieapp-display-language.css",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending"
+    },
+    {
+      "path": "config/display-language.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending"
+    },
+    {
+      "path": "includes/class-calorieapp-identity-bridge-display-language.php",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending"
+    },
     {
       "path": "CONFIGURATION.md",
       "origin_class": "project-repository-material",
@@ -141,7 +211,7 @@
       "repository_first_add_commit": "7191b0fc150fd5e4c1e928f0ba95282af7b52bf2",
       "declared_distribution_licence": "project-mark-no-general-trademark-licence-granted",
       "clearance_status": "requested-use-on-existing-project-website-no-expanded-mark-licence",
-      "source": "https://drive.google.com/file/d/1FMepF9HinYi9Pd5AuR7BSOO6peY5gIPu/view",
+      "source": "private-project-design-source-reference-omitted-from-public-contract",
       "source_file": "calorieappdraft3.ai",
       "adaptation": "Original phone-mark vector paths and colours retained; surrounding artboard and border omitted."
     },
@@ -175,6 +245,21 @@
       "declared_distribution_licence": "GPL-2.0-or-later",
       "clearance_status": "contributor-source-and-similarity-review-pending"
     },
+    {
+      "path": "assets/calorieapp-site-polish.css",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-source-and-similarity-review-pending"
+    },
+    {
+      "path": "assets/calorieapp-site-polish.js",
+      "origin_class": "project-repository-material-with-third-party-mark-path",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later-excluding-third-party-trade-marks",
+      "clearance_status": "contributor-source-similarity-and-mark-review-pending",
+      "source": "https://about.x.com/en/who-we-are/brand-toolkit"
+    },
     {
       "path": "assets/calorieapp-site-navigation.js",
       "origin_class": "project-repository-material",
@@ -196,6 +281,14 @@
       "declared_distribution_licence": "GPL-2.0-or-later",
       "clearance_status": "contributor-and-source-declaration-pending"
     },
+    {
+      "path": "config/app-information.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "New public CalorieApp information copy for the existing eleven-locale registry; no private account data or provider records"
+    },
     {
       "path": "config/locales.json",
       "origin_class": "generated-project-contract-copy",
@@ -275,6 +368,70 @@
       "repository_first_add_commit": "2c5a98ec289decadb244274fdf5763e2afde62cf",
       "declared_distribution_licence": "GPL-2.0-or-later",
       "clearance_status": "contributor-source-and-similarity-review-pending"
+    },
+    {
+      "path": "config/richlist.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public Richlist region and own-rank helper copy; eleven translations remain prepared-unreviewed and existing publication boundaries apply"
+    },
+    {
+      "path": "config/navigation.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public shared Home/App/Top/Bottom navigation helper copy; eleven translations remain prepared-unreviewed and existing publication boundaries apply"
+    },
+    {
+      "path": "config/trustline.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public Trustline helper copy; eleven prepared-unreviewed translations; existing publication boundaries apply"
+    },
+    {
+      "path": "assets/calorieapp-tokenomics.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Additive public Tokenomics helper using operator confirmation and dated XRPL evidence; eleven translations prepared-unreviewed; existing publication boundaries apply"
+    },
+    {
+      "path": "assets/calorieapp-tokenomics.css",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Additive public Tokenomics helper using operator confirmation and dated XRPL evidence; eleven translations prepared-unreviewed; existing publication boundaries apply"
+    },
+    {
+      "path": "config/tokenomics.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Additive public Tokenomics helper using operator confirmation and dated XRPL evidence; eleven translations prepared-unreviewed; existing publication boundaries apply"
+    },
+    {
+      "path": "assets/calorieapp-buy-guide-language.js",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public How to Buy/sell guide language helper and eleven prepared-unreviewed translations; existing publication boundaries apply"
+    },
+    {
+      "path": "config/how-to-buy.json",
+      "origin_class": "project-repository-material",
+      "repository_first_add_commit": "pending-current-change",
+      "declared_distribution_licence": "GPL-2.0-or-later",
+      "clearance_status": "contributor-and-source-declaration-pending",
+      "source": "Public How to Buy/sell guide language helper and eleven prepared-unreviewed translations; existing publication boundaries apply"
     }
   ],
   "completed_evidence_actions": [
diff --git a/docs/FOOD_DATA_SOURCE_ARCHITECTURE.md b/docs/FOOD_DATA_SOURCE_ARCHITECTURE.md
index b694503..6ea7aa7 100644
--- a/docs/FOOD_DATA_SOURCE_ARCHITECTURE.md
+++ b/docs/FOOD_DATA_SOURCE_ARCHITECTURE.md
@@ -6,6 +6,12 @@ internal assertion correction are implemented. Open
 Food Facts remains the only enabled read-only search adapter; no public source
 onboarding, contribution or catalog-write flow is enabled.
 
+The operator's 2026-09-08 request for a small optional complementary-source and
+origin-information extension is assessed in
+[Step 3 food sources and app widget](STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md).
+It does not activate a source, extend assertion policy or change the runtime
+contract. The existing app and completed integration remain the baseline.
+
 ## Decision
 
 CalorieApp does not model food data as an Open Food Facts copy. It uses a
diff --git a/docs/PRIVACY_NOTICE_ALIGNMENT.md b/docs/PRIVACY_NOTICE_ALIGNMENT.md
index 3f55a8b..3a7bcb1 100644
--- a/docs/PRIVACY_NOTICE_ALIGNMENT.md
+++ b/docs/PRIVACY_NOTICE_ALIGNMENT.md
@@ -5,6 +5,31 @@ consequence copy are aligned. A complete public privacy notice, controller and
 provider details, linguistic/legal review, publication and production
 activation remain release-blocking.
 
+The operator reaffirmed continuous legal-text alignment on 2026-09-08.
+`STEP_3_SMALL_APP_IMPROVEMENTS.md` records the feature-by-feature assessment for
+Step 3, including the locally prepared diary filter, planned sources and widget.
+A change without new collection, recipients or purpose may need no substantive
+privacy-text amendment; record that reasoning and still check the live notice
+against actual behavior before release. This record does not change an effective
+policy date, publish a notice or clear the existing legal review requirements.
+
+## Shared presentation maintenance — 2026-09-09
+
+Bridge 0.3.37 adds no account field, processing purpose, retention period,
+provider request or recipient. Navigation and Richlist helper translations reuse
+the existing display-only preference. The local page-tools readiness event has
+no payload; the controller reads its own store and ignores supplied event data.
+Richlist ownership is taken only from the native rendered own-row marker. The
+helper neither derives identity from public wallet data nor stores ranks or
+addresses. Donation/CMP edits affect CSS only; native consent, submission,
+notices and legal acceptance are retained.
+
+The existing display-preference storage assessment and full native consent,
+notice and language review still apply. Both new copy catalogues remain
+prepared-unreviewed. No new legal claims, trademark assets, public notice text
+or effective policy date are introduced by this cycle; source inventory
+maintenance is not distribution clearance.
+
 ## Purpose of this record
 
 This document prevents the privacy notice, CalorieApp interface and durable-
@@ -77,6 +102,60 @@ review does not block ordinary five-step-plan development or require repeated
 process-exception prompts. Publication and production activation remain
 separate explicit operator decisions.
 
+## Step 3 shared information and footer candidate — 2026-09-08
+
+Identity Bridge 0.3.31 prepares a public CalorieApp information component and
+shared footer. The information is static, selected from the public WordPress
+page locale. It does not read profiles, wallets, diary totals, browser storage,
+private locale preferences or authentication state, and makes no app/provider
+request. Its app link follows the existing site route in the current tab.
+Source and payment capabilities that are not released are not advertised.
+
+The existing public CAL market renderer/endpoint is reused with its current
+request/cache behavior; the component does not add market requests to archive
+or search pages. Existing third-party/consent disclosures still need their
+release verification. Social/legal destinations retain the current operator and
+rights wording. No new recipient, processing purpose or retention period is
+introduced by the information component. This alignment record is not a new
+effective public privacy policy or clearance of the existing release gates.
+
+## Requested shared language preference — 2026-09-08
+
+The operator now explicitly requires synchronized language controls on the
+WordPress site and inside CalorieApp, with the selected language applying to
+the actual pages and applicable legal notices. The delivery specification and
+country/service boundary are LANG-1 and LEG-1 in
+[the central Step 3 checkpoint](STEP_3_REPAIR_CHECKPOINT.md). They are open
+requirements, not behavior implemented by Bridge 0.3.31.
+
+The existing login-bound locale is short-lived request context, not a saved
+display preference. A future display preference must be separate: changing it
+must not mutate a pending authentication claim, grant consent, accept terms,
+reinitialize a payment or disclose private account data. The initial design
+stores only the chosen locale in a minimal first-party mechanism. Its exact
+storage, lifetime, recipients and public-cache behavior still need confirmation
+against the implemented flow before updating the public cookie/privacy notice.
+Do not assume this new preference shares the static widget's current
+no-storage/no-new-processing assessment.
+
+Use one factual legal baseline with versioned translations and, where genuinely
+applicable, country/service supplements. Terms, privacy/cookie notices,
+disclosures and rights statements must remain accessible from both products in
+the selected language; an untranslated English destination is not evidence of
+complete eleven-language delivery. Existing localized export/import/erasure
+consequence labels cover only those controls. Record a translation's source
+version and review status, and keep a missing required translation open before
+the corresponding localized onboarding or other affected flow is promoted.
+
+The operator's Netherlands establishment is the starting point for applicable
+EU/NL obligations; verify the actual controller and business details. A
+language preference is not residence, a selected jurisdiction or financial
+service eligibility. No IP geolocation, extra country field, new translation
+recipient or automatic external posting is introduced by this requirement.
+Perform country-specific assessment for the actual service and target market,
+using the official sources recorded under LEG-1. Claims of global compliance,
+current translated policies or independent legal approval remain unsupported.
+
 ## Still required before publication or activation
 
 Human review must still approve and supply:
@@ -103,6 +182,59 @@ Unknown legal, provider or contact details must remain visibly pending. They
 must never be invented, inferred from repository metadata or replaced by a
 claim that the English product copy is a complete notice.
 
+## Display preference implementation preview — 2026-09-08
+
+The first LANG-1 implementation is prepared locally in the app candidate and
+Bridge 0.3.32. Both opt-in development switches default off. If enabled, the
+selectors synchronize a display preference through the existing parent/frame
+relationship; messages contain only language/protocol context. They never
+change login claims, consent, accepted terms, account data or payment state.
+
+The first-party browser record `calorieapp.display-language.v1` contains only
+a locale tag and selection timestamp, with a maximum 30-day lifetime per
+origin. It is written for a changed explicit selection and is not a tracking
+identifier. Denied browser storage leaves selection in memory. No account
+preference, database column, recipient, translation API or geolocation is added.
+Browser storage is still storage requiring factual assessment/disclosure; the
+static widget's earlier no-storage assessment must not be applied to this
+optional preference. Its final public notice/CMP treatment remains to confirm
+before activation. No legal exemption or global compliance is certified here.
+
+The translated information widget, app introduction/source footer, food
+search/portion/diary controls and own messages, USDA reference and diary filter
+respond in the preview. The introduction/footer
+slice adds static copy and retains the existing source/contribution links;
+it adds no storage, recipient, provider call or change to the preference's
+lifetime. OFF's database licence is distinguished from the separate USDA
+reference attribution. This is source credit, not a complete reuse-rights or
+privacy notice. Full site/app UI, legal notices, cookie controls, artwork and
+existing account/privacy controls are not completely synchronized/translated
+by this slice. Their review/version/language obligations remain open under
+LANG-1/LEG-1. This record does not publish or re-date an effective policy.
+See `contracts/display-language/v1/README.md` for tested behavior and remaining
+PHP/browser/CMS acceptance.
+
+## Food display and Nutri-Score summary correction — 2026-09-08
+
+The local food-control slice translates static interface copy and the request
+controller's known messages in the browser. Product/brand/serving text, queries,
+barcodes and private diary entries are not sent to a translation service or
+rewritten. A changed language does not initiate a food search, retry a save,
+accept deletion, change sign-in or add a field to a food payload. Existing
+source calls and private-data retention behavior remain as before; the shared
+display preference above keeps its existing purpose and 30-day lifetime.
+
+The app's synthetic average Nutri-Score is replaced by counts of the recorded
+product letters and missing values. This is a display correction, including
+when the language preview is off. Each loaded entry counts once; the UI says
+that this is not a dietary Nutri-Score and does not account for portion sizes.
+Source grades, macro totals, exports and saved records are unchanged. This
+removes that aggregate-grade claim from the local app candidate; it does not
+certify the underlying data or settle other website/trademark claims. The
+official product-calculation reference and remaining review limits are recorded
+in the display-language contract. Public notices and their translations remain
+subject to the same version/review requirements; no effective policy is issued.
+
 ## Official reference boundary
 
 The alignment contract records requirements from the official text of
@@ -115,3 +247,105 @@ Article 15's access right and Article 17's erasure right and exceptions:
 This record is an engineering control, not independent legal advice or
 certification. It publishes nothing, changes no feature flag, performs no
 migration or deployment and mutates no live personal data.
+
+## Shared display choice for private-account controls
+
+The display-language follow-up reuses the unchanged eleven-language export,
+import and erasure consequence catalogue. Only rendered labels, local status
+messages and direction follow the shared preference. Source account identifiers,
+selected file bytes, export content, exact confirmations and acknowledged state
+are not translated or rewritten. Existing handler/request behavior and feature
+activation flags are retained, including the original parent authentication and
+erasure callback messages. The account-tools container remains collapsed by
+its existing native details element.
+
+A language change never submits or consents to import/erasure, reissues a pending
+request, or enables a disabled capability. There is no new provider, storage,
+retention, remote translation, processing purpose or data field in this slice.
+The existing thirty-day display preference is unchanged. Controls receive RTL
+metadata and isolated LTR identifiers; native browser file-picker chrome still
+belongs to the browser. Existing copy still requires language/legal review. No
+policy version, effective date, controller fact or public approval is advanced
+by connecting these controls; full public notices and the remaining parent
+login/account feedback are not completed by this change.
+
+## Bounded public CMS language experiment
+
+The FAQ experiment is included in local candidate 0.3.33, off by default and
+not installed. Its catalogue contains only two observed public paragraphs and
+unpublished translated copy, enqueued only on the known public FAQ GET outside
+preview/private/password/editor contexts. It consumes the existing display
+store without adding another preference. Its behavior is locally modeled; it
+introduces no fetch, translation provider, storage, cookie, private-data field,
+retention rule, payment or consent operation. Source wording separates existing
+food functions from planned extensions without claiming service authorization.
+The copy is still unreviewed and is not a full FAQ or legal-policy translation.
+No effective date, controller fact, legal classification or approval changes.
+
+## Blog/X helper follow-up — 2026-09-08
+
+Candidate 0.3.34 adds public static explanation, a direct X profile link and a
+button using Complianz's existing native settings action. It neither queries
+private cookie values nor writes consent, starts an X request, loads another
+provider, reloads the page or changes retention. The existing X/CMP integration
+continues to own provider activation and withdrawal. The button is hidden if the
+native CMP interface/banner is unavailable; the direct link remains usable.
+The public WP locale or existing optional display store selects three prepared
+helper strings. No new preference, recipient, purpose or effective policy date
+is introduced by the helper. Actual X processing, current provider terms and
+public cookie/privacy wording still require their existing factual review; the
+helper text is not a complete translated notice or legal certification.
+
+
+## Trustline presentation — rebuilt 0.3.38, 2026-09-09
+
+The existing explicit copy action still writes only the displayed public CAL
+issuer or currency code to the visitor's clipboard. This change adds accurate
+success/failure/pending feedback and current-source checks. It adds no server
+recipient, account data, telemetry, storage lifetime or provider request. The
+existing optional display preference supplies the helper language; pending
+feedback is memory-only. Language changes do not accept terms or consent, start
+signing, or change authentication locale. The optional native Xaman route retains
+its existing readiness checks and separate release requirements. Eleven helper
+translations remain prepared-unreviewed; these notes neither update effective
+public policy dates nor certify complete localized legal notices.
+
+
+## Tokenomics presentation — 0.3.39, 2026-09-09
+
+Two public, static Tokenomics panels identify the operator-supplied project
+consolidation wallet, record operator-confirmed completion of airdrops, and
+disclose a dated CAL/XRP LP interest verified against the public ledger. The
+helper does not fetch wallet/account data or connect to Xaman. The external
+XPMarket link is an explicit new-tab action with `noopener noreferrer`; no
+provider embed, prefetch, visitor balance lookup, payment request or new storage
+is introduced. Eleven prepared translations reuse the opt-in display store.
+This bounded presentation change adds no new personal-data processing purpose
+and does not change legal notice effective dates, consent settings, regional
+eligibility or legal clearance. Full legal/localisation review remains open.
+
+
+## How to Buy/sell presentation — 0.3.40, 2026-09-09
+
+The owned guide now includes complete prepared copy in eleven languages through
+the existing optional display store. Country/service eligibility stays separate
+from display language; selecting a locale accepts no terms and changes no consent.
+The guide distinguishes external buy/sell, XRPL reserves/network fees and a
+separate provider bank-withdrawal service. CAL/RLUSD issuance and the need to
+verify any required RLUSD trustline are explicit. Public conflict/risk copy does
+not promise execution, returns, a native DEX launch or worldwide provider access.
+
+No quote, provider list API, wallet connection, signing, payment, storage or
+tracking endpoint is added. Current Xaman guidance confirms its country/currency
+selector, and the issuer-specific XPMarket page exposes buy and sell controls;
+these read-only checks establish destinations, not full transaction acceptance.
+AFM guidance still requires assessing the actual cryptoasset service scope; this
+informational change does not resolve the first-party DEX's legal classification.
+No legal effective date or source-clearance flag changes. Translations remain
+prepared-unreviewed and do not constitute reviewed national legal supplements.
+
+References checked on 2026-09-09:
+- https://help.xaman.app/app/getting-started-with-xaman/buying-xrp
+- https://xrpl.org/docs/concepts/accounts/reserves
+- https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY
+- https://www.afm.nl/nl-nl/sector/cryptopartijen/toezicht
diff --git a/docs/STEP_3_DEX_SCOPE.md b/docs/STEP_3_DEX_SCOPE.md
index fb78c3f..27f5364 100644
--- a/docs/STEP_3_DEX_SCOPE.md
+++ b/docs/STEP_3_DEX_SCOPE.md
@@ -3,6 +3,13 @@
 Status: design and verified-asset registry prepared; production transaction
 submission remains disabled pending legal scope and a separate security review.
 
+The retailer/consumer payment pilot requested on 2026-09-08 is a separate
+Testnet simulation, recorded in `STEP_3_REPAIR_CHECKPOINT.md` and app commit
+`c008f61` (`pilots/retail_testnet/README.md`). Its offline policy proof does not
+enable DEX routing or merchant payment processing. Testnet accounts may use
+ordinary app features, subject to verifying the existing login compatibility;
+test funds must not count as mainnet balances, donations or trade settlement.
+
 ## Initial pair set
 
 The first-party selector may show only assets identified by both currency code
@@ -18,6 +25,15 @@ The CAL/XRP and CAL/RLUSD AMMs were read from a validated XRPL mainnet ledger on
 2026-09-08. The application must re-read validated ledger state for every quote;
 the recorded pool accounts are identifiers, not a liquidity or price promise.
 
+The recovery review found an invalid CAL/RLUSD pool address in the initial
+registry. It was re-queried using the exact CAL and RLUSD currency/issuer pairs.
+The corrected address is `rPN26geCWSD4xPu8LYBM8zqDrYSgNQGHeQ`.
+`contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json` records a minimal
+identity projection with validated ledger indexes and hashes for both pools.
+LP participant addresses, balances, auction and voting accounts are deliberately
+omitted. Offline tests validate Base58Check, both asset identities and the match
+to this dated evidence. They do not validate a current price or legal clearance.
+
 CAL/EUR, CAL/USD and BTC/CAL labels were observed in a third-party wallet view,
 but are excluded until each issued asset's exact issuer, operator, redemption
 claim and current pool state have been reviewed. A familiar ticker or icon is
diff --git a/docs/STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md b/docs/STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md
new file mode 100644
index 0000000..eb05368
--- /dev/null
+++ b/docs/STEP_3_FOOD_SOURCES_AND_APP_WIDGET.md
@@ -0,0 +1,321 @@
+# Food sources, origin information and the CalorieApp website widget
+
+Recorded: 2026-09-08. Status: minimal bundled USDA reference prepared on the app
+branch; shared informational widget prepared in local plugin candidate 0.3.31.
+Live USDA search/diary integration remains deferred.
+No live provider adapter, catalog write, credential, migration or widget has
+been enabled by this record. This supplements the existing project Step 3; completed
+Steps 1 and 2 are not reopened.
+
+## Operator request and recommendation
+
+The operator wants useful complementary data alongside Open Food Facts (OFF)
+and CalorieDB, particularly origin information, and a CalorieApp information
+widget throughout the WordPress website before showcases in project Step 4.
+The food-source expansion is explicitly conditional: little work and credit
+use, no additional service spending, and preservation of the accepted app and
+joint same-tab login/logout. The project can proceed without an extra source.
+
+Dependency order, clarified after the operator's sequencing question:
+
+1. Resolve the optional extra-source scope against the accepted app before
+   finalizing source-dependent website copy and integration. The bounded USDA
+   check below is complete. A later operator request selects the minimal bundled
+   reference described below; full live integration remains deferred.
+2. Assess the optional OFF origin/source display and finish only selected small
+   app changes. Check their existing WordPress embed and joint login/logout
+   compatibility. This is an additive check of completed Steps 1/2, not a restart.
+3. Finish the shared website presentation, including the lightweight CalorieApp
+   widget, against the actual app behavior. The widget can describe existing
+   search/logging and does not need USDA or a new authenticated data endpoint.
+4. Run the integrated acceptance once on the assembled candidate, alongside
+   the remaining five-point Step 3 repair plan and controlled release process.
+
+A second adapter is technically plausible, but inspection does not establish
+that a complete integration is trivial. Zero regression risk cannot be
+promised. Isolation, focused acceptance and rollback must establish whether the
+small scope is acceptable before activation. No precise time or credit estimate
+has been established.
+
+## Source assessment
+
+The decisions below are project recommendations, based on official material
+checked on the recorded date; they are not general legal clearance.
+
+| Candidate | Confirmed access and value | Decision for this request |
+| --- | --- | --- |
+| OFF, existing adapter | The API, source attribution and separate database/content/image licence boundaries already underpin the app. Current official documentation describes evolving API schemas. [API documentation](https://openfoodfacts.github.io/openfoodfacts-server/api/). | First inspect the available origin fields on the existing search route. Preserve the current transport and nutrition behavior; do not bundle an API migration. |
+| USDA FoodData Central | Public-domain/CC0 data and a documented API requiring a key. Default allowance is 1,000 requests/hour/IP; the demonstration key is limited to 30/hour and 50/day. [API guide](https://fdc.nal.usda.gov/api-guide/). Foundation Foods covers minimally processed foods with analytical data; Branded Foods draws on manufacturers' labels, so the whole database must not be called laboratory-verified. [Data types](https://fdc.nal.usda.gov/data-documentation/). | A three-food bundled reference is prepared following the operator's narrower launch request. Full live search/logging remains deferred. It is not a verified replacement for a missing Dutch branded product. |
+| RIVM NEVO | Version 2025/9.0 is free to download. Terms retain RIVM rights, require original data to remain unchanged and source/version attribution, and prohibit charging end users for NEVO use. Additions must be distinguishable. [Download](https://www.rivm.nl/nederlands-voedingsstoffenbestand/gebruik-nevo-online/download-bestand), [terms](https://www.rivm.nl/sites/default/files/2025-11/Voorwaarden-voor-gebruik-NEVO-online-2025-databestand.pdf). | Useful Dutch candidate later. This confirms a dataset download, not a keyless integration API or an unrestricted open licence. Import, updates and combined-output terms add work. |
+| OpenNutrition Foods | A downloadable TSV dataset under ODbL plus a modified contents licence, including OFF data with retained attribution. Its provider describes AI-enhanced data. [Download and terms summary](https://www.opennutrition.app/download), [provider description](https://www.opennutrition.app/). | Defer: additional provenance/licence/quality work and overlap with OFF. The reviewed pages do not establish a free hosted production API. Estimates must not become verified facts. |
+| DTU Frida / Danish Food Composition Database | DTU lists a newer Danish Food Composition Database 6.1 dataset. The full current record and reuse terms could not be inspected in this assessment. [Official dataset listing](https://data.dtu.dk/articles/dataset/The_Danish_Food_Composition_Database_version_6_1/32312844). | Keep as a reserve candidate. Do not rely on an older Frida licence claim for a newer release or select it before checking current terms and format. |
+
+Yuka, BuyOrNot, Goby AI, Mijn Eetmeter, Nutrola, MyFitnessPal, Yazio and Lifesum
+are not admitted as sources based on the pasted consumer-app comparison.
+A free app, or its reuse of OFF, does not establish permission or a supported
+API for CalorieApp to reuse its database. This is not a claim that none could
+ever offer an integration. No suitable integration agreement was established
+for them here. OFF Prices and fitness databases also do not directly resolve
+the requested origin or complementary basic-food requirement.
+
+## Meaning and limits of origin
+
+Working interpretation of the operator's word "origine": geographical origin
+of the food or ingredients. Data provenance is recorded separately.
+
+| Information | Intended presentation |
+| --- | --- |
+| Origin of ingredients | A provider-reported country/region, only when explicitly supplied; preserve which ingredient or product the claim describes. |
+| Manufacturing or packing location | Its own labelled field; never substitute it for ingredient origin. |
+| Countries of sale | Availability information, not an origin claim. |
+| Source of the information | OFF, USDA or a reviewed CalorieDB record, with the source identifier/link and relevant version or retrieval time. |
+| Missing or conflicting information | "Origin not supplied" or separately attributed claims; no inferred country or invented certainty. |
+
+GS1 explicitly says a barcode prefix does not establish manufacturing origin.
+Do not infer origin from a barcode prefix, brand headquarters or the country
+operating a nutrition database. [GS1 explanation](https://support.gs1.org/support/solutions/articles/43000734188-does-the-gs1-prefix-first-3-or-4-digits-of-the-ean-13-barcode-number-show-the-country-of-origin-).
+
+No reviewed source in this assessment establishes complete product/lot-level
+traceability. A future producer-supported origin record would need evidence
+for that product or lot, lawful reuse and review. It is outside this small
+extension and does not require an XRPL transaction.
+
+## Actual implementation implications
+
+Initial inspection used maintenance-branch commit `54c86d7`. The bounded check
+below inspected the app worktree at `4571506`, based on app-main commit
+`ddb75bd9548e4765a6137029b46cb0ac49d22bfc`, including the serving-basis fix.
+It does not verify the deployed app. Keep implementation based on accepted app
+source; do not merge the website maintenance history into app main.
+
+- `backend/app/main.py` sends `/search-food` directly to the OFF service.
+  `backend/app/services/open_food_facts.py` selects a small field list that
+  does not include origin. It already has request admission and shared rate
+  controls; these must retain their existing behavior and limits.
+- `FoodSearchResult`, `frontend/components/foodTypes.ts` and the frontend
+  normalizer currently carry nutrition/product fields without source identity
+  or origin. A useful source display therefore needs mapping and UI changes;
+  the source-neutral database alone does not deliver it.
+- `backend/app/models.py` defines `FoodLogDB` without a provider or external
+  source-record identifier. Keeping a second source attributable after logging
+  may therefore require history-schema and portability work. That is a concrete
+  reason not to promise a complete second-source integration as a quick change.
+- The internal catalog preserves source assertions, but public catalog reads,
+  OFF persistence and second-source activation remain disabled. Its current
+  assertion policy allows specified numeric nutrition facts, not arbitrary
+  geographical text. Do not squeeze origin into nutrition assertions or enable
+  catalog ingest to make this small display feature work.
+- The WordPress plugin already contains page shortcuts and presentation hooks.
+  Reuse a shared presentation location for the widget while avoiding the known
+  footer/widget overlap. An XPMarket price card or shortcut alone does not meet
+  the request for CalorieApp information.
+
+For OFF, examine candidate origin/manufacturing/sale-country fields against the
+actual existing response and current documentation before selecting a mapping.
+The official schema change log records changes to tags and nutrition structures;
+this assessment has not verified live origin-field coverage for CalorieApp's
+queries. [OFF schema changes](https://openfoodfacts.github.io/openfoodfacts-server/api/ref-api-and-product-schema-change-log/).
+
+The small OFF slice must remain optional display data, without additional
+upstream calls or changes to existing log records. Preserve unknown values and
+render provider text safely. Persistent origin history would be separate work.
+
+For a second source, the smallest honest candidate is an explicitly selected
+basic-food search alongside the existing packaged-product search. Keep results
+attributed and use one selected record's values. Do not fill a branded product's
+missing nutrients from a similarly named generic food or blend conflicting
+records. No source needs to be fetched until its search is requested.
+
+Before considering this candidate small enough, prove source/external-ID
+handling through selection and logging; existing records must still work.
+Check raw versus cooked foods, nutrient definitions as well as units, per-100g
+versus portion bases, unknown versus measured zero and deterministic rounding.
+Do not add a micronutrient dashboard, automatic food matching, bulk import,
+paid translation service or AI estimation to this slice. Apply the existing
+eleven-language UI contract and disclose provider-language search limitations.
+
+Any source key belongs server-side. Reuse the existing stack with a reviewed
+per-provider request budget, bounded timeout, no retry amplification and a
+small bounded cache only if needed. Do not send wallet/session identifiers or
+private diary content to a food provider. Provider failure must leave OFF and
+CalorieDB usable. Source licences and attribution must remain intact in the
+actual display/export design; technical separation is not a licence exemption.
+
+## Bounded USDA check and decision — 2026-09-08
+
+**Decision: technically feasible, deferred for the current small extension.**
+The operator already allows proceeding without an extra source when it would
+take more work or affect the accepted baseline. This check closes the initial
+FS-2 feasibility action; it does not count USDA as delivered or remove it from
+the later candidate list. No provider was activated and no application code,
+database, credential or public notice was changed in this check.
+
+One read-only GET to the documented FoodData Central `/foods/search` endpoint
+used the public `DEMO_KEY`, the generic query `oats`, `dataType=Foundation` and
+`pageSize=2`. It began at 2026-09-08 15:14:55 UTC, used a 20-second timeout and
+no retry, and returned HTTP 200 with four total matches and two returned foods.
+The request contained no user food history, wallet or session data. It proves
+sample API reachability from this environment, not production availability,
+load capacity, full data coverage or an end-to-end app integration.
+
+Selected observed response fields, retained for reproducible mapping review:
+
+| FDC ID | Returned description | Serving size / unit | Returned energy fields |
+| --- | --- | --- | --- |
+| `2261421` | Flour, oat, whole grain | Both absent | Nutrient `2047`: 389 KCAL; `2048`: 386 KCAL |
+| `2257046` | Oat milk, unsweetened, plain, refrigerated | Both absent | Nutrient `2047`: 48.3 KCAL; `2048` absent |
+
+Both records returned protein (`1003`), fat (`1004`) and carbohydrate by
+difference (`1005`) in grams. Neither returned energy under nutrient `1008`.
+These are raw search-response observations, not a selected serving or a claim
+about a particular packaged product. The two energy definitions are documented
+by USDA; a future adapter needs an explicit selection rule and reference basis.
+Do not sum the energy fields, treat a missing field as zero, infer a serving
+volume from the food name, or silently equate all carbohydrate definitions.
+[USDA FAQ](https://fdc.nal.usda.gov/faq/).
+
+The integration cost comes from the actual application contracts:
+
+| Boundary inspected | Finding and implication |
+| --- | --- |
+| Search and selection | `/search-food` calls OFF directly. `FoodSearchResult`, `foodTypes.ts` and `normalizeFoodItem` have no source/external-record fields; the explicit normalizer would discard them. A source picker alone does not preserve attribution. |
+| Private logging | `FoodLogCreate`, `/log-food`, `FoodLogDB` and `FoodLog` retain a fixed set of product/nutrition fields without provider identity. Preserving an FDC reference through save and reload needs a reviewed persistence/API extension; overloading a barcode, brand or product name is not the intended model. |
+| Portability | `account_data_import.py` validates an exact field set and constructs `PlannedFoodLogImport` explicitly. Its `source_record_id` is an exported private diary row ID, not an FDC record ID. Export/import compatibility needs explicit version handling if new provenance fields are retained. |
+| Existing food behavior | The accepted OFF fix retains one complete serving/reference basis and excludes missing nutrition. Preserve it. USDA requires its own mapping, unknown-value handling and clear reference basis before existing percentage controls can safely operate on a selected record. |
+| Request budget | The existing rate governor accepts a provider key and can be reused, but the current route initializes OFF controls. USDA still needs separate configuration, a server-side key, timeouts and failure isolation; it must not consume OFF's allowance or fan out every query. |
+| Catalog and identity | The internal source-neutral catalog can represent another provider. It does not supply the missing diary provenance path. No core catalog rewrite or Xaman/Identity Bridge change is justified by adding USDA. |
+
+These findings support deferral without estimating speculative development
+hours or creating a partial production adapter. A lookup-only panel would not
+fulfil a source that users can select, log and later identify. Existing app and
+website improvements can continue without depending on such a panel.
+
+Legal and copy outcome: USDA's API guide confirms public-domain/CC0 data and
+asks for source acknowledgement; it does not impose a mandatory CC-BY-style
+attribution licence. Persistent provenance here is a project quality and source
+architecture requirement. No reuse prohibition was established as the reason
+for deferral. Recheck actual provider traffic, attribution, origin wording and
+privacy text before a later activation; do not claim USDA is already available
+in the widget, source registry, published notices or marketing.
+[USDA API guide](https://fdc.nal.usda.gov/api-guide/).
+
+## Follow-up: minimal USDA launch reference — 2026-09-08
+
+The operator subsequently requested the smallest useful USDA addition to show
+a second data source at launch, with attribution comparable to OFF. The chosen
+scope is three real, dated Foundation Foods bundled with the app: mature raw
+carrots, whole-grain oat flour and unsweetened refrigerated oat drink. This is
+a narrower addition than the live, loggable integration assessed above.
+
+`UsdaReferenceFoods.tsx` on app branch `feat/step3-diary-filter` adds a native
+disclosure beside the existing app search/diary. It displays source-defined
+nutrition per 100 g, FDC IDs, USDA search links, retrieval date and CC0 links.
+USDA attribution also appears alongside OFF in the app footer. The new copy
+covers eleven locales; provider names remain explicitly English. App-branch
+`docs/USDA_REFERENCE.md` records the mapping and verification.
+
+Prepared app commit: `d38aff2`, following the isolated diary-filter commit
+`4571506`. All three bundled records match their inspected USDA fields;
+21 food UI/search-deadline tests, TypeScript, lint, the optimized Next.js build
+and the legal/whitespace checks pass locally. This is not browser or live
+installation evidence.
+
+The bundled records require no runtime API key, provider traffic, backend
+change, database migration, new dependency, account state or automatic update.
+They do not enter OFF results, private logs, totals or export/import. The UI
+states that this is a small reference selection separate from the diary; launch
+copy must keep that limitation. This prepares a working second-source display,
+not full USDA search, origin tracking or USDA diary integration.
+
+Source/data, trade-mark and privacy alignment records accompany the app change.
+The previous full-integration deferral stands; it does not prohibit the smaller
+scope now requested by the operator. This preparation is local and still joins
+the normal Step 3 review, browser acceptance and controlled release.
+
+## WordPress widget scope
+
+Implementation checkpoint: the shared `PageEnding` renderer now contains the
+informational component in candidate 0.3.31, with the existing CalorieApp SVG,
+the verified site app route and public page-locale copy in
+`config/app-information.json`. It covers ordinary public page types, including
+archive/search and preview HTML, and excludes admin/feed/embed/AJAX/REST output.
+The app page shows a contextual label instead of reloading itself. No account
+data, extra app/provider call or second iframe is part of this component.
+Local behavior/package checks passed; PHP execution and rendered acceptance of
+this candidate remain open. See `STEP_3_PRESENTATION_RELEASE.md` for the exact
+limitations. This is prepared code, not an installed website feature.
+
+The later shared-language requirement is LANG-1 in
+`STEP_3_REPAIR_CHECKPOINT.md`: a selection made in the website account widget
+or in CalorieApp must update both products. The static page-locale copy above
+did not implement that behavior. The 0.3.32 development preview now connects
+this component to the separate display preference; both switches default off.
+Complete CMS/app/legal translation and integrated acceptance remain open.
+
+Prepare one reusable component with the CalorieApp identity, a short accurate
+description of food search/logging and a working "Open CalorieApp" destination.
+Any more specific search or diary shortcut must use an existing verified route
+or action. Do not invent deep links. On the app page, avoid a duplicate embed.
+
+Include every public website page type in placement acceptance: home, usecases,
+articles, informational/legal pages and donation/shop flows. Also inspect
+off-menu pages and draft previews without publishing drafts. Admin screens,
+feeds and the app iframe are not website-widget targets. Record any necessary
+placement exception for review instead of silently omitting pages.
+
+Use the historical typography, artwork, colors and button shapes. Prefer a
+compact block in normal page flow with one shared definition. Avoid another
+floating panel that can cover team members, consent controls or checkout.
+Support mobile widths, keyboard focus, zoom and the existing language contract.
+
+The first widget adds no app iframe, backend wake-up request, polling,
+third-party data call, tracker, cookie or new sign-in process on ordinary page
+views. It remains useful to visitors who are signed out. Personal calorie
+totals, food logs and wallet details are outside the initial widget scope;
+placing them in shared WordPress caches would require additional privacy work.
+Existing identity/session behavior remains the accepted baseline.
+
+## Completion before project Step 4
+
+| Item | Present status | Required close-out |
+| --- | --- | --- |
+| FS-1: OFF origin/source display | Preferred small candidate; not implemented or verified with live product coverage | Bounded mapping proof, safe missing/conflicting-data display, baseline acceptance; otherwise a documented scope decision. |
+| FS-2: one additional source | Three-food USDA reference prepared locally under the narrower operator request; full live search/logging deferred | Include the tested reference and source/CC0 attribution in app review and shared browser acceptance. Describe the limited selection accurately before launch; no source or logging activation is implied. |
+| WI-1: sitewide CalorieApp widget | Implemented locally in plugin candidate 0.3.31; not installed or visually accepted | Finish PHP/CI and page-inventory/responsive acceptance, verify preserved login/logout and no extra provider traffic from the informational component. |
+| ST-3: related integration work | Required for any selected slice | Verify search, portions, add/read/delete log behavior, existing history and same-tab joint login/logout; check languages, consent, page layout and rollback on the exact candidate. |
+
+Recommended small-scope cutoff: defer the optional food-source expansion if it
+needs an auth change, database migration, substantial refactor, new hosting,
+paid service, unclear reuse rights, broad translation/data-cleaning work or
+altered existing nutrition semantics. This is an implementation recommendation
+for the operator's effort constraint, not a new global project policy. Start
+any later source pilot disabled and make it independently removable. A lookup-
+only experiment must be labelled as such; it is not a completed loggable source
+integration, and no placeholder is counted as working delivery.
+
+Close these items explicitly before Step 4. If the food expansion fails the
+small-scope condition, record the evidence and the operator's stated option to
+proceed without it; do not silently count it as delivered or turn it into an
+unlimited release blocker. The website widget remains requested work unless its
+scope is separately adjusted. Other Step 3 requirements remain on the existing
+repair checkpoint. Existing source/release gates are not changed by this note.
+
+
+## Origin feasibility decision — 2026-09-09
+
+Inspected app candidate `80ba6ffac7991e4e9aa0c1612789c2cadba47566` without edits.
+`backend/app/services/open_food_facts.py` requests only product/name/code/images,
+brands, serving size, Nutri-Score and nutrients; `_normalize_products` does not
+retain origin. `FoodSearchResult` and the frontend search normalization/type do
+not carry origin either. A reliable attributed origin display therefore needs
+provider-field, normalization, API and UI changes plus regression checks; it is
+not a text-only website addition. Origin persistence in diary/history would be
+additional work. No source schema, nutritional values, request budget, cache,
+diary or authentication behavior was changed in this assessment.
+
+Decision within the operator's explicit conditional request: defer origin
+implementation while closing Step 3. Keep the three-food USDA reference already
+prepared, accurately labelled as a reference rather than live generic search.
+Do not pretend this closes farm/lot traceability; retain that as later work.
+This is an engineering scope decision, not a finding that OFF has no origin data
+or that future integration is technically impossible.
diff --git a/docs/STEP_3_PRESENTATION_RELEASE.md b/docs/STEP_3_PRESENTATION_RELEASE.md
index 87c8c14..bfb0013 100644
--- a/docs/STEP_3_PRESENTATION_RELEASE.md
+++ b/docs/STEP_3_PRESENTATION_RELEASE.md
@@ -1,37 +1,26 @@
-# Step 3 presentation release
-
-Candidate: Identity Bridge 0.3.30.
-
-## Included presentation changes
-
-- Existing Brizy footers remain stored in place. Singular pages missing a CAL
-  market card receive one candidate which is deduplicated against an existing
-  XPMarket/legacy card and positioned before the existing legal footer.
-- The Trustline page reuses the installed XUMM Login plugin's existing Xaman
-  TrustSet route. No Xaman credential or signing implementation is duplicated.
-- The Richlist highlights only the row already marked for the authenticated
-  visitor and adds an accessible jump control. Logged-out visitors receive no
-  inferred position.
-- Contact, donation and Complianz consent controls receive scoped responsive
-  presentation without changing their submission or consent behavior.
-- How to buy becomes a wallet, regional XRP funding, CAL trustline, then buy or
-  sell path. Unreliable generic DEX links are removed. The issuer-pinned XPMarket
-  destination remains, and CAL/XRP plus CAL/RLUSD are identified as validated
-  XRPL AMMs. First-party mainnet signing stays labelled release-gated.
-
-The display changes are reversible by disabling the companion plugin. They do
-not mutate stored Brizy content, create a DEX transaction, publish personal
-wallet ownership, or merge the application branch.
-
-## Third-party mark added in 0.3.28+
-
-`assets/calorieapp-site-polish.js` contains the monochrome X logo path from X's
-official brand toolkit solely to identify CalorieToken's X profile. The mark is
-not project-owned and is not licensed under the plugin's software licence.
-
-- Source: <https://about.x.com/en/who-we-are/brand-toolkit>
-- Asset: <https://about.x.com/content/dam/about-twitter/x/brand-toolkit/x-logo.zip>
-- Retrieved: 2026-09-08
-
-The original vector geometry is preserved; `currentColor` retains the site's
-monochrome icon colour.
+# Step 3 presentation review — Identity Bridge 0.3.40
+
+The accumulated website changes are submitted for one code-review and CI pass
+against the existing maintenance base, not app main. They address shared footers,
+market placement, floating navigation, richlist, donation/cookie styling, Trustline,
+Tokenomics, and the complete owned How to Buy/sell guide. The website information
+widget and optional display-language helpers use the same eleven-locale registry.
+
+The exact reviewed legacy guide is replaced with external buy/sell guidance,
+issuer/currency identity, XRP reserves/network fees, RLUSD trustline checks and a
+separate bank-withdrawal explanation. Xaman's region/currency selector and the
+issuer-specific XPMarket page were checked on 2026-09-09. No quote or signing
+request is added. The Tokenomics helper uses an operator-supplied project wallet
+and dated ledger validation; all airdrops are operator-confirmed complete, while
+exact remaining giveaway figures are still open. Historical images are retained.
+
+130 local tests passed: 114 Node and 16 Python. JS syntax, package/asset checks,
+legal-boundary checks and whitespace passed. PHP lint/six fixtures were not run
+locally; the strict aggregate is INCOMPLETE. Hosted CI and actual WordPress/app,
+mobile/RTL, linguistic, consent and donation acceptance remain to be performed.
+Source clearance remains blocked; no new release, installation or mainnet
+financial feature is approved by this proposal.
+
+See STEP_3_REPAIR_CHECKPOINT.md for all 27 requested areas and their remaining
+closure. Internal recovery archives, attachment handles and later private
+checkpoint history are excluded from this proposed public review commit.
diff --git a/docs/STEP_3_REPAIR_CHECKPOINT.md b/docs/STEP_3_REPAIR_CHECKPOINT.md
new file mode 100644
index 0000000..8e0037a
--- /dev/null
+++ b/docs/STEP_3_REPAIR_CHECKPOINT.md
@@ -0,0 +1,48 @@
+# Step 3 review and acceptance status
+
+Candidate: Identity Bridge 0.3.40, prepared and unreleased. This record retains
+all 27 requested areas. Website Step 3 precedes showcases (Step 4) and publication
+(Step 5). Accepted same-tab joint login/logout remains the regression baseline.
+No financial feature, source/right clearance, deployment or merge is enabled by
+this review. Local automated success is not native/browser or legal acceptance.
+
+| Area | Evidence and status | Remaining closure |
+| --- | --- | --- |
+| BASE-1 — Steps 1/2 | Accepted foundation and same-tab joint login/logout; no new live verification in this reconciliation. | Preserve while adding display behavior; regression acceptance with the assembled app/plugin. |
+| WEB-1 — every footer | Prepared in 0.3.31 and retained in 0.3.37; the shared-footer behavior fixtures pass. Reviewed signatures adopt the shared footer; unknown/custom/translated content is retained. | Actual-page acceptance: identical composition, working social/legal links and spacing on all six usecases, articles and off-menu pages. Review retained exceptions individually. |
+| WEB-2 — historical appearance | Partial: supplied artwork, colours and fonts reused in several components. Not a complete site/app design acceptance. | Review banners/backgrounds, typography, yellow/green/blue palette and original button geometry. Remove unwanted pill/large-card styling; preserve the original Illustrator composition. |
+| WEB-3 — floating buttons | Partial: 0.3.37 adds eleven prepared labels, restoration of native controls when the replacement is missing/invalid, and once-only binding for replaced scroll controls. Twelve behavior fixtures pass; original destinations/artwork remain. | Accept Home/App/Top/Down placement and ordering, no blank app-page slot, correct same-tab route, mobile/long-page/RTL and consent clearance on actual pages. |
+| WEB-4 — contact/header/XPMarket | Prepared header/menu corrections and 0.3.31 dedicated market relocation, retained and regression-checked in 0.3.37. Existing form/account content is protected. | Actual Contact team overlap, centred and uncut market on mobile/desktop, late widget/menu loading and no duplicate market card still need rendered acceptance. |
+| WEB-5 — app information widget | Prepared in 0.3.31 and connected to the opt-in shared display choice in 0.3.32; eleven-locale behavior fixtures pass. Not installed/accepted. | PHP plus real-page acceptance with LANG-1 and the matching app. No private account totals or new app/provider polling. |
+| WEB-6 — loading/privacy panel | Partial: bounded embedded-app startup cover and existing account-privacy UI; a separate top-level hosting startup page is outside that cover. | Verify the requested compact/collapsible private-data presentation, wallpaper/logo and loading/timeout/return states. Do not change the accepted session routing to hide hosting behavior. |
+| WEB-7 — How to Buy and Sell | 0.3.40 prepared: full eleven-locale guide, pinned issuer/currency, rechecked Xaman selector and XPMarket buy/sell page, reserve explanation, sell/withdrawal distinction, conflict/risk copy and matching typography/corners. | PHP, installed content-match, native/mobile/RTL/link and linguistic acceptance remain. No first-party DEX or signing action is enabled; regional availability is provider-specific. |
+| WEB-8 — Trustline | Rebuilt 0.3.38 helper: current-source and strict public/readiness checks, accessible clipboard outcomes, late/replaced-content cleanup and eleven prepared helper locales. Eight full-script behavior tests pass; native readiness/session code unchanged. | PHP and native acceptance: actual issuer/configuration, two native alternatives plus eligible Xaman route, failure/decline/return, mobile/RTL and language review. No payload or signature was executed. |
+| WEB-9 — Tokenomics | 0.3.39 prepared: supplied consolidation wallet, dated CAL/XRP LP disclosure, operator-confirmed completed airdrops, existing chart retained, eleven helper locales. | Native page acceptance and exact giveaway reconciliation remain open. PNG available; Illustrator is not required for the additive wallet. No invented final percentages or budget inferred from wallet balance. |
+| WEB-10 — Richlist | Partial: 0.3.37 restores and extends the described 0.3.35 behavior: native own-row marker, accessible current-target jump, delayed/replaced/removed/ambiguous rows, horizontal wrapper and eleven prepared helper locales. Seven full-script behavior tests pass. | Actual marked row, jump/focus, logout, scrolling, mobile/RTL and no consent/navigation overlap remain to accept. The helper does not infer identity; native table copy/data is not translated. |
+| WEB-11 — Blog/X | Partial: 0.3.34 adds a profile link, availability explanation and native cookie-settings button even if the original anchor/frame is absent. Eleven prepared helper locales follow the shared preview. Read-only inspection found the native X/CMP integration still present, without a rendered timeline. | Accept native refuse/accept/revoke, provider failure, responsive/RTL and script-loading behavior. A reliable live timeline is not demonstrated; the useful fallback does not close the original feed request. No paid API, second loader or guarantee of latest posts. |
+| WEB-12 — donations | Partial: 0.3.37 restores inherited typography, modest corners, responsive steps, field/focus/error/disabled styling. Existing native POST-to-GET handling and form state are retained; no live payment/cancellation acceptance. | Verify amounts, quantities, errors, Back/Refresh and unsigned cancellation without duplicate payment or stranded checkout. Native plugin notices and legal copy still need translation/review. |
+| WEB-13 — cookie notice | Partial: 0.3.37 restores inherited typography, modest corners, viewport wrapping/scrolling and equal styling for choices. CSS scope checks pass; native visibility/order/consent remains unchanged. | Accept actual refuse/accept/settings/revoke, keyboard/focus, overlay clearance and LANG-1/native translations. Language selection must not alter consent. |
+| WEB-14 — Roadmap | Open: public source retrieval was refused; no exact local HTML or current Roadmap Explained destination was available. No correction was made and no alternate browser/admin access was used to bypass the failure. | Obtain the affected block HTML and current link from an available authorized source/operator. Identify content versus CMP/legal origin before removing “Click i agree to”; preserve artwork and existing URLs, then prepare the source-backed text/link correction. |
+| WEB-15 — whitepapers/publications | Open: current/historical document publication, README and rights materials not closed by this candidate. | Preserve original and updated whitepapers, roadmap, design and old inbound links; use the intended publications repository after its existing review/authorization. No workaround for prior host/disclosure blocks. |
+| WEB-16 — full page inventory | Partial: read-only CMS lists now identify 28 published pages, 10 articles and one donation product, including all six usecases and three legacy exchange routes. Seven page/six product drafts are counted without opening them. Metadata is in `cms-surfaces.json`; body/template/state acceptance remains open. | Use the inventory for published/off-menu coverage; reconcile draft-preview requirements separately, including Community Voting Hub. Review actual content, shared templates, article/archive/search/404 states and donation/account states. Do not publish drafts or advertise concepts as live functionality. |
+| WEB-17 — responsive acceptance | Open for the exact candidate: modeled geometry and JS tests are not real cross-device acceptance. | Point 3: 360/412/1440 px plus tablet/narrow desktop, zoom, keyboard, iOS/Android/originating browsers where available, logged-in/out, delayed content and RTL. Record unexecuted lanes. |
+| LANG-1 — synchronized languages | Partial: Bridge 0.3.40/app `80ba6ff` retains the shared preview, FAQ sample, Blog, navigation, Richlist, Trustline and Tokenomics helpers; the complete owned How to Buy guide now follows the same store in eleven prepared languages. Not installed/accepted. | Full CMS/artwork/legal translations, login/account-summary/parent feedback, standalone cross-origin/cross-device behavior and PHP/native/linguistic/visual acceptance remain open. Apply LANG-1a through LANG-1h before Step 4; helper coverage does not close full-page translation. |
+| APP-1 — minimal USDA | Prepared on app `d38aff2`: three bundled reference foods with source/CC0 and eleven-locale scope copy. | Review/accept with the assembled app; describe it as a reference. No live USDA search or attributable diary logging is implemented. Preserve OFF/CalorieDB. |
+| APP-2 — origin/additional sources | Feasibility decision completed in 0.3.40: current provider request, normalization, API and frontend omit origin. A reliable display needs an additive app/API change, not only website copy. | Defer under the explicit small-effort/non-disruption condition while finishing Step 3. Keep the already prepared minimal USDA reference; future explicit origin must preserve attribution and missing/conflicting values, never barcode-prefix inference. |
+| APP-3 — small app improvements | Loaded-diary filter retained from `4571506`/`d38aff2`; display responsiveness added in `f054ade`. App `d6b3f1d` extends the eleven-language food controls and replaces the synthetic average with recorded grade counts; 57 focused checks pass. Favorites and repeated logging remain ideas. | Integrated acceptance of preserved diary records/totals, entered filter/portion, source-grade counts, shared language and sessions. No incidental expansion beyond the agreed small-effort condition. |
+| FIN-1 — DEX and AMM pairs | Design-only registry/scope. CAL/XRP and CAL/RLUSD have dated validation; additional screenshot symbols are not sufficient asset identity. | Separate point-4 service assessment: buy/sell/exchange, requested XRP/RLUSD/CAL routes and candidate CAL/EUR, CAL/USD, BTC/CAL require exact issuers/pools, liquidity/slippage controls and conflicts disclosure. Personal LP participation is not a safety endorsement or permission to publish personal financial data. |
+| PILOT-1 — consumer/retailer | Design/offline proof only at `c008f61`; no working roles, inventory, checkout/inbox or faucet. | Explicit scope decision retained before Step 4. If included, build additive memberships/private stock, baskets/portions, verified Testnet payment requests/hash receipts and retailer/consumer screens in that order. Reserve distributor/producer/farm roles without granting rights. |
+| PILOT-2 — Testnet onboarding | Design only; fresh Xaman test-wallet behavior/current CalorieTest issuer still unverified. | Test ordinary app/site functions with Testnet identity; guide test XRP/reserves and CalorieTest separately. Assisted funding first, automated faucet later. Test funds never settle mainnet donations/trades. |
+| LEG-1 — legal/languages/countries | Partial alignment records and localized consequence/interface copy. App `d6b3f1d` removes its synthetic average Nutri-Score claim; website/source/trademark review, complete public notices and eleven reviewed legal translations remain open. | Feature-by-feature source/terms/privacy/cookie/health-data/financial/provider/rights review. Preserve factual product-grade attribution and review other nutrition claims. Apply LEG-1 above; scope country supplements to actual services/target markets. |
+| RELEASE-1 — review/publication | Open: 0.3.40 passes 130 tests; PHP is unavailable so the strict result is INCOMPLETE/exit 2. PR #133 actual public head and already-public historical provenance were verified. Prepare a public review tree excluding later private recovery history.  | Points 1/3/5: exact compatible candidates, required checks/review, authorized publication/merge/install and tested rollback. Private backup and structural legal/package checks do not clear public distribution. |
+
+The next acceptance must use the exact compatible app and plugin candidates.
+Cover 360/412/1440 px, tablet/narrow desktop, keyboard/zoom, RTL, native consent,
+login/logout, richlist and unsigned donation return states. Record any unavailable
+lane. Full CMS/legal/artwork translations and the DEX/retailer/Testnet requests
+remain open until evidenced or explicitly scoped; prepared helpers do not silently
+close them. Missing Roadmap content/link and giveaway classification require their
+specific sources, not invented values. No publishing drafts or reset of consent.
+
+Source/distribution clearance remains blocked under the existing provenance
+contract. The code-review/CI proposal is not a tag release or installation.
diff --git a/docs/STEP_3_SESSION_NAVIGATION.md b/docs/STEP_3_SESSION_NAVIGATION.md
index 81e329a..3cf2c6c 100644
--- a/docs/STEP_3_SESSION_NAVIGATION.md
+++ b/docs/STEP_3_SESSION_NAVIGATION.md
@@ -51,8 +51,9 @@ had no such Brizy shortcuts; the 0.3.25 follow-up above fills that gap.
 ## Logo source
 
 The transparent SVG uses the nine original phone-mark paths from page 1 of
-`calorieappdraft3.ai`, in the CalorieToken Google Drive:
-https://drive.google.com/file/d/1FMepF9HinYi9Pd5AuR7BSOO6peY5gIPu/view
+`calorieappdraft3.ai`, in the project's controlled design archive. The rights
+administrator retains its private source reference; the access URL is not
+part of this public documentation. This edit does not rewrite repository history.
 
 The phone mark is visually matched to `logo app.png`. Vector forms, speaker,
 home button, fork, knife and original colours are retained. The artboard,
diff --git a/tools/check_step3_candidate.py b/tools/check_step3_candidate.py
new file mode 100644
index 0000000..2a1bec3
--- /dev/null
+++ b/tools/check_step3_candidate.py
@@ -0,0 +1,151 @@
+"""Run the shared Step 3 maintenance checks; never grant release clearance.
+
+No service, browser, signing, installation or publication action is performed.
+Missing PHP is recorded as NOT_RUN locally and fails the --require-php CI gate.
+"""
+
+from __future__ import annotations
+
+import argparse
+from datetime import datetime, timezone
+import hashlib
+import json
+from pathlib import Path
+import re
+import shutil
+import subprocess
+import sys
+import time
+
+
+ROOT = Path(__file__).resolve().parents[1]
+PLUGIN = ROOT / "wordpress-plugins/calorieapp-identity-bridge"
+NODE_SUITES = (
+    "wordpress_page_ending", "wordpress_shared_footer", "wordpress_embed_loading",
+    "display_language_protocol", "wordpress_display_language",
+    "wordpress_cms_language_preview", "calorieapp_embed_readiness",
+    "wordpress_site_session", "wordpress_site_layout", "wordpress_site_navigation",
+    "wordpress_step3_polish", "wordpress_blog_x", "wordpress_richlist", "wordpress_trustline", "wordpress_tokenomics", "wordpress_buy_guide",
+)
+PHP_FIXTURES = (
+    ("wordpress_site_session_markup",), ("wordpress_legal_footer_post",),
+    ("wordpress_donation_return",), ("wordpress_page_ending",),
+    ("wordpress_display_language",), ("wordpress_display_language", "preview"),
+)
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--require-php", action="store_true")
+    parser.add_argument("--report-dir", type=Path, default=ROOT / "dist/step3-checks")
+    args = parser.parse_args()
+    output = args.report_dir.resolve()
+    output.mkdir(parents=True, exist_ok=True)
+    checks: list[dict] = []
+
+    def run(name: str, commands: list[list[str]], *, available: bool = True,
+            required: bool = True, reason: str = "") -> None:
+        started = time.monotonic()
+        result = {"name": name, "required": required, "status": "NOT_RUN"}
+        if not available:
+            result["reason"] = reason
+        else:
+            logs = []
+            failures = []
+            for command in commands:
+                logs.append("COMMAND " + json.dumps(command) + "\n")
+                try:
+                    completed = subprocess.run(
+                        command, cwd=ROOT, capture_output=True, text=True,
+                        encoding="utf-8", errors="replace", timeout=120,
+                    )
+                    logs.extend((completed.stdout, completed.stderr))
+                    if completed.returncode:
+                        failures.append({"command": command, "exit_code": completed.returncode})
+                except (OSError, subprocess.TimeoutExpired) as error:
+                    logs.append(str(error) + "\n")
+                    failures.append({"command": command, "error": type(error).__name__})
+            log = "".join(logs)
+            (output / (name + ".log")).write_text(log, encoding="utf-8")
+            result.update(status="FAIL" if failures else "PASS", log=name + ".log")
+            if failures:
+                result["failures"] = failures
+            if name == "node-behavior":
+                result["test_counts"] = {
+                    label: int(count) for label, count in
+                    re.findall(r"^# (tests|pass|fail|cancelled|skipped|todo) (\d+)$", log, re.M)
+                }
+            if name == "python-package-and-asset-tests":
+                match = re.search(r"Ran (\d+) tests? in", log)
+                if match:
+                    result["tests"] = int(match[1])
+        result["seconds"] = round(time.monotonic() - started, 3)
+        checks.append(result)
+        print(f"{result['status']}: {name}" + (f" — {reason}" if not available else ""), flush=True)
+
+    node = shutil.which("node")
+    php = shutil.which("php")
+    run("node-behavior", [[node or "node", "--test", "--test-reporter=tap", *[
+        f"tools/tests/{suite}.test.mjs" for suite in NODE_SUITES
+    ]]], available=bool(node), reason="Node.js unavailable")
+    run("javascript-syntax", [[node or "node", "--check", str(path.relative_to(ROOT))]
+                             for path in sorted((PLUGIN / "assets").glob("*.js"))],
+        available=bool(node), reason="Node.js unavailable")
+    run("python-package-and-asset-tests", [[sys.executable, "-m", "unittest",
+        "tools.tests.test_build_wordpress_plugin_release",
+        "tools.tests.test_xrpl_dex_asset_registry"]])
+    run("legal-boundaries", [[sys.executable, "tools/check_legal_boundaries.py"]])
+    run("php-syntax", [[php or "php", "-l", str(path.relative_to(ROOT))]
+                       for path in sorted(PLUGIN.rglob("*.php"))],
+        available=bool(php), required=args.require_php, reason="PHP unavailable")
+    for fixture, *extra in PHP_FIXTURES:
+        name = "php-" + fixture.removeprefix("wordpress_").replace("_", "-")
+        if extra:
+            name += "-" + "-".join(extra)
+        run(name, [[php or "php", f"tools/tests/{fixture}.test.php", *extra]],
+            available=bool(php), required=args.require_php, reason="PHP unavailable")
+    run("diff-whitespace", [["git", "diff", "--check"]])
+
+    # Pin the executable sources, fixture inputs and contracts, independently of
+    # a later documentation-only edit or local commit of the tested candidate.
+    files = sorted(subprocess.check_output([
+        "git", "ls-files", "--cached", "--others", "--exclude-standard", "--",
+        "tools", "contracts", "wordpress-plugins/calorieapp-identity-bridge", ".github/workflows",
+    ], cwd=ROOT, text=True).splitlines())
+    inputs = {}
+    for relative in files:
+        path = ROOT / relative
+        if path.is_file() and path.suffix not in (".md", ".txt"):
+            inputs[relative] = hashlib.sha256(path.read_bytes()).hexdigest()
+    fingerprint = hashlib.sha256(json.dumps(inputs, sort_keys=True).encode()).hexdigest()
+    failed = any(check["status"] == "FAIL" for check in checks)
+    missing = any(check["status"] == "NOT_RUN" for check in checks)
+    required_missing = any(check["status"] == "NOT_RUN" and check["required"] for check in checks)
+    exit_code = 1 if failed else 2 if required_missing else 0
+    status = "FAILED" if failed else "INCOMPLETE" if missing else "AUTOMATED_CHECKS_PASSED"
+    report = {
+        "schema_version": 1,
+        "checked_at": datetime.now(timezone.utc).isoformat(),
+        "source_head_at_check": subprocess.check_output(["git", "rev-parse", "HEAD"], cwd=ROOT, text=True).strip(),
+        "working_tree_dirty": bool(subprocess.check_output(["git", "status", "--porcelain"], cwd=ROOT)),
+        "source_fingerprint_sha256": fingerprint,
+        "input_sha256": inputs,
+        "status": status, "exit_code": exit_code, "require_php": args.require_php,
+        "checks": checks,
+        "release_approved": False,
+        "not_demonstrated": [
+            "Hosted CI for this commit", "Installed WordPress/app compatibility",
+            "Native browser/mobile/zoom/RTL appearance and accessibility",
+            "Native same-tab login/logout, donation and consent acceptance",
+            "Full CMS and legal translation coverage or linguistic review",
+            "Source/publication clearance, financial-feature or deployment approval",
+        ],
+    }
+    destination = output / "report.json"
+    destination.write_text(json.dumps(report, indent=2) + "\n", encoding="utf-8")
+    print(f"{status}: {destination}\nRelease approval: false", flush=True)
+    return exit_code
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/tools/fixtures/step3/faq-language-model.mjs b/tools/fixtures/step3/faq-language-model.mjs
new file mode 100644
index 0000000..2d3a345
--- /dev/null
+++ b/tools/fixtures/step3/faq-language-model.mjs
@@ -0,0 +1,118 @@
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+
+const catalogue = JSON.parse(readFileSync(new URL('../../../contracts/display-language/v1/cms-faq-preview.json', import.meta.url)));
+const locales = JSON.parse(readFileSync(new URL('../../../contracts/identity-bridge/v1/locales.json', import.meta.url))).locales;
+const html = readFileSync(new URL('./faq-mission-source.html', import.meta.url), 'utf8');
+
+// Parse the observed HTML independently with the standard-library HTML parser.
+// The node model below tests identities/text/attributes, not browser layout or
+// native WooCommerce submission. No dependency or browser substitute is added.
+const fixture = JSON.parse(execFileSync('python3', ['-c', `
+from html.parser import HTMLParser
+import json,sys
+class Parser(HTMLParser):
+ def __init__(self): super().__init__(convert_charrefs=True); self.root=[]; self.stack=[]
+ def handle_starttag(self,tag,attrs):
+  node={'tag':tag,'attributes':sorted([[k,v or ''] for k,v in attrs]),'children':[]}
+  (self.stack[-1]['children'] if self.stack else self.root).append(node)
+  self.stack.append(node)
+ def handle_endtag(self,tag):
+  assert self.stack[-1]['tag']==tag
+  self.stack.pop()
+ def handle_data(self,data):
+  if self.stack:self.stack[-1]['children'].append(data)
+p=Parser();p.feed(sys.stdin.read());print(json.dumps(p.root))
+`], { input: html, encoding: 'utf8' }));
+
+class Node {
+  constructor(tag, attributes = {}, data = '') {
+    this.nodeType = tag === '#text' ? 3 : 1;
+    this.tagName = tag.toUpperCase(); this.attrs = { ...attributes }; this.data = data;
+    this.childNodes = []; this.parentNode = null;
+    this.classList = { contains: value => (this.attrs.class || '').split(/\s+/).includes(value) };
+  }
+  get parentElement() { return this.parentNode?.nodeType === 1 ? this.parentNode : null; }
+  get attributes() { return Object.entries(this.attrs).map(([name, value]) => ({ name, value })); }
+  get isConnected() { return this.parentNode?.nodeType === 9 || this.parentNode?.isConnected || false; }
+  get textContent() { return this.nodeType === 3 ? this.data : this.childNodes.map(node => node.textContent).join(''); }
+  // The adapter must use existing Text.data, never replacement markup/subtrees.
+  set textContent(_) { throw new Error('Subtree replacement is not allowed'); }
+  set innerHTML(_) { throw new Error('HTML injection is not allowed'); }
+  set outerHTML(_) { throw new Error('Element replacement is not allowed'); }
+  getAttribute(name) { return this.attrs[name] ?? null; }
+  setAttribute(name, value) { this.attrs[name] = String(value); }
+  removeAttribute(name) { delete this.attrs[name]; }
+  appendChild(node) { node.remove(); node.parentNode = this; this.childNodes.push(node); return node; }
+  remove() {
+    if (this.parentNode) this.parentNode.childNodes.splice(this.parentNode.childNodes.indexOf(this), 1);
+    this.parentNode = null;
+  }
+  matches(selector) {
+    if (this.nodeType !== 1) return false;
+    return selector.split(',').some(value => {
+      value = value.trim();
+      if (value.startsWith('.')) return this.classList.contains(value.slice(1));
+      if (value.startsWith('#')) return this.getAttribute('id') === value.slice(1);
+      const attribute = value.match(/^([a-z]+)?\[([^=\]]+)(?:="([^"]*)")?\]$/);
+      if (attribute) return (!attribute[1] || this.tagName.toLowerCase() === attribute[1])
+        && this.getAttribute(attribute[2]) !== null
+        && (attribute[3] === undefined || this.getAttribute(attribute[2]) === attribute[3]);
+      return this.tagName.toLowerCase() === value;
+    });
+  }
+  closest(selector) { return this.matches(selector) ? this : this.parentElement?.closest(selector) || null; }
+  querySelectorAll(selector) {
+    return this.childNodes.flatMap(node => [...(node.matches(selector) ? [node] : []), ...node.querySelectorAll(selector)]);
+  }
+  querySelector(selector) { return this.querySelectorAll(selector)[0] || null; }
+}
+function fromShape(shape) {
+  if (typeof shape === 'string') return new Node('#text', {}, shape);
+  const node = new Node(shape.tag, Object.fromEntries(shape.attributes));
+  for (const child of shape.children) node.appendChild(fromShape(child));
+  return node;
+}
+function shape(node) {
+  return node.nodeType === 3 ? node.data : {
+    tag: node.tagName.toLowerCase(), attributes: Object.entries(node.attrs).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0),
+    children: node.childNodes.map(shape),
+  };
+}
+function all(node) { return [node, ...node.childNodes.flatMap(all)]; }
+function createFaqDom({ url = catalogue.source_url, mutate } = {}) {
+  const document = { nodeType: 9, childNodes: [] };
+  const page = new Node('html', { lang: 'en-US', dir: 'ltr' });
+  page.parentNode = document; document.childNodes.push(page);
+  const body = page.appendChild(new Node('body', { class: 'brz page-id-6855' }));
+  document.body = body; document.querySelectorAll = query => page.querySelectorAll(query);
+  document.querySelector = query => page.querySelector(query);
+  for (const item of fixture) body.appendChild(fromShape(item));
+  const roots = catalogue.slots.map(slot => document.querySelector(`p[data-uniq-id="${slot.element_id}"]`));
+  const wrappers = all(body).filter(node => node.tagName === 'DIV');
+  const controls = body.appendChild(new Node('aside'));
+  const link = controls.appendChild(new Node('a', { href: '/index.php/trustline/', target: '_self' }));
+  link.appendChild(new Node('#text', {}, 'Original link'));
+  const form = controls.appendChild(new Node('form', { method: 'post', action: '/index.php/product/donation/' }));
+  const amount = form.appendChild(new Node('input', { name: 'wcj_open_price', value: '0.01' })); amount.value = '1.25';
+  const quantity = form.appendChild(new Node('input', { name: 'quantity', value: '1' })); quantity.value = '2';
+  form.appendChild(new Node('input', { name: 'add-to-cart', value: '1761' }));
+  const submit = form.appendChild(new Node('button', { type: 'submit' }));
+  let submissions = 0; submit.onclick = () => { submissions++; }; form.onsubmit = () => { submissions++; };
+  const account = controls.appendChild(new Node('div', { class: 'xl-card', 'data-locale': 'en' }));
+  account.session = { id: 'synthetic-session', locale: 'en' };
+  account.logout = () => { throw new Error('Translation must not log out'); };
+  const consent = controls.appendChild(new Node('div', { class: 'cmplz-cookiebanner' }));
+  consent.checked = false;
+  const legal = controls.appendChild(new Node('p', { lang: 'en', 'data-legal-version': 'unchanged' }));
+  legal.appendChild(new Node('#text', {}, 'Existing legal notice'));
+  const location = { href: url };
+  const h = { document, page, body, roots, wrappers, controls, link, form, amount, quantity, submit, account, consent, legal, location,
+    get submissions() { return submissions; } };
+  mutate?.(h);
+  h.before = shape(body); h.controlsBefore = shape(controls);
+  h.originalNodes = roots.flatMap(all);
+  return h;
+}
+
+export { catalogue, locales, fixture, Node, fromShape, shape, all, createFaqDom };
diff --git a/tools/fixtures/step3/faq-mission-source.html b/tools/fixtures/step3/faq-mission-source.html
new file mode 100644
index 0000000..c7b4173
--- /dev/null
+++ b/tools/fixtures/step3/faq-mission-source.html
@@ -0,0 +1,5 @@
+<!-- Public FAQ excerpt observed 2026-09-08; two source paragraphs only. -->
+<div class="brz-rich-text"><div data-brz-translate-text="1">
+<p class="brz-lh-lg-1_9 brz-ls-lg-0 brz-fw-lg-400 brz-fss-lg-px brz-fs-lg-16 brz-ft-google brz-ff-knewave brz-tp-lg-empty brz-text-lg-center brz-css-n84dsb" data-uniq-id="uddCR" data-generated-css="brz-css-g60SK"><strong style="opacity: 1; color: rgb(80, 91, 169); background-color: transparent;">W</strong><strong style="background-color: transparent;">hat </strong><strong style="background-color: transparent; opacity: 1; color: rgb(80, 91, 169);">i</strong><strong style="background-color: transparent;">s </strong><strong style="background-color: transparent; opacity: 1; color: rgb(80, 91, 169);">t</strong><strong style="background-color: transparent;">he </strong><strong style="background-color: transparent; opacity: 1; color: rgb(80, 91, 169);">m</strong><strong style="background-color: transparent;">ission </strong><strong style="background-color: transparent; opacity: 1; color: rgb(80, 91, 169);">o</strong><strong style="background-color: transparent;">f </strong><strong style="background-color: transparent; opacity: 1; color: rgb(80, 91, 169);">C</strong><strong style="background-color: transparent;">alorieToken?</strong></p>
+<p class="brz-text-lg-center brz-tp-lg-empty brz-ff-lato brz-ft-google brz-fs-lg-16 brz-fss-lg-px brz-fw-lg-400 brz-ls-lg-0 brz-lh-lg-1_9 brz-vfw-lg-400 brz-fwdth-lg-100 brz-fsft-lg-0 brz-css-1997g7h" data-uniq-id="mE0AL" data-generated-css="brz-css-ufvZL"><span style="background-color: transparent;">Calorie's mission is to establish a diverse network of partners within the food and beverage industry, integrate payment applications for companies and consumers, contribute to corporate social responsibility, and promote a healthier financial lifestyle.</span></p>
+</div></div>
diff --git a/tools/fixtures/step3/how-to-buy-legacy.html b/tools/fixtures/step3/how-to-buy-legacy.html
new file mode 100644
index 0000000..618ee88
--- /dev/null
+++ b/tools/fixtures/step3/how-to-buy-legacy.html
@@ -0,0 +1,6 @@
+<article class="cal-buy-guide" aria-label="Buying Calorie on the XRP Ledger">
+<h2>Before you start</h2><p>Calorie (CAL) is a token on the XRP Ledger. Use a supported wallet and check the token’s issuer, not just its name or logo.</p><p><strong>Currency:</strong> Calorie (CAL)<br><strong>Issuer:</strong> <span style="overflow-wrap:anywhere">rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY</span><br><strong>Currency code:</strong> <span style="overflow-wrap:anywhere">43616C6F72696500000000000000000000000000</span></p>
+<h2>Choose a trading interface</h2><p><strong><a href="https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY" target="_blank" rel="noopener noreferrer">XPMarket</a></strong><br>Open the CAL token page, then choose an available trade or swap.</p><p><strong><a href="https://sologenic.org/" target="_blank" rel="noopener noreferrer">Sologenic</a></strong><br>Open the DEX and select Calorie/XRP. Verify the issuer above.</p><p><strong><a href="https://xumm.app/detect/xapp:xumm.dex?base=43616C6F72696500000000000000000000000000+rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY&amp;quote=xrp" target="_blank" rel="noopener noreferrer">Xaman DEX</a></strong><br>Open the DEX xApp in Xaman and verify the selected Calorie/XRP pair.</p><p><strong><a href="https://www.xrptoolkit.com/" target="_blank" rel="noopener noreferrer">XRP Toolkit</a></strong><br>Connect a supported wallet and open Trade. Select Calorie by its issuer.</p><p>These are external services. Available pairs, liquidity, fees and regional access may change. No centralized exchange listing is confirmed on this page.</p>
+<h2>How to buy CAL on the XRP Ledger</h2><ol><li>Set up a supported XRPL wallet using its official website or app. Keep your recovery phrase private.</li><li>Add enough XRP for the intended trade and the wallet’s displayed reserve and network fees.</li><li>Open one of the interfaces above. Select Calorie/CAL and verify the complete issuer address shown here.</li><li>If your wallet requests a CAL trust line, review it before approving. Then enter the amount and inspect the quoted price, liquidity, fees and slippage.</li><li>Approve only the transaction you intend in your wallet. Wait for the ledger result and check your resulting balance.</li></ol><p>Reserve requirements can change; follow your wallet’s current values and the <a href="https://xrpl.org/docs/tutorials/best-practices/account-management/calculate-reserves" target="_blank" rel="noopener noreferrer">official XRPL reserve documentation</a>. Never enter a recovery phrase on a trading website.</p>
+<p>Trading can result in loss. This page provides practical links and instructions, not an investment recommendation. CAL trading is separate from CalorieApp’s food search and personal food log.</p>
+</article>
diff --git a/tools/fixtures/step3/shared-footer-preview.html b/tools/fixtures/step3/shared-footer-preview.html
new file mode 100644
index 0000000..fad0bdf
--- /dev/null
+++ b/tools/fixtures/step3/shared-footer-preview.html
@@ -0,0 +1,94 @@
+<!doctype html>
+<html lang="en">
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Shared footer — isolated layout checks</title>
+<style>
+  body { margin: 16px; background: #eee; color: #222; font: 16px/1.5 sans-serif; }
+  h1 { font-size: 24px; }
+  iframe { display: block; border: 1px solid #888; margin-bottom: 28px; height: 1040px; background: #fff; }
+  .lanes { display: flex; align-items: start; gap: 24px; }
+  .lane { flex: 0 0 auto; }
+</style>
+<h1>Shared footer — isolated layout checks</h1>
+<p>Uses the production CSS and JavaScript with representative public page markup.
+No account, app, market or signing requests. This does not execute PHP or replace live WordPress acceptance.</p>
+<div class="lanes" id="lanes"></div>
+<script>
+  const assets = '../../../wordpress-plugins/calorieapp-identity-bridge/assets/';
+  const origin = 'https://calorietoken.net';
+  const links = [
+    ['Telegram', 'https://t.me/+7YxaKdQYWNA0NDA0'], ['GitHub', 'https://github.com/CalorieToken'],
+    ['X', 'https://x.com/CalorieToken'], ['Facebook', 'https://www.facebook.com/CalorieToken-100422882407878'],
+    ['YouTube', 'https://www.youtube.com/channel/UCV_87rxST-cQOVu4W8nFZkA'],
+    ['LinkedIn', 'https://www.linkedin.com/company/calorie-token/'], ['Instagram', 'https://www.instagram.com/calorietoken/']
+  ];
+  const operator = 'Operator: ICTHendrikse · KVK 73774693';
+  const copyright = '© 2026 ICTHendrikse (owned content only) · CalorieToken® trade mark: Pieter Hendrikse';
+  // The observed usecase footer had ordinary paragraphs instead of legal links.
+  const legacy = `<section class="brz-section" id="old-footer"><p>${operator}</p><p>${copyright}</p><p>Privacy Policy</p><p>Terms &amp; Conditions</p><a href="https://x.com/CalorieToken" aria-label="X"></a></section>`;
+  const social = links.map(([label, href]) => `<a class="calorieapp-shared-social" href="${href}" aria-label="${label}">${label}</a>`).join('');
+  const footer = `<footer class="calorieapp-shared-footer" hidden>
+    <nav class="calorieapp-shared-socials" data-calorieapp-social-carousel aria-label="CalorieToken social channels">
+      <button class="calorieapp-shared-social-arrow" data-calorieapp-carousel-direction="-1" aria-label="Previous social channel">‹</button>
+      <div class="calorieapp-shared-social-window"><div class="calorieapp-shared-social-track">${social}</div></div>
+      <button class="calorieapp-shared-social-arrow" data-calorieapp-carousel-direction="1" aria-label="Next social channel">›</button>
+    </nav>
+    <div class="calorieapp-shared-legal"><p>Calorie aims to be the world’s food token</p><p>${operator}</p><p>${copyright}</p>
+      <p class="calorieapp-shared-legal-links"><a href="${origin}/index.php/privacy-policy/">Privacy Policy</a><a href="${origin}/index.php/terms-conditions/">Terms &amp; Conditions</a></p>
+    </div></footer>`;
+  const copy = {
+    en: ['Find food products, explore nutrition and keep your own food diary.', 'Open CalorieApp'],
+    nl: ['Zoek voedingsproducten, bekijk voedingswaarden en houd je eigen eetdagboek bij.', 'Open CalorieApp'],
+    ar: ['ابحث عن المنتجات الغذائية، واطّلع على معلوماتها الغذائية، واحتفظ بسجل طعامك الخاص.', 'افتح CalorieApp']
+  };
+  const cases = [
+    [360, 'en', false], [412, 'nl', false], [768, 'en', false],
+    [1440, 'en', false], [360, 'ar', false], [412, 'en', true]
+  ];
+  cases.forEach(([width, locale, custom], index) => {
+    const lane = document.createElement('section'); lane.className = 'lane';
+    const heading = document.createElement('h2'); heading.textContent = `${width}px · ${locale}${custom ? ' · changed CMS footer' : ''}`;
+    lane.appendChild(heading);
+    const frame = document.createElement('iframe'); frame.width = width; frame.id = 'lane-' + index;
+    frame.title = heading.textContent;
+    const old = custom ? legacy.replace('</section>', '<form><label>Local form fixture <input name="fixture"></label></form></section>') : legacy;
+    frame.srcdoc = `<!doctype html><html lang="${locale}"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+      <link rel="stylesheet" href="${assets}calorieapp-page-ending.css">
+      <style>body{margin:0;background:#fff;font-family:Georgia,serif}.team{padding:24px;min-height:220px;box-sizing:border-box;border-bottom:1px solid #ddd}.legacy-market{margin-top:-60px;width:240px}.fixture-result{padding:8px;font:14px/1.5 sans-serif}#old-footer{padding:18px;background:#505ba9;color:white}#old-footer[hidden]{display:none!important}</style>
+      <body class="brz">
+      <section class="brz-section" id="content"><article class="team" id="team"><h1>Team / page content</h1><p>This content must remain above the shared information and market card.</p></article>
+      <div class="brz-wp-shortcode legacy-market" id="old-market-host"><div class="livecoinwatch-widget-1" data-coin="_CAL"></div></div></section>
+      ${old}
+      <div class="calorieapp-shared-page-ending" data-calorieapp-shared-page-ending data-calorieapp-page="site">
+        <aside class="calorieapp-app-info" data-calorieapp-app-info lang="${locale}" dir="${locale === 'ar' ? 'rtl' : 'ltr'}" aria-labelledby="calorieapp-app-info-title">
+          <img src="${assets}calorieapp-logo.svg" alt="" width="64" height="64">
+          <div><h2 id="calorieapp-app-info-title">CalorieApp</h2><p>${copy[locale][0]}</p></div>
+          <a class="calorieapp-app-info-link" href="${origin}/index.php/calorieapp/">${copy[locale][1]}</a>
+        </aside>
+        <aside class="calorieapp-page-market calorieapp-sitewide-market" data-calorieapp-sitewide-market hidden><div data-calorieapp-xpmarket-widget></div></aside>
+        ${footer}
+      </div>
+      <p class="fixture-result" id="fixture-result">Awaiting local rendering checks…</p>
+      <script src="${assets}calorieapp-page-ending.js"><\/script>
+      <script>window.addEventListener('load',()=>{
+        const ending=document.querySelector('[data-calorieapp-shared-page-ending]');
+        const market=ending.querySelector('[data-calorieapp-xpmarket-widget]');
+        const info=ending.querySelector('[data-calorieapp-app-info]');
+        const original=document.getElementById('old-footer');
+        const shared=ending.querySelector('footer');
+        const results={width:innerWidth,locale:'${locale}',custom:${custom},
+          originalPreserved:${custom} ? !original.hidden && !!original.querySelector('form') : original.hidden,
+          footerVisible:${custom} ? shared.hidden : !shared.hidden,
+          oneMarket:document.querySelectorAll('[data-calorieapp-xpmarket-widget]').length===1,
+          marketInEnding:ending.contains(market),
+          noTeamOverlap:document.getElementById('team').getBoundingClientRect().bottom<=info.getBoundingClientRect().top,
+          noHorizontalOverflow:document.documentElement.scrollWidth<=innerWidth,
+          usableLink:info.querySelector('a').getBoundingClientRect().height>=44};
+        const passed=Object.values(results).filter(v=>typeof v==='boolean').every(Boolean);
+        const output=document.getElementById('fixture-result'); output.textContent=JSON.stringify(results);output.dataset.passed=String(passed);
+      });<\/script></body></html>`;
+    lane.appendChild(frame); document.getElementById('lanes').appendChild(lane);
+  });
+</script>
+</html>
diff --git a/tools/tests/display_language_protocol.test.mjs b/tools/tests/display_language_protocol.test.mjs
new file mode 100644
index 0000000..569e2c4
--- /dev/null
+++ b/tools/tests/display_language_protocol.test.mjs
@@ -0,0 +1,166 @@
+import assert from "node:assert/strict";
+import { createRequire } from "node:module";
+import { readFileSync, existsSync } from "node:fs";
+import test from "node:test";
+const require = createRequire(import.meta.url);
+const runtime = require("../../contracts/display-language/v1/runtime.js");
+const registry = JSON.parse(readFileSync(new URL("../../contracts/identity-bridge/v1/locales.json", import.meta.url)));
+const tags = registry.locales.map(item => item.tag);
+const prefix = "calorieapp:display-language:";
+const key = "calorieapp.display-language.v1";
+function memory(initial = {}) {
+  const values = new Map(Object.entries(initial)), writes = [];
+  return {
+    values, writes, getItem: key => values.get(key) ?? null,
+    setItem(key, value) { writes.push({ key, value }); values.set(key, value); },
+    removeItem(key) { values.delete(key); }
+  };
+}
+function store(locale = "en", storage = memory()) {
+  return runtime.createStore({ locales: tags, fallback: "en", initialLocale: locale, storage, now: () => 10000000000 });
+}
+function endpoint() {
+  const listeners = new Map();
+  return {
+    addEventListener(type, fn) { if (!listeners.has(type)) listeners.set(type, new Set()); listeners.get(type).add(fn); },
+    removeEventListener(type, fn) { listeners.get(type)?.delete(fn); },
+    emit(type, event) { for (const fn of [...(listeners.get(type) ?? [])]) fn(event); },
+    count() { return [...listeners.values()].reduce((total, group) => total + group.size, 0); }
+  };
+}
+function pair({ delayedHost = false, hostLocale = "en", guestLocale = "en" } = {}) {
+  const queue = [], sent = [], hostWindow = endpoint(), guestWindow = endpoint();
+  const hostOrigin = "https://calorietoken.net", guestOrigin = "https://app.calorietoken.net";
+  const hostStorage = memory(), guestStorage = memory(), hostStore = store(hostLocale, hostStorage), guestStore = store(guestLocale, guestStorage);
+  const hostProxy = { postMessage(data, target) {
+    sent.push({ to: "host", data, target });
+    if (target === hostOrigin) queue.push(() => hostWindow.emit("message", { data, origin: guestOrigin, source: guestProxy }));
+  }};
+  const guestProxy = { postMessage(data, target) {
+    sent.push({ to: "guest", data, target });
+    if (target === guestOrigin) queue.push(() => guestWindow.emit("message", { data, origin: hostOrigin, source: hostProxy }));
+  }};
+  let frames = [{ window: guestProxy, origin: guestOrigin }], stopHost = () => {};
+  function startHost() {
+    stopHost = runtime.connectHost({ window: hostWindow, store: hostStore, frames: () => frames, epoch: "host-epoch-0000000001" });
+  }
+  if (!delayedHost) startHost();
+  const stopGuest = runtime.connectGuest({ window: guestWindow, parent: hostProxy, store: guestStore,
+    origins: [hostOrigin], channel: "guest-channel-00000001" });
+  return {
+    hostWindow, guestWindow, hostProxy, guestProxy, hostOrigin, guestOrigin,
+    hostStore, guestStore, hostStorage, guestStorage, sent, startHost,
+    removeFrame() { frames = []; },
+    stop() { stopHost(); stopGuest(); },
+    flush() { let count = 0; while (queue.length) { assert.ok(++count < 100, "No message loop"); queue.shift()(); } return count; }
+  };
+}
+test("the shared runtime and copy are identical in the deployable artifact", () => {
+  const root = new URL("../../", import.meta.url);
+  const canonical = readFileSync(new URL("contracts/display-language/v1/runtime.js", root), "utf8");
+  const frontend = new URL("frontend/lib/displayLanguageRuntime.js", root);
+  const target = existsSync(frontend) ? frontend : new URL("wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language-runtime.js", root);
+  assert.equal(readFileSync(target, "utf8"), canonical);
+  const copy = readFileSync(new URL("contracts/display-language/v1/copy.json", root), "utf8");
+  const copyTarget = existsSync(frontend) ? "frontend/config/display-language-copy.json" : "wordpress-plugins/calorieapp-identity-bridge/config/display-language.json";
+  assert.equal(readFileSync(new URL(copyTarget, root), "utf8"), copy);
+  assert.deepEqual(Object.keys(JSON.parse(copy)), tags);
+  for (const item of Object.values(JSON.parse(copy))) assert.ok(item.label.trim() && item.preview.trim());
+});
+test("all eleven choices work in both directions without echo loops", () => {
+  const p = pair();
+  p.flush();
+  for (const locale of tags) {
+    p.hostStore.select(locale); p.flush();
+    assert.equal(p.guestStore.get().locale, locale);
+    const other = tags[(tags.indexOf(locale) + 1) % tags.length];
+    p.guestStore.select(other); p.flush();
+    assert.equal(p.hostStore.get().locale, other);
+    assert.equal(p.guestStore.get().locale, other);
+    assert.equal(p.flush(), 0);
+  }
+  assert.ok(p.sent.every(item => item.target !== "*" && item.data.type.startsWith(prefix)));
+  p.stop();
+});
+test("a delayed host discovers the already loaded app without polling", () => {
+  const p = pair({ delayedHost: true, hostLocale: "nl", guestLocale: "fr" });
+  p.flush(); p.startHost(); p.flush();
+  assert.equal(p.guestStore.get().locale, "nl");
+  p.guestWindow.emit("pageshow", {}); p.hostWindow.emit("pageshow", {}); p.flush();
+  assert.equal(p.guestStore.get().locale, "nl");
+  assert.equal(p.hostStorage.writes.length, 0);
+  assert.equal(p.guestStorage.writes.length, 0);
+});
+test("an explicit choice while startup is pending is delivered after handshake", () => {
+  const p = pair({ delayedHost: true });
+  p.guestStore.select("ur"); p.flush();
+  p.startHost(); p.flush();
+  assert.equal(p.hostStore.get().locale, "ur");
+  assert.equal(p.guestStore.get().locale, "ur");
+});
+test("rapid guest choices and a concurrent host change converge to the last pending explicit choice", () => {
+  const p = pair(); p.flush();
+  p.guestStore.select("nl"); p.guestStore.select("ar"); p.guestStore.select("fr");
+  p.hostStore.select("es"); p.flush();
+  assert.equal(p.hostStore.get().locale, "fr");
+  assert.equal(p.guestStore.get().locale, "fr");
+});
+test("wrong origins, window sources, fields, tags and authentication messages cannot change display state", () => {
+  const p = pair(); p.flush();
+  const request = { type: prefix + "request", version: 1, channel: "guest-channel-00000001",
+    epoch: "host-epoch-0000000001", sequence: 1, revision: 0, locale: "nl" };
+  const event = { data: request, origin: p.guestOrigin, source: p.guestProxy };
+  for (const bad of [
+    { ...event, origin: "https://attacker.example" }, { ...event, source: {} },
+    { ...event, data: { ...request, locale: "en-US" } },
+    { ...event, data: { ...request, locale: "__proto__" } },
+    { ...event, data: { ...request, token: "never-allowed" } },
+    { ...event, data: { ...request, type: "calorieapp:login:complete" } },
+    { ...event, data: { ...request, version: 2 } },
+    { ...event, data: { ...request, sequence: Infinity } },
+    { ...event, data: { ...request, channel: "wrong-channel-00001" } },
+  ]) p.hostWindow.emit("message", bad);
+  p.flush(); assert.equal(p.hostStore.get().locale, "en");
+  const state = p.sent.find(item => item.data.type === prefix + "state").data;
+  for (const bad of [
+    { data: { ...state, locale: "ar" }, origin: p.hostOrigin, source: {} },
+    { data: { ...state, locale: "ar" }, origin: "https://attacker.example", source: p.hostProxy },
+    { data: { ...state, locale: "ar", wallet: "never-allowed" }, origin: p.hostOrigin, source: p.hostProxy },
+    { data: { ...state, locale: "ar", ack: 100 }, origin: p.hostOrigin, source: p.hostProxy },
+  ]) p.guestWindow.emit("message", bad);
+  assert.equal(p.guestStore.get().locale, "en");
+});
+test("stale requests, replayed sequences and removed frames cannot undo a newer selection", () => {
+  const p = pair(); p.flush();
+  p.hostStore.select("nl"); p.flush();
+  const data = { type: prefix + "request", version: 1, channel: "guest-channel-00000001",
+    epoch: "host-epoch-0000000001", sequence: 1, revision: 0, locale: "ar" };
+  p.hostWindow.emit("message", { data, origin: p.guestOrigin, source: p.guestProxy });
+  assert.equal(p.hostStore.get().locale, "nl");
+  p.hostWindow.emit("message", { data: { ...data, revision: 1 }, origin: p.guestOrigin, source: p.guestProxy });
+  assert.equal(p.hostStore.get().locale, "nl");
+  p.removeFrame();
+  p.hostWindow.emit("message", { data: { ...data, revision: 1, sequence: 2 }, origin: p.guestOrigin, source: p.guestProxy });
+  assert.equal(p.hostStore.get().locale, "nl");
+});
+test("the preference contains only locale/time, expires after 30 days and tolerates denied storage", () => {
+  const storage = memory();
+  const first = store("en", storage); first.select("nl");
+  assert.deepEqual([...storage.values.keys()], [key]);
+  assert.deepEqual(JSON.parse(storage.values.get(key)), { locale: "nl", savedAt: 10000000000 });
+  assert.equal(store("en", storage).get().locale, "nl");
+  const invalid = ["null", "not-json", JSON.stringify({locale:"fr",savedAt:1}),
+    JSON.stringify({locale:"fr",savedAt:10000000001}), JSON.stringify({locale:"fr",savedAt:10000000000,account:1})];
+  for (const value of invalid) assert.equal(store("en", memory({[key]:value})).get().locale, "en");
+  const denied = { getItem(){throw Error("denied");}, setItem(){throw Error("denied");}, removeItem(){throw Error("denied");} };
+  const ephemeral = store("en", denied);
+  ephemeral.select("ar"); assert.equal(ephemeral.get().locale, "ar");
+  assert.equal(ephemeral.select("<script>"), false);
+});
+test("disconnect removes every listener and stops further synchronization", () => {
+  const p = pair(); p.flush();
+  p.hostStore.select("nl"); p.flush();
+  p.stop(); assert.equal(p.hostWindow.count(),0); assert.equal(p.guestWindow.count(),0);
+  const before = p.sent.length; p.guestStore.select("ar"); p.hostStore.select("ur");
+  assert.equal(p.sent.length,before);
+});
diff --git a/tools/tests/test_build_wordpress_plugin_release.py b/tools/tests/test_build_wordpress_plugin_release.py
index 77361d4..197a44e 100644
--- a/tools/tests/test_build_wordpress_plugin_release.py
+++ b/tools/tests/test_build_wordpress_plugin_release.py
@@ -43,6 +43,16 @@ def test_build_is_reproducible_and_safe(self) -> None:
             self.assertIn(f"{release.PLUGIN_SLUG}/LICENSE", names)
             self.assertIn(f"{release.PLUGIN_SLUG}/THIRD_PARTY_NOTICES.md", names)
             self.assertIn(f"{release.PLUGIN_SLUG}/config/locales.json", names)
+            self.assertIn(f"{release.PLUGIN_SLUG}/assets/calorieapp-cms-language-preview.js", names)
+            self.assertIn(f"{release.PLUGIN_SLUG}/config/cms-faq-preview.json", names)
+            for source, packaged in (
+                ("cms-preview.js", "assets/calorieapp-cms-language-preview.js"),
+                ("cms-faq-preview.json", "config/cms-faq-preview.json"),
+            ):
+                canonical = release.ROOT / "contracts/display-language/v1" / source
+                self.assertEqual(canonical.read_bytes(), (release.PLUGIN_DIR / packaged).read_bytes())
+                with zipfile.ZipFile(first_archive) as bundle:
+                    self.assertEqual(bundle.read(f"{release.PLUGIN_SLUG}/{packaged}"), canonical.read_bytes())
 
     def test_release_allowlist_has_exact_code_provenance_inventory(self) -> None:
         files = release.release_paths()
@@ -80,6 +90,14 @@ def test_public_distribution_requires_cleared_code_provenance(self) -> None:
                     require_cleared_provenance=True,
                 )
 
+    def test_inventory_update_does_not_relabel_historical_source_review(self) -> None:
+        contract = release.code_provenance(release.release_paths())
+        self.assertEqual(contract["inventory_plugin_version"], release.plugin_version())
+        self.assertFalse(contract["inventory_update_is_source_clearance"])
+        self.assertEqual(contract["plugin_version_reviewed"], "0.3.2")
+        self.assertEqual(contract["review_date"], "2026-09-04")
+        self.assertFalse(contract["release_expansion_allowed"])
+
     def test_expected_version_must_match(self) -> None:
         with tempfile.TemporaryDirectory() as output:
             with self.assertRaisesRegex(ValueError, "plugin header declares"):
diff --git a/tools/tests/test_xrpl_dex_asset_registry.py b/tools/tests/test_xrpl_dex_asset_registry.py
index f687e8f..f54b2b6 100644
--- a/tools/tests/test_xrpl_dex_asset_registry.py
+++ b/tools/tests/test_xrpl_dex_asset_registry.py
@@ -1,57 +1,146 @@
+"""Offline identity checks, not quote, trade or legal-clearance tests."""
+
+import copy
+import hashlib
 import json
 from pathlib import Path
+import re
+import unittest
+
+
+ROOT = Path(__file__).resolve().parents[2]
+REGISTRY_PATH = ROOT / "contracts/ecosystem/xrpl-dex-assets.v1.json"
+EVIDENCE_PATH = ROOT / "contracts/ecosystem/evidence/xrpl-amm-identities-20260908.json"
+ALPHABET = "rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"
+
+
+def valid_classic_address(address: str) -> bool:
+    """Test-only XRPL Base58Check: type 0, 20-byte ID, four checksum bytes.
+
+    https://xrpl.org/docs/references/protocol/data-types/base58-encodings
+    """
+    if not isinstance(address, str) or not 25 <= len(address) <= 35:
+        return False
+    value = 0
+    for character in address:
+        if character not in ALPHABET:
+            return False
+        value = value * 58 + ALPHABET.index(character)
+    zeros = len(address) - len(address.lstrip(ALPHABET[0]))
+    decoded = b"\0" * zeros + value.to_bytes((value.bit_length() + 7) // 8, "big")
+    if len(decoded) != 25 or decoded[0] != 0:
+        return False
+    checksum = hashlib.sha256(hashlib.sha256(decoded[:-4]).digest()).digest()[:4]
+    return checksum == decoded[-4:]
+
+
+def identity(asset: dict) -> tuple[str, str | None]:
+    return asset["currency"], asset.get("issuer")
 
 
-REGISTRY_PATH = (
-    Path(__file__).resolve().parents[2]
-    / "contracts"
-    / "ecosystem"
-    / "xrpl-dex-assets.v1.json"
-)
+def validate_evidenced_pair(registry: dict, pair: dict, evidence: dict) -> None:
+    if not valid_classic_address(pair["amm_account"]):
+        raise ValueError("Invalid AMM address/checksum")
+    observation = evidence["observations"][pair["id"]]
+    if observation["validated"] is not True:
+        raise ValueError("Evidence is not validated")
+    if type(observation["ledger_index"]) is not int or observation["ledger_index"] <= 0:
+        raise ValueError("Missing ledger index")
+    if not re.fullmatch(r"[A-F0-9]{64}", observation["ledger_hash"]):
+        raise ValueError("Invalid ledger hash")
+    if pair["amm_account"] != observation["amm_account"]:
+        raise ValueError("Pool address differs from ledger evidence")
+    expected = {identity(registry["assets"][pair[key]]) for key in ("base", "quote")}
+    actual = {identity(asset) for asset in observation["assets"]}
+    if len(expected) != 2 or len(observation["assets"]) != 2 or actual != expected:
+        raise ValueError("Asset identities differ from ledger evidence")
 
 
-def load_registry() -> dict:
-    return json.loads(REGISTRY_PATH.read_text(encoding="utf-8"))
+class XRPLDexAssetRegistryTests(unittest.TestCase):
+    def setUp(self) -> None:
+        self.registry = json.loads(REGISTRY_PATH.read_text(encoding="utf-8"))
+        self.evidence = json.loads(EVIDENCE_PATH.read_text(encoding="utf-8"))
+        self.pairs = {pair["id"]: pair for pair in self.registry["pairs"]}
 
+    def test_registry_is_non_executing_and_pins_issued_assets(self) -> None:
+        self.assertEqual(self.registry["network"], "xrpl-mainnet")
+        self.assertEqual(self.registry["status"], "design-only")
+        self.assertEqual(self.registry["identity_evidence"], EVIDENCE_PATH.relative_to(ROOT).as_posix())
+        self.assertEqual(set(self.registry["assets"]), {"XRP", "CAL", "RLUSD"})
+        self.assertEqual(self.registry["assets"]["XRP"], {"kind": "native", "currency": "XRP"})
+        self.assertEqual(self.registry["assets"]["CAL"], {
+            "kind": "issued", "currency": "43616C6F72696500000000000000000000000000",
+            "display_code": "CAL", "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY",
+        })
+        self.assertEqual(self.registry["assets"]["RLUSD"], {
+            "kind": "issued", "currency": "524C555344000000000000000000000000000000",
+            "display_code": "RLUSD", "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
+        })
+        for asset in self.registry["assets"].values():
+            if asset["kind"] == "issued":
+                self.assertTrue(valid_classic_address(asset["issuer"]))
+                self.assertRegex(asset["currency"], r"^[0-9A-F]{40}$")
 
-def test_registry_is_non_executing_and_pins_issued_assets() -> None:
-    registry = load_registry()
+    def test_primary_pairs_support_buying_and_selling_cal(self) -> None:
+        self.assertEqual(set(self.pairs), {"CAL_XRP", "CAL_RLUSD", "XRP_RLUSD"})
+        self.assertEqual(len(self.registry["pairs"]), len(self.pairs), "No duplicate IDs")
+        for pair_id, quote in (("CAL_XRP", "XRP"), ("CAL_RLUSD", "RLUSD")):
+            pair = self.pairs[pair_id]
+            self.assertEqual((pair["base"], pair["quote"]), ("CAL", quote))
+            self.assertEqual(pair["directions"], ["buy_cal", "sell_cal"])
+            self.assertEqual(pair["verification"], "validated-ledger")
+            validate_evidenced_pair(self.registry, pair, self.evidence)
+        self.assertTrue(self.pairs["XRP_RLUSD"]["routing_only"])
+        self.assertEqual(self.pairs["XRP_RLUSD"]["directions"], ["both"])
+        self.assertEqual(self.pairs["XRP_RLUSD"]["verification"], "asset-identities-only")
+        self.assertNotIn("amm_account", self.pairs["XRP_RLUSD"])
 
-    assert registry["network"] == "xrpl-mainnet"
-    assert registry["status"] == "design-only"
-    assert registry["assets"]["CAL"] == {
-        "kind": "issued",
-        "currency": "43616C6F72696500000000000000000000000000",
-        "display_code": "CAL",
-        "issuer": "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY",
-    }
-    assert registry["assets"]["RLUSD"] == {
-        "kind": "issued",
-        "currency": "524C555344000000000000000000000000000000",
-        "display_code": "RLUSD",
-        "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
-    }
+    def test_evidence_is_dated_identification_without_personal_positions(self) -> None:
+        self.assertEqual(self.evidence["network"], self.registry["network"])
+        self.assertEqual(self.evidence["source"], "https://s1.ripple.com:51234/")
+        self.assertEqual(self.evidence["method"], "amm_info")
+        self.assertEqual(self.evidence["observed_on"], "2026-09-08")
+        self.assertEqual(set(self.evidence["observations"]), {"CAL_XRP", "CAL_RLUSD"})
+        for observation in self.evidence["observations"].values():
+            self.assertEqual(set(observation), {
+                "ledger_index", "ledger_hash", "validated", "amm_account", "assets",
+            })
+            for asset in observation["assets"]:
+                self.assertLessEqual(set(asset), {"currency", "issuer"})
 
+    def test_checksum_rejects_previous_typo_and_malformed_addresses(self) -> None:
+        self.assertTrue(valid_classic_address("rPN26geCWSD4xPu8LYBM8zqDrYSgNQGHeQ"))
+        for address in (None, "", "r", "r" * 35,
+                        "rPN26geWz6jzs4TwiwYDmpeF2maJFZBtr",
+                        "rPN26geCWSD4xPu8LYBM8zqDrYSgNQGHe0",
+                        "xPN26geCWSD4xPu8LYBM8zqDrYSgNQGHeQ"):
+            with self.subTest(address=address):
+                self.assertFalse(valid_classic_address(address))
 
-def test_primary_pairs_support_buying_and_selling_cal() -> None:
-    registry = load_registry()
-    pairs = {pair["id"]: pair for pair in registry["pairs"]}
+    def test_valid_but_wrong_pool_or_issuer_is_rejected(self) -> None:
+        pair = copy.deepcopy(self.pairs["CAL_RLUSD"])
+        pair["amm_account"] = self.pairs["CAL_XRP"]["amm_account"]
+        with self.assertRaisesRegex(ValueError, "Pool address differs"):
+            validate_evidenced_pair(self.registry, pair, self.evidence)
+        pair["amm_account"] = self.evidence["observations"]["CAL_RLUSD"]["amm_account"]
+        registry = copy.deepcopy(self.registry)
+        registry["assets"]["RLUSD"]["issuer"] = registry["assets"]["CAL"]["issuer"]
+        with self.assertRaisesRegex(ValueError, "Asset identities differ"):
+            validate_evidenced_pair(registry, pair, self.evidence)
 
-    assert set(pairs) == {"CAL_XRP", "CAL_RLUSD", "XRP_RLUSD"}
-    for pair_id in ("CAL_XRP", "CAL_RLUSD"):
-        assert pairs[pair_id]["directions"] == ["buy_cal", "sell_cal"]
-        assert pairs[pair_id]["verification"] == "validated-ledger"
-        assert pairs[pair_id]["amm_account"].startswith("r")
-    assert pairs["XRP_RLUSD"]["routing_only"] is True
+    def test_pending_ledger_or_missing_reference_is_rejected(self) -> None:
+        for field, value in (("validated", False), ("ledger_hash", ""), ("ledger_index", 0)):
+            evidence = copy.deepcopy(self.evidence)
+            evidence["observations"]["CAL_XRP"][field] = value
+            with self.subTest(field=field), self.assertRaises(ValueError):
+                validate_evidenced_pair(self.registry, self.pairs["CAL_XRP"], evidence)
 
+    def test_unverified_labels_are_not_selectable_pairs(self) -> None:
+        self.assertTrue(set(self.pairs).isdisjoint({"CAL_EUR", "CAL_USD", "BTC_CAL"}))
+        self.assertEqual(self.registry["excluded_labels_pending_issuer_review"], [
+            "CAL/EUR", "CAL/USD", "BTC/CAL",
+        ])
 
-def test_unverified_labels_are_not_selectable_pairs() -> None:
-    registry = load_registry()
-    selectable = {pair["id"] for pair in registry["pairs"]}
 
-    assert selectable.isdisjoint({"CAL_EUR", "CAL_USD", "BTC_CAL"})
-    assert registry["excluded_labels_pending_issuer_review"] == [
-        "CAL/EUR",
-        "CAL/USD",
-        "BTC/CAL",
-    ]
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tools/tests/wordpress_blog_x.test.mjs b/tools/tests/wordpress_blog_x.test.mjs
new file mode 100644
index 0000000..767feef
--- /dev/null
+++ b/tools/tests/wordpress_blog_x.test.mjs
@@ -0,0 +1,147 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+import { createFaqDom, Node, shape, fromShape, locales } from '../fixtures/step3/faq-language-model.mjs';
+
+const base = new URL('../../wordpress-plugins/calorieapp-identity-bridge/', import.meta.url);
+const source = readFileSync(new URL('assets/calorieapp-site-polish.js', base), 'utf8');
+const catalogue = JSON.parse(readFileSync(new URL('config/blog-x.json', base)));
+const panelId = 'amfuxnhsfmkknesyuldlbdorcvqsardaetus';
+
+// Bounded DOM behavior, not a browser/X/Complianz integration test. Public
+// shortcode ID and profile/placeholder metadata were observed on the blog.
+// Account, form and CMP states below are synthetic and do not contact a service.
+function harness({ page = 1207, path = '/index.php/blog/', search = '', timeline = 'anchor', legacy = true, cmp = true, initialLocale = 'en', mutate, configure } = {}) {
+  const h = createFaqDom();
+  h.body.setAttribute('class', 'brz page-id-' + page);
+  Object.defineProperty(h.body, 'className', { get() { return this.getAttribute('class'); } });
+  const make = (tag, attrs = {}, text) => {
+    const node = new Node(tag, attrs);
+    node.classList.add = value => node.setAttribute('class', ((node.getAttribute('class') || '') + ' ' + value).trim());
+    if (text !== undefined) node.appendChild(new Node('#text', {}, text));
+    return node;
+  };
+  const panel = make('div', { class: 'brz-wp-shortcode', 'data-brz-custom-id': panelId }); h.body.appendChild(panel);
+  const heading = make('div', { class:'brz-rich-text' }); h.body.appendChild(heading);
+  heading.appendChild(make('strong', {style:'color: rgb(80, 91, 169)'}, 'X.com/T'));
+  heading.appendChild(make('strong', {}, 'witter Posts'));
+  const slot = make('div'); panel.appendChild(slot);
+  let embed = null;
+  if (timeline === 'anchor') {
+    embed = make('a', { class:'cmplz-placeholder-element twitter-timeline', 'data-service':'twitter', 'data-category':'marketing', href:'https://twitter.com/CalorieToken?ref_src=twsrc%5Etfw' }, 'Tweets by CalorieToken'); slot.appendChild(embed);
+  } else if (timeline === 'iframe') {
+    embed = make('iframe', { class:'twitter-timeline', src:'https://syndication.twitter.com/srv/timeline-profile/screen-name/CalorieToken' }); slot.appendChild(embed);
+  } else if (timeline === 'placeholder') {
+    embed = make('div', { class:'cmplz-blocked-content-container', 'data-service':'twitter', 'data-category':'marketing' }); slot.appendChild(embed);
+    embed.appendChild(make('button', { type:'button', class:'cmplz-blocked-content-notice' }, 'Native CMP choice'));
+  }
+  const old = legacy ? make('a', { class:'calorieapp-x-fallback', href:'https://x.com/CalorieToken', rel:'noopener noreferrer' }, 'View CalorieToken on X') : null;
+  if (old) panel.appendChild(old);
+  const events = new Map(), windowEvents = new Map(), consent = { marketing:false, twitter:false };
+  const config = { publicPage:true, locales, initialLocale, copy:structuredClone(catalogue.translations) }; configure?.(config);
+  const document = h.document; document.readyState = 'complete';
+  document.createElement = tag => { assert.ok(!['script','iframe'].includes(tag), 'No provider loader'); return make(tag); };
+  document.createTextNode = text => new Node('#text', {}, text);
+  document.getElementById = id => document.querySelector('[id="' + id + '"]');
+  document.addEventListener = (type, callback) => { if (!events.has(type)) events.set(type, []); events.get(type).push(callback); };
+  const query = document.querySelector;
+  document.querySelector = selector => selector === '#cmplz-cookiebanner-container .cmplz-cookiebanner' ? (cmp ? h.consent : null) : query(selector);
+  const window = {
+    location:{ origin:'https://calorietoken.net', pathname:path, search, href:'https://calorietoken.net'+path+search },
+    calorieappSitePolish:{ trustlineReady:false, blog:config },
+    cmplz_has_service_consent: cmp ? () => consent.twitter : undefined,
+    addEventListener(type, callback) { if (!windowEvents.has(type)) windowEvents.set(type, []); windowEvents.get(type).push(callback); },
+    fetch() { throw new Error('No provider request'); },
+    setTimeout() { throw new Error('No timer'); }, setInterval() { throw new Error('No polling'); },
+  };
+  Object.assign(h, { make, panel, slot, embed, old, heading, consentState:consent, window, document }); mutate?.(h);
+  h.headingBefore = shape(heading);
+  h.panelBefore = shape(panel); h.slotBefore = shape(slot); h.controlsBefore = shape(h.controls);
+  const context = vm.createContext({window,document,URL});
+  h.run = () => vm.runInContext(source, context);
+  h.run();
+  h.event = (type) => [...(events.get(type) || []), ...(windowEvents.get(type) || [])].forEach(callback => callback({detail:{category:'marketing',value:'allow'}}));
+  h.help = () => panel.querySelector('.calorieapp-x-help');
+  return h;
+}
+
+test('one usable helper remains when the timeline, anchor or provider is absent or replaced by CMP', () => {
+  for (const timeline of ['anchor','iframe','placeholder','absent']) {
+    const h = harness({timeline});
+    assert.ok(h.help());
+    assert.equal(h.help().querySelector('.calorieapp-x-fallback'), h.old, 'Reuse the known fallback node');
+    assert.equal(h.old.getAttribute('href'), 'https://x.com/CalorieToken');
+    assert.deepEqual(shape(h.slot), h.slotBefore, 'Do not alter CMP/X content');
+    h.event('load'); h.event('pageshow'); h.event('cmplz_revoke');
+    const api = h.window.CalorieAppBlogX; h.run(); assert.equal(h.window.CalorieAppBlogX, api);
+    assert.equal(h.panel.querySelectorAll('.calorieapp-x-help').length, 1);
+    assert.equal(h.panel.querySelectorAll('.calorieapp-x-fallback').length, 1);
+    assert.deepEqual(shape(h.slot), h.slotBefore);
+  }
+  assert.ok(harness({timeline:'absent',legacy:false}).help().querySelector('.calorieapp-x-fallback'));
+});
+
+test('all eleven helper locales retain destination, source widgets, private controls and consent', () => {
+  assert.equal(catalogue.release_approved, false); assert.equal(catalogue.review_status, 'prepared-unreviewed');
+  assert.deepEqual(Object.keys(catalogue.translations), locales.map(item => item.tag));
+  const h = harness(); const submit = h.submit.onclick, session = h.account.session;
+  for (const locale of locales) {
+    h.window.CalorieAppBlogX.setLocale(locale.tag);
+    assert.equal(h.help().getAttribute('lang'), locale.tag); assert.equal(h.help().getAttribute('dir'), locale.direction);
+    assert.equal(h.help().querySelector('.calorieapp-x-description').textContent, catalogue.translations[locale.tag].description);
+    assert.equal(h.old.textContent, catalogue.translations[locale.tag].action);
+    assert.equal(h.old.getAttribute('href'), 'https://x.com/CalorieToken');
+    assert.deepEqual(shape(h.slot), h.slotBefore); assert.deepEqual(shape(h.controls), h.controlsBefore);
+    assert.deepEqual(shape(h.heading), h.headingBefore);
+    assert.equal(h.amount.value, '1.25'); assert.equal(h.quantity.value, '2');
+    assert.equal(h.submit.onclick, submit); assert.equal(h.account.session, session);
+    assert.deepEqual(h.consentState, { marketing:false, twitter:false }); assert.equal(h.submissions, 0);
+  }
+});
+
+test('native cookie settings is a non-submitting button; missing CMP leaves the direct link usable', () => {
+  const h = harness(); const button = h.help().querySelector('.calorieapp-x-settings');
+  assert.equal(button.getAttribute('type'), 'button'); assert.ok(button.classList.contains('cmplz-manage-consent'));
+  assert.equal(button.hidden, false);
+  for (const allowed of [true,false,true,false]) {
+    h.consentState.twitter = allowed;
+    h.event('cmplz_status_change_service'); h.event('cmplz_status_change'); h.event('cmplz_revoke');
+    assert.equal(h.consentState.twitter, allowed); assert.equal(h.consentState.marketing, false);
+    assert.deepEqual(shape(h.slot), h.slotBefore); assert.equal(button.hidden, false);
+  }
+  const missing = harness({cmp:false}); assert.equal(missing.help().querySelector('.calorieapp-x-settings').hidden, true);
+  assert.ok(missing.help().querySelector('.calorieapp-x-fallback'));
+  missing.window.cmplz_has_service_consent = () => false;
+  missing.document.querySelector = ((original) => selector => selector === '#cmplz-cookiebanner-container .cmplz-cookiebanner' ? missing.consent : original(selector))(missing.document.querySelector);
+  missing.event('cmplz_cookie_warning_loaded');
+  assert.equal(missing.help().querySelector('.calorieapp-x-settings').hidden, false);
+});
+
+test('other pages, editor/preview, duplicate slots and private/form ancestors remain unchanged', () => {
+  const cases = [{page:1090}, {path:'/index.php/faq/'}, {search:'?preview=true'}, {search:'?brizy-edit'},
+    {configure:config => { config.publicPage = false; }}, {configure:config => { config.publicPage = 'true'; }},
+    {mutate:h => h.body.setAttribute('class','brz brz-ed page-id-1207')},
+    {mutate:h => h.body.appendChild(fromShape(shape(h.panel)))},
+    {mutate:h => h.form.appendChild(h.panel)},
+    {mutate:h => h.account.appendChild(h.panel)},
+    {mutate:h => h.panel.setAttribute('contenteditable','true')},
+    {mutate:h => h.panel.appendChild(h.make('input',{name:'private-value'}))},
+    {mutate:h => h.old.childNodes[0].data = 'Custom source link label'},
+    {mutate:h => h.old.setAttribute('href','https://example.org/custom')},
+    {mutate:h => h.embed.setAttribute('href','https://x.com/AnotherAccount')},
+    {mutate:h => h.embed.setAttribute('href','https://twitter.com.evil.example/CalorieToken')},
+  ];
+  for (const options of cases) {
+    const h = harness(options); h.event('load'); h.event('cmplz_revoke');
+    assert.equal(h.help(), null); assert.deepEqual(shape(h.panel), h.panelBefore);
+  }
+});
+
+test('invalid/incomplete copy falls back as one English unit and literal text never becomes HTML', () => {
+  const h = harness({initialLocale:'nl',configure:config => { delete config.copy.nl.settings; }});
+  assert.equal(h.help().getAttribute('lang'),'en'); assert.equal(h.old.textContent,catalogue.translations.en.action);
+  h.window.CalorieAppBlogX.setLocale('unknown'); assert.equal(h.help().getAttribute('lang'),'en');
+  const literal = harness({initialLocale:'nl',configure:config => { config.copy.nl.description='<img src=x onerror=alert(1)>'; }});
+  assert.equal(literal.help().querySelector('img'),null); assert.equal(literal.help().querySelector('.calorieapp-x-description').textContent,'<img src=x onerror=alert(1)>');
+});
diff --git a/tools/tests/wordpress_buy_guide.test.mjs b/tools/tests/wordpress_buy_guide.test.mjs
new file mode 100644
index 0000000..28ef320
--- /dev/null
+++ b/tools/tests/wordpress_buy_guide.test.mjs
@@ -0,0 +1,75 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import test from 'node:test';
+import vm from 'node:vm';
+import { createFaqDom, Node, shape, fromShape, locales } from '../fixtures/step3/faq-language-model.mjs';
+const base=new URL('../../wordpress-plugins/calorieapp-identity-bridge/',import.meta.url);
+const source=readFileSync(new URL('assets/calorieapp-buy-guide-language.js',base),'utf8');
+const polish=readFileSync(new URL('assets/calorieapp-site-polish.js',base),'utf8');
+const catalogue=JSON.parse(readFileSync(new URL('config/how-to-buy.json',base)));
+// The existing full-script polish tests exercise legacy replacement. Parse its
+// actual generated fragments independently for the text-only adapter tests.
+const array=polish.slice(polish.indexOf('    guide.innerHTML = [')).match(/guide\.innerHTML = (\[[\s\S]*?\])\.join\(""\)/)[1];
+const html=JSON.parse(array).join('').replace('__TRUSTLINE__','https://calorietoken.net/index.php/trustline/');
+const tree=JSON.parse(execFileSync('python3',['-c',`
+from html.parser import HTMLParser
+import json,sys
+class Parser(HTMLParser):
+ def __init__(self): super().__init__(); self.root={'tag':'article','attributes':[['class','cal-buy-guide']],'children':[]}; self.stack=[self.root]
+ def handle_starttag(self,t,a):
+  n={'tag':t,'attributes':[[k,v or ''] for k,v in a],'children':[]};self.stack[-1]['children'].append(n);self.stack.append(n)
+ def handle_endtag(self,t):
+  assert self.stack[-1]['tag']==t;self.stack.pop()
+ def handle_data(self,s): self.stack[-1]['children'].append(s)
+p=Parser();p.feed(sys.stdin.read());assert len(p.stack)==1;print(json.dumps(p.root))
+`],{input:html,encoding:'utf8'}));
+function harness({page=4205,url='https://calorietoken.net/index.php/how-to-buy-calorie/',configure,mutate}={}){
+ const h=createFaqDom();h.body.setAttribute('class','brz page-id-'+page);
+ const root=fromShape(tree);root.dataset={calorieappBuyGuide:'1'};h.body.appendChild(root);
+ const config={publicPage:true,initialLocale:'en',locales,copy:structuredClone(catalogue.translations)};configure?.(config);
+ const events=new Map(),on=(type,fn)=>{if(!events.has(type))events.set(type,[]);events.get(type).push(fn);};
+ const window={location:{href:url},calorieappSitePolish:{buyGuide:config},addEventListener:on,dispatchEvent:e=>(events.get(e.type)||[]).forEach(fn=>fn(e)),fetch(){throw Error('No requests');},localStorage:{setItem(){throw Error('No second preference');}}};
+ h.document.readyState='complete';h.document.addEventListener=on;
+ Object.assign(h,{root,config,window});mutate?.(h);
+ h.before={root:shape(root),controls:shape(h.controls)};
+ const context=vm.createContext({window,document:h.document,URL,Event});h.run=()=>vm.runInContext(source,context);h.run();
+ h.field=key=>root.querySelector('[data-cal-buy-copy="'+key+'"]');h.fire=type=>window.dispatchEvent(new Event(type));return h;
+}
+
+test('all eleven guide translations retain identity, links, nodes and unrelated account/form state',()=>{
+ assert.equal(catalogue.release_approved,false);assert.equal(catalogue.review_status,'prepared-unreviewed');
+ assert.deepEqual(Object.keys(catalogue.translations),locales.map(x=>x.tag));
+ const h=harness(),links=h.root.querySelectorAll('a'),codes=h.root.querySelectorAll('code'),beforeLinks=links.map(x=>x.getAttribute('href')),beforeCodes=codes.map(shape),title=h.field('title');
+ for(const l of locales){h.window.CalorieAppBuyGuide.setLocale(l.tag);
+  for(const [key,value] of Object.entries(catalogue.translations[l.tag]))assert.equal(h.field(key).textContent,value);
+  assert.equal(h.root.getAttribute('lang'),l.tag);assert.equal(h.root.getAttribute('dir'),l.direction);assert.equal(h.root.getAttribute('aria-label'),catalogue.translations[l.tag].title);
+  assert.equal(h.field('title'),title);assert.deepEqual(h.root.querySelectorAll('a'),links);assert.deepEqual(links.map(x=>x.getAttribute('href')),beforeLinks);assert.deepEqual(codes.map(shape),beforeCodes);assert.deepEqual(shape(h.controls),h.before.controls);
+ }
+ const api=h.window.CalorieAppBuyGuide;h.run();h.fire('load');h.fire('pageshow');assert.equal(h.window.CalorieAppBuyGuide,api);
+});
+
+test('unknown and incomplete locales fall back wholly; translated strings remain literal text',()=>{
+ const h=harness();h.window.CalorieAppBuyGuide.setLocale('xx');assert.equal(h.root.getAttribute('lang'),'en');
+ delete h.config.copy.nl.riskText;h.window.CalorieAppBuyGuide.setLocale('nl');assert.equal(h.root.getAttribute('lang'),'en');
+ h.config.copy.ar.walletText='<img src=x onerror=alert(1)>';h.window.CalorieAppBuyGuide.setLocale('ar');
+ assert.equal(h.field('walletText').textContent,h.config.copy.ar.walletText);assert.equal(h.root.querySelector('img'),null);
+});
+
+test('unknown routes, unpublished markers, changed CMS copy/identity/links or private controls are retained',()=>{
+ const cases=[{page:1090},{url:'https://example.org/index.php/how-to-buy-calorie/'},{url:'https://calorietoken.net/index.php/how-to-buy-calorie/?preview=true'},
+ {configure:c=>c.publicPage='true'}, {mutate:h=>delete h.root.dataset.calorieappBuyGuide},
+ {mutate:h=>h.body.setAttribute('class','brz brz-ed page-id-4205')},{mutate:h=>h.form.appendChild(h.root)},
+ {mutate:h=>h.root.appendChild(new Node('input'))},{mutate:h=>h.root.setAttribute('contenteditable','true')},
+ {mutate:h=>h.root.querySelector('[data-cal-buy-copy="intro"]').childNodes[0].data='A new approved introduction'},
+ {mutate:h=>h.root.querySelector('a').setAttribute('href','https://example.org')},
+ {mutate:h=>h.root.querySelector('code').childNodes[0].data='Different asset'},
+ {mutate:h=>h.root.querySelector('[data-cal-buy-copy="riskText"]').remove()},
+ {mutate:h=>h.body.appendChild(fromShape(tree))}];
+ for(const c of cases){const h=harness(c);h.window.CalorieAppBuyGuide?.setLocale('nl');assert.deepEqual(shape(h.root),h.before.root);assert.deepEqual(shape(h.controls),h.before.controls);}
+});
+
+test('late generated guide follows selected locale; changed replacement is not overwritten',()=>{
+ const h=harness({mutate:h=>h.root.remove()});h.window.CalorieAppBuyGuide.setLocale('ur');h.body.appendChild(h.root);h.fire('load');assert.equal(h.root.getAttribute('lang'),'ur');
+ h.field('title').childNodes[0].data='Edited after load';const before=shape(h.root);h.window.CalorieAppBuyGuide.setLocale('nl');assert.deepEqual(shape(h.root),before);
+});
diff --git a/tools/tests/wordpress_cms_language_preview.test.mjs b/tools/tests/wordpress_cms_language_preview.test.mjs
new file mode 100644
index 0000000..8d4c67b
--- /dev/null
+++ b/tools/tests/wordpress_cms_language_preview.test.mjs
@@ -0,0 +1,184 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { createRequire } from 'node:module';
+import test from 'node:test';
+import { catalogue, locales, fixture, Node, fromShape, shape, all, createFaqDom } from '../fixtures/step3/faq-language-model.mjs';
+
+const require = createRequire(import.meta.url);
+const preview = require('../../contracts/display-language/v1/cms-preview.js');
+const runtime = require('../../contracts/display-language/v1/runtime.js');
+function harness({ enabled = true, configure, ...options } = {}) {
+  const h = createFaqDom(options);
+  h.config = structuredClone(catalogue); configure?.(h.config);
+  h.store = runtime.createStore({ locales: locales.map(item => item.tag), fallback: 'en', initialLocale: 'en' });
+  h.choose = locale => h.store.select(locale);
+  h.preview = preview.connect({ enabled, document: h.document, location: h.location, catalogue: h.config, store: h.store });
+  return h;
+}
+
+test('catalogue pins two observed paragraphs and all eleven translations to one unpublished copy version', () => {
+  const root = fromShape(fixture[0]);
+  assert.equal(catalogue.wordpress_id, 6855);
+  assert.equal(catalogue.release_approved, false);
+  assert.equal(catalogue.source_copy_review, 'prepared-unreviewed');
+  for (const slot of catalogue.slots) {
+    const node = root.querySelector(`p[data-uniq-id="${slot.element_id}"]`);
+    assert.deepEqual(shape(node), slot.source);
+    assert.equal(createHash('sha256').update(JSON.stringify(slot.source)).digest('hex'), slot.source_sha256);
+  }
+  assert.deepEqual(Object.keys(catalogue.translations).sort(), locales.map(item => item.tag).sort());
+  for (const locale of locales) {
+    const copy = catalogue.translations[locale.tag];
+    assert.equal(copy.copy_version, catalogue.copy_version);
+    assert.equal(copy.review_status, 'prepared-unreviewed');
+    assert.equal(copy.direction, locale.direction);
+    assert.equal(copy.slots.question.length, 12);
+    assert.equal(copy.slots.answer.length, 1);
+    assert.ok(copy.slots.question.join('').includes('CalorieToken'));
+    assert.ok(copy.slots.answer[0].includes('CalorieApp'));
+    assert.ok(copy.slots.answer[0].includes('XRP Ledger'));
+  }
+  assert.match(catalogue.translations.en.slots.answer[0], /currently offers food lookup and a personal food log/);
+  assert.match(catalogue.translations.en.slots.answer[0], /planned extensions/);
+});
+
+test('all eleven store choices preserve original element/text identities, styling and native control state', () => {
+  const h = harness();
+  const click = h.submit.onclick, post = h.form.onsubmit, session = h.account.session;
+  for (const locale of locales) {
+    h.choose(locale.tag);
+    assert.deepEqual(h.preview.get(), { status: 'preview', locale: locale.tag });
+    assert.deepEqual(h.roots.flatMap(all), h.originalNodes);
+    h.roots.forEach((root, index) => {
+      const slot = catalogue.slots[index];
+      assert.equal(root.textContent, catalogue.translations[locale.tag].slots[slot.key].join(''));
+      assert.equal(root.getAttribute('lang'), locale.tag); assert.equal(root.getAttribute('dir'), locale.direction);
+      for (const [key, value] of slot.source.attributes) assert.equal(root.getAttribute(key), value);
+      root.childNodes.forEach((child, childIndex) => assert.deepEqual(shape(child).attributes, slot.source.children[childIndex].attributes));
+    });
+    assert.deepEqual(shape(h.controls), h.controlsBefore);
+    assert.equal(h.amount.value, '1.25'); assert.equal(h.quantity.value, '2');
+    assert.equal(h.submit.onclick, click); assert.equal(h.form.onsubmit, post);
+    assert.equal(h.account.session, session); assert.equal(session.locale, 'en');
+    assert.equal(h.consent.checked, false); assert.equal(h.submissions, 0);
+    assert.equal(h.location.href, catalogue.source_url); assert.equal(h.page.getAttribute('lang'), 'en-US');
+  }
+  h.preview.disconnect();
+  assert.deepEqual(shape(h.body), h.before);
+  h.choose('ar'); assert.deepEqual(shape(h.body), h.before);
+  h.preview.disconnect(); assert.deepEqual(shape(h.body), h.before);
+});
+
+test('disabled preview, other routes, unknown query context and editor make no changes', () => {
+  const cases = [
+    { enabled: false }, { url: 'https://example.com/index.php/faq/' },
+    { url: 'https://calorietoken.net/index.php/terms-conditions/' },
+    { url: 'https://calorietoken.net/index.php/faq/?preview=true' },
+    { url: 'https://calorietoken.net/index.php/faq/?locale=nl' },
+    { mutate: h => h.body.setAttribute('class', 'brz page-id-1121') },
+    { mutate: h => h.body.setAttribute('class', 'brz brz-ed page-id-6855') },
+  ];
+  for (const options of cases) {
+    const h = harness(options); h.choose('nl'); h.preview.refresh();
+    assert.deepEqual(shape(h.body), h.before); assert.equal(h.submissions, 0);
+    assert.notEqual(h.preview.get().status, 'preview');
+  }
+  assert.equal(harness({ url: 'https://www.calorietoken.net/index.php/faq/?ui_lang=nl' }).preview.get().status, 'preview');
+});
+
+test('edited source text, formatting, duplicate IDs and protected ancestors reject the entire pair', () => {
+  const changes = [
+    h => { h.roots[1].childNodes[0].childNodes[0].data = 'Changed CMS wording'; },
+    h => h.roots[0].childNodes[0].setAttribute('style', 'color: red'),
+    h => h.roots[0].appendChild(new Node('a', { href: '/private' })),
+    h => h.roots[0].parentElement.appendChild(fromShape(catalogue.slots[0].source)),
+    h => h.form.appendChild(h.wrappers[0]),
+    h => h.account.appendChild(h.wrappers[0]),
+    h => h.consent.appendChild(h.wrappers[0]),
+    h => h.wrappers[0].setAttribute('contenteditable', 'false'),
+  ];
+  for (const mutate of changes) {
+    const h = harness({ mutate }); h.choose('nl');
+    assert.equal(h.preview.get().status, 'source-pending');
+    assert.deepEqual(shape(h.body), h.before);
+  }
+});
+
+test('missing, stale, incomplete or misdirected translation restores source without partial application', () => {
+  for (const corrupt of [
+    config => { delete config.translations.nl; },
+    config => { config.translations.nl.copy_version = 'older-copy'; },
+    config => { config.translations.nl.slots.answer = []; },
+    config => { config.translations.nl.slots = null; },
+    config => { config.translations.nl.direction = 'rtl'; },
+    config => { config.translations.nl.slots.question[2] = {}; },
+  ]) {
+    const h = harness({ configure: corrupt });
+    assert.equal(h.preview.get().status, 'preview'); h.choose('nl');
+    assert.equal(h.preview.get().status, 'translation-pending');
+    assert.deepEqual(shape(h.body), h.before);
+    h.choose('ar'); assert.equal(h.preview.get().locale, 'ar');
+  }
+});
+
+test('an external edit after translation is preserved, and untouched companion text restores to source', () => {
+  const h = harness(); h.choose('nl');
+  h.roots[1].childNodes[0].childNodes[0].data = 'New CMS edit: keep this';
+  const edited = shape(h.roots[1]);
+  h.choose('ar');
+  assert.equal(h.preview.get().status, 'source-changed');
+  assert.deepEqual(shape(h.roots[1]), edited);
+  assert.deepEqual(shape(h.roots[0]), catalogue.slots[0].source);
+  h.choose('fr'); h.preview.refresh(); h.preview.disconnect();
+  assert.deepEqual(shape(h.roots[1]), edited);
+});
+
+test('replaced, duplicated or form-moved nodes stop the adapter without editing the replacement', () => {
+  for (const mode of ['replace', 'duplicate', 'form']) {
+    const h = harness(); h.choose('nl');
+    const parent = h.roots[0].parentElement;
+    let replacement;
+    if (mode === 'form') replacement = h.form.appendChild(h.wrappers[0]);
+    else {
+      replacement = parent.appendChild(fromShape(shape(h.roots[0])));
+      if (mode === 'replace') h.roots[0].remove();
+    }
+    const before = shape(replacement);
+    h.choose('ar'); assert.equal(h.preview.get().status, 'source-changed');
+    assert.deepEqual(shape(replacement), before);
+  }
+});
+
+test('translation characters are written literally to retained text nodes, never interpreted as HTML', () => {
+  const literal = '<img src=x onerror=alert(1)> {locale} & CalorieApp';
+  const h = harness({ configure: config => { config.translations.nl.slots.answer = [literal]; } });
+  h.choose('nl'); assert.equal(h.roots[1].textContent, literal);
+  assert.equal(h.roots[1].querySelectorAll('img').length, 0);
+  assert.deepEqual(h.roots.flatMap(all), h.originalNodes);
+});
+
+test('late known content can be explicitly refreshed, with no polling or source replacement', () => {
+  let detached;
+  const h = harness({ mutate: h => { detached = h.wrappers[0]; detached.remove(); } });
+  assert.equal(h.preview.get().status, 'source-pending');
+  h.choose('ar'); h.body.appendChild(detached); h.preview.refresh();
+  assert.deepEqual(h.preview.get(), { status: 'preview', locale: 'ar' });
+  h.location.href = 'https://calorietoken.net/index.php/checkout/'; h.preview.refresh();
+  assert.equal(h.preview.get().status, 'outside-scope');
+  h.roots.forEach((node, index) => assert.deepEqual(shape(node), catalogue.slots[index].source));
+});
+
+test('invalid catalogue is inert and cannot be enabled by mutating options after connection', () => {
+  for (const configure of [
+    config => { config.mode = 'production'; }, config => { config.slots[0].element_id = undefined; },
+    config => { config.slots[1].element_id = config.slots[0].element_id; },
+    config => { config.slots[0].source.tag = 'form'; }, config => { config.copy_version = ''; },
+  ]) {
+    const h = harness({ configure }); assert.equal(h.preview.get().status, 'invalid-catalogue');
+    h.choose('nl'); h.preview.refresh(); assert.deepEqual(shape(h.body), h.before);
+  }
+  const h = harness({ enabled: false });
+  const options = { enabled: false, document: h.document, location: h.location, catalogue: null, store: h.store };
+  const inert = preview.connect(options); options.enabled = true;
+  assert.equal(inert.refresh().status, 'disabled'); assert.deepEqual(shape(h.body), h.before);
+});
diff --git a/tools/tests/wordpress_display_language.test.mjs b/tools/tests/wordpress_display_language.test.mjs
new file mode 100644
index 0000000..df9e66a
--- /dev/null
+++ b/tools/tests/wordpress_display_language.test.mjs
@@ -0,0 +1,229 @@
+import assert from "node:assert/strict";
+import { createRequire } from "node:module";
+import { readFileSync } from "node:fs";
+import test from "node:test";
+import vm from "node:vm";
+import { catalogue, createFaqDom, shape, all } from "../fixtures/step3/faq-language-model.mjs";
+const require = createRequire(import.meta.url);
+const runtime = require("../../contracts/display-language/v1/runtime.js");
+const cmsRuntime = require("../../wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-cms-language-preview.js");
+const base = new URL("../../wordpress-plugins/calorieapp-identity-bridge/", import.meta.url);
+const script = readFileSync(new URL("assets/calorieapp-display-language.js", base), "utf8");
+const locales = JSON.parse(readFileSync(new URL("config/locales.json", base))).locales;
+const copy = JSON.parse(readFileSync(new URL("config/display-language.json", base)));
+const information = JSON.parse(readFileSync(new URL("config/app-information.json", base)));
+function harness({ editor = false, panelPresent = true, protectedCard = false, cms = null, cmsConfig = cms ? catalogue : null, cmsAvailable = true, blog, richlist, navigation, trustline, tokenomics, buyGuide } = {}) {
+  const listeners = new Map(), writes = [], fields = {};
+  const stores = [], connections = [];
+  for (const key of ["label", "note", "description", "action", "current"]) fields[key] = { textContent: "" };
+  const select = { value: "en", addEventListener(type, fn) { listeners.set("select:" + type, fn); } };
+  const panel = { hidden: true, dataset: {}, isConnected: true, parentElement: null,
+    querySelector(query) { return query === "select" ? select : query.includes("-label") ? fields.label : fields.note; },
+    closest() { return this.parentElement === card ? card : null; },
+  };
+  const account = { sameLoginButton: {}, sessionLocale: "en", consent: { marketing: false } };
+  const card = { account, closest() { return protectedCard ? {} : null; },
+    appendChild(node) { node.parentElement = this; },
+  };
+  const info = { querySelector(query) {
+    return query === "div > p" ? fields.description : query.endsWith("-link") ? fields.action : fields.current;
+  }};
+  const document = { readyState: "complete", body: cms?.body || {}, querySelector(query) {
+    if (query === "[data-calorieapp-display-language]") return panelPresent ? panel : null;
+    if (query === ".brz-ed") return editor ? {} : null;
+    if (query === "[data-calorieapp-app-info]") return info;
+    return cms?.document.querySelector(query) || null;
+  }, querySelectorAll(query) { return query === ".brz .xl-card" ? [card] : cms?.document.querySelectorAll(query) || []; } };
+  const window = {
+    CalorieAppBlogX: blog,
+    CalorieAppRichlist: richlist,
+    CalorieAppPageNavigation: navigation,
+    CalorieAppTrustline: trustline,
+    CalorieAppTokenomics: tokenomics,
+    CalorieAppBuyGuide: buyGuide,
+    CalorieAppDisplayLanguage: { ...runtime, createStore(options) {
+      const store = runtime.createStore(options); stores.push(store); return store;
+    } },
+    CalorieAppCmsLanguagePreview: cmsAvailable ? { connect(options) {
+      const api = cmsRuntime.connect(options); connections.push({ api, store: options.store }); return api;
+    } } : undefined,
+    calorieappDisplayLanguageConfig: { locales, initialLocale: "en", copy, information, ...(cmsConfig ? { cmsPreview: cmsConfig } : {}) },
+    location: cms?.location,
+    localStorage: { getItem() { return null; }, setItem(key, value) { writes.push({key,value}); }, removeItem() {} },
+    addEventListener(type, fn) { listeners.set(type, fn); },
+  };
+  const context = vm.createContext({ window, document });
+  const run = () => vm.runInContext(script, context);
+  run();
+  return { window, panel, select, info, fields, account, card, writes, run, stores, connections,
+    fire(type, event = {}) { listeners.get(type)?.(event); },
+    choose(locale) { select.value = locale; listeners.get("select:change")?.(); } };
+}
+test("website control changes only the translated information and preserves account references", () => {
+  const h = harness(), account = h.account, login = account.sameLoginButton;
+  assert.equal(h.panel.parentElement, h.card);
+  for (const locale of locales) {
+    h.choose(locale.tag);
+    assert.equal(h.panel.lang, locale.tag);
+    assert.equal(h.panel.dir, locale.direction);
+    assert.equal(h.info.lang, locale.tag);
+    assert.equal(h.fields.description.textContent, information[locale.tag].description);
+    assert.equal(h.fields.action.textContent, information[locale.tag].action);
+    assert.equal(h.fields.label.textContent, copy[locale.tag].label);
+    assert.equal(h.card.account, account);
+    assert.equal(h.account.sameLoginButton, login);
+    assert.equal(h.account.sessionLocale, "en");
+    assert.equal(h.account.consent.marketing, false);
+  }
+  assert.ok(h.writes.every(item => item.key === "calorieapp.display-language.v1"));
+  const count = h.writes.length; h.run(); assert.equal(h.writes.length, count);
+});
+test("editor, absent preview markup and form-contained account controls remain untouched", () => {
+  for (const options of [{editor:true}, {panelPresent:false}]) {
+    const h = harness(options); assert.equal(h.panel.hidden,true); assert.equal(h.panel.parentElement,null);
+    h.choose("nl"); assert.equal(h.writes.length,0);
+  }
+  const h = harness({protectedCard:true});
+  assert.equal(h.panel.parentElement,null);
+  h.choose("nl"); assert.equal(h.info.lang,"nl");
+});
+
+test("FAQ and existing site UI share exactly one store through all eleven choices", () => {
+  const cms = createFaqDom(), h = harness({ cms });
+  const session = cms.account.session, click = cms.submit.onclick, post = cms.form.onsubmit;
+  assert.equal(h.stores.length, 1); assert.equal(h.connections.length, 1);
+  assert.equal(h.connections[0].store, h.stores[0]);
+  for (const locale of locales) {
+    h.choose(locale.tag);
+    assert.equal(h.info.lang, locale.tag);
+    assert.equal(cms.roots[1].textContent, catalogue.translations[locale.tag].slots.answer[0]);
+    assert.equal(cms.roots[1].getAttribute("dir"), locale.direction);
+    assert.deepEqual(cms.roots.flatMap(all), cms.originalNodes);
+    assert.deepEqual(shape(cms.controls), cms.controlsBefore);
+    assert.equal(cms.amount.value, "1.25"); assert.equal(cms.quantity.value, "2");
+    assert.equal(cms.account.session, session); assert.equal(session.locale, "en");
+    assert.equal(cms.submit.onclick, click); assert.equal(cms.form.onsubmit, post);
+    assert.equal(cms.consent.checked, false); assert.equal(cms.submissions, 0);
+  }
+  // The existing host protocol also applies remote choices through this store.
+  h.stores[0].apply("nl", true);
+  assert.equal(h.select.value, "nl"); assert.equal(cms.roots[1].getAttribute("lang"), "nl");
+  h.run(); h.fire("load"); h.fire("pageshow", { persisted: true });
+  assert.equal(h.stores.length, 1); assert.equal(h.connections.length, 1);
+  assert.ok(h.writes.every(item => item.key === "calorieapp.display-language.v1"));
+});
+
+test("missing assets/configuration and wrong routes keep FAQ source while the ordinary control works", () => {
+  for (const options of [{cmsConfig:null}, {cmsAvailable:false}, {cmsConfig:{}}, {url:"https://calorietoken.net/index.php/contact/"}]) {
+    const cms = createFaqDom(options), h = harness({ cms, ...options });
+    h.choose("ar"); h.fire("load"); h.fire("pageshow");
+    assert.deepEqual(shape(cms.body), cms.before);
+    assert.equal(h.info.lang, "ar"); assert.equal(h.panel.hidden, false);
+    assert.equal(h.stores.length, 1);
+  }
+  for (const options of [{editor:true}, {panelPresent:false}]) {
+    const cms = createFaqDom(), h = harness({ cms, ...options });
+    h.choose("nl"); h.fire("pageshow");
+    assert.equal(h.connections.length, 0); assert.deepEqual(shape(cms.body), cms.before);
+  }
+});
+
+test("load/pageshow discovers late FAQ content without creating another connection or preference write", () => {
+  for (const event of ["load", "pageshow"]) {
+    let detached;
+    const cms = createFaqDom({ mutate: h => { detached = h.wrappers[0]; detached.remove(); } });
+    const h = harness({ cms }); h.choose("ar");
+    assert.equal(h.connections[0].api.get().status, "source-pending");
+    const writes = h.writes.length; cms.body.appendChild(detached); h.fire(event, { persisted: true });
+    assert.equal(cms.roots[1].getAttribute("lang"), "ar");
+    assert.equal(h.writes.length, writes); assert.equal(h.connections.length, 1);
+  }
+});
+
+test("bfcache retains the FAQ subscription; final unload restores owned source and disconnects it", () => {
+  const cms = createFaqDom(), h = harness({ cms }); h.choose("nl");
+  h.fire("pagehide", { persisted: true }); h.fire("pageshow", { persisted: true }); h.choose("ur");
+  assert.equal(cms.roots[1].getAttribute("lang"), "ur");
+  h.fire("pagehide", { persisted: false });
+  assert.deepEqual(shape(cms.body), cms.before);
+  assert.equal(h.connections[0].api.get().status, "disconnected");
+  h.choose("fr"); h.fire("pageshow");
+  assert.deepEqual(shape(cms.body), cms.before);
+  assert.equal(h.info.lang, "fr");
+});
+
+test("source conflicts remain stopped across load/pageshow while the existing selector stays usable", () => {
+  const cms = createFaqDom(), h = harness({ cms }); h.choose("nl");
+  cms.roots[1].childNodes[0].childNodes[0].data = "Preserve this editor change";
+  const changed = shape(cms.roots[1]);
+  h.fire("load"); h.fire("pageshow"); h.choose("ar");
+  assert.deepEqual(shape(cms.roots[1]), changed);
+  assert.deepEqual(shape(cms.roots[0]), catalogue.slots[0].source);
+  assert.equal(h.connections[0].api.get().status, "source-changed");
+  assert.equal(h.info.lang, "ar"); assert.equal(h.connections.length, 1);
+});
+
+test("blog helper receives existing store choices, including when its script becomes ready later", () => {
+  const selected = [], h = harness({blog:{setLocale:locale => selected.push(locale)}});
+  for (const locale of locales) { h.choose(locale.tag); assert.equal(selected.at(-1), locale.tag); }
+  const later = harness(); later.choose("ur");
+  const writes = later.writes.length;
+  later.window.CalorieAppBlogX = {setLocale:locale => selected.push(locale)};
+  later.fire("load"); assert.equal(selected.at(-1), "ur");
+  later.fire("pageshow"); assert.equal(selected.at(-1), "ur");
+  assert.equal(later.writes.length, writes); assert.equal(later.stores.length, 1);
+});
+
+test("Richlist and navigation share local/embedded choices without a second store or account changes", () => {
+  const ranks = [], navigation = [], h = harness({richlist:{setLocale:x=>ranks.push(x)},navigation:{setLocale:x=>navigation.push(x)}});
+  for (const locale of locales) { h.choose(locale.tag); assert.equal(ranks.at(-1),locale.tag); assert.equal(navigation.at(-1),locale.tag); }
+  h.stores[0].apply("ar",true); assert.equal(ranks.at(-1),"ar"); assert.equal(navigation.at(-1),"ar");
+  assert.equal(h.stores.length,1); assert.equal(h.account.sessionLocale,"en"); assert.equal(h.account.consent.marketing,false);
+});
+test("late helper readiness adopts the stored choice without accepting event data or writing another preference", () => {
+  const ranks = [], navigation = [], h = harness(); h.choose("ur"); const writes = h.writes.length;
+  h.window.CalorieAppRichlist = {setLocale:x=>ranks.push(x)};
+  h.window.CalorieAppPageNavigation = {setLocale:x=>navigation.push(x)};
+  h.fire("calorieapp:page-tools-ready",{detail:{locale:"nl",authenticated:true}});
+  assert.equal(navigation.at(-1),"ur");
+  h.fire("load"); h.fire("pageshow"); assert.equal(ranks.at(-1),"ur"); assert.equal(navigation.at(-1),"ur");
+  assert.equal(h.writes.length,writes); assert.equal(h.stores.length,1); assert.equal(h.account.sessionLocale,"en");
+});
+
+
+test("Trustline helper uses the one display store and ignores untrusted readiness event data", () => {
+  const selected = [], h = harness({trustline:{setLocale:locale => selected.push(locale)}});
+  for (const locale of locales) { h.choose(locale.tag); assert.equal(selected.at(-1), locale.tag); }
+  h.stores[0].apply("ar", true); assert.equal(selected.at(-1), "ar");
+  const late = harness(); late.choose("ur"); const writes = late.writes.length;
+  late.window.CalorieAppTrustline = {setLocale:locale => selected.push(locale)};
+  late.fire("calorieapp:trustline-ready", {detail:{locale:"nl",authenticated:true}});
+  assert.equal(selected.at(-1), "ur"); late.fire("load"); late.fire("pageshow");
+  assert.equal(selected.at(-1), "ur"); assert.equal(late.writes.length, writes);
+  assert.equal(late.stores.length, 1); assert.equal(late.account.sessionLocale, "en");
+  assert.equal(late.account.consent.marketing, false);
+});
+
+
+test("Tokenomics uses the same preference store, including late readiness", () => {
+  const selected = [], h = harness({tokenomics:{setLocale:locale => selected.push(locale)}});
+  for (const locale of locales) { h.choose(locale.tag); assert.equal(selected.at(-1), locale.tag); }
+  const late = harness(); late.choose("ar"); const writes = late.writes.length;
+  late.window.CalorieAppTokenomics = {setLocale:locale => selected.push(locale)};
+  late.fire("calorieapp:tokenomics-ready", {detail:{locale:"nl",authenticated:true}});
+  assert.equal(selected.at(-1), "ar"); late.fire("pageshow"); assert.equal(selected.at(-1), "ar");
+  assert.equal(late.writes.length, writes); assert.equal(late.stores.length, 1);
+  assert.equal(late.account.sessionLocale, "en"); assert.equal(late.account.consent.marketing, false);
+});
+
+
+test("How to Buy uses the one display store, including late guide readiness", () => {
+  const selected = [], h = harness({buyGuide:{setLocale:locale => selected.push(locale)}});
+  for (const locale of locales) { h.choose(locale.tag); assert.equal(selected.at(-1), locale.tag); }
+  const late = harness(); late.choose("ur"); const writes = late.writes.length;
+  late.window.CalorieAppBuyGuide = {setLocale:locale => selected.push(locale)};
+  late.fire("calorieapp:buy-guide-ready", {detail:{locale:"nl",authenticated:true}});
+  assert.equal(selected.at(-1), "ur"); late.fire("pageshow"); assert.equal(selected.at(-1), "ur");
+  assert.equal(late.writes.length, writes); assert.equal(late.stores.length, 1);
+  assert.equal(late.account.sessionLocale, "en"); assert.equal(late.account.consent.marketing, false);
+});
diff --git a/tools/tests/wordpress_display_language.test.php b/tools/tests/wordpress_display_language.test.php
new file mode 100644
index 0000000..1923d23
--- /dev/null
+++ b/tools/tests/wordpress_display_language.test.php
@@ -0,0 +1,119 @@
+<?php
+// Executable PHP coverage; run once normally and once with the preview argument.
+define('ABSPATH', __DIR__);
+define('CALORIEAPP_IDENTITY_BRIDGE_FILE', __DIR__ . '/plugin.php');
+define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', 'test');
+if (($argv[1] ?? '') === 'preview') define('CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW', true);
+$lane = 'public';
+$page_id = 1121;
+$preview = false;
+$post_status = 'publish';
+$post_password = '';
+$_SERVER['REQUEST_METHOD'] = 'GET';
+$_GET = [];
+$scripts = [];
+$inline = [];
+function is_admin() { global $lane; return $lane === 'admin'; }
+function is_feed() { global $lane; return $lane === 'feed'; }
+function is_embed() { global $lane; return $lane === 'embed'; }
+function wp_doing_ajax() { global $lane; return $lane === 'ajax'; }
+function is_page($id) { global $page_id; return $page_id === $id; }
+function is_preview() { global $preview; return $preview; }
+function get_post_status($id) { global $post_status; check($id === 6855, 'Only the known FAQ is inspected'); return $post_status; }
+function get_post_field($field, $id, $context) {
+    global $post_password;
+    check($field === 'post_password' && $id === 6855 && $context === 'raw', 'Inspect only public-page password protection');
+    return $post_password;
+}
+function plugin_dir_url($file) { return 'https://calorietoken.net/plugin/'; }
+function get_locale() { return 'nl_NL'; }
+function wp_enqueue_style(...$args) { global $scripts; $scripts[] = $args; }
+function wp_enqueue_script(...$args) { global $scripts; $scripts[] = $args; }
+function wp_add_inline_script(...$args) { global $inline; $inline[] = $args; }
+function wp_json_encode($data, $flags = 0) { return json_encode($data, $flags); }
+function esc_attr($value) { return htmlspecialchars((string) $value, ENT_QUOTES); }
+function esc_html($value) { return htmlspecialchars((string) $value, ENT_QUOTES); }
+function check($condition, $message) { if (!$condition) throw new RuntimeException($message); }
+$includes = dirname(__DIR__, 2) . '/wordpress-plugins/calorieapp-identity-bridge/includes/';
+require $includes . 'class-calorieapp-identity-bridge-locale-registry.php';
+require $includes . 'class-calorieapp-identity-bridge-display-language.php';
+$view = new \CalorieApp\IdentityBridge\DisplayLanguage();
+$view->enqueue();
+ob_start(); $view->render(); $view->render(); $html = ob_get_clean();
+if (!defined('CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW')) {
+    check($html === '' && $scripts === [] && $inline === [], 'Default behavior must add no assets, control or storage config');
+    $page_id = 6855;
+    $other = new \CalorieApp\IdentityBridge\DisplayLanguage();
+    $other->enqueue(); ob_start(); $other->render(); $html = ob_get_clean();
+    check($html === '' && $scripts === [] && $inline === [], 'FAQ also stays completely off by default');
+} else {
+    check(substr_count($html, '<select ') === 1 && substr_count($html, '<option ') === 11, 'Exactly one selector and eleven options');
+    check(strpos($html, 'data-calorieapp-display-language hidden') !== false, 'Preview starts hidden until initialized');
+    check(count($scripts) === 3 && count($inline) === 1, 'One isolated display controller and stylesheet');
+    check(strpos($inline[0][1], '"initialLocale":"nl"') !== false, 'Use public page locale');
+    check(strpos($inline[0][1], '"cmsPreview"') === false, 'Other pages have no FAQ catalogue');
+
+    $cases = [
+        ['public FAQ', [], 'GET', 6855, false, 'publish', '', true],
+        ['public language hint', ['ui_lang' => 'ar'], 'GET', 6855, false, 'publish', '', true],
+        ['other page', [], 'GET', 1121, false, 'publish', '', false],
+        ['public Richlist', [], 'GET', 3243, false, 'publish', '', false],
+        ['public Trustline', [], 'GET', 1205, false, 'publish', '', false],
+        ['POST', [], 'POST', 6855, false, 'publish', '', false],
+        ['HEAD', [], 'HEAD', 6855, false, 'publish', '', false],
+        ['unknown method', [], '', 6855, false, 'publish', '', false],
+        ['WP preview', [], 'GET', 6855, true, 'publish', '', false],
+        ['draft', [], 'GET', 6855, false, 'draft', '', false],
+        ['private', [], 'GET', 6855, false, 'private', '', false],
+        ['protected page', [], 'GET', 6855, false, 'publish', 'synthetic-password', false],
+        ['editor query', ['brizy-edit' => ''], 'GET', 6855, false, 'publish', '', false],
+        ['preview query', ['preview' => 'true'], 'GET', 6855, false, 'publish', '', false],
+        ['identity query', ['locale' => 'nl'], 'GET', 6855, false, 'publish', '', false],
+        ['unknown query', ['utm_source' => 'test'], 'GET', 6855, false, 'publish', '', false],
+        ['array hint', ['ui_lang' => ['nl']], 'GET', 6855, false, 'publish', '', false],
+    ];
+    foreach ($cases as [$name, $query, $method, $page_id, $preview, $post_status, $post_password, $expected]) {
+        $_GET = $query; $_SERVER['REQUEST_METHOD'] = $method;
+        $scripts = []; $inline = [];
+        (new \CalorieApp\IdentityBridge\DisplayLanguage())->enqueue();
+        check(count($inline) === 1 && count($scripts) === ($expected ? 4 : 3), $name . ': retain the existing control, restrict added asset');
+        $prefix = 'window.calorieappDisplayLanguageConfig = ';
+        $configuration = json_decode(substr($inline[0][1], strlen($prefix), -1), true);
+        check(is_array($configuration), $name . ': readable public configuration');
+        check(count($configuration['navigation']['translations']) === 11, 'Eleven public navigation locales');
+        check($configuration['navigation']['release_approved'] === false, 'Navigation copy remains unapproved');
+        check(isset($configuration['richlist']) === ($page_id === 3243), 'Richlist copy is restricted to its page');
+        if ($page_id === 3243) {
+            check(count($configuration['richlist']['translations']) === 11, 'Eleven public Richlist locales');
+            check($configuration['richlist']['release_approved'] === false, 'Richlist copy remains unapproved');
+        }
+        check(isset($configuration['trustline']) === ($page_id === 1205), 'Trustline copy is restricted to its page');
+        if ($page_id === 1205) {
+            check(count($configuration['trustline']['translations']) === 11, 'Eleven public Trustline helper locales');
+            check($configuration['trustline']['release_approved'] === false, 'Trustline translations remain unapproved');
+        }
+        check(isset($configuration['cmsPreview']) === $expected, $name . ': restrict sample data');
+        $controller = $scripts[count($scripts) - 1];
+        $dependencies = ['calorieapp-display-language-runtime'];
+        if ($expected) {
+            $dependencies[] = 'calorieapp-cms-language-preview';
+            check($scripts[2][0] === 'calorieapp-cms-language-preview' && $scripts[2][4] === true, 'FAQ adapter loads in the footer');
+            check($configuration['cmsPreview']['wordpress_id'] === 6855, 'Catalogue matches the allowed page');
+            check($configuration['cmsPreview']['release_approved'] === false, 'Wiring never advances copy approval');
+        }
+        check($controller[0] === 'calorieapp-display-language' && $controller[2] === $dependencies, 'Dependencies precede the shared controller');
+    }
+    $page_id = 6855; $preview = false; $post_status = 'publish'; $post_password = '';
+    $_GET = []; $_SERVER['REQUEST_METHOD'] = 'GET';
+    foreach (['admin', 'feed', 'embed', 'ajax'] as $lane) {
+        $scripts = []; $inline = [];
+        $other = new \CalorieApp\IdentityBridge\DisplayLanguage();
+        $other->enqueue(); ob_start(); $other->render(); $html = ob_get_clean();
+        check($html === '' && $scripts === [] && $inline === [], 'Non-page responses remain unchanged');
+    }
+    $lane = 'public'; define('REST_REQUEST', true);
+    $other = new \CalorieApp\IdentityBridge\DisplayLanguage();
+    $other->enqueue(); ob_start(); $other->render(); $html = ob_get_clean();
+    check($html === '' && $scripts === [] && $inline === [], 'REST response remains unchanged');
+}
+echo "Display language PHP checks passed\n";
diff --git a/tools/tests/wordpress_page_ending.test.mjs b/tools/tests/wordpress_page_ending.test.mjs
index d2135f0..546da2d 100644
--- a/tools/tests/wordpress_page_ending.test.mjs
+++ b/tools/tests/wordpress_page_ending.test.mjs
@@ -36,7 +36,7 @@ const good = () => ({ success: true, data: {
   price_usd: 0.00000007, price_xrp: 0.00000005, market_cap_usd: 4000, rank: 300, holders: 14000,
 } });
 async function settle() { for (let i = 0; i < 10; i++) await Promise.resolve(); }
-function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, empty = false, endpoint = true, legacy = false, mixedHost = false, mixedColumn = false } = {}) {
+function run({ response = { ok: true, json: async () => good() }, fetchError, stalled = false, reduced = false, rtl = false, empty = false, endpoint = true, legacy = false, mixedHost = false, mixedColumn = false } = {}) {
   const widget = element();
   const widgets = [widget];
   const oldWidget = widget;
@@ -108,6 +108,7 @@ function run({ response = { ok: true, json: async () => good() }, fetchError, st
     setTimeout(fn) { timers.set(1, fn); return 1; },
     clearTimeout(id) { timers.delete(id); },
     matchMedia() { return { matches: reduced }; },
+    getComputedStyle() { return { direction: rtl ? 'rtl' : 'ltr' }; },
     addEventListener(name, fn) { events.set(name, fn); },
     requestAnimationFrame(fn) { frames.push(fn); },
     MutationObserver: class {
@@ -169,6 +170,9 @@ test('social arrows move one item and respect reduced motion', () => {
   assert.equal(h.track.moves[0].left, -200);
   assert.equal(h.track.moves[1].left, 200);
   assert.equal(h.track.moves[1].behavior, 'auto');
+  const arabic = run({ rtl: true });
+  arabic.buttons[1].listeners.click();
+  assert.equal(arabic.track.moves[0].left, -200, 'Next follows the RTL item order.');
 });
 test('pages without market cards do not request market data', () => {
   const h = run({ empty: true });
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index 608b710..ed5da78 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -8,14 +8,27 @@
 $admin = false;
 $feed = false;
 $embed = false;
+$ajax = false;
 $singular = true;
+$locale = 'en_US';
+$preview = false;
+$post_status = 'publish';
+$post_password = '';
+$_SERVER['REQUEST_METHOD'] = 'GET';
+$_GET = [];
 $actions = $styles = $scripts = $config = $cache = $requests = $routes = [];
+$options = $option_reads = [];
 function add_action($name, $callback, $priority = 10): void { $GLOBALS['actions'][$name][$priority][] = $callback; }
 function is_admin(): bool { return $GLOBALS['admin']; }
 function is_feed(): bool { return $GLOBALS['feed']; }
 function is_embed(): bool { return $GLOBALS['embed']; }
+function wp_doing_ajax(): bool { return $GLOBALS['ajax']; }
 function is_singular(): bool { return $GLOBALS['singular']; }
 function is_page($slug): bool { return $GLOBALS['page'] === $slug; }
+function is_preview(): bool { return $GLOBALS['preview']; }
+function get_post_status($id) { return $GLOBALS['post_status']; }
+function get_post_field($field, $id, $context) { return $GLOBALS['post_password']; }
+function get_locale(): string { return $GLOBALS['locale']; }
 function plugin_dir_url($file): string { return home_url('/wp-content/plugins/calorieapp-identity-bridge/'); }
 function home_url($path): string { return 'https://calorietoken.net' . $path; }
 function content_url($path): string { return home_url('/wp-content' . $path); }
@@ -24,7 +37,21 @@ function wp_date($format): string { return '2031'; }
 function wp_enqueue_style($handle, ...$args): void { $GLOBALS['styles'][$handle] = $args; }
 function wp_enqueue_script($handle, ...$args): void { $GLOBALS['scripts'][$handle] = $args; }
 function wp_script_is($handle, $state): bool { return isset($GLOBALS['scripts'][$handle]); }
-function wp_localize_script($handle, $name, $data): void { $GLOBALS['config'][$handle] = $data; }
+function wp_localize_script($handle, $name, $data): void {
+    // Match WordPress's scalar-to-text behavior instead of hiding type bugs.
+    foreach ($data as $key => $value) {
+        if (is_scalar($value)) $data[$key] = html_entity_decode((string) $value, ENT_QUOTES, 'UTF-8');
+    }
+    $GLOBALS['config'][$handle] = $data;
+}
+function wp_json_encode($value, $flags = 0): string { return json_encode($value, $flags | JSON_THROW_ON_ERROR); }
+function wp_add_inline_script($handle, $data, $position = 'after'): bool {
+    check($position === 'before', 'The boolean configuration must precede the presentation script.');
+    check(preg_match('/^window\.calorieappSitePolish = (.+);$/D', $data, $matches) === 1, 'Only the expected data assignment is allowed.');
+    $GLOBALS['config'][$handle] = json_decode($matches[1], true, 512, JSON_THROW_ON_ERROR);
+    return true;
+}
+function get_option($name) { $GLOBALS['option_reads'][] = $name; return $GLOBALS['options'][$name] ?? false; }
 function esc_attr($value): string { return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8'); }
 function esc_html($value): string { return esc_attr($value); }
 function esc_url($value): string { return esc_attr($value); }
@@ -50,6 +77,7 @@ function check($condition, $message): void { if (!$condition) throw new RuntimeE
 function render($object): string { ob_start(); $object->render(); return (string) ob_get_clean(); }
 $dir = dirname(__DIR__, 2) . '/wordpress-plugins/calorieapp-identity-bridge/includes/';
 require $dir . 'class-calorieapp-identity-bridge-market-widget.php';
+require $dir . 'class-calorieapp-identity-bridge-locale-registry.php';
 require $dir . 'class-calorieapp-identity-bridge-page-ending.php';
 use CalorieApp\IdentityBridge\PageEnding;
 use CalorieApp\IdentityBridge\MarketWidget;
@@ -59,6 +87,18 @@ function render($object): string { ob_start(); $object->render(); return (string
 check(isset($actions['wp_footer'][5]), 'Render the ending before footer scripts.');
 $ending->enqueue_assets();
 check(count($styles) === 2 && count($scripts) === 2, 'The independent page-ending and presentation assets are queued.');
+check(!isset($config['calorieapp-identity-bridge-site-polish']['blog']), 'Other pages do not receive blog copy');
+$page = 1207;
+(new PageEnding())->enqueue_assets();
+$blog = $config['calorieapp-identity-bridge-site-polish']['blog'];
+check($blog['publicPage'] === true && count($blog['copy']) === 11 && $blog['initialLocale'] === 'en', 'Public blog has eleven-locale static helper copy');
+check(count($styles) === 2 && count($scripts) === 2, 'Blog adds no provider script or stylesheet');
+foreach ([['POST', false, 'publish', ''], ['GET', true, 'publish', ''], ['GET', false, 'private', ''], ['GET', false, 'draft', ''], ['GET', false, 'publish', 'synthetic']] as [$method, $preview, $post_status, $post_password]) {
+    $_SERVER['REQUEST_METHOD'] = $method;
+    (new PageEnding())->enqueue_assets();
+    check(!isset($config['calorieapp-identity-bridge-site-polish']['blog']), 'Nonpublic/preview/POST contexts do not receive blog helper readiness');
+}
+$page = 'calorieapp'; $preview = false; $post_status = 'publish'; $post_password = ''; $_SERVER['REQUEST_METHOD'] = 'GET';
 check($scripts['calorieapp-identity-bridge-page-ending'][1] === [], 'Do not load the authentication controller as a dependency.');
 $html = render($ending);
 check(substr_count($html, '<footer ') === 1, 'The app page receives one website footer.');
@@ -75,16 +115,42 @@ function render($object): string { ob_start(); $object->render(); return (string
 }
 check(str_contains($html, MarketWidget::TOKEN_PAGE), 'The server-rendered card must contain its fallback destination.');
 check(!str_contains($html, '<iframe') && !str_contains($html, 'logout'), 'The ending must not add another app frame or session control.');
+check(substr_count($html, 'data-calorieapp-app-info') === 1, 'The app also receives one informational component.');
+check(!str_contains($html, 'class="calorieapp-app-info-link"'), 'Do not reload the already-open app with a duplicate CTA.');
 check(render($ending) === '', 'Repeated footer hooks must not duplicate the ending.');
-foreach (['home', 'faq', 'privacy-policy'] as $page) {
+foreach (['home', 'faq', 'privacy-policy', 'delivery', 'cafes', 'takeaway', 'restaurants', 'groceries', 'wholesalers', 'contact', 'donate', 'cart', 'checkout', 'article', 'draft-preview'] as $page) {
     $styles = $scripts = [];
     $other = new PageEnding();
     $other->enqueue_assets();
     $other_html = render($other);
     check(substr_count($other_html, 'data-calorieapp-sitewide-market') === 1, 'Other singular pages receive one deduplicated market candidate.');
-    check(!str_contains($other_html, '<footer '), 'Existing Brizy footers remain untouched.');
+    check(substr_count($other_html, 'data-calorieapp-app-info') === 1, 'Every public page type receives one app information block.');
+    check(str_contains($other_html, '<footer class="calorieapp-shared-footer" hidden>'), 'Keep the original footer until the guarded browser replacement succeeds.');
+    check(preg_match('/<noscript>(.*?)<\/noscript>/s', $other_html, $fallback) === 1, 'Pages with a hidden footer candidate need a no-JavaScript legal fallback.');
+    foreach (['privacy-policy', 'terms-conditions'] as $slug) {
+        check(str_contains($fallback[1], home_url('/index.php/' . $slug . '/')), 'Legal destinations remain accessible when JavaScript is disabled.');
+    }
+    check(str_contains($other_html, 'class="calorieapp-app-info-link" href="' . home_url('/index.php/calorieapp/') . '"'), 'The widget uses the verified site app route.');
     check(count($styles) === 2 && count($scripts) === 2, 'Shared market and presentation assets load on other public pages too.');
 }
+$singular = false;
+$archive_html = render(new PageEnding());
+check(str_contains($archive_html, 'data-calorieapp-app-info') && str_contains($archive_html, '<footer '), 'Archive/search pages also receive the shared information and footer candidate.');
+check(!str_contains($archive_html, 'data-calorieapp-xpmarket-widget'), 'Do not add market traffic to archive/search pages.');
+$singular = true;
+$copy_path = dirname($dir) . '/config/app-information.json';
+$widget_copy = json_decode(file_get_contents($copy_path), true, 512, JSON_THROW_ON_ERROR);
+foreach (CalorieApp\IdentityBridge\LocaleRegistry::tags() as $locale) {
+    $localized = render(new PageEnding());
+    check(str_contains($localized, 'lang="' . $locale . '"'), 'Use the public page locale for the informational component.');
+    check(str_contains($localized, esc_html($widget_copy[$locale]['description'])), 'Render the available localized copy.');
+    $direction = in_array($locale, ['ar', 'ur'], true) ? 'rtl' : 'ltr';
+    check(str_contains($localized, 'dir="' . $direction . '"'), 'Preserve the locale direction.');
+}
+$locale = 'de_DE';
+check(str_contains(render(new PageEnding()), 'lang="en"'), 'Unsupported page languages use the explicit English fallback.');
+$locale = 'en_US';
+check($requests === [], 'Rendering app information never calls a provider or the app.');
 $shortcuts = new PageEnding();
 ob_start();
 $shortcuts->render_shortcuts();
@@ -96,7 +162,64 @@ function render($object): string { ob_start(); $object->render(); return (string
 $shortcuts->render_shortcuts();
 check(ob_get_clean() === '', 'Repeated hooks cannot duplicate fallback navigation.');
 $page = 'calorieapp';
-foreach (['admin', 'feed', 'embed'] as $flag) {
+check($config['calorieapp-identity-bridge-site-polish'] === ['trustlineReady' => false], 'No TrustSet CTA outside the trustline page.');
+$page = 'trustline';
+$ending->enqueue_assets();
+check($config['calorieapp-identity-bridge-site-polish']['trustlineReady'] === false, 'Do not advertise an absent XUMM handler.');
+if (!class_exists('Xummlogin_XUMM', false)) {
+    class Xummlogin_XUMM {
+        public function xummlogin_prepare_trustline(): void { throw new RuntimeException('Presentation must not create payloads.'); }
+    }
+}
+$valid_options = [
+    'xummlogin_trustline_issuer' => 'rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY',
+    'xummlogin_trustline_currency' => '43616C6F72696500000000000000000000000000',
+    'xummlogin_trustline_limit' => '1000000000',
+];
+$options = $valid_options;
+$ending->enqueue_assets();
+check($config['calorieapp-identity-bridge-site-polish'] === ['trustlineReady' => true, 'trustlinePage' => true], 'Exact CAL configuration enables boolean-only readiness and public-page markers.');
+$options['xummlogin_trustline_currency'] = 'Calorie';
+$ending->enqueue_assets();
+check($config['calorieapp-identity-bridge-site-polish']['trustlineReady'] === true, 'The installed plugin also accepts the full textual currency code.');
+foreach ([
+    ['xummlogin_trustline_issuer', 'different-token'],
+    ['xummlogin_trustline_currency', 'CAL'],
+    ['xummlogin_trustline_limit', ''],
+    ['xummlogin_trustline_limit', '0'],
+    ['xummlogin_trustline_limit', '-1'],
+    ['xummlogin_trustline_limit', '1e309'],
+    ['xummlogin_trustline_limit', []],
+] as [$key, $value]) {
+    $options = $valid_options;
+    $options[$key] = $value;
+    $ending->enqueue_assets();
+    check($config['calorieapp-identity-bridge-site-polish']['trustlineReady'] === false, 'Reject an unverified CAL configuration: ' . $key);
+}
+$options = $valid_options;
+foreach ([
+    ['public', [], 'GET', false, 'publish', '', true],
+    ['language hint', ['ui_lang' => 'nl'], 'GET', false, 'publish', '', true],
+    ['POST', [], 'POST', false, 'publish', '', false],
+    ['HEAD', [], 'HEAD', false, 'publish', '', false],
+    ['preview', [], 'GET', true, 'publish', '', false],
+    ['draft', [], 'GET', false, 'draft', '', false],
+    ['private', [], 'GET', false, 'private', '', false],
+    ['password', [], 'GET', false, 'publish', 'synthetic-password', false],
+    ['query', ['preview' => 'true'], 'GET', false, 'publish', '', false],
+    ['array hint', ['ui_lang' => ['nl']], 'GET', false, 'publish', '', false],
+] as [$name, $query, $method, $preview, $post_status, $post_password, $expected]) {
+    $_GET = $query; $_SERVER['REQUEST_METHOD'] = $method;
+    $ending->enqueue_assets();
+    $presentation = $config['calorieapp-identity-bridge-site-polish'];
+    check(($presentation['trustlinePage'] ?? false) === $expected, 'Restrict the public display marker: ' . $name);
+    check($presentation['trustlineReady'] === true, 'Display checks do not change native handler readiness: ' . $name);
+}
+$_GET = []; $_SERVER['REQUEST_METHOD'] = 'GET';
+$preview = false; $post_status = 'publish'; $post_password = '';
+check(array_diff($option_reads, array_keys($valid_options)) === [], 'Presentation must not read credentials or unrelated options.');
+$page = 'calorieapp';
+foreach (['admin', 'feed', 'embed', 'ajax'] as $flag) {
     $GLOBALS[$flag] = true;
     $special = new PageEnding();
     check(render($special) === '', 'Do not insert public page furniture into ' . $flag . ' responses.');
@@ -144,4 +267,33 @@ function render($object): string { ob_start(); $object->render(); return (string
     check($market->get_widget() instanceof WP_Error, 'Failed upstream data must not become fake figures.');
     check($market->get_widget() instanceof WP_Error && count($requests) === 1, 'Back off for a minute after an upstream failure.');
 }
+define('REST_REQUEST', true);
+check(render(new PageEnding()) === '', 'REST responses must not receive public page furniture.');
 echo "WordPress page-ending rendering, scope, market validation and cache checks passed.\n";
+
+
+// Additive Tokenomics helper receives only public copy and no native signing readiness.
+$page = 1209; $admin = $feed = $embed = $ajax = $preview = false;
+$post_status = 'publish'; $post_password = ''; $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET = [];
+(new PageEnding())->enqueue_assets();
+$tokenomics = $config['calorieapp-identity-bridge-site-polish']['tokenomics'];
+check($tokenomics['publicPage'] === true && count($tokenomics['copy']) === 11, 'Tokenomics has eleven prepared public helper locales');
+check($scripts['calorieapp-tokenomics'][1] === ['calorieapp-identity-bridge-site-polish'], 'Only the public presentation dependency is added');
+foreach ([['POST', false, 'publish', '', []], ['GET', true, 'publish', '', []], ['GET', false, 'private', '', []], ['GET', false, 'publish', 'password', []], ['GET', false, 'publish', '', ['preview' => 'true']], ['GET', false, 'publish', '', ['ui_lang' => ['nl']]]] as [$method, $preview, $post_status, $post_password, $query]) {
+    $_SERVER['REQUEST_METHOD'] = $method; $_GET = $query; unset($scripts['calorieapp-tokenomics']);
+    (new PageEnding())->enqueue_assets();
+    check(!isset($config['calorieapp-identity-bridge-site-polish']['tokenomics']) && !isset($scripts['calorieapp-tokenomics']), 'Nonpublic or unknown Tokenomics request receives no helper');
+}
+
+
+$page = 4205; $admin = $feed = $embed = $ajax = $preview = false;
+$post_status = 'publish'; $post_password = ''; $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET = [];
+(new PageEnding())->enqueue_assets();
+$guide = $config['calorieapp-identity-bridge-site-polish']['buyGuide'];
+check($guide['publicPage'] === true && count($guide['copy']) === 11, 'How to Buy has eleven complete prepared locales');
+check($scripts['calorieapp-buy-guide-language'][1] === ['calorieapp-identity-bridge-site-polish'], 'Only the public guide dependency is added');
+foreach ([['POST', false, 'publish', '', []], ['GET', true, 'publish', '', []], ['GET', false, 'private', '', []], ['GET', false, 'publish', 'password', []], ['GET', false, 'publish', '', ['preview' => 'true']], ['GET', false, 'publish', '', ['ui_lang' => ['nl']]]] as [$method, $preview, $post_status, $post_password, $query]) {
+    $_SERVER['REQUEST_METHOD'] = $method; $_GET = $query; unset($scripts['calorieapp-buy-guide-language']);
+    (new PageEnding())->enqueue_assets();
+    check(!isset($config['calorieapp-identity-bridge-site-polish']['buyGuide']) && !isset($scripts['calorieapp-buy-guide-language']), 'Unknown or nonpublic guide contexts remain native');
+}
diff --git a/tools/tests/wordpress_richlist.test.mjs b/tools/tests/wordpress_richlist.test.mjs
new file mode 100644
index 0000000..82205e2
--- /dev/null
+++ b/tools/tests/wordpress_richlist.test.mjs
@@ -0,0 +1,92 @@
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+import {Node,shape,locales} from '../fixtures/step3/faq-language-model.mjs';
+const base=new URL('../../wordpress-plugins/calorieapp-identity-bridge/',import.meta.url);
+const source=readFileSync(new URL('assets/calorieapp-site-layout.js',base),'utf8');
+const catalogue=JSON.parse(readFileSync(new URL('config/richlist.json',base)));
+
+// Synthetic provider rows with queued mutation delivery; not visual/native auth acceptance.
+function harness({late=false,marked=true,reduced=false,page=3243,path='/index.php/richlist/',search='',configure,protect}={}){
+ const observers=[],events=new Map(),scrolls=[],focuses=[];
+ function emit(record){for(const observer of observers){
+  if(!observer.target?.contains(record.target))continue;const options=observer.options;
+  if(record.type==='attributes'&&(!options.attributes||!options.attributeFilter.includes(record.attributeName)))continue;
+  if(record.type==='characterData'&&!options.characterData)continue;observer.records.push(record);
+ }}
+ class Element extends Node{
+  get data(){return this._data;}set data(value){const old=this._data;this._data=value;if(old!==undefined&&old!==value)emit({type:'characterData',target:this});}
+  setAttribute(name,value){const old=this.getAttribute(name);super.setAttribute(name,value);if(old!==String(value))emit({type:'attributes',target:this,attributeName:name});}
+  removeAttribute(name){const old=this.getAttribute(name);super.removeAttribute(name);if(old!==null)emit({type:'attributes',target:this,attributeName:name});}
+  appendChild(node){super.appendChild(node);emit({type:'childList',target:this,addedNodes:[node],removedNodes:[]});return node;}
+  insertBefore(node,reference){node.remove();const index=this.childNodes.indexOf(reference);assert.ok(index>=0);this.childNodes.splice(index,0,node);node.parentNode=this;emit({type:'childList',target:this,addedNodes:[node],removedNodes:[]});}
+  remove(){const parent=this.parentNode;super.remove();if(parent)emit({type:'childList',target:parent,addedNodes:[],removedNodes:[this]});}
+  contains(node){return node===this||this.childNodes.some(child=>child.contains(node));}
+  matches(selector){return selector.split(',').some(part=>{const tagged=part.trim().match(/^([a-z]+)\.([\w-]+)$/);return tagged?this.tagName.toLowerCase()===tagged[1]&&this.classList.contains(tagged[2]):super.matches(part);});}
+  addEventListener(name,callback){this.events||=new Map();this.events.set(name,callback);}
+  click(){this.events?.get('click')?.();}focus(options){focuses.push({node:this,options});}scrollIntoView(options){scrolls.push({node:this,options});}
+ }
+ for(const [property,attribute]of Object.entries({id:'id',className:'class',lang:'lang',dir:'dir',tabIndex:'tabindex',type:'type'}))Object.defineProperty(Element.prototype,property,{get(){const value=this.getAttribute(attribute);return property==='tabIndex'?Number(value):value;},set(value){this.setAttribute(attribute,value);}});
+ Object.defineProperty(Element.prototype,'hidden',{get(){return this.getAttribute('hidden')!==null;},set(value){if(value)this.setAttribute('hidden','');else this.removeAttribute('hidden');}});
+ const make=(tag,attributes={},text)=>{const node=new Element(tag,attributes);if(text!==undefined)node.appendChild(new Element('#text',{},text));return node;};
+ const document={nodeType:9,readyState:'complete'},html=make('html',{lang:'en',dir:'ltr'});html.parentNode=document;
+ const body=html.appendChild(make('body',{class:'brz page-id-'+page}));document.body=body;
+ const slot=body.appendChild(make('div',{class:'brz-wp-shortcode'})),table=make('table',{class:'xl-richlist'});
+ const header=table.appendChild(make('tr'));header.appendChild(make('th',{},'Rank'));header.appendChild(make('th',{},'Address'));
+ const row=table.appendChild(make('tr',{class:marked?'xl-is-user':''})),rank=row.appendChild(make('td',{},'42'));
+ const address=row.appendChild(make('td'));address.appendChild(make('a',{href:'https://example.invalid/account'},'synthetic-public-address'));row.appendChild(make('td',{},'123.45'));
+ if(!late)slot.appendChild(table);
+ const controls=body.appendChild(make('aside'));controls.appendChild(make('button',{type:'button','data-session-locale':'en'},'Original sign-out'));controls.appendChild(make('input',{name:'amount',value:'1.25'}));controls.appendChild(make('div',{'data-consent':'denied'},'Native choices'));
+ const originalControls=shape(controls),originalHeader=shape(header),originalAddress=shape(address);
+ document.querySelectorAll=selector=>selector.startsWith('.brz ')?[]:html.querySelectorAll(selector);document.querySelector=selector=>document.querySelectorAll(selector)[0]||null;
+ document.getElementById=id=>document.querySelector('[id="'+id+'"]');document.createElement=tag=>{assert.ok(!['script','iframe'].includes(tag));return make(tag);};document.createTextNode=text=>new Element('#text',{},text);
+ const config={locales,richlist:structuredClone(catalogue)};configure?.(config);
+ const window={location:{origin:'https://calorietoken.net',pathname:path,search},calorieappDisplayLanguageConfig:config,matchMedia:()=>({matches:reduced}),MutationObserver:true,
+  addEventListener(type,callback){if(!events.has(type))events.set(type,[]);events.get(type).push(callback);},
+  setTimeout(){throw Error('No delayed focus');},setInterval(){throw Error('No polling');},fetch(){throw Error('No provider request');}};
+ protect?.({slot,table,row,make,body});
+ const context=vm.createContext({window,document,MutationObserver:class{
+  constructor(callback){this.callback=callback;this.records=[];observers.push(this);}observe(target,options){this.target=target;this.options=options;}disconnect(){this.target=null;this.records=[];}
+ }});
+ function flush(){for(let i=0;i<30;i++){const pending=observers.filter(o=>o.records.length);if(!pending.length)return;for(const o of pending)o.callback(o.records.splice(0));}throw Error('Observer loop');}
+ const run=()=>{vm.runInContext(source,context);flush();};run();
+ return{window,document,html,body,slot,table,row,rank,make,scrolls,focuses,flush,run,
+  event(type){for(const fn of events.get(type)||[])fn();flush();},button(){return document.querySelector('[data-calorieapp-own-rank]');},
+  unchanged(){assert.deepEqual(shape(controls),originalControls);assert.deepEqual(shape(header),originalHeader);assert.deepEqual(shape(address),originalAddress);assert.equal(html.lang,'en');assert.equal(html.dir,'ltr');}};
+}
+test('late tables/markers get one preserved scroll wrapper and jump without an observer loop',()=>{
+ const h=harness({late:true,marked:false});assert.equal(h.button(),null);
+ h.slot.appendChild(h.table);h.flush();assert.equal(h.button().hidden,true);
+ h.row.setAttribute('class','xl-is-user');h.flush();assert.equal(h.button().textContent,'My position 42');assert.equal(h.button().hidden,false);
+ h.event('load');h.event('pageshow');h.run();assert.equal(h.document.querySelectorAll('.calorieapp-richlist-scroll').length,1);assert.equal(h.document.querySelectorAll('[data-calorieapp-own-rank]').length,1);
+ assert.equal(h.table.parentNode.tabIndex,0);assert.equal(h.table.parentNode.getAttribute('role'),'region');assert.ok(h.document.getElementById(h.table.parentNode.getAttribute('aria-labelledby')));
+ h.body.appendChild(h.make('p',{},'Unrelated'));h.flush();h.unchanged();
+});
+test('activation resolves the current row before queued mutations and respects reduced motion',()=>{
+ for(const reduced of [false,true]){const h=harness({reduced}),button=h.button();h.row.remove();const replacement=h.table.appendChild(h.make('tr',{class:'xl-is-user'}));replacement.appendChild(h.make('td',{},'73'));button.click();
+ assert.equal(button.textContent,'My position 73');assert.equal(h.focuses.at(-1).node,replacement);assert.equal(h.focuses.at(-1).options.preventScroll,true);assert.equal(h.scrolls.at(-1).node,replacement);assert.equal(h.scrolls.at(-1).options.behavior,reduced?'auto':'smooth');assert.equal(h.row.getAttribute('aria-current'),null);assert.equal(h.row.getAttribute('tabindex'),null);h.flush();h.unchanged();}
+});
+test('removed/hidden/ambiguous markers and removed tables leave no stale active target',()=>{
+ for(const change of [h=>h.row.setAttribute('class',''),h=>h.row.hidden=true,h=>{const r=h.table.appendChild(h.make('tr',{class:'xl-is-user'}));r.appendChild(h.make('td',{},'99'));},h=>h.table.remove()]){
+ const h=harness(),old=h.button();change(h);old.click();h.flush();assert.equal(h.scrolls.length,0);assert.equal(h.focuses.length,0);assert.ok(!h.button()||h.button().hidden);assert.equal(h.row.getAttribute('aria-current'),null);assert.equal(h.row.getAttribute('tabindex'),null);h.unchanged();}
+});
+test('replacement and back/forward rebind once and preserve provider-owned attributes',()=>{
+ const h=harness({protect:({row})=>{row.setAttribute('tabindex','0');row.setAttribute('aria-current','step');}});assert.equal(h.row.getAttribute('tabindex'),'0');h.row.setAttribute('class','');h.flush();assert.equal(h.row.getAttribute('aria-current'),'step');h.event('pagehide');
+ const replacement=h.make('table',{class:'xl-richlist'}),row=replacement.appendChild(h.make('tr',{class:'xl-is-user'}));row.appendChild(h.make('td',{},'8'));h.table.parentNode.appendChild(replacement);h.table.remove();h.event('pageshow');
+ assert.equal(h.button().textContent,'My position 8');assert.equal(h.document.querySelectorAll('[data-calorieapp-own-rank]').length,1);row.setAttribute('class','');h.flush();assert.equal(h.button().hidden,true);h.unchanged();
+});
+test('eleven helper languages and updated ranks preserve source data, controls and direction',()=>{
+ assert.equal(catalogue.release_approved,false);assert.deepEqual(Object.keys(catalogue.translations),locales.map(l=>l.tag));const h=harness();
+ for(const locale of locales){h.window.CalorieAppRichlist.setLocale(locale.tag);h.flush();assert.equal(h.button().parentNode.lang,locale.tag);assert.equal(h.button().parentNode.dir,locale.direction);assert.equal(h.button().textContent,catalogue.translations[locale.tag].action+' 42');assert.equal(h.document.getElementById(h.table.parentNode.getAttribute('aria-labelledby')).textContent,catalogue.translations[locale.tag].region);assert.equal(h.button().querySelector('bdi').textContent,'42');h.unchanged();}
+ h.rank.childNodes[0].data='64';h.flush();assert.equal(h.button().textContent,'Mijn positie 64');h.rank.childNodes[0].data='synthetic-address';h.flush();assert.equal(h.button().textContent,'Mijn positie');h.unchanged();
+});
+test('incomplete/unknown copy falls back as a whole; markup-looking text is literal',()=>{
+ const h=harness({configure:c=>{delete c.richlist.translations.nl.jump;c.richlist.translations.fr.action='<img src=x>';}});
+ h.window.CalorieAppRichlist.setLocale('nl');h.flush();assert.equal(h.button().textContent,'My position 42');assert.equal(h.button().parentNode.lang,'en');h.window.CalorieAppRichlist.setLocale('fr');h.flush();assert.equal(h.button().textContent,'<img src=x> 42');assert.equal(h.button().querySelector('img'),null);
+ h.window.CalorieAppRichlist.setLocale('unsupported');assert.equal(h.button().parentNode.lang,'en');h.unchanged();const absent=harness({configure:c=>delete c.richlist});absent.window.CalorieAppRichlist.setLocale('ur');assert.equal(absent.button().parentNode.lang,'en');
+});
+test('other pages/editor previews and protected or hidden ancestors are untouched',()=>{
+ const protectedCases=['form','contenteditable','xl-card','data-calorieapp-embed','hidden','inert','aria-hidden'].map(kind=>({protect:({slot,table,make})=>{const attrs=kind==='form'?{}:kind==='xl-card'?{class:kind}:{[kind]:kind==='aria-hidden'?'true':''};slot.appendChild(make(kind==='form'?'form':'div',attrs)).appendChild(table);}}));
+ for(const options of [{page:1207},{path:'/index.php/blog/'},{search:'?preview=true'},{search:'?brizy-edit'},{protect:({body})=>body.setAttribute('class','brz brz-ed page-id-3243')},...protectedCases]){const h=harness(options);assert.equal(h.button(),null);assert.equal(h.row.getAttribute('aria-current'),null);h.unchanged();}
+});
diff --git a/tools/tests/wordpress_shared_footer.test.mjs b/tools/tests/wordpress_shared_footer.test.mjs
new file mode 100644
index 0000000..749ad95
--- /dev/null
+++ b/tools/tests/wordpress_shared_footer.test.mjs
@@ -0,0 +1,193 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+
+const root = new URL('../../wordpress-plugins/calorieapp-identity-bridge/', import.meta.url);
+const source = readFileSync(new URL('assets/calorieapp-page-ending.js', root), 'utf8');
+const operator = 'Operator: ICTHendrikse · KVK 73774693';
+const copyright = '© 2026 ICTHendrikse (owned content only) · CalorieToken® trade mark: Pieter Hendrikse';
+const privacy = 'https://calorietoken.net/index.php/privacy-policy/';
+const terms = 'https://calorietoken.net/index.php/terms-conditions/';
+
+// Small DOM tree fixture, independent of footer policy. It models structural
+// selection/movement only; real layout is checked with the browser fixture.
+class Element {
+  constructor(tag = 'div', attrs = {}, text = '') {
+    this.tagName = tag.toUpperCase(); this.attrs = { ...attrs }; this.text = text;
+    this.children = []; this.parentNode = null; this.nodeType = 1; this.hidden = false;
+    this.classList = { contains: name => (this.attrs.class || '').split(/\s+/).includes(name),
+      add: name => { if (!this.classList.contains(name)) this.attrs.class = ((this.attrs.class || '') + ' ' + name).trim(); } };
+  }
+  get parentElement() { return this.parentNode; }
+  get nextElementSibling() { return this.parentNode?.children[this.parentNode.children.indexOf(this) + 1] || null; }
+  get textContent() { return this.text + this.children.map(c => c.textContent).join(''); }
+  set textContent(value) { this.text = value; this.children = []; }
+  setAttribute(key, value) { this.attrs[key] = String(value); }
+  getAttribute(key) { return this.attrs[key] ?? null; }
+  hasAttribute(key) { return key in this.attrs; }
+  removeAttribute(key) { delete this.attrs[key]; }
+  appendChild(child) { child.remove(); child.parentNode = this; this.children.push(child); return child; }
+  insertBefore(child, reference) {
+    child.remove(); const index = this.children.indexOf(reference);
+    assert.notEqual(index, -1); this.children.splice(index, 0, child); child.parentNode = this;
+  }
+  remove() {
+    if (this.parentNode) this.parentNode.children.splice(this.parentNode.children.indexOf(this), 1);
+    this.parentNode = null;
+  }
+  contains(node) { return node === this || this.children.some(c => c.contains(node)); }
+  matches(selector) {
+    return selector.split(',').some(part => {
+      const pieces = part.trim().split(/\s+/), last = pieces.pop();
+      const simple = (node, token) => {
+        if (!node) return false;
+        if (token.startsWith('.')) return node.classList.contains(token.slice(1));
+        const attr = token.match(/^\[([^=\]]+)(?:=["']?([^"'\]]+)["']?)?\]$/);
+        return attr ? node.hasAttribute(attr[1]) && (!attr[2] || node.getAttribute(attr[1]) === attr[2]) : node.tagName.toLowerCase() === token;
+      };
+      if (!simple(this, last)) return false;
+      let parent = this.parentNode;
+      for (const ancestor of pieces.reverse()) {
+        while (parent && !simple(parent, ancestor)) parent = parent.parentNode;
+        if (!parent) return false;
+        parent = parent.parentNode;
+      }
+      return true;
+    });
+  }
+  closest(selector) { return this.matches(selector) ? this : this.parentNode?.closest(selector) || null; }
+  querySelectorAll(selector) {
+    return this.children.flatMap(child => [...(child.matches(selector) ? [child] : []), ...child.querySelectorAll(selector)]);
+  }
+  querySelector(selector) { return this.querySelectorAll(selector)[0] || null; }
+  cloneNode(deep) {
+    const copy = new Element(this.tagName, this.attrs, this.text); copy.hidden = this.hidden;
+    if (deep) this.children.forEach(child => copy.appendChild(child.cloneNode(true)));
+    return copy;
+  }
+}
+
+function harness({ legacy = true, edit = '', extraTag = '', extraHref = '', editor = false, market = false, mixed = false, marketInForm = false } = {}) {
+  const body = new Element('body', { class: editor ? 'brz brz-ed' : 'brz' });
+  const content = body.appendChild(new Element('section', { class: 'brz-section' }));
+  const team = content.appendChild(new Element('article', {}, 'Existing team information'));
+  const account = content.appendChild(new Element('div', { class: 'xl-card' }, 'Existing account'));
+  const host = content.appendChild(new Element('div', { class: 'brz-wp-shortcode' }));
+  const oldMarket = market ? host.appendChild(new Element('div', { 'data-calorieapp-xpmarket-widget': '1' })) : null;
+  if (mixed) host.appendChild(account);
+  if (marketInForm) content.appendChild(new Element('form')).appendChild(host);
+  const original = legacy ? body.appendChild(new Element('section', { class: 'brz-section' })) : null;
+  if (original) {
+    original.appendChild(new Element('p', {}, operator));
+    original.appendChild(new Element('p', {}, copyright));
+    original.appendChild(new Element('p', {}, 'Privacy Policy'));
+    original.appendChild(new Element('p', {}, 'Terms & Conditions'));
+    original.appendChild(new Element('a', { href: 'https://x.com/CalorieToken' }));
+    if (edit) original.appendChild(new Element('p', {}, edit));
+    if (extraTag) original.appendChild(new Element(extraTag));
+    if (extraHref) original.appendChild(new Element('a', { href: extraHref }));
+  }
+  const ending = body.appendChild(new Element('div', { 'data-calorieapp-shared-page-ending': '' }));
+  const info = ending.appendChild(new Element('aside', { 'data-calorieapp-app-info': '' }, 'CalorieApp information'));
+  const marketArea = ending.appendChild(new Element('aside', { 'data-calorieapp-sitewide-market': '' }));
+  marketArea.appendChild(new Element('div', { 'data-calorieapp-xpmarket-widget': '1' }));
+  const footer = ending.appendChild(new Element('footer', { class: 'calorieapp-shared-footer' })); footer.hidden = true;
+  footer.appendChild(new Element('a', { href: privacy }, 'Privacy Policy'));
+  footer.appendChild(new Element('a', { href: terms }, 'Terms & Conditions'));
+  footer.appendChild(new Element('a', { href: 'https://x.com/CalorieToken' }, 'X'));
+  const document = { body, readyState: 'complete', querySelector: s => body.querySelector(s), querySelectorAll: s => body.querySelectorAll(s) };
+  const handlers = {}, calls = [];
+  let observe;
+  const window = { calorieappPageEnding: {}, addEventListener: (name, fn) => { handlers[name] = fn; },
+    MutationObserver: class { constructor(fn) { observe = fn; } observe() {} },
+    requestAnimationFrame: fn => fn(),
+    fetch: (...args) => { calls.push(args); throw new Error('No remote request in page furniture'); } };
+  vm.runInNewContext(source, { document, window, URL, Intl });
+  return { body, content, team, account, host, oldMarket, original, ending, info, marketArea, footer, calls,
+    event(name) { handlers[name]?.(); }, mutation(record) { observe([record]); } };
+}
+
+test('reviewed usecase/legal footer becomes one shared footer with working legal links', () => {
+  const h = harness();
+  assert.equal(h.original.hidden, true);
+  assert.equal(h.footer.hidden, false);
+  assert.equal(h.ending.nextElementSibling, h.original);
+  assert.deepEqual(h.footer.querySelectorAll('a').slice(0, 2).map(a => a.getAttribute('href')), [privacy, terms]);
+  assert.equal(h.team.textContent, 'Existing team information');
+  assert.equal(h.account.parentNode, h.content);
+  assert.equal(h.calls.length, 0);
+});
+
+test('new CMS copy, destinations, forms and other interactive content keep their original footer', () => {
+  for (const options of [{ edit: 'New approved footer wording' }, { extraHref: 'https://example.test/new-link' },
+    ...['form', 'input', 'iframe', 'img', 'button', 'select', 'textarea'].map(extraTag => ({ extraTag }))]) {
+    const h = harness(options);
+    assert.equal(h.original.hidden, false, JSON.stringify(options));
+    assert.equal(h.footer.hidden, true, 'Do not add a competing footer to an unrecognized one.');
+  }
+});
+
+test('an existing dedicated market card moves out of the team section without moving team or account content', () => {
+  const h = harness({ market: true });
+  assert.equal(h.oldMarket.parentNode, h.marketArea);
+  assert.equal(h.host.hidden, true);
+  assert.equal(h.team.parentNode, h.content);
+  assert.equal(h.account.parentNode, h.content);
+  assert.equal(h.content.hidden, false);
+  assert.equal(h.marketArea.querySelectorAll('[data-calorieapp-xpmarket-widget]').length, 1);
+  for (const event of ['load', 'pageshow', 'load']) h.event(event);
+  assert.equal(h.body.querySelectorAll('[data-calorieapp-shared-page-ending]').length, 1);
+  assert.equal(h.marketArea.querySelectorAll('[data-calorieapp-xpmarket-widget]').length, 1);
+  assert.equal(h.oldMarket.parentNode, h.marketArea);
+  assert.equal(h.calls.length, 0);
+});
+
+test('a mixed market/account shortcode keeps its content and does not gain a duplicate market card', () => {
+  const h = harness({ market: true, mixed: true });
+  assert.equal(h.oldMarket.parentNode, h.host);
+  assert.equal(h.account.parentNode, h.host);
+  assert.equal(h.host.hidden, false);
+  assert.equal(h.marketArea.hidden, true);
+});
+
+test('a market inside a donation form is not relocated or replaced', () => {
+  const h = harness({ market: true, marketInForm: true });
+  assert.equal(h.oldMarket.parentNode, h.host);
+  assert.equal(h.host.parentNode.tagName, 'FORM');
+  assert.equal(h.host.hidden, false);
+  assert.equal(h.marketArea.hidden, true);
+  assert.equal(h.calls.length, 0);
+});
+
+test('pages without a legacy footer receive the shared fallback; editor content is untouched', () => {
+  const plain = harness({ legacy: false });
+  assert.equal(plain.footer.hidden, false);
+  const editor = harness({ editor: true, market: true });
+  assert.equal(editor.ending.hidden, true);
+  assert.equal(editor.original.hidden, false);
+  assert.equal(editor.oldMarket.parentNode, editor.host);
+});
+
+test('a later CMS correction restores a previously matched footer instead of concealing new content', () => {
+  const h = harness();
+  const form = h.original.appendChild(new Element('form', {}, 'New contact form'));
+  h.mutation({ target: h.original, addedNodes: [form] });
+  assert.equal(h.original.hidden, false);
+  assert.equal(h.original.hasAttribute('data-calorieapp-legacy-footer'), false);
+  assert.equal(h.footer.hidden, true);
+  assert.equal(form.parentNode, h.original);
+});
+
+test('informational copy covers the existing eleven locales without advertising unreleased sources or payments', () => {
+  const copy = JSON.parse(readFileSync(new URL('config/app-information.json', root), 'utf8'));
+  const locales = JSON.parse(readFileSync(new URL('config/locales.json', root), 'utf8')).locales.map(locale => locale.tag);
+  assert.deepEqual(Object.keys(copy), locales);
+  for (const row of Object.values(copy)) {
+    assert.deepEqual(Object.keys(row), ['description', 'action', 'on_page']);
+    for (const value of Object.values(row)) {
+      assert.equal(typeof value, 'string'); assert.ok(value.trim());
+      assert.doesNotMatch(value, /<|https?:|USDA|DEX|Testnet|faucet|AMM/);
+    }
+  }
+});
diff --git a/tools/tests/wordpress_site_layout.test.mjs b/tools/tests/wordpress_site_layout.test.mjs
index 4999137..ec19d3d 100644
--- a/tools/tests/wordpress_site_layout.test.mjs
+++ b/tools/tests/wordpress_site_layout.test.mjs
@@ -131,20 +131,4 @@ test("a late shortcode receives layout and disconnects its discovery observer",
   assert.equal(h.navigation.getBoundingClientRect().top - h.card.getBoundingClientRect().bottom, 12);
 });
 
-test("Richlist scrolling preserves the original table and does not duplicate wrappers", () => {
-  const wrappers = [], listeners = new Map();
-  const parent = { insertBefore(region, item) { assert.equal(item, table); wrappers.push(region); } };
-  const table = { parentNode: parent, rows: [{ balance: "unchanged" }], querySelector() { return null; }, closest() { return this.parentNode.className === "calorieapp-richlist-scroll" ? this.parentNode : null; } };
-  const document = {
-    readyState: "complete",
-    querySelectorAll: selector => selector === "table.xl-richlist" ? [table] : [],
-    createElement: () => ({ attributes: {}, setAttribute(key, value) { this.attributes[key] = value; }, appendChild(item) { this.child = item; item.parentNode = this; } }),
-  };
-  vm.runInNewContext(source, { document, window: { addEventListener: (name, callback) => listeners.set(name, callback) } });
-  listeners.get("load")();
-  assert.equal(wrappers.length, 1);
-  assert.equal(wrappers[0].child, table);
-  assert.equal(wrappers[0].tabIndex, 0);
-  assert.equal(wrappers[0].attributes.role, "region");
-  assert.equal(table.rows[0].balance, "unchanged");
-});
+// Richlist wrapping/data coverage is in wordpress_richlist.test.mjs.
diff --git a/tools/tests/wordpress_site_navigation.test.mjs b/tools/tests/wordpress_site_navigation.test.mjs
index c198e2a..600873a 100644
--- a/tools/tests/wordpress_site_navigation.test.mjs
+++ b/tools/tests/wordpress_site_navigation.test.mjs
@@ -6,12 +6,14 @@ const source=await readFile(new URL('../../wordpress-plugins/calorieapp-identity
 const site='https://calorietoken.net';
 const app=site+'/index.php/calorieapp/';
 const logo=site+'/wp-content/plugins/calorieapp-identity-bridge/assets/calorieapp-logo.svg';
+const locales=JSON.parse(await readFile(new URL('../../wordpress-plugins/calorieapp-identity-bridge/config/locales.json',import.meta.url),'utf8')).locales;
+const catalogue=JSON.parse(await readFile(new URL('../../wordpress-plugins/calorieapp-identity-bridge/config/navigation.json',import.meta.url),'utf8'));
 function style(){const values=new Map();return {
  setProperty(n,v,p=''){values.set(n,{v,p});this[n]=v;},
  getPropertyValue(n){return values.get(n)?.v||'';},getPropertyPriority(n){return values.get(n)?.p||'';},
  removeProperty(n){values.delete(n);delete this[n];}
 };}
-function harness({pathname='/index.php/faq/',embedded=false,isHome='0',appLogo=logo,missingBar=false,height=2400,viewport=800,delayed=false}={}){
+function harness({pathname='/index.php/faq/',embedded=false,isHome='0',appLogo=logo,missingBar=false,height=2400,viewport=800,delayed=false,configure,protectedBar=false}={}){
  const config={dataset:{homePage:site+'/',appPage:app,appLogo,isHome}};
  const body={scrollHeight:height};
  const html={scrollHeight:height};
@@ -35,26 +37,36 @@ function harness({pathname='/index.php/faq/',embedded=false,isHome='0',appLogo=l
  const foreign=link('https://elsewhere.example/index.php/calorieapp/');
  const fragment=link(site+'/#top');const unrelatedScroll=link(site+'/another/#top',{glyph:'square-upload'});
  const mixed=link(app);const mixedOther=link(site+'/index.php/contact/',{sharedRoot:mixed.root});
- const slots=Object.fromEntries(['home','app','bottom','top'].map(role=>[role,{hidden:true,getAttribute(){return role;}}]));
- const buttons=Object.fromEntries(['top','bottom'].map(role=>[role,{getAttribute(){return role;},addEventListener(n,fn){this[n]=fn;}}]));
- const bar={hidden:true,querySelectorAll(s){return s==='[data-calorieapp-scroll]'?Object.values(buttons):Object.values(slots);}};
+ const buttons=Object.fromEntries(['home','app','top','bottom'].map(role=>[role,{
+  attrs:{href:role==='home'?site+'/':role==='app'?app:'#',...(role==='top'||role==='bottom'?{'data-calorieapp-scroll':role}:{})},icon:{original:role},binds:0,
+  get href(){return new URL(this.attrs.href,site+pathname).href;},
+  getAttribute(n){return this.attrs[n]??null;},setAttribute(n,v){this.attrs[n]=String(v);},
+  addEventListener(n,fn){this.binds++;this[n]=fn;}
+ }]));
+ const slots=Object.fromEntries(['home','app','bottom','top'].map(role=>[role,{hidden:true,getAttribute(){return role;},querySelector(){return buttons[role];}}]));
+ const bar={hidden:true,attrs:{},closest(){return protectedBar?{}:null;},setAttribute(n,v){this.attrs[n]=String(v);},querySelectorAll(s){return s==='[data-calorieapp-scroll]'?[buttons.top,buttons.bottom]:Object.values(slots);}};
+ let activeBar=bar;
  const events=new Map(),frames=[];let mutation,resize,observed;
  const document={body,documentElement:html,readyState:'complete',
-  querySelector(s){if(s==='[data-calorieapp-site-integration]')return config;if(s==='[data-calorieapp-fallback-shortcuts]')return missingBar?null:bar;if(s==='[data-calorieapp-embed]')return embedded?{}:null;return null;},
+  querySelector(s){if(s==='[data-calorieapp-site-integration]')return config;if(s==='[data-calorieapp-fallback-shortcuts]')return missingBar?null:activeBar;if(s==='[data-calorieapp-embed]')return embedded?{}:null;return null;},
   querySelectorAll(){return links.map(x=>x.item);}
  };
  const window={location:{href:site+pathname},innerHeight:viewport,
+  calorieappDisplayLanguageConfig:{locales,navigation:structuredClone(catalogue)},
   getComputedStyle(n){return {position:n.position,display:n.style?.display||'block'};},
-  requestAnimationFrame(fn){frames.push(fn);},addEventListener(n,fn){events.set(n,fn);},
+  requestAnimationFrame(fn){frames.push(fn);},addEventListener(n,fn){if(!events.has(n))events.set(n,[]);events.get(n).push(fn);},
+  Event:class {constructor(type){this.type=type;}},dispatchEvent(event){for(const fn of events.get(event.type)||[])fn(event);},
   matchMedia(){return {matches:true};},scrollTo(v){this.scrolled=v;},
   MutationObserver:class{constructor(fn){mutation=fn;}disconnect(){}observe(_target,options){observed=options;}},
   ResizeObserver:class{constructor(fn){resize=fn;}observe(){}}
  };
+ configure?.(window.calorieappDisplayLanguageConfig,buttons);
  const flush=()=>{while(frames.length)frames.shift()();};
  const run=()=>vm.runInNewContext(source,{document,window,URL});run();
  return {home,legacy,currentApp,top,bottom,inline,other,foreign,fragment,unrelatedScroll,mixed,mixedOther,bar,slots,buttons,window,body,html,
   run,link,visible:()=>Object.keys(slots).filter(r=>!slots[r].hidden),
-  event(n){events.get(n)?.();flush();},mutate(){mutation?.([]);flush();},resize(){resize?.();flush();},observed:()=>observed};
+  event(n){for(const fn of [...(events.get(n)||[])])fn();flush();},mutate(){mutation?.([]);flush();},resize(){resize?.();flush();},observed:()=>observed,
+  showBar(value){missingBar=!value;},replaceBar(value){activeBar=value;}};
 }
 test('Home and CalorieApp omit their own destination in one shared stack',()=>{
  for(const pathname of ['/','/index.php/','/?campaign=test']){
@@ -94,7 +106,46 @@ test('late controls and delayed Brizy styles are reconciled without duplicate st
  h.legacy.root.position='fixed';h.event('load');assert.equal(h.legacy.container.hidden,true);
  const late=h.link(app);late.root.position='fixed';h.mutate();assert.equal(late.container.hidden,true);
  h.run();h.event('pageshow');assert.equal(h.bar.hidden,false);
- assert.deepEqual(Array.from(h.observed().attributeFilter),['class','style','href']);
+ assert.deepEqual(Array.from(h.observed().attributeFilter),['class','style','href','data-calorieapp-scroll','data-calorieapp-shortcut']);
+});
+
+test('all eleven navigation labels preserve routes, icons, visibility and existing scroll handlers',()=>{
+ assert.equal(catalogue.release_approved,false);assert.deepEqual(Object.keys(catalogue.translations),locales.map(x=>x.tag));
+ const h=harness({embedded:true});const visible=h.visible();
+ const before=Object.fromEntries(Object.entries(h.buttons).map(([role,b])=>[role,{href:b.href,icon:b.icon,click:b.click}]));
+ for(const locale of locales){
+  h.window.CalorieAppPageNavigation.setLocale(locale.tag);
+  assert.equal(h.bar.lang,locale.tag);assert.equal(h.bar.dir,locale.direction);assert.equal(h.bar.attrs['aria-label'],catalogue.translations[locale.tag].region);
+  for(const [role,b] of Object.entries(h.buttons)){
+   assert.equal(b.attrs['aria-label'],catalogue.translations[locale.tag][role]);assert.equal(b.attrs.title,catalogue.translations[locale.tag][role]);
+   assert.equal(b.href,before[role].href);assert.equal(b.icon,before[role].icon);assert.equal(b.click,before[role].click);
+  }
+  assert.deepEqual(h.visible(),visible);assert.equal(h.buttons.top.binds,1);
+ }
+});
+test('missing or invalid replacement restores native controls and a restored stack binds only once',()=>{
+ const h=harness();h.showBar(false);h.mutate();
+ assert.equal(h.home.container.hidden,false);assert.equal(h.legacy.container.hidden,false);
+ h.showBar(true);h.mutate();assert.equal(h.home.container.hidden,true);assert.equal(h.buttons.top.binds,1);
+ h.buttons.app.attrs.href='https://elsewhere.example/';h.mutate();assert.equal(h.legacy.container.hidden,false);
+ h.buttons.app.attrs.href=app;h.mutate();assert.equal(h.legacy.container.hidden,true);
+ delete h.buttons.bottom.attrs['data-calorieapp-scroll'];h.mutate();assert.equal(h.legacy.container.hidden,false);
+ assert.equal(harness({protectedBar:true}).legacy.container.hidden,false);
+});
+test('load discovers a late stack and replacement controls receive the retained locale and working handlers',()=>{
+ const h=harness({missingBar:true});h.showBar(true);h.event('load');assert.equal(h.legacy.container.hidden,true);
+ h.window.CalorieAppPageNavigation.setLocale('nl');
+ const replacement=harness({missingBar:true});h.replaceBar(replacement.bar);h.mutate();
+ assert.equal(replacement.bar.lang,'nl');assert.equal(replacement.buttons.top.attrs.title,'Naar boven');
+ let clicks=0;replacement.buttons.bottom.click({preventDefault(){clicks++;}});
+ assert.equal(clicks,1);assert.equal(h.window.scrolled.top,2400);assert.equal(replacement.buttons.bottom.binds,1);
+ h.mutate();assert.equal(replacement.buttons.bottom.binds,1);
+});
+test('incomplete and unknown navigation copy fall back as a whole; text never becomes markup',()=>{
+ const h=harness({configure:config=>{delete config.navigation.translations.nl.top;config.navigation.translations.fr.home='<img src=x>';}});
+ h.window.CalorieAppPageNavigation.setLocale('nl');assert.equal(h.bar.lang,'en');assert.equal(h.buttons.home.attrs.title,'Go to Home');
+ h.window.CalorieAppPageNavigation.setLocale('fr');assert.equal(h.buttons.home.attrs.title,'<img src=x>');assert.equal(h.buttons.home.icon.original,'home');
+ h.window.CalorieAppPageNavigation.setLocale('unsupported');assert.equal(h.bar.lang,'en');
 });
 test('an old control restored to ordinary content is no longer hidden',()=>{
  const h=harness();assert.equal(h.legacy.container.hidden,true);
diff --git a/tools/tests/wordpress_step3_polish.test.mjs b/tools/tests/wordpress_step3_polish.test.mjs
index 505592e..1945dfd 100644
--- a/tools/tests/wordpress_step3_polish.test.mjs
+++ b/tools/tests/wordpress_step3_polish.test.mjs
@@ -2,6 +2,7 @@ import assert from "node:assert/strict";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import test from "node:test";
+import vm from "node:vm";
 import { fileURLToPath } from "node:url";
 
 const defaultRoot = fileURLToPath(new URL(
@@ -10,38 +11,121 @@ const defaultRoot = fileURLToPath(new URL(
 ));
 const root = process.env.CALORIEAPP_BRIDGE_ROOT || defaultRoot;
 const source = (relative) => readFile(path.join(root, relative), "utf8");
+const javascript = await source("assets/calorieapp-site-polish.js");
+const legacyFixture = await readFile(new URL("../fixtures/step3/how-to-buy-legacy.html", import.meta.url), "utf8");
+const legacyMarkup = legacyFixture.replace(/^<article[^>]*>/, "").replace(/<\/article>\s*$/, "");
 
-test("Trustline enhancement reuses the installed Xaman TrustSet route", async () => {
-  const javascript = await source("assets/calorieapp-site-polish.js");
+// Executes the complete production script against bounded DOM fixtures. This
+// models behavior, not browser rendering, network providers or Xaman signing.
+function harness({ page = 4205, markup = legacyMarkup, trustlineReady = false, editor = false, publicPage = true } = {}) {
+  const elements = [];
+  function element(tag = "div") {
+    const node = {
+      tag, children: [], attributes: {}, dataset: {}, listeners: {}, className: "", textContent: "", parentNode: null,
+      setAttribute(name, value) { this.attributes[name] = String(value); },
+      getAttribute(name) { return this.attributes[name] ?? null; },
+      hasAttribute(name) { return name in this.attributes; },
+      appendChild(child) { child.parentNode = this; this.children.push(child); return child; },
+      append(...children) { children.forEach(child => this.appendChild(child)); },
+      addEventListener(name, callback) { this.listeners[name] = callback; },
+      after(...children) { children.forEach(child => this.parentNode.appendChild(child)); },
+      querySelectorAll(selector) { return selector === "p" ? this.children.filter(child => child.tag === "p") : []; },
+      querySelector() { return null; },
+      closest() { return null; },
+    };
+    node.classList = {
+      add(name) { if (!this.contains(name)) node.className = (node.className + " " + name).trim(); },
+      contains(name) { return node.className.split(/\s+/).includes(name); },
+    };
+    elements.push(node);
+    return node;
+  }
+  const body = element("body"); body.className = "brz page-id-" + page + (editor ? " brz-ed" : "");
+  const guide = element("article"); body.appendChild(guide);
+  let html = markup, writes = 0;
+  Object.defineProperty(guide, "innerHTML", {
+    get: () => html,
+    set(value) { html = value; writes++; },
+  });
+  const details = element(); body.appendChild(details);
+  ["rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY", "43616C6F72696500000000000000000000000000"].forEach(value => {
+    const paragraph = element("p"); paragraph.textContent = value; details.appendChild(paragraph);
+  });
+  const events = new Map(), copies = [], requests = [];
+  const document = {
+    body, readyState: "complete", createElement: element,
+    getElementById(id) { return elements.find(node => node.id === id && node.parentNode) || null; },
+    querySelectorAll(selector) { return selector === ".cal-buy-guide" ? [guide] : []; },
+    querySelector(selector) {
+      if (selector === ".cal-buy-guide") return guide;
+      if (selector === '[data-brz-custom-id="nrsbytvlhdquaddotxqmaeiihmzfbcufpmhr"]') return details;
+      return null;
+    },
+  };
+  const window = {
+    location: { origin: "https://calorietoken.net", pathname: "/index.php/how-to-buy-calorie/", href: "https://calorietoken.net/index.php/how-to-buy-calorie/" },
+    calorieappSitePolish: { trustlineReady, buyGuide: { publicPage } },
+    addEventListener(name, callback) { events.set(name, callback); },
+    fetch(...args) { requests.push(args); throw new Error("No request during presentation"); },
+  };
+  vm.runInNewContext(javascript, { document, window, URL, navigator: {
+    clipboard: { async writeText(value) { copies.push(value); } },
+  } });
+  return { guide, details, elements, document, copies, requests, get writes() { return writes; }, event(name) { events.get(name)?.(); } };
+}
 
-  assert.match(javascript, /if \(id !== 1205\) return/);
-  assert.match(javascript, /trustline\.href = "\?xl-trustline"/);
-  assert.match(javascript, /Set CAL trustline in Xaman/);
-  assert.doesNotMatch(javascript, /api_secret|xummlogin_api_secret/i);
+test("Known How to Buy source becomes a two-direction guide once", () => {
+  const h = harness();
+  assert.equal(h.writes, 1);
+  assert.match(h.guide.innerHTML, /Buy or sell CAL in four clear steps/);
+  assert.match(h.guide.innerHTML, /CAL[^\n]+XRP/);
+  assert.match(h.guide.innerHTML, /CAL[^\n]+RLUSD/);
+  assert.match(h.guide.innerHTML, /Trading takes place with the selected external service/);
+  assert.doesNotMatch(h.guide.innerHTML, /https:\/\/sologenic\.org|xapp:xumm\.dex/);
+  h.event("load"); h.event("pageshow");
+  assert.equal(h.writes, 1);
+  assert.equal(h.requests.length, 0);
+});
+
+test("Changed CMS text, links, attributes and inserted controls are never overwritten", () => {
+  for (const markup of [
+    legacyMarkup.replace("Before you start", "New approved introduction"),
+    legacyMarkup.replace("https://sologenic.org/", "https://example.test/new-destination"),
+    legacyMarkup.replace("overflow-wrap:anywhere", "overflow-wrap:normal"),
+    legacyMarkup + '<form><input name="important"></form>',
+    "<h2>Manually maintained guide</h2>", "",
+  ]) {
+    const h = harness({ markup });
+    h.event("load"); h.event("pageshow");
+    assert.equal(h.writes, 0);
+    assert.equal(h.guide.innerHTML, markup);
+    assert.equal(h.guide.dataset.calorieappBuyGuide, undefined);
+  }
+});
+
+test("Snapshot matching tolerates only inter-tag whitespace", () => {
+  const h = harness({ markup: legacyMarkup.replace(/></g, ">\n  <") });
+  assert.equal(h.writes, 1);
+});
+
+test("Other pages and the Brizy editor keep their content", () => {
+  assert.equal(harness({ page: 1090 }).writes, 0);
+  assert.equal(harness({ editor: true }).writes, 0);
+  assert.equal(harness({ publicPage: false }).writes, 0);
+  assert.equal(harness({ publicPage: "true" }).writes, 0);
 });
 
 test("Richlist enhancement is limited to an authenticated row marker", async () => {
   const javascript = await source("assets/calorieapp-site-layout.js");
   const stylesheet = await source("assets/calorieapp-site-layout.css");
 
-  assert.match(javascript, /table\.querySelector\("tr\.xl-is-user"\)/);
+  assert.match(javascript, /table\.querySelectorAll\("tr\.xl-is-user"\)/);
   assert.match(javascript, /data-calorieapp-own-rank/);
   assert.match(javascript, /scrollIntoView/);
   assert.match(stylesheet, /table\.xl-richlist tr\.xl-is-user/);
   assert.doesNotMatch(javascript, /xrpl-r-address|localStorage|sessionStorage/);
 });
 
-test("Sitewide market card deduplicates and stays next to the existing footer", async () => {
-  const javascript = await source("assets/calorieapp-page-ending.js");
-  const php = await source("includes/class-calorieapp-identity-bridge-page-ending.php");
-
-  assert.match(php, /data-calorieapp-sitewide-market/);
-  assert.match(php, /!is_singular\(\)/);
-  assert.match(javascript, /hasExistingMarket/);
-  assert.match(javascript, /Operator: ICTHendrikse/);
-  assert.match(javascript, /insertBefore\(injected, footerSection\)/);
-});
-
 test("Consent styling preserves Complianz controls", async () => {
   const stylesheet = await source("assets/calorieapp-site-polish.css");
 
@@ -51,16 +135,3 @@ test("Consent styling preserves Complianz controls", async () => {
   assert.match(stylesheet, /\.cmplz-save-preferences/);
   assert.doesNotMatch(stylesheet, /display\s*:\s*none[^;]*;[^}]*cmplz/i);
 });
-
-test("How to buy covers both directions and removes unreliable destinations", async () => {
-  const javascript = await source("assets/calorieapp-site-polish.js");
-
-  assert.match(javascript, /if \(id !== 4205\) return/);
-  assert.match(javascript, /Buy or sell CAL in four clear steps/);
-  assert.match(javascript, /CAL[^\n]+XRP/);
-  assert.match(javascript, /CAL[^\n]+RLUSD/);
-  assert.match(javascript, /xapp:xumm\.buysellxrp/);
-  assert.match(javascript, /Mainnet transaction submission stays unavailable/);
-  assert.doesNotMatch(javascript, /https:\/\/sologenic\.org/);
-  assert.doesNotMatch(javascript, /xapp:xumm\.dex/);
-});
diff --git a/tools/tests/wordpress_tokenomics.test.mjs b/tools/tests/wordpress_tokenomics.test.mjs
new file mode 100644
index 0000000..a77ab5d
--- /dev/null
+++ b/tools/tests/wordpress_tokenomics.test.mjs
@@ -0,0 +1,100 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+import vm from 'node:vm';
+import { createFaqDom, Node, shape, fromShape, locales } from '../fixtures/step3/faq-language-model.mjs';
+const base = new URL('../../wordpress-plugins/calorieapp-identity-bridge/', import.meta.url);
+const source = readFileSync(new URL('assets/calorieapp-tokenomics.js', base), 'utf8');
+const catalogue = JSON.parse(readFileSync(new URL('config/tokenomics.json', base)));
+const wallet = 'rEfiRssDCQd466z2bi63vi64u2rYiMrnhL';
+
+// Observed public Brizy IDs and chart title, reduced to insertion boundaries.
+// This is a DOM contract test, not browser rendering or installed WP acceptance.
+function harness({page=1209, url='https://calorietoken.net/index.php/tokenomics-update/', mutate, configure}={}) {
+  const h = createFaqDom(); h.body.setAttribute('class', 'brz page-id-'+page);
+  const make = (tag, attrs={}, text) => {
+    const n = new Node(tag, attrs);
+    n.after = sibling => {
+      sibling.remove(); sibling.parentNode = n.parentNode;
+      n.parentNode.childNodes.splice(n.parentNode.childNodes.indexOf(n)+1,0,sibling);
+    };
+    if (text !== undefined) n.appendChild(new Node('#text',{},text));
+    return n;
+  };
+  const root = make('div',{'data-brz-custom-id':'rmpolgctfmggclsdfezbyrgrptsoksmyibth'}); h.body.appendChild(root);
+  const container = make('div',{class:'brz-container'}); root.appendChild(container);
+  const chart = make('div',{class:'brz-wrapper'}); container.appendChild(chart);
+  const image = make('div',{'data-brz-custom-id':'dqvixegjsqsgfpehzvyzdhvvjusglgsaioai'}); chart.appendChild(image);
+  image.appendChild(make('img',{title:'Tokenomics update 2024 10',src:'https://calorietoken.net/wp-content/uploads/2024/10/Tokenomics-update-2024-10-1024x562.png',alt:''}));
+  const row = make('div',{'data-brz-custom-id':'qzyfxcwgwvmqaychwaxfgllbvrxwptqijdnb'}); container.appendChild(row);
+  row.appendChild(make('a',{href:'https://bithomp.com/explorer/rUWHYEdNVA7aMCqP5a4WLqtqPAAYd58K83'},'Original developer wallet'));
+  const config={publicPage:true,initialLocale:'en',locales,copy:structuredClone(catalogue.translations)}; configure?.(config);
+  const events = new Map();
+  const listen=(type,fn)=>{if(!events.has(type))events.set(type,[]);events.get(type).push(fn);};
+  h.document.createElement=make;h.document.createTextNode=text=>new Node('#text',{},text);
+  h.document.getElementById=id=>h.document.querySelector('[id="'+id+'"]');
+  h.document.readyState='complete';h.document.addEventListener=listen;
+  const window={location:{href:url},calorieappSitePolish:{tokenomics:config},addEventListener:listen,
+    dispatchEvent:e=>(events.get(e.type)||[]).forEach(fn=>fn(e)),
+    fetch(){throw Error('No requests');},setInterval(){throw Error('No polling');},
+    localStorage:{setItem(){throw Error('No independent preference storage');}}};
+  Object.assign(h,{make,root,container,chart,image,row,window,config});mutate?.(h);
+  h.before={chart:shape(chart),row:shape(row),controls:shape(h.controls)};
+  const context=vm.createContext({window,document:h.document,URL,Event});
+  h.run=()=>vm.runInContext(source,context);h.run();
+  h.fire=type=>window.dispatchEvent(new Event(type));
+  h.status=()=>h.document.getElementById('calorieapp-tokenomics-status');
+  h.panel=()=>h.document.getElementById('calorieapp-consolidation-wallet');
+  return h;
+}
+
+test('wallet and completion context are additive, read-only and idempotent',()=>{
+ const h=harness();const api=h.window.CalorieAppTokenomics;
+ assert.equal(h.container.childNodes.indexOf(h.status()),h.container.childNodes.indexOf(h.chart)+1);
+ assert.equal(h.container.childNodes.indexOf(h.panel()),h.container.childNodes.indexOf(h.row)+1);
+ const link=h.panel().querySelector('a');assert.equal(link.getAttribute('href'),'https://xpmarket.com/wallet/'+wallet);
+ assert.equal(link.getAttribute('target'),'_blank');assert.equal(link.getAttribute('rel'),'noopener noreferrer');
+ assert.equal(h.panel().querySelector('code').textContent,wallet);assert.equal(h.panel().querySelector('code').getAttribute('dir'),'ltr');
+ assert.match(h.status().textContent,/All airdrops are completed/);assert.match(h.panel().textContent,/2026-09-09/);
+ h.fire('load');h.fire('pageshow');h.run();assert.equal(h.window.CalorieAppTokenomics,api);
+ assert.equal(h.container.querySelectorAll('.calorieapp-tokenomics-note').length,2);
+ assert.deepEqual(shape(h.chart),h.before.chart);assert.deepEqual(shape(h.row),h.before.row);assert.deepEqual(shape(h.controls),h.before.controls);
+ assert.equal(h.panel().querySelector('button,input,form,iframe'),null);
+});
+
+test('all eleven prepared locales affect owned notes only and preserve address and destination',()=>{
+ assert.equal(catalogue.release_approved,false);assert.equal(catalogue.review_status,'prepared-unreviewed');
+ assert.deepEqual(Object.keys(catalogue.translations),locales.map(x=>x.tag));
+ const h=harness();for(const l of locales){h.window.CalorieAppTokenomics.setLocale(l.tag);
+  assert.equal(h.status().getAttribute('lang'),l.tag);assert.equal(h.panel().getAttribute('dir'),l.direction);
+  assert.equal(h.panel().querySelector('h2').textContent,catalogue.translations[l.tag].walletTitle);
+  assert.equal(h.panel().querySelector('code').textContent,wallet);
+  assert.deepEqual(shape(h.chart),h.before.chart);assert.deepEqual(shape(h.row),h.before.row);assert.deepEqual(shape(h.controls),h.before.controls);
+ }
+});
+
+test('unknown or incomplete locale falls back wholly to English; text is never interpreted as markup',()=>{
+ const h=harness();h.window.CalorieAppTokenomics.setLocale('unknown');assert.equal(h.panel().getAttribute('lang'),'en');
+ delete h.config.copy.nl.status;h.window.CalorieAppTokenomics.setLocale('nl');assert.equal(h.status().getAttribute('lang'),'en');
+ h.config.copy.en.description='<img src=x onerror=alert(1)>';h.window.CalorieAppTokenomics.refresh();
+ assert.equal(h.panel().querySelector('img'),null);assert.match(h.panel().textContent,/<img src=x/);
+});
+
+test('other routes, editor/private/form contexts and ambiguous source do not receive helpers',()=>{
+ const cases=[{page:1090},{url:'https://example.org/index.php/tokenomics-update/'},{url:'https://calorietoken.net/index.php/tokenomics-update/?preview=true'},
+  {configure:c=>c.publicPage='true'},{configure:c=>delete c.copy.en},
+  {mutate:h=>h.body.setAttribute('class','brz brz-ed page-id-1209')},
+  {mutate:h=>h.form.appendChild(h.root)},{mutate:h=>h.root.appendChild(h.make('input'))},
+  {mutate:h=>h.body.appendChild(fromShape(shape(h.root)))},
+  {mutate:h=>h.image.querySelector('img').setAttribute('title','A different chart')},
+  {mutate:h=>h.row.remove()},{mutate:h=>h.root.appendChild(h.chart)}];
+ for(const c of cases){const h=harness(c);assert.equal(h.status(),null);assert.equal(h.panel(),null);assert.deepEqual(shape(h.controls),h.before.controls);}
+});
+
+test('late source mounts on load and replacement reattaches without changing native content',()=>{
+ const h=harness({mutate:h=>h.row.remove()});assert.equal(h.panel(),null);
+ h.container.appendChild(h.row);h.fire('load');assert.ok(h.panel());
+ const old=h.panel();h.row.remove();h.window.CalorieAppTokenomics.refresh();assert.equal(h.panel(),null);assert.equal(old.parentElement,null);
+ h.container.appendChild(h.row);h.fire('pageshow');assert.ok(h.panel());assert.notEqual(h.panel(),old);
+ assert.deepEqual(shape(h.row),h.before.row);assert.deepEqual(shape(h.chart),h.before.chart);
+});
diff --git a/tools/tests/wordpress_trustline.test.mjs b/tools/tests/wordpress_trustline.test.mjs
new file mode 100644
index 0000000..3d7a987
--- /dev/null
+++ b/tools/tests/wordpress_trustline.test.mjs
@@ -0,0 +1,217 @@
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import test from "node:test";
+import vm from "node:vm";
+import { Node, shape, locales } from "../fixtures/step3/faq-language-model.mjs";
+
+const base = new URL("../../wordpress-plugins/calorieapp-identity-bridge/", import.meta.url);
+const script = readFileSync(new URL("assets/calorieapp-site-polish.js", base), "utf8");
+const catalogue = JSON.parse(readFileSync(new URL("config/trustline.json", base)));
+const block = "nrsbytvlhdquaddotxqmaeiihmzfbcufpmhr";
+const issuer = "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY";
+const currency = "43616C6F72696500000000000000000000000000";
+const settle = () => new Promise(resolve => setImmediate(resolve));
+
+// Full production script, synthetic DOM/clipboard and queued mutations.
+// No browser layout, WordPress service, wallet payload or signature is executed.
+function harness({ ready = true, publicPage = true, page = 1205,
+  url = "https://calorietoken.net/index.php/trustline/", late = false,
+  write, configure, protect } = {}) {
+  const observers = [], events = new Map(), copies = [];
+  function emit(record) {
+    for (const observer of observers) {
+      if (!observer.target?.contains(record.target)) continue;
+      if (record.type === "attributes" && !observer.options.attributeFilter.includes(record.attributeName)) continue;
+      observer.records.push(record);
+    }
+  }
+  class Element extends Node {
+    constructor(...args) {
+      super(...args);
+      this.dataset = {};
+      this.classList.add = name => {
+        if (!this.classList.contains(name)) this.setAttribute("class", ((this.getAttribute("class") || "") + " " + name).trim());
+      };
+      this.classList.remove = name => {
+        const result = (this.getAttribute("class") || "").split(/\s+/).filter(x => x !== name).join(" ");
+        if (result) this.setAttribute("class", result); else this.removeAttribute("class");
+      };
+    }
+    get data() { return this._data; }
+    set data(value) { const old = this._data; this._data = value; if (old !== undefined && old !== value) emit({ type: "characterData", target: this }); }
+    get textContent() { return super.textContent; }
+    set textContent(value) { for (const child of [...this.childNodes]) child.remove(); if (value) this.appendChild(new Element("#text", {}, String(value))); }
+    setAttribute(name, value) { const old = this.getAttribute(name); super.setAttribute(name, value); if (old !== String(value)) emit({ type: "attributes", target: this, attributeName: name }); }
+    removeAttribute(name) { const old = this.getAttribute(name); super.removeAttribute(name); if (old !== null) emit({ type: "attributes", target: this, attributeName: name }); }
+    appendChild(node) { super.appendChild(node); emit({ type: "childList", target: this, addedNodes: [node], removedNodes: [] }); return node; }
+    append(...nodes) { nodes.forEach(node => this.appendChild(node)); }
+    insertBefore(node, reference) {
+      if (!reference) return this.appendChild(node);
+      node.remove(); const index = this.childNodes.indexOf(reference); assert.ok(index >= 0);
+      this.childNodes.splice(index, 0, node); node.parentNode = this;
+      emit({ type: "childList", target: this, addedNodes: [node], removedNodes: [] }); return node;
+    }
+    after(node) { this.parentNode.insertBefore(node, this.parentNode.childNodes[this.parentNode.childNodes.indexOf(this) + 1]); }
+    remove() { const parent = this.parentNode; super.remove(); if (parent) emit({ type: "childList", target: parent, addedNodes: [], removedNodes: [this] }); }
+    contains(node) { return node === this || this.childNodes.some(child => child.contains(node)); }
+    addEventListener(type, callback) { this.events ||= new Map(); if (!this.events.has(type)) this.events.set(type, []); this.events.get(type).push(callback); }
+    click() { const event = { defaultPrevented: false, preventDefault() { this.defaultPrevented = true; } }; for (const callback of this.events?.get("click") || []) callback(event); return event; }
+  }
+  for (const key of ["id", "className", "href", "type", "lang", "dir", "target"]) {
+    const attribute = key === "className" ? "class" : key;
+    Object.defineProperty(Element.prototype, key, { get() { return this.getAttribute(attribute) || ""; }, set(value) { this.setAttribute(attribute, value); } });
+  }
+  const make = (tag, attrs = {}, text) => { const node = new Element(tag, attrs); if (text !== undefined) node.appendChild(new Element("#text", {}, text)); return node; };
+  const document = { nodeType: 9, readyState: "complete" }, html = make("html", { lang: "en", dir: "ltr" });
+  html.parentNode = document;
+  const body = html.appendChild(make("body", { class: "brz page-id-" + page })); document.body = body;
+  const slot = body.appendChild(make("section"));
+  function sourceBlock() {
+    const root = make("div", { "data-brz-custom-id": block, lang: "en", dir: "ltr" });
+    const paragraphs = [issuer, currency].map(value => {
+      const p = root.appendChild(make("p")); p.appendChild(make("span", {}, value)); return p;
+    });
+    return { root, paragraphs };
+  }
+  const original = sourceBlock(); if (!late) slot.appendChild(original.root);
+  const alternatives = slot.appendChild(make("nav"));
+  alternatives.appendChild(make("a", { href: "https://xrpl.services/?issuer=" + issuer + "&currency=" + currency + "&limit=99994396006.88306" }, "Existing Xaman alternative"));
+  alternatives.appendChild(make("a", { href: "https://www.xrptoolkit.com/" }, "Existing Toolkit alternative"));
+  const controls = body.appendChild(make("aside"));
+  controls.appendChild(make("div", { class: "xl-card", "data-session-locale": "en" }, "Existing account"));
+  controls.appendChild(make("input", { name: "amount", value: "1.25" }));
+  controls.appendChild(make("div", { "data-consent": "denied" }, "Existing consent"));
+  const alternativesBefore = shape(alternatives), controlsBefore = shape(controls);
+  const textBefore = original.paragraphs.map(p => p.childNodes.map(shape));
+  const config = { locales, trustline: structuredClone(catalogue) }; configure?.(config);
+  document.querySelectorAll = selector => html.querySelectorAll(selector);
+  document.querySelector = selector => document.querySelectorAll(selector)[0] || null;
+  document.getElementById = id => document.querySelector('[id="' + id + '"]');
+  document.createElement = tag => { assert.ok(!["script", "iframe"].includes(tag)); return make(tag); };
+  document.addEventListener = () => {};
+  const window = { location: new URL(url), calorieappSitePolish: { trustlineReady: ready, trustlinePage: publicPage },
+    calorieappDisplayLanguageConfig: config,
+    addEventListener(type, callback) { if (!events.has(type)) events.set(type, []); events.get(type).push(callback); },
+    dispatchEvent(event) { for (const callback of events.get(event.type) || []) callback(event); },
+    fetch() { throw Error("No service call"); }, setInterval() { throw Error("No polling"); }, setTimeout() { throw Error("No timers"); } };
+  const navigator = { clipboard: { writeText(value) { copies.push(value); return write ? write(value) : Promise.resolve(); } } };
+  protect?.({ ...original, slot, body, make });
+  const context = vm.createContext({ window, document, navigator, URL, Event,
+    MutationObserver: class {
+      constructor(callback) { this.callback = callback; this.records = []; observers.push(this); }
+      observe(target, options) { this.target = target; this.options = options; }
+      disconnect() { this.target = null; this.records = []; }
+    } });
+  function flush() {
+    for (let i = 0; i < 25; i++) {
+      const pending = observers.filter(observer => observer.records.length);
+      if (!pending.length) return;
+      for (const observer of pending) observer.callback(observer.records.splice(0));
+    }
+    throw Error("Mutation observer loop");
+  }
+  const run = () => { vm.runInContext(script, context); flush(); }; run();
+  return { ...original, window, document, navigator, config, slot, make, copies, sourceBlock, run, flush,
+    buttons: () => document.querySelectorAll(".calorieapp-copy-button"),
+    statuses: () => document.querySelectorAll(".calorieapp-copy-status"),
+    link: () => document.getElementById("calorieapp-xaman-trustline"),
+    event(type) { window.dispatchEvent(new Event(type)); flush(); },
+    unchanged() {
+      assert.deepEqual(shape(alternatives), alternativesBefore); assert.deepEqual(shape(controls), controlsBefore);
+      assert.deepEqual(original.paragraphs.map(p => p.childNodes.map(shape)), textBefore);
+      assert.equal(original.root.lang, "en"); assert.equal(original.root.dir, "ltr");
+      assert.equal(html.lang, "en"); assert.equal(html.dir, "ltr");
+    } };
+}
+
+test("current CAL identifiers, native alternatives and strict readiness produce one accessible helper", async () => {
+  for (const ready of [false, undefined, "true", 1]) {
+    const h = harness({ ready: ready === undefined ? null : ready }); assert.equal(h.link(), null); assert.equal(h.buttons().length, 2);
+  }
+  const h = harness(); assert.equal(h.link().getAttribute("href"), "?xl-trustline"); assert.equal(h.link().click().defaultPrevented, false);
+  const buttons = h.buttons(); buttons.forEach(button => button.click()); await settle(); h.flush();
+  assert.deepEqual(h.copies, [issuer, currency]);
+  assert.deepEqual(h.statuses().map(node => node.textContent), ["Copied issuer.", "Copied currency code."]);
+  buttons.forEach(button => assert.equal(h.document.getElementById(button.getAttribute("aria-describedby")).getAttribute("role"), "status"));
+  h.event("load"); h.event("pageshow"); h.run(); assert.deepEqual(h.buttons(), buttons);
+  assert.equal(h.document.querySelectorAll(".calorieapp-xaman-trustline").length, 1); h.unchanged();
+});
+
+test("eleven helper locales follow pending copies without another write or changing source direction", async () => {
+  assert.equal(catalogue.release_approved, false); assert.deepEqual(Object.keys(catalogue.translations), locales.map(item => item.tag));
+  for (const locale of locales) {
+    let resolve; const h = harness({ write: () => new Promise(done => { resolve = done; }) }), button = h.buttons()[0];
+    button.click(); button.click(); assert.equal(h.copies.length, 1); assert.equal(button.disabled, true);
+    assert.equal(button.getAttribute("aria-busy"), "true");
+    h.window.CalorieAppTrustline.setLocale(locale.tag); h.flush();
+    assert.equal(button.textContent, catalogue.translations[locale.tag].copyIssuer);
+    assert.equal(button.parentElement.lang, locale.tag); assert.equal(button.parentElement.dir, locale.direction);
+    resolve(); await settle(); h.flush(); assert.equal(button.disabled, false);
+    assert.equal(h.statuses()[0].textContent, catalogue.translations[locale.tag].copiedIssuer);
+    assert.equal(h.link().getAttribute("aria-label"), catalogue.translations[locale.tag].signLabel);
+    assert.equal(h.link().getAttribute("href"), "?xl-trustline"); assert.equal(h.copies.length, 1); h.unchanged();
+  }
+});
+
+test("clipboard absent, synchronous throw and rejection give manual guidance without success claims", async () => {
+  for (const mode of ["missing", "throw", "reject"]) {
+    const h = harness({ write: () => { if (mode === "throw") throw Error("Denied"); return Promise.reject(Error("Denied")); } });
+    if (mode === "missing") delete h.navigator.clipboard;
+    h.window.CalorieAppTrustline.setLocale("nl"); h.buttons().forEach(button => button.click()); await settle(); h.flush();
+    assert.deepEqual(h.statuses().map(node => node.textContent), [catalogue.translations.nl.manualIssuer, catalogue.translations.nl.manualCurrency]);
+    assert.ok(h.buttons().every(button => !button.disabled && button.getAttribute("aria-busy") === null)); h.unchanged();
+  }
+});
+
+test("edits, duplicate identifiers and removed roots are checked at activation before mutation delivery", () => {
+  for (const change of [
+    h => { h.paragraphs[0].childNodes[0].childNodes[0].data = "Different issuer"; },
+    h => h.root.appendChild(h.make("p", {}, issuer)), h => h.root.remove(),
+    h => h.root.setAttribute("hidden", ""), h => h.root.setAttribute("data-brz-custom-id", "edited"),
+  ]) {
+    const h = harness(), button = h.buttons()[0], link = h.link(); change(h);
+    button.click(); assert.equal(h.copies.length, 0); assert.equal(link.click().defaultPrevented, true);
+    h.flush(); assert.equal(h.buttons().length, 0); assert.equal(h.link(), null);
+  }
+});
+
+test("lost readiness and edited or moved signing anchors cannot navigate to stale destinations", () => {
+  for (const change of [h => { h.window.calorieappSitePolish.trustlineReady = false; },
+    h => { h.link().href = "https://example.invalid/foreign"; }, h => { h.link().target = "_blank"; }, h => h.slot.appendChild(h.link())]) {
+    const h = harness(), old = h.link(); change(h); assert.equal(old.click().defaultPrevented, true); h.flush();
+    if (h.link()) assert.equal(h.link().getAttribute("href"), "?xl-trustline");
+    assert.equal(h.copies.length, 0); h.unchanged();
+  }
+});
+
+test("late and replaced blocks ignore obsolete async results and resume after back/forward", async () => {
+  let resolve; const h = harness({ late: true, write: () => new Promise(done => { resolve = done; }) });
+  h.window.CalorieAppTrustline.setLocale("ur"); assert.equal(h.buttons().length, 0);
+  h.slot.appendChild(h.root); h.flush(); assert.equal(h.buttons()[0].parentElement.lang, "ur");
+  h.buttons()[0].click(); const oldStatus = h.statuses()[0];
+  h.root.remove(); const replacement = h.sourceBlock(); h.slot.appendChild(replacement.root); h.flush();
+  const replacementButton = h.buttons()[0]; resolve(); await settle(); h.flush();
+  assert.equal(oldStatus.textContent, ""); assert.equal(h.statuses()[0].textContent, "");
+  assert.equal(h.buttons()[0], replacementButton); assert.equal(h.copies.length, 1);
+  h.event("pagehide"); replacement.root.remove(); h.event("pageshow"); assert.equal(h.buttons().length, 0);
+  h.slot.appendChild(replacement.root); h.flush(); assert.equal(h.buttons().length, 2); h.unchanged();
+});
+
+test("other routes, editor/private contexts, forms and ambiguous blocks retain their original content", () => {
+  const options = [{page: 1090}, {publicPage: false}, {publicPage: "true"}, {publicPage: 1},
+    ...["http://calorietoken.net/trustline/", "https://example.invalid/trustline/", "https://calorietoken.net/index.php/contact/", "https://user@calorietoken.net/trustline/", "https://calorietoken.net/trustline/?preview=true", "https://calorietoken.net/trustline/?ui_lang[]=nl"].map(url => ({url})),
+    {protect: ({body}) => body.classList.add("brz-ed")},
+    ...["form", "div"].map(tag => ({protect: ({root, slot, make}) => { const parent = slot.appendChild(make(tag, tag === "div" ? {class: "xl-card"} : {})); parent.appendChild(root); }})),
+    ...["hidden", "inert", "contenteditable"].map(attribute => ({protect: ({root}) => root.setAttribute(attribute, "")})),
+    {protect: ({root, make}) => root.appendChild(make("form"))},
+    {protect: ({slot, make}) => slot.appendChild(make("div", {"data-brz-custom-id": block}))}];
+  for (const option of options) { const h = harness(option); h.event("load"); h.event("pageshow"); assert.equal(h.buttons().length, 0); assert.equal(h.link(), null); assert.equal(h.copies.length, 0); h.unchanged(); }
+});
+
+test("incomplete or unknown locale falls back as a whole and translations are literal text", () => {
+  const h = harness({configure: config => { delete config.trustline.translations.nl.signLabel; config.trustline.translations.fr.copyIssuer = "<img src=x>"; }});
+  for (const locale of ["nl", "unsupported"]) { h.window.CalorieAppTrustline.setLocale(locale); assert.equal(h.buttons()[0].textContent, "Copy issuer"); assert.equal(h.link().lang, "en"); }
+  h.window.CalorieAppTrustline.setLocale("fr"); assert.equal(h.buttons()[0].textContent, "<img src=x>"); assert.equal(h.buttons()[0].querySelector("img"), null);
+  h.config.locales = {}; h.window.CalorieAppTrustline.setLocale("fr"); assert.equal(h.buttons()[0].textContent, "Copy issuer");
+  h.unchanged();
+});
diff --git a/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md b/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
index 3604284..89d3e02 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
@@ -51,6 +51,24 @@ Pending status checks begin at five-second intervals, slow to ten seconds after
 to at most 30 seconds and bounded `Retry-After` guidance is respected. Focus and
 page-show events cannot bypass an already scheduled retry.
 
+## Development display-language preview
+
+The optional `CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW` constant must be the boolean
+`true`; it is off by default. Its selector uses one display preference and never
+sets the authentication locale. The separately built CalorieApp preview uses
+`NEXT_PUBLIC_CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW=1` for its corresponding control.
+
+Candidate 0.3.33 also includes a two-paragraph FAQ sample. The extra adapter and
+catalogue load only on the configured public FAQ page, for GET outside content
+previews, password protection and unknown query contexts. Exact client-side
+source/page matching remains required. This is not an automatic site translator;
+all eleven sample translations remain unreviewed. No extra setting, service or
+storage is introduced for the sample. Disable the preview constant, clear affected
+page caches when used and reload to restore the original stored text while
+retaining identity functionality.
+These instructions describe local development behavior, not live activation
+approval. See the repository's display-language contract and Step 3 checkpoint.
+
 ## Security requirements
 
 - Require HTTPS for non-loopback URLs.
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index 1be2276..b594c39 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,6 +41,115 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
+## Current local candidate: 0.3.40
+
+The full owned How to Buy/sell guide now follows the same optional display
+choice in eleven prepared languages. Its updated public copy includes the full
+CAL currency code, reserves/fees, Xaman regional-provider guidance, selling and
+separate bank withdrawals, exact-issuer checks, RLUSD trustline guidance and
+liquidity conflicts. It presents external trading as the current route. Site
+fonts, modest corners, wrapping, 44px links and RTL direction replace the earlier
+inconsistent guide styles. The public-page/source guards retain edited CMS,
+identity values, links and form/account state. No signing or quote call is added.
+130 local tests pass; PHP, hosted CI, native/mobile and linguistic acceptance
+remain open. Source/release clearance is unchanged; no installation is claimed.
+
+## Previous Tokenomics cycle: 0.3.39
+
+Tokenomics receives an additive consolidation-wallet panel, dated CAL/XRP LP
+interest disclosure, and operator-confirmed completion of all airdrops beside
+the unchanged published chart. Eleven prepared helper translations use the same
+optional display preference. Only public page 1209 receives the helper; original
+wallet controls, session code and financial handlers are retained. Exact giveaway
+figures remain a separate reconciliation task. 125 local tests pass; PHP, hosted
+CI, native/mobile and linguistic acceptance remain open. This is not installed.
+
+## Previous Trustline cycle: 0.3.38 rebuilt
+
+The Trustline follow-up was rebuilt from preserved 0.3.37 after the previous
+unreleased 0.3.38 artifact became unavailable. Copy/sign activation rechecks the
+current issuer/currency source. Clipboard failures provide manual guidance and
+pending actions cannot duplicate a write. Eleven prepared helper translations
+use the existing optional display store; full page/legal translations remain
+open. The separate public-page marker does not change native signing readiness.
+119 local tests pass; PHP, hosted CI and native/browser acceptance remain open.
+
+This is an unreleased Step 3 repair candidate, not a completed website release.
+It reconciles the existing presentation work, adds scoped page enhancements,
+and retains the accepted authentication/session controllers. The How to Buy
+replacement requires an exact match to the captured old markup; later CMS edits
+and translations are not overwritten. The optional CAL TrustSet link requires
+server confirmation of the existing handler and matching CAL parameters. No
+credential is passed to the browser and presentation creates no payload.
+
+The page ending now provides one CalorieApp information component across public
+page types, with eleven-locale copy and a verified site app link. The app page
+uses an informational label instead of reloading its own embed. No private
+account values, app fetches, new cookies or tracking are added to the component.
+
+Reviewed Brizy footer markup is replaced in the rendered page by the shared
+social/legal footer. Stored content is retained. Unrecognized copy, links or
+controls keep their original footer; later CMS changes restore a formerly
+matched footer. A dedicated market card moves to the shared ending instead of
+overlapping the team section. Mixed account/payment shortcodes and forms remain
+in place. The existing market request is reused; archive/search pages do not
+gain a new market card or request. Admin, feed, embed, AJAX and REST responses
+receive no public page furniture.
+
+The separate design-only DEX registry has dated validated-ledger identity
+evidence and checksum/issuer tests. No first-party trading or mainnet submission
+is enabled. The source-clearance contract still blocks public distribution;
+ordinary local builds do not clear that gate. New PHP fixture execution, exact
+head CI, rendered acceptance and approval remain outstanding.
+
+Version 0.3.37 restores the previously reported Richlist and donation/CMP work
+from the recovered 0.3.34 source baseline. Richlist handles late, replaced,
+removed or ambiguous own-row markers and rechecks before accessible focus/scroll.
+Shared shortcut labels and Richlist helper labels follow the existing optional
+display preview in eleven prepared languages. Missing or edited replacement
+shortcuts restore native controls; replacement scroll buttons bind once. Original
+artwork, destinations and accepted session handlers are retained. Donation/CMP
+CSS aligns type, corners, wrapping and focus without changing native behavior.
+
+The shared local/CI check command is
+`python3 tools/check_step3_candidate.py --require-php` from the source repository.
+This candidate has 113 passing Node/Python tests, but missing PHP is explicitly
+INCOMPLETE and fails that gate. Native mobile/session/donation/consent and
+linguistic acceptance remain open.
+
+See `docs/STEP_3_REPAIR_CHECKPOINT.md` and `docs/STEP_3_PRESENTATION_RELEASE.md`
+in the source repository for the full open-item inventory. Restore the previously
+accepted artifact for an approved rollback; do not disable the whole companion
+plugin merely to undo presentation, because it also supplies identity features.
+
+The display-language preview introduced in 0.3.32 defaults off. When its explicit development
+switch and the matching app switch are enabled, both native selectors share a
+display-only preference and the translated app-information component responds.
+The preference contains only the locale and timestamp for at most 30 days in
+first-party browser storage. No authentication locale, cookie consent, account,
+provider endpoint or payment handler is changed. Full page/legal translation
+and real PHP/browser acceptance remain open. See the repository's
+`contracts/display-language/v1/README.md` for scope and activation details.
+
+Version 0.3.33 connects one FAQ question/answer sample to that same store. The
+additional adapter/catalogue load only for public GET requests of the known
+published FAQ page, outside previews and unknown query contexts. Both paragraphs
+must match their captured text/structure before existing text nodes change.
+Edited source stays intact. The eleven draft translations are not approved
+full-page translations. Disable the preview flag, clear affected page caches
+when used and reload to undo the sample without disabling identity features. No stored CMS text is rewritten. Package
+and JavaScript checks pass locally; PHP/browser and source clearance remain open.
+
+Version 0.3.34 adds a native cookie-settings button, profile link and explanation
+in the observed Blog shortcode even if its X anchor/frame is absent. Three helper
+strings follow the public WP locale or shared display preview in eleven prepared
+languages. The original coloured heading and native CMP/X subtree are retained;
+there is no second provider loader, consent change or paid service. Fifty-seven
+local maintenance tests pass; PHP, live timeline/CMP and actual visual/language
+acceptance remain open. The Roadmap correction still needs its exact source.
+
+## Earlier maintenance history
+
 Version 0.3.27 bundles the 0.3.26 candidate with the mobile screenshot findings.
 The shared header styles now apply to the actual XUMM shortcode before layout
 JavaScript runs, and a late-created account card is initialized once. Richlist
@@ -237,6 +346,7 @@ recommended for production browser-cookie reliability.
 - assets/calorieapp-site-session.js
 - assets/calorieapp-embed.css
 - config/locales.json
+- config/app-information.json
 - tests/bootstrap.php
 - tests/test-identity-bridge-rest.php
 - phpunit.xml.dist
diff --git a/wordpress-plugins/calorieapp-identity-bridge/THIRD_PARTY_NOTICES.md b/wordpress-plugins/calorieapp-identity-bridge/THIRD_PARTY_NOTICES.md
index 3bba8e4..97a8cdc 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/THIRD_PARTY_NOTICES.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/THIRD_PARTY_NOTICES.md
@@ -58,7 +58,21 @@ This is an existing project brand asset, not a newly drawn logo. Use of the mark
 on this project website was requested by the project owner; no broader rights
 to the mark are granted by the plugin's software licence.
 
-Source: https://drive.google.com/file/d/1FMepF9HinYi9Pd5AuR7BSOO6peY5gIPu/view
+Source: Private project design source. Its access URL is intentionally omitted
+from the public package; the project rights administrator retains the source
+record.
+
+## X profile mark
+
+`assets/calorieapp-site-polish.js` contains the monochrome X logo path from X's
+official brand toolkit, used solely to identify CalorieToken's X profile. The
+mark is not project-owned and is not licensed under the plugin's software
+licence.
+
+Source: https://about.x.com/en/who-we-are/brand-toolkit
+Asset: https://about.x.com/content/dam/about-twitter/x/brand-toolkit/x-logo.zip
+Retrieved: 2026-09-08. The original vector geometry is preserved; `currentColor`
+retains the surrounding website's monochrome icon colour.
 
 ## Source and contribution limitation
 
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-buy-guide-language.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-buy-guide-language.js
new file mode 100644
index 0000000..478b5fe
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-buy-guide-language.js
@@ -0,0 +1,56 @@
+(function () {
+  "use strict";
+  if (window.CalorieAppBuyGuide) return;
+  var config = window.calorieappSitePolish?.buyGuide;
+  if (config?.publicPage !== true) return;
+  var locale = config.initialLocale || "en";
+  var keys = ["eyebrow", "title", "intro", "assetLabel", "issuerLabel", "currencyLabel", "walletTitle", "walletText", "walletAction", "fundTitle", "fundText", "fundAction", "reserveText", "reserveAction", "trustTitle", "trustText", "trustAction", "tradeTitle", "tradeText", "tradeAction", "sellText", "marketTitle", "marketText", "pairType", "moduleTitle", "moduleText", "riskTitle", "riskText", "appText"];
+  var protectedNodes = "form,input,select,textarea,[contenteditable],.xl-card,[data-calorieapp-embed],[data-calorieapp-account]";
+  function copyFor(tag) {
+    var definition = config.locales?.find(function (item) { return item.tag === tag; });
+    var copy = definition && config.copy?.[tag];
+    if (!copy || !keys.every(function (key) { return typeof copy[key] === "string" && copy[key].trim(); })) return null;
+    return { tag: tag, dir: definition.direction === "rtl" ? "rtl" : "ltr", copy: copy };
+  }
+  function refresh() {
+    var url = new URL(window.location.href);
+    if (!["https://calorietoken.net", "https://www.calorietoken.net"].includes(url.origin)
+      || !["/index.php/how-to-buy-calorie/", "/how-to-buy-calorie/"].includes(url.pathname)
+      || Array.from(url.searchParams.keys()).some(function (key) { return key !== "ui_lang"; })
+      || !document.body?.classList.contains("page-id-4205") || document.querySelector(".brz-ed,#brz-ed-iframe")) return;
+    var roots = document.querySelectorAll(".cal-buy-guide");
+    var root = roots.length === 1 && roots[0];
+    if (!root || root.dataset.calorieappBuyGuide !== "1" || root.closest(protectedNodes)
+      || root.querySelector(protectedNodes)) return;
+    var selected = copyFor(locale) || copyFor("en");
+    var fields = Array.from(root.querySelectorAll("[data-cal-buy-copy]"));
+    if (!selected || fields.length !== keys.length + 1 || !keys.every(function (key) {
+      return fields.filter(function (node) { return node.getAttribute("data-cal-buy-copy") === key; }).length === (key === "pairType" ? 2 : 1);
+    })) return;
+    // Unknown CMS text or injected controls/links are not retranslated. The
+    // initial guide replacement still requires the exact reviewed old markup.
+    if (!fields.every(function (node) {
+      var key = node.getAttribute("data-cal-buy-copy");
+      return node.childNodes.length === 1 && node.childNodes[0].nodeType === 3
+        && Object.values(config.copy).some(function (copy) { return copy?.[key] === node.childNodes[0].data; });
+    })) return;
+    var identity = root.querySelector(".cal-buy-identity");
+    var values = identity && Array.from(identity.querySelectorAll("code"));
+    var expected = ["Calorie (CAL)", "rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY", "43616C6F72696500000000000000000000000000"];
+    if (!values || values.length !== expected.length || !values.every(function (node, i) { return node.textContent === expected[i]; })) return;
+    var links = Array.from(root.querySelectorAll("a"));
+    var destinations = ["https://xaman.app/", "https://xumm.app/detect/xapp:xumm.buysellxrp",
+      "https://xrpl.org/docs/concepts/accounts/reserves", url.origin + "/index.php/trustline/",
+      "https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY"];
+    if (links.length !== destinations.length || !links.every(function (link, i) { return link.getAttribute("href") === destinations[i]; })) return;
+    fields.forEach(function (node) { node.childNodes[0].data = selected.copy[node.getAttribute("data-cal-buy-copy")]; });
+    root.setAttribute("lang", selected.tag); root.setAttribute("dir", selected.dir);
+    root.setAttribute("aria-label", selected.copy.title);
+  }
+  window.CalorieAppBuyGuide = { refresh: refresh, setLocale: function (tag) { locale = tag; refresh(); } };
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", refresh, { once: true });
+  else refresh();
+  window.addEventListener("load", refresh, { once: true });
+  window.addEventListener("pageshow", refresh);
+  window.dispatchEvent(new Event("calorieapp:buy-guide-ready"));
+})();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-cms-language-preview.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-cms-language-preview.js
new file mode 100644
index 0000000..3ca1f76
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-cms-language-preview.js
@@ -0,0 +1,173 @@
+/* Two-paragraph FAQ experiment. Loaded only by the opt-in WordPress preview. */
+(function (root, factory) {
+  if (typeof module === "object" && module.exports) module.exports = factory();
+  else root.CalorieAppCmsLanguagePreview = factory();
+})(typeof window === "object" ? window : this, function () {
+  "use strict";
+
+  var protectedSelector = "form,a,button,input,select,textarea,[contenteditable],#wpadminbar,.brz-ed,.xl-card,.woocommerce,.cmplz-cookiebanner,[data-calorieapp-embed],[data-calorieapp-account]";
+
+  function snapshot(node) {
+    if (node.nodeType === 3) return node.data;
+    if (node.nodeType !== 1) return null;
+    return {
+      tag: node.tagName.toLowerCase(),
+      attributes: Array.from(node.attributes).map(function (attribute) {
+        return [attribute.name, attribute.value];
+      }).sort(function (a, b) { return a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0; }),
+      children: Array.from(node.childNodes).map(snapshot)
+    };
+  }
+
+  function textNodes(node) {
+    if (node.nodeType === 3) return [node];
+    return Array.from(node.childNodes).reduce(function (result, child) {
+      return result.concat(textNodes(child));
+    }, []);
+  }
+
+  function safeShape(shape, top) {
+    if (typeof shape === "string") return !top;
+    return shape && (top ? shape.tag === "p" : ["strong", "span"].indexOf(shape.tag) !== -1)
+      && Array.isArray(shape.attributes) && shape.attributes.every(function (attribute) {
+        return Array.isArray(attribute) && attribute.length === 2
+          && ["class", "style", "data-uniq-id", "data-generated-css", "lang", "dir"].indexOf(attribute[0]) !== -1
+          && typeof attribute[1] === "string";
+      }) && Array.isArray(shape.children) && shape.children.every(function (child) {
+        return safeShape(child, false);
+      });
+  }
+
+  function connect(options) {
+    var document = options.document, location = options.location;
+    var catalogue = options.catalogue, store = options.store;
+    var enabled = options.enabled === true;
+    var active = null, stopped = false, unsubscribe = function () {};
+    var result = { status: "disabled", locale: null };
+
+    function report(status, locale) {
+      result = { status: status, locale: locale || null };
+      return result;
+    }
+    function routeMatches() {
+      try {
+        var url = new URL(location.href);
+        return catalogue.origins.indexOf(url.origin) !== -1 && url.pathname === catalogue.pathname
+          && Array.from(url.searchParams.keys()).every(function (key) { return key === "ui_lang"; })
+          && document.body.classList.contains("page-id-" + catalogue.wordpress_id)
+          && !document.querySelector(".brz-ed");
+      } catch (_) { return false; }
+    }
+    function inScope(node) {
+      return node.isConnected && !node.closest(protectedSelector)
+        && node.parentElement && node.parentElement.tagName === "DIV"
+        && node.parentElement.getAttribute("data-brz-translate-text") === "1"
+        && node.parentElement.parentElement
+        && node.parentElement.parentElement.classList.contains("brz-rich-text");
+    }
+    function unchanged(entry) {
+      if (!inScope(entry.node) || entry.node.parentElement !== entry.parent
+        || JSON.stringify(snapshot(entry.node)) !== entry.expected) return false;
+      var matches = document.querySelectorAll('p[data-uniq-id="' + entry.id + '"]');
+      if (matches.length !== 1 || matches[0] !== entry.node) return false;
+      var current = textNodes(entry.node);
+      return current.length === entry.texts.length && current.every(function (node, index) {
+        return node === entry.texts[index];
+      });
+    }
+    function restore() {
+      if (!active) return;
+      active.forEach(function (entry) {
+        // Never overwrite an edited/replaced node or a node moved into a form.
+        if (!unchanged(entry)) return;
+        entry.texts.forEach(function (node, index) { node.data = entry.original[index]; });
+        ["lang", "dir"].forEach(function (name) {
+          if (entry.attributes[name] === null) entry.node.removeAttribute(name);
+          else entry.node.setAttribute(name, entry.attributes[name]);
+        });
+      });
+      active = null;
+    }
+    function locate() {
+      var entries = [];
+      for (var slot of catalogue.slots) {
+        var matches = document.querySelectorAll('p[data-uniq-id="' + slot.element_id + '"]');
+        if (matches.length !== 1 || !inScope(matches[0])) return null;
+        var node = matches[0];
+        var signature = JSON.stringify(snapshot(node));
+        if (signature !== JSON.stringify(slot.source)) return null;
+        if (entries.length && node.parentElement !== entries[0].parent) return null;
+        var texts = textNodes(node);
+        entries.push({
+          key: slot.key, id: slot.element_id, node: node, parent: node.parentElement, texts: texts,
+          original: texts.map(function (text) { return text.data; }), expected: signature,
+          attributes: { lang: node.getAttribute("lang"), dir: node.getAttribute("dir") }
+        });
+      }
+      return entries;
+    }
+    function render(state) {
+      if (stopped) return result;
+      if (!routeMatches()) {
+        restore(); stopped = true; unsubscribe();
+        return report("outside-scope");
+      }
+      if (active && !active.every(unchanged)) {
+        restore(); stopped = true; unsubscribe();
+        return report("source-changed");
+      }
+      var translation = state && typeof state.locale === "string"
+        && Object.prototype.hasOwnProperty.call(catalogue.translations, state.locale)
+        ? catalogue.translations[state.locale] : null;
+      if (!translation || translation.copy_version !== catalogue.copy_version
+        || translation.direction !== (["ar", "ur"].indexOf(state.locale) !== -1 ? "rtl" : "ltr")
+        || !translation.slots || typeof translation.slots !== "object") {
+        restore(); return report("translation-pending");
+      }
+      var entries = active || locate();
+      if (!entries) return report("source-pending");
+      // Validate the whole question/answer before changing any text node.
+      var valid = entries.every(function (entry) {
+        var values = translation.slots[entry.key];
+        return Array.isArray(values) && values.length === entry.texts.length
+          && values.every(function (value) { return typeof value === "string"; })
+          && values.some(function (value) { return value.trim() !== ""; });
+      });
+      if (!valid) { restore(); return report("translation-pending"); }
+      active = entries;
+      entries.forEach(function (entry) {
+        entry.texts.forEach(function (node, index) { node.data = translation.slots[entry.key][index]; });
+        entry.node.setAttribute("lang", state.locale);
+        entry.node.setAttribute("dir", translation.direction);
+        entry.expected = JSON.stringify(snapshot(entry.node));
+      });
+      return report("preview", state.locale);
+    }
+
+    var api = {
+      get: function () { return { status: result.status, locale: result.locale }; },
+      refresh: function () { return enabled && !stopped ? render(store.get()) : api.get(); },
+      disconnect: function () { unsubscribe(); restore(); stopped = true; report("disconnected"); }
+    };
+    if (!enabled) return api;
+    if (!catalogue || catalogue.schema_version !== 1 || catalogue.mode !== "opt-in-development-preview"
+      || !Number.isInteger(catalogue.wordpress_id) || catalogue.wordpress_id <= 0
+      || !Array.isArray(catalogue.origins) || !catalogue.origins.length
+      || typeof catalogue.pathname !== "string" || typeof catalogue.copy_version !== "string"
+      || !catalogue.copy_version || !catalogue.translations
+      || !Array.isArray(catalogue.slots) || catalogue.slots.length !== 2
+      || !catalogue.slots.every(function (slot) {
+        return slot && ["question", "answer"].indexOf(slot.key) !== -1
+          && typeof slot.element_id === "string" && /^[a-zA-Z0-9_-]+$/.test(slot.element_id)
+          && safeShape(slot.source, true);
+      }) || new Set(catalogue.slots.map(function (slot) { return slot.key; })).size !== 2
+      || new Set(catalogue.slots.map(function (slot) { return slot.element_id; })).size !== 2
+      || !store || typeof store.subscribe !== "function" || typeof store.get !== "function") {
+      stopped = true; report("invalid-catalogue"); return api;
+    }
+    render(store.get());
+    if (!stopped) unsubscribe = store.subscribe(render);
+    return api;
+  }
+  return { connect: connect };
+});
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language-runtime.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language-runtime.js
new file mode 100644
index 0000000..b5c1133
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language-runtime.js
@@ -0,0 +1,179 @@
+/* Display-language preferences only. No identity, consent or payment messages. */
+(function (root, factory) {
+  if (typeof module === "object" && module.exports) module.exports = factory();
+  else root.CalorieAppDisplayLanguage = factory();
+})(typeof globalThis === "object" ? globalThis : this, function () {
+  "use strict";
+  var prefix = "calorieapp:display-language:";
+  var storageKey = "calorieapp.display-language.v1";
+  var lifetime = 30 * 24 * 60 * 60 * 1000;
+  function record(value, keys) {
+    return value && typeof value === "object" && !Array.isArray(value)
+      && Object.keys(value).length === keys.length
+      && keys.every(function (key) { return Object.prototype.hasOwnProperty.call(value, key); });
+  }
+  function identifier(value) { return typeof value === "string" && /^[a-zA-Z0-9-]{16,64}$/.test(value); }
+  function integer(value) { return Number.isSafeInteger(value) && value >= 0; }
+  function origin(value) {
+    try { var url = new URL(value); return url.protocol === "https:" && url.origin === value; }
+    catch (_) { return false; }
+  }
+  function createStore(options) {
+    var tags = options.locales.slice();
+    var valid = function (value) { return typeof value === "string" && tags.indexOf(value) !== -1; };
+    if (!valid(options.fallback)) throw new Error("Invalid display fallback");
+    var now = options.now || Date.now, storage = options.storage, listeners = new Set();
+    var state = { locale: valid(options.initialLocale) ? options.initialLocale : options.fallback, explicit: false };
+    try {
+      var saved = JSON.parse(storage.getItem(storageKey));
+      if (record(saved, ["locale", "savedAt"]) && valid(saved.locale)
+          && Number.isFinite(saved.savedAt) && saved.savedAt <= now() && now() - saved.savedAt < lifetime) {
+        state = { locale: saved.locale, explicit: true };
+      } else if (saved !== null) storage.removeItem(storageKey);
+    } catch (_) { /* Storage denial never blocks the language control. */ }
+    function update(locale, explicit, source) {
+      if (!valid(locale) || typeof explicit !== "boolean") return false;
+      var changed = state.locale !== locale || state.explicit !== explicit;
+      state = { locale: locale, explicit: explicit };
+      // Persist only a new explicit choice, not every page load or host sync.
+      if (explicit && changed) {
+        try { storage.setItem(storageKey, JSON.stringify({ locale: locale, savedAt: now() })); }
+        catch (_) { /* In-memory selection still works. */ }
+      }
+      if (changed) listeners.forEach(function (listener) { listener(state, source); });
+      return changed;
+    }
+    return {
+      get: function () { return { locale: state.locale, explicit: state.explicit }; },
+      valid: valid,
+      select: function (locale) { return update(locale, true, "local"); },
+      apply: function (locale, explicit) { return update(locale, explicit, "remote"); },
+      subscribe: function (listener) { listeners.add(listener); return function () { listeners.delete(listener); }; }
+    };
+  }
+  function connectHost(options) {
+    if (!identifier(options.epoch)) throw new Error("Invalid display epoch");
+    var peers = new Map(), revision = 0, closed = false;
+    function trusted(event) {
+      return options.frames().find(function (frame) {
+        return origin(frame.origin) && frame.origin === event.origin && frame.window === event.source;
+      });
+    }
+    function send(peer) {
+      if (closed || !trusted({ source: peer.window, origin: peer.origin })) return;
+      var state = options.store.get();
+      peer.window.postMessage({
+        type: prefix + "state", version: 1, channel: peer.channel,
+        epoch: options.epoch, revision: revision, ack: peer.sequence,
+        locale: state.locale, explicit: state.explicit
+      }, peer.origin);
+    }
+    function message(event) {
+      var data = event.data;
+      if (closed || !trusted(event) || !data || data.version !== 1 || !identifier(data.channel)) return;
+      if (data.type === prefix + "ready" && record(data, ["type", "version", "channel"])) {
+        var prior = peers.get(event.source);
+        var peer = prior && prior.channel === data.channel ? prior : {
+          window: event.source, origin: event.origin, channel: data.channel, sequence: 0
+        };
+        peers.set(event.source, peer);
+        send(peer);
+        return;
+      }
+      var peer = peers.get(event.source);
+      if (!peer || data.type !== prefix + "request"
+          || !record(data, ["type", "version", "channel", "epoch", "sequence", "revision", "locale"])
+          || data.channel !== peer.channel || data.epoch !== options.epoch
+          || !integer(data.sequence) || data.sequence <= peer.sequence
+          || !integer(data.revision) || !options.store.valid(data.locale)) return;
+      peer.sequence = data.sequence;
+      if (data.revision === revision) options.store.apply(data.locale, true);
+      // A stale revision is acknowledged with current state, never applied.
+      send(peer);
+    }
+    function announce() {
+      if (closed) return;
+      options.frames().forEach(function (frame) {
+        if (origin(frame.origin)) frame.window.postMessage({ type: prefix + "hello", version: 1 }, frame.origin);
+      });
+    }
+    var unsubscribe = options.store.subscribe(function () {
+      revision += 1;
+      peers.forEach(function (peer, key) {
+        if (!trusted({ source: peer.window, origin: peer.origin })) peers.delete(key);
+        else send(peer);
+      });
+    });
+    options.window.addEventListener("message", message);
+    options.window.addEventListener("load", announce);
+    options.window.addEventListener("pageshow", announce);
+    announce();
+    return function () {
+      closed = true;
+      unsubscribe();
+      peers.clear();
+      options.window.removeEventListener("message", message);
+      options.window.removeEventListener("load", announce);
+      options.window.removeEventListener("pageshow", announce);
+    };
+  }
+  function connectGuest(options) {
+    if (!identifier(options.channel) || !options.origins.length
+        || !options.origins.every(origin)) throw new Error("Invalid display peer");
+    var host = null, revision = -1, sequence = 0, inFlight = 0, desired = null, closed = false;
+    function announce() {
+      if (!closed) options.origins.forEach(function (target) {
+        options.parent.postMessage({ type: prefix + "ready", version: 1, channel: options.channel }, target);
+      });
+    }
+    function flush() {
+      if (closed || !host || inFlight || desired === null) return;
+      inFlight = ++sequence;
+      options.parent.postMessage({
+        type: prefix + "request", version: 1, channel: options.channel,
+        epoch: host.epoch, sequence: inFlight, revision: revision, locale: desired
+      }, host.origin);
+    }
+    function message(event) {
+      var data = event.data;
+      if (!closed && event.source === options.parent && options.origins.indexOf(event.origin) !== -1
+          && record(data, ["type", "version"]) && data.type === prefix + "hello" && data.version === 1) {
+        announce();
+        return;
+      }
+      if (closed || event.source !== options.parent || options.origins.indexOf(event.origin) === -1
+          || !record(data, ["type", "version", "channel", "epoch", "revision", "ack", "locale", "explicit"])
+          || data.type !== prefix + "state" || data.version !== 1 || data.channel !== options.channel
+          || !identifier(data.epoch) || !integer(data.revision) || !integer(data.ack)
+          || data.ack > sequence || !options.store.valid(data.locale) || typeof data.explicit !== "boolean") return;
+      if (host && (host.origin !== event.origin || host.epoch !== data.epoch || data.revision < revision)) return;
+      host = { origin: event.origin, epoch: data.epoch };
+      revision = data.revision;
+      if (inFlight && data.ack >= inFlight) inFlight = 0;
+      if (desired !== null) {
+        if (inFlight) return;
+        if (data.locale !== desired) { flush(); return; }
+        desired = null;
+      }
+      options.store.apply(data.locale, data.explicit);
+    }
+    var unsubscribe = options.store.subscribe(function (state, source) {
+      if (source !== "local") return;
+      desired = state.locale;
+      flush();
+    });
+    options.window.addEventListener("message", message);
+    options.window.addEventListener("pageshow", announce);
+    // Also announce on load: the WP controller may load after the embedded app.
+    options.window.addEventListener("load", announce);
+    announce();
+    return function () {
+      closed = true;
+      unsubscribe();
+      options.window.removeEventListener("message", message);
+      options.window.removeEventListener("pageshow", announce);
+      options.window.removeEventListener("load", announce);
+    };
+  }
+  return { createStore: createStore, connectHost: connectHost, connectGuest: connectGuest };
+});
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.css
new file mode 100644
index 0000000..639474c
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.css
@@ -0,0 +1,28 @@
+.calorieapp-display-language[hidden] { display: none !important; }
+.calorieapp-display-language {
+  box-sizing: border-box;
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr);
+  align-items: center;
+  gap: 6px 10px;
+  max-width: 100%;
+  padding: 10px;
+  color: #505ba9;
+  background: #fff;
+  font: inherit;
+}
+.calorieapp-display-language label { margin: 0; font-weight: 700; }
+.calorieapp-display-language select {
+  box-sizing: border-box;
+  min-width: 0;
+  max-width: 100%;
+  min-height: 44px;
+  padding: 6px 10px;
+  border: 1px solid #505ba9;
+  border-radius: 4px;
+  background: #fff;
+  color: #505ba9;
+  font: inherit;
+}
+.calorieapp-display-language select:focus-visible { outline: 3px solid #f9b233; outline-offset: 2px; }
+.calorieapp-display-language p { grid-column: 1 / -1; margin: 0; font-size: 12px; line-height: 1.5; overflow-wrap: anywhere; }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
new file mode 100644
index 0000000..fa250d6
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
@@ -0,0 +1,117 @@
+(function () {
+  "use strict";
+  function boot() {
+    var panel = document.querySelector("[data-calorieapp-display-language]");
+    var runtime = window.CalorieAppDisplayLanguage;
+    var config = window.calorieappDisplayLanguageConfig;
+    if (!panel || !runtime || !config || panel.dataset.ready === "1" || document.querySelector(".brz-ed")) return;
+    if (!Array.isArray(config.locales) || !config.copy || !config.copy.en || !config.information) return;
+    panel.dataset.ready = "1";
+    var select = panel.querySelector("select");
+    var label = panel.querySelector("[data-calorieapp-language-label]");
+    var note = panel.querySelector("[data-calorieapp-language-note]");
+    var store = runtime.createStore({
+      locales: config.locales.map(function (item) { return item.tag; }),
+      fallback: "en", initialLocale: config.initialLocale,
+      storage: {
+        getItem: function (key) { return window.localStorage.getItem(key); },
+        setItem: function (key, value) { window.localStorage.setItem(key, value); },
+        removeItem: function (key) { window.localStorage.removeItem(key); }
+      }
+    });
+    function text(node, value) {
+      if (node && typeof value === "string" && node.textContent !== value) node.textContent = value;
+    }
+    function render(state) {
+      var definition = config.locales.find(function (item) { return item.tag === state.locale; });
+      var copy = config.copy[state.locale] || config.copy.en;
+      select.value = state.locale;
+      panel.lang = state.locale;
+      panel.dir = definition.direction;
+      text(label, copy.label);
+      text(note, copy.preview);
+      // Only the owned, already translated information component participates.
+      // The optional FAQ adapter owns its two matched paragraphs separately.
+      // Legal documents, account fields and authentication locale are untouched.
+      var info = document.querySelector("[data-calorieapp-app-info]");
+      var infoCopy = config.information[state.locale];
+      if (info && infoCopy) {
+        info.lang = state.locale;
+        info.dir = definition.direction;
+        text(info.querySelector("div > p"), infoCopy.description);
+        text(info.querySelector(".calorieapp-app-info-link"), infoCopy.action);
+        text(info.querySelector(".calorieapp-app-info-current"), infoCopy.on_page);
+      }
+      if (typeof window.CalorieAppBlogX?.setLocale === "function") window.CalorieAppBlogX.setLocale(state.locale);
+      if (typeof window.CalorieAppRichlist?.setLocale === "function") window.CalorieAppRichlist.setLocale(state.locale);
+      if (typeof window.CalorieAppPageNavigation?.setLocale === "function") window.CalorieAppPageNavigation.setLocale(state.locale);
+      if (typeof window.CalorieAppTrustline?.setLocale === "function") window.CalorieAppTrustline.setLocale(state.locale);
+      if (typeof window.CalorieAppTokenomics?.setLocale === "function") window.CalorieAppTokenomics.setLocale(state.locale);
+      if (typeof window.CalorieAppBuyGuide?.setLocale === "function") window.CalorieAppBuyGuide.setLocale(state.locale);
+    }
+    function place() {
+      var card = Array.from(document.querySelectorAll(".brz .xl-card")).find(function (node) {
+        return !node.closest("[data-calorieapp-embed],form");
+      });
+      if (card && panel.parentElement !== card) card.appendChild(panel);
+      panel.hidden = false;
+    }
+    select.addEventListener("change", function () {
+      store.select(select.value);
+      render(store.get());
+    });
+    store.subscribe(render);
+    render(store.get());
+    place();
+    var cms = config.cmsPreview && typeof window.CalorieAppCmsLanguagePreview?.connect === "function"
+      ? window.CalorieAppCmsLanguagePreview.connect({
+        enabled: true, document: document, location: window.location,
+        catalogue: config.cmsPreview, store: store
+      }) : null;
+    function refreshPage() {
+      place();
+      if (typeof window.CalorieAppBlogX?.setLocale === "function") window.CalorieAppBlogX.setLocale(store.get().locale);
+      if (typeof window.CalorieAppRichlist?.setLocale === "function") window.CalorieAppRichlist.setLocale(store.get().locale);
+      if (typeof window.CalorieAppPageNavigation?.setLocale === "function") window.CalorieAppPageNavigation.setLocale(store.get().locale);
+      if (typeof window.CalorieAppTrustline?.setLocale === "function") window.CalorieAppTrustline.setLocale(store.get().locale);
+      if (typeof window.CalorieAppTokenomics?.setLocale === "function") window.CalorieAppTokenomics.setLocale(store.get().locale);
+      if (typeof window.CalorieAppBuyGuide?.setLocale === "function") window.CalorieAppBuyGuide.setLocale(store.get().locale);
+      if (cms) cms.refresh();
+    }
+    window.addEventListener("load", refreshPage);
+    window.addEventListener("pageshow", refreshPage);
+    window.addEventListener("calorieapp:page-tools-ready", function () {
+      if (typeof window.CalorieAppPageNavigation?.setLocale === "function") window.CalorieAppPageNavigation.setLocale(store.get().locale);
+    });
+    window.addEventListener("calorieapp:trustline-ready", function () {
+      if (typeof window.CalorieAppTrustline?.setLocale === "function") window.CalorieAppTrustline.setLocale(store.get().locale);
+    });
+    window.addEventListener("calorieapp:tokenomics-ready", function () {
+      if (typeof window.CalorieAppTokenomics?.setLocale === "function") window.CalorieAppTokenomics.setLocale(store.get().locale);
+    });
+    window.addEventListener("calorieapp:buy-guide-ready", function () {
+      if (typeof window.CalorieAppBuyGuide?.setLocale === "function") window.CalorieAppBuyGuide.setLocale(store.get().locale);
+    });
+    if (cms) window.addEventListener("pagehide", function (event) {
+      // Keep the same connection for bfcache; pageshow rechecks its source.
+      if (!event.persisted) cms.disconnect();
+    });
+    if (typeof MutationObserver === "function") {
+      var observer = new MutationObserver(function () {
+        if (!panel.isConnected || !panel.closest(".xl-card")) place();
+      });
+      observer.observe(document.body, { childList: true, subtree: true });
+    }
+    if (typeof window.crypto?.randomUUID === "function") runtime.connectHost({
+      window: window, store: store, epoch: window.crypto.randomUUID(),
+      frames: function () {
+        return Array.from(document.querySelectorAll("[data-calorieapp-embed]")).map(function (root) {
+          var frame = root.querySelector(".calorieapp-embed-frame");
+          return frame && frame.contentWindow ? { window: frame.contentWindow, origin: root.dataset.appOrigin } : null;
+        }).filter(Boolean);
+      }
+    });
+  }
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", boot);
+  else boot();
+})();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
index e314a0f..999f04f 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.css
@@ -1,5 +1,10 @@
-/* Shared CAL card, page ending and missing shortcuts. Existing Brizy footers
-   stay stored in place; the companion adds only a deduplicated market card. */
+/* One public page ending. Reviewed legacy footers stay stored in Brizy;
+   only their rendered, safely matched counterparts are hidden. */
+.calorieapp-shared-page-ending[hidden],
+.calorieapp-shared-footer[hidden],
+.calorieapp-sitewide-market[hidden],
+[data-calorieapp-legacy-footer][hidden],
+[data-calorieapp-retired-market-slot][hidden] { display: none !important; }
 .calorieapp-shared-page-ending {
   box-sizing: border-box;
   width: 100%;
@@ -8,6 +13,44 @@
   font-family: Amiri, Georgia, "Times New Roman", serif;
 }
 .calorieapp-page-market { padding: 0 16px 32px; }
+.calorieapp-app-info {
+  display: grid;
+  grid-template-columns: 64px minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 20px;
+  box-sizing: border-box;
+  width: min(960px, calc(100% - 32px));
+  margin: 0 auto 32px;
+  padding: 20px 16px;
+  border-block-start: 2px solid #f9b233;
+  border-block-end: 2px solid #505ba9;
+  background: #fff;
+  color: #303449;
+  text-align: start;
+}
+.calorieapp-app-info > * { min-width: 0; max-width: 100%; }
+.calorieapp-app-info > img { width: 64px; height: 64px; object-fit: contain; }
+.calorieapp-app-info h2 { margin: 0 0 4px; color: #008d36; font: 700 28px/1.3 Amiri, Georgia, serif; }
+.calorieapp-app-info p { margin: 0; font: 18px/1.5 Amiri, Georgia, serif; overflow-wrap: anywhere; }
+.calorieapp-app-info-link {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  box-sizing: border-box;
+  min-height: 44px;
+  padding: 8px 16px;
+  border: 2px solid #505ba9;
+  border-radius: 4px;
+  background: #f9b233;
+  color: #303449 !important;
+  font: 700 18px/1.4 Amiri, Georgia, serif;
+  text-decoration: none !important;
+  text-align: center;
+  overflow-wrap: anywhere;
+}
+.calorieapp-app-info-link:hover { background: #fff; }
+.calorieapp-app-info-link:focus-visible { outline: 3px solid #008d36; outline-offset: 3px; }
+.calorieapp-app-info-current { max-width: 180px; }
 .calorieapp-shared-footer {
   box-sizing: border-box;
   width: 100%;
@@ -80,6 +123,7 @@
   line-height: 1;
   cursor: pointer;
 }
+[dir="rtl"] .calorieapp-shared-social-arrow { transform: scaleX(-1); }
 
 .calorieapp-shared-legal {
   width: min(100%, 1170px);
@@ -99,6 +143,7 @@
   font-weight: 700;
   text-decoration: underline !important;
 }
+.calorieapp-footer-no-script { padding: 16px; background: #505ba9; }
 
 .calorieapp-shared-social:hover,
 .calorieapp-shared-social:focus-visible,
@@ -246,6 +291,10 @@
 
 @media (max-width: 767px) {
   .calorieapp-shared-page-ending { margin-top: 24px; }
+  .calorieapp-app-info { grid-template-columns: 48px minmax(0, 1fr); gap: 12px; padding: 16px 12px; }
+  .calorieapp-app-info > img { width: 48px; height: 48px; }
+  .calorieapp-app-info-link,
+  .calorieapp-app-info-current { grid-column: 1 / -1; justify-self: start; max-width: 100%; }
   .calorieapp-shared-footer { padding: 20px 18px 26px; }
   .calorieapp-shared-socials { grid-template-columns: 42px minmax(0, 1fr) 42px; gap: 4px; }
   .calorieapp-shared-social { flex-basis: 100%; min-height: 76px; }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
index efc67e7..7102ee5 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-page-ending.js
@@ -79,10 +79,101 @@
     widget.setAttribute("data-state", "ready");
   }
 
+  function plainFooterText(value) {
+    return String(value || "").replace(/\s+/g, " ").trim();
+  }
+
+  function reviewedLegacyFooter(node, ending) {
+    if (node === ending || ending.contains(node) || node.contains(ending)) return false;
+    var copy = node.cloneNode(true);
+    // An operator name alone is not a footer signature. Never hide a form,
+    // account, image, custom destination or newly edited CMS paragraph.
+    if (copy.querySelector('form, input, select, textarea, iframe, img, video, audio, canvas, [contenteditable], .xl-card, [data-calorieapp-embed]')) return false;
+    if (Array.from(copy.querySelectorAll('button')).some(function (button) {
+      return !button.closest('.brz-carousel');
+    })) return false;
+    var allowedLinks = Array.from(ending.querySelectorAll('.calorieapp-shared-footer a')).map(function (link) {
+      return String(link.getAttribute('href') || '').replace(/\/$/, '');
+    });
+    allowedLinks.push('https://twitter.com/CalorieToken');
+    if (Array.from(copy.querySelectorAll('a')).some(function (link) {
+      return allowedLinks.indexOf(String(link.getAttribute('href') || '').replace(/\/$/, '')) === -1;
+    })) return false;
+    copy.querySelectorAll('script, style, svg, .brz-bg, .brz-carousel').forEach(function (item) { item.remove(); });
+    var text = plainFooterText(copy.textContent);
+    var operator = 'Operator: ICTHendrikse · KVK 73774693';
+    var copyright = /© \d{4} ICTHendrikse \(owned content only\) · CalorieToken® trade mark: Pieter Hendrikse/;
+    if (text.indexOf(operator) === -1 || !copyright.test(text)) return false;
+    return !plainFooterText(text.replace(operator, '').replace(copyright, '')
+      .replace('Calorie aims to be the world’s food token', '')
+      .replace('Privacy Policy', '').replace('Terms & Conditions', ''));
+  }
+
+  function positionSharedPageEnding() {
+    if (typeof document.querySelector !== 'function') return;
+    var ending = document.querySelector('[data-calorieapp-shared-page-ending]');
+    if (!ending) return;
+    if (document.body.classList.contains('brz-ed')) {
+      ending.hidden = true;
+      return;
+    }
+    var footer = ending.querySelector('.calorieapp-shared-footer');
+    if (!footer) return;
+    var regions = Array.from(document.querySelectorAll('.brz-section, footer, [role=contentinfo]'))
+      .filter(function (node) { return node !== ending && !ending.contains(node) && !node.contains(ending); });
+    regions.forEach(function (node) {
+      if (node.hasAttribute('data-calorieapp-legacy-footer') && !reviewedLegacyFooter(node, ending)) {
+        node.hidden = node.getAttribute('data-calorieapp-legacy-footer') === 'hidden';
+        node.removeAttribute('data-calorieapp-legacy-footer');
+      }
+    });
+    var known = regions.filter(function (node) { return reviewedLegacyFooter(node, ending); });
+    // Choose outermost matched sections so nested semantic markup is safe too.
+    known = known.filter(function (node) {
+      return !known.some(function (other) { return other !== node && other.contains(node); });
+    });
+    if (known.length) {
+      var anchor = known[0];
+      if (ending.nextElementSibling !== anchor) anchor.parentNode.insertBefore(ending, anchor);
+      known.forEach(function (node) {
+        if (!node.hasAttribute('data-calorieapp-legacy-footer')) {
+          node.setAttribute('data-calorieapp-legacy-footer', node.hidden ? 'hidden' : 'visible');
+        }
+        node.hidden = true;
+      });
+      footer.hidden = false;
+      return;
+    }
+    var unknown = regions.some(function (node) {
+      return node.matches('footer, [role=contentinfo]') || /ICTHendrikse|Privacy Policy|Terms & Conditions/.test(node.textContent);
+    });
+    // No guessed deletion: custom/translated footers keep their own content.
+    // Pages genuinely lacking a footer receive the accessible fallback.
+    footer.hidden = unknown;
+  }
+
   function marketOnly(node) {
     var copy = node.cloneNode(true);
     copy.querySelectorAll('script, style, .brz-bg, .livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]').forEach(function (item) { item.remove(); });
-    return !copy.textContent.trim() && !copy.querySelector('a, img, svg, iframe, video, audio, canvas, input, button, select, textarea, .xl-card, [data-calorieapp-embed]');
+    return !copy.textContent.trim() && !copy.querySelector('a, img, svg, iframe, video, audio, canvas, form, input, button, select, textarea, [contenteditable], .xl-card, [data-calorieapp-embed]');
+  }
+
+  function protectedMarketContent(widget) {
+    return widget.closest('form, .xl-card, [data-calorieapp-embed]') ||
+      widget.querySelector('form, input, button, select, textarea, [contenteditable], .xl-card, [data-calorieapp-embed]');
+  }
+
+  function dedicatedMarketSlot(widget) {
+    if (protectedMarketContent(widget)) return null;
+    var host = widget.closest('.brz-wp-shortcode');
+    if (!host) return widget;
+    if (!marketOnly(host)) return null;
+    var slot = host;
+    for (var parent = host.parentElement; parent && parent !== document.body; parent = parent.parentElement) {
+      if (parent.matches('.brz-section, section') || !marketOnly(parent)) break;
+      slot = parent;
+    }
+    return slot;
   }
 
   function normalizeMarketHost(widget) {
@@ -107,9 +198,32 @@
     if (typeof document.querySelector !== "function") return;
     var injected = document.querySelector("[data-calorieapp-sitewide-market]");
     if (!injected) return;
-    var hasExistingMarket = Array.from(document.querySelectorAll(
+    var existing = Array.from(document.querySelectorAll(
       ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]"
-    )).some(function (widget) { return !injected.contains(widget); });
+    )).filter(function (widget) {
+      return !injected.contains(widget) && !widget.closest('[data-calorieapp-retired-market-slot]');
+    });
+    var ending = injected.closest('[data-calorieapp-shared-page-ending]');
+    if (ending) {
+      if (ending.hidden) return;
+      var owned = existing.map(function (widget) { return { widget: widget, slot: dedicatedMarketSlot(widget) }; })
+        .filter(function (item) { return item.slot; });
+      if (owned.length) {
+        injected.querySelectorAll('[data-calorieapp-xpmarket-widget]').forEach(function (widget) { widget.remove(); });
+        owned.forEach(function (item, index) {
+          if (index === 0) injected.appendChild(item.widget);
+          if (item.slot !== item.widget || index > 0) {
+            item.slot.setAttribute('data-calorieapp-retired-market-slot', '');
+            item.slot.hidden = true;
+          }
+        });
+      }
+      // A combined account/payment shortcode is not our layout to dismantle.
+      injected.hidden = existing.length > 0 && owned.length === 0;
+      return;
+    }
+    // Compatibility with an older cached PHP page that has only a market slot.
+    var hasExistingMarket = existing.length > 0;
     if (hasExistingMarket) {
       injected.remove();
       return;
@@ -128,6 +242,9 @@
       return;
     }
 
+    positionSharedPageEnding();
+    var ending = document.querySelector && document.querySelector('[data-calorieapp-shared-page-ending]');
+    if (ending && ending.hidden) return;
     positionSitewideMarket();
     var config = window.calorieappPageEnding || {};
     var endpoint = config.xpMarketWidgetUrl || "";
@@ -136,7 +253,11 @@
       "https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY";
     var widgets = Array.from(document.querySelectorAll(
       ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]"
-    )).map(function (widget) {
+    )).filter(function (widget) {
+      return !widget.closest('[data-calorieapp-retired-market-slot]') &&
+        !(widget.closest('[data-calorieapp-sitewide-market]') || {}).hidden &&
+        !protectedMarketContent(widget);
+    }).map(function (widget) {
       if (widget.classList.contains("livecoinwatch-widget-1")) {
         // Replace the node so an already-running legacy script cannot refill it.
         var replacement = document.createElement("div");
@@ -258,8 +379,9 @@
               );
               var item = track.querySelector("a");
               var step = item ? item.getBoundingClientRect().width : track.clientWidth;
+              var rtl = window.getComputedStyle && window.getComputedStyle(track).direction === 'rtl';
               track.scrollBy({
-                left: (direction < 0 ? -1 : 1) * step,
+                left: (direction < 0 ? -1 : 1) * step * (rtl ? -1 : 1),
                 behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth",
               });
             });
@@ -335,14 +457,18 @@
     window.addEventListener("pageshow", enhanceXpMarketPriceWidgets);
     if (window.MutationObserver) {
       var scheduled = false;
-      var selector = ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget]";
+      var selector = ".livecoinwatch-widget-1, [data-calorieapp-xpmarket-widget], .brz-section, footer, [role=contentinfo]";
       var observer = new window.MutationObserver(function (records) {
         var addedWidget = records.some(function (record) {
           return Array.from(record.addedNodes).some(function (node) {
             return node.nodeType === 1 && (node.matches(selector) || node.querySelector(selector));
           });
         });
-        if (!addedWidget || scheduled) return;
+        var changedFooter = records.some(function (record) {
+          return record.target && record.target.nodeType === 1 &&
+            record.target.closest('[data-calorieapp-legacy-footer]');
+        });
+        if ((!addedWidget && !changedFooter) || scheduled) return;
         scheduled = true;
         window.requestAnimationFrame(function () {
           scheduled = false;
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
index dfecc23..9b32619 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.css
@@ -134,22 +134,20 @@
 .brz table.xl-richlist tr.xl-is-user > :first-child { box-shadow: inset 3px 0 0 #fbb62b, inset 0 2px 0 #fbb62b, inset 0 -2px 0 #fbb62b; }
 .brz table.xl-richlist tr.xl-is-user > :last-child { box-shadow: inset -3px 0 0 #fbb62b, inset 0 2px 0 #fbb62b, inset 0 -2px 0 #fbb62b; }
 .brz table.xl-richlist tr.xl-is-user:focus-visible { outline: 3px solid #505ba9; outline-offset: 3px; }
+.calorieapp-richlist-actions {
+  position: sticky; top: 12px; z-index: 10; max-width: 100%;
+  text-align: start; pointer-events: none;
+}
+.admin-bar .calorieapp-richlist-actions { top: 58px; }
 .calorieapp-own-rank-jump {
-  position: fixed;
-  z-index: 45;
-  left: max(14px, env(safe-area-inset-left));
-  bottom: max(14px, env(safe-area-inset-bottom));
-  min-height: 44px;
-  max-width: min(220px, calc(100vw - 92px));
-  padding: 10px 18px;
-  border: 2px solid #505ba9;
-  border-radius: 999px;
-  background: #fff;
-  color: #303449;
-  box-shadow: 0 7px 22px #30344933;
-  font: 700 15px/1.35 system-ui, sans-serif;
-  cursor: pointer;
+  display: inline-block; box-sizing: border-box; min-height: 44px; max-width: 100%;
+  margin: 0 0 12px; padding: 10px 18px; border: 2px solid #505ba9;
+  border-radius: 4px; background: #fff; color: #303449; font: inherit;
+  font-weight: 700; line-height: 1.4; white-space: normal; overflow-wrap: anywhere;
+  pointer-events: auto; cursor: pointer;
 }
+.calorieapp-own-rank-jump[hidden] { display: none !important; }
+.calorieapp-richlist-actions > span[hidden] { display: none !important; }
 .calorieapp-own-rank-jump:hover { background: #fff4cf; }
 .calorieapp-own-rank-jump:focus-visible { outline: 3px solid #fbb62b; outline-offset: 3px; }
 
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
index 9bd7a6d..26c9259 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
@@ -81,47 +81,144 @@
     return true;
   }
 
-  function enhanceRichlists() {
-    document.querySelectorAll("table.xl-richlist").forEach(function (table) {
+  function startRichlists() {
+    if (window.CalorieAppRichlist || !document.body || !document.body.classList || !document.body.classList.contains("page-id-3243")) return;
+    var location = window.location;
+    if (!location || ["https://calorietoken.net", "https://www.calorietoken.net"].indexOf(location.origin) < 0
+        || location.pathname !== "/index.php/richlist/"
+        || /(?:^|[?&])(?:preview|brizy-edit|brizy-edit-iframe)(?:=|&|$)/.test(location.search || "")
+        || document.querySelector(".brz-ed,#brz-ed-iframe")) return;
+    var views = [], sequence = 0, locale = "en", observer = null;
+    var fallback = {
+      region: "CalorieToken holders. Scroll sideways to see the complete table.",
+      action: "My position", jump: "Go to my Richlist position"
+    };
+    function copy() {
+      var config = window.calorieappDisplayLanguageConfig;
+      var definition = config && Array.isArray(config.locales) && config.locales.find(function (item) { return item.tag === locale; });
+      var candidate = definition && config.richlist && config.richlist.translations && config.richlist.translations[locale];
+      var valid = candidate && Object.keys(fallback).every(function (key) { return typeof candidate[key] === "string" && candidate[key].trim(); });
+      return { text: valid ? candidate : fallback, locale: valid ? locale : "en", dir: valid && (locale === "ar" || locale === "ur") ? "rtl" : "ltr" };
+    }
+    function eligible(node) {
+      return node.isConnected && !node.closest("form,[contenteditable],.xl-card,[data-calorieapp-embed],[hidden],[inert],[aria-hidden=\"true\"]");
+    }
+    function restore(view) {
+      if (!view.row) return;
+      Object.keys(view.previous).forEach(function (key) {
+        if (view.row.getAttribute(key) !== (key === "tabindex" ? "-1" : "true")) return;
+        if (view.previous[key] === null) view.row.removeAttribute(key);
+        else view.row.setAttribute(key, view.previous[key]);
+      });
+      view.row = null;
+    }
+    function makeView(table) {
       var region = table.closest(".calorieapp-richlist-scroll");
       if (!region) {
         region = document.createElement("div");
         region.className = "calorieapp-richlist-scroll";
         region.tabIndex = 0;
         region.setAttribute("role", "region");
-        region.setAttribute("aria-label", "CalorieToken holders — scroll sideways for the full table");
         table.parentNode.insertBefore(region, table);
         region.appendChild(table);
       }
-
-      if (typeof table.querySelector !== "function") return;
-      var ownRow = table.querySelector("tr.xl-is-user");
-      if (!ownRow || document.querySelector("[data-calorieapp-own-rank]")) return;
-      ownRow.setAttribute("aria-current", "true");
-      ownRow.tabIndex = -1;
-      var rankCell = ownRow.querySelector("th,td");
-      var rank = rankCell ? String(rankCell.textContent || "").trim() : "";
+      var actions = document.createElement("div");
+      actions.className = "calorieapp-richlist-actions";
+      var label = document.createElement("span");
+      do { sequence += 1; label.id = "calorieapp-richlist-label-" + sequence; }
+      while (document.getElementById(label.id));
+      label.hidden = true;
+      var regionText = document.createTextNode(""); label.appendChild(regionText);
+      region.removeAttribute("aria-label");
+      region.setAttribute("aria-labelledby", label.id);
+      actions.appendChild(label);
       var jump = document.createElement("button");
       jump.type = "button";
       jump.className = "calorieapp-own-rank-jump";
       jump.setAttribute("data-calorieapp-own-rank", "");
-      jump.textContent = rank ? "My position " + rank : "My position";
-      jump.setAttribute("aria-label", rank ? "Jump to my Richlist position " + rank : "Jump to my Richlist position");
+      jump.hidden = true;
+      var actionText = document.createTextNode(""); jump.appendChild(actionText);
+      var rankNode = document.createElement("bdi");
+      var rankText = document.createTextNode(""); rankNode.appendChild(rankText); jump.appendChild(rankNode);
+      actions.appendChild(jump);
+      region.parentNode.insertBefore(actions, region);
+      var view = { table: table, region: region, actions: actions, jump: jump, regionText: regionText, actionText: actionText, rankText: rankText, row: null };
       jump.addEventListener("click", function () {
-        ownRow.scrollIntoView({
+        // Recheck before activation, even before a queued observer delivery.
+        refresh();
+        if (!view.row || jump.hidden) return;
+        view.row.focus({ preventScroll: true });
+        view.row.scrollIntoView({
           behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth",
-          block: "center",
-          inline: "nearest"
+          block: "center", inline: "nearest"
         });
-        window.setTimeout(function () { ownRow.focus({ preventScroll: true }); }, 350);
       });
-      document.body.appendChild(jump);
-    });
+      return view;
+    }
+    function refresh() {
+      var tables = Array.from(document.querySelectorAll("table.xl-richlist")).filter(eligible);
+      views = views.filter(function (view) {
+        if (tables.indexOf(view.table) >= 0 && view.region.contains(view.table) && view.actions.isConnected) return true;
+        restore(view); view.actions.remove(); view.region.removeAttribute("aria-labelledby");
+        return false;
+      });
+      tables.forEach(function (table) {
+        if (!views.some(function (view) { return view.table === table; })) views.push(makeView(table));
+      });
+      var marked = tables.flatMap(function (table) { return Array.from(table.querySelectorAll("tr.xl-is-user")).filter(eligible); });
+      var current = marked.length === 1 ? marked[0] : null;
+      var translation = copy();
+      views.forEach(function (view) {
+        var row = current && view.table.contains(current) ? current : null;
+        if (view.row !== row) {
+          restore(view);
+          if (row) {
+            view.row = row;
+            view.previous = { "aria-current": row.getAttribute("aria-current") };
+            row.setAttribute("aria-current", "true");
+            if (row.getAttribute("tabindex") === null) {
+              view.previous.tabindex = null; row.setAttribute("tabindex", "-1");
+            }
+          }
+        }
+        var cell = row && row.querySelector("th,td");
+        var rank = cell ? String(cell.textContent || "").trim() : "";
+        // Read only a displayed rank, never infer ownership from another field.
+        if (!/^#?[0-9][0-9., ]{0,16}$/.test(rank)) rank = "";
+        view.actions.lang = translation.locale; view.actions.dir = translation.dir;
+        if (view.regionText.data !== translation.text.region) view.regionText.data = translation.text.region;
+        var action = translation.text.action + (rank ? " " : "");
+        if (view.actionText.data !== action) view.actionText.data = action;
+        if (view.rankText.data !== rank) view.rankText.data = rank;
+        view.jump.setAttribute("aria-label", translation.text.jump + (rank ? " \u2068" + rank + "\u2069" : ""));
+        view.jump.hidden = !row;
+      });
+    }
+    function containsTable(node) {
+      return node.nodeType === 1 && (node.matches("table.xl-richlist") || node.querySelector("table.xl-richlist"));
+    }
+    function relevant(record) {
+      var node = record.target.nodeType === 1 ? record.target : record.target.parentElement;
+      if (node && node.closest("table.xl-richlist")) return true;
+      if (record.type === "attributes") return node && containsTable(node);
+      return Array.from(record.addedNodes || []).concat(Array.from(record.removedNodes || [])).some(containsTable);
+    }
+    function observe() {
+      if (observer) observer.observe(document.body, { childList: true, subtree: true, characterData: true, attributes: true, attributeFilter: ["class", "hidden", "inert", "aria-hidden"] });
+    }
+    window.CalorieAppRichlist = { setLocale: function (value) { locale = value; refresh(); } };
+    refresh();
+    if (window.MutationObserver) {
+      observer = new MutationObserver(function (records) { if (records.some(relevant)) refresh(); });
+      observe();
+    }
+    window.addEventListener("load", refresh);
+    window.addEventListener("pageshow", function () { refresh(); observe(); });
+    window.addEventListener("pagehide", function () { if (observer) observer.disconnect(); });
   }
 
   function boot() {
-    enhanceRichlists();
-    window.addEventListener("load", enhanceRichlists);
+    startRichlists();
     if (start() || !window.MutationObserver) return;
     // Brizy can insert a shortcode after DOMContentLoaded. Initialize once
     // when the card appears, then stop watching the rest of a long Richlist.
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
index db883e1..d162cb8 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-navigation.js
@@ -35,6 +35,65 @@
     var observer = null;
     var scheduled = false;
     var hiddenByNavigation = new Map();
+    var scrollBound = new WeakSet();
+    var displayLocale = "en";
+    var fallback = { region: "Page shortcuts", home: "Go to Home", app: "Open CalorieApp", top: "Back to top", bottom: "Go to bottom" };
+    function bindings() {
+      if (document.querySelector("[data-calorieapp-site-integration]") !== config
+          || document.querySelector("[data-calorieapp-fallback-shortcuts]") !== shortcuts
+          || shortcuts.closest("form,[contenteditable],[data-calorieapp-embed]")) return null;
+      var slots = Array.from(shortcuts.querySelectorAll("[data-calorieapp-shortcut]"));
+      if (slots.length !== 4) return null;
+      var found = {}, valid = slots.every(function (slot) {
+        var role = slot.getAttribute("data-calorieapp-shortcut");
+        var link = slot.querySelector("a.calorieapp-page-tool");
+        if (["home", "app", "top", "bottom"].indexOf(role) < 0 || found[role] || !link) return false;
+        var destination;
+        try { destination = new URL(link.href, window.location.href); } catch (_error) { return false; }
+        var correct = role === "home" ? destination.href === homePage.href
+          : role === "app" ? destination.href === appPage.href
+          : link.getAttribute("href") === "#" && link.getAttribute("data-calorieapp-scroll") === role;
+        if (!correct) return false;
+        found[role] = link;
+        return true;
+      });
+      return valid ? found : null;
+    }
+    function renderLanguage(links) {
+      var settings = window.calorieappDisplayLanguageConfig;
+      var definition = settings && Array.isArray(settings.locales) && settings.locales.find(function (item) { return item.tag === displayLocale; });
+      var candidate = definition && settings.navigation && settings.navigation.translations && settings.navigation.translations[displayLocale];
+      var valid = candidate && Object.keys(fallback).every(function (key) { return typeof candidate[key] === "string" && candidate[key].trim(); });
+      var copy = valid ? candidate : fallback;
+      shortcuts.lang = valid ? displayLocale : "en";
+      shortcuts.dir = valid && (displayLocale === "ar" || displayLocale === "ur") ? "rtl" : "ltr";
+      shortcuts.setAttribute("aria-label", copy.region);
+      Object.keys(links).forEach(function (role) {
+        links[role].setAttribute("aria-label", copy[role]);
+        links[role].setAttribute("title", copy[role]);
+      });
+    }
+    function observe() {
+      if (observer) observer.observe(document.body, {
+        childList: true, subtree: true, attributes: true, attributeFilter: ["class", "style", "href", "data-calorieapp-scroll", "data-calorieapp-shortcut"]
+      });
+    }
+    function bindScroll(links) {
+      ["top", "bottom"].forEach(function (role) {
+        var button = links[role];
+        if (scrollBound.has(button)) return;
+        scrollBound.add(button);
+        button.addEventListener("click", function (event) {
+          var current = bindings();
+          if (!current || current[role] !== button) return;
+          event.preventDefault();
+          window.scrollTo({
+            top: role === "bottom" ? pageHeight() : 0,
+            behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth"
+          });
+        });
+      });
+    }
     function hide(node) {
       if (!hiddenByNavigation.has(node)) {
         hiddenByNavigation.set(node, {
@@ -55,6 +114,12 @@
         else node.style.removeProperty("display");
       });
       hiddenByNavigation.clear();
+      var replacement = document.querySelector("[data-calorieapp-fallback-shortcuts]");
+      if (replacement) shortcuts = replacement;
+      // A removed, incomplete or edited replacement cannot suppress the native
+      // controls. Keep watching so a restored owned stack can become ready.
+      var links = bindings();
+      if (!links) { observe(); return; }
       var currentPage = new URL(window.location.href);
       var onHome = config.dataset.isHome === "1" || path(currentPage) === path(homePage);
       var onApp = !!document.querySelector("[data-calorieapp-embed]") || path(currentPage) === path(appPage);
@@ -91,26 +156,25 @@
         slot.hidden = (role === "home" && onHome) || (role === "app" && onApp) || (role === "bottom" && !longPage);
       });
       shortcuts.hidden = false;
-      if (observer) observer.observe(document.body, {
-        childList: true, subtree: true, attributes: true, attributeFilter: ["class", "style", "href"]
-      });
+      bindScroll(links);
+      renderLanguage(links);
+      observe();
     }
     function schedule() {
       if (scheduled) return;
       scheduled = true;
       window.requestAnimationFrame(reconcile);
     }
-    shortcuts.querySelectorAll("[data-calorieapp-scroll]").forEach(function (button) {
-      button.addEventListener("click", function (event) {
-        event.preventDefault();
-        window.scrollTo({
-          top: button.getAttribute("data-calorieapp-scroll") === "bottom" ? pageHeight() : 0,
-          behavior: window.matchMedia && window.matchMedia("(prefers-reduced-motion: reduce)").matches ? "auto" : "smooth"
-        });
-      });
-    });
     if (window.MutationObserver) observer = new window.MutationObserver(schedule);
+    window.CalorieAppPageNavigation = { setLocale: function (locale) {
+      displayLocale = locale;
+      var links = bindings();
+      if (links) renderLanguage(links);
+    } };
     reconcile();
+    // Carries no state or identity data; the existing display controller reads
+    // its own store if this component was initialized after its load callback.
+    if (typeof window.dispatchEvent === "function" && typeof window.Event === "function") window.dispatchEvent(new window.Event("calorieapp:page-tools-ready"));
     if (window.ResizeObserver) {
       var resizeObserver = new window.ResizeObserver(schedule);
       resizeObserver.observe(document.body);
@@ -122,4 +186,5 @@
   }
   if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", init, { once: true });
   else init();
+  window.addEventListener("load", init, { once: true });
 })();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
index dc49952..28be60b 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.css
@@ -119,7 +119,7 @@
   padding: clamp(16px, 3vw, 28px);
   border: 1px solid var(--calorieapp-border);
   border-top: 4px solid var(--calorieapp-purple);
-  border-radius: 24px;
+  border-radius: 8px;
   background: #fff;
 }
 .brz .calorieapp-social-panel iframe { max-width: 100% !important; }
@@ -127,12 +127,24 @@
   display: block;
   margin-top: 16px;
   padding: 12px 18px;
-  border-radius: 24px;
+  border-radius: 4px;
   color: #fff !important;
   background: var(--calorieapp-green);
-  font: 600 16px/1.5 system-ui, sans-serif;
+  font: inherit;
   text-align: center;
   text-decoration: none;
+  overflow-wrap: anywhere;
+}
+.brz .calorieapp-x-help { min-width: 0; font: inherit; }
+.brz .calorieapp-x-description { margin: 0; line-height: 1.6; overflow-wrap: anywhere; }
+.brz .calorieapp-x-settings {
+  display: block; width: 100%; min-height: 44px; margin-top: 10px; padding: 10px 16px;
+  border: 1px solid var(--calorieapp-purple); border-radius: 4px; background: #fff;
+  color: var(--calorieapp-purple); font: inherit; white-space: normal; overflow-wrap: anywhere;
+}
+.brz .calorieapp-x-settings[hidden] { display: none !important; }
+.brz :is(.calorieapp-x-fallback,.calorieapp-x-settings):focus-visible {
+  outline: 3px solid var(--calorieapp-purple); outline-offset: 3px;
 }
 .brz .calorieapp-art-gallery {
   box-sizing: border-box;
@@ -232,25 +244,44 @@
   margin-inline: auto;
   padding: clamp(18px, 3vw, 32px);
   border: 1px solid var(--calorieapp-border);
-  border-radius: 24px;
+  border-radius: 8px;
   background: #fff;
+  font-family: inherit;
 }
 .brz .calorieapp-trustline-details p { font-size: 18px !important; line-height: 1.6 !important; overflow-wrap: anywhere; }
-.brz .calorieapp-copy-value { color: var(--calorieapp-ink); font: 16px/1.6 ui-monospace, monospace; user-select: all; overflow-wrap: anywhere; }
+.brz .calorieapp-trustline-details .calorieapp-context-note { border-radius: 8px; font-family: inherit; }
+.brz .calorieapp-trustline-details p.calorieapp-copy-value {
+  color: var(--calorieapp-ink);
+  font: 16px/1.6 ui-monospace, monospace !important;
+  user-select: all;
+  overflow-wrap: anywhere;
+  direction: ltr;
+  unicode-bidi: isolate;
+  text-align: start;
+}
+.brz .calorieapp-copy-controls { max-width: 100%; margin-block: 8px 20px; overflow-wrap: anywhere; }
 .brz .calorieapp-copy-button {
   display: block;
+  box-sizing: border-box;
+  max-width: 100%;
   min-height: 44px;
-  margin: 8px auto 20px;
+  margin: 0 auto 6px;
   padding: 8px 20px;
   border: 2px solid var(--calorieapp-purple);
-  border-radius: 24px;
+  border-radius: 4px;
   background: #fff;
   color: var(--calorieapp-purple);
-  font: 600 15px/1.5 system-ui, sans-serif;
+  font-family: inherit;
+  font-size: 15px;
+  font-weight: 600;
+  line-height: 1.5;
+  white-space: normal;
+  overflow-wrap: anywhere;
   cursor: pointer;
 }
-.brz .calorieapp-copy-status { display: block; min-height: 1.5em; font: 14px/1.5 system-ui, sans-serif; }
-.brz .calorieapp-xaman-label { display: block; color: var(--calorieapp-purple); font: 700 clamp(28px, 5vw, 48px)/1.4 system-ui, sans-serif; text-align: center; }
+.brz .calorieapp-copy-button:disabled { opacity: .6; cursor: wait; }
+.brz .calorieapp-copy-status { display: block; min-height: 1.5em; font-family: inherit; font-size: 14px; line-height: 1.5; }
+.brz .calorieapp-xaman-label { display: block; color: var(--calorieapp-purple); font-family: inherit; font-size: clamp(28px, 5vw, 48px); font-weight: 700; line-height: 1.4; text-align: center; }
 .brz .calorieapp-xaman-trustline {
   display: block;
   box-sizing: border-box;
@@ -259,15 +290,19 @@
   margin: 24px auto;
   padding: 12px 22px;
   border: 2px solid var(--calorieapp-green);
-  border-radius: 999px;
+  border-radius: 4px;
   background: var(--calorieapp-green);
   color: #fff !important;
-  font: 700 17px/1.4 system-ui, sans-serif;
+  font-family: inherit;
+  font-size: 17px;
+  font-weight: 700;
+  line-height: 1.4;
+  overflow-wrap: anywhere;
   text-align: center;
   text-decoration: none !important;
 }
 .brz .calorieapp-xaman-trustline:hover { background: #056d32; border-color: #056d32; }
-.brz .calorieapp-xaman-trustline:focus-visible { outline: 3px solid var(--calorieapp-yellow); outline-offset: 4px; }
+.brz .calorieapp-xaman-trustline:focus-visible { outline: 3px solid var(--calorieapp-purple); outline-offset: 4px; }
 
 /* A beginner path first; market identities and both trade directions remain
    visible without presenting the release-gated website module as live. */
@@ -276,7 +311,8 @@
   width: min(1120px, calc(100% - 24px));
   margin: 32px auto;
   color: var(--calorieapp-ink);
-  font: 17px/1.6 system-ui, sans-serif;
+  font-family: inherit; font-size: 17px; line-height: 1.6;
+  text-align: start; overflow-wrap: anywhere;
 }
 .brz .cal-buy-guide :is(h2,h3,p,dl,ol) { margin-top: 0; }
 .brz .cal-buy-guide h2 { margin-bottom: 14px; color: var(--calorieapp-green); font-size: clamp(30px, 4vw, 48px); line-height: 1.15; }
@@ -289,82 +325,78 @@
   box-sizing: border-box;
   padding: clamp(22px, 4vw, 42px);
   border: 1px solid var(--calorieapp-border);
-  border-radius: 28px;
+  border-radius: 8px;
   background: #fff;
   box-shadow: 0 8px 26px #30344912;
 }
 .brz .cal-buy-hero { border-top: 6px solid var(--calorieapp-green); }
 .brz .cal-buy-identity { display: grid; gap: 10px; margin-bottom: 0; }
-.brz .cal-buy-identity div { display: grid; grid-template-columns: 80px minmax(0,1fr); gap: 12px; }
+.brz .cal-buy-identity div { display: grid; grid-template-columns: minmax(80px, .3fr) minmax(0,1fr); gap: 12px; }
 .brz .cal-buy-identity dt { color: var(--calorieapp-purple); font-weight: 800; }
 .brz .cal-buy-identity dd { min-width: 0; margin: 0; overflow-wrap: anywhere; }
-.brz .cal-buy-identity code { font-size: 14px; user-select: all; }
+.brz .cal-buy-identity code { display: block; direction: ltr; unicode-bidi: isolate; text-align: left; font-size: 16px; user-select: all; }
 .brz .cal-buy-steps { display: grid; grid-template-columns: repeat(2, minmax(0,1fr)); gap: 18px; margin: 22px 0; padding: 0; list-style: none; counter-reset: none; }
-.brz .cal-buy-steps li { display: grid; grid-template-columns: 48px minmax(0,1fr); gap: 16px; padding: 24px; border: 1px solid var(--calorieapp-border); border-radius: 24px; background: #fff; }
+.brz .cal-buy-steps li { display: grid; grid-template-columns: 48px minmax(0,1fr); gap: 16px; padding: 24px; border: 1px solid var(--calorieapp-border); border-radius: 8px; background: #fff; }
 .brz .cal-buy-steps li > span { display: grid; place-items: center; width: 48px; height: 48px; border-radius: 50%; background: var(--calorieapp-purple); color: #fff; font-size: 20px; font-weight: 800; }
-.brz .cal-buy-guide a { color: var(--calorieapp-green); font-weight: 800; text-underline-offset: .2em; }
-.brz .cal-buy-guide a:focus-visible { outline: 3px solid var(--calorieapp-yellow); outline-offset: 4px; }
+.brz .cal-buy-guide a { display: inline-flex; align-items: center; min-height: 44px; max-width: 100%; margin-bottom: 8px; color: var(--calorieapp-green); font-weight: 800; text-underline-offset: .2em; }
+.brz .cal-buy-guide a:focus-visible { outline: 3px solid var(--calorieapp-purple); outline-offset: 4px; }
 .brz .cal-buy-markets { display: grid; grid-template-columns: 1.1fr .9fr; gap: 24px; align-items: center; }
 .brz .cal-buy-pair-grid { display: grid; gap: 12px; }
-.brz .cal-buy-pair-grid article { padding: 18px; border: 2px solid var(--calorieapp-green); border-radius: 18px; background: #f3fbf6; }
+.brz .cal-buy-pair-grid article { padding: 18px; border: 2px solid var(--calorieapp-green); border-radius: 8px; background: #f3fbf6; }
 .brz .cal-buy-pair-grid :is(strong,small) { display: block; }
 .brz .cal-buy-pair-grid strong { font-size: 21px; }
 .brz .cal-buy-pair-grid small { margin-top: 3px; }
-.brz .cal-buy-own-dex { margin-top: 22px; border-left: 6px solid var(--calorieapp-purple); }
-.brz .cal-buy-risk { margin-top: 22px; border-left: 6px solid var(--calorieapp-yellow); box-shadow: none; }
+.brz .cal-buy-own-dex { margin-top: 22px; border-inline-start: 6px solid var(--calorieapp-purple); }
+.brz .cal-buy-risk { margin-top: 22px; border-inline-start: 6px solid var(--calorieapp-yellow); box-shadow: none; }
 .brz .cal-buy-risk > strong { color: var(--calorieapp-purple); font-size: 20px; }
 .brz .cal-buy-risk p { margin: 8px 0 0; }
 
 /* Keep totals, fields, transaction state and error handling native. */
 .brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) {
-  box-sizing: border-box;
-  max-width: 100%;
-  color: var(--calorieapp-ink);
-  font-size: 17px;
-  line-height: 1.6;
+  box-sizing: border-box; min-width: 0; max-width: 100%; color: var(--calorieapp-ink);
+  font-family: inherit; font-size: 17px; line-height: 1.6;
 }
 .brz.calorieapp-donation-page :is(.woocommerce-cart-form,.cart_totals,form.checkout,form.cart:has(#wcj_open_price)) {
-  box-sizing: border-box;
-  padding: clamp(16px, 3vw, 28px);
-  border: 1px solid var(--calorieapp-border);
-  border-radius: 22px;
-  background: #fff;
+  box-sizing: border-box; padding: clamp(16px, 3vw, 28px);
+  border: 1px solid var(--calorieapp-border); border-radius: 8px; background: #fff;
 }
 .brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(input.input-text,textarea,select,#wcj_open_price) {
-  min-height: 44px;
-  border: 2px solid var(--calorieapp-border);
-  border-radius: 14px;
-  padding: 10px 12px;
-  color: var(--calorieapp-ink);
-  background: #fff;
-  font-size: 17px !important;
+  box-sizing: border-box; min-width: 0; max-width: 100%; min-height: 44px;
+  border: 2px solid var(--calorieapp-border); border-radius: 4px; padding: 10px 12px;
+  color: var(--calorieapp-ink); background: #fff; font-family: inherit; font-size: 17px !important;
 }
 .brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(button.button,a.button,input.button) {
-  min-height: 44px;
-  padding: 12px 22px;
-  border-radius: 26px !important;
-  white-space: normal;
-  color: #fff !important;
-  background: var(--calorieapp-green) !important;
-  font-size: 17px !important;
-  line-height: 1.5 !important;
+  box-sizing: border-box; max-width: 100%; min-height: 44px; padding: 12px 22px;
+  border-radius: 4px !important; white-space: normal; overflow-wrap: anywhere;
+  color: #fff !important; background: var(--calorieapp-green) !important;
+  font-family: inherit; font-size: 17px !important; line-height: 1.5 !important;
+}
+.brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(input,textarea,select,button,a.button):focus-visible {
+  outline: 3px solid var(--calorieapp-purple); outline-offset: 3px;
 }
+.brz.calorieapp-donation-page :is(.woocommerce,.brz-woo-add-to-cart) :is(.woocommerce-invalid .input-text,[aria-invalid="true"]) { border-color: #b32d2e; }
+.brz.calorieapp-donation-page :is(button.button,input.button):disabled { opacity: .6; cursor: not-allowed; }
 .brz .calorieapp-donation-help {
-  flex-basis: 100%;
-  margin: 0 0 12px;
-  color: var(--calorieapp-purple);
-  font: 16px/1.6 system-ui, sans-serif;
+  flex-basis: 100%; margin: 0 0 12px; color: var(--calorieapp-purple);
+  font-family: inherit; font-size: 16px; line-height: 1.6; overflow-wrap: anywhere;
 }
 .brz .calorieapp-donation-steps {
-  box-sizing: border-box;
-  width: 100%;
-  max-width: 760px;
-  margin: 0 auto 24px;
-  font: 16px/1.5 system-ui, sans-serif;
+  box-sizing: border-box; width: 100%; max-width: 760px; margin: 0 auto 24px;
+  font-family: inherit; font-size: 16px; line-height: 1.5;
+}
+.brz .calorieapp-donation-steps ol { display: grid; grid-template-columns: repeat(4,minmax(0,1fr)); gap: 10px; list-style: none; padding: 0; margin: 0; }
+.brz .calorieapp-donation-steps li { min-width: 0; }
+.brz .calorieapp-donation-steps :is(a,span) {
+  display: flex; align-items: center; justify-content: center; box-sizing: border-box;
+  height: 100%; min-height: 44px; padding: 10px 12px;
+  border: 1px solid var(--calorieapp-border); border-radius: 4px; background: #fff;
+  color: var(--calorieapp-purple); text-align: center; overflow-wrap: anywhere;
+}
+.brz .calorieapp-donation-steps a { text-decoration: underline; text-underline-offset: .2em; }
+.brz .calorieapp-donation-steps [aria-current] { border-color: var(--calorieapp-purple); background: var(--calorieapp-purple); color: #fff; font-weight: 700; }
+@media (max-width: 600px) {
+  .brz .calorieapp-donation-steps ol { grid-template-columns: repeat(2,minmax(0,1fr)); }
 }
-.brz .calorieapp-donation-steps ol { display: flex; flex-wrap: wrap; justify-content: center; gap: 10px; list-style: none; padding: 0; margin: 0; }
-.brz .calorieapp-donation-steps :is(a,span) { display: block; padding: 10px 16px; border: 1px solid var(--calorieapp-border); border-radius: 24px; background: #fff; color: var(--calorieapp-purple); }
-.brz .calorieapp-donation-steps [aria-current] { background: var(--calorieapp-purple); color: #fff; }
 @media (max-width: 768px) {
   .brz .calorieapp-article-copy { padding: 20px 16px; }
   .brz .calorieapp-contact-card > .brz-column__items { padding: 20px 12px !important; }
@@ -377,46 +409,36 @@
   .brz .cal-buy-identity div { grid-template-columns: 1fr; gap: 2px; }
 }
 
-/* Complianz keeps consent state and behavior; only its presentation is aligned
-   with the public site's existing palette and touch-target sizing. */
+/* Complianz owns consent, visibility and order; these rules only style it. */
 #cmplz-cookiebanner-container .cmplz-cookiebanner {
-  box-sizing: border-box;
-  width: min(440px, calc(100vw - 24px));
-  max-height: calc(100dvh - 24px);
-  overflow-y: auto;
-  border: 2px solid #505ba9;
-  border-radius: 24px;
-  background: #fff;
-  color: #303449;
-  box-shadow: 0 14px 40px #30344940;
-  font-family: system-ui, sans-serif;
+  box-sizing: border-box; width: min(440px,calc(100vw - 24px));
+  max-height: calc(100vh - 24px); max-height: calc(100dvh - 24px);
+  overflow-y: auto; overscroll-behavior: contain; border: 2px solid #505ba9;
+  border-radius: 8px; background: #fff; color: #303449;
+  box-shadow: 0 14px 40px #30344940; font-family: inherit;
 }
 #cmplz-cookiebanner-container .cmplz-title { color: #505ba9; font-weight: 800; }
-#cmplz-cookiebanner-container :is(.cmplz-message,.cmplz-category-title,.cmplz-description) { line-height: 1.55; }
+#cmplz-cookiebanner-container :is(.cmplz-message,.cmplz-category-title,.cmplz-description) { line-height: 1.55; overflow-wrap: anywhere; }
 #cmplz-cookiebanner-container .cmplz-buttons .cmplz-btn {
-  min-height: 44px;
-  border: 2px solid #07853d;
-  border-radius: 999px;
-  font-weight: 700;
+  box-sizing: border-box; min-width: 0; max-width: 100%; min-height: 44px;
+  border: 2px solid #505ba9; border-radius: 4px; font-family: inherit;
+  font-weight: 700; white-space: normal; overflow-wrap: anywhere;
 }
-#cmplz-cookiebanner-container .cmplz-accept { background: #07853d; color: #fff; }
-#cmplz-cookiebanner-container :is(.cmplz-deny,.cmplz-view-preferences,.cmplz-save-preferences) { background: #fff; color: #303449; }
+/* Equal visual treatment; no CSS visibility or choice-order override. */
+#cmplz-cookiebanner-container :is(.cmplz-accept,.cmplz-deny,.cmplz-view-preferences,.cmplz-save-preferences) { background: #fff; color: #303449; }
 #cmplz-cookiebanner-container :is(.cmplz-link,a) { color: #505ba9; text-underline-offset: .18em; }
 #cmplz-manage-consent .cmplz-manage-consent {
-  min-height: 44px;
-  border: 2px solid #505ba9 !important;
-  border-radius: 16px 16px 0 0 !important;
-  background: #fff !important;
-  color: #303449 !important;
-  font: 700 14px/1.3 system-ui, sans-serif !important;
+  box-sizing: border-box; max-width: calc(100vw - 24px); min-height: 44px;
+  border: 2px solid #505ba9 !important; border-radius: 4px 4px 0 0 !important;
+  background: #fff !important; color: #303449 !important; font-family: inherit !important;
+  font-size: 14px !important; font-weight: 700 !important; line-height: 1.4 !important;
+  white-space: normal; overflow-wrap: anywhere;
 }
 #cmplz-cookiebanner-container :is(button,a,input):focus-visible,
-#cmplz-manage-consent .cmplz-manage-consent:focus-visible { outline: 3px solid #fbb62b; outline-offset: 3px; }
-
+#cmplz-manage-consent .cmplz-manage-consent:focus-visible { outline: 3px solid #505ba9; outline-offset: 3px; }
 @media (max-width: 480px) {
   #cmplz-cookiebanner-container .cmplz-cookiebanner {
-    width: calc(100vw - 16px);
-    max-height: calc(100dvh - 16px);
-    border-radius: 20px;
+    width: calc(100vw - 16px); max-height: calc(100vh - 16px);
+    max-height: calc(100dvh - 16px); border-radius: 8px;
   }
 }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js
index 41b5390..bfeb83e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-polish.js
@@ -5,6 +5,11 @@
   var xPath = "M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328 0H0L468.492 681.821L0 1226.37H105.866L515.491 750.218L842.672 1226.37H1200L714.137 519.284H714.163ZM569.165 687.828L521.697 619.934L144.011 79.6944H306.615L611.412 515.685L658.88 583.579L1055.08 1150.3H892.476L569.165 687.854V687.828Z";
   var home = window.location.origin;
   var hero = home + "/wp-content/uploads/2024/01/achtergrondbannersitea1.png";
+  var blogView = null, blogLocale = null;
+  var blogFallback = {
+    description: "Posts are supplied by X and may not load here. Open the profile directly or review your cookie choices.",
+    action: "Open @CalorieToken on X", settings: "Cookie settings"
+  };
   // Reviewed public copy from the step-3 inventory. Applied only to matching
   // page IDs and unchanged original text; Brizy source is never rewritten.
   var contentUpdates = [
@@ -208,6 +213,19 @@
 ];
   var usecaseSlugs = ["delivery", "cafes", "takeaway", "restaurants", "groceries", "wholesalers"];
 
+  // Frozen anonymous page source observed on 2026-09-08. These legacy links
+  // identify reviewed old markup; they are not replacement destinations.
+  // A later CMS edit, translation, form or changed link wins over this patch.
+  var legacyBuyGuideMarkup = [
+    "<h2>Before you start</h2><p>Calorie (CAL) is a token on the XRP Ledger. Use a supported wallet and check the token’s issuer, not just its name or logo.</p><p><strong>Currency:</strong> Calorie (CAL)<br><strong>Issuer:</strong> <span style=\"overflow-wrap:anywhere\">rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY</span><br><strong>Currency code:</strong> <span style=\"overflow-wrap:anywhere\">43616C6F72696500000000000000000000000000</span></p>",
+    "<h2>Choose a trading interface</h2><p><strong><a href=\"https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY\" target=\"_blank\" rel=\"noopener noreferrer\">XPMarket</a></strong><br>Open the CAL token page, then choose an available trade or swap.</p><p><strong><a href=\"https://sologenic.org/\" target=\"_blank\" rel=\"noopener noreferrer\">Sologenic</a></strong><br>Open the DEX and select Calorie/XRP. Verify the issuer above.</p><p><strong><a href=\"https://xumm.app/detect/xapp:xumm.dex?base=43616C6F72696500000000000000000000000000+rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY&amp;quote=xrp\" target=\"_blank\" rel=\"noopener noreferrer\">Xaman DEX</a></strong><br>Open the DEX xApp in Xaman and verify the selected Calorie/XRP pair.</p><p><strong><a href=\"https://www.xrptoolkit.com/\" target=\"_blank\" rel=\"noopener noreferrer\">XRP Toolkit</a></strong><br>Connect a supported wallet and open Trade. Select Calorie by its issuer.</p><p>These are external services. Available pairs, liquidity, fees and regional access may change. No centralized exchange listing is confirmed on this page.</p>",
+    "<h2>How to buy CAL on the XRP Ledger</h2><ol><li>Set up a supported XRPL wallet using its official website or app. Keep your recovery phrase private.</li><li>Add enough XRP for the intended trade and the wallet’s displayed reserve and network fees.</li><li>Open one of the interfaces above. Select Calorie/CAL and verify the complete issuer address shown here.</li><li>If your wallet requests a CAL trust line, review it before approving. Then enter the amount and inspect the quoted price, liquidity, fees and slippage.</li><li>Approve only the transaction you intend in your wallet. Wait for the ledger result and check your resulting balance.</li></ol><p>Reserve requirements can change; follow your wallet’s current values and the <a href=\"https://xrpl.org/docs/tutorials/best-practices/account-management/calculate-reserves\" target=\"_blank\" rel=\"noopener noreferrer\">official XRPL reserve documentation</a>. Never enter a recovery phrase on a trading website.</p>",
+    "<p>Trading can result in loss. This page provides practical links and instructions, not an investment recommendation. CAL trading is separate from CalorieApp’s food search and personal food log.</p>",
+  ].join("");
+  function normalizedMarkup(markup) {
+    return String(markup || "").replace(/>\s+</g, "><").trim();
+  }
+
   function pageId() {
     var match = document.body.className.match(/(?:^|\s)(?:page-id-|postid-)(\d+)(?:\s|$)/);
     return match ? Number(match[1]) : 0;
@@ -300,25 +318,88 @@
     if (!root || document.getElementById(note.key) || /Future use concept/.test(root.textContent)) return;
     root.prepend(contextNote(note.key, "Future use concept", note.text, "Open CalorieApp", localRoute("calorieapp")));
   }
-  function refineBlog(id) {
-    if (id !== 1207) return;
-    document.querySelectorAll(".brz-rich-text").forEach(function (rich) {
-      replaceMatchingText(rich, "X.com/Twitter Posts", "Posts on X");
+  function blogPanel() {
+    if (window.calorieappSitePolish?.blog?.publicPage !== true
+      || pageId() !== 1207 || window.location.pathname !== "/index.php/blog/"
+      || ["https://calorietoken.net", "https://www.calorietoken.net"].indexOf(home) === -1
+      || document.querySelector(".brz-ed,#brz-ed-iframe")
+      || /(?:^|[?&])(?:preview|brizy-edit|brizy-edit-iframe)(?:=|&|$)/.test(window.location.search || "")) return null;
+    var matches = document.querySelectorAll('[data-brz-custom-id="amfuxnhsfmkknesyuldlbdorcvqsardaetus"]');
+    var panel = matches.length === 1 ? matches[0] : null;
+    var protectedControls = "form,input,select,textarea,[contenteditable],.xl-card,[data-calorieapp-embed],[data-calorieapp-account]";
+    if (panel && !Array.from(panel.querySelectorAll(".twitter-timeline")).every(function (node) {
+      if (node.tagName !== "A") return true;
+      try {
+        var url = new URL(node.getAttribute("href"));
+        return url.protocol === "https:" && !url.username && !url.password
+          && /^(?:www\.)?(?:twitter\.com|x\.com)$/.test(url.hostname)
+          && /^\/CalorieToken\/?$/i.test(url.pathname);
+      } catch (_) { return false; }
+    })) return null;
+    return panel && panel.classList.contains("brz-wp-shortcode")
+      && !panel.closest("form,[contenteditable],.xl-card,[data-calorieapp-embed],[data-calorieapp-account],.cmplz-blocked-content-container")
+      && !panel.querySelector(protectedControls) ? panel : null;
+  }
+  function renderBlogHelp(locale) {
+    var panel = blogPanel();
+    if (!blogView || panel !== blogView.panel || blogView.help.parentElement !== panel
+      || !Object.keys(blogFallback).every(function (key) { return blogView[key].parentElement === blogView.help; })
+      || blogView.action.getAttribute("href") !== "https://x.com/CalorieToken") return;
+    var config = window.calorieappSitePolish && window.calorieappSitePolish.blog;
+    var definition = config && Array.isArray(config.locales)
+      && config.locales.find(function (item) { return item.tag === locale; });
+    var copy = definition && config.copy && config.copy[locale];
+    if (!copy || !Object.keys(blogFallback).every(function (key) {
+      return typeof copy[key] === "string" && copy[key].trim();
+    })) { copy = blogFallback; locale = "en"; }
+    // These three text nodes belong to the helper, outside the CMP/X subtree.
+    Object.keys(blogFallback).forEach(function (key) {
+      var node = blogView[key];
+      if (node.childNodes.length === 1 && node.childNodes[0].nodeType === 3) node.childNodes[0].data = copy[key];
     });
-    var embed = document.querySelector('a.twitter-timeline,iframe.twitter-timeline');
-    var panel = embed && embed.closest(".brz-wp-shortcode");
-    if (panel) {
-      panel.classList.add("calorieapp-social-panel");
-      if (!panel.querySelector(".calorieapp-x-fallback")) {
-        var fallback = document.createElement("a");
-        fallback.className = "calorieapp-x-fallback";
-        fallback.href = "https://x.com/CalorieToken";
-        fallback.rel = "noopener noreferrer";
-        fallback.textContent = "View CalorieToken on X";
-        // Outside the consent-controlled embed; no provider script is loaded.
-        panel.appendChild(fallback);
+    blogView.help.setAttribute("lang", locale);
+    blogView.help.setAttribute("dir", ["ar", "ur"].indexOf(locale) !== -1 ? "rtl" : "ltr");
+    // Complianz's delegated native button opens settings. We do not grant or
+    // revoke consent, rescan widgets, reload the page, or load a provider script.
+    blogView.settings.hidden = typeof window.cmplz_has_service_consent !== "function"
+      || !document.querySelector("#cmplz-cookiebanner-container .cmplz-cookiebanner");
+  }
+  function refineBlogHelp() {
+    var panel = blogPanel();
+    if (!panel) return;
+    if (!blogView || blogView.panel !== panel || !blogView.help.isConnected) {
+      if (panel.querySelector(".calorieapp-x-help")) return;
+      var previous = panel.querySelectorAll(".calorieapp-x-fallback");
+      if (previous.length > 1) return;
+      var link = previous[0];
+      if (link && (link.parentElement !== panel || link.tagName !== "A"
+        || link.getAttribute("href") !== "https://x.com/CalorieToken"
+        || link.childNodes.length !== 1 || link.childNodes[0].nodeType !== 3
+        || link.childNodes[0].data !== "View CalorieToken on X")) return;
+      function label(tag, className, text) {
+        var node = document.createElement(tag);
+        node.setAttribute("class", className);
+        node.appendChild(document.createTextNode(text));
+        return node;
       }
+      var help = document.createElement("aside"); help.setAttribute("class", "calorieapp-x-help");
+      var description = label("p", "calorieapp-x-description", blogFallback.description);
+      link = link || label("a", "calorieapp-x-fallback", blogFallback.action);
+      link.setAttribute("href", "https://x.com/CalorieToken");
+      link.setAttribute("rel", "noopener noreferrer");
+      var settings = label("button", "calorieapp-x-settings cmplz-manage-consent", blogFallback.settings);
+      settings.setAttribute("type", "button"); settings.hidden = true;
+      help.appendChild(description); help.appendChild(link); help.appendChild(settings);
+      panel.appendChild(help); panel.classList.add("calorieapp-social-panel");
+      blogView = { panel: panel, help: help, description: description, action: link, settings: settings };
     }
+    var config = window.calorieappSitePolish && window.calorieappSitePolish.blog;
+    renderBlogHelp(blogLocale || (config && config.initialLocale) || "en");
+  }
+  function refineBlog(id) {
+    if (id !== 1207) return;
+    // Keep the original coloured heading and native CMP/X embed intact.
+    refineBlogHelp();
     var gallery = document.getElementById("metaslider-id-819");
     if (!gallery) return;
     gallery.classList.add("calorieapp-art-gallery");
@@ -383,79 +464,221 @@
   }
   function refineTrustline(id) {
     if (id !== 1205) return;
-    var details = document.querySelector('[data-brz-custom-id="nrsbytvlhdquaddotxqmaeiihmzfbcufpmhr"]');
-    if (!details) return;
-    details.classList.add("calorieapp-trustline-details");
+    if (window.CalorieAppTrustline) { window.CalorieAppTrustline.refresh(); return; }
+    var selector = '[data-brz-custom-id="nrsbytvlhdquaddotxqmaeiihmzfbcufpmhr"]';
+    var protectedSelector = 'form,input,textarea,select,[contenteditable],.xl-card,[data-calorieapp-embed],[hidden],[inert],[aria-hidden="true"]';
     var values = [
-      ["rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY", "issuer"],
-      ["43616C6F72696500000000000000000000000000", "currency code"]
+      ["rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY", "Issuer"],
+      ["43616C6F72696500000000000000000000000000", "Currency"]
     ];
-    values.forEach(function (item) {
-      var paragraph = Array.from(details.querySelectorAll("p")).find(function (p) { return plain(p.textContent) === item[0]; });
-      if (!paragraph || paragraph.dataset.calorieappCopy === "1") return;
-      paragraph.classList.add("calorieapp-copy-value");
-      var button = document.createElement("button");
-      button.className = "calorieapp-copy-button";
-      button.type = "button";
-      button.textContent = "Copy " + item[1];
-      var status = document.createElement("span");
-      status.className = "calorieapp-copy-status";
-      status.setAttribute("role", "status");
-      button.addEventListener("click", function () {
-        if (!navigator.clipboard || !navigator.clipboard.writeText) {
-          status.textContent = "Select the " + item[1] + " above to copy it.";
-          return;
-        }
-        navigator.clipboard.writeText(item[0]).then(function () {
-          status.textContent = "Copied " + item[1] + ".";
-        }, function () { status.textContent = "Select the " + item[1] + " above to copy it."; });
+    var english = {
+      copyIssuer: "Copy issuer", copyCurrency: "Copy currency code",
+      copiedIssuer: "Copied issuer.", copiedCurrency: "Copied currency code.",
+      manualIssuer: "Select the issuer above to copy it.", manualCurrency: "Select the currency code above to copy it.",
+      signAction: "Set CAL trustline in Xaman",
+      signLabel: "Create a CAL trustline request and review it in Xaman",
+      before: "Before you continue",
+      context: "A CAL trustline belongs to your XRPL wallet. Check the issuer and currency code in the request before signing. Food search and nutrition information in CalorieApp do not require a CAL trustline.",
+      toolkit: "Open XRP Toolkit"
+    };
+    var view = null, locale = "en", observer = null, watching = true;
+    function publicPage() {
+      if (window.calorieappSitePolish?.trustlinePage !== true || pageId() !== 1205
+          || document.querySelector(".brz-ed")) return false;
+      try {
+        var url = new URL(window.location.href);
+        return ["https://calorietoken.net", "https://www.calorietoken.net"].includes(url.origin)
+          && !url.username && !url.password
+          && ["/index.php/trustline/", "/trustline/"].includes(url.pathname)
+          && Array.from(url.searchParams.keys()).every(function (key) { return key === "ui_lang"; });
+      } catch (_) { return false; }
+    }
+    function source() {
+      if (!publicPage()) return null;
+      var roots = document.querySelectorAll(selector);
+      if (roots.length !== 1) return null;
+      var root = roots[0];
+      if (!root.isConnected || root.closest(protectedSelector)
+          || root.querySelector('form,input,textarea,select,[contenteditable]')) return null;
+      var paragraphs = values.map(function (item) {
+        var matches = Array.from(root.querySelectorAll("p")).filter(function (p) { return plain(p.textContent) === item[0]; });
+        return matches.length === 1 && !matches[0].closest(protectedSelector) ? matches[0] : null;
       });
-      paragraph.after(button, status);
-      paragraph.dataset.calorieappCopy = "1";
-    });
-    var oldLogo = document.querySelector('[data-brz-custom-id="xgtkrgoagaprsyfxmfdmrqmaqfjkwgmokcdq"] picture');
-    if (oldLogo) {
-      var label = document.createElement("span");
-      label.className = "calorieapp-xaman-label";
-      label.textContent = "Xaman";
-      oldLogo.replaceWith(label);
+      return paragraphs.every(Boolean) ? { root: root, paragraphs: paragraphs } : null;
     }
-    if (!document.getElementById("calorieapp-xaman-trustline")) {
-      var trustline = document.createElement("a");
-      trustline.id = "calorieapp-xaman-trustline";
-      trustline.className = "calorieapp-xaman-trustline";
-      trustline.href = "?xl-trustline";
-      trustline.textContent = "Set CAL trustline in Xaman";
-      trustline.setAttribute("aria-label", "Create a CAL trustline request and review it in Xaman");
-      details.appendChild(trustline);
+    function current(candidate) {
+      var live = source();
+      return candidate === view && live && live.root === candidate.root
+        && candidate.rows.every(function (row, index) {
+          return live.paragraphs[index] === row.paragraph
+            && row.group.parentElement === row.paragraph.parentElement;
+        }) && candidate.note.parentElement === candidate.root;
     }
-    if (!document.getElementById("calorieapp-trustline-context")) {
-      var note = contextNote("calorieapp-trustline-context", "Before you continue", "A CAL trustline belongs to your XRPL wallet. Check the issuer and currency code in the request before signing. Food search and nutrition information in CalorieApp do not require a CAL trustline.", "Open XRP Toolkit", "https://www.xrptoolkit.com/");
-      details.appendChild(note);
+    function copyForLocale() {
+      var config = window.calorieappDisplayLanguageConfig;
+      var definition = Array.isArray(config?.locales)
+        ? config.locales.find(function (item) { return item && item.tag === locale; }) : null;
+      var copy = definition && config.trustline?.translations?.[locale];
+      if (!copy || !Object.keys(english).every(function (key) { return typeof copy[key] === "string" && copy[key].trim(); })) {
+        return { tag: "en", direction: "ltr", copy: english };
+      }
+      return { tag: definition.tag, direction: definition.direction === "rtl" ? "rtl" : "ltr", copy: copy };
     }
+    function text(node, value) { if (node.textContent !== value) node.textContent = value; }
+    function localize(node, selected) { node.lang = selected.tag; node.dir = selected.direction; }
+    function render() {
+      if (!view) return;
+      var selected = copyForLocale(), copy = selected.copy;
+      view.rows.forEach(function (row) {
+        localize(row.group, selected);
+        text(row.button, copy["copy" + row.kind]);
+        text(row.status, row.feedback ? copy[row.feedback + row.kind] : "");
+      });
+      localize(view.note, selected);
+      text(view.note.querySelector("strong"), copy.before);
+      text(view.note.querySelector("p"), copy.context);
+      text(view.note.querySelector("a"), copy.toolkit);
+      if (view.link) {
+        localize(view.link, selected);
+        text(view.link, copy.signAction);
+        view.link.setAttribute("aria-label", copy.signLabel);
+      }
+    }
+    function cleanup() {
+      if (!view) return;
+      view.rows.forEach(function (row) {
+        row.group.remove();
+        if (row.addedClass) row.paragraph.classList.remove("calorieapp-copy-value");
+      });
+      view.note.remove();
+      if (view.link) view.link.remove();
+      if (view.addedClass) view.root.classList.remove("calorieapp-trustline-details");
+      view = null;
+    }
+    function build(live) {
+      var candidate = { root: live.root, rows: [], link: null,
+        addedClass: !live.root.classList.contains("calorieapp-trustline-details") };
+      live.root.classList.add("calorieapp-trustline-details");
+      live.paragraphs.forEach(function (paragraph, index) {
+        var group = document.createElement("div");
+        group.className = "calorieapp-copy-controls";
+        group.setAttribute("data-calorieapp-trustline-ui", "");
+        var button = document.createElement("button"), status = document.createElement("span");
+        button.className = "calorieapp-copy-button";
+        button.type = "button";
+        status.id = "calorieapp-copy-status-" + values[index][1].toLowerCase();
+        status.className = "calorieapp-copy-status";
+        status.setAttribute("role", "status");
+        status.setAttribute("aria-atomic", "true");
+        button.setAttribute("aria-describedby", status.id);
+        group.appendChild(button); group.appendChild(status); paragraph.after(group);
+        var row = { paragraph: paragraph, group: group, button: button, status: status,
+          kind: values[index][1], feedback: "", busy: false,
+          addedClass: !paragraph.classList.contains("calorieapp-copy-value") };
+        paragraph.classList.add("calorieapp-copy-value");
+        candidate.rows.push(row);
+        button.addEventListener("click", function () {
+          if (!current(candidate)) { refresh(); return; }
+          if (row.busy) return;
+          row.feedback = ""; row.busy = true; button.disabled = true;
+          button.setAttribute("aria-busy", "true"); render();
+          function finish(feedback) {
+            if (!current(candidate)) { refresh(); return; }
+            row.busy = false; button.disabled = false; button.removeAttribute("aria-busy");
+            row.feedback = feedback; render();
+          }
+          try {
+            if (typeof navigator.clipboard?.writeText !== "function") { finish("manual"); return; }
+            Promise.resolve(navigator.clipboard.writeText(values[index][0])).then(
+              function () { finish("copied"); }, function () { finish("manual"); }
+            );
+          } catch (_) { finish("manual"); }
+        });
+      });
+      candidate.note = contextNote("calorieapp-trustline-context", english.before, english.context, english.toolkit, "https://www.xrptoolkit.com/");
+      candidate.note.setAttribute("data-calorieapp-trustline-ui", "");
+      live.root.appendChild(candidate.note);
+      var oldLogo = document.querySelector('[data-brz-custom-id="xgtkrgoagaprsyfxmfdmrqmaqfjkwgmokcdq"] picture');
+      if (oldLogo) {
+        var label = document.createElement("span"); label.className = "calorieapp-xaman-label";
+        label.textContent = "Xaman"; oldLogo.replaceWith(label);
+      }
+      view = candidate;
+    }
+    function validLink(candidate) {
+      return candidate.link && candidate.link.parentElement === candidate.root
+        && candidate.link.getAttribute("href") === "?xl-trustline"
+        && !candidate.link.getAttribute("target");
+    }
+    function refresh() {
+      if (observer) observer.disconnect();
+      var live = source();
+      if (view && !current(view)) cleanup();
+      if (!view && live) build(live);
+      if (view) {
+        var ready = window.calorieappSitePolish?.trustlineReady === true;
+        if (view.link && (!ready || !validLink(view))) { view.link.remove(); view.link = null; }
+        if (ready && !view.link) {
+          var candidate = view, link = document.createElement("a");
+          link.id = "calorieapp-xaman-trustline"; link.className = "calorieapp-xaman-trustline";
+          link.setAttribute("data-calorieapp-trustline-ui", "");
+          link.href = "?xl-trustline";
+          link.addEventListener("click", function (event) {
+            if (!current(candidate) || candidate.link !== link || !validLink(candidate)
+                || window.calorieappSitePolish?.trustlineReady !== true) {
+              event.preventDefault(); refresh();
+            }
+          });
+          view.link = link; view.root.insertBefore(link, view.note);
+        }
+        render();
+      }
+      if (observer && watching) observer.observe(document.body, { subtree: true, childList: true, characterData: true,
+        attributes: true, attributeFilter: ["class", "data-brz-custom-id", "contenteditable", "hidden", "inert", "aria-hidden"] });
+    }
+    if (!publicPage()) return;
+    window.CalorieAppTrustline = { refresh: refresh, setLocale: function (value) { locale = value; refresh(); } };
+    if (typeof MutationObserver === "function") observer = new MutationObserver(function (records) {
+      if (records.some(function (record) {
+        var target = record.target.nodeType === 1 ? record.target : record.target.parentElement;
+        if (target?.closest("[data-calorieapp-trustline-ui]")) return false;
+        if (target?.closest(selector) || (view && target && (view.root.contains(target)
+            || record.type === "attributes" && target.contains(view.root)))) return true;
+        return Array.from(record.addedNodes || []).concat(Array.from(record.removedNodes || [])).some(function (node) {
+          return node.nodeType === 1 && (node.matches(selector) || node.querySelector(selector));
+        });
+      })) refresh();
+    });
+    window.addEventListener("pagehide", function () { watching = false; if (observer) observer.disconnect(); });
+    window.addEventListener("pageshow", function () { watching = true; refresh(); });
+    refresh();
+    window.dispatchEvent(new Event("calorieapp:trustline-ready"));
   }
   function refineHowToBuy(id) {
-    if (id !== 4205) return;
-    var guide = document.querySelector(".cal-buy-guide");
-    if (!guide || guide.dataset.calorieappBuyGuide === "1") return;
+    if (id !== 4205 || window.calorieappSitePolish?.buyGuide?.publicPage !== true) return;
+    var url = new URL(window.location.href);
+    if (!["https://calorietoken.net", "https://www.calorietoken.net"].includes(url.origin)
+      || !["/index.php/how-to-buy-calorie/", "/how-to-buy-calorie/"].includes(url.pathname)
+      || Array.from(url.searchParams.keys()).some(function (key) { return key !== "ui_lang"; })) return;
+    var guides = document.querySelectorAll(".cal-buy-guide");
+    var guide = guides.length === 1 ? guides[0] : null;
+    if (!guide || guide.dataset.calorieappBuyGuide === "1"
+      || guide.closest("form,[contenteditable],.xl-card,[data-calorieapp-embed],[data-calorieapp-account]")) return;
+    if (normalizedMarkup(guide.innerHTML) !== normalizedMarkup(legacyBuyGuideMarkup)) return;
     guide.dataset.calorieappBuyGuide = "1";
     guide.innerHTML = [
-      '<header class="cal-buy-hero">',
-      '<p class="cal-buy-eyebrow">XRPL buying and selling guide</p>',
-      '<h2>Buy or sell CAL in four clear steps</h2>',
-      '<p>CAL is currently traded on the XRP Ledger DEX. There is no confirmed centralised-exchange listing on this page. Always verify the complete issuer, not only the name or logo.</p>',
-      '<dl class="cal-buy-identity"><div><dt>Asset</dt><dd>Calorie (CAL)</dd></div><div><dt>Issuer</dt><dd><code>rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY</code></dd></div></dl>',
-      '</header>',
-      '<ol class="cal-buy-steps">',
-      '<li><span>1</span><div><h3>Set up an XRPL wallet</h3><p>Install Xaman from its official source and secure your recovery information offline. Never enter a recovery phrase on this website or a trading page.</p><a href="https://xaman.app/" rel="noopener noreferrer">Visit Xaman</a></div></li>',
-      '<li><span>2</span><div><h3>Get XRP for funding and fees</h3><p>Use the Xaman country/currency selector to see providers available for your region. Provider access, verification, price and fees vary; CalorieToken does not operate or endorse those services.</p><a href="https://xumm.app/detect/xapp:xumm.buysellxrp" rel="noopener noreferrer">Find options in Xaman</a></div></li>',
-      '<li><span>3</span><div><h3>Add the exact CAL trustline</h3><p>A trustline is required before receiving CAL. Review the issuer and currency code in Xaman before signing.</p><a href="' + localRoute("trustline") + '">Open CAL trustline guide</a></div></li>',
-      '<li><span>4</span><div><h3>Choose buy or sell</h3><p>Open the verified CAL page on XPMarket, choose XRP or RLUSD, inspect the route, fees, liquidity, price impact and amount, then approve only the transaction you intend in your wallet.</p><a href="https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY" rel="noopener noreferrer">Trade CAL on XPMarket</a></div></li>',
-      '</ol>',
-      '<section class="cal-buy-markets" aria-labelledby="cal-buy-markets-title"><div><p class="cal-buy-eyebrow">Issuer-verified assets</p><h3 id="cal-buy-markets-title">Initial CAL markets</h3><p>Both directions are supported by the market: buy CAL or sell CAL. Live availability and execution are never guaranteed.</p></div><div class="cal-buy-pair-grid"><article><strong>CAL <span aria-hidden="true">↔</span><span class="screen-reader-text"> and </span> XRP</strong><small>Validated XRPL AMM</small></article><article><strong>CAL <span aria-hidden="true">↔</span><span class="screen-reader-text"> and </span> RLUSD</strong><small>Validated XRPL AMM</small></article></div></section>',
-      '<aside class="cal-buy-own-dex"><p class="cal-buy-eyebrow">Website trade module</p><h3>Direct Xaman signing is being prepared</h3><p>The planned module will support buying and selling CAL with XRP or RLUSD while keeping keys in Xaman. It will show the exact route, expected amount, fees, liquidity and price impact before signature. Mainnet transaction submission stays unavailable until legal-scope and security release gates are complete.</p></aside>',
-      '<aside class="cal-buy-risk"><strong>Important</strong><p>Trading can result in loss. Liquidity may be supplied by project-related or affiliated wallets as well as independent participants. Availability, price and execution are not guaranteed. This practical guide is not investment advice.</p></aside>'
-    ].join("");
+      "<header class=\"cal-buy-hero\"><p class=\"cal-buy-eyebrow\" data-cal-buy-copy=\"eyebrow\">XRPL buying and selling guide</p><h2 data-cal-buy-copy=\"title\">Buy or sell CAL in four clear steps</h2><p data-cal-buy-copy=\"intro\">CAL trades on the XRP Ledger DEX. Verify the complete issuer and currency code, not just the name or logo.</p><dl class=\"cal-buy-identity\"><div><dt data-cal-buy-copy=\"assetLabel\">Asset</dt><dd><code dir=\"ltr\">Calorie (CAL)</code></dd></div><div><dt data-cal-buy-copy=\"issuerLabel\">Issuer</dt><dd><code dir=\"ltr\">rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY</code></dd></div><div><dt data-cal-buy-copy=\"currencyLabel\">Currency code</dt><dd><code dir=\"ltr\">43616C6F72696500000000000000000000000000</code></dd></div></dl></header>",
+      "<ol class=\"cal-buy-steps\"><li><span aria-hidden=\"true\">1</span><div><h3 data-cal-buy-copy=\"walletTitle\">Set up an XRPL wallet</h3><p data-cal-buy-copy=\"walletText\">Install Xaman from its official source. Keep recovery information offline; never enter it on this website or a trading page.</p><a data-cal-buy-copy=\"walletAction\" href=\"https://xaman.app/\" rel=\"noopener noreferrer\">Visit Xaman</a></div></li>",
+      "<li><span aria-hidden=\"true\">2</span><div><h3 data-cal-buy-copy=\"fundTitle\">Fund your wallet with XRP</h3><p data-cal-buy-copy=\"fundText\">Xaman lists independent providers by country and currency. Check eligibility, identity checks, rates and fees; availability varies by region.</p><a data-cal-buy-copy=\"fundAction\" href=\"https://xumm.app/detect/xapp:xumm.buysellxrp\" rel=\"noopener noreferrer\">Find options in Xaman</a><p data-cal-buy-copy=\"reserveText\">Keep enough XRP for the reserve and network fees shown by your wallet. Reserve requirements can change.</p><a data-cal-buy-copy=\"reserveAction\" href=\"https://xrpl.org/docs/concepts/accounts/reserves\" rel=\"noopener noreferrer\">XRPL reserve information</a></div></li>",
+      "<li><span aria-hidden=\"true\">3</span><div><h3 data-cal-buy-copy=\"trustTitle\">Add the exact CAL trustline</h3><p data-cal-buy-copy=\"trustText\">To receive CAL, review its issuer and currency code before approving the trustline in Xaman.</p><a data-cal-buy-copy=\"trustAction\" href=\"__TRUSTLINE__\" rel=\"noopener noreferrer\">Open CAL trustline guide</a></div></li>",
+      "<li><span aria-hidden=\"true\">4</span><div><h3 data-cal-buy-copy=\"tradeTitle\">Choose buy or sell</h3><p data-cal-buy-copy=\"tradeText\">On XPMarket, check what you pay and receive, the issuers, route, fees, liquidity and price impact. Review the final request in your wallet.</p><a data-cal-buy-copy=\"tradeAction\" href=\"https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY\" rel=\"noopener noreferrer\">Open CAL on XPMarket</a><p data-cal-buy-copy=\"sellText\">To sell, pay CAL and receive XRP or RLUSD. Receiving RLUSD can require its own verified trustline. Withdrawing proceeds to a bank account is a separate provider service.</p></div></li>",
+      "</ol><section class=\"cal-buy-markets\"><div><h3 data-cal-buy-copy=\"marketTitle\">CAL markets</h3><p data-cal-buy-copy=\"marketText\">CAL/XRP and CAL/RLUSD have recorded AMM markets. Check the current market before trading in either direction.</p></div><div class=\"cal-buy-pair-grid\"><article><strong dir=\"ltr\">CAL / XRP</strong><small data-cal-buy-copy=\"pairType\">XRPL AMM pair</small></article><article><strong dir=\"ltr\">CAL / RLUSD</strong><small data-cal-buy-copy=\"pairType\">XRPL AMM pair</small></article></div></section>",
+      "<aside class=\"cal-buy-own-dex\"><h3 data-cal-buy-copy=\"moduleTitle\">Trading through external services</h3><p data-cal-buy-copy=\"moduleText\">This website provides guidance and external links. Trading takes place with the selected external service and your wallet.</p></aside>",
+      "<aside class=\"cal-buy-risk\"><strong data-cal-buy-copy=\"riskTitle\">Before you trade</strong><p data-cal-buy-copy=\"riskText\">Trading can cause loss. Project-related wallets may provide liquidity and have a financial interest. Quotes, liquidity and execution are not guaranteed. This guide is not investment advice.</p><p data-cal-buy-copy=\"appText\">CalorieApp food search and food logging do not require buying CAL.</p></aside>"
+    ].join("").replace("__TRUSTLINE__", localRoute("trustline"));
+    guide.setAttribute("aria-label", "Buy or sell CAL in four clear steps");
+    guide.setAttribute("lang", "en");
+    guide.setAttribute("dir", "ltr");
   }
   function refineDonations(id) {
     var steps = [
@@ -556,6 +779,13 @@
     if (!document.body || /\/wp-admin\//.test(window.location.pathname) ||
         document.body.classList.contains("brz-ed") || document.querySelector("#brz-ed-iframe")) return;
     polish();
+    if (pageId() === 1207 && !window.CalorieAppBlogX) {
+      window.CalorieAppBlogX = { setLocale: function (locale) { blogLocale = locale; renderBlogHelp(locale); } };
+      document.addEventListener("cmplz_cookie_warning_loaded", refineBlogHelp);
+      document.addEventListener("cmplz_status_change", refineBlogHelp);
+      document.addEventListener("cmplz_status_change_service", refineBlogHelp);
+      document.addEventListener("cmplz_revoke", refineBlogHelp);
+    }
     window.addEventListener("load", polish, { once: true });
     window.addEventListener("pageshow", polish);
     // Brizy's carousel clones already-corrected icons after initialization.
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.css b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.css
new file mode 100644
index 0000000..020c2c3
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.css
@@ -0,0 +1,24 @@
+/* Additive Tokenomics furniture; historical artwork and native wallets retain their styles. */
+.brz.page-id-1209 .calorieapp-tokenomics-note {
+  box-sizing: border-box; width: 100%; min-width: 0; max-width: 940px;
+  margin: 20px auto; padding: clamp(16px, 3vw, 28px);
+  border: 2px solid #505ba9; border-radius: 8px; background: #fff; color: #303449;
+  font-family: inherit; font-size: 16px; line-height: 1.6; text-align: start;
+  overflow-wrap: anywhere;
+}
+.brz.page-id-1209 .calorieapp-tokenomics-note h2 {
+  margin: 0 0 12px; font: inherit; font-size: 1.35em; font-weight: 700; color: #505ba9;
+}
+.brz.page-id-1209 .calorieapp-tokenomics-note p { margin: 0 0 12px; font: inherit; }
+.brz.page-id-1209 .calorieapp-tokenomics-address {
+  display: block; margin: 12px 0; padding: 12px; border: 1px solid #505ba9;
+  border-radius: 4px; font-family: ui-monospace, monospace; font-size: 16px;
+  direction: ltr; unicode-bidi: isolate; text-align: left; overflow-wrap: anywhere;
+}
+.brz.page-id-1209 .calorieapp-tokenomics-explorer {
+  display: inline-flex; align-items: center; box-sizing: border-box; min-height: 48px;
+  max-width: 100%; padding: 10px 16px; border: 2px solid #505ba9; border-radius: 4px;
+  background: #505ba9; color: #fff; font: inherit; font-weight: 700;
+  text-decoration: underline; text-underline-offset: .2em; white-space: normal;
+}
+.brz.page-id-1209 .calorieapp-tokenomics-explorer:focus-visible { outline: 3px solid #303449; outline-offset: 3px; }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.js
new file mode 100644
index 0000000..9a957eb
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-tokenomics.js
@@ -0,0 +1,84 @@
+(function () {
+  "use strict";
+  if (window.CalorieAppTokenomics) return;
+  var config = window.calorieappSitePolish?.tokenomics;
+  if (config?.publicPage !== true) return;
+  var wallet = "rEfiRssDCQd466z2bi63vi64u2rYiMrnhL";
+  var locale = config.initialLocale || "en", view = null;
+  var keys = ["statusTitle", "status", "giveaways", "walletTitle", "description", "liquidity", "action"];
+  var protectedNodes = "form,input,select,textarea,[contenteditable],.xl-card,[data-calorieapp-embed],[data-calorieapp-account]";
+  function unique(scope, selector) {
+    var nodes = scope.querySelectorAll(selector);
+    return nodes.length === 1 ? nodes[0] : null;
+  }
+  function anchors() {
+    var url = new URL(window.location.href);
+    if (!["https://calorietoken.net", "https://www.calorietoken.net"].includes(url.origin)
+      || !["/index.php/tokenomics-update/", "/tokenomics-update/"].includes(url.pathname)
+      || Array.from(url.searchParams.keys()).some(function (key) { return key !== "ui_lang"; })
+      || !document.body?.classList.contains("page-id-1209")
+      || document.querySelector(".brz-ed,#brz-ed-iframe")) return null;
+    var root = unique(document, '[data-brz-custom-id="rmpolgctfmggclsdfezbyrgrptsoksmyibth"]');
+    if (!root || root.closest(protectedNodes) || root.querySelector(protectedNodes)) return null;
+    var graphic = unique(root, '[data-brz-custom-id="dqvixegjsqsgfpehzvyzdhvvjusglgsaioai"]');
+    var row = unique(root, '[data-brz-custom-id="qzyfxcwgwvmqaychwaxfgllbvrxwptqijdnb"]');
+    if (!graphic || !row || !unique(graphic, 'img[title="Tokenomics update 2024 10"]')) return null;
+    var chart = graphic.parentElement, container = row.parentElement;
+    return chart?.parentElement === container && container?.classList.contains("brz-container")
+      ? { root: root, chart: chart, row: row, container: container } : null;
+  }
+  function node(tag, text, attributes) {
+    var element = document.createElement(tag);
+    Object.keys(attributes || {}).forEach(function (key) { element.setAttribute(key, attributes[key]); });
+    if (text !== undefined) element.appendChild(document.createTextNode(text));
+    return element;
+  }
+  function discard() {
+    if (view) { view.statusPanel.remove(); view.walletPanel.remove(); view = null; }
+  }
+  function copyFor(tag) {
+    var definition = Array.isArray(config.locales) && config.locales.find(function (item) { return item.tag === tag; });
+    var copy = definition && config.copy?.[tag];
+    if (!copy || !keys.every(function (key) { return typeof copy[key] === "string" && copy[key].trim(); })) return null;
+    return { copy: copy, tag: tag, dir: definition.direction === "rtl" ? "rtl" : "ltr" };
+  }
+  function refresh() {
+    var target = anchors(), selected = copyFor(locale) || copyFor("en");
+    if (!target || !selected) { discard(); return; }
+    if (view && (view.chart !== target.chart || view.row !== target.row
+      || view.statusPanel.parentElement !== target.container || view.walletPanel.parentElement !== target.container)) discard();
+    if (!view) {
+      // Only the two owned siblings are added. Existing artwork and wallet links
+      // stay intact; nothing is submitted, fetched, stored or signed.
+      if (document.getElementById("calorieapp-tokenomics-status") || document.getElementById("calorieapp-consolidation-wallet")) return;
+      var status = node("aside", undefined, { id: "calorieapp-tokenomics-status", class: "calorieapp-tokenomics-note", "aria-labelledby": "calorieapp-tokenomics-status-title" });
+      var panel = node("section", undefined, { id: "calorieapp-consolidation-wallet", class: "calorieapp-tokenomics-note", "aria-labelledby": "calorieapp-consolidation-wallet-title" });
+      var fields = {};
+      keys.forEach(function (key) {
+        fields[key] = node(key === "action" ? "a" : /Title$/.test(key) ? "h2" : "p", "");
+      });
+      fields.statusTitle.setAttribute("id", "calorieapp-tokenomics-status-title");
+      fields.walletTitle.setAttribute("id", "calorieapp-consolidation-wallet-title");
+      fields.action.setAttribute("href", "https://xpmarket.com/wallet/" + wallet);
+      fields.action.setAttribute("target", "_blank");
+      fields.action.setAttribute("rel", "noopener noreferrer");
+      fields.action.setAttribute("class", "calorieapp-tokenomics-explorer");
+      status.appendChild(fields.statusTitle); status.appendChild(fields.status); status.appendChild(fields.giveaways);
+      panel.appendChild(fields.walletTitle); panel.appendChild(fields.description);
+      panel.appendChild(node("code", wallet, { dir: "ltr", class: "calorieapp-tokenomics-address" }));
+      panel.appendChild(fields.liquidity); panel.appendChild(fields.action);
+      target.chart.after(status); target.row.after(panel);
+      view = { chart: target.chart, row: target.row, statusPanel: status, walletPanel: panel, fields: fields };
+    }
+    keys.forEach(function (key) { view.fields[key].childNodes[0].data = selected.copy[key]; });
+    [view.statusPanel, view.walletPanel].forEach(function (panel) {
+      panel.setAttribute("lang", selected.tag); panel.setAttribute("dir", selected.dir);
+    });
+  }
+  window.CalorieAppTokenomics = { refresh: refresh, setLocale: function (tag) { locale = tag; refresh(); } };
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", refresh, { once: true });
+  else refresh();
+  window.addEventListener("load", refresh, { once: true });
+  window.addEventListener("pageshow", refresh);
+  window.dispatchEvent(new Event("calorieapp:tokenomics-ready"));
+})();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index c95401c..4cd9a14 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.30
+ * Version: 0.3.40
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.30');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.40');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/app-information.json b/wordpress-plugins/calorieapp-identity-bridge/config/app-information.json
new file mode 100644
index 0000000..6346a55
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/app-information.json
@@ -0,0 +1,57 @@
+{
+  "en": {
+    "description": "Find food products, explore nutrition and keep your own food diary.",
+    "action": "Open CalorieApp",
+    "on_page": "CalorieApp is available above."
+  },
+  "zh-Hans": {
+    "description": "查找食品、了解营养信息并记录自己的饮食日记。",
+    "action": "打开 CalorieApp",
+    "on_page": "CalorieApp 位于本页上方。"
+  },
+  "hi": {
+    "description": "खाद्य उत्पाद खोजें, पोषण संबंधी जानकारी देखें और अपनी भोजन डायरी रखें।",
+    "action": "CalorieApp खोलें",
+    "on_page": "CalorieApp इस पृष्ठ पर ऊपर उपलब्ध है।"
+  },
+  "es": {
+    "description": "Busca alimentos, consulta su información nutricional y lleva tu propio diario de alimentación.",
+    "action": "Abrir CalorieApp",
+    "on_page": "CalorieApp está disponible más arriba en esta página."
+  },
+  "ar": {
+    "description": "ابحث عن المنتجات الغذائية، واطّلع على معلوماتها الغذائية، واحتفظ بسجل طعامك الخاص.",
+    "action": "افتح CalorieApp",
+    "on_page": "يتوفر CalorieApp في أعلى هذه الصفحة."
+  },
+  "fr": {
+    "description": "Recherchez des aliments, consultez leurs informations nutritionnelles et tenez votre propre journal alimentaire.",
+    "action": "Ouvrir CalorieApp",
+    "on_page": "CalorieApp est disponible plus haut sur cette page."
+  },
+  "bn": {
+    "description": "খাদ্যপণ্য খুঁজুন, পুষ্টির তথ্য দেখুন এবং নিজের খাবারের ডায়েরি রাখুন।",
+    "action": "CalorieApp খুলুন",
+    "on_page": "এই পৃষ্ঠার উপরে CalorieApp রয়েছে।"
+  },
+  "pt": {
+    "description": "Encontre alimentos, consulte informações nutricionais e mantenha o seu próprio diário alimentar.",
+    "action": "Abrir CalorieApp",
+    "on_page": "O CalorieApp está disponível acima nesta página."
+  },
+  "id": {
+    "description": "Cari produk makanan, lihat informasi gizi, dan buat catatan makanan pribadi Anda.",
+    "action": "Buka CalorieApp",
+    "on_page": "CalorieApp tersedia di bagian atas halaman ini."
+  },
+  "ur": {
+    "description": "غذائی مصنوعات تلاش کریں، غذائیت کی معلومات دیکھیں اور اپنی خوراک کی ڈائری رکھیں۔",
+    "action": "CalorieApp کھولیں",
+    "on_page": "CalorieApp اس صفحے پر اوپر موجود ہے۔"
+  },
+  "nl": {
+    "description": "Zoek voedingsproducten, bekijk voedingswaarden en houd je eigen eetdagboek bij.",
+    "action": "Open CalorieApp",
+    "on_page": "CalorieApp staat hierboven op deze pagina."
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/blog-x.json b/wordpress-plugins/calorieapp-identity-bridge/config/blog-x.json
new file mode 100644
index 0000000..2a03165
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/blog-x.json
@@ -0,0 +1,63 @@
+{
+  "schema_version": 1,
+  "copy_version": "blog-x-helper-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "description": "Posts are supplied by X and may not load here. Open the profile directly or review your cookie choices.",
+      "action": "Open @CalorieToken on X",
+      "settings": "Cookie settings"
+    },
+    "zh-Hans": {
+      "description": "帖子由 X 提供，可能无法在此加载。您可以直接打开主页，或查看您的 Cookie 选项。",
+      "action": "在 X 上打开 @CalorieToken",
+      "settings": "Cookie 设置"
+    },
+    "hi": {
+      "description": "पोस्ट X से मिलती हैं और हो सकता है कि यहाँ लोड न हों। प्रोफ़ाइल सीधे खोलें या अपनी कुकी संबंधी पसंद की समीक्षा करें।",
+      "action": "X पर @CalorieToken खोलें",
+      "settings": "कुकी सेटिंग"
+    },
+    "es": {
+      "description": "X proporciona las publicaciones y es posible que no se carguen aquí. Abre el perfil directamente o revisa tus preferencias de cookies.",
+      "action": "Abrir @CalorieToken en X",
+      "settings": "Configuración de cookies"
+    },
+    "ar": {
+      "description": "يوفّر X المنشورات، وقد لا يتم تحميلها هنا. افتح الملف الشخصي مباشرة أو راجع خيارات ملفات تعريف الارتباط.",
+      "action": "افتح ⁦@CalorieToken⁩ على X",
+      "settings": "إعدادات ملفات تعريف الارتباط"
+    },
+    "fr": {
+      "description": "Les publications sont fournies par X et peuvent ne pas se charger ici. Ouvrez directement le profil ou consultez vos choix de cookies.",
+      "action": "Ouvrir @CalorieToken sur X",
+      "settings": "Paramètres des cookies"
+    },
+    "bn": {
+      "description": "পোস্টগুলো X থেকে আসে এবং এখানে লোড নাও হতে পারে। সরাসরি প্রোফাইল খুলুন অথবা আপনার কুকি পছন্দগুলো দেখুন।",
+      "action": "X-এ @CalorieToken খুলুন",
+      "settings": "কুকি সেটিংস"
+    },
+    "pt": {
+      "description": "As publicações são fornecidas pelo X e podem não carregar aqui. Abra o perfil diretamente ou reveja as suas preferências de cookies.",
+      "action": "Abrir @CalorieToken no X",
+      "settings": "Definições de cookies"
+    },
+    "id": {
+      "description": "Postingan disediakan oleh X dan mungkin tidak dimuat di sini. Buka profil secara langsung atau tinjau pilihan cookie Anda.",
+      "action": "Buka @CalorieToken di X",
+      "settings": "Pengaturan cookie"
+    },
+    "ur": {
+      "description": "پوسٹس X فراہم کرتا ہے اور ممکن ہے یہاں لوڈ نہ ہوں۔ براہ راست پروفائل کھولیں یا کوکیز کے بارے میں اپنے انتخاب کا جائزہ لیں۔",
+      "action": "X پر ⁦@CalorieToken⁩ کھولیں",
+      "settings": "کوکی کی ترتیبات"
+    },
+    "nl": {
+      "description": "Berichten worden door X geleverd en laden hier mogelijk niet. Open het profiel rechtstreeks of bekijk je cookievoorkeuren.",
+      "action": "Open @CalorieToken op X",
+      "settings": "Cookie-instellingen"
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/cms-faq-preview.json b/wordpress-plugins/calorieapp-identity-bridge/config/cms-faq-preview.json
new file mode 100644
index 0000000..a504e9a
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/cms-faq-preview.json
@@ -0,0 +1,488 @@
+{
+  "schema_version": 1,
+  "mode": "opt-in-development-preview",
+  "source_url": "https://calorietoken.net/index.php/faq/",
+  "observed_on": "2026-09-08",
+  "wordpress_id": 6855,
+  "origins": [
+    "https://calorietoken.net",
+    "https://www.calorietoken.net"
+  ],
+  "pathname": "/index.php/faq/",
+  "copy_version": "faq-mission-current-and-planned-v1",
+  "source_copy_review": "prepared-unreviewed",
+  "release_approved": false,
+  "scope": "One FAQ question and answer only. No legal documents, account, consent or payment controls. Current copy is an unpublished proposal; historical source is restored on disconnect.",
+  "slots": [
+    {
+      "key": "question",
+      "element_id": "uddCR",
+      "source_sha256": "9a276cbfed081b6f9e7c2a3c670f403ae1224e5aa86ac7748bcd55fa06b0d762",
+      "source": {
+        "tag": "p",
+        "attributes": [
+          [
+            "class",
+            "brz-lh-lg-1_9 brz-ls-lg-0 brz-fw-lg-400 brz-fss-lg-px brz-fs-lg-16 brz-ft-google brz-ff-knewave brz-tp-lg-empty brz-text-lg-center brz-css-n84dsb"
+          ],
+          [
+            "data-generated-css",
+            "brz-css-g60SK"
+          ],
+          [
+            "data-uniq-id",
+            "uddCR"
+          ]
+        ],
+        "children": [
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "opacity: 1; color: rgb(80, 91, 169); background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "W"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "hat "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "i"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "s "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "t"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "he "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "m"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "ission "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "o"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "f "
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent; opacity: 1; color: rgb(80, 91, 169);"
+              ]
+            ],
+            "children": [
+              "C"
+            ]
+          },
+          {
+            "tag": "strong",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "alorieToken?"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "key": "answer",
+      "element_id": "mE0AL",
+      "source_sha256": "0c8f1594bf097ee64609db992934e5aaa853e05f805c0ab80dedb54149b14c0a",
+      "source": {
+        "tag": "p",
+        "attributes": [
+          [
+            "class",
+            "brz-text-lg-center brz-tp-lg-empty brz-ff-lato brz-ft-google brz-fs-lg-16 brz-fss-lg-px brz-fw-lg-400 brz-ls-lg-0 brz-lh-lg-1_9 brz-vfw-lg-400 brz-fwdth-lg-100 brz-fsft-lg-0 brz-css-1997g7h"
+          ],
+          [
+            "data-generated-css",
+            "brz-css-ufvZL"
+          ],
+          [
+            "data-uniq-id",
+            "mE0AL"
+          ]
+        ],
+        "children": [
+          {
+            "tag": "span",
+            "attributes": [
+              [
+                "style",
+                "background-color: transparent;"
+              ]
+            ],
+            "children": [
+              "Calorie's mission is to establish a diverse network of partners within the food and beverage industry, integrate payment applications for companies and consumers, contribute to corporate social responsibility, and promote a healthier financial lifestyle."
+            ]
+          }
+        ]
+      }
+    }
+  ],
+  "translations": {
+    "en": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "W",
+          "hat ",
+          "i",
+          "s ",
+          "t",
+          "he ",
+          "m",
+          "ission ",
+          "o",
+          "f ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken's goal is to connect food information with uses of the XRP Ledger. CalorieApp currently offers food lookup and a personal food log. Retail payments, supply-chain tracking and an integrated exchange are planned extensions."
+        ]
+      }
+    },
+    "zh-Hans": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " 的",
+          "使命",
+          "是",
+          "什么",
+          "？",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken 旨在将食品信息与 XRP Ledger 的应用相结合。CalorieApp 目前提供食品查询和个人饮食日志。零售支付、供应链追踪和集成交易功能属于计划中的扩展。"
+        ]
+      }
+    },
+    "hi": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " का ",
+          "मिशन",
+          " क्या ",
+          "है",
+          "?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken का लक्ष्य खाद्य जानकारी को XRP Ledger के उपयोगों से जोड़ना है। CalorieApp में अभी खाद्य पदार्थ खोजने और निजी आहार डायरी रखने की सुविधाएँ हैं। दुकानों में भुगतान, आपूर्ति शृंखला की निगरानी और एकीकृत एक्सचेंज की सुविधाएँ भविष्य के विस्तार के लिए नियोजित हैं।"
+        ]
+      }
+    },
+    "es": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "¿C",
+          "uál ",
+          "e",
+          "s ",
+          "l",
+          "a ",
+          "m",
+          "isión ",
+          "d",
+          "e ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken busca conectar la información alimentaria con los usos del XRP Ledger. CalorieApp ofrece actualmente búsqueda de alimentos y un diario alimentario personal. Los pagos en comercios, la trazabilidad de la cadena de suministro y un intercambio integrado son ampliaciones previstas."
+        ]
+      }
+    },
+    "ar": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "rtl",
+      "slots": {
+        "question": [
+          "ما",
+          " هي ",
+          "مهمة",
+          " ",
+          "CalorieToken",
+          "؟",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "يهدف CalorieToken إلى ربط معلومات الأغذية باستخدامات XRP Ledger. يتيح CalorieApp حالياً البحث عن الأغذية وتسجيل يوميات غذائية شخصية. وتشمل التوسعات المخططة الدفع في المتاجر وتتبع سلسلة التوريد ومنصة تبادل مدمجة."
+        ]
+      }
+    },
+    "fr": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "Q",
+          "uelle ",
+          "e",
+          "st ",
+          "l",
+          "a ",
+          "m",
+          "ission ",
+          "d",
+          "e ",
+          "C",
+          "alorieToken ?"
+        ],
+        "answer": [
+          "CalorieToken vise à relier les informations alimentaires aux usages du XRP Ledger. CalorieApp propose actuellement la recherche d’aliments et un journal alimentaire personnel. Les paiements aux commerçants, la traçabilité de la chaîne d’approvisionnement et une plateforme d’échange intégrée font partie des extensions prévues."
+        ]
+      }
+    },
+    "bn": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          "-এর ",
+          "লক্ষ্য",
+          " কী",
+          "?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken-এর লক্ষ্য খাদ্যসংক্রান্ত তথ্যকে XRP Ledger-এর ব্যবহারের সঙ্গে যুক্ত করা। CalorieApp বর্তমানে খাবার খোঁজা এবং ব্যক্তিগত খাদ্য ডায়েরি রাখার সুবিধা দেয়। দোকানে অর্থপ্রদান, সরবরাহ শৃঙ্খল অনুসরণ এবং সমন্বিত এক্সচেঞ্জ পরিকল্পিত সম্প্রসারণের অংশ।"
+        ]
+      }
+    },
+    "pt": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "Q",
+          "ual ",
+          "é",
+          " ",
+          "a",
+          " ",
+          "m",
+          "issão ",
+          "d",
+          "o ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "O objetivo do CalorieToken é ligar informações alimentares às utilizações do XRP Ledger. O CalorieApp oferece atualmente pesquisa de alimentos e um diário alimentar pessoal. Pagamentos em lojas, rastreabilidade da cadeia de abastecimento e uma plataforma de câmbio integrada são extensões previstas."
+        ]
+      }
+    },
+    "id": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "A",
+          "pa ",
+          "m",
+          "isi ",
+          "C",
+          "alorieToken?",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken bertujuan menghubungkan informasi pangan dengan penggunaan XRP Ledger. CalorieApp saat ini menyediakan pencarian makanan dan catatan makanan pribadi. Pembayaran di toko, pelacakan rantai pasok, dan bursa terintegrasi merupakan pengembangan yang direncanakan."
+        ]
+      }
+    },
+    "ur": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "rtl",
+      "slots": {
+        "question": [
+          "CalorieToken",
+          " کا ",
+          "مشن",
+          " کیا ",
+          "ہے",
+          "؟",
+          "",
+          "",
+          "",
+          "",
+          "",
+          ""
+        ],
+        "answer": [
+          "CalorieToken کا مقصد خوراک کی معلومات کو XRP Ledger کے استعمالات سے جوڑنا ہے۔ CalorieApp فی الحال کھانے کی تلاش اور ذاتی غذائی ڈائری کی سہولت فراہم کرتی ہے۔ دکانوں پر ادائیگیاں، سپلائی چین کی نگرانی اور ایک مربوط ایکسچینج منصوبہ بند توسیعات ہیں۔"
+        ]
+      }
+    },
+    "nl": {
+      "copy_version": "faq-mission-current-and-planned-v1",
+      "review_status": "prepared-unreviewed",
+      "direction": "ltr",
+      "slots": {
+        "question": [
+          "W",
+          "at ",
+          "i",
+          "s ",
+          "d",
+          "e ",
+          "m",
+          "issie ",
+          "v",
+          "an ",
+          "C",
+          "alorieToken?"
+        ],
+        "answer": [
+          "CalorieToken wil voedselinformatie verbinden met toepassingen van de XRP Ledger. CalorieApp biedt momenteel het opzoeken van voedingsmiddelen en een persoonlijk voedingsdagboek. Winkelbetalingen, het volgen van de toeleveringsketen en een geïntegreerde exchange zijn geplande uitbreidingen."
+        ]
+      }
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/display-language.json b/wordpress-plugins/calorieapp-identity-bridge/config/display-language.json
new file mode 100644
index 0000000..6118a91
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/display-language.json
@@ -0,0 +1,46 @@
+{
+  "en": {
+    "label": "Language",
+    "preview": "Translations are being prepared. Some content is still in English."
+  },
+  "zh-Hans": {
+    "label": "语言",
+    "preview": "翻译正在准备中，部分内容仍为英语。"
+  },
+  "hi": {
+    "label": "भाषा",
+    "preview": "अनुवाद तैयार किए जा रहे हैं। कुछ सामग्री अभी भी अंग्रेज़ी में है।"
+  },
+  "es": {
+    "label": "Idioma",
+    "preview": "Se están preparando las traducciones. Parte del contenido sigue en inglés."
+  },
+  "ar": {
+    "label": "اللغة",
+    "preview": "الترجمات قيد الإعداد. لا يزال بعض المحتوى باللغة الإنجليزية."
+  },
+  "fr": {
+    "label": "Langue",
+    "preview": "Les traductions sont en préparation. Certains contenus restent en anglais."
+  },
+  "bn": {
+    "label": "ভাষা",
+    "preview": "অনুবাদ প্রস্তুত করা হচ্ছে। কিছু বিষয়বস্তু এখনও ইংরেজিতে রয়েছে।"
+  },
+  "pt": {
+    "label": "Idioma",
+    "preview": "As traduções estão em preparação. Parte do conteúdo ainda está em inglês."
+  },
+  "id": {
+    "label": "Bahasa",
+    "preview": "Terjemahan sedang disiapkan. Sebagian konten masih berbahasa Inggris."
+  },
+  "ur": {
+    "label": "زبان",
+    "preview": "تراجم تیار کیے جا رہے ہیں۔ کچھ مواد ابھی بھی انگریزی میں ہے۔"
+  },
+  "nl": {
+    "label": "Taal",
+    "preview": "Vertalingen worden voorbereid. Sommige inhoud is nog in het Engels."
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/how-to-buy.json b/wordpress-plugins/calorieapp-identity-bridge/config/how-to-buy.json
new file mode 100644
index 0000000..7e61bc3
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/how-to-buy.json
@@ -0,0 +1,349 @@
+{
+  "schema_version": 1,
+  "copy_version": "how-to-buy-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "eyebrow": "XRPL buying and selling guide",
+      "title": "Buy or sell CAL in four clear steps",
+      "intro": "CAL trades on the XRP Ledger DEX. Verify the complete issuer and currency code, not just the name or logo.",
+      "assetLabel": "Asset",
+      "issuerLabel": "Issuer",
+      "currencyLabel": "Currency code",
+      "walletTitle": "Set up an XRPL wallet",
+      "walletText": "Install Xaman from its official source. Keep recovery information offline; never enter it on this website or a trading page.",
+      "walletAction": "Visit Xaman",
+      "fundTitle": "Fund your wallet with XRP",
+      "fundText": "Xaman lists independent providers by country and currency. Check eligibility, identity checks, rates and fees; availability varies by region.",
+      "fundAction": "Find options in Xaman",
+      "reserveText": "Keep enough XRP for the reserve and network fees shown by your wallet. Reserve requirements can change.",
+      "reserveAction": "XRPL reserve information",
+      "trustTitle": "Add the exact CAL trustline",
+      "trustText": "To receive CAL, review its issuer and currency code before approving the trustline in Xaman.",
+      "trustAction": "Open CAL trustline guide",
+      "tradeTitle": "Choose buy or sell",
+      "tradeText": "On XPMarket, check what you pay and receive, the issuers, route, fees, liquidity and price impact. Review the final request in your wallet.",
+      "tradeAction": "Open CAL on XPMarket",
+      "sellText": "To sell, pay CAL and receive XRP or RLUSD. Receiving RLUSD can require its own verified trustline. Withdrawing proceeds to a bank account is a separate provider service.",
+      "marketTitle": "CAL markets",
+      "marketText": "CAL/XRP and CAL/RLUSD have recorded AMM markets. Check the current market before trading in either direction.",
+      "pairType": "XRPL AMM pair",
+      "moduleTitle": "Trading through external services",
+      "moduleText": "This website provides guidance and external links. Trading takes place with the selected external service and your wallet.",
+      "riskTitle": "Before you trade",
+      "riskText": "Trading can cause loss. Project-related wallets may provide liquidity and have a financial interest. Quotes, liquidity and execution are not guaranteed. This guide is not investment advice.",
+      "appText": "CalorieApp food search and food logging do not require buying CAL."
+    },
+    "zh-Hans": {
+      "eyebrow": "XRPL 买卖指南",
+      "title": "四步买入或卖出 CAL",
+      "intro": "CAL 在 XRP Ledger DEX 上交易。请核对完整发行方地址和货币代码，而不只是名称或标志。",
+      "assetLabel": "资产",
+      "issuerLabel": "发行方",
+      "currencyLabel": "货币代码",
+      "walletTitle": "设置 XRPL 钱包",
+      "walletText": "从官方来源安装 Xaman。离线保存恢复信息，切勿在本网站或交易页面输入。",
+      "walletAction": "访问 Xaman",
+      "fundTitle": "向钱包存入 XRP",
+      "fundText": "Xaman 按国家和货币列出独立服务商。请核查资格、身份验证、汇率和费用；可用性因地区而异。",
+      "fundAction": "在 Xaman 查看选项",
+      "reserveText": "保留足够的 XRP，以满足钱包显示的储备金和网络费用要求。储备金要求可能变化。",
+      "reserveAction": "XRPL 储备金说明",
+      "trustTitle": "添加准确的 CAL 信任线",
+      "trustText": "接收 CAL 前，请核对发行方地址和货币代码，再在 Xaman 中批准信任线。",
+      "trustAction": "打开 CAL 信任线指南",
+      "tradeTitle": "选择买入或卖出",
+      "tradeText": "在 XPMarket 核对支付和接收的资产、发行方、路径、费用、流动性和价格影响。在钱包中审核最终请求。",
+      "tradeAction": "在 XPMarket 打开 CAL",
+      "sellText": "卖出时支付 CAL，接收 XRP 或 RLUSD。接收 RLUSD 可能需要单独核实其信任线。将所得提取至银行账户是服务商提供的另一项服务。",
+      "marketTitle": "CAL 市场",
+      "marketText": "CAL/XRP 和 CAL/RLUSD 均有已记录的 AMM 市场。无论买入还是卖出，交易前均须核查当前市场。",
+      "pairType": "XRPL AMM 交易对",
+      "moduleTitle": "通过外部服务交易",
+      "moduleText": "本网站提供指南和外部链接。交易通过选定的外部服务及您的钱包进行。",
+      "riskTitle": "交易前须知",
+      "riskText": "交易可能造成损失。项目关联钱包可能提供流动性并具有经济利益。报价、流动性和成交均无保证。本指南不构成投资建议。",
+      "appText": "使用 CalorieApp 搜索食物和记录饮食无需购买 CAL。"
+    },
+    "hi": {
+      "eyebrow": "XRPL खरीदने और बेचने की मार्गदर्शिका",
+      "title": "चार स्पष्ट चरणों में CAL खरीदें या बेचें",
+      "intro": "CAL का कारोबार XRP Ledger DEX पर होता है। केवल नाम या लोगो नहीं, पूरा जारीकर्ता पता और मुद्रा कोड जाँचें।",
+      "assetLabel": "संपत्ति",
+      "issuerLabel": "जारीकर्ता",
+      "currencyLabel": "मुद्रा कोड",
+      "walletTitle": "XRPL वॉलेट सेट करें",
+      "walletText": "आधिकारिक स्रोत से Xaman इंस्टॉल करें। रिकवरी जानकारी ऑफलाइन रखें; इसे इस वेबसाइट या किसी ट्रेडिंग पेज पर कभी न डालें।",
+      "walletAction": "Xaman पर जाएँ",
+      "fundTitle": "वॉलेट में XRP डालें",
+      "fundText": "Xaman देश और मुद्रा के अनुसार स्वतंत्र प्रदाता दिखाता है। पात्रता, पहचान जाँच, दरें और शुल्क जाँचें; उपलब्धता क्षेत्र के अनुसार बदलती है।",
+      "fundAction": "Xaman में विकल्प देखें",
+      "reserveText": "वॉलेट में दिखाए गए रिज़र्व और नेटवर्क शुल्क के लिए पर्याप्त XRP रखें। रिज़र्व की आवश्यकताएँ बदल सकती हैं।",
+      "reserveAction": "XRPL रिज़र्व की जानकारी",
+      "trustTitle": "सही CAL ट्रस्टलाइन जोड़ें",
+      "trustText": "CAL प्राप्त करने के लिए Xaman में ट्रस्टलाइन स्वीकृत करने से पहले जारीकर्ता और मुद्रा कोड जाँचें।",
+      "trustAction": "CAL ट्रस्टलाइन मार्गदर्शिका खोलें",
+      "tradeTitle": "खरीदना या बेचना चुनें",
+      "tradeText": "XPMarket पर भुगतान और प्राप्ति की संपत्ति, जारीकर्ता, रूट, शुल्क, लिक्विडिटी और मूल्य प्रभाव जाँचें। अंतिम अनुरोध अपने वॉलेट में जाँचें।",
+      "tradeAction": "XPMarket पर CAL खोलें",
+      "sellText": "बेचने के लिए CAL दें और XRP या RLUSD प्राप्त करें। RLUSD प्राप्त करने के लिए उसकी अलग सत्यापित ट्रस्टलाइन आवश्यक हो सकती है। प्राप्त रकम बैंक खाते में निकालना प्रदाता की अलग सेवा है।",
+      "marketTitle": "CAL बाज़ार",
+      "marketText": "CAL/XRP और CAL/RLUSD के AMM बाज़ार दर्ज हैं। किसी भी दिशा में कारोबार से पहले वर्तमान बाज़ार जाँचें।",
+      "pairType": "XRPL AMM जोड़ी",
+      "moduleTitle": "बाहरी सेवाओं के माध्यम से कारोबार",
+      "moduleText": "यह वेबसाइट मार्गदर्शन और बाहरी लिंक देती है। कारोबार चुनी गई बाहरी सेवा और आपके वॉलेट के माध्यम से होता है।",
+      "riskTitle": "कारोबार से पहले",
+      "riskText": "कारोबार में नुकसान हो सकता है। परियोजना से जुड़े वॉलेट लिक्विडिटी दे सकते हैं और उनका वित्तीय हित हो सकता है। कोट, लिक्विडिटी और निष्पादन की गारंटी नहीं है। यह निवेश सलाह नहीं है।",
+      "appText": "CalorieApp में भोजन खोजने और दर्ज करने के लिए CAL खरीदना आवश्यक नहीं है।"
+    },
+    "es": {
+      "eyebrow": "Guía de compra y venta en XRPL",
+      "title": "Compra o vende CAL en cuatro pasos claros",
+      "intro": "CAL se negocia en el DEX de XRP Ledger. Comprueba el emisor completo y el código de moneda, no solo el nombre o el logotipo.",
+      "assetLabel": "Activo",
+      "issuerLabel": "Emisor",
+      "currencyLabel": "Código de moneda",
+      "walletTitle": "Configura una billetera XRPL",
+      "walletText": "Instala Xaman desde su fuente oficial. Guarda los datos de recuperación fuera de línea; nunca los introduzcas en esta web ni en una página de trading.",
+      "walletAction": "Visitar Xaman",
+      "fundTitle": "Ingresa XRP en tu billetera",
+      "fundText": "Xaman muestra proveedores independientes por país y moneda. Comprueba requisitos, verificación de identidad, tipos de cambio y comisiones; la disponibilidad varía por región.",
+      "fundAction": "Ver opciones en Xaman",
+      "reserveText": "Mantén suficiente XRP para la reserva y las comisiones de red que indica tu billetera. Los requisitos de reserva pueden cambiar.",
+      "reserveAction": "Información sobre reservas XRPL",
+      "trustTitle": "Añade la línea de confianza CAL exacta",
+      "trustText": "Para recibir CAL, revisa su emisor y código de moneda antes de aprobar la línea de confianza en Xaman.",
+      "trustAction": "Abrir guía de línea de confianza CAL",
+      "tradeTitle": "Elige comprar o vender",
+      "tradeText": "En XPMarket, comprueba lo que pagas y recibes, los emisores, la ruta, las comisiones, la liquidez y el impacto en el precio. Revisa la solicitud final en tu billetera.",
+      "tradeAction": "Abrir CAL en XPMarket",
+      "sellText": "Para vender, entrega CAL y recibe XRP o RLUSD. Recibir RLUSD puede requerir su propia línea de confianza verificada. Retirar el importe a una cuenta bancaria es un servicio independiente del proveedor.",
+      "marketTitle": "Mercados CAL",
+      "marketText": "CAL/XRP y CAL/RLUSD cuentan con mercados AMM registrados. Comprueba el mercado actual antes de operar en cualquier dirección.",
+      "pairType": "Par AMM de XRPL",
+      "moduleTitle": "Operar mediante servicios externos",
+      "moduleText": "Esta web ofrece orientación y enlaces externos. Las operaciones se realizan con el servicio externo elegido y tu billetera.",
+      "riskTitle": "Antes de operar",
+      "riskText": "Operar puede causar pérdidas. Las billeteras vinculadas al proyecto pueden aportar liquidez y tener un interés financiero. Las cotizaciones, la liquidez y la ejecución no están garantizadas. Esta guía no es asesoramiento de inversión.",
+      "appText": "Buscar alimentos y registrarlos en CalorieApp no requiere comprar CAL."
+    },
+    "ar": {
+      "eyebrow": "دليل الشراء والبيع على XRPL",
+      "title": "اشترِ أو بِع CAL في أربع خطوات واضحة",
+      "intro": "يُتداول CAL على منصة XRP Ledger اللامركزية. تحقّق من عنوان المُصدر الكامل ورمز العملة، وليس الاسم أو الشعار فقط.",
+      "assetLabel": "الأصل",
+      "issuerLabel": "المُصدر",
+      "currencyLabel": "رمز العملة",
+      "walletTitle": "إعداد محفظة XRPL",
+      "walletText": "ثبّت Xaman من مصدره الرسمي. احفظ معلومات الاسترداد دون اتصال؛ ولا تدخلها أبداً في هذا الموقع أو صفحات التداول.",
+      "walletAction": "زيارة Xaman",
+      "fundTitle": "تمويل محفظتك بعملة XRP",
+      "fundText": "يعرض Xaman مزودين مستقلين حسب البلد والعملة. تحقّق من الأهلية وفحوص الهوية والأسعار والرسوم؛ فالتوفر يختلف حسب المنطقة.",
+      "fundAction": "عرض الخيارات في Xaman",
+      "reserveText": "احتفظ بما يكفي من XRP للاحتياطي ورسوم الشبكة التي تعرضها محفظتك. قد تتغير متطلبات الاحتياطي.",
+      "reserveAction": "معلومات احتياطي XRPL",
+      "trustTitle": "إضافة خط الثقة الصحيح لعملة CAL",
+      "trustText": "لاستلام CAL، راجع المُصدر ورمز العملة قبل الموافقة على خط الثقة في Xaman.",
+      "trustAction": "فتح دليل خط الثقة CAL",
+      "tradeTitle": "اختيار الشراء أو البيع",
+      "tradeText": "في XPMarket، تحقّق مما تدفعه وتستلمه والمُصدرين والمسار والرسوم والسيولة وتأثير السعر. راجع الطلب النهائي في محفظتك.",
+      "tradeAction": "فتح CAL على XPMarket",
+      "sellText": "للبيع، ادفع CAL واستلم XRP أو RLUSD. قد يتطلب استلام RLUSD خط ثقة خاصاً بها جرى التحقق منه. سحب العائد إلى حساب مصرفي خدمة منفصلة يقدمها المزود.",
+      "marketTitle": "أسواق CAL",
+      "marketText": "توجد أسواق AMM مسجلة لزوجَي CAL/XRP وCAL/RLUSD. تحقّق من السوق الحالي قبل التداول في أي اتجاه.",
+      "pairType": "زوج XRPL AMM",
+      "moduleTitle": "التداول عبر خدمات خارجية",
+      "moduleText": "يوفّر هذا الموقع إرشادات وروابط خارجية. يتم التداول عبر الخدمة الخارجية المختارة ومحفظتك.",
+      "riskTitle": "قبل التداول",
+      "riskText": "قد يؤدي التداول إلى خسارة. قد توفّر محافظ مرتبطة بالمشروع السيولة وتكون لها مصلحة مالية. الأسعار والسيولة والتنفيذ غير مضمونة. هذا الدليل ليس نصيحة استثمارية.",
+      "appText": "لا يتطلب البحث عن الطعام وتسجيله في CalorieApp شراء CAL."
+    },
+    "fr": {
+      "eyebrow": "Guide d’achat et de vente sur XRPL",
+      "title": "Acheter ou vendre CAL en quatre étapes claires",
+      "intro": "CAL se négocie sur le DEX du XRP Ledger. Vérifiez l’adresse complète de l’émetteur et le code de devise, pas seulement le nom ou le logo.",
+      "assetLabel": "Actif",
+      "issuerLabel": "Émetteur",
+      "currencyLabel": "Code de devise",
+      "walletTitle": "Configurer un portefeuille XRPL",
+      "walletText": "Installez Xaman depuis sa source officielle. Conservez les informations de récupération hors ligne ; ne les saisissez jamais sur ce site ou une page de trading.",
+      "walletAction": "Visiter Xaman",
+      "fundTitle": "Alimenter votre portefeuille en XRP",
+      "fundText": "Xaman présente des prestataires indépendants par pays et devise. Vérifiez l’éligibilité, les contrôles d’identité, les taux et les frais ; la disponibilité varie selon les régions.",
+      "fundAction": "Voir les options dans Xaman",
+      "reserveText": "Gardez assez de XRP pour la réserve et les frais de réseau indiqués par votre portefeuille. Les exigences de réserve peuvent changer.",
+      "reserveAction": "Informations sur les réserves XRPL",
+      "trustTitle": "Ajouter la ligne de confiance CAL exacte",
+      "trustText": "Pour recevoir CAL, vérifiez son émetteur et son code de devise avant d’approuver la ligne de confiance dans Xaman.",
+      "trustAction": "Ouvrir le guide de ligne de confiance CAL",
+      "tradeTitle": "Choisir l’achat ou la vente",
+      "tradeText": "Sur XPMarket, vérifiez ce que vous payez et recevez, les émetteurs, le parcours, les frais, la liquidité et l’impact sur le prix. Vérifiez la demande finale dans votre portefeuille.",
+      "tradeAction": "Ouvrir CAL sur XPMarket",
+      "sellText": "Pour vendre, payez en CAL et recevez XRP ou RLUSD. Recevoir RLUSD peut nécessiter sa propre ligne de confiance vérifiée. Le retrait vers un compte bancaire est un service distinct du prestataire.",
+      "marketTitle": "Marchés CAL",
+      "marketText": "Des marchés AMM sont répertoriés pour CAL/XRP et CAL/RLUSD. Vérifiez le marché actuel avant toute opération dans un sens ou l’autre.",
+      "pairType": "Paire AMM XRPL",
+      "moduleTitle": "Négocier via des services externes",
+      "moduleText": "Ce site fournit des conseils pratiques et des liens externes. Les opérations passent par le service externe choisi et votre portefeuille.",
+      "riskTitle": "Avant de négocier",
+      "riskText": "Le trading peut entraîner des pertes. Des portefeuilles liés au projet peuvent fournir de la liquidité et avoir un intérêt financier. Les cotations, la liquidité et l’exécution ne sont pas garanties. Ce guide n’est pas un conseil en investissement.",
+      "appText": "La recherche et le journal alimentaires de CalorieApp ne nécessitent pas l’achat de CAL."
+    },
+    "bn": {
+      "eyebrow": "XRPL কেনাবেচার নির্দেশিকা",
+      "title": "চারটি স্পষ্ট ধাপে CAL কিনুন বা বিক্রি করুন",
+      "intro": "XRP Ledger DEX-এ CAL লেনদেন হয়। শুধু নাম বা লোগো নয়, সম্পূর্ণ ইস্যুকারীর ঠিকানা ও মুদ্রার কোড যাচাই করুন।",
+      "assetLabel": "সম্পদ",
+      "issuerLabel": "ইস্যুকারী",
+      "currencyLabel": "মুদ্রার কোড",
+      "walletTitle": "XRPL ওয়ালেট সেট করুন",
+      "walletText": "অফিশিয়াল উৎস থেকে Xaman ইনস্টল করুন। পুনরুদ্ধারের তথ্য অফলাইনে রাখুন; এই ওয়েবসাইট বা কোনো ট্রেডিং পেজে কখনো লিখবেন না।",
+      "walletAction": "Xaman দেখুন",
+      "fundTitle": "ওয়ালেটে XRP যোগ করুন",
+      "fundText": "Xaman দেশ ও মুদ্রা অনুযায়ী স্বাধীন সেবাদাতা দেখায়। যোগ্যতা, পরিচয় যাচাই, হার ও ফি পরীক্ষা করুন; অঞ্চলভেদে উপলভ্যতা বদলায়।",
+      "fundAction": "Xaman-এ বিকল্প দেখুন",
+      "reserveText": "ওয়ালেটে দেখানো রিজার্ভ ও নেটওয়ার্ক ফির জন্য পর্যাপ্ত XRP রাখুন। রিজার্ভের শর্ত বদলাতে পারে।",
+      "reserveAction": "XRPL রিজার্ভের তথ্য",
+      "trustTitle": "সঠিক CAL ট্রাস্টলাইন যোগ করুন",
+      "trustText": "CAL পেতে Xaman-এ ট্রাস্টলাইন অনুমোদনের আগে ইস্যুকারী ও মুদ্রার কোড যাচাই করুন।",
+      "trustAction": "CAL ট্রাস্টলাইন নির্দেশিকা খুলুন",
+      "tradeTitle": "কেনা বা বিক্রি বেছে নিন",
+      "tradeText": "XPMarket-এ কী দিচ্ছেন ও পাচ্ছেন, ইস্যুকারী, রুট, ফি, লিকুইডিটি এবং দামের প্রভাব যাচাই করুন। চূড়ান্ত অনুরোধ ওয়ালেটে যাচাই করুন।",
+      "tradeAction": "XPMarket-এ CAL খুলুন",
+      "sellText": "বিক্রি করতে CAL দিয়ে XRP বা RLUSD নিন। RLUSD পেতে তার নিজস্ব যাচাইকৃত ট্রাস্টলাইন লাগতে পারে। প্রাপ্ত অর্থ ব্যাংক হিসাবে তোলা সেবাদাতার আলাদা সেবা।",
+      "marketTitle": "CAL বাজার",
+      "marketText": "CAL/XRP ও CAL/RLUSD-এর AMM বাজার নথিভুক্ত আছে। যেকোনো দিকে লেনদেনের আগে বর্তমান বাজার যাচাই করুন।",
+      "pairType": "XRPL AMM জোড়া",
+      "moduleTitle": "বাইরের সেবার মাধ্যমে লেনদেন",
+      "moduleText": "এই ওয়েবসাইট নির্দেশনা ও বাইরের লিংক দেয়। নির্বাচিত বাইরের সেবা এবং আপনার ওয়ালেটের মাধ্যমে লেনদেন হয়।",
+      "riskTitle": "লেনদেনের আগে",
+      "riskText": "লেনদেনে ক্ষতি হতে পারে। প্রকল্প-সংশ্লিষ্ট ওয়ালেট লিকুইডিটি দিতে পারে এবং তাদের আর্থিক স্বার্থ থাকতে পারে। দর, লিকুইডিটি ও লেনদেন সম্পাদনের নিশ্চয়তা নেই। এটি বিনিয়োগের পরামর্শ নয়।",
+      "appText": "CalorieApp-এ খাবার খুঁজতে বা লিখে রাখতে CAL কেনার প্রয়োজন নেই।"
+    },
+    "pt": {
+      "eyebrow": "Guia de compra e venda na XRPL",
+      "title": "Compre ou venda CAL em quatro passos claros",
+      "intro": "CAL é negociado na DEX do XRP Ledger. Verifique o endereço completo do emissor e o código da moeda, não apenas o nome ou o logótipo.",
+      "assetLabel": "Ativo",
+      "issuerLabel": "Emissor",
+      "currencyLabel": "Código da moeda",
+      "walletTitle": "Configure uma carteira XRPL",
+      "walletText": "Instale o Xaman a partir da fonte oficial. Guarde os dados de recuperação offline; nunca os introduza neste site ou numa página de negociação.",
+      "walletAction": "Visitar Xaman",
+      "fundTitle": "Adicione XRP à sua carteira",
+      "fundText": "O Xaman apresenta prestadores independentes por país e moeda. Verifique elegibilidade, identificação, taxas de câmbio e comissões; a disponibilidade varia por região.",
+      "fundAction": "Ver opções no Xaman",
+      "reserveText": "Mantenha XRP suficiente para a reserva e as taxas de rede indicadas pela carteira. Os requisitos de reserva podem mudar.",
+      "reserveAction": "Informações sobre reservas XRPL",
+      "trustTitle": "Adicione a linha de confiança CAL exata",
+      "trustText": "Para receber CAL, verifique o emissor e o código da moeda antes de aprovar a linha de confiança no Xaman.",
+      "trustAction": "Abrir guia da linha de confiança CAL",
+      "tradeTitle": "Escolha comprar ou vender",
+      "tradeText": "Na XPMarket, confira o que paga e recebe, os emissores, a rota, as taxas, a liquidez e o impacto no preço. Reveja o pedido final na carteira.",
+      "tradeAction": "Abrir CAL na XPMarket",
+      "sellText": "Para vender, pague CAL e receba XRP ou RLUSD. Receber RLUSD pode exigir a sua própria linha de confiança verificada. Levantar os fundos para uma conta bancária é um serviço separado do prestador.",
+      "marketTitle": "Mercados CAL",
+      "marketText": "CAL/XRP e CAL/RLUSD têm mercados AMM registados. Verifique o mercado atual antes de negociar em qualquer direção.",
+      "pairType": "Par AMM XRPL",
+      "moduleTitle": "Negociação através de serviços externos",
+      "moduleText": "Este site fornece orientação e links externos. A negociação ocorre através do serviço externo escolhido e da sua carteira.",
+      "riskTitle": "Antes de negociar",
+      "riskText": "A negociação pode causar perdas. Carteiras ligadas ao projeto podem fornecer liquidez e ter um interesse financeiro. Cotações, liquidez e execução não são garantidas. Este guia não é aconselhamento de investimento.",
+      "appText": "A pesquisa e o registo de alimentos na CalorieApp não exigem a compra de CAL."
+    },
+    "id": {
+      "eyebrow": "Panduan jual beli XRPL",
+      "title": "Beli atau jual CAL dalam empat langkah jelas",
+      "intro": "CAL diperdagangkan di XRP Ledger DEX. Verifikasi alamat penerbit lengkap dan kode mata uang, bukan hanya nama atau logo.",
+      "assetLabel": "Aset",
+      "issuerLabel": "Penerbit",
+      "currencyLabel": "Kode mata uang",
+      "walletTitle": "Siapkan dompet XRPL",
+      "walletText": "Instal Xaman dari sumber resminya. Simpan informasi pemulihan secara offline; jangan pernah memasukkannya di situs ini atau halaman perdagangan.",
+      "walletAction": "Kunjungi Xaman",
+      "fundTitle": "Isi dompet Anda dengan XRP",
+      "fundText": "Xaman menampilkan penyedia independen berdasarkan negara dan mata uang. Periksa kelayakan, verifikasi identitas, kurs, dan biaya; ketersediaan berbeda menurut wilayah.",
+      "fundAction": "Lihat pilihan di Xaman",
+      "reserveText": "Sisakan cukup XRP untuk cadangan dan biaya jaringan yang ditampilkan dompet Anda. Persyaratan cadangan dapat berubah.",
+      "reserveAction": "Informasi cadangan XRPL",
+      "trustTitle": "Tambahkan trustline CAL yang tepat",
+      "trustText": "Untuk menerima CAL, periksa penerbit dan kode mata uangnya sebelum menyetujui trustline di Xaman.",
+      "trustAction": "Buka panduan trustline CAL",
+      "tradeTitle": "Pilih beli atau jual",
+      "tradeText": "Di XPMarket, periksa apa yang dibayar dan diterima, penerbit, rute, biaya, likuiditas, dan dampak harga. Tinjau permintaan akhir di dompet Anda.",
+      "tradeAction": "Buka CAL di XPMarket",
+      "sellText": "Untuk menjual, bayar CAL dan terima XRP atau RLUSD. Penerimaan RLUSD mungkin memerlukan trustline tersendiri yang terverifikasi. Penarikan hasil ke rekening bank adalah layanan penyedia yang terpisah.",
+      "marketTitle": "Pasar CAL",
+      "marketText": "CAL/XRP dan CAL/RLUSD memiliki pasar AMM yang tercatat. Periksa pasar terkini sebelum berdagang ke arah mana pun.",
+      "pairType": "Pasangan XRPL AMM",
+      "moduleTitle": "Perdagangan melalui layanan eksternal",
+      "moduleText": "Situs ini menyediakan panduan dan tautan eksternal. Perdagangan berlangsung melalui layanan eksternal pilihan Anda dan dompet Anda.",
+      "riskTitle": "Sebelum berdagang",
+      "riskText": "Perdagangan dapat menyebabkan kerugian. Dompet terkait proyek mungkin menyediakan likuiditas dan memiliki kepentingan finansial. Harga, likuiditas, dan eksekusi tidak dijamin. Panduan ini bukan saran investasi.",
+      "appText": "Pencarian dan pencatatan makanan di CalorieApp tidak memerlukan pembelian CAL."
+    },
+    "ur": {
+      "eyebrow": "XRPL خرید و فروخت کی رہنمائی",
+      "title": "چار واضح مراحل میں CAL خریدیں یا بیچیں",
+      "intro": "CAL کی تجارت XRP Ledger DEX پر ہوتی ہے۔ صرف نام یا لوگو نہیں، جاری کنندہ کا مکمل پتہ اور کرنسی کوڈ جانچیں۔",
+      "assetLabel": "اثاثہ",
+      "issuerLabel": "جاری کنندہ",
+      "currencyLabel": "کرنسی کوڈ",
+      "walletTitle": "XRPL والیٹ بنائیں",
+      "walletText": "Xaman اس کے سرکاری ذریعے سے انسٹال کریں۔ بحالی کی معلومات آف لائن رکھیں؛ انہیں اس ویب سائٹ یا تجارتی صفحے پر کبھی درج نہ کریں۔",
+      "walletAction": "Xaman دیکھیں",
+      "fundTitle": "والیٹ میں XRP شامل کریں",
+      "fundText": "Xaman ملک اور کرنسی کے مطابق آزاد فراہم کنندگان دکھاتا ہے۔ اہلیت، شناخت کی جانچ، شرح اور فیس دیکھیں؛ دستیابی علاقے کے لحاظ سے بدلتی ہے۔",
+      "fundAction": "Xaman میں اختیارات دیکھیں",
+      "reserveText": "والیٹ میں دکھائے گئے ریزرو اور نیٹ ورک فیس کے لیے کافی XRP رکھیں۔ ریزرو کی ضروریات بدل سکتی ہیں۔",
+      "reserveAction": "XRPL ریزرو کی معلومات",
+      "trustTitle": "درست CAL ٹرسٹ لائن شامل کریں",
+      "trustText": "CAL وصول کرنے کے لیے Xaman میں ٹرسٹ لائن منظور کرنے سے پہلے جاری کنندہ اور کرنسی کوڈ جانچیں۔",
+      "trustAction": "CAL ٹرسٹ لائن کی رہنمائی کھولیں",
+      "tradeTitle": "خریدنا یا بیچنا منتخب کریں",
+      "tradeText": "XPMarket پر ادائیگی اور وصولی کے اثاثے، جاری کنندگان، راستہ، فیس، لیکویڈیٹی اور قیمت پر اثر جانچیں۔ حتمی درخواست والیٹ میں دیکھیں۔",
+      "tradeAction": "XPMarket پر CAL کھولیں",
+      "sellText": "بیچنے کے لیے CAL دیں اور XRP یا RLUSD وصول کریں۔ RLUSD وصول کرنے کے لیے اس کی اپنی تصدیق شدہ ٹرسٹ لائن درکار ہو سکتی ہے۔ حاصل رقم بینک اکاؤنٹ میں نکالنا فراہم کنندہ کی الگ سروس ہے۔",
+      "marketTitle": "CAL مارکیٹس",
+      "marketText": "CAL/XRP اور CAL/RLUSD کی AMM مارکیٹس درج ہیں۔ کسی بھی سمت تجارت سے پہلے موجودہ مارکیٹ دیکھیں۔",
+      "pairType": "XRPL AMM جوڑا",
+      "moduleTitle": "بیرونی خدمات کے ذریعے تجارت",
+      "moduleText": "یہ ویب سائٹ رہنمائی اور بیرونی روابط دیتی ہے۔ تجارت منتخب بیرونی سروس اور آپ کے والیٹ کے ذریعے ہوتی ہے۔",
+      "riskTitle": "تجارت سے پہلے",
+      "riskText": "تجارت میں نقصان ہو سکتا ہے۔ منصوبے سے متعلق والیٹ لیکویڈیٹی فراہم کر سکتے ہیں اور ان کا مالی مفاد ہو سکتا ہے۔ قیمت، لیکویڈیٹی اور عمل درآمد کی ضمانت نہیں۔ یہ سرمایہ کاری کا مشورہ نہیں ہے۔",
+      "appText": "CalorieApp میں خوراک تلاش کرنے اور درج کرنے کے لیے CAL خریدنا ضروری نہیں۔"
+    },
+    "nl": {
+      "eyebrow": "Koop- en verkoopgids voor XRPL",
+      "title": "Koop of verkoop CAL in vier duidelijke stappen",
+      "intro": "CAL wordt verhandeld op de XRP Ledger DEX. Controleer het volledige issueradres en de valutacode, niet alleen de naam of het logo.",
+      "assetLabel": "Token",
+      "issuerLabel": "Issuer",
+      "currencyLabel": "Valutacode",
+      "walletTitle": "Maak een XRPL-wallet aan",
+      "walletText": "Installeer Xaman via de officiële bron. Bewaar herstelgegevens offline; voer ze nooit op deze website of een handelspagina in.",
+      "walletAction": "Bezoek Xaman",
+      "fundTitle": "Zet XRP op je wallet",
+      "fundText": "Xaman toont onafhankelijke aanbieders per land en valuta. Controleer toelating, identiteitscontroles, koersen en kosten; beschikbaarheid verschilt per regio.",
+      "fundAction": "Bekijk mogelijkheden in Xaman",
+      "reserveText": "Houd genoeg XRP aan voor de reserve en netwerkkosten die je wallet toont. Reservevereisten kunnen veranderen.",
+      "reserveAction": "Uitleg over XRPL-reserves",
+      "trustTitle": "Voeg de juiste CAL-trustline toe",
+      "trustText": "Controleer voor het ontvangen van CAL de issuer en valutacode voordat je de trustline in Xaman goedkeurt.",
+      "trustAction": "Open de CAL-trustlinegids",
+      "tradeTitle": "Kies kopen of verkopen",
+      "tradeText": "Controleer op XPMarket wat je betaalt en ontvangt, de issuers, route, kosten, liquiditeit en prijsimpact. Bekijk het definitieve verzoek in je wallet.",
+      "tradeAction": "Open CAL op XPMarket",
+      "sellText": "Bij verkopen betaal je CAL en ontvang je XRP of RLUSD. Voor RLUSD kan een eigen, gecontroleerde trustline nodig zijn. Opnemen naar een bankrekening is een afzonderlijke dienst van een aanbieder.",
+      "marketTitle": "CAL-markten",
+      "marketText": "Voor CAL/XRP en CAL/RLUSD zijn AMM-markten vastgelegd. Controleer de actuele markt voordat je in een van beide richtingen handelt.",
+      "pairType": "XRPL-AMM-paar",
+      "moduleTitle": "Handelen via externe diensten",
+      "moduleText": "Deze website biedt uitleg en externe links. Handelen gebeurt via de gekozen externe dienst en je wallet.",
+      "riskTitle": "Voordat je handelt",
+      "riskText": "Handelen kan verlies opleveren. Projectgerelateerde wallets kunnen liquiditeit leveren en een financieel belang hebben. Koersen, liquiditeit en uitvoering zijn niet gegarandeerd. Deze gids is geen beleggingsadvies.",
+      "appText": "Voor voedsel zoeken en je voedingslogboek in CalorieApp hoef je geen CAL te kopen."
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/navigation.json b/wordpress-plugins/calorieapp-identity-bridge/config/navigation.json
new file mode 100644
index 0000000..e65898a
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/navigation.json
@@ -0,0 +1,85 @@
+{
+  "schema_version": 1,
+  "copy_version": "navigation-helper-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "region": "Page shortcuts",
+      "home": "Go to Home",
+      "app": "Open CalorieApp",
+      "top": "Back to top",
+      "bottom": "Go to bottom"
+    },
+    "zh-Hans": {
+      "region": "页面快捷操作",
+      "home": "返回首页",
+      "app": "打开 CalorieApp",
+      "top": "返回顶部",
+      "bottom": "前往底部"
+    },
+    "hi": {
+      "region": "पेज शॉर्टकट",
+      "home": "होम पर जाएँ",
+      "app": "CalorieApp खोलें",
+      "top": "ऊपर लौटें",
+      "bottom": "नीचे जाएँ"
+    },
+    "es": {
+      "region": "Accesos de página",
+      "home": "Ir al inicio",
+      "app": "Abrir CalorieApp",
+      "top": "Volver arriba",
+      "bottom": "Ir abajo"
+    },
+    "ar": {
+      "region": "اختصارات الصفحة",
+      "home": "إلى الصفحة الرئيسية",
+      "app": "افتح ⁦CalorieApp⁩",
+      "top": "إلى أعلى الصفحة",
+      "bottom": "إلى أسفل الصفحة"
+    },
+    "fr": {
+      "region": "Raccourcis de la page",
+      "home": "Aller à l’accueil",
+      "app": "Ouvrir CalorieApp",
+      "top": "Revenir en haut",
+      "bottom": "Aller en bas"
+    },
+    "bn": {
+      "region": "পৃষ্ঠার শর্টকাট",
+      "home": "হোমে যান",
+      "app": "CalorieApp খুলুন",
+      "top": "উপরে ফিরুন",
+      "bottom": "নিচে যান"
+    },
+    "pt": {
+      "region": "Atalhos da página",
+      "home": "Ir para o início",
+      "app": "Abrir CalorieApp",
+      "top": "Voltar ao topo",
+      "bottom": "Ir para o fim"
+    },
+    "id": {
+      "region": "Pintasan halaman",
+      "home": "Ke beranda",
+      "app": "Buka CalorieApp",
+      "top": "Kembali ke atas",
+      "bottom": "Ke bagian bawah"
+    },
+    "ur": {
+      "region": "صفحے کے شارٹ کٹس",
+      "home": "ہوم پر جائیں",
+      "app": "⁦CalorieApp⁩ کھولیں",
+      "top": "اوپر واپس جائیں",
+      "bottom": "صفحے کے نیچے جائیں"
+    },
+    "nl": {
+      "region": "Paginasnelkoppelingen",
+      "home": "Naar de homepage",
+      "app": "Open CalorieApp",
+      "top": "Naar boven",
+      "bottom": "Naar beneden"
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/richlist.json b/wordpress-plugins/calorieapp-identity-bridge/config/richlist.json
new file mode 100644
index 0000000..f406680
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/richlist.json
@@ -0,0 +1,63 @@
+{
+  "schema_version": 1,
+  "copy_version": "richlist-helper-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "region": "CalorieToken holders. Scroll sideways to see the complete table.",
+      "action": "My position",
+      "jump": "Go to my Richlist position"
+    },
+    "zh-Hans": {
+      "region": "CalorieToken 持有者。左右滚动以查看完整表格。",
+      "action": "我的排名",
+      "jump": "跳转到我在持有者排名中的位置"
+    },
+    "hi": {
+      "region": "CalorieToken धारक। पूरी तालिका देखने के लिए दाएँ या बाएँ स्क्रॉल करें।",
+      "action": "मेरा स्थान",
+      "jump": "धारकों की सूची में मेरे स्थान पर जाएँ"
+    },
+    "es": {
+      "region": "Titulares de CalorieToken. Desplázate horizontalmente para ver la tabla completa.",
+      "action": "Mi posición",
+      "jump": "Ir a mi posición en la lista de titulares"
+    },
+    "ar": {
+      "region": "حاملو CalorieToken. مرّر أفقياً لرؤية الجدول كاملاً.",
+      "action": "ترتيبي",
+      "jump": "انتقل إلى ترتيبي في قائمة الحاملين"
+    },
+    "fr": {
+      "region": "Détenteurs de CalorieToken. Faites défiler horizontalement pour voir le tableau complet.",
+      "action": "Ma position",
+      "jump": "Aller à ma position dans la liste des détenteurs"
+    },
+    "bn": {
+      "region": "CalorieToken ধারকরা। পুরো সারণিটি দেখতে পাশে স্ক্রল করুন।",
+      "action": "আমার অবস্থান",
+      "jump": "ধারকদের তালিকায় আমার অবস্থানে যান"
+    },
+    "pt": {
+      "region": "Detentores de CalorieToken. Desloque horizontalmente para ver a tabela completa.",
+      "action": "A minha posição",
+      "jump": "Ir para a minha posição na lista de detentores"
+    },
+    "id": {
+      "region": "Pemegang CalorieToken. Gulir ke samping untuk melihat seluruh tabel.",
+      "action": "Posisi saya",
+      "jump": "Buka posisi saya dalam daftar pemegang"
+    },
+    "ur": {
+      "region": "CalorieToken کے حاملین۔ مکمل جدول دیکھنے کے لیے دائیں یا بائیں اسکرول کریں۔",
+      "action": "میری پوزیشن",
+      "jump": "حاملین کی فہرست میں میری پوزیشن پر جائیں"
+    },
+    "nl": {
+      "region": "CalorieToken-houders. Scrol horizontaal om de hele tabel te bekijken.",
+      "action": "Mijn positie",
+      "jump": "Ga naar mijn positie in de Richlist"
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/tokenomics.json b/wordpress-plugins/calorieapp-identity-bridge/config/tokenomics.json
new file mode 100644
index 0000000..8191222
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/tokenomics.json
@@ -0,0 +1,107 @@
+{
+  "schema_version": 1,
+  "copy_version": "tokenomics-helper-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "statusTitle": "Airdrops completed",
+      "status": "All airdrops are completed, as confirmed by the project on 2026-09-09. The published chart is retained as historical context; earlier references to future airdrops no longer apply.",
+      "giveaways": "A remaining giveaway allocation will be stated after distributions, internal transfers and liquidity positions have been reconciled.",
+      "walletTitle": "Consolidation wallet",
+      "description": "Project wallet for consolidated CalorieToken funds. Its balance is not a statement of the remaining giveaway allocation.",
+      "liquidity": "At the ledger check on 2026-09-09, this wallet held a liquidity position in the CAL/XRP AMM. The project therefore has a financial interest in this pool.",
+      "action": "View wallet on XPMarket (new tab)"
+    },
+    "zh-Hans": {
+      "statusTitle": "空投已完成",
+      "status": "项目方于 2026-09-09 确认，所有空投均已完成。保留已发布图表作为历史资料；其中关于未来空投的说明已不再适用。",
+      "giveaways": "在核对分发、内部转账和流动性头寸后，将公布剩余赠送额度。",
+      "walletTitle": "归集钱包",
+      "description": "用于归集 CalorieToken 项目资金的钱包。其余额不代表剩余赠送额度。",
+      "liquidity": "在 2026-09-09 的账本核查中，此钱包持有 CAL/XRP AMM 的流动性头寸。因此，项目在该资金池中具有经济利益。",
+      "action": "在 XPMarket 查看钱包（新标签页）"
+    },
+    "hi": {
+      "statusTitle": "एयरड्रॉप पूरे हो चुके हैं",
+      "status": "परियोजना ने 2026-09-09 को पुष्टि की कि सभी एयरड्रॉप पूरे हो चुके हैं। प्रकाशित चार्ट ऐतिहासिक संदर्भ के लिए रखा गया है; भविष्य के एयरड्रॉप के पुराने उल्लेख अब लागू नहीं होते।",
+      "giveaways": "वितरण, आंतरिक हस्तांतरण और लिक्विडिटी पोज़िशन का मिलान करने के बाद शेष गिवअवे आवंटन बताया जाएगा।",
+      "walletTitle": "समेकन वॉलेट",
+      "description": "CalorieToken परियोजना की समेकित निधियों का वॉलेट। इसका बैलेंस शेष गिवअवे आवंटन नहीं दर्शाता।",
+      "liquidity": "2026-09-09 की लेजर जाँच के समय इस वॉलेट की CAL/XRP AMM में लिक्विडिटी पोज़िशन थी। इसलिए इस पूल में परियोजना का वित्तीय हित है।",
+      "action": "XPMarket पर वॉलेट देखें (नया टैब)"
+    },
+    "es": {
+      "statusTitle": "Airdrops completados",
+      "status": "El proyecto confirmó el 2026-09-09 que todos los airdrops han finalizado. El gráfico publicado se conserva como referencia histórica; las menciones anteriores a futuros airdrops ya no se aplican.",
+      "giveaways": "La asignación restante para sorteos y regalos se indicará tras conciliar las distribuciones, las transferencias internas y las posiciones de liquidez.",
+      "walletTitle": "Billetera de consolidación",
+      "description": "Billetera del proyecto para fondos consolidados de CalorieToken. Su saldo no indica la asignación restante para sorteos y regalos.",
+      "liquidity": "En la comprobación del ledger del 2026-09-09, esta billetera mantenía una posición de liquidez en el AMM CAL/XRP. Por tanto, el proyecto tiene un interés financiero en este pool.",
+      "action": "Ver billetera en XPMarket (nueva pestaña)"
+    },
+    "ar": {
+      "statusTitle": "اكتملت عمليات التوزيع المجاني",
+      "status": "أكد المشروع بتاريخ 2026-09-09 اكتمال جميع عمليات التوزيع المجاني (airdrop). يُحتفظ بالمخطط المنشور كسياق تاريخي؛ ولم تعد الإشارات السابقة إلى عمليات توزيع مستقبلية سارية.",
+      "giveaways": "سيُذكر المخصص المتبقي للهدايا بعد مطابقة التوزيعات والتحويلات الداخلية ومراكز السيولة.",
+      "walletTitle": "محفظة التجميع",
+      "description": "محفظة المشروع لتجميع أموال CalorieToken. لا يمثل رصيدها المخصص المتبقي للهدايا.",
+      "liquidity": "عند فحص السجل بتاريخ 2026-09-09، كانت لهذه المحفظة حصة سيولة في مجمع CAL/XRP AMM. ولذلك للمشروع مصلحة مالية في هذا المجمع.",
+      "action": "عرض المحفظة على XPMarket (علامة تبويب جديدة)"
+    },
+    "fr": {
+      "statusTitle": "Airdrops terminés",
+      "status": "Le projet a confirmé le 2026-09-09 que tous les airdrops sont terminés. Le graphique publié est conservé à titre historique ; les anciennes mentions de futurs airdrops ne sont plus applicables.",
+      "giveaways": "Le solde alloué aux cadeaux sera indiqué après rapprochement des distributions, des transferts internes et des positions de liquidité.",
+      "walletTitle": "Portefeuille de consolidation",
+      "description": "Portefeuille du projet destiné aux fonds consolidés de CalorieToken. Son solde ne représente pas le montant restant alloué aux cadeaux.",
+      "liquidity": "Lors de la vérification du registre le 2026-09-09, ce portefeuille détenait une position de liquidité dans l’AMM CAL/XRP. Le projet a donc un intérêt financier dans ce pool.",
+      "action": "Voir le portefeuille sur XPMarket (nouvel onglet)"
+    },
+    "bn": {
+      "statusTitle": "এয়ারড্রপ সম্পন্ন হয়েছে",
+      "status": "প্রকল্পটি 2026-09-09 তারিখে নিশ্চিত করেছে যে সব এয়ারড্রপ সম্পন্ন হয়েছে। প্রকাশিত চার্টটি ঐতিহাসিক তথ্য হিসেবে রাখা হয়েছে; ভবিষ্যৎ এয়ারড্রপের পুরোনো উল্লেখ আর প্রযোজ্য নয়।",
+      "giveaways": "বিতরণ, অভ্যন্তরীণ স্থানান্তর এবং লিকুইডিটি পজিশন মিলিয়ে দেখার পর গিভঅ্যাওয়ের অবশিষ্ট বরাদ্দ জানানো হবে।",
+      "walletTitle": "একত্রীকরণ ওয়ালেট",
+      "description": "CalorieToken প্রকল্পের একত্রিত তহবিলের ওয়ালেট। এর ব্যালেন্স গিভঅ্যাওয়ের অবশিষ্ট বরাদ্দ নির্দেশ করে না।",
+      "liquidity": "2026-09-09 তারিখে লেজার যাচাইয়ের সময় এই ওয়ালেটের CAL/XRP AMM-এ লিকুইডিটি পজিশন ছিল। তাই এই পুলে প্রকল্পটির আর্থিক স্বার্থ রয়েছে।",
+      "action": "XPMarket-এ ওয়ালেট দেখুন (নতুন ট্যাব)"
+    },
+    "pt": {
+      "statusTitle": "Airdrops concluídos",
+      "status": "O projeto confirmou em 2026-09-09 que todos os airdrops foram concluídos. O gráfico publicado é mantido como referência histórica; as menções anteriores a futuros airdrops já não se aplicam.",
+      "giveaways": "A alocação restante para brindes será indicada após a reconciliação das distribuições, transferências internas e posições de liquidez.",
+      "walletTitle": "Carteira de consolidação",
+      "description": "Carteira do projeto para fundos consolidados de CalorieToken. O seu saldo não representa a alocação restante para brindes.",
+      "liquidity": "Na verificação do ledger em 2026-09-09, esta carteira mantinha uma posição de liquidez no AMM CAL/XRP. Por isso, o projeto tem um interesse financeiro neste pool.",
+      "action": "Ver carteira no XPMarket (nova aba)"
+    },
+    "id": {
+      "statusTitle": "Airdrop telah selesai",
+      "status": "Proyek mengonfirmasi pada 2026-09-09 bahwa semua airdrop telah selesai. Grafik yang diterbitkan dipertahankan sebagai konteks historis; keterangan lama tentang airdrop mendatang tidak lagi berlaku.",
+      "giveaways": "Sisa alokasi giveaway akan dinyatakan setelah distribusi, transfer internal, dan posisi likuiditas direkonsiliasi.",
+      "walletTitle": "Dompet konsolidasi",
+      "description": "Dompet proyek untuk dana CalorieToken yang dikonsolidasikan. Saldonya tidak menyatakan sisa alokasi giveaway.",
+      "liquidity": "Pada pemeriksaan ledger tanggal 2026-09-09, dompet ini memiliki posisi likuiditas di AMM CAL/XRP. Karena itu, proyek memiliki kepentingan finansial dalam pool ini.",
+      "action": "Lihat dompet di XPMarket (tab baru)"
+    },
+    "ur": {
+      "statusTitle": "ایئرڈراپس مکمل ہو چکے ہیں",
+      "status": "منصوبے نے 2026-09-09 کو تصدیق کی کہ تمام ایئرڈراپس مکمل ہو چکے ہیں۔ شائع شدہ چارٹ تاریخی حوالے کے لیے برقرار ہے؛ آئندہ ایئرڈراپس کے پرانے حوالے اب لاگو نہیں ہوتے۔",
+      "giveaways": "تقسیم، داخلی منتقلیوں اور لیکویڈیٹی پوزیشنوں کا حساب ملانے کے بعد تحائف کے لیے باقی مختص مقدار بتائی جائے گی۔",
+      "walletTitle": "یکجا فنڈز کا والیٹ",
+      "description": "CalorieToken منصوبے کے یکجا فنڈز کا والیٹ۔ اس کا بیلنس تحائف کے لیے باقی مختص مقدار کو ظاہر نہیں کرتا۔",
+      "liquidity": "2026-09-09 کی لیجر جانچ کے وقت اس والیٹ کی CAL/XRP AMM میں لیکویڈیٹی پوزیشن تھی۔ اس لیے اس پول میں منصوبے کا مالی مفاد ہے۔",
+      "action": "XPMarket پر والیٹ دیکھیں (نیا ٹیب)"
+    },
+    "nl": {
+      "statusTitle": "Airdrops afgerond",
+      "status": "Alle airdrops zijn afgerond, zoals door het project bevestigd op 2026-09-09. De gepubliceerde grafiek blijft als historische toelichting staan; eerdere verwijzingen naar toekomstige airdrops zijn niet meer van toepassing.",
+      "giveaways": "Het resterende giveawaybudget wordt vermeld nadat uitdelingen, interne overboekingen en liquiditeitsposities met elkaar zijn afgestemd.",
+      "walletTitle": "Consolidatiewallet",
+      "description": "Projectwallet voor samengebrachte CalorieToken-fondsen. Het saldo geeft niet het resterende giveawaybudget aan.",
+      "liquidity": "Bij de ledgercontrole op 2026-09-09 had deze wallet een liquiditeitspositie in de CAL/XRP-AMM. Het project heeft daarmee een financieel belang in deze pool.",
+      "action": "Bekijk wallet op XPMarket (nieuw tabblad)"
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/config/trustline.json b/wordpress-plugins/calorieapp-identity-bridge/config/trustline.json
new file mode 100644
index 0000000..423636e
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/config/trustline.json
@@ -0,0 +1,151 @@
+{
+  "schema_version": 1,
+  "copy_version": "trustline-helper-v1",
+  "review_status": "prepared-unreviewed",
+  "release_approved": false,
+  "translations": {
+    "en": {
+      "copyIssuer": "Copy issuer",
+      "copyCurrency": "Copy currency code",
+      "copiedIssuer": "Copied issuer.",
+      "copiedCurrency": "Copied currency code.",
+      "manualIssuer": "Select the issuer above to copy it.",
+      "manualCurrency": "Select the currency code above to copy it.",
+      "signAction": "Set CAL trustline in Xaman",
+      "signLabel": "Create a CAL trustline request and review it in Xaman",
+      "before": "Before you continue",
+      "context": "A CAL trustline belongs to your XRPL wallet. Check the issuer and currency code in the request before signing. Food search and nutrition information in CalorieApp do not require a CAL trustline.",
+      "toolkit": "Open XRP Toolkit"
+    },
+    "zh-Hans": {
+      "copyIssuer": "复制发行方地址",
+      "copyCurrency": "复制货币代码",
+      "copiedIssuer": "已复制发行方地址。",
+      "copiedCurrency": "已复制货币代码。",
+      "manualIssuer": "请选择上方的发行方地址进行复制。",
+      "manualCurrency": "请选择上方的货币代码进行复制。",
+      "signAction": "在 Xaman 中设置 CAL 信任线",
+      "signLabel": "创建 CAL 信任线请求并在 Xaman 中核对",
+      "before": "继续之前",
+      "context": "CAL 信任线属于你的 XRPL 钱包。签署前，请核对请求中的发行方地址和货币代码。使用 CalorieApp 搜索食品和查看营养信息不需要 CAL 信任线。",
+      "toolkit": "打开 XRP Toolkit"
+    },
+    "hi": {
+      "copyIssuer": "जारीकर्ता का पता कॉपी करें",
+      "copyCurrency": "मुद्रा कोड कॉपी करें",
+      "copiedIssuer": "जारीकर्ता का पता कॉपी हो गया।",
+      "copiedCurrency": "मुद्रा कोड कॉपी हो गया।",
+      "manualIssuer": "कॉपी करने के लिए ऊपर दिया गया जारीकर्ता का पता चुनें।",
+      "manualCurrency": "कॉपी करने के लिए ऊपर दिया गया मुद्रा कोड चुनें।",
+      "signAction": "Xaman में CAL ट्रस्टलाइन सेट करें",
+      "signLabel": "CAL ट्रस्टलाइन अनुरोध बनाएं और Xaman में उसकी जाँच करें",
+      "before": "आगे बढ़ने से पहले",
+      "context": "CAL ट्रस्टलाइन आपके XRPL वॉलेट से जुड़ी होती है। हस्ताक्षर करने से पहले अनुरोध में जारीकर्ता का पता और मुद्रा कोड जाँचें। CalorieApp में खाद्य खोज और पोषण संबंधी जानकारी के लिए CAL ट्रस्टलाइन की आवश्यकता नहीं है।",
+      "toolkit": "XRP Toolkit खोलें"
+    },
+    "es": {
+      "copyIssuer": "Copiar emisor",
+      "copyCurrency": "Copiar código de moneda",
+      "copiedIssuer": "Emisor copiado.",
+      "copiedCurrency": "Código de moneda copiado.",
+      "manualIssuer": "Selecciona el emisor de arriba para copiarlo.",
+      "manualCurrency": "Selecciona el código de moneda de arriba para copiarlo.",
+      "signAction": "Configurar línea de confianza CAL en Xaman",
+      "signLabel": "Crear una solicitud de línea de confianza CAL y revisarla en Xaman",
+      "before": "Antes de continuar",
+      "context": "Una línea de confianza CAL pertenece a tu cartera XRPL. Comprueba el emisor y el código de moneda en la solicitud antes de firmar. La búsqueda de alimentos y la información nutricional de CalorieApp no requieren una línea de confianza CAL.",
+      "toolkit": "Abrir XRP Toolkit"
+    },
+    "ar": {
+      "copyIssuer": "نسخ عنوان المُصدر",
+      "copyCurrency": "نسخ رمز العملة",
+      "copiedIssuer": "تم نسخ عنوان المُصدر.",
+      "copiedCurrency": "تم نسخ رمز العملة.",
+      "manualIssuer": "حدّد عنوان المُصدر أعلاه لنسخه.",
+      "manualCurrency": "حدّد رمز العملة أعلاه لنسخه.",
+      "signAction": "إعداد خط ثقة ⁦CAL⁩ في ⁦Xaman⁩",
+      "signLabel": "إنشاء طلب خط ثقة ⁦CAL⁩ ومراجعته في ⁦Xaman⁩",
+      "before": "قبل المتابعة",
+      "context": "يرتبط خط ثقة ⁦CAL⁩ بمحفظتك على ⁦XRPL⁩. تحقّق من عنوان المُصدر ورمز العملة في الطلب قبل التوقيع. لا يتطلب البحث عن الأغذية وعرض المعلومات الغذائية في ⁦CalorieApp⁩ خط ثقة ⁦CAL⁩.",
+      "toolkit": "فتح ⁦XRP Toolkit⁩"
+    },
+    "fr": {
+      "copyIssuer": "Copier l’émetteur",
+      "copyCurrency": "Copier le code de devise",
+      "copiedIssuer": "Émetteur copié.",
+      "copiedCurrency": "Code de devise copié.",
+      "manualIssuer": "Sélectionnez l’émetteur ci-dessus pour le copier.",
+      "manualCurrency": "Sélectionnez le code de devise ci-dessus pour le copier.",
+      "signAction": "Configurer la ligne de confiance CAL dans Xaman",
+      "signLabel": "Créer une demande de ligne de confiance CAL et la vérifier dans Xaman",
+      "before": "Avant de continuer",
+      "context": "Une ligne de confiance CAL appartient à votre portefeuille XRPL. Vérifiez l’émetteur et le code de devise dans la demande avant de signer. La recherche d’aliments et les informations nutritionnelles dans CalorieApp ne nécessitent pas de ligne de confiance CAL.",
+      "toolkit": "Ouvrir XRP Toolkit"
+    },
+    "bn": {
+      "copyIssuer": "ইস্যুকারীর ঠিকানা কপি করুন",
+      "copyCurrency": "মুদ্রার কোড কপি করুন",
+      "copiedIssuer": "ইস্যুকারীর ঠিকানা কপি হয়েছে।",
+      "copiedCurrency": "মুদ্রার কোড কপি হয়েছে।",
+      "manualIssuer": "কপি করতে উপরের ইস্যুকারীর ঠিকানা নির্বাচন করুন।",
+      "manualCurrency": "কপি করতে উপরের মুদ্রার কোড নির্বাচন করুন।",
+      "signAction": "Xaman-এ CAL ট্রাস্টলাইন সেট করুন",
+      "signLabel": "CAL ট্রাস্টলাইনের অনুরোধ তৈরি করুন এবং Xaman-এ যাচাই করুন",
+      "before": "এগিয়ে যাওয়ার আগে",
+      "context": "CAL ট্রাস্টলাইন আপনার XRPL ওয়ালেটের সঙ্গে যুক্ত থাকে। স্বাক্ষর করার আগে অনুরোধের ইস্যুকারীর ঠিকানা ও মুদ্রার কোড যাচাই করুন। CalorieApp-এ খাবার খোঁজা এবং পুষ্টির তথ্য দেখার জন্য CAL ট্রাস্টলাইন প্রয়োজন হয় না।",
+      "toolkit": "XRP Toolkit খুলুন"
+    },
+    "pt": {
+      "copyIssuer": "Copiar emissor",
+      "copyCurrency": "Copiar código da moeda",
+      "copiedIssuer": "Emissor copiado.",
+      "copiedCurrency": "Código da moeda copiado.",
+      "manualIssuer": "Selecione o emissor acima para o copiar.",
+      "manualCurrency": "Selecione o código da moeda acima para o copiar.",
+      "signAction": "Configurar linha de confiança CAL no Xaman",
+      "signLabel": "Criar um pedido de linha de confiança CAL e verificá-lo no Xaman",
+      "before": "Antes de continuar",
+      "context": "Uma linha de confiança CAL pertence à sua carteira XRPL. Verifique o emissor e o código da moeda no pedido antes de assinar. A pesquisa de alimentos e as informações nutricionais na CalorieApp não exigem uma linha de confiança CAL.",
+      "toolkit": "Abrir XRP Toolkit"
+    },
+    "id": {
+      "copyIssuer": "Salin penerbit",
+      "copyCurrency": "Salin kode mata uang",
+      "copiedIssuer": "Penerbit disalin.",
+      "copiedCurrency": "Kode mata uang disalin.",
+      "manualIssuer": "Pilih penerbit di atas untuk menyalinnya.",
+      "manualCurrency": "Pilih kode mata uang di atas untuk menyalinnya.",
+      "signAction": "Atur trustline CAL di Xaman",
+      "signLabel": "Buat permintaan trustline CAL dan periksa di Xaman",
+      "before": "Sebelum melanjutkan",
+      "context": "Trustline CAL terhubung ke dompet XRPL Anda. Periksa penerbit dan kode mata uang dalam permintaan sebelum menandatangani. Pencarian makanan dan informasi gizi di CalorieApp tidak memerlukan trustline CAL.",
+      "toolkit": "Buka XRP Toolkit"
+    },
+    "ur": {
+      "copyIssuer": "جاری کنندہ کا پتہ کاپی کریں",
+      "copyCurrency": "کرنسی کوڈ کاپی کریں",
+      "copiedIssuer": "جاری کنندہ کا پتہ کاپی ہو گیا۔",
+      "copiedCurrency": "کرنسی کوڈ کاپی ہو گیا۔",
+      "manualIssuer": "کاپی کرنے کے لیے اوپر دیا گیا جاری کنندہ کا پتہ منتخب کریں۔",
+      "manualCurrency": "کاپی کرنے کے لیے اوپر دیا گیا کرنسی کوڈ منتخب کریں۔",
+      "signAction": "⁦Xaman⁩ میں ⁦CAL⁩ ٹرسٹ لائن قائم کریں",
+      "signLabel": "⁦CAL⁩ ٹرسٹ لائن کی درخواست بنائیں اور ⁦Xaman⁩ میں اس کی جانچ کریں",
+      "before": "آگے بڑھنے سے پہلے",
+      "context": "⁦CAL⁩ ٹرسٹ لائن آپ کے ⁦XRPL⁩ والیٹ سے منسلک ہوتی ہے۔ دستخط کرنے سے پہلے درخواست میں جاری کنندہ کا پتہ اور کرنسی کوڈ چیک کریں۔ ⁦CalorieApp⁩ میں کھانے کی تلاش اور غذائی معلومات کے لیے ⁦CAL⁩ ٹرسٹ لائن کی ضرورت نہیں ہے۔",
+      "toolkit": "⁦XRP Toolkit⁩ کھولیں"
+    },
+    "nl": {
+      "copyIssuer": "Issuer kopiëren",
+      "copyCurrency": "Valutacode kopiëren",
+      "copiedIssuer": "Issuer gekopieerd.",
+      "copiedCurrency": "Valutacode gekopieerd.",
+      "manualIssuer": "Selecteer de issuer hierboven om deze te kopiëren.",
+      "manualCurrency": "Selecteer de valutacode hierboven om deze te kopiëren.",
+      "signAction": "CAL-trustline instellen in Xaman",
+      "signLabel": "Maak een CAL-trustlineverzoek aan en controleer het in Xaman",
+      "before": "Voordat je verdergaat",
+      "context": "Een CAL-trustline hoort bij je XRPL-wallet. Controleer de issuer en de valutacode in het verzoek voordat je ondertekent. Voor het zoeken naar voedingsmiddelen en het bekijken van voedingsinformatie in CalorieApp is geen CAL-trustline nodig.",
+      "toolkit": "XRP Toolkit openen"
+    }
+  }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
new file mode 100644
index 0000000..6fa0039
--- /dev/null
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
@@ -0,0 +1,105 @@
+<?php
+
+namespace CalorieApp\IdentityBridge;
+
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+/** Additive display preview. Never filters the authentication/WP locale. */
+class DisplayLanguage {
+    private bool $rendered = false;
+
+    public function register_hooks(): void {
+        add_action('wp_enqueue_scripts', [$this, 'enqueue']);
+        add_action('wp_footer', [$this, 'render'], 6);
+    }
+
+    private function enabled(): bool {
+        return defined('CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW')
+            && CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW === true
+            && !is_admin() && !is_feed() && !is_embed()
+            && !(defined('REST_REQUEST') && REST_REQUEST)
+            && !(function_exists('wp_doing_ajax') && wp_doing_ajax());
+    }
+
+    private function config(string $name): array {
+        $path = dirname(__DIR__) . '/config/' . $name . '.json';
+        if (!is_readable($path)) {
+            return [];
+        }
+        $contents = file_get_contents($path);
+        $decoded = is_string($contents) ? json_decode($contents, true) : null;
+        return is_array($decoded) ? $decoded : [];
+    }
+
+    private function cms_preview(): array {
+        // One observed public page only. Never add the sample to POST, editor,
+        // draft/private/password-protected or unknown query contexts.
+        if (($_SERVER['REQUEST_METHOD'] ?? '') !== 'GET'
+            || !is_page(6855) || is_preview()
+            || get_post_status(6855) !== 'publish'
+            || get_post_field('post_password', 6855, 'raw') !== ''
+            || array_diff(array_keys($_GET), ['ui_lang'])
+            || (isset($_GET['ui_lang']) && !is_string($_GET['ui_lang']))) {
+            return [];
+        }
+        $catalogue = $this->config('cms-faq-preview');
+        return ($catalogue['schema_version'] ?? null) === 1
+            && ($catalogue['mode'] ?? '') === 'opt-in-development-preview'
+            && ($catalogue['wordpress_id'] ?? null) === 6855
+            ? $catalogue : [];
+    }
+
+    public function enqueue(): void {
+        if (!$this->enabled()) {
+            return;
+        }
+        $base = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE) . 'assets/';
+        $version = CALORIEAPP_IDENTITY_BRIDGE_VERSION;
+        wp_enqueue_style('calorieapp-display-language', $base . 'calorieapp-display-language.css', [], $version);
+        wp_enqueue_script('calorieapp-display-language-runtime', $base . 'calorieapp-display-language-runtime.js', [], $version, true);
+        $dependencies = ['calorieapp-display-language-runtime'];
+        $configuration = [
+            'locales' => LocaleRegistry::all()['locales'],
+            'initialLocale' => LocaleRegistry::resolve(get_locale()),
+            'copy' => $this->config('display-language'),
+            'information' => $this->config('app-information'),
+            'navigation' => $this->config('navigation'),
+        ];
+        if (is_page(3243)) {
+            $configuration['richlist'] = $this->config('richlist');
+        }
+        if (is_page(1205)) {
+            $configuration['trustline'] = $this->config('trustline');
+        }
+        $cms_preview = $this->cms_preview();
+        if ($cms_preview) {
+            wp_enqueue_script('calorieapp-cms-language-preview', $base . 'calorieapp-cms-language-preview.js', [], $version, true);
+            $dependencies[] = 'calorieapp-cms-language-preview';
+            $configuration['cmsPreview'] = $cms_preview;
+        }
+        wp_enqueue_script('calorieapp-display-language', $base . 'calorieapp-display-language.js', $dependencies, $version, true);
+        wp_add_inline_script('calorieapp-display-language',
+            'window.calorieappDisplayLanguageConfig = ' . wp_json_encode($configuration,
+                JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT) . ';', 'before');
+    }
+
+    public function render(): void {
+        if (!$this->enabled() || $this->rendered) {
+            return;
+        }
+        $this->rendered = true;
+        ?>
+        <div class="calorieapp-display-language" data-calorieapp-display-language hidden>
+            <label for="calorieapp-display-language-select" data-calorieapp-language-label>Language</label>
+            <select id="calorieapp-display-language-select" aria-describedby="calorieapp-display-language-note">
+                <?php foreach (LocaleRegistry::all()['locales'] as $locale) : ?>
+                    <option value="<?php echo esc_attr($locale['tag']); ?>" lang="<?php echo esc_attr($locale['tag']); ?>"><?php echo esc_html($locale['native_name']); ?></option>
+                <?php endforeach; ?>
+            </select>
+            <p id="calorieapp-display-language-note" data-calorieapp-language-note></p>
+        </div>
+        <?php
+    }
+}
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
index 84e19ec..02ee9ba 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-page-ending.php
@@ -7,7 +7,7 @@
 }
 
 /**
- * Restore only the CalorieApp WordPress page ending.
+ * Share public page furniture without changing stored Brizy content.
  * Keep this presentation separate from all sign-in and session controllers.
  */
 class PageEnding {
@@ -20,12 +20,18 @@ public function register_hooks(): void {
         add_action('wp_footer', [$this, 'render'], 5);
     }
 
+    private function is_public_html_request(): bool {
+        return !is_admin() && !is_feed() && !is_embed()
+            && !(defined('REST_REQUEST') && REST_REQUEST)
+            && !(function_exists('wp_doing_ajax') && wp_doing_ajax());
+    }
+
     private function is_app_page(): bool {
-        return !is_admin() && !is_feed() && !is_embed() && is_page('calorieapp');
+        return $this->is_public_html_request() && is_page('calorieapp');
     }
 
     public function enqueue_assets(): void {
-        if (is_admin() || is_feed() || is_embed()) {
+        if (!$this->is_public_html_request()) {
             return;
         }
 
@@ -35,11 +41,101 @@ public function enqueue_assets(): void {
         wp_enqueue_script('calorieapp-identity-bridge-page-ending', $url . 'calorieapp-page-ending.js', [], $version, true);
         wp_enqueue_style('calorieapp-identity-bridge-site-polish', $url . 'calorieapp-site-polish.css', ['calorieapp-identity-bridge-page-ending'], $version);
         wp_enqueue_script('calorieapp-identity-bridge-site-polish', $url . 'calorieapp-site-polish.js', [], $version, true);
+        // Trustline presentation receives a boolean only, never API credentials. The
+        // installed XUMM plugin still owns payload creation and signing flow.
+        // wp_localize_script stringifies scalars. Preserve a real JSON boolean
+        // so the frontend's strict readiness check cannot accept a truthy string.
+        // Blog copy is public and contains no stored visitor preference.
+        $presentation = ['trustlineReady' => $this->cal_trustline_configured()];
+        // Restrict the display helper to the observed public page. This marker
+        // is independent of native signing readiness and carries no identity.
+        if (is_page('trustline') && ($_SERVER['REQUEST_METHOD'] ?? '') === 'GET'
+            && !is_preview() && get_post_status(1205) === 'publish'
+            && get_post_field('post_password', 1205, 'raw') === ''
+            && !array_diff(array_keys($_GET), ['ui_lang'])
+            && (!isset($_GET['ui_lang']) || is_string($_GET['ui_lang']))) {
+            $presentation['trustlinePage'] = true;
+        }
+        if (is_page(1207) && ($_SERVER['REQUEST_METHOD'] ?? '') === 'GET'
+            && !is_preview() && get_post_status(1207) === 'publish'
+            && get_post_field('post_password', 1207, 'raw') === '') {
+            $path = dirname(__DIR__) . '/config/blog-x.json';
+            $contents = is_readable($path) ? file_get_contents($path) : false;
+            $catalogue = is_string($contents) ? json_decode($contents, true) : null;
+            $presentation['blog'] = [
+                'publicPage' => true,
+                'initialLocale' => LocaleRegistry::resolve(get_locale()),
+                'locales' => LocaleRegistry::all()['locales'],
+                'copy' => is_array($catalogue) && isset($catalogue['translations'])
+                    && is_array($catalogue['translations']) ? $catalogue['translations'] : [],
+            ];
+        }
+        if (is_page(1209) && ($_SERVER['REQUEST_METHOD'] ?? '') === 'GET'
+            && !is_preview() && get_post_status(1209) === 'publish'
+            && get_post_field('post_password', 1209, 'raw') === ''
+            && !array_diff(array_keys($_GET), ['ui_lang'])
+            && (!isset($_GET['ui_lang']) || is_string($_GET['ui_lang']))) {
+            $path = dirname(__DIR__) . '/config/tokenomics.json';
+            $contents = is_readable($path) ? file_get_contents($path) : false;
+            $catalogue = is_string($contents) ? json_decode($contents, true) : null;
+            $presentation['tokenomics'] = [
+                'publicPage' => true,
+                'initialLocale' => LocaleRegistry::resolve(get_locale()),
+                'locales' => LocaleRegistry::all()['locales'],
+                'copy' => is_array($catalogue) && isset($catalogue['translations'])
+                    && is_array($catalogue['translations']) ? $catalogue['translations'] : [],
+            ];
+            wp_enqueue_style('calorieapp-tokenomics', $url . 'calorieapp-tokenomics.css', ['calorieapp-identity-bridge-site-polish'], $version);
+            wp_enqueue_script('calorieapp-tokenomics', $url . 'calorieapp-tokenomics.js', ['calorieapp-identity-bridge-site-polish'], $version, true);
+        }
+        if (is_page(4205) && ($_SERVER['REQUEST_METHOD'] ?? '') === 'GET'
+            && !is_preview() && get_post_status(4205) === 'publish'
+            && get_post_field('post_password', 4205, 'raw') === ''
+            && !array_diff(array_keys($_GET), ['ui_lang'])
+            && (!isset($_GET['ui_lang']) || is_string($_GET['ui_lang']))) {
+            $path = dirname(__DIR__) . '/config/how-to-buy.json';
+            $contents = is_readable($path) ? file_get_contents($path) : false;
+            $catalogue = is_string($contents) ? json_decode($contents, true) : null;
+            $presentation['buyGuide'] = [
+                'publicPage' => true,
+                'initialLocale' => LocaleRegistry::resolve(get_locale()),
+                'locales' => LocaleRegistry::all()['locales'],
+                'copy' => is_array($catalogue) && isset($catalogue['translations'])
+                    && is_array($catalogue['translations']) ? $catalogue['translations'] : [],
+            ];
+            wp_enqueue_script('calorieapp-buy-guide-language', $url . 'calorieapp-buy-guide-language.js', ['calorieapp-identity-bridge-site-polish'], $version, true);
+        }
+        wp_add_inline_script(
+            'calorieapp-identity-bridge-site-polish',
+            'window.calorieappSitePolish = ' . wp_json_encode($presentation,
+                JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT) . ';',
+            'before'
+        );
+    }
+
+    private function cal_trustline_configured(): bool {
+        if (!is_page('trustline') || !class_exists('Xummlogin_XUMM', false)
+            || !method_exists('Xummlogin_XUMM', 'xummlogin_prepare_trustline')) {
+            return false;
+        }
+        if (get_option('xummlogin_trustline_issuer') !== 'rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY') {
+            return false;
+        }
+        $currency = get_option('xummlogin_trustline_currency');
+        if (!in_array($currency, ['Calorie', '43616C6F72696500000000000000000000000000'], true)) {
+            return false;
+        }
+        $limit = get_option('xummlogin_trustline_limit');
+        if (!is_string($limit) && !is_int($limit) && !is_float($limit)) {
+            return false;
+        }
+        return preg_match('/^[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$/D', (string) $limit) === 1
+            && is_finite((float) $limit) && (float) $limit > 0;
     }
 
     /** One compact stack replaces the page-specific fixed shortcut slots. */
     public function render_shortcuts(): void {
-        if ($this->shortcuts_rendered || is_admin() || is_feed() || is_embed()) {
+        if ($this->shortcuts_rendered || !$this->is_public_html_request()) {
             return;
         }
         $this->shortcuts_rendered = true;
@@ -72,22 +168,17 @@ public function render_shortcuts(): void {
     }
 
     public function render(): void {
-        if ($this->rendered || is_admin() || is_feed() || is_embed() || !is_singular()) {
+        if ($this->rendered || !$this->is_public_html_request()) {
             return;
         }
         $this->rendered = true;
-        if (!$this->is_app_page()) {
-            ?>
-            <aside class="calorieapp-page-market calorieapp-sitewide-market" data-calorieapp-sitewide-market aria-label="<?php echo esc_attr__('Calorie Token on XPMarket', 'calorieapp-identity-bridge'); ?>">
-                <div class="calorieapp-xpmarket-widget" data-calorieapp-xpmarket-widget>
-                    <a class="calorieapp-xpmarket-link" href="<?php echo esc_url(MarketWidget::TOKEN_PAGE); ?>" rel="noopener noreferrer">
-                        <?php echo esc_html__('View CAL on XPMarket', 'calorieapp-identity-bridge'); ?>
-                    </a>
-                </div>
-            </aside>
-            <?php
-            return;
-        }
+        $app_page = $this->is_app_page();
+        // Use the page's WordPress locale, never a visitor's private profile or
+        // Accept-Language header: this component is safe in shared page caches.
+        $locale = LocaleRegistry::resolve(get_locale());
+        $copy = $this->app_information_copy($locale);
+        $locale = $copy['locale'];
+        $logo = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE) . 'assets/calorieapp-logo.svg';
         $copyright_year = wp_date('Y');
         $social_links = [
             ['label' => 'Telegram', 'url' => 'https://t.me/+7YxaKdQYWNA0NDA0', 'icon' => 'telegram.svg'],
@@ -99,15 +190,29 @@ public function render(): void {
             ['label' => 'Instagram', 'url' => 'https://www.instagram.com/calorietoken/', 'icon' => 'instagram-square.svg'],
         ];
         ?>
-        <div class="calorieapp-shared-page-ending" data-calorieapp-shared-page-ending>
-            <aside class="calorieapp-page-market" aria-label="<?php echo esc_attr__('Calorie Token on XPMarket', 'calorieapp-identity-bridge'); ?>">
+        <div class="calorieapp-shared-page-ending" data-calorieapp-shared-page-ending data-calorieapp-page="<?php echo $app_page ? 'app' : 'site'; ?>">
+            <aside class="calorieapp-app-info" data-calorieapp-app-info lang="<?php echo esc_attr($locale); ?>" dir="<?php echo esc_attr(LocaleRegistry::direction($locale)); ?>" aria-labelledby="calorieapp-app-info-title">
+                <img src="<?php echo esc_url($logo); ?>" alt="" width="64" height="64" loading="lazy">
+                <div>
+                    <h2 id="calorieapp-app-info-title">CalorieApp</h2>
+                    <p><?php echo esc_html($copy['description']); ?></p>
+                </div>
+                <?php if ($app_page) : ?>
+                    <p class="calorieapp-app-info-current"><?php echo esc_html($copy['on_page']); ?></p>
+                <?php else : ?>
+                    <a class="calorieapp-app-info-link" href="<?php echo esc_url(home_url('/index.php/calorieapp/')); ?>"><?php echo esc_html($copy['action']); ?></a>
+                <?php endif; ?>
+            </aside>
+            <?php if (is_singular()) : ?>
+            <aside class="calorieapp-page-market calorieapp-sitewide-market" data-calorieapp-sitewide-market aria-label="<?php echo esc_attr__('Calorie Token on XPMarket', 'calorieapp-identity-bridge'); ?>"<?php echo $app_page ? '' : ' hidden'; ?>>
                 <div class="calorieapp-xpmarket-widget" data-calorieapp-xpmarket-widget>
                     <a class="calorieapp-xpmarket-link" href="<?php echo esc_url(MarketWidget::TOKEN_PAGE); ?>" rel="noopener noreferrer">
                         <?php echo esc_html__('View CAL on XPMarket', 'calorieapp-identity-bridge'); ?>
                     </a>
                 </div>
             </aside>
-            <footer class="calorieapp-shared-footer">
+            <?php endif; ?>
+            <footer class="calorieapp-shared-footer"<?php echo $app_page ? '' : ' hidden'; ?>>
                 <nav
                     class="calorieapp-shared-socials"
                     aria-label="<?php echo esc_attr__('CalorieToken social channels', 'calorieapp-identity-bridge'); ?>"
@@ -160,7 +265,33 @@ class="calorieapp-shared-social-arrow"
                     </p>
                 </div>
             </footer>
+            <?php if (!$app_page) : ?>
+                <noscript>
+                    <nav class="calorieapp-footer-no-script calorieapp-shared-legal-links" aria-label="<?php echo esc_attr__('Legal information', 'calorieapp-identity-bridge'); ?>">
+                        <a href="<?php echo esc_url(home_url('/index.php/privacy-policy/')); ?>"><?php echo esc_html__('Privacy Policy', 'calorieapp-identity-bridge'); ?></a>
+                        <a href="<?php echo esc_url(home_url('/index.php/terms-conditions/')); ?>"><?php echo esc_html__('Terms & Conditions', 'calorieapp-identity-bridge'); ?></a>
+                    </nav>
+                </noscript>
+            <?php endif; ?>
         </div>
         <?php
     }
+
+    private function app_information_copy(string $locale): array {
+        $fallback = [
+            'description' => 'Find food products, explore nutrition and keep your own food diary.',
+            'action' => 'Open CalorieApp',
+            'on_page' => 'CalorieApp is available above.',
+        ];
+        $path = dirname(__DIR__) . '/config/app-information.json';
+        $contents = is_readable($path) ? file_get_contents($path) : false;
+        $decoded = is_string($contents) ? json_decode($contents, true) : null;
+        $copy = is_array($decoded) ? ($decoded[$locale] ?? null) : null;
+        foreach ($fallback as $key => $value) {
+            if (!is_array($copy) || !isset($copy[$key]) || !is_string($copy[$key]) || trim($copy[$key]) === '') {
+                return $fallback + ['locale' => 'en'];
+            }
+        }
+        return array_intersect_key($copy, $fallback) + ['locale' => $locale];
+    }
 }
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
index 2733910..2ba950e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge.php
@@ -15,6 +15,7 @@
 require_once __DIR__ . '/class-calorieapp-identity-bridge-legal-footer-compatibility.php';
 require_once __DIR__ . '/class-calorieapp-identity-bridge-market-widget.php';
 require_once __DIR__ . '/class-calorieapp-identity-bridge-page-ending.php';
+require_once __DIR__ . '/class-calorieapp-identity-bridge-display-language.php';
 
 class Plugin {
     public const OPTION_KEY = 'calorieapp_identity_bridge_options';
@@ -36,6 +37,7 @@ class Plugin {
     private MarketWidget $market_widget;
 
     private PageEnding $page_ending;
+    private DisplayLanguage $display_language;
 
     public static function instance(): Plugin {
         if (self::$instance === null) {
@@ -54,6 +56,7 @@ private function __construct() {
         $this->legal_footer_compatibility = new LegalFooterCompatibility();
         $this->market_widget = new MarketWidget();
         $this->page_ending = new PageEnding();
+        $this->display_language = new DisplayLanguage();
 
         register_activation_hook(CALORIEAPP_IDENTITY_BRIDGE_FILE, [$this, 'activate']);
 
@@ -69,6 +72,7 @@ public function init(): void {
         $this->legal_footer_compatibility->register_hooks();
         $this->market_widget->register_hooks();
         $this->page_ending->register_hooks();
+        $this->display_language->register_hooks();
         add_filter('woocommerce_add_to_cart_redirect', [self::class, 'donation_return_url'], 20, 2);
     }
 

From c81d681f9f1a6713ad5c8b851f0597c75191d284 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 09:55:55 +0200
Subject: [PATCH 07/12] Fix PHP fixture ordering and expose CI failure details

---
 tools/check_step3_candidate.py             |  4 ++++
 tools/tests/wordpress_page_ending.test.php | 13 ++++++++-----
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/tools/check_step3_candidate.py b/tools/check_step3_candidate.py
index 2a1bec3..b9e4e0f 100644
--- a/tools/check_step3_candidate.py
+++ b/tools/check_step3_candidate.py
@@ -82,6 +82,10 @@ def run(name: str, commands: list[list[str]], *, available: bool = True,
         result["seconds"] = round(time.monotonic() - started, 3)
         checks.append(result)
         print(f"{result['status']}: {name}" + (f" — {reason}" if not available else ""), flush=True)
+        if result["status"] == "FAIL":
+            # CI runners are ephemeral; keep the bounded failure detail in the
+            # job log as well as the complete local report directory.
+            print(log[-16000:], flush=True)
 
     node = shutil.which("node")
     php = shutil.which("php")
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index ed5da78..eceb671 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -267,11 +267,6 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
     check($market->get_widget() instanceof WP_Error, 'Failed upstream data must not become fake figures.');
     check($market->get_widget() instanceof WP_Error && count($requests) === 1, 'Back off for a minute after an upstream failure.');
 }
-define('REST_REQUEST', true);
-check(render(new PageEnding()) === '', 'REST responses must not receive public page furniture.');
-echo "WordPress page-ending rendering, scope, market validation and cache checks passed.\n";
-
-
 // Additive Tokenomics helper receives only public copy and no native signing readiness.
 $page = 1209; $admin = $feed = $embed = $ajax = $preview = false;
 $post_status = 'publish'; $post_password = ''; $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET = [];
@@ -297,3 +292,11 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
     (new PageEnding())->enqueue_assets();
     check(!isset($config['calorieapp-identity-bridge-site-polish']['buyGuide']) && !isset($scripts['calorieapp-buy-guide-language']), 'Unknown or nonpublic guide contexts remain native');
 }
+
+// PHP constants cannot be reset: exercise REST only after all public-page cases.
+define('REST_REQUEST', true);
+check(render(new PageEnding()) === '', 'REST responses must not receive public page furniture.');
+$styles = $scripts = [];
+(new PageEnding())->enqueue_assets();
+check(!$styles && !$scripts, 'REST responses must not enqueue public presentation assets.');
+echo "WordPress page-ending rendering, scope, market validation and cache checks passed.\n";

From 6829642e6ad7826c695752a59426bc0916dd1331 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 10:20:51 +0200
Subject: [PATCH 08/12] Address Step 3 Copilot feedback in bridge 0.3.41

---
 .../identity-bridge/v1/code-provenance.json   |  2 +-
 docs/STEP_3_PRESENTATION_RELEASE.md           | 21 ++++++++++++++-----
 docs/STEP_3_REPAIR_CHECKPOINT.md              | 11 ++++++++--
 .../test_build_wordpress_plugin_release.py    |  4 ++++
 .../tests/wordpress_display_language.test.php | 13 +++++++++++-
 tools/tests/wordpress_page_ending.test.php    |  1 +
 .../calorieapp-identity-bridge/README.md      | 18 +++++++++++++---
 .../calorieapp-identity-bridge.php            |  4 ++--
 ...ieapp-identity-bridge-display-language.php |  8 ++++++-
 ...ieapp-identity-bridge-integrated-login.php |  2 +-
 ...lorieapp-identity-bridge-market-widget.php |  4 ++--
 11 files changed, 70 insertions(+), 18 deletions(-)

diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index 4dc6da0..0896286 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -4,7 +4,7 @@
   "review_date": "2026-09-04",
   "plugin_version_reviewed": "0.3.2",
   "inventory_updated_on": "2026-09-09",
-  "inventory_plugin_version": "0.3.40",
+  "inventory_plugin_version": "0.3.41",
   "inventory_update_is_source_clearance": false,
   "distribution_clearance_status": "blocked-pending-source-clearance",
   "release_expansion_allowed": false,
diff --git a/docs/STEP_3_PRESENTATION_RELEASE.md b/docs/STEP_3_PRESENTATION_RELEASE.md
index bfb0013..5060fad 100644
--- a/docs/STEP_3_PRESENTATION_RELEASE.md
+++ b/docs/STEP_3_PRESENTATION_RELEASE.md
@@ -1,4 +1,12 @@
-# Step 3 presentation review — Identity Bridge 0.3.40
+# Step 3 presentation review — Identity Bridge 0.3.41
+
+Version 0.3.41 addresses the three Copilot comments on the combined 0.3.40
+review. Asset-cache fallback follows the current version; the server language
+label uses the existing locale catalogue with an escaped WordPress translation
+fallback; and fixed market links share one token constant. Session/authentication
+methods, browser assets, provider destinations and release-clearance flags are
+unchanged. Current-head CI and re-review results are recorded on
+[PR #133](https://github.com/CalorieToken/CalorieApp/pull/133).
 
 The accumulated website changes are submitted for one code-review and CI pass
 against the existing maintenance base, not app main. They address shared footers,
@@ -14,10 +22,13 @@ request is added. The Tokenomics helper uses an operator-supplied project wallet
 and dated ledger validation; all airdrops are operator-confirmed complete, while
 exact remaining giveaway figures are still open. Historical images are retained.
 
-130 local tests passed: 114 Node and 16 Python. JS syntax, package/asset checks,
-legal-boundary checks and whitespace passed. PHP lint/six fixtures were not run
-locally; the strict aggregate is INCOMPLETE. Hosted CI and actual WordPress/app,
-mobile/RTL, linguistic, consent and donation acceptance remain to be performed.
+The combined 0.3.40 tree passed 130 Node/Python tests, PHP lint and all six PHP
+fixture invocations in hosted run 34326418843. The first CI run identified an
+irreversible REST_REQUEST fixture placed before later public-page cases; the
+fixture order was corrected without changing plugin bytes. Local PHP remains
+unavailable; current-head hosted checks must pass before accepting 0.3.41.
+Actual WordPress/app, mobile/RTL, linguistic, consent and donation acceptance
+remain to be performed.
 Source clearance remains blocked; no new release, installation or mainnet
 financial feature is approved by this proposal.
 
diff --git a/docs/STEP_3_REPAIR_CHECKPOINT.md b/docs/STEP_3_REPAIR_CHECKPOINT.md
index 8e0037a..685ead2 100644
--- a/docs/STEP_3_REPAIR_CHECKPOINT.md
+++ b/docs/STEP_3_REPAIR_CHECKPOINT.md
@@ -1,11 +1,18 @@
 # Step 3 review and acceptance status
 
-Candidate: Identity Bridge 0.3.40, prepared and unreleased. This record retains
+Candidate: Identity Bridge 0.3.41, submitted for review and unreleased. This record retains
 all 27 requested areas. Website Step 3 precedes showcases (Step 4) and publication
 (Step 5). Accepted same-tab joint login/logout remains the regression baseline.
 No financial feature, source/right clearance, deployment or merge is enabled by
 this review. Local automated success is not native/browser or legal acceptance.
 
+The approved 0.3.40 proposal is public on PR #133 and its hosted CI passed,
+including PHP lint/six fixtures. Copilot reviewed that head and raised three
+comments. The 0.3.41 follow-up fixes the asset-version fallback, server-rendered
+language label and duplicated market token constant. Current-head CI and review
+results are recorded on the PR. The accepted session flow and all release gates
+remain unchanged.
+
 | Area | Evidence and status | Remaining closure |
 | --- | --- | --- |
 | BASE-1 — Steps 1/2 | Accepted foundation and same-tab joint login/logout; no new live verification in this reconciliation. | Preserve while adding display behavior; regression acceptance with the assembled app/plugin. |
@@ -34,7 +41,7 @@ this review. Local automated success is not native/browser or legal acceptance.
 | PILOT-1 — consumer/retailer | Design/offline proof only at `c008f61`; no working roles, inventory, checkout/inbox or faucet. | Explicit scope decision retained before Step 4. If included, build additive memberships/private stock, baskets/portions, verified Testnet payment requests/hash receipts and retailer/consumer screens in that order. Reserve distributor/producer/farm roles without granting rights. |
 | PILOT-2 — Testnet onboarding | Design only; fresh Xaman test-wallet behavior/current CalorieTest issuer still unverified. | Test ordinary app/site functions with Testnet identity; guide test XRP/reserves and CalorieTest separately. Assisted funding first, automated faucet later. Test funds never settle mainnet donations/trades. |
 | LEG-1 — legal/languages/countries | Partial alignment records and localized consequence/interface copy. App `d6b3f1d` removes its synthetic average Nutri-Score claim; website/source/trademark review, complete public notices and eleven reviewed legal translations remain open. | Feature-by-feature source/terms/privacy/cookie/health-data/financial/provider/rights review. Preserve factual product-grade attribution and review other nutrition claims. Apply LEG-1 above; scope country supplements to actual services/target markets. |
-| RELEASE-1 — review/publication | Open: 0.3.40 passes 130 tests; PHP is unavailable so the strict result is INCOMPLETE/exit 2. PR #133 actual public head and already-public historical provenance were verified. Prepare a public review tree excluding later private recovery history.  | Points 1/3/5: exact compatible candidates, required checks/review, authorized publication/merge/install and tested rollback. Private backup and structural legal/package checks do not clear public distribution. |
+| RELEASE-1 — review/publication | Partial: the approved public 0.3.40 tree passed hosted CI, including PHP lint/six fixtures; 0.3.41 addresses its three Copilot comments. Check PR #133 for current-head CI/re-review results. Later private recovery history is excluded. | Points 1/3/5: exact compatible candidates, required current-head checks/review, source/service-term clearance, native acceptance, explicit merge/install and tested rollback. Public-review permission and green CI do not clear distribution. |
 
 The next acceptance must use the exact compatible app and plugin candidates.
 Cover 360/412/1440 px, tablet/narrow desktop, keyboard/zoom, RTL, native consent,
diff --git a/tools/tests/test_build_wordpress_plugin_release.py b/tools/tests/test_build_wordpress_plugin_release.py
index 197a44e..3a73047 100644
--- a/tools/tests/test_build_wordpress_plugin_release.py
+++ b/tools/tests/test_build_wordpress_plugin_release.py
@@ -16,6 +16,10 @@ def test_version_matches_plugin_header(self) -> None:
             release.plugin_version(),
             re.compile(r"^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$"),
         )
+        integrated = (release.PLUGIN_DIR / "includes/class-calorieapp-identity-bridge-integrated-login.php").read_text()
+        fallback = re.search(r"CALORIEAPP_IDENTITY_BRIDGE_VERSION\s*:\s*'([^']+)'", integrated)
+        self.assertIsNotNone(fallback, "The standalone asset version must be explicit")
+        self.assertEqual(fallback.group(1), release.plugin_version(), "Asset cache version must follow the release header")
 
     def test_build_is_reproducible_and_safe(self) -> None:
         with tempfile.TemporaryDirectory() as first, tempfile.TemporaryDirectory() as second:
diff --git a/tools/tests/wordpress_display_language.test.php b/tools/tests/wordpress_display_language.test.php
index 1923d23..990d9fc 100644
--- a/tools/tests/wordpress_display_language.test.php
+++ b/tools/tests/wordpress_display_language.test.php
@@ -9,6 +9,7 @@
 $preview = false;
 $post_status = 'publish';
 $post_password = '';
+$site_locale = 'nl_NL';
 $_SERVER['REQUEST_METHOD'] = 'GET';
 $_GET = [];
 $scripts = [];
@@ -26,7 +27,8 @@ function get_post_field($field, $id, $context) {
     return $post_password;
 }
 function plugin_dir_url($file) { return 'https://calorietoken.net/plugin/'; }
-function get_locale() { return 'nl_NL'; }
+function get_locale() { return $GLOBALS['site_locale']; }
+function __($value, $domain) { return $value; }
 function wp_enqueue_style(...$args) { global $scripts; $scripts[] = $args; }
 function wp_enqueue_script(...$args) { global $scripts; $scripts[] = $args; }
 function wp_add_inline_script(...$args) { global $inline; $inline[] = $args; }
@@ -52,6 +54,15 @@ function check($condition, $message) { if (!$condition) throw new RuntimeExcepti
     check(count($scripts) === 3 && count($inline) === 1, 'One isolated display controller and stylesheet');
     check(strpos($inline[0][1], '"initialLocale":"nl"') !== false, 'Use public page locale');
     check(strpos($inline[0][1], '"cmsPreview"') === false, 'Other pages have no FAQ catalogue');
+    $copy = json_decode(file_get_contents(dirname($includes) . '/config/display-language.json'), true);
+    foreach (\CalorieApp\IdentityBridge\LocaleRegistry::tags() as $site_locale) {
+        ob_start(); (new \CalorieApp\IdentityBridge\DisplayLanguage())->render(); $localized = ob_get_clean();
+        check(str_contains($localized, 'data-calorieapp-language-label>' . esc_html($copy[$site_locale]['label']) . '</label>'), 'Server-render the prepared selector label for ' . $site_locale);
+    }
+    $site_locale = 'de_DE';
+    ob_start(); (new \CalorieApp\IdentityBridge\DisplayLanguage())->render(); $fallback = ob_get_clean();
+    check(str_contains($fallback, 'data-calorieapp-language-label>Language</label>'), 'Unsupported public locales use the explicit English fallback');
+    $site_locale = 'nl_NL';
 
     $cases = [
         ['public FAQ', [], 'GET', 6855, false, 'publish', '', true],
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index eceb671..a49a95a 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -258,6 +258,7 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
 $response = $market->get_widget();
 check($response instanceof WP_REST_Response && $response->status === 200, 'Successful public data is returned.');
 check(count($requests) === 1 && $requests[0]['options']['redirection'] === 0, 'Only the fixed XPMarket endpoint is fetched.');
+check($requests[0]['url'] === 'https://api.xpmarket.com/api/currency/widget?token=Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY', 'The shared token identifier preserves the exact CAL data endpoint.');
 check($requests[0]['options']['limit_response_size'] === 16384, 'Bound the upstream response size.');
 check($response->headers['Cache-Control'] === 'public, max-age=300', 'Successful data uses a five-minute public cache.');
 $market->get_widget();
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index b594c39..5e82f0e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,7 +41,18 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
-## Current local candidate: 0.3.40
+## Current review candidate: 0.3.41
+
+This follow-up addresses the three Copilot comments on the combined website
+review: the standalone asset-cache version follows the plugin version, the
+server-rendered language label uses the existing eleven-locale catalogue with
+a WordPress translation fallback, and market URLs share the fixed CAL identity.
+The optional display control still starts hidden and is off by default.
+Authentication/session methods, browser assets and provider destinations are
+unchanged. Current-head checks and review results are recorded on PR #133;
+source/service-term clearance and native acceptance remain open.
+
+## Previous combined candidate: 0.3.40
 
 The full owned How to Buy/sell guide now follows the same optional display
 choice in eleven prepared languages. Its updated public copy includes the full
@@ -51,8 +62,9 @@ liquidity conflicts. It presents external trading as the current route. Site
 fonts, modest corners, wrapping, 44px links and RTL direction replace the earlier
 inconsistent guide styles. The public-page/source guards retain edited CMS,
 identity values, links and form/account state. No signing or quote call is added.
-130 local tests pass; PHP, hosted CI, native/mobile and linguistic acceptance
-remain open. Source/release clearance is unchanged; no installation is claimed.
+130 Node/Python tests, PHP lint and all six PHP fixtures passed in hosted run
+34326418843 after correcting fixture order. Native/mobile and linguistic
+acceptance remain open. Source/release clearance is unchanged.
 
 ## Previous Tokenomics cycle: 0.3.39
 
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 4cd9a14..9ca065c 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.40
+ * Version: 0.3.41
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.40');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.41');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
index 6fa0039..d8cc9fc 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
@@ -90,9 +90,15 @@ public function render(): void {
             return;
         }
         $this->rendered = true;
+        $copy = $this->config('display-language');
+        $locale = LocaleRegistry::resolve(get_locale());
+        $label = $copy[$locale]['label'] ?? '';
+        if (!is_string($label) || $label === '') {
+            $label = __('Language', 'calorieapp-identity-bridge');
+        }
         ?>
         <div class="calorieapp-display-language" data-calorieapp-display-language hidden>
-            <label for="calorieapp-display-language-select" data-calorieapp-language-label>Language</label>
+            <label for="calorieapp-display-language-select" data-calorieapp-language-label><?php echo esc_html($label); ?></label>
             <select id="calorieapp-display-language-select" aria-describedby="calorieapp-display-language-note">
                 <?php foreach (LocaleRegistry::all()['locales'] as $locale) : ?>
                     <option value="<?php echo esc_attr($locale['tag']); ?>" lang="<?php echo esc_attr($locale['tag']); ?>"><?php echo esc_html($locale['native_name']); ?></option>
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index b64a83f..ad6495e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.27';
+            : '0.3.41';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
index 02820c7..7fd4d4b 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
@@ -19,8 +19,8 @@ class MarketWidget {
     private const REST_NAMESPACE = 'calorieapp/v1';
     private const REST_ROUTE = '/xpmarket-widget';
     private const TOKEN = 'Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
-    public const TOKEN_PAGE = 'https://xpmarket.com/token/Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
-    private const API_URL = 'https://api.xpmarket.com/api/currency/widget?token=Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
+    public const TOKEN_PAGE = 'https://xpmarket.com/token/' . self::TOKEN;
+    private const API_URL = 'https://api.xpmarket.com/api/currency/widget?token=' . self::TOKEN;
     private const CACHE_KEY = 'calorieapp_xpmarket_widget_v1';
     private const ERROR_CACHE_KEY = 'calorieapp_xpmarket_widget_error_v1';
     private const CACHE_TTL_SECONDS = 5 * MINUTE_IN_SECONDS;

From 3af8c130dba27cc5ab06faa177b8b02bbb90710e Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 10:31:10 +0200
Subject: [PATCH 09/12] Keep Step 3 verification and preview instructions
 version independent

---
 docs/STEP_3_SESSION_NAVIGATION.md                            | 5 +++--
 .../calorieapp-identity-bridge/CONFIGURATION.md              | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/docs/STEP_3_SESSION_NAVIGATION.md b/docs/STEP_3_SESSION_NAVIGATION.md
index 3cf2c6c..669502e 100644
--- a/docs/STEP_3_SESSION_NAVIGATION.md
+++ b/docs/STEP_3_SESSION_NAVIGATION.md
@@ -71,13 +71,14 @@ Navigation tests cover Home, CalorieApp, FAQ, URL variants, inline content,
 unrelated icons, shared wrappers and invalid external asset configuration.
 The existing responsive header tests cover changes in the account card height.
 
-Run:
+Run from the current checkout. The sections above record historical changes;
+the package builder reads the version from this checkout's plugin header:
 
 ```sh
 node --test tools/tests/calorieapp_embed_readiness.test.mjs tools/tests/wordpress_site_session.test.mjs tools/tests/wordpress_site_layout.test.mjs tools/tests/wordpress_site_navigation.test.mjs
 php tools/tests/wordpress_site_session_markup.test.php
 python -m unittest tools.tests.test_build_wordpress_plugin_release
-python tools/build_wordpress_plugin_release.py --expected-version 0.3.25
+python tools/build_wordpress_plugin_release.py
 ```
 
 CI also lints plugin PHP. The original vector extraction is rendered and
diff --git a/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md b/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
index 89d3e02..528183c 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/CONFIGURATION.md
@@ -58,7 +58,7 @@ The optional `CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW` constant must be the boolean
 sets the authentication locale. The separately built CalorieApp preview uses
 `NEXT_PUBLIC_CALORIEAPP_DISPLAY_LANGUAGE_PREVIEW=1` for its corresponding control.
 
-Candidate 0.3.33 also includes a two-paragraph FAQ sample. The extra adapter and
+This preview also includes a two-paragraph FAQ sample. The extra adapter and
 catalogue load only on the configured public FAQ page, for GET outside content
 previews, password protection and unknown query contexts. Exact client-side
 source/page matching remains required. This is not an automatic site translator;

From df57896c29fd3b181743a1853af9650da1b53170 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 10:50:50 +0200
Subject: [PATCH 10/12] Bound header discovery and revalidate cached market
 snapshots

---
 .../identity-bridge/v1/code-provenance.json   |  2 +-
 tools/tests/wordpress_page_ending.test.php    |  6 ++-
 tools/tests/wordpress_richlist.test.mjs       |  8 ++--
 tools/tests/wordpress_site_layout.test.mjs    | 47 ++++++++++++++++---
 .../calorieapp-identity-bridge/README.md      | 12 ++++-
 .../assets/calorieapp-site-layout.js          | 34 +++++++++++---
 .../calorieapp-identity-bridge.php            |  4 +-
 ...ieapp-identity-bridge-integrated-login.php |  2 +-
 ...lorieapp-identity-bridge-market-widget.php |  4 +-
 9 files changed, 96 insertions(+), 23 deletions(-)

diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index 0896286..5f20d05 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -4,7 +4,7 @@
   "review_date": "2026-09-04",
   "plugin_version_reviewed": "0.3.2",
   "inventory_updated_on": "2026-09-09",
-  "inventory_plugin_version": "0.3.41",
+  "inventory_plugin_version": "0.3.42",
   "inventory_update_is_source_clearance": false,
   "distribution_clearance_status": "blocked-pending-source-clearance",
   "release_expansion_allowed": false,
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index a49a95a..5e116e6 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -260,8 +260,10 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
 check(count($requests) === 1 && $requests[0]['options']['redirection'] === 0, 'Only the fixed XPMarket endpoint is fetched.');
 check($requests[0]['url'] === 'https://api.xpmarket.com/api/currency/widget?token=Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY', 'The shared token identifier preserves the exact CAL data endpoint.');
 check($requests[0]['options']['limit_response_size'] === 16384, 'Bound the upstream response size.');
-check($response->headers['Cache-Control'] === 'public, max-age=300', 'Successful data uses a five-minute public cache.');
-$market->get_widget();
+check($response->headers['Cache-Control'] === 'public, max-age=0, must-revalidate', 'Browser and shared caches must revalidate instead of adding another freshness window.');
+check($cache['calorieapp_xpmarket_widget_v1']['ttl'] === 300, 'Origin caching still limits upstream requests to once per five minutes.');
+$cached_response = $market->get_widget();
+check($cached_response->headers === $response->headers, 'Transient hits retain the same revalidation policy.');
 check(count($requests) === 1, 'Cached requests must not refetch XPMarket.');
 foreach ([new WP_Error('offline', 'offline', []), ['status' => 503, 'body' => ''], ['status' => 200, 'body' => '{}']] as $upstream) {
     $cache = $requests = [];
diff --git a/tools/tests/wordpress_richlist.test.mjs b/tools/tests/wordpress_richlist.test.mjs
index 82205e2..6109232 100644
--- a/tools/tests/wordpress_richlist.test.mjs
+++ b/tools/tests/wordpress_richlist.test.mjs
@@ -9,7 +9,7 @@ const catalogue=JSON.parse(readFileSync(new URL('config/richlist.json',base)));
 
 // Synthetic provider rows with queued mutation delivery; not visual/native auth acceptance.
 function harness({late=false,marked=true,reduced=false,page=3243,path='/index.php/richlist/',search='',configure,protect}={}){
- const observers=[],events=new Map(),scrolls=[],focuses=[];
+ const observers=[],events=new Map(),scrolls=[],focuses=[],timers=new Map();let timerSequence=0;
  function emit(record){for(const observer of observers){
   if(!observer.target?.contains(record.target))continue;const options=observer.options;
   if(record.type==='attributes'&&(!options.attributes||!options.attributeFilter.includes(record.attributeName)))continue;
@@ -44,7 +44,9 @@ function harness({late=false,marked=true,reduced=false,page=3243,path='/index.ph
  const config={locales,richlist:structuredClone(catalogue)};configure?.(config);
  const window={location:{origin:'https://calorietoken.net',pathname:path,search},calorieappDisplayLanguageConfig:config,matchMedia:()=>({matches:reduced}),MutationObserver:true,
   addEventListener(type,callback){if(!events.has(type))events.set(type,[]);events.get(type).push(callback);},
-  setTimeout(){throw Error('No delayed focus');},setInterval(){throw Error('No polling');},fetch(){throw Error('No provider request');}};
+  removeEventListener(type,callback){events.set(type,(events.get(type)||[]).filter(fn=>fn!==callback));},
+  setTimeout(callback,delay){assert.equal(delay,10000,'Only the bounded card-discovery timeout is permitted');const id=++timerSequence;timers.set(id,callback);return id;},
+  clearTimeout(id){timers.delete(id);},setInterval(){throw Error('No polling');},fetch(){throw Error('No provider request');}};
  protect?.({slot,table,row,make,body});
  const context=vm.createContext({window,document,MutationObserver:class{
   constructor(callback){this.callback=callback;this.records=[];observers.push(this);}observe(target,options){this.target=target;this.options=options;}disconnect(){this.target=null;this.records=[];}
@@ -52,7 +54,7 @@ function harness({late=false,marked=true,reduced=false,page=3243,path='/index.ph
  function flush(){for(let i=0;i<30;i++){const pending=observers.filter(o=>o.records.length);if(!pending.length)return;for(const o of pending)o.callback(o.records.splice(0));}throw Error('Observer loop');}
  const run=()=>{vm.runInContext(source,context);flush();};run();
  return{window,document,html,body,slot,table,row,rank,make,scrolls,focuses,flush,run,
-  event(type){for(const fn of events.get(type)||[])fn();flush();},button(){return document.querySelector('[data-calorieapp-own-rank]');},
+  event(type){for(const fn of events.get(type)||[])fn({persisted:true});flush();},button(){return document.querySelector('[data-calorieapp-own-rank]');},
   unchanged(){assert.deepEqual(shape(controls),originalControls);assert.deepEqual(shape(header),originalHeader);assert.deepEqual(shape(address),originalAddress);assert.equal(html.lang,'en');assert.equal(html.dir,'ltr');}};
 }
 test('late tables/markers get one preserved scroll wrapper and jump without an observer loop',()=>{
diff --git a/tools/tests/wordpress_site_layout.test.mjs b/tools/tests/wordpress_site_layout.test.mjs
index ec19d3d..21cb951 100644
--- a/tools/tests/wordpress_site_layout.test.mjs
+++ b/tools/tests/wordpress_site_layout.test.mjs
@@ -47,12 +47,18 @@ function harness({ width = 360, height = 96, present = true, cardAfterMenu = fal
     body: {},
     querySelectorAll: selector => selector === "table.xl-richlist" ? [] : selector === ".brz .xl-card" ? (present ? [card] : []) : [navigation, navigation, footer].map(item => ({ closest: () => item })),
   };
-  const listeners = new Map(), raf = [], observed = [];
-  let resize, mutation, disconnected = false;
+  const listeners = new Map(), raf = [], observed = [], timers = new Map();
+  let resize, mutation, disconnected = false, clock = 0, timerSequence = 0;
   const window = {
     matchMedia: () => ({ get matches() { return state.width <= 768; } }),
     getComputedStyle: () => ({ marginTop: "20px" }),
-    addEventListener: (name, callback) => listeners.set(name, callback),
+    addEventListener(name, callback) {
+      if (!listeners.has(name)) listeners.set(name, new Set());
+      listeners.get(name).add(callback);
+    },
+    removeEventListener: (name, callback) => listeners.get(name)?.delete(callback),
+    setTimeout(callback, delay) { const id = ++timerSequence; timers.set(id, { callback, at: clock + delay }); return id; },
+    clearTimeout: id => timers.delete(id),
     requestAnimationFrame: callback => raf.push(callback),
     ResizeObserver: true,
     MutationObserver: true,
@@ -60,12 +66,21 @@ function harness({ width = 360, height = 96, present = true, cardAfterMenu = fal
   vm.runInNewContext(source, {
     window, document,
     ResizeObserver: class { constructor(callback) { resize = callback; } observe(element) { observed.push(element); } },
-    MutationObserver: class { constructor(callback) { mutation = callback; } observe() {} disconnect() { disconnected = true; } },
+    MutationObserver: class { constructor(callback) { mutation = callback; } observe() { disconnected = false; } disconnect() { disconnected = true; } },
     fetch() { throw new Error("The layout must not send requests"); },
   });
   function flush() { while (raf.length) raf.shift()(); }
-  function event(name) { listeners.get(name)?.(); flush(); }
-  return { state, card, wrapper, navigation, footer, observed, event, resize: () => { resize(); flush(); }, insertCard: () => { present = true; mutation(); flush(); }, disconnected: () => disconnected };
+  function event(name, detail = {}) { for (const callback of [...listeners.get(name) || []]) callback(detail); flush(); }
+  function advance(ms) {
+    clock += ms;
+    for (const [id, timer] of [...timers]) if (timer.at <= clock) { timers.delete(id); timer.callback(); }
+    flush();
+  }
+  return { state, card, wrapper, navigation, footer, observed, event, advance,
+    pendingTimers: () => timers.size,
+    resize: () => { resize(); flush(); },
+    insertCard: () => { present = true; if (!disconnected) mutation(); flush(); },
+    disconnected: () => disconnected };
 }
 
 test("card growth and shrinkage preserve clearance without accumulating margins", () => {
@@ -127,8 +142,28 @@ test("a late shortcode receives layout and disconnects its discovery observer",
   assert.equal(h.card.getBoundingClientRect().left, 66);
   assert.equal(h.navigation.getBoundingClientRect().top - h.card.getBoundingClientRect().bottom, 12);
   assert.equal(h.disconnected(), true);
+  assert.equal(h.pendingTimers(), 0);
   h.state.height = 96; h.resize();
   assert.equal(h.navigation.getBoundingClientRect().top - h.card.getBoundingClientRect().bottom, 12);
 });
 
+test("pages without a card stop discovery after a bounded wait", () => {
+  const h = harness({ present: false });
+  h.advance(9999); assert.equal(h.disconnected(), false);
+  h.advance(1); assert.equal(h.disconnected(), true);
+  assert.equal(h.pendingTimers(), 0);
+  h.insertCard(); assert.equal(h.observed.length, 0);
+});
+
+test("leaving cancels discovery and a back-forward restoration can find a late card once", () => {
+  const h = harness({ present: false });
+  h.event("pagehide"); assert.equal(h.disconnected(), true);
+  assert.equal(h.pendingTimers(), 0);
+  h.event("pageshow", { persisted: true }); assert.equal(h.disconnected(), false);
+  h.insertCard(); assert.equal(h.observed.length, 3);
+  h.event("pagehide"); h.event("pageshow", { persisted: true });
+  assert.equal(h.observed.length, 3);
+  assert.equal(h.pendingTimers(), 0);
+});
+
 // Richlist wrapping/data coverage is in wordpress_richlist.test.mjs.
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index 5e82f0e..8fc78e8 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,7 +41,17 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
-## Current review candidate: 0.3.41
+## Current review candidate: 0.3.42
+
+The performance follow-up bounds late header-card discovery to ten seconds,
+stops it when leaving the page, and allows one bounded retry after a
+back/forward-cache restoration. A discovered card retains its existing layout
+and resize handling. Public market responses now require HTTP revalidation;
+the five-minute WordPress transient remains the upstream cache, without an
+additional browser/CDN freshness window. The display is still a snapshot, not
+a live quote. These changes do not alter authentication or signing behavior.
+
+## Previous review candidate: 0.3.41
 
 This follow-up addresses the three Copilot comments on the combined website
 review: the standalone asset-cache version follows the plugin version, the
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
index 26c9259..3b14dff 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-site-layout.js
@@ -220,12 +220,34 @@
   function boot() {
     startRichlists();
     if (start() || !window.MutationObserver) return;
-    // Brizy can insert a shortcode after DOMContentLoaded. Initialize once
-    // when the card appears, then stop watching the rest of a long Richlist.
-    var waiting = new MutationObserver(function () {
-      if (start()) waiting.disconnect();
-    });
-    waiting.observe(document.body, { childList: true, subtree: true });
+    // Allow a late Brizy shortcode for at most ten seconds. Pages without a
+    // card must not scan every DOM mutation for the rest of the session.
+    var waiting = null, timer = null;
+    function stopWaiting() {
+      if (waiting) waiting.disconnect();
+      waiting = null;
+      if (timer !== null) window.clearTimeout(timer);
+      timer = null;
+    }
+    function discover() {
+      if (!start()) return false;
+      stopWaiting();
+      window.removeEventListener("pagehide", stopWaiting);
+      window.removeEventListener("pageshow", restoreWaiting);
+      return true;
+    }
+    function watch() {
+      if (waiting || discover()) return;
+      waiting = new MutationObserver(discover);
+      waiting.observe(document.body, { childList: true, subtree: true });
+      timer = window.setTimeout(stopWaiting, 10000);
+    }
+    function restoreWaiting(event) {
+      if (event.persisted) watch();
+    }
+    window.addEventListener("pagehide", stopWaiting);
+    window.addEventListener("pageshow", restoreWaiting);
+    watch();
   }
 
   if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", boot, { once: true });
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 9ca065c..20aa48e 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.41
+ * Version: 0.3.42
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.41');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.42');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index ad6495e..f82b739 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.41';
+            : '0.3.42';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
index 7fd4d4b..9938803 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
@@ -155,7 +155,9 @@ private function unavailable(): WP_Error {
 
     private function response(array $data): WP_REST_Response {
         $response = new WP_REST_Response(['success' => true, 'data' => $data], 200);
-        $response->header('Cache-Control', 'public, max-age=' . self::CACHE_TTL_SECONDS);
+        // Reuse the origin transient, but do not add another browser/CDN
+        // freshness window to an already cached market snapshot.
+        $response->header('Cache-Control', 'public, max-age=0, must-revalidate');
         return $response;
     }
 }

From 01661e2ec3d87af1e8916935611fdbf323b23521 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 10:59:24 +0200
Subject: [PATCH 11/12] Validate portable integer market counts and clarify
 locale iteration

---
 .../identity-bridge/v1/code-provenance.json   |  2 +-
 tools/tests/wordpress_page_ending.test.php    | 16 +++++++++++++-
 .../calorieapp-identity-bridge/README.md      | 10 ++++++++-
 .../calorieapp-identity-bridge.php            |  4 ++--
 ...ieapp-identity-bridge-display-language.php |  4 ++--
 ...ieapp-identity-bridge-integrated-login.php |  2 +-
 ...lorieapp-identity-bridge-market-widget.php | 21 ++++++++++++++++---
 7 files changed, 48 insertions(+), 11 deletions(-)

diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index 5f20d05..b988b40 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -4,7 +4,7 @@
   "review_date": "2026-09-04",
   "plugin_version_reviewed": "0.3.2",
   "inventory_updated_on": "2026-09-09",
-  "inventory_plugin_version": "0.3.42",
+  "inventory_plugin_version": "0.3.43",
   "inventory_update_is_source_clearance": false,
   "distribution_clearance_status": "blocked-pending-source-clearance",
   "release_expansion_allowed": false,
diff --git a/tools/tests/wordpress_page_ending.test.php b/tools/tests/wordpress_page_ending.test.php
index 5e116e6..c87d996 100644
--- a/tools/tests/wordpress_page_ending.test.php
+++ b/tools/tests/wordpress_page_ending.test.php
@@ -254,6 +254,20 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
 $bad = $payload;
 unset($bad['data']['priceUsd']);
 check(MarketWidget::sanitize_payload($bad) === null, 'Reject incomplete market data.');
+foreach (['holders', 'rank'] as $key) {
+    foreach ([-1, 3.14, '3.14', '2147483648', '1e30', true, [], null] as $value) {
+        $bad = $payload;
+        $bad['data'][$key] = $value;
+        check(MarketWidget::sanitize_payload($bad) === null, 'Reject fractional, overflowing or invalid count: ' . $key);
+    }
+    foreach ([0, '0', 300, '300', 2147483647, '2147483647'] as $value) {
+        $valid = $payload;
+        $valid['data'][$key] = $value;
+        $normalized = MarketWidget::sanitize_payload($valid);
+        check($normalized !== null && $normalized[$key] === (int) $value, 'Preserve zero and bounded integer counts: ' . $key);
+    }
+}
+$cache['calorieapp_xpmarket_widget_v1'] = ['value' => ['holders' => -1], 'ttl' => 300];
 $upstream = ['status' => 200, 'body' => json_encode($payload)];
 $response = $market->get_widget();
 check($response instanceof WP_REST_Response && $response->status === 200, 'Successful public data is returned.');
@@ -261,7 +275,7 @@ public function xummlogin_prepare_trustline(): void { throw new RuntimeException
 check($requests[0]['url'] === 'https://api.xpmarket.com/api/currency/widget?token=Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY', 'The shared token identifier preserves the exact CAL data endpoint.');
 check($requests[0]['options']['limit_response_size'] === 16384, 'Bound the upstream response size.');
 check($response->headers['Cache-Control'] === 'public, max-age=0, must-revalidate', 'Browser and shared caches must revalidate instead of adding another freshness window.');
-check($cache['calorieapp_xpmarket_widget_v1']['ttl'] === 300, 'Origin caching still limits upstream requests to once per five minutes.');
+check($cache['calorieapp_xpmarket_widget_v2']['ttl'] === 300, 'Origin caching still limits upstream requests to once per five minutes and skips the older validation cache.');
 $cached_response = $market->get_widget();
 check($cached_response->headers === $response->headers, 'Transient hits retain the same revalidation policy.');
 check(count($requests) === 1, 'Cached requests must not refetch XPMarket.');
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index 8fc78e8..e5d4970 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,7 +41,15 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
-## Current review candidate: 0.3.42
+## Current review candidate: 0.3.43
+
+Market holder/rank fields now accept only non-negative whole numbers within a
+portable 32-bit integer range before returning or caching them. The cache key
+changes so an older, less strictly validated payload is not reused. The
+language-option loop also has its own variable instead of reusing the resolved
+locale tag. Existing destinations, session behavior and release flags remain.
+
+## Previous review candidate: 0.3.42
 
 The performance follow-up bounds late header-card discovery to ten seconds,
 stops it when leaving the page, and allows one bounded retry after a
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 20aa48e..0e8ede3 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.42
+ * Version: 0.3.43
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.42');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.43');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
index d8cc9fc..5c627be 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-display-language.php
@@ -100,8 +100,8 @@ public function render(): void {
         <div class="calorieapp-display-language" data-calorieapp-display-language hidden>
             <label for="calorieapp-display-language-select" data-calorieapp-language-label><?php echo esc_html($label); ?></label>
             <select id="calorieapp-display-language-select" aria-describedby="calorieapp-display-language-note">
-                <?php foreach (LocaleRegistry::all()['locales'] as $locale) : ?>
-                    <option value="<?php echo esc_attr($locale['tag']); ?>" lang="<?php echo esc_attr($locale['tag']); ?>"><?php echo esc_html($locale['native_name']); ?></option>
+                <?php foreach (LocaleRegistry::all()['locales'] as $definition) : ?>
+                    <option value="<?php echo esc_attr($definition['tag']); ?>" lang="<?php echo esc_attr($definition['tag']); ?>"><?php echo esc_html($definition['native_name']); ?></option>
                 <?php endforeach; ?>
             </select>
             <p id="calorieapp-display-language-note" data-calorieapp-language-note></p>
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index f82b739..9c0ba13 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.42';
+            : '0.3.43';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
index 9938803..e28a2a0 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-market-widget.php
@@ -21,7 +21,7 @@ class MarketWidget {
     private const TOKEN = 'Calorie-rNqGa93B8ewQP9mUwpwqA19SApbf62U7PY';
     public const TOKEN_PAGE = 'https://xpmarket.com/token/' . self::TOKEN;
     private const API_URL = 'https://api.xpmarket.com/api/currency/widget?token=' . self::TOKEN;
-    private const CACHE_KEY = 'calorieapp_xpmarket_widget_v1';
+    private const CACHE_KEY = 'calorieapp_xpmarket_widget_v2';
     private const ERROR_CACHE_KEY = 'calorieapp_xpmarket_widget_error_v1';
     private const CACHE_TTL_SECONDS = 5 * MINUTE_IN_SECONDS;
 
@@ -129,6 +129,21 @@ public static function sanitize_payload($payload): ?array {
             }
         }
 
+        $counts = [];
+        foreach (['holders', 'rank'] as $key) {
+            // Use a portable integer range before casting, including on
+            // 32-bit PHP. Fractional or overflowing counts are invalid data.
+            if (is_float($source[$key]) && floor($source[$key]) !== $source[$key]) {
+                return null;
+            }
+            $counts[$key] = filter_var($source[$key], FILTER_VALIDATE_INT, [
+                'options' => ['min_range' => 0, 'max_range' => 2147483647],
+            ]);
+            if ($counts[$key] === false) {
+                return null;
+            }
+        }
+
         return [
             'source' => 'XPMarket',
             'token' => self::TOKEN,
@@ -140,8 +155,8 @@ public static function sanitize_payload($payload): ?array {
             'price_xrp' => (float) $source['price'],
             'price_usd' => (float) $source['priceUsd'],
             'market_cap_usd' => (float) $source['marketcap'],
-            'holders' => (int) $source['holders'],
-            'rank' => (int) $source['rank'],
+            'holders' => $counts['holders'],
+            'rank' => $counts['rank'],
         ];
     }
 

From 1a477596551e21d397f00a06797050d38696b961 Mon Sep 17 00:00:00 2001
From: xrpbanks <126300068+xrpbanks@users.noreply.github.com>
Date: Wed, 9 Sep 2026 11:09:31 +0200
Subject: [PATCH 12/12] Guard the shared language control and clean up its
 observer

---
 .../identity-bridge/v1/code-provenance.json   |  2 +-
 .../tests/wordpress_display_language.test.mjs | 44 ++++++++++++++++---
 .../calorieapp-identity-bridge/README.md      | 10 ++++-
 .../assets/calorieapp-display-language.js     | 38 +++++++++++-----
 .../calorieapp-identity-bridge.php            |  4 +-
 ...ieapp-identity-bridge-integrated-login.php |  2 +-
 6 files changed, 78 insertions(+), 22 deletions(-)

diff --git a/contracts/identity-bridge/v1/code-provenance.json b/contracts/identity-bridge/v1/code-provenance.json
index b988b40..f45c393 100644
--- a/contracts/identity-bridge/v1/code-provenance.json
+++ b/contracts/identity-bridge/v1/code-provenance.json
@@ -4,7 +4,7 @@
   "review_date": "2026-09-04",
   "plugin_version_reviewed": "0.3.2",
   "inventory_updated_on": "2026-09-09",
-  "inventory_plugin_version": "0.3.43",
+  "inventory_plugin_version": "0.3.44",
   "inventory_update_is_source_clearance": false,
   "distribution_clearance_status": "blocked-pending-source-clearance",
   "release_expansion_allowed": false,
diff --git a/tools/tests/wordpress_display_language.test.mjs b/tools/tests/wordpress_display_language.test.mjs
index df9e66a..f93ba7e 100644
--- a/tools/tests/wordpress_display_language.test.mjs
+++ b/tools/tests/wordpress_display_language.test.mjs
@@ -12,13 +12,14 @@ const script = readFileSync(new URL("assets/calorieapp-display-language.js", bas
 const locales = JSON.parse(readFileSync(new URL("config/locales.json", base))).locales;
 const copy = JSON.parse(readFileSync(new URL("config/display-language.json", base)));
 const information = JSON.parse(readFileSync(new URL("config/app-information.json", base)));
-function harness({ editor = false, panelPresent = true, protectedCard = false, cms = null, cmsConfig = cms ? catalogue : null, cmsAvailable = true, blog, richlist, navigation, trustline, tokenomics, buyGuide } = {}) {
+function harness({ editor = false, panelPresent = true, duplicatePanel = false, missingControl, duplicateControl, configure, protectedCard = false, cms = null, cmsConfig = cms ? catalogue : null, cmsAvailable = true, blog, richlist, navigation, trustline, tokenomics, buyGuide } = {}) {
   const listeners = new Map(), writes = [], fields = {};
-  const stores = [], connections = [];
+  const stores = [], connections = [], observers = [];
   for (const key of ["label", "note", "description", "action", "current"]) fields[key] = { textContent: "" };
   const select = { value: "en", addEventListener(type, fn) { listeners.set("select:" + type, fn); } };
   const panel = { hidden: true, dataset: {}, isConnected: true, parentElement: null,
     querySelector(query) { return query === "select" ? select : query.includes("-label") ? fields.label : fields.note; },
+    querySelectorAll(query) { const node = this.querySelector(query); return query === missingControl ? [] : query === duplicateControl ? [node, node] : [node]; },
     closest() { return this.parentElement === card ? card : null; },
   };
   const account = { sameLoginButton: {}, sessionLocale: "en", consent: { marketing: false } };
@@ -33,7 +34,10 @@ function harness({ editor = false, panelPresent = true, protectedCard = false, c
     if (query === ".brz-ed") return editor ? {} : null;
     if (query === "[data-calorieapp-app-info]") return info;
     return cms?.document.querySelector(query) || null;
-  }, querySelectorAll(query) { return query === ".brz .xl-card" ? [card] : cms?.document.querySelectorAll(query) || []; } };
+  }, querySelectorAll(query) {
+    if (query === "[data-calorieapp-display-language]") return panelPresent ? (duplicatePanel ? [panel, panel] : [panel]) : [];
+    return query === ".brz .xl-card" ? [card] : cms?.document.querySelectorAll(query) || [];
+  } };
   const window = {
     CalorieAppBlogX: blog,
     CalorieAppRichlist: richlist,
@@ -47,18 +51,46 @@ function harness({ editor = false, panelPresent = true, protectedCard = false, c
     CalorieAppCmsLanguagePreview: cmsAvailable ? { connect(options) {
       const api = cmsRuntime.connect(options); connections.push({ api, store: options.store }); return api;
     } } : undefined,
-    calorieappDisplayLanguageConfig: { locales, initialLocale: "en", copy, information, ...(cmsConfig ? { cmsPreview: cmsConfig } : {}) },
+    calorieappDisplayLanguageConfig: { locales: structuredClone(locales), initialLocale: "en", copy, information, ...(cmsConfig ? { cmsPreview: cmsConfig } : {}) },
     location: cms?.location,
     localStorage: { getItem() { return null; }, setItem(key, value) { writes.push({key,value}); }, removeItem() {} },
     addEventListener(type, fn) { listeners.set(type, fn); },
   };
-  const context = vm.createContext({ window, document });
+  configure?.(window.calorieappDisplayLanguageConfig);
+  const context = vm.createContext({ window, document, MutationObserver: class {
+    constructor(callback) { this.callback = callback; this.target = null; observers.push(this); }
+    observe(target) { this.target = target; }
+    disconnect() { this.target = null; }
+  } });
   const run = () => vm.runInContext(script, context);
   run();
-  return { window, panel, select, info, fields, account, card, writes, run, stores, connections,
+  return { window, panel, select, info, fields, account, card, writes, run, stores, connections, observers,
     fire(type, event = {}) { listeners.get(type)?.(event); },
     choose(locale) { select.value = locale; listeners.get("select:change")?.(); } };
 }
+test("missing or duplicate owned controls keep preview hidden without creating a store", () => {
+  const selectors = ["select", "[data-calorieapp-language-label]", "[data-calorieapp-language-note]"];
+  for (const options of [{ duplicatePanel: true }, ...selectors.flatMap(selector => [{ missingControl: selector }, { duplicateControl: selector }])]) {
+    const h = harness(options); assert.equal(h.panel.hidden, true); assert.equal(h.panel.dataset.ready, undefined);
+    assert.equal(h.stores.length, 0); assert.equal(h.observers.length, 0); h.choose("nl"); assert.equal(h.writes.length, 0);
+  }
+});
+test("malformed locale catalogues fail before initialization; valid direction is snapshotted", () => {
+  for (const configure of [c => c.locales = [], c => c.locales.push(null), c => c.locales.push(c.locales[0]), c => c.locales = c.locales.filter(x => x.tag !== "en"), c => c.locales[0].direction = "invalid"]) {
+    const h = harness({ configure }); assert.equal(h.panel.hidden, true); assert.equal(h.stores.length, 0);
+    h.window.calorieappDisplayLanguageConfig.locales = structuredClone(locales); h.run(); assert.equal(h.stores.length, 1);
+  }
+  const h = harness(); h.window.calorieappDisplayLanguageConfig.locales.length = 0; h.choose("ar");
+  assert.equal(h.panel.dir, "rtl"); assert.equal(h.info.dir, "rtl"); assert.equal(h.account.sessionLocale, "en");
+});
+test("panel observation disconnects on exit and resumes once after back-forward restoration", () => {
+  const h = harness(); assert.equal(h.observers.length, 1); assert.ok(h.observers[0].target);
+  const count = h.writes.length;
+  h.fire("pagehide", { persisted: true }); assert.equal(h.observers[0].target, null);
+  h.fire("pageshow", { persisted: true }); assert.ok(h.observers[0].target); assert.equal(h.observers.length, 1);
+  h.choose("ar"); assert.equal(h.info.dir, "rtl"); assert.equal(h.writes.length, count + 1);
+  h.fire("pagehide", { persisted: false }); assert.equal(h.observers[0].target, null);
+});
 test("website control changes only the translated information and preserves account references", () => {
   const h = harness(), account = h.account, login = account.sameLoginButton;
   assert.equal(h.panel.parentElement, h.card);
diff --git a/wordpress-plugins/calorieapp-identity-bridge/README.md b/wordpress-plugins/calorieapp-identity-bridge/README.md
index e5d4970..3d6e503 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/README.md
+++ b/wordpress-plugins/calorieapp-identity-bridge/README.md
@@ -41,7 +41,15 @@ The browser endpoint is intentionally not REST. XUMM Login establishes a normal
 
 Details are in SECURITY.md and CONFIGURATION.md.
 
-## Current review candidate: 0.3.43
+## Current review candidate: 0.3.44
+
+The optional shared language control validates its required, unique DOM nodes
+and locale definitions before creating a store. It snapshots supported text
+directions, disconnects panel observation on page exit and resumes the same
+observer on return. The existing display store/host protocol, CMS subscription
+and authentication/session controllers keep their established behavior.
+
+## Previous review candidate: 0.3.43
 
 Market holder/rank fields now accept only non-negative whole numbers within a
 portable 32-bit integer range before returning or caching them. The cache key
diff --git a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
index fa250d6..3bcc329 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
+++ b/wordpress-plugins/calorieapp-identity-bridge/assets/calorieapp-display-language.js
@@ -1,15 +1,25 @@
 (function () {
   "use strict";
   function boot() {
-    var panel = document.querySelector("[data-calorieapp-display-language]");
+    var panels = document.querySelectorAll("[data-calorieapp-display-language]");
+    var panel = panels.length === 1 ? panels[0] : null;
     var runtime = window.CalorieAppDisplayLanguage;
     var config = window.calorieappDisplayLanguageConfig;
-    if (!panel || !runtime || !config || panel.dataset.ready === "1" || document.querySelector(".brz-ed")) return;
+    if (!panel || !runtime || typeof runtime.createStore !== "function" || !config || panel.dataset.ready === "1" || document.querySelector(".brz-ed")) return;
     if (!Array.isArray(config.locales) || !config.copy || !config.copy.en || !config.information) return;
-    panel.dataset.ready = "1";
+    var definitions = Object.create(null);
+    if (!config.locales.every(function (item) {
+      if (!item || typeof item.tag !== "string" || !item.tag || definitions[item.tag]
+          || ["ltr", "rtl"].indexOf(item.direction) < 0) return false;
+      definitions[item.tag] = { tag: item.tag, direction: item.direction };
+      return true;
+    }) || !definitions.en) return;
+    var required = ["select", "[data-calorieapp-language-label]", "[data-calorieapp-language-note]"];
+    if (!required.every(function (selector) { return panel.querySelectorAll(selector).length === 1; })) return;
     var select = panel.querySelector("select");
     var label = panel.querySelector("[data-calorieapp-language-label]");
     var note = panel.querySelector("[data-calorieapp-language-note]");
+    panel.dataset.ready = "1";
     var store = runtime.createStore({
       locales: config.locales.map(function (item) { return item.tag; }),
       fallback: "en", initialLocale: config.initialLocale,
@@ -23,11 +33,12 @@
       if (node && typeof value === "string" && node.textContent !== value) node.textContent = value;
     }
     function render(state) {
-      var definition = config.locales.find(function (item) { return item.tag === state.locale; });
+      var definition = definitions[state.locale] || definitions.en;
+      var direction = definition.direction;
       var copy = config.copy[state.locale] || config.copy.en;
       select.value = state.locale;
       panel.lang = state.locale;
-      panel.dir = definition.direction;
+      panel.dir = direction;
       text(label, copy.label);
       text(note, copy.preview);
       // Only the owned, already translated information component participates.
@@ -37,7 +48,7 @@
       var infoCopy = config.information[state.locale];
       if (info && infoCopy) {
         info.lang = state.locale;
-        info.dir = definition.direction;
+        info.dir = direction;
         text(info.querySelector("div > p"), infoCopy.description);
         text(info.querySelector(".calorieapp-app-info-link"), infoCopy.action);
         text(info.querySelector(".calorieapp-app-info-current"), infoCopy.on_page);
@@ -79,7 +90,7 @@
       if (cms) cms.refresh();
     }
     window.addEventListener("load", refreshPage);
-    window.addEventListener("pageshow", refreshPage);
+    window.addEventListener("pageshow", function () { refreshPage(); observePanel(); });
     window.addEventListener("calorieapp:page-tools-ready", function () {
       if (typeof window.CalorieAppPageNavigation?.setLocale === "function") window.CalorieAppPageNavigation.setLocale(store.get().locale);
     });
@@ -92,15 +103,20 @@
     window.addEventListener("calorieapp:buy-guide-ready", function () {
       if (typeof window.CalorieAppBuyGuide?.setLocale === "function") window.CalorieAppBuyGuide.setLocale(store.get().locale);
     });
-    if (cms) window.addEventListener("pagehide", function (event) {
+    window.addEventListener("pagehide", function (event) {
+      if (observer) observer.disconnect();
       // Keep the same connection for bfcache; pageshow rechecks its source.
-      if (!event.persisted) cms.disconnect();
+      if (cms && !event.persisted) cms.disconnect();
     });
+    var observer = null;
+    function observePanel() {
+      if (observer) observer.observe(document.body, { childList: true, subtree: true });
+    }
     if (typeof MutationObserver === "function") {
-      var observer = new MutationObserver(function () {
+      observer = new MutationObserver(function () {
         if (!panel.isConnected || !panel.closest(".xl-card")) place();
       });
-      observer.observe(document.body, { childList: true, subtree: true });
+      observePanel();
     }
     if (typeof window.crypto?.randomUUID === "function") runtime.connectHost({
       window: window, store: store, epoch: window.crypto.randomUUID(),
diff --git a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
index 0e8ede3..8ef4231 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/calorieapp-identity-bridge.php
@@ -3,7 +3,7 @@
  * Plugin Name: CalorieApp Identity Bridge
  * Plugin URI: https://calorietoken.net
  * Description: Companion bridge plugin that maps authenticated WordPress/XUMM Login sessions to short-lived CalorieApp authorization codes.
- * Version: 0.3.43
+ * Version: 0.3.44
  * Author: CalorieApp
  * License: GPL-2.0-or-later
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -19,7 +19,7 @@
 }
 
 if (!defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')) {
-    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.43');
+    define('CALORIEAPP_IDENTITY_BRIDGE_VERSION', '0.3.44');
 }
 
 require_once plugin_dir_path(__FILE__) . 'includes/class-calorieapp-identity-bridge.php';
diff --git a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
index 9c0ba13..de6d02b 100644
--- a/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
+++ b/wordpress-plugins/calorieapp-identity-bridge/includes/class-calorieapp-identity-bridge-integrated-login.php
@@ -81,7 +81,7 @@ public function register_assets(): void {
         $base_url = plugin_dir_url(CALORIEAPP_IDENTITY_BRIDGE_FILE);
         $version = defined('CALORIEAPP_IDENTITY_BRIDGE_VERSION')
             ? CALORIEAPP_IDENTITY_BRIDGE_VERSION
-            : '0.3.43';
+            : '0.3.44';
 
         wp_register_style(
             'calorieapp-identity-bridge-embed',